@open-agent-toolkit/cli 0.2.65 → 0.2.66

package/assets/skills/oat-pjm-remote/SKILL.md

@@ -0,0 +1,101 @@
+---
+name: oat-pjm-remote
+description: Use when explicitly intaking, publishing, refreshing, reconciling, or continuing an OAT PJM remote binding through a live host capability. Keeps policy, approval, state, and success verdicts in the OAT CLI while the host discovers and invokes currently granted execution capabilities.
+disable-model-invocation: false
+user-invocable: true
+allowed-tools: Read, Bash, AskUserQuestion
+metadata:
+  version: 1.0.2
+---
+
+# Operate Remote Project Bindings
+
+Use the OAT CLI as the authority for policy, approval, durable operation state,
+and verified outcomes. Your role is limited to live capability discovery,
+executing the exact semantic action emitted by the CLI, and returning one
+bounded sanitized observation.
+
+## Progress Indicators (User-Facing)
+
+Provide short updates at the durable boundaries: preflight, CLI preview or
+handoff, live capability selection, observation submission, and terminal CLI
+verdict. Never describe a host invocation result as success before the CLI has
+verified authoritative read-back.
+
+```text
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+OAT ▸ REMOTE PROJECT MANAGEMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+- `[1/4] Verifying PJM adoption and local policy…`
+- `[2/4] Discovering a matching live host capability…`
+- `[3/4] Preparing the durable CLI action with bounded evidence…`
+- `[4/4] Submitting evidence for CLI verification…`
+
+## Preflight
+
+Run:
+
+```bash
+oat pjm doctor --json
+```
+
+Continue only when `adoption.state` is `declared` or `inferred-legacy`. For
+`none` or `partial-initialization`, stop before any remote action and direct the
+operator to `oat pjm init`.
+
+## Live Capability Discovery
+
+Before the first provider-contacting remote command, inspect currently granted
+MCP or connector tools and their live descriptions. Select a capability only
+when its semantic operation, provider, and exact
+account/workspace/site/repository context match the request.
+
+If no capable granted connector exists, you may inspect an already configured
+provider CLI and its live help before the first attempt. Do not install a tool,
+request authentication material, encode or retain its command dialect, or
+switch execution surfaces after an attempt begins.
+
+Construct only the bounded provider-neutral capability evidence accepted by the
+CLI: provider, exact context, surface kind, availability, semantic capabilities,
+observation time, and evidence digest. Never include a native tool name, schema,
+catalog, raw description, help text, request, or response.
+
+## Lifecycle
+
+1. Complete live capability discovery before the first provider-contacting
+   remote command.
+2. Run the requested `oat pjm remote` command in JSON mode and pass the bounded
+   evidence through `--capability-evidence-stdin`. For mutations, also supply
+   only the current caller-owned authority evidence requested by the command.
+3. Treat CLI policy, preview, approval, safety, and terminal verdicts as
+   authoritative. Never broaden a field mask or reconstruct publication
+   content from repository files.
+4. When the CLI returns `pending` with `externalAction`, follow
+   [the action protocol](references/external-action-protocol.md) and execute the
+   exact emitted semantic action at most once.
+5. Submit exactly one sanitized observation through `operation continue`.
+6. Continue only while the CLI emits another exact action for the same durable
+   operation. Stop on any terminal CLI envelope.
+
+Never infer success from a connector result, process exit, or visible remote
+change. Only a CLI `ok` envelope after authoritative read-back is success.
+
+## Discussion Reads
+
+Discussion is read-only evidence. Honor the CLI-provided page/cursor and maximum
+item limit. Return only the bounded sanitized observation. Do not persist a
+thread, assignee list, activity history, or native response. A requested local
+distillation is a separate local edit and never comment synchronization.
+
+## Safety Boundary
+
+- Never read, request, print, or persist authentication headers or credential
+  values.
+- Never scan the repository, worktree, Git history, or arbitrary files for
+  secrets.
+- Never add fields to the normalized outbound projection.
+- Never pass native requests, raw provider payloads, tool catalogs, or help
+  output into durable OAT evidence.
+- Never declare remote success directly.

