@jeger-ai/opengantry 3.2.6 → 3.3.0

package/dist/cli/lib/command-boundary.js

@@ -1,5 +1,5 @@
 import { CLI_NAME } from "./constants.js";
-import { errorMessage, logError, setExitCode } from "./cli-io.js";
+import { errorMessage, logError, logInfo, setExitCode } from "./cli-io.js";
 import { getRepoRoot } from "./git.js";
 import { isGantryUserError, reportUserFacingError, userFacingErrorToJson } from "./errors.js";
 /** Sole serializer for stdout JSON from commands (success and failure). */
@@ -21,10 +21,24 @@ function exitCodeFor(e) {
         return e.exitCode;
     return 1;
 }
-/** Run a sync command body with one JSON-aware error boundary. */
+function presentCommand(opts, view) {
+    if (opts.json) {
+        emitCliJson(view.json);
+        return;
+    }
+    const raw = view.human;
+    const lines = raw === undefined ? [] : typeof raw === "string" ? [raw] : [...raw];
+    for (const line of lines) {
+        if (line.length > 0)
+            logInfo(line);
+    }
+}
+/** Run a sync command body with one JSON-aware error and success boundary. */
 export function runUserCommand(opts, fn) {
     try {
-        fn();
+        const view = fn();
+        if (view !== undefined)
+            presentCommand(opts, view);
     }
     catch (e) {
         if (opts.json) {
@@ -39,7 +53,9 @@ export function runUserCommand(opts, fn) {
 /** Async variant of {@link runUserCommand}. */
 export async function runUserCommandAsync(opts, fn) {
     try {
-        await fn();
+        const view = await fn();
+        if (view !== undefined)
+            presentCommand(opts, view);
     }
     catch (e) {
         if (opts.json) {

package/dist/cli/lib/command-boundary.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-boundary.js","sourceRoot":"","sources":["../../../src/cli/lib/command-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAe9F,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAAwB,EAAE,EAAc;IACrE,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAwB,EACxB,EAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,CAAU,EAAE,QAAQ,GAAG,CAAC;IACzD,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,WAAW,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,EAAc;IACnE,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,EAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}
+{"version":3,"file":"command-boundary.js","sourceRoot":"","sources":["../../../src/cli/lib/command-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAe9F,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,SAAS,cAAc,CAAC,IAAwB,EAAE,IAAyB;IACzE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAClF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAwB,EAAE,EAAoC;IAC3F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;QAClB,IAAI,IAAI,KAAK,SAAS;YAAE,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAwB,EACxB,EAA6C;IAE7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,SAAS;YAAE,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,CAAU,EAAE,QAAQ,GAAG,CAAC;IACzD,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,WAAW,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,EAAc;IACnE,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,EAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/cli/lib/constants.d.ts

@@ -15,6 +15,19 @@ export declare const REL_MISSION_TEMPLATE: ".gitagent/planner/MISSION.template.m
 export declare const REL_HISTORY_DIR: ".gitagent/history";
 /** Git-ignored attestation receipts for optional hub ingestion. */
 export declare const REL_RECEIPTS_DIR: ".gitagent/history/receipts";
+/** Planner SSH allowed signers for `git log --format=%G?` / perimeter --ci. */
+export declare const REL_PLANNER_SIGNING_PUB: ".gitagent/foreman/PLANNER.signing.pub";
+/** git config key set by doctor and `gantry perimeter --ci`. */
+export declare const GIT_CONFIG_ALLOWED_SIGNERS: "gpg.ssh.allowedSignersFile";
+/** Tracked pin of an org policy git source (ADR-0042). */
+export declare const REL_POLICY_POINTER: ".gitagent/foreman/POLICY.pointer.json";
+/** Git-ignored org policy bundle cache (ADR-0042). */
+export declare const REL_POLICY_CACHE: ".gitagent/history/policy";
+/** Orphan commit chain for digest-only compliance entries (ADR-0043). */
+export declare const LEDGER_REF: "refs/gxt/ledger";
+/** Fetched foreign ledger refs (ADR-0044). */
+export declare const LEDGER_DEPS_REF_PREFIX: "refs/gxt/deps/";
+export declare const LEDGER_GENESIS_HASH: string;
 /** Git-ignored machine-readable runtime error (see templates/.gitignore.gxt). */
 export declare const REL_AGENT_ERROR_FILE: ".gitagent/history/.ignored-last-error.json";
 /** Git-ignored verify failure remediation feed for IDE/agent loops (atomic swap writes). */

