@litfamily/litcodex 1.0.0

package/marketplace/plugins/litcodex/skills/lit-team/scripts/team-guide.mjs

@@ -0,0 +1,31 @@
+function memberLine(member) {
+	const thread = member.threadId ? ` | thread ${member.threadId}` : " | thread not bound yet";
+	const wt = member.worktree?.path ? ` | worktree ${member.worktree.path}` : "";
+	return `- **${member.id}** (${member.lens}) - ${member.focus}${member.deliverable ? ` -> ${member.deliverable}` : ""}${thread}${wt} [${member.status}]`;
+}
+
+function worktreeSection(team) {
+	if (!team.worktree?.enabled) {
+		return `## Worktrees\n\nThis team uses the shared repository checkout. If edits would collide, mark yourself blocked and tell the leader.`;
+	}
+	const lines = team.members
+		.filter((member) => member.worktree?.path || member.worktree?.branch)
+		.map((member) => `- **${member.id}**: worktree \`${member.worktree.path ?? "(assign with bind-thread --cwd)"}\` on branch \`${member.worktree.branch ?? team.worktree.baseBranch}\``);
+	return `## Worktrees\n\nIsolation is enabled. Work only inside your assigned worktree.\n\n${lines.length ? lines.join("\n") : "- paths will be assigned as threads are bound"}`;
+}
+
+export function buildGuide(team) {
+	const artifacts = team.paths?.artifacts ?? ".litcodex/teams/<session_id>/artifacts";
+	const teamJson = team.paths?.team ?? ".litcodex/teams/<session_id>/team.json";
+	const roster = team.members.length ? team.members.map(memberLine).join("\n") : "- (no members yet)";
+	return `# Team ${team.teamName} - Member Field Manual\n\n- Team state: \`${teamJson}\`\n- Thread title convention: \`${team.threadTitleConvention}\`\n\n## Roster\n\n${roster}\n\n## Leader\n\nThe main session is the leader. Report progress, blockers, evidence, and final results to the leader.\n\n## Artifacts\n\nUse the shared artifacts directory for notes, diffs, and evidence:\n\n\`${artifacts}\`\n\n${worktreeSection(team)}\n\n## Completion\n\nYour slice is complete only after you provide the deliverable, exact verification, real evidence, residual risks, and cleanup receipt.`;
+}
+
+export function buildMemberPrompt(team, id) {
+	const member = team.members.find((candidate) => candidate.id === id);
+	if (!member) throw new Error(`no member with id "${id}"`);
+	const guide = team.paths?.guide ?? ".litcodex/teams/<session_id>/guide.md";
+	const teamJson = team.paths?.team ?? ".litcodex/teams/<session_id>/team.json";
+	const where = member.cwd ? `Work inside \`${member.cwd}\`.` : "Work from the repository root unless your guide assigns a worktree.";
+	return `You are member ${member.id} of team ${team.teamName}, owner of: ${member.focus}.\nFIRST read \`${guide}\`, then \`${teamJson}\`. ${where}\nSend WORKING/BLOCKED updates, and report changed files or findings, exact tests/probes, evidence, risks, and cleanup receipt when done.`;
+}

package/marketplace/plugins/litcodex/skills/lit-team/scripts/team-state.mjs

@@ -0,0 +1,262 @@
+import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, mkdir, open, rename, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+
+export const LENSES = ["area", "ownership", "perspective"];
+export const MEMBER_STATUSES = ["pending", "active", "reported", "blocked", "archived"];
+export const MIN_MEMBERS = 2;
+
+// Team state records member focus, thread ids, and absolute worktree paths, so it
+// stays private to the owner rather than inheriting the process umask.
