@jeger-ai/opengantry 3.2.5 → 3.3.0

package/dist/cli/lib/constants.js

@@ -15,10 +15,25 @@ export const REL_MISSION_TEMPLATE = ".gitagent/planner/MISSION.template.md";
 export const REL_HISTORY_DIR = ".gitagent/history";
 /** Git-ignored attestation receipts for optional hub ingestion. */
 export const REL_RECEIPTS_DIR = ".gitagent/history/receipts";
+/** Planner SSH allowed signers for `git log --format=%G?` / perimeter --ci. */
+export const REL_PLANNER_SIGNING_PUB = ".gitagent/foreman/PLANNER.signing.pub";
+/** git config key set by doctor and `gantry perimeter --ci`. */
+export const GIT_CONFIG_ALLOWED_SIGNERS = "gpg.ssh.allowedSignersFile";
+/** Tracked pin of an org policy git source (ADR-0042). */
+export const REL_POLICY_POINTER = ".gitagent/foreman/POLICY.pointer.json";
+/** Git-ignored org policy bundle cache (ADR-0042). */
+export const REL_POLICY_CACHE = ".gitagent/history/policy";
+/** Orphan commit chain for digest-only compliance entries (ADR-0043). */
+export const LEDGER_REF = "refs/gxt/ledger";
+/** Fetched foreign ledger refs (ADR-0044). */
+export const LEDGER_DEPS_REF_PREFIX = "refs/gxt/deps/";
+export const LEDGER_GENESIS_HASH = "0".repeat(64);
 /** Git-ignored machine-readable runtime error (see templates/.gitignore.gxt). */
 export const REL_AGENT_ERROR_FILE = ".gitagent/history/.ignored-last-error.json";
 /** Git-ignored verify failure remediation feed for IDE/agent loops (atomic swap writes). */
 export const REL_NEXT_REMEDIATION = ".gitagent/tmp/NEXT_REMEDIATION.json";
+/** Default localhost port for `gantry report` (walks +1..+10 on EADDRINUSE when unset). */
+export const DEFAULT_REPORT_PORT = 3134;
 /** Ephemeral runtime snapshot scratch (gitignored; see docs/ADR-EPHEMERAL-VIRTUALIZATION.md). */
 export const REL_VIRTUAL_SCRATCH = ".gitagent/virtual/";
 /** ADR markdown (optional `match_terms` in frontmatter) — Foreman may emit non-binding hints only. */

package/dist/cli/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,MAAM,CAAC,MAAM,gCAAgC,GAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAAwC,CAAC;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0CAAmD,CAAC;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,uCAAgD,CAAC;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAAqC,CAAC;AACtE,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAA8C,CAAC;AACnF,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAiC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,QAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,MAAM,CAAC,MAAM,gCAAgC,GAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAAwC,CAAC;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0CAAmD,CAAC;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,uCAAgD,CAAC;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAAqC,CAAC;AACtE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,uCAAgD,CAAC;AACxF,gEAAgE;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAAqC,CAAC;AAChF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAAmC,CAAC;AACpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,iBAA0B,CAAC;AACrD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAyB,CAAC;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAClD,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAA8C,CAAC;AACnF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAiC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,QAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/cli/lib/context-feed-remediation.d.ts

@@ -2,11 +2,11 @@ import type { VerifyFailedPayload } from "./verify-payload.js";
 import type { ParsedMission } from "./types.js";
 import type { VerifyPhaseFailure } from "./verify-failure.js";
 import type { VerifyOptions } from "./verify-options.js";
-import { readRemediationSnapshot, type RemediationSnapshot } from "./context-feed-store.js";
+import { type RemediationSnapshot } from "./context-feed-store.js";
 export declare function remediationFromFailedPayload(root: string, mission: ParsedMission | null, missionArg: string | undefined, payload: VerifyFailedPayload): RemediationSnapshot;
 export declare function remediationFromPhaseFailure(root: string, mission: ParsedMission, missionArg: string, options: VerifyOptions, failure: VerifyPhaseFailure): RemediationSnapshot;
 export declare function persistRemediationSnapshot(root: string, snapshot: RemediationSnapshot): void;
 export declare function persistRemediationFromFailedPayload(root: string, mission: ParsedMission | null, missionArg: string | undefined, payload: VerifyFailedPayload): void;
 export declare function persistRemediationFromPhaseFailure(root: string, mission: ParsedMission, missionArg: string, options: VerifyOptions, failure: VerifyPhaseFailure): void;
-export { readRemediationSnapshot };
+export { readRemediationSnapshot } from "./context-feed-store.js";
 //# sourceMappingURL=context-feed-remediation.d.ts.map

