agor-live 0.21.2 → 0.22.0

package/dist/executor/commands/unix.js

@@ -92,6 +92,31 @@ async function runCommands(commands) {
         await runCommand(command);
     }
 }
+function parseGroupMembers(output) {
+    return output.trim().split(',').filter(Boolean);
+}
+async function addUsersToGroup(usernames, groupName) {
+    let added = 0;
+    for (const username of usernames) {
+        const inGroup = await checkCommand(UnixGroupCommands.isUserInGroup(username, groupName));
+        if (!inGroup) {
+            await runCommand(UnixGroupCommands.addUserToGroup(username, groupName));
+            added++;
+        }
+    }
+    return added;
+}
+async function reconcileGroupMembers(groupName, allowedUsernames, logPrefix) {
+    const currentMembers = parseGroupMembers(await runCommand(UnixGroupCommands.listGroupMembers(groupName)));
+    for (const username of currentMembers) {
+        if (allowedUsernames.has(username))
+            continue;
+        await runCommand(UnixGroupCommands.removeUserFromGroup(username, groupName), {
+            ignoreErrors: true,
+        });
+        console.log(`${logPrefix} Removed stale group member ${username} from ${groupName}`);
+    }
+}
 // ============================================================
 // REPO SYNC OPERATIONS
 // ============================================================
@@ -332,6 +357,28 @@ export async function handleUnixSyncBranch(payload, options) {
         catch (_error) {
             console.log(`[unix.sync-branch] Could not fetch owners, skipping user sync`);
         }
+        // Fetch and add all users with explicit filesystem access. This expands
+        // branch groups plus board owners/groups for board-aligned branches.
+        const explicitFsUsernames = new Set(ownerUsernames);
+        let fsAccessUsersAdded = 0;
+        let explicitFsUsersFetched = false;
+        try {
+            const fsUsersResult = await client.service(`branches/${branchId}/fs-access-users`).find({});
+            const fsUsers = Array.isArray(fsUsersResult) ? fsUsersResult : fsUsersResult.data || [];
+            for (const user of fsUsers) {
+                if (user.unix_username) {
+                    explicitFsUsernames.add(user.unix_username);
+                }
+            }
+            explicitFsUsersFetched = true;
+            fsAccessUsersAdded = await addUsersToGroup(explicitFsUsernames, groupName);
+            if (fsAccessUsersAdded > 0) {
+                console.log(`[unix.sync-branch] Added ${fsAccessUsersAdded} explicit filesystem access user(s) to branch group`);
+            }
+        }
+        catch (_error) {
+            console.log(`[unix.sync-branch] Could not fetch filesystem access users, skipping`);
+        }
         // When others_fs_access is 'write', non-owner session users need branch group
         // membership for full read-write access. For 'read' mode, they rely on ACL "others"
         // bits (o::rX) on the branch directory — adding them to the branch group would
@@ -353,7 +400,7 @@ export async function handleUnixSyncBranch(payload, options) {
                 // Collect unique non-owner unix_usernames from sessions
                 const sessionUsernames = new Set();
                 for (const session of sessions) {
-                    if (session.unix_username && !ownerUsernames.has(session.unix_username)) {
+                    if (session.unix_username && !explicitFsUsernames.has(session.unix_username)) {
                         sessionUsernames.add(session.unix_username);
                     }
                 }
@@ -370,6 +417,34 @@ export async function handleUnixSyncBranch(payload, options) {
                 console.log(`[unix.sync-branch] Could not fetch sessions for non-owner group sync`);
             }
         }
+        const allowedBranchMembers = new Set(explicitFsUsernames);
+        if (payload.params.daemonUser)
+            allowedBranchMembers.add(payload.params.daemonUser);
+        if (othersAccess === 'write') {
+            try {
+                const sessionsResult = await client.service('sessions').find({
+                    query: {
+                        branch_id: branchId,
+                        $select: ['unix_username'],
+                        $limit: 500,
+                    },
+                });
+                const sessions = Array.isArray(sessionsResult) ? sessionsResult : sessionsResult.data || [];
+                for (const session of sessions) {
+                    if (session.unix_username)
+                        allowedBranchMembers.add(session.unix_username);
+                }
+            }
+            catch {
+                // Best-effort stale-member cleanup only.
