forgebadger 0.1.0 → 0.1.2

package/dist/gateway/src/services/platform-commands/agent-actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-actions.js","sourceRoot":"","sources":["../../../../src/services/platform-commands/agent-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc,EAAE,OAAyB;IACpF,OAAO,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,GAAI,KAAgB,EAAE,GAAG,CAAE,KAExD,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5F,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,OAAyB;IAClD,OAAO,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAG,QAAQ,IAAE,OAAO,OAAO,CAAC,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,EAAC,IAAI,EAAC,SAAkB,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAA+D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAA8D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAC5iB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAc,EAAE,OAAyB;IAC5F,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC,IAAI,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,IAAI,KAAK,gBAAgB;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAgB,EAAE,CAAC;IAClD,IAAI,IAAI,KAAK,wBAAwB;QACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAgB,EAAE,CAAC;IACnD,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"agent-actions.js","sourceRoot":"","sources":["../../../../src/services/platform-commands/agent-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc,EAAE,OAAyB;IACpF,OAAO,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,GAAI,KAAgB,EAAE,GAAG,CAAE,KAExD,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5F,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,OAAyB;IAClD,OAAO,IAAI,eAAe,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAG,QAAQ,IAAE,OAAO,OAAO,CAAC,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,EAAC,IAAI,EAAC,SAAkB,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAA+D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAA8D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAwD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAsC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAC9nC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAc,EAAE,OAAyB;IAC5F,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC,IAAI,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,IAAI,KAAK,gBAAgB;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAgB,EAAE,CAAC;IAClD,IAAI,IAAI,KAAK,wBAAwB;QACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAgB,EAAE,CAAC;IACnD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/gateway/src/services/platform-commands/agent-scope.d.ts

@@ -1,4 +1,2 @@
 import type { AgentToolContext } from '../agent/tool-registry.js';
-export declare function grantedToolVisible(name: string): boolean;
 export declare function checkAgentScope(context: AgentToolContext, name: string, raw: unknown): void;
-export declare function scopedListResult(context: AgentToolContext, name: string, raw: unknown): unknown | undefined;

package/dist/gateway/src/services/platform-commands/agent-scope.js

@@ -1,50 +1,22 @@
-import { CopilotGrantRepository } from '../../db/repositories/copilot-grant-repository.js';
+import { assertRestrictedTool } from '../agent/restricted-runs.js';
 import { SessionRepository } from '../../db/repositories/session-repository.js';
-import { listProjectSummaries, listSessionSummaries } from '../agent/platform-access.js';
-const GLOBAL_TOOLS = new Set(['list_skills', 'load_skill', 'get_usage_summary']);
-export function grantedToolVisible(name) {
-    return !GLOBAL_TOOLS.has(name);
-}
+import { assertChannelToolScope } from '../channels/channel-run-scope.js';
+const INTERACTIVE_OWNER_TOOLS = new Set(['takeover_session', 'submit_development_task', 'cancel_development_task', 'accept_development_task']);
 export function checkAgentScope(context, name, raw) {
-    if (['takeover_session', 'submit_development_task', 'cancel_development_task', 'accept_development_task'].includes(name) && (context.grantId || context.source !== 'user'))
-        throw new Error('This operation requires direct interactive owner authority');
-    const grantId = context.grantId;
-    if (!grantId)
+    assertChannelToolScope(context, name, raw);
+    if (context.executionMode === 'repair')
+        assertRestrictedTool(context, name, raw);
+    if (!INTERACTIVE_OWNER_TOOLS.has(name))
         return;
-    const g = new CopilotGrantRepository(context.db, context.userId).get(grantId);
-    if (!g || g.status !== 'active' || (g.expiresAt !== null && g.expiresAt <= Date.now()))
-        throw new Error('Grant unavailable, expired or revoked');
-    if (!grantedToolVisible(name))
-        throw new Error('Global capability unavailable in project grant');
+    if (context.source !== 'user')
+        throw new Error('This operation requires direct interactive owner authority');
     const input = raw;
-    let projectId = typeof input.projectId === 'string' ? input.projectId : undefined;
