@open-agent-toolkit/cli 0.1.35 → 0.1.37

package/assets/skills/oat-project-review-provide/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: oat-project-review-provide
-version: 1.3.7
+version: 1.3.8
 description: Use when the user explicitly asks to review an OAT project — e.g. "review project", "review the project", "run project review", or confirms a previously offered review. Do NOT auto-invoke on completed work alone. Resolves a project review scope and offers before running.
 disable-model-invocation: false
 user-invocable: true
-allowed-tools: Read, Glob, Grep, Bash(git:*), AskUserQuestion
+allowed-tools: Read, Glob, Grep, Write, Edit, Bash(git:*), Bash(oat:*), Bash(pnpm:*), Bash(mkdir:*), Bash(date:*), Bash(realpath:*), Bash(awk:*), AskUserQuestion
 ---
 
 # Request Review
@@ -639,7 +639,7 @@ oat_generated: true
 oat_generated_at: { today }
 oat_review_scope: { scope }
 oat_review_type: { code|artifact }
-oat_review_invocation: { manual|auto }
+oat_review_invocation: { manual|auto|gate }
 oat_project: { PROJECT_PATH }
 ---
 
@@ -655,13 +655,21 @@ oat_project: { PROJECT_PATH }
 
 - `manual` (default): Review was manually triggered by the user. `oat-project-review-receive` uses standard disposition behavior (user prompts for triage, minors auto-deferred for non-final scopes).
 - `auto`: Review was spawned by the auto-review checkpoint trigger in `oat-project-implement`. `oat-project-review-receive` uses relaxed disposition: minors are auto-converted to fix tasks (not deferred), no user prompts for disposition decisions.
+- `gate`: Review was spawned by `oat gate review`. Gate-originated reviews use normal stateful review-provide behavior: write the review artifact, update the `## Reviews` row, and commit review bookkeeping. `oat-project-review-receive` treats gate reviews with the same standard disposition behavior as manual reviews unless a future implementation explicitly designs autonomous receive.
 
-When `oat-project-implement` spawns this skill for auto-review at checkpoints, it passes context indicating auto invocation. Set `oat_review_invocation: auto` in the artifact frontmatter. For all other invocations (user-triggered, fresh session), use `manual`.
+When `oat-project-implement` spawns this skill for auto-review at checkpoints, it passes context indicating auto invocation. Set `oat_review_invocation: auto` in the artifact frontmatter. When `oat gate review` spawns this skill, set `oat_review_invocation: gate`. For all other invocations (user-triggered, fresh session), use `manual`.
+
+Gate parsing contract:
+
+- Include either the `Findings: {N} critical, {N} important, {N} medium, {N} minor` summary line or the standard `## Findings` section with `### Critical`, `### Important`, `### Medium`, and `### Minor` subsections populated with findings or `None`.
+- Do not omit severity headings merely because a severity has zero findings; `oat gate review` depends on counts or standard Findings sections to determine whether the review blocks.
 
 ## Summary
 
 {2-3 sentence summary}
 
+Findings: {N} critical, {N} important, {N} medium, {N} minor
+
 ## Findings
 
 ### Critical

package/assets/skills/oat-project-review-receive/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-receive
-version: 1.5.3
+version: 1.5.4
 description: Use when the user explicitly asks to receive review findings for an OAT project — e.g. "receive review", "process review", "process the project review", or confirms a previously offered review-receive step. Do NOT auto-invoke merely because a review file exists. Resolves the latest review and offers before acting.
 disable-model-invocation: false
 user-invocable: true
@@ -274,6 +274,8 @@ Read `oat_review_type` and `oat_review_invocation` from review artifact frontmat
     - **No user prompts for disposition decisions.** The auto-review path runs fully autonomously.
     - Genuinely ambiguous findings (e.g., a medium the agent disagrees with) are deferred with a note explaining why, rather than pausing for interactive resolution.
   - Follow the task-conversion flow in Steps 3-10 with these adjusted defaults.
+- If `oat_review_type == code` AND `oat_review_invocation == gate`:
+  - **Gate review mode.** This review was spawned by `oat gate review`, but receive remains standard disposition behavior. Treat `gate` the same as manual for prompts, finding conversion, artifact archival, and bookkeeping unless a future implementation explicitly designs an autonomous receive path.
 - If `oat_review_type == code` (manual or `oat_review_invocation` absent):
   - Follow the existing task-conversion flow in Steps 3-10 with standard disposition behavior.
 

