@open-agent-toolkit/cli 0.1.66 → 0.1.72

package/dist/commands/gate/__fixtures__/fake-runtime.mjs

@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { writeSync } from 'node:fs';
+import { appendFile, mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+const prompt = process.argv.at(-1) ?? '';
+const delayMs = Number(process.env.FAKE_GATE_DELAY_MS ?? '0');
+const exitCode = Number(process.env.FAKE_GATE_EXIT_CODE ?? '0');
+const artifactMode = process.env.FAKE_GATE_ARTIFACT ?? 'none';
+const transcriptIntervalMs = Number(process.env.FAKE_GATE_TRANSCRIPT_INTERVAL_MS ?? '0');
+function promptValue(key) {
+    return prompt.match(new RegExp(`^${key}: (.+)$`, 'm'))?.[1] ?? 'unknown';
+}
+function projectPath() {
+    return (prompt.match(/^Resolved OAT project path: (.+)\. Run the review/m)?.[1] ??
+        '.oat/projects/shared/demo');
+}
+async function writeTranscript() {
+    const encodedCwd = process.cwd().split(/[/.]/u).filter(Boolean).join('-');
+    const transcriptRoot = process.env.FAKE_GATE_TRANSCRIPT_DIR ??
+        join(process.env.HOME ?? '', '.cursor', 'projects', encodedCwd, 'agent-transcripts');
+    const transcript = join(transcriptRoot, 'fake-session', 'fake-session.jsonl');
+    await mkdir(join(transcript, '..'), { recursive: true });
+    await appendFile(transcript, `${Date.now()}\n`);
+}
+async function writeArtifact() {
+    const runId = artifactMode === 'wrong-run'
+        ? 'wrong-run-id'
+        : promptValue('oat_gate_run_id');
+    const project = projectPath();
+    const reviewsDir = join(process.cwd(), project, 'reviews');
+    await mkdir(reviewsDir, { recursive: true });
+    await writeFile(join(reviewsDir, `fake-review-${Date.now()}.md`), [
+        '---',
+        'oat_generated: true',
+        `oat_generated_at: ${new Date().toISOString()}`,
+        `oat_review_type: ${prompt.match(/^Review type: (.+)\.$/m)?.[1] ?? 'code'}`,
+        `oat_review_scope: ${prompt.match(/^Review scope: (.+)\.$/m)?.[1] ?? 'final'}`,
+        'oat_review_invocation: gate',
+        `oat_project: ${project}`,
+        `oat_gate_run_id: ${runId}`,
+        `oat_gate_target: ${promptValue('oat_gate_target')}`,
+        `oat_gate_runtime: ${promptValue('oat_gate_runtime')}`,
+        `oat_invocation_model: ${promptValue('oat_invocation_model')}`,
+        `oat_invocation_reasoning_effort: ${promptValue('oat_invocation_reasoning_effort')}`,
+        `oat_invocation_source: ${promptValue('oat_invocation_source')}`,
+        'oat_review_critical_count: 0',
+        'oat_review_important_count: 0',
+        'oat_review_medium_count: 0',
+        'oat_review_minor_count: 0',
+        '---',
+        '',
+        '# Fake runtime review',
+        '',
+        '## Findings',
+        '',
+        '### Critical',
+        '',
+        'None',
+        '',
+        '### Important',
+        '',
+        'None',
+        '',
+        '### Medium',
+        '',
+        'None',
+        '',
+        '### Minor',
+        '',
+        'None',
+        '',
+    ].join('\n'));
+}
+if (process.env.FAKE_GATE_REQUIRE_HEADLESS === '1') {
+    if (process.env.OAT_GATE_HEADLESS !== '1' ||
+        process.env.OAT_NON_INTERACTIVE !== '1' ||
+        !process.env.OAT_GATE_RUN_ID) {
+        process.stdout.write('OAT_GATE_REFUSAL: fake runtime did not receive headless context\n');
+        process.exit(9);
+    }
