@open-agent-toolkit/cli 0.3.6 → 0.3.8

package/dist/commands/gate/index.js

@@ -16,7 +16,7 @@ import { normalizeToPosixPath, resolveProjectRoot, validateRealPathWithinScope,
 import { buildDispatchReport, } from '../../providers/identity/dispatch-report.js';
 import { classifyModelFamily, } from '../../providers/identity/family.js';
 import { resolveIdentityConfidence, } from '../../providers/identity/provenance.js';
-import { parseDispatchStamps } from '../../providers/identity/stamp.js';
+import { parseDispatchStamps, } from '../../providers/identity/stamp.js';
 import { Command } from 'commander';
 import YAML from 'yaml';
 import { createGateActivityProbe, } from './activity-probes.js';
@@ -84,7 +84,7 @@ const VALID_IDENTITY_PROVENANCES = [
     'unknown',
 ];
 const REVIEW_GATE_CONTEXT_NOTE = [
-    'This review is gate-originated. If you run `oat-project-review-provide`, set `oat_review_invocation: gate` in the review artifact. Write a canonical review artifact with `### Critical`, `### High`, `### Medium`, and `### Low` headings in that order, using `None` for empty sections.',
+    "This review is gate-originated. If you run `oat-project-review-provide`, set `oat_review_invocation: gate` in the review artifact. Write a canonical review artifact with `### Critical`, `### High`, `### Medium`, and `### Low` headings in that order, using `None` for empty sections. Gate-originated reviews write the resolver dispatch stamp on a line labeled `**Dispatch audit (policy view):**`, with the stamp in one backtick pair, because an unlabeled audit stamp must name this gate's target and effort.",
     'Complete the review, artifact write, and required bookkeeping inline or through a synchronously awaited child before this headless process exits. Do not start background tasks, monitors, or waiters that outlive this turn.',
     "Artifact hygiene contract: Before finishing or committing, format every file you created or edited. Use the concrete write/fix formatting command supplied by the governing plan, task, or brief. If none is usable, discover the repository's documented write/fix command from applicable `AGENTS.md`/`CLAUDE.md` instructions and relevant package manifests; do not infer or hardcode a formatter. Prefer a file-scoped invocation when supported, and avoid rewriting unrelated files. If no command is discoverable, warn once with `no format command discovered in repo instructions; skipping`, then continue.",
 ].join('\n\n');
@@ -281,6 +281,29 @@ function gateInvocationPromptContext(invocation) {
         frontmatter,
     ].join('\n');
 }
+const NON_CONCRETE_REASONING_EFFORTS = new Set([
+    'unknown',
+    'provider-default',
+    'not-applicable',
+]);
+/**
+ * Unlabeled reviewer audit stamps that disagree with the gate frontmatter.
+ *
+ * The frontmatter (`oat_gate_target`, `oat_invocation_*`) is the authority for
+ * the gate's actual invocation. A stamp labeled as the reviewer policy view is
+ * exempt; any other audit stamp must name the gate target and, when the gate
+ * recorded a concrete reasoning effort, carry `effort_axis=selected:<effort>`.
+ */
+function disagreeingDispatchAuditStamps(verdict) {
+    const unlabeled = verdict.dispatchAudit?.unlabeled ?? [];
+    const target = verdict.gateInvocation?.targetId ?? null;
+    const effort = verdict.gateInvocation?.reasoningEffort ?? null;
+    const expectedEffortAxis = effort && !NON_CONCRETE_REASONING_EFFORTS.has(effort)
+        ? `selected:${effort}`
+        : null;
+    return unlabeled.filter((stamp) => stamp.target !== target ||
+        (expectedEffortAxis !== null && stamp.effortAxis !== expectedEffortAxis));
+}
 function corroborateGateInvocation(expected, actual, targetCorroboration) {
     const invocationFields = [
         ['targetId', expected.targetId, actual?.targetId],
@@ -2422,6 +2445,32 @@ async function disposeValidatedReviewArtifact(snapshot, identity, dependencies,
             },
         };
     }
+    const disagreeingAudit = disagreeingDispatchAuditStamps(verdict);
+    if (disagreeingAudit.length > 0) {
+        const lines = disagreeingAudit.map((stamp) => stamp.lineNumber).join(', ');
+        const effort = verdict.gateInvocation?.reasoningEffort ?? 'unknown';
+        return {
+            eligible: false,
+            status: 'artifact_validation_failed',
+            cause: 'gate_dispatch_audit_mismatched',
+            verdict,
+            writeEnvelope: (context) => {
+                writeReviewGateArtifactValidationFailure(context, {
+                    runId: identity.runId,
+                    target: identity.target,
+                    project: identity.project,
+                    projectResolutionSource: identity.projectResolutionSource,
+                    artifactPath: snapshot.path,
+                    generatedAt: snapshot.generatedAt,
+                    message: `Review artifact dispatch audit line (line ${lines}) does not agree with the gate invocation frontmatter (oat_gate_target: ${verdict.gateInvocation?.targetId ?? 'unknown'}, oat_invocation_reasoning_effort: ${effort}). An unlabeled audit stamp must describe the gate invocation; label the reviewer policy stamp \`**Dispatch audit (policy view):**\`. Artifacts written by an older installed review skill need \`oat tools update\`.`,
+                    recovery: `Label the reviewer policy stamp in ${snapshot.path} as \`**Dispatch audit (policy view):**\`, or correct the stamp to the gate target and effort, then rerun the gate. If an older installed oat-project-review-provide wrote the unlabeled line, refresh installed skills with \`oat tools update\` and rerun the gate.`,
+                    gateInvocation: identity.gateInvocation,
+                    dispatchReport: identity.dispatchReport,
+                    corroboration,
+                });
+            },
+        };
+    }
     hooks.onStep?.('verdict-disposition');
     return {
         eligible: true,