package/dist/cli/lib/context-feed-remediation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-feed-remediation.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-remediation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EACL,uBAAuB,EAGvB,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AA6BjC,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAUrB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,kBAAkB,GAC1B,mBAAmB,CAUrB;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAM5F;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAEN;AAED,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,kBAAkB,GAC1B,IAAI,CAKN;AAED,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"context-feed-remediation.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-remediation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAA4B,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAoC7F,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAUrB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,kBAAkB,GAC1B,mBAAmB,CAoBrB;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAM5F;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAEN;AAED,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,kBAAkB,GAC1B,IAAI,CAKN;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/cli/lib/context-feed-remediation.js

@@ -1,27 +1,24 @@
 import { toPosixRel } from "./cli-io.js";
-import { readRemediationSnapshot, writeRemediationSnapshot, REMEDIATION_SCHEMA_VERSION, } from "./context-feed-store.js";
-import { normalizeVerifyPhaseFailure, toRemediationSnapshot } from "./verify-failure-normalize.js";
-function remediationSnapshotFromFailedPayload(payload, meta) {
-    return {
-        schema_version: REMEDIATION_SCHEMA_VERSION,
-        written_at: new Date().toISOString(),
-        source: "gantry verify",
-        phase: payload.phase,
-        error_code: payload.error_code,
-        message: payload.message,
-        ...meta,
-        fix_hints: payload.fix_hints,
-        next_actions: payload.next_actions,
-        ...(payload.failures ? { failures: payload.failures } : {}),
-        ...(payload.stdout !== undefined || payload.stderr !== undefined
-            ? {
-                gate: {
-                    ...(payload.stdout !== undefined ? { stdout: payload.stdout } : {}),
-                    ...(payload.stderr !== undefined ? { stderr: payload.stderr } : {}),
-                },
-            }
-            : {}),
-    };
+import { writeRemediationSnapshot } from "./context-feed-store.js";
+import { writeGateLog } from "./gate-log-writer.js";
+import { buildCompactRemediationSnapshot, loadPriorDigestRing, applyFindingsRecurrence, } from "./verify-remediation-pipeline.js";
+import { computeFindingsDigest } from "./verify-finding-fingerprint.js";
+import { buildFindingsForFailure, toVerifyFailedPayload } from "./verify-payload.js";
+import { normalizeVerifyPhaseFailure } from "./verify-failure-normalize.js";
+function remediationFromPayload(root, payload, meta, findings = payload.findings) {
+    const msnId = meta.msn_id;
+    const priorRing = loadPriorDigestRing(root, msnId);
+    const { payload: nextPayload, digestRing } = applyFindingsRecurrence(payload, findings, priorRing);
+    const digest = computeFindingsDigest(findings);
+    const gateLogPath = writeGateLog(root, msnId, nextPayload.stdout, nextPayload.stderr);
+    return buildCompactRemediationSnapshot({
+        payload: nextPayload,
+        meta,
+        findings,
+        findingsDigest: digest,
+        digestRing,
+        gateLogPath,
+    });
 }
 export function remediationFromFailedPayload(root, mission, missionArg, payload) {
     const meta = mission
@@ -32,7 +29,7 @@ export function remediationFromFailedPayload(root, mission, missionArg, payload)
         : missionArg
             ? { mission_file_path: missionArg }
             : {};
-    return remediationSnapshotFromFailedPayload(payload, meta);
+    return remediationFromPayload(root, payload, meta);
 }
 export function remediationFromPhaseFailure(root, mission, missionArg, options, failure) {
     const normalized = normalizeVerifyPhaseFailure({
@@ -43,7 +40,12 @@ export function remediationFromPhaseFailure(root, mission, missionArg, options,
         msnId: mission.msnId ?? undefined,
         mission,
     });
-    return toRemediationSnapshot(normalized);
+    const findings = buildFindingsForFailure(root, normalized, failure);
+    const payload = toVerifyFailedPayload(normalized, failure, findings);
+    return remediationFromPayload(root, payload, {
+        mission_file_path: missionArg,
+        ...(mission.msnId ? { msn_id: mission.msnId } : {}),
+    }, findings);
 }
 export function persistRemediationSnapshot(root, snapshot) {
     try {
@@ -59,5 +61,5 @@ export function persistRemediationFromFailedPayload(root, mission, missionArg, p
 export function persistRemediationFromPhaseFailure(root, mission, missionArg, options, failure) {
     persistRemediationSnapshot(root, remediationFromPhaseFailure(root, mission, missionArg, options, failure));
 }
-export { readRemediationSnapshot };
+export { readRemediationSnapshot } from "./context-feed-store.js";
 //# sourceMappingURL=context-feed-remediation.js.map

