agent-contracts 0.14.1 → 0.15.0

package/dist/cli.js

@@ -50427,7 +50427,7 @@ var require_dist13 = __commonJS({
 // src/cli/cli.ts
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
-import { resolve as resolve7, dirname as dirname7 } from "path";
+import { resolve as resolve7, dirname as dirname8 } from "path";
 import { Command as Command8 } from "commander";
 
 // src/cli/commands/resolve.ts
@@ -50961,13 +50961,51 @@ var RenderTargetSchema = z15.object({
   },
   { message: "include/exclude cannot be used with context: system" }
 );
+var TeamConfigSchema = z15.object({
+  dsl: z15.string().optional(),
+  bindings: z15.array(z15.string()).default([]),
+  vars: z15.record(z15.string(), z15.string()).optional(),
+  paths: z15.record(z15.string(), z15.string()).optional(),
+  active_guardrail_policy: z15.string().optional(),
+  interface_output: z15.string().optional()
+});
 var AgentContractsConfigSchema = z15.object({
-  dsl: z15.string(),
+  dsl: z15.string().optional(),
   vars: z15.record(z15.string(), z15.string()).optional(),
   renders: z15.array(RenderTargetSchema).default([]),
   bindings: z15.array(z15.string()).default([]),
   active_guardrail_policy: z15.string().optional(),
-  paths: z15.record(z15.string(), z15.string()).optional()
+  paths: z15.record(z15.string(), z15.string()).optional(),
+  teams: z15.record(z15.string(), TeamConfigSchema).optional()
+}).superRefine((data, ctx) => {
+  if (data.dsl !== void 0 && data.teams !== void 0) {
+    ctx.addIssue({
+      code: z15.ZodIssueCode.custom,
+      message: "dsl and teams are mutually exclusive",
+      path: ["teams"]
+    });
+    return;
+  }
+  if (data.dsl === void 0 && data.teams === void 0) {
+    ctx.addIssue({
+      code: z15.ZodIssueCode.custom,
+      message: "Either dsl or teams must be specified",
+      path: []
+    });
+    return;
+  }
+  if (data.teams) {
+    for (const [key, team] of Object.entries(data.teams)) {
+      if (key === "_defaults") continue;
+      if (team.dsl === void 0) {
+        ctx.addIssue({
+          code: z15.ZodIssueCode.custom,
+          message: `Team "${key}" must specify dsl`,
+          path: ["teams", key, "dsl"]
+        });
+      }
+    }
+  }
 });
 
 // src/config/loader.ts
@@ -50988,6 +51026,27 @@ async function fileExists(filePath) {
     return false;
   }
 }
+function resolveTeamConfigs(teams, configDir) {
+  const defaults = teams._defaults;
+  const result = {};
+  for (const [key, team] of Object.entries(teams)) {
+    if (key === "_defaults") continue;
+    const mergedBindings = [...defaults?.bindings ?? [], ...team.bindings].map(
+      (b3) => resolve(configDir, b3)
+    );
+    const mergedVars = defaults?.vars || team.vars ? { ...defaults?.vars ?? {}, ...team.vars ?? {} } : void 0;
+    const mergedPaths = defaults?.paths || team.paths ? { ...defaults?.paths ?? {}, ...team.paths ?? {} } : void 0;
+    result[key] = {
+      dsl: resolve(configDir, team.dsl),
+      bindings: mergedBindings,
+      vars: mergedVars,
+      activeGuardrailPolicy: team.active_guardrail_policy ?? defaults?.active_guardrail_policy,
+      paths: mergedPaths,
+      interfaceOutput: team.interface_output ? resolve(configDir, team.interface_output) : void 0
+    };
+  }
+  return result;
+}
 async function loadConfig(configPath) {
   const isExplicit = configPath !== void 0;
   const targetPath = resolve(configPath ?? DEFAULT_CONFIG_NAME);
@@ -51030,14 +51089,27 @@ ${issues}`,
   }
   const configDir = dirname(targetPath);
   const config = result.data;
+  const renders = config.renders.map((r3) => ({
+    ...r3,
+    template: resolve(configDir, r3.template),
+    output: resolve(configDir, r3.output)
+  }));
+  if (config.teams) {
+    return {
+      dsl: "",
+      vars: void 0,
+      renders,
+      configDir,
+      bindings: [],
+      activeGuardrailPolicy: void 0,
+      paths: void 0,
+      teams: resolveTeamConfigs(config.teams, configDir)
+    };
+  }
   return {
     dsl: resolve(configDir, config.dsl),
     vars: config.vars,
-    renders: config.renders.map((r3) => ({
-      ...r3,
-      template: resolve(configDir, r3.template),
-      output: resolve(configDir, r3.output)
-    })),
+    renders,
     configDir,
     bindings: (config.bindings ?? []).map((b3) => resolve(configDir, b3)),
     activeGuardrailPolicy: config.active_guardrail_policy,
@@ -51859,28 +51931,79 @@ ${issues}`,
 
