feat(generator): compile the M1 model closure

Directory.Build.props

@@ -105,6 +105,10 @@
   <!-- Downlevel support: Polyfill (source-only, internal) supplies the compiler attributes
        C# 14 needs on netstandard2.0/net472 plus BCL API polyfills (Stream Memory overloads,
        Task.WaitAsync, ...). Upstream guidance: reference it on ALL TFMs, not just downlevel. -->
+  <PropertyGroup>
+    <PolyArgumentExceptions>true</PolyArgumentExceptions>
+  </PropertyGroup>
+
   <ItemGroup>
     <PackageReference Include="Polyfill">
       <PrivateAssets>all</PrivateAssets>

Directory.Build.targets

@@ -0,0 +1,8 @@
+<Project>
+  <!-- A partial generated SDK surface blocks every publishable package, including Extensions. -->
+  <Target Name="RefuseIncompleteGenerationPack"
+          BeforeTargets="GenerateNuspec"
+          Condition="'$(IsPackable)' == 'true' And Exists('$(MSBuildThisFileDirectory)src/OpenCode.Sdk/.generation-incomplete')">
+    <Error Text="Packages cannot be created while src/OpenCode.Sdk/.generation-incomplete records pending operations." />
+  </Target>
+</Project>

Directory.Packages.props

@@ -3,6 +3,7 @@
     <!-- third-party analyzers -->
     <PackageVersion Include="Meziantou.Analyzer" Version="3.0.140" />
     <PackageVersion Include="Microsoft.CodeAnalysis.BannedApiAnalyzers" Version="5.6.0" />
+    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.6.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.302" />
     <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="18.7.23" />
     <PackageVersion Include="Roslynator.Analyzers" Version="4.15.0" />
@@ -17,6 +18,7 @@
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.10" />
     <PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.10" />
     <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.301" />
+    <PackageVersion Include="System.Text.Json" Version="10.0.11" />
     <!-- downlevel targets (netstandard2.0 / net472) -->
     <PackageVersion Include="Microsoft.NETFramework.ReferenceAssemblies" Version="1.0.3" />
     <PackageVersion Include="Polyfill" Version="11.0.2" />
@@ -27,6 +29,7 @@
     <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.17.0" />
     <PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.17.0" />
     <!-- third-party packages -->
+    <PackageVersion Include="CliWrap" Version="3.10.4" />
     <PackageVersion Include="Microsoft.OpenApi" Version="3.9.0" />
     <PackageVersion Include="Spectre.Console" Version="0.55.0" />
     <PackageVersion Include="Spectre.Console.Cli" Version="0.55.0" />

docs/ROADMAP.md

@@ -1,22 +1,18 @@
 # Roadmap
 
-Date: 2026-08-11
+Date: 2026-08-12
 
 Operational state: what is done, what is next, what is open. This file shrinks as work lands.
 Evergreen rules and locked decisions live in `../AGENTS.md`; decision records in `adr/`.
 
 ## Status
 
-Structural skeleton, three-OS CI, the pinned spec snapshot, and the Slice 0 tooling skeleton
-are in place. The generator-complexity checkpoint (research doc 13; research log session 15)
-redirected the build-out: the design specs under `superpowers/` are vision/reference
-documents (the sealed surface is the ADRs plus `AGENTS.md`), the slice map is retired in
-favor of the milestone list below, and ingestion policy moved from exhaustive DOM
-surveillance to semantic-risk fail-closed validation. Slice 1 closed lean on
-`feature/slice-01-ingestion-specir`: `ISpecIngestion` projects the complete pin (both
-surfaces, landmark smoke green, deterministic) behind the Microsoft.OpenApi boundary
-guards; `generate` remains a fail-loud stub until M1's compiler arc. Issue #2 closes with
-that branch's PR.
+Structural skeleton, three-OS CI, the pinned spec snapshot, Slice 0 tooling, and complete-pin
+SpecIR ingestion are in place. M1's compiler arc selects the two walking-skeleton operations,
+binds their reachable closure, emits committed Roslyn-built models plus source-generated JSON
+metadata, and owns deterministic `generate` / `generate --verify` writes through a guarded
+manifest. The partial-operation marker blocks every package while breadth remains incomplete.
+The next M1 arc is the minimal transport and callable client with typed errors and `NoThrow`.
 
 ## Milestones