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+
+export class TeamError extends Error {
+	constructor(message, exitCode = 1) {
+		super(message);
+		this.name = "TeamError";
+		this.exitCode = exitCode;
+	}
+}
+
+const SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+
+function isoNow(now) {
+	return now ?? new Date().toISOString();
+}
+
+function normalizedFocus(focus) {
+	return focus.trim().replace(/\s+/g, " ").toLowerCase();
+}
+
+export function isUnderstaffed(team) {
+	return team.members.length < MIN_MEMBERS;
+}
+
+export function buildTeam({ teamName, sessionName, sessionId = null, dir = null, worktreeEnabled = false, baseBranch = "main", now }) {
+	if (!teamName?.trim()) throw new Error("team name is required");
+	if (!sessionName?.trim()) throw new Error("session name is required");
+	const ts = isoNow(now);
+	return {
+		schemaVersion: 1,
+		teamId: randomUUID(),
+		teamName: teamName.trim(),
+		sessionName: sessionName.trim(),
+		sessionId,
+		threadTitleConvention: `[${teamName.trim()}] ${sessionName.trim()}`,
+		status: "active",
+		createdAt: ts,
+		updatedAt: ts,
+		archivedAt: null,
+		leader: { kind: "main-session", sessionId },
+		worktree: { enabled: Boolean(worktreeEnabled), baseBranch, root: dir ? join(dir, "worktrees") : null },
+		paths: dir ? { dir, team: join(dir, "team.json"), guide: join(dir, "guide.md"), artifacts: join(dir, "artifacts") } : null,
+		members: [],
+		log: [{ ts, event: "created", detail: `team ${teamName.trim()}` }],
+	};
+}
+
+function touch(team, event, detail) {
+	const ts = isoNow();
+	team.updatedAt = ts;
+	team.log.push({ ts, event, detail });
+	return team;
+}
+
+function memberById(team, id) {
+	const found = team.members.find((member) => member.id === id);
+	if (!found) throw new Error(`no member with id "${id}"`);
+	return found;
+}
+
+function assertUniqueMemberFocus(team) {
+	const seen = new Map();
+	for (const member of team.members) {
+		const key = normalizedFocus(member.focus ?? "");
+		const previous = seen.get(key);
+		if (previous) throw new Error(`member focus "${member.focus}" duplicates "${previous.focus}"`);
+		seen.set(key, member);
+	}
+}
+
+function assertTeamReadyForThreadBinding(team) {
+	if (isUnderstaffed(team)) throw new Error(`cannot bind member threads until the team has at least ${MIN_MEMBERS} distinct members`);
+	assertUniqueMemberFocus(team);
+}
+
+export function addMember(team, { id, focus, lens, deliverable = "", branch = null }) {
+	if (!id?.trim()) throw new Error("member id is required");
+	if (!focus?.trim()) throw new Error("member focus is required");
+	if (!LENSES.includes(lens)) throw new Error(`invalid lens "${lens}"`);
+	const memberId = id.trim();
+	const memberFocus = focus.trim();
+	if (team.members.some((member) => member.id === memberId)) throw new Error(`member id "${memberId}" already exists`);
+	if (team.members.some((member) => normalizedFocus(member.focus) === normalizedFocus(memberFocus))) throw new Error(`member focus "${memberFocus}" duplicates an existing member`);
+	team.members.push({ id: memberId, focus: memberFocus, lens, deliverable: deliverable.trim(), threadId: null, threadTitle: team.threadTitleConvention, cwd: null, worktree: { path: null, branch }, status: "pending" });
+	return touch(team, "add-member", `member ${memberId}: ${memberFocus}`);
+}
+
+export function bindThread(team, { id, threadId, cwd = null, worktreePath = null }) {
+	if (!threadId?.trim()) throw new Error("thread id is required");
+	assertTeamReadyForThreadBinding(team);
+	const member = memberById(team, id);
+	member.threadId = threadId.trim();
+	member.status = "active";
+	if (cwd) member.cwd = cwd;
+	if (team.worktree.enabled) member.worktree.path = worktreePath ?? cwd ?? member.worktree.path;
+	return touch(team, "bind-thread", `member ${id} -> thread ${threadId.trim()}`);
+}
+
+export function setMemberStatus(team, { id, status, note = "" }) {
+	if (!MEMBER_STATUSES.includes(status)) throw new Error(`invalid status "${status}"`);
+	memberById(team, id).status = status;
+	return touch(team, "set-status", `member ${id} -> ${status}${note ? `: ${note}` : ""}`);
+}
+
+export function archive(team, { id = null, note = "" } = {}) {
+	if (id) {
+		memberById(team, id).status = "archived";
+		return touch(team, "archive-member", `member ${id}${note ? `: ${note}` : ""}`);
+	}
+	// Archiving the whole team is what closes it out, so it must not overwrite the
+	// record that a member never reported — that record is the reason to refuse.