 // src/cli/commands/resolve.ts
 import { stringify } from "yaml";
-var DIR_DEFAULT = "agent-contracts.yaml";
-var resolveCommand = new Command("resolve").description("Resolve DSL (load + merge extends) and output YAML").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--format <format>", "Output format (text|json)", "text").option("--expand-defaults", "Expand all Zod default values in output", false).action(async (dir, opts) => {
-  try {
-    const config = await loadConfig(opts.config);
-    const dslPath = resolveDslPath(dir, DIR_DEFAULT, config);
-    const result = await resolve4(dslPath);
-    let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
-    if (opts.expandDefaults) {
-      data = expandDefaults(data);
-    }
-    if (opts.format === "json") {
-      process.stdout.write(JSON.stringify(data, null, 2) + "\n");
-    } else {
-      process.stdout.write(stringify(data));
+
+// src/cli/multi-team.ts
+function isMultiTeamConfig(config) {
+  return config.teams !== void 0 && Object.keys(config.teams).length > 0;
+}
+function getTeamEntries(config, teamFilter) {
+  if (!config.teams) return [];
+  const entries = Object.entries(config.teams);
+  if (teamFilter) {
+    const found = entries.filter(([k2]) => k2 === teamFilter);
+    if (found.length === 0) {
+      throw new Error(
+        `Team "${teamFilter}" not found. Available teams: ${entries.map(([k2]) => k2).join(", ")}`
+      );
     }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`Error: ${msg}
+    return found;
+  }
+  return entries;
+}
+
+// src/cli/commands/resolve.ts
+var DIR_DEFAULT = "agent-contracts.yaml";
+var resolveCommand = new Command("resolve").description("Resolve DSL (load + merge extends) and output YAML").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--expand-defaults", "Expand all Zod default values in output", false).action(
+  async (dir, opts) => {
+    try {
+      const config = await loadConfig(opts.config);
+      if (config !== null && isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        if (opts.format === "json") {
+          const out = {};
+          for (const [teamId, teamConfig] of teamEntries) {
+            const result2 = await resolve4(teamConfig.dsl);
+            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+            if (opts.expandDefaults) {
+              data2 = expandDefaults(data2);
+            }
+            out[teamId] = data2;
+          }
+          process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+        } else {
+          for (const [teamId, teamConfig] of teamEntries) {
+            process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+            const result2 = await resolve4(teamConfig.dsl);
+            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+            if (opts.expandDefaults) {
+              data2 = expandDefaults(data2);
+            }
+            process.stdout.write(stringify(data2));
+          }
+        }
+        return;
+      }
+      const dslPath = resolveDslPath(dir, DIR_DEFAULT, config);
+      const result = await resolve4(dslPath);
+      let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
+      if (opts.expandDefaults) {
+        data = expandDefaults(data);
+      }
+      if (opts.format === "json") {
+        process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+      } else {
+        process.stdout.write(stringify(data));
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Error: ${msg}
 `);
-    process.exit(1);
+      process.exit(1);
+    }
   }
-});
+);
 
 // src/cli/commands/validate.ts
 import { Command as Command2 } from "commander";
@@ -52960,44 +53083,88 @@ function formatDiagnostics(diagnostics, options) {
 
