@jeger-ai/opengantry 3.2.6 → 3.4.0

package/dist/cli/lib/policy/policy-resolve.js

@@ -0,0 +1,194 @@
+import fs from "node:fs";
+import path from "node:path";
+import { REL_POLICY_POINTER } from "../constants.js";
+import { GantryUserError, isGantryUserError } from "../errors.js";
+import { loadGxtConfig, resolveFlightTelemetryBodyMode, resolveLedgerMode, resolveLedgerSignatureTier, resolvePlannerSignatureTier, resolveReceiptSignatureTier, } from "../gxt-config.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { loadCachedBundle } from "./policy-bundle.js";
+import { POLICY_POINTER_SCHEMA_VERSION, } from "./policy-types.js";
+const SIGNATURE_RANK = { off: 0, warn: 1, require: 2 };
+const LEDGER_MODE_RANK = { off: 0, local: 1 };
+const BODY_MODE_RANK = { full: 0, hash_only: 1 };
+export const TIER_RANK = {
+    "Tier-1": 1,
+    "Tier-2": 2,
+    "Tier-3": 3,
+};
+export function trustTierRank(tier) {
+    if (tier === "Tier-1" || tier === "Tier-2" || tier === "Tier-3")
+        return TIER_RANK[tier];
+    return 0;
+}
+function rankRule(input) {
+    return {
+        label: input.label,
+        violation(floor, local) {
+            const need = input.pick(floor);
+            if (need === undefined && input.skipIfUnset === true)
+                return undefined;
+            const needVal = need ?? input.fallback;
+            const have = input.pick(local) ?? input.fallback;
+            if (input.rank[needVal] > input.rank[have])
+                return input.message(needVal, have);
+            return undefined;
+        },
+    };
+}
+function flagRule(label, pick) {
+    return {
+        label,
+        violation(floor, local) {
+            if (pick(floor) && !pick(local))
+                return `${label} floor is true`;
+            return undefined;
+        },
+    };
+}
+/** Tighten-only checks: org floor vs local config. Only `config_floor` is enforced in 3.3.0. */
+export const FLOOR_RULES = [
+    rankRule({
+        label: "planner_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.planner_signature,
+        message: (need, have) => `planner_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "receipt_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.receipt_signature,
+        message: (need, have) => `receipt_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "ledger_signature",
+        rank: SIGNATURE_RANK,
+        fallback: "off",
+        skipIfUnset: true,
+        pick: (c) => c.ledger_signature,
+        message: (need, have) => `ledger_signature floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "ledger.mode",
+        rank: LEDGER_MODE_RANK,
+        fallback: "off",
+        pick: (c) => c.ledger_mode,
+        message: (need, have) => `ledger.mode floor ${need} > local ${have}`,
+    }),
+    rankRule({
+        label: "flight_telemetry.body_mode",
+        rank: BODY_MODE_RANK,
+        fallback: "full",
+        pick: (c) => c.flight_telemetry?.body_mode,
+        message: (need) => `flight_telemetry.body_mode floor ${need} > local`,
+    }),
+    flagRule("break_glass.require_ledger_entry", (c) => c.break_glass?.require_ledger_entry),
+];
+export function configFloorViolations(floor, local) {
+    const out = [];
+    for (const rule of FLOOR_RULES) {
+        const msg = rule.violation(floor, local);
+        if (msg)
+            out.push(msg);
+    }
+    return out;
+}
+export function policyPointerPath(root) {
+    return path.join(root, REL_POLICY_POINTER);
+}
+function isPinnedPointer(pointer) {
+    return pointer.source.url.trim().length > 0 && /^[0-9a-f]{40,64}$/i.test(pointer.pinned_commit.trim());
+}
+export function loadPolicyPointer(root) {
+    const abs = policyPointerPath(root);
+    if (!fs.existsSync(abs))
+        return { kind: "absent" };
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(abs, "utf8"));
+    }
+    catch {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} is not valid JSON`, "fix POLICY.pointer.json or remove it", 1);
+    }
+    if (typeof parsed !== "object" || parsed === null) {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} must be an object`, undefined, 1);
+    }
+    const rec = parsed;
+    const source = rec.source;
+    if (rec.schema_version !== POLICY_POINTER_SCHEMA_VERSION) {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} schema_version must be ${POLICY_POINTER_SCHEMA_VERSION}`, undefined, 1);
+    }
+    if (!source || source.kind !== "git" || typeof source.url !== "string" || typeof source.ref !== "string") {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} source must be {kind:git,url,ref}`, undefined, 1);
+    }
+    if (typeof rec.bundle_path !== "string" || typeof rec.pinned_commit !== "string" || typeof rec.bundle_sha256 !== "string") {
+        throw new GantryUserError(GXT_ERROR.POLICY_DRIFT, `${REL_POLICY_POINTER} missing bundle_path, pinned_commit, or bundle_sha256`, undefined, 1);
+    }
+    const pointer = {
+        schema_version: POLICY_POINTER_SCHEMA_VERSION,
+        source: { kind: "git", url: source.url, ref: source.ref },
+        bundle_path: rec.bundle_path,
+        pinned_commit: rec.pinned_commit,
+        bundle_sha256: rec.bundle_sha256,
+    };
+    if (isPinnedPointer(pointer))
+        return { kind: "pinned", pointer };
+    return { kind: "scaffold", pointer };
+}
+export function localConfigFloor(root) {
+    const config = loadGxtConfig(root);
+    return {
+        planner_signature: resolvePlannerSignatureTier(config),
+        receipt_signature: resolveReceiptSignatureTier(config),
+        ledger_signature: resolveLedgerSignatureTier(config),
+        ledger_mode: resolveLedgerMode(config),
+        flight_telemetry: { body_mode: resolveFlightTelemetryBodyMode(config) },
+        break_glass: { require_ledger_entry: resolveLedgerMode(config) === "local" },
+    };
+}
+export function orgPolicySnapshot(resolved) {
+    return { present: resolved.present, pointer: resolved.pointer, bundle: resolved.bundle };
+}
+function failFromUnknown(e) {
+    if (isGantryUserError(e)) {
+        return { ok: false, code: e.gxtCode, message: e.message };
+    }
+    return {
+        ok: false,
+        code: GXT_ERROR.POLICY_DRIFT,
+        message: e instanceof Error ? e.message : String(e),
+    };
+}
+/** Offline: pointer + cache only. Never fetches. */
+export function resolveOrgPolicy(root) {
+    const state = loadPolicyPointer(root);
+    switch (state.kind) {
+        case "absent":
+            return { ok: true, present: false, pointer: null, bundle: null };
+        case "scaffold":
+            return { ok: true, present: false, pointer: state.pointer, bundle: null };
+        case "pinned": {
+            try {
+                const bundle = loadCachedBundle(root, state.pointer);
+                return { ok: true, present: true, pointer: state.pointer, bundle };
+            }
+            catch (e) {
+                return failFromUnknown(e);
+            }
+        }
+        default: {
+            const _never = state;
+            return _never;
+        }
+    }
+}
+export function resolveOrgPolicyOrThrow(root) {
+    const resolved = resolveOrgPolicy(root);
+    if (!resolved.ok) {
+        throw new GantryUserError(resolved.code, resolved.message, undefined, 1);
+    }
+    return resolved;
+}
+//# sourceMappingURL=policy-resolve.js.map

