@almightygpt/core 0.9.1 → 0.10.0

package/dist/plan/run-plan.js

@@ -0,0 +1,193 @@
+/**
+ * `almightygpt plan` — Worker AI reads a free-text requirement +
+ * project memory, produces a structured plan markdown.
+ *
+ * Distinct from the review pipeline because the INPUT is a
+ * requirement (a sentence or paragraph from the user describing
+ * what they want), not a git diff. Output is a plan doc with
+ * required sections — same shape on every run so the Reviewer
+ * downstream knows what to expect.
+ *
+ * Plans land at `docs/<worker>-plans/<topic>.md`. The Reviewer step
+ * then runs against this plan via the `review --plan <file>` mode
+ * (see run-plan-review.ts).
+ */
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { loadConfig } from "../config/load.js";
+import { makeAdapter } from "../adapters/factory.js";
+import { AdapterError } from "../adapters/types.js";
+import { assembleMemory } from "../review/memory.js";
+import { createRunFolder, writeRunMetadata, writeRunInput, writeAgentOutput, collectGitContext, } from "../runs/folder.js";
+import { assertSafeToWrite } from "../git/status.js";
+const PLAN_SYSTEM_FRAMING = [
+    "You are the Worker AI in an AlmightyGPT Plan stage.",
+    "",
+    "WHAT YOU ARE DOING: turning a free-text requirement (the user message",
+    "below) into a structured plan markdown that a Reviewer AI will then",
+    "critique. You are NOT writing code — only the plan. The human will",
+    "approve / reject / refine the plan, and only then will implementation",
+    "happen (in a separate tool).",
+    "",
+    "WHAT THE ORCHESTRATOR OWNS (do NOT include these in your response):",
+    "  - The H1 title (the orchestrator prepends `# Plan: <topic>`).",
+    "  - The header block with model / tokens / cost.",
+    "",
+    "WHAT YOU MUST PRODUCE — emit exactly these sections in this order:",
+    "  ## Goal",
+    "  ## Affected modules / surfaces",
+    "  ## Step-by-step approach",
+    "  ## Risks",
+    "  ## Test plan",
+    "  ## Open questions",
+    "",
+    "STYLE:",
+    "  - Be concrete. Name specific files, classes, functions, env vars.",
+    "  - Write so the Reviewer can find concrete things to critique.",
+    "  - Open questions are not a weakness; they're the things you'd ask",
+    "    the human if you could. Surface them.",
+].join("\n");
+function buildPlanUserMessage(topic, requirement) {
+    return [
+        `# Plan request — topic: \`${topic}\``,
+        "",
+        "## Requirement (from human)",
+        "",
+        requirement.trim(),
+        "",
+        "## Your task",
+        "",
+        "Produce the plan markdown using the structure in your system prompt.",
+        "Start your response with `## Goal` (no H1, no preamble).",
+    ].join("\n");
+}
+export async function runWorkerPlan(opts) {
+    const config = await loadConfig(opts.repoRoot);
+    const workerName = opts.worker ?? config.defaults.worker;
+    if (!workerName) {
+        throw new Error("No worker specified. Pass --worker <name> or set defaults.worker in .almightygpt/config.yaml.");
+    }
+    const agentConfig = config.agents[workerName];
+    if (!agentConfig) {
+        throw new Error(`Worker "${workerName}" not found in .almightygpt/config.yaml agents map.`);
+    }
+    if (!agentConfig.enabled) {
+        throw new Error(`Worker "${workerName}" is disabled in .almightygpt/config.yaml.`);
+    }
+    const adapter = makeAdapter(workerName, agentConfig.provider);
+    if (!(await adapter.isAvailable())) {
+        throw new AdapterError(`Adapter "${workerName}" (${agentConfig.provider}) is not available. Set the provider's API key.`, workerName);
+    }
+    // Plans land at docs/<worker>-plans/<topic>.md — symmetric with reviews.
+    const plansDir = `docs/${workerName}-plans`;
+    const planRel = `${plansDir}/${opts.topic}.md`;
+    await assertSafeToWrite(opts.repoRoot, planRel, opts.force ?? false);
+    const runFolder = await createRunFolder({
+        repoRoot: opts.repoRoot,
+        runsDir: config.runsDir,
