teamshare-bridge 0.2.5 → 0.4.0

package/dist/lib/audit/security.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * Security checker — scans source files for hardcoded secrets,
+ * unguarded public endpoints, and dangerous React patterns.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSecurityChecks = runSecurityChecks;
+const types_1 = require("./types");
+const SECRET_PATTERNS = [
+    { pattern: /sk_live_[A-Za-z0-9]+/, name: 'Stripe live key', severity: types_1.Severity.Critical },
+    { pattern: /sk_test_[A-Za-z0-9]+/, name: 'Stripe test key', severity: types_1.Severity.High },
+    { pattern: /AIza[A-Za-z0-9_-]+/, name: 'Google API key', severity: types_1.Severity.Critical },
+    { pattern: /Bearer\s+[A-Za-z0-9]/, name: 'Hardcoded bearer token', severity: types_1.Severity.Critical },
+    { pattern: /PASSWORD\s*=\s*['"][^'"]+['"]/, name: 'Hardcoded password', severity: types_1.Severity.Critical },
+    { pattern: /SECRET\s*=\s*['"][^'"]+['"]/, name: 'Hardcoded secret', severity: types_1.Severity.Critical },
+    { pattern: /KEY\s*=\s*['"][^'"]+['"]/, name: 'Hardcoded key', severity: types_1.Severity.High },
+    {
+        pattern: /['"][0-9a-f]{32,}['"]/,
+        name: 'Potential hex secret',
+        severity: types_1.Severity.Medium,
+    },
+];
+/**
+ * TeamShare agent keys start with `ts_` followed by alphanumerics.
+ * We exclude lines that look like type imports or enum values.
+ */
+const TS_KEY_PATTERN = /\bts_[A-Za-z0-9]{16,}\b/;
+const TS_KEY_EXCLUSION = /import\s|type\s|enum\s|\/\//;
+const SKIP_PATHS = /node_modules|\.env\.example|\.test\.|\.spec\.|__tests__|generated\//;
+function shouldSkipFile(rel) {
+    return SKIP_PATHS.test(rel);
+}
+function isTypeDefinition(rel) {
+    return /\.d\.ts$/.test(rel);
+}
+/**
+ * Check a single line for secret patterns.
+ */
+function checkLineForSecrets(line, rel, lineNum) {
+    const findings = [];
+    // ts_ key pattern — skip type imports and comments
+    if (TS_KEY_PATTERN.test(line) && !TS_KEY_EXCLUSION.test(line)) {
+        findings.push({
+            severity: types_1.Severity.Critical,
+            category: types_1.Category.Security,
+            file: rel,
+            line: lineNum,
+            message: 'Potential TeamShare agent key found in source code',
+            evidence: line.trim(),
+            suggestedFix: 'Move secrets to environment variables or the Vault; never hardcode keys.',
+            rule: 'SEC-001',
+        });
+    }
+    for (const { pattern, name, severity } of SECRET_PATTERNS) {
+        if (pattern.test(line)) {
+            findings.push({
+                severity,
+                category: types_1.Category.Security,
+                file: rel,
+                line: lineNum,
+                message: `${name} detected in source code`,
+                evidence: line.trim(),
+                suggestedFix: 'Move secrets to environment variables or a secrets manager.',
+                rule: 'SEC-002',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Check a controller file for @Public() without any guard.
+ */
+function checkUnguardedPublic(content, rel) {
+    const findings = [];
+    const lines = content.split('\n');
+    const hasPublicDecorator = /@Public\(\)/.test(content);
+    if (!hasPublicDecorator)
+        return findings;
+    const hasGuard = /@UseGuards\(/.test(content) ||
+        /AgentsDualAuthGuard/.test(content) ||
+        /ApiKeyGuard/.test(content);
+    if (hasGuard)
+        return findings;
+    // Find the line with @Public()
+    for (let i = 0; i < lines.length; i++) {
+        if (/@Public\(\)/.test(lines[i])) {
+            findings.push({
+                severity: types_1.Severity.Critical,
+                category: types_1.Category.Security,
+                file: rel,
+                line: i + 1,
+                message: '@Public() decorator used without any guard — endpoint is completely unprotected',
+                evidence: lines[i].trim(),
+                suggestedFix: 'Add @UseGuards(AuthGuard) or @UseGuards(AgentsDualAuthGuard) to protect this endpoint.',
+                rule: 'SEC-003',
+            });
+            break; // Only report once per file
+        }
+    }
+    return findings;
+}
+/**
+ * Check for dangerouslySetInnerHTML in React components.
+ */
+function checkDangerouslySetInnerHTML(content, rel) {
+    const findings = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        if (/dangerouslySetInnerHTML/.test(lines[i])) {
+            findings.push({
+                severity: types_1.Severity.Medium,
+                category: types_1.Category.Security,
+                file: rel,
+                line: i + 1,
+                message: 'dangerouslySetInnerHTML used — potential XSS vector',
+                evidence: lines[i].trim(),
+                suggestedFix: 'Sanitize HTML input or use a library like DOMPurify before rendering.',
+                rule: 'SEC-004',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Run all security checks against the repository.
+ */
+function runSecurityChecks(ctx) {
+    const findings = [];
+    const files = ctx.listFiles('**/*.{ts,tsx}');
+    for (const rel of files) {
+        if (shouldSkipFile(rel) || isTypeDefinition(rel))
+            continue;
+        const content = ctx.readFile(rel);
+        if (!content)
+            continue;
+        const lines = content.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            findings.push(...checkLineForSecrets(lines[i], rel, i + 1));
+        }
+        // Controller guard check — only for backend controllers
+        if (rel.includes('.controller.ts')) {
+            findings.push(...checkUnguardedPublic(content, rel));
+        }
+        // dangerouslySetInnerHTML — only for TSX files
+        if (rel.endsWith('.tsx')) {
+            findings.push(...checkDangerouslySetInnerHTML(content, rel));
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=security.js.map

