@documentation-robotics/cli 0.1.13 → 0.3.0

package/dist/server/schemas.js

@@ -146,6 +146,13 @@ const SimpleWSMessageSchema = z.object({
 }), ChangesetsListSchema = z.object({
   version: z.string(),
   changesets: z.record(z.string(), ChangesetMetadataSchema)
+}), ChangesetActionResultSchema = z.object({
+  id: z.string(),
+  name: z.string(),
+  status: z.enum(["staged", "committed", "discarded"]),
+  committed: z.number().optional().describe("Changes applied to the model (commit only)"),
+  skipped: z.number().optional().describe("Changes skipped as already present (commit only)"),
+  failed: z.number().optional().describe("Changes that failed to apply (commit only)")
 }), ChangesetDetailSchema = z.object({
   id: z.string(),
   name: z.string(),
@@ -177,6 +184,7 @@ export {
   AnnotationSchema,
   AnnotationUpdateSchema,
   AnnotationsListSchema,
+  ChangesetActionResultSchema,
   ChangesetDetailSchema,
   ChangesetMetadataSchema,
   ChangesetsListSchema,

package/dist/server/schemas.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/server/schemas.ts"],
-  "sourcesContent": ["import { z } from '@hono/zod-openapi';\nimport { CANONICAL_LAYER_NAMES } from '../core/layers.js';\n\n/**\n * Branded type for ElementId\n * Provides compile-time safety by distinguishing ElementId from plain strings\n * Use with parseElementId() to validate and brand a string at runtime\n *\n * This type is exported as a public API contract for external consumers who want\n * to use strong typing in their code. However, internal server.ts implementation\n * uses plain string keys in Maps and other internal structures for simplicity.\n *\n * USAGE PATTERNS:\n * - External/public APIs: Type function parameters with ElementId for contract clarity\n * - Internal state: Use plain strings in Maps/Sets for performance and simplicity\n * - Validation: Use parseElementId() to validate untrusted input\n * - Type guards: Use isElementId() for optional runtime type checking\n *\n * Example:\n *   const brandedId = parseElementId(\"motivation.goal.customer-satisfaction\");\n *   function processElement(id: ElementId) { ... } // Type-safe public API\n *\n *   // Internal implementation can use plain strings:\n *   private annotations: Map<string, Annotation> = new Map();\n */\nexport type ElementId = string & { readonly __brand: 'ElementId' };\n\n/**\n * Parse and validate a string as an ElementId\n * Returns a branded type for compile-time type safety\n */\nexport function parseElementId(input: string): ElementId {\n  const result = ElementIdSchema.safeParse(input);\n  if (!result.success) {\n    const errorMessages = result.error.issues.map(issue => issue.message).join('; ');\n    throw new Error(`Invalid element ID: ${errorMessages}`);\n  }\n  return result.data as ElementId;\n}\n\n/**\n * Type guard for ElementId\n * Use with function parameters for optional compile-time checking\n */\nexport function isElementId(value: unknown): value is ElementId {\n  return typeof value === 'string' && ElementIdSchema.safeParse(value).success;\n}\n\n// WebSocket message schemas with runtime validation\nexport const SimpleWSMessageSchema = z.object({\n  type: z.enum(['subscribe', 'annotate', 'ping']),\n  topics: z.array(z.string()).optional(),\n  annotation: z.object({\n    elementId: z.string(),\n    author: z.string(),\n    text: z.string(),\n    timestamp: z.string(),\n  }).optional(),\n});\n\nexport const JSONRPCRequestSchema = z.object({\n  jsonrpc: z.literal('2.0'),\n  method: z.string(),\n  params: z.unknown().optional(),\n  id: z.union([z.string(), z.number()]).optional(),\n});\n\nexport const JSONRPCResponseSchema = z.object({\n  jsonrpc: z.literal('2.0'),\n  result: z.unknown().optional(),\n  error: z.object({\n    code: z.number(),\n    message: z.string(),\n    data: z.unknown().optional(),\n  }).optional(),\n  id: z.union([z.string(), z.number(), z.null()]),\n}).refine(\n  (data) => (data.result !== undefined) !== (data.error !== undefined),\n  {\n    message: \"JSON-RPC 2.0 response must contain either 'result' or 'error', not both\",\n    path: [\"response\"],\n  }\n);\n\nexport const WSMessageSchema = z.union([\n  SimpleWSMessageSchema,\n  JSONRPCRequestSchema,\n  JSONRPCResponseSchema,\n]);\n\n// Base schemas for common types\n// Enforces three-part element ID format: layer.type.name\n// - layer: canonical layer name (e.g., motivation, api, data-store)\n// - type: lowercase element type (e.g., goal, endpoint, entity)\n// - name: kebab-case element name (e.g., customer-satisfaction)\n//\n// Example valid IDs:\n// - motivation.goal.customer-satisfaction\n// - api.endpoint.create-order\n// - data-store.table.user-profile\n// - a.b.c (minimal single-character segments, valid for testing purposes)\n// - ux.a.test (two-character segments are valid)\nexport const ElementIdSchema = z.string()\n  .min(1, 'Element ID is required')\n  .regex(\n    /^[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*$/,\n    'Invalid element ID format. Must be: layer.type.name (e.g., motivation.goal.customer-satisfaction)'\n  );\n\nexport const TimestampSchema = z.string().datetime();\n\n/**\n * Tag validation schema.\n *\n * Format: lowercase alphanumeric with optional internal hyphens\n * Pattern: /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/\n *\n * Constraints:\n * - Cannot start or end with hyphens: Prevents URL slugification issues and confusion with CLI flags (e.g., --tag-name)\n * - Single character tags allowed (e.g., \"a\", \"1\") via the second alternation\n * - Matches common tag conventions (GitHub labels, NPM tags, etc.)\n *\n * Examples:\n * - \u2705 \"api-critical\"\n * - \u2705 \"high-priority\"\n * - \u2705 \"p0\"\n * - \u274C \"-api-critical\" (starts with hyphen)\n * - \u274C \"api-critical-\" (ends with hyphen)\n * - \u274C \"API-CRITICAL\" (uppercase not allowed)\n */\nexport const TagSchema = z.string()\n  .min(1, 'Tag cannot be empty')\n  .max(50, 'Tag too long')\n  .regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, 'Tag must contain only lowercase letters, digits, and hyphens');\n\n// Annotation schemas - for creating annotations\nexport const AnnotationCreateSchema = z.object({\n  elementId: ElementIdSchema,\n  author: z.string()\n    .min(1, 'Author is required')\n    .max(100, 'Author name too long')\n    .optional()\n    .default('Anonymous'),\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long'),\n  tags: z.array(TagSchema).optional().default([]),\n}).strict();\n\n// Annotation schemas - for updating annotations\nexport const AnnotationUpdateSchema = z.object({\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long')\n    .optional(),\n  tags: z.array(TagSchema).optional(),\n  resolved: z.boolean().optional(),\n}).strict().refine(\n  (obj) => Object.keys(obj).some(key => obj[key as keyof typeof obj] !== undefined),\n  'At least one field must be provided for update'\n);\n\n// Annotation schemas - for creating replies\nexport const AnnotationReplyCreateSchema = z.object({\n  author: z.string()\n    .min(1, 'Author is required')\n    .max(100, 'Author name too long'),\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long'),\n}).strict();\n\n// Layer name schema - validates against canonical layer names\nexport const LayerNameSchema = z.enum(CANONICAL_LAYER_NAMES, {\n  message: `Invalid layer name. Must be one of: ${CANONICAL_LAYER_NAMES.join(', ')}`\n});\n\n// ID schema - validates generic IDs for annotations, changesets, and other non-element identifiers\n// Accepts lowercase alphanumeric characters, hyphens, and underscores\n// Note: Different from ElementIdSchema which requires dot-separated format (layer.type.name)\n//\n// Lowercase-only constraint rationale:\n// - Provides case-insensitive ID lookups by normalizing to lowercase at validation time\n// - Prevents collisions (MyId vs myid cannot coexist in same namespace)\n// - System-generated IDs comply; externally-generated uppercase IDs will be rejected\n// - If external systems need uppercase support, IDs should be normalized before API transmission\n// - Consider implementing ID normalization in API middleware if integration with external systems is required\nexport const IdSchema = z.string()\n  .min(1, 'ID is required')\n  .regex(/^[a-z0-9_-]+$/, 'Invalid ID format. Must contain only lowercase alphanumeric characters, hyphens, and underscores');\n\n// Annotation filter schema - validates query parameters for GET /api/annotations\n// Currently only supports filtering by elementId\n// UNIMPLEMENTED FILTERS: author, tags, and resolved fields are defined here but filtering is not yet implemented.