@open-agent-toolkit/cli 0.2.64 → 0.2.66

package/assets/skills/oat-repo-knowledge-index/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-repo-knowledge-index
-version: 1.3.0
 description: Use when onboarding OAT to a repository or when knowledge artifacts are stale. Generates or refreshes the codebase knowledge index using parallel mapper agents.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash(git:*), Glob, Grep, AskUserQuestion, Task
+metadata:
+  version: 1.3.1
 ---
 
 # Knowledge Base Generation

package/assets/skills/oat-repo-maintainability-review/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-repo-maintainability-review
-version: 1.3.0
 description: Use when you need a structured maintainability analysis for a repository or directory target with actionable findings and an optional external-plan handoff.
 argument-hint: '[--scope repo|directory] [--target <path>] [--mode auto|tracked|local|inline] [--output <path>] [--focus <areas>] [--analysis-mode full] [--fan-out]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.3.1
 ---
 
 # Repo Maintainability Review

package/assets/skills/oat-review-provide/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-review-provide
-version: 1.2.3
 description: Use when you need an ad-hoc review outside an active OAT project lifecycle. Reviews code or artifacts without project phase state, unlike oat-project-review-provide.
 argument-hint: '[unstaged|staged|base_branch=<branch>|base_sha=<sha>|<sha1>..<sha2>|--files <path1,path2,...>] [--output <path>] [--mode auto|local|tracked|inline]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.2.4
 ---
 
 # Ad-Hoc Review

package/assets/skills/oat-review-provide-remote/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-review-provide-remote
-version: 1.1.1
 description: Use when reviewing a GitHub PR opened on another machine and posting findings back as a single PR review, outside any OAT project context. Fetches the PR via gh, reviews it, and posts via gh api.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.1.2
 ---
 
 # Remote Review Provide (Ad-hoc GitHub PR)

package/assets/skills/oat-review-receive/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-review-receive
-version: 1.4.0
 description: Use when processing review findings outside project context. Converts local review artifacts into actionable task lists.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.4.1
 ---
 
 # Review Receive (Ad-hoc Local)

package/assets/skills/oat-review-receive-remote/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-review-receive-remote
-version: 1.3.0
 description: Use when processing GitHub PR review comments outside project context. Fetches PR comments via agent-reviews and converts them into actionable task lists.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.3.1
 ---
 
 # Remote Review Receive (Ad-hoc GitHub PR)

package/assets/skills/oat-wave-execute/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-wave-execute
-version: 1.9.0
 description: Use when executing a wave of external implementation plans as a wrapper OAT project — scaffolding, drift refresh, parallel worktree groups, briefs, gates, merge choreography, and closeout.
 argument-hint: '<wave-id> [plan-names...] (e.g. wave-2 http-listener-before-indexing ...)'
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash, Grep, Glob, Task
+metadata:
+  version: 1.9.1
 ---
 
 # Execute a Wave of External Plans

package/assets/skills/oat-wave-program/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-wave-program
-version: 1.5.0
 description: Use when decomposing a corpus of external implementation plans into an ordered wave program — coverage inventory, dependency mapping, wave composition, and the durable execution-program artifact that oat-wave-execute consumes and updates.
 argument-hint: '[new|refresh|wave-close <wave-id>] (default: refresh against the current artifact)'
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash, Grep, Glob, Task
+metadata:
+  version: 1.5.1
 ---
 
 # Program a Corpus of External Plans into Waves

package/assets/skills/oat-worktree-bootstrap/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-worktree-bootstrap
-version: 1.3.1
 description: Use when creating or resuming a git worktree for OAT implementation. Creates or validates a worktree and runs OAT bootstrap checks.
 argument-hint: '<branch-name> [--base <ref>] [--path <root>] [--existing]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.3.2
 ---
 
 # Worktree Bootstrap

package/assets/skills/oat-worktree-bootstrap-auto/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-worktree-bootstrap-auto
-version: 1.6.1
 description: Use when an orchestrator/subagent needs autonomous worktree bootstrap. Non-interactive companion to oat-worktree-bootstrap.
 argument-hint: '<branch-name> [--base <ref>] [--path <root>] [--baseline-policy <strict|allow-failing>]'
 disable-model-invocation: false
 user-invocable: false
 allowed-tools: Read, Write, Bash, Glob, Grep
+metadata:
+  version: 1.6.2
 ---
 
 # Autonomous Worktree Bootstrap

package/assets/skills/oat-wrap-up/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-wrap-up
-version: 1.0.2
 description: Use when preparing a shipping digest or weekly/biweekly wrap-up summarizing OAT projects and merged PRs over a time window. Reads local summary files and GitHub PR metadata; writes a version-controlled markdown report.
 argument-hint: '[--since YYYY-MM-DD] [--until YYYY-MM-DD] [--past-week|--past-2-weeks|--past-month] [--output <path>] [--dry-run]'
 disable-model-invocation: false
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
 user-invocable: true
+metadata:
+  version: 1.0.3
 ---
 
 # Wrap-Up

package/assets/skills/recon/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: recon
-version: 1.1.0
 description: Use when a bounded investigation needs source-grounded evidence before analysis or implementation. Produces a validated evidence-packet directory through approved provider-neutral worker waves.
 argument-hint: '<question-or-target> [--profile quick|standard|thorough] [--scope description] [--context path] [--output directory] [--strict]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Glob, Grep, Bash, AskUserQuestion, Agent, mcp__*
+metadata:
+  version: 1.1.1
 ---
 
 # Recon

package/assets/skills/skeptic/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: skeptic
-version: 0.2.0
 description: Use when the user questions or suspects an agent claim is wrong. Adversarially gathers evidence to verify or refute the claim using the best sources available in the current environment.
 argument-hint: '[claim to question — optional, defaults to most recent agent assertion]'
 user-invocable: true
 allowed-tools: Read, Glob, Grep, Bash, WebSearch, WebFetch, AskUserQuestion, Agent, mcp__*
+metadata:
+  version: 0.2.1
 ---
 
 # /skeptic

package/assets/skills/subagent-orchestration/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: subagent-orchestration
-version: 1.0.2
 description: Use when delegating work to subagents or choosing a model for a task — routing by task class, selecting provider-specific models and effort, and verifying subagent claims. Covers OpenAI/Codex, Anthropic/Claude, and Cursor.
 compatibility: Self-contained; no OAT installation required.
 user-invocable: true
+metadata:
+  version: 1.0.3
 ---
 
 # Subagent Orchestration

package/assets/skills/synthesize/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: synthesize
-version: 0.1.0
 description: Merge multiple analysis artifacts into a single coherent report with provenance tracking. Reads existing artifacts from /deep-research, /analyze, and /compare.
 argument-hint: '[directory | file1 file2 ...] [--inline]'
 user-invocable: true
 allowed-tools: Read, Glob, Grep, Bash, AskUserQuestion
+metadata:
+  version: 0.1.1
 ---
 
 # /synthesize

package/dist/commands/backlog/new.d.ts

@@ -13,6 +13,7 @@ export interface CreateBacklogItemOptions {
     labels?: string[];
     description?: string;
     createdAt?: string;
+    associatedIssues?: unknown;
 }
 export interface CreateBacklogItemResult {
     id: string;

package/dist/commands/backlog/new.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/backlog/new.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EAClC,MAAM,oBAAoB,CAAC;AAS5B,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,eAAe,CAAC;IAC9B,KAAK,EAAE,4BAA4B,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA2JD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,SAAS,GAAE,OAAO,CAAC,6BAA6B,CAAM,GACrD,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}
+{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/backlog/new.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EAClC,MAAM,oBAAoB,CAAC;AAS5B,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,eAAe,CAAC;IAC9B,KAAK,EAAE,4BAA4B,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AAgKD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,SAAS,GAAE,OAAO,CAAC,6BAA6B,CAAM,GACrD,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}

package/dist/commands/backlog/new.js

@@ -1,5 +1,6 @@
 import { access, readFile, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
+import { parseAssociatedIssues, serializeAssociatedIssues, } from '../pjm/remote/association.js';
 import { resolvePjmTemplate, } from '../pjm/template-source.js';
 import { stripTemplateFrontmatter } from '../shared/strip-template-frontmatter.js';
 import YAML from 'yaml';
@@ -72,6 +73,7 @@ function normalizeInputs(options) {
         scopeEstimate,
         labels,
         description: options.description,
+        associatedIssues: serializeAssociatedIssues(parseAssociatedIssues(options.associatedIssues ?? [])),
     };
 }
 function renderBacklogItem(template, values) {
@@ -90,7 +92,7 @@ function renderBacklogItem(template, values) {
         assignee: null,
         created: values.timestamp,
         updated: values.timestamp,
-        associated_issues: [],
+        associated_issues: values.associatedIssues,
         external_plans: [],
     }).trimEnd();
     return `---\n${frontmatter}\n---\n\n${body.trimEnd()}\n`;

package/dist/commands/config/index.d.ts

@@ -21,6 +21,7 @@ interface ConfigCommandDependencies {
     resolveEffectiveConfig: (repoRoot: string, userConfigDir: string, env: NodeJS.ProcessEnv) => Promise<ResolvedConfig>;
     resolveAssetsRoot: () => Promise<string>;
     readFile: (path: string) => Promise<string>;
+    atomicWriteJson: (path: string, data: unknown) => Promise<void>;
     confirmAction: (message: string, ctx: PromptContext) => Promise<boolean>;
     validateMatrixCell: (provider: string, value: string, options: ValidateMatrixCellOptions) => Promise<MatrixCellAvailabilityResponse>;
     createDispatchValidationPassContext: typeof createDispatchValidationPassContext;

package/dist/commands/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAoBzC,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAkBhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+GpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,2CAA2C,EAAE,CAC3C,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,gDAAgD,EAAE,CAChD,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAwnGD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAkMT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAoBzC,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAQnB,KAAK,UAAU,EAkBhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4JpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,2CAA2C,EAAE,CAC3C,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,gDAAgD,EAAE,CAChD,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AA+2GD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAkMT"}

package/dist/commands/config/index.js

@@ -14,6 +14,7 @@ import { parseJsonConfig } from '../../config/json.js';
 import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, MAX_GATE_TIMEOUT_MS, MIN_GATE_TIMEOUT_MS, isValidGateTimeoutMs, normalizeWorkflowPostImplementSequence, readOatConfig, readOatConfigForDefaultScopeRepair, readOatConfigForDocumentationExcludesRepair, readOatConfigForInstructionPointerExcludesRepair, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
 import { resolveEffectiveConfig, } from '../../config/resolve.js';
 import { resolveAssetsRoot } from '../../fs/assets.js';
+import { atomicWriteJson } from '../../fs/io.js';
 import { resolveProjectRoot } from '../../fs/paths.js';
 import { normalizeMatrixCellAvailability, validateMatrixCell, } from '../../providers/identity/availability.js';
 import { createDispatchValidationPassContext, validateDispatchMatrixRefs, } from '../../providers/identity/dispatch-validation.js';
@@ -28,6 +29,31 @@ const DISPATCH_MATRIX_TIERS = [
     'high',
     'frontier',
 ];
+const PJM_REMOTE_PROVIDERS = ['github', 'linear', 'jira'];
+const PJM_REMOTE_OPERATIONS = [
+    'create',
+    'update-fields',
+    'transition',
+    'annotate',
+    'delete',
+    'relink',
+    'detach',
+    'recreate',
+];
+const PJM_REMOTE_CONFIG_KEYS = [
+    'pjm.remote',
+    'pjm.remote.schemaVersion',
+    'pjm.remote.storage.state',
+    'pjm.remote.policy',
+    'pjm.remote.policy.description',
+    'pjm.remote.policy.authority.default',
+    ...PJM_REMOTE_OPERATIONS.map((operation) => `pjm.remote.policy.authority.operations.${operation}`),
+    ...PJM_REMOTE_PROVIDERS.flatMap((provider) => [
+        `pjm.remote.policy.providers.${provider}.description`,
+        `pjm.remote.policy.providers.${provider}.authority.default`,
+        ...PJM_REMOTE_OPERATIONS.map((operation) => `pjm.remote.policy.providers.${provider}.authority.operations.${operation}`),
+    ]),
+];
 const KEY_ORDER = [
     'activeIdea',
     'activeProject',
@@ -58,6 +84,7 @@ const KEY_ORDER = [
     'git.defaultBranch',
     'projects.root',
     'projects.defaultScope',
+    ...PJM_REMOTE_CONFIG_KEYS,
     'tools.brainstorm',
     'tools.core',
     'tools.docs',
@@ -94,7 +121,45 @@ const KEY_ORDER = [
     'workflow.gateTimeouts.artifact',
     'worktrees.root',
 ];
+const PJM_REMOTE_CONFIG_CATALOG = PJM_REMOTE_CONFIG_KEYS.map((key) => {
+    const aggregate = key === 'pjm.remote' || key === 'pjm.remote.policy';
+    const schemaVersion = key === 'pjm.remote.schemaVersion';
+    const storage = key === 'pjm.remote.storage.state';
+    const authority = key.includes('.authority.');
+    const description = key.endsWith('.description');
+    const type = schemaVersion
+        ? 'literal 1'
+        : storage
+            ? 'local | shared'
+            : authority
+                ? 'read-only | user-approved | user-authorized | autonomous'
+                : description
+                    ? 'none | managed-section | replace'
+                    : 'object';
+    return {
+        key,
+        group: 'PJM Remote Shared Policy',
+        file: '.oat/config.json',
+        scope: 'shared repo',
+        type,
+        defaultValue: schemaVersion
+            ? '1'
+            : storage
+                ? 'local'
+                : authority
+                    ? 'read-only'
+                    : description
+                        ? 'none'
+                        : 'unset',
+        mutability: aggregate || schemaVersion ? 'read-only' : 'read/write',
+        owningCommand: aggregate || schemaVersion
+            ? 'individual child keys'
+            : `oat config set ${key} <value> --shared`,
+        description: 'Repository-owned remote storage or mutation policy; host execution is discovered live and cannot broaden it.',
+    };
+});
 const CONFIG_CATALOG = [
+    ...PJM_REMOTE_CONFIG_CATALOG,
     {
         key: 'projects.root',
         group: 'Shared Repo (.oat/config.json)',
@@ -893,6 +958,7 @@ const DEFAULT_DEPENDENCIES = {
     resolveEffectiveConfig,
     resolveAssetsRoot,
     readFile: (path) => readFileDefault(path, 'utf8'),
+    atomicWriteJson,
     confirmAction,
     validateMatrixCell,
     createDispatchValidationPassContext,
@@ -905,6 +971,9 @@ function isConfigKey(value) {
         value === 'workflow.dispatchCeiling.providers' ||
         isDispatchCeilingProviderKey(value));
 }
+function isPjmRemoteConfigKey(key) {
+    return key.startsWith('pjm.remote');
+}
 function isDispatchCeilingProviderKey(value) {
     return (value.startsWith(DISPATCH_CEILING_PROVIDER_KEY_PREFIX) &&
         value.slice(DISPATCH_CEILING_PROVIDER_KEY_PREFIX.length).trim().length > 0);
@@ -1119,6 +1188,12 @@ function validateSurfaceForKey(key, surface) {
         }
         return;
     }
+    if (isPjmRemoteConfigKey(key)) {
+        if (surface !== 'shared') {
+            throw new Error(`Cannot set '${key}' at '${surface}' scope. PJM remote policy and storage can only be set at shared scope.`);
+        }
+        return;
+    }
     if (key.startsWith('explainers.')) {
         const allowed = key === 'explainers.defaults.style' ||
             key === 'explainers.defaults.palette' ||
@@ -1532,6 +1607,98 @@ function formatResolvedValue(value) {
     }
     return String(value);
 }
+function defaultPjmRemoteSharedConfig() {
+    return {
+        schemaVersion: 1,
+        storage: { state: 'local' },
+        policy: {
+            description: 'none',
+            authority: { default: 'read-only', operations: {} },
+            providers: {},
+        },
+    };
+}
+function applyPjmRemoteSharedValue(current, key, rawValue) {
+    if (key === 'pjm.remote' ||
+        key === 'pjm.remote.policy' ||
+        key === 'pjm.remote.schemaVersion') {
+        throw new Error(`Config key '${key}' is read-only; set one of its documented child keys.`);
+    }
+    const remote = structuredClone(current ?? defaultPjmRemoteSharedConfig());
+    if (key === 'pjm.remote.storage.state') {
+        const state = rawValue.trim();
+        if (state !== 'local' && state !== 'shared') {
+            throw new Error(`Invalid value for ${key}: expected one of local | shared, got '${rawValue}'.`);
+        }
+        if (state === 'shared') {
+            throw new Error("Shared operational storage requires 'oat pjm remote storage shared' preview and approval; direct config set is blocked.");
+        }
+        remote.storage = { state };
+        return remote;
+    }
+    const descriptions = [
+        'none',
+        'managed-section',
+        'replace',
+    ];
+    const authorities = [
+        'read-only',
+        'user-approved',
+        'user-authorized',
+        'autonomous',
+    ];
+    const value = rawValue.trim();
+    if (key === 'pjm.remote.policy.description') {
+        if (!descriptions.includes(value)) {
+            throw new Error(`Invalid value for ${key}: expected one of ${descriptions.join(' | ')}, got '${rawValue}'.`);
+        }
+        remote.policy.description = value;
+        return remote;
+    }
+    if (!authorities.includes(value)) {
+        if (key.endsWith('.description')) {
+            if (!descriptions.includes(value)) {
+                throw new Error(`Invalid value for ${key}: expected one of ${descriptions.join(' | ')}, got '${rawValue}'.`);
+            }
+        }
+        else {
+            throw new Error(`Invalid value for ${key}: expected one of ${authorities.join(' | ')}, got '${rawValue}'.`);
+        }
+    }
+    if (key === 'pjm.remote.policy.authority.default') {
+        remote.policy.authority.default = value;
+        return remote;
+    }
+    const repositoryOperationPrefix = 'pjm.remote.policy.authority.operations.';
+    if (key.startsWith(repositoryOperationPrefix)) {
+        const operation = key.slice(repositoryOperationPrefix.length);
+        remote.policy.authority.operations ??= {};
+        remote.policy.authority.operations[operation] =
+            value;
+        return remote;
+    }
+    const parts = key.split('.');
+    const provider = parts[4];
+    remote.policy.providers ??= {};
+    const providerPolicy = structuredClone(remote.policy.providers[provider] ?? {});
+    if (parts[5] === 'description') {
+        providerPolicy.description = value;
+    }
+    else {
+        providerPolicy.authority ??= {};
+        if (parts[6] === 'default') {
+            providerPolicy.authority.default = value;
+        }
+        else {
+            providerPolicy.authority.operations ??= {};
+            const operation = parts[7];
+            providerPolicy.authority.operations[operation] =
+                value;
+        }
+    }
+    remote.policy.providers[provider] = providerPolicy;
+    return remote;
+}
 async function getConfigValue(repoRoot, userConfigDir, key, dependencies, preserveRawObject = false) {
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const entry = resolved.resolved[key];
@@ -1600,6 +1767,19 @@ async function listConfigKeys(repoRoot, userConfigDir, dependencies) {
 async function setConfigValue(repoRoot, userConfigDir, key, rawValue, surface, dependencies, warn) {
     validateSurfaceForKey(key, surface);
     const effectiveSurface = surface === 'auto' ? defaultSurfaceForKey(key) : surface;
+    if (isPjmRemoteConfigKey(key)) {
+        const config = await dependencies.readOatConfig(repoRoot);
+        const remote = applyPjmRemoteSharedValue(config.pjm?.remote, key, rawValue);
+        await dependencies.writeOatConfig(repoRoot, {
+            ...config,
+            pjm: { ...config.pjm, remote },
+        });
+        return {
+            key,
+            value: rawValue.trim(),
+            source: 'shared',
+        };
+    }
     if (isWorkflowKey(key)) {
         const parsedValue = parseWorkflowValue(key, rawValue);
         const displayValue = formatResolvedValue(parsedValue);
@@ -1990,7 +2170,8 @@ function configPathForKey(key) {
     }
     if (key.startsWith('explainers.') ||
         key.startsWith('documentation.') ||
-        key.startsWith('archive.')) {
+        key.startsWith('archive.') ||
+        isPjmRemoteConfigKey(key)) {
         return key.split('.');
     }
     if (key === 'git.defaultBranch' ||
@@ -2024,6 +2205,15 @@ function configPathForKey(key) {
  */
 async function unsetConfigValue(repoRoot, userConfigDir, key, surface, dependencies, warn) {
     validateSurfaceForKey(key, surface);
+    // These are structural views (and, for schemaVersion, the discriminator
+    // that makes the remote policy readable), just as they are for `set`.
+    // Refuse them before resolving config so an unset attempt can never be
+    // mistaken for permission to remove the whole policy boundary.
+    if (key === 'pjm.remote' ||
+        key === 'pjm.remote.policy' ||
+        key === 'pjm.remote.schemaVersion') {
+        throw new Error(`Config key '${key}' is read-only; unset one of its documented child keys.`);
+    }
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const envShadowed = resolved.resolved[key]?.source === 'env';
     if (key === 'activeProject' || key === 'lastPausedProject') {
@@ -2107,6 +2297,22 @@ async function removeFromSurface(repoRoot, userConfigDir, key, effectiveSurface,
         return false;
     }
     const configPath = join(repoRoot, '.oat', 'config.json');
+    if (isPjmRemoteConfigKey(key)) {
+        // PJM remote normalization materializes fail-closed defaults such as
+        // policy.description=none and authority.default=read-only. Removing a
+        // leaf from that normalized object and sending it through writeOatConfig
+        // would therefore write the leaf straight back while reporting success.
+        // The config has already passed the strict shared-policy reader in
+        // resolveEffectiveConfig, so perform this removal against the validated raw
+        // document and atomically persist only the requested structural change.
+        const repaired = await removeConfigPathOnDisk(configPath, path);
+        if (!repaired) {
+            return false;
+        }
+        preservePjmRemotePolicyBoundary(repaired, path);
+        await dependencies.atomicWriteJson(configPath, repaired);
+        return true;
+    }
     const sharedConfig = key === 'documentation.excludes'
         ? await dependencies.readOatConfigForDocumentationExcludesRepair(repoRoot)
         : key === 'documentation.instructionPointerExcludes'
@@ -2126,6 +2332,31 @@ async function removeFromSurface(repoRoot, userConfigDir, key, effectiveSurface,
     }
     return false;
 }
+/**
+ * Keep the required PJM remote policy object when unsetting its final leaf.
+ *
+ * The recursive remover normally prunes empty parents. For this one schema,
+ * however, `policy` is the structural boundary that keeps sibling remote state
+ * (notably `storage.state=shared`) readable. An empty policy is valid and
+ * normalizes to the fail-closed defaults; an absent policy makes the complete
+ * remote object unreadable.
+ */
+function preservePjmRemotePolicyBoundary(config, path) {
+    if (path[0] !== 'pjm' || path[1] !== 'remote' || path[2] !== 'policy') {
+        return;
+    }
+    const pjm = config.pjm;
+    if (!isRecord(pjm)) {
+        return;
+    }
+    const remote = pjm.remote;
+    if (!isRecord(remote)) {
+        return;
+    }
+    if (!Object.prototype.hasOwnProperty.call(remote, 'policy')) {
+        remote.policy = {};
+    }
+}
 /**
  * Remove `path` from the raw JSON on disk, ignoring normalization.
  *

package/dist/commands/pjm/doctor.d.ts

@@ -1,8 +1,10 @@
 import type { DoctorCheck } from '../../ui/output.js';
 import { type PjmAdoption } from './adoption.js';
+import { type RemoteDoctorInput } from './remote/doctor.js';
 export interface PjmDoctorOptions {
     projectRoot?: string;
     adoption?: PjmAdoption;
+    remote?: RemoteDoctorInput;
 }
 export declare function runPjmDoctorChecks(repoRoot: string, options?: PjmDoctorOptions): Promise<DoctorCheck[]>;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/pjm/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AA4MlE,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CA2UxB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA8MhF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CAmVxB"}