teamshare-bridge 0.1.0 → 0.2.0

package/dist/lib/models.js

@@ -9,8 +9,9 @@
  * three in sync (see the docs for the 3-step update process).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_LLM_BASE_URL = exports.MODEL_PROVIDERS = exports.MODEL_BASE_URLS = void 0;
+exports.DEFAULT_LLM_BASE_URL = exports.HARNESS_NATIVE_PROVIDERS = exports.MODEL_PROVIDERS = exports.MODEL_BASE_URLS = void 0;
 exports.resolveModel = resolveModel;
+exports.getHarnessFallbackModel = getHarnessFallbackModel;
 exports.MODEL_BASE_URLS = {
     gemini: 'https://generativelanguage.googleapis.com/v1beta/openai',
     deepseek: 'https://api.deepseek.com',
@@ -21,11 +22,16 @@ exports.MODEL_BASE_URLS = {
 };
 /** Provider keys accepted by the catalog (for validation/docs). */
 exports.MODEL_PROVIDERS = Object.keys(exports.MODEL_BASE_URLS);
+/** Providers that are harness-native (only work via opencode/claude CLI, not --self). */
+exports.HARNESS_NATIVE_PROVIDERS = new Set(['opencode-go']);
 /** Default OpenAI-compatible base when nothing else is configured. */
 exports.DEFAULT_LLM_BASE_URL = 'https://api.openai.com/v1';
+/** Default model to use when opencode-go is detected but no agent setting exists. */
+const OPENCODE_GO_DEFAULT = 'opencode-go:deepseek-v4-flash';
 /**
  * Resolves a model spec to (baseUrl, model):
  * - `provider:model` (e.g. "gemini:gemini-2.5-flash") -> catalog base URL.
+ * - `opencode-go:*` -> harness-only flag (caller must use opencode harness, not --self).
  * - Anything else (legacy "deepseek-chat") -> env LLM_BASE_URL default,
  *   preserving the pre-catalog behavior.
  * Precedence for the base URL: LLM_BASE_URL env > catalog provider URL.
@@ -34,18 +40,41 @@ function resolveModel(spec, envBaseUrl) {
     const colon = spec.indexOf(':');
     const provider = colon > 0 ? spec.slice(0, colon) : '';
     const modelId = colon > 0 ? spec.slice(colon + 1) : spec;
+    // Harness-native providers (opencode-go) cannot be used with --self.
+    // The caller must detect harnessOnly and use the opencode harness instead.
+    if (exports.HARNESS_NATIVE_PROVIDERS.has(provider)) {
+        return {
+            baseUrl: envBaseUrl ?? exports.DEFAULT_LLM_BASE_URL,
+            model: spec,
+            catalogued: true,
+            harnessOnly: true,
+        };
+    }
     const catalogUrl = exports.MODEL_BASE_URLS[provider];
     if (catalogUrl) {
         return {
             baseUrl: envBaseUrl ?? catalogUrl,
             model: modelId,
             catalogued: true,
+            harnessOnly: false,
         };
     }
     return {
         baseUrl: envBaseUrl ?? exports.DEFAULT_LLM_BASE_URL,
         model: spec,
         catalogued: false,
+        harnessOnly: false,
     };
 }
+/**
+ * Get the fallback model for opencode-go providers.
+ * When opencode-go is detected and --self cannot be used,
+ * this returns the agent's configured model or the default harness model.
+ */
+function getHarnessFallbackModel(agentModel) {
+    if (agentModel && !exports.HARNESS_NATIVE_PROVIDERS.has(agentModel.split(':')[0])) {
+        return agentModel;
+    }
+    return OPENCODE_GO_DEFAULT;
+}
 //# sourceMappingURL=models.js.map

