@phneakngar/cli 0.0.2 → 0.0.3

package/dist/session-runner.js

@@ -39,12 +39,14 @@ var TASK_TYPES = {
   EMAIL_NOTIFICATION: "email_notification",
   CALENDAR_EVENT: "calendar_event",
   ISSUE_EVENT: "issue_event",
+  AUTOMATION_EVENT: "automation_event",
   KILL_TASK: "kill_task"
 };
 var IssueStatus = {
   TODO: "todo",
   IN_PROGRESS: "in_progress",
   REVIEW: "review",
+  BLOCKED: "blocked",
   DONE: "done",
   CLOSED: "closed",
   CANCELED: "canceled",
@@ -53,7 +55,8 @@ var IssueStatus = {
 var ACTIVE_ISSUE_STATUSES = [
   IssueStatus.TODO,
   IssueStatus.IN_PROGRESS,
-  IssueStatus.REVIEW
+  IssueStatus.REVIEW,
+  IssueStatus.BLOCKED
 ];
 var TERMINAL_ISSUE_STATUSES = [
   IssueStatus.DONE,
@@ -80,6 +83,25 @@ var TERMINAL_MEETING_STATUSES = [
 var DEV_WEB_URL = process.env.PHNEAKNGAR_SERVER_URL || "http://localhost:3000";
 var DEV_WS_DO_URL = process.env.DEV_WS_DO_URL || "http://localhost:8789";
 var DEV_EMAIL_WORKER_URL = process.env.DEV_EMAIL_WORKER_URL || "http://localhost:8787";
+var ApprovalKind = {
+  OUTBOUND_EMAIL: "outbound_email",
+  TOOL_ACTION: "tool_action",
+  SKILL_INSTALL: "skill_install",
+  AUTOMATION_PROMOTE: "automation_promote"
+};
+var MemoryKind = {
+  PREFERENCE: "preference",
+  DECISION: "decision",
+  FACT: "fact",
+  ROLE: "role",
+  SUMMARY: "summary"
+};
+var DeliveryArtifactKind = {
+  DELIVERY: "delivery",
+  DIGEST: "digest",
+  DRAFT: "draft",
+  REPORT: "report"
+};
 // ../shared/src/locale.ts
 var Locale = {
   EN: "en",
@@ -122,6 +144,10 @@ var coreEntityLabels = {
     [Locale.EN]: "Agent",
     [Locale.KM]: "ភ្នាក់ងារ"
   },
+  teammate: {
+    [Locale.EN]: "Teammate",
+    [Locale.KM]: "មិត្តរួមការងារ"
+  },
   runtime: {
     [Locale.EN]: "Runtime",
     [Locale.KM]: "បរិស្ថានដំណើរការ"
@@ -130,6 +156,18 @@ var coreEntityLabels = {
     [Locale.EN]: "Memory",
     [Locale.KM]: "សតិចងចាំ"
   },
+  automation: {
+    [Locale.EN]: "Automation",
+    [Locale.KM]: "ស្វ័យប្រវត្តិកម្ម"
+  },
+  approval: {
+    [Locale.EN]: "Approval",
+    [Locale.KM]: "ការអនុម័ត"
+  },
+  routine: {
+    [Locale.EN]: "Routine",
+    [Locale.KM]: "ទម្លាប់ការងារ"
+  },
   template: {
     [Locale.EN]: "Template",
     [Locale.KM]: "គំរូ"
@@ -278,6 +316,10 @@ var taskTypeLabels = {
     [Locale.EN]: "Issue event",
     [Locale.KM]: "ព្រឹត្តិការណ៍បញ្ហា"
   },
+  automation_event: {
+    [Locale.EN]: "Automation",
+    [Locale.KM]: "ស្វ័យប្រវត្តិកម្ម"
+  },
   kill_task: {
     [Locale.EN]: "Stop task",
     [Locale.KM]: "បញ្ឈប់ភារកិច្ច"
@@ -296,6 +338,10 @@ var issueStatusLabels = {
     [Locale.EN]: "Review",
     [Locale.KM]: "រង់ចាំពិនិត្យ"
   },
+  blocked: {
+    [Locale.EN]: "Blocked",
+    [Locale.KM]: "ជាប់គាំង"
+  },
   done: {
     [Locale.EN]: "Done",
     [Locale.KM]: "រួចរាល់"
@@ -14987,6 +15033,7 @@ var CalendarEventApiSchema = exports_external.object({
 var IssueStatusSchema = exports_external.enum([
   IssueStatus.TODO,
   IssueStatus.IN_PROGRESS,
+  IssueStatus.BLOCKED,
   IssueStatus.REVIEW,
   IssueStatus.DONE,
   IssueStatus.CLOSED,
@@ -15004,6 +15051,12 @@ var UpdateIssueRequestSchema = exports_external.object({
   status: IssueStatusSchema.optional(),
   agent_id: exports_external.string().min(1).optional()
 }).refine((v) => v.title !== undefined || v.description !== undefined || v.status !== undefined || v.agent_id !== undefined, { message: "at least one field is required" });
+var ClaimIssueRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1, "agent_id is required")
+});
+var HandBackIssueRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1).optional()
+});
 var CreateIssueCommentBodySchema = exports_external.object({
   content: exports_external.string().min(1, "content is required").max(20000)
 });
@@ -15023,6 +15076,8 @@ var IssueApiSchema = exports_external.object({
   creator_user_id: exports_external.string(),
   conversation_id: exports_external.string().nullable(),
   latest_task_id: exports_external.string().nullable(),
+  claimed_by_agent_id: exports_external.string().nullable().optional(),
+  claimed_at: exports_external.string().nullable().optional(),
   title: exports_external.string(),
   description: exports_external.string(),
   status: IssueStatusSchema,
@@ -15062,6 +15117,8 @@ var CreateAgentRequestSchema = exports_external.object({
   name: exports_external.string().min(1, "name is required"),
   description: exports_external.string().optional().default(""),
   instructions: exports_external.string().optional().default(""),
+  role_title: exports_external.string().max(120).optional().default(""),
+  responsibility: exports_external.string().max(2000).optional().default(""),
   runtime_id: exports_external.string().min(1, "runtime_id is required"),
   runtime_config: RuntimeConfigSchema,
   max_concurrent_tasks: exports_external.number().int().optional(),
@@ -15072,11 +15129,108 @@ var UpdateAgentRequestSchema = exports_external.object({
   name: exports_external.string().min(1).optional(),
   description: exports_external.string().optional(),
   instructions: exports_external.string().optional(),
+  role_title: exports_external.string().max(120).optional(),
+  responsibility: exports_external.string().max(2000).optional(),
   runtime_id: exports_external.string().min(1).optional(),
   runtime_config: RuntimeConfigSchema,
   visibility: exports_external.enum(["public", "private"]).optional(),
   avatar_url: exports_external.string().max(2000).nullable().optional()
-}).refine((v) => v.name !== undefined || v.description !== undefined || v.instructions !== undefined || v.runtime_id !== undefined || v.runtime_config !== undefined || v.visibility !== undefined || v.avatar_url !== undefined, { message: "at least one field is required" });
+}).refine((v) => v.name !== undefined || v.description !== undefined || v.instructions !== undefined || v.role_title !== undefined || v.responsibility !== undefined || v.runtime_id !== undefined || v.runtime_config !== undefined || v.visibility !== undefined || v.avatar_url !== undefined, { message: "at least one field is required" });
+var AutomationDeliveryModeSchema = exports_external.enum([
+  "channel",
+  "dm",
+  "email_draft",
+  "issue"
+]);
+var CreateAutomationRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1, "agent_id is required"),
+  title: exports_external.string().min(1).max(200),
+  sop_markdown: exports_external.string().max(50000).optional().default(""),
+  schedule: exports_external.string().min(1).max(200),
+  next_run_at: exports_external.string().min(1),
+  delivery_mode: AutomationDeliveryModeSchema.optional().default("channel"),
+  delivery_channel_id: exports_external.string().min(1).nullable().optional(),
+  skill_name: exports_external.string().max(200).nullable().optional(),
+  enabled: exports_external.boolean().optional().default(true)
+});
+var UpdateAutomationRequestSchema = exports_external.object({
+  title: exports_external.string().min(1).max(200).optional(),
+  sop_markdown: exports_external.string().max(50000).optional(),
