forgebadger 0.1.0 → 0.1.2

package/dist/gateway/src/services/agent/tools/project-manager.js

@@ -1,3 +1,6 @@
+import { adapterIds } from "../../../lib/adapter-ids.js";
+import { assertChannelToolScope } from '../../channels/channel-run-scope.js';
+import { getTaskProgress, taskCloseInput, taskProgressInput } from '../../project-manager/task-progress.js';
 import { executeAgentAction } from "../../platform-commands/agent-actions.js";
 /** Project Manager reads and governed task preparation. Preparation never launches a CLI. */
 import { z } from "zod";
@@ -15,7 +18,7 @@ const getPacketInput = z.object({
     workItemId: z.string().min(1).max(128)
 }).strict();
 const startPacketInput = getPacketInput.extend({
-    aiTool: z.enum(["claude", "opencode", "codex", "kimi", "pi"]).optional()
+    aiTool: z.enum(adapterIds).optional()
 }).strict();
 /** Load project + work item, or a recoverable not-found marker. */
 function loadWorkItem(db, userId, projectId, workItemId) {
@@ -29,6 +32,34 @@ function loadWorkItem(db, userId, projectId, workItemId) {
 }
 export function createProjectManagerTools() {
     return [
+        {
+            name: "pm_get_task_progress",
+            description: "Read a task's current dispatch attempt, durable CLI notification evidence, session status and next action. A CLI completion is only a review candidate. Optional bounded wait never changes task state.",
+            risk: "read", requiresApproval: false, inputSchema: taskProgressInput,
+            async execute(input, context) {
+                const parsed = taskProgressInput.parse(input);
+                const deadline = Date.now() + (parsed.waitMs ?? 0);
+                const ctx = { db: context.db, userId: context.userId };
+                const assertActive = () => {
+                    if (typeof context.checkExecutionAuthority === 'function' && !context.checkExecutionAuthority())
+                        throw new Error('Copilot execution authority expired');
+                };
+                assertActive();
+                let result = getTaskProgress(ctx, parsed.projectId, parsed.workItemId);
+                while (Date.now() < deadline && result.found && result.taskPacket.workItemStatus === 'in_progress' && result.notifications.length === 0) {
+                    await new Promise(resolve => setTimeout(resolve, Math.min(250, deadline - Date.now())));
+                    assertActive();
+                    result = getTaskProgress(ctx, parsed.projectId, parsed.workItemId);
+                }
+                return result;
+            }
+        },
+        {
+            name: "pm_close_task",
+            description: "Save a task closeout report using the current attempt ID and a server-provided completion notification ID. Validates the exact task, dispatch receipt and prompt. Advances at most to ready_for_review; never claims independent verification or done.",
+            risk: "operate", requiresApproval: true, inputSchema: taskCloseInput,
+            async execute(input, context) { return executeAgentAction("pm_close_task", taskCloseInput.parse(input), context); }
+        },
         {
             name: "pm_list_task_packets",
             description: "List the Project Manager task packets for a project — the development queue with per-item prompt, acceptance criteria, verification expectations, linked session, and queue status (planned/running/waiting_for_review/blocked/completed/cancelled).",
@@ -47,6 +78,14 @@ export function createProjectManagerTools() {
                 const sessionsByWorkItem = resolveTaskPacketSessions(db, userId, projectId, items);
                 const packets = [];
                 for (const workItem of items) {
+                    if (context.channelScope) {
+                        try {
+                            assertChannelToolScope(context, 'pm_get_task_packet', { projectId, workItemId: workItem.id });
+                        }
+                        catch {
+                            continue;
+                        }
+                    }
                     const session = sessionsByWorkItem.get(workItem.id) ?? null;
                     packets.push(buildTaskPacket({ project, workItem, session }));
                 }
@@ -79,6 +118,16 @@ export function createProjectManagerTools() {
             async execute(input, context) {
                 return executeAgentAction("pm_prepare_task_packet", startPacketInput.parse(input), context);
             }
+        },
+        {
+            name: "pm_execute_task_packet",
+            description: "Prepare (if needed), start the linked CLI session, and programmatically deliver the task packet prompt to it, then mark the work item in progress. Requires the adapter to be autonomy-enabled (FORGEBADGER_CLI_AUTONOMY_ADAPTERS).",
+            risk: "operate",
+            requiresApproval: true,
+            inputSchema: startPacketInput,
+            async execute(input, context) {
+                return executeAgentAction("pm_execute_task_packet", startPacketInput.parse(input), context);
+            }
         }
     ];
 }

