@open-agent-toolkit/cli 0.3.9 → 0.3.11

package/dist/commands/project/closeout-check/index.d.ts

@@ -0,0 +1,38 @@
+import { readFile as defaultReadFile } from 'node:fs/promises';
+import { buildCommandContext, type CommandContext } from '../../../app/command-context.js';
+import { resolveEffectiveConfig } from '../../../config/resolve.js';
+import { dirExists, fileExists } from '../../../fs/io.js';
+import { Command } from 'commander';
+import { type CloseoutResult } from './closeout-invariant.js';
+export { evaluateCloseout, formatCloseoutRefusal, type CloseoutResult, } from './closeout-invariant.js';
+export interface CloseoutCheckDependencies {
+    buildCommandContext: (options: Parameters<typeof buildCommandContext>[0]) => CommandContext;
+    resolveProjectRoot: (cwd: string) => Promise<string>;
+    resolveEffectiveConfig: typeof resolveEffectiveConfig;
+    readFile: typeof defaultReadFile;
+    dirExists: typeof dirExists;
+    fileExists: typeof fileExists;
+    /**
+     * Environment read for `OAT_AUTONOMOUS`. Injectable so a caller that forgets
+     * `--autonomous` under `OAT_AUTONOMOUS=1` still cannot fail open.
+     */
+    env: NodeJS.ProcessEnv;
+}
+export declare const DEFAULT_CLOSEOUT_CHECK_DEPENDENCIES: CloseoutCheckDependencies;
+export interface ProjectCloseoutCheck {
+    repoRoot: string;
+    targetProjectPath: string;
+    statePath: string;
+    stateContent: string;
+    result: CloseoutResult;
+}
+/**
+ * Resolve a project, read its `state.md` from disk, and evaluate the closeout
+ * invariant. Shared by `closeout-check` and `complete-state` so both read the
+ * same inputs and print the same refusal.
+ */
+export declare function checkProjectCloseout(projectPath: string, options: {
+    autonomous: boolean;
+}, context: CommandContext, dependencies: Pick<CloseoutCheckDependencies, 'resolveProjectRoot' | 'resolveEffectiveConfig' | 'readFile' | 'dirExists' | 'fileExists' | 'env'>): Promise<ProjectCloseoutCheck>;
+export declare function createProjectCloseoutCheckCommand(overrides?: Partial<CloseoutCheckDependencies>): Command;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/project/closeout-check/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/closeout-check/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG/D,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,QAAQ,EAAE,OAAO,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,eAAO,MAAM,mCAAmC,EAAE,yBAQjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,EAChC,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,IAAI,CAChB,yBAAyB,EACvB,oBAAoB,GACpB,wBAAwB,GACxB,UAAU,GACV,WAAW,GACX,YAAY,GACZ,KAAK,CACR,GACA,OAAO,CAAC,oBAAoB,CAAC,CA+B/B;AAmED,wBAAgB,iCAAiC,CAC/C,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CA2BT"}