     if (typeof input.sessionId === 'string') {
         const s = new SessionRepository(context.db, context.userId).getById(input.sessionId);
         if (!s)
             throw new Error('Session not found');
-        if (projectId && projectId !== s.projectId)
+        if (input.projectId !== undefined && input.projectId !== s.projectId)
             throw new Error('Session project mismatch');
-        projectId = s.projectId;
-    }
-    if (projectId && !g.scope.projectIds.includes(projectId))
-        throw new Error('Project outside grant scope');
-    if ((name === 'search_memory' || name === 'list_memory' || name === 'write_memory') && (input.scope === undefined || input.scope === 'global'))
-        throw new Error('Global memory unavailable in project grant');
-}
-export function scopedListResult(context, name, raw) {
-    const grantId = context.grantId;
-    if (!grantId)
-        return undefined;
-    const g = new CopilotGrantRepository(context.db, context.userId).get(grantId);
-    const v = raw;
-    if (name === 'list_projects') {
-        const projects = listProjectSummaries(context.db, context.userId, { allowedProjectIds: g.scope.projectIds, limit: v.limit ?? 100 });
-        return { projects, count: projects.length };
-    }
-    if (name === 'list_sessions') {
-        const sessions = listSessionSummaries(context.db, context.userId, { allowedProjectIds: g.scope.projectIds, limit: v.limit ?? 100, ...(v.projectId ? { projectId: v.projectId } : {}) });
-        return { sessions, count: sessions.length };
     }
-    return undefined;
 }
 //# sourceMappingURL=agent-scope.js.map

package/dist/gateway/src/services/platform-commands/agent-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-scope.js","sourceRoot":"","sources":["../../../../src/services/platform-commands/agent-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACjF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC3C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,IAAY,EAAE,GAAY;IACjF,IAAI,CAAC,kBAAkB,EAAC,yBAAyB,EAAC,yBAAyB,EAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QACnK,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,OAAO,CAAC,OAA6B,CAAC;IACtD,IAAI,CAAC,OAAO;QACR,OAAO;IACX,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,SAAS,IAAI,SAAS,KAAK,CAAC,CAAC,SAAS;YACtC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC5B,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAC1I,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AACtE,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,IAAY,EAAE,GAAY;IAClF,MAAM,OAAO,GAAG,OAAO,CAAC,OAA6B,CAAC;IACtD,IAAI,CAAC,OAAO;QACR,OAAO,SAAS,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,GAGT,CAAC;IACF,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,EAAC,iBAAiB,EAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,IAAE,GAAG,EAAC,CAAC,CAAC;QAC7H,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,MAAM,EAAC,EAAC,iBAAiB,EAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,IAAE,GAAG,EAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,CAAC,CAAC,SAAS,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QACvK,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}
+{"version":3,"file":"agent-scope.js","sourceRoot":"","sources":["../../../../src/services/platform-commands/agent-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAC/I,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,IAAY,EAAE,GAAY;IACjF,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ;QAAE,oBAAoB,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;QAClC,OAAO;IACX,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAiD,CAAC;IAChE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;YAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpD,CAAC;AACL,CAAC"}

package/dist/gateway/src/services/platform-commands/catalog.d.ts

@@ -10,14 +10,27 @@ export declare const projectCreateInput: z.ZodObject<{
     path: string;
     name: string;
     description?: string | undefined;
-    templateId?: string | undefined;
     techStack?: string | undefined;
+    templateId?: string | undefined;
 }, {
     path: string;
     name: string;
     description?: string | undefined;
-    templateId?: string | undefined;
     techStack?: string | undefined;
+    templateId?: string | undefined;
+}>;
+export declare const projectConfigApplyInput: z.ZodObject<{
+    projectId: z.ZodString;
+    templateId: z.ZodString;
+    expectedDigest: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    projectId: string;
+    templateId: string;
+    expectedDigest: string;
+}, {
+    projectId: string;
+    templateId: string;
+    expectedDigest: string;
 }>;
 export declare const workItemCreateInput: z.ZodObject<{
     projectId: z.ZodString;
@@ -27,15 +40,15 @@ export declare const workItemCreateInput: z.ZodObject<{