package/dist/lib/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/lib/models.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAiCH,oCAiBC;AAhDY,QAAA,eAAe,GAA2B;IACrD,MAAM,EAAE,yDAAyD;IACjE,QAAQ,EAAE,0BAA0B;IACpC,MAAM,EAAE,2BAA2B;IACnC,IAAI,EAAE,gCAAgC;IACtC,UAAU,EAAE,8BAA8B;IAC1C,OAAO,EAAE,2BAA2B;CACrC,CAAC;AAEF,mEAAmE;AACtD,QAAA,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAE5D,sEAAsE;AACzD,QAAA,oBAAoB,GAAG,2BAA2B,CAAC;AAWhE;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAmB;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,uBAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,UAAU,IAAI,UAAU;YACjC,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,IAAI,4BAAoB;QAC3C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/lib/models.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA0CH,oCA+BC;AAOD,0DAKC;AAnFY,QAAA,eAAe,GAA2B;IACrD,MAAM,EAAE,yDAAyD;IACjE,QAAQ,EAAE,0BAA0B;IACpC,MAAM,EAAE,2BAA2B;IACnC,IAAI,EAAE,gCAAgC;IACtC,UAAU,EAAE,8BAA8B;IAC1C,OAAO,EAAE,2BAA2B;CACrC,CAAC;AAEF,mEAAmE;AACtD,QAAA,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAE5D,yFAAyF;AAC5E,QAAA,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAEjE,sEAAsE;AACzD,QAAA,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAa5D;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAmB;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzD,qEAAqE;IACrE,2EAA2E;IAC3E,IAAI,gCAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,UAAU,IAAI,4BAAoB;YAC3C,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,uBAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,UAAU,IAAI,UAAU;YACjC,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,IAAI,4BAAoB;QAC3C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,UAAmB;IACzD,IAAI,UAAU,IAAI,CAAC,gCAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC"}

package/dist/lib/orchestrator/client.d.ts

@@ -0,0 +1,27 @@
+export declare class OrchestratorClient {
+    private socket;
+    private readonly pending;
+    private readonly apiKey;
+    private readonly apiUrl;
+    constructor(apiKey: string, apiUrl: string);
+    /**
+     * Connect to the /orchestrator WS namespace.
+     */
+    connect(): void;
+    /**
+     * Disconnect from the WS.
+     */
+    disconnect(): void;
+    /**
+     * Send a command and wait for the result.
+     */
+    sendCommand(event: string, payload: Record<string, unknown>, timeoutMs?: number): Promise<Record<string, unknown>>;
+    /**
+     * Resolve a pending command by its id.
+     */
+    private resolvePending;
+    /**
+     * Check if connected.
+     */
+    get connected(): boolean;
+}

