coderifts 1.9.0 → 3.0.0

package/dist/cli.js

@@ -3007,7 +3007,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "coderifts",
-      version: "1.9.0",
+      version: "3.0.0",
       description: "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
       author: "CodeRifts <hello@coderifts.com>",
       license: "MIT",
@@ -3055,7 +3055,7 @@ var require_package = __commonJS({
         "cli-table3": "^0.6.4",
         commander: "^12.0.0",
         inquirer: "^8.2.6",
-        "js-yaml": "^4.2.0",
+        "js-yaml": "^4.3.1",
         "openapi-diff": "^0.24.1",
         ora: "^5.4.1"
       },
@@ -3063,7 +3063,9 @@ var require_package = __commonJS({
         "z-schema": "^7.2.0",
         "json-schema-ref-parser": "npm:@apidevtools/json-schema-ref-parser@^11.7.3",
         "form-data": "^4.0.6",
-        axios: ">=1.18.0"
+        axios: ">=1.18.0",
+        "fast-uri": ">=3.1.5",
+        "brace-expansion": "5.0.9"
       },
       devDependencies: {
         esbuild: "^0.28.1"
@@ -4367,7 +4369,7 @@ var require_templates = __commonJS({
         if (!Number.isNaN(number)) {
           results.push(number);
         } else if (matches = chunk.match(STRING_REGEX)) {
-          results.push(matches[2].replace(ESCAPE_REGEX, (m, escape2, character) => escape2 ? unescape2(escape2) : character));
+          results.push(matches[2].replace(ESCAPE_REGEX, (m, escape, character) => escape ? unescape2(escape) : character));
         } else {
           throw new Error(`Invalid Chalk template style argument: ${chunk} (in style '${name}')`);
         }
@@ -11256,7 +11258,7 @@ var require_omap = __commonJS({
     var _toString = Object.prototype.toString;
     function resolveYamlOmap(data) {
       if (data === null) return true;
-      const objectKeys = [];
+      const objectKeys = {};
       const object = data;
       for (let index = 0, length = object.length; index < length; index += 1) {
         const pair = object[index];
@@ -11270,8 +11272,8 @@ var require_omap = __commonJS({
           }
         }
         if (!pairHasKey) return false;
-        if (objectKeys.indexOf(pairKey) === -1) objectKeys.push(pairKey);
-        else return false;
+        if (_hasOwnProperty.call(objectKeys, pairKey)) return false;
+        Object.defineProperty(objectKeys, pairKey, { value: true });
       }
       return true;
     }
@@ -13491,33 +13493,39 @@ var require_cloud = __commonJS({
   "src/cloud.js"(exports2, module2) {
     "use strict";
     var https = require("https");
-    var API_BASE = "https://app.coderifts.com";
-    function cloudDiff(oldSpec, newSpec, apiKey) {
+    var API_BASE = process.env.CODERIFTS_API_BASE || "https://app.coderifts.com";
+    function cloudRequest(method, pathname, apiKey, bodyObj = null) {
       return new Promise((resolve, reject) => {
-        const body = JSON.stringify({ old_spec: oldSpec, new_spec: newSpec });
-        const url = new URL("/api/v1/diff", API_BASE);
+        const body = bodyObj != null ? JSON.stringify(bodyObj) : null;
+        const base = API_BASE.replace(/\/$/, "");
+        const url = new URL(pathname.startsWith("http") ? pathname : base + pathname);
         const options = {
           hostname: url.hostname,
-          port: 443,
-          path: url.pathname,
-          method: "POST",
+          port: url.port || (url.protocol === "http:" ? 80 : 443),
+          path: url.pathname + url.search,
+          method,
           headers: {
-            "Content-Type": "application/json",
-            "Content-Length": Buffer.byteLength(body),
-            "Authorization": `Bearer ${apiKey}`,
-            "User-Agent": "@coderifts/cli"
+            Accept: "application/json",
+            Authorization: `Bearer ${apiKey}`,
+            "User-Agent": "@coderifts/cli",
+            ...body ? { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) } : {}
           }
         };
-        const req = https.request(options, (res) => {
+        const transport = url.protocol === "http:" ? require("http") : https;
+        const req = transport.request(options, (res) => {
           let data = "";
           res.on("data", (chunk) => {
             data += chunk;
           });
           res.on("end", () => {
             try {
-              const parsed = JSON.parse(data);
+              const parsed = data ? JSON.parse(data) : {};
               if (res.statusCode >= 400) {
-                reject(new Error(parsed.message || parsed.error || `HTTP ${res.statusCode}`));
+                const err = new Error(parsed.message || parsed.error || `HTTP ${res.statusCode}`);
+                err.statusCode = res.statusCode;
+                err.code = parsed.error || null;
+                err.body = parsed;
+                reject(err);
               } else {
                 resolve(parsed);
               }
@@ -13527,11 +13535,26 @@ var require_cloud = __commonJS({
           });
         });
         req.on("error", reject);
-        req.write(body);
+        if (body) req.write(body);
         req.end();
       });
     }
-    module2.exports = { cloudDiff };
+    function cloudDiff(oldSpec, newSpec, apiKey) {
+      return cloudRequest("POST", "/api/v1/diff", apiKey, {
+        old_spec: oldSpec,
+        new_spec: newSpec
+      });
+    }
+    function cloudGetEnforcementStatus(repo, apiKey) {
+      const q = encodeURIComponent(String(repo || ""));
+      return cloudRequest("GET", `/api/v1/enforcement-status?repo=${q}`, apiKey);
+    }
+    module2.exports = {
+      cloudDiff,
+      cloudRequest,
+      cloudGetEnforcementStatus,
+      API_BASE
+    };
   }
 });
 
@@ -24778,7 +24801,7 @@ var require_lodash = __commonJS({
           position -= target.length;
           return position >= 0 && string.slice(position, end) == target;
         }
-        function escape2(string) {
+        function escape(string) {
           string = toString(string);
           return string && reHasUnescapedHtml.test(string) ? string.replace(reUnescapedHtml, escapeHtmlChar) : string;
         }
@@ -25389,7 +25412,7 @@ var require_lodash = __commonJS({
         lodash.divide = divide;
         lodash.endsWith = endsWith;
         lodash.eq = eq;
-        lodash.escape = escape2;
+        lodash.escape = escape;
         lodash.escapeRegExp = escapeRegExp;
         lodash.every = every;
         lodash.find = find;
@@ -29363,6 +29386,7 @@ var require_utils2 = __commonJS({
     var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
     var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
     var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
+    var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/?]$/iu);
     function stringArrayToHexStripped(input) {
       let acc = "";
       let code = 0;
@@ -29505,7 +29529,7 @@ var require_utils2 = __commonJS({
               continue;
             }
           } else if (input[0] === "/") {
-            if (input[1] === "." || input[1] === "/") {
+            if (input[1] === ".") {
               output.push("/");
               break;
             }
@@ -29587,10 +29611,30 @@ var require_utils2 = __commonJS({
       }
       return output;
     }
+    var BYTE_HEX = new Array(256);
+    {
+      const HEX_DIGITS = "0123456789ABCDEF";
+      for (let i = 0; i < 256; i++) {
+        BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
+      }
+    }
+    function isEscapeSafe(cp) {
+      return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
+    }
+    function percentEncodeNonAscii(cp) {
+      if (cp < 2048) {
+        return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
+      }
+      if (cp < 65536) {
+        return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      }
+      return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+    }
     function normalizePathEncoding(input) {
       let output = "";
       for (let i = 0; i < input.length; i++) {
-        if (input[i] === "%" && i + 2 < input.length) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
           const hex = input.slice(i + 1, i + 3);
           if (isHexPair(hex)) {
             const normalizedHex = hex.toUpperCase();
@@ -29604,10 +29648,66 @@ var require_utils2 = __commonJS({
             continue;
           }
         }
-        if (isPathCharacter(input[i])) {
-          output += input[i];
+        if (isPathCharacter(ch)) {
+          output += ch;
         } else {
-          output += escape(input[i]);
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output += percentEncodeNonAscii(65533);
+          }
+        }
+      }
+      return output;
+    }
+    function normalizeQueryFragmentEncoding(input) {
+      let output = "";
+      for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
+          const hex = input.slice(i + 1, i + 3);
+          if (isHexPair(hex)) {
+            const normalizedHex = hex.toUpperCase();
+            const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+            if (isUnreserved(decoded)) {
+              output += decoded;
+            } else {
+              output += "%" + normalizedHex;
+            }
+            i += 2;
+            continue;
+          }
+        }
+        if (isQueryFragmentCharacter(ch)) {
+          output += ch;
+        } else {
+          const code = input.charCodeAt(i);
+          if (code < 128) {
+            output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
+          } else if (code < 55296 || code > 57343) {
+            output += percentEncodeNonAscii(code);
+          } else if (code <= 56319 && i + 1 < input.length) {
+            const low = input.charCodeAt(i + 1);
+            if (low >= 56320 && low <= 57343) {
+              output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+              i++;
+            } else {
+              output += percentEncodeNonAscii(65533);
+            }
+          } else {
+            output += percentEncodeNonAscii(65533);
+          }
         }
       }
       return output;
@@ -29615,7 +29715,8 @@ var require_utils2 = __commonJS({
     function escapePreservingEscapes(input) {
       let output = "";
       for (let i = 0; i < input.length; i++) {
-        if (input[i] === "%" && i + 2 < input.length) {
+        const ch = input[i];
+        if (ch === "%" && i + 2 < input.length) {
           const hex = input.slice(i + 1, i + 3);
           if (isHexPair(hex)) {
             output += "%" + hex.toUpperCase();
@@ -29623,7 +29724,22 @@ var require_utils2 = __commonJS({
             continue;
           }
         }
-        output += escape(input[i]);
+        const code = input.charCodeAt(i);
+        if (code < 128) {
+          output += isEscapeSafe(code) ? ch : BYTE_HEX[code];
+        } else if (code < 55296 || code > 57343) {
+          output += percentEncodeNonAscii(code);
+        } else if (code <= 56319 && i + 1 < input.length) {
+          const low = input.charCodeAt(i + 1);
+          if (low >= 56320 && low <= 57343) {
+            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+            i++;
+          } else {
+            output += percentEncodeNonAscii(65533);
+          }
+        } else {
+          output += percentEncodeNonAscii(65533);
+        }
       }
       return output;
     }
@@ -29657,6 +29773,7 @@ var require_utils2 = __commonJS({
       reescapeHostDelimiters,
       normalizePercentEncoding,
       normalizePathEncoding,
+      normalizeQueryFragmentEncoding,
       escapePreservingEscapes,
       removeDotSegments,
       isIPv4,
@@ -29881,7 +29998,7 @@ var require_schemes = __commonJS({
 var require_fast_uri = __commonJS({
   "node_modules/fast-uri/index.js"(exports2, module2) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils2();
+    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, normalizeQueryFragmentEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils2();
     var { SCHEMES, getSchemeHandler } = require_schemes();
     function normalize(uri, options) {
       if (typeof uri === "string") {
@@ -29895,7 +30012,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse(baseURI, schemelessOptions), parse(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
@@ -30021,6 +30143,7 @@ var require_fast_uri = __commonJS({
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -30055,9 +30178,23 @@ var require_fast_uri = __commonJS({
         parsed.error = "URI authority must not contain a literal backslash.";
         malformedAuthorityOrPort = true;
       }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
-        parsed.scheme = matches[1];
+        parsed.scheme = matches[1] === void 0 ? void 0 : matches[1].toLowerCase();
         parsed.userinfo = matches[3];
         parsed.host = matches[4];
         parsed.port = parseInt(matches[5], 10);
@@ -30116,12 +30253,11 @@ var require_fast_uri = __commonJS({
           if (parsed.path) {
             parsed.path = normalizePathEncoding(parsed.path);
           }
+          if (parsed.query) {
+            parsed.query = normalizeQueryFragmentEncoding(parsed.query);
+          }
           if (parsed.fragment) {
-            try {
-              parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
-            } catch {
-              parsed.error = parsed.error || "URI malformed";
-            }
+            parsed.fragment = normalizeQueryFragmentEncoding(parsed.fragment);
           }
         }
         if (schemeHandler && schemeHandler.parse) {
@@ -65406,9 +65542,9 @@ var require_diff = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/sdk/dist/cjs/errors.js
+// node_modules/@coderifts/sdk/dist/cjs/errors.js
 var require_errors5 = __commonJS({
-  "../../node_modules/@coderifts/sdk/dist/cjs/errors.js"(exports2) {
+  "node_modules/@coderifts/sdk/dist/cjs/errors.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.AuthError = exports2.RateLimitError = exports2.TimeoutError = exports2.ApiError = exports2.CodeRiftsError = void 0;
@@ -65458,9 +65594,9 @@ var require_errors5 = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/sdk/dist/cjs/client.js
+// node_modules/@coderifts/sdk/dist/cjs/client.js
 var require_client = __commonJS({
-  "../../node_modules/@coderifts/sdk/dist/cjs/client.js"(exports2) {
+  "node_modules/@coderifts/sdk/dist/cjs/client.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.CodeRifts = void 0;
@@ -65708,9 +65844,9 @@ var require_client = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/sdk/dist/cjs/decision.js
+// node_modules/@coderifts/sdk/dist/cjs/decision.js
 var require_decision = __commonJS({
-  "../../node_modules/@coderifts/sdk/dist/cjs/decision.js"(exports2) {
+  "node_modules/@coderifts/sdk/dist/cjs/decision.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.readDecision = readDecision;
@@ -65756,9 +65892,9 @@ var require_decision = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/sdk/dist/cjs/index.js
+// node_modules/@coderifts/sdk/dist/cjs/index.js
 var require_cjs3 = __commonJS({
-  "../../node_modules/@coderifts/sdk/dist/cjs/index.js"(exports2) {
+  "node_modules/@coderifts/sdk/dist/cjs/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.readDecision = exports2.AuthError = exports2.RateLimitError = exports2.TimeoutError = exports2.ApiError = exports2.CodeRiftsError = exports2.CodeRifts = void 0;
@@ -65789,9 +65925,9 @@ var require_cjs3 = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/detector.js
+// node_modules/@coderifts/agent-guard/dist/cjs/detector.js
 var require_detector = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/detector.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/detector.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.builtinDetector = exports2.DETECTOR_VERSION = void 0;
@@ -66322,9 +66458,9 @@ var require_detector = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/receipt-binding.js
+// node_modules/@coderifts/agent-guard/dist/cjs/receipt-binding.js
 var require_receipt_binding = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/receipt-binding.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/receipt-binding.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.canonicalJson = canonicalJson;
@@ -66396,9 +66532,9 @@ var require_receipt_binding = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/enforcement-gate.js
+// node_modules/@coderifts/agent-guard/dist/cjs/enforcement-gate.js
 var require_enforcement_gate = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/enforcement-gate.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/enforcement-gate.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.computeArtifactDigest = computeArtifactDigest;
@@ -66472,9 +66608,9 @@ var require_enforcement_gate = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/guard.js
+// node_modules/@coderifts/agent-guard/dist/cjs/guard.js
 var require_guard = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/guard.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/guard.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.guardToolCall = guardToolCall;
@@ -66494,6 +66630,25 @@ var require_guard = __commonJS({
         }
       }
     }
+    function resolvePreviousReceipt(config) {
+      const pr = config.previousReceipt;
+      if (pr === void 0 || pr === null)
+        return void 0;
+      let raw;
+      if (typeof pr === "function") {
+        try {
+          raw = pr();
+        } catch {
+          return void 0;
+        }
+      } else {
+        raw = pr;
+      }
+      if (typeof raw !== "string")
+        return void 0;
+      const s = raw.trim();
+      return s.length > 0 ? s : void 0;
+    }
     function fingerprint(call) {
       const canon = JSON.stringify({ toolName: call.toolName, arguments: call.arguments, artifacts: call.artifacts, filesTouched: call.filesTouched, diff: call.diff });
       return "sha256:" + (0, node_crypto_1.createHash)("sha256").update(canon).digest("hex");
@@ -66663,7 +66818,7 @@ var require_guard = __commonJS({
       const request = {
         artifacts: detection.artifacts,
         context: { operation: config.operation ?? "tool_call", environment: config.environment, audience: config.audience },
-        previous_receipt: void 0,
+        previous_receipt: resolvePreviousReceipt(config),
         idempotency_key: void 0
       };
       const cap = config.maxPayloadBytes ?? 1e6;
@@ -66800,9 +66955,84 @@ var require_guard = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/session-taint.js
+// node_modules/@coderifts/agent-guard/dist/cjs/receipt-chain.js
+var require_receipt_chain = __commonJS({
+  "node_modules/@coderifts/agent-guard/dist/cjs/receipt-chain.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.RECEIPT_PREV_NULL = void 0;
+    exports2.previousReceiptCommitment = previousReceiptCommitment;
+    exports2.decodeReceiptBodyPrev = decodeReceiptBodyPrev;
+    exports2.verifyReceiptChainLinkage = verifyReceiptChainLinkage;
+    var node_crypto_1 = require("node:crypto");
+    exports2.RECEIPT_PREV_NULL = "null";
+    function previousReceiptCommitment(previousToken) {
+      return "sha256:" + (0, node_crypto_1.createHash)("sha256").update(previousToken, "utf8").digest("hex");
+    }
+    function decodeReceiptBodyPrev(token) {
+      if (typeof token !== "string" || token.length === 0)
+        return null;
+      const parts = token.split(".");
+      if (parts.length !== 2 || !parts[0] || !parts[1])
+        return null;
+      try {
+        const json = Buffer.from(parts[0], "base64url").toString("utf8");
+        const body = JSON.parse(json);
+        if (typeof body.prev !== "string")
+          return null;
+        return { prev: body.prev };
+      } catch {
+        return null;
+      }
+    }
+    function verifyReceiptChainLinkage(tokens) {
+      const length = tokens.length;
+      if (length === 0) {
+        return { ok: true, length: 0 };
+      }
+      for (let i = 0; i < length; i++) {
+        const decoded = decodeReceiptBodyPrev(tokens[i]);
+        if (!decoded) {
+          return {
+            ok: false,
+            length,
+            failedAt: i,
+            reason: "malformed_token"
+          };
+        }
+        if (i === 0) {
+          if (decoded.prev !== exports2.RECEIPT_PREV_NULL) {
+            return {
+              ok: false,
+              length,
+              failedAt: 0,
+              reason: "unexpected_predecessor",
+              expected: exports2.RECEIPT_PREV_NULL,
+              actual: decoded.prev
+            };
+          }
+          continue;
+        }
+        const expected = previousReceiptCommitment(tokens[i - 1]);
+        if (decoded.prev !== expected) {
+          return {
+            ok: false,
+            length,
+            failedAt: i,
+            reason: "broken_link",
+            expected,
+            actual: decoded.prev
+          };
+        }
+      }
+      return { ok: true, length };
+    }
+  }
+});
+
+// node_modules/@coderifts/agent-guard/dist/cjs/session-taint.js
 var require_session_taint = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/session-taint.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/session-taint.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.SessionTaintTracker = exports2.SESSION_TAINT_VERSION = void 0;
@@ -67107,9 +67337,9 @@ var require_session_taint = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/resolver-yaml.js
+// node_modules/@coderifts/agent-guard/dist/cjs/resolver-yaml.js
 var require_resolver_yaml = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/resolver-yaml.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/resolver-yaml.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.YamlLiteError = void 0;
@@ -67328,9 +67558,9 @@ var require_resolver_yaml = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/resolver-glob.js
+// node_modules/@coderifts/agent-guard/dist/cjs/resolver-glob.js
 var require_resolver_glob = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/resolver-glob.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/resolver-glob.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.globToRegExp = globToRegExp;
@@ -67383,11 +67613,12 @@ var require_resolver_glob = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/artifact-resolver.js
+// node_modules/@coderifts/agent-guard/dist/cjs/artifact-resolver.js
 var require_artifact_resolver = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/artifact-resolver.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/artifact-resolver.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.classifyByName = classifyByName;
     exports2.resolve = resolve;
     var resolver_yaml_js_1 = require_resolver_yaml();
     var resolver_glob_js_1 = require_resolver_glob();
@@ -67788,14 +68019,15 @@ var require_artifact_resolver = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/tool-registry.js
+// node_modules/@coderifts/agent-guard/dist/cjs/tool-registry.js
 var require_tool_registry = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/tool-registry.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/tool-registry.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.RegistryConstructionError = void 0;
     exports2.guardToolRegistry = guardToolRegistry;
     var guard_js_1 = require_guard();
+    var artifact_resolver_js_1 = require_artifact_resolver();
     var RegistryConstructionError = class extends Error {
       code;
       toolName;
@@ -67872,7 +68104,50 @@ var require_tool_registry = __commonJS({
       }
     }
     function defaultBinder(tool, args) {
-      return { toolName: tool.name, arguments: args };
+      const d = { toolName: tool.name, arguments: args };
+      if (!args || typeof args !== "object")
+        return d;
+      const a = args;
+      if (Array.isArray(a.artifacts)) {
+        d.artifacts = a.artifacts;
+        return d;
+      }
+      const path = typeof a.path === "string" ? a.path : "";
+      if (!path)
+        return d;
+      const type = (0, artifact_resolver_js_1.classifyByName)(path);
+      if (!type)
+        return d;
+      const bothSides = (oldS, newS) => typeof oldS === "string" && oldS.length > 0 && typeof newS === "string" && newS.length > 0;
+      if (Array.isArray(a.edits)) {
+        const lifted = [];
+        for (let i = 0; i < a.edits.length; i++) {
+          const e = a.edits[i];
+          if (!e || typeof e !== "object")
+            continue;
+          const er = e;
+          if (!bothSides(er.old_string, er.new_string))
+            continue;
+          lifted.push({
+            id: `${type}:${path}#${i}`,
+            type,
+            before: er.old_string,
+            after: er.new_string
+          });
+        }
+        if (lifted.length > 0)
+          d.artifacts = lifted;
+        return d;
+      }
+      if (bothSides(a.old_string, a.new_string)) {
+        d.artifacts = [{
+          id: `${type}:${path}`,
+          type,
+          before: a.old_string,
+          after: a.new_string
+        }];
+      }
+      return d;
     }
     var RAW_EXECUTORS = /* @__PURE__ */ new WeakMap();
     function freezeTool(t) {
@@ -68025,9 +68300,9 @@ var require_tool_registry = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/merge-gate.js
+// node_modules/@coderifts/agent-guard/dist/cjs/merge-gate.js
 var require_merge_gate = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/merge-gate.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/merge-gate.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.gateDecision = gateDecision;
@@ -68121,6 +68396,13 @@ var require_merge_gate = __commonJS({
           residual = "protection_advisory_only";
         else
           residual = "protection_not_configured";
+      } else {
+        if (protection.required_check_app_bound === true) {
+        } else if (protection.required_check_app_bound === false) {
+          residual = "required_check_app_not_bound";
+        } else {
+          residual = "required_check_app_binding_unknown";
+        }
       }
       return {
         merge_allowed: true,
@@ -68135,9 +68417,9 @@ var require_merge_gate = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/deploy-gate.js
+// node_modules/@coderifts/agent-guard/dist/cjs/deploy-gate.js
 var require_deploy_gate = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/deploy-gate.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/deploy-gate.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.deployGate = deployGate;
@@ -68176,8 +68458,8 @@ var require_deploy_gate = __commonJS({
       const enf = rc.enforcement || { enforcement: "UNKNOWN", bypass_possible: true };
       const enforcement_state = enf.enforcement;
       const opRequired = rc.operation ?? "deploy";
-      const requireEnv = rc.require_bound_environment !== false;
-      const requireArt = rc.require_bound_artifact !== false;
+      const requireEnv = enforcement_state === "ENFORCING" || rc.require_bound_environment !== false;
+      const requireArt = enforcement_state === "ENFORCING" || rc.require_bound_artifact !== false;
       const allowPending = input.allowPending ?? rc.allowPending ?? false;
       const allowWarnDeploy = input.allowWarnDeploy ?? rc.allowWarnDeploy ?? false;
       const allowPrefix = input.allowPrefixCompare ?? rc.allowPrefixCompare ?? false;
@@ -68260,9 +68542,9 @@ var require_deploy_gate = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/coverage-report.js
+// node_modules/@coderifts/agent-guard/dist/cjs/coverage-report.js
 var require_coverage_report = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/coverage-report.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/coverage-report.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.coverageReport = coverageReport;
@@ -68422,12 +68704,133 @@ var require_coverage_report = __commonJS({
   }
 });
 