package/dist/commands/gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAQL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAmCD,UAAU,iBAAiB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC7B;AAED,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,kBAAkB,GAAG,cAAc,GAAG,MAAM,CAAC;AAKlD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;CACpB;AAmWD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,GAAG,IAAI,CAE3B;AA2SD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAoIT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAQL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AA0CD,UAAU,iBAAiB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC7B;AAED,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,kBAAkB,GAAG,cAAc,GAAG,MAAM,CAAC;AAMlD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;CACpB;AAyZD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,GAAG,IAAI,CAE3B;AA+wBD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAwKT"}

package/dist/commands/gate/index.js

@@ -1,11 +1,16 @@
 import { spawn } from 'node:child_process';
-import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { readdir, readFile } from 'node:fs/promises';
+import { basename, isAbsolute, join, relative } from 'node:path';
 import { buildCommandContext, } from '../../app/command-context.js';
+import { getFrontmatterBlock, getFrontmatterField, } from '../shared/frontmatter.js';
 import { readGlobalOptions } from '../shared/shared.utils.js';
 import { BUILTIN_EXEC_TARGETS, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
 import { resolveEffectiveConfig, resolveExecTargets, resolveGate, } from '../../config/resolve.js';
-import { resolveProjectRoot } from '../../fs/paths.js';
+import { dirExists, fileExists } from '../../fs/io.js';
+import { normalizeToPosixPath, resolveProjectRoot } from '../../fs/paths.js';
 import { Command } from 'commander';
+import { parseReviewGateVerdict, } from './review-verdict.js';
 const DEFAULT_DEPENDENCIES = {
     buildCommandContext,
     resolveProjectRoot,
@@ -29,6 +34,22 @@ const VALID_CROSS_PROVIDER_AVOIDS = [
     'same-runtime',
     'none',
 ];
+const VALID_REVIEW_GATE_THRESHOLDS = [
+    'critical',
+    'important',
+    'medium',
+    'minor',
+];
+const REVIEW_GATE_CONTEXT_NOTE = 'This review is gate-originated. If you run `oat-project-review-provide`, set `oat_review_invocation: gate` in the review artifact.';
+function reviewGateProjectContext(projectPath) {
+    return `Resolved OAT project path: ${projectPath}. Run the review for this project path.`;
+}
+function assembleReviewGatePrompt(segments) {
+    return segments
+        .map((segment) => segment.trim())
+        .filter((segment) => segment.length > 0)
+        .join('\n\n');
+}
 async function runChildProcess(command, args, options) {
     return new Promise((resolve, reject) => {
         const child = spawn(command, args, {
@@ -90,6 +111,13 @@ function parseCrossProviderAvoid(value) {
     }
     return avoid;
 }
+function parseReviewGateThreshold(value) {
+    const threshold = value?.trim() || 'important';
+    if (!VALID_REVIEW_GATE_THRESHOLDS.includes(threshold)) {
+        throw new Error('--exit-nonzero-on must be one of critical | important | medium | minor.');
+    }
+    return threshold;
+}
 function parseOnFailure(value) {
     if (!value || !VALID_ON_FAILURE.includes(value)) {
         throw new Error('--on-failure must be one of block | prompt | warn.');
@@ -149,6 +177,15 @@ function parseGateConfig(options) {
             : {}),
     };
 }
+function detectDevBuildGateCommandWarnings(command) {
+    const normalized = command.trim();
+    if (!/^node\s+(?:"[^"]*\/packages\/cli\/dist\/index\.js"|'[^']*\/packages\/cli\/dist\/index\.js'|\S*\/packages\/cli\/dist\/index\.js)\s+gate(?:\s|$)/.test(normalized)) {
+        return [];
+    }
+    return [
+        'Durable docs/config should reference `oat gate ...`; absolute dev-build paths are reserved for local development of unmerged behavior.',
+    ];
+}
 function parseExecTargetConfig(options) {
     if (options.disable) {
         return null;
@@ -299,6 +336,23 @@ async function selectAvailableExecTarget(registry, currentRuntime, avoid, contex
     }
     return null;
 }
+async function resolveSelectedExecTarget(targets, options, context, dependencies) {
+    const explicitTarget = options.target?.trim();
