@chit-run/cli 0.7.0 → 0.9.0

package/dist/chit.js

@@ -1473,6 +1473,24 @@ var init_parse = __esm(() => {
   TEMPLATE_REF_RE = /\{\{\s*([\w.]+)\s*\}\}/g;
 });
 // ../../packages/core/src/show.ts
+function participantPermissionDisplay(p) {
+  if (p.permissions.filesystem === "read_only") {
+    return {
+      filesystem: "read_only",
+      readOnlyEnforcement: p.enforcesReadOnly ? "enforced" : "NOT ENFORCED",
+      readOnlyEnforcementClass: p.enforcesReadOnly ? "ok" : "warn"
+    };
+  }
+  return {
+    filesystem: "write",
+    readOnlyEnforcement: p.enforcesReadOnly ? "not requested (adapter supports)" : "not requested (adapter cannot enforce)",
+    readOnlyEnforcementClass: "info"
+  };
+}
+function participantPermissionText(p) {
+  const display = participantPermissionDisplay(p);
+  return `filesystem=${display.filesystem}  read_only_enforcement=${display.readOnlyEnforcement}`;
+}
 function configPairs(c) {
   const pairs = [
     ["model", c.model ?? "default"],
@@ -1547,8 +1565,7 @@ function renderAscii(m) {
   out.push("");
   out.push("participants:");
   for (const [pid, p] of Object.entries(m.participants)) {
-    const enforces = p.enforcesReadOnly ? "enforces=yes" : "enforces=NO";
-    out.push(`  ${pid}  agent=${p.agentId}  session=${p.session}  permissions=${p.permissions.filesystem}  adapter=${p.adapter}  ${enforces}`);
+    out.push(`  ${pid}  agent=${p.agentId}  session=${p.session}  ${participantPermissionText(p)}  adapter=${p.adapter}`);
     if (p.adapter === "unknown") {
       out.push("    config  unresolved (unknown agent)");
     } else {
@@ -1637,7 +1654,7 @@ function renderHtml(m) {
     levelColumns.push(renderLevelColumn(m, level));
   }
   const participantsSection = Object.entries(m.participants).map(([pid, p]) => {
-    const enforceBadge = p.enforcesReadOnly ? '<span class="badge ok">enforces read-only</span>' : '<span class="badge warn">does not enforce</span>';
+    const permission = participantPermissionDisplay(p);
     const configBadges = p.adapter === "unknown" ? '<span class="badge warn">config: unresolved (unknown agent)</span>' : configPairs(p.config).map(([k, v]) => `<span class="badge info">${escapeHtml(k)}: ${escapeHtml(v)}</span>`).join(`
     `);
     return `<div class="participant">
@@ -1646,8 +1663,8 @@ function renderHtml(m) {
     <span class="badge info">agent: ${escapeHtml(p.agentId)}</span>
     <span class="badge info">adapter: ${escapeHtml(p.adapter)}</span>
     <span class="badge info">session: ${escapeHtml(p.session)}</span>
-    <span class="badge info">filesystem: ${escapeHtml(p.permissions.filesystem)}</span>
-    ${enforceBadge}
+    <span class="badge info">filesystem: ${escapeHtml(permission.filesystem)}</span>
+    <span class="badge ${permission.readOnlyEnforcementClass}">read_only enforcement: ${escapeHtml(permission.readOnlyEnforcement)}</span>
   </div>
   <div class="participant-config">
     ${configBadges}
@@ -10820,6 +10837,11 @@ class ClaudeCliAdapter {
         if (noProgress)
           throw new Error(`claude --print made no progress for ${noProgressMs}ms`);
         if (exitCode !== 0) {
+          const rateLimit = detectClaudeRateLimit(`${stdoutText}
+${stderrText}`);
+          if (rateLimit !== undefined) {
+            throw new Error(`claude --print rate limited${rateLimit ? `: ${rateLimit}` : ` (exit ${exitCode})`}`);
+          }
           const cleaned = sanitize(stderrText || stdoutText, sensitive);
           const tail = cleaned.trim().split(`
 `).slice(-5).join(`
@@ -10953,6 +10975,42 @@ function parseClaudeResult(stdout) {
   }
   return result;
 }
+function detectClaudeRateLimit(stdout) {
+  const pickStr = (v) => typeof v === "string" && v.trim() !== "" ? v.trim().replace(/\s+/g, " ").slice(0, 120) : undefined;