package/dist/cli/lib/policy/policy-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolve.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAqB,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,6BAA6B,GAI9B,MAAM,mBAAmB,CAAC;AAG3B,MAAM,cAAc,GAAyC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC7F,MAAM,gBAAgB,GAA+B,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC1E,MAAM,cAAc,GAA4C,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAE1F,MAAM,CAAC,MAAM,SAAS,GAAmD;IACvE,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,SAAS,QAAQ,CAAmB,KAOnC;IACC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,CAAC,KAAK,EAAE,KAAK;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACvE,MAAM,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAmD;IAClF,OAAO;QACL,KAAK;QACL,SAAS,CAAC,KAAK,EAAE,KAAK;YACpB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,KAAK,gBAAgB,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,QAAQ,CAAC;QACP,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,2BAA2B,IAAI,YAAY,IAAI,EAAE;KAC3E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,2BAA2B,IAAI,YAAY,IAAI,EAAE;KAC3E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB;QAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,0BAA0B,IAAI,YAAY,IAAI,EAAE;KAC1E,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,IAAI,YAAY,IAAI,EAAE;KACrE,CAAC;IACF,QAAQ,CAAC;QACP,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,SAAS;QAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,IAAI,UAAU;KACtE,CAAC;IACF,QAAQ,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,oBAAoB,CAAC;CACzF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAwB,EAAE,KAAwB;IACtF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,oBAAoB,EACzC,sCAAsC,EACtC,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,kBAAkB,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,IAAI,GAAG,CAAC,cAAc,KAAK,6BAA6B,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,2BAA2B,6BAA6B,EAAE,EAC/E,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzG,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,oCAAoC,EACzD,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC1H,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,YAAY,EACtB,GAAG,kBAAkB,uDAAuD,EAC5E,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAkB;QAC7B,cAAc,EAAE,6BAA6B;QAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QACzD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,IAAI,eAAe,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,iBAAiB,EAAE,2BAA2B,CAAC,MAAM,CAAC;QACtD,iBAAiB,EAAE,2BAA2B,CAAC,MAAM,CAAC;QACtD,gBAAgB,EAAE,0BAA0B,CAAC,MAAM,CAAC;QACpD,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,gBAAgB,EAAE,EAAE,SAAS,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE;QACvE,WAAW,EAAE,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE;KAC7E,CAAC;AACJ,CAAC;AAuBD,MAAM,UAAU,iBAAiB,CAAC,QAAqB;IACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,OAAuB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,SAAS,CAAC,YAAY;QAC5B,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACnE,KAAK,UAAU;YACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5E,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAU,KAAK,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/cli/lib/policy/policy-types.d.ts

