@jeger-ai/opengantry 3.2.6 → 3.4.0

package/README.md

@@ -79,6 +79,7 @@ Without governance glue, agent-assisted repos tend toward:
 | Architecture drift | `TARGET_ARCHITECTURE.yaml` + `gantry arch check` / `gantry perimeter check` |
 | Opaque failures for retry edges | `findings[]` JSON envelope (`offending_file`, line, hint); no terminal log parsing |
 | One-off policy per repo | `gantry init` scaffolds the same GXT substrate everywhere |
+| No org-wide floor or audit chain | `gantry policy` (tighten-only bundle), `gantry ledger` (`refs/gxt/ledger`), `depends_on` (ADR-0042–0044) |
 
 ---
 
@@ -193,8 +194,9 @@ Violations carry `file` and `line` for the failure envelope.
 ### 5. Mission + verify
 
 ```bash
-gantry legislate "add feature X" --msn MSN-0042 --skill-key gantry
-# Planner commits [MSN-0042] mission YAML
+gantry legislate --from-intent "add feature X" --msn MSN-0042 --skill-key gantry
+# or: gantry contract propose "add feature X" --skill-key gantry
+# Planner commits [MSN-0042] mission YAML (seals contract + contract_sha256)
 eval "$(gantry runtime env --mission .gitagent/missions/MSN-0042.yaml)"
 # ... do work, append trace to EXECUTOR_LOG.md ...
 gantry verify --mission .gitagent/missions/MSN-0042.yaml --json
@@ -212,6 +214,14 @@ On failure, external agents ingest `findings[]`:
 }
 ```
 
+**Mission contracts (v3.4.0):** Planner-sealed inline `contract` + `contract_sha256` on the mission YAML (tighten-only TMVC / forbidden / import cage). `gantry contract propose|check|show`, `gantry legislate --from-intent`, MCP `gxt_propose_contract`. Verify runs a `contract` phase after git-proof; `gantry runtime env` exports `GXT_ALLOWED_IMPORTS` / `GXT_BANNED_IMPORTS`; `runtime exec` reports `contract_violation` ([ADR-0045](.gitagent/out-of-scope/ADR-0045-mission-contracts.md)).
+
+**Org control plane (v3.3.0):** pin a signed org policy repo with `.gitagent/foreman/POLICY.pointer.json` and `gantry policy pull` (doctor/verify stay offline). Enable `ledger.mode: local` to append digest-only entries to `refs/gxt/ledger` (`gantry ledger verify` / `export --format soc2-pack`). Cross-repo gates use mission `depends_on[]` plus `gantry deps fetch` before verify ([ADR-0042](.gitagent/out-of-scope/ADR-0042-org-policy-bundle.md), [ADR-0043](.gitagent/out-of-scope/ADR-0043-compliance-ledger-git-ref.md), [ADR-0044](.gitagent/out-of-scope/ADR-0044-cross-repo-mission-dependencies.md)). Receipt schema stays 0.2.0.
+
+**Kernel (v3.3.0 breaking):** `import { verifyMission } from "@jeger-ai/opengantry/kernel"` now returns a Promise — always `await`. `verifyMissionAsync` is a deprecated alias (`DeprecationWarning` `GXT_DEP_VERIFY_MISSION_ASYNC`, removed in 4.0). CLI `--json-out` is unchanged.
+
+**Tool-native findings:** set `gate_adapter: eslint` (gate must run `eslint --format json`, e.g. `npm run lint:json`) or `gate_adapter: tsc` (plain `tsc` diagnostics, e.g. `npx tsc --noEmit --pretty false`) in the mission YAML and `gantry verify` maps each lint or type error to its own finding with `offending_file`, `line`, columns, and `rule_id`. Routing is explicit — never inferred from the command string (ADR-0041). Do not concatenate `tsc` and `eslint` in one `gate_command`. The default `generic` adapter keeps exit-code plus `gate_success_substring` semantics.
+
 **No terminal vomit:** agents do not scrape unstructured stderr or guess which line failed. The `findings[]` envelope is a **predictable, structured audit API** built for autonomous retry edges: each item names the gate, `offending_file`, line, severity, and a resolution hint. Use `gantry context-feed --json` for compact model re-entry; read `gate_log_path` on disk for full stack traces. Humans can run **`gantry report`** — a localhost overview of repo metrics, mission history, and the last verify (drill-down at `/verify`). Same payload on `--json`, SARIF, and MCP `gxt_verify`.
 
