@stanco323/oh-my-claude-code 4.10.3

package/dist/team/permissions.js

@@ -0,0 +1,219 @@
+// src/team/permissions.ts
+/**
+ * RBAC-compatible advisory permission scoping for workers.
+ *
+ * NOTE: This is an advisory layer only. MCP workers run in full-auto mode
+ * and cannot be mechanically restricted. Permissions are injected into
+ * prompts as instructions for the LLM to follow.
+ */
+import { relative, resolve } from 'node:path';
+/**
+ * Simple glob matching for path patterns.
+ * Supports: * (any non-/ chars), ** (any depth including /), ? (single non-/ char), exact match.
+ *
+ * Uses iterative character-by-character matching to avoid ReDoS risk from regex.
+ */
+function matchGlob(pattern, path) {
+    let pi = 0; // pattern index
+    let si = 0; // string (path) index
+    let starPi = -1; // pattern index after last '*' fallback point
+    let starSi = -1; // string index at last '*' fallback point
+    while (si < path.length) {
+        // Check for '**' (matches anything including '/')
+        if (pi < pattern.length - 1 && pattern[pi] === '*' && pattern[pi + 1] === '*') {
+            // Consume the '**'
+            pi += 2;
+            // Skip trailing '/' after '**' if present
+            if (pi < pattern.length && pattern[pi] === '/')
+                pi++;
+            starPi = pi;
+            starSi = si;
+            continue;
+        }
+        // Check for single '*' (matches any non-/ chars)
+        if (pi < pattern.length && pattern[pi] === '*') {
+            pi++;
+            starPi = pi;
+            starSi = si;
+            continue;
+        }
+        // Check for '?' (matches single non-/ char)
+        if (pi < pattern.length && pattern[pi] === '?' && path[si] !== '/') {
+            pi++;
+            si++;
+            continue;
+        }
+        // Exact character match
+        if (pi < pattern.length && pattern[pi] === path[si]) {
+            pi++;
+            si++;
+            continue;
+        }
+        // Mismatch: backtrack to last star if possible
+        if (starPi !== -1) {
+            pi = starPi;
+            starSi++;
+            si = starSi;
+            // For single '*', don't match across '/'
+            // We detect this by checking if the star was a '**' or '*'
+            // If we got here from '**', slashes are OK; from '*', skip if slash
+            // Re-check: was the star a '**'?
+            const wasSingleStar = starPi >= 2 && pattern[starPi - 2] === '*' && pattern[starPi - 1] === '*' ? false :
+                starPi >= 1 && pattern[starPi - 1] === '*' ? true : false;
+            if (wasSingleStar && si > 0 && path[si - 1] === '/') {
+                return false;
+            }
+            continue;
+        }
+        return false;
+    }
+    // Consume remaining pattern characters (trailing '*' or '**')
+    while (pi < pattern.length) {
+        if (pattern[pi] === '*') {
+            pi++;
+        }
+        else if (pattern[pi] === '/') {
+            // Allow trailing slash in pattern after '**'
+            pi++;
+        }
+        else {
+            break;
+        }
+    }
+    return pi === pattern.length;
+}
+/**
+ * Check if a worker is allowed to modify a given path.
+ * Denied paths override allowed paths.
+ */
+export function isPathAllowed(permissions, filePath, workingDirectory) {
+    // Normalize to relative path
+    const absPath = resolve(workingDirectory, filePath);
+    const relPath = relative(workingDirectory, absPath);
+    // If path escapes working directory, always deny
+    if (relPath.startsWith('..'))
+        return false;
+    // Check denied paths first (they override)
+    for (const pattern of permissions.deniedPaths) {
+        if (matchGlob(pattern, relPath))
+            return false;
+    }
+    // If no allowed paths specified, allow all within workingDirectory
+    if (permissions.allowedPaths.length === 0)
+        return true;
+    // Check allowed paths
+    for (const pattern of permissions.allowedPaths) {
+        if (matchGlob(pattern, relPath))
+            return true;
+    }
+    return false;
+}
+/**
+ * Check if a worker is allowed to run a given command.
+ * Empty allowedCommands means all commands are allowed.
+ */
+export function isCommandAllowed(permissions, command) {
+    if (permissions.allowedCommands.length === 0)
+        return true;
+    const trimmed = command.trim();
+    return permissions.allowedCommands.some(prefix => trimmed.startsWith(prefix));
+}
+/**
+ * Generate permission instructions for inclusion in worker prompt.
+ */
+export function formatPermissionInstructions(permissions) {
+    const lines = [];
+    lines.push('PERMISSION CONSTRAINTS:');
+    if (permissions.allowedPaths.length > 0) {
+        lines.push(`- You may ONLY modify files matching: ${permissions.allowedPaths.join(', ')}`);
+    }
+    if (permissions.deniedPaths.length > 0) {
+        lines.push(`- You must NOT modify files matching: ${permissions.deniedPaths.join(', ')}`);
+    }
+    if (permissions.allowedCommands.length > 0) {
+        lines.push(`- You may ONLY run commands starting with: ${permissions.allowedCommands.join(', ')}`);
+    }
+    if (Number.isFinite(permissions.maxFileSize)) {
+        lines.push(`- Maximum file size: ${Math.round(permissions.maxFileSize / 1024)}KB per file`);
+    }
+    if (lines.length === 1) {
+        lines.push('- No restrictions (full access within working directory)');
+    }
+    return lines.join('\n');
+}
+/**
+ * Default permissions (allow all within working directory).
+ */
+export function getDefaultPermissions(workerName) {
+    return {
+        workerName,
+        allowedPaths: [], // empty = allow all
+        deniedPaths: [],
+        allowedCommands: [], // empty = allow all
+        maxFileSize: Infinity,
+    };
+}
+/**
+ * Secure deny-defaults that are always enforced regardless of caller config.
+ * These protect sensitive files from being modified by any worker.
+ */
+const SECURE_DENY_DEFAULTS = [
+    '.git/**',
+    '.env*',
+    '**/.env*',
+    '**/secrets/**',
+    '**/.ssh/**',
+    '**/node_modules/.cache/**',
+];
+/**
+ * Merge caller-provided permissions with secure deny-defaults.
+ * The deny-defaults are always prepended to deniedPaths so they cannot be overridden.
+ */
+export function getEffectivePermissions(base) {
+    const perms = base
+        ? { ...getDefaultPermissions(base.workerName), ...base }
+        : getDefaultPermissions('default');
+    // Prepend secure defaults (deduplicating against existing deniedPaths)
+    const existingSet = new Set(perms.deniedPaths);
+    const merged = [
+        ...SECURE_DENY_DEFAULTS.filter(p => !existingSet.has(p)),
+        ...perms.deniedPaths,
+    ];
+    perms.deniedPaths = merged;
+    return perms;
+}
+/**
+ * Check a list of changed file paths against permissions.
+ * Returns an array of violations (empty = all paths allowed).
+ *
+ * @param changedPaths - relative or absolute paths of files that were modified
+ * @param permissions - effective permissions to check against
+ * @param cwd - working directory for resolving relative paths
+ */
+export function findPermissionViolations(changedPaths, permissions, cwd) {
+    const violations = [];
+    for (const filePath of changedPaths) {
+        if (!isPathAllowed(permissions, filePath, cwd)) {
+            // Determine which deny pattern matched for the reason
+            const absPath = resolve(cwd, filePath);
+            const relPath = relative(cwd, absPath);
+            let reason;
+            if (relPath.startsWith('..')) {
+                reason = `Path escapes working directory: ${relPath}`;
+            }
+            else {
+                // Find which deny pattern matched
+                const matchedDeny = permissions.deniedPaths.find(p => matchGlob(p, relPath));
+                if (matchedDeny) {
+                    reason = `Matches denied pattern: ${matchedDeny}`;
+                }
+                else {
+                    reason = `Not in allowed paths: ${permissions.allowedPaths.join(', ') || '(none configured)'}`;
+                }
+            }
+            violations.push({ path: relPath, reason });
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=permissions.js.map

