@open-agent-toolkit/cli 0.2.48 → 0.2.50

package/assets/bundle-metadata.json

@@ -1,4 +1,4 @@
 {
   "schemaVersion": 1,
-  "oatVersion": "0.2.48"
+  "oatVersion": "0.2.50"
 }

package/assets/docs/cli-utilities/tool-packs.md

@@ -189,23 +189,30 @@ creates `~/.oat/ideas/backlog.md` and `~/.oat/ideas/scratchpad.md`. Only the
 `workflows` project-scaffold seeds — `.oat/projects-root`, `.oat/config.json`,
 and the project `.gitkeep` files — are pinned to project scope.
 
-#### User-scope agents reach no provider
-
-Canonical **agents** are installed at either scope, but only project scope
-materializes a provider view for them. At user scope the sync pipeline
-enumerates skills only, and the sole user-scope agent materialization is the
-bundled managed role file set (`oat-phase-implementer.md` and
-`oat-reviewer.md`). A pack installed at user scope therefore writes its agents
-to `~/.agents/agents/` where no provider can see them — for example
-`oat tools install workflows --scope user` leaves `oat-codebase-mapper` without
-a provider agent, and `oat tools install research --scope user` does the same
-for `skeptical-evaluator`.
+#### User-scope agents have limited native materialization
+
+Canonical **agents** are installed at either scope. At user scope, native
+Codex or Cursor role materialization is active only when that adapter is active
+under the resolved sync config: explicit enablement wins without filesystem
+detection, explicit disablement wins despite detection, and an unset adapter
+follows detection. That native materialization supplies the bundled managed
+role files (`oat-phase-implementer.md` and `oat-reviewer.md`); it does not
+materialize other pack-owned user agents. For example, a user-scope workflows
+install leaves `oat-codebase-mapper` without a native provider role, and a
+user-scope research install does the same for `skeptical-evaluator`. When no
+Codex or Cursor adapter is active, even the bundled managed roles lack native
+materialization.
+
+This diagnostic concerns native provider roles only. Providers may read
+canonical agent instructions through a separate loaded, user, and project
+lookup contract; that read availability does not establish native
+materialization and does not suppress this finding.
 
 `oat status` and `oat doctor` name the affected agents with a
 `user-agent-unmaterialized` finding rather than reporting the pack as complete
 without qualification. Install the pack at **project scope** when you need its
-agents; `oat tools update` cannot repair this, because it is a scope limitation
-rather than drift.
+native provider roles; `oat tools update` cannot repair this, because it is a
+scope limitation rather than drift.
 
 Repository templates under `.oat/templates/` are **owner-owned seeds**. OAT
 compares a source-backed seed with its bundled default: a byte-equivalent copy
@@ -299,12 +306,14 @@ The canonical surface splits active operational state (under `pjm/`) from durabl
 
 Decisions are now file-per-record under `reference/decisions/` (created and indexed with the [`oat decision`](config-and-local-state.md#oat-decision-) command group), replacing the legacy single `decision-record.md`. Repos still on the old `reference/` layout can migrate with `oat pjm migrate`.
 
-> **Current migration prerequisite:** In CLI `0.2.37`, `oat pjm migrate` still
-> requires project-scope `tools.project-management: true` in `.oat/config.json`;
-> a user-only pack install does not satisfy that gate. In an adopted legacy
-> repository, run `oat config set tools.project-management true` before the
-> migration preview. Removing this temporary coupling is tracked by
-> `BL-260827-correct-scope-and-adoption`.
+Migration eligibility is independent of where the `project-management` pack is
+installed. `oat pjm migrate` resolves the repository's adoption state for
+diagnostic context, then inventories recognized legacy sources before writing.
+A complete current layout returns `already-migrated`; recognized legacy input
+can be previewed or applied from any adoption state; and a repository with
+neither recognized legacy input nor a complete current layout is skipped with
+an `oat pjm init` recovery. `--print-prompt` only reads the bundled prompt and
+does not inspect adoption or modify the repository.
 
 Decision records still require repository PJM adoption. Run `oat pjm init` first: like every repository-mutating PJM command, `oat decision init` fails closed in an unadopted repository, writes nothing, and returns `oat pjm init` as the recovery. Once the repository is adopted, `oat decision init` scaffolds only the decision surface — the decision directory, generated index, and decision-specific AGENTS guidance — without touching current state, roadmap, or backlog artifacts. It does not require the `project-management` pack. If the pack is installed later, its root guidance is maintained as a separate managed section so the decision instructions remain independently reusable.
 
