forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/runtime-settings.js

@@ -0,0 +1,206 @@
+import { adapterIds } from "../lib/adapter-ids.js";
+import { eq } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import { cliAutonomyAdaptersSchema, registrationModeSchema, sessionPrefixSchema } from "../config/env.js";
+import { runtimeSettings } from "../db/schema.js";
+import { AuditLogRepository } from "../db/repositories/audit-log-repository.js";
+import { z } from "zod";
+export const RUNTIME_SETTING_KEYS = [
+    "registration",
+    "mcp_enabled",
+    "session_prefix",
+    "cli_autonomy_adapters",
+    "pm_auto_dispatch"
+];
+/** Per-key metadata surfaced to the settings page. */
+export const RUNTIME_SETTING_META = {
+    // mcp_enabled gates route mounting at startup; every other key is applied
+    // to the live process as soon as the write succeeds.
+    registration: { hot: true },
+    mcp_enabled: { hot: false },
+    session_prefix: { hot: true },
+    cli_autonomy_adapters: { hot: true },
+    pm_auto_dispatch: { hot: true }
+};
+export class RuntimeSettingsError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "RuntimeSettingsError";
+    }
+}
+const booleanInput = z.union([z.boolean(), z.enum(["true", "false"])]);
+const toBoolean = (value) => value === true || value === "true";
+const patchSchema = z
+    .object({
+    registration: registrationModeSchema.optional(),
+    mcp_enabled: booleanInput.optional(),
+    session_prefix: sessionPrefixSchema.optional(),
+    // Accepts either an adapter array or a comma-separated string, exactly
+    // like the FORGEBADGER_CLI_AUTONOMY_ADAPTERS env variable.
+    cli_autonomy_adapters: cliAutonomyAdaptersSchema.optional(),
+    pm_auto_dispatch: booleanInput.optional()
+})
+    .strict();
+export function envToEffective(env) {
+    return {
+        registration: env.FORGEBADGER_REGISTRATION,
+        mcpEnabled: env.FORGEBADGER_MCP_ENABLED,
+        sessionPrefix: env.FORGEBADGER_SESSION_PREFIX,
+        cliAutonomyAdapters: env.FORGEBADGER_CLI_AUTONOMY_ADAPTERS,
+        pmAutoDispatch: env.FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED,
+        readonly: env.FORGEBADGER_RUNTIME_SETTINGS_READONLY
+    };
+}
+export function createRuntimeSettingsStore(db, options) {
+    const { env, apply } = options;
+    const dbClient = drizzle(db);
+    function safeJsonParse(raw) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return raw;
+        }
+    }
+    function readOverrides() {
+        const rows = dbClient.select().from(runtimeSettings).all();
+        const overrides = new Map();
+        for (const row of rows) {
+            // A corrupt override falls back to env instead of breaking reads.
+            overrides.set(row.key, safeJsonParse(row.value));
+        }
+        return overrides;
+    }
+    function effective() {
+        const merged = envToEffective(env);
+        const overrides = readOverrides();
+        if (overrides.has("registration")) {
+            const value = registrationModeSchema.safeParse(overrides.get("registration"));
+            if (value.success)
+                merged.registration = value.data;
+        }
+        if (overrides.has("mcp_enabled")) {
+            const value = z.boolean().safeParse(overrides.get("mcp_enabled"));
+            if (value.success)
+                merged.mcpEnabled = value.data;
+        }
+        if (overrides.has("session_prefix")) {
+            const value = sessionPrefixSchema.safeParse(overrides.get("session_prefix"));
+            if (value.success)
+                merged.sessionPrefix = value.data;
+        }
+        if (overrides.has("cli_autonomy_adapters")) {
+            const value = z.array(z.enum(adapterIds)).safeParse(overrides.get("cli_autonomy_adapters"));
+            if (value.success)
+                merged.cliAutonomyAdapters = value.data;
+        }
+        if (overrides.has("pm_auto_dispatch")) {
+            const value = z.boolean().safeParse(overrides.get("pm_auto_dispatch"));
+            if (value.success)
+                merged.pmAutoDispatch = value.data;
+        }
+        return merged;
+    }
+    function envValueOf(current, key) {