package/dist/lib/orchestrator/client.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrchestratorClient = void 0;
+/**
+ * OrchestratorClient: WS connection to the backend /orchestrator namespace.
+ * Receives commands (git, verify, worktree) and returns results.
+ *
+ * Mirrors the daemon.ts reconnect pattern for resilience.
+ */
+const socket_io_client_1 = require("socket.io-client");
+const config_1 = require("../config");
+const log = {
+    info: (msg) => console.log(`[orchestrator-client] ${msg}`),
+    warn: (msg) => console.warn(`[orchestrator-client] ${msg}`),
+    error: (msg) => console.error(`[orchestrator-client] ${msg}`),
+};
+class OrchestratorClient {
+    socket = null;
+    pending = new Map();
+    apiKey;
+    apiUrl;
+    constructor(apiKey, apiUrl) {
+        this.apiKey = apiKey;
+        this.apiUrl = apiUrl;
+    }
+    /**
+     * Connect to the /orchestrator WS namespace.
+     */
+    connect() {
+        const config = (0, config_1.loadConfig)();
+        const wsUrl = process.env.TEAMSHARE_WS_URL ?? 'ws://localhost:4000';
+        this.socket = (0, socket_io_client_1.io)(`${wsUrl}/orchestrator`, {
+            auth: { apiKey: this.apiKey },
+            transports: ['websocket'],
+            reconnection: true,
+            reconnectionDelay: 2000,
+            reconnectionDelayMax: 30000,
+        });
+        this.socket.on('connect', () => {
+            log.info('Connected to /orchestrator');
+        });
+        this.socket.on('disconnect', (reason) => {
+            log.warn(`Disconnected from /orchestrator: ${reason}`);
+        });
+        this.socket.on('connect_error', (err) => {
+            log.error(`Connection error: ${err.message}`);
+        });
+        // Register handlers for all result events
+        const resultEvents = [
+            'orchestrator:verify-result',
+            'orchestrator:worktree-created',
+            'orchestrator:worktree-removed',
+            'orchestrator:git-status-result',
+            'orchestrator:git-commit-result',
+            'orchestrator:git-merge-result',
+            'orchestrator:repo-context-result',
+        ];
+        for (const event of resultEvents) {
+            this.socket.on(event, (data) => {
+                this.resolvePending(data.cmdId, data);
+            });
+        }
+        // Progress events (not correlated to commands)
+        this.socket.on('orchestrator:progress', (data) => {
+            log.info(`Progress: ${data.taskId} - ${data.message}`);
+        });
+        // Agent capacity events
+        this.socket.on('orchestrator:agent-ready', (data) => {
+            log.info(`Agent ready: ${data.agentId}`);
+        });
+        this.socket.on('orchestrator:agent-busy', (data) => {
+            log.info(`Agent busy: ${data.agentId} on ${data.taskId}`);
+        });
+        this.socket.on('orchestrator:agent-idle', (data) => {
+            log.info(`Agent idle: ${data.agentId}`);
+        });
+    }
+    /**
+     * Disconnect from the WS.
+     */
+    disconnect() {
+        if (this.socket) {
+            this.socket.disconnect();
+            this.socket = null;
+        }
+        // Reject all pending commands
+        for (const [id, cmd] of this.pending) {
+            cmd.reject(new Error('Client disconnected'));
+            clearTimeout(cmd.timeout);
+        }
+        this.pending.clear();
+    }
+    /**
+     * Send a command and wait for the result.
+     */
+    async sendCommand(event, payload, timeoutMs = 60_000) {
+        if (!this.socket?.connected) {
+            throw new Error('Not connected to orchestrator');
+        }
+        return new Promise((resolve, reject) => {
+            const cmdId = `cmd_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+            const timeout = setTimeout(() => {
+                this.pending.delete(cmdId);
+                reject(new Error(`Command ${event} timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.pending.set(cmdId, {
+                resolve: resolve,
+                reject,
+                timeout,
+            });
+            this.socket.emit(event, { cmdId, ...payload });
+        });
+    }
+    /**
+     * Resolve a pending command by its id.
+     */
+    resolvePending(cmdId, data) {
+        const pending = this.pending.get(cmdId);
+        if (!pending) {
+            log.warn(`No pending command for ${cmdId}`);
+            return;
+        }
+        clearTimeout(pending.timeout);
+        this.pending.delete(cmdId);
+        pending.resolve(data);
+    }
+    /**
+     * Check if connected.
+     */
+    get connected() {
+        return this.socket?.connected ?? false;
+    }
+}
+exports.OrchestratorClient = OrchestratorClient;
+//# sourceMappingURL=client.js.map

package/dist/lib/orchestrator/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/lib/orchestrator/client.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,uDAA8C;AAC9C,sCAAuC;AAEvC,MAAM,GAAG,GAAG;IACV,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,EAAE,CAAC;IAClE,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC;IACnE,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC;CACtE,CAAC;AAaF,MAAa,kBAAkB;IACrB,MAAM,GAAkB,IAAI,CAAC;IACpB,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,MAAM,CAAS;IACf,MAAM,CAAS;IAEhC,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,qBAAqB,CAAC;QAEpE,IAAI,CAAC,MAAM,GAAG,IAAA,qBAAE,EAAC,GAAG,KAAK,eAAe,EAAE;YACxC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YAC7B,UAAU,EAAE,CAAC,WAAW,CAAC;YACzB,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,IAAI;YACvB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;YACtC,GAAG,CAAC,IAAI,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;YACtC,GAAG,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,0CAA0C;QAC1C,MAAM,YAAY,GAAG;YACnB,4BAA4B;YAC5B,+BAA+B;YAC/B,+BAA+B;YAC/B,gCAAgC;YAChC,gCAAgC;YAChC,+BAA+B;YAC/B,kCAAkC;SACnC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,IAAoB,EAAE,EAAE;gBAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/C,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,EAAE;YAClD,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE;YACjD,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE;YACjD,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,8BAA8B;QAC9B,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAgC,EAChC,SAAS,GAAG,MAAM;QAElB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAE5E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;YACvE,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;gBACtB,OAAO,EAAE,OAAkD;gBAC3D,MAAM;gBACN,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa,EAAE,IAA6B;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;IACzC,CAAC;CACF;AA7ID,gDA6IC"}