+        topic: opts.topic,
+        type: "plan",
+    });
+    const createdAt = new Date().toISOString();
+    const memory = await assembleMemory(opts.repoRoot, agentConfig.memoryFile);
+    const systemPrompt = PLAN_SYSTEM_FRAMING + "\n\n" + memory.text;
+    const userMessage = buildPlanUserMessage(opts.topic, opts.requirement);
+    await writeRunInput(runFolder.absPath, userMessage);
+    const adapterOut = await adapter.execute({
+        role: "worker",
+        systemPrompt,
+        userMessage,
+    });
+    await writeAgentOutput(runFolder.absPath, "worker", adapterOut.content);
+    // Compose the final plan file: orchestrator-owned header + worker body.
+    const header = [
+        `# Plan: ${opts.topic}`,
+        "",
+        `> Worker: \`${workerName}\` (${adapter.provider}, ${adapterOut.modelUsed})`,
+        `> Generated: ${new Date().toISOString()}`,
+        `> Tokens: ${adapterOut.tokensIn} in / ${adapterOut.tokensOut} out`,
+        `> Cost: $${adapterOut.costUsd.toFixed(4)} USD`,
+        `> Run folder: \`${runFolder.relPath}\``,
+        "",
+    ].join("\n");
+    const footer = [
+        "",
+        "---",
+        "",
+        "## How this plan was produced",
+        "",
+        `The AlmightyGPT Plan stage produced this. Worker (\`${workerName}\`)`,
+        `read the requirement above + the project's memory files.`,
+        "",
+        "**Next stage:** cross-AI review with `almightygpt review --plan",
+        `${planRel} --reviewer codex --topic ${opts.topic}\` (Reviewer critiques`,
+        "this plan), then human approval, then implementation in your",
+        "preferred coding tool.",
+    ].join("\n");
+    const planContent = header + adapterOut.content.trim() + footer;
+    const planAbs = join(opts.repoRoot, planRel);
+    await mkdir(dirname(planAbs), { recursive: true });
+    await writeFile(planAbs, planContent, "utf8");
+    const gitContext = await collectGitContext(opts.repoRoot);
+    await writeRunMetadata(runFolder.absPath, {
+        id: runFolder.id,
+        type: "plan",
+        createdAt,
+        finishedAt: new Date().toISOString(),
+        workspacePath: opts.repoRoot,
+        topic: opts.topic,
+        git: gitContext,
+        input: { source: "requirement-file" },
+        agents: [
+            {
+                name: workerName,
+                role: "worker",
+                provider: agentConfig.provider,
+                enabled: true,
+            },
+        ],
+        adapterVersions: [],
+        status: "completed",
+        metrics: [
+            {
+                agent: workerName,
+                role: "worker",
+                provider: adapter.provider,
+                model: adapterOut.modelUsed,
+                tokensIn: adapterOut.tokensIn,
+                cachedTokensIn: adapterOut.cachedTokensIn ?? 0,
+                tokensOut: adapterOut.tokensOut,
+                costUsd: adapterOut.costUsd,
+                latencyMs: adapterOut.latencyMs,
+            },
+        ],
+        totals: {
+            tokensIn: adapterOut.tokensIn,
+            tokensOut: adapterOut.tokensOut,
+            costUsd: adapterOut.costUsd,
+            latencyMs: adapterOut.latencyMs,
+        },
+        reviewPath: planRel,
+        budget: {
+            maxCostPerRunUsd: config.budget.maxCostPerRunUsd,
+            maxTokensPerRun: config.budget.maxTokensPerRun,
+        },
+    });
+    return {
+        planPath: planRel,
+        planBytes: planContent.length,
+        worker: workerName,
+        provider: adapter.provider,
+        modelUsed: adapterOut.modelUsed,
+        tokensIn: adapterOut.tokensIn,
+        cachedTokensIn: adapterOut.cachedTokensIn ?? 0,
+        tokensOut: adapterOut.tokensOut,
+        costUsd: adapterOut.costUsd,
+        latencyMs: adapterOut.latencyMs,
+        memorySources: memory.sources,
+        memoryMissing: memory.missing,
+        runId: runFolder.id,
+        runFolder: runFolder.relPath,
+    };
+}
+//# sourceMappingURL=run-plan.js.map