+        switch (key) {
+            case "registration":
+                return current.registration;
+            case "mcp_enabled":
+                return current.mcpEnabled;
+            case "session_prefix":
+                return current.sessionPrefix;
+            case "cli_autonomy_adapters":
+                return [...current.cliAutonomyAdapters];
+            case "pm_auto_dispatch":
+                return current.pmAutoDispatch;
+        }
+    }
+    function views() {
+        const current = effective();
+        const overrides = readOverrides();
+        const values = {
+            registration: current.registration,
+            mcp_enabled: current.mcpEnabled,
+            session_prefix: current.sessionPrefix,
+            cli_autonomy_adapters: [...current.cliAutonomyAdapters],
+            pm_auto_dispatch: current.pmAutoDispatch
+        };
+        return RUNTIME_SETTING_KEYS.map((key) => ({
+            key,
+            value: values[key],
+            source: overrides.has(key) ? "settings" : "env",
+            hot: RUNTIME_SETTING_META[key].hot
+        }));
+    }
+    function update(userId, patch, ipAddress) {
+        const parsed = patchSchema.safeParse(patch ?? {});
+        if (!parsed.success || Object.keys(parsed.data).length === 0) {
+            throw new RuntimeSettingsError(400, "Invalid runtime settings input");
+        }
+        const data = parsed.data;
+        const before = effective();
+        if (before.readonly) {
+            throw new RuntimeSettingsError(403, "Runtime settings are read-only (FORGEBADGER_RUNTIME_SETTINGS_READONLY); update .env and restart the Gateway");
+        }
+        const normalized = {
+            registration: data.registration,
+            mcp_enabled: data.mcp_enabled === undefined ? undefined : toBoolean(data.mcp_enabled),
+            session_prefix: data.session_prefix,
+            cli_autonomy_adapters: data.cli_autonomy_adapters,
+            pm_auto_dispatch: data.pm_auto_dispatch === undefined ? undefined : toBoolean(data.pm_auto_dispatch)
+        };
+        const now = Date.now();
+        const changes = {};
+        db.transaction(() => {
+            for (const key of RUNTIME_SETTING_KEYS) {
+                if (normalized[key] === undefined)
+                    continue;
+                const row = dbClient.select().from(runtimeSettings).where(eq(runtimeSettings.key, key)).get();
+                changes[key] = {
+                    before: row ? safeJsonParse(row.value) : envValueOf(before, key),
+                    beforeSource: row ? "settings" : "env",
+                    after: normalized[key]
+                };
+                dbClient.insert(runtimeSettings)
+                    .values({ key, value: JSON.stringify(normalized[key]), updatedAt: now, updatedBy: userId })
+                    .onConflictDoUpdate({
+                    target: runtimeSettings.key,
+                    set: { value: JSON.stringify(normalized[key]), updatedAt: now, updatedBy: userId }
+                })
+                    .run();
+            }
+        })();
+        const after = effective();
+        try {
+            apply?.(after);
+        }
+        catch (error) {
+            console.error("[runtime-settings] apply failed", {
+                error: error instanceof Error ? error.message : String(error)
+            });
+            throw new RuntimeSettingsError(500, "Failed to apply runtime settings");
+        }
+        try {
+            new AuditLogRepository(db, userId).create({
+                action: "runtime_settings.update",
+                resourceType: "runtime_settings",
+                resourceId: Object.keys(changes).join(","),
+                details: { changes },
+                ipAddress: ipAddress ?? null
+            });
+        }
+        catch (error) {
+            console.error("[runtime-settings] audit write failed", {
+                error: error instanceof Error ? error.message : String(error)
+            });
+        }
+        return views();
+    }
+    // Apply once at wiring so a pre-existing DB override is live even when it
+    // diverges from the env the process started with.
