@jeger-ai/opengantry 3.2.5 → 3.3.0

package/dist/cli/lib/msn-allocate.js

@@ -1,8 +1,6 @@
-import fs from "node:fs";
 import path from "node:path";
-import { extractMsnIdFromMissionPath } from "./missions/parser.js";
+import { extractMsnIdFromMissionPath, isValidMsnId, listMissionFiles } from "./missions/parser.js";
 import { gitLogSubjects } from "./git.js";
-import { isValidMsnId } from "./missions/parser.js";
 export const WORK_MSN_BAND_MAX = 8999;
 export const UPGRADE_MSN_BAND_MIN = 9000;
 export const UPGRADE_MSN_BAND_MAX = 9099;
@@ -39,30 +37,25 @@ function collectMsnIdsFromGitHistory(repoRoot, band) {
 export function collectUsedMsnIds(repoRoot, opts = {}) {
     const band = opts.band ?? "all";
     const used = new Set();
-    const missionsDir = path.join(repoRoot, ".gitagent", "missions");
-    if (fs.existsSync(missionsDir)) {
-        for (const ent of fs.readdirSync(missionsDir, { withFileTypes: true })) {
-            if (!ent.isFile())
-                continue;
-            const abs = path.join(missionsDir, ent.name);
-            const fromName = ent.name.match(/^(MSN-\d{4})/);
-            if (fromName && isValidMsnId(fromName[1])) {
-                const num = msnNumeric(fromName[1]);
+    for (const abs of listMissionFiles(repoRoot)) {
+        const name = path.basename(abs);
+        const fromName = name.match(/^(MSN-\d{4})/);
+        if (fromName && isValidMsnId(fromName[1])) {
+            const num = msnNumeric(fromName[1]);
+            if (bandFilter(num, band))
+                used.add(fromName[1]);
+        }
+        try {
+            const fromContent = extractMsnIdFromMissionPath(abs);
+            if (fromContent && isValidMsnId(fromContent)) {
+                const num = msnNumeric(fromContent);
                 if (bandFilter(num, band))
-                    used.add(fromName[1]);
-            }
-            try {
-                const fromContent = extractMsnIdFromMissionPath(abs);
-                if (fromContent && isValidMsnId(fromContent)) {
-                    const num = msnNumeric(fromContent);
-                    if (bandFilter(num, band))
-                        used.add(fromContent);
-                }
-            }
-            catch {
-                // ignore malformed mission files
+                    used.add(fromContent);
             }
         }
+        catch {
+            // ignore malformed mission files
+        }
     }
     if (opts.includeGitHistory !== false && (band === "work" || band === "all")) {
         for (const id of collectMsnIdsFromGitHistory(repoRoot, band))

package/dist/cli/lib/msn-allocate.js.map

@@ -1 +1 @@
-{"version":3,"file":"msn-allocate.js","sourceRoot":"","sources":["../../../src/cli/lib/msn-allocate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AASzC,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,IAAI,oBAAoB,IAAI,GAAG,IAAI,oBAAoB,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAqB;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAqB;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAiC,EAAE;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;gBACrD,IAAI,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;oBACpC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,EAAE,IAAI,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA0B;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM;KAC3C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2CAA2C,iBAAiB,4BAA4B,oBAAoB,GAAG,CAChH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oDAAoD,oBAAoB,IAAI,oBAAoB,EAAE,CACnG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"msn-allocate.js","sourceRoot":"","sources":["../../../src/cli/lib/msn-allocate.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AASzC,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,IAAI,oBAAoB,IAAI,GAAG,IAAI,oBAAoB,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAqB;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAqB;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAiC,EAAE;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;gBACpC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,EAAE,IAAI,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA0B;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM;KAC3C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2CAA2C,iBAAiB,4BAA4B,oBAAoB,GAAG,CAChH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oDAAoD,oBAAoB,IAAI,oBAAoB,EAAE,CACnG,CAAC;AACJ,CAAC"}