@@ -322,11 +331,13 @@ repository-mutating PJM command checks it before writing anything:
 | `partial-initialization` | Some canonical scaffold files exist but the surface is incomplete | `oat pjm init` |
 | `none`                   | The repository has not adopted PJM                                | `oat pjm init` |
 
-`oat pjm`, `oat backlog`, and `oat decision` mutations **fail closed** for
-`partial-initialization` and `none`. They write nothing and return an error
-naming the repository path and `oat pjm init` as the recovery. `oat backlog
-init` and `oat decision init` are no longer alternate adoption paths for the
-full PJM surface.
+Normal `oat pjm`, `oat backlog`, and `oat decision` mutations **fail closed**
+for `partial-initialization` and `none`. They write nothing and return an error
+naming the repository path and `oat pjm init` as the recovery. The explicit
+`oat pjm migrate` command is the bounded exception: recognized legacy sources
+authorize that migration regardless of the adoption label. `oat backlog init`
+and `oat decision init` are no longer alternate adoption paths for the full PJM
+surface.
 
 Run `oat pjm doctor` to inspect an existing surface. It is read-only, reports
 missing canonical files, leftover template frontmatter, and

package/assets/docs/cli-utilities/workflow-gates.md

@@ -51,6 +51,17 @@ Fields:
 - `description` - optional context for the agent running the gate.
 - `maxAttempts` - retry bound for `block`; defaults to `2`.
 
+When `oat gate set` recognizes a direct lifecycle `oat gate review` command,
+it requires the canonical global option placement `oat --json gate review`.
+Missing, late, repeated, or subcommand-scoped `--json` is rejected with exit 1
+before the selected shared, local, or user config layer is changed. Arbitrary
+wrappers, unrelated gate commands, and provider exec-target `baseCommand`
+arrays remain outside this validator.
+
+A valid command is stored byte-for-byte. `oat gate resolve` returns that exact
+string, and the lifecycle executes it unchanged; OAT does not inject, reorder,
+or rewrite its shell arguments.
+
 `oat-project-plan`, `oat-project-implement`, `oat-project-quick-start`, and
 `oat-project-import-plan` are currently gate-aware. Gate awareness is declared
 in skill frontmatter with `oat_gateable: true`, and
@@ -284,6 +295,7 @@ and disambiguate re-gate rounds:
 | `ok`                           | 0    | Review completed; gate passed at the threshold.              |
 | `blocked`                      | 1    | Review completed; findings at/above the threshold.           |
 | `review_failed`                | ≠0   | The provider target exited non-zero; no verdict.             |
+| `artifact_missing`             | 1    | The child exited cleanly without producing an artifact.      |
 | `artifact_validation_failed`   | 1    | Artifact format or configured invocation fields are invalid. |
 | `targeting_correlation_failed` | 1    | Identity did not correlate; do not run review-receive.       |
 
@@ -296,6 +308,13 @@ For `artifact_validation_failed`, correct the artifact and rerun the gate; do
 not invoke review-receive until the gate successfully revalidates it as `ok` or
 `blocked`.
 
+`artifact_missing` means the accepted headless child completed without any
+review artifact. It sets `receiveEligible: false`, `remediable: false`, and
+`handoff: null`. Fix the reviewer so review work, artifact creation, and
+bookkeeping finish inline or through a synchronously awaited child, then start
+a new gate run. Do not use review-fix retries or review-receive for the failed
+run.
+
 `ok` and `blocked` also include `receiveEligible: true`, `outcome`,
 `artifactPath`, `counts`, `scope`, `handoff`, `gateInvocation`, and
 `corroboration`. Invoke review-receive only when all three conditions hold:

package/assets/docs/contributing/skills.md

@@ -262,9 +262,11 @@ The Gate Execution step should:
 2. Treat `null` as "no gate configured."
 3. Export the resolved path with `export PROJECT_PATH` before launching the
    command shell.
-4. For `oat gate review`, require the configured command to include
-   `--project "$PROJECT_PATH"`; do not append it at runtime, because the resolved
-   command must execute exactly as configured.
+4. For `oat gate review`, require the configured command to use
+   `oat --json gate review --project "$PROJECT_PATH" ...`, with the global
+   `--json` option before `gate review`. Do not inject, append, or reorder
+   arguments at runtime, because the resolved command must execute exactly as
+   configured.
 5. Run the resolved `command` as the skill's last step and use its exit code as
    the pass/fail signal.
 6. Follow the gate's `onFailure` policy:
@@ -273,7 +275,7 @@ The Gate Execution step should:
    - `warn` - record the failure and continue.
 