package/dist/plan/run-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-plan.js","sourceRoot":"","sources":["../../src/plan/run-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA2BrD,MAAM,mBAAmB,GAAG;IAC1B,qDAAqD;IACrD,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,8BAA8B;IAC9B,EAAE;IACF,qEAAqE;IACrE,iEAAiE;IACjE,kDAAkD;IAClD,EAAE;IACF,oEAAoE;IACpE,WAAW;IACX,kCAAkC;IAClC,4BAA4B;IAC5B,YAAY;IACZ,gBAAgB;IAChB,qBAAqB;IACrB,EAAE;IACF,QAAQ;IACR,qEAAqE;IACrE,iEAAiE;IACjE,qEAAqE;IACrE,2CAA2C;CAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,oBAAoB,CAAC,KAAa,EAAE,WAAmB;IAC9D,OAAO;QACL,6BAA6B,KAAK,IAAI;QACtC,EAAE;QACF,6BAA6B;QAC7B,EAAE;QACF,WAAW,CAAC,IAAI,EAAE;QAClB,EAAE;QACF,cAAc;QACd,EAAE;QACF,sEAAsE;QACtE,0DAA0D;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAiB;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,qDAAqD,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,4CAA4C,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,YAAY,UAAU,MAAM,WAAW,CAAC,QAAQ,iDAAiD,EACjG,UAAU,CACX,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,MAAM,QAAQ,GAAG,QAAQ,UAAU,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;IAC/C,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAErE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAEvE,MAAM,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,QAAQ;QACd,YAAY;QACZ,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAExE,wEAAwE;IACxE,MAAM,MAAM,GAAG;QACb,WAAW,IAAI,CAAC,KAAK,EAAE;QACvB,EAAE;QACF,eAAe,UAAU,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,SAAS,GAAG;QAC5E,gBAAgB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QAC1C,aAAa,UAAU,CAAC,QAAQ,SAAS,UAAU,CAAC,SAAS,MAAM;QACnE,YAAY,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC/C,mBAAmB,SAAS,CAAC,OAAO,IAAI;QACxC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,MAAM,GAAG;QACb,EAAE;QACF,KAAK;QACL,EAAE;QACF,+BAA+B;QAC/B,EAAE;QACF,uDAAuD,UAAU,KAAK;QACtE,0DAA0D;QAC1D,EAAE;QACF,iEAAiE;QACjE,GAAG,OAAO,6BAA6B,IAAI,CAAC,KAAK,wBAAwB;QACzE,8DAA8D;QAC9D,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE;QACxC,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,aAAa,EAAE,IAAI,CAAC,QAAQ;QAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACrC,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,OAAO,EAAE,IAAI;aACd;SACF;QACD,eAAe,EAAE,EAAE;QACnB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,UAAU;gBACjB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,UAAU,CAAC,SAAS;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,CAAC;gBAC9C,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC;SACF;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC;QACD,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;YAChD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe;SAC/C;KACF,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,WAAW,CAAC,MAAM;QAC7B,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,CAAC;QAC9C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,aAAa,EAAE,MAAM,CAAC,OAAO;QAC7B,aAAa,EAAE,MAAM,CAAC,OAAO;QAC7B,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,SAAS,EAAE,SAAS,CAAC,OAAO;KAC7B,CAAC;AACJ,CAAC"}

package/dist/runs/types.d.ts

@@ -9,7 +9,7 @@
  *   - audit what was sent to which provider,
  *   - drive the future VS Code / dashboard / CLI history views.
  */
-export type RunType = "review-diff" | "review-path" | "review-requirement" | "review-worker-reviewer";
+export type RunType = "review-diff" | "review-path" | "review-requirement" | "review-worker-reviewer" | "plan" | "review-plan";
 export type RunStatus = "running" | "completed" | "failed" | "aborted_budget";
 export interface AgentMetrics {
     agent: string;