package/dist/commands/project/closeout-check/index.js

@@ -0,0 +1,117 @@
+import { readFile as defaultReadFile } from 'node:fs/promises';
+import { isAbsolute, join } from 'node:path';
+import { buildCommandContext } from '../../../app/command-context.js';
+import { readGlobalOptions } from '../../shared/shared.utils.js';
+import { resolveEffectiveConfig } from '../../../config/resolve.js';
+import { CliError } from '../../../errors/cli-error.js';
+import { dirExists, fileExists } from '../../../fs/io.js';
+import { resolveProjectRoot } from '../../../fs/paths.js';
+import { Command } from 'commander';
+import { evaluateCloseout, formatCloseoutRefusal, } from './closeout-invariant.js';
+export { evaluateCloseout, formatCloseoutRefusal, } from './closeout-invariant.js';
+export const DEFAULT_CLOSEOUT_CHECK_DEPENDENCIES = {
+    buildCommandContext,
+    resolveProjectRoot,
+    resolveEffectiveConfig,
+    readFile: defaultReadFile,
+    dirExists,
+    fileExists,
+    env: process.env,
+};
+/**
+ * Resolve a project, read its `state.md` from disk, and evaluate the closeout
+ * invariant. Shared by `closeout-check` and `complete-state` so both read the
+ * same inputs and print the same refusal.
+ */
+export async function checkProjectCloseout(projectPath, options, context, dependencies) {
+    const repoRoot = await dependencies.resolveProjectRoot(context.cwd);
+    const targetProjectPath = isAbsolute(projectPath)
+        ? projectPath
+        : join(repoRoot, projectPath);
+    if (!(await dependencies.dirExists(targetProjectPath))) {
+        throw new CliError(`Project not found: ${projectPath}`, 1);
+    }
+    const statePath = join(targetProjectPath, 'state.md');
+    if (!(await dependencies.fileExists(statePath))) {
+        throw new CliError(`Project state.md not found: ${statePath}`, 1);
+    }
+    const stateContent = await dependencies.readFile(statePath, 'utf8');
+    const result = await evaluateCloseout({
+        stateContent,
+        autonomousFlag: options.autonomous,
+        env: dependencies.env,
+        resolveConfigured: async () => {
+            const effective = await dependencies.resolveEffectiveConfig(repoRoot, join(context.home, '.oat'), dependencies.env);
+            const value = effective.resolved['workflow.postImplementSequence']?.value;
+            return value !== null && value !== undefined;
+        },
+    });
+    return { repoRoot, targetProjectPath, statePath, stateContent, result };
+}
+async function runCloseoutCheck(projectPath, options, context, dependencies) {
+    try {
+        const { result } = await checkProjectCloseout(projectPath, { autonomous: options.autonomous ?? false }, context, dependencies);
+        if (result.status === 'incomplete') {
+            const message = formatCloseoutRefusal(projectPath, result);
+            if (context.json) {
+                context.logger.json({
+                    status: 'incomplete',
+                    projectPath,
+                    invariant: result.invariant,
+                    detail: result.detail,
+                    route: result.route,
+                    nextOwner: result.nextOwner,
+                    inputs: result.inputs,
+                    message,
+                });
+            }
+            else {
+                context.logger.info(message);
+            }
+            // Fail closed: a caller that ignores the JSON still stops.
+            process.exitCode = 1;
+            return;
+        }
+        if (context.json) {
+            context.logger.json({
+                status: result.status,
+                projectPath,
+                invariant: null,
+                route: null,
+                nextOwner: null,
+                inputs: result.inputs,
+            });
+        }
+        else if (result.status === 'complete') {
+            context.logger.info(`Closeout invariant satisfied for ${projectPath}: every stored step and the approval are recorded complete.`);
+        }
+        else {
+            context.logger.info(`Closeout invariant not required for ${projectPath}: no snapshot, and the closeout is not configured, autonomous, or lite.`);
+        }
+        process.exitCode = 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (context.json) {
+            context.logger.json({ status: 'error', message });
+        }
+        else {
+            context.logger.error(message);
+        }
+        process.exitCode = error instanceof CliError ? error.exitCode : 1;
+    }
+}
+export function createProjectCloseoutCheckCommand(overrides = {}) {
+    const dependencies = {
+        ...DEFAULT_CLOSEOUT_CHECK_DEPENDENCIES,
+        ...overrides,
+    };
+    return new Command('closeout-check')
+        .description('Report whether a project closeout snapshot permits terminal completion (read-only)')
+        .argument('<project-path>', 'Project path to check')
+        .option('--autonomous', 'Treat the closeout as autonomous (also implied by OAT_AUTONOMOUS=1)')
+        .action(async (projectPath, options, command) => {
+        const context = dependencies.buildCommandContext(readGlobalOptions(command));
+        await runCloseoutCheck(projectPath, options, context, dependencies);
+    });
+}

package/dist/commands/project/complete-state/index.d.ts

@@ -1,5 +1,6 @@
 import { readFile as defaultReadFile, writeFile as defaultWriteFile } from 'node:fs/promises';
 import { buildCommandContext, type CommandContext } from '../../../app/command-context.js';
+import { resolveEffectiveConfig } from '../../../config/resolve.js';
 import { dirExists, fileExists } from '../../../fs/io.js';
 import { Command } from 'commander';
 interface ProjectCompleteStateDependencies {
@@ -9,6 +10,9 @@ interface ProjectCompleteStateDependencies {
     writeFile: typeof defaultWriteFile;
     dirExists: typeof dirExists;
     fileExists: typeof fileExists;
+    resolveEffectiveConfig: typeof resolveEffectiveConfig;
+    /** Environment read for `OAT_AUTONOMOUS`; injectable for tests. */
+    env: NodeJS.ProcessEnv;
     now: () => Date;
 }
 export declare function createProjectCompleteStateCommand(overrides?: Partial<ProjectCompleteStateDependencies>): Command;