+	const outstanding = team.members.filter((member) => member.status !== "reported" && member.status !== "blocked");
+	if (outstanding.length > 0) {
+		throw new TeamError(`cannot archive: ${outstanding.map(({ id: memberId }) => memberId).join(", ")} have not reported or blocked`, 65);
+	}
+	for (const member of team.members) member.status = "archived";
+	team.status = "archived";
+	team.archivedAt = isoNow();
+	return touch(team, "archive", note || "team archived");
+}
+
+export function validateTeam(team) {
+	if (team?.schemaVersion !== 1) throw new Error("invalid team: schemaVersion must be 1");
+	if (!team.teamId || !team.teamName) throw new Error("invalid team: teamId and teamName are required");
+	if (!Array.isArray(team.members)) throw new Error("invalid team: members must be an array");
+	assertUniqueMemberFocus(team);
+	return team;
+}
+
+export function resolveTeamDir(cwd, sessionId) {
+	if (!SESSION_ID_PATTERN.test(sessionId ?? "")) throw new Error(`invalid or unsafe session id "${sessionId}"`);
+	return resolve(cwd, ".litcodex", "teams", sessionId);
+}
+
+async function lstatOrNull(path) {
+	return lstat(path).catch((error) => {
+		if (error && error.code === "ENOENT") return null;
+		throw error;
+	});
+}
+
+async function mkdirNoSymlink(dir, stopAt) {
+	if (dir === stopAt) return;
+	const rel = relative(stopAt, dir);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw new Error(`refused: path escapes ${stopAt}: ${dir}`);
+	await mkdirNoSymlink(dirname(dir), stopAt);
+	const st = await lstatOrNull(dir);
+	if (st) {
+		if (st.isSymbolicLink()) throw new Error(`refused: path component is a symlink: ${dir}`);
+		if (!st.isDirectory()) throw new Error(`refused: path component is not a directory: ${dir}`);
+		return;
+	}
+	await mkdir(dir, { mode: DIR_MODE });
+}
+
+async function assertNoSymlinkComponents(dir, stopAt) {
+	if (dir === stopAt) return;
+	const rel = relative(stopAt, dir);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw new Error(`refused: path escapes ${stopAt}: ${dir}`);
+	await assertNoSymlinkComponents(dirname(dir), stopAt);
+	const st = await lstatOrNull(dir);
+	if (st?.isSymbolicLink()) throw new Error(`refused: path component is a symlink: ${dir}`);
+}
+
+export async function ensureTeamDir(cwd, sessionId) {
+	const workspaceRoot = resolve(cwd);
+	const teamsRoot = resolve(cwd, ".litcodex", "teams");
+	const dir = resolveTeamDir(cwd, sessionId);
+	await mkdirNoSymlink(teamsRoot, workspaceRoot);
+	await mkdirNoSymlink(dir, teamsRoot);
+	await mkdirNoSymlink(join(dir, "artifacts"), dir);
+	return dir;
+}
+
+export async function assertSafeTeamDir(cwd, sessionId) {
+	const workspaceRoot = resolve(cwd);
+	const teamsRoot = resolve(cwd, ".litcodex", "teams");
+	const dir = resolveTeamDir(cwd, sessionId);
+	await assertNoSymlinkComponents(teamsRoot, workspaceRoot);
+	await assertNoSymlinkComponents(dir, teamsRoot);
+	return dir;
+}
+
+// O_NOFOLLOW refuses a symlinked team.json outright; re-stating the open fd against
+// the lstat closes the window where the path is swapped between the two calls.
+export async function readTeam(dir, { beforeRead } = {}) {
+	const target = join(dir, "team.json");
+	const before = await lstatOrNull(target);
+	if (before?.isSymbolicLink()) throw new TeamError(`refused: team.json is a symlink: ${target}`, 65);
+	// Test-only race seam; production callers leave it unset.
