@jeger-ai/opengantry 3.2.6 → 3.4.0

package/dist/cli/lib/gate-adapters/spawn-stream-core.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Shared subprocess core for gate adapters: spawn via shell, stream stdout+stderr
+ * to `gateLogPath`, and optionally capture stdout in memory (bounded by
+ * MAX_IO_BUFFER_BYTES, truncation flagged). Success-substring is checked after
+ * close against the written log (fixes multibyte chunk-split false negatives).
+ *
+ * Adapter-layer module: imports only gate.ts, gate-log-writer, and sibling types.
+ */
+import { spawn, type ChildProcess } from "node:child_process";
+import fs from "node:fs";
+import type { GateExecContext } from "./gate-adapter-types.js";
+export interface SpawnStreamOptions {
+    /** Keep a bounded copy of stdout in memory for structured parsing. */
+    captureStdout?: boolean;
+}
+export interface SpawnStreamResult {
+    exitCode: number | null;
+    successSubstringMatched: boolean;
+    /** Captured stdout (UTF-8); empty when capture disabled. */
+    stdout: string;
+    /** True when stdout byte count reached MAX_IO_BUFFER_BYTES and capture stopped. */
+    stdoutTruncated: boolean;
+}
+export declare function spawnOrDestroyStream(spawnFn: typeof spawn, writeStream: fs.WriteStream, command: string, options: Parameters<typeof spawn>[2]): ChildProcess;
+export declare class BoundedStdoutCapture {
+    private readonly enabled;
+    private readonly limit;
+    private readonly chunks;
+    private bytes;
+    truncated: boolean;
+    constructor(enabled: boolean, limit: number);
+    push(chunk: Buffer): void;
+    text(): string;
+}
+export declare function spawnGateStreaming(command: string, ctx: GateExecContext, options?: SpawnStreamOptions): Promise<SpawnStreamResult>;
+//# sourceMappingURL=spawn-stream-core.d.ts.map

package/dist/cli/lib/gate-adapters/spawn-stream-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-stream-core.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/gate-adapters/spawn-stream-core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uBAAuB,EAAE,OAAO,CAAC;IACjC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,eAAe,EAAE,OAAO,CAAC;CAC1B;AAkBD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,KAAK,EACrB,WAAW,EAAE,EAAE,CAAC,WAAW,EAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GACnC,YAAY,CAOd;AAED,qBAAa,oBAAoB;IAM7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,KAAK,CAAK;IAClB,SAAS,UAAS;gBAGC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM;IAGhC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAazB,IAAI,IAAI,MAAM;CAGf;AAMD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAqC5B"}

package/dist/cli/lib/gate-adapters/spawn-stream-core.js

@@ -0,0 +1,99 @@
+/**
+ * Shared subprocess core for gate adapters: spawn via shell, stream stdout+stderr
+ * to `gateLogPath`, and optionally capture stdout in memory (bounded by
+ * MAX_IO_BUFFER_BYTES, truncation flagged). Success-substring is checked after
+ * close against the written log (fixes multibyte chunk-split false negatives).
+ *
+ * Adapter-layer module: imports only gate.ts, gate-log-writer, and sibling types.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import { MAX_IO_BUFFER_BYTES, shellForPlatform } from "../gate.js";
+import { readGateLogAbs } from "../gate-log-writer.js";
+function waitForChildClose(child) {
+    return new Promise((resolve, reject) => {
+        child.once("error", reject);
+        child.once("close", (code, signal) => resolve({ exitCode: code, signal }));
+    });
+}
+function endWriteStream(stream) {
+    return new Promise((resolve, reject) => {
+        stream.once("error", reject);
+        stream.end(() => resolve());
+    });
+}
+export function spawnOrDestroyStream(spawnFn, writeStream, command, options) {
+    try {
+        return spawnFn(command, [], options);
+    }
+    catch (spawnErr) {
+        writeStream.destroy();
+        throw spawnErr;
+    }
+}
+export class BoundedStdoutCapture {
+    enabled;
+    limit;
+    chunks = [];
+    bytes = 0;
+    truncated = false;
+    constructor(enabled, limit) {
+        this.enabled = enabled;
+        this.limit = limit;
+    }
+    push(chunk) {
+        if (!this.enabled || this.truncated)
+            return;
+        const remaining = this.limit - this.bytes;
+        if (chunk.length >= remaining) {
+            this.chunks.push(chunk.subarray(0, remaining));
+            this.bytes = this.limit;
+            this.truncated = true;
+            return;
+        }
+        this.chunks.push(chunk);
+        this.bytes += chunk.length;
+    }
+    text() {
+        return this.enabled ? Buffer.concat(this.chunks).toString("utf8") : "";
+    }
+}
+function toBuffer(chunk) {
+    return Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8");
+}
+export async function spawnGateStreaming(command, ctx, options = {}) {
+    const capture = new BoundedStdoutCapture(options.captureStdout === true, MAX_IO_BUFFER_BYTES);
+    const stream = fs.createWriteStream(ctx.gateLogPath, { flags: "w" });
+    try {
+        const child = spawnOrDestroyStream(spawn, stream, command, {
+            cwd: ctx.cwd,
+            shell: shellForPlatform(),
+            env: process.env,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        const forward = (chunk) => {
+            stream.write(toBuffer(chunk));
+        };
+        child.stdout?.on("data", (chunk) => {
+            const buf = toBuffer(chunk);
+            capture.push(buf);
+            forward(buf);
+        });
+        child.stderr?.on("data", forward);
+        const { exitCode } = await waitForChildClose(child);
+        await endWriteStream(stream);
+        const needle = ctx.successSubstring ?? "";
+        const logText = readGateLogAbs(ctx.gateLogPath);
+        return {
+            exitCode,
+            successSubstringMatched: needle.length === 0 || logText.includes(needle),
+            stdout: capture.text(),
+            stdoutTruncated: capture.truncated,
+        };
+    }
+    catch (e) {
+        stream.destroy();
+        throw e;
+    }
+}
+//# sourceMappingURL=spawn-stream-core.js.map