package/dist/commands/project/complete-state/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/complete-state/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,SAAS,IAAI,gBAAgB,EAC9B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,UAAU,gCAAgC;IACxC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,OAAO,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,gBAAgB,CAAC;IACnC,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AA4ED,wBAAgB,iCAAiC,CAC/C,SAAS,GAAE,OAAO,CAAC,gCAAgC,CAAM,GACxD,OAAO,CA2BT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/complete-state/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,SAAS,IAAI,gBAAgB,EAC9B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,UAAU,gCAAgC;IACxC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,OAAO,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,gBAAgB,CAAC;IACnC,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AA4ED,wBAAgB,iCAAiC,CAC/C,SAAS,GAAE,OAAO,CAAC,gCAAgC,CAAM,GACxD,OAAO,CA+BT"}

package/dist/commands/project/complete-state/index.js

@@ -1,7 +1,8 @@
 import { readFile as defaultReadFile, writeFile as defaultWriteFile, } from 'node:fs/promises';
-import { isAbsolute, join } from 'node:path';
 import { buildCommandContext } from '../../../app/command-context.js';
+import { checkProjectCloseout, formatCloseoutRefusal, } from '../../project/closeout-check/index.js';
 import { readGlobalOptions } from '../../shared/shared.utils.js';
+import { resolveEffectiveConfig } from '../../../config/resolve.js';
 import { CliError } from '../../../errors/cli-error.js';
 import { dirExists, fileExists } from '../../../fs/io.js';
 import { resolveProjectRoot } from '../../../fs/paths.js';
@@ -15,24 +16,20 @@ const DEFAULT_DEPENDENCIES = {
     writeFile: defaultWriteFile,
     dirExists,
     fileExists,
+    resolveEffectiveConfig,
+    env: process.env,
     now: () => new Date(),
 };
-function resolveTargetProjectPath(repoRoot, projectPath) {
-    return isAbsolute(projectPath) ? projectPath : join(repoRoot, projectPath);
-}
 async function runProjectCompleteState(projectPath, options, context, dependencies) {
     try {
-        const repoRoot = await dependencies.resolveProjectRoot(context.cwd);
-        const targetProjectPath = resolveTargetProjectPath(repoRoot, projectPath);
-        if (!(await dependencies.dirExists(targetProjectPath))) {
-            throw new CliError(`Project not found: ${projectPath}`, 1);
-        }
-        const statePath = join(targetProjectPath, 'state.md');
-        if (!(await dependencies.fileExists(statePath))) {
-            throw new CliError(`Project state.md not found: ${statePath}`, 1);
+        // Refuse the same closeout invariant `oat project closeout-check` reports,
+        // before any write: a configured, autonomous, or lite closeout cannot
+        // reach terminal completion without its complete durable snapshot.
+        const { targetProjectPath, statePath, stateContent: content, result, } = await checkProjectCloseout(projectPath, { autonomous: options.autonomous ?? false }, context, dependencies);
+        if (result.status === 'incomplete') {
+            throw new CliError(formatCloseoutRefusal(projectPath, result), 1);
         }
         const now = dependencies.now();
-        const content = await dependencies.readFile(statePath, 'utf8');
         const updatedContent = renderCompletedProjectState(content, {
             archived: options.archived ?? false,
             nowUtc: now.toISOString(),
@@ -78,6 +75,7 @@ export function createProjectCompleteStateCommand(overrides = {}) {
         .description('Update a project state.md to the completed lifecycle shape')
         .argument('<project-path>', 'Project path to update')
         .option('--archived', 'Mark the completed project as archived locally')
+        .option('--autonomous', 'Treat the closeout as autonomous (also implied by OAT_AUTONOMOUS=1)')
         .action(async (projectPath, options, command) => {
         const context = dependencies.buildCommandContext(readGlobalOptions(command));
         await runProjectCompleteState(projectPath, options, context, dependencies);

