@manehorizons/cadence-core 1.1.1

package/dist/gates/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/gates/engine.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,WAAW,GAAW;IAC1B,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;CACvB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAA0C;IACpD,MAAM,EAAE;QACN,WAAW,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,qBAAqB,CAAC;QAC9E,QAAQ,EAAE;YACR,YAAY;YACZ,SAAS;YACT,eAAe;YACf,qBAAqB;YACrB,iBAAiB;YACjB,aAAa;SACd;QACD,OAAO,EAAE;YACP,YAAY;YACZ,SAAS;YACT,eAAe;YACf,qBAAqB;YACrB,iBAAiB;YACjB,aAAa;YACb,aAAa;YACb,gBAAgB;SACjB;KACF;IACD,QAAQ,EAAE;QACR,WAAW,EAAE,CAAC,eAAe,CAAC;QAC9B,QAAQ,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QACtE,OAAO,EAAE;YACP,eAAe;YACf,YAAY;YACZ,SAAS;YACT,gBAAgB;YAChB,aAAa;YACb,aAAa;SACd;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QAC7C,OAAO,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;KAC7C;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6C,EAC7C,KAAoC;IAEpC,IAAI,KAAK,EAAE,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACzC,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAU,EAAE,OAAgB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAQ,CAAC;IAC7B,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,OAAO,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;KAClD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAiC,EACjC,MAA6C,EAC7C,KAA6C;IAE7C,MAAM,IAAI,GAAS,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;IAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/gates/interactive.d.ts

@@ -0,0 +1,11 @@
+import type { GateImpl } from './types.js';
+/**
+ * Interactive AC-verdict gate (Phase 16). Extracted from settle.ts verbatim
+ * (Phase 39.3). Fires on --interactive OR membership('interactive-verdict');
+ * skipped under --auto=false. Walks each AC, prompting the user (via the
+ * injected prompter port) for pass/fail/skip, and refuses on any non-overridden
+ * `fail` verdict unless --force. The walker renders to stdout; refusals go to
+ * stderr via ctx.io.err. Produces `interactiveVerify` for the AC-merge finalizer.
+ */
+export declare const runInteractiveGate: GateImpl;
+//# sourceMappingURL=interactive.d.ts.map

package/dist/gates/interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../../src/gates/interactive.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAEvD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAoDhC,CAAC"}

package/dist/gates/interactive.js

@@ -0,0 +1,55 @@
+import { walkAcsInteractively } from '../verify/interactive.js';
+/**
+ * Interactive AC-verdict gate (Phase 16). Extracted from settle.ts verbatim
+ * (Phase 39.3). Fires on --interactive OR membership('interactive-verdict');
+ * skipped under --auto=false. Walks each AC, prompting the user (via the
+ * injected prompter port) for pass/fail/skip, and refuses on any non-overridden
+ * `fail` verdict unless --force. The walker renders to stdout; refusals go to
+ * stderr via ctx.io.err. Produces `interactiveVerify` for the AC-merge finalizer.
+ */
+export const runInteractiveGate = async (ctx) => {
+    const requested = ctx.opts.interactive === true ||
+        (ctx.opts.interactive !== false && ctx.gateSet.gates.includes('interactive-verdict'));
+    if (!requested || ctx.opts.auto === false) {
+        return { outcome: 'pass' };
+    }
+    let prompter;
+    try {
+        prompter = ctx.prompter.create();
+    }
+    catch (err) {
+        ctx.io.err(`interactive: ${err instanceof Error ? err.message : String(err)}\n`);
+        return { outcome: 'refuse' };
+    }
+    let interactiveVerify;
+    try {
+        const coverageMap = await ctx.coverage();
+        const tests = {};
+        for (const [id, refs] of coverageMap)
+            tests[id] = refs;
+        interactiveVerify = await walkAcsInteractively({
+            acs: ctx.draft.acceptanceCriteria.map((a) => ({
+                id: a.id,
+                given: a.given,
+                when: a.when,
+                then: a.then,
+            })),
+            tests,
+            files: [...ctx.touchedFiles],
+        }, prompter);
+    }
+    finally {
+        await prompter.close?.();
+    }
+    // Refuse on any non-overridden 'fail' verdict unless --force.
+    const failing = Object.entries(interactiveVerify).filter(([id, v]) => v.verdict === 'fail' && !ctx.explicitIds.has(id));
+    if (failing.length > 0 && !ctx.opts.force) {
+        for (const [id, v] of failing) {
+            ctx.io.err(`interactive: ${id} fail${v.note ? ` — ${v.note}` : ''}\n`);
+        }
+        ctx.io.err('settle run --interactive refused: one or more ACs verdicted as fail. Pass --force to settle anyway.\n');
+        return { outcome: 'refuse', summaryPatch: { interactiveVerify } };
+    }
+    return { outcome: 'pass', summaryPatch: { interactiveVerify } };
+};
+//# sourceMappingURL=interactive.js.map