+  const pickNum = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined;
+  let found = false;
+  let detail = "";
+  for (const line of stdout.split(`
+`)) {
+    const trimmed = line.trim();
+    if (!trimmed)
+      continue;
+    let evt;
+    try {
+      evt = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    if (evt.type !== "rate_limit_event")
+      continue;
+    found = true;
+    const rl = evt.rate_limit_info && typeof evt.rate_limit_info === "object" ? evt.rate_limit_info : evt.rate_limit && typeof evt.rate_limit === "object" ? evt.rate_limit : evt;
+    const parts = [];
+    const status = pickStr(rl.status);
+    if (status)
+      parts.push(`status=${status}`);
+    const resetsAt = pickStr(rl.resetsAt);
+    if (resetsAt)
+      parts.push(`resets ${resetsAt}`);
+    const retryAfter = pickNum(rl.retryAfter) ?? pickNum(rl.resetInSeconds);
+    if (retryAfter !== undefined)
+      parts.push(`retry after ${retryAfter}s`);
+    if (rl.isUsingOverage === false)
+      parts.push("overage disabled");
+    detail = parts.join(", ");
+  }
+  return found ? detail : undefined;
+}
 
 // src/adapters/codex-exec.ts
 var DEFAULT_CALL_TIMEOUT_MS2 = 15 * 60000;
@@ -10972,7 +11030,7 @@ class CodexExecAdapter {
     const sensitive = findSensitiveValues(this.config.env);
     try {
       const priorThreadId = getCodexThreadId(req.session);
-      const cmd = this.buildCommand(priorThreadId);
+      const cmd = this.buildCommand(priorThreadId, req.filesystem);
       const proc = Bun.spawn({
         cmd,
         cwd: req.cwd,
@@ -11049,7 +11107,7 @@ class CodexExecAdapter {
       throw new Error(message);
     }
   }
-  buildCommand(priorThreadId) {
+  buildCommand(priorThreadId, filesystem) {
     if (priorThreadId) {
       return ["codex", "exec", "resume", "--json", "--skip-git-repo-check", priorThreadId, "-"];
     }
@@ -11059,7 +11117,8 @@ class CodexExecAdapter {
     if (this.config.reasoningEffort) {
       cmd.push("-c", `model_reasoning_effort="${this.config.reasoningEffort}"`);
     }
-    cmd.push("--sandbox", "read-only", "--skip-git-repo-check", "-");
+    const sandbox = filesystem === "write" ? "workspace-write" : "read-only";
+    cmd.push("--sandbox", sandbox, "--skip-git-repo-check", "-");
     return cmd;
   }
 }
@@ -12146,6 +12205,9 @@ function computeFingerprint(input) {
     reasoningEffort: agent.reasoningEffort ?? null,
     passModelOnResume: agent.adapter === "claude-cli" ? agent.passModelOnResume : null,
     strictMcp: agent.adapter === "claude-cli" ? agent.strictMcp !== false : null,
+    ...agent.adapter === "codex-exec" && {
+      codexSandbox: participant.permissions.filesystem === "write" ? "workspace-write" : "read-only"
+    },
     baseUrl,
     role: participant.role,
     session: participant.session,
@@ -12554,7 +12616,8 @@ async function runConvergeIteration(ctx) {
   if (!result.ok) {
     return {
       ok: false,
-      failure: `manifest run failed at step "${result.failedStep}": ${result.error}`
+      failure: `manifest run failed at step "${result.failedStep}": ${result.error}`,
+      ...result.auditRunId && { auditRunId: result.auditRunId }
     };
   }
   const reviewText = result.outputs.review ?? "";
@@ -12923,7 +12986,12 @@ async function runJobWorker(jobId, deps) {
   const workerToken = crypto.randomUUID();
   const setPhase = (phase) => {
     try {
-      store.update(jobId, (c) => ({ ...c, phase, lastHeartbeatAt: iso2(now()) }));
+      store.update(jobId, (c) => ({
+        ...c,
+        phase,
+        ...c.phase !== phase && { phaseStartedAt: iso2(now()) },
+        lastHeartbeatAt: iso2(now())
+      }));
     } catch {}
   };
   const controller = new AbortController;
@@ -12946,7 +13014,8 @@ async function runJobWorker(jobId, deps) {
       pgid: process.pid,
       workerToken,