package/dist/commands/project/dispatch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,MAAM,WAAW,kCAAkC;IACjD,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AA0ID,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,kCAAkC,CAAM,GAC1D,OAAO,CA4BT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,MAAM,WAAW,kCAAkC;IACjD,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AAiHD,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,kCAAkC,CAAM,GAC1D,OAAO,CA0BT"}

package/dist/commands/project/dispatch/index.js

@@ -1,9 +1,7 @@
 import { readFile } from 'node:fs/promises';
-import { isAbsolute, join } from 'node:path';
 import { buildCommandContext, } from '../../../app/command-context.js';
 import { readGlobalOptions } from '../../shared/shared.utils.js';
-import { fileExists } from '../../../fs/io.js';
-import { resolveProjectRoot, validateRealPathWithinScope } from '../../../fs/paths.js';
+import { resolveProjectRoot } from '../../../fs/paths.js';
 import { Command } from 'commander';
 import { createCanonicalRoleCommand } from './canonical-role.js';
 import { recordProjectDispatch, redactDispatchMessage, } from './record.js';
@@ -19,16 +17,6 @@ const DEFAULT_DEPENDENCIES = {
         return Buffer.concat(chunks).toString('utf8');
     },
 };
-async function resolveProjectPath(repoRoot, project) {
-    if (!project)
-        return null;
-    const candidate = isAbsolute(project) ? project : join(repoRoot, project);
-    const validated = await validateRealPathWithinScope(candidate, repoRoot);
-    if (!(await fileExists(join(validated.realPath, 'state.md')))) {
-        throw new Error('Project path must contain a readable state.md.');
-    }
-    return validated.realPath;
-}
 function axes(values) {
     return values
         .map(([name, value]) => `${name}=${value ?? 'not-reported'}`)
@@ -65,19 +53,14 @@ function runtimeIdentityLines(identity) {
 }
 async function runRecordCommand(options, context, dependencies) {
     let repoRoot = null;
-    let projectPath = null;
     try {
         repoRoot = await dependencies.resolveProjectRoot(context.cwd);
-        projectPath = await resolveProjectPath(repoRoot, options.project);
         const content = options.eventFile === '-'
             ? await dependencies.readStdin()
             : await dependencies.readFile(options.eventFile);
         // Hand the raw event to the recorder; it owns the single authoritative
         // parse, and parsing twice would relabel the provenance of its own output.
-        const raw = await recordProjectDispatch({
-            projectPath,
-            input: JSON.parse(content),
-        });
+        const raw = await recordProjectDispatch({ input: JSON.parse(content) });
         // The degradation reason is caller-influenced text on the success path, so
         // it goes through the same single redaction boundary as every failure
         // message. Producing a message that skips this boundary is exactly the
@@ -89,7 +72,6 @@ async function runRecordCommand(options, context, dependencies) {
                 reason: raw.runtimeIdentity.reason === null
                     ? null
                     : redactDispatchMessage(raw.runtimeIdentity.reason, {
-                        project: projectPath,
                         repo: repoRoot,
                         home: context.home,
                     }),
@@ -99,12 +81,7 @@ async function runRecordCommand(options, context, dependencies) {
             context.logger.json(result);
         }
         else {
-            if (result.status === 'persisted') {
-                context.logger.success(`Recorded project dispatch: ${result.path}`);
-            }
-            else {
-                context.logger.info('Dispatch evidence is valid; no project path was supplied, so nothing was persisted.');
-            }
+            context.logger.info('Dispatch evidence is valid; nothing was written.');
             for (const line of runtimeIdentityLines(result.runtimeIdentity)) {
                 context.logger.info(line);
             }
@@ -113,7 +90,7 @@ async function runRecordCommand(options, context, dependencies) {
     }
     catch (error) {
         // Single redaction boundary for every failure this command can surface.
-        const message = redactDispatchMessage(error instanceof Error ? error.message : String(error), { project: projectPath, repo: repoRoot, home: context.home });
+        const message = redactDispatchMessage(error instanceof Error ? error.message : String(error), { repo: repoRoot, home: context.home });
         if (context.json) {
             context.logger.json({ status: 'error', message });
         }
@@ -126,10 +103,9 @@ async function runRecordCommand(options, context, dependencies) {
 export function createProjectDispatchCommand(overrides = {}) {
     const dependencies = { ...DEFAULT_DEPENDENCIES, ...overrides };
     return new Command('dispatch')
-        .description('Validate and persist project dispatch provenance')
+        .description('Validate project dispatch provenance')
         .addCommand(new Command('record')
-        .description('Record one generic dispatch plus namespaced OAT evidence')
-        .option('--project <project-path>', 'Project path; omit to validate without persistence')
+        .description('Validate one generic dispatch plus namespaced OAT evidence (writes nothing)')
         .requiredOption('--event-file <json-file-or-dash>', 'Complete record and event JSON file, or - for standard input')
         .action(async (options, command) => {
         const context = dependencies.buildCommandContext(readGlobalOptions(command));