package/dist/cli/lib/context-feed-remediation.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-feed-remediation.js","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-remediation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEnG,SAAS,oCAAoC,CAC3C,OAA4B,EAC5B,IAAqD;IAErD,OAAO;QACL,cAAc,EAAE,0BAA0B;QAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,IAAI;QACP,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAC9D,CAAC,CAAC;gBACE,IAAI,EAAE;oBACJ,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,OAA6B,EAC7B,UAA8B,EAC9B,OAA4B;IAE5B,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC;YACE,iBAAiB,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD;QACH,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,oCAAoC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,OAAsB,EACtB,UAAkB,EAClB,OAAsB,EACtB,OAA2B;IAE3B,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,OAAO;QACP,UAAU;QACV,OAAO;QACP,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;QACjC,OAAO;KACR,CAAC,CAAC;IACH,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAA6B;IACpF,IAAI,CAAC;QACH,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAAY,EACZ,OAA6B,EAC7B,UAA8B,EAC9B,OAA4B;IAE5B,0BAA0B,CAAC,IAAI,EAAE,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAAY,EACZ,OAAsB,EACtB,UAAkB,EAClB,OAAsB,EACtB,OAA2B;IAE3B,0BAA0B,CACxB,IAAI,EACJ,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"context-feed-remediation.js","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-remediation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAA4B,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,+BAA+B,EAC/B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,SAAS,sBAAsB,CAC7B,IAAY,EACZ,OAA4B,EAC5B,IAAqD,EACrD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,uBAAuB,CAClE,OAAO,EACP,QAAQ,EACR,SAAS,CACV,CAAC;IACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtF,OAAO,+BAA+B,CAAC;QACrC,OAAO,EAAE,WAAW;QACpB,IAAI;QACJ,QAAQ;QACR,cAAc,EAAE,MAAM;QACtB,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,OAA6B,EAC7B,UAA8B,EAC9B,OAA4B;IAE5B,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC;YACE,iBAAiB,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD;QACH,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,OAAsB,EACtB,UAAkB,EAClB,OAAsB,EACtB,OAA2B;IAE3B,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,OAAO;QACP,UAAU;QACV,OAAO;QACP,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;QACjC,OAAO;KACR,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrE,OAAO,sBAAsB,CAC3B,IAAI,EACJ,OAAO,EACP;QACE,iBAAiB,EAAE,UAAU;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,EACD,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAA6B;IACpF,IAAI,CAAC;QACH,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAAY,EACZ,OAA6B,EAC7B,UAA8B,EAC9B,OAA4B;IAE5B,0BAA0B,CAAC,IAAI,EAAE,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAAY,EACZ,OAAsB,EACtB,UAAkB,EAClB,OAAsB,EACtB,OAA2B;IAE3B,0BAA0B,CACxB,IAAI,EACJ,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/cli/lib/context-feed-store.d.ts

@@ -1,6 +1,8 @@
-export declare const REMEDIATION_SCHEMA_VERSION: 1;
+import type { VerifyFinding } from "./verify-finding.js";
+export declare const REMEDIATION_SCHEMA_VERSION: 2;
+export declare const REMEDIATION_SCHEMA_VERSION_LEGACY: 1;
 export interface RemediationSnapshot {
-    schema_version: typeof REMEDIATION_SCHEMA_VERSION;
+    schema_version: typeof REMEDIATION_SCHEMA_VERSION | typeof REMEDIATION_SCHEMA_VERSION_LEGACY;
     written_at: string;
     source: "gantry verify";
     cleared?: true;
@@ -12,6 +14,7 @@ export interface RemediationSnapshot {
     fix_hints: string[];
     next_actions: string[];
     failures?: string[];
+    /** v1 only — omitted on v2 writes (use gate_log_path). */
     gate?: {
         stdout?: string;
         stderr?: string;
@@ -24,6 +27,11 @@ export interface RemediationSnapshot {
         actual?: number | boolean;
         report_path?: string;
     };
+    /** v2: compact model re-entry packet (ADR-0040). */
+    findings?: VerifyFinding[];
+    findings_digest?: string;
+    digest_ring?: string[];
+    gate_log_path?: string;
 }
 /** Remove abandoned temp files older than maxAgeMs (optional scavenger — not on hot write path). */
 export declare function scavengerStaleRemediationTemps(repoRoot: string, maxAgeMs?: number): void;