package/dist/cli/lib/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,EAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,EAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,eAAO,MAAM,gCAAgC,EAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,EAAG,+BAAwC,CAAC;AACzF,eAAO,MAAM,kBAAkB,EAAG,uCAAgD,CAAC;AACnF,eAAO,MAAM,qBAAqB,EAAG,0CAAmD,CAAC;AACzF,eAAO,MAAM,sBAAsB,EAAG,eAAwB,CAAC;AAC/D,eAAO,MAAM,oBAAoB,EAAG,uCAAgD,CAAC;AACrF,eAAO,MAAM,eAAe,EAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAG,4BAAqC,CAAC;AACtE,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,EAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,EAAG,qCAA8C,CAAC;AACnF,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,EAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,eAAO,MAAM,oBAAoB,EAAG,wBAAiC,CAAC;AACtE,eAAO,MAAM,eAAe,EAAG,QAAiB,CAAC;AACjD,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,eAAO,MAAM,2BAA2B,EACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,eAAO,MAAM,sBAAsB,EAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,eAAO,MAAM,cAAc,QAAgB,CAAC;AAE5C,eAAO,MAAM,QAAQ,WAAW,CAAC;AACjC,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,sBAAsB,EAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,EAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,EAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,eAAO,MAAM,gCAAgC,EAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,EAAG,+BAAwC,CAAC;AACzF,eAAO,MAAM,kBAAkB,EAAG,uCAAgD,CAAC;AACnF,eAAO,MAAM,qBAAqB,EAAG,0CAAmD,CAAC;AACzF,eAAO,MAAM,sBAAsB,EAAG,eAAwB,CAAC;AAC/D,eAAO,MAAM,oBAAoB,EAAG,uCAAgD,CAAC;AACrF,eAAO,MAAM,eAAe,EAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,EAAG,4BAAqC,CAAC;AACtE,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,EAAG,uCAAgD,CAAC;AACxF,gEAAgE;AAChE,eAAO,MAAM,0BAA0B,EAAG,4BAAqC,CAAC;AAChF,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,EAAG,uCAAgD,CAAC;AACnF,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAG,0BAAmC,CAAC;AACpE,yEAAyE;AACzE,eAAO,MAAM,UAAU,EAAG,iBAA0B,CAAC;AACrD,8CAA8C;AAC9C,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAChE,eAAO,MAAM,mBAAmB,QAAiB,CAAC;AAClD,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,EAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,EAAG,qCAA8C,CAAC;AACnF,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,EAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,eAAO,MAAM,oBAAoB,EAAG,wBAAiC,CAAC;AACtE,eAAO,MAAM,eAAe,EAAG,QAAiB,CAAC;AACjD,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,eAAO,MAAM,2BAA2B,EACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,eAAO,MAAM,sBAAsB,EAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,eAAO,MAAM,cAAc,QAAgB,CAAC;AAE5C,eAAO,MAAM,QAAQ,WAAW,CAAC;AACjC,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,sBAAsB,EAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/cli/lib/constants.js

@@ -15,6 +15,19 @@ export const REL_MISSION_TEMPLATE = ".gitagent/planner/MISSION.template.md";
 export const REL_HISTORY_DIR = ".gitagent/history";
 /** Git-ignored attestation receipts for optional hub ingestion. */
 export const REL_RECEIPTS_DIR = ".gitagent/history/receipts";
+/** Planner SSH allowed signers for `git log --format=%G?` / perimeter --ci. */
+export const REL_PLANNER_SIGNING_PUB = ".gitagent/foreman/PLANNER.signing.pub";
+/** git config key set by doctor and `gantry perimeter --ci`. */
+export const GIT_CONFIG_ALLOWED_SIGNERS = "gpg.ssh.allowedSignersFile";
+/** Tracked pin of an org policy git source (ADR-0042). */
+export const REL_POLICY_POINTER = ".gitagent/foreman/POLICY.pointer.json";
+/** Git-ignored org policy bundle cache (ADR-0042). */
+export const REL_POLICY_CACHE = ".gitagent/history/policy";
+/** Orphan commit chain for digest-only compliance entries (ADR-0043). */
+export const LEDGER_REF = "refs/gxt/ledger";
+/** Fetched foreign ledger refs (ADR-0044). */
+export const LEDGER_DEPS_REF_PREFIX = "refs/gxt/deps/";
+export const LEDGER_GENESIS_HASH = "0".repeat(64);
 /** Git-ignored machine-readable runtime error (see templates/.gitignore.gxt). */
 export const REL_AGENT_ERROR_FILE = ".gitagent/history/.ignored-last-error.json";
 /** Git-ignored verify failure remediation feed for IDE/agent loops (atomic swap writes). */