+            }
+        }
+        if (explicitFsUsersFetched) {
+            await reconcileGroupMembers(groupName, allowedBranchMembers, '[unix.sync-branch]');
+        }
+        else {
+            console.log('[unix.sync-branch] Skipping stale branch group member cleanup because explicit filesystem access users could not be fetched');
+        }
         // Also sync repo group (ensure owners and authorized session users have .git/ access)
         if (branch.repo_id) {
             try {
@@ -383,6 +458,8 @@ export async function handleUnixSyncBranch(payload, options) {
                             console.log(`[unix.sync-branch] Added daemon user to repo group ${repo.unix_group}`);
                         }
                     }
+                    // Add all explicit filesystem access users to repo group (for .git/ access)
+                    await addUsersToGroup(explicitFsUsernames, repo.unix_group);
                     // Add all branch owners to repo group (for .git/ access)
                     // This ensures owners can run git commands which need .git/ access
                     try {
@@ -418,7 +495,7 @@ export async function handleUnixSyncBranch(payload, options) {
                                 : sessionsResult.data || [];
                             const sessionUsernames = new Set();
                             for (const session of sessions) {
-                                if (session.unix_username && !ownerUsernames.has(session.unix_username)) {
+                                if (session.unix_username && !explicitFsUsernames.has(session.unix_username)) {
                                     sessionUsernames.add(session.unix_username);
                                 }
                             }
@@ -464,6 +541,7 @@ export async function handleUnixSyncBranch(payload, options) {
                 branchId,
                 groupName,
                 ownersAdded,
+                fsAccessUsersAdded,
                 sessionUsersAdded,
             },
         };
@@ -488,6 +566,83 @@ export async function handleUnixSyncBranch(payload, options) {
     }
 }
 // ============================================================
+// BOARD SYNC OPERATIONS
+// ============================================================
+/**
+ * Sync Unix state for every branch currently aligned with a board.
+ *
+ * This keeps board permission propagation in one executor process while
+ * preserving the branch-level sync semantics and no-overgrant alignment gate.
+ */
+export async function handleUnixSyncBoard(payload, options) {
+    if (options.dryRun) {
+        return {
+            success: true,
+            data: { dryRun: true, command: 'unix.sync-board', boardId: payload.params.boardId },
+        };
+    }
+    let client = null;
+    try {
+        const daemonUrl = payload.daemonUrl || 'http://localhost:3030';
+        client = await createExecutorClient(daemonUrl, payload.sessionToken);
+        console.log('[unix.sync-board] Connected to daemon');
+        const boardId = payload.params.boardId;
+        const branchesResult = await client.service(`boards/${boardId}/aligned-branches`).find({});
+        const branches = Array.isArray(branchesResult) ? branchesResult : branchesResult.data || [];
+        console.log(`[unix.sync-board] Syncing ${branches.length} board-aligned branch(es) for board ${shortId(boardId)}`);
+        // Keep this authenticated client open while nested branch syncs run.
+        // Branch syncs currently open their own daemon clients, but all work still
+        // runs inside this one executor process. Disconnecting here can race the
+        // auth client's async re-auth/logout bookkeeping while the nested syncs
+        // start. The finally block below closes the board client after all branch
+        // work finishes.
+        const results = [];
+        for (const branch of branches) {
+            if (!branch.branch_id)
+                continue;
+            const result = await handleUnixSyncBranch({
+                ...payload,
+                command: 'unix.sync-branch',
+                params: {
+                    branchId: branch.branch_id,
+                    daemonUser: payload.params.daemonUser,
+                },
+            }, options);
+            results.push({ branchId: branch.branch_id, success: result.success, error: result.error });
+        }
+        const failed = results.filter((result) => !result.success);
+        if (failed.length > 0) {
+            return {
+                success: false,
+                data: { boardId, synced: results.length, failed },
+                error: {
+                    code: 'UNIX_SYNC_BOARD_PARTIAL_FAILURE',
+                    message: `Failed to sync ${failed.length} of ${results.length} board-aligned branch(es)`,
+                },
+            };
+        }
+        return { success: true, data: { boardId, synced: results.length } };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        console.error('[unix.sync-board] Failed:', errorMessage);
+        return {
+            success: false,
+            error: { code: 'UNIX_SYNC_BOARD_FAILED', message: errorMessage },
+        };
+    }
+    finally {
+        if (client) {
+            try {
+                client.io.disconnect();
+            }
+            catch {
+                // Ignore
+            }
+        }
+    }
+}
+// ============================================================
 // USER SYNC OPERATIONS
 // ============================================================
 /**

package/dist/executor/payload-types.d.ts

@@ -14,10 +14,10 @@ export { type ResolvedConfigSlice, ResolvedConfigSliceSchema };
  * Tool types supported by the prompt command
  */
 export declare const ToolTypeSchema: z.ZodEnum<{
-    codex: "codex";
     "claude-code": "claude-code";
     "claude-code-cli": "claude-code-cli";
     gemini: "gemini";
+    codex: "codex";
     opencode: "opencode";
     copilot: "copilot";
     cursor: "cursor";
@@ -103,10 +103,10 @@ export declare const PromptPayloadSchema: z.ZodObject<{
         taskId: z.ZodString;
         prompt: z.ZodString;
         tool: z.ZodEnum<{
-            codex: "codex";
             "claude-code": "claude-code";
             "claude-code-cli": "claude-code-cli";
             gemini: "gemini";
+            codex: "codex";
             opencode: "opencode";
             copilot: "copilot";
             cursor: "cursor";
@@ -126,8 +126,8 @@ export declare const PromptPayloadSchema: z.ZodObject<{
         }>>;
         cwd: z.ZodString;
         messageSource: z.ZodOptional<z.ZodEnum<{
-            agor: "agor";
             gateway: "gateway";
+            agor: "agor";
         }>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
@@ -429,6 +429,79 @@ export declare const BranchAgorYmlExportPayloadSchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type BranchAgorYmlExportPayload = z.infer<typeof BranchAgorYmlExportPayloadSchema>;
+/**
+ * Environment lifecycle payload - run shell-based start/stop/restart/nuke
+ * commands from the executor. Webhook lifecycle commands stay daemon-owned.