package/dist/gateway/src/services/agent/tools/project-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-manager.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/project-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAgB,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,wBAAwB,EAEzB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,uCAAuC,CAAC;AAE/C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,mEAAmE;AACnE,SAAS,YAAY,CACnB,EAAY,EACZ,MAAc,EACd,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,wBAAwB,UAAU,EAAE,EAAE,EAAE,CAAC;IAChH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EACT,sPAAsP;YACxP,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAc,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClF,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,OAAO,GAA+B,EAAE,CAAC;gBAC/C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YACtE,CAAC;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,kLAAkL;YACpL,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,cAAc;YAC3B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAc,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;gBACxC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,OAAO,IAAI,MAAM;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACvH,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EACT,uGAAuG;YACzG,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"project-manager.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/project-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAgB,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,wBAAwB,EAEzB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,uCAAuC,CAAC;AAE/C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,mEAAmE;AACnE,SAAS,YAAY,CACnB,EAAY,EACZ,MAAc,EACd,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,wBAAwB,UAAU,EAAE,EAAE,EAAE,CAAC;IAChH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,yMAAyM;YACtN,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB;YACrE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;gBACnD,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC;gBAC7E,MAAM,YAAY,GAAG,GAAG,EAAE;oBACxB,IAAI,OAAO,OAAO,CAAC,uBAAuB,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBAC1J,CAAC,CAAC;gBACF,YAAY,EAAE,CAAC;gBACf,IAAI,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,KAAK,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxI,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;oBACxF,YAAY,EAAE,CAAC;oBACf,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,wPAAwP;YACrQ,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc;YACpE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,kBAAkB,CAAC,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;SACpH;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EACT,sPAAsP;YACxP,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAc,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClF,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,OAAO,GAA+B,EAAE,CAAC;gBAC/C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;oBAC7B,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;wBACzB,IAAI,CAAC;4BAAC,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;wBAAC,CAAC;wBACtG,MAAM,CAAC;4BAAC,SAAS;wBAAC,CAAC;oBACrB,CAAC;oBACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YACtE,CAAC;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,kLAAkL;YACpL,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,cAAc;YAC3B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAc,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;gBACxC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,OAAO,IAAI,MAAM;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACvH,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EACT,uGAAuG;YACzG,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EACT,qOAAqO;YACvO,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/projects.d.ts

@@ -1,2 +1,4 @@
 import type { AgentTool } from "../tool-registry.js";
 export declare function createProjectTools(): AgentTool[];
+/** External MCP additions; native Copilot keeps its established tool set. */
+export declare function createMcpProjectTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/projects.js