+    if (explicitTarget) {
+        const target = targets[explicitTarget];
+        if (!target) {
+            throw new Error(`Unknown exec target "${explicitTarget}".`);
+        }
+        return { id: explicitTarget, target: cloneExecTarget(target) };
+    }
+    const avoid = parseCrossProviderAvoid(options.avoid);
+    const currentRuntime = await resolveCurrentRuntime(options.currentRuntime, context, dependencies);
+    const selected = await selectAvailableExecTarget(targets, currentRuntime, avoid, context, dependencies);
+    if (!selected) {
+        throw new Error(noEligibleTargetMessage(currentRuntime, avoid));
+    }
+    return selected;
+}
 async function executeTarget(selected, prompt, context, dependencies) {
     const [command, baseArgs] = argvHead(selected.target.baseCommand);
     if (!command) {
@@ -321,6 +375,217 @@ async function executeTarget(selected, prompt, context, dependencies) {
 function noEligibleTargetMessage(currentRuntime, avoid) {
     return `No eligible gate exec target found for current runtime "${currentRuntime}" with --avoid ${avoid}. Install or configure an alternate runtime, rerun with --avoid none, or pin a target with --target <id>.`;
 }
+function normalizeRepoRelativeProjectPath(repoRoot, pathValue) {
+    const trimmed = pathValue.trim().replace(/\/+$/, '');
+    const withoutState = trimmed.endsWith('/state.md')
+        ? trimmed.slice(0, -'/state.md'.length)
+        : trimmed;
+    const repoRelative = isAbsolute(withoutState)
+        ? relative(repoRoot, withoutState)
+        : withoutState;
+    const normalized = normalizeToPosixPath(repoRelative).replace(/^\.\//, '');
+    if (normalized === '..' || normalized.startsWith('../')) {
+        throw new Error(`Project path must resolve inside the current repository: ${pathValue}`);
+    }
+    return normalized;
+}
+async function listProjectCandidates(repoRoot, projectsRoot) {
+    const normalizedProjectsRoot = normalizeRepoRelativeProjectPath(repoRoot, projectsRoot);
+    const absoluteProjectsRoot = join(repoRoot, normalizedProjectsRoot);
+    let scopeEntries;
+    try {
+        scopeEntries = await readdir(absoluteProjectsRoot, { withFileTypes: true });
+    }
+    catch (error) {
+        if (typeof error === 'object' &&
+            error !== null &&
+            'code' in error &&
+            error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    const candidates = (await Promise.all(scopeEntries
+        .filter((entry) => entry.isDirectory())
+        .map(async (scopeEntry) => {
+        const directProjectPath = normalizeToPosixPath(join(normalizedProjectsRoot, scopeEntry.name));
+        if (await fileExists(join(repoRoot, directProjectPath, 'state.md'))) {
+            return [directProjectPath];
+        }
+        const scopePath = join(absoluteProjectsRoot, scopeEntry.name);
+        const projectEntries = await readdir(scopePath, {
+            withFileTypes: true,
+        });
+        return Promise.all(projectEntries
+            .filter((entry) => entry.isDirectory())
+            .map(async (projectEntry) => {
+            const projectPath = normalizeToPosixPath(join(normalizedProjectsRoot, scopeEntry.name, projectEntry.name));
+            return (await fileExists(join(repoRoot, projectPath, 'state.md')))
+                ? projectPath
+                : null;
+        }));
+    })))
+        .flat()
+        .filter((candidate) => candidate !== null)
+        .sort();
+    return candidates;
+}
+async function assertProjectPath(repoRoot, projectPath, source) {
+    const normalizedPath = normalizeRepoRelativeProjectPath(repoRoot, projectPath);
+    const absolutePath = join(repoRoot, normalizedPath);
+    if (!(await dirExists(absolutePath)) ||
+        !(await fileExists(join(absolutePath, 'state.md')))) {
+        throw new Error(`${source} project "${projectPath}" does not resolve to a project directory containing state.md.`);
+    }
+    return normalizedPath;
+}
+async function resolveExplicitReviewProject(repoRoot, projectsRoot, projectValue) {
+    const trimmed = projectValue.trim();
+    if (!trimmed) {
+        throw new Error('--project must be a non-empty project path or name.');
+    }
+    const looksLikePath = trimmed.includes('/') || trimmed.startsWith('.') || isAbsolute(trimmed);
+    if (looksLikePath) {
+        return assertProjectPath(repoRoot, trimmed, '--project');