package/dist/cli/lib/planner-signature.d.ts

@@ -8,4 +8,11 @@ export interface PlannerStampSignatureCheck {
     status: GitSignatureStatus;
 }
 export declare function checkPlannerStampSignature(repoRoot: string, commitHash: string): PlannerStampSignatureCheck;
+export interface AllowedSignersConfig {
+    present: boolean;
+    configured: boolean;
+    path: string | null;
+}
+/** Point git at PLANNER.signing.pub when present so SSH commit signatures verify. */
+export declare function ensurePlannerAllowedSignersFile(repoRoot: string): AllowedSignersConfig;
 //# sourceMappingURL=planner-signature.d.ts.map

package/dist/cli/lib/planner-signature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"planner-signature.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;AAExF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAKhG;AAED,6CAA6C;AAC7C,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,0BAA0B,CAG5B"}
+{"version":3,"file":"planner-signature.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAKA,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;AAExF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAKhG;AAED,6CAA6C;AAC7C,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,0BAA0B,CAG5B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,qFAAqF;AACrF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CAYtF"}

package/dist/cli/lib/planner-signature.js

@@ -1,4 +1,7 @@
-import { gitRunOk } from "./git.js";
+import fs from "node:fs";
+import path from "node:path";
+import { GIT_CONFIG_ALLOWED_SIGNERS, REL_PLANNER_SIGNING_PUB } from "./constants.js";
+import { gitConfigGet, gitConfigSet, gitRunOk } from "./git.js";
 export function gitCommitSignatureStatus(repoRoot, commitRef) {
     const result = gitRunOk(repoRoot, ["log", "-1", `--format=%G?`, commitRef]);
     if (!result.ok)
@@ -14,4 +17,18 @@ export function checkPlannerStampSignature(repoRoot, commitHash) {
     const status = gitCommitSignatureStatus(repoRoot, commitHash);
     return { ok: isGoodGitSignatureStatus(status), status };
 }
+/** Point git at PLANNER.signing.pub when present so SSH commit signatures verify. */
+export function ensurePlannerAllowedSignersFile(repoRoot) {
+    const abs = path.join(repoRoot, REL_PLANNER_SIGNING_PUB);
+    if (!fs.existsSync(abs) || !fs.statSync(abs).isFile()) {
+        return { present: false, configured: false, path: null };
+    }
+    const ok = gitConfigSet(repoRoot, GIT_CONFIG_ALLOWED_SIGNERS, REL_PLANNER_SIGNING_PUB);
+    const current = gitConfigGet(repoRoot, GIT_CONFIG_ALLOWED_SIGNERS);
+    return {
+        present: true,
+        configured: ok && current === REL_PLANNER_SIGNING_PUB,
+        path: REL_PLANNER_SIGNING_PUB,
+    };
+}
 //# sourceMappingURL=planner-signature.js.map

package/dist/cli/lib/planner-signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"planner-signature.js","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKpC,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,SAAiB;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAOD,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,UAAkB;IAElB,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,OAAO,EAAE,EAAE,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"planner-signature.js","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKhE,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,SAAiB;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAOD,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,UAAkB;IAElB,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,OAAO,EAAE,EAAE,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAQD,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAAC,QAAgB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,0BAA0B,EAAE,uBAAuB,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,EAAE,IAAI,OAAO,KAAK,uBAAuB;QACrD,IAAI,EAAE,uBAAuB;KAC9B,CAAC;AACJ,CAAC"}

package/dist/cli/lib/policy/policy-bundle.d.ts

@@ -0,0 +1,6 @@
+import type { OrgPolicyBundle, PolicyPointer } from "./policy-types.js";
+export declare function policyCacheDir(root: string, commit: string): string;
+export declare function cachedBundlePath(root: string, pointer: PolicyPointer): string;
+export declare function parseOrgPolicyBundle(root: string, raw: string): OrgPolicyBundle;
+export declare function loadCachedBundle(root: string, pointer: PolicyPointer): OrgPolicyBundle;
+//# sourceMappingURL=policy-bundle.d.ts.map

package/dist/cli/lib/policy/policy-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-bundle.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-bundle.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAyBxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAE7E;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAqB/E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,eAAe,CA4BtF"}