@@ -7,6 +7,8 @@ import { executeAgentAction } from "../../platform-commands/agent-actions.js";
  * Queries and writes use the native Copilot platform-access service.
  */
 import { z } from "zod";
+import { TemplateRepository, builtInTemplateSummaries } from "../../../db/repositories/template-repository.js";
+import { previewMcpConfig } from "../../mcp/project-workflow.js";
 import { getProjectDetail, listProjectSummaries } from "../platform-access.js";
 const listProjectsInput = z.object({
     limit: z.number().int().min(1).max(100).optional()
@@ -17,8 +19,12 @@ const getProjectInput = z.object({
 const createProjectInput = z.object({
     name: z.string().min(1).max(200),
     path: z.string().min(1).max(1024),
-    description: z.string().max(2000).optional()
+    description: z.string().max(2000).optional(),
+    techStack: z.string().max(2000).optional(),
+    templateId: z.string().min(1).max(128).optional()
 }).strict();
+const previewConfigInput = z.object({ projectId: z.string().min(1).max(128), templateId: z.string().min(1).max(128) }).strict();
+const applyConfigInput = previewConfigInput.extend({ expectedDigest: z.string().regex(/^[0-9a-f]{64}$/) }).strict();
 function toolDb(context) {
     return { db: context.db, userId: context.userId };
 }
@@ -33,7 +39,8 @@ export function createProjectTools() {
             async execute(input, context) {
                 const { limit } = listProjectsInput.parse(input);
                 const { db, userId } = toolDb(context);
-                const projects = listProjectSummaries(db, userId, { ...(limit !== undefined ? { limit } : {}) });
+                const allowedProjectIds = Array.isArray(context.allowedProjectIds) ? context.allowedProjectIds : undefined;
+                const projects = listProjectSummaries(db, userId, { ...(limit !== undefined ? { limit } : {}), ...(allowedProjectIds ? { allowedProjectIds } : {}) });
                 return { projects, count: projects.length };
             }
         },
@@ -54,7 +61,7 @@ export function createProjectTools() {
         },
         {
             name: "create_project",
-            description: "Create a new project (exact approval or project creation grant required).",
+            description: "Create a new project (subject to project path policy and exact approval when required).",
             risk: "operate",
             requiresApproval: true,
             riskClass: "medium",
@@ -65,4 +72,38 @@ export function createProjectTools() {
         }
     ];
 }
+/** External MCP additions; native Copilot keeps its established tool set. */
+export function createMcpProjectTools() {
+    return [
+        {
+            name: "list_templates", description: "List templates available to the current user for project setup.",
+            risk: "read", requiresApproval: false, inputSchema: z.object({}).strict(),
+            async execute(_input, context) {
+                const { db, userId } = toolDb(context);
+                const repo = new TemplateRepository(db, userId);
+                const templates = [...builtInTemplateSummaries(), ...repo.list()];
+                return { templates: templates.map(({ id, name, description, version, adapter, isBuiltin, status }) => ({ id, name, description, version, adapter, isBuiltin, status })) };
+            }
+        },
+        {
+            name: "preview_project_config", description: "Preview template files and conflicts for a project using host credentials; returns a digest needed to apply.",
+            risk: "read", requiresApproval: false, inputSchema: previewConfigInput,
+            async execute(input, context) {
+                const { projectId, templateId } = previewConfigInput.parse(input);
+                const { db, userId } = toolDb(context);
+                return previewMcpConfig(db, userId, projectId, templateId);
+            }
+        },
+        {
+            name: "import_project", description: "Register an existing project directory with an optional template; does not change its files.",
+            risk: "operate", requiresApproval: true, inputSchema: createProjectInput,
+            async execute(input, context) { return executeAgentAction("import_project", createProjectInput.parse(input), context); }
+        },
+        {
+            name: "apply_project_config", description: "Apply a matching template preview, creating missing files only; modified or unsafe files require owner review.",
+            risk: "operate", requiresApproval: true, inputSchema: applyConfigInput,
+            async execute(input, context) { return executeAgentAction("apply_project_config", applyConfigInput.parse(input), context); }
+        }
+    ];
+}
 //# sourceMappingURL=projects.js.map

package/dist/gateway/src/services/agent/tools/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,SAAS,MAAM,CAAC,OAAyB;IACvC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,gEAAgE;YAC7E,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,iBAAiB;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,8CAA8C;YAC3D,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,eAAe;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,CAAC;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,2EAA2E;YACxF,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,kBAAkB;YAC/B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChI,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpH,SAAS,MAAM,CAAC,OAAyB;IACvC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,gEAAgE;YAC7E,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,iBAAiB;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtJ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,8CAA8C;YAC3D,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,eAAe;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,CAAC;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,yFAAyF;YACtG,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,kBAAkB;YAC/B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,iEAAiE;YACtG,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YACzE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;gBAC3B,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,CAAC,GAAG,wBAAwB,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5K,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,8GAA8G;YAC3J,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB;YACtE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAC7D,CAAC;SACF;QACD;YACE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,8FAA8F;YACnI,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB;YACxE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;SACzH;QACD;YACE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,gHAAgH;YAC3J,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB;YACtE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,kBAAkB,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;SAC7H;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/research.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from '../tool-registry.js';
+export declare function createResearchTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/research.js

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import { ownedProject } from '../../development/commands.js';
+const inputSchema = z.object({ projectId: z.string().min(1).max(128), goal: z.string().trim().min(1).max(4000) }).strict();
+export function createResearchTools() {
+    return [{ name: 'research_project', description: 'Delegate a bounded read-only project investigation in a separate context. 只读研究项目代码，调查故障原因并分析证据。 Returns a report and child run ID. Cannot write, dispatch CLIs, use external tools or delegate again. Reports are analysis, not proof that tests passed.',
+            risk: 'read', requiresApproval: false, inputSchema,
+            async execute(raw, context) {
+                const input = inputSchema.parse(raw);
+                ownedProject(context, input.projectId);
+                if (typeof context.runResearch !== 'function')
+                    throw new Error('Research runtime unavailable');
+                return context.runResearch(input);
+            } }];
+}
+//# sourceMappingURL=research.js.map