package/assets/skills/oat-pjm-remote/references/external-action-protocol.md

@@ -0,0 +1,43 @@
+# External Action Protocol
+
+The CLI emits a versioned provider-neutral action containing a durable
+operation ID, step ID, action digest, provider context, semantic intent,
+expected observation contract, and (for mutation) the exact outbound
+projection and safety-result digests.
+
+Initial live connector discovery (or configured-CLI-help fallback) and bounded
+provider-neutral capability evidence construction happen before the first
+provider-contacting remote command. The evidence is passed through
+`--capability-evidence-stdin`; native tool names, schemas, catalogs,
+descriptions, help text, requests, and responses are excluded.
+
+Before execution:
+
+1. Confirm the action belongs to the current durable operation and step.
+2. Confirm the previously selected capability remains currently granted.
+3. Confirm semantic operation and exact provider context.
+4. For a mutation, confirm the projection and safety digests are present. Do
+   not reconstruct, enrich, or reinterpret the projection.
+
+Execute at most once. Return only one observation with:
+
+- the unchanged operation ID, step ID, and action digest;
+- observation time and host-surface kind;
+- bounded capability evidence digest and exact provider context;
+- sanitized classification, durable identity/aliases when observed,
+  allowlisted fields, revision evidence, and a diagnostic code.
+
+Do not return a native request, raw response, captured catalog, live help text,
+process environment, authentication data, or provider-generated success claim.
+Use:
+
+```bash
+oat pjm remote operation continue \
+  --operation <operation-id> \
+  --observation-stdin \
+  --json
+```
+
+A repeated, stale, mismatched, oversized, or unsanitized observation must be
+rejected by the CLI. An ambiguous post-attempt outcome remains uncertain and
+must be reconciled before any new execution choice or retry.

package/dist/commands/backlog/new.d.ts

@@ -13,6 +13,7 @@ export interface CreateBacklogItemOptions {
     labels?: string[];
     description?: string;
     createdAt?: string;
+    associatedIssues?: unknown;
 }
 export interface CreateBacklogItemResult {
     id: string;

package/dist/commands/backlog/new.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/backlog/new.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EAClC,MAAM,oBAAoB,CAAC;AAS5B,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,eAAe,CAAC;IAC9B,KAAK,EAAE,4BAA4B,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA2JD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,SAAS,GAAE,OAAO,CAAC,6BAA6B,CAAM,GACrD,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}
+{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/backlog/new.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EAClC,MAAM,oBAAoB,CAAC;AAS5B,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,eAAe,CAAC;IAC9B,KAAK,EAAE,4BAA4B,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AAgKD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,EACjC,SAAS,GAAE,OAAO,CAAC,6BAA6B,CAAM,GACrD,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}

package/dist/commands/backlog/new.js

@@ -1,5 +1,6 @@
 import { access, readFile, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
+import { parseAssociatedIssues, serializeAssociatedIssues, } from '../pjm/remote/association.js';
 import { resolvePjmTemplate, } from '../pjm/template-source.js';
 import { stripTemplateFrontmatter } from '../shared/strip-template-frontmatter.js';
 import YAML from 'yaml';
@@ -72,6 +73,7 @@ function normalizeInputs(options) {
         scopeEstimate,
         labels,
         description: options.description,
+        associatedIssues: serializeAssociatedIssues(parseAssociatedIssues(options.associatedIssues ?? [])),
     };
 }
 function renderBacklogItem(template, values) {
@@ -90,7 +92,7 @@ function renderBacklogItem(template, values) {
         assignee: null,
         created: values.timestamp,
         updated: values.timestamp,
-        associated_issues: [],
+        associated_issues: values.associatedIssues,
         external_plans: [],
     }).trimEnd();
     return `---\n${frontmatter}\n---\n\n${body.trimEnd()}\n`;

