@starlein/paperclip-plugin-company-wizard 0.4.2 → 0.4.5

package/dist/worker.js

@@ -9282,6 +9282,7 @@ import { join } from "node:path";
 var DEFAULT_CEO_ADAPTER_TYPE = "codex_local";
 var DEFAULT_CEO_MODEL = "gpt-5.5";
 var DEFAULT_CEO_THINKING_LEVEL = "high";
+var DEFAULT_WORKER_THINKING_LEVEL = "medium";
 var DEFAULT_CEO_MAX_CONCURRENT_RUNS = 1;
 var DEFAULT_CEO_HEARTBEAT_INTERVAL_SEC = 3600;
 var DEFAULT_CLAUDE_CEO_MODEL = "claude-opus-4-6";
@@ -9291,10 +9292,12 @@ function asTrimmedString(value) {
 function normalizeCeoAdapterType(userCeoAdapter = {}) {
   return asTrimmedString(userCeoAdapter.type) || DEFAULT_CEO_ADAPTER_TYPE;
 }
-function buildCeoAdapterConfig({
+function buildAdapterConfig({
   userCeoAdapter = {},
   companyDir,
-  roleAdapterOverrides = {}
+  roleAdapterOverrides = {},
+  defaultThinkingLevel = DEFAULT_CEO_THINKING_LEVEL,
+  inheritUserThinking = true
 } = {}) {
   const adapterType = normalizeCeoAdapterType(userCeoAdapter);
   const userCwd = asTrimmedString(userCeoAdapter.cwd);
@@ -9302,7 +9305,8 @@ function buildCeoAdapterConfig({
   const overrideModel = asTrimmedString(roleAdapterOverrides.model);
   const defaultModel = adapterType === "claude_local" ? DEFAULT_CLAUDE_CEO_MODEL : DEFAULT_CEO_MODEL;
   const model = userModel || overrideModel || defaultModel;
-  const thinkingLevel = asTrimmedString(userCeoAdapter.thinkingLevel) || asTrimmedString(userCeoAdapter.modelReasoningEffort) || asTrimmedString(userCeoAdapter.reasoningEffort) || asTrimmedString(roleAdapterOverrides.thinkingLevel) || asTrimmedString(roleAdapterOverrides.modelReasoningEffort) || asTrimmedString(roleAdapterOverrides.reasoningEffort) || DEFAULT_CEO_THINKING_LEVEL;
+  const userThinking = inheritUserThinking ? asTrimmedString(userCeoAdapter.thinkingLevel) || asTrimmedString(userCeoAdapter.modelReasoningEffort) || asTrimmedString(userCeoAdapter.reasoningEffort) : "";
+  const thinkingLevel = userThinking || asTrimmedString(roleAdapterOverrides.thinkingLevel) || asTrimmedString(roleAdapterOverrides.modelReasoningEffort) || asTrimmedString(roleAdapterOverrides.reasoningEffort) || defaultThinkingLevel;
   const adapterConfig = {
     ...roleAdapterOverrides,
     cwd: userCwd || companyDir,
@@ -9319,6 +9323,20 @@ function buildCeoAdapterConfig({
   }
   return adapterConfig;
 }
+function buildCeoAdapterConfig(opts = {}) {
+  return buildAdapterConfig({
+    ...opts,
+    defaultThinkingLevel: DEFAULT_CEO_THINKING_LEVEL,
+    inheritUserThinking: true
+  });
+}
+function buildWorkerAdapterConfig(opts = {}) {
+  return buildAdapterConfig({
+    ...opts,
+    defaultThinkingLevel: DEFAULT_WORKER_THINKING_LEVEL,
+    inheritUserThinking: false
+  });
+}
 function buildCeoAgentRuntimeConfig() {
   return {
     heartbeat: {
@@ -9539,7 +9557,18 @@ async function assembleCompany({
       reviewers.push(role);
     }
     const approver = typeof reviewGate.approver === "string" && allRoles.has(reviewGate.approver) ? reviewGate.approver : void 0;
-    const mergeGate = typeof reviewGate.mergeGate === "string" && allRoles.has(reviewGate.mergeGate) ? reviewGate.mergeGate : void 0;
+    let mergeGate = typeof reviewGate.mergeGate === "string" && allRoles.has(reviewGate.mergeGate) ? reviewGate.mergeGate : void 0;
+    if (!mergeGate) {
+      const mergeGateFallbacks = [
+        "code-reviewer",
+        "devops",
+        "ui-designer",
+        "ux-researcher",
+        "security-engineer",
+        "qa"
+      ];
+      mergeGate = mergeGateFallbacks.find((role) => allRoles.has(role) && role !== approver);
+    }
     if (approver) {
       const idx = reviewers.indexOf(approver);
       if (idx !== -1) reviewers.splice(idx, 1);
@@ -9561,11 +9590,12 @@ async function assembleCompany({
     if (gate.mergeGate) {
       const gatePrecondition = hasCi ? "CI must be green before merge" : "no CI configured \u2014 run the test suite/build and paste the output before merge";
       stages.push(
-        `  - stage ${stages.length + 1} (approval) \u2192 assign ${JSON.stringify(gate.mergeGate)}  \u2014 merge gate: ${gatePrecondition}; merge the PR, then record approved to close`
+        `  - stage ${stages.length + 1} (approval) \u2192 assign ${JSON.stringify(gate.mergeGate)}  \u2014 merge gate (non-author): ${gatePrecondition}; merge the PR, then record approved to close`
       );
     }
     return `- **executionPolicy** (set when creating this issue; resolve each role to its agentId):
 ${stages.join("\n")}
+  - never assign the issue's executor/author to any stage \u2014 Paperclip excludes the original executor, so a self-stage has no eligible participant and the issue stalls (422); the merge gate must be a non-author
   - every verdict must cite executed verification (commands + results); "looks good" without evidence is not a valid verdict
 