+    apply?.(effective());
+    return { effective, views, update };
+}
+//# sourceMappingURL=runtime-settings.js.map

package/dist/gateway/src/services/runtime-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-settings.js","sourceRoot":"","sources":["../../../src/services/runtime-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAErD,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,uBAAuB;IACvB,kBAAkB;CACnB,CAAC;AAEF,sDAAsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAA0D;IACzF,0EAA0E;IAC1E,qDAAqD;IACrD,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;IAC3B,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;IAC3B,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;IAC7B,qBAAqB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;IACpC,gBAAgB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;CAChC,CAAC;AAoCF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAE3B;IADlB,YACkB,MAAc,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QAI9B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,SAAS,GAAG,CAAC,KAAiC,EAAW,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAErG,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC9C,uEAAuE;IACvE,2DAA2D;IAC3D,qBAAqB,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,wBAAwB;QAC1C,UAAU,EAAE,GAAG,CAAC,uBAAuB;QACvC,aAAa,EAAE,GAAG,CAAC,0BAA0B;QAC7C,mBAAmB,EAAE,GAAG,CAAC,iCAAiC;QAC1D,cAAc,EAAE,GAAG,CAAC,iDAAiD;QACrE,QAAQ,EAAE,GAAG,CAAC,qCAAqC;KACpD,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,0BAA0B,CAAC,EAAY,EAAE,OAAoC;IAC3F,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAE7B,SAAS,aAAa,CAAC,GAAW;QAChC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,SAAS,aAAa;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,kEAAkE;YAClE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,SAAS;QAChB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9E,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;QACtD,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;QACpD,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC;QACvD,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC;QAC7D,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvE,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,UAAU,CAAC,OAAiC,EAAE,GAAsB;QAC3E,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,cAAc;gBACjB,OAAO,OAAO,CAAC,YAAY,CAAC;YAC9B,KAAK,aAAa;gBAChB,OAAO,OAAO,CAAC,UAAU,CAAC;YAC5B,KAAK,gBAAgB;gBACnB,OAAO,OAAO,CAAC,aAAa,CAAC;YAC/B,KAAK,uBAAuB;gBAC1B,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC1C,KAAK,kBAAkB;gBACrB,OAAO,OAAO,CAAC,cAAc,CAAC;QAClC,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACZ,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAuC;YACjD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,qBAAqB,EAAE,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvD,gBAAgB,EAAE,OAAO,CAAC,cAAc;SACzC,CAAC;QACF,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxC,GAAG;YACH,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YAClB,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;YAC/C,GAAG,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG;SACnC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,MAAM,CACb,MAAc,EACd,KAAkD,EAClD,SAAkB;QAElB,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAC5B,GAAG,EACH,6GAA6G,CAC9G,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAgD;YAC9D,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;YACrF,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACrG,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAA0F,EAAE,CAAC;QAC1G,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClB,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBACvC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC9F,OAAO,CAAC,GAAG,CAAC,GAAG;oBACb,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;oBAChE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;oBACtC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;iBACvB,CAAC;gBACF,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;qBAC7B,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;qBAC1F,kBAAkB,CAAC;oBAClB,MAAM,EAAE,eAAe,CAAC,GAAG;oBAC3B,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE;iBACnF,CAAC;qBACD,GAAG,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC/C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC;YACH,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;gBACxC,MAAM,EAAE,yBAAyB;gBACjC,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1C,OAAO,EAAE,EAAE,OAAO,EAAE;gBACpB,SAAS,EAAE,SAAS,IAAI,IAAI;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,kDAAkD;IAClD,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAErB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/gateway/src/services/session-launch-plan.d.ts

@@ -1,5 +1,6 @@
 import type { LaunchPlan } from "../adapters/claude.js";
 import { type AdapterId } from "./adapter-discovery.js";
+import { type CommandRunner } from "../lib/dependency-check.js";
 import type { Database } from "../db/types.js";
 export interface LaunchPlanInput {
     adapter: AdapterId;
@@ -14,4 +15,56 @@ export interface LaunchPlanInput {
  */
 export declare function createLaunchPlan(input: LaunchPlanInput): LaunchPlan;
 export declare function prepareAdapterLaunchExtras(db: Database, userId: string, adapter: AdapterId, projectRoot: string): Promise<string[]>;
+/**
+ * FORGEBADGER_DISABLE_CLI_HOOKS: skip hook injection for claude/kimi/opencode.
+ * Disabling hooks removes structured lifecycle notifications; generic terminal
+ * bells cannot safely recover them. Codex/pi are silently ignored because
+ * those adapters require their managed hooks/extensions.