package/dist/cli/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,MAAM,CAAC,MAAM,gCAAgC,GAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAAwC,CAAC;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0CAAmD,CAAC;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,uCAAgD,CAAC;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAAqC,CAAC;AACtE,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAA8C,CAAC;AACnF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAiC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,QAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/lib/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAA8C,CAAC;AACvF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,0CAAmD,CAAC;AACjG,mGAAmG;AACnG,MAAM,CAAC,MAAM,gCAAgC,GAAG,6CAAsD,CAAC;AACvG,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAAwC,CAAC;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,0CAAmD,CAAC;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,uCAAgD,CAAC;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAA4B,CAAC;AAC5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAAqC,CAAC;AACtE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,uCAAgD,CAAC;AACxF,gEAAgE;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAAqC,CAAC;AAChF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAgD,CAAC;AACnF,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAAmC,CAAC;AACpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,iBAA0B,CAAC;AACrD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAyB,CAAC;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAClD,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAAqD,CAAC;AAC1F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAA8C,CAAC;AACnF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAA6B,CAAC;AACjE,sGAAsG;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAiC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,QAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAA0B,CAAC;AAChE,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GACtC,+DAAwE,CAAC;AAC3E,+GAA+G;AAC/G,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAA+C,CAAC;AAEtF,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAgC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/cli/lib/defensive-profile-presets.d.ts

@@ -7,4 +7,10 @@ export declare function parseDefensiveProfilePreset(raw: string): DefensiveProfi
 /** Build a full defensive_profile config for init scaffolding from a named preset. */
 export declare function buildDefensiveProfileFromPreset(preset: DefensiveProfilePresetName): DefensiveProfileConfig;
 export declare function presetDefaultSeverity(preset: DefensiveProfilePresetName): GuardSeverity;
+/** Config keys a named defensive preset implies when the operator has not set them. */
+export declare function presetConfigDefaults(preset: DefensiveProfilePresetName): {
+    ledger?: {
+        mode: "local";
+    };
+};
 //# sourceMappingURL=defensive-profile-presets.d.ts.map

package/dist/cli/lib/defensive-profile-presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defensive-profile-presets.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEpF,eAAO,MAAM,8BAA8B,uEAIjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAItF,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,0BAA0B,CAE/F;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAOnF;AAkCD,sFAAsF;AACtF,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA4BxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,GAAG,aAAa,CAEvF"}
+{"version":3,"file":"defensive-profile-presets.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEpF,eAAO,MAAM,8BAA8B,uEAIjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAItF,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,0BAA0B,CAE/F;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAOnF;AAkCD,sFAAsF;AACtF,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA4BxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,GAAG,aAAa,CAEvF;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG;IACxE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAC5B,CAYA"}

package/dist/cli/lib/defensive-profile-presets.js

@@ -4,7 +4,7 @@ export const DEFENSIVE_PROFILE_PRESET_NAMES = [
     "lean_scratchpad",
 ];
 export const DEFENSIVE_PROFILE_PRESET_LABELS = {
-    strict_enterprise: "Strict Enterprise — block risky diffs",
+    strict_enterprise: "Strict Enterprise — block risky diffs (also defaults ledger.mode to local)",
     balanced_partner: "Balanced Partner — warn on risky diffs",
     lean_scratchpad: "Lean Scratchpad — audit telemetry only",
 };
@@ -73,4 +73,18 @@ export function buildDefensiveProfileFromPreset(preset) {
 export function presetDefaultSeverity(preset) {
     return PRESET_DEFAULTS[preset].severity;
 }
+/** Config keys a named defensive preset implies when the operator has not set them. */
+export function presetConfigDefaults(preset) {
+    switch (preset) {
+        case "strict_enterprise":
+            return { ledger: { mode: "local" } };
+        case "balanced_partner":
+        case "lean_scratchpad":
+            return {};
+        default: {
+            const _never = preset;
+            return _never;
+        }
+    }
+}
 //# sourceMappingURL=defensive-profile-presets.js.map