package/dist/commands/config/index.d.ts

@@ -21,6 +21,7 @@ interface ConfigCommandDependencies {
     resolveEffectiveConfig: (repoRoot: string, userConfigDir: string, env: NodeJS.ProcessEnv) => Promise<ResolvedConfig>;
     resolveAssetsRoot: () => Promise<string>;
     readFile: (path: string) => Promise<string>;
+    atomicWriteJson: (path: string, data: unknown) => Promise<void>;
     confirmAction: (message: string, ctx: PromptContext) => Promise<boolean>;
     validateMatrixCell: (provider: string, value: string, options: ValidateMatrixCellOptions) => Promise<MatrixCellAvailabilityResponse>;
     createDispatchValidationPassContext: typeof createDispatchValidationPassContext;

package/dist/commands/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAoBzC,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAkBhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+GpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,2CAA2C,EAAE,CAC3C,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,gDAAgD,EAAE,CAChD,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAwnGD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAkMT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAoBzC,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAQnB,KAAK,UAAU,EAkBhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4JpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kCAAkC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,2CAA2C,EAAE,CAC3C,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,gDAAgD,EAAE,CAChD,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AA+2GD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAkMT"}

package/dist/commands/config/index.js

@@ -14,6 +14,7 @@ import { parseJsonConfig } from '../../config/json.js';
 import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, MAX_GATE_TIMEOUT_MS, MIN_GATE_TIMEOUT_MS, isValidGateTimeoutMs, normalizeWorkflowPostImplementSequence, readOatConfig, readOatConfigForDefaultScopeRepair, readOatConfigForDocumentationExcludesRepair, readOatConfigForInstructionPointerExcludesRepair, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
 import { resolveEffectiveConfig, } from '../../config/resolve.js';
 import { resolveAssetsRoot } from '../../fs/assets.js';
+import { atomicWriteJson } from '../../fs/io.js';
 import { resolveProjectRoot } from '../../fs/paths.js';
 import { normalizeMatrixCellAvailability, validateMatrixCell, } from '../../providers/identity/availability.js';
 import { createDispatchValidationPassContext, validateDispatchMatrixRefs, } from '../../providers/identity/dispatch-validation.js';
@@ -28,6 +29,31 @@ const DISPATCH_MATRIX_TIERS = [
     'high',
     'frontier',
 ];
+const PJM_REMOTE_PROVIDERS = ['github', 'linear', 'jira'];
+const PJM_REMOTE_OPERATIONS = [
+    'create',
+    'update-fields',
+    'transition',
+    'annotate',
+    'delete',
+    'relink',
+    'detach',
+    'recreate',
+];
+const PJM_REMOTE_CONFIG_KEYS = [
+    'pjm.remote',
+    'pjm.remote.schemaVersion',
+    'pjm.remote.storage.state',
+    'pjm.remote.policy',
+    'pjm.remote.policy.description',
+    'pjm.remote.policy.authority.default',
+    ...PJM_REMOTE_OPERATIONS.map((operation) => `pjm.remote.policy.authority.operations.${operation}`),
+    ...PJM_REMOTE_PROVIDERS.flatMap((provider) => [
+        `pjm.remote.policy.providers.${provider}.description`,
+        `pjm.remote.policy.providers.${provider}.authority.default`,
+        ...PJM_REMOTE_OPERATIONS.map((operation) => `pjm.remote.policy.providers.${provider}.authority.operations.${operation}`),
+    ]),
+];
 const KEY_ORDER = [
     'activeIdea',
     'activeProject',
@@ -58,6 +84,7 @@ const KEY_ORDER = [
     'git.defaultBranch',
     'projects.root',
     'projects.defaultScope',
+    ...PJM_REMOTE_CONFIG_KEYS,
