@avi770/testteam 1.2.0

package/dist/core/license-gen.js

@@ -0,0 +1,169 @@
+import * as crypto from 'node:crypto';
+import * as readline from 'node:readline';
+// ── Base64url helpers ────────────────────────────────────────────────
+function base64urlEncode(data) {
+    return data.toString('base64url');
+}
+// ── Key generation ───────────────────────────────────────────────────
+/** Generate an ES256 (ECDSA P-256) keypair in PEM format. */
+export function generateKeyPair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ec', {
+        namedCurve: 'P-256',
+        publicKeyEncoding: { type: 'spki', format: 'pem' },
+        privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+    });
+    return { publicKey, privateKey };
+}
+// ── License key generation ───────────────────────────────────────────
+/**
+ * Generate a signed JWT license key using ES256.
+ * Uses only Node.js built-in `crypto` — no external JWT libraries.
+ */
+export function generateLicenseKey(payload, privateKey) {
+    const header = { alg: 'ES256', typ: 'JWT' };
+    const fullPayload = {
+        ...payload,
+        iat: Math.floor(Date.now() / 1000),
+    };
+    const headerB64 = base64urlEncode(Buffer.from(JSON.stringify(header)));
+    const payloadB64 = base64urlEncode(Buffer.from(JSON.stringify(fullPayload)));
+    const signedContent = `${headerB64}.${payloadB64}`;
+    // Sign with ECDSA P-256 / SHA-256
+    const signer = crypto.createSign('SHA256');
+    signer.update(signedContent);
+    const derSignature = signer.sign({ key: privateKey, dsaEncoding: 'der' });
+    // Convert DER to raw (r || s) for compact JWT representation
+    const rawSignature = derToRaw(derSignature);
+    const signatureB64 = base64urlEncode(rawSignature);
+    return `${signedContent}.${signatureB64}`;
+}
+const TIER_DEFAULTS = {
+    free: { maxProjects: 1, maxRunsPerMonth: 10 },
+    pro: { maxProjects: 3, maxRunsPerMonth: 100 },
+    enterprise: { maxProjects: 999, maxRunsPerMonth: 999999 },
+};
+// ── Interactive CLI ──────────────────────────────────────────────────
+async function prompt(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => resolve(answer.trim()));
+    });
+}
+async function main() {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    try {
+        console.log('\n=== TestTeam License Generator ===\n');
+        // Tier
+        const tierInput = await prompt(rl, 'Tier (free / pro / enterprise): ');
+        const tier = tierInput;
+        if (!['free', 'pro', 'enterprise'].includes(tier)) {
+            console.error(`Invalid tier: ${tierInput}`);
+            process.exit(1);
+        }
+        // Email / Customer ID
+        const sub = await prompt(rl, 'Customer email or ID: ');
+        if (!sub) {
+            console.error('Customer identifier is required.');
+            process.exit(1);
+        }
+        // Expiry
+        const daysInput = await prompt(rl, 'License duration in days (default: 365): ');
+        const days = daysInput ? parseInt(daysInput, 10) : 365;
+        if (isNaN(days) || days <= 0) {
+            console.error('Invalid duration.');
+            process.exit(1);
+        }
+        // Features
+        const featuresInput = await prompt(rl, 'Feature flags (comma-separated, or empty): ');
+        const features = featuresInput
+            ? featuresInput.split(',').map((f) => f.trim()).filter(Boolean)
+            : [];
+        // Generate keypair
+        const { publicKey, privateKey } = generateKeyPair();
+        const defaults = TIER_DEFAULTS[tier];
+        const exp = Math.floor(Date.now() / 1000) + days * 86400;
+        const licenseKey = generateLicenseKey({
+            tier,
+            exp,
+            sub,
+            maxProjects: defaults.maxProjects,
+            maxRunsPerMonth: defaults.maxRunsPerMonth,
+            features,
+        }, privateKey);
+        console.log('\n--- LICENSE KEY ---');
+        console.log(licenseKey);
+        console.log('\n--- PUBLIC KEY (embed in .testteam-license or set TF_LICENSE_PUBLIC_KEY) ---');
+        console.log(publicKey);
+        console.log('--- PRIVATE KEY (keep secret — for generating new keys only) ---');
+        console.log(privateKey);
+        console.log('--- .testteam-license file content ---');
+        console.log(`${licenseKey}\n\n${publicKey}`);
+    }
+    finally {
+        rl.close();
+    }
+}
+// ── DER to raw conversion ────────────────────────────────────────────
+/**
+ * Convert a DER-encoded ECDSA signature to raw (r || s) format (64 bytes for P-256).
+ */
+function derToRaw(der) {
+    // DER: 0x30 <len> 0x02 <rLen> <r> 0x02 <sLen> <s>
+    let offset = 2; // skip 0x30 and total length
+    // Read r
+    if (der[offset] !== 0x02)
+        throw new Error('Invalid DER: expected 0x02 for r');
+    offset++;
+    const rLen = der[offset];
+    offset++;
+    let r = der.subarray(offset, offset + rLen);
+    offset += rLen;
+    // Read s
+    if (der[offset] !== 0x02)
+        throw new Error('Invalid DER: expected 0x02 for s');
+    offset++;
+    const sLen = der[offset];
+    offset++;
+    let s = der.subarray(offset, offset + sLen);
+    // Normalize to exactly 32 bytes each (strip leading zero padding, or left-pad)
+    r = normalizeInteger(r, 32);
+    s = normalizeInteger(s, 32);
+    return Buffer.concat([r, s]);
+}
+function normalizeInteger(buf, targetLen) {
+    if (buf.length === targetLen)
+        return buf;
+    if (buf.length > targetLen) {
+        // Strip leading zeros
+        return buf.subarray(buf.length - targetLen);
+    }
+    // Left-pad with zeros
+    const padded = Buffer.alloc(targetLen, 0);
+    buf.copy(padded, targetLen - buf.length);
+    return padded;
+}
+// ── ESM entry point detection ────────────────────────────────────────
+const isDirectRun = (() => {
+    try {
+        // In ESM, check if this module is the entry point
+        const moduleUrl = import.meta.url;
+        const argv1 = process.argv[1];
+        if (!argv1)
+            return false;
+        // Normalize for comparison
+        const scriptUrl = new URL(`file:///${argv1.replace(/\\/g, '/')}`).href;
+        return moduleUrl === scriptUrl || moduleUrl.endsWith(argv1.replace(/\\/g, '/'));
+    }
+    catch {
+        return false;
+    }
+})();
+if (isDirectRun) {
+    main().catch((err) => {
+        console.error('License generation failed:', err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=license-gen.js.map