 // src/cli/commands/validate.ts
 var DIR_DEFAULT2 = "agent-contracts.yaml";
-var validateCommand = new Command2("validate").description("Validate DSL against schema and check references").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT2).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(async (dir, opts) => {
-  try {
-    const config = await loadConfig(opts.config);
-    const dslPath = resolveDslPath(dir, DIR_DEFAULT2, config);
-    const resolved = await resolve4(dslPath);
-    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-    const schemaResult = validateSchema(data);
-    const schemaWarnings = schemaResult.diagnostics.filter(
-      (d2) => d2.severity === "warning"
-    );
-    if (!schemaResult.success) {
-      const output = formatDiagnostics(schemaResult.diagnostics, opts);
-      if (output) process.stderr.write(output + "\n");
-      process.exit(1);
-    }
-    const refDiags = checkReferences(schemaResult.data);
-    const handoffDiags = validateHandoffSchemas(schemaResult.data);
-    const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
-    const hasWarnings = allDiags.some(
-      (d2) => "severity" in d2 && d2.severity === "warning"
-    );
-    if (allDiags.length > 0) {
-      const output = formatDiagnostics(allDiags, opts);
-      if (output) process.stderr.write(output + "\n");
-      if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
+var validateCommand = new Command2("validate").description("Validate DSL against schema and check references").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT2).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
+  async (dir, opts) => {
+    try {
+      const config = await loadConfig(opts.config);
+      if (config !== null && isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        let hasErrors = false;
+        let allTeamsFullyClean = true;
+        for (const [teamId, teamConfig] of teamEntries) {
+          if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          const schemaWarnings2 = schemaResult2.diagnostics.filter(
+            (d2) => d2.severity === "warning"
+          );
+          if (!schemaResult2.success) {
+            const output = formatDiagnostics(schemaResult2.diagnostics, opts);
+            if (output) process.stderr.write(output + "\n");
+            hasErrors = true;
+            allTeamsFullyClean = false;
+            continue;
+          }
+          const refDiags2 = checkReferences(schemaResult2.data);
+          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+          const allDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+          const hasWarnings2 = allDiags2.some(
+            (d2) => "severity" in d2 && d2.severity === "warning"
+          );
+          if (allDiags2.length > 0) {
+            allTeamsFullyClean = false;
+            const output = formatDiagnostics(allDiags2, opts);
+            if (output) process.stderr.write(output + "\n");
+            if (refDiags2.length > 0 || handoffDiags2.length > 0 || opts.strict && hasWarnings2) {
+              hasErrors = true;
+            }
+          }
+        }
+        if (hasErrors) process.exit(1);
+        if (!opts.quiet && allTeamsFullyClean) {
+          process.stdout.write("Validation passed.\n");
+        }
+        return;
+      }
+      const dslPath = resolveDslPath(dir, DIR_DEFAULT2, config);
+      const resolved = await resolve4(dslPath);
+      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+      const schemaResult = validateSchema(data);
+      const schemaWarnings = schemaResult.diagnostics.filter(
+        (d2) => d2.severity === "warning"
+      );
+      if (!schemaResult.success) {
+        const output = formatDiagnostics(schemaResult.diagnostics, opts);
+        if (output) process.stderr.write(output + "\n");
         process.exit(1);
       }
-    }
-    if (!opts.quiet && allDiags.length === 0) {
-      process.stdout.write("Validation passed.\n");
-    }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`Error: ${msg}
+      const refDiags = checkReferences(schemaResult.data);
+      const handoffDiags = validateHandoffSchemas(schemaResult.data);
+      const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
+      const hasWarnings = allDiags.some(
+        (d2) => "severity" in d2 && d2.severity === "warning"
+      );
+      if (allDiags.length > 0) {
+        const output = formatDiagnostics(allDiags, opts);
+        if (output) process.stderr.write(output + "\n");
+        if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
+          process.exit(1);
+        }
+      }
+      if (!opts.quiet && allDiags.length === 0) {
+        process.stdout.write("Validation passed.\n");
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`Error: ${msg}
 `);
-    process.exit(1);
+      process.exit(1);
+    }
   }
-});
+);
 
 // src/cli/commands/lint.ts
 import { Command as Command3 } from "commander";
@@ -54395,10 +54562,63 @@ async function spectralLint(dslObject) {
 