-// ../../node_modules/@coderifts/agent-guard/dist/cjs/index.js
+// node_modules/@coderifts/agent-guard/dist/cjs/with-coderifts.js
+var require_with_coderifts = __commonJS({
+  "node_modules/@coderifts/agent-guard/dist/cjs/with-coderifts.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.withCodeRifts = withCodeRifts;
+    var tool_registry_js_1 = require_tool_registry();
+    var COMPOSITION_CALL_POLICY_COMPLETE = false;
+    var RESIDUAL_CALL_POLICY_INCOMPLETE = "composition_call_policy_incomplete";
+    var RESIDUAL_FORCED_READONLY = "composition_forced_readonly_on_heuristic_mutator";
+    var RESIDUAL_UNKNOWN_READONLY = "composition_unknown_treated_as_readonly";
+    var COVERAGE_STRENGTH = {
+      COMPLETE: 3,
+      PARTIAL: 2,
+      BYPASSED: 1,
+      UNKNOWN: 0
+    };
+    function coverageRank(coverage) {
+      return Object.prototype.hasOwnProperty.call(COVERAGE_STRENGTH, coverage) ? COVERAGE_STRENGTH[coverage] : void 0;
+    }
+    async function safeOnOutcome(onOutcome, payload) {
+      try {
+        await Promise.resolve(onOutcome(payload));
+      } catch {
+      }
+    }
+    function wrapGuardedForObservation(tool, onOutcome) {
+      const innerExecute = tool.execute;
+      const toolName = tool.name;
+      const shell = {
+        name: tool.name,
+        description: tool.description,
+        inputSchema: tool.inputSchema,
+        meta: tool.meta,
+        _coderifts: tool._coderifts,
+        execute: async (args) => {
+          const outcome = await innerExecute(args);
+          await safeOnOutcome(onOutcome, {
+            toolName,
+            // Guarded execute always returns a GuardOutcome from guardToolCall; assert the type for callers.
+            outcome
+          });
+          return outcome;
+        }
+      };
+      if (!Object.isFrozen(shell._coderifts))
+        Object.freeze(shell._coderifts);
+      return Object.freeze(shell);
+    }
+    function withCodeRifts(input) {
+      if (!input || typeof input !== "object") {
+        throw new Error("withCodeRifts: input object is required");
+      }
+      const problems = [];
+      if (typeof input.operation !== "string" || input.operation.trim() === "") {
+        problems.push("`operation` is required and must be a non-empty string (receipts bind to an operation; merge != deploy, so there is no safe default)");
+      }
+      if (input.client == null) {
+        problems.push("`client` is required at construction (guardToolRegistry needs config.guard.client to wrap any mutating tool)");
+      }
+      if (input.requireCoverage !== void 0 && coverageRank(input.requireCoverage) === void 0) {
+        problems.push(`\`requireCoverage\` must be one of COMPLETE | PARTIAL | BYPASSED | UNKNOWN (got ${JSON.stringify(input.requireCoverage)})`);
+      }
+      if (problems.length > 0) {
+        throw new Error(`withCodeRifts: construction aborted \u2014 ${problems.length} condition(s):
+` + problems.map((p) => `  - ${p}`).join("\n"));
+      }
+      const reg = input.registry ?? {};
+      const guard = { client: input.client, operation: input.operation };
+      if (input.onEvent !== void 0) {
+        guard.onEvent = input.onEvent;
+      }
+      if (input.previousReceipt !== void 0) {
+        guard.previousReceipt = input.previousReceipt;
+      }
+      const config = {
+        guard,
+        unknownToolPolicy: reg.unknownToolPolicy ?? "mutating",
+        classify: reg.classify,
+        binders: reg.binders,
+        forceReadonly: reg.forceReadonly,
+        failOnUnguardedMutator: reg.failOnUnguardedMutator
+      };
+      const { tools, report } = (0, tool_registry_js_1.guardToolRegistry)(input.tools, config);
+      if (input.requireCoverage !== void 0) {
+        const requiredRank = coverageRank(input.requireCoverage);
+        const actualRank = coverageRank(report.coverage) ?? -1;
+        if (requiredRank !== void 0 && actualRank < requiredRank) {
+          throw new Error(`withCodeRifts: requireCoverage not met \u2014 registry coverage '${report.coverage}' is weaker than required '${input.requireCoverage}' (strength ordering COMPLETE > PARTIAL > BYPASSED > UNKNOWN). requireCoverage constrains the REGISTRY tool-boundary surface ONLY; a green construction here is NOT a product-level runtime-inescapability guarantee \u2014 composition_assurance.inescapable_runtime stays false until receipt carry-forward and a freshness-safe prior for write-style calls land.`);
+        }
+      }
+      const compositionInescapableRuntime = report.claim.inescapable_runtime && COMPOSITION_CALL_POLICY_COMPLETE;
+      const residuals = [RESIDUAL_CALL_POLICY_INCOMPLETE];
+      if (report.warnings.some((w) => w.startsWith("force_readonly_on_mutator_heuristic:"))) {
+        residuals.push(RESIDUAL_FORCED_READONLY);
+      }
+      if (report.warnings.includes("unknown_treated_as_readonly")) {
+        residuals.push(RESIDUAL_UNKNOWN_READONLY);
+      }
+      const composition_assurance = {
+        coverage: "PARTIAL",
+        inescapable_runtime: compositionInescapableRuntime,
+        residuals
+      };
+      let toolsOut = tools;
+      if (input.onOutcome) {
+        const onOutcome = input.onOutcome;
+        toolsOut = Object.freeze(tools.map((t) => t._coderifts.guarded ? wrapGuardedForObservation(t, onOutcome) : t));
+      }
+      const result = {
+        tools: toolsOut,
+        registry_report: report,
+        composition_assurance
+      };
+      if (input.repository !== void 0)
+        result.repository = input.repository;
+      return result;
+    }
+  }
+});
+
+// node_modules/@coderifts/agent-guard/dist/cjs/index.js
 var require_cjs4 = __commonJS({
-  "../../node_modules/@coderifts/agent-guard/dist/cjs/index.js"(exports2) {
+  "node_modules/@coderifts/agent-guard/dist/cjs/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.coverageReport = exports2.deployGate = exports2.gateDecision = exports2.RegistryConstructionError = exports2.guardToolRegistry = exports2.globToRegExp = exports2.matchGlob = exports2.resolveArtifacts = exports2.deriveKeySignal = exports2.pathClass = exports2.classifyCommand = exports2.projectState = exports2.emptySessionState = exports2.computeTainted = exports2.evaluate = exports2.updateSession = exports2.SESSION_TAINT_VERSION = exports2.SessionTaintTracker = exports2.readDecision = exports2.computeBundleFingerprint = exports2.computeArtifactDigest = exports2.evaluateEnvelope = exports2.canonicalJson = exports2.computeBodyHash = exports2.bindReceiptToEnvelope = exports2.DETECTOR_VERSION = exports2.builtinDetector = exports2.guardToolCall = void 0;
+    exports2.withCodeRifts = exports2.coverageReport = exports2.deployGate = exports2.gateDecision = exports2.RegistryConstructionError = exports2.guardToolRegistry = exports2.globToRegExp = exports2.matchGlob = exports2.classifyByName = exports2.resolveArtifacts = exports2.deriveKeySignal = exports2.pathClass = exports2.classifyCommand = exports2.projectState = exports2.emptySessionState = exports2.computeTainted = exports2.evaluate = exports2.updateSession = exports2.SESSION_TAINT_VERSION = exports2.SessionTaintTracker = exports2.readDecision = exports2.computeBundleFingerprint = exports2.computeArtifactDigest = exports2.evaluateEnvelope = exports2.RECEIPT_PREV_NULL = exports2.decodeReceiptBodyPrev = exports2.previousReceiptCommitment = exports2.verifyReceiptChainLinkage = exports2.canonicalJson = exports2.computeBodyHash = exports2.bindReceiptToEnvelope = exports2.DETECTOR_VERSION = exports2.builtinDetector = exports2.guardToolCall = void 0;
     var guard_js_1 = require_guard();
     Object.defineProperty(exports2, "guardToolCall", { enumerable: true, get: function() {
       return guard_js_1.guardToolCall;
@@ -68449,6 +68852,19 @@ var require_cjs4 = __commonJS({
     Object.defineProperty(exports2, "canonicalJson", { enumerable: true, get: function() {
       return receipt_binding_js_1.canonicalJson;
     } });
+    var receipt_chain_js_1 = require_receipt_chain();
+    Object.defineProperty(exports2, "verifyReceiptChainLinkage", { enumerable: true, get: function() {
+      return receipt_chain_js_1.verifyReceiptChainLinkage;
+    } });
+    Object.defineProperty(exports2, "previousReceiptCommitment", { enumerable: true, get: function() {
+      return receipt_chain_js_1.previousReceiptCommitment;
+    } });
+    Object.defineProperty(exports2, "decodeReceiptBodyPrev", { enumerable: true, get: function() {
+      return receipt_chain_js_1.decodeReceiptBodyPrev;
+    } });
+    Object.defineProperty(exports2, "RECEIPT_PREV_NULL", { enumerable: true, get: function() {
+      return receipt_chain_js_1.RECEIPT_PREV_NULL;
+    } });
     var enforcement_gate_js_1 = require_enforcement_gate();
     Object.defineProperty(exports2, "evaluateEnvelope", { enumerable: true, get: function() {
       return enforcement_gate_js_1.evaluateEnvelope;
@@ -68498,6 +68914,9 @@ var require_cjs4 = __commonJS({
     Object.defineProperty(exports2, "resolveArtifacts", { enumerable: true, get: function() {
       return artifact_resolver_js_1.resolve;
     } });
+    Object.defineProperty(exports2, "classifyByName", { enumerable: true, get: function() {
+      return artifact_resolver_js_1.classifyByName;
+    } });
     var resolver_glob_js_1 = require_resolver_glob();
     Object.defineProperty(exports2, "matchGlob", { enumerable: true, get: function() {
       return resolver_glob_js_1.matchGlob;
@@ -68524,6 +68943,10 @@ var require_cjs4 = __commonJS({
     Object.defineProperty(exports2, "coverageReport", { enumerable: true, get: function() {
       return coverage_report_js_1.coverageReport;
     } });
+    var with_coderifts_js_1 = require_with_coderifts();
+    Object.defineProperty(exports2, "withCodeRifts", { enumerable: true, get: function() {
+      return with_coderifts_js_1.withCodeRifts;
+    } });
   }
 });
 