 ### 6. Content governance example

package/dist/cli/commands/contract.d.ts

@@ -0,0 +1,21 @@
+export interface ContractCheckCliOptions {
+    mission?: string;
+    json?: boolean;
+    /** Restrict the import scan to these repo-relative files. */
+    files?: string[];
+}
+/** Read-only: resolve the effective cage for a mission and scan import sites (ADR-0022 containment). */
+export declare function runContractCheck(options: ContractCheckCliOptions): void;
+export interface ContractProposeCliOptions {
+    intent: string;
+    skillKey?: string;
+    paths?: string[];
+    json?: boolean;
+}
+export declare function runContractPropose(options: ContractProposeCliOptions): void;
+export interface ContractShowCliOptions {
+    mission?: string;
+    json?: boolean;
+}
+export declare function runContractShow(options: ContractShowCliOptions): void;
+//# sourceMappingURL=contract.d.ts.map

package/dist/cli/commands/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/contract.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AA4BD,wGAAwG;AACxG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAgCvE;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAkC3E;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAcrE"}

package/dist/cli/commands/contract.js

@@ -0,0 +1,113 @@
+import { setExitCode } from "../lib/cli-io.js";
+import { runUserCommand } from "../lib/command-boundary.js";
+import { contractViolationCode, formatContractViolation, scanContractImports } from "../lib/contract/contract-scan.js";
+import { resolveEffectiveScope, resolveEffectiveScopeForMission } from "../lib/contract/effective-scope.js";
+import { GantryUserError } from "../lib/errors.js";
+import { parseMissionFile, resolvePinnedMission } from "../lib/missions/parser.js";
+import { contractSha256, normalizeContract } from "../lib/contract/contract-hash.js";
+import { formatContractBlock, formatEffectiveScope } from "../lib/contract/format.js";
+import { proposeContract } from "../lib/contract/propose.js";
+import { resolveSkillKeyForLegislation } from "../lib/legislate.js";
+import { loadWorkspace } from "../lib/workspace.js";
+function scopeJson(scope) {
+    return {
+        tmvc_roots: scope.tmvcRoots,
+        forbidden_zones: scope.forbiddenZones,
+        allowed_imports: scope.allowedImports,
+        banned_imports: scope.bannedImports,
+        allow_dynamic_specifiers: scope.allowDynamicSpecifiers,
+        strict_relative_imports: scope.strictRelativeImports,
+        has_contract: scope.hasContract,
+    };
+}
+function humanLines(missionRel, scope, violations) {
+    const lines = [
+        `contract check: ${missionRel}${scope.hasContract ? "" : " (no contract block — effective scope from skill/policy)"}`,
+        formatEffectiveScope(scope),
+    ];
+    if (violations.length === 0) {
+        lines.push("contract check: OK — no import-site violations");
+        return lines;
+    }
+    lines.push(`contract check: ${String(violations.length)} violation(s):`);
+    for (const v of violations)
+        lines.push(`  ${formatContractViolation(v)}`);
+    return lines;
+}
+/** Read-only: resolve the effective cage for a mission and scan import sites (ADR-0022 containment). */
+export function runContractCheck(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const missionRel = options.mission?.trim() || resolvePinnedMission(workspace.root);
