oh-my-codex 0.12.3 → 0.12.4

package/dist/state/__tests__/operations.test.js

@@ -0,0 +1,200 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { chmod, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { executeStateOperation } from '../operations.js';
+async function withAmbientTmuxEnv(env, run) {
+    const previousTmux = process.env.TMUX;
+    const previousTmuxPane = process.env.TMUX_PANE;
+    const previousPath = process.env.PATH;
+    if (typeof env.TMUX === 'string')
+        process.env.TMUX = env.TMUX;
+    else
+        delete process.env.TMUX;
+    if (typeof env.TMUX_PANE === 'string')
+        process.env.TMUX_PANE = env.TMUX_PANE;
+    else
+        delete process.env.TMUX_PANE;
+    if (typeof env.PATH === 'string')
+        process.env.PATH = env.PATH;
+    else if ('PATH' in env)
+        delete process.env.PATH;
+    try {
+        return await run();
+    }
+    finally {
+        if (typeof previousTmux === 'string')
+            process.env.TMUX = previousTmux;
+        else
+            delete process.env.TMUX;
+        if (typeof previousTmuxPane === 'string')
+            process.env.TMUX_PANE = previousTmuxPane;
+        else
+            delete process.env.TMUX_PANE;
+        if (typeof previousPath === 'string')
+            process.env.PATH = previousPath;
+        else
+            delete process.env.PATH;
+    }
+}
+async function createFakeTmuxBin(wd) {
+    const fakeBin = join(wd, 'bin');
+    await mkdir(fakeBin, { recursive: true });
+    const tmuxPath = join(fakeBin, 'tmux');
+    await writeFile(tmuxPath, `#!/usr/bin/env bash
+set -eu
+cmd="\${1:-}"
+shift || true
+if [[ "$cmd" == "display-message" ]]; then
+  target=""
+  format=""
+  while (($#)); do
+    case "$1" in
+      -p) shift ;;
+      -t) target="$2"; shift 2 ;;
+      *) format="$1"; shift ;;
+    esac
+  done
+  if [[ -z "$target" && "$format" == "#{pane_id}" ]]; then
+    echo "%777"
+    exit 0
+  fi
+  if [[ -z "$target" && "$format" == "#S" ]]; then
+    echo "maintainer-default"
+    exit 0
+  fi
+  if [[ "$target" == "%777" && "$format" == "#{pane_id}" ]]; then
+    echo "%777"
+    exit 0
+  fi
+  if [[ "$target" == "%777" && "$format" == "#S" ]]; then
+    echo "maintainer-default"
+    exit 0
+  fi
+fi
+if [[ "$cmd" == "list-sessions" ]]; then
+  echo "maintainer-default"
+  exit 0
+fi
+exit 1
+`);
+    await chmod(tmuxPath, 0o755);
+    return fakeBin;
+}
+describe('state operations directory initialization', () => {
+    it('creates .omx/state for state operations without setup', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-state-ops-test-'));
+        try {
+            const stateDir = join(wd, '.omx', 'state');
+            const tmuxHookConfig = join(wd, '.omx', 'tmux-hook.json');
+            assert.equal(existsSync(stateDir), false);
+            assert.equal(existsSync(tmuxHookConfig), false);
+            const response = await executeStateOperation('state_list_active', {
+                workingDirectory: wd,
+            });
+            assert.equal(existsSync(stateDir), true);
+            assert.equal(existsSync(tmuxHookConfig), true);
+            assert.deepEqual(response.payload, { active_modes: [] });
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it('bootstraps tmux-hook from the current tmux pane when available', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-state-ops-live-'));
+        try {
+            const tmuxHookConfig = join(wd, '.omx', 'tmux-hook.json');
+            const fakeBin = await createFakeTmuxBin(wd);
+            await withAmbientTmuxEnv({
+                TMUX: '/tmp/maintainer-default,123,0',
+                TMUX_PANE: '%777',
+                PATH: `${fakeBin}:${process.env.PATH || ''}`,
+            }, async () => {
+                const response = await executeStateOperation('state_list_active', {
+                    workingDirectory: wd,
+                });
+                assert.deepEqual(response.payload, { active_modes: [] });
+            });
+            const tmuxConfig = JSON.parse(await readFile(tmuxHookConfig, 'utf-8'));
+            assert.deepEqual(tmuxConfig.target, { type: 'pane', value: '%777' });
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it('writes and reads deep-interview state', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-state-ops-readwrite-'));
+        try {
+            const writeResponse = await executeStateOperation('state_write', {
+                workingDirectory: wd,
+                mode: 'deep-interview',
+                active: true,
+                current_phase: 'deep-interview',
+                state: {
+                    current_focus: 'intent',
+                    threshold: 0.2,
+                },
+            });
+            assert.equal(writeResponse.isError, undefined);
+            assert.deepEqual(writeResponse.payload, {
+                success: true,
+                mode: 'deep-interview',
+                path: join(wd, '.omx', 'state', 'deep-interview-state.json'),
+            });
+            const readResponse = await executeStateOperation('state_read', {
+                workingDirectory: wd,
+                mode: 'deep-interview',
+            });
+            assert.equal(readResponse.isError, undefined);
+            const readBody = readResponse.payload;
+            assert.equal(readBody.active, true);
+            assert.equal(readBody.current_phase, 'deep-interview');
+            assert.equal(readBody.current_focus, 'intent');
+            assert.equal(readBody.threshold, 0.2);
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it('creates session-scoped state directory when session_id is provided', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-state-ops-session-'));
+        try {
+            const sessionDir = join(wd, '.omx', 'state', 'sessions', 'sess1');
+            assert.equal(existsSync(sessionDir), false);
+            const response = await executeStateOperation('state_get_status', {
+                workingDirectory: wd,
+                session_id: 'sess1',
+            });
+            assert.equal(existsSync(sessionDir), true);
+            assert.deepEqual(response.payload, { statuses: {} });
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it('serializes concurrent state_write calls per mode file and preserves merged fields', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-state-ops-concurrency-'));
+        try {
+            const writes = Array.from({ length: 16 }, (_, i) => executeStateOperation('state_write', {
+                workingDirectory: wd,
+                mode: 'team',
+                state: { [`k${i}`]: i },
+            }));
+            const responses = await Promise.all(writes);
+            for (const response of responses) {
+                assert.equal(response.isError, undefined);
+            }
+            const filePath = join(wd, '.omx', 'state', 'team-state.json');
+            const state = JSON.parse(await readFile(filePath, 'utf-8'));
+            for (let i = 0; i < 16; i++) {
+                assert.equal(state[`k${i}`], i);
+            }
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=operations.test.js.map