     'tools.brainstorm',
     'tools.core',
     'tools.docs',
@@ -94,7 +121,45 @@ const KEY_ORDER = [
     'workflow.gateTimeouts.artifact',
     'worktrees.root',
 ];
+const PJM_REMOTE_CONFIG_CATALOG = PJM_REMOTE_CONFIG_KEYS.map((key) => {
+    const aggregate = key === 'pjm.remote' || key === 'pjm.remote.policy';
+    const schemaVersion = key === 'pjm.remote.schemaVersion';
+    const storage = key === 'pjm.remote.storage.state';
+    const authority = key.includes('.authority.');
+    const description = key.endsWith('.description');
+    const type = schemaVersion
+        ? 'literal 1'
+        : storage
+            ? 'local | shared'
+            : authority
+                ? 'read-only | user-approved | user-authorized | autonomous'
+                : description
+                    ? 'none | managed-section | replace'
+                    : 'object';
+    return {
+        key,
+        group: 'PJM Remote Shared Policy',
+        file: '.oat/config.json',
+        scope: 'shared repo',
+        type,
+        defaultValue: schemaVersion
+            ? '1'
+            : storage
+                ? 'local'
+                : authority
+                    ? 'read-only'
+                    : description
+                        ? 'none'
+                        : 'unset',
+        mutability: aggregate || schemaVersion ? 'read-only' : 'read/write',
+        owningCommand: aggregate || schemaVersion
+            ? 'individual child keys'
+            : `oat config set ${key} <value> --shared`,
+        description: 'Repository-owned remote storage or mutation policy; host execution is discovered live and cannot broaden it.',
+    };
+});
 const CONFIG_CATALOG = [
+    ...PJM_REMOTE_CONFIG_CATALOG,
     {
         key: 'projects.root',
         group: 'Shared Repo (.oat/config.json)',
@@ -893,6 +958,7 @@ const DEFAULT_DEPENDENCIES = {
     resolveEffectiveConfig,
     resolveAssetsRoot,
     readFile: (path) => readFileDefault(path, 'utf8'),
+    atomicWriteJson,
     confirmAction,
     validateMatrixCell,
     createDispatchValidationPassContext,
@@ -905,6 +971,9 @@ function isConfigKey(value) {
         value === 'workflow.dispatchCeiling.providers' ||
         isDispatchCeilingProviderKey(value));
 }
+function isPjmRemoteConfigKey(key) {
+    return key.startsWith('pjm.remote');
+}
 function isDispatchCeilingProviderKey(value) {
     return (value.startsWith(DISPATCH_CEILING_PROVIDER_KEY_PREFIX) &&
         value.slice(DISPATCH_CEILING_PROVIDER_KEY_PREFIX.length).trim().length > 0);
@@ -1119,6 +1188,12 @@ function validateSurfaceForKey(key, surface) {
         }
         return;
     }
+    if (isPjmRemoteConfigKey(key)) {
+        if (surface !== 'shared') {
+            throw new Error(`Cannot set '${key}' at '${surface}' scope. PJM remote policy and storage can only be set at shared scope.`);
+        }
+        return;
+    }
     if (key.startsWith('explainers.')) {
         const allowed = key === 'explainers.defaults.style' ||
             key === 'explainers.defaults.palette' ||
@@ -1532,6 +1607,98 @@ function formatResolvedValue(value) {
     }
     return String(value);
 }
+function defaultPjmRemoteSharedConfig() {
+    return {
+        schemaVersion: 1,
+        storage: { state: 'local' },
+        policy: {
+            description: 'none',
+            authority: { default: 'read-only', operations: {} },
+            providers: {},
+        },
+    };
+}
+function applyPjmRemoteSharedValue(current, key, rawValue) {
+    if (key === 'pjm.remote' ||
+        key === 'pjm.remote.policy' ||
+        key === 'pjm.remote.schemaVersion') {
+        throw new Error(`Config key '${key}' is read-only; set one of its documented child keys.`);
+    }
+    const remote = structuredClone(current ?? defaultPjmRemoteSharedConfig());