package/dist/cli/lib/context-feed-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-feed-store.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-store.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAqBD,oGAAoG;AACpG,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,IAAI,CAgBzF;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAgB9F;AAmBD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAWpF;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAa/D"}
+{"version":3,"file":"context-feed-store.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,0BAA0B,GAAG,OAAO,iCAAiC,CAAC;IAC7F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,oDAAoD;IACpD,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAYD,oGAAoG;AACpG,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,IAAI,CAgBzF;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAE9F;AAuBD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAWpF;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAa/D"}

package/dist/cli/lib/context-feed-store.js

@@ -1,8 +1,9 @@
-import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { REL_NEXT_REMEDIATION } from "./constants.js";
-export const REMEDIATION_SCHEMA_VERSION = 1;
+import { writeJsonAtomicSync } from "./atomic-fs.js";
+export const REMEDIATION_SCHEMA_VERSION = 2;
+export const REMEDIATION_SCHEMA_VERSION_LEGACY = 1;
 const TMP_PREFIX = "NEXT_REMEDIATION.json.tmp.";
 function remediationDir(repoRoot) {
     return path.join(repoRoot, path.dirname(REL_NEXT_REMEDIATION));
@@ -10,13 +11,6 @@ function remediationDir(repoRoot) {
 function remediationPath(repoRoot) {
     return path.join(repoRoot, REL_NEXT_REMEDIATION);
 }
-function tempRemediationPath(repoRoot) {
-    const nonce = crypto.randomBytes(4).toString("hex");
-    return path.join(remediationDir(repoRoot), `${TMP_PREFIX}${process.pid}.${Date.now()}.${nonce}`);
-}
-function ensureRemediationDir(repoRoot) {
-    fs.mkdirSync(remediationDir(repoRoot), { recursive: true });
-}
 /** Remove abandoned temp files older than maxAgeMs (optional scavenger — not on hot write path). */
 export function scavengerStaleRemediationTemps(repoRoot, maxAgeMs = 300_000) {
     const dir = remediationDir(repoRoot);
@@ -40,24 +34,7 @@ export function scavengerStaleRemediationTemps(repoRoot, maxAgeMs = 300_000) {
 }
 /** Atomic replace: write temp file in same directory, then rename onto target. */
 export function writeRemediationSnapshot(repoRoot, snapshot) {
-    ensureRemediationDir(repoRoot);
-    const target = remediationPath(repoRoot);
-    const temp = tempRemediationPath(repoRoot);
-    const body = `${JSON.stringify(snapshot, null, 2)}\n`;
-    try {
-        fs.writeFileSync(temp, body, { encoding: "utf8", flag: "wx" });
-        fs.renameSync(temp, target);
-    }
-    catch (e) {
-        try {
-            if (fs.existsSync(temp))
-                fs.unlinkSync(temp);
-        }
-        catch {
-            // ignore cleanup failure
-        }
-        throw e;
-    }
+    writeJsonAtomicSync(remediationPath(repoRoot), snapshot);
 }
 function readFileWithRetry(absPath, attempts = 3) {
     for (let i = 0; i < attempts; i += 1) {
@@ -78,13 +55,16 @@ function readFileWithRetry(absPath, attempts = 3) {
     }
     return null;
 }
+function isRemediationSchemaVersion(v) {
+    return v === REMEDIATION_SCHEMA_VERSION || v === REMEDIATION_SCHEMA_VERSION_LEGACY;
+}
 export function readRemediationSnapshot(repoRoot) {
     const raw = readFileWithRetry(remediationPath(repoRoot));
     if (raw === null)
         return null;
     try {
         const parsed = JSON.parse(raw);
-        if (parsed.schema_version !== REMEDIATION_SCHEMA_VERSION)
+        if (!isRemediationSchemaVersion(parsed.schema_version))
             return null;
         if (parsed.cleared === true)
             return null;