@@ -0,0 +1,76 @@
+import type { GateAdapterId, KpiThreshold, TrustThreshold } from "../types.js";
+import type { FlightTelemetryBodyMode, LedgerMode, ReceiptSignatureTier } from "../gxt-config.js";
+export declare const ORG_POLICY_SCHEMA_VERSION: "1.0.0";
+export declare const POLICY_POINTER_SCHEMA_VERSION: "1.0.0";
+export interface PolicySigner {
+    principal: string;
+    kind?: "ssh" | "gpg";
+}
+export interface PolicyMandatoryGate {
+    id: string;
+    command: string;
+    adapter?: GateAdapterId;
+    success_substring?: string | null;
+}
+export interface PolicyBannedImport {
+    specifier: string;
+    scope?: "changed" | "all";
+}
+export interface PolicyConfigFloor {
+    planner_signature?: ReceiptSignatureTier;
+    receipt_signature?: ReceiptSignatureTier;
+    ledger_signature?: ReceiptSignatureTier;
+    ledger_mode?: LedgerMode;
+    flight_telemetry?: {
+        body_mode?: FlightTelemetryBodyMode;
+    };
+    break_glass?: {
+        require_ledger_entry?: boolean;
+    };
+}
+export interface PolicyManifestConstraints {
+    forbidden_zones_add?: string[];
+    path_risks_min?: Record<string, TrustThreshold>;
+    perimeter_protected_add?: string[];
+}
+export interface OrgPolicyBundle {
+    schema_version: typeof ORG_POLICY_SCHEMA_VERSION;
+    org_id: string;
+    policy_id: string;
+    version: string;
+    signers?: PolicySigner[];
+    mandatory_gates?: PolicyMandatoryGate[];
+    banned_imports?: PolicyBannedImport[];
+    producers?: Record<string, string>;
+    kpi_thresholds?: KpiThreshold[];
+    config_floor?: PolicyConfigFloor;
+    manifest_constraints?: PolicyManifestConstraints;
+    expected_digests?: {
+        schema_version: "0.1.0";
+        manifest_sha256?: string;
+        target_architecture_sha256?: string | null;
+        config_sha256?: string | null;
+    };
+}
+export interface PolicyPointer {
+    schema_version: typeof POLICY_POINTER_SCHEMA_VERSION;
+    source: {
+        kind: "git";
+        url: string;
+        ref: string;
+    };
+    bundle_path: string;
+    pinned_commit: string;
+    bundle_sha256: string;
+}
+/** Offline pointer file state. `pinned` means url + hex commit; cache may still be missing. */
+export type PolicyPointerState = {
+    kind: "absent";
+} | {
+    kind: "scaffold";
+    pointer: PolicyPointer;
+} | {
+    kind: "pinned";
+    pointer: PolicyPointer;
+};
+//# sourceMappingURL=policy-types.d.ts.map

package/dist/cli/lib/policy/policy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAElG,eAAO,MAAM,yBAAyB,EAAG,OAAgB,CAAC;AAC1D,eAAO,MAAM,6BAA6B,EAAG,OAAgB,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,gBAAgB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,uBAAuB,CAAA;KAAE,CAAC;IAC3D,WAAW,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACxC,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,gBAAgB,CAAC,EAAE;QACjB,cAAc,EAAE,OAAO,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,OAAO,6BAA6B,CAAC;IACrD,MAAM,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,+FAA+F;AAC/F,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC"}