package/dist/gates/interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.js","sourceRoot":"","sources":["../../src/gates/interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA2B,MAAM,0BAA0B,CAAC;AAKzF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAa,KAAK,EAAE,GAAG,EAAuB,EAAE;IAC7E,MAAM,SAAS,GACb,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI;QAC7B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,iBAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,KAAK,GAAoC,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,WAAW;YAAE,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QACvD,iBAAiB,GAAG,MAAM,oBAAoB,CAC5C;YACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACH,KAAK;YACL,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;SAC7B,EACD,QAAQ,CACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzE,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,uGAAuG,CACxG,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC;AAClE,CAAC,CAAC"}

package/dist/gates/per-task-verify.d.ts

@@ -0,0 +1,12 @@
+import type { BuildGateImpl } from './build-types.js';
+/**
+ * Per-task verifier gate (Phase 24.2). Extracted from build.ts (Phase 39.7).
+ * Fires only when `'per-task-verify'` is in the effective gate set (the router
+ * only calls it on DONE outcomes). Resolves the task's declared files, diffs
+ * them via `ctx.diff`, runs the verifier, and returns a `PerTaskVerifyRecord`
+ * the router threads into `recordTaskOutcome`. A refuse halts the record write
+ * (router sets `exitCode = 1`), unchanged. Reaches git/verifier/notifier only
+ * through `ctx` ports.
+ */
+export declare const runPerTaskVerifyGate: BuildGateImpl;
+//# sourceMappingURL=per-task-verify.d.ts.map

package/dist/gates/per-task-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-task-verify.d.ts","sourceRoot":"","sources":["../../src/gates/per-task-verify.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,kBAAkB,CAAC;AAGrE;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAiDlC,CAAC"}