 `;
@@ -10299,8 +10329,8 @@ Read: \`docs/${doc}\`
     bootstrap += `- Do not reuse parent workspaces for subissues unless explicitly requested.
 `;
     if (moduleNames.includes("pr-review")) {
-      const ciClause = hasCi ? "CI (lint/test/build) must be green before the Engineer merges \u2014 this is the hard gate and cannot be skipped" : "no CI is configured, so the Engineer must run the test suite/build and paste the real output into the merge-gate verdict before merging \u2014 this is the hard gate";
-      bootstrap += `- Required PR reviews use the issue's \`executionPolicy\`. The substantive gate is execution, not opinion: ${ciClause}. Stages, in order: a \`review\` stage for QA when present (test adequacy / running the tests), a \`review\` stage for the Security Engineer **only when the change is security-relevant** (auth, secrets, input boundaries, crypto, dependencies, infra exposure), an \`approval\` stage for the Product Owner (intent/scope), then a final \`approval\` merge-gate stage for the Engineer (who satisfies the hard gate above, merges the PR, then records approval to close the issue). The merge gate must be last so the Product Owner's approval does not auto-close the issue with the PR still open. The Code Reviewer and other domain reviewers may add advisory, non-blocking comments but do not gate the merge. Every verdict must cite executed verification. Resolve each role to its agentId. Model review stages in executionPolicy rather than child issues or @-mentions.
+      const ciClause = hasCi ? "CI (lint/test/build) must be green before the merge gate merges \u2014 this is the hard gate and cannot be skipped" : "no CI is configured, so the merge-gate agent must run the test suite/build and paste the real output into the merge-gate verdict before merging \u2014 this is the hard gate";
+      bootstrap += `- Required PR reviews use the issue's \`executionPolicy\`. The substantive gate is execution, not opinion: ${ciClause}. Stages, in order: a \`review\` stage for QA when present (test adequacy / running the tests), a \`review\` stage for the Security Engineer **only when the change is security-relevant** (auth, secrets, input boundaries, crypto, dependencies, infra exposure), an \`approval\` stage for the Product Owner (intent/scope), then a final \`approval\` merge-gate stage for the **Code Reviewer** (a non-author who satisfies the hard gate above, merges the PR, then records approval to close the issue). **Never list the issue's executor/author as a participant in any stage** \u2014 Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author has no eligible participant and the issue stalls in \`in_review\` (422 No eligible approval participant); this is why the merge gate is the Code Reviewer (or another present non-author), not the engineer who wrote the code. The merge gate must be last so the Product Owner's approval does not auto-close the issue with the PR still open. Other domain reviewers may add advisory, non-blocking comments but do not gate the merge. Every verdict must cite executed verification. Resolve each role to its agentId. Model review stages in executionPolicy rather than child issues or @-mentions.
 `;
     }
     bootstrap += `
@@ -10939,7 +10969,7 @@ var __dirname = path2.dirname(fileURLToPath2(import.meta.url));
 var DEFAULT_TEMPLATES_REPO_URL = "https://github.com/starlein/paperclip-plugin-company-wizard/tree/main/templates";
 var BUNDLED_TEMPLATES_DIR = path2.resolve(__dirname, "..", "templates");
 var PLUGIN_PACKAGE_NAME = "@starlein/paperclip-plugin-company-wizard";
-var CURRENT_PLUGIN_VERSION = "0.4.2";
+var CURRENT_PLUGIN_VERSION = "0.4.5";
 var NPM_LATEST_URL = "https://registry.npmjs.org/@starlein%2Fpaperclip-plugin-company-wizard/latest";
 function copyDirSync(src, dest) {
   fs2.mkdirSync(dest, { recursive: true });
@@ -11266,23 +11296,36 @@ function buildHiringPlanBody({
 