package/dist/cli/lib/policy/policy-bundle.js

@@ -0,0 +1,62 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { createSchemaValidator } from "../ajv-loader.js";
+import { REL_POLICY_CACHE } from "../constants.js";
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { sha256File } from "../working-digests.js";
+let compiledValidator = null;
+let compiledForRoot = null;
+function loadOrgPolicySchemaValidator(root) {
+    if (compiledValidator && compiledForRoot === root) {
+        return compiledValidator;
+    }
+    const schemaPath = path.join(root, ".gitagent/planner/ORG-POLICY.schema.yaml");
+    if (!fs.existsSync(schemaPath)) {
+        throw new GantryUserError(GXT_ERROR.PARSE_ERROR, "ORG-POLICY.schema.yaml not found", "run gantry init or restore .gitagent/planner/ORG-POLICY.schema.yaml", 2);
+    }
+    const schemaDoc = YAML.parse(fs.readFileSync(schemaPath, "utf8"));
+    const validate = createSchemaValidator(schemaDoc);
+    compiledValidator = validate;
+    compiledForRoot = root;
+    return validate;
+}
+export function policyCacheDir(root, commit) {
+    return path.join(root, REL_POLICY_CACHE, commit.trim());
+}
+export function cachedBundlePath(root, pointer) {
+    return path.join(policyCacheDir(root, pointer.pinned_commit), pointer.bundle_path);
+}
+export function parseOrgPolicyBundle(root, raw) {
+    const data = YAML.parse(raw);
+    const validate = loadOrgPolicySchemaValidator(root);
+    if (!validate(data)) {
+        const err = validate.errors?.[0];
+        const msg = err ? `${err.instancePath} ${err.message}` : "invalid org policy bundle";
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `org policy bundle: ${msg}`, undefined, 1);
+    }
+    const bundle = data;
+    const producers = bundle.producers ?? {};
+    for (const t of bundle.kpi_thresholds ?? []) {
+        if (!(t.metric in producers)) {
+            throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `kpi_thresholds metric "${t.metric}" is not declared in producers`, "add producers.<metric> or remove the threshold", 1);
+        }
+    }
+    return bundle;
+}
+export function loadCachedBundle(root, pointer) {
+    if (!pointer.pinned_commit.trim() || !pointer.bundle_sha256.trim()) {
+        throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, "POLICY.pointer.json is present but unpinned (empty pinned_commit or bundle_sha256)", "gantry policy pull", 1);
+    }
+    const abs = cachedBundlePath(root, pointer);
+    if (!fs.existsSync(abs)) {
+        throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, `policy cache missing: ${path.relative(root, abs)}`, "gantry policy pull", 1);
+    }
+    const actual = sha256File(abs);
+    if (actual !== pointer.bundle_sha256) {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `policy bundle sha drift (pointer ${pointer.bundle_sha256}, cache ${actual})`, "gantry policy pull", 1);
+    }
+    return parseOrgPolicyBundle(root, fs.readFileSync(abs, "utf8"));
+}
+//# sourceMappingURL=policy-bundle.js.map

package/dist/cli/lib/policy/policy-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-bundle.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,IAAI,iBAAiB,GAA4B,IAAI,CAAC;AACtD,IAAI,eAAe,GAAkB,IAAI,CAAC;AAE1C,SAAS,4BAA4B,CAAC,IAAY;IAChD,IAAI,iBAAiB,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,WAAW,EACrB,kCAAkC,EAClC,qEAAqE,EACrE,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC7F,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAClD,iBAAiB,GAAG,QAAQ,CAAC;IAC7B,eAAe,GAAG,IAAI,CAAC;IACvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACzD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAsB;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,GAAW;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACrF,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,YAAY,EAAE,sBAAsB,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,IAAuB,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,0BAA0B,CAAC,CAAC,MAAM,gCAAgC,EAClE,gDAAgD,EAChD,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAsB;IACnE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,eAAe,EACzB,oFAAoF,EACpF,oBAAoB,EACpB,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,eAAe,EACzB,yBAAyB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EACnD,oBAAoB,EACpB,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,oCAAoC,OAAO,CAAC,aAAa,WAAW,MAAM,GAAG,EAC7E,oBAAoB,EACpB,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/cli/lib/policy/policy-doctor.d.ts