package/dist/lib/audit/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/lib/audit/security.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA8IH,8CA2BC;AAvKD,mCAA6C;AAG7C,MAAM,eAAe,GAAiE;IACpF,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,QAAQ,EAAE;IACzF,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,IAAI,EAAE;IACrF,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,QAAQ,EAAE;IACtF,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,QAAQ,EAAE;IAChG,EAAE,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,QAAQ,EAAE;IACrG,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAQ,CAAC,QAAQ,EAAE;IACjG,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAQ,CAAC,IAAI,EAAE;IACvF;QACE,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,gBAAQ,CAAC,MAAM;KAC1B;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAEvD,MAAM,UAAU,GAAG,qEAAqE,CAAC;AAEzF,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IACrE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,mDAAmD;IACnD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;YAC3B,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,oDAAoD;YAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;YACrB,YAAY,EAAE,0EAA0E;YACxF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ;gBACR,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,GAAG,IAAI,0BAA0B;gBAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;gBACrB,YAAY,EAAE,6DAA6D;gBAC3E,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe,EAAE,GAAW;IACxD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,kBAAkB,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,kBAAkB;QAAE,OAAO,QAAQ,CAAC;IAEzC,MAAM,QAAQ,GACZ,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,+BAA+B;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EACL,iFAAiF;gBACnF,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACzB,YAAY,EACV,wFAAwF;gBAC1F,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,4BAA4B;QACrC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,gBAAQ,CAAC,MAAM;gBACzB,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,qDAAqD;gBAC9D,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACzB,YAAY,EAAE,uEAAuE;gBACrF,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,GAAmB;IACnD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAE7C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,SAAS;QAE3D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,wDAAwD;QACxD,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,+CAA+C;QAC/C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/audit/types.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Audit engine types — finding severity, categories, and the audit manifest.
+ */
+export declare enum Severity {
+    Critical = "critical",
+    High = "high",
+    Medium = "medium",
+    Low = "low",
+    Advisory = "advisory"
+}
+export declare enum Category {
+    Security = "security",
+    Modularity = "modularity",
+    RBAC = "rbac",
+    Errors = "errors",
+    Quality = "quality",
+    UX = "ux",
+    Docs = "docs",
+    Gates = "gates"
+}
+export interface Finding {
+    severity: Severity;
+    category: Category;
+    file: string;
+    line?: number;
+    column?: number;
+    message: string;
+    evidence?: string;
+    suggestedFix?: string;
+    rule?: string;
+}
+export interface AuditResult {
+    repoName: string;
+    repoPath: string;
+    repoType: 'web' | 'backend' | 'mobile' | 'unknown';
+    isExistingRepo: boolean;
+    findings: Finding[];
+    gateResults: GateResult[];
+    scannedFiles: number;
+    startedAt: string;
+    completedAt: string;
+}
+export interface GateResult {
+    name: string;
+    passed: boolean;
+    output?: string;
+    error?: string;
+}
+export interface AuditOptions {
+    path: string;
+    type?: 'auto' | 'web' | 'backend' | 'mobile';
+    reportPath?: string;
+    upload?: boolean;
+    taskId?: string;
+    deep?: boolean;
+    existingRepo?: boolean;
+    /** Skip build/typecheck gates (fast structural-only audit). */
+    skipGates?: boolean;
+}
+export interface CheckerContext {
+    root: string;
+    repoType: 'web' | 'backend' | 'mobile' | 'unknown';
+    isExistingRepo: boolean;
+    readFile: (relativePath: string) => string | null;
+    listFiles: (glob: string) => string[];
+    fileExists: (relativePath: string) => boolean;
+}