@@ -68556,12 +68979,15 @@ var require_deploy_gate2 = __commonJS({
         attestation_source: "cli_flag"
       };
     }
-    function deployReportResiduals(state, inescapable, enforcement) {
+    function deployReportResiduals(state, enforcement_inescapable, enforcement, change_set_rebound) {
       const out = [];
-      if (state === "success" && inescapable !== true) {
+      if (state !== "success") return out;
+      if (enforcement_inescapable !== true) {
         if (enforcement === "ENFORCING") out.push("bypass_open");
         else if (enforcement === "ADVISORY") out.push("deploy_gate_advisory");
         else if (enforcement === "ABSENT") out.push("deploy_path_ungated");
+      } else if (change_set_rebound !== true) {
+        out.push("change_set_not_rebound");
       }
       return out;
     }
@@ -68589,19 +69015,24 @@ var require_deploy_gate2 = __commonJS({
           bypass_possible: !(observed_cd_enforcement && observed_cd_enforcement.bypass_possible === false)
         }
       };
+      let change_set_rebound = false;
       if (attested_enforcement === "ENFORCING") {
-        if (expected_fingerprint != null) requiredContext.expected_fingerprint = expected_fingerprint;
+        if (expected_fingerprint != null) {
+          requiredContext.expected_fingerprint = expected_fingerprint;
+          change_set_rebound = true;
+        }
         if (expected_body_hash != null) requiredContext.expected_body_hash = expected_body_hash;
       }
       const gate = deployGate({ deployTarget: { environment, artifact_id }, receipt, requiredContext });
-      const inescapable_deploy = gate.inescapable_deploy === true;
+      const enforcement_inescapable = gate.inescapable_deploy === true;
+      const inescapable_deploy = enforcement_inescapable && change_set_rebound === true;
       return {
         deploy_check_status: gate.state,
         reason: gate.reason,
         must_re_preflight: REPAIRABLE.has(gate.reason),
         attested_enforcement,
         gate: { deploy_allowed: gate.deploy_allowed, reason: gate.reason, inescapable_deploy },
-        report_residuals: deployReportResiduals(gate.state, inescapable_deploy, attested_enforcement),
+        report_residuals: deployReportResiduals(gate.state, enforcement_inescapable, attested_enforcement, change_set_rebound),
         coverage_deploy_input: deployCoverageInput(attested_enforcement, inescapable_deploy)
       };
     }
@@ -68667,6 +69098,1004 @@ var require_deploy_gate2 = __commonJS({
   }
 });
 