+ */
+export declare function disabledCliHookAdapters(value?: string | undefined): Set<"claude" | "kimi" | "opencode">;
 export declare function normalizeAdapter(value: string): AdapterId | undefined;
+/**
+ * Session kind: a CLI adapter id, or the CLI-agnostic "terminal" shell kind.
+ * Stored verbatim in the `sessions.ai_tool` text column (no CHECK constraint).
+ */
+export type SessionKind = AdapterId | "terminal";
+/**
+ * Normalize a raw session-kind string. Returns undefined for anything that is
+ * neither a canonical adapter id nor the terminal kind.
+ */
+export declare function normalizeSessionKind(value: string): SessionKind | undefined;
+/** Shells offered for a terminal session, per platform. Single source of
+ * truth for the union type AND the zod route enum (keep both in lockstep). */
+export declare const TERMINAL_SHELLS: readonly ["pwsh", "powershell", "cmd", "bash", "zsh", "sh"];
+export type TerminalShell = (typeof TERMINAL_SHELLS)[number];
+export interface TerminalLaunchPlanInput {
+    projectRoot: string;
+    sessionId: string;
+    /** Explicit shell choice; omitted → platform default is resolved. */
+    shell?: TerminalShell;
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Resolve the preferred shell without probing availability. Windows prefers
+ * pwsh; POSIX uses $SHELL then sh. Use resolveAvailableTerminalShell to launch.
+ */
+export declare function defaultTerminalShell(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): TerminalShell;
+/** Resolve a launchable default, including Windows hosts without PowerShell 7. */
+export declare function resolveAvailableTerminalShell(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, runner?: CommandRunner): Promise<TerminalShell>;
+/**
+ * Build a launch plan for a CLI-agnostic terminal (shell) session. Unlike the
+ * CLI adapter launch plans, no hooks/notifications are injected and no
+ * provider credentials are touched — env is host_environment + session id.
+ */
+export declare function createTerminalLaunchPlan(input: TerminalLaunchPlanInput): LaunchPlan;
+/**
+ * Probe whether a shell binary is launchable. Returns the resolved command on
+ * success, or an error message on failure. Used as the terminal equivalent of
+ * `getAdapterLaunchStatus` (no adapter discovery to lean on for shells).
+ */
+export declare function checkTerminalShell(shell: TerminalShell, platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, runner?: CommandRunner | undefined): Promise<{
+    available: boolean;
+    command: string;
+    error?: string;
+}>;

package/dist/gateway/src/services/session-launch-plan.js

@@ -1,8 +1,11 @@
 import { createAdapterLaunchPlan } from "../adapters/index.js";
 import { isAdapterId } from "./adapter-discovery.js";
+import { checkCommand } from "../lib/dependency-check.js";
 import { ensureClaudeNotificationSettings } from "./claude-notification-settings.js";
 import { ensureCodexNotificationSettings, ensureKimiNotificationSettings, ensurePiNotificationSettings } from "./cli-notification-settings.js";
 import { ensureForgeBadgerOpenCodePlugin } from "./opencode-notification-settings.js";
+import { ensureMcodeNotificationPreference } from "./mcode-notification-preference.js";
+import { ensureClaudeTerminalNotificationSettings, ensureKimiTerminalNotificationSettings, ensureOpenCodeTerminalNotificationSettings } from "./terminal-notification-settings.js";
 /**
  * Internal launch-only material. Every session launches against the host
  * environment: provider/model/credential selection lives in each CLI's global
@@ -13,6 +16,13 @@ export function createLaunchPlan(input) {
         FORGEBADGER_SESSION_ID: input.sessionId,
         FORGEBADGER_GATEWAY_URL: getGatewayUrl()
     };
+    if (input.adapter === "kimi") {
+        // Kimi Code upgrades its bare BEL notifications to rich OSC 9 text only
+        // when TERM_PROGRAM hits its allowlist (iTerm.app/WezTerm/ghostty/
+        // WarpTerminal). A user-set TERM_PROGRAM survives the Session Server env
+        // sanitization allowlist, so only fall back to WezTerm when none is set.