package/dist/cli/lib/context-feed-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-feed-store.js","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AAyBrD,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAEhD,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,8BAA8B,CAAC,QAAgB,EAAE,QAAQ,GAAG,OAAO;IACjF,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAClC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,QAA6B;IACtF,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAQ,GAAG,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,CAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ;oBAAE,SAAS;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,IAAI,MAAM,CAAC,cAAc,KAAK,0BAA0B;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,SAAS,GAAwB;QACrC,cAAc,EAAE,0BAA0B;QAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,yBAAyB;QACrC,OAAO,EAAE,0BAA0B;QACnC,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;KACjB,CAAC;IACF,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"context-feed-store.js","sourceRoot":"","sources":["../../../src/cli/lib/context-feed-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AACrD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AA+B5D,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAEhD,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AACnD,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,8BAA8B,CAAC,QAAgB,EAAE,QAAQ,GAAG,OAAO;IACjF,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAClC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,QAA6B;IACtF,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAQ,GAAG,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,CAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ;oBAAE,SAAS;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAU;IAC5C,OAAO,CAAC,KAAK,0BAA0B,IAAI,CAAC,KAAK,iCAAiC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,SAAS,GAAwB;QACrC,cAAc,EAAE,0BAA0B;QAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,yBAAyB;QACrC,OAAO,EAAE,0BAA0B;QACnC,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;KACjB,CAAC;IACF,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/cli/lib/defensive-profile-presets.d.ts

@@ -7,4 +7,10 @@ export declare function parseDefensiveProfilePreset(raw: string): DefensiveProfi
 /** Build a full defensive_profile config for init scaffolding from a named preset. */
 export declare function buildDefensiveProfileFromPreset(preset: DefensiveProfilePresetName): DefensiveProfileConfig;
 export declare function presetDefaultSeverity(preset: DefensiveProfilePresetName): GuardSeverity;
+/** Config keys a named defensive preset implies when the operator has not set them. */
+export declare function presetConfigDefaults(preset: DefensiveProfilePresetName): {
+    ledger?: {
+        mode: "local";
+    };
+};
 //# sourceMappingURL=defensive-profile-presets.d.ts.map

package/dist/cli/lib/defensive-profile-presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defensive-profile-presets.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEpF,eAAO,MAAM,8BAA8B,uEAIjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAItF,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,0BAA0B,CAE/F;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAOnF;AAkCD,sFAAsF;AACtF,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA4BxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,GAAG,aAAa,CAEvF"}
+{"version":3,"file":"defensive-profile-presets.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEpF,eAAO,MAAM,8BAA8B,uEAIjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAItF,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,0BAA0B,CAE/F;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAOnF;AAkCD,sFAAsF;AACtF,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA4BxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,GAAG,aAAa,CAEvF;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG;IACxE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAC5B,CAYA"}

package/dist/cli/lib/defensive-profile-presets.js

@@ -4,7 +4,7 @@ export const DEFENSIVE_PROFILE_PRESET_NAMES = [
     "lean_scratchpad",
 ];
 export const DEFENSIVE_PROFILE_PRESET_LABELS = {
-    strict_enterprise: "Strict Enterprise — block risky diffs",
+    strict_enterprise: "Strict Enterprise — block risky diffs (also defaults ledger.mode to local)",
     balanced_partner: "Balanced Partner — warn on risky diffs",
     lean_scratchpad: "Lean Scratchpad — audit telemetry only",
 };
@@ -73,4 +73,18 @@ export function buildDefensiveProfileFromPreset(preset) {
 export function presetDefaultSeverity(preset) {
     return PRESET_DEFAULTS[preset].severity;
 }
+/** Config keys a named defensive preset implies when the operator has not set them. */
+export function presetConfigDefaults(preset) {
+    switch (preset) {
+        case "strict_enterprise":
+            return { ledger: { mode: "local" } };
+        case "balanced_partner":
+        case "lean_scratchpad":
+            return {};
+        default: {
+            const _never = preset;
+            return _never;
+        }
+    }
+}
 //# sourceMappingURL=defensive-profile-presets.js.map