     acceptanceCriteria: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     stageId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strict", z.ZodTypeAny, {
-    projectId: string;
     title: string;
+    projectId: string;
     description?: string | null | undefined;
     priority?: number | undefined;
     stageId?: string | null | undefined;
     acceptanceCriteria?: string[] | undefined;
 }, {
-    projectId: string;
     title: string;
+    projectId: string;
     description?: string | null | undefined;
     priority?: number | undefined;
     stageId?: string | null | undefined;
@@ -55,8 +68,8 @@ export declare const workItemUpdateInput: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     projectId: string;
     workItemId: string;
-    description?: string | null | undefined;
     title?: string | undefined;
+    description?: string | null | undefined;
     priority?: number | undefined;
     stageId?: string | null | undefined;
     assigneeId?: string | null | undefined;
@@ -66,8 +79,8 @@ export declare const workItemUpdateInput: z.ZodObject<{
 }, {
     projectId: string;
     workItemId: string;
-    description?: string | null | undefined;
     title?: string | undefined;
+    description?: string | null | undefined;
     priority?: number | undefined;
     stageId?: string | null | undefined;
     assigneeId?: string | null | undefined;
@@ -88,6 +101,46 @@ export declare const taskPrepareInput: z.ZodObject<{
     workItemId: string;
     aiTool?: "claude" | "opencode" | "codex" | "kimi" | "pi" | undefined;
 }>;
+export declare const sessionDispatchInput: z.ZodObject<{
+    sessionId: z.ZodString;
+    message: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    message: string;
+    sessionId: string;
+}, {
+    message: string;
+    sessionId: string;
+}>;
+export declare const terminalRunInput: z.ZodObject<{
+    projectId: z.ZodString;
+    command: z.ZodString;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    command: string;
+    projectId: string;
+    sessionId?: string | undefined;
+    timeoutMs?: number | undefined;
+}, {
+    command: string;
+    projectId: string;
+    sessionId?: string | undefined;
+    timeoutMs?: number | undefined;
+}>;
+export declare const terminalOpenInput: z.ZodObject<{
+    projectId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    projectId: string;
+}, {
+    projectId: string;
+}>;
+export declare const terminalCloseInput: z.ZodObject<{
+    sessionId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    sessionId: string;
+}, {
+    sessionId: string;
+}>;
 export declare const memoryWriteInput: z.ZodObject<{
     kind: z.ZodEnum<["fact", "preference", "decision", "project_note"]>;
     scope: z.ZodEnum<["global", "project", "session"]>;
@@ -97,15 +150,15 @@ export declare const memoryWriteInput: z.ZodObject<{
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strict", z.ZodTypeAny, {
     text: string;
-    scope: "session" | "project" | "global";
     kind: "decision" | "fact" | "preference" | "project_note";
+    scope: "session" | "project" | "global";
     projectId?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
     conversationId?: string | undefined;
 }, {
     text: string;
-    scope: "session" | "project" | "global";
     kind: "decision" | "fact" | "preference" | "project_note";
+    scope: "session" | "project" | "global";
     projectId?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
     conversationId?: string | undefined;

package/dist/gateway/src/services/platform-commands/catalog.js

@@ -1,5 +1,9 @@
+import { executeTaskPacket, assertTaskDispatchable } from '../project-manager/task-execution.js';
+import { taskCloseInput, closeTask } from '../project-manager/task-progress.js';
+import { PlatformNoEffectError } from './errors.js';
 import { mutateAssignedTask } from '../project-manager/tasks.js';
 import { assertLegacyTaskExecution } from '../project-manager/access.js';
+import { importProject, applyMcpConfig } from '../mcp/project-workflow.js';
 import { createDevelopmentCommands } from '../development/commands.js';
 import { getAdapterLaunchStatus } from '../adapter-discovery.js';
 import { createHash } from 'node:crypto';
@@ -14,15 +18,43 @@ import { AgentMemoryRepository } from '../agent/memory.js';
 import { buildTaskPacket, createTaskPacketContext, createTaskPacketSessionName, resolveTaskPacketSession, withTaskPacketSessionLink, toTaskPacketSessionDto } from '../project-manager/task-packets.js';
 import { createSessionCommands } from './session-commands.js';
 import { assertAdapterAutonomy } from '../adapter-autonomy.js';
+import { runShellCommand, runShellCommandInSession, openCopilotShell, closeCopilotShell, assertCopilotShellSession, SHELL_COMMAND_MAX_LENGTH, SHELL_COMMAND_MAX_TIMEOUT_MS } from '../shell-command-execution.js';
+import { redactAgentValue } from '../agent/redaction.js';
+import { dispatchSessionInput } from '../agent/platform-access.js';