@@ -0,0 +1,4 @@
+import type { DoctorLine } from "../doctor-types.js";
+/** Offline doctor section. MUST NOT clone or fetch. */
+export declare function runOrgPolicyDoctorChecks(root: string): DoctorLine[];
+//# sourceMappingURL=policy-doctor.d.ts.map

package/dist/cli/lib/policy/policy-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-doctor.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-doctor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIrD,uDAAuD;AACvD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CA4BnE"}

package/dist/cli/lib/policy/policy-doctor.js

@@ -0,0 +1,34 @@
+import { REL_POLICY_POINTER } from "../constants.js";
+import { compareExpectedDigests } from "../policy-digest-doctor.js";
+import { loadPolicyPointer, resolveOrgPolicy } from "./policy-resolve.js";
+/** Offline doctor section. MUST NOT clone or fetch. */
+export function runOrgPolicyDoctorChecks(root) {
+    const state = loadPolicyPointer(root);
+    switch (state.kind) {
+        case "absent":
+            return [{ level: "ok", message: `${REL_POLICY_POINTER}: absent (opt-in)` }];
+        case "scaffold":
+            return [{ level: "ok", message: `${REL_POLICY_POINTER}: scaffold (unpinned)` }];
+        case "pinned": {
+            const resolved = resolveOrgPolicy(root);
+            if (!resolved.ok) {
+                return [{ level: "fail", message: resolved.message }];
+            }
+            const lines = [
+                {
+                    level: "ok",
+                    message: `org policy ${resolved.bundle?.policy_id ?? "?"}@${resolved.bundle?.version ?? "?"} cache matches pointer`,
+                },
+            ];
+            if (resolved.bundle?.expected_digests) {
+                lines.push(...compareExpectedDigests(root, resolved.bundle.expected_digests));
+            }
+            return lines;
+        }
+        default: {
+            const _never = state;
+            return _never;
+        }
+    }
+}
+//# sourceMappingURL=policy-doctor.js.map

package/dist/cli/lib/policy/policy-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-doctor.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE1E,uDAAuD;AACvD,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,mBAAmB,EAAE,CAAC,CAAC;QAC9E,KAAK,UAAU;YACb,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,uBAAuB,EAAE,CAAC,CAAC;QAClF,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,GAAiB;gBAC1B;oBACE,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,cAAc,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,IAAI,GAAG,wBAAwB;iBACpH;aACF,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAU,KAAK,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/lib/policy/policy-fetch.d.ts

@@ -0,0 +1,10 @@
+import type { PolicyPointer } from "./policy-types.js";
+export interface PolicyPullResult {
+    pointer: PolicyPointer;
+    cache_path: string;
+    bundle_sha256: string;
+    pinned_commit: string;
+}
+/** Explicit network path (ADR-0026 / ADR-0042). Doctor and verify MUST NOT call this. */
+export declare function pullOrgPolicy(root: string, workRoot?: string): PolicyPullResult;
+//# sourceMappingURL=policy-fetch.d.ts.map

package/dist/cli/lib/policy/policy-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetch.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-fetch.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAsBD,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAuE/E"}