package/dist/commands/gate/review-verdict.d.ts

@@ -1,3 +1,4 @@
+import { type DispatchStamp } from '../../providers/identity/stamp.js';
 export interface ReviewGateVerdict {
     artifactPath: string;
     reviewType: 'code' | 'artifact' | 'unknown';
@@ -5,6 +6,8 @@ export interface ReviewGateVerdict {
     invocation: string | null;
     project: string | null;
     gateInvocation?: ReviewArtifactGateInvocation;
+    /** Present only when the artifact carries at least one audit line. */
+    dispatchAudit?: ReviewDispatchAudit;
     counts: {
         critical: number;
         high: number;
@@ -25,6 +28,15 @@ export interface ReviewArtifactGateInvocation {
     reasoningEffort: string | null;
     source: string | null;
 }
+/**
+ * Reviewer dispatch stamps found on audit lines. `policyView` holds stamps
+ * whose label names the project reviewer policy view; every other audit stamp
+ * is `unlabeled` and must agree with the gate invocation frontmatter.
+ */
+export interface ReviewDispatchAudit {
+    unlabeled: DispatchStamp[];
+    policyView: DispatchStamp[];
+}
 export type Severity = keyof ReviewGateVerdict['counts'];
 export interface ReviewGateArtifactSnapshot {
     readonly content: string;
@@ -35,5 +47,15 @@ export interface ParseReviewGateVerdictOptions {
     artifactSnapshot?: ReviewGateArtifactSnapshot;
 }
 export declare function severityDisplayName(severity: Severity): string;
+/**
+ * Reviewer dispatch audit lines from every part of the artifact body except
+ * finding sections: `## Findings` (with its subsections) and any
+ * `### Critical`, `### High`, `### Medium`, or `### Low` section. Reviewers
+ * have placed audit stamps in the pre-heading metadata block and in sections
+ * such as `## Dispatch Audit`, `## Review Dispatch Audit`, `## Review Scope`,
+ * and `## Dispatch Evidence`, so recognition is by line shape, not section
+ * name. Fenced code blocks and prose that merely quotes a stamp are ignored.
+ */
+export declare function extractDispatchAudit(content: string): ReviewDispatchAudit;
 export declare function parseReviewGateVerdict(artifactPath: string, options?: ParseReviewGateVerdictOptions): Promise<ReviewGateVerdict>;
 //# sourceMappingURL=review-verdict.d.ts.map

package/dist/commands/gate/review-verdict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/review-verdict.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QACd,kBAAkB,EAAE,QAAQ,EAAE,CAAC;QAC/B,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAEzD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,qCAAqC,CAAC,EAAE,OAAO,CAAC;IAChD,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AA8OD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE9D;AA4fD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CA8F5B"}
+{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/review-verdict.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C,sEAAsE;IACtE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QACd,kBAAkB,EAAE,QAAQ,EAAE,CAAC;QAC/B,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAEzD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,qCAAqC,CAAC,EAAE,OAAO,CAAC;IAChD,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AA8OD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE9D;AAwJD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAkCzE;AAwbD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAkG5B"}