+        env.TERM_PROGRAM = process.env.TERM_PROGRAM?.trim() || "WezTerm";
+    }
     return createAdapterLaunchPlan({
         adapter: input.adapter,
         projectRoot: input.projectRoot,
@@ -23,8 +33,14 @@ export function createLaunchPlan(input) {
     });
 }
 export async function prepareAdapterLaunchExtras(db, userId, adapter, projectRoot) {
+    const hooksDisabled = disabledCliHookAdapters();
     if (adapter === "opencode") {
-        await ensureForgeBadgerOpenCodePlugin(projectRoot);
+        // Native terminal notification config always runs — it is plain config,
+        // not a hook, so FORGEBADGER_DISABLE_CLI_HOOKS does not gate it.
+        await ensureOpenCodeTerminalNotificationSettings();
+        if (!hooksDisabled.has("opencode")) {
+            await ensureForgeBadgerOpenCodePlugin(projectRoot);
+        }
         return [];
     }
     if (adapter === "codex") {
@@ -32,7 +48,10 @@ export async function prepareAdapterLaunchExtras(db, userId, adapter, projectRoo
         return [];
     }
     if (adapter === "kimi") {
-        await ensureKimiNotificationSettings(projectRoot);
+        await ensureKimiTerminalNotificationSettings();
+        if (!hooksDisabled.has("kimi")) {
+            await ensureKimiNotificationSettings(projectRoot);
+        }
         return [];
     }
     if (adapter === "pi") {
@@ -41,9 +60,36 @@ export async function prepareAdapterLaunchExtras(db, userId, adapter, projectRoo
         await ensurePiNotificationSettings();
         return [];
     }
-    await ensureClaudeNotificationSettings(projectRoot, getGatewayUrl());
+    if (adapter === "mcode") {
+        // MiniMax Code has no hook surface at all, so the PTY OSC stream is the
+        // only channel. Under `auto` its notifier degrades to a bare BEL here (no
+        // TERM_PROGRAM allowlist hit, no KITTY_WINDOW_ID, no WT_SESSION) and the
+        // event kind is lost, so pin the payload-carrying method in config.yaml.
+        ensureMcodeNotificationPreference();
+        return [];
+    }
+    await ensureClaudeTerminalNotificationSettings();
+    if (!hooksDisabled.has("claude")) {
+        await ensureClaudeNotificationSettings(projectRoot, getGatewayUrl());
+    }
     return [];
 }
+/**
+ * FORGEBADGER_DISABLE_CLI_HOOKS: skip hook injection for claude/kimi/opencode.
+ * Disabling hooks removes structured lifecycle notifications; generic terminal
+ * bells cannot safely recover them. Codex/pi are silently ignored because
+ * those adapters require their managed hooks/extensions.
+ */
+export function disabledCliHookAdapters(value = process.env.FORGEBADGER_DISABLE_CLI_HOOKS) {
+    const disabled = new Set();
+    for (const entry of value?.split(",") ?? []) {
+        const name = entry.trim();
+        if (name === "claude" || name === "kimi" || name === "opencode") {
+            disabled.add(name);
+        }
+    }
+    return disabled;
+}
 export function normalizeAdapter(value) {
     return isAdapterId(value) ? value : undefined;
 }
@@ -52,4 +98,98 @@ function getGatewayUrl() {
         || process.env.NEXT_PUBLIC_GATEWAY_URL
         || `http://${process.env.FORGEBADGER_HOST || "127.0.0.1"}:${process.env.FORGEBADGER_PORT || "3000"}`);
 }
+/**
+ * Normalize a raw session-kind string. Returns undefined for anything that is
+ * neither a canonical adapter id nor the terminal kind.
+ */
+export function normalizeSessionKind(value) {
+    if (value === "terminal")
+        return "terminal";
+    return isAdapterId(value) ? value : undefined;
+}
+/** Shells offered for a terminal session, per platform. Single source of
+ * truth for the union type AND the zod route enum (keep both in lockstep). */
+export const TERMINAL_SHELLS = ["pwsh", "powershell", "cmd", "bash", "zsh", "sh"];
+/**
+ * Resolve the preferred shell without probing availability. Windows prefers
+ * pwsh; POSIX uses $SHELL then sh. Use resolveAvailableTerminalShell to launch.