+ */
+export declare const EnvironmentLifecyclePayloadSchema: z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"environment.lifecycle">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        branchId: z.ZodString;
+        branchPath: z.ZodOptional<z.ZodString>;
+        action: z.ZodEnum<{
+            start: "start";
+            stop: "stop";
+            restart: "restart";
+            nuke: "nuke";
+        }>;
+        startCommand: z.ZodOptional<z.ZodString>;
+        stopCommand: z.ZodOptional<z.ZodString>;
+        nukeCommand: z.ZodOptional<z.ZodString>;
+        appUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type EnvironmentLifecyclePayload = z.infer<typeof EnvironmentLifecyclePayloadSchema>;
+/**
+ * Environment logs payload - run shell-based logs command from executor.
+ * Webhook logs stay daemon-owned.
+ */
+export declare const EnvironmentLogsPayloadSchema: z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"environment.logs">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        branchId: z.ZodString;
+        branchPath: z.ZodOptional<z.ZodString>;
+        logsCommand: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type EnvironmentLogsPayload = z.infer<typeof EnvironmentLogsPayloadSchema>;
 /**
  * Git repo origin realign payload - ensure remote.origin.url matches DB.
  */
@@ -530,6 +603,39 @@ export declare const UnixSyncBranchPayloadSchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type UnixSyncBranchPayload = z.infer<typeof UnixSyncBranchPayloadSchema>;
+/**
+ * Unix sync-board payload - Sync Unix state for every branch aligned with a board.
+ *
+ * The executor resolves board-aligned branches through the daemon, then reuses
+ * unix.sync-branch semantics for each branch in the same executor process.
+ */
+export declare const UnixSyncBoardPayloadSchema: z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"unix.sync-board">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        boardId: z.ZodString;
+        daemonUser: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type UnixSyncBoardPayload = z.infer<typeof UnixSyncBoardPayloadSchema>;
 /**
  * Unix sync-repo payload - Sync all Unix state for a repo
  *
@@ -715,10 +821,10 @@ export declare const ExecutorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         taskId: z.ZodString;
         prompt: z.ZodString;
         tool: z.ZodEnum<{
-            codex: "codex";
             "claude-code": "claude-code";
             "claude-code-cli": "claude-code-cli";
             gemini: "gemini";
+            codex: "codex";
             opencode: "opencode";
             copilot: "copilot";
             cursor: "cursor";
@@ -738,8 +844,8 @@ export declare const ExecutorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         }>>;
         cwd: z.ZodString;
         messageSource: z.ZodOptional<z.ZodEnum<{
-            agor: "agor";
             gateway: "gateway";
+            agor: "agor";
         }>>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
@@ -983,6 +1089,67 @@ export declare const ExecutorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         branchId: z.ZodString;
         environment: z.ZodUnknown;
     }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"environment.lifecycle">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        branchId: z.ZodString;
+        branchPath: z.ZodOptional<z.ZodString>;
+        action: z.ZodEnum<{
+            start: "start";
+            stop: "stop";
+            restart: "restart";
+            nuke: "nuke";
+        }>;
+        startCommand: z.ZodOptional<z.ZodString>;
+        stopCommand: z.ZodOptional<z.ZodString>;
+        nukeCommand: z.ZodOptional<z.ZodString>;
+        appUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"environment.logs">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        branchId: z.ZodString;
+        branchPath: z.ZodOptional<z.ZodString>;
+        logsCommand: z.ZodString;
+    }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     daemonUrl: z.ZodOptional<z.ZodString>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1057,6 +1224,31 @@ export declare const ExecutorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         daemonUser: z.ZodOptional<z.ZodString>;
         delete: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    daemonUrl: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dataHome: z.ZodOptional<z.ZodString>;
+    resolvedConfig: z.ZodOptional<z.ZodObject<{
+        execution: z.ZodOptional<z.ZodObject<{
+            permission_timeout_ms: z.ZodOptional<z.ZodNumber>;
+            executor_heartbeat: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodBoolean;
+                interval_ms: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        opencode: z.ZodOptional<z.ZodObject<{
+            serverUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            host_ip_address: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    command: z.ZodLiteral<"unix.sync-board">;
+    sessionToken: z.ZodString;
+    params: z.ZodObject<{
+        boardId: z.ZodString;
+        daemonUser: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     daemonUrl: z.ZodOptional<z.ZodString>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1221,6 +1413,10 @@ export declare function isGitBranchCleanPayload(payload: ExecutorPayload): paylo
  * Type guard for UnixSyncBranchPayload
  */
 export declare function isUnixSyncBranchPayload(payload: ExecutorPayload): payload is UnixSyncBranchPayload;
+/**
+ * Type guard for UnixSyncBoardPayload
+ */
+export declare function isUnixSyncBoardPayload(payload: ExecutorPayload): payload is UnixSyncBoardPayload;
 /**
  * Type guard for UnixSyncRepoPayload
  */