package/dist/cli/lib/defensive-profile-presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"defensive-profile-presets.js","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;CACT,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAA+C;IACzF,iBAAiB,EAAE,uCAAuC;IAC1D,gBAAgB,EAAE,wCAAwC;IAC1D,eAAe,EAAE,wCAAwC;CAC1D,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAQ,8BAAoD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4CAA4C,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,eAAe,GAA4D;IAC/E,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;CACF,CAAC;AAEF,sFAAsF;AACtF,MAAM,UAAU,+BAA+B,CAC7C,MAAkC;IAElC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,MAAM,EAAE;YACN,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,eAAe;aAC7B;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;aAC3C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"defensive-profile-presets.js","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;CACT,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAA+C;IACzF,iBAAiB,EAAE,4EAA4E;IAC/F,gBAAgB,EAAE,wCAAwC;IAC1D,eAAe,EAAE,wCAAwC;CAC1D,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAQ,8BAAoD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4CAA4C,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,eAAe,GAA4D;IAC/E,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;CACF,CAAC;AAEF,sFAAsF;AACtF,MAAM,UAAU,+BAA+B,CAC7C,MAAkC;IAElC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,MAAM,EAAE;YACN,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,eAAe;aAC7B;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;aAC3C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,MAAkC;IAGrE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,mBAAmB;YACtB,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QACvC,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB;YACpB,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAU,MAAM,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/lib/deps/deps-fetch.d.ts

@@ -0,0 +1,4 @@
+import type { MissionDependencySpec } from "../types.js";
+/** Explicit network path (ADR-0026 / ADR-0044). Doctor and verify MUST NOT call this. */
+export declare function fetchMissionDependency(root: string, dep: MissionDependencySpec): string;
+//# sourceMappingURL=deps-fetch.d.ts.map

package/dist/cli/lib/deps/deps-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fetch.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-fetch.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGzD,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAcvF"}

package/dist/cli/lib/deps/deps-fetch.js

@@ -0,0 +1,16 @@
+import { gitRun } from "../git.js";
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { assertSafeFetchRef, depsRefForRepo, gitUrlForRepo } from "./deps-slug.js";
+/** Explicit network path (ADR-0026 / ADR-0044). Doctor and verify MUST NOT call this. */
+export function fetchMissionDependency(root, dep) {
+    const destRef = depsRefForRepo(dep.repo);
+    const srcRef = assertSafeFetchRef(dep.ref ?? "refs/gxt/ledger");
+    const url = gitUrlForRepo(dep.repo);
+    const r = gitRun(root, ["fetch", "--", url, `${srcRef}:${destRef}`]);
+    if (!r.ok) {
+        throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps fetch failed for ${dep.repo}: ${r.stderr.trim()}`, "grant read access to refs/gxt/ledger or check the URL", 1);
+    }
+    return destRef;
+}
+//# sourceMappingURL=deps-fetch.js.map

package/dist/cli/lib/deps/deps-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fetch.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnF,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,GAA0B;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,gCAAgC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAC9D,uDAAuD,EACvD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/deps/deps-resolve.d.ts

@@ -0,0 +1,18 @@
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { type MissionDependencySpec, type ParsedMission } from "../types.js";
+export type DependencyFailureCode = typeof GXT_ERROR.DEPENDENCY_UNFETCHED | typeof GXT_ERROR.DEPENDENCY_UNSATISFIED | typeof GXT_ERROR.DEPENDENCY_UNSIGNED | typeof GXT_ERROR.DEPENDENCY_STALE | typeof GXT_ERROR.DEPENDENCY_ORG_MISMATCH;
+export type DependencyCheckResult = {
+    code: "ok";
+    repo: string;
+    msn_id: string;
+} | {
+    code: DependencyFailureCode;
+    repo: string;
+    msn_id: string;
+    message: string;
+};
+/** Offline: walk fetched refs/gxt/deps/<slug> only. */
+export declare function checkMissionDependency(root: string, dep: MissionDependencySpec): DependencyCheckResult;
+/** Check every depends_on row and append one aggregated ok ledger entry. */
+export declare function checkMissionDependencies(root: string, mission: ParsedMission): DependencyCheckResult[];
+//# sourceMappingURL=deps-resolve.d.ts.map

package/dist/cli/lib/deps/deps-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-resolve.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-resolve.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAG7F,MAAM,MAAM,qBAAqB,GAC7B,OAAO,SAAS,CAAC,oBAAoB,GACrC,OAAO,SAAS,CAAC,sBAAsB,GACvC,OAAO,SAAS,CAAC,mBAAmB,GACpC,OAAO,SAAS,CAAC,gBAAgB,GACjC,OAAO,SAAS,CAAC,uBAAuB,CAAC;AAE7C,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAenF,uDAAuD;AACvD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,qBAAqB,CAuCtG;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,qBAAqB,EAAE,CAWtG"}