package/dist/core/license-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-gen.js","sourceRoot":"","sources":["../../core/license-gen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAI1C,wEAAwE;AAExE,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,wEAAwE;AAExE,6DAA6D;AAC7D,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE;QACjE,UAAU,EAAE,OAAO;QACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAoC,EACpC,UAAkB;IAElB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAmB;QAClC,GAAG,OAAO;QACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;KACnC,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAEnD,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1E,6DAA6D;IAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAEnD,OAAO,GAAG,aAAa,IAAI,YAAY,EAAE,CAAC;AAC5C,CAAC;AASD,MAAM,aAAa,GAAsC;IACvD,IAAI,EAAQ,EAAE,WAAW,EAAE,CAAC,EAAI,eAAe,EAAE,EAAE,EAAE;IACrD,GAAG,EAAS,EAAE,WAAW,EAAE,CAAC,EAAI,eAAe,EAAE,GAAG,EAAE;IACtD,UAAU,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE;CAC1D,CAAC;AAEF,wEAAwE;AAExE,KAAK,UAAU,MAAM,CAAC,EAAsB,EAAE,QAAgB;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAEtD,OAAO;QACP,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,SAAwB,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,SAAS;QACT,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,WAAW;QACX,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,6CAA6C,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,aAAa;YAC5B,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC;QAEP,mBAAmB;QACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC;QAEzD,MAAM,UAAU,GAAG,kBAAkB,CACnC;YACE,IAAI;YACJ,GAAG;YACH,GAAG;YACH,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,QAAQ;SACT,EACD,UAAU,CACX,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAExB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,kDAAkD;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,6BAA6B;IAE7C,SAAS;IACT,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC;IACT,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC;IAEf,SAAS;IACT,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC;IACT,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IACtD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,sBAAsB;QACtB,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AAExE,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACxB,IAAI,CAAC;QACH,kDAAkD;QAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QACvE,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,IAAI,WAAW,EAAE,CAAC;IAChB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/license.d.ts