package/dist/gates/per-task-verify.js

@@ -0,0 +1,52 @@
+/**
+ * Per-task verifier gate (Phase 24.2). Extracted from build.ts (Phase 39.7).
+ * Fires only when `'per-task-verify'` is in the effective gate set (the router
+ * only calls it on DONE outcomes). Resolves the task's declared files, diffs
+ * them via `ctx.diff`, runs the verifier, and returns a `PerTaskVerifyRecord`
+ * the router threads into `recordTaskOutcome`. A refuse halts the record write
+ * (router sets `exitCode = 1`), unchanged. Reaches git/verifier/notifier only
+ * through `ctx` ports.
+ */
+export const runPerTaskVerifyGate = async (ctx) => {
+    if (!ctx.gateSet.gates.includes('per-task-verify'))
+        return { outcome: 'pass' };
+    const task = ctx.draft.tasks.find((t) => t.id === ctx.taskId);
+    const files = task?.files ?? [];
+    const diff = ctx.diff(files);
+    const verdict = await ctx.verifiers.perTask.verify({
+        taskId: ctx.taskId,
+        files,
+        diff,
+    });
+    const refused = verdict.verdict === 'refuse';
+    const bypassed = refused && ctx.opts.allowPerTaskFailure === true;
+    if (refused && !ctx.opts.allowPerTaskFailure) {
+        ctx.io.err(`per-task-verify refused: ${verdict.reason}\n` +
+            'Pass --allow-per-task-failure to record DONE anyway.\n');
+        await ctx.emit.perTaskFail({
+            taskId: ctx.taskId,
+            provider: verdict.provider,
+            reason: verdict.reason,
+            bypassed: false,
+        });
+        return { outcome: 'refuse' };
+    }
+    if (refused && ctx.opts.allowPerTaskFailure) {
+        ctx.io.err('per-task-verify: --allow-per-task-failure set; proceeding past refuse verdict.\n');
+        await ctx.emit.perTaskFail({
+            taskId: ctx.taskId,
+            provider: verdict.provider,
+            reason: verdict.reason,
+            bypassed: true,
+        });
+    }
+    const perTaskRecord = {
+        verdict: verdict.verdict,
+        reason: verdict.reason,
+        provider: verdict.provider,
+        ...(verdict.model ? { model: verdict.model } : {}),
+        ...(bypassed ? { bypassed: true } : {}),
+    };
+    return { outcome: 'pass', summaryPatch: { perTaskRecord } };
+};
+//# sourceMappingURL=per-task-verify.js.map

package/dist/gates/per-task-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-task-verify.js","sourceRoot":"","sources":["../../src/gates/per-task-verify.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,KAAK,EACtD,GAAG,EACiC,EAAE;IACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;QACL,IAAI;KACL,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC;IAElE,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7C,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,4BAA4B,OAAO,CAAC,MAAM,IAAI;YAC5C,wDAAwD,CAC3D,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5C,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,kFAAkF,CACnF,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAwB;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC;AAC9D,CAAC,CAAC"}

package/dist/gates/plan-review.d.ts

@@ -0,0 +1,13 @@
+import type { DraftGateImpl } from './draft-types.js';
+/**
+ * Plan-review gate (Phase 25.1 + 35.1 bounded convergence). Extracted from
+ * draft.ts (Phase 39.7). Fires when `'plan-review'` is in the effective gate set
+ * (strict×complex). Runs against the parsed DRAFT (no diff/SUMMARY at approve
+ * time). Reads prior attempts from the convergence sidecar, computes the next
+ * convergence verdict, appends history + rewrites the sidecar (legacy 29.7
+ * top-level fields preserved byte-for-byte), then on `!pass` reproduces the
+ * three arms exactly. Reaches the verifier / sidecar / notifier only through
+ * `ctx` ports.
+ */
+export declare const runPlanReviewGate: DraftGateImpl;
+//# sourceMappingURL=plan-review.d.ts.map

package/dist/gates/plan-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-review.d.ts","sourceRoot":"","sources":["../../src/gates/plan-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAmG/B,CAAC"}