       lastHeartbeatAt: iso2(now()),
-      phase: "starting"
+      phase: "starting",
+      phaseStartedAt: iso2(now())
     }));
     const resolved = resolveExecute(job);
     if (!resolved.ok) {
@@ -12981,6 +13050,7 @@ async function runJobWorker(jobId, deps) {
         ...c,
         iteration: i,
         phase: "implementing",
+        ...c.phase !== "implementing" && { phaseStartedAt: iso2(now()) },
         lastHeartbeatAt: iso2(now())
       }));
       let iter;
@@ -13010,6 +13080,10 @@ async function runJobWorker(jobId, deps) {
         return;
       }
       if (!iter.ok) {
+        if (iter.auditRunId) {
+          const ref = iter.auditRunId;
+          store.update(jobId, (c) => ({ ...c, auditRefs: [...c.auditRefs, ref] }));
+        }
         if (controller.signal.aborted) {
           stopLoopSafely(job, "cancelled", "cancelled mid-iteration (signal)");
           finish(store, jobId, now, "cancelled", { stopStatus: "cancelled" });
@@ -13022,6 +13096,7 @@ async function runJobWorker(jobId, deps) {
       store.update(jobId, (c) => ({
         ...c,
         phase: "recording",
+        ...c.phase !== "recording" && { phaseStartedAt: iso2(now()) },
         iterationsCompleted: i,
         lastVerdict: iter.verdict,
         auditRefs: iter.auditRunId ? [...c.auditRefs, iter.auditRunId] : c.auditRefs,
@@ -13062,6 +13137,7 @@ function finish(store, jobId, now, state, extra) {
     state,
     endedAt: iso2(now()),
     phase: undefined,
+    phaseStartedAt: undefined,
     lastHeartbeatAt: iso2(now()),
     ...extra.stopStatus !== undefined && { stopStatus: extra.stopStatus },
     ...extra.failure !== undefined && { failure: extra.failure }
@@ -35951,6 +36027,7 @@ class StdioServerTransport {
 }
 
 // src/audit/reader.ts
+init_src();
 var USAGE_KEYS2 = [
   "inputTokens",
   "outputTokens",
@@ -36048,6 +36125,30 @@ function listAudit(store, limit) {
   summaries.sort((a, b) => (b.startedAt ?? "").localeCompare(a.startedAt ?? ""));
   return limit !== undefined ? summaries.slice(0, limit) : summaries;
 }
+function receiptTimelineEvent(e) {
+  if (e.type !== "run.started")
+    return e;
+  const { participants: _participants, ...rest } = e;
+  return rest;
+}
+function participantReceipts(snapshots) {
+  if (snapshots === undefined)
+    return;
+  return Object.fromEntries(Object.entries(snapshots).map(([pid, p]) => {
+    const permission = participantPermissionDisplay(p);
+    return [
+      pid,
+      {
+        agentId: p.agentId,
+        adapter: p.adapter,
+        session: p.session,
+        filesystem: permission.filesystem,
+        readOnlyEnforcement: permission.readOnlyEnforcement,
+        config: p.config
+      }
+    ];
+  }));
+}
 function readBody(store, runId, ref) {
   try {
     return store.readBlob(runId, ref);
@@ -36064,21 +36165,22 @@ function hiddenAdapterEventCount(events2) {
 function auditTimeline(store, runId, events2, opts) {
   const rows = opts.verbose ? events2 : events2.filter(isReceiptEvent);
   return rows.map((e) => {
+    const row = receiptTimelineEvent(e);
     if (!opts.includeBodies)
-      return e;
+      return row;
     if (e.type === "adapter.call.started") {
-      return { ...e, input: readBody(store, runId, e.inputBlob) };
+      return { ...row, input: readBody(store, runId, e.inputBlob) };
     }
     if (e.type === "adapter.event" && e.rawBlob !== undefined) {
-      return { ...e, raw: readBody(store, runId, e.rawBlob) };
+      return { ...row, raw: readBody(store, runId, e.rawBlob) };
     }
     if (e.type === "adapter.call.completed") {
-      return { ...e, output: readBody(store, runId, e.outputBlob) };
+      return { ...row, output: readBody(store, runId, e.outputBlob) };
     }
     if (e.type === "step.completed" && e.outputBlob !== undefined) {