+        if (!missionRel) {
+            throw new GantryUserError("MISSION_REQUIRED", "gantry contract check: pass --mission <path> or pin a mission first", "gantry pin --mission .gitagent/missions/<file>.yaml", 2);
+        }
+        const mission = parseMissionFile(workspace.root, missionRel);
+        const scope = resolveEffectiveScopeForMission(workspace.root, workspace.manifest, mission);
+        const violations = scanContractImports(workspace.root, scope, options.files && options.files.length > 0 ? { files: options.files } : {});
+        if (violations.length > 0)
+            setExitCode(1);
+        return {
+            json: {
+                ok: violations.length === 0,
+                mission: missionRel,
+                msn_id: mission.msnId,
+                contract_sha256: mission.contractSha256,
+                scope: scopeJson(scope),
+                violations: violations.map((v) => ({ ...v, code: contractViolationCode(v.kind) })),
+            },
+            human: humanLines(missionRel, scope, violations),
+        };
+    });
+}
+export function runContractPropose(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const resolved = resolveSkillKeyForLegislation({
+            root: workspace.root,
+            manifest: workspace.manifest,
+            intent: options.intent,
+            skillKey: options.skillKey,
+        });
+        if (!resolved.ok) {
+            throw new GantryUserError("INVALID_ARGUMENT", `contract propose: ${resolved.reason}`, undefined, 2);
+        }
+        const proposed = proposeContract({
+            root: workspace.root,
+            manifest: workspace.manifest,
+            intent: options.intent,
+            skillKey: resolved.skillKey,
+            paths: options.paths,
+        });
+        const contract = normalizeContract(proposed.contract);
+        resolveEffectiveScope({ manifest: workspace.manifest, skillKey: resolved.skillKey, contract });
+        return {
+            json: {
+                ok: true,
+                skill_key: resolved.skillKey,
+                contract,
+                contract_sha256: contractSha256(contract),
+                gate: proposed.gate,
+                rationale: proposed.rationale,
+                block: formatContractBlock(contract, proposed.gate),
+            },
+            human: [formatContractBlock(contract, proposed.gate), "", "Rationale:", ...proposed.rationale.map((r) => `  - ${r}`)],
+        };
+    });
+}
+export function runContractShow(options) {
+    runUserCommand({ json: options.json }, () => {
+        const workspace = loadWorkspace();
+        const missionRel = options.mission?.trim() || resolvePinnedMission(workspace.root);
+        if (!missionRel) {
+            throw new GantryUserError("MISSION_REQUIRED", "gantry contract show: pass --mission <path> or pin a mission first", undefined, 2);
+        }
+        const mission = parseMissionFile(workspace.root, missionRel);
+        const contract = mission.contract ?? {};
+        return {
+            json: { ok: true, mission: missionRel, msn_id: mission.msnId, contract, contract_sha256: mission.contractSha256 },
+            human: formatContractBlock(contract, mission.gate ? { command: mission.gate.command, successSubstring: mission.gate.successSubstring } : null),
+        };
+    });
+}
+//# sourceMappingURL=contract.js.map