package/dist/cli/lib/defensive-profile-presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"defensive-profile-presets.js","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;CACT,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAA+C;IACzF,iBAAiB,EAAE,uCAAuC;IAC1D,gBAAgB,EAAE,wCAAwC;IAC1D,eAAe,EAAE,wCAAwC;CAC1D,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAQ,8BAAoD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4CAA4C,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,eAAe,GAA4D;IAC/E,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;CACF,CAAC;AAEF,sFAAsF;AACtF,MAAM,UAAU,+BAA+B,CAC7C,MAAkC;IAElC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,MAAM,EAAE;YACN,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,eAAe;aAC7B;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;aAC3C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"defensive-profile-presets.js","sourceRoot":"","sources":["../../../src/cli/lib/defensive-profile-presets.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;CACT,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAA+C;IACzF,iBAAiB,EAAE,4EAA4E;IAC/F,gBAAgB,EAAE,wCAAwC;IAC1D,eAAe,EAAE,wCAAwC;CAC1D,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAQ,8BAAoD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4CAA4C,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,eAAe,GAA4D;IAC/E,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;QACrB,mBAAmB,EAAE,CAAC;KACvB;CACF,CAAC;AAEF,sFAAsF;AACtF,MAAM,UAAU,+BAA+B,CAC7C,MAAkC;IAElC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,MAAM,EAAE;YACN,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,eAAe;aAC7B;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;aAC3C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,MAAkC;IAGrE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,mBAAmB;YACtB,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QACvC,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB;YACpB,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAU,MAAM,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/lib/deps/deps-fetch.d.ts

@@ -0,0 +1,4 @@
+import type { MissionDependencySpec } from "../types.js";
+/** Explicit network path (ADR-0026 / ADR-0044). Doctor and verify MUST NOT call this. */
+export declare function fetchMissionDependency(root: string, dep: MissionDependencySpec): string;
+//# sourceMappingURL=deps-fetch.d.ts.map

package/dist/cli/lib/deps/deps-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fetch.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-fetch.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGzD,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAcvF"}

package/dist/cli/lib/deps/deps-fetch.js

@@ -0,0 +1,16 @@
+import { gitRun } from "../git.js";
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { assertSafeFetchRef, depsRefForRepo, gitUrlForRepo } from "./deps-slug.js";
+/** Explicit network path (ADR-0026 / ADR-0044). Doctor and verify MUST NOT call this. */
+export function fetchMissionDependency(root, dep) {
+    const destRef = depsRefForRepo(dep.repo);
+    const srcRef = assertSafeFetchRef(dep.ref ?? "refs/gxt/ledger");
+    const url = gitUrlForRepo(dep.repo);
+    const r = gitRun(root, ["fetch", "--", url, `${srcRef}:${destRef}`]);
+    if (!r.ok) {
+        throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps fetch failed for ${dep.repo}: ${r.stderr.trim()}`, "grant read access to refs/gxt/ledger or check the URL", 1);
+    }
+    return destRef;
+}
+//# sourceMappingURL=deps-fetch.js.map

package/dist/cli/lib/deps/deps-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fetch.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnF,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,GAA0B;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,gCAAgC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAC9D,uDAAuD,EACvD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/deps/deps-resolve.d.ts

@@ -0,0 +1,18 @@
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { type MissionDependencySpec, type ParsedMission } from "../types.js";
+export type DependencyFailureCode = typeof GXT_ERROR.DEPENDENCY_UNFETCHED | typeof GXT_ERROR.DEPENDENCY_UNSATISFIED | typeof GXT_ERROR.DEPENDENCY_UNSIGNED | typeof GXT_ERROR.DEPENDENCY_STALE | typeof GXT_ERROR.DEPENDENCY_ORG_MISMATCH;
+export type DependencyCheckResult = {
+    code: "ok";
+    repo: string;
+    msn_id: string;
+} | {
+    code: DependencyFailureCode;
+    repo: string;
+    msn_id: string;
+    message: string;
+};
+/** Offline: walk fetched refs/gxt/deps/<slug> only. */
+export declare function checkMissionDependency(root: string, dep: MissionDependencySpec): DependencyCheckResult;
+/** Check every depends_on row and append one aggregated ok ledger entry. */
+export declare function checkMissionDependencies(root: string, mission: ParsedMission): DependencyCheckResult[];
+//# sourceMappingURL=deps-resolve.d.ts.map