package/dist/cli/lib/policy/policy-fetch.js

@@ -0,0 +1,78 @@
+import fs from "node:fs";
+import path from "node:path";
+import { gitRun } from "../git.js";
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { REL_POLICY_POINTER } from "../constants.js";
+import { sha256File } from "../working-digests.js";
+import { loadPolicyPointer, policyPointerPath } from "./policy-resolve.js";
+import { cachedBundlePath, parseOrgPolicyBundle } from "./policy-bundle.js";
+function verifySignedCommit(cloneRoot, commit, principals) {
+    if (principals.length === 0)
+        return;
+    const v = gitRun(cloneRoot, ["verify-commit", commit]);
+    if (!v.ok) {
+        throw new GantryUserError(GXT_ERROR.POLICY_SIGNATURE_INVALID, `policy commit ${commit} failed git verify-commit`, "sign the policy commit with a key listed in signers[]", 1);
+    }
+}
+function writeCachedBundle(root, pointer, commit, body) {
+    const dest = cachedBundlePath(root, { ...pointer, pinned_commit: commit });
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.writeFileSync(dest, body);
+    return dest;
+}
+/** Explicit network path (ADR-0026 / ADR-0042). Doctor and verify MUST NOT call this. */
+export function pullOrgPolicy(root, workRoot) {
+    const state = loadPolicyPointer(root);
+    if (state.kind === "absent") {
+        throw new GantryUserError(GXT_ERROR.INVALID_ARGUMENT, `${REL_POLICY_POINTER} is missing`, "add a POLICY.pointer.json pin", 2);
+    }
+    const pointer = state.pointer;
+    if (!pointer.source.url.trim()) {
+        throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, "POLICY.pointer.json source.url is empty", undefined, 1);
+    }
+    const scratchParent = workRoot ?? path.join(root, ".gitagent", "tmp");
+    fs.mkdirSync(scratchParent, { recursive: true });
+    const scratch = fs.mkdtempSync(path.join(scratchParent, "policy-pull-"));
+    try {
+        const init = gitRun(scratch, ["init"]);
+        if (!init.ok) {
+            throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, `gantry policy pull: git init failed: ${init.stderr}`, undefined, 1);
+        }
+        const spec = pointer.pinned_commit.trim() || pointer.source.ref;
+        const fetched = gitRun(scratch, ["fetch", "--depth", "1", pointer.source.url, spec]);
+        if (!fetched.ok) {
+            throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, `gantry policy pull: git fetch failed: ${fetched.stderr}`, undefined, 1);
+        }
+        const head = gitRun(scratch, ["rev-parse", "FETCH_HEAD"]);
+        if (!head.ok || !head.stdout.trim()) {
+            throw new GantryUserError(GXT_ERROR.POLICY_UNPINNED, "policy pull: cannot resolve FETCH_HEAD", undefined, 1);
+        }
+        const commit = pointer.pinned_commit.trim() || head.stdout.trim();
+        const shown = gitRun(scratch, ["show", `FETCH_HEAD:${pointer.bundle_path}`]);
+        if (!shown.ok) {
+            throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `bundle_path ${pointer.bundle_path} missing in policy repo`, undefined, 1);
+        }
+        const bundle = parseOrgPolicyBundle(root, shown.stdout);
+        const principals = (bundle.signers ?? []).map((s) => s.principal);
+        verifySignedCommit(scratch, commit, principals);
+        const dest = writeCachedBundle(root, pointer, commit, shown.stdout);
+        const sha = sha256File(dest);
+        const next = {
+            ...pointer,
+            pinned_commit: commit,
+            bundle_sha256: sha,
+        };
+        fs.writeFileSync(policyPointerPath(root), `${JSON.stringify(next, null, 2)}\n`, "utf8");
+        return {
+            pointer: next,
+            cache_path: dest,
+            bundle_sha256: sha,
+            pinned_commit: commit,
+        };
+    }
+    finally {
+        fs.rmSync(scratch, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=policy-fetch.js.map

package/dist/cli/lib/policy/policy-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetch.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAU5E,SAAS,kBAAkB,CAAC,SAAiB,EAAE,MAAc,EAAE,UAAoB;IACjF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,wBAAwB,EAClC,iBAAiB,MAAM,2BAA2B,EAClD,uDAAuD,EACvD,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAsB,EAAE,MAAc,EAAE,IAAY;IAC3F,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAiB;IAC3D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,gBAAgB,EAC1B,GAAG,kBAAkB,aAAa,EAClC,+BAA+B,EAC/B,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,eAAe,EAAE,yCAAyC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACtE,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,eAAe,EACzB,wCAAwC,IAAI,CAAC,MAAM,EAAE,EACrD,SAAS,EACT,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,eAAe,EACzB,yCAAyC,OAAO,CAAC,MAAM,EAAE,EACzD,SAAS,EACT,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,eAAe,EAAE,wCAAwC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,eAAe,OAAO,CAAC,WAAW,yBAAyB,EAC3D,SAAS,EACT,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAkB;YAC1B,GAAG,OAAO;YACV,aAAa,EAAE,MAAM;YACrB,aAAa,EAAE,GAAG;SACnB,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,GAAG;YAClB,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/cli/lib/policy/policy-resolve.d.ts