+ */
+export function defaultTerminalShell(platform = process.platform, env = process.env) {
+    if (platform === "win32") {
+        return "pwsh";
+    }
+    const shell = env.SHELL?.trim();
+    if (shell === "/bin/zsh" || shell?.endsWith("/zsh"))
+        return "zsh";
+    if (shell === "/bin/bash" || shell?.endsWith("/bash"))
+        return "bash";
+    return "sh";
+}
+/** Resolve a launchable default, including Windows hosts without PowerShell 7. */
+export async function resolveAvailableTerminalShell(platform = process.platform, env = process.env, runner) {
+    const preferred = defaultTerminalShell(platform, env);
+    const fallback = platform === "win32" ? ["pwsh", "powershell", "cmd"] : ["bash", "zsh", "sh"];
+    for (const shell of new Set([preferred, ...fallback])) {
+        if ((await checkTerminalShell(shell, platform, env, runner)).available)
+            return shell;
+    }
+    throw new Error("TERMINAL_SHELL_UNAVAILABLE: no supported shell is installed");
+}
+/**
+ * Build a launch plan for a CLI-agnostic terminal (shell) session. Unlike the
+ * CLI adapter launch plans, no hooks/notifications are injected and no
+ * provider credentials are touched — env is host_environment + session id.
+ */
+export function createTerminalLaunchPlan(input) {
+    const platform = input.platform ?? process.platform;
+    const env = input.env ?? process.env;
+    const shell = input.shell ?? defaultTerminalShell(platform, env);
+    const { command, args } = resolveShellCommand(shell, platform, env);
+    return {
+        command,
+        args,
+        cwd: input.projectRoot,
+        env: {
+            FORGEBADGER_SESSION_ID: input.sessionId,
+            FORGEBADGER_GATEWAY_URL: getGatewayUrl()
+        },
+        secretEnvNames: [],
+        credentialMode: "host_environment"
+    };
+}
+function resolveShellCommand(shell, platform, env) {
+    switch (shell) {
+        case "pwsh":
+            return { command: "pwsh", args: [] };
+        case "powershell":
+            // Windows PowerShell 5.1 (powershell.exe, always present on Windows).
+            // Distinct from pwsh 7: a user who installed Oh My Posh into the 5.1
+            // profile needs this shell to see their prompt.
+            return { command: "powershell.exe", args: [] };
+        case "cmd":
+            return { command: env.ComSpec?.trim() || env.COMSPEC?.trim() || "cmd.exe", args: [] };
+        case "bash":
+            return { command: "bash", args: ["-l"] };
+        case "zsh":
+            return { command: "zsh", args: ["-l"] };
+        case "sh":
+            return { command: env.SHELL?.trim() || "sh", args: [] };
+    }
+}
+/**
+ * Probe whether a shell binary is launchable. Returns the resolved command on
+ * success, or an error message on failure. Used as the terminal equivalent of
+ * `getAdapterLaunchStatus` (no adapter discovery to lean on for shells).
+ */
+export async function checkTerminalShell(shell, platform = process.platform, env = process.env, runner = undefined) {
+    const { command, args } = resolveShellCommand(shell, platform, env);
+    // A cheap, universally-supported probe: print nothing and exit 0.