package/dist/cli/lib/policy/policy-types.js

@@ -0,0 +1,3 @@
+export const ORG_POLICY_SCHEMA_VERSION = "1.0.0";
+export const POLICY_POINTER_SCHEMA_VERSION = "1.0.0";
+//# sourceMappingURL=policy-types.js.map

package/dist/cli/lib/policy/policy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.js","sourceRoot":"","sources":["../../../../src/cli/lib/policy/policy-types.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAgB,CAAC;AAC1D,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAgB,CAAC"}

package/dist/cli/lib/policy-digest-doctor.d.ts

@@ -7,5 +7,6 @@ export interface ExpectedDigestsFile {
     config_sha256?: string | null;
 }
 export declare function loadExpectedDigestsFile(policyPath: string): ExpectedDigestsFile;
+export declare function compareExpectedDigests(root: string, expected: ExpectedDigestsFile): DoctorLine[];
 export declare function runPolicyDigestDoctorChecks(root: string, policyPath: string): DoctorLine[];
 //# sourceMappingURL=policy-digest-doctor.d.ts.map

package/dist/cli/lib/policy-digest-doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-digest-doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/policy-digest-doctor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,eAAO,MAAM,+BAA+B,EAAG,OAAgB,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,+BAA+B,CAAC;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAS/E;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAkC1F"}
+{"version":3,"file":"policy-digest-doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/policy-digest-doctor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,eAAO,MAAM,+BAA+B,EAAG,OAAgB,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,+BAA+B,CAAC;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAS/E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,UAAU,EAAE,CAiChG;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAE1F"}

package/dist/cli/lib/policy-digest-doctor.js

@@ -10,9 +10,8 @@ export function loadExpectedDigestsFile(policyPath) {
     }
     return parsed;
 }
-export function runPolicyDigestDoctorChecks(root, policyPath) {
+export function compareExpectedDigests(root, expected) {
     const lines = [];
-    const expected = loadExpectedDigestsFile(policyPath);
     const actual = computeWorkingDigests(root);
     const compare = (label, expectedValue, actualValue) => {
         if (expectedValue === undefined)
@@ -34,4 +33,7 @@ export function runPolicyDigestDoctorChecks(root, policyPath) {
     }
     return lines;
 }
+export function runPolicyDigestDoctorChecks(root, policyPath) {
+    return compareExpectedDigests(root, loadExpectedDigestsFile(policyPath));
+}
 //# sourceMappingURL=policy-digest-doctor.js.map

package/dist/cli/lib/policy-digest-doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-digest-doctor.js","sourceRoot":"","sources":["../../../src/cli/lib/policy-digest-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAgB,CAAC;AAShE,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAwB,CAAC;IAC/E,IAAI,MAAM,CAAC,cAAc,KAAK,+BAA+B,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,2CAA2C,+BAA+B,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,UAAkB;IAC1E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,CACd,KAAa,EACb,aAAwC,EACxC,WAA0B,EACpB,EAAE;QACR,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO;QACxC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,KAAK,SAAS,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,iBAAiB,KAAK,qBAAqB,aAAa,IAAI,MAAM,YAAY,WAAW,IAAI,MAAM,GAAG;SAChH,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7E,OAAO,CACL,4BAA4B,EAC5B,QAAQ,CAAC,0BAA0B,EACnC,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"policy-digest-doctor.js","sourceRoot":"","sources":["../../../src/cli/lib/policy-digest-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAgB,CAAC;AAShE,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAwB,CAAC;IAC/E,IAAI,MAAM,CAAC,cAAc,KAAK,+BAA+B,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,2CAA2C,+BAA+B,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,QAA6B;IAChF,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,CACd,KAAa,EACb,aAAwC,EACxC,WAA0B,EACpB,EAAE;QACR,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO;QACxC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,KAAK,SAAS,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,iBAAiB,KAAK,qBAAqB,aAAa,IAAI,MAAM,YAAY,WAAW,IAAI,MAAM,GAAG;SAChH,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7E,OAAO,CACL,4BAA4B,EAC5B,QAAQ,CAAC,0BAA0B,EACnC,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,UAAkB;IAC1E,OAAO,sBAAsB,CAAC,IAAI,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/cli/lib/runtime-env.d.ts