-      return { ...e, output: readBody(store, runId, e.outputBlob) };
+      return { ...row, output: readBody(store, runId, e.outputBlob) };
     }
-    return e;
+    return row;
   });
 }
 function showAudit(store, runId, opts) {
@@ -36092,7 +36194,7 @@ function showAudit(store, runId, opts) {
     out.incompleteReason = describeIncomplete(summary, events2);
   const started = events2.find((e) => e.type === "run.started");
   if (started?.type === "run.started" && started.participants !== undefined) {
-    out.participants = started.participants;
+    out.participants = participantReceipts(started.participants);
   }
   if (!opts.verbose) {
     const hidden = hiddenAdapterEventCount(events2);
@@ -36126,6 +36228,40 @@ function isStale(job, nowMs, staleAfterMs = STALE_AFTER_MS) {
   const heartbeatOld = !Number.isFinite(beat) || nowMs - beat > staleAfterMs;
   return heartbeatOld || !pidAlive(job.pid);
 }
+function jobTiming(job, nowMs) {
+  const inFlight = job.state === "queued" || job.state === "running";
+  const timing = {};
+  const startMs = Date.parse(job.startedAt ?? job.createdAt);
+  const endMs = job.endedAt ? Date.parse(job.endedAt) : nowMs;
+  if (Number.isFinite(startMs) && Number.isFinite(endMs) && endMs >= startMs) {
+    timing.elapsedMs = endMs - startMs;
+  }
+  if (inFlight && job.lastHeartbeatAt) {
+    const beat = Date.parse(job.lastHeartbeatAt);
+    if (Number.isFinite(beat) && nowMs >= beat)
+      timing.lastHeartbeatAgeMs = nowMs - beat;
+  }
+  if (job.phase !== undefined && job.phaseStartedAt) {
+    const phaseStart = Date.parse(job.phaseStartedAt);
+    if (Number.isFinite(phaseStart) && nowMs >= phaseStart) {
+      timing.phaseElapsedMs = nowMs - phaseStart;
+    }
+  }
+  return timing;
+}
+function formatDuration(ms) {
+  const totalSec = Math.floor(ms / 1000);
+  if (totalSec < 60)
+    return `${totalSec}s`;
+  const totalMin = Math.floor(totalSec / 60);
+  if (totalMin < 60) {
+    const sec = totalSec % 60;
+    return sec ? `${totalMin}m${sec}s` : `${totalMin}m`;
+  }
+  const hours = Math.floor(totalMin / 60);
+  const min = totalMin % 60;
+  return min ? `${hours}h${min}m` : `${hours}h`;
+}
 
 // src/surfaces/mcp/converge-engine.ts
 class ConvergeEngineError extends Error {
@@ -36578,10 +36714,22 @@ function summarizeRunForStatus(run) {
     audited: run.recorder !== undefined && run.recorder.lastError === undefined
   };
 }
+function runningNextAction(job, timing) {
+  const parts = [];
+  if (timing.elapsedMs !== undefined)
+    parts.push(`running for ${formatDuration(timing.elapsedMs)}`);
+  if (job.phase) {
+    parts.push(timing.phaseElapsedMs !== undefined ? `${job.phase} for ${formatDuration(timing.phaseElapsedMs)}` : job.phase);
+  }
+  const lead = parts.length > 0 ? parts.join(", ") : "in progress";
+  return `${lead}; chit_job_status / chit_job_cancel "${job.jobId}"`;
+}
 function summarizeJobForStatus(job, nowMs) {
   const stale = isStale(job, nowMs);
   const display = stale ? "stale" : job.state;
-  const nextAction = display === "running" ? `in progress${job.phase ? ` (${job.phase})` : ""}; chit_job_status / chit_job_cancel "${job.jobId}"` : display === "queued" ? "queued; the worker is starting" : display === "stale" ? `worker appears dead; chit_job_status "${job.jobId}" to inspect, then start a fresh job` : `${display}${job.stopStatus ? ` (${job.stopStatus})` : ""}; chit_job_status "${job.jobId}" or chit_audit_show <ref>`;
+  const timing = jobTiming(job, nowMs);
+  const latestRef = job.auditRefs.at(-1);
+  const nextAction = display === "running" ? runningNextAction(job, timing) : display === "queued" ? "queued; the worker is starting" : display === "stale" ? `worker appears dead; chit_job_status "${job.jobId}" to inspect, then start a fresh job` : `${display}${job.stopStatus ? ` (${job.stopStatus})` : ""}; chit_job_status "${job.jobId}"${latestRef ? ` or chit_audit_show ${latestRef}` : ""}`;
