@amistio/cli 0.1.16 → 0.1.17

package/README.md

@@ -39,6 +39,8 @@ Provider-backed model preferences use sanitized catalog fields: `--provider`, `-
 
 When `--tool copilot` uses the GitHub Copilot SDK, Amistio approves read-only permission requests by default and denies mutating, network, MCP, hook, memory, and shell requests. Set `AMISTIO_COPILOT_APPROVE_ALL=1` only on a local machine where broad Copilot SDK approval is intentional.
 
+When `--tool codex` uses the Codex SDK, intermediate progress can be quiet until the final response. For live Codex CLI logs, run `amistio run --watch --tool codex --invocation-channel command`.
+
 `amistio runner status` reports local background runner state, latest heartbeat, and bounded resource usage when available. Resource usage is latest-sample runner process memory/CPU plus safe aggregate system memory/load signals; it does not include source files, environment variables, command lines, process lists, credentials, or arbitrary local paths.
 
 The runner advertises its supported work kinds in heartbeats. Current runners can claim read-only `projectContextRefresh` jobs from the workspace Context panel and create due runner-driven refreshes when no fresh approved map exists. Context refreshes inspect the paired checkout locally without modifying files and submit only bounded summaries, slices, entities, relations, safe citations, confidence, freshness, and repo-relative paths. If a submitted context refresh contains unsafe evidence, unsafe paths, or a map too large to store safely, Amistio marks the refresh failed with a safe reason instead of storing the rejected raw result. Approved maps are reused as context packs for source-aware assistant and impact-preview work. Current runners can also claim read-only issue diagnosis jobs from the web Issues panel, generate root-cause analysis and a proposed fix, and submit that result without modifying source. They can claim manual read-only `appEvaluationScan` jobs from the workspace Evaluate panel and create at most one due hourly evaluation during normal watch/background polling when app evaluation is enabled for the repository link. Evaluation results contain bounded summaries, safe evidence, suggested actions, lifecycle proposals, and repo-relative paths only. Current runners can also claim manual read-only `securityPostureScan` jobs from the workspace Security panel and create due daily posture checks during normal watch/background polling. Security scan results contain bounded summaries, standard references, safe evidence, and repo-relative paths only; source, secrets, environment variables, command lines, process lists, credentials, provider sessions, and arbitrary local paths stay local. Implementation or cleanup is queued separately only after the user approves an issue analysis, app evaluation finding, or security remediation plan in the app.

package/dist/index.js

@@ -3198,6 +3198,9 @@ async function runCodexSdk(input) {
     approvalPolicy: "on-request",
     skipGitRepoCheck: true
   });
+  if (input.streamOutput) {
+    process.stderr.write("Codex SDK is running; intermediate progress may be quiet until the final response. Use --invocation-channel command for Codex CLI logs.\n");
+  }
   const result = await thread.run(input.prompt);
   if (input.streamOutput && result.finalResponse) {
     process.stdout.write(result.finalResponse);
@@ -4389,6 +4392,7 @@ var appEvaluationStart = "AMISTIO_APP_EVALUATION_START";
 var appEvaluationEnd = "AMISTIO_APP_EVALUATION_END";
 var projectContextRefreshStart = "AMISTIO_PROJECT_CONTEXT_REFRESH_START";
 var projectContextRefreshEnd = "AMISTIO_PROJECT_CONTEXT_REFRESH_END";
+var validProjectContextSliceKinds = /* @__PURE__ */ new Set(["overview", "architecture", "domain", "data", "api", "frontend", "backend", "cli", "workflow", "operations", "security", "testing", "unknown"]);
 var validProjectContextEntityTypes = /* @__PURE__ */ new Set(["project", "system", "component", "domain", "tool", "decision", "feature", "risk", "team", "workflow", "unknown"]);
 var validProjectContextRelationTypes = /* @__PURE__ */ new Set(["uses", "depends_on", "decides", "supersedes", "touches", "blocks", "implements", "mentions"]);
 function createWorkExecutionPrompt(workItem, context) {
@@ -4493,6 +4497,7 @@ function createProjectContextRefreshPrompt(workItem, context) {
     "## Mapping Requirements",
     "",
     "- Create slices for architecture, domain, data, API, frontend, backend, CLI, workflows, operations, security, and testing when those surfaces exist.",
+    "- Use only these exact singular slice kind values: overview, architecture, domain, data, api, frontend, backend, cli, workflow, operations, security, testing, unknown.",
     "- Capture entities and relations that explain how the app is put together and where future work should look first.",
     "- Prefer summaries, repository-relative paths, short citations, tags, and freshness status over raw source excerpts.",
     "- Mark stale or missing areas explicitly instead of guessing.",
@@ -5032,6 +5037,16 @@ function normalizeProjectContextRefreshEnums(value) {
     return value;
   }
   const normalized = { ...value };
+  if (Array.isArray(normalized.slices)) {
+    normalized.slices = normalized.slices.map((slice) => {
+      if (!isObjectRecord(slice)) {
+        return slice;
+      }
+      const normalizedSlice = { ...slice };
+      normalizedSlice.kind = normalizeProjectContextSliceKind(slice.kind);
+      return normalizedSlice;
+    });
+  }
   if (Array.isArray(normalized.entities)) {
     normalized.entities = normalized.entities.map((entity) => {
       if (!isObjectRecord(entity)) {
@@ -5054,6 +5069,22 @@ function normalizeProjectContextRefreshEnums(value) {
   }
   return normalized;
 }
+function normalizeProjectContextSliceKind(value) {
+  if (typeof value !== "string") {
+    return "unknown";
+  }
+  const normalized = value.trim().toLowerCase();
+  if (validProjectContextSliceKinds.has(normalized)) {
+    return normalized;
+  }
+  if (normalized.endsWith("s")) {
+    const singular = normalized.slice(0, -1);
+    if (validProjectContextSliceKinds.has(singular)) {
+      return singular;
+    }
+  }
+  return "unknown";
+}
 function normalizeProjectContextRefreshPaths(value, options) {
   if (!isObjectRecord(value)) {
     return value;