package/dist/cli/lib/deps/deps-resolve.js

@@ -0,0 +1,66 @@
+import { hmacSha256Hex, canonicalizeRepositoryIdentifier } from "../receipt-attribution.js";
+import { resolveOrgExportConfig } from "../org-export-config.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { appendLedgerIfEnabled } from "../ledger/ledger-append.js";
+import { readLedgerTip, verifyLedgerChain } from "../ledger/ledger-chain.js";
+import { msnIdOrDefault } from "../types.js";
+import { depsRefForRepo } from "./deps-slug.js";
+function expectedRepoHash(root, repo) {
+    const org = resolveOrgExportConfig(root);
+    return hmacSha256Hex(org.pepper, canonicalizeRepositoryIdentifier(repo));
+}
+function fail(dep, code, message) {
+    return { repo: dep.repo, msn_id: dep.msn_id, code, message };
+}
+/** Offline: walk fetched refs/gxt/deps/<slug> only. */
+export function checkMissionDependency(root, dep) {
+    const ref = depsRefForRepo(dep.repo);
+    const tip = readLedgerTip(root, ref);
+    if (!tip) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNFETCHED, `${ref} is not fetched`);
+    }
+    const chain = verifyLedgerChain(root, ref);
+    if (!chain.ok) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, chain.errors[0] ?? "dependency ledger chain broken");
+    }
+    const matches = [...chain.entries]
+        .reverse()
+        .filter((e) => e.msn_id === dep.msn_id && e.entry_kind === "receipt");
+    const newest = matches[0];
+    if (!newest) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, `no receipt entry for ${dep.msn_id}`);
+    }
+    const wantHash = dep.expected_repository_hash ?? expectedRepoHash(root, dep.repo);
+    if (newest.repository_hash !== wantHash) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_ORG_MISMATCH, "repository_hash does not match consumer GANTRY_ORG_PEPPER");
+    }
+    const status = newest.payload.verify_status;
+    if ((dep.require?.verify_status ?? "passed") === "passed" && status !== "passed") {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, `verify_status is ${String(status)}`);
+    }
+    if (dep.require?.signed === true && newest.payload.signed !== true) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSIGNED, "require.signed but newest receipt entry is unsigned");
+    }
+    if (dep.require?.max_age_days !== undefined) {
+        const issued = Date.parse(newest.issued_at);
+        const maxMs = dep.require.max_age_days * 86_400_000;
+        if (!Number.isFinite(issued) || Date.now() - issued > maxMs) {
+            return fail(dep, GXT_ERROR.DEPENDENCY_STALE, `entry older than ${dep.require.max_age_days} days`);
+        }
+    }
+    return { repo: dep.repo, msn_id: dep.msn_id, code: "ok" };
+}
+/** Check every depends_on row and append one aggregated ok ledger entry. */
+export function checkMissionDependencies(root, mission) {
+    const results = mission.dependsOn.map((d) => checkMissionDependency(root, d));
+    const okResults = results.filter((r) => r.code === "ok");
+    if (okResults.length > 0) {
+        appendLedgerIfEnabled(root, "dependency_check", msnIdOrDefault(mission), {
+            repo: okResults.map((r) => r.repo).join(","),
+            msn_id: msnIdOrDefault(mission),
+            result: "ok",
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=deps-resolve.js.map

package/dist/cli/lib/deps/deps-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-resolve.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAkD,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAahD,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,IAAI,CACX,GAA0B,EAC1B,IAA2B,EAC3B,OAAe;IAEf,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,GAA0B;IAC7E,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,oBAAoB,EAAE,GAAG,GAAG,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;SAC/B,OAAO,EAAE;SACT,MAAM,CACL,CAAC,CAAC,EAAwD,EAAE,CAC1D,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CACxD,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,uBAAuB,EAAE,2DAA2D,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,QAAQ,CAAC,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,oBAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,GAAG,CAAC,OAAO,CAAC,YAAY,OAAO,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,OAAsB;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9G,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE;YACvE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/deps/deps-slug.d.ts