+// src/commands/publish-gate.js
+var require_publish_gate = __commonJS({
+  "src/commands/publish-gate.js"(exports2, module2) {
+    "use strict";
+    var fs = require("fs");
+    var path = require("path");
+    var { execFileSync } = require("child_process");
+    var chalk = require_source();
+    var { getApiKey } = require_config();
+    var { cloudDiff } = require_cloud();
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var ZERO_SHA = "0000000000000000000000000000000000000000";
+    var CLOSED_ACTIONS = /* @__PURE__ */ new Set([
+      "CONTINUE",
+      "CONTINUE_WITH_MONITORING",
+      "REQUEST_APPROVAL",
+      "STOP"
+    ]);
+    var PERMIT_ACTIONS = /* @__PURE__ */ new Set(["CONTINUE", "CONTINUE_WITH_MONITORING"]);
+    function defaultGit(args, cwd) {
+      return execFileSync("git", args, {
+        cwd: cwd || process.cwd(),
+        encoding: "utf8",
+        maxBuffer: 16 * 1024 * 1024,
+        stdio: ["ignore", "pipe", "pipe"]
+      }).trim();
+    }
+    function gitShow(ref, filePath, { gitImpl = defaultGit, cwd } = {}) {
+      try {
+        const out = gitImpl(["show", `${ref}:${filePath}`], cwd);
+        return { ok: true, content: out == null ? "" : String(out) };
+      } catch (err) {
+        const msg = err && err.stderr ? String(err.stderr) : err && err.message || String(err);
+        return {
+          ok: false,
+          code: "GIT_ERROR",
+          message: `git error reading ${ref}:${filePath}: ${msg.slice(0, 300)}`
+        };
+      }
+    }
+    function readPackageVersion(cwd, readFile = fs.readFileSync) {
+      const pkgPath = path.join(cwd || process.cwd(), "package.json");
+      try {
+        const raw = readFile(pkgPath, "utf8");
+        const pkg2 = JSON.parse(raw);
+        return pkg2 && typeof pkg2.version === "string" ? pkg2.version : null;
+      } catch {
+        return null;
+      }
+    }
+    function resolveBeforeSpec(specPath, {
+      gitImpl = defaultGit,
+      cwd = process.cwd(),
+      readFile = fs.readFileSync,
+      packageVersion = null
+    } = {}) {
+      const version = packageVersion != null ? packageVersion : readPackageVersion(cwd, readFile);
+      const tried = [];
+      if (version) {
+        const tags = [`v${version}`, version];
+        for (const tag of tags) {
+          tried.push(`tag:${tag}`);
+          try {
+            gitImpl(["rev-parse", "--verify", `${tag}^{commit}`], cwd);
+          } catch {
+            continue;
+          }
+          const shown = gitShow(tag, specPath, { gitImpl, cwd });
+          if (!shown.ok) {
+            return {
+              ok: false,
+              code: shown.code || "GIT_ERROR",
+              message: shown.message,
+              tried
+            };
+          }
+          if (shown.content.trim() === "") {
+            return {
+              ok: false,
+              code: "EMPTY_BEFORE",
+              message: `Empty contract artifact at tag ${tag}:${specPath}. Refusing to treat empty before as NEW_ARTIFACT (would false-pass enforce).`,
+              tried
+            };
+          }
+          return { ok: true, content: shown.content, source: `tag:${tag}`, tried };
+        }
+      } else {
+        tried.push("package.json:version (missing)");
+      }
+      const bases = ["origin/main", "origin/master", "main", "master"];
+      for (const base of bases) {
+        tried.push(`merge-base:${base}`);
+        let mb;
+        try {
+          mb = gitImpl(["merge-base", "HEAD", base], cwd);
+        } catch {
+          continue;
+        }
+        if (!mb || mb === ZERO_SHA) continue;
+        const shown = gitShow(mb, specPath, { gitImpl, cwd });
+        if (!shown.ok) {
+          return {
+            ok: false,
+            code: shown.code || "GIT_ERROR",
+            message: shown.message,
+            tried
+          };
+        }
+        if (shown.content.trim() === "") {
+          return {
+            ok: false,
+            code: "EMPTY_BEFORE",
+            message: `Empty contract artifact at merge-base ${mb}:${specPath} (${base}). Refusing to treat empty before as NEW_ARTIFACT (would false-pass enforce).`,
+            tried
+          };
+        }
+        return {
+          ok: true,
+          content: shown.content,
+          source: `merge-base:${base}@${mb.slice(0, 12)}`,
+          tried
+        };
+      }
+      return {
+        ok: false,
+        code: "BEFORE_UNRESOLVED",
+        message: `Could not resolve a non-empty before-spec for ${specPath}. Tried: (a) git tag of package.json version, (b) merge-base with origin/main. Attempts: ${tried.join(", ")}. Fail-closed \u2014 will not publish without a baseline.`,
+        tried
+      };
+    }
+    function resolveAfterSpec(specPath, {
+      cwd = process.cwd(),
+      readFile = fs.readFileSync,
+      exists = fs.existsSync
+    } = {}) {
+      const resolved = path.isAbsolute(specPath) ? specPath : path.join(cwd, specPath);
+      try {
+        if (!exists(resolved)) {
+          return {
+            ok: false,
+            code: "AFTER_MISSING",
+            message: `Working-tree contract artifact not found: ${specPath}`
+          };
+        }
+        const content = readFile(resolved, "utf8");
+        if (content == null || String(content).trim() === "") {
+          return {
+            ok: false,
+            code: "AFTER_EMPTY",
+            message: `Working-tree contract artifact is empty: ${specPath}`
+          };
+        }
+        return { ok: true, content: String(content), path: resolved };
+      } catch (err) {
+        return {
+          ok: false,
+          code: "AFTER_READ_ERROR",
+          message: `Failed to read working-tree ${specPath}: ${err && err.message}`
+        };
+      }
+    }
+    function evaluatePublishPermission(result) {
+      if (!result || typeof result !== "object") {
+        return {
+          allow: false,
+          execution_action: null,
+          decision: null,
+          policy: "fail_closed:unreadable_response"
+        };
+      }
+      const env = result.decision_result && typeof result.decision_result === "object" ? result.decision_result : null;
+      let ea = null;
+      if (env && typeof env.execution_action === "string") ea = env.execution_action;
+      else if (typeof result.execution_action === "string") ea = result.execution_action;
+      const decision = env && env.decision || result.decision || result.omega_decision || null;
+      if (ea && CLOSED_ACTIONS.has(ea)) {
+        const allow = PERMIT_ACTIONS.has(ea);
+        return {
+          allow,
+          execution_action: ea,
+          decision: decision || null,
+          policy: allow ? `permit:execution_action=${ea}` : `block:execution_action=${ea}`
+        };
+      }
+      if (ea != null && ea !== "" && !CLOSED_ACTIONS.has(ea)) {
+        return {
+          allow: false,
+          execution_action: ea,
+          decision: decision || null,
+          policy: `block:unrecognised_execution_action=${ea}`
+        };
+      }
+      if (decision === "BLOCK" || decision === "REQUIRE_APPROVAL") {
+        return {
+          allow: false,
+          execution_action: null,
+          decision,
+          policy: `block:decision=${decision}`
+        };
+      }
+      if (decision === "ALLOW" || decision === "WARN" || decision === "PASS") {
+        return {
+          allow: true,
+          execution_action: null,
+          decision,
+          policy: `permit:decision=${decision}`
+        };
+      }
+      const omega = result.omega_decision;
+      if (omega === "BLOCK" || omega === "REQUIRE_APPROVAL") {
+        return {
+          allow: false,
+          execution_action: null,
+          decision: omega,
+          policy: `block:omega_decision=${omega}`
+        };
+      }
+      return {
+        allow: false,
+        execution_action: ea,
+        decision: decision || omega || null,
+        policy: "fail_closed:no_permission_signal"
+      };
+    }
+    function extractReceiptRef(result) {
+      if (!result || typeof result !== "object") return null;
+      const env = result.decision_result;
+      if (env && env.receipt && typeof env.receipt.token === "string") {
+        return env.receipt.token.slice(0, 24) + (env.receipt.token.length > 24 ? "\u2026" : "");
+      }
+      if (env && typeof env.decision_id === "string") return env.decision_id;
+      if (typeof result.decision_id === "string") return result.decision_id;
+      if (typeof result.fingerprint === "string") return result.fingerprint;
+      if (env && typeof env.fingerprint === "string") return env.fingerprint;
+      return null;
+    }
+    async function defaultPreflight(before, after, { apiKey } = {}) {
+      const key = process.env.CODERIFTS_FORCE_LOCAL_PREFLIGHT ? null : apiKey != null ? apiKey : getApiKey();
+      if (key) {
+        return cloudDiff(before, after, key);
+      }
+      const yaml = require_js_yaml();
+      const { diffSpecs } = require_api2();
+      let oldSpec;
+      let newSpec;
+      try {
+        oldSpec = yaml.load(before);
+        newSpec = yaml.load(after);
+      } catch (e) {
+        const err = new Error(`Failed to parse specs: ${e.message}`);
+        err.code = "PREFLIGHT_UNREACHABLE";
+        throw err;
+      }
+      let diffResult;
+      try {
+        diffResult = await diffSpecs({
+          sourceSpec: { content: JSON.stringify(oldSpec), location: "before.json", format: "openapi3" },
+          destinationSpec: { content: JSON.stringify(newSpec), location: "after.json", format: "openapi3" }
+        });
+      } catch (e) {
+        const err = new Error(`Local preflight engine error: ${e.message}`);
+        err.code = "PREFLIGHT_UNREACHABLE";
+        throw err;
+      }
+      const breaking = (diffResult.breakingDifferences || []).length;
+      const decision = breaking > 0 ? "BLOCK" : "ALLOW";
+      const execution_action = breaking > 0 ? "STOP" : "CONTINUE";
+      return {
+        decision,
+        omega_decision: decision,
+        execution_action,
+        decision_result: {
+          decision,
+          execution_action,
+          decision_id: `local-${Date.now()}`
+        },
+        breaking_changes: diffResult.breakingDifferences || [],
+        risk_score: Math.min(breaking * 15, 100)
+      };
+    }
+    async function runPublishGate(options = {}, deps = {}) {
+      const cwd = deps.cwd || process.cwd();
+      const gitImpl = deps.gitImpl || defaultGit;
+      const readFile = deps.readFile || fs.readFileSync.bind(fs);
+      const exists = deps.exists || fs.existsSync.bind(fs);
+      const preflightFn = deps.preflightFn || defaultPreflight;
+      const log = deps.log || console.log.bind(console);
+      const logErr = deps.logErr || console.error.bind(console);
+      let specPath = options.spec;
+      if (!specPath) {
+        try {
+          specPath = gitImpl(["config", "coderifts.specPath"], cwd);
+        } catch {
+          specPath = "";
+        }
+      }
+      if (!specPath) specPath = "api/openapi.yaml";
+      try {
+        gitImpl(["rev-parse", "--is-inside-work-tree"], cwd);
+      } catch (err) {
+        const msg = "CodeRifts publish-gate: GIT_ERROR \u2014 not a git repository (or git unavailable). Cannot resolve before-spec without git. Fail-closed.";
+        logErr(chalk.red(msg));
+        return finish({
+          ok: false,
+          exitCode: 1,
+          code: "GIT_ERROR",
+          message: msg,
+          policy: "fail_closed:git_error"
+        }, { log, json: options.json });
+      }
+      const beforeRes = resolveBeforeSpec(specPath, {
+        gitImpl,
+        cwd,
+        readFile,
+        packageVersion: deps.packageVersion
+      });
+      if (!beforeRes.ok) {
+        logErr(chalk.red(`CodeRifts publish-gate: ${beforeRes.code} \u2014 ${beforeRes.message}`));
+        return finish({
+          ok: false,
+          exitCode: 1,
+          code: beforeRes.code,
+          message: beforeRes.message,
+          policy: `fail_closed:${beforeRes.code}`,
+          tried: beforeRes.tried
+        }, { log, json: options.json });
+      }
+      const afterRes = resolveAfterSpec(specPath, { cwd, readFile, exists });
+      if (!afterRes.ok) {
+        logErr(chalk.red(`CodeRifts publish-gate: ${afterRes.code} \u2014 ${afterRes.message}`));
+        return finish({
+          ok: false,
+          exitCode: 1,
+          code: afterRes.code,
+          message: afterRes.message,
+          policy: `fail_closed:${afterRes.code}`
+        }, { log, json: options.json });
+      }
+      if (beforeRes.content === afterRes.content) {
+        const payload2 = {
+          ok: true,
+          exitCode: 0,
+          code: "UNCHANGED",
+          message: "Contract artifact unchanged vs baseline; publish permitted.",
+          policy: "permit:unchanged",
+          before_source: beforeRes.source,
+          execution_action: "CONTINUE",
+          receipt: null
+        };
+        if (!options.json) {
+          log(chalk.green("CodeRifts publish-gate: ALLOW (unchanged)"));
+          log(`  baseline: ${beforeRes.source}`);
+          log(`  spec:     ${specPath}`);
+        }
+        return finish(payload2, { log, json: options.json });
+      }
+      let result;
+      try {
+        result = await preflightFn(beforeRes.content, afterRes.content, {
+          apiKey: deps.apiKey,
+          cwd
+        });
+      } catch (err) {
+        const msg = `CodeRifts publish-gate: PREFLIGHT_UNREACHABLE \u2014 ${err && err.message}`;
+        logErr(chalk.red(msg));
+        return finish({
+          ok: false,
+          exitCode: 1,
+          code: "PREFLIGHT_UNREACHABLE",
+          message: msg,
+          policy: "fail_closed:preflight_unreachable"
+        }, { log, json: options.json });
+      }
+      const perm = evaluatePublishPermission(result);
+      const receipt = extractReceiptRef(result);
+      if (!perm.allow) {
+        const payload2 = {
+          ok: false,
+          exitCode: 1,
+          code: "BLOCK",
+          message: "Publish not permitted by execution_action / decision.",
+          policy: perm.policy,
+          execution_action: perm.execution_action,
+          decision: perm.decision,
+          before_source: beforeRes.source,
+          receipt,
+          fail_policy: "exit_1_on_block_or_resolver_error_or_unreachable"
+        };
+        if (!options.json) {
+          logErr("");
+          logErr(chalk.red("========================================"));
+          logErr(chalk.red("  CodeRifts: PUBLISH BLOCKED"));
+          logErr(chalk.red("========================================"));
+          logErr(`  Policy:            ${perm.policy}`);
+          logErr(`  execution_action:  ${perm.execution_action || "(none)"}`);
+          logErr(`  decision:          ${perm.decision || "(none)"}`);
+          logErr(`  baseline:          ${beforeRes.source}`);
+          logErr(`  fail policy:       exit 1 on BLOCK / resolver error / preflight unreachability`);
+          logErr(chalk.red("========================================"));
+          logErr("");
+        }
+        return finish(payload2, { log, json: options.json });
+      }
+      const payload = {
+        ok: true,
+        exitCode: 0,
+        code: "ALLOW",
+        message: "Publish permitted.",
+        policy: perm.policy,
+        execution_action: perm.execution_action,
+        decision: perm.decision,
+        before_source: beforeRes.source,
+        receipt
+      };
+      if (!options.json) {
+        log(chalk.green("CodeRifts publish-gate: ALLOW"));
+        log(`  Policy:            ${perm.policy}`);
+        log(`  execution_action:  ${perm.execution_action || "(mapped from decision)"}`);
+        log(`  baseline:          ${beforeRes.source}`);
+        if (receipt) log(`  Receipt reference: ${receipt}`);
+        else log("  Receipt reference: (none issued on this path)");
+      }
+      return finish(payload, { log, json: options.json });
+    }
+    function finish(payload, { log, json }) {
+      if (json) {
+        log(JSON.stringify(payload, null, 2));
+      }
+      return payload;
+    }
+    module2.exports = {
+      runPublishGate,
+      resolveBeforeSpec,
+      resolveAfterSpec,
+      evaluatePublishPermission,
+      extractReceiptRef,
+      gitShow,
+      defaultGit,
+      PERMIT_ACTIONS,
+      CLOSED_ACTIONS
+    };
+  }
+});
+
+// src/registry-validation-core.js
+var require_registry_validation_core = __commonJS({
+  "src/registry-validation-core.js"(exports2, module2) {
+    "use strict";
+    var yaml = require_js_yaml();
+    function safeParse(content) {
+      if (!content) return null;
+      try {
+        const trimmed = content.trim();
+        if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+          return JSON.parse(trimmed);
+        }
+        return yaml.load(trimmed);
+      } catch (_) {
+        return null;
+      }
+    }
+    function validateOpenApiSpec(parsed) {
+      if (!parsed || typeof parsed !== "object") {
+        return { valid: false, error: "Not a valid YAML or JSON object" };
+      }
+      if (parsed.openapi) {
+        const ver = String(parsed.openapi);
+        if (ver.startsWith("3.")) {
+          return { valid: true, version: ver };
+        }
+        return { valid: false, error: `Unsupported OpenAPI version: ${ver}` };
+      }
+      if (parsed.swagger) {
+        const ver = String(parsed.swagger);
+        if (ver.startsWith("2.")) {
+          return { valid: true, version: ver };
+        }
+        return { valid: false, error: `Unsupported Swagger version: ${ver}` };
+      }
+      return { valid: false, error: "Missing required field: 'openapi' or 'swagger'" };
+    }
+    function extractEndpoints(parsed) {
+      const endpoints = [];
+      const paths = parsed.paths || {};
+      const httpMethods = ["get", "post", "put", "patch", "delete", "head", "options"];
+      for (const [path, pathItem] of Object.entries(paths)) {
+        if (!pathItem || typeof pathItem !== "object") continue;
+        for (const method of httpMethods) {
+          if (pathItem[method]) {
+            endpoints.push({
+              path,
+              method: method.toUpperCase(),
+              operationId: pathItem[method].operationId || ""
+            });
+          }
+        }
+      }
+      return endpoints;
+    }
+    function extractSchemaNames(parsed) {
+      const schemas = [];
+      const components = parsed.components?.schemas || {};
+      for (const [name, schema] of Object.entries(components)) {
+        const hash = JSON.stringify(schema);
+        schemas.push({ name, hash });
+      }
+      return schemas;
+    }
+    function extractDefinedScopes(parsed) {
+      const scopes = /* @__PURE__ */ new Set();
+      const schemes = parsed.components?.securitySchemes || {};
+      for (const scheme of Object.values(schemes)) {
+        if (scheme.type === "oauth2" && scheme.flows) {
+          for (const flow of Object.values(scheme.flows)) {
+            if (flow.scopes) {
+              for (const scope of Object.keys(flow.scopes)) {
+                scopes.add(scope);
+              }
+            }
+          }
+        }
+      }
+      return scopes;
+    }
+    function extractUsedScopes(parsed) {
+      const scopes = /* @__PURE__ */ new Set();
+      if (Array.isArray(parsed.security)) {
+        for (const req of parsed.security) {
+          for (const scopeList of Object.values(req)) {
+            if (Array.isArray(scopeList)) {
+              for (const s of scopeList) scopes.add(s);
+            }
+          }
+        }
+      }
+      const paths = parsed.paths || {};
+      const httpMethods = ["get", "post", "put", "patch", "delete", "head", "options"];
+      for (const pathItem of Object.values(paths)) {
+        if (!pathItem || typeof pathItem !== "object") continue;
+        for (const method of httpMethods) {
+          const op = pathItem[method];
+          if (op?.security && Array.isArray(op.security)) {
+            for (const req of op.security) {
+              for (const scopeList of Object.values(req)) {
+                if (Array.isArray(scopeList)) {
+                  for (const s of scopeList) scopes.add(s);
+                }
+              }
+            }
+          }
+        }
+      }
+      return scopes;
+    }
+    function extractRefs(obj, refs = /* @__PURE__ */ new Set()) {
+      if (!obj || typeof obj !== "object") return refs;
+      if (Array.isArray(obj)) {
+        for (const item of obj) extractRefs(item, refs);
+        return refs;
+      }
+      for (const [key, value] of Object.entries(obj)) {
+        if (key === "$ref" && typeof value === "string") {
+          refs.add(value);
+        } else {
+          extractRefs(value, refs);
+        }
+      }
+      return refs;
+    }
+    function refResolves(parsed, ref) {
+      if (!ref.startsWith("#/")) return true;
+      const parts = ref.replace("#/", "").split("/");
+      let current = parsed;
+      for (const part of parts) {
+        if (!current || typeof current !== "object") return false;
+        current = current[part];
+      }
+      return current !== void 0;
+    }
+    function validateRegistry(specs) {
+      if (!Array.isArray(specs) || specs.length === 0) {
+        return { valid: true, issues: [], stats: { specs_count: 0, endpoints_count: 0, schemas_count: 0 } };
+      }
+      const issues = [];
+      const parsedSpecs = [];
+      for (const { name, spec } of specs) {
+        const parsed = safeParse(spec);
+        if (!parsed) {
+          issues.push({
+            severity: "error",
+            type: "parse_error",
+            message: `Could not parse spec '${name}' as valid YAML or JSON`,
+            specs: [name]
+          });
+          continue;
+        }
+        const validation = validateOpenApiSpec(parsed);
+        if (!validation.valid) {
+          issues.push({
+            severity: "error",
+            type: "invalid_spec",
+            message: `Spec '${name}' is not a valid OpenAPI document: ${validation.error}`,
+            specs: [name]
+          });
+          continue;
+        }
+        parsedSpecs.push({ name, parsed });
+      }
+      const endpointMap = /* @__PURE__ */ new Map();
+      for (const { name, parsed } of parsedSpecs) {
+        const endpoints = extractEndpoints(parsed);
+        for (const ep of endpoints) {
+          const key = `${ep.method} ${ep.path}`;
+          if (!endpointMap.has(key)) endpointMap.set(key, []);
+          endpointMap.get(key).push({ spec: name, operationId: ep.operationId });
+        }
+      }
+      for (const [endpoint, owners] of endpointMap) {
+        if (owners.length > 1) {
+          const specNames = owners.map((o) => o.spec);
+          issues.push({
+            severity: "warning",
+            type: "endpoint_collision",
+            message: `Endpoint '${endpoint}' is defined in multiple specs: ${specNames.join(", ")}`,
+            specs: specNames
+          });
+        }
+      }
+      const schemaMap = /* @__PURE__ */ new Map();
+      for (const { name, parsed } of parsedSpecs) {
+        const schemas = extractSchemaNames(parsed);
+        for (const s of schemas) {
+          if (!schemaMap.has(s.name)) schemaMap.set(s.name, []);
+          schemaMap.get(s.name).push({ spec: name, hash: s.hash });
+        }
+      }
+      for (const [schemaName, definitions] of schemaMap) {
+        if (definitions.length > 1) {
+          const uniqueHashes = new Set(definitions.map((d) => d.hash));
+          if (uniqueHashes.size > 1) {
+            const specNames = definitions.map((d) => d.spec);
+            issues.push({
+              severity: "warning",
+              type: "schema_conflict",
+              message: `Schema '${schemaName}' has conflicting definitions across specs: ${specNames.join(", ")}`,
+              specs: specNames
+            });
+          }
+        }
+      }
+      for (const { name, parsed } of parsedSpecs) {
+        const defined = extractDefinedScopes(parsed);
+        const used = extractUsedScopes(parsed);
+        for (const scope of used) {
+          if (!defined.has(scope)) {
+            issues.push({
+              severity: "warning",
+              type: "undefined_scope",
+              message: `Scope '${scope}' is used in '${name}' but not defined in securitySchemes`,
+              specs: [name]
+            });
+          }
+        }
+        for (const scope of defined) {
+          if (!used.has(scope)) {
+            issues.push({
+              severity: "info",
+              type: "unused_scope",
+              message: `Scope '${scope}' is defined in '${name}' but never used in any operation`,
+              specs: [name]
+            });
+          }
+        }
+      }
+      for (const { name, parsed } of parsedSpecs) {
+        const refs = extractRefs(parsed);
+        for (const ref of refs) {
+          if (!refResolves(parsed, ref)) {
+            issues.push({
+              severity: "error",
+              type: "unresolved_ref",
+              message: `$ref '${ref}' in '${name}' does not resolve`,
+              specs: [name]
+            });
+          }
+        }
+      }
+      let totalEndpoints = 0;
+      let totalSchemas = 0;
+      for (const { parsed } of parsedSpecs) {
+        totalEndpoints += extractEndpoints(parsed).length;
+        totalSchemas += extractSchemaNames(parsed).length;
+      }
+      const hasErrors = issues.some((i) => i.severity === "error");
+      return {
+        valid: !hasErrors,
+        issues,
+        stats: {
+          specs_count: parsedSpecs.length,
+          endpoints_count: totalEndpoints,
+          schemas_count: totalSchemas
+        }
+      };
+    }
+    module2.exports = {
+      validateRegistry,
+      safeParse,
+      validateOpenApiSpec,
+      // Exported for testing
+      extractEndpoints,
+      extractSchemaNames,
+      extractDefinedScopes,
+      extractUsedScopes,
+      extractRefs,
+      refResolves
+    };
+  }
+});
+
+// src/commands/registry-gate.js
+var require_registry_gate = __commonJS({
+  "src/commands/registry-gate.js"(exports2, module2) {
+    "use strict";
+    var fs = require("fs");
+    var path = require("path");
+    var chalk = require_source();
+    var { matchGlob } = require_cjs4();
+    var {
+      validateRegistry,
+      safeParse,
+      validateOpenApiSpec
+    } = require_registry_validation_core();
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var SPEC_EXT = /* @__PURE__ */ new Set([".yaml", ".yml", ".json"]);
+    function walkSpecCandidates(rootDir, {
+      readdirSync = fs.readdirSync.bind(fs),
+      statSync = fs.statSync.bind(fs)
+    } = {}) {
+      const out = [];
+      function walk(absDir) {
+        let entries;
+        try {
+          entries = readdirSync(absDir, { withFileTypes: true });
+        } catch (err) {
+          const e = new Error(`Cannot read directory ${absDir}: ${err && err.message}`);
+          e.code = "GATE_ERROR";
+          e.path = absDir;
+          throw e;
+        }
+        for (const ent of entries) {
+          const name = ent.name;
+          if (name === "node_modules" || name.startsWith(".")) continue;
+          const abs = path.join(absDir, name);
+          let isDir = ent.isDirectory && ent.isDirectory();
+          let isFile = ent.isFile && ent.isFile();
+          if (!isDir && !isFile) {
+            try {
+              const st = statSync(abs);
+              isDir = st.isDirectory();
+              isFile = st.isFile();
+            } catch (err) {
+              const e = new Error(`Cannot stat ${abs}: ${err && err.message}`);
+              e.code = "GATE_ERROR";
+              e.path = abs;
+              throw e;
+            }
+          }
+          if (isDir) {
+            walk(abs);
+            continue;
+          }
+          if (isFile) {
+            const ext = path.extname(name).toLowerCase();
+            if (SPEC_EXT.has(ext)) out.push(abs);
+          }
+        }
+      }
+      walk(rootDir);
+      return out.sort();
+    }
+    function relPosix(rootDir, absPath) {
+      let rel = path.relative(rootDir, absPath);
+      if (path.sep !== "/") rel = rel.split(path.sep).join("/");
+      return rel;
+    }
+    function readFileThreeState(absPath, readFileSync = fs.readFileSync.bind(fs)) {
+      try {
+        const content = readFileSync(absPath, "utf8");
+        return { ok: true, content: content == null ? "" : String(content) };
+      } catch (err) {
+        const msg = err && err.message ? String(err.message) : String(err);
+        return {
+          ok: false,
+          code: "GATE_ERROR",
+          message: `unreadable file: ${absPath} (${msg.slice(0, 200)})`,
+          path: absPath
+        };
+      }
+    }
+    function discoverRegistrySpecs(dir, {
+      glob = null,
+      readdirSync = fs.readdirSync.bind(fs),
+      readFileSync = fs.readFileSync.bind(fs),
+      statSync = fs.statSync.bind(fs)
+    } = {}) {
+      const rootDir = path.resolve(dir);
+      let candidates;
+      try {
+        candidates = walkSpecCandidates(rootDir, { readdirSync, statSync });
+      } catch (err) {
+        return {
+          ok: false,
+          code: err.code || "GATE_ERROR",
+          message: err.message || String(err),
+          path: err.path
+        };
+      }
+      if (glob) {
+        candidates = candidates.filter((abs) => matchGlob(glob, relPosix(rootDir, abs)));
+      }
+      const specs = [];
+      let skippedNonSpec = 0;
+      for (const abs of candidates) {
+        const read = readFileThreeState(abs, readFileSync);
+        if (!read.ok) {
+          return {
+            ok: false,
+            code: "GATE_ERROR",
+            message: read.message,
+            path: read.path || abs
+          };
+        }
+        const name = relPosix(rootDir, abs);
+        const parsed = safeParse(read.content);
+        if (!parsed || typeof parsed !== "object") {
+          specs.push({ name, spec: read.content });
+          continue;
+        }
+        const shape = validateOpenApiSpec(parsed);
+        if (!shape.valid) {
+          if (shape.error && shape.error.includes("Missing required field: 'openapi' or 'swagger'")) {
+            skippedNonSpec += 1;
+            continue;
+          }
+          specs.push({ name, spec: read.content });
+          continue;
+        }
+        specs.push({ name, spec: read.content });
+      }
+      return {
+        ok: true,
+        specs,
+        skippedNonSpec,
+        candidates: candidates.length,
+        rootDir
+      };
+    }
+    function findingsFailGate(issues, { warnOnly = false, errorsOnly = false } = {}) {
+      if (warnOnly) return false;
+      for (const i of issues || []) {
+        if (i.severity === "error") return true;
+        if (i.severity === "warning" && !errorsOnly) return true;
+      }
+      return false;
+    }
+    function countBySeverity(issues) {
+      const c = { error: 0, warning: 0, info: 0 };
+      for (const i of issues || []) {
+        if (i.severity === "error") c.error += 1;
+        else if (i.severity === "warning") c.warning += 1;
+        else if (i.severity === "info") c.info += 1;
+      }
+      return c;
+    }
+    function severityColor(sev) {
+      if (sev === "error") return chalk.red;
+      if (sev === "warning") return chalk.yellow;
+      return chalk.cyan;
+    }
+    function printFindings(issues, log) {
+      for (const i of issues || []) {
+        const color = severityColor(i.severity);
+        const files = Array.isArray(i.specs) ? i.specs.join(", ") : "";
+        log(color(`[${i.severity}] ${i.type}`) + (files ? chalk.dim(`  ${files}`) : ""));
+        log(`  ${i.message}`);
+      }
+    }
+    function runRegistryGate(options = {}, deps = {}) {
+      const log = deps.log || console.log.bind(console);
+      const logErr = deps.logErr || console.error.bind(console);
+      const cwd = deps.cwd || process.cwd();
+      const dirArg = options.dir != null && options.dir !== "" ? options.dir : ".";
+      const rootDir = path.isAbsolute(dirArg) ? dirArg : path.resolve(cwd, dirArg);
+      const readdirSync = deps.readdirSync || fs.readdirSync.bind(fs);
+      const readFileSync = deps.readFileSync || fs.readFileSync.bind(fs);
+      const statSync = deps.statSync || fs.statSync.bind(fs);
+      const existsSync = deps.existsSync || fs.existsSync.bind(fs);
+      if (!existsSync(rootDir)) {
+        const msg = `CodeRifts registry-gate: GATE_ERROR \u2014 directory not found: ${rootDir}`;
+        logErr(chalk.red(msg));
+        return { ok: false, exitCode: 1, code: "GATE_ERROR", message: msg };
+      }
+      let st;
+      try {
+        st = statSync(rootDir);
+      } catch (err) {
+        const msg = `CodeRifts registry-gate: GATE_ERROR \u2014 cannot access ${rootDir}: ${err && err.message}`;
+        logErr(chalk.red(msg));
+        return { ok: false, exitCode: 1, code: "GATE_ERROR", message: msg };
+      }
+      if (!st.isDirectory()) {
+        const msg = `CodeRifts registry-gate: GATE_ERROR \u2014 not a directory: ${rootDir}`;
+        logErr(chalk.red(msg));
+        return { ok: false, exitCode: 1, code: "GATE_ERROR", message: msg };
+      }
+      const discovered = discoverRegistrySpecs(rootDir, {
+        glob: options.glob || null,
+        readdirSync,
+        readFileSync,
+        statSync
+      });
+      if (!discovered.ok) {
+        const msg = `CodeRifts registry-gate: ${discovered.code} \u2014 ${discovered.message}`;
+        logErr(chalk.red(msg));
+        return {
+          ok: false,
+          exitCode: 1,
+          code: discovered.code || "GATE_ERROR",
+          message: discovered.message,
+          path: discovered.path
+        };
+      }
+      if (discovered.specs.length === 0) {
+        const msg = `CodeRifts registry-gate: REGISTRY_EMPTY \u2014 no OpenAPI/Swagger specs discovered (scanned ${discovered.candidates} yaml/json file(s), skipped non-spec: ${discovered.skippedNonSpec}). An admission gate guarding nothing must fail, not pass.`;
+        logErr(chalk.red(msg));
+        return {
+          ok: false,
+          exitCode: 1,
+          code: "REGISTRY_EMPTY",
+          message: msg,
+          skippedNonSpec: discovered.skippedNonSpec,
+          candidates: discovered.candidates
+        };
+      }
+      const result = validateRegistry(discovered.specs);
+      const counts = countBySeverity(result.issues);
+      const mode = {
+        warnOnly: !!options.warnOnly,
+        errorsOnly: !!options.errorsOnly
+      };
+      const fail = findingsFailGate(result.issues, mode);
+      if (result.issues.length > 0) {
+        printFindings(result.issues, log);
+      }
+      const summary = [
+        `specs=${result.stats.specs_count}`,
+        `endpoints=${result.stats.endpoints_count}`,
+        `schemas=${result.stats.schemas_count}`,
+        `errors=${counts.error}`,
+        `warnings=${counts.warning}`,
+        `info=${counts.info}`,
+        discovered.skippedNonSpec ? `skipped_non_spec=${discovered.skippedNonSpec}` : null,
+        mode.warnOnly ? "mode=warn-only" : mode.errorsOnly ? "mode=errors-only" : "mode=default",
+        fail ? "FAIL" : "PASS"
+      ].filter(Boolean).join("  ");
+      if (fail) {
+        log(chalk.red(`CodeRifts registry-gate: ${summary}`));
+      } else {
+        log(chalk.green(`CodeRifts registry-gate: ${summary}`));
+      }
+      if (counts.error === 0 && counts.warning === 0 && counts.info === 0) {
+        log(chalk.dim("  checks: endpoint_collision, schema_conflict, scopes, unresolved_ref \u2014 no findings"));
+      }
+      return {
+        ok: !fail,
+        exitCode: fail ? 1 : 0,
+        code: fail ? "REGISTRY_FINDINGS" : "REGISTRY_OK",
+        issues: result.issues,
+        stats: result.stats,
+        counts,
+        skippedNonSpec: discovered.skippedNonSpec,
+        candidates: discovered.candidates,
+        warnOnly: mode.warnOnly,
+        errorsOnly: mode.errorsOnly
+      };
+    }
+    module2.exports = {
+      runRegistryGate,
+      discoverRegistrySpecs,
+      walkSpecCandidates,
+      findingsFailGate,
+      countBySeverity,
+      readFileThreeState,
+      relPosix
+    };
+  }
+});
+
 // src/commands/init.js
 var require_init = __commonJS({
   "src/commands/init.js"(exports2, module2) {
@@ -68926,6 +70355,63 @@ notifications:
     on_breaking: true
     on_risk_above: 60
 