+    const probeArgs = shell === "cmd" ? ["/c", "exit", "0"] : [...args, "-c", "exit", "0"];
+    const status = await checkCommand(command, probeArgs, runner, { timeoutMs: 5000 });
+    return {
+        available: status.available,
+        command,
+        ...(status.error ? { error: status.error } : {})
+    };
+}
 //# sourceMappingURL=session-launch-plan.js.map

package/dist/gateway/src/services/session-launch-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-launch-plan.js","sourceRoot":"","sources":["../../../src/services/session-launch-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAkB,MAAM,wBAAwB,CAAC;AAErE,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,4BAA4B,EAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAStF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,GAAG,GAA2B;QAClC,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,uBAAuB,EAAE,aAAa,EAAE;KACzC,CAAC;IACF,OAAO,uBAAuB,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,kBAAkB;QAClC,GAAG;QACH,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAY,EACZ,MAAc,EACd,OAAkB,EAClB,WAAmB;IAEnB,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,8BAA8B,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,4BAA4B,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,gCAAgC,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IACrE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,uBAAuB;WAChC,OAAO,CAAC,GAAG,CAAC,uBAAuB;WACnC,UAAU,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,EAAE,CACrG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-launch-plan.js","sourceRoot":"","sources":["../../../src/services/session-launch-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAkB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAsB,MAAM,4BAA4B,CAAC;AAE9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,4BAA4B,EAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EACL,wCAAwC,EACxC,sCAAsC,EACtC,0CAA0C,EAC3C,MAAM,qCAAqC,CAAC;AAS7C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,GAAG,GAA2B;QAClC,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,uBAAuB,EAAE,aAAa,EAAE;KACzC,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7B,wEAAwE;QACxE,mEAAmE;QACnE,yEAAyE;QACzE,yEAAyE;QACzE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACnE,CAAC;IACD,OAAO,uBAAuB,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,kBAAkB;QAClC,GAAG;QACH,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAY,EACZ,MAAc,EACd,OAAkB,EAClB,WAAmB;IAEnB,MAAM,aAAa,GAAG,uBAAuB,EAAE,CAAC;IAChD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,0CAA0C,EAAE,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,sCAAsC,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,8BAA8B,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,4BAA4B,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,iCAAiC,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,wCAAwC,EAAE,CAAC;IACjD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,gCAAgC,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA4B,OAAO,CAAC,GAAG,CAAC,6BAA6B;IAErE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,uBAAuB;WAChC,OAAO,CAAC,GAAG,CAAC,uBAAuB;WACnC,UAAU,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,EAAE,CACrG,CAAC;AACJ,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC5C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED;8EAC8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAU,CAAC;AAY3F;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,WAA4B,OAAO,CAAC,QAAQ,EAAE,MAAyB,OAAO,CAAC,GAAG,EAClF,MAAsB;IAEtB,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAoB,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/G,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA8B;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,WAAW;QACtB,GAAG,EAAE;YACH,sBAAsB,EAAE,KAAK,CAAC,SAAS;YACvC,uBAAuB,EAAE,aAAa,EAAE;SACzC;QACD,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAoB,EACpB,QAAyB,EACzB,GAAsB;IAEtB,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACvC,KAAK,YAAY;YACf,sEAAsE;YACtE,qEAAqE;YACrE,gDAAgD;YAChD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACjD,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxF,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,KAAK,IAAI;YACP,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAoB,EACpB,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAoC,SAAS;IAE7C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpE,kEAAkE;IAClE,MAAM,SAAS,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/session-manager.d.ts

@@ -65,6 +65,7 @@ export interface SessionManagerOptions {
     sessionPrefix?: string;
     runtimeInputAuthorizer?: (session: Readonly<GateASession>) => void;
     programmaticSubmitSettleMs?: Partial<Record<AdapterId, number>>;
+    programmaticReadyTimeoutMs?: number;
     sleep?: (ms: number) => Promise<void>;
     /**
      * One-shot probe consumed once per status-correction scan: returns true
@@ -77,6 +78,8 @@ export interface SessionManagerOptions {
 export interface ProgrammaticTaskInput {
     adapter: AdapterId;
     message: string;
+    authorize?: (() => void) | undefined;
+    beforeStage?: (() => void) | undefined;
 }
 export interface ProgrammaticTaskStageReceipt {
     adapter: AdapterId;
@@ -90,23 +93,40 @@ export interface ProgrammaticTaskStageReceipt {
  * session-output-buffer.ts).
  */
 export declare const MAX_BUFFERED_SESSIONS = 200;
+/** Handle for a workspace writer lease as seen by programmatic writers. */
+export interface WriterLeaseHandle {
+    userId: string;
+    sessionId: string;
+    workspace: string;
+    token: string;
+    fence: number;
+    expiresAt: number;
+}
 export declare class InMemorySessionManager {
     private readonly backend;
     private readonly recoveryStore;
     private readonly eventBus?;
+    private readonly stoppingSessions;
     private readonly db;
     private readonly writerLeases;
     private readonly writerGenerations;
     private readonly sessions;
     private readonly sessionOutputs;
-    private readonly sessionPrefix;
+    private sessionPrefix;
     private readonly runtimeInputAuthorizer;
     private readonly programmaticSubmitSettleMs;
+    private readonly programmaticReadyTimeoutMs;
     private readonly sleep;
     private readonly detectBackendRestart;
     private readonly sessionLocks;
     private correctionInterval;
     constructor(backend: TerminalBackendClient, recoveryStore?: SessionRecoveryStore, eventBus?: ForgeBadgerEventBus | undefined, options?: SessionManagerOptions);
+    /**
+     * Update the runtime session name prefix (runtime settings page).