package/dist/state/__tests__/operations.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.test.js","sourceRoot":"","sources":["../../../src/state/__tests__/operations.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,KAAK,UAAU,kBAAkB,CAAI,GAAsB,EAAE,GAAqB;IAChF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAEtC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;SACzD,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAEhD,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,IAAI,OAAO,gBAAgB,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,gBAAgB,CAAC;;YAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,EAAU;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,CACb,QAAQ,EACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCH,CACE,CAAC;IACF,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,EAAE;gBAChE,gBAAgB,EAAE,EAAE;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAE5C,MAAM,kBAAkB,CACtB;gBACE,IAAI,EAAE,+BAA+B;gBACrC,SAAS,EAAE,MAAM;gBACjB,IAAI,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE;aAC7C,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,EAAE;oBAChE,gBAAgB,EAAE,EAAE;iBACrB,CAAC,CAAC;gBACH,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3D,CAAC,CACF,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAEpE,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE;gBAC/D,gBAAgB,EAAE,EAAE;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,gBAAgB;gBAC/B,KAAK,EAAE;oBACL,aAAa,EAAE,QAAQ;oBACvB,SAAS,EAAE,GAAG;iBACf;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE;gBACtC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,CAAC;aAC7D,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE;gBAC7D,gBAAgB,EAAE,EAAE;gBACpB,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAkC,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;YAE5C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,kBAAkB,EAAE;gBAC/D,gBAAgB,EAAE,EAAE;gBACpB,UAAU,EAAE,OAAO;aACpB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjD,qBAAqB,CAAC,aAAa,EAAE;gBACnC,gBAAgB,EAAE,EAAE;gBACpB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;aACxB,CAAC,CACH,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;YACvF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/state/__tests__/path-traversal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=path-traversal.test.d.ts.map