 For OAT review gates, prefer putting
-`oat gate review --project "$PROJECT_PATH" "<prompt>"` in the configured gate
+`oat --json gate review --project "$PROJECT_PATH" "<prompt>"` in the configured gate
 command rather than hard-coding a provider CLI directly in the skill. Use
 `oat gate cross-provider-exec "<prompt>"` for generic cross-runtime commands
 that should report only the child process status, not review findings.

package/assets/docs/reference/cli-reference.md

@@ -126,7 +126,7 @@ Notable commands introduced in the current CLI surface:
 - `oat project validate-plan --project-path <path>` - validates `oat_plan_parallel_groups` metadata in `plan.md`; exits non-zero on invalid. See [Implementation Execution](../workflows/projects/implementation-execution.md#parallel-phase-groups).
 - `oat project log append|check|synthesize|rollup` - manage the optional append-only project observation log: append validated judgment or structural entries, inspect grammar and synthesis status, complete end-of-run synthesis, and roll observations into `summary.md` plus the configured repository ledger. See [Project Log](../cli-utilities/project-log.md).
 - `oat project set-mode` — deprecated no-op. Execution mode is no longer user-selectable; emits a deprecation warning and preserves the `--json` contract.
-- `oat gate review <prompt...>` - run a stateful, headless OAT review through the target registry, parse the produced review artifact, and exit nonzero for configured blocking findings. `--timeout-ms <milliseconds>` overrides target, `workflow.gateTimeouts`, environment, and scope defaults; accepted values are 1,000–14,400,000. Final/phase/range code reviews default to 30 minutes, while task code and artifact reviews default to 15 minutes. With `--json`, the result envelope on exit is the canonical completion signal: `status` is `ok` | `blocked` | `review_failed` | `artifact_validation_failed` | `targeting_correlation_failed`, alongside `runId`, `generatedAt`, and `artifactPath` when available. For `targeting_correlation_failed`, do not run review-receive even if an artifact path is present. For `artifact_validation_failed`, correct the artifact and rerun the gate until it revalidates as `ok` or `blocked`. Invoke `oat-project-review-receive` only when all three conditions hold: `status` is `ok` or `blocked`, `receiveEligible` is `true`, and `handoff` is non-null. `review_failed` may include structured `refusal`, `noOutputProduced`, and metadata-only `activityEvidence`; these diagnostic fields never make a run receive-eligible. After a timeout, a validated run-correlated artifact returns the ordinary `ok` or `blocked` envelope with additive `lateCompletion: true`. Duplicate run-ID matches or a changed artifact with a mismatched run ID retain `targeting_correlation_failed` and `receiveEligible: false`. Orchestrators should read the structured result rather than poll the filesystem. See [Workflow Gates](../cli-utilities/workflow-gates.md).
+- `oat gate review <prompt...>` - run a stateful, headless OAT review through the target registry, parse the produced review artifact, and exit nonzero for configured blocking findings. `--timeout-ms <milliseconds>` overrides target, `workflow.gateTimeouts`, environment, and scope defaults; accepted values are 1,000–14,400,000. Final/phase/range code reviews default to 30 minutes, while task code and artifact reviews default to 15 minutes. With `--json`, the result envelope on exit is the canonical completion signal: `status` is `ok` | `blocked` | `review_failed` | `artifact_missing` | `artifact_validation_failed` | `targeting_correlation_failed`, alongside `runId`, `generatedAt`, and `artifactPath` when available. `artifact_missing` means an accepted child exited cleanly without an artifact; fix synchronous review/artifact completion and start a new run, without review-receive or same-run remediation. For `targeting_correlation_failed`, correct the project declaration or artifact routing and start a new run; do not run review-receive even if an artifact path is present. For `artifact_validation_failed`, correct the artifact and rerun the gate until it revalidates as `ok` or `blocked`. Invoke `oat-project-review-receive` only when all three conditions hold: `status` is `ok` or `blocked`, `receiveEligible` is `true`, and `handoff` is non-null. `review_failed` may include structured `refusal`, `noOutputProduced`, and metadata-only `activityEvidence`; these diagnostic fields never make a run receive-eligible. After a timeout, a validated run-correlated artifact returns the ordinary `ok` or `blocked` envelope with additive `lateCompletion: true`. Duplicate run-ID matches or a changed artifact with a mismatched run ID retain `targeting_correlation_failed` and `receiveEligible: false`. Orchestrators should read the structured result rather than poll the filesystem. See [Workflow Gates](../cli-utilities/workflow-gates.md).
 - `oat gate route --expect-runtime <runtime> --expect-model <model> --can-await <true|false> --json` - return the headless child route (`inline`, `delegate-sync`, or `refuse`) from provider-marker and model evidence. Ambiguous or contradictory evidence never routes inline.
 - `oat gate exec <prompt...>` / `oat gate cross-provider-exec <prompt...>` - run a generic target prompt. `--timeout-ms` uses the same validated CLI override; untyped runs otherwise retain the legacy default path.
 - `oat gate target set <id> --invocation-model <model|provider-default> --invocation-reasoning-effort <effort|provider-default>` - persist optional configured invocation metadata alongside an exec target without inferring it from the target command.