package/dist/gateway/src/services/agent/tools/research.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"research.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/research.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE3H,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,0PAA0P;YACzS,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW;YAClD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO;gBACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC/F,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC,EAAE,CAAC,CAAC;AACT,CAAC"}

package/dist/gateway/src/services/agent/tools/sessions.js

@@ -1,14 +1,17 @@
 /**
  * Session tools for the Copilot harness — the "sessions" seam. Read tools
- * expose AI CLI session state; the operate tool (launch a session) is
- * approval-gated and only fires after the owner approves it.
+ * expose tenant-scoped AI CLI session state and current terminal output.
  *
  * Tenant-scoped reads and programmatic delivery live in the native Copilot
  * platform-access service.
  */
 import { z } from "zod";
+import { createSessionStopTarget, sessionRuntimeRevision } from "../../session-stop-target.js";
 import { getSessionDetail, listSessionSummaries } from "../platform-access.js";
 import { SessionRepository } from "../../../db/repositories/session-repository.js";
+import { SessionOutputRing } from '../../session-output-buffer.js';
+import { assertManagedSessionAccess } from '../../../db/repositories/managed-project-access.js';
+import { channelSessionAllowed } from '../../channels/channel-run-scope.js';
 const listSessionsInput = z.object({
     projectId: z.string().max(128).optional(),
     limit: z.number().int().min(1).max(100).optional()
@@ -34,9 +37,12 @@ export function createSessionTools() {
             async execute(input, context) {
                 const { projectId, limit } = listSessionsInput.parse(input);
                 const { db, userId } = toolDb(context);
+                const allowedProjectIds = Array.isArray(context.allowedProjectIds) ? context.allowedProjectIds : undefined;
                 const sessions = listSessionSummaries(db, userId, {
                     ...(projectId !== undefined ? { projectId } : {}),
-                    ...(limit !== undefined ? { limit } : {})
+                    ...(limit !== undefined ? { limit } : {}),
+                    ...(allowedProjectIds ? { allowedProjectIds } : {}),
+                    ...(context.channelScope ? { isSessionAllowed: (id) => channelSessionAllowed(context, id) } : {})
                 });
                 return { sessions, count: sessions.length };
             }
@@ -58,7 +64,7 @@ export function createSessionTools() {
         },
         {
             name: "get_session_output",
-            description: "Read the tail of a session's buffered terminal output (last CLI screen lines). Use it to inspect progress or completion of a dispatched task. Requires the session to be live in this Gateway process.",
+            description: "Read a session screen and its server-bound target (sessionId, taskTitle, observationId). Keep every target attached to its own output. For stop_session copy target.observationId and target.taskTitle exactly; never infer IDs by list position. Cached output cannot authorize stop.",
             risk: "read",
             requiresApproval: false,
             inputSchema: getSessionOutputInput,
@@ -67,13 +73,35 @@ export function createSessionTools() {
                 const { db, userId } = toolDb(context);
                 const session = new SessionRepository(db, userId).getById(sessionId);
                 if (!session)
-                    return { found: false, output: "" };
+                    return { sessionId, found: false, output: "" };
+                const authorizeRead = () => assertManagedSessionAccess(db, userId, sessionId, session.workingDir);
+                authorizeRead();
                 const sessionManager = context.sessionManager;
-                const ring = sessionManager?.getSessionOutput(sessionId);
-                if (!ring)
-                    return { found: true, live: false, output: "", truncated: false, lineCount: 0 };
-                const tail = ring.getTail(maxLines ?? 80);
-                return { found: true, live: true, ...tail };
+                try {
+                    if (sessionManager?.captureScreen) {
+                        const before = sessionRuntimeRevision(session, sessionManager);
+                        const snapshot = await sessionManager.captureScreen(userId, sessionId);
+                        authorizeRead();
+                        const ring = new SessionOutputRing();
+                        ring.append(snapshot.output.trimEnd());
+                        const fresh = new SessionRepository(db, userId).getById(sessionId);
+                        const stable = fresh && before === sessionRuntimeRevision(fresh, sessionManager);
+                        const tail = ring.getTail(maxLines ?? 80);
+                        const target = snapshot.live && stable
+                            ? createSessionStopTarget(db, fresh, sessionManager, context.stepId, snapshot.output) : undefined;
+                        // Keep identity intact under the tool registry's 48 KiB wire limit.
+                        const output = tail.output.slice(-5000);
+                        return { sessionId, found: true, live: snapshot.live && !!stable, source: 'session_server',
+                            ...tail, output, truncated: tail.truncated || output.length < tail.output.length, ...(target ? { target } : {}) };
+                    }
+                }
+                catch {
+                    // The daemon may be reconnecting; cached output cannot assert liveness.
+                }
+                authorizeRead();
+                const tail = sessionManager?.getSessionOutput(sessionId)?.getTail(maxLines ?? 80);
+                return { sessionId, found: true, live: false, source: tail ? 'cached' : 'unavailable',
+                    ...(tail ?? { output: '', truncated: false, lineCount: 0 }) };
             }
         }
     ];