+  schedule: exports_external.string().min(1).max(200).optional(),
+  next_run_at: exports_external.string().min(1).optional(),
+  delivery_mode: AutomationDeliveryModeSchema.optional(),
+  delivery_channel_id: exports_external.string().min(1).nullable().optional(),
+  skill_name: exports_external.string().max(200).nullable().optional(),
+  enabled: exports_external.boolean().optional()
+}).refine((v) => v.title !== undefined || v.sop_markdown !== undefined || v.schedule !== undefined || v.next_run_at !== undefined || v.delivery_mode !== undefined || v.delivery_channel_id !== undefined || v.skill_name !== undefined || v.enabled !== undefined, { message: "at least one field is required" });
+var MemoryKindSchema = exports_external.enum(["preference", "decision", "fact", "role"]);
+var CreateMemoryRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1).nullable().optional(),
+  kind: MemoryKindSchema,
+  content: exports_external.string().min(1).max(1e4),
+  source_task_id: exports_external.string().min(1).nullable().optional()
+});
+var UpdateMemoryRequestSchema = exports_external.object({
+  kind: MemoryKindSchema.optional(),
+  content: exports_external.string().min(1).max(1e4).optional()
+}).refine((v) => v.kind !== undefined || v.content !== undefined, {
+  message: "at least one field is required"
+});
+var CompactMemoryRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1).nullable().optional(),
+  min_notes: exports_external.number().int().min(1).max(500).optional(),
+  max_notes: exports_external.number().int().min(1).max(500).optional(),
+  max_length: exports_external.number().int().min(0).max(50000).optional(),
+  dry_run: exports_external.boolean().optional()
+});
+var DecideApprovalRequestSchema = exports_external.object({
+  decision: exports_external.enum(["approved", "rejected"])
+});
+var ProposeSkillFromTaskRequestSchema = exports_external.object({
+  task_id: exports_external.string().min(1),
+  agent_id: exports_external.string().min(1).optional(),
+  runtime: exports_external.enum(["claude", "codex", "opencode", "grok"]).optional()
+});
+var CreateIntegrationRequestSchema = exports_external.object({
+  provider: exports_external.string().min(1).max(80),
+  status: exports_external.enum(["active", "disabled", "error"]).optional().default("active"),
+  config: exports_external.unknown().optional(),
+  secret_ref: exports_external.string().max(500).nullable().optional()
+});
+var GatewayProviderSchema = exports_external.enum([
+  "slack",
+  "discord",
+  "telegram",
+  "lark",
+  "teams"
+]);
+var CreateGatewayBindingRequestSchema = exports_external.object({
+  provider: GatewayProviderSchema,
+  external_team_id: exports_external.string().min(1).max(200),
+  external_account_id: exports_external.string().min(1).max(200).nullable().optional(),
+  agent_id: exports_external.string().min(1),
+  user_id: exports_external.string().min(1).optional(),
+  status: exports_external.enum(["active", "disabled"]).optional().default("active"),
+  dm_policy: exports_external.enum(["open", "allowlist", "pairing"]).optional().default("open"),
+  outbound_mode: exports_external.enum(["live", "preview"]).optional().default("preview"),
+  secret_ref: exports_external.string().min(1).max(4000).nullable().optional()
+});
+var UpdateGatewayBindingRequestSchema = exports_external.object({
+  status: exports_external.enum(["active", "disabled"]).optional(),
+  dm_policy: exports_external.enum(["open", "allowlist", "pairing"]).optional(),
+  outbound_mode: exports_external.enum(["live", "preview"]).optional(),
+  agent_id: exports_external.string().min(1).optional(),
+  user_id: exports_external.string().min(1).optional(),
+  secret_ref: exports_external.string().min(1).max(4000).nullable().optional()
+}).refine((v) => v.status !== undefined || v.dm_policy !== undefined || v.outbound_mode !== undefined || v.agent_id !== undefined || v.user_id !== undefined || v.secret_ref !== undefined, { message: "at least one field is required" });
+var GatewayPeerAllowlistRequestSchema = exports_external.object({
+  peer_id: exports_external.string().min(1).max(200),
+  status: exports_external.enum(["allow", "deny", "paired"]).optional().default("allow")
+});
+var ChannelMemberRequestSchema = exports_external.object({
+  member_type: exports_external.enum(["user", "agent"]),
+  member_id: exports_external.string().min(1)
+});
 var CreateConversationRequestSchema = exports_external.object({
   agent_id: exports_external.string().min(1, "agent_id is required"),
   channel: exports_external.string().optional()
@@ -15108,10 +15262,15 @@ var SendEmailRequestSchema = exports_external.object({
   conversationId: exports_external.string().optional(),
   traceId: exports_external.string().optional(),
   sourceTaskId: exports_external.string().optional(),
-  idempotencyKey: exports_external.string().min(1).max(128).optional()
+  idempotencyKey: exports_external.string().min(1).max(128).optional(),
+  requiresApproval: exports_external.boolean().optional().default(false)
 });
 var UpdateEmailStatusRequestSchema = exports_external.object({
-  status: exports_external.enum(["unread", "read", "archived", "sent", "pending", "sending", "failed", "ambiguous"])
+  status: exports_external.enum([
+    "unread",
+    "read",
+    "archived"
+  ])
 });
 var MeetingInfoSchema = exports_external.object({
   title: exports_external.string(),
@@ -16797,6 +16956,8 @@ var agent = sqliteTable("agent", {
   name: text("name").notNull(),
   description: text("description").notNull().default(""),
   instructions: text("instructions").notNull().default(""),
+  roleTitle: text("role_title").notNull().default(""),
+  responsibility: text("responsibility").notNull().default(""),
   avatarUrl: text("avatar_url"),
   runtimeId: text("runtime_id").references(() => agentRuntime.id),
   runtimeMode: text("runtime_mode").notNull().default("local"),
@@ -16925,12 +17086,15 @@ var issue2 = sqliteTable("issue", {
   title: text("title").notNull(),
   description: text("description").notNull().default(""),
   status: text("status").notNull().default("todo"),
+  claimedByAgentId: text("claimed_by_agent_id"),
+  claimedAt: text("claimed_at"),
   createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
   updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString()),
   completedAt: text("completed_at")
 }, (t) => [
   index("idx_issue_workspace_status_agent").on(t.workspaceId, t.status, t.agentId),
   index("idx_issue_workspace_updated").on(t.workspaceId, t.updatedAt),
+  index("idx_issue_workspace_claimed").on(t.workspaceId, t.claimedByAgentId),
   unique("issue_conversation_unique").on(t.conversationId),
   foreignKey({
     columns: [t.agentId, t.workspaceId],
@@ -17023,6 +17187,7 @@ var artifact = sqliteTable("artifact", {
   conversationId: text("conversation_id").notNull().references(() => conversation.id, { onDelete: "cascade" }),
   agentId: text("agent_id").notNull(),
   workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  taskId: text("task_id").references(() => agentTaskQueue.id, { onDelete: "set null" }),