package/dist/lib/audit/types.js

@@ -0,0 +1,26 @@
+"use strict";
+/**
+ * Audit engine types — finding severity, categories, and the audit manifest.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Category = exports.Severity = void 0;
+var Severity;
+(function (Severity) {
+    Severity["Critical"] = "critical";
+    Severity["High"] = "high";
+    Severity["Medium"] = "medium";
+    Severity["Low"] = "low";
+    Severity["Advisory"] = "advisory";
+})(Severity || (exports.Severity = Severity = {}));
+var Category;
+(function (Category) {
+    Category["Security"] = "security";
+    Category["Modularity"] = "modularity";
+    Category["RBAC"] = "rbac";
+    Category["Errors"] = "errors";
+    Category["Quality"] = "quality";
+    Category["UX"] = "ux";
+    Category["Docs"] = "docs";
+    Category["Gates"] = "gates";
+})(Category || (exports.Category = Category = {}));
+//# sourceMappingURL=types.js.map

package/dist/lib/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/audit/types.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,iCAAqB,CAAA;AACvB,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,qCAAyB,CAAA;IACzB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,+BAAmB,CAAA;IACnB,qBAAS,CAAA;IACT,yBAAa,CAAA;IACb,2BAAe,CAAA;AACjB,CAAC,EATW,QAAQ,wBAAR,QAAQ,QASnB"}

package/dist/lib/audit/ux.d.ts

@@ -0,0 +1,9 @@
+/**
+ * UX / loading-state checker — verifies that frontend views handling
+ * async data have proper loading, error, and empty states.
+ */
+import type { Finding, CheckerContext } from './types';
+/**
+ * Run all UX / loading-state checks against the repository.
+ */
+export declare function runUXChecks(ctx: CheckerContext): Finding[];