package/dist/state/__tests__/path-traversal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.test.d.ts","sourceRoot":"","sources":["../../../src/state/__tests__/path-traversal.test.ts"],"names":[],"mappings":""}

package/dist/state/__tests__/path-traversal.test.js

@@ -0,0 +1,49 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, rm } from 'fs/promises';
+import { join } from 'path';
+import { tmpdir } from 'os';
+import { executeStateOperation } from '../operations.js';
+describe('state CLI path traversal prevention', () => {
+    it('rejects invalid workingDirectory inputs containing NUL bytes', async () => {
+        const resp = await executeStateOperation('state_read', {
+            mode: 'team',
+            workingDirectory: 'bad\0path',
+        });
+        assert.equal(resp.isError, true);
+        const body = resp.payload;
+        assert.match(body.error || '', /NUL byte/);
+    });
+    it('rejects traversal in mode for state_write', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-traversal-'));
+        try {
+            const resp = await executeStateOperation('state_write', {
+                mode: '../../outside',
+                state: { active: true },
+                workingDirectory: wd,
+            });
+            assert.equal(resp.isError, true);
+            const body = resp.payload;
+            assert.ok(typeof body.error === 'string' && body.error.length > 0);
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it('rejects unsupported mode names for state_read', async () => {
+        const wd = await mkdtemp(join(tmpdir(), 'omx-traversal-'));
+        try {
+            const resp = await executeStateOperation('state_read', {
+                mode: 'custom_mode',
+                workingDirectory: wd,
+            });
+            assert.equal(resp.isError, true);
+            const body = resp.payload;
+            assert.ok(typeof body.error === 'string' && body.error.includes('mode must be one of'));
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=path-traversal.test.js.map

package/dist/state/__tests__/path-traversal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.test.js","sourceRoot":"","sources":["../../../src/state/__tests__/path-traversal.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE;YACrD,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,WAAW;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAA6B,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE;gBACtD,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBACvB,gBAAgB,EAAE,EAAE;aACrB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAA6B,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE;gBACrD,IAAI,EAAE,aAAa;gBACnB,gBAAgB,EAAE,EAAE;aACrB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAA6B,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/state/operations.d.ts

@@ -0,0 +1,11 @@
+export declare const SUPPORTED_STATE_READ_MODES: readonly ["autopilot", "team", "ralph", "ultrawork", "ultraqa", "ralplan", "deep-interview"];
+export type SupportedStateReadMode = (typeof SUPPORTED_STATE_READ_MODES)[number];
+export type StateOperationName = 'state_read' | 'state_write' | 'state_clear' | 'state_list_active' | 'state_get_status';
+export interface StateOperationResponse {
+    payload: unknown;
+    isError?: boolean;
+}
+export declare function listStateStatuses(cwd: string, explicitSessionId?: string, mode?: string): Promise<Record<string, unknown>>;
+export declare function listActiveStateModes(workingDirectory?: string, explicitSessionId?: string): Promise<string[]>;
+export declare function executeStateOperation(name: StateOperationName, rawArgs?: Record<string, unknown>): Promise<StateOperationResponse>;
+//# sourceMappingURL=operations.d.ts.map