+import { normalizeAdapter } from '../session-launch-plan.js';
 import { canonical, canonicalRoot } from './actions.js';
+import { PlatformActionRepository } from '../../db/repositories/platform-action-repository.js';
 const id = z.string().min(1).max(128);
 const projectInput = z.object({ projectId: id }).strict();
 export const projectCreateInput = z.object({ name: z.string().trim().min(1).max(200), path: z.string().trim().min(1).max(1024), description: z.string().max(2000).optional(), techStack: z.string().max(2000).optional(), templateId: id.optional() }).strict();
+export const projectConfigApplyInput = z.object({ projectId: id, templateId: id, expectedDigest: z.string().regex(/^[0-9a-f]{64}$/) }).strict();
 export const workItemCreateInput = z.object({ projectId: id, title: z.string().min(1).max(256), description: z.string().max(4000).nullable().optional(), priority: z.number().int().min(0).max(100).optional(), acceptanceCriteria: z.array(z.string().max(1000)).max(50).optional(), stageId: id.nullable().optional() }).strict();
 const evidenceRef = z.object({ kind: z.string().trim().min(1).max(64).refine(value => !/^(delivery|verified|verification|integrated)$/i.test(value), 'Reserved delivery evidence kind').optional(), label: z.string().min(1).max(256).optional(), status: z.string().min(1).max(64).optional(), ref: z.string().min(1).max(512).optional(), path: z.string().min(1).max(512).optional(), sessionId: id.optional(), feishuChatId: id.optional(), feishuMessageId: id.optional(), createdAt: z.string().min(1).max(64).optional() }).strict();
 const workItemWithEvidence = workItemCreateInput.extend({ assigneeId: id.nullable().optional(), reviewerId: id.nullable().optional(), status: z.literal('todo').optional(), evidenceRefs: z.array(evidenceRef).max(20).optional() });
 export const workItemUpdateInput = z.object({ expectedRevision: z.number().int().positive().optional(), assigneeId: id.nullable().optional(), reviewerId: id.nullable().optional(), projectId: id, workItemId: id, title: z.string().min(1).max(256).optional(), description: z.string().max(4000).nullable().optional(), priority: z.number().int().min(0).max(100).optional(), acceptanceCriteria: z.array(z.string().max(1000)).max(50).optional(), stageId: id.nullable().optional() }).strict();
 export const taskPrepareInput = z.object({ projectId: id, workItemId: id, aiTool: z.enum(['claude', 'opencode', 'codex', 'kimi', 'pi']).optional() }).strict();
+export const sessionDispatchInput = z.object({ sessionId: id, message: z.string().min(1).max(4000) }).strict();
+export const terminalRunInput = z.object({ projectId: id, command: z.string().min(1).max(SHELL_COMMAND_MAX_LENGTH), timeoutMs: z.number().int().min(1).max(SHELL_COMMAND_MAX_TIMEOUT_MS).optional(), sessionId: id.optional() }).strict();
+export const terminalOpenInput = z.object({ projectId: id }).strict();
+export const terminalCloseInput = z.object({ sessionId: id }).strict();
+function terminalProgressEmitter(ctx, projectId, command, sessionId) {
+    const bus = ctx.eventBus;
+    if (!bus)
+        return undefined;
+    const base = {
+        type: 'terminal_command_progress',
+        userId: ctx.userId,
+        projectId,
+        commandPreview: command.slice(0, 120),
+        ...(sessionId ? { sessionId } : {}),
+        ...(typeof ctx.conversationId === 'string' ? { conversationId: ctx.conversationId } : {}),
+        ...(typeof ctx.runId === 'string' ? { runId: ctx.runId } : {}),
+        ...(typeof ctx.stepId === 'string' ? { stepId: ctx.stepId } : {})
+    };
+    return (outputTail, status) => {
+        bus.emitEvent({ ...base, outputTail: String(redactAgentValue(outputTail)), status, occurredAt: new Date() });
+    };
+}
 export const memoryWriteInput = z.object({ kind: z.enum(['fact', 'preference', 'decision', 'project_note']), scope: z.enum(['global', 'project', 'session']), text: z.string().min(1).max(8192), projectId: id.optional(), conversationId: id.optional(), metadata: z.record(z.unknown()).optional() }).strict();
 function project(ctx, id) {
     const p = new ProjectRepository(ctx.db, ctx.userId).getById(id);
@@ -41,7 +73,9 @@ function itemResources(ctx, input) {
     const item = new ProjectManagerRepository(ctx.db, ctx.userId).getWorkItem(v.projectId, v.workItemId);
     if (!item)
         throw new Error('Work item not found');
-    return { projectIds: [p.id], revision: createHash('sha256').update(canonical({ p, item })).digest('hex') };
+    const linked = resolveTaskPacketSession(ctx.db, ctx.userId, p.id, item);
+    const binding = linked ? { id: linked.id, projectId: linked.projectId, aiTool: linked.aiTool, workingDir: linked.workingDir } : null;
+    return { projectIds: [p.id], rootPaths: linked && linked.workingDir !== p.path ? [p.path, linked.workingDir] : [p.path], revision: createHash('sha256').update(canonical({ p, item, binding })).digest('hex') };
 }
 function sessionResources(ctx, input) {