package/dist/commands/gate/review-verdict.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { readFile, writeFile } from 'node:fs/promises';
 import { getFrontmatterBlock } from '../shared/frontmatter.js';
+import { parseDispatchStamps, } from '../../providers/identity/stamp.js';
 import YAML from 'yaml';
 const SEVERITIES = ['critical', 'high', 'medium', 'low'];
 const FRONTMATTER_COUNT_KEYS = {
@@ -214,6 +215,113 @@ function linesOutsideFences(content) {
     }
     return outsideFenceLines;
 }
+const TOP_SECTION_HEADING = /^##\s+\S/;
+const FINDINGS_SECTION_HEADING = /^##\s+Findings\b/i;
+const SEVERITY_SECTION_HEADING = /^#{3,6}\s+(?:Critical|High|Medium|Low)\s*#*\s*$/i;
+const LIST_MARKER = /^(?:[-*+]|\d+[.)])\s+/;
+const DISPATCH_TOKEN = /(^|[\s`])Dispatch:/;
+const POLICY_VIEW_LABEL = /policy\s+view/i;
+/** After a closing backtick: nothing, punctuation, or one parenthetical. */
+const ALLOWED_TRAILING_TEXT = /^\s*(?:[.,;:!?]+|\([^()`]*\))?\s*$/;
+function frontmatterEnd(content) {
+    const match = content.match(/^---\n[\s\S]*?\n---(?:\n|$)/);
+    return match ? match[0].length : 0;
+}
+/**
+ * Classifies one line as a reviewer dispatch audit line.
+ *
+ * Shape: an optional list marker, an optional bold or plain label ending in
+ * `:` (the label may itself hold backtick spans), and a `Dispatch:` stamp that
+ * is either bare to the end of the line or wrapped in one backtick pair, which
+ * may be followed only by punctuation or a single parenthetical. A wrapped
+ * stamp followed by other prose is a quotation, not an audit line. The stamp
+ * must parse as a reviewer stamp (`action=review role=reviewer`).
+ */
+function classifyAuditLine(text, lineNumber) {
+    const remainder = text.trim().replace(LIST_MARKER, '');
+    const token = DISPATCH_TOKEN.exec(remainder);
+    if (!token) {
+        return null;
+    }
+    let label = remainder.slice(0, token.index + (token[1] ?? '').length);
+    let stamp = remainder.slice(token.index + (token[1] ?? '').length);
+    const wrapped = label.endsWith('`');
+    if (wrapped) {
+        label = label.slice(0, -1);
+        const closing = stamp.indexOf('`');
+        if (closing === -1) {
+            return null;
+        }
+        // Only punctuation or one parenthetical may follow the closing backtick;
+        // longer prose means the line quotes a stamp rather than records one.
+        if (!ALLOWED_TRAILING_TEXT.test(stamp.slice(closing + 1))) {
+            return null;
+        }
+        stamp = stamp.slice(0, closing);
+    }
+    else if (stamp.includes('`')) {
+        return null;
+    }
+    const trimmedLabel = label.trim();
+    if (trimmedLabel && !/:(?:\*{1,2}|_{1,2})?$/.test(trimmedLabel)) {
+        return null;
+    }
+    const parsed = parseDispatchStamps(stamp);
+    const first = parsed[0];
+    if (parsed.length !== 1 ||
+        !first ||
+        first.legacy ||
+        first.action !== 'review' ||
+        first.role !== 'reviewer') {
+        return null;
+    }
+    return {
+        stamp: { ...first, line: text, lineNumber },
+        policyView: POLICY_VIEW_LABEL.test(trimmedLabel),
+    };
+}
+/**
+ * Reviewer dispatch audit lines from every part of the artifact body except
+ * finding sections: `## Findings` (with its subsections) and any
+ * `### Critical`, `### High`, `### Medium`, or `### Low` section. Reviewers
+ * have placed audit stamps in the pre-heading metadata block and in sections
+ * such as `## Dispatch Audit`, `## Review Dispatch Audit`, `## Review Scope`,
+ * and `## Dispatch Evidence`, so recognition is by line shape, not section
+ * name. Fenced code blocks and prose that merely quotes a stamp are ignored.
+ */
+export function extractDispatchAudit(content) {
+    const bodyStart = frontmatterEnd(content);
+    const audit = { unlabeled: [], policyView: [] };
+    let inFindingSection = false;
+    for (const line of linesOutsideFences(content)) {
+        if (line.start < bodyStart) {
+            continue;
+        }
+        if (TOP_SECTION_HEADING.test(line.text)) {
+            inFindingSection = FINDINGS_SECTION_HEADING.test(line.text);
+            continue;
+        }
+        if (SEVERITY_SECTION_HEADING.test(line.text)) {
+            inFindingSection = true;
+            continue;
+        }
+        if (inFindingSection) {
+            continue;
+        }
+        const lineNumber = content.slice(0, line.start).split('\n').length;
+        const classified = classifyAuditLine(line.text, lineNumber);
+        if (!classified) {
+            continue;
+        }
+        if (classified.policyView) {
+            audit.policyView.push(classified.stamp);
+        }
+        else {
+            audit.unlabeled.push(classified.stamp);
+        }
+    }
+    return audit;
+}
 function findFindingsSection(content) {
     const lines = linesOutsideFences(content);
     const findingsHeading = lines.find((line) => /^##\s+Findings\s*#*\s*$/i.test(line.text));
@@ -544,6 +652,8 @@ export async function parseReviewGateVerdict(artifactPath, options = {}) {
         throw new Error(`Review artifact at ${artifactPath} does not contain recognizable review findings or explicit verdict counts.`);
     }
     const gateInvocation = readGateInvocation(frontmatter);
+    const dispatchAudit = extractDispatchAudit(content);
+    const hasDispatchAudit = dispatchAudit.unlabeled.length > 0 || dispatchAudit.policyView.length > 0;
     if (options.artifactSnapshot) {
         await assertArtifactContentCurrent(artifactPath, options.artifactSnapshot.content);
     }
@@ -554,6 +664,7 @@ export async function parseReviewGateVerdict(artifactPath, options = {}) {
         invocation: stringOrNull(frontmatter['oat_review_invocation']),
         project: stringOrNull(frontmatter['oat_project']),
         ...(gateInvocation ? { gateInvocation } : {}),
+        ...(hasDispatchAudit ? { dispatchAudit } : {}),
         counts,
         blocking: hasBlockingFindings(counts),
         ...(insertedSeverities.length > 0