+overlap_detection: true
+generator_detection: true
+`
+      },
+      "ai-agent-platform": {
+        aliases: ["ai-agent-platform", "ai-agent", "agent", "mcp"],
+        label: "AI Agent Platform",
+        description: "Zero-tolerance removals for agent/MCP-consumed APIs",
+        yaml: `# CodeRifts Policy: AI Agent Platform
+# For APIs consumed by AI agents and MCP tool surfaces.
+# Agent consumers cannot renegotiate contracts at runtime \u2014 a removed field
+# or endpoint is a hard break for automated callers (no human can "adapt").
+# Portable policy vocabulary only (same keys as other templates).
+
+failOnBreaking: true
+
+policy:
+  # Zero tolerance: any breaking change blocks the check.
+  max_breaking_changes: 0
+  # Removals that break tool schemas / agent bindings are never silent.
+  no_delete_endpoints: true
+  no_delete_required_fields: true
+  require_deprecation_before_removal: true
+  require_version_bump_on_breaking: true
+  # Freeze merges when risk is elevated (agents amplify blast radius).
+  freeze_on_risk_score: 55
+
+# Who must approve high-impact contract changes for agent-facing surfaces.
+approval_matrix:
+  endpoint_removal:
+    - agent-platform-owners
+    - api-governance
+  field_removal:
+    - agent-platform-owners
+  auth_change:
+    - security-team
+    - agent-platform-owners
+  type_change:
+    - agent-platform-owners
+
+freeze_periods: []
+
+risk_scoring:
+  # dimension_weights is the key the engine reads (0-100 scale, relative weights)
+  dimension_weights:
+    revenue_impact: 20
+    blast_radius: 35
+    app_compatibility: 30
+    security: 15
+
+linting:
+  enabled: true
+  rules:
+    naming_convention: true
+    consistent_errors: true
+    pagination_pattern: true
+
 overlap_detection: true
 generator_detection: true
 `
@@ -68947,7 +70433,8 @@ generator_detection: true
         ["growth", "Balanced between speed and safety"],
         ["fintech", "Maximum governance for regulated industries"],
         ["public-api", "Backward compatibility for external consumers"],
-        ["microservices", "Internal service-to-service with blast radius focus"]
+        ["microservices", "Internal service-to-service with blast radius focus"],
+        ["ai-agent", "Zero-tolerance removals for agent/MCP-consumed APIs"]
       ];
       for (const [name, desc] of entries) {
         console.log(`    ${chalk.cyan(name.padEnd(16))}${chalk.dim(desc)}`);
@@ -68983,9 +70470,10 @@ generator_detection: true
       console.log("");
       console.log(chalk.green(`  Created .coderifts.yml with ${tmpl.label} policy template.`));
       console.log(chalk.dim(`  Edit the file to customize approval teams, freeze periods, and domain mappings.`));
+      console.log(chalk.dim(`  Agent-using repo? Run: coderifts agent-setup`));
       console.log("");
     }
-    module2.exports = { init, TEMPLATES };
+    module2.exports = { init, TEMPLATES, resolveTemplate };
   }
 });
 
@@ -94342,6 +95830,679 @@ var require_login = __commonJS({
   }
 });
 