   filename: text("filename").notNull(),
   contentType: text("content_type").notNull().default("application/octet-stream"),
   size: integer2("size").notNull(),
@@ -17032,6 +17197,8 @@ var artifact = sqliteTable("artifact", {
   createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
 }, (t) => [
   index("idx_artifact_conversation").on(t.conversationId),
+  index("idx_artifact_task").on(t.workspaceId, t.taskId),
+  index("idx_artifact_ws_source").on(t.workspaceId, t.source, t.createdAt),
   foreignKey({
     columns: [t.agentId, t.workspaceId],
     foreignColumns: [agent.id, agent.workspaceId]
@@ -17205,6 +17372,173 @@ var inboxUnread = sqliteTable("inbox_unread", {
   unique("inbox_unread_conv_user").on(t.conversationId, t.userId),
   index("idx_inbox_unread_user_ws").on(t.userId, t.workspaceId, t.taskType, t.completedAt)
 ]);
+var automation = sqliteTable("automation", {
+  id: text("id").primaryKey().$defaultFn(() => "au_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull(),
+  title: text("title").notNull(),
+  sopMarkdown: text("sop_markdown").notNull().default(""),
+  schedule: text("schedule").notNull(),
+  nextRunAt: text("next_run_at").notNull(),
+  deliveryMode: text("delivery_mode").notNull().default("channel"),
+  deliveryChannelId: text("delivery_channel_id"),
+  skillName: text("skill_name"),
+  enabled: integer2("enabled", { mode: "boolean" }).notNull().default(true),
+  lastRunAt: text("last_run_at"),
+  lastTaskId: text("last_task_id"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+  updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_automation_ws_next").on(t.workspaceId, t.enabled, t.nextRunAt),
+  index("idx_automation_ws_agent").on(t.workspaceId, t.agentId),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
+var agentMemory = sqliteTable("agent_memory", {
+  id: text("id").primaryKey().$defaultFn(() => "mem_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  agentId: text("agent_id"),
+  kind: text("kind").notNull().default("fact"),
+  content: text("content").notNull(),
+  sourceTaskId: text("source_task_id"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+  updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_agent_memory_ws_agent").on(t.workspaceId, t.agentId, t.kind),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
+var approval = sqliteTable("approval", {
+  id: text("id").primaryKey().$defaultFn(() => "ap_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  agentId: text("agent_id"),
+  kind: text("kind").notNull(),
+  status: text("status").notNull().default("pending"),
+  title: text("title").notNull().default(""),
+  summary: text("summary").notNull().default(""),
+  payload: text("payload", { mode: "json" }),
+  decidedByUserId: text("decided_by_user_id").references(() => user.id, {
+    onDelete: "set null"
+  }),
+  decidedAt: text("decided_at"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+  updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_approval_ws_status").on(t.workspaceId, t.status, t.createdAt),
+  index("idx_approval_ws_agent").on(t.workspaceId, t.agentId),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
+var agentIntegration = sqliteTable("agent_integration", {
+  id: text("id").primaryKey().$defaultFn(() => "ai_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull(),
+  provider: text("provider").notNull(),
+  status: text("status").notNull().default("active"),
+  config: text("config", { mode: "json" }),
+  secretRef: text("secret_ref"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+  updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("agent_integration_ws_agent_provider").on(t.workspaceId, t.agentId, t.provider),
+  index("idx_agent_integration_ws_agent").on(t.workspaceId, t.agentId),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
+var channelMember = sqliteTable("channel_member", {
+  id: text("id").primaryKey().$defaultFn(() => "cm_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  channelId: text("channel_id").notNull().references(() => channel.id, { onDelete: "cascade" }),
+  memberType: text("member_type").notNull(),
+  memberId: text("member_id").notNull(),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("channel_member_unique").on(t.channelId, t.memberType, t.memberId),
+  index("idx_channel_member_ws").on(t.workspaceId, t.channelId),
+  index("idx_channel_member_member").on(t.workspaceId, t.memberType, t.memberId)
+]);
+var conversationMember = sqliteTable("conversation_member", {
+  id: text("id").primaryKey().$defaultFn(() => "cvm_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  conversationId: text("conversation_id").notNull().references(() => conversation.id, { onDelete: "cascade" }),
+  memberType: text("member_type").notNull(),
+  memberId: text("member_id").notNull(),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("conversation_member_unique").on(t.conversationId, t.memberType, t.memberId),
+  index("idx_conversation_member_ws").on(t.workspaceId, t.conversationId),
+  index("idx_conversation_member_member").on(t.workspaceId, t.memberType, t.memberId)
+]);
+var gatewayBinding = sqliteTable("gateway_binding", {
+  id: text("id").primaryKey().$defaultFn(() => "gb_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  provider: text("provider").notNull(),
+  externalTeamId: text("external_team_id").notNull(),
+  externalAccountId: text("external_account_id"),
+  agentId: text("agent_id").notNull(),
+  userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
+  status: text("status").notNull().default("active"),
+  dmPolicy: text("dm_policy").notNull().default("open"),
+  outboundMode: text("outbound_mode").notNull().default("preview"),
+  secretRef: text("secret_ref"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+  updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("gateway_binding_provider_team_account").on(t.provider, t.externalTeamId, t.externalAccountId),
+  index("idx_gateway_binding_ws").on(t.workspaceId, t.provider, t.status),
+  index("idx_gateway_binding_lookup").on(t.provider, t.externalTeamId, t.status),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
+var activityEvent = sqliteTable("activity_event", {
+  id: text("id").primaryKey().$defaultFn(() => "ae_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  kind: text("kind").notNull(),
+  actorType: text("actor_type"),
+  actorId: text("actor_id"),
+  subjectType: text("subject_type"),
+  subjectId: text("subject_id"),
+  summary: text("summary").notNull(),
+  payloadJson: text("payload_json"),
+  dedupeKey: text("dedupe_key"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_activity_event_ws_created").on(t.workspaceId, t.createdAt),
+  unique("activity_event_ws_dedupe").on(t.workspaceId, t.dedupeKey)
+]);
+var gatewayPeerAllowlist = sqliteTable("gateway_peer_allowlist", {
+  id: text("id").primaryKey().$defaultFn(() => "gpa_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  bindingId: text("binding_id").notNull().references(() => gatewayBinding.id, { onDelete: "cascade" }),