package/dist/team/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/team/permissions.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAE1B;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAU9C;;;;;GAKG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,IAAY;IAC9C,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,gBAAgB;IAC5B,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,sBAAsB;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C;IAC/D,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0CAA0C;IAE3D,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,kDAAkD;QAClD,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9E,mBAAmB;YACnB,EAAE,IAAI,CAAC,CAAC;YACR,0CAA0C;YAC1C,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG;gBAAE,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,EAAE,EAAE,CAAC;YACL,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,4CAA4C;QAC5C,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACnE,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,CAAC;YACL,SAAS;QACX,CAAC;QAED,wBAAwB;QACxB,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpD,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,CAAC;YACL,SAAS;QACX,CAAC;QAED,+CAA+C;QAC/C,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,EAAE,GAAG,MAAM,CAAC;YACZ,MAAM,EAAE,CAAC;YACT,EAAE,GAAG,MAAM,CAAC;YAEZ,yCAAyC;YACzC,2DAA2D;YAC3D,oEAAoE;YACpE,iCAAiC;YACjC,MAAM,aAAa,GACjB,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAE5D,IAAI,aAAa,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,EAAE,EAAE,CAAC;QACP,CAAC;aAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,EAAE,EAAE,CAAC;QACP,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,WAA8B,EAC9B,QAAgB,EAChB,gBAAwB;IAExB,6BAA6B;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAEpD,iDAAiD;IACjD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,2CAA2C;IAC3C,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IAChD,CAAC;IAED,mEAAmE;IACnE,IAAI,WAAW,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvD,sBAAsB;IACtB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAA8B,EAC9B,OAAe;IAEf,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC/C,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAA8B;IAE9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEtC,IAAI,WAAW,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,yCAAyC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,yCAAyC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,8CAA8C,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO;QACL,UAAU;QACV,YAAY,EAAE,EAAE,EAAM,oBAAoB;QAC1C,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE,EAAG,oBAAoB;QAC1C,WAAW,EAAE,QAAQ;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,oBAAoB,GAAa;IACrC,SAAS;IACT,OAAO;IACP,UAAU;IACV,eAAe;IACf,YAAY;IACZ,2BAA2B;CAC5B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA0D;IAChG,MAAM,KAAK,GAAG,IAAI;QAChB,CAAC,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE;QACxD,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAErC,uEAAuE;IACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG;QACb,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,GAAG,KAAK,CAAC,WAAW;KACrB,CAAC;IACF,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;IAE3B,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAsB,EACtB,WAA8B,EAC9B,GAAW;IAEX,MAAM,UAAU,GAA0B,EAAE,CAAC;IAE7C,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/C,sDAAsD;YACtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEvC,IAAI,MAAc,CAAC;YACnB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,GAAG,mCAAmC,OAAO,EAAE,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,kCAAkC;gBAClC,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7E,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,GAAG,2BAA2B,WAAW,EAAE,CAAC;gBACpD,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,yBAAyB,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACjG,CAAC;YACH,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/team/phase-controller.d.ts