package/dist/commands/project/dispatch/canonical-role.d.ts

@@ -0,0 +1,33 @@
+import { type CanonicalRoleEvidence } from '../../../agents/canonical/index.js';
+import type { CommandContext, GlobalOptions } from '../../../app/command-context.js';
+import { Command } from 'commander';
+/** The pack that ships the canonical OAT dispatch roles. */
+export declare const CANONICAL_ROLE_DEPENDENCY = "workflows";
+export interface CanonicalRoleCommandDependencies {
+    buildCommandContext: (options: GlobalOptions) => CommandContext;
+    resolveProjectRoot: (cwd: string) => Promise<string>;
+}
+export interface CanonicalRoleResolutionEvent {
+    kind: 'canonical-role-resolution';
+    requestId: string;
+    source: 'canonical-role-resolver';
+    evidence: CanonicalRoleEvidence;
+}
+/**
+ * Produce `canonical-role-resolution` evidence from the resolver itself, so a
+ * caller never hand-assembles redacted paths or a content digest. Read-only:
+ * it inspects the loaded, user, and project `.agents` roots and writes
+ * nothing. The emitted event is checked against the recorder's own event
+ * schema before it is printed, so `oat project dispatch record` accepts it
+ * unchanged.
+ */
+export declare function produceCanonicalRoleEvent(input: {
+    role: string;
+    requestId: string;
+    skillDir: string;
+    cwd: string;
+    home: string;
+    repoRoot: string;
+}): Promise<CanonicalRoleResolutionEvent>;
+export declare function createCanonicalRoleCommand(dependencies: CanonicalRoleCommandDependencies): Command;
+//# sourceMappingURL=canonical-role.d.ts.map

package/dist/commands/project/dispatch/canonical-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-role.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/canonical-role.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,4DAA4D;AAC5D,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAKrD,MAAM,WAAW,gCAAgC;IAC/C,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACtD;AAQD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,yBAAyB,CAAC;IAClC,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAeD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAiCxC;AAwDD,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,gCAAgC,GAC7C,OAAO,CAyBT"}