package/dist/state/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/state/operations.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,0BAA0B,8FAQ7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjF,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,aAAa,GACb,aAAa,GACb,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAwDD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,iBAAiB,CAAC,EAAE,MAAM,EAC1B,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA6BlC;AAGD,wBAAsB,oBAAoB,CACxC,gBAAgB,CAAC,EAAE,MAAM,EACzB,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,MAAM,EAAE,CAAC,CAOnB;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,kBAAkB,EACxB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAoJjC"}

package/dist/state/operations.js

@@ -0,0 +1,233 @@
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, readdir, rename, unlink, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { withModeRuntimeContext } from './mode-state-context.js';
+import { getAllScopedStatePaths, getReadScopedStateDirs, getReadScopedStatePaths, getStateDir, getStatePath, resolveStateScope, resolveWorkingDirectoryForState, validateSessionId, validateStateModeSegment, } from '../mcp/state-paths.js';
+import { ensureCanonicalRalphArtifacts } from '../ralph/persistence.js';
+import { RALPH_PHASES, validateAndNormalizeRalphState } from '../ralph/contract.js';
+export const SUPPORTED_STATE_READ_MODES = [
+    'autopilot',
+    'team',
+    'ralph',
+    'ultrawork',
+    'ultraqa',
+    'ralplan',
+    'deep-interview',
+];
+const stateWriteQueues = new Map();
+async function withStateWriteLock(path, fn) {
+    const tail = stateWriteQueues.get(path) ?? Promise.resolve();
+    let release;
+    const gate = new Promise((resolve) => {
+        release = resolve;
+    });
+    const queued = tail.finally(() => gate);
+    stateWriteQueues.set(path, queued);
+    await tail.catch(() => { });
+    try {
+        return await fn();
+    }
+    finally {
+        release();
+        if (stateWriteQueues.get(path) === queued) {
+            stateWriteQueues.delete(path);
+        }
+    }
+}
+async function writeAtomicFile(path, data) {
+    const tmpPath = `${path}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}`;
+    await writeFile(tmpPath, data, 'utf-8');
+    try {
+        await rename(tmpPath, path);
+    }
+    catch (error) {
+        await unlink(tmpPath).catch(() => { });
+        throw error;
+    }
+}
+function readModeSupportsStrictValidation(mode) {
+    return SUPPORTED_STATE_READ_MODES.includes(mode);
+}
+function validateStrictReadableMode(mode) {
+    const normalized = validateStateModeSegment(mode);
+    if (!readModeSupportsStrictValidation(normalized)) {
+        throw new Error(`mode must be one of: ${SUPPORTED_STATE_READ_MODES.join(', ')}`);
+    }
+    return normalized;
+}
+async function initializeStateEnvironment(cwd, effectiveSessionId) {
+    await mkdir(getStateDir(cwd), { recursive: true });
+    if (effectiveSessionId) {
+        await mkdir(getStateDir(cwd, effectiveSessionId), { recursive: true });
+    }
+    const { ensureTmuxHookInitialized } = await import('../cli/tmux-hook.js');
+    await ensureTmuxHookInitialized(cwd);
+}
+export async function listStateStatuses(cwd, explicitSessionId, mode) {
+    const stateDirs = await getReadScopedStateDirs(cwd, explicitSessionId);
+    const statuses = {};
+    const seenModes = new Set();
+    for (const stateDir of stateDirs) {
+        if (!existsSync(stateDir))
+            continue;
+        const files = await readdir(stateDir);
+        for (const file of files) {
+            if (!file.endsWith('-state.json'))
+                continue;
+            const currentMode = file.replace('-state.json', '');
+            if (mode && currentMode !== mode)
+                continue;
+            if (seenModes.has(currentMode))
+                continue;
+            seenModes.add(currentMode);
+            try {
+                const data = JSON.parse(await readFile(join(stateDir, file), 'utf-8'));
+                statuses[currentMode] = {
+                    active: data.active,
+                    phase: data.current_phase,
+                    path: join(stateDir, file),
+                    data,
+                };
+            }
+            catch {
+                statuses[currentMode] = { error: 'malformed state file' };
+            }
+        }
+    }
+    return statuses;
+}
+export async function listActiveStateModes(workingDirectory, explicitSessionId) {
+    const cwd = resolveWorkingDirectoryForState(workingDirectory);
+    const sessionId = validateSessionId(explicitSessionId);
+    const statuses = await listStateStatuses(cwd, sessionId);
+    return Object.entries(statuses)
+        .filter(([, status]) => Boolean(status.active))
+        .map(([mode]) => mode);
+}
+export async function executeStateOperation(name, rawArgs = {}) {
+    let cwd;
+    let explicitSessionId;
+    try {
+        cwd = resolveWorkingDirectoryForState(rawArgs.workingDirectory);
+        explicitSessionId = validateSessionId(rawArgs.session_id);
+    }
+    catch (error) {
+        return {
+            payload: { error: error.message },
+            isError: true,
+        };
+    }
+    try {
+        const stateScope = await resolveStateScope(cwd, explicitSessionId);
+        const effectiveSessionId = stateScope.sessionId;