@@ -0,0 +1,33 @@
+/** License tiers supported by TestTeam. */
+export type LicenseTier = 'free' | 'pro' | 'enterprise';
+/** JWT payload embedded in a TestTeam license key. */
+export interface LicensePayload {
+    tier: LicenseTier;
+    exp: number;
+    iat: number;
+    sub: string;
+    maxProjects: number;
+    maxRunsPerMonth: number;
+    features: string[];
+}
+/**
+ * Decode and verify a JWT signed with ES256.
+ * Returns the payload on success or `null` on any failure
+ * (bad format, invalid signature, expired, malformed JSON).
+ */
+export declare function validateLicense(key: string, publicKey: string): LicensePayload | null;
+/**
+ * Load a license from the `.testteam-license` file in the given directory.
+ * The file must contain the JWT on the first non-empty line.
+ * A second non-empty line, if present, is treated as the PEM public key
+ * (or the public key can be embedded as `TF_LICENSE_PUBLIC_KEY` env var).
+ */
+export declare function loadLicense(configDir: string): LicensePayload | null;
+/**
+ * Get the license tier for the current project.
+ * Falls back to `'free'` when no valid license is found.
+ */
+export declare function getLicenseTier(configDir?: string): LicenseTier;
+/** Reset the in-memory license cache (useful for testing). */
+export declare function resetLicenseCache(): void;
+//# sourceMappingURL=license.d.ts.map

package/dist/core/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../core/license.ts"],"names":[],"mappings":"AAIA,2CAA2C;AAC3C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAExD,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAmBD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,IAAI,CAiDvB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAuCpE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAI9D;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/core/license.js