\n// See /workspace/cli/src/server/server.ts:650-651 for implementation details.\n// These fields are reserved for future extensibility and currently ignored by the handler.\nexport const AnnotationFilterSchema = z.object({\n  elementId: ElementIdSchema.optional(),\n  author: z.string().optional(),\n  tags: z.string().optional(),\n  resolved: z.enum(['true', 'false']).optional(),\n}).strict(); // Validate only declared fields\n\n// Response schemas for OpenAPI documentation\nexport const ErrorResponseSchema = z.object({\n  error: z.string().describe('Error message'),\n});\n\nexport const HealthResponseSchema = z.object({\n  status: z.string().describe('Server health status'),\n  version: z.string().describe('API version'),\n});\n\nexport const AnnotationSchema = z.object({\n  id: z.string().describe('Annotation ID'),\n  elementId: ElementIdSchema.describe('Target element ID'),\n  author: z.string().describe('Author name'),\n  content: z.string().describe('Annotation content'),\n  createdAt: z.string().describe('Creation timestamp'),\n  updatedAt: z.string().optional().describe('Last update timestamp'),\n  tags: z.array(z.string()).optional().describe('Annotation tags'),\n  resolved: z.boolean().optional().describe('Resolution status'),\n  replies: z.array(z.object({\n    id: z.string(),\n    author: z.string(),\n    content: z.string(),\n    createdAt: z.string(),\n  })).optional().describe('Annotation replies'),\n});\n\nexport const AnnotationReplySchema = z.object({\n  id: z.string().describe('Reply ID'),\n  author: z.string().describe('Author name'),\n  content: z.string().describe('Reply content'),\n  createdAt: z.string().describe('Creation timestamp'),\n});\n\nexport const AnnotationsListSchema = z.object({\n  annotations: z.array(AnnotationSchema).describe('List of annotations'),\n});\n\nexport const AnnotationRepliesSchema = z.object({\n  replies: z.array(AnnotationReplySchema).describe('List of replies'),\n});\n\nexport const LayerResponseSchema = z.object({\n  name: z.string().describe('Layer name'),\n  elements: z.array(z.object({}).passthrough()).describe('Layer elements (each element is an object with id, name, type, and properties)'),\n  elementCount: z.number().describe('Total element count'),\n});\n\nexport const GraphNodeSchema = z.object({\n  id: z.string().describe('Element ID (UUID)'),\n  spec_node_id: z.string().describe('Spec node type ID (e.g. motivation.goal)'),\n  type: z.string().describe('Element type (e.g. goal, endpoint)'),\n  layer_id: z.string().describe('Layer this element belongs to'),\n  name: z.string().describe('Element display name'),\n  description: z.string().optional().describe('Element description'),\n  attributes: z.record(z.string(), z.unknown()).optional()\n    .describe('Typed attribute bag per spec-node schema'),\n  source_reference: z.object({\n    provenance: z.enum(['extracted', 'manual', 'inferred', 'generated']),\n    locations: z.array(z.object({\n      file: z.string(),\n      symbol: z.string().optional(),\n    })),\n    repository: z.object({\n      url: z.string().optional(),\n      commit: z.string().optional(),\n    }).optional(),\n  }).optional().describe('Source code provenance linking this element to its implementation'),\n  metadata: z.object({\n    created_at: z.string().optional(),\n    updated_at: z.string().optional(),\n    created_by: z.string().optional(),\n    version: z.number().optional(),\n  }).optional().describe('Element lifecycle metadata (timestamps, version)'),\n  properties: z.record(z.string(), z.unknown()).optional()\n    .describe('Legacy property bag (deprecated \u2014 prefer attributes)'),\n});\n\nexport const GraphLinkSchema = z.object({\n  id: z.string().describe('Stable link ID derived from source, target, and type'),\n  source: z.string().describe('Source element ID'),\n  target: z.string().describe('Target element ID'),\n  type: z.string().describe('Relationship predicate or reference type'),\n  // Intra-layer links carry layer_id; cross-layer links carry source/target layer IDs\n  layer_id: z.string().optional().describe('Layer ID for intra-layer relationships'),\n  source_layer_id: z.string().optional().describe('Source layer ID for cross-layer references'),\n  target_layer_id: z.string().optional().describe('Target layer ID for cross-layer references'),\n});\n\nexport const ModelResponseSchema = z.object({\n  nodes: z.array(GraphNodeSchema).describe('All architecture elements across all layers'),\n  links: z.array(GraphLinkSchema).describe('Intra-layer relationships and cross-layer references'),\n});\n\nexport const SpecResponseSchema = z.object({\n  version: z.string().describe('Spec version'),\n  type: z.string().describe('Response type'),\n  description: z.string().describe('Response description'),\n  source: z.string().describe('Schema source'),\n  schemas: z.record(z.string(), z.unknown()).describe('JSON schema definitions (each schema is a JSON Schema object)'),\n  schemaCount: z.number().describe('Number of schemas'),\n});\n\nexport const ChangesetMetadataSchema = z.object({\n  name: z.string(),\n  status: z.enum(['staged', 'committed', 'discarded'] as const),\n  created: z.string(),\n  changes_count: z.number(),\n});\n\nexport const ChangesetsListSchema = z.object({\n  version: z.string(),\n  changesets: z.record(z.string(), ChangesetMetadataSchema),\n});\n\nexport const ChangesetDetailSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().optional(),\n  status: z.enum(['staged', 'committed', 'discarded'] as const),\n  created: z.string(),\n  modified: z.string(),\n  baseSnapshot: z.string().optional(),\n  stats: z.object({\n    additions: z.number(),\n    modifications: z.number(),\n    deletions: z.number(),\n  }),\n  changes: z.array(z.object({\n    type: z.enum(['add', 'update', 'delete'] as const),\n    elementId: z.string(),\n    layerName: z.string(),\n    timestamp: z.string().optional(),\n    before: z.unknown().optional().describe('Previous element state (for update/delete operations)'),\n    after: z.unknown().optional().describe('New element state (for add/update operations)'),\n  })),\n});\n\n// Type inference from input schemas\nexport type AnnotationCreate = z.infer<typeof AnnotationCreateSchema>;\nexport type AnnotationUpdate = z.infer<typeof AnnotationUpdateSchema>;\nexport type AnnotationReplyCreate = z.infer<typeof