package/dist/lib/audit/ux.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * UX / loading-state checker — verifies that frontend views handling
+ * async data have proper loading, error, and empty states.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runUXChecks = runUXChecks;
+const types_1 = require("./types");
+const VIEW_FILE = /src\/modules\/[^/]+\/views\/[^/]+\.tsx$/;
+const HAS_USE_QUERY = /useQuery|useSuspenseQuery|useInfiniteQuery/;
+// A view satisfies the loading requirement either by rendering a Skeleton
+// itself or by passing loading={...} down to a table/list that does.
+const HAS_SKELETON = /Skeleton|loading\s*=\s*\{/;
+const HAS_ERROR_STATE = /ErrorState|\bisError\b|error\s*[=?:]|catch\s*\(/;
+// emptyTitle/emptyDescription/emptyIcon props delegate empty handling to
+// the table; a direct EmptyState render also counts.
+const HAS_EMPTY_STATE = /EmptyState|emptyTitle|emptyDescription|emptyIcon|data\.length\s*===\s*0/;
+/**
+ * Check a single view file for query usage and required UX states.
+ */
+function checkViewFile(content, rel) {
+    const findings = [];
+    const isQueryView = HAS_USE_QUERY.test(content);
+    if (!isQueryView)
+        return findings;
+    if (!HAS_SKELETON.test(content)) {
+        findings.push({
+            severity: types_1.Severity.Medium,
+            category: types_1.Category.UX,
+            file: rel,
+            message: 'Query view missing loading skeleton — no loading state shown to user',
+            suggestedFix: 'Render a Skeleton (or pass loading= to a table that renders one) while the query is loading.',
+            rule: 'UX-001',
+        });
+    }
+    if (!HAS_ERROR_STATE.test(content)) {
+        findings.push({
+            severity: types_1.Severity.Medium,
+            category: types_1.Category.UX,
+            file: rel,
+            message: 'Query view missing error state — query failures not communicated to user',
+            suggestedFix: 'Check query.isError and render an ErrorState component with retry action.',
+            rule: 'UX-002',
+        });
+    }
+    if (!HAS_EMPTY_STATE.test(content)) {
+        findings.push({
+            severity: types_1.Severity.Medium,
+            category: types_1.Category.UX,
+            file: rel,
+            message: 'Query view missing empty state — empty results not communicated to user',
+            suggestedFix: 'Check data.length === 0 and render an EmptyState with a helpful message.',
+            rule: 'UX-003',
+        });
+    }
+    return findings;
+}
+/**
+ * Check that shared UX components exist.
+ *
+ * Naming-agnostic: matches any *-empty-state / *-skeleton file so both
+ * TeamShare's ts-* and scaffolded app-* (or any user) naming pass.
+ */
+function checkSharedUXComponents(ctx) {
+    const findings = [];
+    const sharedDir = 'src/components/shared';
+    const sharedFiles = new Set(ctx
+        .listFiles(`${sharedDir}/*.tsx`)
+        .map((f) => f.toLowerCase()));
+    const hasFile = (suffix) => [...sharedFiles].some((f) => f.endsWith(suffix));
+    if (!hasFile('empty-state.tsx')) {
+        findings.push({
+            severity: types_1.Severity.Low,
+            category: types_1.Category.UX,
+            file: `${sharedDir}/`,
+            message: 'Missing shared empty state component',
+            suggestedFix: `Create ${sharedDir}/empty-state.tsx with a reusable EmptyState component.`,
+            rule: 'UX-004',
+        });
+    }
+    if (!hasFile('skeleton.tsx')) {
+        findings.push({
+            severity: types_1.Severity.Low,
+            category: types_1.Category.UX,
+            file: `${sharedDir}/`,
+            message: 'Missing shared skeleton component',
+            suggestedFix: `Create ${sharedDir}/skeleton.tsx with a reusable Skeleton component.`,
+            rule: 'UX-005',
+        });
+    }
+    return findings;
+}
+/**
+ * Run all UX / loading-state checks against the repository.
+ */
+function runUXChecks(ctx) {
+    const findings = [];
+    if (ctx.repoType !== 'web' && ctx.repoType !== 'mobile')
+        return findings;
+    const viewFiles = ctx.listFiles('src/modules/*/views/*.tsx');
+    for (const rel of viewFiles) {
+        if (/node_modules|dist/.test(rel))
+            continue;
+        const content = ctx.readFile(rel);
+        if (!content)
+            continue;
+        findings.push(...checkViewFile(content, rel));
+    }
+    findings.push(...checkSharedUXComponents(ctx));
+    return findings;
+}
+//# sourceMappingURL=ux.js.map