package/dist/commands/project/dispatch/canonical-role.js

@@ -0,0 +1,114 @@
+import { isAbsolute, join, resolve } from 'node:path';
+import { resolveCanonicalRole, } from '../../../agents/canonical/index.js';
+import { readGlobalOptions } from '../../shared/shared.utils.js';
+import { dirExists, fileExists } from '../../../fs/io.js';
+import { safeParseOatDispatchEvidenceEvent } from '../../../providers/identity/oat-dispatch-record.js';
+import { Command } from 'commander';
+import { redactDispatchMessage } from './record.js';
+/** The pack that ships the canonical OAT dispatch roles. */
+export const CANONICAL_ROLE_DEPENDENCY = 'workflows';
+const REQUEST_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
+const ROLE_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
+async function loadedSkillDir(cwd, skillDir) {
+    const candidate = isAbsolute(skillDir) ? skillDir : resolve(cwd, skillDir);
+    if (!(await dirExists(candidate)) ||
+        !(await fileExists(join(candidate, 'SKILL.md')))) {
+        throw new Error(`--skill-dir must name a loaded skill directory containing SKILL.md (got ${skillDir}); the loaded tier is derived from it.`);
+    }
+    return candidate;
+}
+/**
+ * Produce `canonical-role-resolution` evidence from the resolver itself, so a
+ * caller never hand-assembles redacted paths or a content digest. Read-only:
+ * it inspects the loaded, user, and project `.agents` roots and writes
+ * nothing. The emitted event is checked against the recorder's own event
+ * schema before it is printed, so `oat project dispatch record` accepts it
+ * unchanged.
+ */
+export async function produceCanonicalRoleEvent(input) {
+    if (!ROLE_NAME_PATTERN.test(input.role)) {
+        throw new Error('--role must be a canonical role name: expected [a-z0-9] followed by [a-z0-9_-].');
+    }
+    if (!REQUEST_ID_PATTERN.test(input.requestId)) {
+        throw new Error('--request-id must be a stable contained identifier: expected [a-zA-Z0-9] followed by up to 127 of [a-zA-Z0-9._-].');
+    }
+    const skillDir = await loadedSkillDir(input.cwd, input.skillDir);
+    const event = {
+        kind: 'canonical-role-resolution',
+        requestId: input.requestId,
+        source: 'canonical-role-resolver',
+        evidence: resolveCanonicalRole({
+            dependency: CANONICAL_ROLE_DEPENDENCY,
+            canonicalRole: input.role,
+            skillDir,
+            userCanonicalRoot: join(input.home, '.agents'),
+            projectCanonicalRoot: join(input.repoRoot, '.agents'),
+        }),
+    };
+    const checked = safeParseOatDispatchEvidenceEvent(event);
+    if (!checked.success) {
+        throw new Error(`Canonical role evidence failed the dispatch-record event schema: ${checked.error.issues
+            .map((issue) => `${issue.path.join('.') || '<root>'}: ${issue.message}`)
+            .join('; ')}`);
+    }
+    return event;
+}
+function summaryLines(event) {
+    const { evidence } = event;
+    if (evidence.status === 'resolved') {
+        return [
+            `Canonical role ${evidence.canonicalRole} resolved from the ${evidence.tier} tier (${evidence.validation}, version ${evidence.roleVersion}).`,
+        ];
+    }
+    return [
+        `Canonical role ${evidence.canonicalRole} was not found in the loaded, user, or project tier.`,
+        ...evidence.recovery.map(({ command }) => `Recovery: ${command}`),
+    ];
+}
+async function runCanonicalRoleCommand(options, context, dependencies) {
+    let repoRoot = null;
+    try {
+        repoRoot = await dependencies.resolveProjectRoot(context.cwd);
+        const event = await produceCanonicalRoleEvent({
+            role: options.role,
+            requestId: options.requestId,
+            skillDir: options.skillDir,
+            cwd: context.cwd,
+            home: context.home,
+            repoRoot,
+        });
+        if (context.json) {
+            context.logger.json(event);
+        }
+        else {
+            for (const line of summaryLines(event)) {
+                context.logger.info(line);
+            }
+            context.logger.info(JSON.stringify(event, null, 2));
+        }
+        process.exitCode = 0;
+    }
+    catch (error) {
+        // The same single redaction boundary as `dispatch record`: a skill
+        // directory or root that reaches a message is labelled or scrubbed.
+        const message = redactDispatchMessage(error instanceof Error ? error.message : String(error), { repo: repoRoot, home: context.home });
+        if (context.json) {
+            context.logger.json({ status: 'error', message });
+        }
+        else {
+            context.logger.error(message);
+        }
+        process.exitCode = 1;
+    }
+}
+export function createCanonicalRoleCommand(dependencies) {
+    return new Command('canonical-role')
+        .description('Print canonical-role-resolution evidence for a dispatch record (read-only)')
+        .requiredOption('--role <name>', 'Canonical role name, e.g. oat-reviewer')
+        .requiredOption('--request-id <id>', 'Request ID of the dispatch record the evidence belongs to')
+        .requiredOption('--skill-dir <dir>', 'Directory of the loaded skill (contains SKILL.md); the loaded tier is derived from it')
+        .action(async (options, command) => {
+        const context = dependencies.buildCommandContext(readGlobalOptions(command));
+        await runCanonicalRoleCommand(options, context, dependencies);
+    });
+}