package/dist/gateway/src/services/agent/tools/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAInF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,SAAS,MAAM,CAAC,OAAyB;IACvC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,oEAAoE;YACjF,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,iBAAiB;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE;oBAChD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,qDAAqD;YAClE,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,eAAe;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,CAAC;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,wMAAwM;YAC1M,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,qBAAqB;YAClC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAClD,MAAM,cAAc,GAAG,OAAO,CAAC,cAElB,CAAC;gBACd,MAAM,IAAI,GAAG,cAAc,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;YAC9C,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAInF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,SAAS,MAAM,CAAC,OAAyB;IACvC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,oEAAoE;YACjF,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,iBAAiB;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE;oBAChD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1G,CAAC,CAAC;gBACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,qDAAqD;YAClE,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,eAAe;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,CAAC;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,wRAAwR;YAC1R,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,qBAAqB;YAClC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC7D,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClG,aAAa,EAAE,CAAC;gBAChB,MAAM,cAAc,GAAG,OAAO,CAAC,cAAoD,CAAC;gBACpF,IAAI,CAAC;oBACH,IAAI,cAAc,EAAE,aAAa,EAAE,CAAC;wBAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;wBAC/D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;wBACvE,aAAa,EAAE,CAAC;wBAChB,MAAM,IAAI,GAAG,IAAI,iBAAiB,EAAE,CAAC;wBACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;wBACvC,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;wBACnE,MAAM,MAAM,GAAG,KAAK,IAAI,MAAM,KAAK,sBAAsB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;wBACjF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;wBAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,IAAI,MAAM;4BACpC,CAAC,CAAC,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACpG,oEAAoE;wBACpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;wBACxC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB;4BACxF,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;oBACtH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wEAAwE;gBAC1E,CAAC;gBACD,aAAa,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,cAAc,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAClF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa;oBACnF,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAClE,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/skills.js

@@ -9,8 +9,8 @@ const resourceInput = z.object({
 }).strict();
 function options(context) {
     const names = context.availableToolNames;
-    return { grantBound: typeof context.grantId === 'string',
-        ...(Array.isArray(names) && names.every(name => typeof name === 'string') ? { availableToolNames: names } : {}) };
+    return Array.isArray(names) && names.every(name => typeof name === 'string')
+        ? { availableToolNames: names } : {};
 }
 export function createSkillTools() {
     return [

package/dist/gateway/src/services/agent/tools/skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mCAAmC,EAAE,mBAAmB,EAA6B,MAAM,4BAA4B,CAAC;AACjI,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC9G,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,SAAS,OAAO,CAAC,OAAyB;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACzC,OAAO,EAAE,UAAU,EAAE,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACtD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AACD,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,+KAA+K;YACpN,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS;YAC7D,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;gBAC3B,MAAM,SAAS,GAAG,mCAAmC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpG,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAChD,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gPAAgP;YACpR,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS;YAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC9G,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK;oBAClG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC1H,CAAC;SACF;QACD;YACE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,gPAAgP;YAC1R,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa;YACjE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACxH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mCAAmC,EAAE,mBAAmB,EAA6B,MAAM,4BAA4B,CAAC;AACjI,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACxE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC9G,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,SAAS,OAAO,CAAC,OAAyB;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC1E,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,+KAA+K;YACpN,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS;YAC7D,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;gBAC3B,MAAM,SAAS,GAAG,mCAAmC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpG,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAChD,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gPAAgP;YACpR,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS;YAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC9G,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK;oBAClG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC1H,CAAC;SACF;QACD;YACE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,gPAAgP;YAC1R,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa;YACjE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACxH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/source-search.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from '../tool-registry.js';
+export declare function createSourceSearchTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/source-search.js