 // src/cli/commands/lint.ts
 var DIR_DEFAULT3 = "agent-contracts.yaml";
-var lintCommand = new Command3("lint").description("Run semantic lint rules on resolved DSL").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT3).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
+var lintCommand = new Command3("lint").description("Run semantic lint rules on resolved DSL").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT3).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
   async (dir, opts) => {
     try {
       const config = await loadConfig(opts.config);
+      if (config !== null && isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        let hasErrors = false;
+        let allClean = true;
+        for (const [teamId, teamConfig] of teamEntries) {
+          if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          const schemaWarnings2 = schemaResult2.diagnostics.filter(
+            (d2) => d2.severity === "warning"
+          );
+          if (!schemaResult2.success) {
+            const output = formatDiagnostics(schemaResult2.diagnostics, {
+              format: opts.format,
+              quiet: opts.quiet
+            });
+            if (output) process.stderr.write(output + "\n");
+            hasErrors = true;
+            allClean = false;
+            continue;
+          }
+          const tsDiagnostics2 = lint(schemaResult2.data);
+          const spectralDiagnostics2 = await spectralLint(
+            schemaResult2.data
+          );
+          const diagnostics2 = [
+            ...tsDiagnostics2,
+            ...spectralDiagnostics2,
+            ...schemaWarnings2
+          ];
+          if (diagnostics2.length > 0) {
+            allClean = false;
+            const output = formatDiagnostics(diagnostics2, {
+              format: opts.format,
+              quiet: opts.quiet
+            });
+            if (output) process.stderr.write(output + "\n");
+            const teamHasErrors = diagnostics2.some((d2) => d2.severity === "error");
+            const teamHasWarnings = diagnostics2.some((d2) => d2.severity === "warning");
+            if (teamHasErrors || opts.strict && teamHasWarnings) {
+              hasErrors = true;
+            }
+          }
+        }
+        if (hasErrors) process.exit(1);
+        if (!opts.quiet && allClean) {
+          process.stdout.write("Lint passed.\n");
+        }
+        return;
+      }
       const dslPath = resolveDslPath(dir, DIR_DEFAULT3, config);
       const resolved = await resolve4(dslPath);
       const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
@@ -55832,7 +56052,7 @@ async function checkDriftFromConfig(dsl, renderTargets, options) {
 }
 
 // src/cli/commands/render.ts
-var renderCommand = new Command4("render").description("Render resolved DSL with Handlebars templates (requires config)").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--check", "Check for drift without writing files", false).option("--quiet", "Suppress output on success", false).action(
+var renderCommand = new Command4("render").description("Render resolved DSL with Handlebars templates (requires config)").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--check", "Check for drift without writing files", false).option("--quiet", "Suppress output on success", false).action(
   async (opts) => {
     try {
       const config = await loadConfig(opts.config);
@@ -55842,6 +56062,68 @@ var renderCommand = new Command4("render").description("Render resolved DSL with
         );
         process.exit(1);
       }
+      if (isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        for (const [teamId, teamConfig] of teamEntries) {
+          if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          if (!schemaResult2.success) {
+            process.stderr.write(
+              `Schema validation failed for team ${teamId}. Run 'agent-contracts validate' for details.
+`
+            );
+            process.exit(1);
+          }
+          let renderOptions2;
+          if (teamConfig.bindings.length > 0) {
+            const loadedBindings = await loadBindings(teamConfig.bindings);
+            renderOptions2 = {
+              loadedBindings,
+              activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
+            };
+          }
+          if (opts.check) {
+            const drift = await checkDriftFromConfig(
+              schemaResult2.data,
+              config.renders,
+              renderOptions2
+            );
+            if (drift.hasDrift) {
+              process.stderr.write(
+                `Drift detected for team ${teamId} in the following files:
+`
+              );
+              for (const f2 of drift.diffs) {
+                process.stderr.write(`  ${f2}
+`);
+              }
+              process.exit(1);
+            }
+            if (!opts.quiet) {
+              process.stdout.write("No drift detected.\n");
+            }
+          } else {
+            const files = await renderFromConfig(
+              schemaResult2.data,
+              config.renders,
+              renderOptions2
+            );
+            if (!opts.quiet) {
+              process.stdout.write(`Rendered ${files.length} file(s):
+`);
+              for (const f2 of files) {
+                process.stdout.write(`  ${f2}
+`);
+              }
+            }
+          }
+        }
+        return;
+      }
       const resolved = await resolve4(config.dsl);
       const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
       const schemaResult = validateSchema(data);
@@ -55907,7 +56189,9 @@ var renderCommand = new Command4("render").description("Render resolved DSL with
 