package/dist/gates/plan-review.js

@@ -0,0 +1,98 @@
+import { nextConvergence } from '../verify/converge.js';
+/**
+ * Plan-review gate (Phase 25.1 + 35.1 bounded convergence). Extracted from
+ * draft.ts (Phase 39.7). Fires when `'plan-review'` is in the effective gate set
+ * (strict×complex). Runs against the parsed DRAFT (no diff/SUMMARY at approve
+ * time). Reads prior attempts from the convergence sidecar, computes the next
+ * convergence verdict, appends history + rewrites the sidecar (legacy 29.7
+ * top-level fields preserved byte-for-byte), then on `!pass` reproduces the
+ * three arms exactly. Reaches the verifier / sidecar / notifier only through
+ * `ctx` ports.
+ */
+export const runPlanReviewGate = async (ctx) => {
+    if (!ctx.gateSet.gates.includes('plan-review'))
+        return { outcome: 'pass' };
+    // Phase 35.1 — bounded review-convergence. Prior attempts from the 29.7
+    // sidecar; a legacy 29.7-shape file (no `attempts`) or absent/corrupt → 0.
+    const { attemptsSoFar, history } = await ctx.planReviewSidecar.read();
+    const res = await ctx.verifiers.planReview.verify({ draft: ctx.draft });
+    const maxAttempts = ctx.config?.convergence?.maxAttempts ?? 3;
+    const nv = nextConvergence(res.pass, attemptsSoFar, maxAttempts);
+    const now = new Date().toISOString();
+    // `--allow-plan-review-failure` bypasses ANY failing plan-review (reloop OR
+    // escalate) and proceeds to BUILD; `bypassed` = a failing review the flag
+    // waved through, regardless of verdict.
+    const bypassed = !res.pass && ctx.opts.allowPlanReviewFailure === true;
+    history.push({
+        at: now,
+        pass: res.pass,
+        findingsCount: res.findings.length,
+        provider: res.provider,
+        ...(res.model ? { model: res.model } : {}),
+        verdict: nv.verdict,
+        ...(bypassed ? { bypassed: true } : {}),
+    });
+    await ctx.planReviewSidecar.write(JSON.stringify({
+        draftId: ctx.id,
+        converged: res.pass,
+        attempts: nv.verdict === 'pass' ? attemptsSoFar : nv.attempt,
+        maxAttempts,
+        history,
+        // legacy 29.7 top-level fields preserved for old readers:
+        pass: res.pass,
+        provider: res.provider,
+        ...(res.model ? { model: res.model } : {}),
+        findings: res.findings.length,
+        at: now,
+    }, null, 2) + '\n');
+    if (!res.pass) {
+        for (const f of res.findings) {
+            ctx.io.err(`plan-review: ${f.severity} — ${f.message}\n`);
+            if (f.suggestedEdit) {
+                ctx.io.err(`  ↳ suggested: ${f.suggestedEdit}\n`);
+            }
+        }
+        if (ctx.opts.allowPlanReviewFailure) {
+            // Bypass path — flag waves the failing review through (any verdict).
+            // Still emit the unconverged anomaly when the loop actually escalated.
+            if (nv.verdict === 'escalate') {
+                await ctx.emit.planReviewUnconverged({
+                    draftId: ctx.id,
+                    attempts: nv.attempt,
+                    maxAttempts,
+                    findings: res.findings.length,
+                    provider: res.provider,
+                    ...(res.model ? { model: res.model } : {}),
+                    bypassed: true,
+                });
+            }
+            ctx.io.err(`plan-review: --allow-plan-review-failure set; proceeding past ` +
+                `${res.findings.length} finding(s).\n`);
+            // fall through to pass (BUILD transition).
+        }
+        else if (nv.verdict === 'reloop') {
+            ctx.io.err(`plan-review: attempt ${nv.attempt}/${maxAttempts} did not pass — ` +
+                `fix the DRAFT and re-run \`cadence draft approve\`, ` +
+                `or pass --allow-plan-review-failure to proceed anyway.\n`);
+            return { outcome: 'refuse' };
+        }
+        else {
+            // escalate, no bypass — hard human-decision stop.
+            await ctx.emit.planReviewUnconverged({
+                draftId: ctx.id,
+                attempts: nv.attempt,
+                maxAttempts,
+                findings: res.findings.length,
+                provider: res.provider,
+                ...(res.model ? { model: res.model } : {}),
+            });
+            ctx.io.err(`draft approve refused: plan-review did NOT converge after ` +
+                `${maxAttempts} attempts — a human decision is required. ` +
+                `Re-scope the plan, or pass --allow-plan-review-failure to proceed anyway.\n`);
+            return { outcome: 'refuse' };
+        }
+    }
+    // res.pass (converged) OR bypassed → pass (BUILD transition).
+    return { outcome: 'pass' };
+};
+//# sourceMappingURL=plan-review.js.map