package/dist/cli/lib/gate-adapters/spawn-stream-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-stream-core.js","sourceRoot":"","sources":["../../../../src/cli/lib/gate-adapters/spawn-stream-core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAiBvD,SAAS,iBAAiB,CACxB,KAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAqB,EACrB,WAA2B,EAC3B,OAAe,EACf,OAAoC;IAEpC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,WAAW,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,oBAAoB;IAMZ;IACA;IANF,MAAM,GAAa,EAAE,CAAC;IAC/B,KAAK,GAAG,CAAC,CAAC;IAClB,SAAS,GAAG,KAAK,CAAC;IAElB,YACmB,OAAgB,EAChB,KAAa;QADb,YAAO,GAAP,OAAO,CAAS;QAChB,UAAK,GAAL,KAAK,CAAQ;IAC7B,CAAC;IAEJ,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,GAAoB,EACpB,UAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAErE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;YACzD,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,gBAAgB,EAAE;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAQ,EAAE;YAC/C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO;YACL,QAAQ;YACR,uBAAuB,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE;YACtB,eAAe,EAAE,OAAO,CAAC,SAAS;SACnC,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/cli/lib/gate-adapters/tsc-adapter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * TypeScript compiler adapter (ADR-0041): parses plain `tsc` diagnostics
+ *   path(line,col): error TS2322: message
+ * into envelope v3 findings. Line-oriented and noise tolerant: paths may
+ * contain parentheses (the `(line,col): error TSnnnn:` tail is the anchor),
+ * indented lines extend the active diagnostic, anything else is skipped.
+ * Selected only via `gate_adapter: tsc`.
+ */
+import type { VerifyFinding } from "../verify-finding.js";
+import { type GateRunSnapshot, type ParsedDiagnostic } from "./adapter-findings.js";
+import type { GateExecContext } from "./gate-adapter-types.js";
+/** Pure parser for tsc stdout; never throws on noise. */
+export declare function parseTscOutput(stdout: string): ParsedDiagnostic[];
+export declare function tscFindingsFromRun(ctx: GateExecContext, run: GateRunSnapshot): VerifyFinding[];
+export declare const tscAdapter: import("./gate-adapter-types.js").GateExecAdapter;
+//# sourceMappingURL=tsc-adapter.d.ts.map

package/dist/cli/lib/gate-adapters/tsc-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsc-adapter.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/gate-adapters/tsc-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAyB/D,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAiBjE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,EAAE,CAE9F;AAED,eAAO,MAAM,UAAU,mDAGpB,CAAC"}