+     * Affects newly created sessions only; existing sessions keep the name
+     * they were started with.
+     */
+    setSessionPrefix(prefix: string): void;
     /**
      * Serialize per-session lifecycle operations (create/start/stop/delete) using
      * a promise chain. Concurrent calls for the same sessionId run in arrival
@@ -135,7 +155,18 @@ export declare class InMemorySessionManager {
         available: boolean;
         message?: string;
     };
-    stopSession(id: string, runtimeSessionName?: string, userId?: string): Promise<GateASession>;
+    stopSession(id: string, runtimeSessionName?: string, userId?: string, writerLease?: WriterLeaseHandle): Promise<GateASession>;
+    /**
+     * Operator-forced stop for a session whose leader process has exited but
+     * whose confirmed-stop receipt cannot be obtained (a descendant still holds
+     * the process group, or the daemon that would sign the receipt is gone).
+     * Fails closed on purpose: a transiently unreachable backend or a runtime
+     * that may still be alive rejects the force — never turn a probe failure
+     * into a bypass.
+     */
+    forceStopSession(id: string, runtimeSessionName: string | undefined, userId: string): Promise<GateASession>;
+    /** Revokes a pending runtime confirmation; never blocks the caller. */
+    private revokePendingRuntimeConfirmation;
     /**
      * Read-only liveness probe: does this session currently have a live backing
      * terminal (pty)? A session whose DB/manager status still says `running` but
@@ -183,11 +214,42 @@ export declare class InMemorySessionManager {
      * does not use this — the attach ack already carries the snapshot.
      */
     captureHistory(id: string): Promise<string>;
+    /** Acquire a workspace writer lease (Copilot shell execution path). */
+    acquireWriterLease(scope: {
+        userId: string;
+        sessionId: string;
+        workspace: string;
+    }): WriterLeaseHandle;
+    /** Release a previously acquired workspace writer lease. */
+    releaseWriterLease(lease: WriterLeaseHandle): void;
+    /**
+     * Extend a still-held writer lease by one TTL. Returns the renewed handle;
+     * keep using the returned handle for assert/release afterwards.
+     */
+    renewWriterLease(lease: WriterLeaseHandle): WriterLeaseHandle;
+    /**
+     * Check that a workspace writer lease is still held. Throws
+     * SESSION_WRITER_FENCE_STALE when the owner took over (or the lease
+     * expired), which programmatic writers must treat as "the human wins".
+     */
+    assertWriterLeaseCurrent(lease: WriterLeaseHandle): void;
+    /** Stage programmatic (bracketed-paste) input for a session. */
+    stageProgrammaticInput(id: string, data: string): Promise<void>;
+    /** Stage one shell line without bracketed paste (bash 3/readline compatibility). */
+    stageShellCommand(id: string, data: string): Promise<void>;
+    /** Press Enter on a session (submit staged input). */
+    pressEnter(id: string): Promise<void>;
     resizeSession(id: string, cols: number, rows: number): Promise<void>;
     sendInput(id: string, data: string): Promise<void>;
     submitProgrammaticTask(id: string, input: ProgrammaticTaskInput): Promise<ProgrammaticTaskStageReceipt>;
+    captureScreen(userId: string, id: string): Promise<{
+        output: string;
+        live: boolean;
+    }>;
     assertManualInputAllowed(userId: string, id: string): void;
     takeoverSession(userId: string, id: string): void;
+    /** Called immediately before actual manual input; hooks after it are no longer task-specific evidence. */
+    noteManualInput(userId: string, id: string): void;
     cancelProgrammaticInput(userId: string, id: string): void;
     private invalidateWriter;
     private requireOwnedSession;