package/dist/gates/plan-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-review.js","sourceRoot":"","sources":["../../src/gates/plan-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkB,KAAK,EAAE,GAAG,EAAuB,EAAE;IACjF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE3E,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAEtE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,4EAA4E;IAC5E,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC;IAEvE,OAAO,CAAC,IAAI,CAAC;QACX,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAC/B,IAAI,CAAC,SAAS,CACZ;QACE,OAAO,EAAE,GAAG,CAAC,EAAE;QACf,SAAS,EAAE,GAAG,CAAC,IAAI;QACnB,QAAQ,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO;QAC5D,WAAW;QACX,OAAO;QACP,0DAA0D;QAC1D,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;QAC7B,EAAE,EAAE,GAAG;KACR,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;gBACpB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACpC,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,EAAE,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC;oBACnC,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,QAAQ,EAAE,EAAE,CAAC,OAAO;oBACpB,WAAW;oBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;oBAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,gEAAgE;gBAC9D,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CACzC,CAAC;YACF,2CAA2C;QAC7C,CAAC;aAAM,IAAI,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,wBAAwB,EAAE,CAAC,OAAO,IAAI,WAAW,kBAAkB;gBACjE,sDAAsD;gBACtD,0DAA0D,CAC7D,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,kDAAkD;YAClD,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBACnC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACf,QAAQ,EAAE,EAAE,CAAC,OAAO;gBACpB,WAAW;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;gBAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,4DAA4D;gBAC1D,GAAG,WAAW,4CAA4C;gBAC1D,6EAA6E,CAChF,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/dist/gates/registry.d.ts

@@ -0,0 +1,53 @@
+import type { Gate } from '@manehorizons/cadence-types';
+import type { GateImpl, SettleAccumulator, SettleContext } from './types.js';
+/**
+ * The settle-dispatched gate subset (Phase 44.1). The four 39.7 gates
+ * (`coherence-check`, `approve`, `plan-review`, `per-task-verify`) fire in
+ * DRAFT/BUILD with their own `DraftGateImpl`/`BuildGateImpl` shapes, and
+ * `anomaly-notify` is a post-gates notify predicate, not a dispatched gate — so
+ * none of them belong in this `GateImpl` registry. Excluding them at the type
+ * level is what makes `GATE_REGISTRY` total over exactly what settle runs.
+ */
+export type SettleGate = Exclude<Gate, 'coherence-check' | 'approve' | 'plan-review' | 'per-task-verify' | 'anomaly-notify'>;
+export interface GateEntry {
+    readonly impl: GateImpl;
+    /**
+     * Invoked unconditionally — the impl self-guards on `opts.* OR membership`
+     * and no-ops when not requested. Only `deep-verify` (`--deep`) and
+     * `interactive-verdict` (`--interactive`), which can fire WITHOUT the gate
+     * being in the set; a pure membership intersection would drop those runs.
+     */
+    readonly selfGuarded?: boolean;
+}
+/**
+ * Total over `SettleGate` — a missing entry is a COMPILE error. The single
+ * source of truth for which settle gates exist; `GATE_ORDER` owns the order.
+ */
+export declare const GATE_REGISTRY: Record<SettleGate, GateEntry>;
+/**
+ * Canonical settle EXECUTION order — cheap→expensive, so the first refusal is
+ * the cheapest. This is NOT the gate-matrix order (`[...ALWAYS_FIRE, ...DELTAS]`
+ * in engine.ts): settle runs deep-verify before code-review, draft-read before
+ * coverage, etc. The driver walks THIS, never `gateSet.gates` array order.
+ */
+export declare const GATE_ORDER: SettleGate[];
+export interface RunGatesResult {
+    readonly acc: SettleAccumulator;
+    readonly refused: boolean;
+}
+/**
+ * Drive the settle gate sequence (Phase 44.1). Walks `GATE_ORDER`, invoking a
+ * gate iff it is `selfGuarded` or present in `ctx.gateSet.gates`, merging each
+ * `GateResult` into the accumulator. The first refusing gate halts the loop —
+ * it has already written its own stderr; the caller sets `process.exitCode`.
+ * Bit-identical to the former hand-wired settle.ts dispatch block.
+ *
+ * `deps` is a test seam (production callers pass only `ctx`): it lets a test
+ * drive the real loop over recording stubs. The defaults ARE the real registry
+ * and order — the object identity wired here is what settle runs.
+ */
+export declare function runSettleGates(ctx: SettleContext, deps?: {
+    registry?: Record<SettleGate, GateEntry>;
+    order?: SettleGate[];
+}): Promise<RunGatesResult>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/gates/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/gates/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAc,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAWzF;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,CAC9B,IAAI,EACJ,iBAAiB,GAAG,SAAS,GAAG,aAAa,GAAG,iBAAiB,GAAG,gBAAgB,CACrF,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CASvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,UAAU,EASlC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;CAAO,GAC5E,OAAO,CAAC,cAAc,CAAC,CAYzB"}