package/assets/docs/reference/troubleshooting.md

@@ -167,12 +167,30 @@ Both commands report managed pack state with a scoped recovery command:
   place and your edits are gone. The finding is informational and carries no
   recovery command for exactly that reason.
 - `user-agent-unmaterialized` — the pack installed canonical agents into
-  `~/.agents/agents/`, but user scope materializes no provider view for them
-  beyond the bundled managed role files. `oat tools update` cannot fix this.
-  Install the pack at project scope (`oat tools install <pack> --scope project`)
-  when you need its agents. See
+  `~/.agents/agents/`, but active native Codex/Cursor adapters materialize only
+  the bundled managed role files at user scope. Other pack-owned agents remain
+  unmaterialized; when neither adapter is active, the managed roles do too.
+  Provider access to canonical instructions through loaded, user, and project
+  reads is a separate contract and does not clear this native-role finding.
+  `oat tools update` cannot fix it. Install the pack at project scope
+  (`oat tools install <pack> --scope project`) when you need its native roles. See
   [Tool packs](../cli-utilities/tool-packs.md) for the full limitation.
 
+## `status` or `doctor` reports `packs:inventory`
+
+OAT could not read the canonical managed-pack inventory. `oat status` keeps the
+rest of the report available and returns `packs.availability.status` as
+`unavailable` in JSON, with an empty `packs.states` array and a structured
+diagnostic. `oat doctor` emits the same condition as a warning instead of
+stopping its other checks. Reported project and home paths remain redacted.
+
+Rebuild the CLI workspace, then rerun the command named in the diagnostic:
+
+```bash
+pnpm build
+oat status # or: oat doctor
+```
+
 ## `status` or `doctor` reports `legacy-false-conflict`
 
 An older repository left `tools.<pack>: false` in shared config while managed

package/assets/public-package-versions.json

@@ -1,6 +1,6 @@
 {
-  "cli": "0.2.48",
-  "docs-config": "0.2.48",
-  "docs-theme": "0.2.48",
-  "docs-transforms": "0.2.48"
+  "cli": "0.2.50",
+  "docs-config": "0.2.50",
+  "docs-theme": "0.2.50",
+  "docs-transforms": "0.2.50"
 }

package/assets/skills/oat-project-design/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-design
-version: 2.3.1
+version: 2.3.2
 description: Use when discovery is complete and implementation-ready decisions are needed. Runs a collaborative, selective collaborative, or draft-and-review design flow, confirms requirements and produces both `spec.md` and `design.md`, and commits artifacts before the user-review gate.
 disable-model-invocation: true
 user-invocable: true
@@ -658,11 +658,18 @@ gate as the last check before the completion boundary:
    ```
 
    If the resolved command invokes `oat gate review`, the configured review
-   command must already include `--project "$PROJECT_PATH"` and must not include
-   `--target <id>`. A valid reusable shape is
-   `oat gate review --project "$PROJECT_PATH" ...`. If the declaration is
-   missing, stop and migrate the stored gate command; do not inject or append
-   arguments at execution time.
+   command must already include `--project "$PROJECT_PATH"` as part of the
+   structured-output contract. Its canonical form is:
+
+   ```bash
+   oat --json gate review --project "$PROJECT_PATH" ...
+   ```
+
+   This requires global `--json` before `gate review`. Reusable declarations
+   must not include
+   `--target <id>`. Reject `oat gate review ...` without the global `--json`
+   placement. Stop and migrate an invalid stored declaration before execution;
+   never inject or append execution-time argv.
 