+    }
+    const candidates = await listProjectCandidates(repoRoot, projectsRoot);
+    const matches = candidates.filter((candidate) => basename(candidate) === trimmed);
+    if (matches.length === 1) {
+        return matches[0];
+    }
+    if (matches.length > 1) {
+        throw new Error(`Multiple OAT projects match --project "${trimmed}": ${matches.join(', ')}. Pass a full project path instead.`);
+    }
+    return assertProjectPath(repoRoot, `${projectsRoot}/${trimmed}`, '--project');
+}
+async function resolveReviewProject(options) {
+    const projectsRoot = String(options.effective.resolved['projects.root']?.value ??
+        options.effective.shared.projects?.root ??
+        '.oat/projects/shared');
+    if (options.project !== undefined) {
+        return resolveExplicitReviewProject(options.repoRoot, projectsRoot, options.project);
+    }
+    const activeProject = options.effective.local.activeProject?.trim();
+    if (activeProject) {
+        return assertProjectPath(options.repoRoot, activeProject, 'Active');
+    }
+    const candidates = await listProjectCandidates(options.repoRoot, projectsRoot);
+    if (candidates.length === 0) {
+        throw new Error('No OAT project could be resolved for gate review. Set an active project or pass --project <path-or-name>.');
+    }
+    if (candidates.length > 1) {
+        throw new Error(`Multiple OAT projects could be resolved for gate review: ${candidates.join(', ')}. Pass --project <path-or-name>.`);
+    }
+    return candidates[0];
+}
+function reviewGateLifecycleRank(scope) {
+    const normalizedScope = scope.trim().toLowerCase();
+    if (normalizedScope === 'final') {
+        return Number.MAX_SAFE_INTEGER;
+    }
+    const phases = [...normalizedScope.matchAll(/p(\d+)/g)].map((match) => Number.parseInt(match[1] ?? '0', 10));
+    if (phases.length === 0) {
+        return 0;
+    }
+    const tasks = [...normalizedScope.matchAll(/(?:^|[-_])t(\d+)/g)].map((match) => Number.parseInt(match[1] ?? '0', 10));
+    const latestPhase = Math.max(...phases);
+    const latestTask = tasks.length > 0 ? Math.max(...tasks) : 9999;
+    return latestPhase * 10_000 + latestTask;
+}
+async function readReviewGateArtifactCandidate(repoRoot, relativePath) {
+    const content = await readFile(join(repoRoot, relativePath), 'utf8');
+    const frontmatter = getFrontmatterBlock(content);
+    if (!frontmatter) {
+        return null;
+    }
+    const generatedAt = getFrontmatterField(frontmatter, 'oat_generated_at');
+    if (!generatedAt) {
+        return null;
+    }
+    const generatedTime = Date.parse(generatedAt);
+    if (Number.isNaN(generatedTime)) {
+        return null;
+    }
+    const scope = getFrontmatterField(frontmatter, 'oat_review_scope') ?? '';
+    return {
+        path: relativePath,
+        scope,
+        generatedAt,
+        kind: 'project',
+        archived: false,
+        actionable: true,
+        generatedTime,
+        lifecycleRank: reviewGateLifecycleRank(scope),
+        signature: createHash('sha256').update(content).digest('hex'),
+    };
+}
+function sortReviewGateArtifacts(left, right) {
+    if (left.generatedTime !== right.generatedTime) {
+        return right.generatedTime - left.generatedTime;
+    }
+    if (left.lifecycleRank !== right.lifecycleRank) {
+        return right.lifecycleRank - left.lifecycleRank;
+    }
+    return left.path.localeCompare(right.path);
+}
+async function listActiveProjectReviewCandidates(options) {
+    const projectPath = normalizeRepoRelativeProjectPath(options.repoRoot, options.projectPath);
+    const reviewsDir = `${projectPath}/reviews`;
+    let entries;
+    try {
+        entries = await readdir(join(options.repoRoot, reviewsDir), {
+            withFileTypes: true,
+        });
+    }
+    catch (error) {
+        if (typeof error === 'object' &&
+            error !== null &&
+            'code' in error &&
+            error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    return (await Promise.all(entries
+        .filter((entry) => entry.isFile() && entry.name.endsWith('.md'))
+        .map((entry) => readReviewGateArtifactCandidate(options.repoRoot, normalizeToPosixPath(join(reviewsDir, entry.name))))))
+        .filter((candidate) => candidate !== null)
+        .sort(sortReviewGateArtifacts);
+}