package/dist/cli/lib/gate-adapters/tsc-adapter.js

@@ -0,0 +1,51 @@
+import { findingsFromRun, } from "./adapter-findings.js";
+import { parsingAdapter } from "./parsing-adapter.js";
+/** `path(line,col): error TS1234: message` — greedy path, right-anchored tail. */
+const PAREN_DIAGNOSTIC = /^(.*)\((\d+),(\d+)\): (error|warning) (TS\d+): (.*)$/;
+/** `path:line:col - error TS1234: message` (pretty output with colors stripped). */
+const COLON_DIAGNOSTIC = /^(.*?):(\d+):(\d+) - (error|warning) (TS\d+): (.*)$/;
+// eslint-disable-next-line no-control-regex
+const ANSI_ESCAPES = /\u001b\[[0-9;]*m/g;
+function matchDiagnosticLine(line) {
+    const m = PAREN_DIAGNOSTIC.exec(line) ?? COLON_DIAGNOSTIC.exec(line);
+    if (m === null)
+        return null;
+    const [, file, lineNo, col, level, code, message] = m;
+    if (file === undefined || file.trim().length === 0)
+        return null;
+    return {
+        file: file.trim(),
+        line: Number.parseInt(lineNo ?? "0", 10),
+        column: Number.parseInt(col ?? "0", 10),
+        severity: level === "warning" ? "warning" : "error",
+        ruleId: code ?? "TS0000",
+        message: (message ?? "").trim(),
+    };
+}
+/** Pure parser for tsc stdout; never throws on noise. */
+export function parseTscOutput(stdout) {
+    const diagnostics = [];
+    let active = null;
+    for (const raw of stdout.replace(ANSI_ESCAPES, "").split(/\r?\n/)) {
+        const diagnostic = matchDiagnosticLine(raw);
+        if (diagnostic !== null) {
+            diagnostics.push(diagnostic);
+            active = diagnostic;
+            continue;
+        }
+        if (active !== null && /^\s+\S/.test(raw)) {
+            active.message = `${active.message} ${raw.trim()}`;
+            continue;
+        }
+        active = null;
+    }
+    return diagnostics;
+}
+export function tscFindingsFromRun(ctx, run) {
+    return findingsFromRun("tsc", ctx, run, (stdout) => ({ ok: true, diagnostics: parseTscOutput(stdout) }));
+}
+export const tscAdapter = parsingAdapter("tsc", (stdout) => ({
+    ok: true,
+    diagnostics: parseTscOutput(stdout),
+}));
+//# sourceMappingURL=tsc-adapter.js.map

package/dist/cli/lib/gate-adapters/tsc-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsc-adapter.js","sourceRoot":"","sources":["../../../../src/cli/lib/gate-adapters/tsc-adapter.ts"],"names":[],"mappings":"AASA,OAAO,EACL,eAAe,GAGhB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,sDAAsD,CAAC;AAChF,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,qDAAqD,CAAC;AAC/E,4CAA4C;AAC5C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;QACvC,QAAQ,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACnD,MAAM,EAAE,IAAI,IAAI,QAAQ;QACxB,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,IAAI,MAAM,GAA4B,IAAI,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7B,MAAM,GAAG,UAAU,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,OAAO,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAoB;IAC3E,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3D,EAAE,EAAE,IAAI;IACR,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;CACpC,CAAC,CAAC,CAAC"}

package/dist/cli/lib/gate-log-writer.d.ts

@@ -1,5 +1,13 @@
 export declare const REL_GATE_LOGS_DIR: ".gitagent/tmp/gate-logs";
 export declare function gateLogRelPath(msnId: string): string;
+export declare function ensureGateLogPath(root: string, msnId: string): {
+    abs: string;
+    rel: string;
+};
+/** Read an absolute gate log; tail-capped at MAX_IO_BUFFER_BYTES to avoid V8 OOM. */
+export declare function readGateLogAbs(absPath: string): string;
+/** Read gate log from disk; tail-capped at MAX_IO_BUFFER_BYTES to avoid V8 OOM. */
+export declare function readGateLogText(root: string, gateLogRel: string | undefined): string;
 /** Write combined gate stdout/stderr; returns repo-relative POSIX path. */
 export declare function writeGateLog(root: string, msnId: string | undefined, stdout: string | undefined, stderr: string | undefined): string | undefined;
 //# sourceMappingURL=gate-log-writer.d.ts.map

package/dist/cli/lib/gate-log-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-log-writer.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gate-log-writer.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iBAAiB,EAAG,yBAAkC,CAAC;AAEpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,GAAG,SAAS,CAkBpB"}
+{"version":3,"file":"gate-log-writer.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gate-log-writer.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB,EAAG,yBAAkC,CAAC;AAEpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAK3F;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBtD;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGpF;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,GAAG,SAAS,CAkBpB"}