 3. Execute the resolved command exactly as configured. Capture stdout, stderr,
    the exit code, and the structured JSON result. A zero exit code means the

package/assets/skills/oat-project-discover/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-discover
-version: 2.2.1
+version: 2.2.2
 description: Use when the user explicitly asks to continue discovery for an active spec-driven OAT project — e.g. "continue discovery", "run discovery", or confirms a previously offered discovery step. Do NOT auto-invoke for new ideas or quick-mode projects. Gathers requirements and context before spec/design.
 disable-model-invocation: false
 user-invocable: true
@@ -445,11 +445,18 @@ gate as the last check before the completion boundary:
    ```
 
    If the resolved command invokes `oat gate review`, the configured review
-   command must already include `--project "$PROJECT_PATH"` and must not include
-   `--target <id>`. A valid reusable shape is
-   `oat gate review --project "$PROJECT_PATH" ...`. If the declaration is
-   missing, stop and migrate the stored gate command; do not inject or append
-   arguments at execution time.
+   command must already include `--project "$PROJECT_PATH"` as part of the
+   structured-output contract. Its canonical form is:
+
+   ```bash
+   oat --json gate review --project "$PROJECT_PATH" ...
+   ```
+
+   This requires global `--json` before `gate review`. Reusable declarations
+   must not include
+   `--target <id>`. Reject `oat gate review ...` without the global `--json`
+   placement. Stop and migrate an invalid stored declaration before execution;
+   never inject or append execution-time argv.
 
 3. Execute the resolved command exactly as configured. Capture stdout, stderr,
    the exit code, and the structured JSON result. A zero exit code means the

package/assets/skills/oat-project-import-plan/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-import-plan
-version: 1.4.10
+version: 1.4.11
 description: Use when you have an external markdown plan to execute with OAT. Preserves the source plan and normalizes it into canonical plan.md format.
 argument-hint: '<path-to-plan.md> [--provider codex|cursor|claude] [--project <name>]'
 oat_gateable: true
@@ -460,7 +460,13 @@ Before reporting this skill as complete, run the configured gate as the final st
    export PROJECT_PATH
    ```
 
-   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` and must not include `--target <id>`. A valid reusable shape is `oat gate review --project "$PROJECT_PATH" ...`. If the declaration is missing, stop and migrate the stored gate command; do not inject or append arguments at execution time.
+   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` as part of the structured-output contract. Its canonical form is:
+
+   ```bash
+   oat --json gate review --project "$PROJECT_PATH" ...
+   ```
+
+   This requires global `--json` before `gate review`. Reusable declarations must not include `--target <id>`. Reject `oat gate review ...` without the global `--json` placement. Stop and migrate an invalid stored declaration before execution; never inject or append execution-time argv.
 
 3. Resolve the current planning parent's model identity from session context.
    When that identity is non-empty and the resolved configured command invokes

package/assets/skills/oat-project-plan/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-plan
-version: 1.4.5
+version: 1.4.6
 description: Use when design.md is complete and executable implementation tasks are needed. Breaks design into bite-sized TDD tasks in canonical plan.md format.
 oat_gateable: true
 disable-model-invocation: true
@@ -544,7 +544,13 @@ the last check before the completion boundary:
    export PROJECT_PATH
    ```
 
-   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` and must not include `--target <id>`. A valid reusable shape is `oat gate review --project "$PROJECT_PATH" ...`. If the declaration is missing, stop and migrate the stored gate command; do not inject or append arguments at execution time.
+   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` as part of the structured-output contract. Its canonical form is:
+
+   ```bash
+   oat --json gate review --project "$PROJECT_PATH" ...
+   ```
+
+   This requires global `--json` before `gate review`. Reusable declarations must not include `--target <id>`. Reject `oat gate review ...` without the global `--json` placement. Stop and migrate an invalid stored declaration before execution; never inject or append execution-time argv.
 