     const v = z.object({ sessionId: id }).passthrough().parse(input);
@@ -49,7 +83,17 @@ function sessionResources(ctx, input) {
     if (!s)
         throw new Error('Session not found');
     project(ctx, s.projectId);
-    return { projectIds: [s.projectId], revision: createHash('sha256').update(canonical(s)).digest('hex') };
+    return { projectIds: [s.projectId], rootPaths: [s.workingDir], revision: createHash('sha256').update(canonical(s)).digest('hex') };
+}
+function taskAdapter(ctx, input) {
+    const p = project(ctx, input.projectId);
+    const item = new ProjectManagerRepository(ctx.db, ctx.userId).getWorkItem(input.projectId, input.workItemId);
+    if (!item)
+        throw new Error('Work item not found');
+    const session = resolveTaskPacketSession(ctx.db, ctx.userId, p.id, item);
+    if (input.aiTool && session && input.aiTool !== session.aiTool)
+        throw new Error('Task adapter mismatch');
+    return z.enum(['claude', 'opencode', 'codex', 'kimi', 'pi']).parse(session?.aiTool ?? input.aiTool ?? p.aiTool);
 }
 function command(c) {
     return { ...c, capability: c.id };
@@ -57,7 +101,7 @@ function command(c) {
 import { assertNewProjectResource } from '../../db/repositories/managed-project-access.js';
 export function createPlatformCommands() {
     const commands = [
-        command({ id: 'project.create', effect: 'external', delegatable: true, inputSchema: projectCreateInput,
+        command({ id: 'project.create', effect: 'external', inputSchema: projectCreateInput,
             resolve(_ctx, input) {
                 const v = projectCreateInput.parse(input);
                 return { projectIds: [], rootPaths: [canonicalRoot(v.path)], revision: canonicalRoot(v.path) };
@@ -74,41 +118,58 @@ export function createPlatformCommands() {
                 mkdirSync(root, { recursive: true });
                 if (!statSync(root).isDirectory())
                     throw new Error('Project root must be a directory');
-                return new ProjectRepository(ctx.db, ctx.userId).create({ ...v, path: canonicalRoot(root), aiTool: '' });
+                const finalRoot = canonicalRoot(root);
+                ctx.externalAuthorize?.({ projectIds: [], rootPaths: [finalRoot], revision: finalRoot });
+                return new ProjectRepository(ctx.db, ctx.userId).create({ ...v, path: finalRoot, aiTool: '' });
             } }),
-        command({ id: 'project.metadata.update', effect: 'database', delegatable: true, inputSchema: projectInput.extend({ name: z.string().min(1).max(200).optional(), description: z.string().max(2000).optional() }), resolve: projectResources,
+        command({ id: 'project.import', effect: 'database', inputSchema: projectCreateInput,
+            resolve(_ctx, input) {
+                const root = canonicalRoot(projectCreateInput.parse(input).path);
+                return { projectIds: [], rootPaths: [root], revision: root };
+            },
+            execute(ctx, input) { return importProject(ctx.db, ctx.userId, projectCreateInput.parse(input), root => ctx.externalAuthorize?.({ projectIds: [], rootPaths: [root], revision: root })); } }),
+        command({ id: 'project.config.apply', effect: 'external', inputSchema: projectConfigApplyInput,
+            resolve: projectResources,
+            async execute(ctx, input) {
+                const v = projectConfigApplyInput.parse(input);
+                ctx.authorize?.();
+                const result = await applyMcpConfig(ctx.db, ctx.userId, v.projectId, v.templateId, v.expectedDigest, () => ctx.authorize?.());
+                ctx.authorize?.();
+                return result;
+            } }),
+        command({ id: 'project.metadata.update', effect: 'database', inputSchema: projectInput.extend({ name: z.string().min(1).max(200).optional(), description: z.string().max(2000).optional() }), resolve: projectResources,
             execute(ctx, input) {
                 const v = z.object({ projectId: id, name: z.string().optional(), description: z.string().optional() }).parse(input);
                 return new ProjectRepository(ctx.db, ctx.userId).updateMetadata(v.projectId, v);
             } }),
-        command({ id: 'pm.work_item.create', effect: 'database', delegatable: true, inputSchema: workItemCreateInput, resolve: projectResources,
+        command({ id: 'pm.work_item.create', effect: 'database', inputSchema: workItemCreateInput, resolve: projectResources,
             execute(ctx, input) {
                 const v = workItemCreateInput.parse(input);
                 assertLegacyTaskExecution(ctx.db, v.projectId);
                 return new ProjectManagerRepository(ctx.db, ctx.userId).createWorkItem(v.projectId, v);
             } }),
-        command({ id: 'pm.work_item.create_with_evidence', effect: 'database', delegatable: false, inputSchema: workItemWithEvidence, resolve: projectResources, execute(ctx, input) {