package/dist/cli/lib/gate-log-writer.js

@@ -1,10 +1,45 @@
 import fs from "node:fs";
 import path from "node:path";
+import { MAX_IO_BUFFER_BYTES } from "./gate.js";
 export const REL_GATE_LOGS_DIR = ".gitagent/tmp/gate-logs";
 export function gateLogRelPath(msnId) {
     const safe = msnId.replace(/[^A-Za-z0-9-]/g, "_");
     return `${REL_GATE_LOGS_DIR}/${safe}.last.log`;
 }
+export function ensureGateLogPath(root, msnId) {
+    const rel = gateLogRelPath(msnId);
+    const absDir = path.join(root, REL_GATE_LOGS_DIR);
+    fs.mkdirSync(absDir, { recursive: true });
+    return { abs: path.join(root, rel), rel: rel.replace(/\\/g, "/") };
+}
+/** Read an absolute gate log; tail-capped at MAX_IO_BUFFER_BYTES to avoid V8 OOM. */
+export function readGateLogAbs(absPath) {
+    try {
+        const stat = fs.statSync(absPath);
+        if (stat.size <= MAX_IO_BUFFER_BYTES) {
+            return fs.readFileSync(absPath, "utf8");
+        }
+        const fd = fs.openSync(absPath, "r");
+        try {
+            const buffer = Buffer.alloc(MAX_IO_BUFFER_BYTES);
+            const start = stat.size - MAX_IO_BUFFER_BYTES;
+            const bytesRead = fs.readSync(fd, buffer, 0, MAX_IO_BUFFER_BYTES, start);
+            return buffer.subarray(0, bytesRead).toString("utf8");
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    catch {
+        return "";
+    }
+}
+/** Read gate log from disk; tail-capped at MAX_IO_BUFFER_BYTES to avoid V8 OOM. */
+export function readGateLogText(root, gateLogRel) {
+    if (!gateLogRel)
+        return "";
+    return readGateLogAbs(path.join(root, gateLogRel));
+}
 /** Write combined gate stdout/stderr; returns repo-relative POSIX path. */
 export function writeGateLog(root, msnId, stdout, stderr) {
     if (!msnId?.trim())

package/dist/cli/lib/gate-log-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-log-writer.js","sourceRoot":"","sources":["../../../src/cli/lib/gate-log-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAkC,CAAC;AAEpE,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,iBAAiB,IAAI,IAAI,WAAW,CAAC;AACjD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,KAAyB,EACzB,MAA0B,EAC1B,MAA0B;IAE1B,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEnE,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"gate-log-writer.js","sourceRoot":"","sources":["../../../src/cli/lib/gate-log-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAkC,CAAC;AAEpE,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,iBAAiB,IAAI,IAAI,WAAW,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;YAC9C,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YACzE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,UAA8B;IAC1E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,KAAyB,EACzB,MAA0B,EAC1B,MAA0B;IAE1B,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEnE,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC"}

package/dist/cli/lib/gate.d.ts

@@ -1,4 +1,5 @@
 import type { GateSpec } from "./types.js";
+export declare const MAX_IO_BUFFER_BYTES: number;
 export interface GateWorkDirOptions {
     cwd?: string;
 }
@@ -10,6 +11,7 @@ export interface GateRunResult {
     stderr: string;
     combined: string;
 }
+export declare function shellForPlatform(): boolean | string;
 export declare function runGate(workingDirectory: string, spec: GateSpec): GateRunResult;
 export declare function gatePassed(result: GateRunResult, successSubstring: string | null): boolean;
 //# sourceMappingURL=gate.d.ts.map

package/dist/cli/lib/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,CAEzF;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,wBAAgB,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,aAAa,CAgB/E;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAI1F"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,mBAAmB,QAAmB,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,CAEzF;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,gBAAgB,IAAI,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,aAAa,CAgB/E;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAI1F"}

package/dist/cli/lib/gate.js

@@ -1,11 +1,11 @@
 import { spawnSync } from "node:child_process";
 import path from "node:path";
-const MAX_IO_BUFFER_BYTES = 20 * 1024 * 1024;
+export const MAX_IO_BUFFER_BYTES = 20 * 1024 * 1024;
 /** Resolve working directory for gate/scan subprocess execution. */
 export function resolveGateWorkDir(root, options = {}) {
     return options.cwd ? path.resolve(root, options.cwd) : root;
 }
-function shellForPlatform() {
+export function shellForPlatform() {
     return process.platform === "win32" ? true : "/bin/sh";
 }
 export function runGate(workingDirectory, spec) {

package/dist/cli/lib/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/cli/lib/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAM7C,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAA8B,EAAE;IAC/E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AASD,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,gBAAwB,EAAE,IAAc;IAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,gBAAgB,EAAE;QACzB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,mBAAmB;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,GAAG,MAAM,KAAK,MAAM,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB,EAAE,gBAA+B;IAC/E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,gBAAgB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/cli/lib/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAMpD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAA8B,EAAE;IAC/E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AASD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,gBAAwB,EAAE,IAAc;IAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,gBAAgB,EAAE;QACzB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,mBAAmB;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,GAAG,MAAM,KAAK,MAAM,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB,EAAE,gBAA+B;IAC/E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,gBAAgB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/lib/git.d.ts