+        await initializeStateEnvironment(cwd, effectiveSessionId);
+        switch (name) {
+            case 'state_read': {
+                const mode = validateStrictReadableMode(rawArgs.mode);
+                const paths = await getReadScopedStatePaths(mode, cwd, explicitSessionId);
+                const path = paths.find((candidate) => existsSync(candidate));
+                if (!path) {
+                    return { payload: { exists: false, mode } };
+                }
+                const data = JSON.parse(await readFile(path, 'utf-8'));
+                return { payload: data };
+            }
+            case 'state_write': {
+                const mode = validateStateModeSegment(rawArgs.mode);
+                const path = getStatePath(mode, cwd, effectiveSessionId);
+                const { mode: _mode, workingDirectory: _workingDirectory, session_id: _sessionId, state: customState, ...fields } = rawArgs;
+                let validationError = null;
+                await withStateWriteLock(path, async () => {
+                    let existing = {};
+                    if (existsSync(path)) {
+                        try {
+                            existing = JSON.parse(await readFile(path, 'utf-8'));
+                        }
+                        catch (error) {
+                            process.stderr.write(`[state] Failed to parse state file: ${error}\n`);
+                        }
+                    }
+                    const mergedRaw = {
+                        ...existing,
+                        ...fields,
+                        ...(customState || {}),
+                    };
+                    if (mode === 'ralph' &&
+                        effectiveSessionId &&
+                        typeof mergedRaw.owner_omx_session_id !== 'string') {
+                        mergedRaw.owner_omx_session_id = effectiveSessionId;
+                    }
+                    if (mode === 'ralph') {
+                        const originalPhase = mergedRaw.current_phase;
+                        const validation = validateAndNormalizeRalphState(mergedRaw);
+                        if (!validation.ok || !validation.state) {
+                            validationError = validation.error || `ralph.current_phase must be one of: ${RALPH_PHASES.join(', ')}`;
+                            return;
+                        }
+                        if (typeof originalPhase === 'string' &&
+                            typeof validation.state.current_phase === 'string' &&
+                            validation.state.current_phase !== originalPhase) {
+                            validation.state.ralph_phase_normalized_from = originalPhase;
+                        }
+                        Object.assign(mergedRaw, validation.state);
+                        await ensureCanonicalRalphArtifacts(cwd, effectiveSessionId);
+                    }
+                    const merged = withModeRuntimeContext(existing, mergedRaw);
+                    await writeAtomicFile(path, JSON.stringify(merged, null, 2));
+                });
+                if (validationError) {
+                    return {
+                        payload: { error: validationError },
+                        isError: true,
+                    };
+                }
+                return { payload: { success: true, mode, path } };
+            }
+            case 'state_clear': {
+                const mode = validateStateModeSegment(rawArgs.mode);
+                const allSessions = rawArgs.all_sessions === true;
+                if (!allSessions) {
+                    const path = getStatePath(mode, cwd, effectiveSessionId);
+                    if (existsSync(path)) {
+                        await unlink(path);
+                    }
+                    return { payload: { cleared: true, mode, path } };
+                }
+                const removedPaths = [];
+                const paths = await getAllScopedStatePaths(mode, cwd);
+                for (const path of paths) {
+                    if (!existsSync(path))
+                        continue;
+                    await unlink(path);
+                    removedPaths.push(path);
+                }
+                return {
+                    payload: {
+                        cleared: true,
+                        mode,
+                        all_sessions: true,
+                        removed: removedPaths.length,
+                        paths: removedPaths,
+                        warning: 'all_sessions clears global and session-scoped state files',
+                    },
+                };
+            }
+            case 'state_list_active': {
+                const activeModes = await listActiveStateModes(cwd, explicitSessionId);
+                return { payload: { active_modes: activeModes } };
+            }
+            case 'state_get_status': {
+                const mode = typeof rawArgs.mode === 'string' ? rawArgs.mode.trim() : undefined;
+                const statuses = await listStateStatuses(cwd, explicitSessionId, mode || undefined);
+                return { payload: { statuses } };
+            }
+        }
+    }
+    catch (error) {
+        return {
+            payload: { error: error.message },
+            isError: true,
+        };
+    }
+}
+//# sourceMappingURL=operations.js.map