@@ -0,0 +1,5 @@
+export declare function depsSlug(repo: string): string;
+export declare function depsRefForRepo(repo: string): string;
+export declare function gitUrlForRepo(repo: string): string;
+export declare function assertSafeFetchRef(ref: string): string;
+//# sourceMappingURL=deps-slug.d.ts.map

package/dist/cli/lib/deps/deps-slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-slug.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-slug.ts"],"names":[],"mappings":"AAyBA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUtD"}

package/dist/cli/lib/deps/deps-slug.js

@@ -0,0 +1,44 @@
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { canonicalizeRepositoryIdentifier } from "../receipt-attribution.js";
+const SAFE_SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SAFE_DEPS_REF = /^refs\/gxt\/deps\/[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SAFE_SRC_REF = /^refs\/[A-Za-z0-9._/-]+$/;
+const SAFE_HTTPS_GIT = /^https:\/\/[a-z0-9.-]+(?:\/[a-z0-9._-]+)+\.git$/;
+const SAFE_SSH_GIT = /^git@[a-z0-9.-]+:[a-z0-9._/-]+(?:\.git)?$/;
+const SAFE_LOCAL_GIT = /^\/[A-Za-z0-9._/-]+$/;
+function rejectRepo(repo, detail) {
+    throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps: unsafe repository identifier ${JSON.stringify(repo)} (${detail})`, "use host/owner/repo or an https/ssh/local git URL without shell metacharacters", 1);
+}
+function allow(value, re, repo, detail) {
+    if (!re.test(value))
+        rejectRepo(repo, detail);
+    return value;
+}
+export function depsSlug(repo) {
+    const slug = canonicalizeRepositoryIdentifier(repo)
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, "");
+    return allow(slug, SAFE_SLUG, repo, "slug");
+}
+export function depsRefForRepo(repo) {
+    const ref = `refs/gxt/deps/${depsSlug(repo)}`;
+    return allow(ref, SAFE_DEPS_REF, repo, "dest ref");
+}
+export function gitUrlForRepo(repo) {
+    const raw = repo.trim();
+    const url = raw.includes("://") || raw.startsWith("git@") || raw.startsWith("/")
+        ? raw
+        : `https://${canonicalizeRepositoryIdentifier(raw)}.git`;
+    if (SAFE_HTTPS_GIT.test(url) || SAFE_SSH_GIT.test(url) || SAFE_LOCAL_GIT.test(url)) {
+        return url;
+    }
+    rejectRepo(repo, "url");
+}
+export function assertSafeFetchRef(ref) {
+    if (!SAFE_SRC_REF.test(ref) || ref.includes("..")) {
+        throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps: unsafe git ref ${JSON.stringify(ref)}`, "depends_on.ref must be a refs/ path without ..", 1);
+    }
+    return ref;
+}
+//# sourceMappingURL=deps-slug.js.map

package/dist/cli/lib/deps/deps-slug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-slug.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-slug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAE7E,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,aAAa,GAAG,6CAA6C,CAAC;AACpE,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,cAAc,GAAG,iDAAiD,CAAC;AACzE,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACjE,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,GAAG,EAC/E,gFAAgF,EAChF,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,IAAY,EAAE,MAAc;IACpE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC;SAChD,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,iBAAiB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9C,OAAO,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,GAAG,GACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAClE,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,WAAW,gCAAgC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7D,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EACpD,gDAAgD,EAChD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/lib/doctor-adapter-preflight.d.ts

@@ -0,0 +1,24 @@
+import { type CommandRunner } from "./adapter-preflight-checks.js";
+import type { DoctorSection } from "./doctor-types.js";
+import { type TypedGateAdapterId } from "./types.js";
+export interface AdapterPreflightOptions {
+    forceAdapter?: TypedGateAdapterId;
+    baseline?: boolean;
+    runCommand?: CommandRunner;
+}
+export interface AdapterPreflightSelection {
+    tsc?: true;
+    eslint?: {
+        commands: string[];
+    };
+}
+export declare const SKIPPED_MESSAGE = "adapter preflight: no tsc/eslint missions declared (skipped)";
+interface DeclaredAdapterCommands {
+    tsc: string[];
+    eslint: string[];
+}
+/** Explicit `gate_adapter` values only — never inferred from gate_command (ADR-0041). */
+export declare function discoverDeclaredAdapters(root: string): DeclaredAdapterCommands;
+export declare function runAdapterPreflightDoctorChecks(root: string, opts?: AdapterPreflightOptions): DoctorSection;
+export {};
+//# sourceMappingURL=doctor-adapter-preflight.d.ts.map

package/dist/cli/lib/doctor-adapter-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-adapter-preflight.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/doctor-adapter-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAA8C,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjC;AAED,eAAO,MAAM,eAAe,iEAAiE,CAAC;AAI9F,UAAU,uBAAuB;IAC/B,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAsCD,yFAAyF;AACzF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAgB9E;AAcD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,uBAA4B,GACjC,aAAa,CAsBf"}