@@ -1,3 +1,14 @@
+/**
+ * Copy of the process env for a git child. `GIT_DIR` / `GIT_WORK_TREE` are removed from the
+ * copy only (never from `process.env`) so `git -C <root>` is authoritative and cannot resolve
+ * into a parent repository.
+ */
+export declare function gitChildEnv(extra?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export interface GitRunOptions {
+    maxBuffer?: number;
+    input?: string;
+    env?: NodeJS.ProcessEnv;
+}
 export declare function getRepoRoot(cwd?: string): string;
 export interface GitRunResult {
     ok: boolean;
@@ -5,8 +16,8 @@ export interface GitRunResult {
     stderr: string;
     status: number | null;
 }
-/** Run git in repository root (`git -C root ...args`). */
-export declare function gitRun(repoRoot: string, args: string[], maxBuffer?: number): GitRunResult;
+/** Run git in repository root (`git -C root ...args`). Third arg is maxBuffer or options. */
+export declare function gitRun(repoRoot: string, args: string[], maxBufferOrOpts?: number | GitRunOptions): GitRunResult;
 export declare function gitRunOk(repoRoot: string, args: string[], maxBuffer?: number): {
     ok: boolean;
     stdout: string;
@@ -15,6 +26,7 @@ export declare function gitRevParse(repoRoot: string, ref: string): string | nul
 export declare function gitHead(repoRoot: string): string | null;
 export declare function gitLogSubjects(repoRoot: string, grep: string, limit: number): string[];
 export declare function gitConfigGet(repoRoot: string, key: string): string | null;
+export declare function gitConfigSet(repoRoot: string, key: string, value: string): boolean;
 export type GitDiffSinceCommitResult = {
     ok: true;
     paths: string[];

package/dist/cli/lib/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/git.ts"],"names":[],"mappings":"AAOA,wBAAgB,WAAW,CAAC,GAAG,SAAgB,GAAG,MAAM,CAavD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,0DAA0D;AAC1D,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAmB,GAAG,YAAY,CAYnG;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,SAAmB,GAC3B;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAGjC;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAItF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIzE;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,+FAA+F;AAC/F,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,wBAAwB,CAW1B"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/git.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAKxE;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,wBAAgB,WAAW,CAAC,GAAG,SAAgB,GAAG,MAAM,CAavD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,6FAA6F;AAC7F,wBAAgB,MAAM,CACpB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,eAAe,GAAE,MAAM,GAAG,aAAgC,GACzD,YAAY,CAgBd;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,SAAmB,GAC3B;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAGjC;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAItF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIzE;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,+FAA+F;AAC/F,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,wBAAwB,CAW1B"}

package/dist/cli/lib/git.js

@@ -1,15 +1,24 @@
-import { execSync } from "node:child_process";
+import { execSync, spawnSync } from "node:child_process";
 import path from "node:path";
-import { spawnSync } from "node:child_process";
 import { CLI_NAME } from "./constants.js";
-const GIT_CHILD_ENV = { ...process.env, GIT_OPTIONAL_LOCKS: "0" };
+/**
+ * Copy of the process env for a git child. `GIT_DIR` / `GIT_WORK_TREE` are removed from the
+ * copy only (never from `process.env`) so `git -C <root>` is authoritative and cannot resolve
+ * into a parent repository.
+ */
+export function gitChildEnv(extra) {
+    const env = { ...process.env, GIT_OPTIONAL_LOCKS: "0", ...extra };
+    delete env.GIT_DIR;
+    delete env.GIT_WORK_TREE;
+    return env;
+}
 export function getRepoRoot(cwd = process.cwd()) {
     try {
         const out = execSync("git rev-parse --show-toplevel", {
             cwd,
             encoding: "utf8",
             stdio: ["ignore", "pipe", "pipe"],
-            env: GIT_CHILD_ENV,
+            env: gitChildEnv(),
         }).trim();
         if (!out)
             throw new Error("empty root");
@@ -19,12 +28,15 @@ export function getRepoRoot(cwd = process.cwd()) {
         throw new Error(`${CLI_NAME}: not inside a git repository`);
     }
 }
-/** Run git in repository root (`git -C root ...args`). */
-export function gitRun(repoRoot, args, maxBuffer = 32 * 1024 * 1024) {
+/** Run git in repository root (`git -C root ...args`). Third arg is maxBuffer or options. */
+export function gitRun(repoRoot, args, maxBufferOrOpts = 32 * 1024 * 1024) {
+    const opts = typeof maxBufferOrOpts === "number" ? { maxBuffer: maxBufferOrOpts } : maxBufferOrOpts;
+    const maxBuffer = opts.maxBuffer ?? 32 * 1024 * 1024;
     const r = spawnSync("git", ["-C", repoRoot, ...args], {
         encoding: "utf8",
         maxBuffer,
-        env: GIT_CHILD_ENV,
+        env: gitChildEnv(opts.env),
+        ...(opts.input !== undefined ? { input: opts.input } : {}),
     });
     return {
         ok: r.status === 0,
@@ -57,6 +69,9 @@ export function gitConfigGet(repoRoot, key) {
         return null;
     return r.stdout.trim();
 }
+export function gitConfigSet(repoRoot, key, value) {
+    return gitRunOk(repoRoot, ["config", key, value]).ok;
+}
 /** Paths under tmvcRoots that differ between ref and the working tree; empty paths = fresh. */
 export function gitDiffNameOnlySinceCommit(repoRoot, commit, tmvcRoots) {
     const roots = tmvcRoots.map((r) => r.trim()).filter((r) => r.length > 0);