@@ -0,0 +1,170 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/** In-memory cache so we only validate once per process. */
+let cachedLicense;
+const LICENSE_FILENAME = '.testteam-license';
+// ── Base64url helpers ────────────────────────────────────────────────
+function base64urlEncode(data) {
+    return data.toString('base64url');
+}
+function base64urlDecode(str) {
+    return Buffer.from(str, 'base64url');
+}
+// ── JWT helpers (ES256 / ECDSA P-256 with SHA-256) ───────────────────
+/**
+ * Decode and verify a JWT signed with ES256.
+ * Returns the payload on success or `null` on any failure
+ * (bad format, invalid signature, expired, malformed JSON).
+ */
+export function validateLicense(key, publicKey) {
+    try {
+        const parts = key.trim().split('.');
+        if (parts.length !== 3)
+            return null;
+        const [headerB64, payloadB64, signatureB64] = parts;
+        // Verify header declares ES256
+        const header = JSON.parse(base64urlDecode(headerB64).toString('utf8'));
+        if (typeof header !== 'object' ||
+            header === null ||
+            header['alg'] !== 'ES256') {
+            return null;
+        }
+        // Verify signature
+        const signedContent = `${headerB64}.${payloadB64}`;
+        const signature = base64urlDecode(signatureB64);
+        // ES256 produces a 64-byte raw (r || s) signature.
+        // Node.js crypto.verify expects DER encoding, so convert if raw.
+        const derSignature = rawToDer(signature);
+        const verifier = crypto.createVerify('SHA256');
+        verifier.update(signedContent);
+        const valid = verifier.verify({ key: publicKey, dsaEncoding: 'der' }, derSignature);
+        if (!valid)
+            return null;
+        // Decode payload
+        const payloadJson = base64urlDecode(payloadB64).toString('utf8');
+        const payload = JSON.parse(payloadJson);
+        if (!isLicensePayload(payload))
+            return null;
+        // Check expiry
+        const nowSec = Math.floor(Date.now() / 1000);
+        if (payload.exp <= nowSec)
+            return null;
+        return payload;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Load a license from the `.testteam-license` file in the given directory.
+ * The file must contain the JWT on the first non-empty line.
+ * A second non-empty line, if present, is treated as the PEM public key
+ * (or the public key can be embedded as `TF_LICENSE_PUBLIC_KEY` env var).
+ */
+export function loadLicense(configDir) {
+    // Return cached result if available
+    if (cachedLicense !== undefined)
+        return cachedLicense;
+    try {
+        const filePath = path.join(configDir, LICENSE_FILENAME);
+        if (!fs.existsSync(filePath)) {
+            cachedLicense = null;
+            return null;
+        }
+        const content = fs.readFileSync(filePath, 'utf8').trim();
+        if (!content) {
+            cachedLicense = null;
+            return null;
+        }
+        // Split into sections separated by blank lines
+        const sections = content.split(/\n\s*\n/);
+        const licenseKey = sections[0].trim();
+        // Public key: either embedded after the JWT or from env
+        let publicKey = process.env['TF_LICENSE_PUBLIC_KEY'] ?? '';
+        if (sections.length > 1) {
+            publicKey = sections.slice(1).join('\n\n').trim();
+        }
+        if (!publicKey) {
+            cachedLicense = null;
+            return null;
+        }
+        const result = validateLicense(licenseKey, publicKey);
+        cachedLicense = result;
+        return result;
+    }
+    catch {
+        cachedLicense = null;
+        return null;
+    }
+}
+/**
+ * Get the license tier for the current project.
+ * Falls back to `'free'` when no valid license is found.
+ */
+export function getLicenseTier(configDir) {
+    const dir = configDir ?? process.cwd();
+    const license = loadLicense(dir);
+    return license?.tier ?? 'free';
+}
+/** Reset the in-memory license cache (useful for testing). */
+export function resetLicenseCache() {
+    cachedLicense = undefined;
+}
+// ── Internal helpers ─────────────────────────────────────────────────
+/** Type guard for LicensePayload. */
+function isLicensePayload(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const obj = value;
+    if (!['free', 'pro', 'enterprise'].includes(obj['tier']))
+        return false;
+    if (typeof obj['exp'] !== 'number')
+        return false;
+    if (typeof obj['iat'] !== 'number')
+        return false;
+    if (typeof obj['sub'] !== 'string')
+        return false;
+    if (typeof obj['maxProjects'] !== 'number')
+        return false;
+    if (typeof obj['maxRunsPerMonth'] !== 'number')
+        return false;
+    if (!Array.isArray(obj['features']))
+        return false;
+    if (!obj['features'].every((f) => typeof f === 'string'))
+        return false;
+    return true;
+}
+/**
+ * Convert a raw ECDSA signature (r || s, 64 bytes for P-256) to DER encoding.
+ * If the input is already DER-encoded (starts with 0x30), return as-is.
+ */
+function rawToDer(raw) {
+    // If already DER-encoded, return as-is
+    if (raw.length > 0 && raw[0] === 0x30)
+        return raw;
+    if (raw.length !== 64)
+        return raw; // Not a valid raw P-256 signature
+    const r = raw.subarray(0, 32);
+    const s = raw.subarray(32, 64);
+    const encodeInteger = (int) => {
+        // Strip leading zeros but keep at least one byte
+        let start = 0;
+        while (start < int.length - 1 && int[start] === 0)
+            start++;
+        let trimmed = int.subarray(start);
+        // If high bit is set, prepend a 0x00 byte
+        if (trimmed[0] & 0x80) {
+            trimmed = Buffer.concat([Buffer.from([0x00]), trimmed]);
+        }
+        return Buffer.concat([
+            Buffer.from([0x02, trimmed.length]),
+            trimmed,
+        ]);
+    };
+    const rDer = encodeInteger(r);
+    const sDer = encodeInteger(s);
+    const body = Buffer.concat([rDer, sDer]);
+    return Buffer.concat([Buffer.from([0x30, body.length]), body]);
+}
+//# sourceMappingURL=license.js.map