+  peerId: text("peer_id").notNull(),
+  status: text("status").notNull().default("allow"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("gateway_peer_allowlist_unique").on(t.bindingId, t.peerId),
+  index("idx_gateway_peer_ws").on(t.workspaceId, t.bindingId)
+]);
+var gatewayIngressDedupe = sqliteTable("gateway_ingress_dedupe", {
+  id: text("id").primaryKey().$defaultFn(() => "gid_" + nanoid3()),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  provider: text("provider").notNull(),
+  externalMessageId: text("external_message_id").notNull(),
+  conversationId: text("conversation_id"),
+  messageId: text("message_id"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  unique("gateway_ingress_dedupe_unique").on(t.provider, t.externalMessageId),
+  index("idx_gateway_ingress_dedupe_ws").on(t.workspaceId, t.provider)
+]);
 // ../shared/src/utils/title.ts
 var graphemeSegmenter = typeof Intl !== "undefined" && typeof Intl.Segmenter === "function" ? new Intl.Segmenter(undefined, { granularity: "grapheme" }) : null;
 // ../shared/src/db/queries/task.ts
@@ -17328,6 +17662,479 @@ var RESERVED_HANDLES = new Set([
   "system",
   "phneakngar"
 ]);
+// ../shared/src/db/queries/issue.ts
+var ACTIVE_STATUSES = [...ACTIVE_ISSUE_STATUSES];
+// ../shared/src/db/queries/conversation-member.ts
+var conversationMemberUniqueTarget = [
+  conversationMember.conversationId,
+  conversationMember.memberType,
+  conversationMember.memberId
+];
+// ../shared/src/lib/memory-compact.ts
+var MEMORY_SUMMARY_KIND = MemoryKind.SUMMARY;
+// ../shared/src/lib/approval-policy.ts
+var ToolClass = {
+  READ: "read",
+  SEARCH: "search",
+  WRITE: "write",
+  SHELL: "shell",
+  NETWORK: "network",
+  OUTBOUND_EMAIL: "outbound_email",
+  TOOL_WRITEBACK: "tool_writeback",
+  SKILL_INSTALL: "skill_install",
+  AUTOMATION_PROMOTE: "automation_promote",
+  UNKNOWN: "unknown"
+};
+var HIGH_STAKES_TOOL_CLASSES = new Set([
+  ToolClass.WRITE,
+  ToolClass.SHELL,
+  ToolClass.NETWORK,
+  ToolClass.OUTBOUND_EMAIL,
+  ToolClass.TOOL_WRITEBACK,
+  ToolClass.SKILL_INSTALL,
+  ToolClass.AUTOMATION_PROMOTE
+]);
+var LOW_STAKES_TOOL_CLASSES = new Set([
+  ToolClass.READ,
+  ToolClass.SEARCH
+]);
+var TOOL_CLASS_VALUES = new Set(Object.values(ToolClass));
+var TOOL_NAME_TO_CLASS = {
+  read: ToolClass.READ,
+  read_file: ToolClass.READ,
+  readdir: ToolClass.READ,
+  cat: ToolClass.READ,
+  ls: ToolClass.READ,
+  list: ToolClass.READ,
+  glob: ToolClass.SEARCH,
+  grep: ToolClass.SEARCH,
+  search: ToolClass.SEARCH,
+  websearch: ToolClass.SEARCH,
+  web_search: ToolClass.SEARCH,
+  webfetch: ToolClass.READ,
+  web_fetch: ToolClass.READ,
+  web_cache: ToolClass.READ,
+  web_cache_search: ToolClass.SEARCH,
+  web_extract: ToolClass.READ,
+  web_crawl: ToolClass.SEARCH,
+  web_diff: ToolClass.READ,
+  mcp_web_search: ToolClass.SEARCH,
+  mcp_web_fetch: ToolClass.READ,
+  mcp_web_extract: ToolClass.READ,
+  mcp_web_crawl: ToolClass.SEARCH,
+  mcp_web_diff: ToolClass.READ,
+  phneakngar_web_search: ToolClass.SEARCH,
+  phneakngar_web_fetch: ToolClass.READ,
+  phneakngar_web_extract: ToolClass.READ,
+  phneakngar_web_crawl: ToolClass.SEARCH,
+  phneakngar_web_diff: ToolClass.READ,
+  get: ToolClass.READ,
+  fetch: ToolClass.READ,
+  write: ToolClass.WRITE,
+  write_file: ToolClass.WRITE,
+  edit: ToolClass.WRITE,
+  edit_file: ToolClass.WRITE,
+  multiedit: ToolClass.WRITE,
+  delete: ToolClass.WRITE,
+  delete_file: ToolClass.WRITE,
+  apply_patch: ToolClass.WRITE,
+  bash: ToolClass.SHELL,
+  shell: ToolClass.SHELL,
+  terminal: ToolClass.SHELL,
+  run_terminal_cmd: ToolClass.SHELL,
+  execute: ToolClass.SHELL,
+  http: ToolClass.NETWORK,
+  http_request: ToolClass.NETWORK,
+  curl: ToolClass.NETWORK,
+  fetch_post: ToolClass.NETWORK,
+  send_email: ToolClass.OUTBOUND_EMAIL,
+  outbound_email: ToolClass.OUTBOUND_EMAIL,
+  email_send: ToolClass.OUTBOUND_EMAIL,
+  github_create_issue: ToolClass.TOOL_WRITEBACK,
+  github_comment: ToolClass.TOOL_WRITEBACK,
+  github_create_pr: ToolClass.TOOL_WRITEBACK,
+  linear_create_issue: ToolClass.TOOL_WRITEBACK,
+  linear_comment: ToolClass.TOOL_WRITEBACK,
+  tool_writeback: ToolClass.TOOL_WRITEBACK,
+  skill_install: ToolClass.SKILL_INSTALL,
+  install_skill: ToolClass.SKILL_INSTALL,
+  automation_promote: ToolClass.AUTOMATION_PROMOTE,
+  promote_automation: ToolClass.AUTOMATION_PROMOTE
+};
+var TOOL_CLASS_TO_APPROVAL_KIND = {
+  [ToolClass.OUTBOUND_EMAIL]: ApprovalKind.OUTBOUND_EMAIL,
+  [ToolClass.TOOL_WRITEBACK]: ApprovalKind.TOOL_ACTION,
+  [ToolClass.WRITE]: ApprovalKind.TOOL_ACTION,
+  [ToolClass.SHELL]: ApprovalKind.TOOL_ACTION,
+  [ToolClass.NETWORK]: ApprovalKind.TOOL_ACTION,
+  [ToolClass.SKILL_INSTALL]: ApprovalKind.SKILL_INSTALL,
+  [ToolClass.AUTOMATION_PROMOTE]: ApprovalKind.AUTOMATION_PROMOTE
+};
+var READ_ONLY_SHELL_HEAD = /^(?:ls|pwd|cat|head|tail|echo|which|type|env|printenv|date|whoami|id|uname|file|stat|wc|true|false|basename|dirname|realpath|readlink)\b/;
+function normalizeName(value) {
+  return (value ?? "").trim().toLowerCase();
+}
+function asRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return null;
+  return value;
+}
+function extractCommandFromInput(input) {
+  if (typeof input === "string") {
+    const t = input.trim();
+    return t || null;
+  }
+  const rec = asRecord(input);
+  if (!rec)
+    return null;
+  for (const key of ["command", "cmd", "script", "code"]) {
+    const v = rec[key];
+    if (typeof v === "string" && v.trim())
+      return v.trim();
+  }
+  return null;
+}
+function classifyToolName(toolName) {
+  const key = normalizeName(toolName);
+  if (!key)
+    return ToolClass.UNKNOWN;
+  if (TOOL_NAME_TO_CLASS[key])
+    return TOOL_NAME_TO_CLASS[key];
+  if (/(^|[_-])(send[_-]?email|outbound[_-]?email)([_-]|$)/.test(key)) {
+    return ToolClass.OUTBOUND_EMAIL;
+  }
+  if (/(github|linear|jira|notion|slack[_-]?post)/.test(key) && /(create|write|comment|update|delete|post|merge)/.test(key)) {
+    return ToolClass.TOOL_WRITEBACK;
+  }
+  if (/(skill).*(install)|(^|[_-])install[_-]?skill([_-]|$)/.test(key)) {
+    return ToolClass.SKILL_INSTALL;
+  }
+  if (/(^|[_-])(bash|shell|terminal)([_-]|$)/.test(key)) {
+    return ToolClass.SHELL;
+  }
+  if (/(^|[_-])(write|edit|delete|apply[_-]?patch)([_-]|$)/.test(key)) {
+    return ToolClass.WRITE;
+  }
+  if (/(^|[_-])(read|cat|ls|glob|grep|search)([_-]|$)/.test(key)) {
+    return key.includes("search") || key.includes("grep") || key.includes("glob") ? ToolClass.SEARCH : ToolClass.READ;
+  }
+  if (/(web[_-]?(search|fetch|cache|extract|crawl|diff)|wigolo__(search|fetch|crawl|extract|diff))/.test(key)) {
+    return key.includes("search") || key.includes("crawl") ? ToolClass.SEARCH : ToolClass.READ;
+  }
+  return ToolClass.UNKNOWN;
+}
+function normalizeToolClass(toolClass) {
+  const key = normalizeName(toolClass);
+  if (TOOL_CLASS_VALUES.has(key))
+    return key;
+  return ToolClass.UNKNOWN;
+}