package/dist/cli/lib/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/cli/lib/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;AAElE,MAAM,UAAU,WAAW,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YACpD,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,aAAa;SACnB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,+BAA+B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AASD,0DAA0D;AAC1D,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,IAAc,EAAE,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IACnF,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,MAAM;QAChB,SAAS;QACT,GAAG,EAAE,aAAa;KACnB,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,IAAc,EACd,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAE5B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAW;IACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAa;IAC1E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,IAAI,KAAK,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAW;IACxD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAMD,+FAA+F;AAC/F,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,MAAc,EACd,SAA4B;IAE5B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM;SACnB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/cli/lib/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACrF,OAAO,GAAG,CAAC,OAAO,CAAC;IACnB,OAAO,GAAG,CAAC,aAAa,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,WAAW,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YACpD,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,WAAW,EAAE;SACnB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,+BAA+B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AASD,6FAA6F;AAC7F,MAAM,UAAU,MAAM,CACpB,QAAgB,EAChB,IAAc,EACd,kBAA0C,EAAE,GAAG,IAAI,GAAG,IAAI;IAE1D,MAAM,IAAI,GACR,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;IACzF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,MAAM;QAChB,SAAS;QACT,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,IAAc,EACd,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAE5B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAW;IACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAa;IAC1E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,IAAI,KAAK,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAW;IACxD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAW,EAAE,KAAa;IACvE,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAMD,+FAA+F;AAC/F,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,MAAc,EACd,SAA4B;IAE5B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM;SACnB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/cli/lib/gxt-config.d.ts

@@ -8,15 +8,24 @@ export declare const FLIGHT_TELEMETRY_BODY_MODES: readonly FlightTelemetryBodyMo
 export interface FlightTelemetryConfig {
     body_mode?: FlightTelemetryBodyMode;
 }
+export type LedgerMode = "off" | "local";
+export declare const LEDGER_MODES: readonly LedgerMode[];
+export interface LedgerConfig {
+    mode?: LedgerMode;
+    signature?: ReceiptSignatureTier;
+}
 export interface GxtConfig {
     planner_signature?: PlannerSignatureTier;
     receipt_signature?: ReceiptSignatureTier;
     flight_telemetry?: FlightTelemetryConfig;
     trusted_automation?: unknown;
     defensive_profile?: DefensiveProfileConfig;
+    ledger?: LedgerConfig;
 }
 export declare function loadGxtConfig(root: string): GxtConfig;
 export declare function resolvePlannerSignatureTier(config: GxtConfig): PlannerSignatureTier;
 export declare function resolveReceiptSignatureTier(config: GxtConfig): ReceiptSignatureTier;
 export declare function resolveFlightTelemetryBodyMode(config: GxtConfig): FlightTelemetryBodyMode;
+export declare function resolveLedgerMode(config: GxtConfig): LedgerMode;
+export declare function resolveLedgerSignatureTier(config: GxtConfig): ReceiptSignatureTier;
 //# sourceMappingURL=gxt-config.d.ts.map

package/dist/cli/lib/gxt-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gxt-config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gxt-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGrE,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AACxD,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAA+B,CAAC;AACnG,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAA4B,CAAC;AAChG,eAAO,MAAM,2BAA2B,EAAE,SAAS,uBAAuB,EAA0B,CAAC;AAErG,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAarD;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAGnF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAGnF;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,GAAG,uBAAuB,CAGzF"}
+{"version":3,"file":"gxt-config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gxt-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAIrE,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AACxD,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAA+B,CAAC;AACnG,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAA4B,CAAC;AAChG,eAAO,MAAM,2BAA2B,EAAE,SAAS,uBAAuB,EAA0B,CAAC;AAErG,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACrC;AAED,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC;AACzC,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAAqB,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAarD;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAGnF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAGnF;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,GAAG,uBAAuB,CAGzF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAS/D;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAGlF"}