package/dist/lib/audit/ux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ux.js","sourceRoot":"","sources":["../../../src/lib/audit/ux.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA0GH,kCAmBC;AA3HD,mCAA6C;AAG7C,MAAM,SAAS,GAAG,yCAAyC,CAAC;AAC5D,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,eAAe,GAAG,iDAAiD,CAAC;AAC1E,yEAAyE;AACzE,qDAAqD;AACrD,MAAM,eAAe,GAAG,yEAAyE,CAAC;AAElG;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,GAAW;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAElC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,MAAM;YACzB,QAAQ,EAAE,gBAAQ,CAAC,EAAE;YACrB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,sEAAsE;YAC/E,YAAY,EAAE,8FAA8F;YAC5G,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,MAAM;YACzB,QAAQ,EAAE,gBAAQ,CAAC,EAAE;YACrB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,0EAA0E;YACnF,YAAY,EAAE,2EAA2E;YACzF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,MAAM;YACzB,QAAQ,EAAE,gBAAQ,CAAC,EAAE;YACrB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,yEAAyE;YAClF,YAAY,EAAE,0EAA0E;YACxF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,GAAmB;IAClD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,SAAS,GAAG,uBAAuB,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,GAAG;SACA,SAAS,CAAC,GAAG,SAAS,QAAQ,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC/B,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,CACjC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnD,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,GAAG;YACtB,QAAQ,EAAE,gBAAQ,CAAC,EAAE;YACrB,IAAI,EAAE,GAAG,SAAS,GAAG;YACrB,OAAO,EAAE,sCAAsC;YAC/C,YAAY,EAAE,UAAU,SAAS,wDAAwD;YACzF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,gBAAQ,CAAC,GAAG;YACtB,QAAQ,EAAE,gBAAQ,CAAC,EAAE;YACrB,IAAI,EAAE,GAAG,SAAS,GAAG;YACrB,OAAO,EAAE,mCAAmC;YAC5C,YAAY,EAAE,UAAU,SAAS,mDAAmD;YACpF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,GAAmB;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAEzE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAE7D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/brief.d.ts

@@ -1,9 +1,13 @@
 /**
  * Task-brief fetching + session reporting helpers shared by the CLI, daemon
  * and protocol handler (contract section 5, "CLI session").
+ *
+ * Compact brief: sends only essential metadata (~500-800 tokens) and lets
+ * agents fetch additional context on-demand via MCP/REST tools.
  */
 import { TeamshareApi, Task } from './api';
 export interface BriefOptions {
+    /** Legacy: no longer used for doc content (names-only in compact brief). */
     maxDocChars?: number;
 }
 /** Builds the Markdown brief the working session sees. */