+// src/commands/setup-required-check.js
+var require_setup_required_check = __commonJS({
+  "src/commands/setup-required-check.js"(exports2, module2) {
+    "use strict";
+    var { execFileSync } = require("child_process");
+    var chalk = require_source();
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var CHECK_NAME = "CodeRifts / contract-gate";
+    var EXIT = {
+      OK: 0,
+      /** Target already required or dry-run printed successfully. */
+      NEEDS_APPLY: 0,
+      /** Unknown / permission / gh missing / verify failed. */
+      ERROR: 1,
+      PERMISSION: 2
+    };
+    function extractRequiredContexts(protection) {
+      if (!protection || typeof protection !== "object") return [];
+      const rsc = protection.required_status_checks;
+      if (!rsc || typeof rsc !== "object") return [];
+      if (Array.isArray(rsc.contexts) && rsc.contexts.length) {
+        return rsc.contexts.map((c) => String(c));
+      }
+      if (Array.isArray(rsc.checks)) {
+        return rsc.checks.map((c) => c && c.context != null ? String(c.context) : "").filter(Boolean);
+      }
+      return [];
+    }
+    function classifyObservation(read, contextName = CHECK_NAME) {
+      const status = read && read.status != null ? Number(read.status) : null;
+      if (status === 404) {
+        return {
+          state: "ABSENT",
+          context_is_required: false,
+          required_contexts: [],
+          protection: null,
+          observation_error: null
+        };
+      }
+      if (status === 403) {
+        return {
+          state: "UNKNOWN",
+          context_is_required: false,
+          required_contexts: [],
+          protection: null,
+          observation_error: "403",
+          permission_hint: "administration:read (or repo admin) required to read branch protection"
+        };
+      }
+      if (status != null && status >= 400) {
+        return {
+          state: "UNKNOWN",
+          context_is_required: false,
+          required_contexts: [],
+          protection: null,
+          observation_error: String(status),
+          permission_hint: read.errorMessage || `GitHub API returned HTTP ${status}`
+        };
+      }
+      const protection = read && read.body && typeof read.body === "object" ? read.body : null;
+      if (!protection) {
+        return {
+          state: "ABSENT",
+          context_is_required: false,
+          required_contexts: [],
+          protection: null,
+          observation_error: null
+        };
+      }
+      const required_contexts = extractRequiredContexts(protection);
+      const context_is_required = required_contexts.some((c) => c === contextName);
+      if (context_is_required) {
+        return {
+          state: "REQUIRED",
+          context_is_required: true,
+          required_contexts,
+          protection,
+          observation_error: null
+        };
+      }
+      return {
+        state: "PRESENT_NOT_REQUIRED",
+        context_is_required: false,
+        required_contexts,
+        protection,
+        observation_error: null
+      };
+    }
+    function buildProtectionUpdatePayload(protection, contextName = CHECK_NAME) {
+      const p = protection && typeof protection === "object" ? protection : {};
+      const prev = p.required_status_checks && typeof p.required_status_checks === "object" ? p.required_status_checks : {};
+      const contexts = extractRequiredContexts(p);
+      const nextContexts = contexts.includes(contextName) ? contexts.slice() : contexts.concat([contextName]);
+      const body = {
+        required_status_checks: {
+          strict: prev.strict === true,
+          contexts: nextContexts,
+          // Prefer also sending checks[] when the API used that shape so app ids survive when present.
+          ...Array.isArray(prev.checks) && prev.checks.length ? {
+            checks: nextContexts.map((ctx) => {
+              const existing = prev.checks.find((c) => c && c.context === ctx);
+              return existing && existing.app_id != null ? { context: ctx, app_id: existing.app_id } : { context: ctx };
+            })
+          } : {}
+        },
+        enforce_admins: !!(p.enforce_admins && p.enforce_admins.enabled),
+        required_pull_request_reviews: p.required_pull_request_reviews ? serializePrReviews(p.required_pull_request_reviews) : null,
+        restrictions: p.restrictions ? {
+          users: (p.restrictions.users || []).map((u) => u.login || u).filter(Boolean),
+          teams: (p.restrictions.teams || []).map((t) => t.slug || t).filter(Boolean),
+          apps: (p.restrictions.apps || []).map((a) => a.slug || a).filter(Boolean)
+        } : null
+      };
+      if (typeof p.required_linear_history === "boolean") {
+        body.required_linear_history = p.required_linear_history;
+      } else if (p.required_linear_history && typeof p.required_linear_history.enabled === "boolean") {
+        body.required_linear_history = p.required_linear_history.enabled;
+      }
+      if (typeof p.allow_force_pushes === "boolean") {
+        body.allow_force_pushes = p.allow_force_pushes;
+      } else if (p.allow_force_pushes && typeof p.allow_force_pushes.enabled === "boolean") {
+        body.allow_force_pushes = p.allow_force_pushes.enabled;
+      }
+      if (typeof p.allow_deletions === "boolean") {
+        body.allow_deletions = p.allow_deletions;
+      } else if (p.allow_deletions && typeof p.allow_deletions.enabled === "boolean") {
+        body.allow_deletions = p.allow_deletions.enabled;
+      }
+      if (typeof p.block_creations === "boolean") {
+        body.block_creations = p.block_creations;
+      } else if (p.block_creations && typeof p.block_creations.enabled === "boolean") {
+        body.block_creations = p.block_creations.enabled;
+      }
+      if (typeof p.required_conversation_resolution === "boolean") {
+        body.required_conversation_resolution = p.required_conversation_resolution;
+      } else if (p.required_conversation_resolution && typeof p.required_conversation_resolution.enabled === "boolean") {
+        body.required_conversation_resolution = p.required_conversation_resolution.enabled;
+      }
+      return body;
+    }
+    function serializePrReviews(rpr) {
+      if (!rpr || typeof rpr !== "object") return null;
+      return {
+        dismiss_stale_reviews: !!rpr.dismiss_stale_reviews,
+        require_code_owner_reviews: !!rpr.require_code_owner_reviews,
+        required_approving_review_count: Number(rpr.required_approving_review_count) || 0,
+        require_last_push_approval: !!rpr.require_last_push_approval,
+        ...Array.isArray(rpr.bypass_pull_request_allowances?.users) ? {
+          bypass_pull_request_allowances: {
+            users: (rpr.bypass_pull_request_allowances.users || []).map((u) => u.login || u).filter(Boolean),
+            teams: (rpr.bypass_pull_request_allowances.teams || []).map((t) => t.slug || t).filter(Boolean),
+            apps: (rpr.bypass_pull_request_allowances.apps || []).map((a) => a.slug || a).filter(Boolean)
+          }
+        } : {}
+      };
+    }
+    function detectRulesetRequiredCheck(rulesets, contextName = CHECK_NAME) {
+      const names = [];
+      const list = Array.isArray(rulesets) ? rulesets : [];
+      for (const rs of list) {
+        if (!rs || typeof rs !== "object") continue;
+        const rules = Array.isArray(rs.rules) ? rs.rules : [];
+        for (const rule of rules) {
+          if (!rule || rule.type !== "required_status_checks") continue;
+          const params = rule.parameters || {};
+          const checks = Array.isArray(params.required_status_checks) ? params.required_status_checks : Array.isArray(params.contexts) ? params.contexts.map((c) => ({ context: c })) : [];
+          for (const c of checks) {
+            const ctx = typeof c === "string" ? c : c && c.context;
+            if (ctx === contextName) {
+              names.push(String(rs.name || rs.id || "ruleset"));
+            }
+          }
+        }
+      }
+      return { enforced: names.length > 0, ruleset_names: [...new Set(names)] };
+    }
+    function defaultGit(args, cwd) {
+      return execFileSync("git", args, {
+        cwd: cwd || process.cwd(),
+        encoding: "utf8",
+        maxBuffer: 4 * 1024 * 1024,
+        stdio: ["ignore", "pipe", "pipe"]
+      }).trim();
+    }
+    function parseGitHubRemote(remoteUrl) {
+      const s = String(remoteUrl || "").trim();
+      let m = s.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/i);
+      if (m) return { owner: m[1], repo: m[2].replace(/\.git$/i, "") };
+      m = s.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/i);
+      if (m) return { owner: m[1], repo: m[2].replace(/\.git$/i, "") };
+      m = s.match(/^ssh:\/\/git@github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/i);
+      if (m) return { owner: m[1], repo: m[2].replace(/\.git$/i, "") };
+      return null;
+    }
+    function resolveOwnerRepo(cwd, gitImpl = defaultGit) {
+      let url;
+      try {
+        url = gitImpl(["remote", "get-url", "origin"], cwd);
+      } catch {
+        try {
+          url = gitImpl(["config", "--get", "remote.origin.url"], cwd);
+        } catch {
+          return null;
+        }
+      }
+      return parseGitHubRemote(url);
+    }
+    function resolveDefaultBranch(cwd, gitImpl = defaultGit) {
+      try {
+        const ref = gitImpl(["symbolic-ref", "refs/remotes/origin/HEAD"], cwd);
+        const m = ref.match(/refs\/remotes\/origin\/(.+)$/);
+        if (m) return m[1];
+      } catch {
+      }
+      for (const b of ["main", "master"]) {
+        try {
+          gitImpl(["rev-parse", "--verify", `origin/${b}`], cwd);
+          return b;
+        } catch {
+        }
+      }
+      try {
+        return gitImpl(["branch", "--show-current"], cwd) || "main";
+      } catch {
+        return "main";
+      }
+    }
+    function defaultGhAvailable() {
+      try {
+        execFileSync("gh", ["--version"], { stdio: ["ignore", "pipe", "pipe"], encoding: "utf8" });
+        return true;
+      } catch {
+        return false;
+      }
+    }
+    function runGhApi(args, { cwd, ghRunner } = {}) {
+      const runner = ghRunner || ((a, c) => execFileSync("gh", a, {
+        cwd: c || process.cwd(),
+        encoding: "utf8",
+        maxBuffer: 8 * 1024 * 1024,
+        stdio: ["ignore", "pipe", "pipe"]
+      }));
+      try {
+        const raw = runner(["api", ...args], cwd);
+        let body = null;
+        try {
+          body = JSON.parse(raw);
+        } catch {
+          body = raw;
+        }
+        return { ok: true, status: 200, body, raw: String(raw) };
+      } catch (err) {
+        const stderr = err && err.stderr ? String(err.stderr) : "";
+        const stdout = err && err.stdout ? String(err.stdout) : "";
+        const msg = stderr || err && err.message || String(err);
+        const m = msg.match(/HTTP\s+(\d{3})/i) || stdout.match(/"status"\s*:\s*"(\d{3})"/);
+        const status = m ? Number(m[1]) : err && err.status === 1 ? null : null;
+        let body = null;
+        try {
+          body = JSON.parse(stdout);
+        } catch {
+        }
+        let httpStatus = status;
+        if (httpStatus == null) {
+          if (/403|Forbidden|Resource not accessible/i.test(msg)) httpStatus = 403;
+          else if (/404|Not Found/i.test(msg)) httpStatus = 404;
+          else httpStatus = 500;
+        }
+        return {
+          ok: false,
+          status: httpStatus,
+          body,
+          raw: stdout || msg,
+          errorMessage: msg.slice(0, 400)
+        };
+      }
+    }
+    function protectionGetPath(owner, repo, branch) {
+      return `repos/${owner}/${repo}/branches/${encodeURIComponent(branch)}/protection`;
+    }
+    function protectionPutArgs(owner, repo, branch, payload) {
+      return {
+        args: [
+          "--method",
+          "PUT",
+          protectionGetPath(owner, repo, branch),
+          "--input",
+          "-"
+        ],
+        input: JSON.stringify(payload)
+      };
+    }
+    function printApplyCommand(owner, repo, branch, payload) {
+      const path = protectionGetPath(owner, repo, branch);
+      const json = JSON.stringify(payload, null, 2);
+      return [
+        `# Read-modify-write: add '${CHECK_NAME}' to required status checks (preserves other settings)`,
+        `gh api --method PUT ${path} --input - <<'EOF'`,
+        json,
+        "EOF"
+      ].join("\n");
+    }
+    async function runSetupRequiredCheck(options = {}, deps = {}) {
+      const cwd = deps.cwd || process.cwd();
+      const gitImpl = deps.gitImpl || defaultGit;
+      const log = deps.log || console.log.bind(console);
+      const logErr = deps.logErr || console.error.bind(console);
+      const ghAvailable = deps.ghAvailable != null ? deps.ghAvailable : defaultGhAvailable;
+      const ghRunner = deps.ghRunner;
+      const runApi = deps.runGhApi || ((args, o) => runGhApi(args, { ...o, ghRunner }));
+      const doExit = deps.exit !== false;
+      const finish = (code, payload2) => {
+        if (options.json) log(JSON.stringify(payload2, null, 2));
+        if (doExit) process.exit(code);
+        return { exitCode: code, ...payload2 };
+      };
+      const ownerRepo = options.repo ? (() => {
+        const m = String(options.repo).match(/^([^/]+)\/([^/]+)$/);
+        return m ? { owner: m[1], repo: m[2] } : null;
+      })() : resolveOwnerRepo(cwd, gitImpl);
+      if (!ownerRepo) {
+        logErr(chalk.red("Could not resolve owner/repo from git remote origin (or --repo OWNER/REPO)."));
+        return finish(EXIT.ERROR, { ok: false, code: "REPO_UNRESOLVED" });
+      }
+      const { owner, repo } = ownerRepo;
+      const branch = options.branch || resolveDefaultBranch(cwd, gitImpl);
+      if (!ghAvailable()) {
+        logErr(chalk.yellow("GitHub CLI (`gh`) not found on PATH."));
+        logErr("Install: https://cli.github.com/  then: gh auth login");
+        logErr("");
+        logErr("Manual check (your credentials, not a CodeRifts key):");
+        logErr(`  gh api ${protectionGetPath(owner, repo, branch)}`);
+        logErr("");
+        logErr(`Required check name: ${CHECK_NAME}`);
+        logErr("The CodeRifts App never writes branch protection (needs administration:write).");
+        return finish(EXIT.ERROR, { ok: false, code: "GH_MISSING", owner, repo, branch, check: CHECK_NAME });
+      }
+      const getPath = protectionGetPath(owner, repo, branch);
+      const read = runApi([getPath], { cwd });
+      const obs = classifyObservation(read, CHECK_NAME);
+      let ruleset = { enforced: false, ruleset_names: [] };
+      try {
+        const rsList = runApi([`repos/${owner}/${repo}/rulesets`], { cwd });
+        if (rsList.ok && Array.isArray(rsList.body)) {
+          const detailed = [];
+          for (const rs of rsList.body) {
+            if (!rs || rs.id == null) continue;
+            const one = runApi([`repos/${owner}/${repo}/rulesets/${rs.id}`], { cwd });
+            if (one.ok && one.body) detailed.push(one.body);
+            else detailed.push(rs);
+          }
+          ruleset = detectRulesetRequiredCheck(detailed.length ? detailed : rsList.body, CHECK_NAME);
+        }
+      } catch {
+      }
+      const basePayload = {
+        ok: true,
+        owner,
+        repo,
+        branch,
+        check: CHECK_NAME,
+        classic: obs.state,
+        context_is_required: obs.context_is_required,
+        required_contexts: obs.required_contexts,
+        ruleset_enforced: ruleset.enforced,
+        ruleset_names: ruleset.ruleset_names
+      };
+      if (ruleset.enforced) {
+        if (!options.json) {
+          log(chalk.green(`Required via repository ruleset: ${CHECK_NAME}`));
+          log(`  repo:     ${owner}/${repo}`);
+          log(`  branch:   ${branch}`);
+          log(`  rulesets: ${ruleset.ruleset_names.join(", ") || "(named)"}`);
+          log("  Classic branch protection may still be ABSENT \u2014 rulesets enforce separately.");
+        }
+        return finish(EXIT.OK, { ...basePayload, code: "RULESET_REQUIRED" });
+      }
+      if (obs.state === "REQUIRED") {
+        if (!options.json) {
+          log(chalk.green(`Already required: '${CHECK_NAME}'`));
+          log(`  repo:   ${owner}/${repo}`);
+          log(`  branch: ${branch}`);
+          log("  (classic branch protection \u2014 idempotent; nothing to do)");
+        }
+        return finish(EXIT.OK, { ...basePayload, code: "ALREADY_REQUIRED" });
+      }
+      if (obs.state === "UNKNOWN") {
+        if (!options.json) {
+          logErr(chalk.red("Cannot observe branch protection (UNKNOWN)."));
+          logErr(`  HTTP: ${obs.observation_error || "unknown"}`);
+          logErr(`  ${obs.permission_hint || "An admin with administration:read must run this command."}`);
+          logErr("  The CodeRifts App never writes protection; an admin must grant or run this.");
+        }
+        return finish(EXIT.PERMISSION, { ...basePayload, ok: false, code: "PERMISSION", observation_error: obs.observation_error });
+      }
+      let payload;
+      if (obs.state === "ABSENT" || !obs.protection) {
+        payload = {
+          required_status_checks: {
+            strict: false,
+            contexts: [CHECK_NAME]
+          },
+          enforce_admins: false,
+          required_pull_request_reviews: null,
+          restrictions: null
+        };
+      } else {
+        payload = buildProtectionUpdatePayload(obs.protection, CHECK_NAME);
+      }
+      const cmdText = printApplyCommand(owner, repo, branch, payload);
+      if (!options.apply) {
+        if (!options.json) {
+          log(chalk.yellow(`Status: ${obs.state} \u2014 '${CHECK_NAME}' is not a required check.`));
+          log(`  repo:   ${owner}/${repo}`);
+          log(`  branch: ${branch}`);
+          log("");
+          log("Dry-run (default). Exact command to add the required check with your credentials:");
+          log("");
+          log(cmdText);
+          log("");
+          log("Re-run with --apply to execute that PUT and re-verify.");
+          log("Why the App never writes this: administration:write is a trust jump we refuse (audit 3.4/1, 3.5).");
+        }
+        return finish(EXIT.NEEDS_APPLY, {
+          ...basePayload,
+          code: "NEEDS_APPLY",
+          apply_command: cmdText,
+          apply_payload: payload
+        });
+      }
+      const put = protectionPutArgs(owner, repo, branch, payload);
+      let putResult;
+      if (deps.ghApply) {
+        putResult = deps.ghApply(put, { cwd });
+      } else {
+        try {
+          const raw = execFileSync("gh", ["api", ...put.args], {
+            cwd,
+            encoding: "utf8",
+            input: put.input,
+            maxBuffer: 8 * 1024 * 1024,
+            stdio: ["pipe", "pipe", "pipe"]
+          });
+          putResult = { ok: true, status: 200, body: JSON.parse(raw || "{}"), raw };
+        } catch (err) {
+          const msg = err && err.stderr ? String(err.stderr) : err && err.message || String(err);
+          const m = msg.match(/HTTP\s+(\d{3})/i);
+          putResult = {
+            ok: false,
+            status: m ? Number(m[1]) : 500,
+            errorMessage: msg.slice(0, 400),
+            raw: msg
+          };
+        }
+      }
+      if (!putResult.ok) {
+        if (!options.json) {
+          logErr(chalk.red("Apply failed."));
+          logErr(`  ${putResult.errorMessage || putResult.status}`);
+          if (putResult.status === 403) {
+            logErr("  Need administration:write on the repository (admin).");
+          }
+        }
+        return finish(
+          putResult.status === 403 ? EXIT.PERMISSION : EXIT.ERROR,
+          { ...basePayload, ok: false, code: "APPLY_FAILED", apply_status: putResult.status }
+        );
+      }
+      const reRead = runApi([getPath], { cwd });
+      const reObs = classifyObservation(reRead, CHECK_NAME);
+      if (reObs.state !== "REQUIRED") {
+        if (!options.json) {
+          logErr(chalk.red("Apply returned success but re-read did not show the check as required."));
+          logErr(`  classic state after apply: ${reObs.state}`);
+          logErr("  Unverified apply is not success.");
+        }
+        return finish(EXIT.ERROR, {
+          ...basePayload,
+          ok: false,
+          code: "VERIFY_FAILED",
+          classic_after: reObs.state
+        });
+      }
+      if (!options.json) {
+        log(chalk.green(`Success: '${CHECK_NAME}' is now required.`));
+        log(`  repo:   ${owner}/${repo}`);
+        log(`  branch: ${branch}`);
+      }
+      return finish(EXIT.OK, {
+        ...basePayload,
+        code: "APPLIED",
+        classic: "REQUIRED",
+        context_is_required: true
+      });
+    }
+    module2.exports = {
+      runSetupRequiredCheck,
+      CHECK_NAME,
+      EXIT,
+      extractRequiredContexts,
+      classifyObservation,
+      buildProtectionUpdatePayload,
+      detectRulesetRequiredCheck,
+      parseGitHubRemote,
+      resolveOwnerRepo,
+      resolveDefaultBranch,
+      printApplyCommand,
+      protectionGetPath,
+      protectionPutArgs,
+      runGhApi
+    };
+  }
+});
+
+// src/commands/status.js
+var require_status = __commonJS({
+  "src/commands/status.js"(exports2, module2) {
+    "use strict";
+    var chalk = require_source();
+    var { getApiKey } = require_config();
+    var { cloudGetEnforcementStatus } = require_cloud();
+    var { renderJson } = require_json2();
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var USAGE = [
+      "Usage: coderifts status --repo owner/repo",
+      "   or: coderifts status owner/repo",
+      "",
+      "Read-only: prints the cross-layer enforcement report from the CodeRifts API.",
+      "Requires a cloud API key (coderifts login or CODERIFTS_API_KEY)."
+    ].join("\n");
+    function isValidRepo(full) {
+      const parts = String(full || "").split("/");
+      if (parts.length !== 2) return false;
+      const [owner, repo] = parts.map((p) => p.trim());
+      return !!(owner && repo);
+    }
+    function colorStatus(status) {
+      const s = String(status == null ? "" : status);
+      const upper = s.toUpperCase();
+      if (upper === "ENFORCING") return chalk.green(s);
+      if (upper === "ADVISORY" || s === "declared_required" || s === "declared_optional") {
+        return chalk.yellow(s);
+      }
+      if (upper === "ABSENT" || s === "no_config" || s === "not_observable_from_server") {
+        return chalk.dim(s);
+      }
+      if (upper === "UNKNOWN" || s === "unknown") return chalk.red(s);
+      if (upper === "PARTIAL") return chalk.yellow(s);
+      return chalk.white(s);
+    }
+    function residualsFromReport(report) {
+      const residuals = [];
+      const legs = report && report.legs || {};
+      const merge = legs.merge;
+      if (merge) {
+        if (merge.enforcing !== true) {
+          residuals.push(`merge:${merge.status || "UNKNOWN"}`);
+        }
+      } else {
+        residuals.push("merge:missing");
+      }
+      const deploy = legs.deploy;
+      if (deploy) {
+        residuals.push(`deploy:${deploy.status || "unknown"}`);
+      } else {
+        residuals.push("deploy:missing");
+      }
+      const runtime = legs.runtime;
+      if (runtime) {
+        residuals.push(`runtime:${runtime.status || "not_observable_from_server"}`);
+      }
+      const content = legs.content;
+      if (content) {
+        residuals.push(`content:${content.status || "not_observable_from_server"}`);
+      }
+      return residuals;
+    }
+    function renderStatusReport(report) {
+      const lines = [];
+      const repo = report && report.repo || "(unknown repo)";
+      const legs = report && report.legs || {};
+      const summary = report && report.summary || {};
+      lines.push(chalk.bold(`CodeRifts enforcement \u2014 ${repo}`));
+      if (report && report.timestamp) {
+        lines.push(chalk.dim(`  as of ${report.timestamp}`));
+      }
+      lines.push("");
+      const order = [
+        ["Runtime", legs.runtime],
+        ["Merge", legs.merge],
+        ["Deploy", legs.deploy],
+        ["Content", legs.content]
+      ];
+      for (const [label, leg] of order) {
+        if (!leg) {
+          lines.push(`  ${label.padEnd(10)} ${chalk.dim("\u2014")}`);
+          continue;
+        }
+        const statusStr = colorStatus(leg.status);
+        const enforcing = leg.enforcing === true ? chalk.green("enforcing=true") : chalk.dim("enforcing=false");
+        const epi = leg.epistemic_status ? chalk.dim(` [${leg.epistemic_status}]`) : "";
+        lines.push(`  ${label.padEnd(10)} ${statusStr}  ${enforcing}${epi}`);
+        if (leg.note) {
+          lines.push(chalk.dim(`             ${leg.note.slice(0, 100)}${leg.note.length > 100 ? "\u2026" : ""}`));
+        }
+        if (leg.epistemic_note && leg.leg === "deploy") {
+          lines.push(chalk.dim(`             ${leg.epistemic_note.slice(0, 100)}\u2026`));
+        }
+      }
+      const residuals = residualsFromReport(report);
+      lines.push("");
+      lines.push(`  Residuals: ${residuals.length ? residuals.map((r) => chalk.yellow(r)).join(", ") : chalk.green("(none \u2014 merge enforcing; other legs still not server-observable)")}`);
+      if (summary.status) {
+        lines.push("");
+        lines.push(chalk.dim(`  summary.status: ${summary.status}`));
+        if (summary.can_claim_fully_enforced === false) {
+          lines.push(chalk.dim("  can_claim_fully_enforced: false (server ceiling)"));
+        }
+      }
+      lines.push("");
+      lines.push(chalk.dim("  Read-only report. To close gaps:"));
+      lines.push(chalk.dim("    merge  \u2192 coderifts setup-required-check"));
+      lines.push(chalk.dim("    deploy \u2192 coderifts deploy-gate --enforce (CD step)"));
+      lines.push(chalk.dim("    runtime/content \u2192 wire @coderifts/agent-guard in the agent host"));
+      return lines.join("\n");
+    }
+    async function runStatus(options = {}, deps = {}) {
+      const getKey = deps.getApiKey || getApiKey;
+      const fetchStatus = deps.cloudGetEnforcementStatus || cloudGetEnforcementStatus;
+      const log = deps.log || console.log;
+      const errLog = deps.errLog || console.error;
+      const repo = options.repo != null && String(options.repo).trim() ? String(options.repo).trim() : null;
+      if (!repo) {
+        errLog(chalk.red("Error: missing repo"));
+        errLog(USAGE);
+        return { exitCode: 1, error: "missing_repo" };
+      }
+      if (!isValidRepo(repo)) {
+        errLog(chalk.red("Error: repo must be in owner/repo form (e.g. coderifts/app)"));
+        return { exitCode: 1, error: "invalid_repo" };
+      }
+      const apiKey = getKey();
+      if (!apiKey) {
+        errLog(chalk.red("Error: no API key. Run `coderifts login` or set CODERIFTS_API_KEY."));
+        return { exitCode: 1, error: "missing_api_key" };
+      }
+      let report;
+      try {
+        report = await fetchStatus(repo, apiKey);
+      } catch (e) {
+        const msg = e && e.message ? String(e.message) : "request failed";
+        errLog(chalk.red(`Error: ${msg}`));
+        if (e && e.code) errLog(chalk.dim(`  (${e.code})`));
+        return { exitCode: 1, error: msg };
+      }
+      if (options.json) {
+        log(renderJson(report));
+      } else {
+        log(renderStatusReport(report));
+      }
+      return { exitCode: 0, report };
+    }
+    module2.exports = {
+      runStatus,
+      renderStatusReport,
+      residualsFromReport,
+      colorStatus,
+      isValidRepo,
+      USAGE
+    };
+  }
+});
+
 // src/commands/hook.js
 var require_hook = __commonJS({
   "src/commands/hook.js"(exports2, module2) {
@@ -94355,6 +96516,8 @@ ${HOOK_MARKER}
 # Checks API spec changes before pushing.
 # The pre-push hook receives lines on stdin:
 #   <local ref> <local sha> <remote ref> <remote sha>
+#
+# Re-install after CLI upgrades: coderifts hook install
 
 CODERIFTS_API_KEY=$(git config coderifts.apiKey)
 SPEC_PATH=$(git config coderifts.specPath || echo "api/openapi.yaml")
@@ -94365,6 +96528,53 @@ if [ -z "$CODERIFTS_API_KEY" ]; then
   exit 0  # Don't block if not configured
 fi
 
+# --- helpers: three-state git blob read (present | absent | error) ---
+# Sets: BLOB_KIND, BLOB_CONTENT, BLOB_ERR. Never maps unreadable \u2192 empty string.
+git_blob_at() {
+  _ref="$1"
+  _path="$2"
+  BLOB_CONTENT=""
+  BLOB_ERR=""
+  BLOB_KIND=""
+  if ! git rev-parse --verify "$_ref^{commit}" >/dev/null 2>&1; then
+    BLOB_KIND=error
+    BLOB_ERR="GIT_ERROR: cannot resolve ref $_ref"
+    return 1
+  fi
+  _errf=$(mktemp 2>/dev/null || echo "/tmp/coderifts-hook-err.$$")
+  if BLOB_CONTENT=$(git show "$_ref:$_path" 2>"$_errf"); then
+    BLOB_KIND=present
+    rm -f "$_errf"
+    return 0
+  fi
+  _err=$(cat "$_errf" 2>/dev/null)
+  rm -f "$_errf"
+  case "$_err" in
+    *"does not exist in"*|*"exists on disk, but not in"*)
+      BLOB_KIND=absent
+      BLOB_CONTENT=""
+      return 0
+      ;;
+  esac
+  BLOB_KIND=error
+  BLOB_ERR="GIT_ERROR: git show $_ref:$_path failed"
+  return 1
+}
+
+# New-branch baseline: merge-base with default branch (not empty before).
+# Prints merge-base SHA on success; nonzero if none can be resolved.
+resolve_new_branch_base_ref() {
+  _local="$1"
+  for _cand in origin/HEAD origin/main origin/master main master; do
+    _mb=$(git merge-base "$_local" "$_cand" 2>/dev/null) || continue
+    if [ -n "$_mb" ] && [ "$_mb" != "$ZERO" ]; then
+      echo "$_mb"
+      return 0
+    fi
+  done
+  return 1
+}
+
 # Read stdin lines provided by git pre-push
 while read LOCAL_REF LOCAL_SHA REMOTE_REF REMOTE_SHA; do
   # Skip delete pushes
@@ -94372,41 +96582,93 @@ while read LOCAL_REF LOCAL_SHA REMOTE_REF REMOTE_SHA; do
     continue
   fi
 
-  # Get the spec at the local (about-to-be-pushed) commit
-  HEAD_SPEC=$(git show "$LOCAL_SHA:$SPEC_PATH" 2>/dev/null)
-  if [ -z "$HEAD_SPEC" ]; then
+  # after = local (about-to-be-pushed) commit \u2014 three-state
+  if ! git_blob_at "$LOCAL_SHA" "$SPEC_PATH"; then
+    echo "CodeRifts: $BLOB_ERR (after=$SPEC_PATH at $LOCAL_SHA). Fail-closed."
+    exit 1
+  fi
+  if [ "$BLOB_KIND" = "absent" ]; then
     continue  # Spec doesn't exist in local commit, skip
   fi
+  HEAD_SPEC=$BLOB_CONTENT
 
-  # Get the spec at the remote (already-pushed) commit
+  # before = remote tip, or for new branch (zero remote SHA) a merge-base baseline
   if [ "$REMOTE_SHA" = "$ZERO" ]; then
-    # New branch \u2014 no remote baseline, use empty spec
-    BASE_SPEC=""
+    BASE_REF=$(resolve_new_branch_base_ref "$LOCAL_SHA") || {
+      echo "CodeRifts: GIT_ERROR \u2014 cannot resolve merge-base baseline for new branch (tried origin/HEAD, origin/main, origin/master, main, master). Fail-closed."
+      exit 1
+    }
   else
-    BASE_SPEC=$(git show "$REMOTE_SHA:$SPEC_PATH" 2>/dev/null || echo "")
+    BASE_REF=$REMOTE_SHA
   fi
 
-  # If base is empty (new spec or new branch), allow
-  if [ -z "$BASE_SPEC" ]; then
-    echo "CodeRifts: New spec detected, allowing push."
+  if ! git_blob_at "$BASE_REF" "$SPEC_PATH"; then
+    echo "CodeRifts: $BLOB_ERR (before=$SPEC_PATH at $BASE_REF). Fail-closed \u2014 not treating as new spec."
+    exit 1
+  fi
+  if [ "$BLOB_KIND" = "absent" ]; then
+    # Honest NEW_ARTIFACT: path genuinely not at baseline
+    echo "CodeRifts: New artifact (spec absent at baseline $BASE_REF:$SPEC_PATH); allowing push."
     continue
   fi
+  BASE_SPEC=$BLOB_CONTENT
 
   # If specs are identical, nothing to check
   if [ "$BASE_SPEC" = "$HEAD_SPEC" ]; then
     continue
   fi
 
-  echo "CodeRifts: Checking API spec changes..."
+  echo "CodeRifts: Checking API spec changes (baseline $BASE_REF)..."
 