+function findProducedReviewArtifact(before, after) {
+    const beforeSignatures = new Map(before.map((candidate) => [candidate.path, candidate.signature]));
+    return (after.find((candidate) => beforeSignatures.get(candidate.path) !== candidate.signature) ?? null);
+}
+function reviewBlocksAtThreshold(verdict, threshold) {
+    if (verdict.counts.critical > 0) {
+        return true;
+    }
+    if (threshold === 'critical') {
+        return false;
+    }
+    if (verdict.counts.important > 0) {
+        return true;
+    }
+    if (threshold === 'important') {
+        return false;
+    }
+    if (verdict.counts.medium > 0) {
+        return true;
+    }
+    if (threshold === 'medium') {
+        return false;
+    }
+    return verdict.counts.minor > 0;
+}
+function writeReviewGateResult(context, payload) {
+    if (context.json) {
+        context.logger.json(payload);
+        return;
+    }
+    context.logger.info(`Review artifact: ${payload.artifactPath}`);
+    context.logger.info(`Verdict: ${payload.status} (critical=${payload.counts.critical}, important=${payload.counts.important}, medium=${payload.counts.medium}, minor=${payload.counts.minor})`);
+    context.logger.info(payload.handoff);
+}
 async function updateConfigLayer(context, layer, dependencies, mutate) {
     const repoRoot = await dependencies.resolveProjectRoot(context.cwd);
     const userConfigDir = join(context.home, '.oat');
@@ -352,8 +617,21 @@ async function runGateSet(skillName, options, context, dependencies) {
         const layer = parseLayer(options.layer);
         const normalizedSkill = trimRequired(skillName, '<skill>');
         const gate = parseGateConfig(options);
+        const warnings = gate
+            ? detectDevBuildGateCommandWarnings(gate.command)
+            : [];
         await updateConfigLayer(context, layer, dependencies, (config) => setSkillGate(config, normalizedSkill, gate));
-        writeSuccess(context, { layer, skill: normalizedSkill, gate });
+        if (!context.json) {
+            for (const warning of warnings) {
+                context.logger.warn(warning);
+            }
+        }
+        writeSuccess(context, {
+            layer,
+            skill: normalizedSkill,
+            gate,
+            ...(warnings.length > 0 ? { warnings } : {}),
+        });
         process.exitCode = 0;
     }
     catch (error) {
@@ -401,22 +679,71 @@ async function runCrossProviderExec(prompt, options, context, dependencies) {
     try {
         const effective = await readEffectiveConfig(context, dependencies);
         const targets = resolveExecTargets(effective);
-        const explicitTarget = options.target?.trim();
-        if (explicitTarget) {
-            const target = targets[explicitTarget];
-            if (!target) {
-                throw new Error(`Unknown exec target "${explicitTarget}".`);
-            }
-            process.exitCode = await executeTarget({ id: explicitTarget, target: cloneExecTarget(target) }, prompt, context, dependencies);
+        const selected = await resolveSelectedExecTarget(targets, options, context, dependencies);
+        process.exitCode = await executeTarget(selected, prompt, context, dependencies);
+    }
+    catch (error) {
+        writeError(context, error);
+    }
+}
+async function runReviewGate(prompt, options, context, dependencies) {
+    try {
+        const repoRoot = await dependencies.resolveProjectRoot(context.cwd);
+        const userConfigDir = join(context.home, '.oat');
+        const effective = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
+        const projectPath = await resolveReviewProject({
+            repoRoot,
+            effective,
+            project: options.project,
+        });
+        const targets = resolveExecTargets(effective);
+        const selected = await resolveSelectedExecTarget(targets, options, context, dependencies);
+        const threshold = parseReviewGateThreshold(options.exitNonzeroOn);
+        const before = await listActiveProjectReviewCandidates({
+            repoRoot,
+            projectPath,
+        });
+        const reviewPrompt = assembleReviewGatePrompt([
+            REVIEW_GATE_CONTEXT_NOTE,
+            reviewGateProjectContext(projectPath),
+            ...(options.reviewType?.trim()
+                ? [`Review type: ${options.reviewType.trim()}.`]
+                : []),