 3. Resolve the current planning parent's model identity from session context.
    When that identity is non-empty and the resolved configured command invokes

package/assets/skills/oat-project-quick-start/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-quick-start
-version: 2.3.6
+version: 2.3.7
 description: Use when a task is small enough for quick mode or rapid iteration is preferred. Scaffolds a lightweight OAT project from discovery directly to a runnable plan, with optional brainstorming and lightweight design.
 argument-hint: '<project-name> ["project description"]'
 oat_gateable: true
@@ -735,7 +735,13 @@ as the last check before plan and project completion:
    export PROJECT_PATH
    ```
 
-   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` and must not include `--target <id>`. A valid reusable shape is `oat gate review --project "$PROJECT_PATH" ...`. If the declaration is missing, stop and migrate the stored gate command; do not inject or append arguments at execution time.
+   If the resolved command invokes `oat gate review`, the configured review command must already include `--project "$PROJECT_PATH"` as part of the structured-output contract. Its canonical form is:
+
+   ```bash
+   oat --json gate review --project "$PROJECT_PATH" ...
+   ```
+
+   This requires global `--json` before `gate review`. Reusable declarations must not include `--target <id>`. Reject `oat gate review ...` without the global `--json` placement. Stop and migrate an invalid stored declaration before execution; never inject or append execution-time argv.
 
 3. Resolve the current planning parent's model identity from session context.
    When that identity is non-empty and the resolved configured command invokes

package/dist/commands/doctor/index.d.ts

@@ -2,10 +2,12 @@ import { type CommandContext, type GlobalOptions } from '../../app/command-conte
 import { type PjmAdoption, type ResolvePjmAdoptionOptions } from '../pjm/adoption.js';
 import { type PjmDoctorOptions } from '../pjm/doctor.js';
 import { type InventoryPackInput, type PackInventory } from '../tools/shared/pack-inventory.js';
+import type { SyncConfig } from '../../config/index.js';
 import { type OatConfig, type OatLocalConfig, type UserConfig } from '../../config/oat-config.js';
 import { type Manifest } from '../../manifest/index.js';
 import { type CursorMaterializedModelDiagnostic, type MatrixCellAvailabilityResponse, type ValidateMatrixCellOptions } from '../../providers/identity/availability.js';
 import { createDispatchValidationPassContext, validateDispatchMatrixRefs } from '../../providers/identity/dispatch-validation.js';
+import { type ProviderAdapter } from '../../providers/shared/index.js';
 import type { ConcreteScope } from '../../shared/types.js';
 import { type DoctorCheck } from '../../ui/output.js';
 import { Command } from 'commander';
@@ -22,6 +24,11 @@ interface DoctorDependencies {
     }>>;
     readFile: (path: string) => Promise<string>;
     resolveAssetsRoot: () => Promise<string>;
+    resolveUserSyncConfig: (userConfigDir: string) => Promise<SyncConfig>;
+    getAdapters: () => ProviderAdapter[];
+    getConfigAwareAdapters: (adapters: ProviderAdapter[], scopeRoot: string, config: SyncConfig) => Promise<{
+        activeAdapters: ProviderAdapter[];
+    }>;
     readOatConfig: (repoRoot: string) => Promise<OatConfig>;
     readOatConfigForDefaultScopeRepair: (repoRoot: string) => Promise<OatConfig>;
     readOatLocalConfig: (repoRoot: string) => Promise<OatLocalConfig>;

package/dist/commands/doctor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,uCAAuC,CAAC;AAa/C,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQ9D,OAAO,EAGL,KAAK,iCAAiC,EAEtC,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,KACd,OAAO,CACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CACnE,CAAC;IACF,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,gCAAgC,EAAE,CAChC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC;IAClD,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAClB,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACrE,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC3C,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAClE,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CACnE;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,cAAc,EAAE,oBAAoB,EAAE,CAAC;CACxC;AA4qCD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,OAAO,CAcT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,uCAAuC,CAAC;AAa/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQ9D,OAAO,EAGL,KAAK,iCAAiC,EAEtC,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,KACd,OAAO,CACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CACnE,CAAC;IACF,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,qBAAqB,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,WAAW,EAAE,MAAM,eAAe,EAAE,CAAC;IACrC,sBAAsB,EAAE,CACtB,QAAQ,EAAE,eAAe,EAAE,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC;QAAE,cAAc,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC,CAAC;IACpD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,gCAAgC,EAAE,CAChC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC;IAClD,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAClB,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACrE,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC3C,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAClE,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CACnE;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,cAAc,EAAE,oBAAoB,EAAE,CAAC;CACxC;AAqsCD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,OAAO,CAcT"}