 // src/cli/commands/check.ts
 import { Command as Command5 } from "commander";
-var checkCommand = new Command5("check").description("Run full pipeline: resolve \u2192 validate \u2192 lint \u2192 render --check").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
+import { access as access2 } from "fs/promises";
+import { resolve as pathResolve, dirname as dirname6 } from "path";
+var checkCommand = new Command5("check").description("Run full pipeline: resolve \u2192 validate \u2192 lint \u2192 render --check").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
   async (opts) => {
     let hasErrors = false;
     try {
@@ -55918,6 +56202,111 @@ var checkCommand = new Command5("check").description("Run full pipeline: resolve
         );
         process.exit(1);
       }
+      if (isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        for (const [teamId, teamConfig] of teamEntries) {
+          if (!opts.quiet) process.stderr.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          const schemaWarnings2 = schemaResult2.diagnostics.filter(
+            (d2) => d2.severity === "warning"
+          );
+          if (!schemaResult2.success) {
+            const output = formatDiagnostics(schemaResult2.diagnostics, {
+              format: opts.format,
+              quiet: opts.quiet
+            });
+            if (output) process.stderr.write(output + "\n");
+            hasErrors = true;
+            continue;
+          }
+          const refDiags2 = checkReferences(schemaResult2.data);
+          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+          const allRefDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+          if (allRefDiags2.length > 0) {
+            const output = formatDiagnostics(allRefDiags2, {
+              format: opts.format,
+              quiet: opts.quiet
+            });
+            if (output) process.stderr.write(output + "\n");
+            hasErrors = true;
+          }
+          const tsLintDiags2 = lint(schemaResult2.data);
+          const spectralDiags2 = await spectralLint(
+            schemaResult2.data
+          );
+          const lintDiags2 = [...tsLintDiags2, ...spectralDiags2];
+          if (lintDiags2.length > 0) {
+            const output = formatDiagnostics(lintDiags2, {
+              format: opts.format,
+              quiet: opts.quiet
+            });
+            if (output) process.stderr.write(output + "\n");
+            if (lintDiags2.some((d2) => d2.severity === "error")) {
+              hasErrors = true;
+            }
+            if (opts.strict && lintDiags2.some((d2) => d2.severity === "warning")) {
+              hasErrors = true;
+            }
+          }
+          let renderOptions2;
+          if (teamConfig.bindings.length > 0) {
+            const loadedBindings = await loadBindings(teamConfig.bindings);
+            renderOptions2 = {
+              loadedBindings,
+              activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
+            };
+          }
+          const drift2 = await checkDriftFromConfig(
+            schemaResult2.data,
+            config.renders,
+            renderOptions2
+          );
+          if (drift2.hasDrift) {
+            process.stderr.write(`Drift detected for team ${teamId} in:
+`);
+            for (const f2 of drift2.diffs) {
+              process.stderr.write(`  ${f2}
+`);
+            }
+            hasErrors = true;
+          }
+        }
+        if (!hasErrors) {
+          for (const [teamId, teamConfig] of teamEntries) {
+            const resolved2 = await resolve4(teamConfig.dsl);
+            const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+            const schemaResult2 = validateSchema(data2);
+            if (!schemaResult2.success || !schemaResult2.data) continue;
+            const dsl = schemaResult2.data;
+            const imports = dsl.imports;
+            if (!imports) continue;
+            for (const [importName, importDef] of Object.entries(imports)) {
+              const interfacePathRel = importDef?.interface;
+              if (typeof interfacePathRel !== "string") continue;
+              const interfacePath = pathResolve(
+                dirname6(teamConfig.dsl),
+                interfacePathRel
+              );
+              try {
+                await access2(interfacePath);
+              } catch {
+                process.stderr.write(
+                  `Cross-team error: Team "${teamId}" imports "${importName}" but interface file not found: ${interfacePath}
+`
+                );
+                hasErrors = true;
+              }
+            }
+          }
+        }
+        if (hasErrors) process.exit(1);
+        if (!opts.quiet) process.stdout.write("All checks passed.\n");
+        return;
+      }
       const resolved = await resolve4(config.dsl);
       const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
       const schemaResult = validateSchema(data);
@@ -56005,7 +56394,7 @@ import { Command as Command6 } from "commander";
 
 // src/guardrail-generator/generator.ts
 import { readFile as readFile5, writeFile as writeFile2, mkdir as mkdir2, chmod, unlink as unlink2, copyFile } from "fs/promises";
-import { resolve as resolve6, dirname as dirname6 } from "path";
+import { resolve as resolve6, dirname as dirname7 } from "path";
 import Handlebars2 from "handlebars";
 import YAML from "yaml";
 