package/dist/lib/orchestrator/index.d.ts

@@ -0,0 +1,5 @@
+export { OrchestratorClient } from './client';
+export { createWorktree, removeWorktree, gitStatus, gitCommit, gitMerge, gitDiff, getWorktreeRoot, } from './worktree';
+export type { WorktreeInfo, GitStatus } from './worktree';
+export { runCommand, runVerificationCommand } from './runner';
+export type { CommandResult } from './runner';

package/dist/lib/orchestrator/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runVerificationCommand = exports.runCommand = exports.getWorktreeRoot = exports.gitDiff = exports.gitMerge = exports.gitCommit = exports.gitStatus = exports.removeWorktree = exports.createWorktree = exports.OrchestratorClient = void 0;
+var client_1 = require("./client");
+Object.defineProperty(exports, "OrchestratorClient", { enumerable: true, get: function () { return client_1.OrchestratorClient; } });
+var worktree_1 = require("./worktree");
+Object.defineProperty(exports, "createWorktree", { enumerable: true, get: function () { return worktree_1.createWorktree; } });
+Object.defineProperty(exports, "removeWorktree", { enumerable: true, get: function () { return worktree_1.removeWorktree; } });
+Object.defineProperty(exports, "gitStatus", { enumerable: true, get: function () { return worktree_1.gitStatus; } });
+Object.defineProperty(exports, "gitCommit", { enumerable: true, get: function () { return worktree_1.gitCommit; } });
+Object.defineProperty(exports, "gitMerge", { enumerable: true, get: function () { return worktree_1.gitMerge; } });
+Object.defineProperty(exports, "gitDiff", { enumerable: true, get: function () { return worktree_1.gitDiff; } });
+Object.defineProperty(exports, "getWorktreeRoot", { enumerable: true, get: function () { return worktree_1.getWorktreeRoot; } });
+var runner_1 = require("./runner");
+Object.defineProperty(exports, "runCommand", { enumerable: true, get: function () { return runner_1.runCommand; } });
+Object.defineProperty(exports, "runVerificationCommand", { enumerable: true, get: function () { return runner_1.runVerificationCommand; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/orchestrator/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/orchestrator/index.ts"],"names":[],"mappings":";;;AAAA,mCAA8C;AAArC,4GAAA,kBAAkB,OAAA;AAC3B,uCAQoB;AAPlB,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,qGAAA,SAAS,OAAA;AACT,qGAAA,SAAS,OAAA;AACT,oGAAA,QAAQ,OAAA;AACR,mGAAA,OAAO,OAAA;AACP,2GAAA,eAAe,OAAA;AAGjB,mCAA8D;AAArD,oGAAA,UAAU,OAAA;AAAE,gHAAA,sBAAsB,OAAA"}

package/dist/lib/orchestrator/runner.d.ts

@@ -0,0 +1,18 @@
+export interface CommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+}
+/**
+ * Run a command in a worktree directory.
+ */
+export declare function runCommand(command: string, cwd: string, options?: {
+    timeout?: number;
+    maxOutputBytes?: number;
+}): Promise<CommandResult>;
+/**
+ * Run a verification step command.
+ * Returns the result with exit code and output.
+ */
+export declare function runVerificationCommand(step: string, cwd: string, timeoutMs?: number): Promise<CommandResult>;