package/dist/cli/lib/gxt-config.js

@@ -1,9 +1,11 @@
 import fs from "node:fs";
 import path from "node:path";
 import { validateDefensiveProfile } from "./defensive-profile.js";
+import { isDefensiveProfilePresetName, presetConfigDefaults } from "./defensive-profile-presets.js";
 export const PLANNER_SIGNATURE_TIERS = ["off", "warn", "require"];
 export const RECEIPT_SIGNATURE_TIERS = PLANNER_SIGNATURE_TIERS;
 export const FLIGHT_TELEMETRY_BODY_MODES = ["hash_only", "full"];
+export const LEDGER_MODES = ["off", "local"];
 export function loadGxtConfig(root) {
     const configPath = path.join(root, ".gitagent", "config.json");
     if (!fs.existsSync(configPath))
@@ -32,4 +34,18 @@ export function resolveFlightTelemetryBodyMode(config) {
     const mode = config.flight_telemetry?.body_mode ?? "hash_only";
     return FLIGHT_TELEMETRY_BODY_MODES.includes(mode) ? mode : "hash_only";
 }
+export function resolveLedgerMode(config) {
+    if (config.ledger?.mode !== undefined) {
+        return LEDGER_MODES.includes(config.ledger.mode) ? config.ledger.mode : "off";
+    }
+    const preset = config.defensive_profile?.preset;
+    if (preset && isDefensiveProfilePresetName(preset)) {
+        return presetConfigDefaults(preset).ledger?.mode ?? "off";
+    }
+    return "off";
+}
+export function resolveLedgerSignatureTier(config) {
+    const tier = config.ledger?.signature ?? "off";
+    return RECEIPT_SIGNATURE_TIERS.includes(tier) ? tier : "off";
+}
 //# sourceMappingURL=gxt-config.js.map

package/dist/cli/lib/gxt-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"gxt-config.js","sourceRoot":"","sources":["../../../src/cli/lib/gxt-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAMlE,MAAM,CAAC,MAAM,uBAAuB,GAAoC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,uBAAuB,GAAoC,uBAAuB,CAAC;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAuC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAcrG,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC/C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC/C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAiB;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,EAAE,SAAS,IAAI,WAAW,CAAC;IAC/D,OAAO,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;AACzE,CAAC"}
+{"version":3,"file":"gxt-config.js","sourceRoot":"","sources":["../../../src/cli/lib/gxt-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAMpG,MAAM,CAAC,MAAM,uBAAuB,GAAoC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,uBAAuB,GAAoC,uBAAuB,CAAC;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAuC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAOrG,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAgBpE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC/C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC/C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAiB;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,EAAE,SAAS,IAAI,WAAW,CAAC;IAC/D,OAAO,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAChD,IAAI,MAAM,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,KAAK,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;IAC/C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC"}

package/dist/cli/lib/gxt-error-codes.d.ts

@@ -30,6 +30,23 @@ export declare const GXT_ERROR: {
     readonly INTERROGATION_REQUIRED: "GXT_INTERROGATION_REQUIRED";
     readonly INTERROGATION_SHALLOW_HISTORY: "GXT_INTERROGATION_SHALLOW_HISTORY";
     readonly FINDINGS_RECURRED: "GXT_FINDINGS_RECURRED";
+    readonly POLICY_UNPINNED: "GXT_POLICY_UNPINNED";
+    readonly POLICY_DRIFT: "GXT_POLICY_DRIFT";
+    readonly POLICY_SIGNATURE_INVALID: "GXT_POLICY_SIGNATURE_INVALID";
+    readonly POLICY_FLOOR_VIOLATION: "GXT_POLICY_FLOOR_VIOLATION";
+    readonly LEDGER_CAS_EXHAUSTED: "GXT_LEDGER_CAS_EXHAUSTED";
+    readonly LEDGER_CHAIN_BROKEN: "GXT_LEDGER_CHAIN_BROKEN";
+    readonly LEDGER_UNSIGNED: "GXT_LEDGER_UNSIGNED";
+    readonly DEPENDENCY_UNFETCHED: "GXT_DEPENDENCY_UNFETCHED";
+    readonly DEPENDENCY_UNSATISFIED: "GXT_DEPENDENCY_UNSATISFIED";
+    readonly DEPENDENCY_UNSIGNED: "GXT_DEPENDENCY_UNSIGNED";
+    readonly DEPENDENCY_STALE: "GXT_DEPENDENCY_STALE";
+    readonly DEPENDENCY_ORG_MISMATCH: "GXT_DEPENDENCY_ORG_MISMATCH";
+    readonly CONTRACT_TAMPERED: "GXT_CONTRACT_TAMPERED";
+    readonly CONTRACT_SCOPE_ESCAPE: "GXT_CONTRACT_SCOPE_ESCAPE";
+    readonly CONTRACT_IMPORT_BANNED: "GXT_CONTRACT_IMPORT_BANNED";
+    readonly CONTRACT_IMPORT_UNLISTED: "GXT_CONTRACT_IMPORT_UNLISTED";
+    readonly CONTRACT_IMPORT_DYNAMIC: "GXT_CONTRACT_IMPORT_DYNAMIC";
 };
 export type GxtErrorCode = (typeof GXT_ERROR)[keyof typeof GXT_ERROR];
 /** Map runtime exec / MCP error codes to stable GXT codes. */