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+import { ownedProject } from '../../development/commands.js';
+import { listSourceFiles, readSource } from '../../development/workspace.js';
+import { sourcePathSchema } from '../../development/contracts.js';
+import { redactAgentText } from '../redaction.js';
+const inputSchema = z.object({ projectId: z.string().min(1).max(128), query: z.string().trim().min(1).max(200),
+    path: sourcePathSchema.optional(), offset: z.number().int().min(0).max(20000).default(0),
+    lineOffset: z.number().int().min(0).max(65536).default(0),
+    limit: z.number().int().min(1).max(50).default(20) }).strict();
+export function createSourceSearchTools() {
+    return [{ name: 'search_project_files', description: 'Search source text by literal text (not regex). 搜索项目源代码中的文本，返回匹配文件和行号。 Returns paths, line numbers and redacted snippets. Bounded file scan; use nextOffset and nextLineOffset together to continue, or narrow path. Skips secret, hidden and symlink files.',
+            risk: 'read', requiresApproval: false, inputSchema,
+            async execute(raw, context) {
+                const input = inputSchema.parse(raw);
+                const root = ownedProject(context, input.projectId).path;
+                const page = listSourceFiles(root, input.path, 100, input.offset);
+                const matches = [];
+                let scanned = 0;
+                let resume;
+                for (const file of page.files) {
+                    if (matches.length >= input.limit)
+                        break;
+                    scanned++;
+                    try {
+                        const source = readSource(root, file); // Bounded 64 KiB per searched file.
+                        const lines = source.content.split('\n');
+                        for (let index = scanned === 1 ? input.lineOffset : 0; index < lines.length; index++) {
+                            if (lines[index].toLowerCase().includes(input.query.toLowerCase()))
+                                matches.push({ path: file, line: index + 1, text: redactAgentText(lines[index]).slice(0, 500) });
+                            if (matches.length >= input.limit) {
+                                resume = { nextOffset: input.offset + scanned - 1, nextLineOffset: index + 1 };
+                                break;
+                            }
+                        }
+                    }
+                    catch { /* Unsupported or changed files are not evidence of a complete search. */ }
+                }
+                return { matches, scannedFiles: scanned, nextOffset: resume?.nextOffset ?? (scanned < page.files.length ? input.offset + scanned : page.nextOffset),
+                    nextLineOffset: resume?.nextLineOffset ?? 0,
+                    coverage: 'bounded_non_hidden_text_files_up_to_64KiB', scanLimitReached: page.scanLimitReached,
+                    truncated: matches.length >= input.limit || page.truncated };
+            } }];
+}
+//# sourceMappingURL=source-search.js.map

package/dist/gateway/src/services/agent/tools/source-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-search.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/source-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5G,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEjE,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,8PAA8P;YACjT,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW;YAClD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO;gBACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;gBACzD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAwD,EAAE,CAAC;gBACxE,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,IAAI,MAAkE,CAAC;gBACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;wBAAE,MAAM;oBACzC,OAAO,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,oCAAoC;wBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACzC,KAAK,IAAI,KAAK,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;4BACrF,IAAI,KAAK,CAAC,KAAK,CAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gCACjE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;4BACpG,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gCAClC,MAAM,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,EAAE,cAAc,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;gCAC/E,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;gBACvF,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;oBACjJ,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,CAAC;oBAC3C,QAAQ,EAAE,2CAA2C,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBAC9F,SAAS,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjE,CAAC,EAAE,CAAC,CAAC;AACT,CAAC"}

package/dist/gateway/src/services/agent/tools/terminal.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "../tool-registry.js";
+export declare function createTerminalTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/terminal.js