@@ -0,0 +1,33 @@
+export type TeamPhase = 'initializing' | 'planning' | 'executing' | 'fixing' | 'completed' | 'failed';
+export interface PhaseableTask {
+    status: string;
+    metadata?: {
+        permanentlyFailed?: boolean;
+        retryCount?: number;
+        maxRetries?: number;
+    };
+}
+/**
+ * Infer current team phase from task status distribution.
+ *
+ * Rules (evaluated in order):
+ * 1. Empty task list → 'initializing'
+ * 2. Any in_progress → 'executing'
+ * 3. All pending, no completed, no failed → 'planning'
+ * 4. Mixed completed + pending (no in_progress) → 'executing' (some done, others queued)
+ * 5. Tasks with metadata.permanentlyFailed === true are counted as FAILED (not completed)
+ * 6. Any failed (including permanentlyFailed) AND retries remaining → 'fixing'
+ * 7. All tasks failed (including permanentlyFailed) AND retries exhausted → 'failed'
+ * 8. All completed AND zero permanentlyFailed → 'completed'
+ * 9. Fallback → 'executing'
+ */
+export declare function inferPhase(tasks: PhaseableTask[]): TeamPhase;
+/**
+ * Get a human-readable log message for a phase transition.
+ */
+export declare function getPhaseTransitionLog(prev: TeamPhase, next: TeamPhase): string;
+/**
+ * Check if a phase is terminal (no further transitions expected).
+ */
+export declare function isTerminalPhase(phase: TeamPhase): boolean;
+//# sourceMappingURL=phase-controller.d.ts.map

package/dist/team/phase-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-controller.d.ts","sourceRoot":"","sources":["../../src/team/phase-controller.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GACjB,cAAc,GACd,UAAU,GACV,WAAW,GACX,QAAQ,GACR,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,SAAS,CAgE5D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAG9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAEzD"}