@@ -1,3 +1,4 @@
+import type { EffectiveScope } from "./contract/contract-types.js";
 import type { Workspace } from "./workspace.js";
 export interface ResolvedRuntimeEnv {
     /** Absolute Git repo root */
@@ -14,6 +15,8 @@ export interface ResolvedRuntimeEnv {
     forbidden_zones_joined: string;
     /** Absolute EXECUTOR_LOG path */
     executor_log: string;
+    /** Effective cage (skill ∪ contract ∪ policy, tighten-only). */
+    scope: EffectiveScope;
 }
 /**
  * Resolve executor runtime variables for a mission (manifest-aligned TMVC/forbidden zones).

package/dist/cli/lib/runtime-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,CAoCxG;AAOD,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW7F"}
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,KAAK,EAAE,cAAc,CAAC;CACvB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,CA2CxG;AAOD,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa7F"}

package/dist/cli/lib/runtime-env.js

@@ -2,6 +2,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { toPosixRel } from "./cli-io.js";
 import { CLI_NAME } from "./constants.js";
+import { loadPolicyBundleQuiet, resolveEffectiveScope } from "./contract/effective-scope.js";
 import { agentErrorAbsolutePath } from "./errors.js";
 import { parseMissionFile } from "./missions/parser.js";
 import { resolveManifestSkillKey } from "./skill-key.js";
@@ -36,8 +37,14 @@ export function resolveRuntimeEnv(workspace, missionRepoOrAbsPath) {
     const missionRel = toRepoRelativePosix(root, missionAbs);
     const msnRaw = mission.msnId ?? "";
     const msn_id = /^MSN-\d{4}$/.test(msnRaw) ? msnRaw : "";
-    const tmvcAbs = resolvePaths(root, skill.tmvc_roots);
-    const fzAbs = resolvePaths(root, skill.forbidden_zones);
+    const scope = resolveEffectiveScope({
+        manifest,
+        skillKey: resolvedKey,
+        contract: mission.contract,
+        policy: loadPolicyBundleQuiet(root),
+    });
+    const tmvcAbs = resolvePaths(root, scope.tmvcRoots);
+    const fzAbs = resolvePaths(root, scope.forbiddenZones);
     return {
         repo_root: path.resolve(root),
         mission_file: missionRel,
@@ -47,6 +54,7 @@ export function resolveRuntimeEnv(workspace, missionRepoOrAbsPath) {
         tmvc_roots_joined: tmvcAbs.join("\n"),
         forbidden_zones_joined: fzAbs.join("\n"),
         executor_log: defaultExecutorLogPath(root),
+        scope,
     };
 }
 function lastErrorFileForRepo(repoRoot) {
@@ -61,6 +69,8 @@ export function resolvedRuntimeEnvToJsonPayload(r) {
         GXT_SKILL_KEY: r.skill_key,
         GXT_TMVC_ROOTS: r.tmvc_roots_joined,
         GXT_FORBIDDEN_ZONES: r.forbidden_zones_joined,
+        GXT_ALLOWED_IMPORTS: r.scope.allowedImports.join("\n"),
+        GXT_BANNED_IMPORTS: r.scope.bannedImports.join("\n"),
         GXT_EXECUTOR_LOG: r.executor_log,
         GXT_LAST_ERROR_FILE: lastErrorFileForRepo(r.repo_root),
     };

package/dist/cli/lib/runtime-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAmBpD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,oCAAoC,QAAQ,yCAAyC,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,YAAY,EAAE,sBAAsB,CAAC,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAqBpD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,oCAAoC,QAAQ,yCAAyC,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,KAAK,GAAG,qBAAqB,CAAC;QAClC,QAAQ;QACR,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAEvD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,YAAY,EAAE,sBAAsB,CAAC,IAAI,CAAC;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACtD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACpD,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/cli/lib/runtime-exec.d.ts