+    if (key === 'pjm.remote.storage.state') {
+        const state = rawValue.trim();
+        if (state !== 'local' && state !== 'shared') {
+            throw new Error(`Invalid value for ${key}: expected one of local | shared, got '${rawValue}'.`);
+        }
+        if (state === 'shared') {
+            throw new Error("Shared operational storage requires 'oat pjm remote storage shared' preview and approval; direct config set is blocked.");
+        }
+        remote.storage = { state };
+        return remote;
+    }
+    const descriptions = [
+        'none',
+        'managed-section',
+        'replace',
+    ];
+    const authorities = [
+        'read-only',
+        'user-approved',
+        'user-authorized',
+        'autonomous',
+    ];
+    const value = rawValue.trim();
+    if (key === 'pjm.remote.policy.description') {
+        if (!descriptions.includes(value)) {
+            throw new Error(`Invalid value for ${key}: expected one of ${descriptions.join(' | ')}, got '${rawValue}'.`);
+        }
+        remote.policy.description = value;
+        return remote;
+    }
+    if (!authorities.includes(value)) {
+        if (key.endsWith('.description')) {
+            if (!descriptions.includes(value)) {
+                throw new Error(`Invalid value for ${key}: expected one of ${descriptions.join(' | ')}, got '${rawValue}'.`);
+            }
+        }
+        else {
+            throw new Error(`Invalid value for ${key}: expected one of ${authorities.join(' | ')}, got '${rawValue}'.`);
+        }
+    }
+    if (key === 'pjm.remote.policy.authority.default') {
+        remote.policy.authority.default = value;
+        return remote;
+    }
+    const repositoryOperationPrefix = 'pjm.remote.policy.authority.operations.';
+    if (key.startsWith(repositoryOperationPrefix)) {
+        const operation = key.slice(repositoryOperationPrefix.length);
+        remote.policy.authority.operations ??= {};
+        remote.policy.authority.operations[operation] =
+            value;
+        return remote;
+    }
+    const parts = key.split('.');
+    const provider = parts[4];
+    remote.policy.providers ??= {};
+    const providerPolicy = structuredClone(remote.policy.providers[provider] ?? {});
+    if (parts[5] === 'description') {
+        providerPolicy.description = value;
+    }
+    else {
+        providerPolicy.authority ??= {};
+        if (parts[6] === 'default') {
+            providerPolicy.authority.default = value;
+        }
+        else {
+            providerPolicy.authority.operations ??= {};
+            const operation = parts[7];
+            providerPolicy.authority.operations[operation] =
+                value;
+        }
+    }
+    remote.policy.providers[provider] = providerPolicy;
+    return remote;
+}
 async function getConfigValue(repoRoot, userConfigDir, key, dependencies, preserveRawObject = false) {
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const entry = resolved.resolved[key];
@@ -1600,6 +1767,19 @@ async function listConfigKeys(repoRoot, userConfigDir, dependencies) {
 async function setConfigValue(repoRoot, userConfigDir, key, rawValue, surface, dependencies, warn) {
     validateSurfaceForKey(key, surface);
     const effectiveSurface = surface === 'auto' ? defaultSurfaceForKey(key) : surface;
+    if (isPjmRemoteConfigKey(key)) {
+        const config = await dependencies.readOatConfig(repoRoot);
+        const remote = applyPjmRemoteSharedValue(config.pjm?.remote, key, rawValue);
+        await dependencies.writeOatConfig(repoRoot, {
+            ...config,
+            pjm: { ...config.pjm, remote },
+        });
+        return {
+            key,
+            value: rawValue.trim(),
+            source: 'shared',
+        };
+    }