package/dist/team/phase-controller.js

@@ -0,0 +1,79 @@
+// src/team/phase-controller.ts
+/**
+ * Infer current team phase from task status distribution.
+ *
+ * Rules (evaluated in order):
+ * 1. Empty task list → 'initializing'
+ * 2. Any in_progress → 'executing'
+ * 3. All pending, no completed, no failed → 'planning'
+ * 4. Mixed completed + pending (no in_progress) → 'executing' (some done, others queued)
+ * 5. Tasks with metadata.permanentlyFailed === true are counted as FAILED (not completed)
+ * 6. Any failed (including permanentlyFailed) AND retries remaining → 'fixing'
+ * 7. All tasks failed (including permanentlyFailed) AND retries exhausted → 'failed'
+ * 8. All completed AND zero permanentlyFailed → 'completed'
+ * 9. Fallback → 'executing'
+ */
+export function inferPhase(tasks) {
+    if (tasks.length === 0)
+        return 'initializing';
+    // Categorize tasks
+    const inProgress = tasks.filter(t => t.status === 'in_progress');
+    const pending = tasks.filter(t => t.status === 'pending');
+    // CRITICAL: permanentlyFailed tasks have status='completed' but are actually failed
+    const permanentlyFailed = tasks.filter(t => t.status === 'completed' && t.metadata?.permanentlyFailed === true);
+    const genuinelyCompleted = tasks.filter(t => t.status === 'completed' && !t.metadata?.permanentlyFailed);
+    const explicitlyFailed = tasks.filter(t => t.status === 'failed');
+    const allFailed = [...permanentlyFailed, ...explicitlyFailed];
+    // Rule 2: Any in_progress → executing
+    if (inProgress.length > 0)
+        return 'executing';
+    // Rule 3: All pending, nothing else → planning
+    if (pending.length === tasks.length &&
+        genuinelyCompleted.length === 0 &&
+        allFailed.length === 0) {
+        return 'planning';
+    }
+    // Rule 4: Mixed completed + pending (no in_progress, no failures) → executing
+    if (pending.length > 0 && genuinelyCompleted.length > 0 && inProgress.length === 0 && allFailed.length === 0) {
+        return 'executing';
+    }
+    // Rules 6 & 7: Handle failures
+    if (allFailed.length > 0) {
+        // Check if any failed task has retries remaining
+        const hasRetriesRemaining = allFailed.some(t => {
+            const retryCount = t.metadata?.retryCount ?? 0;
+            const maxRetries = t.metadata?.maxRetries ?? 3;
+            return retryCount < maxRetries;
+        });
+        // Rule 7: All tasks are failed and no retries remain
+        if ((allFailed.length === tasks.length && !hasRetriesRemaining) ||
+            (pending.length === 0 && inProgress.length === 0 && genuinelyCompleted.length === 0 && !hasRetriesRemaining)) {
+            return 'failed';
+        }
+        // Rule 6: Some failed but retries available
+        if (hasRetriesRemaining)
+            return 'fixing';
+    }
+    // Rule 8: All genuinely completed, no failures
+    if (genuinelyCompleted.length === tasks.length &&
+        allFailed.length === 0) {
+        return 'completed';
+    }
+    // Rule 9: Fallback
+    return 'executing';
+}
+/**
+ * Get a human-readable log message for a phase transition.
+ */
+export function getPhaseTransitionLog(prev, next) {
+    if (prev === next)
+        return `Phase unchanged: ${next}`;
+    return `Phase transition: ${prev} → ${next}`;
+}
+/**
+ * Check if a phase is terminal (no further transitions expected).
+ */
+export function isTerminalPhase(phase) {
+    return phase === 'completed' || phase === 'failed';
+}
+//# sourceMappingURL=phase-controller.js.map

package/dist/team/phase-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-controller.js","sourceRoot":"","sources":["../../src/team/phase-controller.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAmB/B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAE9C,mBAAmB;IACnB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC1D,oFAAoF;IACpF,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,CACxE,CAAC;IACF,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAChE,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAE9D,sCAAsC;IACtC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IAE9C,+CAA+C;IAC/C,IACE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC/B,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC/B,SAAS,CAAC,MAAM,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7G,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,+BAA+B;IAC/B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,iDAAiD;QACjD,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;YAC/C,OAAO,UAAU,GAAG,UAAU,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,qDAAqD;QACrD,IACE,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC;YAC3D,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAC5G,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,4CAA4C;QAC5C,IAAI,mBAAmB;YAAE,OAAO,QAAQ,CAAC;IAC3C,CAAC;IAED,+CAA+C;IAC/C,IACE,kBAAkB,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC1C,SAAS,CAAC,MAAM,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,mBAAmB;IACnB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAe,EAAE,IAAe;IACpE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,oBAAoB,IAAI,EAAE,CAAC;IACrD,OAAO,qBAAqB,IAAI,MAAM,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC"}