package/dist/runs/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runs/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,OAAO,GACf,aAAa,GACb,aAAa,GACb,oBAAoB,GACpB,wBAAwB,CAAC;AAE7B,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE9E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,+BAA+B;IAC/B,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,kBAAkB,GAAG,KAAK,CAAC;QACpE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,sDAAsD;IACtD,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC7E,gCAAgC;IAChC,eAAe,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD,oBAAoB;IACpB,MAAM,EAAE,SAAS,CAAC;IAClB,yBAAyB;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,wBAAwB;IACxB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,uCAAuC;IACvC,MAAM,EAAE;QACN,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,wDAAwD;IACxD,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,eAAe,GACf,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runs/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,OAAO,GACf,aAAa,GACb,aAAa,GACb,oBAAoB,GACpB,wBAAwB,GACxB,MAAM,GACN,aAAa,CAAC;AAElB,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE9E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,+BAA+B;IAC/B,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,kBAAkB,GAAG,KAAK,CAAC;QACpE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,sDAAsD;IACtD,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC7E,gCAAgC;IAChC,eAAe,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD,oBAAoB;IACpB,MAAM,EAAE,SAAS,CAAC;IAClB,yBAAyB;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,wBAAwB;IACxB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,uCAAuC;IACvC,MAAM,EAAE;QACN,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,wDAAwD;IACxD,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,eAAe,GACf,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almightygpt/core",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Core orchestrator, adapters, config, runs, and review logic for AlmightyGPT",
   "license": "MIT",
   "type": "module",

package/src/adapters/claude.ts

@@ -22,6 +22,7 @@ import {
   type AdapterOutput,
 } from "./types.js";
 import { resolveApiKey } from "../auth/resolver.js";
+import { DEFAULT_MODELS } from "./defaults.js";
 
 const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
   // Claude 4.x family (current)
@@ -35,7 +36,8 @@ const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
   "claude-3-opus": { input: 15.0, output: 75.0 },
 };
 
-const DEFAULT_MODEL = "claude-sonnet-4-6";
+// Default lives in adapters/defaults.ts so validator + adapter can't drift.
+const DEFAULT_MODEL = DEFAULT_MODELS.anthropic;
 
 export interface ClaudeAdapterOptions {
   apiKey?: string;

package/src/adapters/defaults.ts

@@ -0,0 +1,44 @@
+/**
+ * Single source of truth for each adapter's default model.
+ *
+ * Per Codex's v0.8 security review (P2): the validator previously
+ * hardcoded a separate `DEFAULT_VALIDATION_MODELS` constant that
+ * could drift from the adapters' defaults. We already paid the
+ * cost of one drift incident (v0.7.1, the `claude-3-5-sonnet-latest`
+ * 404 after Anthropic retired the alias) — having two drift surfaces
+ * for the same fact would have made the next one worse.
+ *
+ * Now both the adapters AND the validator import from here. Updating
+ * a default in one place updates everywhere.
+ *
+ * When you change a default model:
+ *   1. Update the value here.
+ *   2. Confirm the pricing entry in the adapter still covers the new
+ *      model (`startsWith` matching means `claude-sonnet-5-X` still
+ *      hits the `claude-sonnet-5` pricing entry, but a new family
+ *      needs a new entry).
+ *   3. Update the comment in the relevant adapter's header block.
+ */
+
+import type { ProviderId } from "../auth/types.js";
+
+/**
+ * Default model per provider used by both the adapter (when no
+ * per-call override is passed) and the auth validator (the
+ * model-level validation call).
+ */
+export const DEFAULT_MODELS: Record<ProviderId, string> = {
+  openai: "gpt-4o",
+  anthropic: "claude-sonnet-4-6",
+  google: "gemini-2.5-flash",
+};
+
+/**
+ * Pretty name for each provider — used in CLI prompts, error
+ * messages, and the wizard UI.
+ */
+export const PROVIDER_PRETTY_NAME: Record<ProviderId, string> = {
+  openai: "OpenAI",
+  anthropic: "Anthropic",
+  google: "Google",
+};