package/dist/cli/commands/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/cli/commands/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAA4B,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvH,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASpD,SAAS,SAAS,CAAC,KAAqB;IACtC,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,wBAAwB,EAAE,KAAK,CAAC,sBAAsB;QACtD,uBAAuB,EAAE,KAAK,CAAC,qBAAqB;QACpD,YAAY,EAAE,KAAK,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAqB,EAAE,UAA8C;IAC3G,MAAM,KAAK,GAAG;QACZ,mBAAmB,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0DAA0D,EAAE;QACrH,oBAAoB,CAAC,KAAK,CAAC;KAC5B,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,qEAAqE,EACrE,qDAAqD,EACrD,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,mBAAmB,CACpC,SAAS,CAAC,IAAI,EACd,KAAK,EACL,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;gBAC3B,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,eAAe,EAAE,OAAO,CAAC,cAAc;gBACvC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;gBACvB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACnF;YACD,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,6BAA6B,CAAC;YAC7C,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,qBAAqB,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/F,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,QAAQ;gBACR,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC;gBACzC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;aACpD;YACD,KAAK,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACtH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAwB,EAAE;QAC/D,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,oEAAoE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,cAAc,EAAE;YACjH,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC/I,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/deps.d.ts

@@ -0,0 +1,18 @@
+import { type CommandPresentation } from "../lib/command-boundary.js";
+import { type DependencyCheckResult } from "../lib/deps/deps-resolve.js";
+export declare function reportDependencyResults(results: DependencyCheckResult[], opts: {
+    headline: string;
+}): CommandPresentation;
+export declare function runDepsFetch(opts: {
+    mission?: string;
+    json?: boolean;
+}): void;
+export declare function runDepsCheck(opts: {
+    mission?: string;
+    json?: boolean;
+}): void;
+export declare function runReleaseCheck(opts: {
+    tag?: string;
+    json?: boolean;
+}): void;
+//# sourceMappingURL=deps.d.ts.map

package/dist/cli/commands/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/deps.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKtF,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AASrC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,qBAAqB,EAAE,EAChC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzB,mBAAmB,CAWrB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAO7E;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAQ7E;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAgB5E"}

package/dist/cli/commands/deps.js

@@ -0,0 +1,63 @@
+import fs from "node:fs";
+import path from "node:path";
+import { setExitCode } from "../lib/cli-io.js";
+import { runUserCommand } from "../lib/command-boundary.js";
+import { loadWorkspace } from "../lib/workspace.js";
+import { parseMissionFile } from "../lib/missions/parser.js";
+import { resolveMissionArg } from "../lib/mission-arg.js";
+import { fetchMissionDependency } from "../lib/deps/deps-fetch.js";
+import { checkMissionDependencies, } from "../lib/deps/deps-resolve.js";
+import { gitRun } from "../lib/git.js";
+function loadMissionDeps(root, missionArg) {
+    const resolved = resolveMissionArg(root, missionArg);
+    const mission = parseMissionFile(root, resolved.missionRel);
+    return { mission, resolved };
+}
+export function reportDependencyResults(results, opts) {
+    const failed = results.filter((r) => r.code !== "ok");
+    if (failed.length > 0)
+        setExitCode(1);
+    const human = results.length === 0
+        ? `${opts.headline}: 0 dependency check(s)`
+        : results.map((r) => `${opts.headline}: ${r.repo} ${r.msn_id} ${r.code}`);
+    return {
+        json: { status: failed.length === 0 ? "ok" : "failed", results },
+        human,
+    };
+}
+export function runDepsFetch(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const { mission } = loadMissionDeps(root, opts.mission);
+        const refs = mission.dependsOn.map((d) => fetchMissionDependency(root, d));
+        return { json: { status: "ok", refs }, human: `gantry deps fetch: ${refs.length} ref(s)` };
+    });
+}
+export function runDepsCheck(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const { mission } = loadMissionDeps(root, opts.mission);
+        return reportDependencyResults(checkMissionDependencies(root, mission), {
+            headline: "gantry deps check",
+        });
+    });
+}
+export function runReleaseCheck(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const tag = opts.tag?.trim();
+        const range = tag ? `${tag}^..HEAD` : "HEAD";
+        const diff = gitRun(root, ["diff", "--name-only", range, "--", ".gitagent/missions/"]);
+        const files = diff.stdout.split("\n").map((s) => s.trim()).filter((s) => s.endsWith(".yaml") || s.endsWith(".yml"));
+        const results = [];
+        for (const rel of files) {
+            const abs = path.join(root, rel);
+            if (!fs.existsSync(abs))
+                continue;
+            const mission = parseMissionFile(root, rel);
+            results.push(...checkMissionDependencies(root, mission));
+        }
+        return reportDependencyResults(results, { headline: "gantry release check" });
+    });
+}
+//# sourceMappingURL=deps.js.map

package/dist/cli/commands/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../../src/cli/commands/deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAA4B,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,wBAAwB,GAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,SAAS,eAAe,CAAC,IAAY,EAAE,UAAmB;IACxD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAgC,EAChC,IAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,yBAAyB;QAC3C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE;QAChE,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAA0C;IACrE,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAA0C;IACrE,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,uBAAuB,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YACtE,QAAQ,EAAE,mBAAmB;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAsC;IACpE,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpH,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,uBAAuB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/doctor.d.ts