+function mapToolClassToApprovalKind(toolClass) {
+  return TOOL_CLASS_TO_APPROVAL_KIND[toolClass] ?? null;
+}
+function isHighStakesToolClass(toolClass) {
+  return HIGH_STAKES_TOOL_CLASSES.has(toolClass);
+}
+function isToolAllowListed(toolName, allowList) {
+  if (!allowList || allowList.length === 0)
+    return false;
+  const key = normalizeName(toolName);
+  if (!key)
+    return false;
+  return allowList.some((entry) => normalizeName(entry) === key);
+}
+function maybeDowngradeShellClass(toolClass, input) {
+  if (toolClass !== ToolClass.SHELL)
+    return toolClass;
+  const cmd = extractCommandFromInput(input);
+  if (!cmd)
+    return toolClass;
+  if (/[|;&><`$]/.test(cmd) || /\n/.test(cmd))
+    return toolClass;
+  if (READ_ONLY_SHELL_HEAD.test(cmd))
+    return ToolClass.READ;
+  return toolClass;
+}
+function classFromKind(kind) {
+  const k = normalizeName(kind);
+  if (!k)
+    return null;
+  if (k === ApprovalKind.OUTBOUND_EMAIL)
+    return ToolClass.OUTBOUND_EMAIL;
+  if (k === ApprovalKind.SKILL_INSTALL)
+    return ToolClass.SKILL_INSTALL;
+  if (k === ApprovalKind.AUTOMATION_PROMOTE)
+    return ToolClass.AUTOMATION_PROMOTE;
+  if (k === ApprovalKind.TOOL_ACTION)
+    return ToolClass.TOOL_WRITEBACK;
+  return null;
+}
+function evaluateApprovalPolicy(input = {}) {
+  let toolClass = ToolClass.UNKNOWN;
+  if (input.toolClass) {
+    const normalized = normalizeToolClass(input.toolClass);
+    toolClass = normalized !== ToolClass.UNKNOWN ? normalized : classifyToolName(input.toolClass);
+  } else if (input.kind) {
+    toolClass = classFromKind(input.kind) ?? ToolClass.UNKNOWN;
+  } else if (input.toolName) {
+    toolClass = classifyToolName(input.toolName);
+  }
+  toolClass = maybeDowngradeShellClass(toolClass, input.input);
+  const allowListed = isToolAllowListed(input.toolName, input.allowList);
+  const lowStakes = LOW_STAKES_TOOL_CLASSES.has(toolClass);
+  const approvalKind = mapToolClassToApprovalKind(toolClass);
+  if (input.forceAllow) {
+    return {
+      requiresApproval: false,
+      toolClass,
+      approvalKind: null,
+      reason: "forceAllow",
+      lowStakes,
+      allowListed
+    };
+  }
+  if (input.forceRequire) {
+    return {
+      requiresApproval: true,
+      toolClass,
+      approvalKind: approvalKind ?? ApprovalKind.TOOL_ACTION,
+      reason: "forceRequire",
+      lowStakes,
+      allowListed
+    };
+  }
+  if (allowListed) {
+    return {
+      requiresApproval: false,
+      toolClass,
+      approvalKind: null,
+      reason: "allowList",
+      lowStakes,
+      allowListed: true
+    };
+  }
+  if (isHighStakesToolClass(toolClass)) {
+    return {
+      requiresApproval: true,
+      toolClass,
+      approvalKind: approvalKind ?? ApprovalKind.TOOL_ACTION,
+      reason: `high_stakes:${toolClass}`,
+      lowStakes: false,
+      allowListed: false
+    };
+  }
+  return {
+    requiresApproval: false,
+    toolClass,
+    approvalKind: null,
+    reason: lowStakes ? `low_stakes:${toolClass}` : `default_allow:${toolClass}`,
+    lowStakes,
+    allowListed: false
+  };
+}
+function extractToolPermissionRequest(payload) {
+  const rec = asRecord(payload);
+  if (!rec)
+    return { toolName: null, input: undefined };
+  const toolNameRaw = rec.tool_name ?? rec.toolName ?? rec.name ?? rec.tool ?? null;
+  const toolName = typeof toolNameRaw === "string" && toolNameRaw.trim() ? toolNameRaw.trim() : null;
+  let input = rec.input ?? rec.tool_input ?? rec.args ?? undefined;
+  if (typeof input === "string") {
+    try {
+      input = JSON.parse(input);
+    } catch {}
+  }
+  return { toolName, input };
+}
+function gateToolPermission(payload, opts) {
+  const { toolName, input } = extractToolPermissionRequest(payload);
+  const policy = evaluateApprovalPolicy({
+    toolName,
+    input,
+    allowList: opts?.allowList,
+    forceRequire: opts?.forceRequire,
+    forceAllow: opts?.forceAllow,
+    toolClass: opts?.toolClass,
+    kind: opts?.kind
+  });
+  return {
+    behavior: policy.requiresApproval ? "deny" : "allow",
+    requiresApproval: policy.requiresApproval,
+    policy,
+    toolName
+  };
+}
+// ../shared/src/lib/delivery-artifact.ts
+var KIND_VALUES = new Set(Object.values(DeliveryArtifactKind));
+// ../shared/src/lib/judgment-policy.ts
+var DEFAULT_JUDGMENT_POLICY = {
+  ambiguousToIssue: false
+};
+var MAX_TITLE = 200;
+var MAX_DESCRIPTION = 20000;
+function asRecord2(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function firstLine(text2) {
+  return text2.split(/\r?\n/)[0]?.trim() ?? "";
+}
+function clamp(text2, max) {
+  if (text2.length <= max)
+    return text2;
+  return `${text2.slice(0, max - 1).trimEnd()}…`;
+}
+function readJudgmentPolicy(runtimeConfig) {
+  const config2 = asRecord2(runtimeConfig);
+  const judgment = asRecord2(config2?.judgment);
+  return {
+    ambiguousToIssue: judgment?.ambiguousToIssue === true || judgment?.ambiguous_to_issue === true
+  };
+}
+var CONCRETE_SIGNAL = /\b(create|implement|deploy|refactor|rename|merge|delete|schedule|send|email|file|open pr|pull request|pr\s*#?\d+|issue\s*#?\d+|fix\s+\S+|write\s+\S+|add\s+\S+\s+to)\b/i;
+var PATH_OR_CODE = /`[^`]+`|\b[\w.-]+\.[a-z]{1,5}\b|\/[\w./-]+/i;
+var AMBIGUOUS_PHRASES = /\b(not sure|unclear|ambiguous|someone|anyone|whoever|whoever owns|figure (it|this) out|look into (this|it)|handle this|can you help|help me(?: with this)?|what (should|do) we|what do you think|idk|tbd|maybe|or whatever)\b/i;
+var VAGUE_SHORT = /^(?:pls|please)?\s*(?:help|fix|check|review|look(?:\s+at)?|handle|do)\s*(?:this|it|please)?[.!?…]*$/i;
+function isAmbiguousRequest(prompt) {
+  const text2 = prompt.replace(/\s+/g, " ").trim();
+  if (!text2)
+    return true;
+  const hasConcrete = CONCRETE_SIGNAL.test(text2) || PATH_OR_CODE.test(text2);
+  const hasAmbiguousPhrase = AMBIGUOUS_PHRASES.test(text2);
+  const endsWithQuestion = /\?\s*$/.test(text2);
+  const isVagueShort = text2.length <= 48 && VAGUE_SHORT.test(text2);
+  if (hasConcrete && !hasAmbiguousPhrase)
+    return false;
+  if (hasAmbiguousPhrase)
+    return true;
+  if (isVagueShort)
+    return true;
+  if (endsWithQuestion && text2.length < 100 && !hasConcrete)
+    return true;
+  if (text2.length < 28 && !hasConcrete)
+    return true;
+  return false;
+}
+function buildAmbiguousIssueDraft(input) {
+  const headline = firstLine(input.prompt) || input.prompt.replace(/\s+/g, " ").trim() || "(empty request)";
+  const prompt = input.prompt.replace(/\s+/g, " ").trim() || "(empty request)";
+  const title = clamp(/^clarify:/i.test(headline) ? headline : `Clarify: ${headline}`, MAX_TITLE);
+  const parts = [
+    "Escalated from an ambiguous DM under judgment policy (ambiguous → create issue).",
+    input.senderName ? `Requester: ${input.senderName}` : null,
+    input.conversationId ? `Conversation: ${input.conversationId}` : null,
+    "",
+    "Original request:",
+    prompt,
+    "",
+    "Next step: clarify owner, desired outcome, and acceptance criteria before executing."