package/dist/gates/registry.js

@@ -0,0 +1,66 @@
+import { mergeInto } from './types.js';
+import { runDraftReadGate } from './draft-read.js';
+import { runStructuralVerifierGate } from './structural-verifier.js';
+import { runBuildTestGate } from './build-test-must-pass.js';
+import { runCoverageGate } from './coverage.js';
+import { runInteractiveGate } from './interactive.js';
+import { runDeepVerifyGate } from './deep-verify.js';
+import { runCodeReviewGate } from './code-review.js';
+import { runSecurityAuditGate } from './security-audit.js';
+/**
+ * Total over `SettleGate` — a missing entry is a COMPILE error. The single
+ * source of truth for which settle gates exist; `GATE_ORDER` owns the order.
+ */
+export const GATE_REGISTRY = {
+    'draft-read': { impl: runDraftReadGate },
+    'structural-verifier': { impl: runStructuralVerifierGate },
+    'build-test-must-pass': { impl: runBuildTestGate },
+    'test-coverage': { impl: runCoverageGate },
+    'interactive-verdict': { impl: runInteractiveGate, selfGuarded: true },
+    'deep-verify': { impl: runDeepVerifyGate, selfGuarded: true },
+    'code-review': { impl: runCodeReviewGate },
+    'security-audit': { impl: runSecurityAuditGate },
+};
+/**
+ * Canonical settle EXECUTION order — cheap→expensive, so the first refusal is
+ * the cheapest. This is NOT the gate-matrix order (`[...ALWAYS_FIRE, ...DELTAS]`
+ * in engine.ts): settle runs deep-verify before code-review, draft-read before
+ * coverage, etc. The driver walks THIS, never `gateSet.gates` array order.
+ */
+export const GATE_ORDER = [
+    'draft-read',
+    'structural-verifier',
+    'build-test-must-pass',
+    'test-coverage',
+    'interactive-verdict',
+    'deep-verify',
+    'code-review',
+    'security-audit',
+];
+/**
+ * Drive the settle gate sequence (Phase 44.1). Walks `GATE_ORDER`, invoking a
+ * gate iff it is `selfGuarded` or present in `ctx.gateSet.gates`, merging each
+ * `GateResult` into the accumulator. The first refusing gate halts the loop —
+ * it has already written its own stderr; the caller sets `process.exitCode`.
+ * Bit-identical to the former hand-wired settle.ts dispatch block.
+ *
+ * `deps` is a test seam (production callers pass only `ctx`): it lets a test
+ * drive the real loop over recording stubs. The defaults ARE the real registry
+ * and order — the object identity wired here is what settle runs.
+ */
+export async function runSettleGates(ctx, deps = {}) {
+    const registry = deps.registry ?? GATE_REGISTRY;
+    const order = deps.order ?? GATE_ORDER;
+    const acc = { flags: {} };
+    for (const gate of order) {
+        const entry = registry[gate];
+        if (!entry.selfGuarded && !ctx.gateSet.gates.includes(gate))
+            continue;
+        const res = await entry.impl(ctx);
+        mergeInto(acc, res);
+        if (res.outcome === 'refuse')
+            return { acc, refused: true };
+    }
+    return { acc, refused: false };
+}
+//# sourceMappingURL=registry.js.map