+        command({ id: 'pm.work_item.create_with_evidence', effect: 'database', inputSchema: workItemWithEvidence, resolve: projectResources, execute(ctx, input) {
                 const v = workItemWithEvidence.parse(input);
                 assertLegacyTaskExecution(ctx.db, v.projectId);
                 return mutateAssignedTask(ctx.db, ctx.userId, v.projectId, undefined, v);
             } }),
-        command({ id: 'pm.work_item.update', effect: 'database', delegatable: false, inputSchema: workItemUpdateInput, resolve: itemResources,
+        command({ id: 'pm.work_item.update', effect: 'database', inputSchema: workItemUpdateInput, resolve: itemResources,
             execute(ctx, input) {
                 const v = workItemUpdateInput.parse(input);
                 assertLegacyTaskExecution(ctx.db, v.projectId);
                 return mutateAssignedTask(ctx.db, ctx.userId, v.projectId, v.workItemId, v);
             } }),
-        command({ id: 'pm.work_item.metadata', effect: 'database', delegatable: true, inputSchema: workItemUpdateInput.omit({ acceptanceCriteria: true, stageId: true, assigneeId: true, reviewerId: true }), resolve: itemResources,
+        command({ id: 'pm.work_item.metadata', effect: 'database', inputSchema: workItemUpdateInput.omit({ acceptanceCriteria: true, stageId: true, assigneeId: true, reviewerId: true }), resolve: itemResources,
             execute(ctx, input) {
                 const v = workItemUpdateInput.omit({ acceptanceCriteria: true, stageId: true, assigneeId: true, reviewerId: true }).parse(input);
                 assertLegacyTaskExecution(ctx.db, v.projectId);
                 return mutateAssignedTask(ctx.db, ctx.userId, v.projectId, v.workItemId, v);
             } }),
-        command({ id: 'pm.task.prepare', effect: 'database', delegatable: true, inputSchema: taskPrepareInput, resolve: itemResources,
+        command({ id: 'pm.task.prepare', effect: 'database', inputSchema: taskPrepareInput, resolve: itemResources,
             async prepare(ctx, input) {
                 const v = taskPrepareInput.parse(input);
                 assertLegacyTaskExecution(ctx.db, v.projectId);
-                const adapter = z.enum(['claude', 'opencode', 'codex', 'kimi', 'pi']).parse(v.aiTool ?? project(ctx, v.projectId).aiTool);
+                const adapter = taskAdapter(ctx, v);
                 const status = await getAdapterLaunchStatus(adapter, ctx.adapterCommandRunner, ctx.sessionManager?.terminalBackendHealth());
                 if (!status.launchEnabled)
                     throw new Error(`${status.label} is not available for launch`);
@@ -121,26 +182,65 @@ export function createPlatformCommands() {
                 let item = repo.getWorkItem(v.projectId, v.workItemId);
                 let session = resolveTaskPacketSession(ctx.db, ctx.userId, p.id, item);
                 const existed = !!session;
-                if (!session) {
-                    const adapter = z.enum(['claude', 'opencode', 'codex', 'kimi', 'pi']).parse(v.aiTool ?? p.aiTool);
-                    session = new SessionRepository(ctx.db, ctx.userId).create({ projectId: p.id, name: createTaskPacketSessionName(item.title), aiTool: adapter, workingDir: p.path, credentialMode: 'host_environment' });
-                    item = repo.updateWorkItem(p.id, item.id, { details: withTaskPacketSessionLink(item.details, session, p, createTaskPacketContext(item, p)) });
-                }
+                ctx.db.transaction(() => {
+                    if (!session) {
+                        const adapter = z.enum(['claude', 'opencode', 'codex', 'kimi', 'pi']).parse(v.aiTool ?? p.aiTool);
+                        session = new SessionRepository(ctx.db, ctx.userId).create({ projectId: p.id, name: createTaskPacketSessionName(item.title), aiTool: adapter, workingDir: p.path, credentialMode: 'host_environment' });
+                        item = repo.updateWorkItem(p.id, item.id, { details: withTaskPacketSessionLink(item.details, session, p, createTaskPacketContext(item, p)) });
+                    }
+                }).immediate();
                 return { taskPacket: buildTaskPacket({ project: p, workItem: item, session }), session: toTaskPacketSessionDto(session), existed };
             } }),
-        command({ id: 'pm.task.execute', effect: 'external', delegatable: false, inputSchema: taskPrepareInput, resolve(ctx, input) {
-                itemResources(ctx, input);
-                assertAdapterAutonomy(taskPrepareInput.parse(input).aiTool ?? 'claude');
-            }, execute() {
-                throw new Error('CLI_AUTONOMY_MANUAL_ONLY');
+        command({ id: 'pm.task.execute', effect: 'external', inputSchema: taskPrepareInput,
+            resolve(ctx, input) {
+                const resources = itemResources(ctx, input);
+                const v = taskPrepareInput.parse(input);
+                const adapter = taskAdapter(ctx, v);