     if (isWorkflowKey(key)) {
         const parsedValue = parseWorkflowValue(key, rawValue);
         const displayValue = formatResolvedValue(parsedValue);
@@ -1990,7 +2170,8 @@ function configPathForKey(key) {
     }
     if (key.startsWith('explainers.') ||
         key.startsWith('documentation.') ||
-        key.startsWith('archive.')) {
+        key.startsWith('archive.') ||
+        isPjmRemoteConfigKey(key)) {
         return key.split('.');
     }
     if (key === 'git.defaultBranch' ||
@@ -2024,6 +2205,15 @@ function configPathForKey(key) {
  */
 async function unsetConfigValue(repoRoot, userConfigDir, key, surface, dependencies, warn) {
     validateSurfaceForKey(key, surface);
+    // These are structural views (and, for schemaVersion, the discriminator
+    // that makes the remote policy readable), just as they are for `set`.
+    // Refuse them before resolving config so an unset attempt can never be
+    // mistaken for permission to remove the whole policy boundary.
+    if (key === 'pjm.remote' ||
+        key === 'pjm.remote.policy' ||
+        key === 'pjm.remote.schemaVersion') {
+        throw new Error(`Config key '${key}' is read-only; unset one of its documented child keys.`);
+    }
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const envShadowed = resolved.resolved[key]?.source === 'env';
     if (key === 'activeProject' || key === 'lastPausedProject') {
@@ -2107,6 +2297,22 @@ async function removeFromSurface(repoRoot, userConfigDir, key, effectiveSurface,
         return false;
     }
     const configPath = join(repoRoot, '.oat', 'config.json');
+    if (isPjmRemoteConfigKey(key)) {
+        // PJM remote normalization materializes fail-closed defaults such as
+        // policy.description=none and authority.default=read-only. Removing a
+        // leaf from that normalized object and sending it through writeOatConfig
+        // would therefore write the leaf straight back while reporting success.
+        // The config has already passed the strict shared-policy reader in
+        // resolveEffectiveConfig, so perform this removal against the validated raw
+        // document and atomically persist only the requested structural change.
+        const repaired = await removeConfigPathOnDisk(configPath, path);
+        if (!repaired) {
+            return false;
+        }
+        preservePjmRemotePolicyBoundary(repaired, path);
+        await dependencies.atomicWriteJson(configPath, repaired);
+        return true;
+    }
     const sharedConfig = key === 'documentation.excludes'
         ? await dependencies.readOatConfigForDocumentationExcludesRepair(repoRoot)
         : key === 'documentation.instructionPointerExcludes'
@@ -2126,6 +2332,31 @@ async function removeFromSurface(repoRoot, userConfigDir, key, effectiveSurface,
     }
     return false;
 }
+/**
+ * Keep the required PJM remote policy object when unsetting its final leaf.
+ *
+ * The recursive remover normally prunes empty parents. For this one schema,
+ * however, `policy` is the structural boundary that keeps sibling remote state
+ * (notably `storage.state=shared`) readable. An empty policy is valid and
+ * normalizes to the fail-closed defaults; an absent policy makes the complete
+ * remote object unreadable.
+ */
+function preservePjmRemotePolicyBoundary(config, path) {
+    if (path[0] !== 'pjm' || path[1] !== 'remote' || path[2] !== 'policy') {
+        return;
+    }
+    const pjm = config.pjm;
+    if (!isRecord(pjm)) {
+        return;
+    }
+    const remote = pjm.remote;
+    if (!isRecord(remote)) {
+        return;
+    }
+    if (!Object.prototype.hasOwnProperty.call(remote, 'policy')) {
+        remote.policy = {};
+    }
+}
 /**
  * Remove `path` from the raw JSON on disk, ignoring normalization.
  *