package/dist/state/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/state/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,+BAA+B,EAC/B,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEpF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW;IACX,MAAM;IACN,OAAO;IACP,WAAW;IACX,SAAS;IACT,SAAS;IACT,gBAAgB;CACR,CAAC;AAeX,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE1D,KAAK,UAAU,kBAAkB,CAAI,IAAY,EAAE,EAAoB;IACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEnC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;QACV,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1C,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,OAAO,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAY;IACpD,OAAO,0BAA0B,CAAC,QAAQ,CAAC,IAA8B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAa;IAC/C,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wBAAwB,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,kBAA2B;IAChF,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC1E,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,iBAA0B,EAC1B,IAAa;IAEb,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvE,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,SAAS;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,IAAI,IAAI,WAAW,KAAK,IAAI;gBAAE,SAAS;YAC3C,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACzC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvE,QAAQ,CAAC,WAAW,CAAC,GAAG;oBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,KAAK,EAAE,IAAI,CAAC,aAAa;oBACzB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAC1B,IAAI;iBACL,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,gBAAyB,EACzB,iBAA0B;IAE1B,MAAM,GAAG,GAAG,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAE,MAA+B,CAAC,MAAM,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAwB,EACxB,UAAmC,EAAE;IAErC,IAAI,GAAW,CAAC;IAChB,IAAI,iBAAqC,CAAC;IAE1C,IAAI,CAAC;QACH,GAAG,GAAG,+BAA+B,CAAC,OAAO,CAAC,gBAAsC,CAAC,CAAC;QACtF,iBAAiB,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE;YAC5C,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACnE,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,CAAC;QAChD,MAAM,0BAA0B,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAE1D,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;gBAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9C,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBACzD,MAAM,EACJ,IAAI,EAAE,KAAK,EACX,gBAAgB,EAAE,iBAAiB,EACnC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,WAAW,EAClB,GAAG,MAAM,EACV,GAAG,OAAO,CAAC;gBACZ,IAAI,eAAe,GAAkB,IAAI,CAAC;gBAE1C,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;oBACxC,IAAI,QAAQ,GAA4B,EAAE,CAAC;oBAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrB,IAAI,CAAC;4BACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;wBACvD,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,IAAI,CAAC,CAAC;wBACzE,CAAC;oBACH,CAAC;oBAED,MAAM,SAAS,GAAG;wBAChB,GAAG,QAAQ;wBACX,GAAG,MAAM;wBACT,GAAG,CAAE,WAAuC,IAAI,EAAE,CAAC;qBACzB,CAAC;oBAE7B,IACE,IAAI,KAAK,OAAO;wBAChB,kBAAkB;wBAClB,OAAO,SAAS,CAAC,oBAAoB,KAAK,QAAQ,EAClD,CAAC;wBACD,SAAS,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;oBACtD,CAAC;oBAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;wBACrB,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;wBAC9C,MAAM,UAAU,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;wBAC7D,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;4BACxC,eAAe,GAAG,UAAU,CAAC,KAAK,IAAI,uCAAuC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvG,OAAO;wBACT,CAAC;wBACD,IACE,OAAO,aAAa,KAAK,QAAQ;4BACjC,OAAO,UAAU,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ;4BAClD,UAAU,CAAC,KAAK,CAAC,aAAa,KAAK,aAAa,EAChD,CAAC;4BACD,UAAU,CAAC,KAAK,CAAC,2BAA2B,GAAG,aAAa,CAAC;wBAC/D,CAAC;wBACD,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;wBAC3C,MAAM,6BAA6B,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;oBAC/D,CAAC;oBAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC3D,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC,CAAC,CAAC;gBAEH,IAAI,eAAe,EAAE,CAAC;oBACpB,OAAO;wBACL,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;wBACnC,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC;gBAElD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;oBACzD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;gBACpD,CAAC;gBAED,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAChC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;oBACnB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE;wBACP,OAAO,EAAE,IAAI;wBACb,IAAI;wBACJ,YAAY,EAAE,IAAI;wBAClB,OAAO,EAAE,YAAY,CAAC,MAAM;wBAC5B,KAAK,EAAE,YAAY;wBACnB,OAAO,EAAE,2DAA2D;qBACrE;iBACF,CAAC;YACJ,CAAC;YAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;gBACvE,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChF,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBACpF,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE;YAC5C,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/team/__tests__/api-interop.test.js