@@ -1,18 +1,22 @@
+import type { ContractImportViolation } from "./contract/contract-types.js";
 import { type ForbiddenViolation } from "./forbidden-scan.js";
 import { createTelemetryWriter } from "./telemetry-log.js";
 import type { Workspace } from "./workspace.js";
 export interface RuntimeExecResult {
-    status: "success" | "worker_failed" | "forbidden_zone_violation" | "runtime_error" | "timeout";
+    status: "success" | "worker_failed" | "forbidden_zone_violation" | "contract_violation" | "runtime_error" | "timeout";
     exitCode: number;
     workerExitCode: number | null;
     workerSignal: NodeJS.Signals | null;
     violations: ForbiddenViolation[];
+    /** Import-site violations against the mission contract (post-worker scan). */
+    contractViolations: ContractImportViolation[];
     executorLogPath: string;
     flightId: string;
 }
 export declare function emptyWorkerCommandResult(): RuntimeExecResult;
 export declare function buildRuntimeExecResult(input: {
     violations: ForbiddenViolation[];
+    contractViolations: ContractImportViolation[];
     timedOut: boolean;
     exitCode: number | null;
     exitSignal: NodeJS.Signals | null;

package/dist/cli/lib/runtime-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-exec.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EACF,SAAS,GACT,eAAe,GACf,0BAA0B,GAC1B,eAAe,GACf,SAAS,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,wBAAwB,IAAI,iBAAiB,CAU5D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,iBAAiB,CAmBpB;AAED,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,GACf,iBAAiB,CAUnB;AAED,KAAK,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,iBAAiB,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC1C,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiD/B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAiGD,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA4E5B"}
+{"version":3,"file":"runtime-exec.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAkB,MAAM,8BAA8B,CAAC;AAE5F,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EACF,SAAS,GACT,eAAe,GACf,0BAA0B,GAC1B,oBAAoB,GACpB,eAAe,GACf,SAAS,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,8EAA8E;IAC9E,kBAAkB,EAAE,uBAAuB,EAAE,CAAC;IAC9C,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,wBAAwB,IAAI,iBAAiB,CAW5D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,kBAAkB,EAAE,uBAAuB,EAAE,CAAC;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,iBAAiB,CAuBpB;AAED,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,GACf,iBAAiB,CAWnB;AAED,KAAK,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,iBAAiB,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC1C,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiD/B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AA6GD,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA+E5B"}

package/dist/cli/lib/runtime-exec.js

@@ -1,6 +1,7 @@
 import crypto from "node:crypto";
 import path from "node:path";
 import { errorMessage } from "./cli-io.js";
+import { scanContractImports } from "./contract/contract-scan.js";
 import { writeAgentErrorPayload } from "./errors.js";
 import { buildForbiddenBaseline, detectForbiddenViolations } from "./forbidden-scan.js";
 import { createTelemetryWriter } from "./telemetry-log.js";
@@ -14,6 +15,7 @@ export function emptyWorkerCommandResult() {
         workerExitCode: null,
         workerSignal: null,
         violations: [],
+        contractViolations: [],
         executorLogPath: "",
         flightId: "",
     };
@@ -23,12 +25,16 @@ export function buildRuntimeExecResult(input) {
         workerExitCode: input.exitCode,
         workerSignal: input.exitSignal,
         violations: input.violations,
+        contractViolations: input.contractViolations,
         executorLogPath: input.executorLogPath,
         flightId: input.flightId,
     };
     if (input.violations.length > 0) {
         return { ...base, status: "forbidden_zone_violation", exitCode: 3 };
     }
+    if (base.contractViolations.length > 0) {
+        return { ...base, status: "contract_violation", exitCode: 3 };
+    }
     if (input.timedOut) {
         return { ...base, status: "timeout", exitCode: 124 };
     }
@@ -44,6 +50,7 @@ export function runtimeErrorResult(executorLogPath, flightId) {
         workerExitCode: null,
         workerSignal: null,
         violations: [],
+        contractViolations: [],
         executorLogPath,
         flightId,
     };
@@ -104,6 +111,14 @@ function parseJoinedLines(s) {
         .map((x) => x.trim())
         .filter((x) => x.length > 0);
 }
+/** Contract import scan runs only for missions that sealed a contract block. */
+function scanContractAfterWorker(repoRoot, scope, writer) {
+    if (!scope.hasContract)
+        return [];
+    const violations = scanContractImports(repoRoot, scope);
+    writer.logEvent({ type: "contract_scan", violations, violation_count: violations.length });
+    return violations;
+}
 function chooseWorkingDirectory(repoRoot, cwd) {
     if (!cwd?.trim())
         return repoRoot;
@@ -195,15 +210,17 @@ export async function runRuntimeExec(workspace, options) {
             violations,
             violation_count: violations.length,
         });
+        const contractViolations = scanContractAfterWorker(repoRoot, resolved.scope, writer);
         const result = buildRuntimeExecResult({
             violations,
+            contractViolations,
             timedOut: exit.timedOut,
             exitCode: exit.code,
             exitSignal: exit.signal,
             executorLogPath,
             flightId,
         });
-        logFlightEnd(writer, result, violations.length);
+        logFlightEnd(writer, result, violations.length + contractViolations.length);
         if (result.exitCode !== 0) {
             writeAgentErrorPayload(repoRoot, resolved, result);
         }