package/dist/core/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../core/license.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAgBlC,4DAA4D;AAC5D,IAAI,aAAgD,CAAC;AAErD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,wEAAwE;AAExE,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEpD,+BAA+B;QAC/B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,eAAe,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5C,CAAC;QACF,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACd,MAAkC,CAAC,KAAK,CAAC,KAAK,OAAO,EACtD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAEhD,mDAAmD;QACnD,iEAAiE;QACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/C,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,EACtC,YAAY,CACb,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,iBAAiB;QACjB,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEjD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5C,eAAe;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;QAEvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,oCAAoC;IACpC,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtC,wDAAwD;QACxD,IAAI,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtD,aAAa,GAAG,MAAM,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,IAAI,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAkB;IAC/C,MAAM,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC;AACjC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB;IAC/B,aAAa,GAAG,SAAS,CAAC;AAC5B,CAAC;AAED,wEAAwE;AAExE,qCAAqC;AACrC,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,uCAAuC;IACvC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAElD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,CAAC,kCAAkC;IAErE,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE;QAC5C,iDAAiD;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,KAAK,EAAE,CAAC;QAC3D,IAAI,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElC,0CAA0C;QAC1C,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;YACtB,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/core/messages.d.ts

@@ -0,0 +1,10 @@
+import type { LicenseTier } from './license';
+/** Look up the display name for an agent number. */
+export declare function getAgentDisplayName(agentNumber: number): string;
+/** Message shown when an agent is gated by license tier. */
+export declare function agentGatedMessage(agentNumber: number, agentName: string, requiredTier: LicenseTier, currentTier: LicenseTier): string;
+/** Message shown when a phase is gated by license tier. */
+export declare function phaseGatedMessage(phase: string, requiredTier: LicenseTier, currentTier: LicenseTier): string;
+/** Message shown when the run limit has been reached. */
+export declare function runLimitMessage(used: number, limit: number, tier: LicenseTier): string;
+//# sourceMappingURL=messages.d.ts.map

package/dist/core/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../core/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AA+B7C,oDAAoD;AACpD,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,WAAW,EACzB,WAAW,EAAE,WAAW,GACvB,MAAM,CAER;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,WAAW,EACzB,WAAW,EAAE,WAAW,GACvB,MAAM,CAER;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,GAChB,MAAM,CAER"}