package/dist/team/role-router.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Intent-based role routing for team task assignment.
+ *
+ * Inspects task text to infer lane intent (what kind of work is needed),
+ * then maps that intent to the most appropriate worker role.
+ */
+export type LaneIntent = 'implementation' | 'verification' | 'review' | 'debug' | 'design' | 'docs' | 'build-fix' | 'cleanup' | 'unknown';
+export interface RoleRouterResult {
+    role: string;
+    confidence: 'high' | 'medium' | 'low';
+    reason: string;
+}
+/** Role-to-keyword mapping for keyword-count scoring fallback */
+export declare const ROLE_KEYWORDS: Record<string, RegExp[]>;
+/**
+ * Infer the lane intent from free-form task text.
+ * Returns 'unknown' when no clear signal is found.
+ */
+export declare function inferLaneIntent(text: string): LaneIntent;
+/**
+ * Route a task to the most appropriate role based on intent and domain.
+ *
+ * Priority:
+ * 1. build-fix → 'build-fixer' (high)
+ * 2. debug → 'debugger' (high)
+ * 3. docs → 'writer' (high)
+ * 4. design → 'designer' (high)
+ * 5. cleanup → 'code-simplifier' (high)
+ * 6. review + security domain → 'security-reviewer' (high), else 'quality-reviewer' (high)
+ * 7. verification → 'test-engineer' (high)
+ * 8. implementation + security domain → fallbackRole (stays put)
+ * 9. Keyword-count scoring for ambiguous intents
+ * 10. Unknown → fallbackRole (low)
+ */
+export declare function routeTaskToRole(taskSubject: string, taskDescription: string, fallbackRole: string): RoleRouterResult;
+//# sourceMappingURL=role-router.d.ts.map

package/dist/team/role-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-router.d.ts","sourceRoot":"","sources":["../../src/team/role-router.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,cAAc,GACd,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,GACN,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AA4GD,iEAAiE;AACjE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAUlD,CAAC;AAMF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAYxD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,GACnB,gBAAgB,CA0DlB"}