package/dist/cli/lib/deps/deps-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-resolve.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-resolve.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAG7F,MAAM,MAAM,qBAAqB,GAC7B,OAAO,SAAS,CAAC,oBAAoB,GACrC,OAAO,SAAS,CAAC,sBAAsB,GACvC,OAAO,SAAS,CAAC,mBAAmB,GACpC,OAAO,SAAS,CAAC,gBAAgB,GACjC,OAAO,SAAS,CAAC,uBAAuB,CAAC;AAE7C,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAenF,uDAAuD;AACvD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,qBAAqB,CAuCtG;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,qBAAqB,EAAE,CAWtG"}

package/dist/cli/lib/deps/deps-resolve.js

@@ -0,0 +1,66 @@
+import { hmacSha256Hex, canonicalizeRepositoryIdentifier } from "../receipt-attribution.js";
+import { resolveOrgExportConfig } from "../org-export-config.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { appendLedgerIfEnabled } from "../ledger/ledger-append.js";
+import { readLedgerTip, verifyLedgerChain } from "../ledger/ledger-chain.js";
+import { msnIdOrDefault } from "../types.js";
+import { depsRefForRepo } from "./deps-slug.js";
+function expectedRepoHash(root, repo) {
+    const org = resolveOrgExportConfig(root);
+    return hmacSha256Hex(org.pepper, canonicalizeRepositoryIdentifier(repo));
+}
+function fail(dep, code, message) {
+    return { repo: dep.repo, msn_id: dep.msn_id, code, message };
+}
+/** Offline: walk fetched refs/gxt/deps/<slug> only. */
+export function checkMissionDependency(root, dep) {
+    const ref = depsRefForRepo(dep.repo);
+    const tip = readLedgerTip(root, ref);
+    if (!tip) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNFETCHED, `${ref} is not fetched`);
+    }
+    const chain = verifyLedgerChain(root, ref);
+    if (!chain.ok) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, chain.errors[0] ?? "dependency ledger chain broken");
+    }
+    const matches = [...chain.entries]
+        .reverse()
+        .filter((e) => e.msn_id === dep.msn_id && e.entry_kind === "receipt");
+    const newest = matches[0];
+    if (!newest) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, `no receipt entry for ${dep.msn_id}`);
+    }
+    const wantHash = dep.expected_repository_hash ?? expectedRepoHash(root, dep.repo);
+    if (newest.repository_hash !== wantHash) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_ORG_MISMATCH, "repository_hash does not match consumer GANTRY_ORG_PEPPER");
+    }
+    const status = newest.payload.verify_status;
+    if ((dep.require?.verify_status ?? "passed") === "passed" && status !== "passed") {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSATISFIED, `verify_status is ${String(status)}`);
+    }
+    if (dep.require?.signed === true && newest.payload.signed !== true) {
+        return fail(dep, GXT_ERROR.DEPENDENCY_UNSIGNED, "require.signed but newest receipt entry is unsigned");
+    }
+    if (dep.require?.max_age_days !== undefined) {
+        const issued = Date.parse(newest.issued_at);
+        const maxMs = dep.require.max_age_days * 86_400_000;
+        if (!Number.isFinite(issued) || Date.now() - issued > maxMs) {
+            return fail(dep, GXT_ERROR.DEPENDENCY_STALE, `entry older than ${dep.require.max_age_days} days`);
+        }
+    }
+    return { repo: dep.repo, msn_id: dep.msn_id, code: "ok" };
+}
+/** Check every depends_on row and append one aggregated ok ledger entry. */
+export function checkMissionDependencies(root, mission) {
+    const results = mission.dependsOn.map((d) => checkMissionDependency(root, d));
+    const okResults = results.filter((r) => r.code === "ok");
+    if (okResults.length > 0) {
+        appendLedgerIfEnabled(root, "dependency_check", msnIdOrDefault(mission), {
+            repo: okResults.map((r) => r.repo).join(","),
+            msn_id: msnIdOrDefault(mission),
+            result: "ok",
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=deps-resolve.js.map