package/dist/commands/project/dispatch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,MAAM,WAAW,kCAAkC;IACjD,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AA0ID,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,kCAAkC,CAAM,GAC1D,OAAO,CA2BT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,MAAM,WAAW,kCAAkC;IACjD,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AA0ID,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,kCAAkC,CAAM,GAC1D,OAAO,CA4BT"}

package/dist/commands/project/dispatch/index.js

@@ -5,6 +5,7 @@ import { readGlobalOptions } from '../../shared/shared.utils.js';
 import { fileExists } from '../../../fs/io.js';
 import { resolveProjectRoot, validateRealPathWithinScope } from '../../../fs/paths.js';
 import { Command } from 'commander';
+import { createCanonicalRoleCommand } from './canonical-role.js';
 import { recordProjectDispatch, redactDispatchMessage, } from './record.js';
 const DEFAULT_DEPENDENCIES = {
     buildCommandContext,
@@ -133,5 +134,6 @@ export function createProjectDispatchCommand(overrides = {}) {
         .action(async (options, command) => {
         const context = dependencies.buildCommandContext(readGlobalOptions(command));
         await runRecordCommand(options, context, dependencies);
-    }));
+    }))
+        .addCommand(createCanonicalRoleCommand(dependencies));
 }

package/dist/commands/project/dispatch/record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/record.ts"],"names":[],"mappings":"AAkBA,OAAO,EAKL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAOL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EAElC,MAAM,yCAAyC,CAAC;AAWjD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAoCD;;;;;;;;;GASG;AAEH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE;IACL,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjB,GACL,MAAM,CAcR;AAaD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC;CACrC;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACvC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,4BAA4B,CAAC;IACrC,eAAe,EAAE,6BAA6B,CAAC;CAChD,CAAC;AAsEF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CA0G5E;AAgKD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA6HvC"}
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/record.ts"],"names":[],"mappings":"AAuBA,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAQL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EAElC,MAAM,yCAAyC,CAAC;AAYjD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAoCD;;;;;;;;;GASG;AAEH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE;IACL,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjB,GACL,MAAM,CAiBR;AAeD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC;CACrC;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACvC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,4BAA4B,CAAC;IACrC,eAAe,EAAE,6BAA6B,CAAC;CAChD,CAAC;AA8NF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CA6G5E;AAgKD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA6HvC"}