package/dist/commands/doctor/index.js

@@ -8,11 +8,12 @@ import { runPjmDoctorChecks, } from '../pjm/doctor.js';
 import { getSkillVersion } from '../shared/frontmatter.js';
 import { withScopeOption } from '../shared/scope-option.js';
 import { readGlobalOptions, resolveConcreteScopes, } from '../shared/shared.utils.js';
-import { hasScopedPackPlacementEvidence, inventoryPack, } from '../tools/shared/pack-inventory.js';
+import { attributeSharedOwnerDiagnostics, hasScopedPackPlacementEvidence, inventoryPack, } from '../tools/shared/pack-inventory.js';
 import { PACK_NAMES } from '../tools/shared/pack-manifest.js';
 import { formatPackPaths, updatePackRecovery, } from '../tools/shared/pack-paths.js';
 import { walkDispatchMatrix, } from '../../config/dispatch-matrix.js';
 import { readOatConfig, readOatConfigForDefaultScopeRepair, readOatLocalConfig, readUserConfig, } from '../../config/oat-config.js';
+import { resolveUserSyncConfig } from '../../config/user-sync-config.js';
 import { resolveAssetsRoot } from '../../fs/assets.js';
 import { resolveProjectRoot, resolveScopeRoot } from '../../fs/paths.js';
 import TOML from '@iarna/toml';
@@ -26,6 +27,7 @@ import { CURSOR_MODEL_PIN_MAPPINGS } from '../../providers/cursor/codec/catalog.
 import { geminiAdapter } from '../../providers/gemini/index.js';
 import { diagnoseCursorMaterializedModels, validateMatrixCell, } from '../../providers/identity/availability.js';
 import { createDispatchValidationPassContext, validateDispatchMatrixRefs, } from '../../providers/identity/dispatch-validation.js';
+import { getConfigAwareAdapters, } from '../../providers/shared/index.js';
 import { formatDoctorResults } from '../../ui/output.js';
 import { Command } from 'commander';
 import { checkStaleInvocations } from './stale-invocations.js';
@@ -139,6 +141,15 @@ function createDependencies() {
         checkProviders: checkProvidersDefault,
         readFile: async (path) => readFile(path, 'utf8'),
         resolveAssetsRoot,
+        resolveUserSyncConfig,
+        getAdapters: () => [
+            claudeAdapter,
+            cursorAdapter,
+            codexAdapter,
+            copilotAdapter,
+            geminiAdapter,
+        ],
+        getConfigAwareAdapters,
         readOatConfig,
         readOatConfigForDefaultScopeRepair,
         readOatLocalConfig,
@@ -477,18 +488,6 @@ function collectPackStateFindings(inventories) {
         for (const scoped of inventory.scopes) {
             const { scope } = scoped;
             if (!hasScopedPackPlacementEvidence(scoped)) {
-                const sharedPresent = scoped.assets.filter((asset) => asset.definition.sharedOwner !== undefined &&
-                    asset.status !== 'missing');
-                if (sharedPresent.length > 0) {
-                    findings.push({
-                        pack: inventory.pack,
-                        scope,
-                        code: 'shared-owner-observation',
-                        detail: 'shared managed assets are present without pack ownership evidence',
-                        paths: sharedPresent.map(({ path }) => path),
-                        recovery: null,
-                    });
-                }
                 continue;
             }
             const managed = scoped.assets.filter((asset) => asset.definition.ownership[scope] === 'managed');
@@ -560,7 +559,18 @@ function collectPackStateFindings(inventories) {
                         pack: inventory.pack,
                         scope,
                         code: 'user-agent-unmaterialized',
-                        detail: `${diagnostic.paths.length} user-scope agent(s) reach no provider; user-scope agent materialization is limited to the bundled managed role files, so install this pack at project scope to use them`,
+                        detail: `${diagnostic.paths.length} user-scope agent(s) lack native provider-role materialization; canonical instruction reads are unaffected, and active Codex or Cursor materialization supplies only the bundled managed roles, so install this pack at project scope to materialize the affected agents`,
+                        paths: diagnostic.paths,
+                        recovery: null,
+                    });
+                    continue;
+                }
+                if (diagnostic.code === 'shared-owner-observation') {
+                    findings.push({
+                        pack: inventory.pack,
+                        scope,
+                        code: 'shared-owner-observation',
+                        detail: diagnostic.message,
                         paths: diagnostic.paths,
                         recovery: null,
                     });
@@ -610,10 +620,10 @@ function createScopedPackStateCheck(scope, findings, roots) {
         name: `${scope}:pack_state`,
         description: 'Managed pack completeness and drift',
         status: recoveries.length > 0 ? 'warn' : 'pass',
-        message: scoped
-            .map((finding) => formatPackFinding(finding, roots))
-            .join('; '),
-        fix: recoveries.length > 0 ? recoveries.join('; ') : undefined,
+        message: `Findings:\n${scoped
+            .map((finding) => `  - ${formatPackFinding(finding, roots)}`)
+            .join('\n')}`,
+        fix: recoveries.length > 0 ? recoveries.join('\n  Fix: ') : undefined,
     };
 }
 function createPackDuplicationCheck(findings, roots) {
@@ -630,10 +640,10 @@ function createPackDuplicationCheck(findings, roots) {
         name: 'packs:scope_duplication',
         description: 'Cross-scope pack duplication',
         status: 'warn',
-        message: duplicates
-            .map((finding) => formatPackFinding(finding, roots))
-            .join('; '),
-        fix: uniqueRecoveries(duplicates).join('; '),
+        message: `Findings:\n${duplicates
+            .map((finding) => `  - ${formatPackFinding(finding, roots)}`)
+            .join('\n')}`,
+        fix: uniqueRecoveries(duplicates).join('\n  Fix: '),
     };
 }
 async function createPackStateChecks(scopeRoots, dependencies) {
@@ -649,7 +659,18 @@ async function createPackStateChecks(scopeRoots, dependencies) {
     let findings;
     try {
         const assetsRoot = await dependencies.resolveAssetsRoot();
-        const inventories = await Promise.all(PACK_NAMES.map((pack) => dependencies.inventoryPack({ pack, assetsRoot, ...roots })));
+        const userRoot = scopeRoots.get('user');
+        const userManagedRoleMaterialization = userRoot
+            ? await dependencies
+                .getConfigAwareAdapters(dependencies.getAdapters(), userRoot, await dependencies.resolveUserSyncConfig(join(userRoot, '.oat')))
+                .then(({ activeAdapters }) => activeAdapters.some(({ name }) => name === 'codex' || name === 'cursor'))
+            : false;
+        const inventories = attributeSharedOwnerDiagnostics(await Promise.all(PACK_NAMES.map((pack) => dependencies.inventoryPack({
+            pack,
+            assetsRoot,
+            ...roots,
+            ...(userRoot ? { userManagedRoleMaterialization } : {}),
+        }))));
         findings = collectPackStateFindings(inventories);
     }
     catch (error) {