+	beforeRead?.(target);
+
+	let handle;
+	try {
+		handle = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW);
+	} catch (error) {
+		if (error?.code === "ELOOP") throw new TeamError(`refused: team.json is a symlink: ${target}`, 65);
+		throw error;
+	}
+	try {
+		const opened = await handle.stat();
+		if (!opened.isFile()) throw new TeamError(`refused: team.json is not a file: ${target}`, 65);
+		if (
+			!before ||
+			before.dev !== opened.dev ||
+			before.ino !== opened.ino ||
+			before.size !== opened.size ||
+			before.ctimeMs !== opened.ctimeMs ||
+			before.birthtimeMs !== opened.birthtimeMs
+		) {
+			throw new TeamError("corrupt team state: team state changed during read", 65);
+		}
+		return validateTeam(JSON.parse(await handle.readFile("utf8")));
+	} finally {
+		await handle.close();
+	}
+}
+
+export async function teamExists(dir) {
+	return (await lstatOrNull(join(dir, "team.json"))) !== null;
+}
+
+async function persistedFileTarget(team, pathKey, fileName, expectedDir) {
+	validateTeam(team);
+	if (!team.paths?.dir || !team.paths?.[pathKey]) throw new Error(`invalid team: paths.${pathKey} is required`);
+	const dir = resolve(expectedDir);
+	if (resolve(team.paths.dir) !== dir) throw new Error("refused: persisted team dir does not match trusted team dir");
+	const target = resolve(team.paths[pathKey]);
+	if (target !== resolve(dir, fileName)) throw new Error(`refused: ${fileName} persist target escapes team dir`);
+	const st = await lstatOrNull(target);
+	if (st?.isSymbolicLink()) throw new Error(`refused: ${fileName} is a symlink: ${target}`);
+	if (st && !st.isFile()) throw new Error(`refused: ${fileName} is not a file: ${target}`);
+	return target;
+}
+
+async function writePersistedFileAtomic(team, pathKey, fileName, content, expectedDir) {
+	const target = await persistedFileTarget(team, pathKey, fileName, expectedDir);
+	const tmp = `${target}.tmp-${process.pid}-${randomUUID()}`;
+	await writeFile(tmp, content, { encoding: "utf8", flag: "wx", mode: FILE_MODE });
+	await rename(tmp, target);
+	return team;
+}
+
+export async function writeTeamAtomic(team, expectedDir) {
+	return writePersistedFileAtomic(team, "team", "team.json", `${JSON.stringify(team, null, 2)}\n`, expectedDir);
+}
+
+export async function writeGuideAtomic(team, content, expectedDir) {
+	return writePersistedFileAtomic(team, "guide", "guide.md", content, expectedDir);
+}

package/marketplace/plugins/litcodex/skills/lit-team/scripts/team.mjs

@@ -0,0 +1,145 @@
+#!/usr/bin/env node
+import { randomUUID } from "node:crypto";
+import { realpathSync } from "node:fs";
+import { rm } from "node:fs/promises";
+import { join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { withOwnerLock } from "./owner-lock.mjs";
+import { buildGuide, buildMemberPrompt } from "./team-guide.mjs";
+import { addMember, archive, assertSafeTeamDir, bindThread, buildTeam, ensureTeamDir, isUnderstaffed, MIN_MEMBERS, readTeam, resolveTeamDir, setMemberStatus, teamExists, writeGuideAtomic, writeTeamAtomic } from "./team-state.mjs";
+
+function parseFlags(args) {
+	const flags = { _: [] };
+	for (let i = 0; i < args.length; i++) {
+		const arg = args[i];
+		if (!arg.startsWith("--")) {
+			flags._.push(arg);
+			continue;
+		}
+		const key = arg.slice(2);
+		const next = args[i + 1];
+		if (next === undefined || next.startsWith("--")) flags[key] = true;
+		else {
+			flags[key] = next;
+			i++;
+		}
+	}
+	return flags;
+}
+
+function requireFlag(flags, name) {
+	const value = flags[name];
+	if (value === undefined || value === true) throw new Error(`missing required flag --${name}`);
+	return value;
+}
+
+async function loadTeam(cwd, sessionId) {
+	const dir = await assertSafeTeamDir(cwd, sessionId);
+	return { dir, team: await readTeam(dir) };
+}
+
+async function persist(team, dir) {
+	await writeTeamAtomic(team, dir);
+	await writeGuideAtomic(team, buildGuide(team), dir);
+}
+
+const handlers = {
+	async init(cwd, flags) {
+		const teamName = requireFlag(flags, "name");
+		const sessionName = requireFlag(flags, "session-name");
+		const sessionId = typeof flags.session === "string" ? flags.session : `team-${randomUUID().slice(0, 8)}`;
+		const dir = await ensureTeamDir(cwd, sessionId);
+		if (await teamExists(dir)) {
+			process.stdout.write(`exists: ${dir}\n`);
+			return;
+		}
+		const team = buildTeam({ teamName, sessionName, sessionId, dir, worktreeEnabled: flags.worktree === true, baseBranch: typeof flags["base-branch"] === "string" ? flags["base-branch"] : "main" });