package/dist/cli/lib/gxt-error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gxt-error-codes.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gxt-error-codes.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAgCtE,8DAA8D;AAC9D,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAMnE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAE/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAMrE;AAED,4GAA4G;AAC5G,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE"}
+{"version":3,"file":"gxt-error-codes.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/gxt-error-codes.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAiCtE,8DAA8D;AAC9D,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAMnE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAE/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAMrE;AAED,4GAA4G;AAC5G,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE"}

package/dist/cli/lib/gxt-error-codes.js

@@ -30,6 +30,23 @@ export const GXT_ERROR = {
     INTERROGATION_REQUIRED: "GXT_INTERROGATION_REQUIRED",
     INTERROGATION_SHALLOW_HISTORY: "GXT_INTERROGATION_SHALLOW_HISTORY",
     FINDINGS_RECURRED: "GXT_FINDINGS_RECURRED",
+    POLICY_UNPINNED: "GXT_POLICY_UNPINNED",
+    POLICY_DRIFT: "GXT_POLICY_DRIFT",
+    POLICY_SIGNATURE_INVALID: "GXT_POLICY_SIGNATURE_INVALID",
+    POLICY_FLOOR_VIOLATION: "GXT_POLICY_FLOOR_VIOLATION",
+    LEDGER_CAS_EXHAUSTED: "GXT_LEDGER_CAS_EXHAUSTED",
+    LEDGER_CHAIN_BROKEN: "GXT_LEDGER_CHAIN_BROKEN",
+    LEDGER_UNSIGNED: "GXT_LEDGER_UNSIGNED",
+    DEPENDENCY_UNFETCHED: "GXT_DEPENDENCY_UNFETCHED",
+    DEPENDENCY_UNSATISFIED: "GXT_DEPENDENCY_UNSATISFIED",
+    DEPENDENCY_UNSIGNED: "GXT_DEPENDENCY_UNSIGNED",
+    DEPENDENCY_STALE: "GXT_DEPENDENCY_STALE",
+    DEPENDENCY_ORG_MISMATCH: "GXT_DEPENDENCY_ORG_MISMATCH",
+    CONTRACT_TAMPERED: "GXT_CONTRACT_TAMPERED",
+    CONTRACT_SCOPE_ESCAPE: "GXT_CONTRACT_SCOPE_ESCAPE",
+    CONTRACT_IMPORT_BANNED: "GXT_CONTRACT_IMPORT_BANNED",
+    CONTRACT_IMPORT_UNLISTED: "GXT_CONTRACT_IMPORT_UNLISTED",
+    CONTRACT_IMPORT_DYNAMIC: "GXT_CONTRACT_IMPORT_DYNAMIC",
 };
 const GIT_PROOF_TO_GXT = {
     MISSION_MISSING_MSN: GXT_ERROR.MISSION_UNSTAMPED,
@@ -58,6 +75,7 @@ const GANTRY_USER_ERROR_TO_GXT = {
     RUNTIME_ENV_FAILED: GXT_ERROR.VERIFY_FAILED,
     INVALID_ARGUMENT: GXT_ERROR.INVALID_ARGUMENT,
     MCP_WRITE_DENIED: GXT_ERROR.MCP_WRITE_DENIED,
+    CONTRACT_VIOLATION: GXT_ERROR.CONTRACT_IMPORT_BANNED,
 };
 /** Map runtime exec / MCP error codes to stable GXT codes. */
 export function mapRuntimeErrorCodeToGxt(code) {