   RESULT=$(curl -s -X POST https://app.coderifts.com/api/v1/diff \\
     -H "Authorization: Bearer $CODERIFTS_API_KEY" \\
     -H "Content-Type: application/json" \\
     -d "{\\"before\\": $(echo "$BASE_SPEC" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))'), \\"after\\": $(echo "$HEAD_SPEC" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))')}")
 
-  DECISION=$(echo $RESULT | python3 -c "import sys,json; print(json.load(sys.stdin).get('omega_decision','ALLOW'))" 2>/dev/null)
-  OMEGA=$(echo $RESULT | python3 -c "import sys,json; print(json.load(sys.stdin).get('omega_api',0))" 2>/dev/null)
-  BREAKING=$(echo $RESULT | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d.get('breaking_changes',[])))" 2>/dev/null)
+  # Prefer closed-set execution_action; omega_decision only when action is absent.
+  # Severity (unchanged): BLOCK/STOP \u2192 exit 1; REQUIRE_APPROVAL/WARN \u2192 warn; unknown action \u2192 halt.
+  DECISION=$(echo "$RESULT" | python3 -c '
+import sys, json
+try:
+    d = json.load(sys.stdin)
+except Exception:
+    print("ALLOW")
+    raise SystemExit(0)
+ea = None
+dr = d.get("decision_result")
+if isinstance(dr, dict) and isinstance(dr.get("execution_action"), str):
+    ea = dr["execution_action"]
+elif isinstance(d.get("execution_action"), str):
+    ea = d["execution_action"]
+closed = {"CONTINUE", "CONTINUE_WITH_MONITORING", "REQUEST_APPROVAL", "STOP"}
+if ea is not None and ea != "":
+    if ea not in closed:
+        print("UNKNOWN")
+        raise SystemExit(0)
+    if ea in ("CONTINUE", "CONTINUE_WITH_MONITORING"):
+        print("ALLOW")
+    elif ea == "STOP":
+        print("BLOCK")
+    else:
+        print("REQUIRE_APPROVAL")
+    raise SystemExit(0)
+od = d.get("omega_decision") or d.get("decision") or "ALLOW"
+print(od)
+' 2>/dev/null)
+  OMEGA=$(echo "$RESULT" | python3 -c "import sys,json; print(json.load(sys.stdin).get('omega_api',0))" 2>/dev/null)
+  BREAKING=$(echo "$RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d.get('breaking_changes',[])))" 2>/dev/null)
+
+  if [ "$DECISION" = "UNKNOWN" ]; then
+    echo ""
+    echo "========================================"
+    echo "  CodeRifts: PUSH BLOCKED"
+    echo "========================================"
+    echo "  Reason: unrecognised execution_action is not permission"
+    echo "  Fail-closed (unknown present action)."
+    echo "========================================"
+    echo ""
+    exit 1
+  fi
 
   if [ "$DECISION" = "BLOCK" ]; then
     echo ""
@@ -94474,6 +96736,12 @@ exit 0
       console.log("");
       console.log("Optionally set spec path (default: api/openapi.yaml):");
       console.log("  git config coderifts.specPath path/to/openapi.yaml");
+      console.log("");
+      console.log("After upgrading the coderifts CLI, re-run this command so the installed");
+      console.log("hook matches the package (already-installed hooks are not auto-updated):");
+      console.log("  coderifts hook install");
+      console.log("");
+      console.log("Agent-using repo? Run: coderifts agent-setup");
     }
     function uninstall() {
       const gitDir = findGitDir();
@@ -94530,6 +96798,437 @@ exit 0
   }
 });
 