+}
+if (process.env.FAKE_GATE_WRITE_ROUTE_RECEIPT_RUNTIME &&
+    !process.env.FAKE_GATE_REQUIRE_ROUTE_RUNTIME) {
+    await writeFile(process.env.OAT_GATE_ROUTE_RECEIPT_PATH, JSON.stringify({
+        route: 'inline',
+        reason: 'deterministic fake route receipt',
+        cliRoot: process.env.OAT_GATE_CLI_ROOT,
+        runtime: process.env.FAKE_GATE_WRITE_ROUTE_RECEIPT_RUNTIME,
+    }));
+}
+if (process.env.FAKE_GATE_REQUIRE_ROUTE_RUNTIME) {
+    const cliPath = process.env.OAT_GATE_CLI_PATH;
+    const cliRoot = process.env.OAT_GATE_CLI_ROOT;
+    const configuredRuntime = process.env.FAKE_GATE_REQUIRE_ROUTE_RUNTIME;
+    const runtime = process.env.OAT_GATE_RUNTIME;
+    const model = process.env.OAT_INVOCATION_MODEL;
+    const promptRuntime = promptValue('oat_gate_runtime');
+    const promptModel = promptValue('oat_invocation_model');
+    if (!runtime ||
+        !model ||
+        runtime !== configuredRuntime ||
+        runtime !== promptRuntime ||
+        model !== promptModel) {
+        writeSync(1, `FAKE_GATE_ROUTE_INPUT_ERROR:${String(runtime)}:${String(model)}:${configuredRuntime}:${promptRuntime}:${promptModel}\n`);
+        process.stdout.write('OAT_GATE_REFUSAL: canonical gate route inputs were absent or inconsistent\n');
+        process.exit(10);
+    }
+    const marker = runtime === 'claude'
+        ? { CLAUDECODE: '1' }
+        : runtime === 'cursor'
+            ? { CURSOR_AGENT: '1' }
+            : { CODEX_SESSION_ID: 'fake-session' };
+    const result = cliPath
+        ? spawnSync(cliPath, [
+            'gate',
+            'route',
+            '--json',
+            '--expect-runtime',
+            runtime,
+            '--expect-model',
+            model,
+            '--can-await',
+            'false',
+        ], {
+            encoding: 'utf8',
+            env: { ...process.env, ...marker },
+        })
+        : undefined;
+    let route;
+    try {
+        route = result?.status === 0 ? JSON.parse(result.stdout) : undefined;
+    }
+    catch {
+        route = undefined;
+    }
+    if (route?.route !== 'inline' ||
+        route?.cliRoot !== cliRoot ||
+        typeof route?.reason !== 'string') {
+        writeSync(1, `FAKE_GATE_ROUTE_ERROR:${result?.status ?? 'absent'}:${JSON.stringify(result?.stdout ?? '')}:${JSON.stringify(result?.stderr ?? '')}:${String(route?.cliRoot)}:${String(cliRoot)}\n`);
+        process.stdout.write('OAT_GATE_REFUSAL: branch-local gate route was unavailable or invalid\n');
+        process.exit(10);
+    }
+    if (process.env.FAKE_GATE_REPORT_ROUTE === '1') {
+        process.stdout.write(`FAKE_GATE_ROUTE:${route.route}:${runtime}:${model}:${route.cliRoot}\n`);
+    }
+}
+if (process.env.FAKE_GATE_STDOUT) {
+    process.stdout.write(`${process.env.FAKE_GATE_STDOUT}\n`);
+}
+if (process.env.FAKE_GATE_REFUSAL) {
+    process.stdout.write(`OAT_GATE_REFUSAL: ${process.env.FAKE_GATE_REFUSAL}\n`);
+}
+let transcriptTimer;
+if (transcriptIntervalMs > 0) {
+    await writeTranscript();
+    transcriptTimer = setInterval(() => {
+        void writeTranscript();
+    }, transcriptIntervalMs);
+}
+await new Promise((resolve) => setTimeout(resolve, delayMs));
+if (transcriptTimer)
+    clearInterval(transcriptTimer);
+if (artifactMode === 'correlated' || artifactMode === 'wrong-run') {
+    await writeArtifact();
+}
+process.exit(exitCode);

package/dist/commands/gate/activity-probes.d.ts

@@ -0,0 +1,35 @@
+export interface GateActivityEvidence {
+    source: 'transcript-dir';
+    runtime: string;
+    scope: 'project-dir' | 'ambient-runtime';
+    observedPath: string;
+    lastChangeAt: number | null;
+    totalSizeBytes: number | null;
+    changedSinceBaseline: boolean;
+    observedAt: number;
+}
+export interface GateActivityProbeStatus {
+    status: 'available' | 'path-absent' | 'error';
+    runtime: string;
+    scope: 'project-dir' | 'ambient-runtime';
+    attemptedPath: string;
+    observedAt: number;
+    evidence?: GateActivityEvidence;
+}
+export interface GateActivityProbe {
+    runtime: 'claude' | 'codex' | 'cursor';
+    probe(observedAt?: number): Promise<GateActivityEvidence | null>;
+    observe(observedAt?: number): Promise<GateActivityProbeStatus>;
+}
+export interface GateActivityProbeContext {
+    runtime: string;
+    cwd: string;
+    home: string;
+    spawnedAt: number;
+    realCwd?: string;
+}
+export declare function encodeClaudeProjectPath(cwd: string): string;
+export declare function encodeCursorProjectPath(cwd: string): string;
+export declare function resolveGateActivityPaths(context: GateActivityProbeContext, observedAt?: number): string[];
+export declare function createGateActivityProbe(context: GateActivityProbeContext): Promise<GateActivityProbe | null>;
+//# sourceMappingURL=activity-probes.d.ts.map

package/dist/commands/gate/activity-probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-probes.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/activity-probes.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,GAAG,iBAAiB,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,OAAO,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,GAAG,iBAAiB,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAOD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3D;AAWD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,wBAAwB,EACjC,UAAU,SAAoB,GAC7B,MAAM,EAAE,CA6BV;AA+DD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAyDnC"}

package/dist/commands/gate/activity-probes.js

@@ -0,0 +1,135 @@
+import { readdir, realpath, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+const MAX_TRAVERSAL_DEPTH = 2;
+export function encodeClaudeProjectPath(cwd) {
+    return cwd.replace(/[/._]/gu, '-');
+}
+export function encodeCursorProjectPath(cwd) {
+    return cwd.split(/[/._]/u).filter(Boolean).join('-');
+}
+function utcDatePath(timestamp) {
+    const date = new Date(timestamp);
+    return [
+        String(date.getUTCFullYear()),
+        String(date.getUTCMonth() + 1).padStart(2, '0'),
+        String(date.getUTCDate()).padStart(2, '0'),
+    ];
+}
+export function resolveGateActivityPaths(context, observedAt = context.spawnedAt) {
+    const cwdVariants = [...new Set([context.cwd, context.realCwd])].filter((cwd) => Boolean(cwd));
+    if (context.runtime === 'claude') {
+        return cwdVariants.map((cwd) => join(context.home, '.claude', 'projects', encodeClaudeProjectPath(cwd)));
+    }
+    if (context.runtime === 'cursor') {
+        return cwdVariants.map((cwd) => join(context.home, '.cursor', 'projects', encodeCursorProjectPath(cwd), 'agent-transcripts'));
+    }
+    if (context.runtime === 'codex') {
+        const sessionsRoot = join(context.home, '.codex', 'sessions');
+        const paths = [
+            join(sessionsRoot, ...utcDatePath(context.spawnedAt)),
+            join(sessionsRoot, ...utcDatePath(observedAt)),
+        ];
+        return [...new Set(paths)];
+    }
+    return [];
+}
+async function collectMetadata(path, depth) {
+    const pathStat = await stat(path);
+    let lastChangeAt = pathStat.mtimeMs;
+    let totalSizeBytes = pathStat.size;
+    if (!pathStat.isDirectory() || depth >= MAX_TRAVERSAL_DEPTH) {
+        return { lastChangeAt, totalSizeBytes };
+    }
+    const entries = await readdir(path, { withFileTypes: true });
+    for (const entry of entries) {
+        const child = await collectMetadata(join(path, entry.name), depth + 1);
+        lastChangeAt = Math.max(lastChangeAt, child.lastChangeAt);
+        totalSizeBytes += child.totalSizeBytes;
+    }
+    return { lastChangeAt, totalSizeBytes };
+}
+async function snapshotPaths(paths) {
+    let found = false;
+    let lastChangeAt = 0;
+    let totalSizeBytes = 0;
+    try {
+        for (const path of paths) {
+            try {
+                const snapshot = await collectMetadata(path, 0);
+                found = true;
+                lastChangeAt = Math.max(lastChangeAt, snapshot.lastChangeAt);
+                totalSizeBytes += snapshot.totalSizeBytes;
+            }
+            catch (error) {
+                if (error instanceof Error &&
+                    'code' in error &&
+                    error.code === 'ENOENT') {
+                    continue;
+                }
+                return { status: 'error' };
+            }
+        }
+    }
+    catch {
+        return { status: 'error' };
+    }
+    return found
+        ? {
+            status: 'available',
+            snapshot: { lastChangeAt, totalSizeBytes },
+        }
+        : { status: 'path-absent' };
+}
+export async function createGateActivityProbe(context) {
+    const resolvedContext = {
+        ...context,
+        realCwd: await realpath(context.cwd).catch(() => context.cwd),
+    };
+    const initialPaths = resolveGateActivityPaths(resolvedContext);
+    if (initialPaths.length === 0)
+        return null;
+    const baseline = await snapshotPaths(initialPaths);
+    const scope = context.runtime === 'codex' ? 'ambient-runtime' : 'project-dir';
+    const observe = async (observedAt = Date.now()) => {
+        const paths = resolveGateActivityPaths(resolvedContext, observedAt);
+        const current = await snapshotPaths(paths);
+        const attemptedPath = paths.join(',');
+        if (current.status !== 'available' || !current.snapshot) {
+            return {
+                status: current.status,
+                runtime: context.runtime,
+                scope,
+                attemptedPath,
+                observedAt,
+            };
+        }
+        const evidence = {
+            source: 'transcript-dir',
+            runtime: context.runtime,
+            scope,
+            observedPath: attemptedPath,
+            lastChangeAt: current.snapshot.lastChangeAt,
+            totalSizeBytes: current.snapshot.totalSizeBytes,
+            changedSinceBaseline: baseline.status !== 'available' ||
+                !baseline.snapshot ||
+                current.snapshot.lastChangeAt !== baseline.snapshot.lastChangeAt ||
+                current.snapshot.totalSizeBytes !== baseline.snapshot.totalSizeBytes,
+            observedAt,
+        };
+        return {
+            status: 'available',
+            runtime: context.runtime,
+            scope,
+            attemptedPath,
+            observedAt,
+            evidence,
+        };
+    };
+    return {
+        runtime: context.runtime,
+        observe,
+        async probe(observedAt = Date.now()) {
+            return (await observe(observedAt)).evidence ?? null;
+        },
+    };
+}