+  ].filter((p) => p !== null);
+  return {
+    agent_id: input.agentId,
+    title,
+    description: clamp(parts.join(`
+`), MAX_DESCRIPTION)
+  };
+}
+function resolveAmbiguousDmJudgment(input) {
+  const policy = input.policy ?? (input.runtimeConfig !== undefined ? readJudgmentPolicy(input.runtimeConfig) : DEFAULT_JUDGMENT_POLICY);
+  if (!policy.ambiguousToIssue) {
+    return {
+      action: "continue",
+      reason: "judgment policy ambiguousToIssue is disabled"
+    };
+  }
+  if (!input.agentId.trim()) {
+    return {
+      action: "continue",
+      reason: "missing agent id for issue ownership"
+    };
+  }
+  if (!isAmbiguousRequest(input.prompt)) {
+    return {
+      action: "continue",
+      reason: "request has a clear enough outcome or target"
+    };
+  }
+  return {
+    action: "create_issue",
+    issue: buildAmbiguousIssueDraft({
+      prompt: input.prompt,
+      agentId: input.agentId,
+      senderName: input.senderName,
+      conversationId: input.conversationId
+    }),
+    reason: "request is ambiguous; create owned issue instead of freeform chat only"
+  };
+}
+function buildJudgmentPolicyNotice(settings) {
+  if (!settings.ambiguousToIssue)
+    return null;
+  return "Judgment policy ENABLED: ambiguous → create issue. " + "If the user's request lacks a clear owner, deliverable, or outcome, " + "do NOT spin freeform chat. Create an owned issue with " + '`phneakngar issue create --title "…" --description "…"` ' + "(defaults to you as the agent owner), then `phneakngar sync send-dm` " + "to tell the user you filed it and what you need clarified. " + "When the request is already clear, execute normally.";
+}
+function buildJudgmentPolicyContextBlock(settings, cmdPrefix = "phneakngar") {
+  if (!settings.ambiguousToIssue)
+    return null;
+  return `### Judgment policy (ambiguous → issue)
+This agent has **ambiguous → create issue** enabled.
+
+When a user DM is vague, missing an owner, or has no clear outcome:
+1. Create an owned issue: \`${cmdPrefix} issue create --title "<short clarify title>" --description "<original request + what is unclear>"\`
+2. You are the default owner — track it with \`${cmdPrefix} issue update\` / \`${cmdPrefix} issue comment\` as work progresses.
+3. Tell the user via \`${cmdPrefix} sync send-dm\` that you filed the issue and what you need from them.
+4. Prefer one owned issue over a long freeform chat loop when the ask is ambiguous.
+
+When the request already names a clear deliverable or target, skip issue creation and execute normally.
+`;
+}
+// ../shared/src/lib/approval-hold-policy.ts
+var DEFAULT_APPROVAL_HOLD = {
+  enabled: true
+};
+function asRecord3(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function truthyFlag(v) {
+  return v === true || v === 1 || v === "1" || v === "true" || v === "yes" || v === "on";
+}
+function falsyFlag(v) {
+  return v === false || v === 0 || v === "0" || v === "false" || v === "no" || v === "off";
+}
+function readApprovalHoldPolicy(runtimeConfig) {
+  const config2 = asRecord3(runtimeConfig);
+  const hold = asRecord3(config2?.approvalHold) ?? asRecord3(config2?.approval_hold) ?? null;
+  if (!hold)
+    return { ...DEFAULT_APPROVAL_HOLD };
+  if (falsyFlag(hold.enabled))
+    return { enabled: false };
+  if (truthyFlag(hold.enabled))
+    return { enabled: true };
+  return { ...DEFAULT_APPROVAL_HOLD };
+}
+function resolveApprovalHoldEnabled(input = {}) {
+  const env = input.env ?? {};
+  const raw = (env.CHHLAT_APPROVAL_HOLD ?? env.PHNEAKNGAR_APPROVAL_HOLD ?? "").toString().trim().toLowerCase();
+  if (raw === "0" || raw === "false" || raw === "no" || raw === "off") {
+    return false;
+  }
+  if (raw === "1" || raw === "true" || raw === "yes" || raw === "on") {
+    return true;
+  }
+  return readApprovalHoldPolicy(input.runtimeConfig).enabled;
+}
+// ../shared/src/utils/memory-prompt.ts
+var DEFAULT_AGENT_MEMORY_PROMPT_LIMIT = 12;
+function formatMemoryForPrompt(memories, opts) {
+  const limit = opts?.limit ?? DEFAULT_AGENT_MEMORY_PROMPT_LIMIT;
+  const items = memories.filter((m) => typeof m.content === "string" && m.content.trim().length > 0).slice(0, Math.max(0, limit));
+  if (items.length === 0)
+    return "";
+  const lines = items.map((m) => {
+    const kind = (m.kind || "fact").trim() || "fact";
+    return `- [${kind}] ${m.content.trim()}`;
+  });
+  return ["Agent memory (apply when relevant):", ...lines].join(`
+`);
+}
 // ../shared/src/ws-ticket.ts
 var encoder = new TextEncoder;
 // ../shared/src/mode.ts
@@ -17535,6 +18342,171 @@ class ChhlatClient {
   syncSkills(token, body) {
     return this.request("POST", "/api/chhlat/skills/sync", token, body);
   }
+  createToolApproval(token, body) {
+    return this.request("POST", "/api/chhlat/approvals", token, body);
+  }
+  getToolApproval(token, approvalId) {
+    return this.request("GET", `/api/chhlat/approvals/${encodeURIComponent(approvalId)}`, token);
+  }
+}
+function makeClientToolActionApprovalCreator(opts) {
+  return async (input) => {
+    const res = await opts.client.createToolApproval(opts.token, {
+      chhlat_id: opts.chhlatId,
+      agent_id: opts.agentId ?? null,
+      tool_name: input.toolName,
+      tool_class: input.toolClass,
+      request_id: input.requestId,
+      title: input.toolName ? `Tool: ${input.toolName}` : `Tool class: ${input.toolClass}`,
+      summary: input.policyReason,
+      input: input.input,
+      policy_reason: input.policyReason,
+      kind: "tool_action"
+    });
+    const id = res?.approval?.id;
+    if (typeof id === "string" && id.trim()) {
+      return { approvalId: id.trim() };
+    }
+    return null;
+  };
+}
+
+// chhlat/tool-gate.ts
+var toolActionApprovalCreator = null;
+function setToolActionApprovalCreator(creator) {
+  toolActionApprovalCreator = creator;
+}
+function decideToolGate(payload, opts = {}) {
+  const { toolName } = extractToolPermissionRequest(payload);
+  const toolClass = toolName != null ? undefined : opts.defaultToolClass ?? ToolClass.SHELL;
+  return gateToolPermission(payload, {
+    allowList: opts.allowList,
+    forceRequire: opts.forceRequire,
+    forceAllow: opts.forceAllow,
+    toolClass
+  });
+}
+function buildControlResponseLine(requestId, behavior, updatedInput, message2, extras) {
+  const responseBody = behavior === "allow" ? {
+    behavior: "allow",
+    updatedInput
+  } : {
+    behavior: "deny",
+    message: message2 ?? "This tool class requires human approval before it can run."