+                assertAdapterAutonomy(adapter);
+                return resources;
+            },
+            async prepare(ctx, input) {
+                const v = taskPrepareInput.parse(input);
+                assertLegacyTaskExecution(ctx.db, v.projectId);
+                const item = new ProjectManagerRepository(ctx.db, ctx.userId).getWorkItem(v.projectId, v.workItemId);
+                assertTaskDispatchable(item);
+                const adapter = taskAdapter(ctx, v);
+                const status = await getAdapterLaunchStatus(adapter, ctx.adapterCommandRunner, ctx.sessionManager?.terminalBackendHealth());
+                if (!status.launchEnabled)
+                    throw new Error(`${status.label} is not available for launch`);
+            },
+            async execute(ctx, input) {
+                return executeTaskPacket(ctx, taskPrepareInput.parse(input));
             } }),
-        command({ id: 'session.dispatch', effect: 'external', delegatable: false, inputSchema: z.object({ sessionId: id, message: z.string().min(1).max(4000) }).strict(), resolve(ctx, input) {
-                sessionResources(ctx, input);
-                assertAdapterAutonomy('claude');
-            }, execute() {
-                throw new Error('CLI_AUTONOMY_MANUAL_ONLY');
+        command({ id: 'pm.task.close', effect: 'database', inputSchema: taskCloseInput, resolve: itemResources,
+            execute(ctx, input) { return closeTask(ctx, taskCloseInput.parse(input)); } }),
+        command({ id: 'session.dispatch', effect: 'external', inputSchema: sessionDispatchInput,
+            resolve(ctx, input) {
+                const resources = sessionResources(ctx, input);
+                const { sessionId } = sessionDispatchInput.parse(input);
+                const session = new SessionRepository(ctx.db, ctx.userId).getById(sessionId);
+                if (new ProjectManagerRepository(ctx.db, ctx.userId).hasTaskPacketSession(session.projectId, sessionId))
+                    throw new PlatformNoEffectError('TASK_SESSION_REQUIRES_PACKET_EXECUTION: use pm_execute_task_packet for this linked task');
+                const adapter = normalizeAdapter(session.aiTool);
+                if (!adapter)
+                    throw new Error('Unsupported session adapter');
+                assertAdapterAutonomy(adapter);
+                return resources;
+            },
+            async execute(ctx, input) {
+                const { sessionId, message } = sessionDispatchInput.parse(input);
+                const sessionRepo = new SessionRepository(ctx.db, ctx.userId);
+                const session = sessionRepo.getById(sessionId);
+                const adapter = normalizeAdapter(session.aiTool);
+                if (!adapter)
+                    throw new Error('Unsupported session adapter');
+                const manager = ctx.sessionManager;
+                if (!manager)
+                    throw new Error('Session runtime unavailable');
+                ctx.authorize?.();
+                return dispatchSessionInput(manager, sessionId, adapter, message, { authorize: ctx.authorize });
             } }),
-        command({ id: 'memory.write', effect: 'database', delegatable: true, inputSchema: memoryWriteInput,
+        command({ id: 'memory.write', effect: 'database', inputSchema: memoryWriteInput,
             resolve(ctx, input) {
                 const v = memoryWriteInput.parse(input);
                 if (v.scope === 'project') {
@@ -151,7 +251,12 @@ export function createPlatformCommands() {
                 if (v.scope === 'session') {
                     if (!v.conversationId || !ctx.db.prepare('SELECT id FROM copilot_conversations WHERE user_id=? AND id=?').get(ctx.userId, v.conversationId))
                         throw new Error('Conversation not found');
-                    return { projectIds: [], revision: v.conversationId };
+                    if (ctx.actionOrigin?.kind === 'copilot') {
+                        const origin = new PlatformActionRepository(ctx.db, ctx.userId).copilotOrigin(ctx.actionOrigin.runId, ctx.actionOrigin.stepId);
+                        if (v.projectId !== undefined || origin?.conversation_id !== v.conversationId)
+                            throw new Error('Session memory must match the originating conversation without a project scope');
+                    }
+                    return { projectIds: [], conversationId: v.conversationId, revision: v.conversationId };
                 }
                 return { projectIds: [], revision: 'global' };
             },
@@ -160,7 +265,91 @@ export function createPlatformCommands() {
                 return new AgentMemoryRepository(ctx.db, ctx.userId).create({ kind: v.kind, scope: v.scope, text: v.text, ...(v.projectId ? { projectId: v.projectId } : {}), ...(v.conversationId ? { conversationId: v.conversationId } : {}), ...(v.metadata ? { metadata: v.metadata } : {}) });