@@ -0,0 +1,38 @@
+import { type GxtErrorCode } from "../gxt-error-codes.js";
+import type { TrustThreshold } from "../types.js";
+import { type PolicyConfigFloor, type PolicyPointer, type PolicyPointerState } from "./policy-types.js";
+import type { OrgPolicyBundle } from "./policy-types.js";
+export declare const TIER_RANK: Record<"Tier-1" | "Tier-2" | "Tier-3", number>;
+export declare function trustTierRank(tier: TrustThreshold): number;
+export interface FloorRule {
+    readonly label: string;
+    violation(floor: PolicyConfigFloor, local: PolicyConfigFloor): string | undefined;
+}
+/** Tighten-only checks: org floor vs local config. Only `config_floor` is enforced in 3.3.0. */
+export declare const FLOOR_RULES: readonly FloorRule[];
+export declare function configFloorViolations(floor: PolicyConfigFloor, local: PolicyConfigFloor): string[];
+export declare function policyPointerPath(root: string): string;
+export declare function loadPolicyPointer(root: string): PolicyPointerState;
+export declare function localConfigFloor(root: string): PolicyConfigFloor;
+export type OrgPolicyOk = {
+    ok: true;
+    present: boolean;
+    pointer: PolicyPointer | null;
+    bundle: OrgPolicyBundle | null;
+};
+export type OrgPolicyFail = {
+    ok: false;
+    code: GxtErrorCode;
+    message: string;
+};
+export type OrgPolicyResolveResult = OrgPolicyOk | OrgPolicyFail;
+export type OrgPolicySnapshot = {
+    present: boolean;
+    pointer: PolicyPointer | null;
+    bundle: OrgPolicyBundle | null;
+};
+export declare function orgPolicySnapshot(resolved: OrgPolicyOk): OrgPolicySnapshot;
+/** Offline: pointer + cache only. Never fetches. */
+export declare function resolveOrgPolicy(root: string): OrgPolicyResolveResult;
+export declare function resolveOrgPolicyOrThrow(root: string): OrgPolicyOk;
+//# sourceMappingURL=policy-resolve.d.ts.map

package/dist/cli/lib/policy/policy-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolve.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-resolve.ts"],"names":[],"mappings":"AAaA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAIpE,CAAC;AAEF,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAG1D;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAAC;CACnF;AAiCD,gGAAgG;AAChG,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAwC3C,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAOlG;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAMD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAoDlE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAUhE;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,aAAa,CAAC;AAEjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,iBAAiB,CAE1E;AAaD,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAoBrE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAMjE"}