package/src/adapters/factory.ts

@@ -0,0 +1,45 @@
+/**
+ * Adapter factory — single place to map (name, provider) → concrete
+ * Adapter instance.
+ *
+ * Extracted from review/run-diff-review.ts during v0.10.0 (plan
+ * module) so the plan + review pipelines share the same factory and
+ * a new adapter only needs to be wired in one place.
+ */
+
+import { type Adapter } from "./types.js";
+import { MockAdapter } from "./mock.js";
+import { OpenAIAdapter } from "./openai.js";
+import { ClaudeAdapter } from "./claude.js";
+import { GeminiAdapter } from "./gemini.js";
+
+export function makeAdapter(name: string, provider: string): Adapter {
+  switch (provider) {
+    case "openai":
+      return new OpenAIAdapter(name);
+    case "anthropic":
+      return new ClaudeAdapter(name);
+    case "google":
+      return new GeminiAdapter(name);
+    case "mock":
+      return new MockAdapter();
+    default:
+      throw new Error(
+        `Provider "${provider}" not supported. ` +
+          `Use "openai", "anthropic", "google", or "mock".`,
+      );
+  }
+}
+
+export function envHintForProvider(provider: string): string {
+  switch (provider) {
+    case "openai":
+      return "Export OPENAI_API_KEY in your environment.";
+    case "anthropic":
+      return "Export ANTHROPIC_API_KEY in your environment.";
+    case "google":
+      return "Export GOOGLE_API_KEY (or GEMINI_API_KEY) in your environment.";
+    default:
+      return "";
+  }
+}

package/src/adapters/gemini.ts

@@ -30,6 +30,7 @@ import {
   type AdapterOutput,
 } from "./types.js";
 import { resolveApiKey } from "../auth/resolver.js";
+import { DEFAULT_MODELS } from "./defaults.js";
 
 const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
   "gemini-2.5-pro": { input: 1.25, output: 10.0 },
@@ -46,7 +47,8 @@ const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
 // field lands in v0.3) or by constructing the adapter directly. For code
 // review of typical-sized diffs, flash quality is sufficient — pro pays for
 // itself only on very large diffs or complex reasoning chains.
-const DEFAULT_MODEL = "gemini-2.5-flash";
+// Default lives in adapters/defaults.ts so validator + adapter can't drift.
+const DEFAULT_MODEL = DEFAULT_MODELS.google;
 
 export interface GeminiAdapterOptions {
   apiKey?: string;

package/src/adapters/openai.ts

@@ -15,6 +15,7 @@
 import OpenAI from "openai";
 import { AdapterError, type Adapter, type AdapterInput, type AdapterOutput } from "./types.js";
 import { resolveApiKey } from "../auth/resolver.js";
+import { DEFAULT_MODELS } from "./defaults.js";
 
 /** USD per 1M tokens, by model. Lowercased keys. */
 const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
@@ -24,7 +25,8 @@ const PRICING_USD_PER_1M: Record<string, { input: number; output: number }> = {
   "gpt-3.5-turbo": { input: 0.5, output: 1.5 },
 };
 
-const DEFAULT_MODEL = "gpt-4o";
+// Default lives in adapters/defaults.ts so validator + adapter can't drift.
+const DEFAULT_MODEL = DEFAULT_MODELS.openai;
 
 export interface OpenAIAdapterOptions {
   /** Override the API key source. Defaults to process.env.OPENAI_API_KEY. */

package/src/auth/keychain.ts

@@ -20,9 +20,15 @@ import type { ProviderId } from "./types.js";
 
 const KEYCHAIN_SERVICE = "almightygpt";
 
+/** Result of a keychain `get` — distinguishes "no entry" from "read failed". */
+export type KeychainGetResult =
+  | { kind: "found"; key: string }
+  | { kind: "absent" }
+  | { kind: "error"; message: string };
+
 export interface KeychainAdapter {
   available: boolean;
-  get(provider: ProviderId): Promise<string | undefined>;
+  get(provider: ProviderId): Promise<KeychainGetResult>;
   set(provider: ProviderId, key: string): Promise<void>;
   remove(provider: ProviderId): Promise<boolean>;
   /** Optional diagnostic — backend name, or "unavailable". */
@@ -68,12 +74,20 @@ async function loadKeychain(): Promise<KeychainAdapter> {
     return {
       available: true,
       describeBackend: () => detectBackend(),
-      async get(provider) {
+      async get(provider): Promise<KeychainGetResult> {
         try {
           const v = entryFor(provider).getPassword();
-          return v === null ? undefined : v;
-        } catch {
-          return undefined;
+          if (v === null || v === undefined) return { kind: "absent" };
+          return { kind: "found", key: v };
+        } catch (err) {
+          // Real read failure — do NOT collapse into "absent". Codex's
+          // v0.8 review (P2 #4): silent fallthrough hid macOS Keychain
+          // denied access, Secret Service unavailability, corrupted
+          // entries, native-binding faults. Bubble up instead.
+          return {
+            kind: "error",
+            message: err instanceof Error ? err.message : String(err),
+          };
         }
       },
       async set(provider, key) {
@@ -99,7 +113,7 @@ function makeUnavailable(reason: string): KeychainAdapter {
     available: false,
     describeBackend: () => `unavailable (${reason})`,
     async get() {
-      return undefined;
+      return { kind: "absent" };
     },
     async set() {
       throw new Error(