AnnotationReplyCreateSchema>;\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,6BAA6B;AA8BhC,SAAU,eAAe,OAAa;AAC1C,QAAM,SAAS,gBAAgB,UAAU,KAAK;AAC9C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAS,MAAM,OAAO,EAAE,KAAK,IAAI;AAC/E,UAAM,IAAI,MAAM,uBAAuB,aAAa,EAAE;EACxD;AACA,SAAO,OAAO;AAChB;AAMM,SAAU,YAAY,OAAc;AACxC,SAAO,OAAO,SAAU,YAAY,gBAAgB,UAAU,KAAK,EAAE;AACvE;AAGO,MAAM,wBAAwB,EAAE,OAAO;EAC5C,MAAM,EAAE,KAAK,CAAC,aAAa,YAAY,MAAM,CAAC;EAC9C,QAAQ,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;EACpC,YAAY,EAAE,OAAO;IACnB,WAAW,EAAE,OAAM;IACnB,QAAQ,EAAE,OAAM;IAChB,MAAM,EAAE,OAAM;IACd,WAAW,EAAE,OAAM;GACpB,EAAE,SAAQ;CACZ,GAEY,uBAAuB,EAAE,OAAO;EAC3C,SAAS,EAAE,QAAQ,KAAK;EACxB,QAAQ,EAAE,OAAM;EAChB,QAAQ,EAAE,QAAO,EAAG,SAAQ;EAC5B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,CAAC,EAAE,SAAQ;CAC/C,GAEY,wBAAwB,EAAE,OAAO;EAC5C,SAAS,EAAE,QAAQ,KAAK;EACxB,QAAQ,EAAE,QAAO,EAAG,SAAQ;EAC5B,OAAO,EAAE,OAAO;IACd,MAAM,EAAE,OAAM;IACd,SAAS,EAAE,OAAM;IACjB,MAAM,EAAE,QAAO,EAAG,SAAQ;GAC3B,EAAE,SAAQ;EACX,IAAI,EAAE,MAAM,CAAC,EAAE,OAAM,GAAI,EAAE,OAAM,GAAI,EAAE,KAAI,CAAE,CAAC;CAC/C,EAAE,OACD,CAAC,SAAU,KAAK,WAAW,WAAgB,KAAK,UAAU,SAC1D;EACE,SAAS;EACT,MAAM,CAAC,UAAU;CAClB,GAGU,kBAAkB,EAAE,MAAM;EACrC;EACA;EACA;CACD,GAcY,kBAAkB,EAAE,OAAM,EACpC,IAAI,GAAG,wBAAwB,EAC/B,MACC,uDACA,mGAAmG,GAG1F,kBAAkB,EAAE,OAAM,EAAG,SAAQ,GAqBrC,YAAY,EAAE,OAAM,EAC9B,IAAI,GAAG,qBAAqB,EAC5B,IAAI,IAAI,cAAc,EACtB,MAAM,2CAA2C,8DAA8D,GAGrG,yBAAyB,EAAE,OAAO;EAC7C,WAAW;EACX,QAAQ,EAAE,OAAM,EACb,IAAI,GAAG,oBAAoB,EAC3B,IAAI,KAAK,sBAAsB,EAC/B,SAAQ,EACR,QAAQ,WAAW;EACtB,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB;EAC/B,MAAM,EAAE,MAAM,SAAS,EAAE,SAAQ,EAAG,QAAQ,CAAA,CAAE;CAC/C,EAAE,OAAM,GAGI,yBAAyB,EAAE,OAAO;EAC7C,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB,EAC5B,SAAQ;EACX,MAAM,EAAE,MAAM,SAAS,EAAE,SAAQ;EACjC,UAAU,EAAE,QAAO,EAAG,SAAQ;CAC/B,EAAE,OAAM,EAAG,OACV,CAAC,QAAQ,OAAO,KAAK,GAAG,EAAE,KAAK,SAAO,IAAI,GAAuB,MAAM,MAAS,GAChF,gDAAgD,GAIrC,8BAA8B,EAAE,OAAO;EAClD,QAAQ,EAAE,OAAM,EACb,IAAI,GAAG,oBAAoB,EAC3B,IAAI,KAAK,sBAAsB;EAClC,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB;CAChC,EAAE,OAAM,GAGI,kBAAkB,EAAE,KAAK,uBAAuB;EAC3D,SAAS,uCAAuC,sBAAsB,KAAK,IAAI,CAAC;CACjF,GAYY,WAAW,EAAE,OAAM,EAC7B,IAAI,GAAG,gBAAgB,EACvB,MAAM,iBAAiB,kGAAkG,GAO/G,yBAAyB,EAAE,OAAO;EAC7C,WAAW,gBAAgB,SAAQ;EACnC,QAAQ,EAAE,OAAM,EAAG,SAAQ;EAC3B,MAAM,EAAE,OAAM,EAAG,SAAQ;EACzB,UAAU,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;CAC7C,EAAE,OAAM,GAGI,sBAAsB,EAAE,OAAO;EAC1C,OAAO,EAAE,OAAM,EAAG,SAAS,eAAe;CAC3C,GAEY,uBAAuB,EAAE,OAAO;EAC3C,QAAQ,EAAE,OAAM,EAAG,SAAS,sBAAsB;EAClD,SAAS,EAAE,OAAM,EAAG,SAAS,aAAa;CAC3C,GAEY,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM,EAAG,SAAS,eAAe;EACvC,WAAW,gBAAgB,SAAS,mBAAmB;EACvD,QAAQ,EAAE,OAAM,EAAG,SAAS,aAAa;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,oBAAoB;EACjD,WAAW,EAAE,OAAM,EAAG,SAAS,oBAAoB;EACnD,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,uBAAuB;EACjE,MAAM,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ,EAAG,SAAS,iBAAiB;EAC/D,UAAU,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,mBAAmB;EAC7D,SAAS,EAAE,MAAM,EAAE,OAAO;IACxB,IAAI,EAAE,OAAM;IACZ,QAAQ,EAAE,OAAM;IAChB,SAAS,EAAE,OAAM;IACjB,WAAW,EAAE,OAAM;GACpB,CAAC,EAAE,SAAQ,EAAG,SAAS,oBAAoB;CAC7C,GAEY,wBAAwB,EAAE,OAAO;EAC5C,IAAI,EAAE,OAAM,EAAG,SAAS,UAAU;EAClC,QAAQ,EAAE,OAAM,EAAG,SAAS,aAAa;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,eAAe;EAC5C,WAAW,EAAE,OAAM,EAAG,SAAS,oBAAoB;CACpD,GAEY,wBAAwB,EAAE,OAAO;EAC5C,aAAa,EAAE,MAAM,gBAAgB,EAAE,SAAS,qBAAqB;CACtE,GAEY,0BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,MAAM,qBAAqB,EAAE,SAAS,iBAAiB;CACnE,GAEY,sBAAsB,EAAE,OAAO;EAC1C,MAAM,EAAE,OAAM,EAAG,SAAS,YAAY;EACtC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAA,CAAE,EAAE,YAAW,CAAE,EAAE,SAAS,gFAAgF;EACvI,cAAc,EAAE,OAAM,EAAG,SAAS,qBAAqB;CACxD,GAEY,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC3C,cAAc,EAAE,OAAM,EAAG,SAAS,0CAA0C;EAC5E,MAAM,EAAE,OAAM,EAAG,SAAS,oCAAoC;EAC9D,UAAU,EAAE,OAAM,EAAG,SAAS,+BAA+B;EAC7D,MAAM,EAAE,OAAM,EAAG,SAAS,sBAAsB;EAChD,aAAa,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,qBAAqB;EACjE,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAQ,EACnD,SAAS,0CAA0C;EACtD,kBAAkB,EAAE,OAAO;IACzB,YAAY,EAAE,KAAK,CAAC,aAAa,UAAU,YAAY,WAAW,CAAC;IACnE,WAAW,EAAE,MAAM,EAAE,OAAO;MAC1B,MAAM,EAAE,OAAM;MACd,QAAQ,EAAE,OAAM,EAAG,SAAQ;KAC5B,CAAC;IACF,YAAY,EAAE,OAAO;MACnB,KAAK,EAAE,OAAM,EAAG,SAAQ;MACxB,QAAQ,EAAE,OAAM,EAAG,SAAQ;KAC5B,EAAE,SAAQ;GACZ,EAAE,SAAQ,EAAG,SAAS,mEAAmE;EAC1F,UAAU,EAAE,OAAO;IACjB,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,SAAS,EAAE,OAAM,EAAG,SAAQ;GAC7B,EAAE,SAAQ,EAAG,SAAS,kDAAkD;EACzE,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAQ,EACnD,SAAS,2DAAsD;CACnE,GAEY,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM,EAAG,SAAS,sDAAsD;EAC9E,QAAQ,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC/C,QAAQ,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC/C,MAAM,EAAE,OAAM,EAAG,SAAS,0CAA0C;;EAEpE,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,wCAAwC;EACjF,iBAAiB,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;EAC5F,iBAAiB,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;CAC7F,GAEY,sBAAsB,EAAE,OAAO;EAC1C,OAAO,EAAE,MAAM,eAAe,EAAE,SAAS,6CAA6C;EACtF,OAAO,EAAE,MAAM,eAAe,EAAE,SAAS,sDAAsD;CAChG,GAEY,qBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,cAAc;EAC3C,MAAM,EAAE,OAAM,EAAG,SAAS,eAAe;EACzC,aAAa,EAAE,OAAM,EAAG,SAAS,sBAAsB;EACvD,QAAQ,EAAE,OAAM,EAAG,SAAS,eAAe;EAC3C,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAS,+DAA+D;EACnH,aAAa,EAAE,OAAM,EAAG,SAAS,mBAAmB;CACrD,GAEY,0BAA0B,EAAE,OAAO;EAC9C,MAAM,EAAE,OAAM;EACd,QAAQ,EAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAU;EAC5D,SAAS,EAAE,OAAM;EACjB,eAAe,EAAE,OAAM;CACxB,GAEY,uBAAuB,EAAE,OAAO;EAC3C,SAAS,EAAE,OAAM;EACjB,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,uBAAuB;CACzD,GAEY,wBAAwB,EAAE,OAAO;EAC5C,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM;EACd,aAAa,EAAE,OAAM,EAAG,SAAQ;EAChC,QAAQ,EAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAU;EAC5D,SAAS,EAAE,OAAM;EACjB,UAAU,EAAE,OAAM;EAClB,cAAc,EAAE,OAAM,EAAG,SAAQ;EACjC,OAAO,EAAE,OAAO;IACd,WAAW,EAAE,OAAM;IACnB,eAAe,EAAE,OAAM;IACvB,WAAW,EAAE,OAAM;GACpB;EACD,SAAS,EAAE,MAAM,EAAE,OAAO;IACxB,MAAM,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,CAAU;IACjD,WAAW,EAAE,OAAM;IACnB,WAAW,EAAE,OAAM;IACnB,WAAW,EAAE,OAAM,EAAG,SAAQ;IAC9B,QAAQ,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,uDAAuD;IAC/F,OAAO,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,+CAA+C;GACvF,CAAC;CACH;",
+  "sourcesContent": ["import { z } from '@hono/zod-openapi';\nimport { CANONICAL_LAYER_NAMES } from '../core/layers.js';\n\n/**\n * Branded type for ElementId\n * Provides compile-time safety by distinguishing ElementId from plain strings\n * Use with parseElementId() to validate and brand a string at runtime\n *\n * This type is exported as a public API contract for external consumers who want\n * to use strong typing in their code. However, internal server.ts implementation\n * uses plain string keys in Maps and other internal structures for simplicity.\n *\n * USAGE PATTERNS:\n * - External/public APIs: Type function parameters with ElementId for contract clarity\n * - Internal state: Use plain strings in Maps/Sets for performance and simplicity\n * - Validation: Use parseElementId() to validate untrusted input\n * - Type guards: Use isElementId() for optional runtime type checking\n *\n * Example:\n *   const brandedId = parseElementId(\"motivation.goal.customer-satisfaction\");\n *   function processElement(id: ElementId) { ... } // Type-safe public API\n *\n *   // Internal implementation can use plain strings:\n *   private annotations: Map<string, Annotation> = new Map();\n */\nexport type ElementId = string & { readonly __brand: 'ElementId' };\n\n/**\n * Parse and validate a string as an ElementId\n * Returns a branded type for compile-time type safety\n */\nexport function parseElementId(input: string): ElementId {\n  const result = ElementIdSchema.safeParse(input);\n  if (!result.success) {\n    const errorMessages = result.error.issues.map(issue => issue.message).join('; ');\n    throw new Error(`Invalid element ID: ${errorMessages}`);\n  }\n  return result.data as ElementId;\n}\n\n/**\n * Type guard for ElementId\n * Use with function parameters for optional compile-time checking\n */\nexport function isElementId(value: unknown): value is ElementId {\n  return typeof value === 'string' && ElementIdSchema.safeParse(value).success;\n}\n\n// WebSocket message schemas with runtime validation\nexport const SimpleWSMessageSchema = z.object({\n  type: z.enum(['subscribe', 'annotate', 'ping']),\n  topics: z.array(z.string()).optional(),\n  annotation: z.object({\n    elementId: z.string(),\n    author: z.string(),\n    text: z.string(),\n    timestamp: z.string(),\n  }).optional(),\n});\n\nexport const JSONRPCRequestSchema = z.object({\n  jsonrpc: z.literal('2.0'),\n  method: z.string(),\n  params: z.unknown().optional(),\n  id: z.union([z.string(), z.number()]).optional(),\n});\n\nexport const JSONRPCResponseSchema = z.object({\n  jsonrpc: z.literal('2.0'),\n  result: z.unknown().optional(),\n  error: z.object({\n    code: z.number(),\n    message: z.string(),\n    data: z.unknown().optional(),\n  }).optional(),\n  id: z.union([z.string(), z.number(), z.null()]),\n}).refine(\n  (data) => (data.result !