package/dist/commands/gate/branch-local-cli.d.ts

@@ -0,0 +1,31 @@
+export interface GateCliLaunch {
+    command: string;
+    args: string[];
+    cwd?: string;
+}
+export interface BranchLocalGateCli {
+    cliPath: string;
+    cliRoot: string;
+    routeReceiptPath: string;
+    shimRoot: string;
+}
+export interface ValidatedGateRouteEnvelope {
+    route: 'inline' | 'delegate-sync' | 'refuse';
+    reason: string;
+    cliRoot: string;
+}
+export interface GateRouteReceipt extends ValidatedGateRouteEnvelope {
+    runtime: string;
+}
+export declare function currentGateCliRoot(): string;
+export declare function currentGateCliLaunch(): GateCliLaunch;
+export declare function createBranchLocalGateCli(input: {
+    runId: string;
+    launch: GateCliLaunch;
+    cliRoot?: string;
+    tempRoot?: string;
+}): Promise<BranchLocalGateCli>;
+export declare function removeBranchLocalGateCli(shim: BranchLocalGateCli): Promise<void>;
+export declare function validateGateRouteEnvelope(output: string, expectedCliRoot: string): ValidatedGateRouteEnvelope;
+export declare function readGateRouteReceipt(path: string, expectedCliRoot: string, expectedRuntime: string): Promise<GateRouteReceipt>;
+//# sourceMappingURL=branch-local-cli.d.ts.map

package/dist/commands/gate/branch-local-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-local-cli.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/branch-local-cli.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,QAAQ,GAAG,eAAe,GAAG,QAAQ,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,0BAA0B;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,oBAAoB,IAAI,aAAa,CAUpD;AA4CD,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA+B9B;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GACtB,0BAA0B,CA2B5B;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAU3B"}