package/dist/lib/brief.js

@@ -4,10 +4,36 @@ exports.fetchTaskBrief = fetchTaskBrief;
 exports.reportStatus = reportStatus;
 exports.postClosingComment = postClosingComment;
 exports.waitForTaskCompletion = waitForTaskCompletion;
-const MAX_DOC_CHARS = 20_000;
+/** Safety cap: descriptions beyond this are truncated with a hint. */
+const TRUNC_DESC_CHARS = 5_000;
+/** Only the last N comments are included (summary format). */
+const MAX_COMMENTS_IN_BRIEF = 3;
+/** Only unchecked checklist items shown (up to this many). */
+const MAX_UNCHECKED_CHECKLIST = 10;
+/** Max document names listed. */
+const MAX_DOC_NAMES = 15;
+/** Estimate token count from characters (conservative). */
+function estimateChars(text) {
+    return text.length;
+}
+/** Count total + done subtask nodes recursively. */
+function countSubtasks(nodes) {
+    let total = 0;
+    let done = 0;
+    for (const node of nodes) {
+        total++;
+        if (node.done)
+            done++;
+        if (node.children?.length) {
+            const child = countSubtasks(node.children);
+            total += child.total;
+            done += child.done;
+        }
+    }
+    return { total, done };
+}
 /** Builds the Markdown brief the working session sees. */
 async function fetchTaskBrief(api, taskId, opts = {}) {
-    const maxDocChars = opts.maxDocChars ?? MAX_DOC_CHARS;
     const task = await api.getTask(taskId);
     const lines = [];
     lines.push(`# Task: ${task.title}`);
@@ -19,86 +45,98 @@ async function fetchTaskBrief(api, taskId, opts = {}) {
     if (task.project)
         lines.push(`- **Project:** ${task.project.name} (${task.projectId})`);
     lines.push('');
+    // Description — truncated at safety cap to prevent token waste on long specs.
     if (task.description) {
         lines.push('## Description');
         lines.push('');
-        lines.push(task.description);
+        if (task.description.length > TRUNC_DESC_CHARS) {
+            lines.push(`${task.description.slice(0, TRUNC_DESC_CHARS)}…`);
+            lines.push('');
+            lines.push(`*(truncated — use get_task for full description)*`);
+        }
+        else {
+            lines.push(task.description);
+        }
         lines.push('');
     }
-    // Verification checklist — predefined criteria the agent must verify.
+    // Verification checklist — only unchecked items (max 10).
+    // The agent can fetch the full list via list_checklist_items.
     const checklist = await api.listChecklistItems(taskId).catch(() => []);
+    const unchecked = checklist.filter((item) => !item.done);
     if (checklist.length > 0) {
-        lines.push('## Verification Checklist');
+        const doneCount = checklist.length - unchecked.length;
+        lines.push(`## Verification Checklist`);
         lines.push('');
-        lines.push('You MUST verify each criterion below. Check them off as you complete them.');
+        lines.push(`You MUST verify each criterion below. Check them off as you complete them.`);
         lines.push('');
-        for (const item of checklist) {
-            lines.push(`- [${item.done ? 'x' : ' '}] ${item.title}`);
+        for (const item of unchecked.slice(0, MAX_UNCHECKED_CHECKLIST)) {
+            lines.push(`- [ ] ${item.title}`);
+        }
+        const remaining = unchecked.length - MAX_UNCHECKED_CHECKLIST;
+        if (remaining > 0) {
+            lines.push(`- *(${remaining} more unchecked — use list_checklist_items for full list)*`);
+        }
+        if (doneCount > 0) {
+            lines.push(`- *(${doneCount} already done)*`);
         }
         lines.push('');
     }
+    // Comments — last 3 only (summary format).
+    // The agent can fetch the full thread via get_task.
     const comments = await api.listComments(taskId);
     if (comments.length > 0) {
-        lines.push('## Comments');
+        const lastN = comments.slice(-MAX_COMMENTS_IN_BRIEF);
+        lines.push(`## Comments`);
         lines.push('');