package/dist/executor/payload-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload-types.d.ts","sourceRoot":"","sources":["../src/payload-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,KAAK,mBAAmB,EAAE,yBAAyB,EAAE,CAAC;AAsD/D;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;EAQzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAe/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;iBAmB5B,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiDhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAiDpE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgFpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkCvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;iBAUtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;iBAUrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;iBAa3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgB3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAM1F;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;iBAU5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAM5F;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;iBAUrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAMtE;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAiBhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;iBAc/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAGlE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAmB/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,aAAa,CAElF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,eAAe,CAEtF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,sBAAsB,CAEnC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,qBAAqB,CAElC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,qBAAqB,CAElC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,gBAAgB,CAExF"}
+{"version":3,"file":"payload-types.d.ts","sourceRoot":"","sources":["../src/payload-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,KAAK,mBAAmB,EAAE,yBAAyB,EAAE,CAAC;AAsD/D;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;EAQzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAe/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;iBAmB5B,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiDhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAiDpE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgFpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkCvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;iBAUtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;iBAUrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;iBAa3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgB3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAM1F;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoD5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;iBAU5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAM5F;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;iBAUrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;iBAarC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAMtE;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAoBhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;iBAc/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAGlE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAsB/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,aAAa,CAElF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,eAAe,CAEtF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,sBAAsB,CAEnC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,qBAAqB,CAElC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,GACvB,OAAO,IAAI,qBAAqB,CAElC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,oBAAoB,CAEhG;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAE9F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,IAAI,gBAAgB,CAExF"}

package/dist/executor/payload-types.js

@@ -427,6 +427,75 @@ export const BranchAgorYmlExportPayloadSchema = BasePayloadSchema.extend({
     }),
 });
 // ═══════════════════════════════════════════════════════════
+// Environment Lifecycle Payload
+// ═══════════════════════════════════════════════════════════
+/**
+ * Environment lifecycle payload - run shell-based start/stop/restart/nuke
+ * commands from the executor. Webhook lifecycle commands stay daemon-owned.
+ */
+export const EnvironmentLifecyclePayloadSchema = BasePayloadSchema.extend({
+    command: z.literal('environment.lifecycle'),
+    /** JWT for Feathers authentication */
+    sessionToken: z.string(),
+    params: z
+        .object({
+        /** Branch ID whose environment is being controlled */
+        branchId: z.string().uuid(),
+        /** Branch checkout path. Executor refetches the branch but this avoids ambiguity. */
+        branchPath: z.string().optional(),
+        /** Lifecycle action */
+        action: z.enum(['start', 'stop', 'restart', 'nuke']),
+        /** Shell start command. Required for start/restart. */
+        startCommand: z.string().optional(),
+        /** Shell stop command. Required for stop and used before restart when present. */
+        stopCommand: z.string().optional(),
+        /** Shell nuke command. Required for nuke. */
+        nukeCommand: z.string().optional(),
+        /** Static app URL rendered by the daemon/branch snapshot. */
+        appUrl: z.string().optional(),
+    })
+        .superRefine((params, ctx) => {
+        if ((params.action === 'start' || params.action === 'restart') && !params.startCommand) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['startCommand'],
+                message: 'startCommand is required for start/restart',
+            });
+        }
+        if (params.action === 'stop' && !params.stopCommand) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['stopCommand'],
+                message: 'stopCommand is required for stop',
+            });
+        }
+        if (params.action === 'nuke' && !params.nukeCommand) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['nukeCommand'],
+                message: 'nukeCommand is required for nuke',
+            });
+        }
+    }),
+});
+/**
+ * Environment logs payload - run shell-based logs command from executor.