package/dist/lib/orchestrator/runner.js

@@ -0,0 +1,177 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCommand = runCommand;
+exports.runVerificationCommand = runVerificationCommand;
+/**
+ * Command Runner: executes build/test/lint commands in a sandboxed manner.
+ * Used by the orchestrator verification pipeline.
+ *
+ * Security: command allowlist, denylist, timeout, max output bytes.
+ */
+const child_process_1 = require("child_process");
+const log = {
+    info: (msg) => console.log(`[runner] ${msg}`),
+    warn: (msg) => console.warn(`[runner] ${msg}`),
+    error: (msg) => console.error(`[runner] ${msg}`),
+};
+/** Commands allowed to run (allowlist). */
+const ALLOWED_COMMANDS = new Set([
+    'npm',
+    'pnpm',
+    'yarn',
+    'bun',
+    'npx',
+    'node',
+    'git',
+    'tsc',
+    'eslint',
+    'jest',
+    'vitest',
+    'mocha',
+    'python',
+    'python3',
+    'pip',
+    'pip3',
+]);
+/** Commands that are never allowed (denylist). */
+const DENIED_PATTERNS = [
+    /\brm\s+-rf\b/,
+    /\bsudo\b/,
+    /\bdocker\b/,
+    /\bssh\b/,
+    /\bcurl\b.*\bhttp/,
+    /\bwget\b/,
+    /\bchmod\b/,
+    /\bchown\b/,
+    /\bkill\b/,
+    /\bpkill\b/,
+    /\bsystemctl\b/,
+    /\bservice\b/,
+];
+const DEFAULT_TIMEOUT_MS = 10 * 60 * 1000; // 10 minutes
+const DEFAULT_MAX_OUTPUT_BYTES = 2 * 1024 * 1024; // 2 MB
+/**
+ * Redact potential secrets from command output.
+ * Strips API keys, tokens, passwords, and env var values that look sensitive.
+ */
+function redactSecrets(text) {
+    return text
+        // API keys (sk-..., ts_..., AIza..., Bearer ...)
+        .replace(/\b(sk-[a-zA-Z0-9]{20,})\b/g, '[REDACTED_KEY]')
+        .replace(/\b(ts_[a-zA-Z0-9]{20,})\b/g, '[REDACTED_KEY]')
+        .replace(/\b(AIza[a-zA-Z0-9_-]{20,})\b/g, '[REDACTED_KEY]')
+        .replace(/\bBearer\s+[a-zA-Z0-9._-]{20,}/g, 'Bearer [REDACTED]')
+        // Passwords in env output
+        .replace(/(PASSWORD|SECRET|TOKEN|KEY|CREDENTIALS?)\s*[=:]\s*\S+/gi, '$1=[REDACTED]')
+        // Connection strings
+        .replace(/(postgres|mysql|mongodb|redis):\/\/[^\s]+/gi, '$1://[REDACTED]')
+        // Generic long hex strings (potential hashes/tokens)
+        .replace(/\b[a-f0-9]{32,}\b/g, '[REDACTED_HASH]');
+}
+/**
+ * Validate that a command is allowed.
+ */
+function validateCommand(command) {
+    // Check denylist first
+    for (const pattern of DENIED_PATTERNS) {
+        if (pattern.test(command)) {
+            return { allowed: false, reason: `Denied by pattern: ${pattern.source}` };
+        }
+    }
+    // Extract the base command (first word)
+    const baseCommand = command.trim().split(/\s+/)[0];
+    // Check allowlist
+    if (!ALLOWED_COMMANDS.has(baseCommand)) {
+        return {
+            allowed: false,
+            reason: `Command '${baseCommand}' not in allowlist`,
+        };
+    }
+    return { allowed: true };
+}
+/**
+ * Run a command in a worktree directory.
+ */
+function runCommand(command, cwd, options = {}) {
+    const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
+    const maxOutput = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+    // Validate command
+    const validation = validateCommand(command);
+    if (!validation.allowed) {
+        return Promise.resolve({
+            exitCode: 126,
+            stdout: '',
+            stderr: `Command blocked: ${validation.reason}`,
+            durationMs: 0,
+        });
+    }
+    return new Promise((resolve) => {
+        const startTime = Date.now();
+        let stdout = '';
+        let stderr = '';
+        let killed = false;
+        const child = (0, child_process_1.spawn)(command, [], {
+            cwd,
+            shell: true,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout,
+            windowsVerbatimArguments: true,
+        });
+        child.stdout.on('data', (data) => {
+            stdout += data.toString();
+            if (stdout.length > maxOutput) {
+                stdout = stdout.slice(0, maxOutput);
+                child.kill();
+                killed = true;
+            }
+        });
+        child.stderr.on('data', (data) => {
+            stderr += data.toString();
+            if (stderr.length > maxOutput) {
+                stderr = stderr.slice(0, maxOutput);
+            }
+        });
+        child.on('close', (code) => {
+            const durationMs = Date.now() - startTime;
+            resolve({
+                exitCode: killed ? 124 : (code ?? 1),
+                stdout: redactSecrets(stdout),
+                stderr: redactSecrets(killed ? `${stderr}\n[TIMEOUT or output limit exceeded]` : stderr),
+                durationMs,
+            });
+        });
+        child.on('error', (err) => {
+            const durationMs = Date.now() - startTime;
+            resolve({
+                exitCode: 1,
+                stdout,
+                stderr: err.message,
+                durationMs,
+            });
+        });
+    });
+}
+/**
+ * Run a verification step command.
+ * Returns the result with exit code and output.
+ */
+async function runVerificationCommand(step, cwd, timeoutMs) {
+    const commands = {
+        build: 'npm run build',
+        test: 'npm test',
+        lint: 'npx eslint .',
+        git_diff: 'git diff --stat',
+    };
+    const command = commands[step];
+    if (!command) {
+        return {
+            exitCode: 1,
+            stdout: '',
+            stderr: `Unknown verification step: ${step}`,
+            durationMs: 0,
+        };
+    }
+    log.info(`Running verification: ${step} -> ${command}`);
+    return runCommand(command, cwd, { timeout: timeoutMs });
+}
+//# sourceMappingURL=runner.js.map