-        for (const c of comments.slice(-25)) {
+        for (const c of lastN) {
             const author = c.author?.name ?? c.authorId ?? 'unknown';
             lines.push(`- **${author}** (${c.createdAt}): ${c.body.replace(/\s+/g, ' ')}`);
         }
+        if (comments.length > MAX_COMMENTS_IN_BRIEF) {
+            lines.push(`- *(${comments.length - MAX_COMMENTS_IN_BRIEF} older comments — use get_task for full thread)*`);
+        }
         lines.push('');
     }
-    // Subtask breakdown (existing or to-be-created) - the agent's progress plan.
+    // Subtasks — count + summary (no tree).
+    // The agent can fetch the full tree via list_subtasks.
     const subtasks = await api.listSubtasks(taskId).catch(() => []);
     if (subtasks.length > 0) {
-        lines.push('## Subtasks');
+        const { total, done } = countSubtasks(subtasks);
+        const pending = total - done;
+        lines.push(`## Subtasks`);
         lines.push('');
-        const render = (nodes, depth) => {
-            for (const node of nodes) {
-                lines.push(`${'  '.repeat(depth)}- [${node.done ? 'x' : ' '}] ${node.title}` +
-                    (node.assignee?.name ? ` (assignee: ${node.assignee.name})` : ''));
-                if (node.children?.length)
-                    render(node.children, depth + 1);
-            }
-        };
-        render(subtasks, 0);
+        lines.push(`**${total} total** — ${done} done, ${pending} pending`);
+        lines.push('');
+        lines.push(`*(use list_subtasks for full breakdown)*`);
         lines.push('');
     }
+    // Project documents — names only (no content fetch).
+    // The agent can read documents via list_documents + read_document.
     if (task.projectId) {
         const docsResult = await api.listDocuments(task.projectId);
         const allDocs = docsResult.items ?? [];
-        // Smart filtering: only include relevant docs in the brief.
-        // The agent can read others via MCP tools (list_documents, read_document).
         const relevantDocs = allDocs.filter((doc) => {
             const folder = doc.folderPath || '/';
-            // Task-specific: agents/*/tasks/<taskId>/ or agents/*/tasks/<taskId>
             if (folder.includes(`/tasks/${taskId}`) || folder.endsWith(`tasks/${taskId}`))
                 return true;
-            // Shared knowledge: docs/ folder and subfolders
             if (folder.startsWith('docs/') || folder === 'docs')
                 return true;
-            // Root level
             if (folder === '/')
                 return true;
             return false;
         });
         if (relevantDocs.length > 0) {
+            const shown = relevantDocs.slice(0, MAX_DOC_NAMES);
             lines.push('## Project files');
             lines.push('');
-            let used = 0;
-            for (const doc of relevantDocs.slice(0, 20)) {
-                const content = await api.getDocumentContent(doc);
-                const remain = maxDocChars - used;
-                if (remain <= 0) {
-                    lines.push(`- ${doc.name}: (omitted - budget reached)`);
-                    continue;
-                }
-                const body = content.length > remain ? `${content.slice(0, remain)}…` : content;
-                used += body.length;
-                lines.push(`### ${doc.name}${doc.mime ? ` (${doc.mime})` : ''}`);
-                lines.push('');
-                lines.push(body);
-                lines.push('');
+            for (const doc of shown) {
+                const path = doc.folderPath && doc.folderPath !== '/' ? `${doc.folderPath}/` : '';
+                lines.push(`- ${path}${doc.name}${doc.mime ? ` (${doc.mime})` : ''}`);
+            }
+            if (relevantDocs.length > MAX_DOC_NAMES) {
+                lines.push(`- *(${relevantDocs.length - MAX_DOC_NAMES} more — use list_documents for full list)*`);
             }
+            lines.push('');
         }
     }
     return lines.join('\n');