package/dist/team/role-router.js

@@ -0,0 +1,215 @@
+// src/team/role-router.ts
+// ---------------------------------------------------------------------------
+// Keyword tables
+// ---------------------------------------------------------------------------
+/** Patterns that signal a specific lane intent */
+const INTENT_PATTERNS = [
+    {
+        intent: 'build-fix',
+        patterns: [
+            /\bfix(?:ing)?\s+(?:the\s+)?(?:build|ci|lint|compile|tsc|type.?check)/i,
+            /\bfailing\s+build\b/i,
+            /\bbuild\s+(?:error|fail|broken|fix)/i,
+            /\btsc\s+error/i,
+            /\bcompile\s+error/i,
+            /\bci\s+(?:fail|broken|fix)/i,
+        ],
+    },
+    {
+        intent: 'debug',
+        patterns: [
+            /\bdebug(?:ging)?\b/i,
+            /\btroubleshoot(?:ing)?\b/i,
+            /\binvestigate\b/i,
+            /\broot.?cause\b/i,
+            /\bwhy\s+(?:is|does|did|are)\b/i,
+            /\bdiagnos(?:e|ing)\b/i,
+            /\btrace\s+(?:the|an?)\s+(?:bug|issue|error|problem)/i,
+        ],
+    },
+    {
+        intent: 'docs',
+        patterns: [
+            /\bdocument(?:ation|ing|ation)?\b/i,
+            /\bwrite\s+(?:docs|readme|changelog|comments|jsdoc|tsdoc)/i,
+            /\bupdate\s+(?:docs|readme|changelog)/i,
+            /\badd\s+(?:docs|comments|jsdoc|tsdoc)\b/i,
+            /\breadme\b/i,
+            /\bchangelog\b/i,
+        ],
+    },
+    {
+        intent: 'design',
+        patterns: [
+            /\bdesign\b/i,
+            /\barchitect(?:ure|ing)?\b/i,
+            /\bui\s+(?:design|layout|component)/i,
+            /\bux\b/i,
+            /\bwireframe\b/i,
+            /\bmockup\b/i,
+            /\bprototype\b/i,
+            /\bsystem\s+design\b/i,
+            /\bapi\s+design\b/i,
+        ],
+    },
+    {
+        intent: 'cleanup',
+        patterns: [
+            /\bclean\s*up\b/i,
+            /\brefactor(?:ing)?\b/i,
+            /\bsimplif(?:y|ying)\b/i,
+            /\bdead\s+code\b/i,
+            /\bunused\s+(?:code|import|variable|function)\b/i,
+            /\bremove\s+(?:dead|unused|legacy)\b/i,
+            /\bdebt\b/i,
+        ],
+    },
+    {
+        intent: 'review',
+        patterns: [
+            /\breview\b/i,
+            /\baudit\b/i,
+            /\bpr\s+review\b/i,
+            /\bcode\s+review\b/i,
+            /\bcheck\s+(?:the\s+)?(?:code|pr|pull.?request)\b/i,
+        ],
+    },
+    {
+        intent: 'verification',
+        patterns: [
+            /\btest(?:ing|s)?\b/i,
+            /\bverif(?:y|ication)\b/i,
+            /\bvalidat(?:e|ion)\b/i,
+            /\bunit\s+test\b/i,
+            /\bintegration\s+test\b/i,
+            /\be2e\b/i,
+            /\bspec\b/i,
+            /\bcoverage\b/i,
+            /\bassert(?:ion)?\b/i,
+        ],
+    },
+    {
+        intent: 'implementation',
+        patterns: [
+            /\bimplement(?:ing|ation)?\b/i,
+            /\badd\s+(?:the\s+)?(?:feature|function|method|class|endpoint|route)\b/i,
+            /\bbuild\s+(?:the\s+)?(?:feature|component|module|service|api)\b/i,
+            /\bcreate\s+(?:the\s+)?(?:feature|component|module|service|api|function)\b/i,
+            /\bwrite\s+(?:the\s+)?(?:code|function|class|method|module)\b/i,
+        ],
+    },
+];
+/** Security domain detection */
+const SECURITY_DOMAIN_RE = /\b(?:auth(?:entication|orization)?|cve|injection|owasp|security|vulnerability|vuln|xss|csrf|sqli|rce|privilege.?escalat)\b/i;
+/** Role-to-keyword mapping for keyword-count scoring fallback */
+export const ROLE_KEYWORDS = {
+    'build-fixer': [/\bbuild\b/i, /\bci\b/i, /\bcompile\b/i, /\btsc\b/i, /\blint\b/i],
+    debugger: [/\bdebug\b/i, /\btroubleshoot\b/i, /\binvestigate\b/i, /\bdiagnos/i],
+    writer: [/\bdoc(?:ument)?/i, /\breadme\b/i, /\bchangelog\b/i, /\bcomment/i],
+    designer: [/\bdesign\b/i, /\barchitect/i, /\bui\b/i, /\bux\b/i, /\bwireframe\b/i],
+    'code-simplifier': [/\brefactor/i, /\bclean/i, /\bsimplif/i, /\bdebt\b/i, /\bunused\b/i],
+    'security-reviewer': [/\bsecurity\b/i, /\bvulnerabilit/i, /\bcve\b/i, /\bowasp\b/i, /\bxss\b/i],
+    'quality-reviewer': [/\breview\b/i, /\baudit\b/i, /\bcheck\b/i],
+    'test-engineer': [/\btest/i, /\bverif/i, /\bvalidat/i, /\bspec\b/i, /\bcoverage\b/i],
+    executor: [/\bimplement/i, /\bbuild\b/i, /\bcreate\b/i, /\badd\b/i, /\bwrite\b/i],
+};
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Infer the lane intent from free-form task text.
+ * Returns 'unknown' when no clear signal is found.
+ */
+export function inferLaneIntent(text) {
+    if (!text || text.trim().length === 0)
+        return 'unknown';
+    for (const { intent, patterns } of INTENT_PATTERNS) {
+        for (const pattern of patterns) {
+            if (pattern.test(text)) {
+                return intent;
+            }
+        }
+    }
+    return 'unknown';
+}
+/**
+ * Route a task to the most appropriate role based on intent and domain.
+ *
+ * Priority:
+ * 1. build-fix → 'build-fixer' (high)
+ * 2. debug → 'debugger' (high)
+ * 3. docs → 'writer' (high)
+ * 4. design → 'designer' (high)
+ * 5. cleanup → 'code-simplifier' (high)
+ * 6. review + security domain → 'security-reviewer' (high), else 'quality-reviewer' (high)
+ * 7. verification → 'test-engineer' (high)
+ * 8. implementation + security domain → fallbackRole (stays put)
+ * 9. Keyword-count scoring for ambiguous intents
+ * 10. Unknown → fallbackRole (low)
+ */
+export function routeTaskToRole(taskSubject, taskDescription, fallbackRole) {
+    const combined = `${taskSubject} ${taskDescription}`.trim();
+    const intent = inferLaneIntent(combined);
+    const isSecurityDomain = SECURITY_DOMAIN_RE.test(combined);
+    switch (intent) {
+        case 'build-fix':
+            return { role: 'build-fixer', confidence: 'high', reason: 'build-fix intent detected' };
+        case 'debug':
+            return { role: 'debugger', confidence: 'high', reason: 'debug intent detected' };
+        case 'docs':
+            return { role: 'writer', confidence: 'high', reason: 'docs intent detected' };
+        case 'design':
+            return { role: 'designer', confidence: 'high', reason: 'design intent detected' };
+        case 'cleanup':
+            return { role: 'code-simplifier', confidence: 'high', reason: 'cleanup intent detected' };
+        case 'review':
+            if (isSecurityDomain) {
+                return { role: 'security-reviewer', confidence: 'high', reason: 'review intent with security domain detected' };
+            }
+            return { role: 'quality-reviewer', confidence: 'high', reason: 'review intent detected' };
+        case 'verification':
+            return { role: 'test-engineer', confidence: 'high', reason: 'verification intent detected' };
+        case 'implementation':
+            // Security implementation stays on fallback role — not routed to security-reviewer
+            return {
+                role: fallbackRole,
+                confidence: 'medium',
+                reason: isSecurityDomain
+                    ? 'implementation intent with security domain — stays on fallback role'
+                    : 'implementation intent — using fallback role',
+            };
+        case 'unknown':
+        default: {
+            // Keyword-count scoring fallback
+            const best = scoreByKeywords(combined);
+            if (best) {
+                return {
+                    role: best.role,
+                    confidence: 'medium',
+                    reason: `keyword match (${best.count} hits) for role '${best.role}'`,
+                };
+            }
+            return {
+                role: fallbackRole,
+                confidence: 'low',
+                reason: 'no clear intent signal — using fallback role',
+            };
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function scoreByKeywords(text) {
+    let bestRole = null;
+    let bestCount = 0;
+    for (const [role, patterns] of Object.entries(ROLE_KEYWORDS)) {
+        const count = patterns.filter(p => p.test(text)).length;
+        if (count > bestCount) {
+            bestCount = count;
+            bestRole = role;
+        }
+    }
+    return bestRole && bestCount > 0 ? { role: bestRole, count: bestCount } : null;
+}
+//# sourceMappingURL=role-router.js.map