== undefined) !== (data.error !== undefined),\n  {\n    message: \"JSON-RPC 2.0 response must contain either 'result' or 'error', not both\",\n    path: [\"response\"],\n  }\n);\n\nexport const WSMessageSchema = z.union([\n  SimpleWSMessageSchema,\n  JSONRPCRequestSchema,\n  JSONRPCResponseSchema,\n]);\n\n// Base schemas for common types\n// Enforces three-part element ID format: layer.type.name\n// - layer: canonical layer name (e.g., motivation, api, data-store)\n// - type: lowercase element type (e.g., goal, endpoint, entity)\n// - name: kebab-case element name (e.g., customer-satisfaction)\n//\n// Example valid IDs:\n// - motivation.goal.customer-satisfaction\n// - api.endpoint.create-order\n// - data-store.table.user-profile\n// - a.b.c (minimal single-character segments, valid for testing purposes)\n// - ux.a.test (two-character segments are valid)\nexport const ElementIdSchema = z.string()\n  .min(1, 'Element ID is required')\n  .regex(\n    /^[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*$/,\n    'Invalid element ID format. Must be: layer.type.name (e.g., motivation.goal.customer-satisfaction)'\n  );\n\nexport const TimestampSchema = z.string().datetime();\n\n/**\n * Tag validation schema.\n *\n * Format: lowercase alphanumeric with optional internal hyphens\n * Pattern: /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/\n *\n * Constraints:\n * - Cannot start or end with hyphens: Prevents URL slugification issues and confusion with CLI flags (e.g., --tag-name)\n * - Single character tags allowed (e.g., \"a\", \"1\") via the second alternation\n * - Matches common tag conventions (GitHub labels, NPM tags, etc.)\n *\n * Examples:\n * - \u2705 \"api-critical\"\n * - \u2705 \"high-priority\"\n * - \u2705 \"p0\"\n * - \u274C \"-api-critical\" (starts with hyphen)\n * - \u274C \"api-critical-\" (ends with hyphen)\n * - \u274C \"API-CRITICAL\" (uppercase not allowed)\n */\nexport const TagSchema = z.string()\n  .min(1, 'Tag cannot be empty')\n  .max(50, 'Tag too long')\n  .regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, 'Tag must contain only lowercase letters, digits, and hyphens');\n\n// Annotation schemas - for creating annotations\nexport const AnnotationCreateSchema = z.object({\n  elementId: ElementIdSchema,\n  author: z.string()\n    .min(1, 'Author is required')\n    .max(100, 'Author name too long')\n    .optional()\n    .default('Anonymous'),\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long'),\n  tags: z.array(TagSchema).optional().default([]),\n}).strict();\n\n// Annotation schemas - for updating annotations\nexport const AnnotationUpdateSchema = z.object({\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long')\n    .optional(),\n  tags: z.array(TagSchema).optional(),\n  resolved: z.boolean().optional(),\n}).strict().refine(\n  (obj) => Object.keys(obj).some(key => obj[key as keyof typeof obj] !== undefined),\n  'At least one field must be provided for update'\n);\n\n// Annotation schemas - for creating replies\nexport const AnnotationReplyCreateSchema = z.object({\n  author: z.string()\n    .min(1, 'Author is required')\n    .max(100, 'Author name too long'),\n  content: z.string()\n    .min(1, 'Content is required')\n    .max(5000, 'Content too long'),\n}).strict();\n\n// Layer name schema - validates against canonical layer names\nexport const LayerNameSchema = z.enum(CANONICAL_LAYER_NAMES, {\n  message: `Invalid layer name. Must be one of: ${CANONICAL_LAYER_NAMES.join(', ')}`\n});\n\n// ID schema - validates generic IDs for annotations, changesets, and other non-element identifiers\n// Accepts lowercase alphanumeric characters, hyphens, and underscores\n// Note: Different from ElementIdSchema which requires dot-separated format (layer.type.name)\n//\n// Lowercase-only constraint rationale:\n// - Provides case-insensitive ID lookups by normalizing to lowercase at validation time\n// - Prevents collisions (MyId vs myid cannot coexist in same namespace)\n// - System-generated IDs comply; externally-generated uppercase IDs will be rejected\n// - If external systems need uppercase support, IDs should be normalized before API transmission\n// - Consider implementing ID normalization in API middleware if integration with external systems is required\nexport const IdSchema = z.string()\n  .min(1, 'ID is required')\n  .regex(/^[a-z0-9_-]+$/, 'Invalid ID format. Must contain only lowercase alphanumeric characters, hyphens, and underscores');\n\n// Annotation filter schema - validates query parameters for GET /api/annotations\n// Currently only supports filtering by elementId\n// UNIMPLEMENTED FILTERS: author, tags, and resolved fields are defined here but filtering is not yet implemented.\n// See /workspace/cli/src/server/server.ts:650-651 for implementation details.\n// These fields are reserved for future extensibility and currently ignored by the handler.\nexport const AnnotationFilterSchema = z.object({\n  elementId: ElementIdSchema.optional(),\n  author: z.string().optional(),\n  tags: z.string().optional(),\n  resolved: z.enum(['true', 'false']).optional(),\n}).strict(); // Validate only declared fields\n\n// Response schemas for OpenAPI documentation\nexport const ErrorResponseSchema = z.object({\n  error: z.string().describe('Error message'),\n});\n\nexport const HealthResponseSchema = z.object({\n  status: z.string().describe('Server health status'),\n  version: z.string().describe('API version'),\n});\n\nexport const AnnotationSchema = z.object({\n  id: z.string().describe('Annotation ID'),\n  elementId: ElementIdSchema.describe('Target element ID'),\n  author: z.string().describe('Author name'),\n  content: z.string().describe('Annotation content'),\n  createdAt: z.string().describe('Creation timestamp'),\n  updatedAt: z.string().optional().describe('Last update timestamp'),\n  tags: z.array(z.string()).optional().describe('Annotation tags'),\n  resolved: z.boolean().optional().describe('Resolution status'),\n  replies: z.array(z.object({\n    id: z.string(),\n    author: z.string(),\n    content: z.string(),\n    createdAt: z.string(),\n  })).optional().describe('Annotation replies'),\n});\n\nexport const AnnotationReplySchema = z.object({\n  id: z.string().describe('Reply ID'),\n  author: z.string().describe('Author name'),\n  content: z.string().describe('Reply content'),\n  createdAt: z.string().describe('Creation timestamp'),\n});\n\nexport const AnnotationsListSchema = z.object({\n  annotations: z.array(AnnotationSchema).describe('List of annotations'),\n});\n\nexport const AnnotationRepliesSchema = z.object({\n  replies: z.array(AnnotationReplySchema).describe('List of replies'),\n});\n\nexport const LayerResponseSchema = z.object({\n  name: z.string().describe('Layer name'),\n  elements: z.array(z.object({}).passthrough()).describe('Layer elements (each element is an object with id, name, type, and