package/dist/lib/brief.js.map

@@ -1 +1 @@
-{"version":3,"file":"brief.js","sourceRoot":"","sources":["../../src/lib/brief.ts"],"names":[],"mappings":";;AAaA,wCA2GC;AAGD,oCAYC;AAGD,gDAWC;AAGD,sDAmBC;AArKD,MAAM,aAAa,GAAG,MAAM,CAAC;AAM7B,0DAA0D;AACnD,KAAK,UAAU,cAAc,CAClC,GAAiB,EACjB,MAAc,EACd,OAAqB,EAAE;IAEvB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iBAAiB,IAAI,CAAC,MAAM,IAAI;QAC9B,iBAAiB,IAAI,CAAC,QAAQ,EAAE;QAChC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAC;IACF,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,KAAa,EAAQ,EAAE;YAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE;oBAC/D,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;gBACF,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;oBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAEvC,4DAA4D;QAC5D,2EAA2E;QAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;YACrC,qEAAqE;YACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3F,gDAAgD;YAChD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACjE,aAAa;YACb,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;gBAClC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,8BAA8B,CAAC,CAAC;oBACxD,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;gBAChF,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oDAAoD;AAC7C,KAAK,UAAU,YAAY,CAChC,GAAiB,EACjB,OAAe,EACf,MAAwC,EACxC,MAAe,EACf,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,cAAc,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,qEAAqE;AAC9D,KAAK,UAAU,kBAAkB,CACtC,GAAiB,EACjB,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,qBAAqB,CACzC,GAAiB,EACjB,MAAc,EACd,MAAM,GAAG,MAAM,EACf,SAAS,GAAG,EAAE,GAAG,MAAM,EACvB,UAAqC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}
+{"version":3,"file":"brief.js","sourceRoot":"","sources":["../../src/lib/brief.ts"],"names":[],"mappings":";;AAgDA,wCAqHC;AAGD,oCAYC;AAGD,gDAWC;AAGD,sDAmBC;AA/MD,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,8DAA8D;AAC9D,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,8DAA8D;AAC9D,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,iCAAiC;AACjC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,2DAA2D;AAC3D,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,oDAAoD;AACpD,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,EAAE,CAAC;QACR,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;YACrB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAOD,0DAA0D;AACnD,KAAK,UAAU,cAAc,CAClC,GAAiB,EACjB,MAAc,EACd,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iBAAiB,IAAI,CAAC,MAAM,IAAI;QAC9B,iBAAiB,IAAI,CAAC,QAAQ,EAAE;QAChC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAC;IACF,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,8EAA8E;IAC9E,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,0DAA0D;IAC1D,8DAA8D;IAC9D,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,uBAAuB,CAAC;QAC7D,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,4DAA4D,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,iBAAiB,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,2CAA2C;IAC3C,oDAAoD;IACpD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,MAAM,GAAG,qBAAqB,kDAAkD,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,wCAAwC;IACxC,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,IAAI,UAAU,OAAO,UAAU,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,qDAAqD;IACrD,mEAAmE;IACnE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAEvC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;YACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3F,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACjE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC,MAAM,GAAG,aAAa,4CAA4C,CAAC,CAAC;YACrG,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oDAAoD;AAC7C,KAAK,UAAU,YAAY,CAChC,GAAiB,EACjB,OAAe,EACf,MAAwC,EACxC,MAAe,EACf,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,cAAc,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,qEAAqE;AAC9D,KAAK,UAAU,kBAAkB,CACtC,GAAiB,EACjB,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,qBAAqB,CACzC,GAAiB,EACjB,MAAc,EACd,MAAM,GAAG,MAAM,EACf,SAAS,GAAG,EAAE,GAAG,MAAM,EACvB,UAAqC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/lib/chat-reply.js

@@ -61,7 +61,7 @@ async function generateReply(agentName, target, prompt, projectId, opts, project
                 title: `TeamShare chat ${projectId}`,
                 agentKey: opts.api?.apiKey,
                 apiBaseUrl: opts.api?.baseUrl,
-            }), { opencodeAgentKey: opts.api?.apiKey, opencodeMcpUrl: opts.api?.baseUrl });
+            }), { opencodeAgentKey: opts.api?.apiKey, opencodeMcpUrl: opts.api?.baseUrl, opencodeSessionMode: 'chat' });
         }
         throw new Error('harness-only model requires a harness (install one of: opencode, claude, codex, gemini, copilot, goose, openhands)');
     }
@@ -94,7 +94,7 @@ async function generateReply(agentName, target, prompt, projectId, opts, project
                 title: `TeamShare chat ${projectId}`,
                 agentKey: opts.api?.apiKey,
                 apiBaseUrl: opts.api?.baseUrl,
-            }), { opencodeAgentKey: opts.api?.apiKey, opencodeMcpUrl: opts.api?.baseUrl });
+            }), { opencodeAgentKey: opts.api?.apiKey, opencodeMcpUrl: opts.api?.baseUrl, opencodeSessionMode: 'chat' });
         }
     }
     throw new Error('No harness found (install one of: opencode, claude, codex, gemini, copilot, goose, openhands, or use --self with LLM_API_KEY)');