package/dist/team/role-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-router.js","sourceRoot":"","sources":["../../src/team/role-router.ts"],"names":[],"mappings":"AAAA,0BAA0B;AA0B1B,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,kDAAkD;AAClD,MAAM,eAAe,GAAsD;IACzE;QACE,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE;YACR,uEAAuE;YACvE,sBAAsB;YACtB,sCAAsC;YACtC,gBAAgB;YAChB,oBAAoB;YACpB,6BAA6B;SAC9B;KACF;IACD;QACE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE;YACR,qBAAqB;YACrB,2BAA2B;YAC3B,kBAAkB;YAClB,kBAAkB;YAClB,gCAAgC;YAChC,uBAAuB;YACvB,sDAAsD;SACvD;KACF;IACD;QACE,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,mCAAmC;YACnC,2DAA2D;YAC3D,uCAAuC;YACvC,0CAA0C;YAC1C,aAAa;YACb,gBAAgB;SACjB;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,aAAa;YACb,4BAA4B;YAC5B,qCAAqC;YACrC,SAAS;YACT,gBAAgB;YAChB,aAAa;YACb,gBAAgB;YAChB,sBAAsB;YACtB,mBAAmB;SACpB;KACF;IACD;QACE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE;YACR,iBAAiB;YACjB,uBAAuB;YACvB,wBAAwB;YACxB,kBAAkB;YAClB,iDAAiD;YACjD,sCAAsC;YACtC,WAAW;SACZ;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,aAAa;YACb,YAAY;YACZ,kBAAkB;YAClB,oBAAoB;YACpB,mDAAmD;SACpD;KACF;IACD;QACE,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE;YACR,qBAAqB;YACrB,yBAAyB;YACzB,uBAAuB;YACvB,kBAAkB;YAClB,yBAAyB;YACzB,UAAU;YACV,WAAW;YACX,eAAe;YACf,qBAAqB;SACtB;KACF;IACD;QACE,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE;YACR,8BAA8B;YAC9B,wEAAwE;YACxE,kEAAkE;YAClE,4EAA4E;YAC5E,+DAA+D;SAChE;KACF;CACF,CAAC;AAEF,gCAAgC;AAChC,MAAM,kBAAkB,GACtB,6HAA6H,CAAC;AAEhI,iEAAiE;AACjE,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD,aAAa,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC;IACjF,QAAQ,EAAE,CAAC,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,CAAC;IAC/E,MAAM,EAAE,CAAC,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC;IAC3E,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACjF,iBAAiB,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC;IACxF,mBAAmB,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;IAC/F,kBAAkB,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC;IAC/D,eAAe,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;IACpF,QAAQ,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC;CAClF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAExD,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,eAAuB,EACvB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE3D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAE1F,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAEnF,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAEhF,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAEpF,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAE5F,KAAK,QAAQ;YACX,IAAI,gBAAgB,EAAE,CAAC;gBACrB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YAClH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAE5F,KAAK,cAAc;YACjB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAE/F,KAAK,gBAAgB;YACnB,mFAAmF;YACnF,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,gBAAgB;oBACtB,CAAC,CAAC,qEAAqE;oBACvE,CAAC,CAAC,6CAA6C;aAClD,CAAC;QAEJ,KAAK,SAAS,CAAC;QACf,OAAO,CAAC,CAAC,CAAC;YACR,iCAAiC;YACjC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU,EAAE,QAAQ;oBACpB,MAAM,EAAE,kBAAkB,IAAI,CAAC,KAAK,oBAAoB,IAAI,CAAC,IAAI,GAAG;iBACrE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,8CAA8C;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,SAAS,GAAG,KAAK,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC"}