properties)'),\n  elementCount: z.number().describe('Total element count'),\n});\n\nexport const GraphNodeSchema = z.object({\n  id: z.string().describe('Element ID (UUID)'),\n  spec_node_id: z.string().describe('Spec node type ID (e.g. motivation.goal)'),\n  type: z.string().describe('Element type (e.g. goal, endpoint)'),\n  layer_id: z.string().describe('Layer this element belongs to'),\n  name: z.string().describe('Element display name'),\n  description: z.string().optional().describe('Element description'),\n  attributes: z.record(z.string(), z.unknown()).optional()\n    .describe('Typed attribute bag per spec-node schema'),\n  source_reference: z.object({\n    provenance: z.enum(['extracted', 'manual', 'inferred', 'generated']),\n    locations: z.array(z.object({\n      file: z.string(),\n      symbol: z.string().optional(),\n    })),\n    repository: z.object({\n      url: z.string().optional(),\n      commit: z.string().optional(),\n    }).optional(),\n  }).optional().describe('Source code provenance linking this element to its implementation'),\n  metadata: z.object({\n    created_at: z.string().optional(),\n    updated_at: z.string().optional(),\n    created_by: z.string().optional(),\n    version: z.number().optional(),\n  }).optional().describe('Element lifecycle metadata (timestamps, version)'),\n  properties: z.record(z.string(), z.unknown()).optional()\n    .describe('Legacy property bag (deprecated \u2014 prefer attributes)'),\n});\n\nexport const GraphLinkSchema = z.object({\n  id: z.string().describe('Stable link ID derived from source, target, and type'),\n  source: z.string().describe('Source element ID'),\n  target: z.string().describe('Target element ID'),\n  type: z.string().describe('Relationship predicate or reference type'),\n  // Intra-layer links carry layer_id; cross-layer links carry source/target layer IDs\n  layer_id: z.string().optional().describe('Layer ID for intra-layer relationships'),\n  source_layer_id: z.string().optional().describe('Source layer ID for cross-layer references'),\n  target_layer_id: z.string().optional().describe('Target layer ID for cross-layer references'),\n});\n\nexport const ModelResponseSchema = z.object({\n  nodes: z.array(GraphNodeSchema).describe('All architecture elements across all layers'),\n  links: z.array(GraphLinkSchema).describe('Intra-layer relationships and cross-layer references'),\n});\n\nexport const SpecResponseSchema = z.object({\n  version: z.string().describe('Spec version'),\n  type: z.string().describe('Response type'),\n  description: z.string().describe('Response description'),\n  source: z.string().describe('Schema source'),\n  schemas: z.record(z.string(), z.unknown()).describe('JSON schema definitions (each schema is a JSON Schema object)'),\n  schemaCount: z.number().describe('Number of schemas'),\n});\n\nexport const ChangesetMetadataSchema = z.object({\n  name: z.string(),\n  status: z.enum(['staged', 'committed', 'discarded'] as const),\n  created: z.string(),\n  changes_count: z.number(),\n});\n\nexport const ChangesetsListSchema = z.object({\n  version: z.string(),\n  changesets: z.record(z.string(), ChangesetMetadataSchema),\n});\n\nexport const ChangesetActionResultSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  status: z.enum(['staged', 'committed', 'discarded'] as const),\n  committed: z.number().optional().describe('Changes applied to the model (commit only)'),\n  skipped: z.number().optional().describe('Changes skipped as already present (commit only)'),\n  failed: z.number().optional().describe('Changes that failed to apply (commit only)'),\n});\n\nexport const ChangesetDetailSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().optional(),\n  status: z.enum(['staged', 'committed', 'discarded'] as const),\n  created: z.string(),\n  modified: z.string(),\n  baseSnapshot: z.string().optional(),\n  stats: z.object({\n    additions: z.number(),\n    modifications: z.number(),\n    deletions: z.number(),\n  }),\n  changes: z.array(z.object({\n    type: z.enum(['add', 'update', 'delete'] as const),\n    elementId: z.string(),\n    layerName: z.string(),\n    timestamp: z.string().optional(),\n    before: z.unknown().optional().describe('Previous element state (for update/delete operations)'),\n    after: z.unknown().optional().describe('New element state (for add/update operations)'),\n  })),\n});\n\n// Type inference from input schemas\nexport type AnnotationCreate = z.infer<typeof AnnotationCreateSchema>;\nexport type AnnotationUpdate = z.infer<typeof AnnotationUpdateSchema>;\nexport type AnnotationReplyCreate = z.infer<typeof AnnotationReplyCreateSchema>;\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,6BAA6B;AA8BhC,SAAU,eAAe,OAAa;AAC1C,QAAM,SAAS,gBAAgB,UAAU,KAAK;AAC9C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAS,MAAM,OAAO,EAAE,KAAK,IAAI;AAC/E,UAAM,IAAI,MAAM,uBAAuB,aAAa,EAAE;EACxD;AACA,SAAO,OAAO;AAChB;AAMM,SAAU,YAAY,OAAc;AACxC,SAAO,OAAO,SAAU,YAAY,gBAAgB,UAAU,KAAK,EAAE;AACvE;AAGO,MAAM,wBAAwB,EAAE,OAAO;EAC5C,MAAM,EAAE,KAAK,CAAC,aAAa,YAAY,MAAM,CAAC;EAC9C,QAAQ,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;EACpC,YAAY,EAAE,OAAO;IACnB,WAAW,EAAE,OAAM;IACnB,QAAQ,EAAE,OAAM;IAChB,MAAM,EAAE,OAAM;IACd,WAAW,EAAE,OAAM;GACpB,EAAE,SAAQ;CACZ,GAEY,uBAAuB,EAAE,OAAO;EAC3C,SAAS,EAAE,QAAQ,KAAK;EACxB,QAAQ,EAAE,OAAM;EAChB,QAAQ,EAAE,QAAO,EAAG,SAAQ;EAC5B,IAAI,EAAE,MAAM,CAAC,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,CAAC,EAAE,SAAQ;CAC/C,GAEY,wBAAwB,EAAE,OAAO;EAC5C,SAAS,EAAE,QAAQ,KAAK;EACxB,QAAQ,EAAE,QAAO,EAAG,SAAQ;EAC5B,OAAO,EAAE,OAAO;IACd,MAAM,EAAE,OAAM;IACd,SAAS,EAAE,OAAM;IACjB,MAAM,EAAE,QAAO,EAAG,SAAQ;GAC3B,EAAE,SAAQ;EACX,IAAI,EAAE,MAAM,CAAC,EAAE,OAAM,GAAI,EAAE,OAAM,GAAI,EAAE,KAAI,CAAE,CAAC;CAC/C,EAAE,OACD,CAAC,SAAU,KAAK,WAAW,WAAgB,KAAK,UAAU,SAC1D;EACE,SAAS;EACT,MAAM,CAAC,UAAU;CAClB,GAGU,kBAAkB,EAAE,MAAM;EACrC;EACA;EACA;CACD,GAcY,kBAAkB,EAAE,OAAM,EACpC,IAAI,GAAG,wBAAwB,EAC/B,MACC,uDACA,mGAAmG,GAG1F,kBAAkB,EAAE,OAAM,EAAG,SAAQ,GAqBrC,YAAY,EAAE,OAAM,EAC9B,IAAI,GAAG,qBAAqB,EAC5B,IAAI,IAAI,cAAc,EACtB,MAAM,2CAA2C,8DAA8D,GAGrG,yBAAyB,EAAE,OAAO;EAC7C,WAAW;EACX,QAAQ,EAAE,OAAM,EACb,IAAI,GAAG,oBAAoB,EAC3B,IAAI,KAAK,sBAAsB,EAC/B,SAAQ,EACR,QAAQ,WAAW;EACtB,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB;EAC/B,MAAM,EAAE,MAAM,SAAS,EAAE,SAAQ,EAAG,QAAQ,CAAA,CAAE;CAC/C,EAAE,OAAM,GAGI,yBAAyB,EAAE,OAAO;EAC7C,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB,EAC5B,SAAQ;EACX,MAAM,EAAE,MAAM,SAAS,EAAE,SAAQ;EACjC,UAAU,EAAE,QAAO,EAAG,SAAQ;CAC/B,EAAE,OAAM,EAAG,OACV,CAAC,QAAQ,OAAO,KAAK,GAAG,EAAE,KAAK,SAAO,IAAI,GAAuB,MAAM,MAAS,GAChF,gDAAgD,GAIrC,8BAA8B,EAAE,OAAO;EAClD,QAAQ,EAAE,OAAM,EACb,IAAI,GAAG,oBAAoB,EAC3B,IAAI,KAAK,sBAAsB;EAClC,SAAS,EAAE,OAAM,EACd,IAAI,GAAG,qBAAqB,EAC5B,IAAI,KAAM,kBAAkB;CAChC,EAAE,OAAM,GAGI,kBAAkB,EAAE,KAAK,uBAAuB;EAC3D,SAAS,uCAAuC,sBAAsB,KAAK,IAAI,CAAC;CACjF,GAYY,WAAW,EAAE,OAAM,EAC7B,IAAI,GAAG,gBAAgB,EACvB,MAAM,iBAAiB,kGAAkG,GAO/G,yBAAyB,EAAE,OAAO;EAC7C,WAAW,gBAAgB,SAAQ;EACnC,QAAQ,EAAE,OAAM,EAAG,SAAQ;EAC3B,MAAM,EAAE,OAAM,EAAG,SAAQ;EACzB,UAAU,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;CAC7C,EAAE,OAAM,GAGI,sBAAsB,EAAE,OAAO;EAC1C,OAAO,EAAE,OAAM,EAAG,SAAS,eAAe;CAC3C,GAEY,uBAAuB,EAAE,OAAO;EAC3C,QAAQ,EAAE,OAAM,EAAG,SAAS,sBAAsB;EAClD,SAAS,EAAE,OAAM,EAAG,SAAS,aAAa;CAC3C,GAEY,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM,EAAG,SAAS,eAAe;EACvC,WAAW,gBAAgB,SAAS,mBAAmB;EACvD,QAAQ,EAAE,OAAM,EAAG,SAAS,aAAa;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,oBAAoB;EACjD,WAAW,EAAE,OAAM,EAAG,SAAS,oBAAoB;EACnD,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,uBAAuB;EACjE,MAAM,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ,EAAG,SAAS,iBAAiB;EAC/D,UAAU,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,mBAAmB;EAC7D,SAAS,EAAE,MAAM,EAAE,OAAO;IACxB,IAAI,EAAE,OAAM;IACZ,QAAQ,EAAE,OAAM;IAChB,SAAS,EAAE,OAAM;IACjB,WAAW,EAAE,OAAM;GACpB,CAAC,EAAE,SAAQ,EAAG,SAAS,oBAAoB;CAC7C,GAEY,wBAAwB,EAAE,OAAO;EAC5C,IAAI,EAAE,OAAM,EAAG,SAAS,UAAU;EAClC,QAAQ,EAAE,OAAM,EAAG,SAAS,aAAa;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,eAAe;EAC5C,WAAW,EAAE,OAAM,EAAG,SAAS,oBAAoB;CACpD,GAEY,wBAAwB,EAAE,OAAO;EAC5C,aAAa,EAAE,MAAM,gBAAgB,EAAE,SAAS,qBAAqB;CACtE,GAEY,0BAA0B,EAAE,OAAO;EAC9C,SAAS,EAAE,MAAM,qBAAqB,EAAE,SAAS,iBAAiB;CACnE,GAEY,sBAAsB,EAAE,OAAO;EAC1C,MAAM,EAAE,OAAM,EAAG,SAAS,YAAY;EACtC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAA,CAAE,EAAE,YAAW,CAAE,EAAE,SAAS,gFAAgF;EACvI,cAAc,EAAE,OAAM,EAAG,SAAS,qBAAqB;CACxD,GAEY,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC3C,cAAc,EAAE,OAAM,EAAG,SAAS,0CAA0C;EAC5E,MAAM,EAAE,OAAM,EAAG,SAAS,oCAAoC;EAC9D,UAAU,EAAE,OAAM,EAAG,SAAS,+BAA+B;EAC7D,MAAM,EAAE,OAAM,EAAG,SAAS,sBAAsB;EAChD,aAAa,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,qBAAqB;EACjE,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAQ,EACnD,SAAS,0CAA0C;EACtD,kBAAkB,EAAE,OAAO;IACzB,YAAY,EAAE,KAAK,CAAC,aAAa,UAAU,YAAY,WAAW,CAAC;IACnE,WAAW,EAAE,MAAM,EAAE,OAAO;MAC1B,MAAM,EAAE,OAAM;MACd,QAAQ,EAAE,OAAM,EAAG,SAAQ;KAC5B,CAAC;IACF,YAAY,EAAE,OAAO;MACnB,KAAK,EAAE,OAAM,EAAG,SAAQ;MACxB,QAAQ,EAAE,OAAM,EAAG,SAAQ;KAC5B,EAAE,SAAQ;GACZ,EAAE,SAAQ,EAAG,SAAS,mEAAmE;EAC1F,UAAU,EAAE,OAAO;IACjB,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,YAAY,EAAE,OAAM,EAAG,SAAQ;IAC/B,SAAS,EAAE,OAAM,EAAG,SAAQ;GAC7B,EAAE,SAAQ,EAAG,SAAS,kDAAkD;EACzE,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAQ,EACnD,SAAS,2DAAsD;CACnE,GAEY,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM,EAAG,SAAS,sDAAsD;EAC9E,QAAQ,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC/C,QAAQ,EAAE,OAAM,EAAG,SAAS,mBAAmB;EAC/C,MAAM,EAAE,OAAM,EAAG,SAAS,0CAA0C;;EAEpE,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,wCAAwC;EACjF,iBAAiB,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;EAC5F,iBAAiB,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;CAC7F,GAEY,sBAAsB,EAAE,OAAO;EAC1C,OAAO,EAAE,MAAM,eAAe,EAAE,SAAS,6CAA6C;EACtF,OAAO,EAAE,MAAM,eAAe,EAAE,SAAS,sDAAsD;CAChG,GAEY,qBAAqB,EAAE,OAAO;EACzC,SAAS,EAAE,OAAM,EAAG,SAAS,cAAc;EAC3C,MAAM,EAAE,OAAM,EAAG,SAAS,eAAe;EACzC,aAAa,EAAE,OAAM,EAAG,SAAS,sBAAsB;EACvD,QAAQ,EAAE,OAAM,EAAG,SAAS,eAAe;EAC3C,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,QAAO,CAAE,EAAE,SAAS,+DAA+D;EACnH,aAAa,EAAE,OAAM,EAAG,SAAS,mBAAmB;CACrD,GAEY,0BAA0B,EAAE,OAAO;EAC9C,MAAM,EAAE,OAAM;EACd,QAAQ,EAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAU;EAC5D,SAAS,EAAE,OAAM;EACjB,eAAe,EAAE,OAAM;CACxB,GAEY,uBAAuB,EAAE,OAAO;EAC3C,SAAS,EAAE,OAAM;EACjB,YAAY,EAAE,OAAO,EAAE,OAAM,GAAI,uBAAuB;CACzD,GAEY,8BAA8B,EAAE,OAAO;EAClD,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM;EACd,QAAQ,EAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAU;EAC5D,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;EACtF,SAAS,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,kDAAkD;EAC1F,QAAQ,EAAE,OAAM,EAAG,SAAQ,EAAG,SAAS,4CAA4C;CACpF,GAEY,wBAAwB,EAAE,OAAO;EAC5C,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM;EACd,aAAa,EAAE,OAAM,EAAG,SAAQ;EAChC,QAAQ,EAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAU;EAC5D,SAAS,EAAE,OAAM;EACjB,UAAU,EAAE,OAAM;EAClB,cAAc,EAAE,OAAM,EAAG,SAAQ;EACjC,OAAO,EAAE,OAAO;IACd,WAAW,EAAE,OAAM;IACnB,eAAe,EAAE,OAAM;IACvB,WAAW,EAAE,OAAM;GACpB;EACD,SAAS,EAAE,MAAM,EAAE,OAAO;IACxB,MAAM,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,CAAU;IACjD,WAAW,EAAE,OAAM;IACnB,WAAW,EAAE,OAAM;IACnB,WAAW,EAAE,OAAM,EAAG,SAAQ;IAC9B,QAAQ,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,uDAAuD;IAC/F,OAAO,EAAE,QAAO,EAAG,SAAQ,EAAG,SAAS,+CAA+C;GACvF,CAAC;CACH;",
   "names": []
 }

package/dist/server/server.js

@@ -12,13 +12,17 @@ import path from "path";
 const require2 = createRequire(import.meta.url);
 import { Model } from "../core/model.js";
 import { StagedChangesetStorage } from "../core/staged-changeset-storage.js";
+import { StagingAreaManager } from "../core/staging-area.js";
 import { CANONICAL_LAYER_NAMES } from "../core/layers.js";
 import { telemetryMiddleware } from "./telemetry-middleware.js";
 import { ClaudeCodeClient } from "../coding-agents/claude-code-client.js";
 import { CopilotClient } from "../coding-agents/copilot-client.js";
 import { detectAvailableClients, selectChatClient } from "../coding-agents/chat-utils.js";
+import { formatForClaudeCode, formatForClaudeCodeWithChangesets, applyCopilotPermissions, CHANGESET_ONLY_ENV } from "../coding-agents/default-permissions.js";
+import { DR_ARCHITECT_AGENT, checkInstalledAgentMcpTools, drBotMcpPrompt, drMcpAllowedTools, prepareDrMcpLaunch } from "../coding-agents/drbot-mcp.js";
+import { ApiKeyManager } from "../mcp/api-key-manager.js";
 import { getErrorMessage } from "../utils/errors.js";
-import { AnnotationCreateSchema, AnnotationUpdateSchema, AnnotationReplyCreateSchema, LayerNameSchema, IdSchema, AnnotationFilterSchema, ErrorResponseSchema, HealthResponseSchema, AnnotationSchema, AnnotationReplySchema, AnnotationsListSchema, ChangesetsListSchema, ChangesetDetailSchema, ModelResponseSchema, LayerResponseSchema, SpecResponseSchema, AnnotationRepliesSchema, WSMessageSchema } from "./schemas.js";
+import { AnnotationCreateSchema, AnnotationUpdateSchema, AnnotationReplyCreateSchema, LayerNameSchema, IdSchema, AnnotationFilterSchema, ErrorResponseSchema, HealthResponseSchema, AnnotationSchema, AnnotationReplySchema, AnnotationsListSchema, ChangesetsListSchema, ChangesetDetailSchema, ChangesetActionResultSchema, ModelResponseSchema, LayerResponseSchema, SpecResponseSchema, AnnotationRepliesSchema, WSMessageSchema } from "./schemas.js";
 const JSONRPC_ERRORS = {
   // Standard JSON-RPC errors
   INVALID_PARAMS: -32602,
@@ -53,6 +57,8 @@ class VisualizationServer {
   authEnabled = !0;
   withDanger = !1;
   // Danger mode disabled by default
+  withChangesets = !1;
+  // Changeset-only write mode disabled by default
   viewerPath;
   // Optional custom viewer path
   activeChatProcesses = /* @__PURE__ */ new Map();
@@ -64,6 +70,12 @@ class VisualizationServer {
   // Store initialization error for status endpoint
   _testClaudeCmdOverride;
   _testCopilotCmdOverride;
+  /** Test hook: prepare DrBot's MCP launch with these (fake key, scratch dirs) even under _testClaudeCmdOverride. */
+  _testDrMcpOptions;
+  /** Test hook: the claude arguments the last chat launch built, before any _testClaudeCmdOverride. */
+  _testLastClaudeChatArgs;
+  drMcpKey;
+  drBotWarnings = /* @__PURE__ */ new Set();
   /**
    * Valid spec node IDs per layer
    * Dynamically loaded from compiled spec (spec/dist/{layer}.json at module load time)
@@ -115,7 +127,7 @@ class VisualizationServer {
     }), ids;
   })();
   constructor(model, options) {
-    this.app = new OpenAPIHono(), this.model = model, this.loadWebSocketAdapter(), this.authEnabled = options?.authEnabled ?? process.env.DR_AUTH_ENABLED !== "false", this.authToken = options?.authToken || process.env.DR_AUTH_TOKEN || this.generateAuthToken(), this.withDanger = options?.withDanger || !1, this.viewerPath = options?.viewerPath || new URL("../viewer", import.meta.url).pathname, !this.authEnabled && options?.authToken && console.warn("[VisualizationServer] Warning: authToken provided but authEnabled is false. The token will be generated but not used for authentication. Set authEnabled: true to enable authentication."), this.app.use("/*", cors()), this.app.use("/*", telemetryMiddleware), this.app.use("/api/*", async (c, next) => {