package/dist/commands/project/dispatch/record.d.ts

@@ -1,14 +1,5 @@
 import { type GenericDispatchRecord } from '../../../providers/identity/generic-dispatch-record.js';
 import { type OatDispatchEvidenceEvent, type PersistedOatDispatchRecordV1 } from '../../../providers/identity/oat-dispatch-record.js';
-/**
- * Test seam for deterministic concurrency coverage. `afterRead` fires after the
- * caller has read the journal revision it will publish against and before the
- * writer lock is acquired, which is exactly the window a stale concurrent
- * writer occupies.
- */
-export interface DispatchRecordRaceBarriers {
-    afterRead?: () => Promise<void>;
-}
 /**
  * Hard redaction boundary. Producers redact their own messages, but this is the
  * last stop before a message reaches `--json`, so a future call site that
@@ -17,10 +8,9 @@ export interface DispatchRecordRaceBarriers {
  *
  * The detector is shared with the record sanitizer. Two independent notions of
  * "looks like a path" is how a path could be scrubbed from an error message and
- * written verbatim into the durable record by the same command.
+ * emitted verbatim in the validated record by the same command.
  */
 export declare function redactDispatchMessage(message: string, roots?: {
-    project?: string | null;
     repo?: string | null;
     home?: string | null;
 }): string;
@@ -68,24 +58,25 @@ export interface DispatchRecordRuntimeIdentity {
     reason: string | null;
     status: 'reported' | 'not-reported';
 }
+/**
+ * The command validates and never persists: nothing is written to disk, so
+ * `validated-only` is the only success status.
+ */
 export type ProjectDispatchRecordResult = {
-    status: 'persisted' | 'validated-only';
-    path: string | null;
-    created: boolean;
+    status: 'validated-only';
     record: PersistedOatDispatchRecordV1;
     runtimeIdentity: DispatchRecordRuntimeIdentity;
 };
 export declare function parseDispatchRecordInput(value: unknown): DispatchRecordInput;
 /**
- * Parse once, here. An earlier revision parsed in the command layer and again
- * here; because the metadata path resolves to a finished observation, the second
+ * Validate one dispatch record and event and return the augmented record. Parse
+ * once, here. An earlier revision parsed in the command layer and again here;
+ * because the metadata path resolves to a finished observation, the second
  * parse saw its own output as caller-supplied and overwrote the parser source
  * with `caller-asserted`. Parsing is not idempotent by design — provenance
  * depends on which input form arrived — so it must happen exactly once.
  */
 export declare function recordProjectDispatch(input: {
-    projectPath: string | null;
     input: unknown;
-    raceBarriers?: DispatchRecordRaceBarriers;
 }): Promise<ProjectDispatchRecordResult>;
 //# sourceMappingURL=record.d.ts.map

package/dist/commands/project/dispatch/record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/record.ts"],"names":[],"mappings":"AAuBA,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAQL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EAElC,MAAM,yCAAyC,CAAC;AAYjD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAoCD;;;;;;;;;GASG;AAEH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE;IACL,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjB,GACL,MAAM,CAiBR;AAeD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC;CACrC;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACvC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,4BAA4B,CAAC;IACrC,eAAe,EAAE,6BAA6B,CAAC;CAChD,CAAC;AA8NF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CA6G5E;AAgKD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA6HvC"}
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch/record.ts"],"names":[],"mappings":"AAYA,OAAO,EAKL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAOL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EAElC,MAAM,yCAAyC,CAAC;AASjD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE;IACL,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjB,GACL,MAAM,CAgBR;AAeD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,4BAA4B,CAAC;IACrC,eAAe,EAAE,6BAA6B,CAAC;CAChD,CAAC;AA8NF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CA6G5E;AAoCD;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAWvC"}