package/dist/core/messages.js

@@ -0,0 +1,47 @@
+const PRICING_URL = 'https://testteam.dev/pricing';
+/** Agent names keyed by agent number. */
+const AGENT_NAMES = {
+    1: 'Analyst',
+    2: 'Seed Architect',
+    3: 'Test Generator',
+    4: 'Unit Runner',
+    5: 'Browser Crawler',
+    6: 'API Exerciser',
+    7: 'Security Scout',
+    8: 'A11y Guardian',
+    9: 'Healer',
+    10: 'Reporter',
+    11: 'Fixer',
+    12: 'UX Inspector',
+    13: 'Performance Profiler',
+    14: 'Data Integrity Auditor',
+    15: 'Regression Sentinel',
+    16: 'Chaos Agent',
+    17: 'Documentation Validator',
+    18: 'Integration Watchdog',
+    19: 'Tenant Isolation Auditor',
+    20: 'Workflow Completion Tester',
+    21: 'State & Session Tester',
+    22: 'Email Notification Verifier',
+    23: 'Migration Tester',
+};
+/** Look up the display name for an agent number. */
+export function getAgentDisplayName(agentNumber) {
+    return AGENT_NAMES[agentNumber] ?? `Agent ${agentNumber}`;
+}
+/** Message shown when an agent is gated by license tier. */
+export function agentGatedMessage(agentNumber, agentName, requiredTier, currentTier) {
+    return `[Agent ${agentNumber}: ${agentName}] requires ${capitalise(requiredTier)} tier — skipped (current: ${currentTier})`;
+}
+/** Message shown when a phase is gated by license tier. */
+export function phaseGatedMessage(phase, requiredTier, currentTier) {
+    return `${capitalise(phase)} phase requires ${capitalise(requiredTier)} tier — upgrade at ${PRICING_URL} (current: ${currentTier})`;
+}
+/** Message shown when the run limit has been reached. */
+export function runLimitMessage(used, limit, tier) {
+    return `Run limit reached: ${used}/${limit} runs used on ${capitalise(tier)} tier — upgrade at ${PRICING_URL}`;
+}
+function capitalise(str) {
+    return str.charAt(0).toUpperCase() + str.slice(1);
+}
+//# sourceMappingURL=messages.js.map

package/dist/core/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../core/messages.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAEnD,yCAAyC;AACzC,MAAM,WAAW,GAA2B;IAC1C,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,gBAAgB;IACnB,CAAC,EAAE,gBAAgB;IACnB,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,gBAAgB;IACnB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,QAAQ;IACX,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,cAAc;IAClB,EAAE,EAAE,sBAAsB;IAC1B,EAAE,EAAE,wBAAwB;IAC5B,EAAE,EAAE,qBAAqB;IACzB,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,yBAAyB;IAC7B,EAAE,EAAE,sBAAsB;IAC1B,EAAE,EAAE,0BAA0B;IAC9B,EAAE,EAAE,4BAA4B;IAChC,EAAE,EAAE,wBAAwB;IAC5B,EAAE,EAAE,6BAA6B;IACjC,EAAE,EAAE,kBAAkB;CACvB,CAAC;AAEF,oDAAoD;AACpD,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,SAAS,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,SAAiB,EACjB,YAAyB,EACzB,WAAwB;IAExB,OAAO,UAAU,WAAW,KAAK,SAAS,cAAc,UAAU,CAAC,YAAY,CAAC,6BAA6B,WAAW,GAAG,CAAC;AAC9H,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,YAAyB,EACzB,WAAwB;IAExB,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,mBAAmB,UAAU,CAAC,YAAY,CAAC,sBAAsB,WAAW,cAAc,WAAW,GAAG,CAAC;AACtI,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAa,EACb,IAAiB;IAEjB,OAAO,sBAAsB,IAAI,IAAI,KAAK,iBAAiB,UAAU,CAAC,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC;AACjH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/core/multi-browser.d.ts