+// src/commands/enforce.js
+var require_enforce = __commonJS({
+  "src/commands/enforce.js"(exports2, module2) {
+    "use strict";
+    var chalk = require_source();
+    var { getApiKey } = require_config();
+    var { cloudGetEnforcementStatus } = require_cloud();
+    var {
+      renderStatusReport,
+      isValidRepo
+    } = require_status();
+    var { runSetupRequiredCheck } = require_setup_required_check();
+    var path = require("path");
+    var hookMod = require_hook();
+    var hookInstall = hookMod.install;
+    var isCodeRiftsHook = hookMod.isCodeRiftsHook;
+    var findGitDir = hookMod.findGitDir;
+    var getHookPath = typeof hookMod.getHookPath === "function" ? hookMod.getHookPath : (gitDir) => path.join(gitDir, "hooks", "pre-push");
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var USAGE = [
+      "Usage: coderifts enforce --repo owner/repo [--apply]",
+      "   or: coderifts enforce owner/repo [--apply]",
+      "",
+      "Cross-layer orchestrator: reads enforcement-status, then closes gaps by calling existing",
+      "setup commands (setup-required-check, hook install, deploy-gate guidance).",
+      "",
+      "DRY-RUN BY DEFAULT \u2014 without --apply, prints what WOULD run and mutates NOTHING.",
+      "With --apply, threads apply into each underlying command (their own safety still applies).",
+      "",
+      "Requires a cloud API key for the status read (coderifts login / CODERIFTS_API_KEY).",
+      "Merge apply uses your local `gh` credentials, not the CodeRifts API key."
+    ].join("\n");
+    var AGENT_GUARD_GUIDANCE = [
+      "Runtime is not_observable_from_server \u2014 wire @coderifts/agent-guard in the agent host:",
+      "  - wrap mutating tools with guardToolCall / withCodeRifts",
+      "  - see: https://coderifts.com/docs (agent-guard) and `coderifts agent-setup`",
+      "  Local pre-push hook is complementary (git path), not a substitute for agent-guard."
+    ].join("\n");
+    var DEPLOY_GUIDANCE = [
+      "Deploy is declared-only on the server (never server-observed ENFORCING).",
+      "Add a CD step that runs: coderifts deploy-gate --env <env> --artifact <id> --receipt <file> --enforce",
+      "  (phase-1 default is advisory; --enforce attests ENFORCING for the pipeline).",
+      "Also set policy.require_source_binding: true in .coderifts.yml for the deploy declaration leg."
+    ].join("\n");
+    var CONTENT_GUIDANCE = [
+      "Content/freshness is not_observable_from_server (registry path at resolve time).",
+      "No server-side enforce action is available \u2014 configure registry/freshness in the agent host."
+    ].join("\n");
+    function isMergeEnforcing(leg) {
+      return !!(leg && leg.enforcing === true && String(leg.status).toUpperCase() === "ENFORCING");
+    }
+    function runHookInstall(installFn) {
+      const prev = process.exitCode;
+      process.exitCode = 0;
+      try {
+        installFn();
+        const code = typeof process.exitCode === "number" ? process.exitCode : 0;
+        return {
+          ok: code === 0,
+          detail: code === 0 ? "hook.install completed" : `hook.install set exitCode=${code}`
+        };
+      } catch (e) {
+        return { ok: false, detail: e && e.message || String(e) };
+      } finally {
+        process.exitCode = prev;
+      }
+    }
+    async function runEnforce(options = {}, deps = {}) {
+      const apply = options.apply === true;
+      const getKey = deps.getApiKey || getApiKey;
+      const fetchStatus = deps.cloudGetEnforcementStatus || cloudGetEnforcementStatus;
+      const setupCheck = deps.runSetupRequiredCheck || runSetupRequiredCheck;
+      const installHook = deps.hookInstall || hookInstall;
+      const isHookInstalled = deps.isCodeRiftsHook || isCodeRiftsHook;
+      const findGit = deps.findGitDir || findGitDir;
+      const hookPathOf = deps.getHookPath || getHookPath;
+      const log = deps.log || console.log.bind(console);
+      const errLog = deps.errLog || console.error.bind(console);
+      const repo = options.repo != null && String(options.repo).trim() ? String(options.repo).trim() : null;
+      if (!repo) {
+        errLog(chalk.red("Error: missing repo"));
+        errLog(USAGE);
+        return { exitCode: 1, error: "missing_repo", outcomes: [] };
+      }
+      if (!isValidRepo(repo)) {
+        errLog(chalk.red("Error: repo must be in owner/repo form (e.g. coderifts/app)"));
+        return { exitCode: 1, error: "invalid_repo", outcomes: [] };
+      }
+      const apiKey = getKey();
+      if (!apiKey) {
+        errLog(chalk.red("Error: no API key. Run `coderifts login` or set CODERIFTS_API_KEY."));
+        return { exitCode: 1, error: "missing_api_key", outcomes: [] };
+      }
+      log(chalk.bold(`CodeRifts enforce \u2014 ${repo}`));
+      log(chalk.dim(apply ? "  Mode: --apply (will mutate via underlying commands where applicable)" : "  Mode: dry-run (default) \u2014 no mutations; showing what WOULD run"));
+      log("");
+      let report;
+      try {
+        report = await fetchStatus(repo, apiKey);
+      } catch (e) {
+        const msg = e && e.message ? String(e.message) : "status request failed";
+        errLog(chalk.red(`Error: ${msg}`));
+        return { exitCode: 1, error: msg, outcomes: [] };
+      }
+      const legs = report && report.legs || {};
+      const outcomes = [];
+      if (isMergeEnforcing(legs.merge)) {
+        outcomes.push({
+          layer: "merge",
+          action: "skip",
+          apply,
+          ok: true,
+          detail: `already ENFORCING (status=${legs.merge.status})`
+        });
+        log(chalk.green("  Merge    skip \u2014 already ENFORCING"));
+      } else {
+        const mergeStatus = legs.merge && legs.merge.status || "UNKNOWN";
+        log(chalk.yellow(`  Merge    ${apply ? "apply" : "dry-run"} \u2014 setup-required-check (current: ${mergeStatus})`));
+        try {
+          const r = await setupCheck(
+            { repo, apply: apply === true },
+            {
+              exit: false,
+              log: deps.setupLog || log,
+              logErr: deps.setupLogErr || errLog,
+              ...deps.setupDeps || {}
+            }
+          );
+          const code = r && typeof r.exitCode === "number" ? r.exitCode : 1;
+          outcomes.push({
+            layer: "merge",
+            action: "setup-required-check",
+            apply,
+            ok: code === 0,
+            exitCode: code,
+            detail: r && r.code ? String(r.code) : `exit ${code}`
+          });
+          if (code !== 0) {
+            errLog(chalk.red(`  Merge    failed (exit ${code}${r && r.code ? `, ${r.code}` : ""})`));
+          }
+        } catch (e) {
+          outcomes.push({
+            layer: "merge",
+            action: "setup-required-check",
+            apply,
+            ok: false,
+            detail: e && e.message || String(e)
+          });
+          errLog(chalk.red(`  Merge    error: ${e && e.message || e}`));
+        }
+      }
+      {
+        const gitDir = findGit && findGit();
+        let alreadyHook = false;
+        try {
+          if (gitDir) {
+            const hp = hookPathOf(gitDir);
+            alreadyHook = !!(isHookInstalled && isHookInstalled(hp));
+          }
+        } catch {
+        }
+        if (alreadyHook && apply) {
+          outcomes.push({
+            layer: "runtime",
+            action: "hook.install",
+            apply: true,
+            ok: true,
+            detail: "hook already installed (idempotent skip); not server-observable ENFORCING",
+            server_enforcing: false
+          });
+          log(chalk.green("  Runtime  skip \u2014 CodeRifts hook already installed (local)"));
+        } else if (apply) {
+          log(chalk.yellow("  Runtime  apply \u2014 hook.install (local; not server ENFORCING)"));
+          const r = runHookInstall(installHook);
+          outcomes.push({
+            layer: "runtime",
+            action: "hook.install",
+            apply: true,
+            ok: r.ok,
+            detail: `${r.detail}; not server-observable ENFORCING`,
+            server_enforcing: false
+          });
+          if (!r.ok) errLog(chalk.red(`  Runtime  hook install failed: ${r.detail}`));
+        } else {
+          outcomes.push({
+            layer: "runtime",
+            action: "hook.install",
+            apply: false,
+            ok: true,
+            detail: alreadyHook ? "dry-run: hook already present; would re-run install (idempotent)" : "dry-run: would run coderifts hook install",
+            server_enforcing: false
+          });
+          log(chalk.dim(`  Runtime  dry-run \u2014 would ${alreadyHook ? "re-run" : "run"} hook install (local)`));
+        }
+        log(chalk.dim(AGENT_GUARD_GUIDANCE.split("\n").map((l) => `             ${l}`).join("\n")));
+      }
+      {
+        const st = legs.deploy && legs.deploy.status || "unknown";
+        outcomes.push({
+          layer: "deploy",
+          action: "guidance",
+          apply: false,
+          // never mutates GitHub here
+          ok: true,
+          detail: `server status=${st} (declared-only); print CD step instruction`,
+          server_enforcing: false
+        });
+        log(chalk.dim(`  Deploy   guidance \u2014 current: ${st} (not server-enforcing)`));
+        log(chalk.dim(DEPLOY_GUIDANCE.split("\n").map((l) => `             ${l}`).join("\n")));
+      }
+      {
+        outcomes.push({
+          layer: "content",
+          action: "guidance",
+          apply: false,
+          ok: true,
+          detail: "not_observable_from_server; guidance only",
+          server_enforcing: false
+        });
+        log(chalk.dim("  Content  guidance \u2014 not_observable_from_server"));
+        log(chalk.dim(CONTENT_GUIDANCE.split("\n").map((l) => `             ${l}`).join("\n")));
+      }
+      log("");
+      log(chalk.bold("  Per-layer outcomes"));
+      for (const o of outcomes) {
+        const mark = o.ok ? chalk.green("ok") : chalk.red("FAIL");
+        const mode = o.apply === true ? "apply" : o.action === "skip" ? "skip" : "dry-run";
+        log(`    ${String(o.layer).padEnd(8)} ${mark}  ${mode.padEnd(7)}  ${o.action}  ${chalk.dim(o.detail || "")}`);
+      }
+      log("");
+      log(chalk.bold("  Cross-layer report" + (apply ? " (after actions)" : " (current / dry-run)")));
+      let finalReport = report;
+      if (apply) {
+        try {
+          finalReport = await fetchStatus(repo, apiKey);
+        } catch (e) {
+          errLog(chalk.yellow(`  Warning: re-fetch status failed: ${e && e.message || e}`));
+        }
+      }
+      if (options.json) {
+        log(JSON.stringify({ command: "enforce", apply, repo, outcomes, report: finalReport }, null, 2));
+      } else {
+        log(renderStatusReport(finalReport));
+      }
+      const anyFail = outcomes.some((o) => o.ok === false);
+      return {
+        exitCode: anyFail ? 1 : 0,
+        apply,
+        outcomes,
+        report: finalReport
+      };
+    }
+    module2.exports = {
+      runEnforce,
+      isMergeEnforcing,
+      USAGE,
+      AGENT_GUARD_GUIDANCE,
+      DEPLOY_GUIDANCE,
+      CONTENT_GUIDANCE
+    };
+  }
+});
+
+// src/agent-host-files.embedded.js
+var require_agent_host_files_embedded = __commonJS({
+  "src/agent-host-files.embedded.js"(exports2, module2) {
+    "use strict";
+    var AGENT_HOST_PATHS = Object.freeze([
+      "AGENTS.md",
+      "CLAUDE.md",
+      ".cursor/rules/coderifts.mdc",
+      ".github/copilot-instructions.md",
+      "coderifts-langgraph-policy.js",
+      "openai-agent-instructions.md"
+    ]);
+    var AGENT_HOST_FILES = Object.freeze({
+      "AGENTS.md": '<!-- GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js -->\n\n# CodeRifts agent rules\n\nCall `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\n\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\n\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\n\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\n\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not "proceed with caution" without monitoring.\n\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\n\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\n\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\n\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.\n',
+      "CLAUDE.md": '<!-- GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js -->\n\n# CodeRifts\n\nCall `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\n\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\n\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\n\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\n\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not "proceed with caution" without monitoring.\n\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\n\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\n\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\n\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.\n',
+      ".cursor/rules/coderifts.mdc": '---\ndescription: CodeRifts API governance \u2014 when to preflight and how to branch\nglobs:\nalwaysApply: true\n---\n\n<!-- GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js -->\n\n# CodeRifts\n\nCall `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\n\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\n\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\n\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\n\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not "proceed with caution" without monitoring.\n\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\n\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\n\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\n\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.\n',
+      ".github/copilot-instructions.md": '<!-- GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js -->\n\n# CodeRifts instructions for GitHub Copilot\n\nCall `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\n\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\n\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\n\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\n\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not "proceed with caution" without monitoring.\n\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\n\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\n\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\n\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.\n',
+      "coderifts-langgraph-policy.js": '// GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js\n// System policy string for a LangGraph (or similar) agent. Content is generated;\n// identical rule sentences to AGENTS.md / other formats.\n\'use strict\';\n\nmodule.exports = "Call `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\\n\\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\\n\\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\\n\\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\\n\\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not \\"proceed with caution\\" without monitoring.\\n\\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\\n\\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\\n\\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\\n\\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.";\n',
+      "openai-agent-instructions.md": '<!-- GENERATED from CodeRifts agent-host-rule (single source). Do not edit rule sentences by hand; run: node scripts/generate-agent-host-files.js -->\n\n# CodeRifts agent instructions\n\nCall `preflight_change_set` before merge, deploy, publish, or tool registration when a contract artifact changed (OpenAPI/Swagger, GraphQL, gRPC/protobuf, AsyncAPI, MCP manifest, or agent tool schemas).\n\nSend the complete base-to-head change set: every changed contract artifact with full before and after content. Do not send a single-file subset when other contract files also change.\n\nBranch on `execution_action` only. Do not branch on `decision` and do not branch on `safe_for_agent` (not_for_control_flow_use_execution_action). Canonical `execution_action` values: CONTINUE, CONTINUE_WITH_MONITORING, REQUEST_APPROVAL, STOP.\n\nAn unrecognised `execution_action` is not permission: fail closed (halt or re-preflight). Well-known code: `not_permission_fail_closed`.\n\n`CONTINUE_WITH_MONITORING` requires a wired monitoring sink (`monitoringSinkWired`). It is not "proceed with caution" without monitoring.\n\nDo not call CodeRifts tools for a documentation-only change (README, guides, comments) with no contract artifact content change.\n\nIf you already hold a chain receipt and only need authenticity/lifecycle: `verify_receipt`. If you need a past decision by id: `get_decision_details`. Neither replaces preflight for a new change set.\n\nFor mutating tools, put only the guarded version in the agent\'s tool table; keep the raw handler host-only and unreachable from that table. How you name tools is yours \u2014 this is a reachability property, not a product rename of host tools. CodeRifts cannot see or stop a raw call the host makes outside the table it returns; adopt this as a host convention, not as a guarantee from the package.\n\nCodeRifts reports a governance decision and `execution_action`; it does not by itself block merges. Blocking requires separate repository configuration (required status checks, enforcement) that this rule file does not set.\n'
+    });
+    module2.exports = { AGENT_HOST_FILES, AGENT_HOST_PATHS };
+  }
+});
+
+// src/commands/agent-setup.js
+var require_agent_setup = __commonJS({
+  "src/commands/agent-setup.js"(exports2, module2) {
+    "use strict";
+    var fs = require("fs");
+    var path = require("path");
+    var chalk = require_source();
+    var { AGENT_HOST_FILES, AGENT_HOST_PATHS } = require_agent_host_files_embedded();
+    if (process.env.NO_COLOR) chalk.level = 0;
+    var USAGE = `Usage: coderifts agent-setup [--out <dir>] [--check] [--force]
+
+  --out <dir>   Target directory (default: current working directory)
+  --check       Exit 0 if on-disk files match embedded content; exit 1 on drift
+  --force       Overwrite existing files (default: skip collisions)
+  Unknown flags exit 1 (never silently ignored).
+`;
+    function parseAgentSetupArgs(argv) {
+      const args = argv.slice(2);
+      let out = null;
+      let check = false;
+      let force = false;
+      let i = 0;
+      while (i < args.length && !String(args[i]).startsWith("-")) i += 1;
+      while (i < args.length) {
+        const a = args[i];
+        if (a === "--out") {
+          const v = args[i + 1];
+          if (v == null || v.startsWith("-")) {
+            return { out, check, force, error: `agent-setup: --out requires a path
+${USAGE}` };
+          }
+          out = path.resolve(v);
+          i += 2;
+          continue;
+        }
+        if (a === "--check") {
+          check = true;
+          i += 1;
+          continue;
+        }
+        if (a === "--force") {
+          force = true;
+          i += 1;
+          continue;
+        }
+        if (a.startsWith("-")) {
+          return { out, check, force, error: `agent-setup: unrecognized argument: ${a}
+${USAGE}` };
+        }
+        return { out, check, force, error: `agent-setup: unrecognized argument: ${a}
+${USAGE}` };
+      }
+      return { out, check, force };
+    }
+    function runAgentSetup(options = {}, deps = {}) {
+      const log = deps.log || console.log.bind(console);
+      const logErr = deps.logErr || console.error.bind(console);
+      const doExit = deps.exit !== false;
+      const cwd = deps.cwd || process.cwd();
+      const exists = deps.exists || fs.existsSync.bind(fs);
+      const readFile = deps.readFile || ((p) => fs.readFileSync(p, "utf8"));
+      const writeFile = deps.writeFile || ((p, c) => {
+        fs.mkdirSync(path.dirname(p), { recursive: true });
+        fs.writeFileSync(p, c, "utf8");
+      });
+      let outDir = options.out ? path.resolve(String(options.out)) : cwd;
+      let check = !!options.check;
+      let force = !!options.force;
+      if (deps.argv) {
+        const parsed = parseAgentSetupArgs(deps.argv);
+        if (parsed.error) {
+          logErr(parsed.error.trimEnd());
+          if (doExit) process.exit(1);
+          return { exitCode: 1, code: "USAGE", message: parsed.error };
+        }
+        if (parsed.out) outDir = parsed.out;
+        check = parsed.check;
+        force = parsed.force;
+      }
+      const files = deps.files || AGENT_HOST_FILES;
+      const relPaths = deps.paths || AGENT_HOST_PATHS;
+      if (check) {
+        let stale = false;
+        for (const rel of relPaths) {
+          const fp = path.join(outDir, rel);
+          const expected = files[rel];
+          if (!exists(fp)) {
+            logErr(chalk.red(`agent-setup --check: missing ${rel}`));
+            stale = true;
+            continue;
+          }
+          const onDisk = readFile(fp);
+          if (onDisk !== expected) {
+            logErr(chalk.red(`agent-setup --check: drift ${rel}`));
+            stale = true;
+          }
+        }
+        if (stale) {
+          logErr("Run: coderifts agent-setup --out " + outDir + " --force");
+          if (doExit) process.exit(1);
+          return { exitCode: 1, code: "DRIFT", outDir };
+        }
+        log(chalk.green(`agent-setup: up to date (${outDir}, ${relPaths.length} files)`));
+        if (doExit) process.exit(0);
+        return { exitCode: 0, code: "UP_TO_DATE", outDir };
+      }
+      const summary = { written: [], skipped: [], forced: [] };
+      for (const rel of relPaths) {
+        const fp = path.join(outDir, rel);
+        const content = files[rel];
+        if (exists(fp) && !force) {
+          summary.skipped.push(rel);
+          continue;
+        }
+        if (exists(fp) && force) summary.forced.push(rel);
+        writeFile(fp, content);
+        summary.written.push(rel);
+      }
+      if (!options.json) {
+        log(chalk.bold("CodeRifts agent-setup"));
+        log(`  target: ${outDir}`);
+        for (const rel of summary.written) {
+          const tag = summary.forced.includes(rel) ? "overwrote" : "wrote";
+          log(chalk.green(`  ${tag}:   ${rel}`));
+        }
+        for (const rel of summary.skipped) {
+          log(chalk.yellow(`  skipped: ${rel} (exists; use --force to overwrite)`));
+        }
+        log("");
+        log(chalk.dim(`  ${summary.written.length} written, ${summary.skipped.length} skipped`));
+      }
+      if (doExit) process.exit(0);
+      return { exitCode: 0, code: "OK", outDir, ...summary };
+    }
+    module2.exports = {
+      runAgentSetup,
+      parseAgentSetupArgs,
+      AGENT_HOST_FILES,
+      AGENT_HOST_PATHS,
+      USAGE
+    };
+  }
+});
+
 // corpus/vectors-mcp-fpfn.json
 var require_vectors_mcp_fpfn = __commonJS({
   "corpus/vectors-mcp-fpfn.json"(exports2, module2) {
@@ -95843,6 +98542,7 @@ var require_mcp_poisoning_detector = __commonJS({
   "../../src/mcp-poisoning-detector.js"(exports2, module2) {
     "use strict";
     var SENSITIVE_OBJECT = "(secrets?|credentials?|tokens?|passwords?|api[\\s_-]?keys?|private[\\s_-]?keys?|env|environment|conversation|chat\\s*history|context|user\\s*data|session)";
+    var SENSITIVE_SCOPE = "(any|all|every|stored|user\\'?s?|the\\s+user\\'?s?|all\\s+environment)";
     var SUSPICIOUS_PATTERNS = [
       // Injection / "ignore your instructions" family. The trailing object
       // (instructions|rules|prompts|context) is OPTIONAL so "ignore previous and ..."
@@ -95855,6 +98555,21 @@ var require_mcp_poisoning_detector = __commonJS({
       /exfiltrate|steal|leak|send\s+to\s+external/i,
       // Exfiltration-intent family: an action verb targeting a sensitive payload.
       /\b(send|forward|copy|upload|post|transmit|exfiltrate|leak)\b[\s\S]{0,40}?\b(conversation|chat|history|context|messages?|credentials?|secrets?|tokens?|api\s*keys?|keys?|passwords?|data)\b/i,
+      // Return/echo scoped sensitive material without a path ("return any stored credentials").
+      // Scope word required — bare "return the new API token" must stay quiet.
+      new RegExp(
+        "\\b(return|echo|reveal|expose|send)\\b[\\s\\S]{0,30}?\\b" + SENSITIVE_SCOPE + "\\s+(secrets?|credentials?|tokens?|passwords?|private[\\s_-]?keys?|environment\\s+variables?|env)\\b",
+        "i"
+      ),
+      // Retrieve private-key material + echo/return (intent without a filesystem path).
+      // Narrow: requires both a retrieve-class verb and an echo/return/reveal verb around key material.
+      /\b(retrieve|fetch|extract|obtain|collect)\b[\s\S]{0,60}?\b(private[\s_-]?keys?(?:\s+material)?|secret[\s_-]?keys?|key\s+material)\b[\s\S]{0,50}?\b(echo|return|send|reveal|expose)\b/i,
+      // Outbound destination without a named secret: exfil-shaped phrasing + http(s) URL.
+      // Bare URL alone stays quiet (legit tools reference docs / configured webhook URLs).
+      // "Sends the result to https://hooks…" (tool purpose) must NOT fire — requires "a copy"
+      // or "also send" as the exfil marker, not mere "send … to <url>".
+      /\b(send|forward|post|upload|transmit)\s+a\s+copy\b[\s\S]{0,50}?https?:\/\//i,
+      /\balso\s+send\b[\s\S]{0,60}?https?:\/\//i,
       /execute\s+(shell|command|code|system)/i,
       /bypass\s+(auth|security|validation|filter)/i,
       /override\s+(safety|policy|rules?)/i,
@@ -95866,8 +98581,8 @@ var require_mcp_poisoning_detector = __commonJS({
       /return\s+secret|exfiltrat|leak\s+data/i
     ];
     var URL_PATTERN = /https?:\/\/[^\s)'"]+/i;
-    var SENSITIVE_PATH_PATTERN = /(~\/\.ssh|~\/\.cursor|~\/\.aws|\.aws\/|\.env\b|\/etc\/|mcp\.json|credentials|id_rsa|\.ssh\/|private[\s_-]?keys?)/i;
-    var CONTENT_MOVE_VERB_PATTERN = /\b(pass|send|return|forward|include|read|upload|post|transmit|copy|exfiltrate|leak)\b/i;
+    var SENSITIVE_PATH_PATTERN = /(~\/\.ssh|~\/\.cursor|~\/\.aws|\.aws\/|\.env\b|\/etc\/|mcp\.json|id_rsa|\.ssh\/|\/credentials(?:\.|\/)|credentials\.(?:json|txt|pem|env)|\.credentials\b)/i;
+    var CONTENT_MOVE_VERB_PATTERN = /\b(pass|send|return|forward|include|read|upload|post|transmit|copy|exfiltrate|leak|echo|reveal|expose)\b/i;
     var BASE64_BLOB_PATTERN = /[A-Za-z0-9+/]{40,}={0,2}/;
     function isLikelyBase64(s) {
       if (/=$/.test(s)) return true;
@@ -96406,6 +99121,25 @@ program.command("deploy-gate").description("Gate a deploy on the current { envir
   const { runDeployGate } = require_deploy_gate2();
   await runDeployGate(options);
 });
+program.command("publish-gate").description("Gate npm publish on contract-artifact preflight (before=git baseline, after=working tree)").option("--spec <path>", "Contract artifact path (default: git config coderifts.specPath or api/openapi.yaml)").option("--json", "Machine-readable JSON result").action(async (options) => {
+  const { runPublishGate } = require_publish_gate();
+  const result = await runPublishGate(options);
+  const code = result && typeof result.exitCode === "number" ? result.exitCode : 1;
+  process.exitCode = code;
+  process.exit(code);
+});
+program.command("registry-gate [dir]").description("Admit a directory of OpenAPI specs via local registry validation (CI gate, no cloud)").option("--glob <pattern>", "Filter discovered paths with agent-guard matchGlob (relative to dir)").option("--errors-only", "Fail only on ERROR severity (warnings are printed, exit 0)").option("--warn-only", "Advisory: print all findings, always exit 0").action((dir, options) => {
+  const { runRegistryGate } = require_registry_gate();
+  const result = runRegistryGate({
+    dir: dir || ".",
+    glob: options.glob,
+    errorsOnly: !!options.errorsOnly,
+    warnOnly: !!options.warnOnly
+  });
+  const code = result && typeof result.exitCode === "number" ? result.exitCode : 1;
+  process.exitCode = code;
+  process.exit(code);
+});
 program.command("init [template]").description("Generate a .coderifts.yml from a policy template (startup, growth, fintech, public-api, microservices)").action(async (template) => {
   const { init } = require_init();
   await init(template);
@@ -96414,6 +99148,38 @@ program.command("login").description("Save your API key for cloud features").act
   const { login } = require_login();
   await login();
 });
+program.command("setup-required-check").description('Guide setup of required status check "CodeRifts / contract-gate" (uses gh, your credentials)').option("--branch <name>", "Branch to protect (default: repo default branch)").option("--repo <owner/repo>", "Override owner/repo (default: git remote origin)").option("--apply", "Apply the protection change (default: print the exact gh command only)").option("--json", "Machine-readable JSON result").action(async (options) => {
+  const { runSetupRequiredCheck } = require_setup_required_check();
+  const result = await runSetupRequiredCheck(options);
+  if (result && typeof result.exitCode === "number") {
+    process.exitCode = result.exitCode;
+  }
+});
+program.command("status [repo]").description("Show cross-layer enforcement status (Runtime / Merge / Deploy) for a repo \u2014 read-only").option("--repo <owner/repo>", "Repository (owner/repo); also accepted as a positional argument").option("--json", "Machine-readable JSON (raw API body)").action(async (repoPositional, options) => {
+  const { runStatus } = require_status();
+  const result = await runStatus({
+    ...options,
+    repo: options.repo || repoPositional || null
+  });
+  if (result && typeof result.exitCode === "number") {
+    process.exitCode = result.exitCode;
+  }
+});
+program.command("enforce [repo]").description("Close enforcement gaps by chaining setup-required-check / hook / deploy guidance (dry-run default; use --apply to mutate)").option("--repo <owner/repo>", "Repository (owner/repo); also accepted as a positional argument").option("--apply", "Actually run underlying setup commands (default: dry-run only)").option("--json", "Machine-readable JSON result").action(async (repoPositional, options) => {
+  const { runEnforce } = require_enforce();
+  const result = await runEnforce({
+    ...options,
+    repo: options.repo || repoPositional || null,
+    apply: !!options.apply
+  });
+  if (result && typeof result.exitCode === "number") {
+    process.exitCode = result.exitCode;
+  }
+});
+program.command("agent-setup").description("Write AGENTS.md / CLAUDE.md / Cursor / Copilot / LangGraph / OpenAI agent rule files").option("--out <dir>", "Target directory (default: current working directory)").option("--check", "Exit 0 if on-disk files match embedded content; exit 1 on drift").option("--force", "Overwrite existing files (default: skip collisions)").action((options) => {
+  const { runAgentSetup } = require_agent_setup();
+  runAgentSetup(options, { exit: true });
+});
 var hookCmd = program.command("hook").description("Manage the CodeRifts pre-push Git hook");
 hookCmd.command("install").description("Install the CodeRifts pre-push hook in the current Git repo").action(() => {
   const { install } = require_hook();
@@ -96432,7 +99198,11 @@ corpusCmd.command("verify", { isDefault: true }).description("Evaluate every tru
   const { corpusVerify } = require_corpus();
   corpusVerify(options);
 });
-program.parse();
+program.parseAsync(process.argv).catch((err) => {
+  console.error(err);
+  process.exitCode = typeof process.exitCode === "number" && process.exitCode !== 0 ? process.exitCode : 1;
+  process.exit(process.exitCode);
+});
 /*! Bundled license information:
 
 safe-buffer/index.js: