@open-agent-toolkit/cli 0.2.64 → 0.2.66

package/dist/commands/pjm/doctor.js

@@ -1,9 +1,15 @@
+import { execFile as execFileCallback } from 'node:child_process';
 import { access, readdir, readFile } from 'node:fs/promises';
-import { basename, dirname, join } from 'node:path';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { promisify } from 'node:util';
 import { BACKLOG_ITEM_STATUSES, extractBacklogStatus, isTerminalBacklogStatus, isValidBacklogStatus, } from '../backlog/shared/item-status.js';
 import { getFrontmatterBlock } from '../shared/frontmatter.js';
+import { parseJsonConfig } from '../../config/json.js';
 import { resolvePjmAdoption } from './adoption.js';
 import { CANONICAL_REPO_REFERENCE_PATHS } from './init.js';
+import { runRemoteDoctorChecks } from './remote/doctor.js';
+import { resolveRemoteStorageLocations } from './remote/storage-locator.js';
+const execFileAsync = promisify(execFileCallback);
 const ALLOWED_TOP_LEVEL_DIRECTORIES = new Set([
     'pjm',
     'reference',
@@ -435,5 +441,69 @@ export async function runPjmDoctorChecks(repoRoot, options = {}) {
             ? undefined
             : 'Run `oat backlog archive <id>` to archive each completed item still under items/.',
     });
+    const defaultRemote = await resolveDefaultRemoteDoctorInput(projectRoot, repoRoot);
+    checks.push(...(await runRemoteDoctorChecks(options.remote ?? defaultRemote)));
     return checks;
 }
+async function resolveDefaultRemoteDoctorInput(projectRoot, pjmRepoRoot) {
+    const rawConfig = await readRawRemoteConfig(projectRoot);
+    const stateStorage = isRecord(rawConfig) &&
+        isRecord(rawConfig.storage) &&
+        rawConfig.storage.state === 'shared'
+        ? 'shared'
+        : 'local';
+    try {
+        const [{ stdout: commonDirOutput }, { stdout: originOutput }] = await Promise.all([
+            execFileAsync('git', ['rev-parse', '--git-common-dir'], {
+                cwd: projectRoot,
+            }),
+            execFileAsync('git', ['config', '--get', 'remote.origin.url'], {
+                cwd: projectRoot,
+            }).catch(() => ({ stdout: '' })),
+        ]);
+        const commonDir = commonDirOutput.trim();
+        const gitCommonDir = isAbsolute(commonDir)
+            ? commonDir
+            : resolve(projectRoot, commonDir);
+        const repositoryIdentity = originOutput.trim() || `local-repository:${resolve(projectRoot)}`;
+        const locations = resolveRemoteStorageLocations({
+            repoRoot: projectRoot,
+            gitCommonDir,
+            repositoryIdentity,
+            stateStorage,
+            target: { kind: 'backlog', scope: 'shared', path: null },
+        });
+        return {
+            portableBindingsDir: locations.portable.bindingsDir,
+            operationalBindingsDir: locations.operational.bindingsDir,
+            operationsDir: locations.operational.operationsDir,
+            policy: rawConfig,
+        };
+    }
+    catch {
+        const fallbackRoot = join(pjmRepoRoot, 'pjm', 'remote');
+        return {
+            portableBindingsDir: join(fallbackRoot, 'bindings'),
+            operationalBindingsDir: join(fallbackRoot, 'state', 'bindings'),
+            operationsDir: join(fallbackRoot, 'state', 'operations'),
+            policy: rawConfig,
+        };
+    }
+}
+async function readRawRemoteConfig(projectRoot) {
+    const content = await readIfExists(join(projectRoot, '.oat', 'config.json'));
+    if (!content)
+        return undefined;
+    try {
+        const config = parseJsonConfig(content, join(projectRoot, '.oat', 'config.json'));
+        if (!isRecord(config) || !isRecord(config.pjm))
+            return undefined;
+        return config.pjm.remote;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/commands/pjm/index.d.ts

@@ -6,6 +6,7 @@ import { resolvePjmAdoption } from './adoption.js';
 import { runPjmDoctorChecks } from './doctor.js';
 import { initializeRepoReference } from './init.js';
 import { migratePjmRepo, readPjmMigrationPrompt } from './migrate.js';
+import { createPjmRemoteCommand } from './remote/index.js';
 interface PjmCommandDependencies {
     buildCommandContext: typeof buildCommandContext;
     resolveProjectRoot: typeof resolveProjectRoot;
@@ -15,6 +16,7 @@ interface PjmCommandDependencies {
     runPjmDoctorChecks: typeof runPjmDoctorChecks;
     migratePjmRepo: typeof migratePjmRepo;
     readPjmMigrationPrompt: typeof readPjmMigrationPrompt;
+    createPjmRemoteCommand: typeof createPjmRemoteCommand;
 }
 export declare function createPjmCommand(overrides?: Partial<PjmCommandDependencies>): Command;
 export {};

package/dist/commands/pjm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAiBnE,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA6FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CAyLT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAiBxD,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA8FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CA0LT"}

package/dist/commands/pjm/index.js

@@ -10,6 +10,7 @@ import { resolvePjmAdoption } from './adoption.js';
 import { runPjmDoctorChecks } from './doctor.js';
 import { initializeRepoReference, INSTRUCTIONS_SYNC_HINT } from './init.js';
 import { migratePjmRepo, readPjmMigrationPrompt } from './migrate.js';
+import { createPjmRemoteCommand } from './remote/index.js';
 const DEFAULT_DEPENDENCIES = {
     buildCommandContext,
     resolveProjectRoot,
@@ -19,6 +20,7 @@ const DEFAULT_DEPENDENCIES = {
     runPjmDoctorChecks,
     migratePjmRepo,
     readPjmMigrationPrompt,
+    createPjmRemoteCommand,
 };
 async function resolveRepoRoot(context, projectRoot, configuredRoot) {
     if (configuredRoot) {
@@ -86,6 +88,7 @@ export function createPjmCommand(overrides = {}) {
         ...overrides,
     };
     const cmd = new Command('pjm').description('Manage project-management repo reference docs');
+    cmd.addCommand(dependencies.createPjmRemoteCommand());
     cmd
         .command('init')
         .description('Scaffold the canonical PJM repo reference surface')

package/dist/commands/pjm/remote/__integration__/lifecycle-harness.d.ts

@@ -0,0 +1,60 @@
+import { type ExternalActionEnvelope } from '../external-action.js';
+import { type OutboundProjection } from '../outbound-projection-safety.js';
+export type CrashPoint = 'after-planned' | 'after-attempt-started' | 'after-observation' | 'after-metadata' | 'after-state' | 'after-snapshot' | 'after-baseline' | 'after-association' | 'after-terminal' | null;
+export interface HarnessOperation {
+    operationId: string;
+    bindingId: string;
+    state: 'planned' | 'attempt-started' | 'verification-pending' | 'materializing' | 'verified' | 'uncertain' | 'blocked';
+    previewDigest: string;
+    approvalDigest: string;
+    capabilityEvidenceDigest: string;
+    action: ExternalActionEnvelope | null;
+    observationDigest: string | null;
+    materializationSteps: string[];
+}
+export declare class FakeLifecycleStore {
+    readonly operations: Map<string, HarnessOperation>;
+}
+export declare class GenericHostExecutor {
+    readonly result: {
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    };
+    calls: number;
+    constructor(result?: {
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    });
+    execute(_action: ExternalActionEnvelope): Promise<{
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    }>;
+}
+export interface LifecycleHarnessOptions {
+    store?: FakeLifecycleStore;
+    executor?: GenericHostExecutor;
+    now?: () => string;
+    id?: () => string;
+    readback?: () => Promise<OutboundProjection>;
+}
+export declare class LifecycleHarness {
+    readonly store: FakeLifecycleStore;
+    readonly executor: GenericHostExecutor;
+    readonly now: () => string;
+    readonly id: () => string;
+    readonly readback: () => Promise<OutboundProjection>;
+    constructor(options?: LifecycleHarnessOptions);
+    publish(input: {
+        operationId?: string;
+        bindingId: string;
+        provider: 'github' | 'linear' | 'jira';
+        context: Record<string, string>;
+        projection: OutboundProjection;
+        previewDigest: string;
+        approvalDigest: string;
+        capabilityEvidenceDigest: string;
+        crashAt?: CrashPoint;
+    }): Promise<HarnessOperation>;
+    private crash;
+}
+//# sourceMappingURL=lifecycle-harness.d.ts.map

package/dist/commands/pjm/remote/__integration__/lifecycle-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-harness.d.ts","sourceRoot":"","sources":["../../../../../src/commands/pjm/remote/__integration__/lifecycle-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,uBAAuB,GACvB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,gBAAgB,GAChB,IAAI,CAAC;AAET,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EACD,SAAS,GACT,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,UAAU,GACV,WAAW,GACX,SAAS,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,UAAU,gCAAuC;CAC3D;AAED,qBAAa,mBAAmB;IAG5B,QAAQ,CAAC,MAAM,EAAE;QACf,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC;KAC3B;IALH,KAAK,SAAK;IACV,YACW,MAAM,GAAE;QACf,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC;KAI3B,EACC;IAEE,OAAO,CAAC,OAAO,EAAE,sBAAsB;wBARzB,WAAW,GAAG,SAAS;2BACpB,MAAM;OAU5B;CACF;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9C;AAED,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErD,YAAY,OAAO,GAAE,uBAA4B,EAOhD;IAEK,OAAO,CAAC,KAAK,EAAE;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,UAAU,EAAE,kBAAkB,CAAC;QAC/B,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,wBAAwB,EAAE,MAAM,CAAC;QACjC,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuH5B;IAED,OAAO,CAAC,KAAK;CAGd"}

package/dist/commands/pjm/remote/__integration__/lifecycle-harness.js

@@ -0,0 +1,151 @@
+import { buildExternalAction, } from '../external-action.js';
+import { assessOutboundProjectionSafety, } from '../outbound-projection-safety.js';
+export class FakeLifecycleStore {
+    operations = new Map();
+}
+export class GenericHostExecutor {
+    result;
+    calls = 0;
+    constructor(result = {
+        classification: 'committed',
+        observationDigest: 'sha256:observation',
+    }) {
+        this.result = result;
+    }
+    async execute(_action) {
+        this.calls += 1;
+        return this.result;
+    }
+}
+export class LifecycleHarness {
+    store;
+    executor;
+    now;
+    id;
+    readback;
+    constructor(options = {}) {
+        this.store = options.store ?? new FakeLifecycleStore();
+        this.executor = options.executor ?? new GenericHostExecutor();
+        this.now = options.now ?? (() => '2026-08-31T12:00:00.000Z');
+        this.id = options.id ?? (() => 'op_harness_001');
+        this.readback =
+            options.readback ?? (async () => ({ title: 'Published title' }));
+    }
+    async publish(input) {
+        const operationId = input.operationId ?? this.id();
+        let operation = this.store.operations.get(operationId);
+        if (operation?.state === 'verified' ||
+            operation?.state === 'blocked' ||
+            operation?.state === 'uncertain') {
+            return operation;
+        }
+        if (!operation) {
+            if (input.approvalDigest !== input.previewDigest) {
+                operation = {
+                    operationId,
+                    bindingId: input.bindingId,
+                    state: 'blocked',
+                    previewDigest: input.previewDigest,
+                    approvalDigest: input.approvalDigest,
+                    capabilityEvidenceDigest: input.capabilityEvidenceDigest,
+                    action: null,
+                    observationDigest: null,
+                    materializationSteps: [],
+                };
+                this.store.operations.set(operationId, operation);
+                return operation;
+            }
+            operation = {
+                operationId,
+                bindingId: input.bindingId,
+                state: 'planned',
+                previewDigest: input.previewDigest,
+                approvalDigest: input.approvalDigest,
+                capabilityEvidenceDigest: input.capabilityEvidenceDigest,
+                action: null,
+                observationDigest: null,
+                materializationSteps: [],
+            };
+            this.store.operations.set(operationId, operation);
+            this.crash(input.crashAt, 'after-planned');
+        }
+        if (operation.capabilityEvidenceDigest !== input.capabilityEvidenceDigest) {
+            operation.state = 'blocked';
+            return operation;
+        }
+        if (operation.state === 'attempt-started') {
+            operation.state = 'uncertain';
+            return operation;
+        }
+        if (operation.state === 'planned') {
+            const safety = assessOutboundProjectionSafety(input.projection, {
+                assessedAt: this.now(),
+            });
+            operation.action = buildExternalAction({
+                operationId,
+                stepId: 'step_harness_001',
+                provider: input.provider,
+                semanticOperation: 'update',
+                context: input.context,
+                intent: { fields: input.projection },
+                expectedObservation: {
+                    fields: Object.keys(input.projection),
+                    requireIdentity: true,
+                    stableId: null,
+                    capabilityEvidenceDigest: input.capabilityEvidenceDigest,
+                },
+                persistedPreview: {
+                    projectionDigest: safety.projectionDigest,
+                    safetyResultDigest: safety.resultDigest,
+                },
+                projection: input.projection,
+                outboundSafety: safety,
+            });
+            operation.state = 'attempt-started';
+            this.crash(input.crashAt, 'after-attempt-started');
+            const observation = await this.executor.execute(operation.action);
+            operation.observationDigest = observation.observationDigest;
+            if (observation.classification === 'unknown') {
+                operation.state = 'uncertain';
+                return operation;
+            }
+            operation.state = 'verification-pending';
+            this.crash(input.crashAt, 'after-observation');
+        }
+        if (operation.state === 'verification-pending') {
+            try {
+                const observed = await this.readback();
+                if (!Object.entries(input.projection).every(([field, value]) => observed[field] === value)) {
+                    operation.state = 'uncertain';
+                    return operation;
+                }
+                operation.state = 'materializing';
+            }
+            catch {
+                operation.state = 'uncertain';
+                return operation;
+            }
+        }
+        if (operation.state === 'materializing') {
+            for (const step of [
+                'metadata',
+                'state',
+                'snapshot',
+                'baseline',
+                'association',
+            ]) {
+                if (operation.materializationSteps.includes(step))
+                    continue;
+                operation.materializationSteps.push(step);
+                this.crash(input.crashAt, `after-${step}`);
+            }
+            operation.state = 'verified';
+            this.crash(input.crashAt, 'after-terminal');
+        }
+        return operation;
+    }
+    crash(configured, actual) {
+        if (configured === actual)
+            throw new Error(`crash:${actual}`);
+    }
+}

package/dist/commands/pjm/remote/association.d.ts

@@ -0,0 +1,27 @@
+export type AssociatedIssueRef = {
+    kind: 'legacy-scalar';
+    ref: string;
+} | {
+    kind: 'reference';
+    type: string;
+    ref: string;
+    bindingId?: string;
+} | {
+    kind: 'preserved';
+    value: unknown;
+};
+export type SerializedAssociatedIssue = string | {
+    type: string;
+    ref: string;
+    binding?: string;
+} | unknown;
+export declare function parseAssociatedIssues(value: unknown): AssociatedIssueRef[];
+export declare function serializeAssociatedIssues(refs: readonly AssociatedIssueRef[]): SerializedAssociatedIssue[];
+export declare function findDanglingAssociatedIssueBindings(refs: readonly AssociatedIssueRef[], knownBindingIds: ReadonlySet<string>): string[];
+export declare function isAssociationAuthorizing(_ref: AssociatedIssueRef): false;
+export declare function materializeBoundAssociation(existing: readonly AssociatedIssueRef[], input: {
+    type: string;
+    ref: string;
+    bindingId: string;
+}): AssociatedIssueRef[];
+//# sourceMappingURL=association.d.ts.map

package/dist/commands/pjm/remote/association.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"association.d.ts","sourceRoot":"","sources":["../../../../src/commands/pjm/remote/association.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtC;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE1C,MAAM,MAAM,yBAAyB,GACjC,MAAM,GACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC;AAEZ,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,EAAE,CA0B1E;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAClC,yBAAyB,EAAE,CAU7B;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,SAAS,kBAAkB,EAAE,EACnC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GACnC,MAAM,EAAE,CAYV;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,KAAK,CAExE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtD,kBAAkB,EAAE,CAoBtB"}

package/dist/commands/pjm/remote/association.js

@@ -0,0 +1,68 @@
+export function parseAssociatedIssues(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.map((entry) => {
+        if (typeof entry === 'string') {
+            return { kind: 'legacy-scalar', ref: entry };
+        }
+        if (isRecord(entry) &&
+            typeof entry.type === 'string' &&
+            entry.type.length > 0 &&
+            typeof entry.ref === 'string' &&
+            entry.ref.length > 0 &&
+            (entry.binding === undefined ||
+                (typeof entry.binding === 'string' && entry.binding.length > 0))) {
+            return {
+                kind: 'reference',
+                type: entry.type,
+                ref: entry.ref,
+                ...(typeof entry.binding === 'string'
+                    ? { bindingId: entry.binding }
+                    : {}),
+            };
+        }
+        return { kind: 'preserved', value: entry };
+    });
+}
+export function serializeAssociatedIssues(refs) {
+    return refs.map((ref) => {
+        if (ref.kind === 'legacy-scalar')
+            return ref.ref;
+        if (ref.kind === 'preserved')
+            return ref.value;
+        return {
+            type: ref.type,
+            ref: ref.ref,
+            ...(ref.bindingId ? { binding: ref.bindingId } : {}),
+        };
+    });
+}
+export function findDanglingAssociatedIssueBindings(refs, knownBindingIds) {
+    return [
+        ...new Set(refs.flatMap((ref) => ref.kind === 'reference' &&
+            ref.bindingId &&
+            !knownBindingIds.has(ref.bindingId)
+            ? [ref.bindingId]
+            : [])),
+    ];
+}
+export function isAssociationAuthorizing(_ref) {
+    return false;
+}
+export function materializeBoundAssociation(existing, input) {
+    if (existing.some((entry) => entry.kind === 'reference' && entry.bindingId === input.bindingId)) {
+        throw new Error(`Association for binding '${input.bindingId}' already exists.`);
+    }
+    return [
+        ...existing,
+        {
+            kind: 'reference',
+            type: input.type,
+            ref: input.ref,
+            bindingId: input.bindingId,
+        },
+    ];
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/commands/pjm/remote/authority.d.ts

@@ -0,0 +1,210 @@
+import type { OatPjmRemoteDescriptionMode, OatPjmRemoteMutationAuthority, OatPjmRemoteOperationClass } from '../../../config/oat-config.js';
+import { z } from 'zod';
+import { type BindingPreview, type PreviewApproval } from './preview.js';
+interface AuthorityLayerInput {
+    default?: unknown;
+    operations?: Partial<Record<OatPjmRemoteOperationClass, unknown>>;
+}
+interface PolicyLayerInput {
+    description?: unknown;
+    authority?: AuthorityLayerInput;
+}
+export interface ResolveEffectiveRemotePolicyInput {
+    repository: PolicyLayerInput;
+    provider?: PolicyLayerInput;
+    binding?: PolicyLayerInput;
+    completeDescriptionReplacement?: boolean;
+}
+export interface AuthorityResolutionTrace {
+    builtIn: 'read-only';
+    repository: {
+        value: OatPjmRemoteMutationAuthority;
+        source: 'built-in' | 'default' | 'operation';
+    };
+    provider: {
+        value: OatPjmRemoteMutationAuthority | null;
+        source: 'inherit' | 'default' | 'operation';
+    };
+    bindingDefault: OatPjmRemoteMutationAuthority | null;
+    bindingOperation: OatPjmRemoteMutationAuthority | null;
+    hardFloor: 'user-approved' | null;
+    final: OatPjmRemoteMutationAuthority;
+}
+export interface EffectiveRemotePolicy {
+    description: OatPjmRemoteDescriptionMode;
+    descriptionTrace: {
+        builtIn: 'none';
+        repository: OatPjmRemoteDescriptionMode;
+        provider: OatPjmRemoteDescriptionMode | null;
+        binding: OatPjmRemoteDescriptionMode | null;
+        final: OatPjmRemoteDescriptionMode;
+    };
+    authority: Record<OatPjmRemoteOperationClass, OatPjmRemoteMutationAuthority>;
+    authorityTrace: Record<OatPjmRemoteOperationClass, AuthorityResolutionTrace>;
+    hardFloors: Array<'replace-description' | 'destructive' | 'identity-resolution'>;
+    findings: string[];
+}
+export declare const ProductionMutationInvocationSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"interactive">;
+    sourceId: z.ZodString;
+    invocationId: z.ZodString;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    instruction: z.ZodObject<{
+        operationClass: z.ZodEnum<["create", "update-fields", "transition", "annotate", "delete", "relink", "detach", "recreate"]>;
+        targetId: z.ZodString;
+    } & {
+        evidenceDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        targetId: string;
+        evidenceDigest: string;
+    }, {
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        targetId: string;
+        evidenceDigest: string;
+    }>;
+    approval: z.ZodNullable<z.ZodObject<{
+        previewDigest: z.ZodString;
+        operationClass: z.ZodEnum<["create", "update-fields", "transition", "annotate", "delete", "relink", "detach", "recreate"]>;
+        approvedAt: z.ZodString;
+        actor: z.ZodString;
+        source: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        previewDigest: string;
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        approvedAt: string;
+        actor: string;
+        source: string;
+    }, {
+        previewDigest: string;
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        approvedAt: string;
+        actor: string;
+        source: string;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: 1;
+    kind: "interactive";
+    sourceId: string;
+    invocationId: string;
+    issuedAt: string;
+    expiresAt: string;
+    instruction: {
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        targetId: string;
+        evidenceDigest: string;
+    };
+    approval: {
+        previewDigest: string;
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        approvedAt: string;
+        actor: string;
+        source: string;
+    } | null;
+}, {
+    schemaVersion: 1;
+    kind: "interactive";
+    sourceId: string;
+    invocationId: string;
+    issuedAt: string;
+    expiresAt: string;
+    instruction: {
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        targetId: string;
+        evidenceDigest: string;
+    };
+    approval: {
+        previewDigest: string;
+        operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+        approvedAt: string;
+        actor: string;
+        source: string;
+    } | null;
+}>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"workflow">;
+    sourceId: z.ZodString;
+    invocationId: z.ZodString;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    operationClass: z.ZodEnum<["create", "update-fields", "transition", "annotate", "delete", "relink", "detach", "recreate"]>;
+    targetId: z.ZodString;
+    workflowId: z.ZodString;
+    revision: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: 1;
+    kind: "workflow";
+    sourceId: string;
+    invocationId: string;
+    issuedAt: string;
+    expiresAt: string;
+    operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+    targetId: string;
+    workflowId: string;
+    revision: string;
+}, {
+    schemaVersion: 1;
+    kind: "workflow";
+    sourceId: string;
+    invocationId: string;
+    issuedAt: string;
+    expiresAt: string;
+    operationClass: "annotate" | "create" | "delete" | "detach" | "recreate" | "relink" | "transition" | "update-fields";
+    targetId: string;
+    workflowId: string;
+    revision: string;
+}>]>;
+export type ProductionMutationInvocation = z.infer<typeof ProductionMutationInvocationSchema>;
+export declare function parseProductionMutationInvocation(value: unknown): ProductionMutationInvocation;
+export declare function validateProductionMutationAuthority(input: {
+    effective: OatPjmRemoteMutationAuthority;
+    invocation: ProductionMutationInvocation | null;
+    preview: BindingPreview;
+    expected: {
+        operationClass: OatPjmRemoteOperationClass;
+        targetId: string;
+        workflowId: string;
+        workflowRevision: string;
+    };
+    now: string;
+    approvalMaxAgeMs: number;
+}): {
+    authority: {
+        effective: OatPjmRemoteMutationAuthority;
+        sourceDigest: string;
+    };
+    approval: PreviewApproval | null;
+};
+export declare function assessProductionMutationAuthority(input: {
+    effective: OatPjmRemoteMutationAuthority;
+    invocation: ProductionMutationInvocation | null;
+    preview: BindingPreview;
+    expected: {
+        operationClass: OatPjmRemoteOperationClass;
+        targetId: string;
+        workflowId: string;
+        workflowRevision: string;
+    };
+    now: string;
+    approvalMaxAgeMs: number;
+}): {
+    status: 'ready';
+    authority: {
+        effective: OatPjmRemoteMutationAuthority;
+        sourceDigest: string;
+    };
+    approval: PreviewApproval | null;
+} | {
+    status: 'needs-review';
+    authority: {
+        effective: 'user-approved';
+        sourceDigest: string;
+    };
+    approval: null;
+    previewDigest: string;
+};
+export declare function resolveEffectiveRemotePolicy(input: ResolveEffectiveRemotePolicyInput): EffectiveRemotePolicy;
+export {};
+//# sourceMappingURL=authority.d.ts.map

package/dist/commands/pjm/remote/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../../../src/commands/pjm/remote/authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,WAAW,CAAC;AAGnB,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC,CAAC;CACnE;AAED,UAAU,gBAAgB;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE;QACV,KAAK,EAAE,6BAA6B,CAAC;QACrC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;KAC9C,CAAC;IACF,QAAQ,EAAE;QACR,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAAC;QAC5C,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;KAC7C,CAAC;IACF,cAAc,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACrD,gBAAgB,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACvD,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,6BAA6B,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,2BAA2B,CAAC;IACzC,gBAAgB,EAAE;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,2BAA2B,CAAC;QACxC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAC;QAC7C,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;QAC5C,KAAK,EAAE,2BAA2B,CAAC;KACpC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,0BAA0B,EAAE,6BAA6B,CAAC,CAAC;IAC7E,cAAc,EAAE,MAAM,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;IAC7E,UAAU,EAAE,KAAK,CACf,qBAAqB,GAAG,aAAa,GAAG,qBAAqB,CAC9D,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAmBD,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+C7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,GACb,4BAA4B,CAE9B;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,SAAS,EAAE,6BAA6B,CAAC;IACzC,UAAU,EAAE,4BAA4B,GAAG,IAAI,CAAC;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE;QACR,cAAc,EAAE,0BAA0B,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG;IACF,SAAS,EAAE;QAAE,SAAS,EAAE,6BAA6B,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAQA;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,6BAA6B,CAAC;IACzC,UAAU,EAAE,4BAA4B,GAAG,IAAI,CAAC;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE;QACR,cAAc,EAAE,0BAA0B,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GACG;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE;QACT,SAAS,EAAE,6BAA6B,CAAC;QACzC,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,GACD;IACE,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE;QACT,SAAS,EAAE,eAAe,CAAC;QAC3B,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE,IAAI,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB,CAiGJ;AAkDD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,qBAAqB,CAgDvB"}