+  };
+  if (behavior === "deny" && extras?.approvalId) {
+    responseBody.approval_id = extras.approvalId;
+  }
+  return JSON.stringify({
+    type: "control_response",
+    response: {
+      subtype: "success",
+      request_id: requestId,
+      response: responseBody
+    }
+  });
+}
+function resolveUpdatedInput(payload) {
+  const rec = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : null;
+  if (!rec)
+    return;
+  const input = rec.input;
+  if (typeof input === "string") {
+    try {
+      return JSON.parse(input);
+    } catch {
+      return input;
+    }
+  }
+  if (input !== undefined)
+    return input;
+  return;
+}
+function buildRequiresApprovalDenyMessage(decision, approvalId) {
+  const base = `Blocked by approval policy (${decision.policy.reason}). High-stakes tool class "${decision.policy.toolClass}" requires human approval.`;
+  if (approvalId) {
+    return `${base} Approval id: ${approvalId}.`;
+  }
+  return base;
+}
+function buildToolActionApprovalRequest(event, decision) {
+  if (!decision.requiresApproval)
+    return null;
+  const requestId = event.request_id;
+  if (typeof requestId !== "string" || !requestId.trim())
+    return null;
+  const { input } = extractToolPermissionRequest(event.payload);
+  return {
+    toolName: decision.toolName,
+    toolClass: decision.policy.toolClass,
+    requestId: requestId.trim(),
+    input,
+    policyReason: decision.policy.reason,
+    approvalKind: ApprovalKind.TOOL_ACTION
+  };
+}
+async function waitForApprovalDecision(approvalId, hold) {
+  const timeoutMs = hold.timeoutMs ?? 120000;
+  const intervalMs = hold.intervalMs ?? 2000;
+  const sleep = hold.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const now = hold.now ?? (() => Date.now());
+  const deadline = now() + timeoutMs;
+  while (now() < deadline) {
+    try {
+      const row = await hold.poll(approvalId);
+      const status = (row?.status ?? "").trim().toLowerCase();
+      if (status === "approved")
+        return "approved";
+      if (status === "denied" || status === "rejected") {
+        return status === "rejected" ? "rejected" : "denied";
+      }
+    } catch {}
+    const remaining = deadline - now();
+    if (remaining <= 0)
+      break;
+    await sleep(Math.min(intervalMs, remaining));
+  }
+  return "timeout";
+}
+async function handleToolControlRequestAsync(event, opts = {}, createApproval = toolActionApprovalCreator) {
+  const requestId = event.request_id;
+  if (!requestId)
+    return null;
+  const payload = event.payload;
+  const decision = decideToolGate(payload, opts);
+  const updatedInput = resolveUpdatedInput(payload);
+  let approvalId = null;
+  if (decision.requiresApproval && createApproval) {
+    const draft = buildToolActionApprovalRequest(event, decision);
+    if (draft) {
+      try {
+        const created = await createApproval(draft);
+        if (created?.approvalId && typeof created.approvalId === "string") {
+          approvalId = created.approvalId;
+        }
+      } catch {
+        approvalId = null;
+      }
+    }
+  }
+  if (decision.requiresApproval && approvalId && opts.hold?.enabled) {
+    const outcome = await waitForApprovalDecision(approvalId, opts.hold);
+    if (outcome === "approved") {
+      const allowLine = buildControlResponseLine(requestId, "allow", updatedInput);
+      return {
+        line: allowLine,
+        decision: { ...decision, behavior: "allow", requiresApproval: false },
+        approvalId
+      };
+    }
+    const reason = outcome === "timeout" ? `Approval timed out (${opts.hold.timeoutMs ?? 120000}ms).` : `Approval ${outcome}.`;
+    const message3 = `${buildRequiresApprovalDenyMessage(decision, approvalId)} ${reason}`;
+    const line2 = buildControlResponseLine(requestId, "deny", updatedInput, message3, { approvalId });
+    return { line: line2, decision, approvalId };
+  }
+  const message2 = decision.requiresApproval ? buildRequiresApprovalDenyMessage(decision, approvalId) : undefined;
+  const line = buildControlResponseLine(requestId, decision.behavior, updatedInput, message2, { approvalId });
+  return { line, decision, approvalId };
 }
 
 // chhlat/agent/claude.ts
@@ -17725,6 +18697,14 @@ async function killProcessTree(pid, opts) {
 }
 
 // chhlat/agent/claude.ts
+var approvalHoldPoller = null;
+var approvalHoldRuntimeConfig = undefined;
+function setApprovalHoldRuntimeConfig(runtimeConfig) {
+  approvalHoldRuntimeConfig = runtimeConfig;
+}
+function setApprovalHoldPoller(poller) {
+  approvalHoldPoller = poller;
+}
 class ClaudeBackend {
   cliPath;
   name = "claude";
@@ -18166,40 +19146,30 @@ class ClaudeBackend {
     return { pid: proc.pid, messages, parsedEvents, sessionId: sessionIdPromise, result: resultPromise, send, closeStdin, descriptor };
   }
 }
-function handleControlRequest(proc, event, enqueueStdinWrite) {
-  const requestId = event.request_id;
-  if (!requestId)
-    return;
-  let updatedInput = undefined;
-  const payload = event.payload;
-  if (payload) {
-    const input = payload.input;
-    if (typeof input === "string") {
-      try {
-        updatedInput = JSON.parse(input);
-      } catch {
-        updatedInput = input;
-      }
-    } else if (input !== undefined) {
-      updatedInput = input;
-    }
-  }
-  const approval = JSON.stringify({
-    type: "control_response",
-    response: {
-      subtype: "success",
-      request_id: requestId,
-      response: {
-        behavior: "allow",
-        updatedInput
-      }
-    }
+function approvalHoldEnabledFromEnv(env = process.env) {
+  return resolveApprovalHoldEnabled({
+    runtimeConfig: approvalHoldRuntimeConfig,
+    env
   });
+}
+async function handleControlRequest(proc, event, enqueueStdinWrite) {
+  const holdEnabled = approvalHoldEnabledFromEnv();
+  const poller = approvalHoldPoller;
+  const gated = await handleToolControlRequestAsync(event, {
+    hold: holdEnabled && poller ? {
+      enabled: true,
+      poll: poller,
+      timeoutMs: Number(process.env.CHHLAT_APPROVAL_HOLD_MS ?? 120000) || 120000,
+      intervalMs: Number(process.env.CHHLAT_APPROVAL_HOLD_INTERVAL_MS ?? 2000) || 2000
+    } : null
+  });
+  if (!gated)
+    return;
   if (enqueueStdinWrite) {
-    enqueueStdinWrite(approval);
+    enqueueStdinWrite(gated.line);
   } else {
     try {
-      proc.stdin?.write(approval + `
+      proc.stdin?.write(gated.line + `
 `);
     } catch {}
   }
@@ -19933,12 +20903,18 @@ The CLI auto-detects your identity from the environment. No need to pass \`--age
 | Capability | Command |
 |---|---|
 | Send a message to the user | \`${cmdPrefix()} sync send-dm\` |
+| Create / update / claim issues | \`${cmdPrefix()} issue create\` (also list, show, update, comment, claim, handback) |
 | Schedule / list / edit tasks | \`${cmdPrefix()} calendar set\` (also list, show, update, delete) |
 | Upload a file for your owner | \`${cmdPrefix()} sync upload-artifact\` |
 | Recruit a colleague agent | \`${cmdPrefix()} agent recruit\` |
 
 Detailed usage for each capability follows below.