package/dist/gates/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/gates/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AA0B3D;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkC;IAC1D,YAAY,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACxC,qBAAqB,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC1D,sBAAsB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAClD,eAAe,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;IAC1C,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE;IACtE,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC1C,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;CACjD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,YAAY;IACZ,qBAAqB;IACrB,sBAAsB;IACtB,eAAe;IACf,qBAAqB;IACrB,aAAa;IACb,aAAa;IACb,gBAAgB;CACjB,CAAC;AAOF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAkB,EAClB,OAA2E,EAAE;IAE7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;IACvC,MAAM,GAAG,GAAsB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACtE,MAAM,GAAG,GAAe,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC"}

package/dist/gates/security-audit.d.ts

@@ -0,0 +1,11 @@
+import type { GateImpl } from './types.js';
+/**
+ * Security-audit verifier gate (Phase 25.2). Extracted from settle.ts verbatim
+ * (Phase 39.5). The final, most expensive gate — fires on membership
+ * ('security-audit', strict×complex only). Runs an OWASP-aware pass over the
+ * touched-file diff; CRITICAL findings refuse settle unless --force /
+ * --allow-security-audit-failure. All findings land on SUMMARY.securityAudit.
+ * Reaches git + the auditor only through ctx ports.
+ */
+export declare const runSecurityAuditGate: GateImpl;
+//# sourceMappingURL=security-audit.d.ts.map

package/dist/gates/security-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../../src/gates/security-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAEvD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAuClC,CAAC"}

package/dist/gates/security-audit.js

@@ -0,0 +1,40 @@
+/**
+ * Security-audit verifier gate (Phase 25.2). Extracted from settle.ts verbatim
+ * (Phase 39.5). The final, most expensive gate — fires on membership
+ * ('security-audit', strict×complex only). Runs an OWASP-aware pass over the
+ * touched-file diff; CRITICAL findings refuse settle unless --force /
+ * --allow-security-audit-failure. All findings land on SUMMARY.securityAudit.
+ * Reaches git + the auditor only through ctx ports.
+ */
+export const runSecurityAuditGate = async (ctx) => {
+    const touched = [...ctx.touchedFiles];
+    const diff = ctx.diff();
+    try {
+        const result = await ctx.verifiers.securityAudit.verify({ files: touched, diff });
+        const securityAuditFindings = result.findings;
+        const criticals = result.findings.filter((f) => f.severity === 'critical');
+        const bypassed = ctx.opts.force === true || ctx.opts.allowSecurityAuditFailure === true;
+        if (criticals.length > 0) {
+            for (const c of criticals) {
+                ctx.io.err(`security-audit: ${c.line !== undefined ? `${c.line} ` : ''}critical — ${c.message}\n`);
+            }
+            if (!bypassed) {
+                ctx.io.err(`settle run refused: security-audit reported ${criticals.length} CRITICAL finding(s). ` +
+                    'Pass --allow-security-audit-failure to record them and settle anyway, or --force to bypass.\n');
+                return { outcome: 'refuse', summaryPatch: { securityAudit: securityAuditFindings } };
+            }
+            const flag = ctx.opts.force === true ? '--force' : '--allow-security-audit-failure';
+            ctx.io.err(`security-audit: ${flag} set; proceeding past ${criticals.length} CRITICAL finding(s).\n`);
+        }
+        return { outcome: 'pass', summaryPatch: { securityAudit: securityAuditFindings } };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        ctx.io.err(`security-audit: verifier failed — ${message}. Pass --allow-security-audit-failure to continue.\n`);
+        if (ctx.opts.allowSecurityAuditFailure !== true && ctx.opts.force !== true) {
+            return { outcome: 'refuse' };
+        }
+        return { outcome: 'pass' };
+    }
+};
+//# sourceMappingURL=security-audit.js.map