package/dist/cli/lib/policy/policy-resolve.js

@@ -0,0 +1,194 @@
+import fs from "node:fs";
+import path from "node:path";
+import { REL_POLICY_POINTER } from "../constants.js";
+import { GantryUserError, isGantryUserError } from "../errors.js";
+import { loadGxtConfig, resolveFlightTelemetryBodyMode, resolveLedgerMode, resolveLedgerSignatureTier, resolvePlannerSignatureTier, resolveReceiptSignatureTier, } from "../gxt-config.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { loadCachedBundle } from "./policy-bundle.js";
+import { POLICY_POINTER_SCHEMA_VERSION, } from "./policy-types.js";
+const SIGNATURE_RANK = { off: 0, warn: 1, require: 2 };
+const LEDGER_MODE_RANK = { off: 0, local: 1 };
+const BODY_MODE_RANK = { full: 0, hash_only: 1 };
+export const TIER_RANK = {
+    "Tier-1": 1,
+    "Tier-2": 2,
+    "Tier-3": 3,
+};
+export function trustTierRank(tier) {
+    if (tier === "Tier-1" || tier === "Tier-2" || tier === "Tier-3")
+        return TIER_RANK[tier];
+    return 0;
+}
+function rankRule(input) {
+    return {
+        label: input.label,
+        violation(floor, local) {
+            const need = input.pick(floor);
+            if (need === undefined && input.skipIfUnset === true)
+                return undefined;
+            const needVal = need ?? input.fallback;
+            const have = input.pick(local) ?? input.fallback;
+            if (input.rank[needVal] > input.rank[have])
+                return input.message(needVal, have);
+            return undefined;
+        },
+    };
+}
+function flagRule(label, pick) {
+    return {
+        label,
+        violation(floor, local) {
+            if (pick(floor) && !pick(local))
+                return `${label} floor is true`;
+            return undefined;
+        },
+    };
+}
+/** Tighten-only checks: org floor vs local config. Only `config_floor` is enforced in 3.3.0. */
+export const FLOOR_RULES = [
+    rankRule({
+        label: "planner_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.planner_signature,
+        message: (need, have) => `planner_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "receipt_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.receipt_signature,
+        message: (need, have) => `receipt_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "ledger_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.ledger_signature,
+        message: (need, have) => `ledger_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "ledger.mode",
+        rank: LEDGER_MODE_RANK,
+        fallback: "off",
+        pick: (c) => c.ledger_mode,
+        message: (need, have) => `ledger.mode floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "flight_telemetry.body_mode",
+        rank: BODY_MODE_RANK,
+        fallback: "full",
+        pick: (c) => c.flight_telemetry?.body_mode,
+        message: (need) => `flight_telemetry.body_mode floor ${need} > local`,
+    }),
+    flagRule("break_glass.require_ledger_entry", (c) => c.break_glass?.require_ledger_entry),
+];
+export function configFloorViolations(floor, local) {
+    const out = [];
+    for (const rule of FLOOR_RULES) {
+        const msg = rule.violation(floor, local);
+        if (msg)
+            out.push(msg);
+    }
+    return out;
+}
+export function policyPointerPath(root) {
+    return path.join(root, REL_POLICY_POINTER);
+}
+function isPinnedPointer(pointer) {
+    return pointer.source.url.trim().length > 0 && /^[0-9a-f]{40,64}$/i.test(pointer.pinned_commit.trim());
+}
+export function loadPolicyPointer(root) {
+    const abs = policyPointerPath(root);
+    if (!fs.existsSync(abs))
+        return { kind: "absent" };
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(abs, "utf8"));
+    }
+    catch {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} is not valid JSON`, "fix POLICY.pointer.json or remove it", 1);
+    }
+    if (typeof parsed !== "object" || parsed === null) {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} must be an object`, undefined, 1);
+    }
+    const rec = parsed;
+    const source = rec.source;
+    if (rec.schema_version !== POLICY_POINTER_SCHEMA_VERSION) {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} schema_version must be ${POLICY_POINTER_SCHEMA_VERSION}`, undefined, 1);
+    }
+    if (!source || source.kind !== "git" || typeof source.url !== "string" || typeof source.ref !== "string") {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} source must be {kind:git,url,ref}`, undefined, 1);
+    }
+    if (typeof rec.bundle_path !== "string" || typeof rec.pinned_commit !== "string" || typeof rec.bundle_sha256 !== "string") {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} missing bundle_path, pinned_commit, or bundle_sha256`, undefined, 1);
+    }
+    const pointer = {
+        schema_version: POLICY_POINTER_SCHEMA_VERSION,
+        source: { kind: "git", url: source.url, ref: source.ref },
+        bundle_path: rec.bundle_path,
+        pinned_commit: rec.pinned_commit,
+        bundle_sha256: rec.bundle_sha256,
+    };
+    if (isPinnedPointer(pointer))
+        return { kind: "pinned", pointer };
+    return { kind: "scaffold", pointer };
+}
+export function localConfigFloor(root) {
+    const config = loadGxtConfig(root);
+    return {
+        planner_signature: resolvePlannerSignatureTier(config),
+        receipt_signature: resolveReceiptSignatureTier(config),
+        ledger_signature: resolveLedgerSignatureTier(config),
+        ledger_mode: resolveLedgerMode(config),
+        flight_telemetry: { body_mode: resolveFlightTelemetryBodyMode(config) },
+        break_glass: { require_ledger_entry: resolveLedgerMode(config) === "local" },
+    };
+}
+export function orgPolicySnapshot(resolved) {
+    return { present: resolved.present, pointer: resolved.pointer, bundle: resolved.bundle };
+}
+function failFromUnknown(e) {
+    if (isGantryUserError(e)) {
+        return { ok: false, code: e.gxtCode, message: e.message };
+    }
+    return {
+        ok: false,
+        code: GXT_ERROR.POLICY_DRIFT,
+        message: e instanceof Error ? e.message : String(e),
+    };
+}
+/** Offline: pointer + cache only. Never fetches. */
+export function resolveOrgPolicy(root) {
+    const state = loadPolicyPointer(root);
+    switch (state.kind) {
+        case "absent":
+            return { ok: true, present: false, pointer: null, bundle: null };
+        case "scaffold":
+            return { ok: true, present: false, pointer: state.pointer, bundle: null };
+        case "pinned": {
+            try {
+                const bundle = loadCachedBundle(root, state.pointer);
+                return { ok: true, present: true, pointer: state.pointer, bundle };
+            }
+            catch (e) {
+                return failFromUnknown(e);
+            }
+        }
+        default: {
+            const _never = state;
+            return _never;
+        }
+    }
+}
+export function resolveOrgPolicyOrThrow(root) {
+    const resolved = resolveOrgPolicy(root);
+    if (!resolved.ok) {
+        throw new GantryUserError(resolved.code, resolved.message, undefined, 1);
+    }
+    return resolved;
+}
+//# sourceMappingURL=policy-resolve.js.map