package/dist/commands/pjm/doctor.d.ts

@@ -1,8 +1,10 @@
 import type { DoctorCheck } from '../../ui/output.js';
 import { type PjmAdoption } from './adoption.js';
+import { type RemoteDoctorInput } from './remote/doctor.js';
 export interface PjmDoctorOptions {
     projectRoot?: string;
     adoption?: PjmAdoption;
+    remote?: RemoteDoctorInput;
 }
 export declare function runPjmDoctorChecks(repoRoot: string, options?: PjmDoctorOptions): Promise<DoctorCheck[]>;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/pjm/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AA4MlE,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CA2UxB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA8MhF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CAmVxB"}

package/dist/commands/pjm/doctor.js

@@ -1,9 +1,15 @@
+import { execFile as execFileCallback } from 'node:child_process';
 import { access, readdir, readFile } from 'node:fs/promises';
-import { basename, dirname, join } from 'node:path';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { promisify } from 'node:util';
 import { BACKLOG_ITEM_STATUSES, extractBacklogStatus, isTerminalBacklogStatus, isValidBacklogStatus, } from '../backlog/shared/item-status.js';
 import { getFrontmatterBlock } from '../shared/frontmatter.js';
+import { parseJsonConfig } from '../../config/json.js';
 import { resolvePjmAdoption } from './adoption.js';
 import { CANONICAL_REPO_REFERENCE_PATHS } from './init.js';
+import { runRemoteDoctorChecks } from './remote/doctor.js';
+import { resolveRemoteStorageLocations } from './remote/storage-locator.js';
+const execFileAsync = promisify(execFileCallback);
 const ALLOWED_TOP_LEVEL_DIRECTORIES = new Set([
     'pjm',
     'reference',
@@ -435,5 +441,69 @@ export async function runPjmDoctorChecks(repoRoot, options = {}) {
             ? undefined
             : 'Run `oat backlog archive <id>` to archive each completed item still under items/.',
     });
+    const defaultRemote = await resolveDefaultRemoteDoctorInput(projectRoot, repoRoot);
+    checks.push(...(await runRemoteDoctorChecks(options.remote ?? defaultRemote)));
     return checks;
 }
+async function resolveDefaultRemoteDoctorInput(projectRoot, pjmRepoRoot) {
+    const rawConfig = await readRawRemoteConfig(projectRoot);
+    const stateStorage = isRecord(rawConfig) &&
+        isRecord(rawConfig.storage) &&
+        rawConfig.storage.state === 'shared'
+        ? 'shared'
+        : 'local';
+    try {
+        const [{ stdout: commonDirOutput }, { stdout: originOutput }] = await Promise.all([
+            execFileAsync('git', ['rev-parse', '--git-common-dir'], {
+                cwd: projectRoot,
+            }),
+            execFileAsync('git', ['config', '--get', 'remote.origin.url'], {
+                cwd: projectRoot,
+            }).catch(() => ({ stdout: '' })),
+        ]);
+        const commonDir = commonDirOutput.trim();
+        const gitCommonDir = isAbsolute(commonDir)
+            ? commonDir
+            : resolve(projectRoot, commonDir);
+        const repositoryIdentity = originOutput.trim() || `local-repository:${resolve(projectRoot)}`;
+        const locations = resolveRemoteStorageLocations({
+            repoRoot: projectRoot,
+            gitCommonDir,
+            repositoryIdentity,
+            stateStorage,
+            target: { kind: 'backlog', scope: 'shared', path: null },
+        });
+        return {
+            portableBindingsDir: locations.portable.bindingsDir,
+            operationalBindingsDir: locations.operational.bindingsDir,
+            operationsDir: locations.operational.operationsDir,
+            policy: rawConfig,
+        };
+    }
+    catch {
+        const fallbackRoot = join(pjmRepoRoot, 'pjm', 'remote');
+        return {
+            portableBindingsDir: join(fallbackRoot, 'bindings'),
+            operationalBindingsDir: join(fallbackRoot, 'state', 'bindings'),
+            operationsDir: join(fallbackRoot, 'state', 'operations'),
+            policy: rawConfig,
+        };
+    }
+}
+async function readRawRemoteConfig(projectRoot) {
+    const content = await readIfExists(join(projectRoot, '.oat', 'config.json'));
+    if (!content)
+        return undefined;
+    try {
+        const config = parseJsonConfig(content, join(projectRoot, '.oat', 'config.json'));
+        if (!isRecord(config) || !isRecord(config.pjm))
+            return undefined;
+        return config.pjm.remote;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/commands/pjm/index.d.ts

@@ -6,6 +6,7 @@ import { resolvePjmAdoption } from './adoption.js';
 import { runPjmDoctorChecks } from './doctor.js';
 import { initializeRepoReference } from './init.js';
 import { migratePjmRepo, readPjmMigrationPrompt } from './migrate.js';
+import { createPjmRemoteCommand } from './remote/index.js';
 interface PjmCommandDependencies {
     buildCommandContext: typeof buildCommandContext;
     resolveProjectRoot: typeof resolveProjectRoot;
@@ -15,6 +16,7 @@ interface PjmCommandDependencies {
     runPjmDoctorChecks: typeof runPjmDoctorChecks;
     migratePjmRepo: typeof migratePjmRepo;
     readPjmMigrationPrompt: typeof readPjmMigrationPrompt;
+    createPjmRemoteCommand: typeof createPjmRemoteCommand;
 }
 export declare function createPjmCommand(overrides?: Partial<PjmCommandDependencies>): Command;
 export {};

package/dist/commands/pjm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAiBnE,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA6FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CAyLT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAiBxD,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA8FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CA0LT"}