@@ -56232,7 +56621,7 @@ async function generateGuardrails(options) {
         const sourcePath = resolve6(config.configDir, outputDef.source);
         if (!dryRun) {
           try {
-            await mkdir2(dirname6(targetPath), { recursive: true });
+            await mkdir2(dirname7(targetPath), { recursive: true });
             await copyFile(sourcePath, targetPath);
             if (outputDef.executable) {
               await chmod(targetPath, 493);
@@ -56316,7 +56705,7 @@ async function generateGuardrails(options) {
           }
           const output = isPatch && !dryRun ? await applyPatch(groupTarget, rendered, outputDef) : rendered;
           if (!dryRun) {
-            await mkdir2(dirname6(groupTarget), { recursive: true });
+            await mkdir2(dirname7(groupTarget), { recursive: true });
             await writeFile2(groupTarget, output, "utf8");
             if (outputDef.executable) {
               await chmod(groupTarget, 493);
@@ -56337,7 +56726,7 @@ async function generateGuardrails(options) {
         } else {
           const output = isPatch && !dryRun ? await applyPatch(targetPath, rendered, outputDef) : rendered;
           if (!dryRun) {
-            await mkdir2(dirname6(targetPath), { recursive: true });
+            await mkdir2(dirname7(targetPath), { recursive: true });
             await writeFile2(targetPath, output, "utf8");
             if (outputDef.executable) {
               await chmod(targetPath, 493);
@@ -56390,7 +56779,7 @@ async function generateGuardrails(options) {
           continue;
         }
         if (!dryRun) {
-          await mkdir2(dirname6(outputPath), { recursive: true });
+          await mkdir2(dirname7(outputPath), { recursive: true });
           await writeFile2(outputPath, rendered, "utf8");
           if (renderTarget.executable) {
             await chmod(outputPath, 493);
@@ -56420,7 +56809,7 @@ async function generateGuardrails(options) {
             continue;
           }
           if (!dryRun) {
-            await mkdir2(dirname6(outputPath), { recursive: true });
+            await mkdir2(dirname7(outputPath), { recursive: true });
             await writeFile2(outputPath, rendered, "utf8");
             if (renderTarget.executable) {
               await chmod(outputPath, 493);
@@ -56441,7 +56830,18 @@ function resolveBindingRenderOutputPath(output, paths) {
 }
 