package/dist/cli/lib/deps/deps-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-resolve.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAkD,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAahD,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,IAAI,CACX,GAA0B,EAC1B,IAA2B,EAC3B,OAAe;IAEf,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,GAA0B;IAC7E,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,oBAAoB,EAAE,GAAG,GAAG,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;SAC/B,OAAO,EAAE;SACT,MAAM,CACL,CAAC,CAAC,EAAwD,EAAE,CAC1D,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CACxD,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,uBAAuB,EAAE,2DAA2D,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,QAAQ,CAAC,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,oBAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,GAAG,CAAC,OAAO,CAAC,YAAY,OAAO,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,OAAsB;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9G,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE;YACvE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/deps/deps-slug.d.ts

@@ -0,0 +1,5 @@
+export declare function depsSlug(repo: string): string;
+export declare function depsRefForRepo(repo: string): string;
+export declare function gitUrlForRepo(repo: string): string;
+export declare function assertSafeFetchRef(ref: string): string;
+//# sourceMappingURL=deps-slug.d.ts.map

package/dist/cli/lib/deps/deps-slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-slug.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-slug.ts"],"names":[],"mappings":"AAyBA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUtD"}

package/dist/cli/lib/deps/deps-slug.js

@@ -0,0 +1,44 @@
+import { GantryUserError } from "../errors.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { canonicalizeRepositoryIdentifier } from "../receipt-attribution.js";
+const SAFE_SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SAFE_DEPS_REF = /^refs\/gxt\/deps\/[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SAFE_SRC_REF = /^refs\/[A-Za-z0-9._/-]+$/;
+const SAFE_HTTPS_GIT = /^https:\/\/[a-z0-9.-]+(?:\/[a-z0-9._-]+)+\.git$/;
+const SAFE_SSH_GIT = /^git@[a-z0-9.-]+:[a-z0-9._/-]+(?:\.git)?$/;
+const SAFE_LOCAL_GIT = /^\/[A-Za-z0-9._/-]+$/;
+function rejectRepo(repo, detail) {
+    throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps: unsafe repository identifier ${JSON.stringify(repo)} (${detail})`, "use host/owner/repo or an https/ssh/local git URL without shell metacharacters", 1);
+}
+function allow(value, re, repo, detail) {
+    if (!re.test(value))
+        rejectRepo(repo, detail);
+    return value;
+}
+export function depsSlug(repo) {
+    const slug = canonicalizeRepositoryIdentifier(repo)
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, "");
+    return allow(slug, SAFE_SLUG, repo, "slug");
+}
+export function depsRefForRepo(repo) {
+    const ref = `refs/gxt/deps/${depsSlug(repo)}`;
+    return allow(ref, SAFE_DEPS_REF, repo, "dest ref");
+}
+export function gitUrlForRepo(repo) {
+    const raw = repo.trim();
+    const url = raw.includes("://") || raw.startsWith("git@") || raw.startsWith("/")
+        ? raw
+        : `https://${canonicalizeRepositoryIdentifier(raw)}.git`;
+    if (SAFE_HTTPS_GIT.test(url) || SAFE_SSH_GIT.test(url) || SAFE_LOCAL_GIT.test(url)) {
+        return url;
+    }
+    rejectRepo(repo, "url");
+}
+export function assertSafeFetchRef(ref) {
+    if (!SAFE_SRC_REF.test(ref) || ref.includes("..")) {
+        throw new GantryUserError(GXT_ERROR.DEPENDENCY_UNFETCHED, `gantry deps: unsafe git ref ${JSON.stringify(ref)}`, "depends_on.ref must be a refs/ path without ..", 1);
+    }
+    return ref;
+}
+//# sourceMappingURL=deps-slug.js.map

package/dist/cli/lib/deps/deps-slug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-slug.js","sourceRoot":"","sources":["../../../../src/cli/lib/deps/deps-slug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAE7E,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,aAAa,GAAG,6CAA6C,CAAC;AACpE,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,cAAc,GAAG,iDAAiD,CAAC;AACzE,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACjE,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,GAAG,EAC/E,gFAAgF,EAChF,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,IAAY,EAAE,MAAc;IACpE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC;SAChD,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,iBAAiB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9C,OAAO,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,GAAG,GACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAClE,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,WAAW,gCAAgC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7D,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EACpD,gDAAgD,EAChD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/lib/doctor-adapter-preflight.d.ts