 Generated by Company Wizard on ${today}.
 
-## Instruction Source
+## Status: initial team already provisioned
+
+Company Wizard has already submitted the initial team below as **governed hires**
+via \`/agent-hires\` (each with a full instruction bundle assembled from curated role
+templates). Where the board requires approval, those hires are pending your approval \u2014
+they were **not** auto-approved.
+
+**This issue is your review checkpoint \u2014 not a re-hiring task.** Do not create the
+roles below again.
+
+## Your tasks
 
-Company Wizard uses curated role templates from its template library. When proposing additional hires after bootstrap, follow the Paperclip \`paperclip-create-agent\` workflow: choose an exact, adjacent, or generic template; run the draft-review checklist; submit via \`/agent-hires\`; link this issue as \`sourceIssueId\`; and wait for board approval when required.
+1. **Review each provisioned agent against the draft-review checklist** (Paperclip
+   \`paperclip-create-agent\` \u2192 \`references/draft-review-checklist.md\`): instruction
+   quality, correct adapter/model/thinking level, escalation/reportsTo path, and
+   desiredSkills justification. Note any corrections in the decision log.
+2. **Approve or reject** the pending hires accordingly.
+3. **Only hire for genuine gaps.** If a capability is missing after the first
+   roadmap/backlog pass, follow the \`paperclip-create-agent\` workflow: pick an exact,
+   adjacent, or generic template, run the draft-review checklist, submit via
+   \`/agent-hires\` with a concrete AGENTS.md draft + adapter config + desiredSkills
+   justification, and set \`sourceIssueId\` to this issue.
 
-## Initial Roles
+## Initial Roles (already provisioned)
 
 ${roles.map((role) => `- ${formatRoleName(role)}`).join("\n")}
 
 ## Selected Modules
 
 ${moduleNames.length > 0 ? moduleNames.map((mod) => `- ${mod}`).join("\n") : "- none"}
-
-## Follow-up Review
-
-- Reassess capacity after the first roadmap/backlog pass.
-- Do not hire for capabilities already covered by existing roles.
-- If a gap remains, submit a governed hire request with a concrete AGENTS.md draft, adapter config, desiredSkills justification, and sourceIssueId pointing to this hiring plan issue.
 `;
 }
 var plugin = definePlugin({
@@ -11774,6 +11817,20 @@ var plugin = definePlugin({
             fallbackEntryContent: ceoPromptTemplate,
             log
           });
+          for (const govIssue of [
+            { issue: boardOperationsIssue, label: "Board Operations" },
+            { issue: hiringPlanIssue, label: "Hiring Plan" }
+          ]) {
+            if (!govIssue.issue?.id) continue;
+            try {
+              await client.updateIssue(govIssue.issue.id, { assigneeAgentId: ceoAgentId });
+              log(`\u2713 Assigned ${govIssue.label} issue to CEO`);
+            } catch (assignErr) {
+              log(
+                `\u26A0 Could not assign ${govIssue.label} issue to CEO: ${assignErr instanceof Error ? assignErr.message : String(assignErr)}`
+              );
+            }
+          }
           const teamRoles = [...assembleResult.allRoles ?? []].filter(
             (r) => r && r !== "ceo"
           );
@@ -11799,7 +11856,7 @@ var plugin = definePlugin({
               ...roleDescription ? { description: roleDescription } : {}
             };
             const roleRuntimeConfig = buildWorkerAgentRuntimeConfig();
-            const roleAdapterConfig = buildCeoAdapterConfig({
+            const roleAdapterConfig = buildWorkerAdapterConfig({
               userCeoAdapter,
               companyDir,
               roleAdapterOverrides: assembleResult.roleAdapterOverrides?.get(roleName) ?? {}