package/src/auth/resolver.ts

@@ -53,10 +53,20 @@ export async function resolveApiKey(
   if (!options.skipKeychain) {
     const keychain = await getKeychain();
     if (keychain.available) {
-      const v = await keychain.get(provider);
-      if (v && v.length > 0) {
-        return { provider, source: "keychain", key: v };
+      const result = await keychain.get(provider);
+      if (result.kind === "found" && result.key.length > 0) {
+        return { provider, source: "keychain", key: result.key };
       }
+      if (result.kind === "error") {
+        // Per Codex's v0.8 review (P2 #4) — surface as a distinct state
+        // so the user sees "stored but couldn't be read" not "missing".
+        return {
+          provider,
+          source: "keychain_error",
+          keychainError: result.message,
+        };
+      }
+      // kind === "absent" → fall through to "missing".
     }
   }
 
@@ -77,5 +87,15 @@ export async function requireApiKey(
     const primaryEnv = PROVIDER_ENV_VARS[provider][0]!;
     throw new AuthMissingError(provider, primaryEnv);
   }
+  if (resolved.source === "keychain_error") {
+    const primaryEnv = PROVIDER_ENV_VARS[provider][0]!;
+    throw new AuthMissingError(
+      provider,
+      primaryEnv,
+      `Keychain read failed: ${resolved.keychainError ?? "unknown error"}. ` +
+        `Set ${primaryEnv} as a per-process override, or fix the keychain ` +
+        `state (the entry exists but the OS denied or failed the read).`,
+    );
+  }
   return resolved.key!;
 }

package/src/auth/types.ts

@@ -19,29 +19,48 @@
 
 export type ProviderId = "openai" | "anthropic" | "google";
 
-export type KeySource = "explicit" | "env" | "keychain" | "missing";
+/**
+ * Where a resolved API key came from.
+ *
+ * `keychain_error` is a distinct state from `missing` — per Codex's
+ * v0.8 security review, silently treating a keychain read failure as
+ * "no key" hides important states (denied access, daemon unavailable,
+ * corrupted entry, native binding fault). Callers can choose to fall
+ * back or surface the error, but the resolver no longer pretends the
+ * key simply doesn't exist.
+ */
+export type KeySource =
+  | "explicit"
+  | "env"
+  | "keychain"
+  | "keychain_error"
+  | "missing";
 
 export interface KeyResolution {
   provider: ProviderId;
   source: KeySource;
-  /** Present iff source !== "missing". */
+  /** Present iff source resolves to a usable key. */
   key?: string;
   /** Which env var was used (only set when source === "env"). */
   envVar?: string;
+  /** Human-readable diagnostic when source === "keychain_error". */
+  keychainError?: string;
 }
 
 /**
- * Thrown when no key is found in any source. Caller should surface
- * the message verbatim — it tells the user exactly how to fix it.
+ * Thrown when no key is found in any source (or when keychain read failed).
+ * Caller should surface the message verbatim — it tells the user exactly
+ * how to fix it.
  */
 export class AuthMissingError extends Error {
   readonly provider: ProviderId;
   readonly envVar: string;
-  constructor(provider: ProviderId, envVar: string) {
+  constructor(provider: ProviderId, envVar: string, customMessage?: string) {
     super(
-      `No API key found for ${provider}. ` +
-        `Run "almightygpt auth ${provider}" to set one up interactively, ` +
-        `or export ${envVar} in your shell.`,
+      customMessage ??
+        `No API key found for ${provider}. ` +
+          `Run "almightygpt auth ${provider}" to set one up interactively, ` +
+          `or export ${envVar} in your shell.`,
     );
     this.name = "AuthMissingError";
     this.provider = provider;