+ * Webhook logs stay daemon-owned.
+ */
+export const EnvironmentLogsPayloadSchema = BasePayloadSchema.extend({
+    command: z.literal('environment.logs'),
+    /** JWT for Feathers authentication */
+    sessionToken: z.string(),
+    params: z.object({
+        /** Branch ID whose environment logs are being fetched */
+        branchId: z.string().uuid(),
+        /** Branch checkout path. Executor refetches the branch but this avoids ambiguity. */
+        branchPath: z.string().optional(),
+        /** Shell logs command */
+        logsCommand: z.string(),
+    }),
+});
+// ═══════════════════════════════════════════════════════════
 // Git Repo Realign Origin Payload
 // ═══════════════════════════════════════════════════════════
 /**
@@ -487,6 +556,23 @@ export const UnixSyncBranchPayloadSchema = BasePayloadSchema.extend({
         delete: z.boolean().optional(),
     }),
 });
+/**
+ * Unix sync-board payload - Sync Unix state for every branch aligned with a board.
+ *
+ * The executor resolves board-aligned branches through the daemon, then reuses
+ * unix.sync-branch semantics for each branch in the same executor process.
+ */
+export const UnixSyncBoardPayloadSchema = BasePayloadSchema.extend({
+    command: z.literal('unix.sync-board'),
+    /** JWT for Feathers authentication */
+    sessionToken: z.string(),
+    params: z.object({
+        /** Board ID whose aligned branches should be synced */
+        boardId: z.string().uuid(),
+        /** Daemon Unix user (added to all groups for daemon access) */
+        daemonUser: z.string().optional(),
+    }),
+});
 /**
  * Unix sync-repo payload - Sync all Unix state for a repo
  *
@@ -632,9 +718,12 @@ export const ExecutorPayloadSchema = z.discriminatedUnion('command', [
     BranchInspectPayloadSchema,
     BranchAgorYmlImportPayloadSchema,
     BranchAgorYmlExportPayloadSchema,
+    EnvironmentLifecyclePayloadSchema,
+    EnvironmentLogsPayloadSchema,
     GitRepoRealignOriginPayloadSchema,
     GitRepoDeletePayloadSchema,
     UnixSyncBranchPayloadSchema,
+    UnixSyncBoardPayloadSchema,
     UnixSyncRepoPayloadSchema,
     UnixSyncUserPayloadSchema,
     ZellijAttachPayloadSchema,
@@ -683,9 +772,12 @@ export function getSupportedCommands() {
         'branch.inspect',
         'branch.agor-yml.import',
         'branch.agor-yml.export',
+        'environment.lifecycle',
+        'environment.logs',
         'git.repo.realign-origin',
         'git.repo.delete',
         'unix.sync-branch',
+        'unix.sync-board',
         'unix.sync-repo',
         'unix.sync-user',
         'zellij.attach',
@@ -728,6 +820,12 @@ export function isGitBranchCleanPayload(payload) {
 export function isUnixSyncBranchPayload(payload) {
     return payload.command === 'unix.sync-branch';
 }
+/**
+ * Type guard for UnixSyncBoardPayload
+ */
+export function isUnixSyncBoardPayload(payload) {
+    return payload.command === 'unix.sync-board';
+}
 /**
  * Type guard for UnixSyncRepoPayload
  */

package/dist/executor/sdk-handlers/base/mcp-scoping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-scoping.d.ts","sourceRoot":"","sources":["../../../src/sdk-handlers/base/mcp-scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAW3C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,kBAAkB,GAAG,QAAQ,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA4IhC"}
+{"version":3,"file":"mcp-scoping.d.ts","sourceRoot":"","sources":["../../../src/sdk-handlers/base/mcp-scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAe3C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,kBAAkB,GAAG,QAAQ,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0JhC"}