+		await persist(team, dir);
+		process.stdout.write(`created: ${dir}\nteam.json + guide.md written; artifacts/ ready. session id: ${sessionId}\n`);
+	},
+
+	async "add-member"(cwd, flags) {
+		const { dir, team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		const memberId = requireFlag(flags, "id").trim();
+		addMember(team, { id: memberId, focus: requireFlag(flags, "focus"), lens: requireFlag(flags, "lens"), deliverable: typeof flags.deliverable === "string" ? flags.deliverable : "", branch: typeof flags.branch === "string" ? flags.branch : null });
+		await persist(team, dir);
+		process.stdout.write(`added member ${memberId}.\n---\n${buildMemberPrompt(team, memberId)}\n---\n`);
+	},
+
+	async "bind-thread"(cwd, flags) {
+		const { dir, team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		bindThread(team, { id: requireFlag(flags, "id"), threadId: requireFlag(flags, "thread"), cwd: typeof flags.cwd === "string" ? flags.cwd : null, worktreePath: typeof flags["worktree-path"] === "string" ? flags["worktree-path"] : null });
+		await persist(team, dir);
+		process.stdout.write(`bound member ${flags.id} to thread ${flags.thread}.\n`);
+	},
+
+	async "member-prompt"(cwd, flags) {
+		const { team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		process.stdout.write(`${buildMemberPrompt(team, requireFlag(flags, "id"))}\n`);
+	},
+
+	async "set-status"(cwd, flags) {
+		const { dir, team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		setMemberStatus(team, { id: requireFlag(flags, "id"), status: requireFlag(flags, "status"), note: typeof flags.note === "string" ? flags.note : "" });
+		await persist(team, dir);
+		process.stdout.write(`member ${flags.id} -> ${flags.status}\n`);
+	},
+
+	async archive(cwd, flags) {
+		const { dir, team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		archive(team, { id: typeof flags.id === "string" ? flags.id : null, note: typeof flags.note === "string" ? flags.note : "" });
+		await persist(team, dir);
+		process.stdout.write(flags.id ? `archived member ${flags.id}\n` : `archived team ${flags.team}\n`);
+	},
+
+	async delete(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		const active = team.members.filter((member) => member.status !== "archived");
+		if (flags.force !== true && (team.status !== "archived" || active.length > 0)) throw new Error(`refused: team "${sessionId}" is not archived or still has ${active.length} active member(s)`);
+		await rm(dir, { recursive: true, force: true });
+		process.stdout.write(`deleted team state: ${dir}\n`);
+	},
+
+	async status(cwd, flags) {
+		const { team } = await loadTeam(cwd, requireFlag(flags, "team"));
+		process.stdout.write(`Team ${team.teamName} [${team.status}] - ${team.members.length} member(s)\n`);
+		for (const member of team.members) process.stdout.write(`  ${member.id} (${member.lens}) ${member.focus} [${member.status}]${member.threadId ? ` thread=${member.threadId}` : ""}\n`);
+		if (isUnderstaffed(team)) process.stdout.write(`WARNING: a team needs at least ${MIN_MEMBERS} members.\n`);
+	},
+};
+
+// Every handler except the read-only ones does a read-modify-write of team.json,
+// so they serialise on one lock per team directory.
+const READ_ONLY_SUBCOMMANDS = new Set(["status"]);
+
+async function main() {
+	const [subcommand, ...rest] = process.argv.slice(2);
+	const handler = handlers[subcommand];
+	if (!handler) throw new Error(`unknown subcommand "${subcommand ?? ""}" - expected one of: ${Object.keys(handlers).join(", ")}`);
+	const cwd = process.cwd();
+	const flags = parseFlags(rest);
+	if (READ_ONLY_SUBCOMMANDS.has(subcommand)) return await handler(cwd, flags);
+
+	const sessionId = typeof flags.team === "string" ? flags.team : typeof flags.session === "string" ? flags.session : null;
+	if (sessionId === null) return await handler(cwd, flags);
+	const lockDir = join(resolveTeamDir(cwd, sessionId), ".lock");
+	return await withOwnerLock(lockDir, () => handler(cwd, flags));
+}
+
+function isInvokedAsScript() {
+	const entry = process.argv[1];
+	if (!entry) return false;
+	try {
+		return realpathSync(fileURLToPath(import.meta.url)) === realpathSync(entry);
+	} catch {
+		return import.meta.url === pathToFileURL(entry).href;
+	}
+}
+
+if (isInvokedAsScript()) {
+	await main().catch((error) => {
+		process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+		process.exit(typeof error?.exitCode === "number" ? error.exitCode : 1);
+	});
+}