package/dist/gates/security-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.js","sourceRoot":"","sources":["../../src/gates/security-audit.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa,KAAK,EAAE,GAAG,EAAuB,EAAE;IAC/E,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QAC3E,MAAM,QAAQ,GACZ,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,yBAAyB,KAAK,IAAI,CAAC;QACzE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,mBAAmB,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,OAAO,IAAI,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,+CAA+C,SAAS,CAAC,MAAM,wBAAwB;oBACrF,+FAA+F,CAClG,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,CAAC;YACvF,CAAC;YACD,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC;YACzE,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,mBAAmB,IAAI,yBAAyB,SAAS,CAAC,MAAM,yBAAyB,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,qCAAqC,OAAO,sDAAsD,CACnG,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,CAAC,yBAAyB,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC"}

package/dist/gates/structural-verifier.d.ts

@@ -0,0 +1,8 @@
+import type { GateImpl } from './types.js';
+/**
+ * Structural-verifier gate (DESIGN.md §4.1 always-fire). Wired for real in
+ * Phase 39.2: refuses settle while any task is non-terminal, unless
+ * --allow-open-tasks / --force. Pure policy over `ctx.progress.tasks`.
+ */
+export declare const runStructuralVerifierGate: GateImpl;
+//# sourceMappingURL=structural-verifier.d.ts.map

package/dist/gates/structural-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-verifier.d.ts","sourceRoot":"","sources":["../../src/gates/structural-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAUvD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAevC,CAAC"}

package/dist/gates/structural-verifier.js

@@ -0,0 +1,25 @@
+/**
+ * Terminal task statuses (DESIGN.md §4.1 "structural verifier"). A task in any
+ * other status (PENDING / IN_PROGRESS) is "open" and blocks settle.
+ * `DONE_WITH_CONCERNS` is terminal — a done-with-concerns task is settled, not
+ * open (docs/concepts.md historically undercounted it; corrected Phase 39.2).
+ */
+const TERMINAL = new Set(['DONE', 'DONE_WITH_CONCERNS', 'NEEDS_CONTEXT', 'BLOCKED']);
+/**
+ * Structural-verifier gate (DESIGN.md §4.1 always-fire). Wired for real in
+ * Phase 39.2: refuses settle while any task is non-terminal, unless
+ * --allow-open-tasks / --force. Pure policy over `ctx.progress.tasks`.
+ */
+export const runStructuralVerifierGate = async (ctx) => {
+    const open = Object.entries(ctx.progress.tasks).filter(([, t]) => !TERMINAL.has(t.status));
+    if (open.length > 0 && !ctx.opts.allowOpenTasks && !ctx.opts.force) {
+        for (const [id, t] of open) {
+            ctx.io.err(`structural-verifier: task ${id} is ${t.status} (not terminal)\n`);
+        }
+        ctx.io.err('settle run refused: all tasks must be terminal (DONE / DONE_WITH_CONCERNS / NEEDS_CONTEXT / BLOCKED). ' +
+            'Pass --allow-open-tasks to bypass, or --force to settle anyway.\n');
+        return { outcome: 'refuse' };
+    }
+    return { outcome: 'pass' };
+};
+//# sourceMappingURL=structural-verifier.js.map

package/dist/gates/structural-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-verifier.js","sourceRoot":"","sources":["../../src/gates/structural-verifier.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAa,KAAK,EAAE,GAAG,EAAuB,EAAE;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CACnC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAChF,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,wGAAwG;YACtG,mEAAmE,CACtE,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC"}