package/dist/cli/lib/runtime-exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-exec.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAA2B,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AAkBhF,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,CAAC;QACX,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,EAAE;QACd,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAOtC;IACC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,KAAK,CAAC,QAAQ;QAC9B,YAAY,EAAE,KAAK,CAAC,UAAU;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IAEF,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAuB,EACvB,QAAgB;IAEhB,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,CAAC;QACX,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,EAAE;QACd,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,KAAK,MAAM,CAAC;IAE/D,MAAM,eAAe,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAE,GAAW,EAAQ,EAAE;QACxF,MAAM,KAAK,GAA4B;YACrC,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,GAAG;YACH,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC;YACrC,KAAK,EAAE,KAAK,CAAC,UAAU;SACxB,CAAC;QACF,IAAI,mBAAmB,EAAE,CAAC;YACxB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpB,IAAI,EAAE,YAAY;gBAClB,GAAG;gBACH,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvB,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvB,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YACjC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO;gBACP,KAAK;aACN,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAYD,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC;SACL,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,GAAY;IAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CACnB,MAAgD,EAChD,MAAyB,EACzB,cAAsB;IAEtB,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAoB,EACpB,OAA2B;IAc3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC1B,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,qBAAqB,CAClC,eAAe,EACf;QACE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;KACtC,EACD,OAAO,CAAC,MAAM,KAAK,IAAI,EACvB,QAAQ,CACT,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,eAAe;QAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,cAAc;QACd,eAAe;QACf,GAAG;QACH,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAoB,EACpB,OAA2B;IAE3B,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,wBAAwB,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,EACJ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,cAAc,EACd,eAAe,EACf,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,iBAAiB,GAClB,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,OAAO,EAAE,GAAI;YACb,IAAI;YACJ,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE;YACzE,YAAY;YACZ,SAAS;YACT,MAAM;YACN,iBAAiB;SAClB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,gBAAgB;YACtB,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,eAAe;YACf,QAAQ;SACT,CAAC,CAAC;QAEH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAClE,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}
+{"version":3,"file":"runtime-exec.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAA2B,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AAqBhF,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,CAAC;QACX,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,EAAE;QACd,kBAAkB,EAAE,EAAE;QACtB,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAQtC;IACC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,KAAK,CAAC,QAAQ;QAC9B,YAAY,EAAE,KAAK,CAAC,UAAU;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IAEF,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAuB,EACvB,QAAgB;IAEhB,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,CAAC;QACX,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,EAAE;QACd,kBAAkB,EAAE,EAAE;QACtB,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,KAAK,MAAM,CAAC;IAE/D,MAAM,eAAe,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAE,GAAW,EAAQ,EAAE;QACxF,MAAM,KAAK,GAA4B;YACrC,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,GAAG;YACH,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC;YACrC,KAAK,EAAE,KAAK,CAAC,UAAU;SACxB,CAAC;QACF,IAAI,mBAAmB,EAAE,CAAC;YACxB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpB,IAAI,EAAE,YAAY;gBAClB,GAAG;gBACH,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvB,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvB,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YACjC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO;gBACP,KAAK;aACN,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAYD,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC;SACL,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAChF,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,KAAqB,EACrB,MAAuB;IAEvB,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,GAAY;IAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CACnB,MAAgD,EAChD,MAAyB,EACzB,cAAsB;IAEtB,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAoB,EACpB,OAA2B;IAc3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC1B,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,qBAAqB,CAClC,eAAe,EACf;QACE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;KACtC,EACD,OAAO,CAAC,MAAM,KAAK,IAAI,EACvB,QAAQ,CACT,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,eAAe;QAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,cAAc;QACd,eAAe;QACf,GAAG;QACH,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAoB,EACpB,OAA2B;IAE3B,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,wBAAwB,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,EACJ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,cAAc,EACd,eAAe,EACf,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,iBAAiB,GAClB,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,OAAO,EAAE,GAAI;YACb,IAAI;YACJ,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE;YACzE,YAAY;YACZ,SAAS;YACT,MAAM;YACN,iBAAiB;SAClB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,gBAAgB;YACtB,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,UAAU;YACV,kBAAkB;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,eAAe;YACf,QAAQ;SACT,CAAC,CAAC;QAEH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAClE,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/cli/lib/staged-tmvc-guard.d.ts