package/dist/commands/gate/branch-local-cli.js

@@ -0,0 +1,116 @@
+import { chmod, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export function currentGateCliRoot() {
+    return resolve(dirname(fileURLToPath(import.meta.url)), '../../../../..');
+}
+export function currentGateCliLaunch() {
+    const entrypoint = process.argv[1];
+    if (!entrypoint) {
+        throw new Error('Unable to resolve the running OAT CLI entrypoint.');
+    }
+    return {
+        command: process.execPath,
+        args: [...resolveCurrentLoaderArgs(process.execArgv), entrypoint],
+        cwd: process.cwd(),
+    };
+}
+function resolveCurrentLoaderArgs(args) {
+    const resolved = [];
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (argument === '--import' || argument === '--require') {
+            const specifier = args[index + 1];
+            resolved.push(argument);
+            if (specifier) {
+                resolved.push(resolveLoaderSpecifier(argument, specifier));
+                index += 1;
+            }
+            continue;
+        }
+        const inline = argument.match(/^(--import|--require)=(.+)$/);
+        if (inline) {
+            resolved.push(`${inline[1]}=${resolveLoaderSpecifier(inline[1], inline[2])}`);
+            continue;
+        }
+        resolved.push(argument);
+    }
+    return resolved;
+}
+function resolveLoaderSpecifier(flag, specifier) {
+    if (specifier.startsWith('/') ||
+        specifier.startsWith('.') ||
+        specifier.startsWith('file:')) {
+        return specifier;
+    }
+    try {
+        return flag === '--require'
+            ? createRequire(import.meta.url).resolve(specifier)
+            : import.meta.resolve(specifier);
+    }
+    catch {
+        return specifier;
+    }
+}
+export async function createBranchLocalGateCli(input) {
+    const cliRoot = input.cliRoot ?? currentGateCliRoot();
+    const shimRoot = join(input.tempRoot ?? tmpdir(), 'oat-gate-runs', input.runId);
+    const cliPath = join(shimRoot, 'bin', 'oat');
+    const routeReceiptPath = join(shimRoot, 'route-receipt.json');
+    await mkdir(dirname(cliPath), { recursive: true });
+    await writeFile(cliPath, [
+        '#!/usr/bin/env node',
+        "import { spawnSync } from 'node:child_process';",
+        `const command = ${JSON.stringify(input.launch.command)};`,
+        `const args = ${JSON.stringify(input.launch.args)};`,
+        'const result = spawnSync(command, [...args, ...process.argv.slice(2)], {',
+        "  stdio: 'inherit',",
+        '  env: process.env,',
+        `  cwd: ${JSON.stringify(input.launch.cwd)},`,
+        '});',
+        'if (result.error) {',
+        '  process.stderr.write(`${result.error.message}\\n`);',
+        '}',
+        'process.exit(result.status ?? 1);',
+        '',
+    ].join('\n'));
+    await chmod(cliPath, 0o700);
+    return { cliPath, cliRoot, routeReceiptPath, shimRoot };
+}
+export async function removeBranchLocalGateCli(shim) {
+    await rm(shim.shimRoot, { recursive: true, force: true });
+}
+export function validateGateRouteEnvelope(output, expectedCliRoot) {
+    let parsed;
+    try {
+        parsed = JSON.parse(output);
+    }
+    catch (error) {
+        throw new Error('Branch-local gate route did not return JSON.', {
+            cause: error,
+        });
+    }
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('Branch-local gate route returned no decision envelope.');
+    }
+    const envelope = parsed;
+    if (!['inline', 'delegate-sync', 'refuse'].includes(String(envelope.route)) ||
+        typeof envelope.reason !== 'string') {
+        throw new Error('Branch-local gate route returned help or an invalid decision envelope.');
+    }
+    if (envelope.cliRoot !== expectedCliRoot) {
+        throw new Error(`Branch-local gate route resolved outside the expected checkout (${String(envelope.cliRoot)} != ${expectedCliRoot}).`);
+    }
+    return envelope;
+}
+export async function readGateRouteReceipt(path, expectedCliRoot, expectedRuntime) {
+    const output = await readFile(path, 'utf8').catch(() => '');
+    const envelope = validateGateRouteEnvelope(output, expectedCliRoot);
+    const parsed = JSON.parse(output);
+    if (parsed.runtime !== expectedRuntime) {
+        throw new Error(`Branch-local gate route receipt runtime did not match (${String(parsed.runtime)} != ${expectedRuntime}).`);
+    }
+    return { ...envelope, runtime: expectedRuntime };
+}