@@ -0,0 +1,24 @@
+import { type CommandRunner } from "./adapter-preflight-checks.js";
+import type { DoctorSection } from "./doctor-types.js";
+import { type TypedGateAdapterId } from "./types.js";
+export interface AdapterPreflightOptions {
+    forceAdapter?: TypedGateAdapterId;
+    baseline?: boolean;
+    runCommand?: CommandRunner;
+}
+export interface AdapterPreflightSelection {
+    tsc?: true;
+    eslint?: {
+        commands: string[];
+    };
+}
+export declare const SKIPPED_MESSAGE = "adapter preflight: no tsc/eslint missions declared (skipped)";
+interface DeclaredAdapterCommands {
+    tsc: string[];
+    eslint: string[];
+}
+/** Explicit `gate_adapter` values only — never inferred from gate_command (ADR-0041). */
+export declare function discoverDeclaredAdapters(root: string): DeclaredAdapterCommands;
+export declare function runAdapterPreflightDoctorChecks(root: string, opts?: AdapterPreflightOptions): DoctorSection;
+export {};
+//# sourceMappingURL=doctor-adapter-preflight.d.ts.map

package/dist/cli/lib/doctor-adapter-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-adapter-preflight.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/doctor-adapter-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAA8C,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjC;AAED,eAAO,MAAM,eAAe,iEAAiE,CAAC;AAI9F,UAAU,uBAAuB;IAC/B,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAsCD,yFAAyF;AACzF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAgB9E;AAcD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,uBAA4B,GACjC,aAAa,CAsBf"}

package/dist/cli/lib/doctor-adapter-preflight.js

@@ -0,0 +1,98 @@
+import path from "node:path";
+import { defaultCommandRunner } from "./adapter-preflight-checks.js";
+import { runEslintPreflight, runTscPreflight } from "./doctor-preflight/index.js";
+import { pickNextStep } from "./doctor-types.js";
+import { listMissionFiles, parseMissionFile, readActiveMissionPin } from "./missions/parser.js";
+import { DEFAULT_GATE_ADAPTER, isTypedGateAdapterId } from "./types.js";
+export const SKIPPED_MESSAGE = "adapter preflight: no tsc/eslint missions declared (skipped)";
+const YAML_MISSION_EXT = new Set([".yaml", ".yml"]);
+function emptyDeclared() {
+    return { tsc: [], eslint: [] };
+}
+function appendCommand(list, command) {
+    if (command.length > 0 && !list.includes(command))
+        list.push(command);
+}
+function isYamlMissionPath(file) {
+    return YAML_MISSION_EXT.has(path.extname(file).toLowerCase());
+}
+function recordMissionAdapter(root, file, declared) {
+    const abs = path.isAbsolute(file) ? file : path.join(root, file);
+    try {
+        const mission = parseMissionFile(root, abs);
+        const adapter = mission.gate?.adapter ?? DEFAULT_GATE_ADAPTER;
+        if (!isTypedGateAdapterId(adapter))
+            return;
+        const command = mission.gate?.command?.trim() ?? "";
+        switch (adapter) {
+            case "tsc":
+                appendCommand(declared.tsc, command);
+                return;
+            case "eslint":
+                appendCommand(declared.eslint, command);
+                return;
+            default: {
+                const unreachable = adapter;
+                throw new Error(`unknown gate adapter: ${String(unreachable)}`);
+            }
+        }
+    }
+    catch {
+        // Invalid missions are ignored here — other doctor checks own that.
+    }
+}
+/** Explicit `gate_adapter` values only — never inferred from gate_command (ADR-0041). */
+export function discoverDeclaredAdapters(root) {
+    const declared = emptyDeclared();
+    const seen = new Set();
+    for (const file of listMissionFiles(root)) {
+        if (!isYamlMissionPath(file))
+            continue;
+        const abs = path.resolve(file);
+        if (seen.has(abs))
+            continue;
+        seen.add(abs);
+        recordMissionAdapter(root, abs, declared);
+    }
+    const pin = readActiveMissionPin(root);
+    if (pin) {
+        const abs = path.resolve(path.isAbsolute(pin) ? pin : path.join(root, pin));
+        if (!seen.has(abs) && isYamlMissionPath(abs))
+            recordMissionAdapter(root, abs, declared);
+    }
+    return declared;
+}
+function selectAdapters(declared, force) {
+    const selected = {};
+    if (declared.tsc.length > 0 || force === "tsc")
+        selected.tsc = true;
+    if (declared.eslint.length > 0 || force === "eslint") {
+        selected.eslint = { commands: declared.eslint };
+    }
+    return selected;
+}
+export function runAdapterPreflightDoctorChecks(root, opts = {}) {
+    const runCommand = opts.runCommand ?? defaultCommandRunner;
+    const declared = discoverDeclaredAdapters(root);
+    const selected = selectAdapters(declared, opts.forceAdapter);
+    if (selected.tsc === undefined && selected.eslint === undefined) {
+        return { lines: [{ level: "ok", message: SKIPPED_MESSAGE }], nextStep: null };
+    }
+    const lines = [];
+    let nextStep = null;
+    const baseline = opts.baseline === true;
+    if (selected.tsc) {
+        const tsc = runTscPreflight(root, declared.tsc, baseline, runCommand);
+        lines.push(...tsc.lines);
+        if (tsc.nextStep)
+            nextStep = pickNextStep(nextStep, tsc.nextStep);
+    }
+    if (selected.eslint) {
+        const eslint = runEslintPreflight(root, selected.eslint.commands, baseline, runCommand);
+        lines.push(...eslint.lines);
+        if (eslint.nextStep)
+            nextStep = pickNextStep(nextStep, eslint.nextStep);
+    }
+    return { lines, nextStep };
+}
+//# sourceMappingURL=doctor-adapter-preflight.js.map