 // src/cli/commands/generate-guardrails.ts
-var generateGuardrailsCommand = new Command6("generate").description("Generate guardrail runtime artifacts from DSL, policies, and bindings").argument("[type]", "Type of artifacts to generate", "guardrails").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--binding <name...>", "Filter to specific software binding(s)").option("--dry-run", "Print what would be generated without writing files", false).option("--quiet", "Suppress output on success", false).action(
+function resolvedConfigForTeam(workspace, teamConfig) {
+  return {
+    dsl: "",
+    vars: teamConfig.vars,
+    renders: workspace.renders,
+    configDir: workspace.configDir,
+    bindings: teamConfig.bindings,
+    activeGuardrailPolicy: teamConfig.activeGuardrailPolicy,
+    paths: teamConfig.paths
+  };
+}
+var generateGuardrailsCommand = new Command6("generate").description("Generate guardrail runtime artifacts from DSL, policies, and bindings").argument("[type]", "Type of artifacts to generate", "guardrails").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--binding <name...>", "Filter to specific software binding(s)").option("--dry-run", "Print what would be generated without writing files", false).option("--quiet", "Suppress output on success", false).action(
   async (type, opts) => {
     if (type !== "guardrails") {
       process.stderr.write(`Unknown generate type: ${type}
@@ -56456,6 +56856,73 @@ var generateGuardrailsCommand = new Command6("generate").description("Generate g
         );
         process.exit(1);
       }
+      if (isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        let exitWithError = false;
+        for (const [teamId, teamConfig] of teamEntries) {
+          if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          if (!schemaResult2.success) {
+            process.stderr.write(
+              `Schema validation failed for team ${teamId}. Run 'agent-contracts validate' for details.
+`
+            );
+            exitWithError = true;
+            continue;
+          }
+          const loadedBindings2 = await loadBindings(teamConfig.bindings);
+          const result2 = await generateGuardrails({
+            dsl: schemaResult2.data,
+            config: resolvedConfigForTeam(config, teamConfig),
+            loadedBindings: loadedBindings2,
+            filterBindings: opts.binding,
+            dryRun: opts.dryRun
+          });
+          const errors2 = result2.diagnostics.filter((d2) => d2.severity === "error");
+          const warnings2 = result2.diagnostics.filter((d2) => d2.severity === "warning");
+          const infos2 = result2.diagnostics.filter((d2) => d2.severity === "info");
+          if (errors2.length > 0) {
+            process.stderr.write(`Errors (team ${teamId}):
+`);
+            for (const d2 of errors2) {
+              process.stderr.write(`  error [${d2.path}] ${d2.message}
+`);
+            }
+            exitWithError = true;
+          }
+          if (warnings2.length > 0 && !opts.quiet) {
+            process.stderr.write(`Warnings (team ${teamId}):
+`);
+            for (const d2 of warnings2) {
+              process.stderr.write(`  warning [${d2.path}] ${d2.message}
+`);
+            }
+          }
+          if (infos2.length > 0 && !opts.quiet) {
+            for (const d2 of infos2) {
+              process.stderr.write(`  info [${d2.path}] ${d2.message}
+`);
+            }
+          }
+          if (!opts.quiet) {
+            const action = opts.dryRun ? "Would generate" : "Generated";
+            process.stdout.write(
+              `${action} ${result2.outputFiles.length} file(s):
+`
+            );
+            for (const f2 of result2.outputFiles) {
+              process.stdout.write(`  ${f2}
+`);
+            }
+          }
+        }
+        if (exitWithError) process.exit(1);
+        return;
+      }
       const resolved = await resolve4(config.dsl);
       const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
       const schemaResult = validateSchema(data);
@@ -56861,10 +57328,56 @@ function formatText(result) {
   }
   return lines.join("\n");
 }
-var scoreCommand = new Command7("score").description("Calculate DSL completeness score").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT4).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--format <format>", "Output format (text|json)", "text").option("--threshold <number>", "Minimum score (exit 1 if below)", void 0).action(
+var scoreCommand = new Command7("score").description("Calculate DSL completeness score").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT4).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--threshold <number>", "Minimum score (exit 1 if below)", void 0).action(
   async (dir, opts) => {
     try {
       const config = await loadConfig(opts.config);
+      if (config !== null && isMultiTeamConfig(config)) {
+        const teamEntries = getTeamEntries(config, opts.team);
+        let thresholdNum;
+        if (opts.threshold !== void 0) {
+          thresholdNum = parseInt(opts.threshold, 10);
+          if (isNaN(thresholdNum)) {
+            process.stderr.write(
+              `Error: --threshold must be a number, got "${opts.threshold}"
+`
+            );
+            process.exit(1);
+          }
+        }
+        let hasErrors = false;
+        for (const [teamId, teamConfig] of teamEntries) {
+          process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          if (!schemaResult2.success) {
+            const issues = schemaResult2.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
+            process.stderr.write(`Schema validation failed:
+${issues}
+`);
+            hasErrors = true;
+            continue;
+          }
+          const result2 = score(schemaResult2.data);
+          if (opts.format === "json") {
+            process.stdout.write(JSON.stringify(result2, null, 2) + "\n");
+          } else {
+            process.stdout.write(formatText(result2) + "\n");
+          }
+          if (thresholdNum !== void 0 && result2.overall < thresholdNum) {
+            process.stderr.write(
+              `Score ${result2.overall} is below threshold ${thresholdNum}
+`
+            );
+            hasErrors = true;
+          }
+        }
+        if (hasErrors) process.exit(1);
+        return;
+      }
       const dslPath = resolveDslPath(dir, DIR_DEFAULT4, config);
       const resolved = await resolve4(dslPath);
       const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
@@ -56909,7 +57422,7 @@ ${issues}
 );
 
 // src/cli/cli.ts
-var __dirname = dirname7(fileURLToPath(import.meta.url));
+var __dirname = dirname8(fileURLToPath(import.meta.url));
 var pkg = JSON.parse(readFileSync(resolve7(__dirname, "../package.json"), "utf8"));
 var program = new Command8();
 program.name("agent-contracts").description("Agent contracts tooling \u2014 validate, lint, render DSL files").version(pkg.version);