@@ -1,4 +1,5 @@
 import { type TmvcPathClassification } from "./tmvc-path.js";
+import type { EffectiveScope } from "./contract/contract-types.js";
 import type { Manifest } from "./types.js";
 export interface StagedTmvcViolation {
     path: string;
@@ -19,6 +20,8 @@ export interface StagedTmvcGuardOptions {
     skillKey: string | null;
     /** When true, no mission/skill context — caller should treat as skip. */
     noMission?: boolean;
+    /** Effective cage (contract-narrowed); when absent falls back to manifest skill roots. */
+    scope?: Pick<EffectiveScope, "tmvcRoots" | "forbiddenZones">;
 }
 /** Evaluate staged index paths against mission TMVC roots (path metadata only). */
 export declare function evaluateStagedTmvcGuard(options: StagedTmvcGuardOptions): StagedTmvcGuardResult;

package/dist/cli/lib/staged-tmvc-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staged-tmvc-guard.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/staged-tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,aAAa,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAYD,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAgC9F;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAgBhF"}
+{"version":3,"file":"staged-tmvc-guard.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/staged-tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,aAAa,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAAC;CAC9D;AAYD,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAkC9F;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAgBhF"}

package/dist/cli/lib/staged-tmvc-guard.js

@@ -19,8 +19,10 @@ export function evaluateStagedTmvcGuard(options) {
             forbiddenZones: [],
         };
     }
-    const tmvcRoots = tmvcRootsForSkill(options.manifest, options.skillKey);
-    const forbiddenZones = forbiddenZonesForSkill(options.manifest, options.skillKey);
+    const tmvcRoots = options.scope ? [...options.scope.tmvcRoots] : tmvcRootsForSkill(options.manifest, options.skillKey);
+    const forbiddenZones = options.scope
+        ? [...options.scope.forbiddenZones]
+        : forbiddenZonesForSkill(options.manifest, options.skillKey);
     const stagedPaths = gitStagedNameOnly(options.repoRoot).map(normalizeRepoRelativePath);
     const violations = [];
     for (const repoRel of stagedPaths) {

package/dist/cli/lib/staged-tmvc-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"staged-tmvc-guard.js","sourceRoot":"","sources":["../../../src/cli/lib/staged-tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,GAElB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA0BpD,SAAS,WAAW,CAClB,OAAe,EACf,cAAsC;IAEtC,IAAI,cAAc,KAAK,sBAAsB,IAAI,cAAc,KAAK,aAAa,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,mBAAmB;YAC/B,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvF,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACvD,IAAI,SAAS;YAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,EAAE,KAAK;QACd,UAAU;QACV,WAAW;QACX,SAAS;QACT,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,wBAAwB,MAAM,CAAC,UAAU,IAAI,SAAS,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,2DAA2D;KAC3G,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"staged-tmvc-guard.js","sourceRoot":"","sources":["../../../src/cli/lib/staged-tmvc-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,GAElB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA4BpD,SAAS,WAAW,CAClB,OAAe,EACf,cAAsC;IAEtC,IAAI,cAAc,KAAK,sBAAsB,IAAI,cAAc,KAAK,aAAa,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,mBAAmB;YAC/B,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvH,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK;QAClC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QACnC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvF,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACvD,IAAI,SAAS;YAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,EAAE,KAAK;QACd,UAAU;QACV,WAAW;QACX,SAAS;QACT,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,wBAAwB,MAAM,CAAC,UAAU,IAAI,SAAS,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,2DAA2D;KAC3G,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/lib/start-orchestration.d.ts

@@ -1,4 +1,4 @@
-import type { TriageResult } from "./types.js";
+import type { GateAdapterId, TriageResult } from "./types.js";
 import { type OutputAudience } from "./audience-output.js";
 export interface StartOptions {
     intent: string;
@@ -6,6 +6,7 @@ export interface StartOptions {
     skillKey?: string;
     gateCommand?: string;
     gateSuccessSubstring?: string;
+    gateAdapter?: GateAdapterId;
     writeMission?: boolean;
     allowDuplicate?: boolean;
     json?: boolean;