@@ -1,14 +1,11 @@
 import { type OutputAudience } from "../lib/audience-output.js";
-import { type DoctorLine } from "../lib/doctor-types.js";
-export interface DoctorReport {
-    lines: DoctorLine[];
-    next_step: string | null;
-    exit_code: number;
-}
+import type { TypedGateAdapterId } from "../lib/types.js";
 export interface DoctorOptions {
     json?: boolean;
     audience?: OutputAudience;
     policy?: string;
+    gateAdapter?: TypedGateAdapterId;
+    adapterBaseline?: boolean;
 }
 export declare function runDoctor(options?: DoctorOptions): void;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/cli/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAG7E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA+BD,wBAAgB,SAAS,CAAC,OAAO,GAAE,aAAkB,GAAG,IAAI,CAe3D"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AA+BD,wBAAgB,SAAS,CAAC,OAAO,GAAE,aAAkB,GAAG,IAAI,CAsB3D"}

package/dist/cli/commands/doctor.js

@@ -29,8 +29,15 @@ function emitDoctor(lines, nextStep, hasFail, json, audience) {
 }
 export function runDoctor(options = {}) {
     try {
+        const adapterPreflight = {
+            ...(options.gateAdapter !== undefined ? { forceAdapter: options.gateAdapter } : {}),
+            ...(options.adapterBaseline === true ? { baseline: true } : {}),
+        };
         const { root, manifest } = loadWorkspace();
-        const report = collectDoctorReport(root, manifest, undefined, options.policy);
+        const report = collectDoctorReport(root, manifest, {
+            policyPath: options.policy,
+            adapterPreflight,
+        });
         emitDoctor(report.lines, report.nextStep, doctorLinesHasFail(report.lines), options.json, options.audience);
     }
     catch (e) {

package/dist/cli/commands/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAE7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAmB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAcpD,SAAS,UAAU,CACjB,KAAmB,EACnB,QAAuB,EACvB,OAAgB,EAChB,IAAyB,EACzB,QAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,WAAW,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,4BAA4B,CACxC,QAAQ,EACR,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3D,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAyB,EAAE;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9E,UAAU,CACR,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,EACf,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAChC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAE7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAmB,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUpD,SAAS,UAAU,CACjB,KAAmB,EACnB,QAAuB,EACvB,OAAgB,EAChB,IAAyB,EACzB,QAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,WAAW,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,4BAA4B,CACxC,QAAQ,EACR,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3D,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAyB,EAAE;IACnD,IAAI,CAAC;QACH,MAAM,gBAAgB,GAA4B;YAChD,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE;YACjD,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,gBAAgB;SACjB,CAAC,CAAC;QACH,UAAU,CACR,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,EACf,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAChC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/cli/commands/interrogate.js

@@ -22,7 +22,7 @@ export function runInterrogateCommand(options) {
             throw new GantryUserError("INVALID_ARGUMENT", "interrogate: intent is required", undefined, 2);
         }
         const skillKey = resolveManifestSkillKey(manifest, options.skillKey?.trim() || "gantry");
-        const { gateCommand, gateSuccessSubstring } = resolveLegislateGateOptions({
+        const gate = resolveLegislateGateOptions({
             gateCommand: options.gateCommand,
             gateSuccessSubstring: options.gateSuccessSubstring,
         });
@@ -32,8 +32,8 @@ export function runInterrogateCommand(options) {
             manifest,
             intent,
             skillKey,
-            gateCommand,
-            gateSuccessSubstring,
+            gateCommand: gate.command,
+            gateSuccessSubstring: gate.successSubstring,
             paths: options.paths ?? [],
             interrogation,
         });