             } })
     ];
-    commands.push(...createSessionCommands(), ...createManagementCommands(), ...createDevelopmentCommands());
+    commands.push(command({ id: 'terminal.run', effect: 'external', inputSchema: terminalRunInput,
+        resolve(ctx, input) {
+            const v = terminalRunInput.parse(input);
+            const p = project(ctx, v.projectId);
+            if (v.sessionId)
+                assertCopilotShellSession(ctx.db, ctx.userId, v.sessionId);
+            return { projectIds: [p.id], rootPaths: [p.path], revision: createHash('sha256').update(canonical(p)).digest('hex') };
+        },
+        async execute(ctx, input) {
+            const v = terminalRunInput.parse(input);
+            const p = project(ctx, v.projectId);
+            const manager = ctx.sessionManager;
+            if (!manager)
+                throw new Error('Session runtime unavailable');
+            ctx.authorize?.();
+            const emit = terminalProgressEmitter(ctx, p.id, v.command);
+            let result;
+            try {
+                if (v.sessionId) {
+                    result = await runShellCommandInSession({
+                        db: ctx.db,
+                        userId: ctx.userId,
+                        sessionManager: manager,
+                        projectId: p.id,
+                        sessionId: v.sessionId,
+                        command: v.command,
+                        signal: ctx.signal,
+                        authorize: ctx.authorize,
+                        ...(v.timeoutMs ? { timeoutMs: v.timeoutMs } : {}),
+                        ...(emit ? { onProgress: (tail) => emit(tail, 'running') } : {})
+                    });
+                }
+                else {
+                    result = await runShellCommand({
+                        db: ctx.db,
+                        userId: ctx.userId,
+                        sessionManager: manager,
+                        projectId: p.id,
+                        projectRoot: p.path,
+                        command: v.command,
+                        signal: ctx.signal,
+                        authorize: ctx.authorize,
+                        ...(v.timeoutMs ? { timeoutMs: v.timeoutMs } : {}),
+                        ...(emit ? { onProgress: (tail) => emit(tail, 'running') } : {})
+                    });
+                }
+            }
+            catch (error) {
+                emit?.("", 'error');
+                throw error;
+            }
+            emit?.(result.output.slice(-2000), result.userTookOver ? 'user_took_over' : result.timedOut ? 'timed_out' : 'completed');
+            return { projectId: p.id, sessionId: result.sessionId, exitCode: result.exitCode, output: result.output, timedOut: result.timedOut, userTookOver: result.userTookOver };
+        } }), command({ id: 'terminal.open', effect: 'external', inputSchema: terminalOpenInput,
+        resolve(ctx, input) {
+            const v = terminalOpenInput.parse(input);
+            const p = project(ctx, v.projectId);
+            return { projectIds: [p.id], rootPaths: [p.path], revision: createHash('sha256').update(canonical(p)).digest('hex') };
+        },
+        async execute(ctx, input) {
+            const v = terminalOpenInput.parse(input);
+            const p = project(ctx, v.projectId);
+            const manager = ctx.sessionManager;
+            if (!manager)
+                throw new Error('Session runtime unavailable');
+            ctx.authorize?.();
+            const shell = await openCopilotShell(ctx.db, ctx.userId, manager, { id: p.id, path: p.path });
+            return { projectId: p.id, sessionId: shell.sessionId, reused: shell.reused };
+        } }), command({ id: 'terminal.close', effect: 'external', inputSchema: terminalCloseInput,
+        resolve(ctx, input) {
+            const v = terminalCloseInput.parse(input);
+            const s = assertCopilotShellSession(ctx.db, ctx.userId, v.sessionId);
+            project(ctx, s.projectId);
+            return { projectIds: [s.projectId], rootPaths: [s.workingDir], revision: createHash('sha256').update(canonical(s)).digest('hex') };
+        },
+        async execute(ctx, input) {
+            const v = terminalCloseInput.parse(input);
+            const s = assertCopilotShellSession(ctx.db, ctx.userId, v.sessionId);
+            const manager = ctx.sessionManager;
+            if (!manager)
+                throw new Error('Session runtime unavailable');
+            ctx.authorize?.();
+            await closeCopilotShell(ctx.db, ctx.userId, manager, s);
+            return { projectId: s.projectId, sessionId: s.id, closed: true };
+        } }), ...createSessionCommands(), ...createManagementCommands(), ...createDevelopmentCommands());
     return new Map(commands.map(c => [c.id, c]));
 }
 //# sourceMappingURL=catalog.js.map