@@ -0,0 +1,83 @@
+/**
+ * Terminal tools for the Copilot harness — the "terminal" seam.
+ *
+ * - `terminal_run` executes a shell command and returns exit code + output.
+ *   Without `sessionId` it uses a short-lived session per command; with
+ *   `sessionId` (from `terminal_open`) it reuses the project's persistent
+ *   Copilot shell, retaining cwd/env across commands.
+ * - `terminal_open` opens (or reuses) the per-project persistent shell.
+ * - `terminal_close` stops a persistent shell.
+ *
+ * All three are `operate`-risk tools routed through the platform command
+ * catalog (terminal.run / terminal.open / terminal.close, effect: external),
+ * so they inherit the project-level `copilot_autonomy` switch, intent/receipt
+ * idempotency, and restricted-run gating automatically. While a command
+ * runs, the workspace writer lease makes the browser terminal read-only;
+ * the owner can take over at any time, which transfers control with
+ * userTookOver=true. A persistent command may still be running.
+ */
+import { z } from "zod";
+import { SHELL_COMMAND_MAX_LENGTH, SHELL_COMMAND_MAX_TIMEOUT_MS } from "../../shell-command-execution.js";
+const terminalRunInput = z.object({
+    projectId: z.string().min(1).max(128),
+    command: z.string().min(1).max(SHELL_COMMAND_MAX_LENGTH),
+    timeoutMs: z.number().int().min(1).max(SHELL_COMMAND_MAX_TIMEOUT_MS).optional(),
+    sessionId: z.string().min(1).max(128).optional()
+}).strict();
+const terminalOpenInput = z.object({
+    projectId: z.string().min(1).max(128)
+}).strict();
+const terminalCloseInput = z.object({
+    sessionId: z.string().min(1).max(128)
+}).strict();
+export function createTerminalTools() {
+    return [
+        {
+            name: "terminal_run",
+            description: "Execute a shell command in the project's working directory via a terminal session. " +
+                "Returns { exitCode, output, timedOut, userTookOver, sessionId }. " +
+                "Without sessionId a short-lived session is used per command. " +
+                "With sessionId (from terminal_open) the command runs in the persistent shell, " +
+                "which keeps cwd/env/package-manager state across commands — prefer it for " +
+                "multi-step work (install then build, cd then test). " +
+                "Requires project Copilot autonomy to be enabled. " +
+                "Avoid commands that block on interactive input; if the user takes over the terminal " +
+                "mid-command, userTookOver=true means the command may still be running; do not retry automatically. " +
+                "A timeout stops the shell; reopen a persistent shell before continuing. " +
+                "Output is redacted and capped; prefer focused commands over long pipelines.",
+            risk: "operate",
+            requiresApproval: true,
+            inputSchema: terminalRunInput,
+            async execute() {
+                // The actual execution is delegated to the platform command catalog
+                // (terminal.run) via executeAgentAction in the tool registry, which
+                // applies copilot_autonomy / idempotency / restricted-run gating.
+                throw new Error("terminal_run must be dispatched through the platform command catalog");
+            }
+        },
+        {
+            name: "terminal_open",
+            description: "Open (or reuse) the project's persistent Copilot shell session and return { sessionId, reused }. " +
+                "One persistent shell per project: it keeps cwd/env/package-manager state across terminal_run calls. " +
+                "Pass the returned sessionId to terminal_run. Close it with terminal_close when the work is done.",
+            risk: "operate",
+            requiresApproval: true,
+            inputSchema: terminalOpenInput,
+            async execute() {
+                throw new Error("terminal_open must be dispatched through the platform command catalog");
+            }
+        },
+        {
+            name: "terminal_close",
+            description: "Stop and close a persistent Copilot shell previously opened with terminal_open. " +
+                "Only accepts sessionId values returned by terminal_open.",
+            risk: "operate",
+            requiresApproval: true,
+            inputSchema: terminalCloseInput,
+            async execute() {
+                throw new Error("terminal_close must be dispatched through the platform command catalog");
+            }
+        }
+    ];
+}
+//# sourceMappingURL=terminal.js.map

package/dist/gateway/src/services/agent/tools/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/terminal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAE1G,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,qFAAqF;gBACrF,mEAAmE;gBACnE,+DAA+D;gBAC/D,gFAAgF;gBAChF,4EAA4E;gBAC5E,sDAAsD;gBACtD,mDAAmD;gBACnD,sFAAsF;gBACtF,qGAAqG;gBACrG,0EAA0E;gBAC1E,6EAA6E;YAC/E,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,gBAAgB;YAC7B,KAAK,CAAC,OAAO;gBACX,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,mGAAmG;gBACnG,sGAAsG;gBACtG,kGAAkG;YACpG,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,iBAAiB;YAC9B,KAAK,CAAC,OAAO;gBACX,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EACT,kFAAkF;gBAClF,0DAA0D;YAC5D,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,kBAAkB;YAC/B,KAAK,CAAC,OAAO;gBACX,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC5F,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/tool-results.js