package/dist/cli/commands/interrogate.js.map

@@ -1 +1 @@
-{"version":3,"file":"interrogate.js","sourceRoot":"","sources":["../../../src/cli/commands/interrogate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,SAAS,CAAC;AAazB,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,iDAAiD,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,MAA4B,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA8B;IAClE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC;QACzF,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,GAAG,2BAA2B,CAAC;YACxE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,IAAI;YACJ,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,WAAW;YACX,oBAAoB;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE;gBACjB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE;gBAC3C,CAAC,CAAC,MAAM,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,4CAA4C,CAAC,CAAC;YACtD,OAAO,CAAC,yBAAyB,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,sBAAsB,MAAM,CAAC,eAAe,aAAa,CAAC,CAAC;QACnE,OAAO,CAAC,eAAe,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,aAAa,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,eAAe,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,cAAc,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"interrogate.js","sourceRoot":"","sources":["../../../src/cli/commands/interrogate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,SAAS,CAAC;AAazB,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,iDAAiD,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,MAA4B,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA8B;IAClE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,2BAA2B,CAAC;YACvC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,IAAI;YACJ,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;YAC3C,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE;gBACjB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE;gBAC3C,CAAC,CAAC,MAAM,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,4CAA4C,CAAC,CAAC;YACtD,OAAO,CAAC,yBAAyB,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,sBAAsB,MAAM,CAAC,eAAe,aAAa,CAAC,CAAC;QACnE,OAAO,CAAC,eAAe,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,aAAa,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,eAAe,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,cAAc,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/ledger.d.ts

@@ -0,0 +1,24 @@
+export declare function runLedgerAppend(opts: {
+    fromEnvelope?: string;
+    mission?: string;
+    json?: boolean;
+}): void;
+export declare function runLedgerVerify(opts: {
+    json?: boolean;
+    requireSignatures?: boolean;
+}): void;
+export declare function runLedgerList(opts: {
+    json?: boolean;
+}): void;
+export declare function runLedgerExport(opts: {
+    format?: string;
+    out?: string;
+    json?: boolean;
+}): void;
+export declare function runLedgerPush(opts: {
+    json?: boolean;
+}): void;
+export declare function runLedgerFetch(opts: {
+    json?: boolean;
+}): void;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/cli/commands/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/ledger.ts"],"names":[],"mappings":"AAaA,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,IAAI,CAqBP;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAc3F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAS5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAO7F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAS5D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAS7D"}

package/dist/cli/commands/ledger.js

@@ -0,0 +1,88 @@
+import fs from "node:fs";
+import { loadWorkspace } from "../lib/workspace.js";
+import { LEDGER_REF } from "../lib/constants.js";
+import { gitRun } from "../lib/git.js";
+import { appendLedgerEntry } from "../lib/ledger/ledger-append.js";
+import { sha256Utf8 } from "../lib/ledger/ledger-entry.js";
+import { exportLedgerJson, exportSoc2Pack } from "../lib/ledger/ledger-export.js";
+import { verifyLedgerChain } from "../lib/ledger/ledger-chain.js";
+import { parseMissionFile } from "../lib/missions/parser.js";
+import { resolveMissionArg } from "../lib/mission-arg.js";
+import { msnIdOrDefault } from "../lib/types.js";
+import { runUserCommand } from "../lib/command-boundary.js";
+export function runLedgerAppend(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        let msnId = msnIdOrDefault(undefined);
+        let payload = { source: "manual", verify_status: "passed", signed: false };
+        if (opts.mission) {
+            const resolved = resolveMissionArg(root, opts.mission);
+            const mission = parseMissionFile(root, resolved.missionRel);
+            msnId = msnIdOrDefault(mission);
+        }
+        if (opts.fromEnvelope) {
+            const text = fs.readFileSync(opts.fromEnvelope, "utf8");
+            const raw = JSON.parse(text);
+            payload = { envelope_sha: sha256Utf8(text), has_payload: Boolean(raw.payload_b64) };
+        }
+        const entry = appendLedgerEntry(root, { kind: "receipt", msn_id: msnId, payload });
+        return {
+            json: { status: "ok", entry },
+            human: `gantry ledger append: ${entry.entry_kind} ${entry.msn_id}`,
+        };
+    });
+}
+export function runLedgerVerify(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const report = verifyLedgerChain(root, LEDGER_REF, {
+            requireSignatures: opts.requireSignatures === true,
+        });
+        return {
+            json: report,
+            human: [
+                `gantry ledger verify: ${report.ok ? "ok" : "FAIL"} ${report.count} entries`,
+                ...report.errors,
+            ],
+        };
+    });
+}
+export function runLedgerList(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const entries = verifyLedgerChain(root).entries;
+        return {
+            json: { status: "ok", entries },
+            human: entries.map((e) => `${e.issued_at} ${e.entry_kind} ${e.msn_id}`),
+        };
+    });
+}
+export function runLedgerExport(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const out = opts.out?.trim() || ".gitagent/history/ledger-export";
+        const dest = opts.format === "soc2-pack" ? exportSoc2Pack(root, out) : exportLedgerJson(root, out);
+        return { json: { status: "ok", out: dest }, human: `gantry ledger export: ${dest}` };
+    });
+}
+export function runLedgerPush(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const r = gitRun(root, ["push", "origin", LEDGER_REF]);
+        return {
+            json: { status: r.ok ? "ok" : "error", stderr: r.stderr },
+            human: r.ok ? `gantry ledger push: ${LEDGER_REF}` : `gantry ledger push: ${r.stderr}`,
+        };
+    });
+}
+export function runLedgerFetch(opts) {
+    runUserCommand({ json: opts.json }, () => {
+        const { root } = loadWorkspace();
+        const r = gitRun(root, ["fetch", "origin", `${LEDGER_REF}:${LEDGER_REF}`]);
+        return {
+            json: { status: r.ok ? "ok" : "error", stderr: r.stderr },
+            human: r.ok ? `gantry ledger fetch: ${LEDGER_REF}` : `gantry ledger fetch: ${r.stderr}`,
+        };
+    });
+}
+//# sourceMappingURL=ledger.js.map