@@ -1692,7 +1692,7 @@ describe('executeTeamApiOperation: cleanup', () => {
         const result = await executeTeamApiOperation('cleanup', {}, '/tmp');
         assert.equal(result.ok, false);
     });
-    it('routes cleanup through the shutdown gate for failed tasks on normal teams', async () => {
+    it('requires confirm_issues for failed-task cleanup on normal teams', async () => {
         const { cwd, cleanup } = await setupTeam('cleanup-gate');
         try {
             await createTask('cleanup-gate', {
@@ -1705,7 +1705,7 @@ describe('executeTeamApiOperation: cleanup', () => {
             }, cwd);
             assert.equal(result.ok, false);
             if (!result.ok) {
-                assert.match(result.error.message, /shutdown_gate_blocked:pending=0,blocked=0,in_progress=0,failed=1/);
+                assert.match(result.error.message, /shutdown_confirm_issues_required:failed=1/);
             }
             const summary = await executeTeamApiOperation('get-summary', {
                 team_name: 'cleanup-gate',
@@ -1716,6 +1716,28 @@ describe('executeTeamApiOperation: cleanup', () => {
             await cleanup();
         }
     });
+    it('allows cleanup with confirm_issues when failed tasks remain', async () => {
+        const { cwd, cleanup } = await setupTeam('cleanup-confirm-issues');
+        try {
+            await createTask('cleanup-confirm-issues', {
+                subject: 'failed task',
+                description: 'requires explicit confirmation',
+                status: 'failed',
+            }, cwd);
+            const result = await executeTeamApiOperation('cleanup', {
+                team_name: 'cleanup-confirm-issues',
+                confirm_issues: true,
+            }, cwd);
+            assert.equal(result.ok, true);
+            if (result.ok) {
+                assert.equal(result.data.team_name, 'cleanup-confirm-issues');
+                assert.equal(result.data.cleanup_mode, 'shutdown');
+            }
+        }
+        finally {
+            await cleanup();
+        }
+    });
 });
 describe('executeTeamApiOperation: orphan-cleanup', () => {
     it('uses destructive orphan cleanup explicitly', async () => {