package/dist/commands/gate/index.d.ts

@@ -4,6 +4,8 @@ import { type ResolvedConfig } from '../../config/resolve.js';
 import { type ModelFamily } from '../../providers/identity/family.js';
 import { type IdentityConfidence, type IdentityProvenance } from '../../providers/identity/provenance.js';
 import { Command } from 'commander';
+import { createGateActivityProbe, type GateActivityEvidence, type GateActivityProbe, type GateActivityProbeStatus } from './activity-probes.js';
+import { createBranchLocalGateCli, currentGateCliLaunch, readGateRouteReceipt, removeBranchLocalGateCli } from './branch-local-cli.js';
 import { parseReviewGateVerdict } from './review-verdict.js';
 interface GateCommandDependencies {
     buildCommandContext: (options: GlobalOptions) => CommandContext;
@@ -15,12 +17,20 @@ interface GateCommandDependencies {
     readUserConfig: (userConfigDir: string) => Promise<UserConfig>;
     writeUserConfig: (userConfigDir: string, config: UserConfig) => Promise<void>;
     resolveEffectiveConfig: (repoRoot: string, userConfigDir: string, env: NodeJS.ProcessEnv) => Promise<ResolvedConfig>;
+    createGateActivityProbe: typeof createGateActivityProbe;
+    createBranchLocalGateCli: typeof createBranchLocalGateCli;
+    currentGateCliLaunch: typeof currentGateCliLaunch;
+    removeBranchLocalGateCli: typeof removeBranchLocalGateCli;
+    readGateRouteReceipt: typeof readGateRouteReceipt;
     runProcess: (command: string, args: string[], options: ProcessRunOptions) => Promise<ProcessRunResult>;
     parseReviewGateVerdict: typeof parseReviewGateVerdict;
     processEnv: NodeJS.ProcessEnv;
+    writeGateRunMarker: (path: string, marker: GateRunMarker, warn: (message: string) => void) => Promise<boolean>;
+    removeGateRunMarker: (path: string, warn: (message: string) => void) => Promise<void>;
     writeDiagnostic: (message: string) => void;
 }
 interface ProcessRunOptions {
+    activityProbe?: GateActivityProbe;
     cwd: string;
     env: NodeJS.ProcessEnv;
     livenessIntervalMs?: number;
@@ -31,13 +41,34 @@ interface ProcessRunOptions {
     timeoutMs: number;
 }
 interface ProcessRunResult {
+    activityEvidence?: GateActivityEvidence;
+    activityProbeStatus?: GateActivityProbeStatus;
+    capturedOutput?: string;
     exitCode: number;
+    refusal?: string;
+    stderrBytes: number;
+    stdoutBytes: number;
     timedOut?: boolean;
 }
 interface GateLivenessSnapshot {
     elapsedMs: number;
     hardBudgetMs: number;
     idleMs: number;
+    processAlive: boolean;
+    activityProbeStatus?: GateActivityProbeStatus;
+    lastActivityEvidence?: GateActivityEvidence;
+}
+type GateTimeoutSource = 'cli' | 'target' | 'config' | 'env' | 'scope-default' | 'default';
+interface GateRunMarker {
+    runId: string;
+    targetId: string;
+    runtime: string;
+    reviewType: string | null;
+    reviewScope: string | null;
+    project: string;
+    startedAt: string;
+    budgetMs: number;
+    budgetSource: GateTimeoutSource;
 }
 type CrossProviderAvoid = 'same-family' | 'same-runtime' | 'none';
 type GateDiversityAchieved = 'different-family' | 'degraded-to-different-slug' | 'same-family - no diverse target available' | 'unknown-producer';

package/dist/commands/gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAQL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAE1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AA6CD,UAAU,iBAAiB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AAUvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;CAC5D;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+lCD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AAwhDD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAwMT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAS9B,OAAO,EAWL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAG1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AA+CD,UAAU,iBAAiB;IACzB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,gBAAgB;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,KAAK,iBAAiB,GAClB,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,eAAe,GACf,SAAS,CAAC;AAOd,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAcD,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AAUvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;CAC5D;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA63CD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AAiwDD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CA4NT"}