package/dist/commands/project/dispatch/record.js

@@ -1,13 +1,14 @@
 import { readFile, readdir } from 'node:fs/promises';
 import { join } from 'node:path';
 import { publishContainedJsonRevision, redactedFsError, withContainedWriterLock, } from '../../../fs/io.js';
-import { acceptClaudeLaunchEnvelope, buildClaudeDispatchRecord, } from '../../../providers/claude/dispatch-envelope.js';
+import { acceptClaudeLaunchEnvelope, buildClaudeDispatchRecord, collectClaudeLaunchViolations, collectClaudeRecordBaseViolations, ManagedClaudeDispatchValidationError, zodIssueViolations, } from '../../../providers/claude/dispatch-envelope.js';
 import { assertJournalIdentityHasNoAbsolutePath, redactAbsolutePaths, } from '../../../providers/identity/absolute-paths.js';
 import { CLAUDE_OBSERVATION_SOURCE } from '../../../providers/identity/claude-runtime-observation.js';
 import { CODEX_OBSERVATION_SOURCE } from '../../../providers/identity/codex-runtime-observation.js';
-import { assertBoundedDispatchRecordSize, assertNoSensitiveDispatchContent, identityFieldsOf, parseGenericDispatchRecord, } from '../../../providers/identity/generic-dispatch-record.js';
-import { augmentDispatchRecord, compareObservedRuntimeMetadata, comparedObservationAxes, configuredInvocationForObservation, parsePersistedOatDispatchRecord, parseRuntimeObservation, } from '../../../providers/identity/oat-dispatch-record.js';
+import { assertBoundedDispatchRecordSize, assertNoSensitiveDispatchContent, collectSensitiveDispatchContent, identityFieldsOf, parseGenericDispatchRecord, redactSensitiveValues, } from '../../../providers/identity/generic-dispatch-record.js';
+import { augmentDispatchRecord, compareObservedRuntimeMetadata, comparedObservationAxes, configuredInvocationForObservation, parsePersistedOatDispatchRecord, parseRuntimeObservation, safeParseOatDispatchEvidenceEvent, } from '../../../providers/identity/oat-dispatch-record.js';
 import { observationFromFacts, parseRuntimeObservationEnvelope, projectRuntimeObservation, providerSupportsRuntimeObservation, } from '../../../providers/identity/runtime-observation.js';
+import { ZodError } from 'zod';
 const REQUEST_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
 const DISPATCH_LOCK_NAME = '.dispatch-lock';
 /**
@@ -48,7 +49,10 @@ function parseJournalEntry(fileName) {
  * written verbatim into the durable record by the same command.
  */
 export function redactDispatchMessage(message, roots = {}) {
-    let redacted = message;
+    // Secrets first: a rejected value is echoed by some validation messages (a
+    // Zod enum issue repeats what it received), so a secret-shaped value must be
+    // scrubbed here even though the same run also reports it as sensitive.
+    let redacted = redactSensitiveValues(message);
     const labelled = [
         ['<project>', roots.project],
         ['<repo>', roots.repo],
@@ -71,6 +75,8 @@ const OBSERVATION_SOURCE_BY_PROVIDER = {
     claude: CLAUDE_OBSERVATION_SOURCE,
 };
 const CALLER_ASSERTED_OBSERVATION_SOURCE = 'caller-asserted';
+/** A managed Claude record's provider is derived, and always this value. */
+const MANAGED_CLAUDE_PROVIDER = 'claude';
 function isRecord(value) {
     return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
@@ -123,6 +129,139 @@ function resolveObservationEvent(record, event) {
         }),
     };
 }
+/**
+ * Project a caller-form `runtime-observation` event onto the shape the event
+ * schema checks, so the single-run pass reports its errors alongside every
+ * other stage instead of on a later run.
+ *
+ * The caller controls the envelope (`kind`, `requestId`, `source`, unknown
+ * keys) and either a finished `observation` or a `metadata` envelope, and
+ * both are checked here. The recording path derives an observation's
+ * `source`, `match`, and `comparedAxes` from the record, so those are filled
+ * with valid stand-ins rather than demanded from the caller; the metadata
+ * form's projection and request-correlation guard degrade to `not-reported`
+ * rather than fail, so they contribute no violation. The provider binding is
+ * checked directly: a managed record's provider is always `claude`.
+ */
+function runtimeObservationCallerForm(event, violations) {
+    if ('metadata' in event) {
+        if ('observation' in event) {
+            violations.push({
+                stage: 'event',
+                path: '<root>',
+                message: 'A runtime observation event carries either observation or metadata, not both.',
+            });
+        }
+        try {
+            parseRuntimeObservationEnvelope(event.metadata);
+        }
+        catch (error) {
+            if (error instanceof ZodError) {
+                violations.push(...zodIssueViolations('event', 'metadata', error));
+            }
+            else {
+                violations.push({
+                    stage: 'event',
+                    path: 'metadata',
+                    message: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+        const { metadata: _metadata, observation: _observation, ...rest } = event;