 `;
+  const judgmentBlock = buildJudgmentPolicyContextBlock(readJudgmentPolicy(task.agent?.runtimeConfig), cmdPrefix());
+  if (judgmentBlock) {
+    content += `
+${judgmentBlock}`;
+  }
   const emailLines = [];
   if (phneakngarAddr)
     emailLines.push(`- '${phneakngarAddr}' (default, ភ្នាក់ងារ platform address)`);
@@ -21056,7 +22032,7 @@ function configDir() {
 var DEFAULT_PORT = 8799;
 var MIN_PORT = 1024;
 var MAX_PORT = 65535;
-function asRecord(value) {
+function asRecord4(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function boolValue(value) {
@@ -21083,13 +22059,13 @@ function parsePort(value) {
   return parsed;
 }
 function normalizeHeadroomRuntimeConfig(runtimeConfig, env = process.env) {
-  const runtime = asRecord(runtimeConfig);
-  const headroom = asRecord(runtime?.headroom);
+  const runtime = asRecord4(runtimeConfig);
+  const headroom = asRecord4(runtime?.headroom);
   const envOverride = envBoolOverride(env.PHNEAKNGAR_HEADROOM_ENABLED);
   const enabled = envOverride ?? boolValue(headroom?.enabled);
   const port = parsePort(env.PHNEAKNGAR_HEADROOM_PORT) ?? parsePort(headroom?.port) ?? parsePort(env.HEADROOM_PORT) ?? DEFAULT_PORT;
   const upstream = enabled ? (() => {
-    const upstreamRaw = asRecord(headroom?.upstream);
+    const upstreamRaw = asRecord4(headroom?.upstream);
     return upstreamRaw ? {
       claude: typeof upstreamRaw.claude === "string" ? upstreamRaw.claude : undefined,
       openai: typeof upstreamRaw.openai === "string" ? upstreamRaw.openai : undefined
@@ -21328,6 +22304,7 @@ async function prepareHeadroomForTask(task, provider, deps = {}) {
 var DM_RESPONSE_NOTICE = "Reply with `phneakngar sync send-dm` — that's the only thing the user sees; your task output and reasoning are not shown." + " Talk to them at milestones like a colleague would, and don't end your turn without sending what they need." + " If this task will take more than 30 seconds, send a quick ack first so the user knows you're on it." + " IMPORTANT: If you were working on a previous task before this message arrived, do NOT silently drop it. After handling this message, return to any prior unfinished work and report the result to the user.";
 var EMAIL_NOTICE = "This task was triggered by an incoming email. Reply to the sender via email — use the email sending tool to respond." + " If you need more information or confirmation, email them and then exit." + " Do not wait — when they reply, a new task will be triggered automatically and you will be woken up with their response." + " IMPORTANT: Do not let this email interrupt any task you were previously working on. After handling this email, return to your original task and make sure it reaches completion.";
 var CALENDAR_NOTICE = "This task was triggered by a scheduled calendar event." + " If you need to communicate with someone, send an email using the email sending tool." + " If you need more information or confirmation, email them and then exit." + " Do not wait — when they reply, a new task will be triggered automatically and you will be woken up with their response.";
+var WEB_BRAIN_NOTICE = " Live web tools are available via the lean web brain:" + " prefer MCP tools web_search, web_fetch, web_extract, web_crawl, web_diff, web_cache when wired" + " (`phneakngar web wire-mcp`); else CLI `phneakngar web search|fetch|extract|crawl|diff`." + " Prefer real fetch for URLs; cite sources; do not invent page content." + " On blocked/SSRF/http errors, report the structured error and stop retry-spamming.";
 var ISSUE_NOTICE = "This task was triggered by an assigned issue. The issue_id is provided in this message." + " Use `phneakngar issue show --issue_id <issue_id>` to read full context." + " Use `phneakngar issue update --issue_id <issue_id> --status <status>` to change status." + " Use `phneakngar issue comment --issue_id <issue_id> --body <text>` to leave a comment." + " CRITICAL — You MUST manage the issue status correctly. This is NOT optional:" + " 1. Set status to 'in_progress' when you start working." + " 2. If you complete the work yourself: leave a summary comment, then set status to 'review' as your last action. 'review' means there is actual completed work (code, artifact, result) ready for the owner to look at." + " 3. If you delegated work to colleagues and are waiting for their response: KEEP status as 'in_progress' and exit. This is expected — you will be woken up when they reply. Set 'review' only after all delegated work is confirmed complete." + " 4. NEVER set 'review' unless there is concrete completed work for the owner to review. Sending a plan to a colleague is NOT completed work." + " NEVER exit without doing at least one of: updating the status, or leaving a comment explaining what you did and what you're waiting for.";
 function languagePolicyFor(task) {
   return task.languagePolicy ?? buildAgentPromptLanguagePolicy({ taskLocaleOverride: task.localeOverride });
@@ -21342,10 +22319,23 @@ function buildTaskObject(task, attachments) {
     type: task.type,
     received_at: receivedAt,
     instruction: task.prompt,
-    language_policy: languagePolicyFor(task)
+    language_policy: languagePolicyFor(task),
+    web_brain: {
+      available: true,
+      provider: "phneakngar",
+      tools: [
+        "web_search",
+        "web_fetch",
+        "web_cache",
+        "web_extract",
+        "web_crawl",
+        "web_diff"
+      ],
+      notice: WEB_BRAIN_NOTICE.trim()
+    }
   };
   if (task.type === "user_dm_message") {
-    obj.notice = DM_RESPONSE_NOTICE;
+    obj.notice = DM_RESPONSE_NOTICE + WEB_BRAIN_NOTICE;
     const ctx = task.context;
     if (ctx?.message_id) {
       obj.message_id = ctx.message_id;
@@ -21360,14 +22350,35 @@ function buildTaskObject(task, attachments) {
         ...ctx.conversation_history ? { history: ctx.conversation_history } : {}
       };
     }
+    const judgment = readJudgmentPolicy(task.agent?.runtimeConfig);
+    const judgmentNotice = buildJudgmentPolicyNotice(judgment);
+    if (judgmentNotice) {
+      const decision = resolveAmbiguousDmJudgment({
+        policy: judgment,
+        prompt: task.prompt,
+        agentId: task.agentId,
+        senderName: task.sender?.name ?? null,
+        conversationId: task.conversationId
+      });
+      obj.judgment_policy = {
+        ambiguous_to_issue: true,
+        guidance: judgmentNotice,
+        recommended_action: decision.action,
+        reason: decision.reason,
+        ...decision.action === "create_issue" ? {
+          issue_draft: decision.issue
+        } : {}
+      };
+      obj.notice = `${DM_RESPONSE_NOTICE}${WEB_BRAIN_NOTICE} ${judgmentNotice}`;
+    }
   }
   if (task.type === "email_notification") {
     const ctx = task.context;
     const dmUser = ctx?.dmUser;
     if (ctx?.conversationType === "user_dm_message" && dmUser) {
-      obj.notice = buildEmailDmNotice(dmUser.name, dmUser.email);
+      obj.notice = buildEmailDmNotice(dmUser.name, dmUser.email) + WEB_BRAIN_NOTICE;
     } else {
-      obj.notice = EMAIL_NOTICE;
+      obj.notice = EMAIL_NOTICE + WEB_BRAIN_NOTICE;
     }
     if (ctx?.emailId != null) {
       obj.email_id = ctx.emailId;
@@ -21402,6 +22413,29 @@ function buildTaskObject(task, attachments) {
       obj.issue_id = ctx.issue_id;
     }
   }
+  if (task.type === "automation_event") {
+    const ctx = task.context;
+    if (ctx?.automation_id != null) {
+      obj.automation_id = ctx.automation_id;
+    }
+    if (ctx?.delivery_mode != null) {
+      obj.delivery_mode = ctx.delivery_mode;
+    }
+    if (ctx?.skill_name != null) {
+      obj.skill_name = ctx.skill_name;
+    }
+  }
+  const memoryCtx = task.context;
+  if (memoryCtx) {
+    if (typeof memoryCtx.memory_prompt === "string" && memoryCtx.memory_prompt.trim()) {
+      obj.memory = memoryCtx.memory_prompt;
+    } else if (Array.isArray(memoryCtx.memories) && memoryCtx.memories.length > 0) {
+      const items = memoryCtx.memories;
+      const formatted = formatMemoryForPrompt(items);
+      if (formatted)
+        obj.memory = formatted;
+    }
+  }
   if (task.sender) {
     obj.sender = {
       name: task.sender.name,
@@ -21500,6 +22534,18 @@ async function runSession(input) {
   log6.info(`starting (task=${task.id}, type=${task.type}, agent=${task.agentId}, provider=${provider}, model=${model || "default"})`);
   const client = new ChhlatClient(serverURL);
   const backend = createBackend(provider, cliPath);
+  setToolActionApprovalCreator(makeClientToolActionApprovalCreator({
+    client,
+    token,
+    chhlatId: task.runtimeId ?? "",
+    agentId: task.agentId
+  }));
+  setApprovalHoldRuntimeConfig(task.agent?.runtimeConfig);
+  setApprovalHoldPoller(async (approvalId) => {
+    const res = await client.getToolApproval(token, approvalId);
+    const status = res?.approval?.status;
+    return typeof status === "string" ? { status } : null;
+  });
   const agentBaseDir = path.join(workspacesRoot, task.workspaceId, task.agentId, "workdir");
   const timelineDir = path.join(agentBaseDir, ".context_timeline").replace(/\\/g, "/");
   mkdirSync7(timelineDir, { recursive: true });