+            ...(options.reviewScope?.trim()
+                ? [`Review scope: ${options.reviewScope.trim()}.`]
+                : []),
+            prompt.join(' '),
+        ]);
+        const childExitCode = await executeTarget(selected, [reviewPrompt], context, dependencies);
+        if (childExitCode !== 0) {
+            process.exitCode = childExitCode;
             return;
         }
-        const avoid = parseCrossProviderAvoid(options.avoid);
-        const currentRuntime = await resolveCurrentRuntime(options.currentRuntime, context, dependencies);
-        const selected = await selectAvailableExecTarget(targets, currentRuntime, avoid, context, dependencies);
-        if (!selected) {
-            throw new Error(noEligibleTargetMessage(currentRuntime, avoid));
+        const after = await listActiveProjectReviewCandidates({
+            repoRoot,
+            projectPath,
+        });
+        const producedArtifact = findProducedReviewArtifact(before, after);
+        if (!producedArtifact) {
+            throw new Error(`No new review artifact was detected for project ${projectPath}. Ensure the review provider wrote a project review artifact before the gate exits.`);
         }
-        process.exitCode = await executeTarget(selected, prompt, context, dependencies);
+        const verdict = await parseReviewGateVerdict(join(repoRoot, producedArtifact.path));
+        const blocking = reviewBlocksAtThreshold(verdict, threshold);
+        const handoff = `Run oat-project-review-receive for ${producedArtifact.path} before treating this gate review as consumed.`;
+        writeReviewGateResult(context, {
+            status: blocking ? 'blocked' : 'ok',
+            target: selected.id,
+            project: projectPath,
+            artifactPath: producedArtifact.path,
+            threshold,
+            blocking,
+            counts: verdict.counts,
+            reviewType: verdict.reviewType,
+            scope: verdict.scope,
+            invocation: verdict.invocation,
+            handoff,
+        });
+        process.exitCode = blocking ? 1 : 0;
     }
     catch (error) {
         writeError(context, error);
@@ -470,6 +797,21 @@ export function createGateCommand(overrides = {}) {
         const context = dependencies.buildCommandContext(readGlobalOptions(command));
         await runCrossProviderExec(prompt, options, context, dependencies);
     });
+    cmd
+        .command('review')
+        .description('Run a review gate and map review findings to exit status')
+        .option('--target <id>', 'Run this exact exec target')
+        .option('--avoid <mode>', 'Avoidance mode: same-runtime or none')
+        .option('--current-runtime <runtime>', 'Override detected runtime for testing or manual routing')
+        .option('--project <path-or-name>', 'Project path or name to review; defaults to the active project')
+        .option('--review-scope <scope>', 'Review scope hint for the provider')
+        .option('--review-type <type>', 'Review type hint for the provider')
+        .option('--exit-nonzero-on <severity>', 'Lowest severity that exits nonzero: critical, important, medium, or minor')
+        .argument('<prompt...>', 'Review prompt arguments appended to the target command')
+        .action(async (prompt, options, command) => {
+        const context = dependencies.buildCommandContext(readGlobalOptions(command));
+        await runReviewGate(prompt, options, context, dependencies);
+    });
     const target = new Command('target').description('Manage gate execution targets');
     target
         .command('set')

package/dist/commands/gate/review-verdict.d.ts

@@ -0,0 +1,15 @@
+export interface ReviewGateVerdict {
+    artifactPath: string;
+    reviewType: 'code' | 'artifact' | 'unknown';
+    scope: string | null;
+    invocation: string | null;
+    counts: {
+        critical: number;
+        important: number;
+        medium: number;
+        minor: number;
+    };
+    blocking: boolean;
+}
+export declare function parseReviewGateVerdict(artifactPath: string): Promise<ReviewGateVerdict>;
+//# sourceMappingURL=review-verdict.d.ts.map

package/dist/commands/gate/review-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/review-verdict.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB;AA2ND,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAmC5B"}