+        return { ...rest, observation: { status: 'not-reported' } };
+    }
+    const observation = event.observation;
+    if (!isRecord(observation) || observation.status !== 'reported') {
+        return event;
+    }
+    if (observation.provider !== MANAGED_CLAUDE_PROVIDER) {
+        violations.push({
+            stage: 'event',
+            path: 'observation.provider',
+            message: 'A runtime observation must name the same provider as its dispatch record.',
+        });
+    }
+    return {
+        ...event,
+        observation: {
+            ...observation,
+            provider: MANAGED_CLAUDE_PROVIDER,
+            source: CALLER_ASSERTED_OBSERVATION_SOURCE,
+            match: 'not-comparable',
+            comparedAxes: [],
+        },
+    };
+}
+/**
+ * Event violations for a managed input: the event must be an object, carry no
+ * sensitive content, satisfy the evidence-event schema, and name the same
+ * request as `recordBase`. Raw provider `metadata` entries are exempt from the
+ * sensitive walk exactly as on the recording path. A `runtime-observation`
+ * event is validated here too: `runtimeObservationCallerForm` projects its
+ * caller form onto the schema shape, filling the fields the recording path
+ * derives (source, match, compared axes) with valid stand-ins, so its errors
+ * join this single-run report.
+ */
+function collectManagedEventViolations(event, recordBase) {
+    if (!isRecord(event)) {
+        return [
+            {
+                stage: 'event',
+                path: '<root>',
+                message: 'Dispatch record event must be a JSON object.',
+            },
+        ];
+    }
+    const violations = [];
+    const walked = isRecord(event.metadata)
+        ? { ...event, metadata: { ...event.metadata, entries: null } }
+        : event;
+    violations.push(...collectSensitiveDispatchContent(walked, 'event').map((violation) => ({
+        stage: 'event',
+        path: violation.path.slice('event.'.length) || '<root>',
+        message: violation.message,
+    })));
+    const parsed = safeParseOatDispatchEvidenceEvent(event.kind === 'runtime-observation'
+        ? runtimeObservationCallerForm(event, violations)
+        : event);
+    if (!parsed.success) {
+        violations.push(...zodIssueViolations('event', null, parsed.error));
+    }
+    const recordRequestId = isRecord(recordBase) ? recordBase.request_id : null;
+    if (typeof event.requestId === 'string' &&
+        typeof recordRequestId === 'string' &&
+        event.requestId !== recordRequestId) {
+        violations.push({
+            stage: 'event',
+            path: 'requestId',
+            message: 'OAT event request ID must match the generic record.',
+        });
+    }
+    return violations;
+}
+/**
+ * The single-run pass for a managed Claude input. Every stage is validated
+ * independently and every violation is reported in one error, so a caller
+ * assembling the input fixes it in one round instead of one field per run.
+ * Checks that depend on a stage which failed to parse are skipped and named in
+ * the error; the recording path below still runs every check afterwards, so
+ * nothing this pass skips goes unchecked.
+ */
+function assertManagedClaudeInputValid(value) {
+    const launch = collectClaudeLaunchViolations(value.claudeLaunch);
+    const base = collectClaudeRecordBaseViolations(value.recordBase, launch.resolverRole);
+    const violations = [
+        ...launch.violations,
+        ...base.violations,
+        ...collectManagedEventViolations(value.event, value.recordBase),
+    ];
+    if (violations.length > 0) {
+        throw new ManagedClaudeDispatchValidationError(violations, [
+            ...launch.skipped,
+            ...base.skipped,
+        ]);
+    }
+}
 export function parseDispatchRecordInput(value) {
     if (!isRecord(value)) {
         throw new Error('Dispatch record input must be a JSON object.');
@@ -136,6 +275,9 @@ export function parseDispatchRecordInput(value) {
     if (!isGenericInput && !isManagedClaudeInput) {
         throw new Error('Dispatch record input accepts record and event, or claudeLaunch, event, and recordBase.');
     }
+    if (isManagedClaudeInput) {
+        assertManagedClaudeInputValid(value);
+    }
     if (!isRecord(value.event)) {
         throw new Error('Dispatch record event must be a JSON object.');
     }

package/dist/commands/sync/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/apply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAoB3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AA6XtB,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,OAAO,CAAC,IAAI,CAAC,CAyMf"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/apply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAoB3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAwYtB,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,OAAO,CAAC,IAAI,CAAC,CA0Mf"}