package/dist/team/runtime-cli.d.ts

@@ -0,0 +1,33 @@
+/**
+ * CLI entry point for team runtime.
+ * Reads JSON config from stdin, runs startTeam/monitorTeam/shutdownTeam,
+ * writes structured JSON result to stdout.
+ *
+ * Bundled as CJS via esbuild (scripts/build-runtime-cli.mjs).
+ */
+interface TaskResult {
+    taskId: string;
+    status: string;
+    summary: string;
+}
+interface CliOutput {
+    status: 'completed' | 'failed';
+    teamName: string;
+    taskResults: TaskResult[];
+    duration: number;
+    workerCount: number;
+}
+type TerminalStatus = 'completed' | 'failed' | null;
+export declare function getTerminalStatus(taskCounts: {
+    pending: number;
+    inProgress: number;
+    completed: number;
+    failed: number;
+}, expectedTaskCount: number): TerminalStatus;
+export declare function checkWatchdogFailedMarker(stateRoot: string, startTime: number): Promise<{
+    failed: boolean;
+    reason?: string;
+}>;
+export declare function writeResultArtifact(output: CliOutput, finishedAt: string, jobId?: string | undefined, omcJobsDir?: string | undefined): Promise<void>;
+export {};
+//# sourceMappingURL=runtime-cli.d.ts.map

package/dist/team/runtime-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-cli.d.ts","sourceRoot":"","sources":["../../src/team/runtime-cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA0BH,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,SAAS;IACjB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD,KAAK,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEpD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACtF,iBAAiB,EAAE,MAAM,GACxB,cAAc,CAKhB;AAaD,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoC/C;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAM,GAAG,SAAkC,EAClD,UAAU,GAAE,MAAM,GAAG,SAAoC,GACxD,OAAO,CAAC,IAAI,CAAC,CAUf"}