package/dist/cli/lib/doctor-adapter-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-adapter-preflight.js","sourceRoot":"","sources":["../../../src/cli/lib/doctor-adapter-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAsB,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAA2B,MAAM,YAAY,CAAC;AAajG,MAAM,CAAC,MAAM,eAAe,GAAG,8DAA8D,CAAC;AAE9F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAOpD,SAAS,aAAa;IACpB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,IAAc,EAAE,OAAe;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,IAAY,EAAE,QAAiC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,oBAAoB,CAAC;QAC9D,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,KAAK;gBACR,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACrC,OAAO;YACT,KAAK,QAAQ;gBACX,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO;YACT,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,OAAO,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,QAAiC,EACjC,KAAqC;IAErC,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK;QAAE,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,IAAY,EACZ,OAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC3D,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IACxC,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ;YAAE,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ;YAAE,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/cli/lib/doctor-core.d.ts

@@ -1,5 +1,11 @@
 import type { Manifest } from "./types.js";
 import { type DoctorCheckResult, type DoctorReport } from "./doctor-types.js";
+import { type AdapterPreflightOptions } from "./doctor-adapter-preflight.js";
 export declare function runDoctorChecks(root: string, manifest: Manifest): DoctorCheckResult;
-export declare function collectDoctorReport(root: string, manifest: Manifest, templatesRoot?: string, policyPath?: string): DoctorReport;
+export interface CollectDoctorReportOptions {
+    templatesRoot?: string;
+    policyPath?: string;
+    adapterPreflight?: AdapterPreflightOptions;
+}
+export declare function collectDoctorReport(root: string, manifest: Manifest, options?: CollectDoctorReportOptions): DoctorReport;
 //# sourceMappingURL=doctor-core.d.ts.map

package/dist/cli/lib/doctor-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-core.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/doctor-core.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAGL,KAAK,iBAAiB,EAEtB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AA6I3B,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,iBAAiB,CA+BnF;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,aAAa,CAAC,EAAE,MAAM,EACtB,UAAU,CAAC,EAAE,MAAM,GAClB,YAAY,CAyCd"}
+{"version":3,"file":"doctor-core.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/doctor-core.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAGL,KAAK,iBAAiB,EAEtB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAgB3B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,+BAA+B,CAAC;AAmJvC,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,iBAAiB,CAgCnF;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,0BAA+B,GACvC,YAAY,CAoDd"}