@@ -0,0 +1,36 @@
+import type { AgentResult, Finding, Phase } from './types';
+import type { TestTeamConfig } from './config';
+import type { BaseAgent } from '../agents/base-agent';
+export type BrowserEngine = 'chromium' | 'firefox' | 'webkit';
+export interface MultiBrowserConfig {
+    engines: BrowserEngine[];
+    parallel: boolean;
+    compareResults: boolean;
+}
+export interface MultiBrowserResult {
+    engine: BrowserEngine;
+    result: AgentResult;
+    duration: number;
+}
+export interface CrossBrowserDiff {
+    engine1: BrowserEngine;
+    engine2: BrowserEngine;
+    differences: Finding[];
+}
+/** Default configuration for multi-browser execution. */
+export declare const DEFAULT_MULTI_BROWSER_CONFIG: MultiBrowserConfig;
+/**
+ * Run an agent across multiple browser engines, optionally in parallel,
+ * and compare findings across browsers.
+ */
+export declare function runMultiBrowser(agent: BaseAgent, _config: TestTeamConfig, _phase: Phase, browserConfig: MultiBrowserConfig): Promise<{
+    results: MultiBrowserResult[];
+    diffs: CrossBrowserDiff[];
+}>;
+/**
+ * Compare findings across browser results.
+ * A finding is considered unique to a browser if no finding in the other
+ * browser shares the same base description (stripping the engine prefix tag).
+ */
+export declare function compareBrowserResults(results: MultiBrowserResult[]): CrossBrowserDiff[];
+//# sourceMappingURL=multi-browser.d.ts.map

package/dist/core/multi-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-browser.d.ts","sourceRoot":"","sources":["../../core/multi-browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,EAAE,OAAO,EAAE,CAAC;CACxB;AAED,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,EAAE,kBAI1C,CAAC;AAEF;;;GAGG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,KAAK,EACb,aAAa,EAAE,kBAAkB,GAChC,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CAqCvE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAAE,GAC5B,gBAAgB,EAAE,CA4CpB"}

package/dist/core/multi-browser.js

@@ -0,0 +1,88 @@
+/** Default configuration for multi-browser execution. */
+export const DEFAULT_MULTI_BROWSER_CONFIG = {
+    engines: ['chromium'],
+    parallel: true,
+    compareResults: true,
+};
+/**
+ * Run an agent across multiple browser engines, optionally in parallel,
+ * and compare findings across browsers.
+ */
+export async function runMultiBrowser(agent, _config, _phase, browserConfig) {
+    const runSingleEngine = async (engine) => {
+        const start = Date.now();
+        const result = await agent.run();
+        const duration = Date.now() - start;
+        // Tag each finding with the browser engine for traceability
+        const taggedFindings = result.findings.map(f => ({
+            ...f,
+            description: `[${engine}] ${f.description}`,
+        }));
+        return {
+            engine,
+            result: { ...result, findings: taggedFindings },
+            duration,
+        };
+    };
+    let results;
+    if (browserConfig.parallel) {
+        results = await Promise.all(browserConfig.engines.map(engine => runSingleEngine(engine)));
+    }
+    else {
+        results = [];
+        for (const engine of browserConfig.engines) {
+            results.push(await runSingleEngine(engine));
+        }
+    }
+    const diffs = browserConfig.compareResults
+        ? compareBrowserResults(results)
+        : [];
+    return { results, diffs };
+}
+/**
+ * Compare findings across browser results.
+ * A finding is considered unique to a browser if no finding in the other
+ * browser shares the same base description (stripping the engine prefix tag).
+ */
+export function compareBrowserResults(results) {
+    if (results.length < 2) {
+        return [];
+    }
+    const diffs = [];
+    for (let i = 0; i < results.length; i++) {
+        for (let j = i + 1; j < results.length; j++) {
+            const r1 = results[i];
+            const r2 = results[j];
+            const descriptions1 = new Set(r1.result.findings.map(f => stripEngineTag(f.description)));
+            const descriptions2 = new Set(r2.result.findings.map(f => stripEngineTag(f.description)));
+            const differences = [];
+            // Findings in engine1 but not in engine2
+            for (const finding of r1.result.findings) {
+                const baseDesc = stripEngineTag(finding.description);
+                if (!descriptions2.has(baseDesc)) {
+                    differences.push(finding);
+                }
+            }
+            // Findings in engine2 but not in engine1
+            for (const finding of r2.result.findings) {
+                const baseDesc = stripEngineTag(finding.description);
+                if (!descriptions1.has(baseDesc)) {
+                    differences.push(finding);
+                }
+            }
+            if (differences.length > 0) {
+                diffs.push({
+                    engine1: r1.engine,
+                    engine2: r2.engine,
+                    differences,
+                });
+            }
+        }
+    }
+    return diffs;
+}
+/** Strip the "[engine] " prefix tag from a finding description. */
+function stripEngineTag(description) {
+    return description.replace(/^\[(chromium|firefox|webkit)\]\s*/, '');
+}
+//# sourceMappingURL=multi-browser.js.map