package/dist/cli/lib/policy/policy-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolve.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAqB,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,6BAA6B,GAI9B,MAAM,mBAAmB,CAAC;AAG3B,MAAM,cAAc,GAAyC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC7F,MAAM,gBAAgB,GAA+B,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC1E,MAAM,cAAc,GAA4C,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAE1F,MAAM,CAAC,MAAM,SAAS,GAAmD;IACvE,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,SAAS,QAAQ,CAAmB,KAOnC;IACC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,CAAC,KAAK,EAAE,KAAK;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACvE,MAAM,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAmD;IAClF,OAAO;QACL,KAAK;QACL,SAAS,CAAC,KAAK,EAAE,KAAK;YACpB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,KAAK,gBAAgB,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,QAAQ,CAAC;QACP,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,2BAA2B,IAAI,YAAY,IAAI,EAAE;KAC3E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,2BAA2B,IAAI,YAAY,IAAI,EAAE;KAC3E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB;QAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,0BAA0B,IAAI,YAAY,IAAI,EAAE;KAC1E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,IAAI,YAAY,IAAI,EAAE;KACrE,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,SAAS;QAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,IAAI,UAAU;KACtE,CAAC;IACF,QAAQ,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,oBAAoB,CAAC;CACzF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAwB,EAAE,KAAwB;IACtF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,oBAAoB,EACzC,sCAAsC,EACtC,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,kBAAkB,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,IAAI,GAAG,CAAC,cAAc,KAAK,6BAA6B,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,2BAA2B,6BAA6B,EAAE,EAC/E,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzG,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,oCAAoC,EACzD,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC1H,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,uDAAuD,EAC5E,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAkB;QAC7B,cAAc,EAAE,6BAA6B;QAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QACzD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,IAAI,eAAe,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,iBAAiB,EAAE,2BAA2B,CAAC,MAAM,CAAC;QACtD,iBAAiB,EAAE,2BAA2B,CAAC,MAAM,CAAC;QACtD,gBAAgB,EAAE,0BAA0B,CAAC,MAAM,CAAC;QACpD,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,gBAAgB,EAAE,EAAE,SAAS,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE;QACvE,WAAW,EAAE,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE;KAC7E,CAAC;AACJ,CAAC;AAuBD,MAAM,UAAU,iBAAiB,CAAC,QAAqB;IACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,OAAuB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,SAAS,CAAC,YAAY;QAC5B,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACnE,KAAK,UAAU;YACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5E,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAU,KAAK,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}