package/dist/cli/commands/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/cli/commands/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,UAAU,EAA6B,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,OAAO,GAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACjG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5D,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;YACzD,OAAO,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;YAC7B,KAAK,EAAE,yBAAyB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE;SACnE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAqD;IACnF,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE;YACjD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,KAAK,IAAI;SACnD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,yBAAyB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,UAAU;gBAC5E,GAAG,MAAM,CAAC,MAAM;aACjB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QAChD,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/B,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAuD;IACrF,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,iCAAiC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YACzD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,MAAM,EAAE;SACtF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YACzD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE;SACxF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/mission.d.ts

@@ -1,3 +1,9 @@
 export declare function runMissionValidate(file: string): void;
 export declare function runMissionSnapshot(file: string, msnOverride?: string): void;
+export interface MissionChangedOptions {
+    baseRef?: string;
+    headRef?: string;
+    json?: boolean;
+}
+export declare function runMissionChanged(options?: MissionChangedOptions): void;
 //# sourceMappingURL=mission.d.ts.map

package/dist/cli/commands/mission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mission.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/mission.ts"],"names":[],"mappings":"AAOA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAa3E"}
+{"version":3,"file":"mission.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/mission.ts"],"names":[],"mappings":"AASA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAa3E;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,qBAA0B,GAAG,IAAI,CA6C3E"}