package/dist/core/multi-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-browser.js","sourceRoot":"","sources":["../../core/multi-browser.ts"],"names":[],"mappings":"AAwBA,yDAAyD;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAuB;IAC9D,OAAO,EAAE,CAAC,UAAU,CAAC;IACrB,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,OAAuB,EACvB,MAAa,EACb,aAAiC;IAEjC,MAAM,eAAe,GAAG,KAAK,EAAE,MAAqB,EAA+B,EAAE;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEpC,4DAA4D;QAC5D,MAAM,cAAc,GAAc,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC;YACJ,WAAW,EAAE,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,EAAE;SAC5C,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,MAAM;YACN,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE;YAC/C,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,OAA6B,CAAC;IAElC,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QAC3B,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CACzB,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,cAAc;QACxC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAEtB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAE1F,MAAM,WAAW,GAAc,EAAE,CAAC;YAElC,yCAAyC;YACzC,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACrD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,yCAAyC;YACzC,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACrD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC;oBACT,OAAO,EAAE,EAAE,CAAC,MAAM;oBAClB,OAAO,EAAE,EAAE,CAAC,MAAM;oBAClB,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,SAAS,cAAc,CAAC,WAAmB;IACzC,OAAO,WAAW,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/core/orchestrator.d.ts

@@ -0,0 +1,48 @@
+import type { Phase, AgentResult, PhaseGateResult } from './types';
+import type { ValidatedConfig } from './config';
+import type { BaseAgent } from '../agents/base-agent';
+import type { HealthCheck } from './health-check';
+import { CostTracker } from './cost-tracker';
+import type { LicenseTier } from './license';
+export interface DispatchPlanEntry {
+    agentId: number;
+    status: 'scheduled' | 'disabled' | 'unregistered';
+}
+export interface PhaseRunResult {
+    gate: PhaseGateResult;
+    agentResults: Record<number, AgentResult>;
+    skippedAgents: number[];
+    costTracker: CostTracker;
+}
+export declare class Orchestrator {
+    private readonly config;
+    private readonly agents;
+    private readonly healthChecks;
+    private runDir;
+    /**
+     * License tier resolver — injectable for testing.
+     * Defaults to `getLicenseTier()` from the license module.
+     */
+    _getLicenseTier: () => LicenseTier;
+    constructor(config: ValidatedConfig, runDir?: string);
+    /** Register an agent instance for a given agent ID. */
+    registerAgent(agentId: number, agent: BaseAgent): void;
+    /** Register health checks to run before agent dispatch. */
+    registerHealthChecks(checks: HealthCheck[]): void;
+    /** Return the dispatch plan for a phase without executing anything. */
+    dryRun(phase: Phase): DispatchPlanEntry[];
+    /** Execute all agents for the given phase, evaluate the gate, and return results. */
+    runPhase(phase: Phase): Promise<PhaseRunResult>;
+    /**
+     * After all phase agents complete, classify findings and dispatch cross-phase
+     * agents on demand:
+     *   - Agent 9 (Healer) for test-bug findings
+     *   - Agent 11 (Fixer) for code-bug findings
+     *
+     * Iterates up to MAX_FIX_LOOP_ITERATIONS times to prevent infinite heal/fix loops.
+     */
+    private runFixLoop;
+    /** Get the run directory path. */
+    getRunDir(): string;
+}
+//# sourceMappingURL=orchestrator.d.ts.map