@@ -1,23 +1,31 @@
+import { CopilotToolArtifactRepository } from '../../../db/repositories/copilot-tool-artifact-repository.js';
+import { assertRestrictedTool } from '../restricted-runs.js';
 import { z } from 'zod';
 import { CopilotToolResultRepository } from '../../../db/repositories/copilot-tool-result-repository.js';
-import { CopilotGrantRepository } from '../../../db/repositories/copilot-grant-repository.js';
 import { ProjectRepository } from '../../../db/repositories/project-repository.js';
 import { SessionRepository } from '../../../db/repositories/session-repository.js';
 import { CopilotRunLedger } from '../run-ledger.js';
 import { checkAgentScope } from '../../platform-commands/agent-scope.js';
-const inputSchema = z.object({ messageId: z.string().uuid(), offset: z.number().int().min(0).max(1_000_000).default(0), length: z.number().int().min(1).max(6000).default(4000) }).strict();
+const inputSchema = z.object({ messageId: z.string().uuid(), projectId: z.string().min(1).max(128).optional(), offset: z.number().int().min(0).max(2_097_152).default(0), length: z.number().int().min(1).max(6000).default(4000) }).strict();
 const denied = () => new Error('COPILOT_TOOL_RESULT_UNAVAILABLE');
 export function createToolResultTools() {
-    return [{ name: 'read_tool_result', description: 'Read a paginated persisted tool receipt referenced by context messageId in this conversation. Access and source tool visibility are rechecked. Original output may already be truncated; this does not recover discarded raw output. Offsets count UTF-16 characters.',
+    return [{ name: 'read_tool_result', description: 'Read a paginated persisted tool receipt referenced by context messageId in this conversation. Access and source tool visibility are rechecked. Full redacted snapshots are available for eligible built-in reads for 7 days within quotas. Legacy/disallowed/expired results retain only previews. Restricted research must provide its projectId. Offsets count UTF-16 characters.',
             risk: 'read', requiresApproval: false, inputSchema,
             async execute(input, context) {
                 const args = inputSchema.parse(input);
                 const source = authorizeSource(context, args.messageId);
+                const manifest = artifactManifest(source.content);
+                const artifact = manifest?.status === 'available'
+                    ? new CopilotToolArtifactRepository(context.db, context.userId, context.masterKey).read(context.conversationId, source)
+                    : { status: manifest?.status ?? 'legacy' };
+                const content = artifact.content ?? source.content;
                 return { messageId: args.messageId, runId: source.runId, stepId: source.stepId, toolName: source.toolName,
-                    content: source.content.slice(args.offset, args.offset + args.length), offset: args.offset,
-                    nextOffset: args.offset + args.length < source.content.length ? args.offset + args.length : null,
-                    totalChars: source.content.length, originalOutputTruncated: originalTruncated(source.content),
-                    evidence: 'Persisted redacted receipt only; discarded original output cannot be recovered.' };
+                    content: content.slice(args.offset, args.offset + args.length), offset: args.offset,
+                    nextOffset: args.offset + args.length < content.length ? args.offset + args.length : null,
+                    totalChars: content.length, originalOutputTruncated: originalTruncated(content),
+                    artifactStatus: artifact.status, evidence: artifact.status === 'available'
+                        ? 'Complete redacted tool snapshot at execution time; not current filesystem state.'
+                        : 'Persisted redacted receipt preview only; full output unavailable.' };
             } }];
 }
 function authorizeSource(context, messageId) {
@@ -37,15 +45,12 @@ function authorizeSource(context, messageId) {
         throw denied();
     const originalInput = parseRun(source.runInputJson, context);
     const currentInput = parseRun(current.input_json, context);
-    const binding = new CopilotGrantRepository(context.db, context.userId).binding(conversationId);
-    if ((originalInput.grantId ?? null) !== (binding ?? null) || (currentInput.grantId ?? null) !== (binding ?? null)
-        || (context.grantId ?? null) !== (binding ?? null))
-        throw denied();
     ledger.validateScope(originalInput);
     ledger.validateScope(currentInput);
     const raw = JSON.parse(source.inputJson);
     if (!raw || typeof raw !== 'object' || Array.isArray(raw))
         throw denied();
+    assertRestrictedTool(context, source.toolName, raw);
     checkAgentScope(context, source.toolName, raw);
     validateResources(context, raw);
     if (!checkExecutionAuthority())
@@ -75,4 +80,12 @@ function originalTruncated(content) {
         return false;
     }
 }
+function artifactManifest(content) {
+    try {
+        return z.object({ artifact: z.object({ status: z.string() }).optional() }).parse(JSON.parse(content)).artifact;
+    }
+    catch {
+        return undefined;
+    }
+}
 //# sourceMappingURL=tool-results.js.map