package/dist/cli/commands/mission.js

@@ -1,7 +1,9 @@
 import { CLI_NAME } from "../lib/constants.js";
-import { formatRepoRelative, logError, logInfo, setExitCode } from "../lib/cli-io.js";
-import { isValidMsnId } from "../lib/missions/parser.js";
-import { assertMissionGatePresent, parseMissionFile } from "../lib/missions/parser.js";
+import { formatRepoRelative, logError, logInfo, logWarn, setExitCode } from "../lib/cli-io.js";
+import { runUserCommand } from "../lib/command-boundary.js";
+import { GantryUserError } from "../lib/errors.js";
+import { discoverChangedMissions } from "../lib/mission-changed.js";
+import { assertMissionGatePresent, isValidMsnId, parseMissionFile } from "../lib/missions/parser.js";
 import { captureStartState, writeSnapshot } from "../lib/start-snapshot.js";
 import { loadWorkspace } from "../lib/workspace.js";
 export function runMissionValidate(file) {
@@ -26,4 +28,42 @@ export function runMissionSnapshot(file, msnOverride) {
     const outputPath = writeSnapshot(root, snapshot, msn);
     logInfo(`${CLI_NAME} mission snapshot: wrote ${formatRepoRelative(root, outputPath)}`);
 }
+export function runMissionChanged(options = {}) {
+    runUserCommand({ json: options.json }, () => {
+        const { root } = loadWorkspace();
+        const result = discoverChangedMissions(root, {
+            baseRef: options.baseRef,
+            headRef: options.headRef,
+        });
+        switch (result.kind) {
+            case "ok": {
+                if (result.companionCount > 0 && result.purityMsn) {
+                    logWarn(`${CLI_NAME} mission changed: release-squash — listing [${result.purityMsn}] only (${String(result.companionCount)} companion mission file(s) in diff)`);
+                }
+                return {
+                    json: {
+                        status: "ok",
+                        missions: result.missions,
+                        unique_msns: result.uniqueMsns,
+                        purity_msn: result.purityMsn,
+                        base_sha: result.baseSha,
+                        head_sha: result.headSha,
+                    },
+                    human: result.missions,
+                };
+            }
+            case "contamination": {
+                const listed = result.uniqueMsns.map((id) => `    [${id}]`).join("\n");
+                throw new GantryUserError("INVALID_ARGUMENT", `${CLI_NAME} mission changed FAILED: mission contamination detected\n  This PR contains commits from multiple missions:\n${listed}\n  OpenGantry requires strict blast-radius isolation. Rebase this branch onto the integration branch (e.g. origin/main).`);
+            }
+            case "purity_mismatch": {
+                throw new GantryUserError("INVALID_ARGUMENT", `${CLI_NAME} mission changed FAILED: no changed mission file matches commit MSN tag [${result.purityMsn}]`);
+            }
+            default: {
+                const _never = result;
+                throw new Error(`unexpected changed-missions kind: ${JSON.stringify(_never)}`);
+            }
+        }
+    });
+}
 //# sourceMappingURL=mission.js.map

package/dist/cli/commands/mission.js.map

@@ -1 +1 @@
-{"version":3,"file":"mission.js","sourceRoot":"","sources":["../../../src/cli/commands/mission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,QAAQ,0BAA0B,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAAoB;IACnE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QACrE,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,QAAQ,4BAA4B,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"mission.js","sourceRoot":"","sources":["../../../src/cli/commands/mission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,QAAQ,0BAA0B,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAAoB;IACnE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QACrE,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,QAAQ,4BAA4B,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,UAAiC,EAAE;IACnE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,CAAC,CAAC;gBACV,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBAClD,OAAO,CACL,GAAG,QAAQ,+CAA+C,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,qCAAqC,CACxJ,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,WAAW,EAAE,MAAM,CAAC,UAAU;wBAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;wBAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO;wBACxB,QAAQ,EAAE,MAAM,CAAC,OAAO;qBACzB;oBACD,KAAK,EAAE,MAAM,CAAC,QAAQ;iBACvB,CAAC;YACJ,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,GAAG,QAAQ,gHAAgH,MAAM,2HAA2H,CAC7P,CAAC;YACJ,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,GAAG,QAAQ,4EAA4E,MAAM,CAAC,SAAS,GAAG,CAC3G,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,MAAM,GAAU,MAAM,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/perimeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/perimeter.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAWD,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAgC5D"}
+{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/perimeter.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAWD,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAmC5D"}

package/dist/cli/commands/perimeter.js

@@ -2,6 +2,7 @@ import { checkPerimeter } from "../lib/perimeter.js";
 import { logError, logInfo, logWarn, setExitCode } from "../lib/cli-io.js";
 import { runAtCommandBoundary } from "../lib/command-boundary.js";
 import { gitRevParse } from "../lib/git.js";
+import { ensurePlannerAllowedSignersFile } from "../lib/planner-signature.js";
 import { loadWorkspace } from "../lib/workspace.js";
 function resolveBaseRef(root, baseRef) {
     if (baseRef?.trim())
@@ -18,6 +19,9 @@ export function runPerimeter(options) {
     runAtCommandBoundary(1, () => {
         const { root, manifest } = loadWorkspace();
         const baseRef = resolveBaseRef(root, options.baseRef);
+        if (options.ci === true) {
+            ensurePlannerAllowedSignersFile(root);
+        }
         const result = checkPerimeter(root, manifest, { baseRef, ci: options.ci === true });
         if (options.json) {
             process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);