+    this.app = new OpenAPIHono(), this.model = model, this.loadWebSocketAdapter(), this.authEnabled = options?.authEnabled ?? process.env.DR_AUTH_ENABLED !== "false", this.authToken = options?.authToken || process.env.DR_AUTH_TOKEN || this.generateAuthToken(), this.withDanger = options?.withDanger || !1, this.withChangesets = options?.withChangesets || !1, this.viewerPath = options?.viewerPath || new URL("../viewer", import.meta.url).pathname, !this.authEnabled && options?.authToken && console.warn("[VisualizationServer] Warning: authToken provided but authEnabled is false. The token will be generated but not used for authentication. Set authEnabled: true to enable authentication."), this.app.use("/*", cors()), this.app.use("/*", telemetryMiddleware), this.app.use("/api/*", async (c, next) => {
       if (!this.authEnabled)
         return next();
       const authHeader = c.req.header("Authorization"), queryToken = c.req.query("token");
@@ -775,7 +787,8 @@ class VisualizationServer {
         }
       }
     });
-    this.app.openapi(getChangesetsRoute, (c) => {
+    this.app.openapi(getChangesetsRoute, async (c) => {
+      await this.loadChangesetsFromDisk();
       const changesets = {};
       for (const [id, changeset] of this.changesets)
         changesets[id] = {
@@ -818,8 +831,10 @@ class VisualizationServer {
         }
       }
     });
-    this.app.openapi(getChangesetRoute, (c) => {
-      const { changesetId } = c.req.valid("param"), changeset = this.changesets.get(changesetId);
+    this.app.openapi(getChangesetRoute, async (c) => {
+      const { changesetId } = c.req.valid("param");
+      await this.loadChangesetsFromDisk();
+      const changeset = this.changesets.get(changesetId);
       return changeset ? c.json({
         id: changeset.id,
         name: changeset.name,
@@ -831,6 +846,51 @@ class VisualizationServer {
         stats: changeset.stats,
         changes: changeset.changes
       }) : c.json({ error: "Changeset not found" }, 404);
+    });
+    const changesetActionResponses = {
+      200: {
+        description: "Action completed",
+        content: { "application/json": { schema: ChangesetActionResultSchema } }
+      },
+      404: {
+        description: "Changeset not found",
+        content: { "application/json": { schema: ErrorResponseSchema } }
+      },
+      409: {
+        description: "Changeset is not staged, or the model drifted since it was created",
+        content: { "application/json": { schema: ErrorResponseSchema } }
+      },
+      422: {
+        description: "The changeset failed validation; nothing was applied",
+        content: { "application/json": { schema: ErrorResponseSchema } }
+      }
+    }, commitChangesetRoute = createRoute({
+      method: "post",
+      path: "/api/changesets/:changesetId/commit",
+      tags: ["Changesets"],
+      summary: "Commit changeset",
+      description: "Apply a staged changeset to the model (same as `dr changeset commit`): validates it, applies every change atomically, marks it committed, and deactivates it if it was active. Refused when the model changed since the changeset was created (use the CLI with --force).",
+      security: [{ bearerAuth: [] }],
+      request: { params: z.object({ changesetId: IdSchema }) },
+      responses: changesetActionResponses
+    });
+    this.app.openapi(commitChangesetRoute, async (c) => {
+      const { changesetId } = c.req.valid("param");
+      return this.runChangesetAction(c, changesetId, "commit");
+    });
+    const discardChangesetRoute = createRoute({
+      method: "post",
+      path: "/api/changesets/:changesetId/discard",
+      tags: ["Changesets"],
+      summary: "Discard changeset",
+      description: "Throw away a staged changeset's changes (same as `dr changeset discard`): clears them, marks it discarded, and deactivates it if it was active. The model is not touched.",
+      security: [{ bearerAuth: [] }],
+      request: { params: z.object({ changesetId: IdSchema }) },
+      responses: changesetActionResponses
+    });
+    this.app.openapi(discardChangesetRoute, async (c) => {
+      const { changesetId } = c.req.valid("param");
+      return this.runChangesetAction(c, changesetId, "discard");
     }), this.app.doc("/api-spec.yaml", {
       openapi: "3.1.0",
       info: {
@@ -1265,17 +1325,106 @@ class VisualizationServer {
       id: requestId
     }));
   }
+  /**
+   * Build command arguments for Claude Code launch
+   */
+  buildClaudeChatArgs(mcpConfigPath) {
+    const cmd = ["claude", "--agent", "dr-architect", "--print"], mode = this.drBotMode(), mcpRules = mcpConfigPath ? drMcpAllowedTools(mode) : [];
+    if (mode === "danger")
+      cmd.push("--dangerously-skip-permissions");
+    else {
+      const bashRules = mode === "changesets" ? formatForClaudeCodeWithChangesets() : formatForClaudeCode();
+      cmd.push("--allowedTools", [bashRules, ...mcpRules].join(","));
+    }
+    return mcpConfigPath && cmd.push("--mcp-config", mcpConfigPath, "--append-system-prompt", drBotMcpPrompt(mode)), cmd.push("--verbose", "--output-format", "stream-json"), cmd;
+  }
+  /** DrBot's permission mode; danger wins over changeset-only. */
+  drBotMode() {
+    return this.withDanger ? "danger" : this.withChangesets ? "changesets" : "read-safe";
+  }
+  /**
+   * Writes the MCP config that connects DrBot to `dr mcp` for this model. Returns null when it
+   * can't (logged): DrBot then launches without MCP and uses its Bash rules.
+   */
+  async prepareDrBotMcp() {
+    const mode = this.drBotMode(), overrides = this._testDrMcpOptions ?? {};
+    try {
+      const check = await checkInstalledAgentMcpTools(this.model.rootPath, mode, overrides.homeDir);
+      if (check && (this.warnDrBotOnce(check.noneVisible ? `[Claude Code] The installed ${DR_ARCHITECT_AGENT} agent (${check.path}) predates the dr MCP tools, so the chat can't use them and falls back to Bash dr commands. Run \`dr claude upgrade\` to update it.` : `[Claude Code] The installed ${DR_ARCHITECT_AGENT} agent (${check.path}) doesn't list ${check.missing.join(", ")}, so the chat can't use those dr MCP tools. Run \`dr claude upgrade\` to update it.`), check.noneVisible))
+        return null;
+    } catch (error) {
+      this.warnDrBotOnce(`[Claude Code] Could not check the installed ${DR_ARCHITECT_AGENT} agent's tools (${getErrorMessage(error)}); connecting the dr MCP server anyway.`);
+    }
+    try {
+      return await prepareDrMcpLaunch({
+        rootPath: this.model.rootPath,
+        changesetOnly: mode === "changesets",
+        keyManager: { ensureKey: () => this.ensureDrMcpKey() },
+        drCommand: overrides.drCommand,
+        tempRoot: overrides.tempRoot
+      });
+    } catch (error) {
+      return console.warn(`[Claude Code] dr MCP server unavailable for chat, falling back to Bash dr commands: ${getErrorMessage(error)}`), null;
+    }
+  }
+  /**
+   * The installation's MCP API key. Concurrent chat launches share one in-flight ensureKey call,
+   * so a first-time key is created once rather than raced and overwritten (which would leave an
+   * earlier launch's MCP server holding a key that no longer matches). Once it settles the next
+   * launch reads the key afresh, so a key rotated with `dr mcp --regenerate-key` is picked up.
+   */
+  ensureDrMcpKey() {
+    if (!this.drMcpKey) {
+      const pending = (this._testDrMcpOptions?.keyManager ?? new ApiKeyManager()).ensureKey();
+      this.drMcpKey = pending;
+      const clear = () => {
+        this.drMcpKey === pending && (this.drMcpKey = void 0);
+      };
+      pending.then(clear, clear);
+    }
+    return this.drMcpKey;
+  }
+  /** Logs a DrBot setup warning once per server rather than on every chat message. */
+  warnDrBotOnce(message) {
+    this.drBotWarnings.has(message) || (this.drBotWarnings.add(message), console.warn(message));
+  }
+  /**
+   * Environment for chat agent processes. In changeset-only mode it sets
+   * CHANGESET_ONLY_ENV, so any `dr` command the agent runs refuses to save the base
+   * model and can only stage changes in an active changeset (core/changeset-only-guard.ts).