package/dist/commands/gate/__fixtures__/fake-runtime.mjs

@@ -8,6 +8,16 @@ const delayMs = Number(process.env.FAKE_GATE_DELAY_MS ?? '0');
 const exitCode = Number(process.env.FAKE_GATE_EXIT_CODE ?? '0');
 const artifactMode = process.env.FAKE_GATE_ARTIFACT ?? 'none';
 const transcriptIntervalMs = Number(process.env.FAKE_GATE_TRANSCRIPT_INTERVAL_MS ?? '0');
+if (process.env.FAKE_GATE_INVOCATION_LOG) {
+    await appendFile(process.env.FAKE_GATE_INVOCATION_LOG, `${JSON.stringify({
+        pid: process.pid,
+        headless: process.env.OAT_GATE_HEADLESS ?? null,
+        nonInteractive: process.env.OAT_NON_INTERACTIVE ?? null,
+        runId: process.env.OAT_GATE_RUN_ID ?? null,
+        cliPath: process.env.OAT_GATE_CLI_PATH ?? null,
+        routeReceiptPath: process.env.OAT_GATE_ROUTE_RECEIPT_PATH ?? null,
+    })}\n`);
+}
 function promptValue(key) {
     return prompt.match(new RegExp(`^${key}: (.+)$`, 'm'))?.[1] ?? 'unknown';
 }

package/dist/commands/gate/configured-command.d.ts

@@ -0,0 +1,12 @@
+export type GateCommandContractResult = {
+    kind: 'not-applicable';
+} | {
+    kind: 'valid';
+    command: 'gate-review';
+} | {
+    kind: 'invalid';
+    command: 'gate-review';
+    message: string;
+};
+export declare function validateConfiguredGateCommand(command: string): GateCommandContractResult;
+//# sourceMappingURL=configured-command.d.ts.map

package/dist/commands/gate/configured-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configured-command.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/configured-command.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAmIjE,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,GACd,yBAAyB,CAoB3B"}