package/dist/lib/orchestrator/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/lib/orchestrator/runner.ts"],"names":[],"mappings":";;AA4GA,gCA0EC;AAMD,wDAwBC;AApND;;;;;GAKG;AACH,iDAAsC;AAEtC,MAAM,GAAG,GAAG;IACV,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC;IACrD,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACtD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;CACzD,CAAC;AAEF,2CAA2C;AAC3C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,eAAe,GAAG;IACtB,cAAc;IACd,UAAU;IACV,YAAY;IACZ,SAAS;IACT,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,WAAW;IACX,UAAU;IACV,WAAW;IACX,eAAe;IACf,aAAa;CACd,CAAC;AAEF,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AACxD,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AASzD;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;QACT,iDAAiD;SAChD,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC;SACvD,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC;SACvD,OAAO,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;SAC1D,OAAO,CAAC,iCAAiC,EAAE,mBAAmB,CAAC;QAChE,0BAA0B;SACzB,OAAO,CAAC,yDAAyD,EAChE,eAAe,CAAC;QAClB,qBAAqB;SACpB,OAAO,CAAC,6CAA6C,EAAE,iBAAiB,CAAC;QAC1E,qDAAqD;SACpD,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,uBAAuB;IACvB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnD,kBAAkB;IAClB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY,WAAW,oBAAoB;SACpD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CACxB,OAAe,EACf,GAAW,EACX,UAGI,EAAE;IAEN,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAErE,mBAAmB;IACnB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,oBAAoB,UAAU,CAAC,MAAM,EAAE;YAC/C,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,EAAE,EAAE;YAC/B,GAAG;YACH,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO;YACP,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACpC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,OAAO,CAAC;gBACN,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBACpC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;gBAC7B,MAAM,EAAE,aAAa,CACnB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,sCAAsC,CAAC,CAAC,CAAC,MAAM,CAClE;gBACD,UAAU;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,UAAU;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,GAAW,EACX,SAAkB;IAElB,MAAM,QAAQ,GAA2B;QACvC,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,iBAAiB;KAC5B,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,8BAA8B,IAAI,EAAE;YAC5C,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,yBAAyB,IAAI,OAAO,OAAO,EAAE,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/lib/orchestrator/worktree.d.ts

@@ -0,0 +1,43 @@
+export interface WorktreeInfo {
+    path: string;
+    branch: string;
+    commitHash: string;
+}
+export interface GitStatus {
+    branch: string;
+    dirty: boolean;
+    ahead: number;
+    files: string[];
+}
+/**
+ * Get the worktree root directory for a project.
+ * Derived from the project's linked path.
+ */
+export declare function getWorktreeRoot(projectPath: string): string;
+/**
+ * Create a new Git worktree for an orchestrator task.
+ */
+export declare function createWorktree(repoPath: string, branch: string, baseBranch: string, taskId: string): WorktreeInfo;
+/**
+ * Remove a Git worktree.
+ */
+export declare function removeWorktree(repoPath: string, worktreePath: string): void;
+/**
+ * Get git status for a worktree.
+ */
+export declare function gitStatus(worktreePath: string): GitStatus;
+/**
+ * Commit changes in a worktree.
+ */
+export declare function gitCommit(worktreePath: string, message: string, files?: string[]): string;
+/**
+ * Merge a branch into the integration branch.
+ */
+export declare function gitMerge(repoPath: string, sourceBranch: string, targetBranch: string): {
+    success: boolean;
+    conflictFiles?: string[];
+};
+/**
+ * Get the diff for a worktree.
+ */
+export declare function gitDiff(worktreePath: string): string;