+   */
+  buildChatEnv() {
+    return this.withChangesets && !this.withDanger ? { ...process.env, [CHANGESET_ONLY_ENV]: "true" } : process.env;
+  }
+  /**
+   * Add permission flags to Copilot command based on withDanger setting
+   * Applies read-safe permissions when withDanger is false, with graceful degradation
+   * if the installed Copilot CLI doesn't support granular permission flags.
+   * @param cmd The command array to modify (will be mutated)
+   * @param variant The Copilot variant for error messages (e.g., "gh copilot" or "copilot")
+   */
+  addCopilotPermissionFlags(cmd, variant) {
+    const copilotCommand = cmd[0] === "gh" ? "gh" : "copilot";
+    applyCopilotPermissions(cmd, variant, copilotCommand, this.withDanger);
+  }
   /**
    * Launch Claude Code CLI with dr-architect agent and stream responses
    */
   async launchClaudeCodeChat(ws, conversationId, message, requestId) {
+    let drMcp = null;
     try {
-      const cmd = ["claude", "--agent", "dr-architect", "--print"];
-      this.withDanger && cmd.push("--dangerously-skip-permissions"), cmd.push("--verbose", "--output-format", "stream-json"), this._testClaudeCmdOverride && cmd.splice(0, cmd.length, ...this._testClaudeCmdOverride);
+      drMcp = this._testClaudeCmdOverride !== void 0 && this._testDrMcpOptions === void 0 ? null : await this.prepareDrBotMcp();
+      const cmd = this.buildClaudeChatArgs(drMcp?.configPath);
+      this._testLastClaudeChatArgs = [...cmd], this._testClaudeCmdOverride && cmd.splice(0, cmd.length, ...this._testClaudeCmdOverride);
       const proc = spawn(cmd[0], cmd.slice(1), {
         cwd: this.model.rootPath,
+        env: this.buildChatEnv(),
         stdio: ["pipe", "pipe", "pipe"]
       });
+      if (drMcp) {
+        const cleanup = drMcp.cleanup;
+        proc.once("exit", () => void cleanup()), proc.once("error", () => void cleanup());
+      }
       proc.on("error", (err) => {
         const errorMsg = getErrorMessage(err);
         console.error(`[Claude Code] Failed to spawn subprocess for conversation ${conversationId}: ${errorMsg}`), this.activeChatProcesses.delete(conversationId);
@@ -1409,6 +1558,7 @@ class VisualizationServer {
         }
       });
     } catch (error) {
+      drMcp?.cleanup();
       const errorMsg = getErrorMessage(error);
       ws.send(JSON.stringify({
         jsonrpc: "2.0",
@@ -1432,7 +1582,7 @@ class VisualizationServer {
         const ghResult = spawnSync("gh", ["copilot", "--version"], {
           stdio: ["ignore", "pipe", "pipe"]
         });
-        ghResult.error ? console.warn(`[Copilot] 'gh copilot --version' probe failed to spawn: ${getErrorMessage(ghResult.error)}`) : ghResult.status !== 0 && process.env.VERBOSE && console.log(`[Copilot] 'gh copilot' unavailable (exit ${ghResult.status}), falling back to standalone 'copilot'`), ghResult.status === 0 ? (cmd = ["gh", "copilot", "explain"], this.withDanger && cmd.push("--allow-all-tools"), cmd.push(message)) : (cmd = ["copilot", "explain"], this.withDanger && cmd.push("--allow-all-tools"), cmd.push(message));
+        ghResult.error ? console.warn(`[Copilot] 'gh copilot --version' probe failed to spawn: ${getErrorMessage(ghResult.error)}`) : ghResult.status !== 0 && process.env.VERBOSE && console.log(`[Copilot] 'gh copilot' unavailable (exit ${ghResult.status}), falling back to standalone 'copilot'`), ghResult.status === 0 ? (cmd = ["gh", "copilot", "explain"], this.addCopilotPermissionFlags(cmd, "gh copilot"), cmd.push(message)) : (cmd = ["copilot", "explain"], this.addCopilotPermissionFlags(cmd, "copilot"), cmd.push(message));
       }
       const proc = spawn(cmd[0], cmd.slice(1), {
         cwd: this.model.rootPath,
@@ -1542,19 +1692,7 @@ class VisualizationServer {
       }), this.watcher.on("all", async (_event, path2) => {
         process.env.VERBOSE && console.log(`[Watcher] File changed: ${path2}`);
         try {
-          this.model = await Model.load(this.model.rootPath, { lazyLoad: !1 }), await this.loadChangesetsFromDisk();
-          const modelData = await this.serializeModel(), message = JSON.stringify({
-            type: "model.updated",
-            data: modelData,
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          });
-          for (const client of this.clients)
-            try {
-              client.send(message);
-            } catch (error) {
-              const msg = getErrorMessage(error);
-              console.warn(`[Watcher] Failed to send update: ${msg}`);
-            }
+          await this.reloadAndBroadcast();
         } catch (error) {
           const message = getErrorMessage(error);
           console.error(`[Watcher] Failed to reload model: ${message}`);
@@ -2244,20 +2382,85 @@ class VisualizationServer {
     }
   }
   /**
-   * Load all changesets from disk into the in-memory map
+   * Reload the model and changesets from disk and send the new model to every client.
    */
-  async loadChangesetsFromDisk() {
-    if (this.changesetStorage)
+  async reloadAndBroadcast() {
+    this.model = await Model.load(this.model.rootPath, { lazyLoad: !1 }), await this.loadChangesetsFromDisk();
+    const modelData = await this.serializeModel(), message = JSON.stringify({
+      type: "model.updated",
+      data: modelData,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    for (const client of this.clients)
       try {
-        const changesets = await this.changesetStorage.list();
-        this.changesets.clear();
-        for (const cs of changesets)
-          this.changesets.set(cs.id, cs);
-        process.env.VERBOSE && console.log(`[Changesets] Loaded ${changesets.length} changeset(s) from disk`);
-      } catch (err) {
-        console.warn(`[Changesets] Warning: Failed to load changesets from disk: ${err}`);
+        client.send(message);
+      } catch (error) {
+        const msg = getErrorMessage(error);
+        console.warn(`[Watcher] Failed to send update: ${msg}`);
       }
   }
+  /**
+   * Commit or discard a staged changeset for POST /api/changesets/:id/{commit,discard}.
+   *
+   * Works on a freshly loaded model rather than the server's in-memory copy, so a CLI
+   * change since the last reload can't be overwritten. Afterwards the server reloads
+   * (the watcher only sees model files, and a discard touches none) and broadcasts.
+   */
+  async runChangesetAction(c, changesetId, action) {
+    const model = await Model.load(this.model.rootPath, { lazyLoad: !1 }), manager = new StagingAreaManager(model.rootPath, model), changeset = await manager.load(changesetId);
+    if (!changeset)
+      return c.json({ error: "Changeset not found" }, 404);
+    if (changeset.status !== "staged")
+      return c.json({ error: `Changeset is already ${changeset.status}` }, 409);
+    let result = {};
+    try {
+      if (action === "commit") {
+        const commit = await manager.commit(model, changesetId, { validate: !0 });
+        result = {
+          committed: commit.committed,
+          skipped: commit.skipped ?? 0,
+          failed: commit.failed,
+          preExistingErrors: commit.validation.preExistingErrors ?? 0
+        };
+      } else
+        await manager.discard(changesetId);
+    } catch (error) {
+      const message = getErrorMessage(error);
+      if (message.startsWith("Validation failed"))
+        return c.json({ error: message }, 422);
+      if (message.includes("drifted"))
+        return c.json({ error: message }, 409);
+      throw error;
+    }
+    await manager.getActiveId() === changesetId && await manager.clearActive();
+    try {
+      await this.reloadAndBroadcast();
+    } catch (error) {
+      console.error(`[Changesets] Reload after ${action} failed: ${getErrorMessage(error)}`);
+    }
+    const updated = this.changesets.get(changesetId) ?? await manager.load(changesetId);
+    return c.json({
+      id: changesetId,
+      name: changeset.name,
+      status: updated?.status ?? (action === "commit" ? "committed" : "discarded"),
+      ...result
+    });
+  }
+  /**
+   * Load all changesets from disk into the in-memory map
+   */
+  async loadChangesetsFromDisk() {
+    this.changesetStorage ??= new StagedChangesetStorage(this.model.rootPath);
+    try {
+      const changesets = await this.changesetStorage.list();
+      this.changesets.clear();
+      for (const cs of changesets)
+        this.changesets.set(cs.id, cs);
+      process.env.VERBOSE && console.log(`[Changesets] Loaded ${changesets.length} changeset(s) from disk`);
+    } catch (err) {
+      console.warn(`[Changesets] Warning: Failed to load changesets from disk: ${err}`);
+    }
+  }
   /**
    * Start the server
    */