   return {
     jobId: job.jobId,
     loopId: job.loopId,
@@ -36594,6 +36742,11 @@ function summarizeJobForStatus(job, nowMs) {
     ...job.stopStatus !== undefined && { stopStatus: job.stopStatus },
     auditRefs: job.auditRefs,
     createdAt: job.createdAt,
+    ...timing.elapsedMs !== undefined && { elapsedMs: timing.elapsedMs },
+    ...timing.lastHeartbeatAgeMs !== undefined && {
+      lastHeartbeatAgeMs: timing.lastHeartbeatAgeMs
+    },
+    ...timing.phaseElapsedMs !== undefined && { phaseElapsedMs: timing.phaseElapsedMs },
     nextAction
   };
 }
@@ -37118,7 +37271,13 @@ function describeJob(job) {
       };
     }
   } catch {}
-  const nextAction = display === "running" ? "in progress; chit_job_cancel to stop, or wait and poll again" : display === "queued" ? "queued; the worker is starting" : display === "stale" ? "worker appears dead; inspect with chit_job_status (and chit_audit_show <auditRef> for transcripts), then start a fresh job" : `${display}${job.stopStatus ? ` (${job.stopStatus})` : ""}; open a transcript with chit_audit_show <auditRef>`;
+  const timing = jobTiming(job, now);
+  const latestRef = job.auditRefs.at(-1);
+  const runningDetail = [
+    timing.elapsedMs !== undefined ? `running for ${formatDuration(timing.elapsedMs)}` : undefined,
+    job.phase ? timing.phaseElapsedMs !== undefined ? `${job.phase} for ${formatDuration(timing.phaseElapsedMs)}` : job.phase : undefined
+  ].filter(Boolean);
+  const nextAction = display === "running" ? `${runningDetail.length > 0 ? `${runningDetail.join(", ")}; ` : ""}chit_job_cancel to stop, or wait and poll again` : display === "queued" ? "queued; the worker is starting" : display === "stale" ? `worker appears dead; inspect with chit_job_status${latestRef ? ` (chit_audit_show ${latestRef} for the transcript)` : ""}, then start a fresh job` : `${display}${job.stopStatus ? ` (${job.stopStatus})` : ""}; ${latestRef ? `open a transcript with chit_audit_show ${latestRef}` : "no audit transcript was recorded"}`;
   return {
     jobId: job.jobId,
     loopId: job.loopId,
@@ -37140,12 +37299,18 @@ function describeJob(job) {
     ...job.startedAt !== undefined && { startedAt: job.startedAt },
     ...job.endedAt !== undefined && { endedAt: job.endedAt },
     ...job.lastHeartbeatAt !== undefined && { lastHeartbeatAt: job.lastHeartbeatAt },
+    ...job.phaseStartedAt !== undefined && { phaseStartedAt: job.phaseStartedAt },
+    ...timing.elapsedMs !== undefined && { elapsedMs: timing.elapsedMs },
+    ...timing.lastHeartbeatAgeMs !== undefined && {
+      lastHeartbeatAgeMs: timing.lastHeartbeatAgeMs
+    },
+    ...timing.phaseElapsedMs !== undefined && { phaseElapsedMs: timing.phaseElapsedMs },
     ...latest !== undefined && { latest },
     nextAction
   };
 }
 server.registerTool("chit_job_status", {
-  description: "Show one background job: state (queued/running/completed/cancelled/failed, or derived `stale` when the worker is gone), current phase, loop id, iterations, last verdict, audit refs, and the latest iteration's changed files / workspace warnings / usage. Read-only.",
+  description: "Show one background job: state (queued/running/completed/cancelled/failed, or derived `stale` when the worker is gone), current phase, timing fields (elapsedMs, lastHeartbeatAgeMs, phaseElapsedMs), loop id, iterations, last verdict, audit refs, and the latest iteration's changed files / workspace warnings / usage. Read-only.",
   inputSchema: { job_id: exports_external.string() }
 }, async ({ job_id }) => {
   const job = jobStore.get(job_id);
@@ -37337,8 +37502,7 @@ participants (recorded config):
 `);
   } else {
     for (const [pid, p] of Object.entries(snapshots)) {
-      const enforces = p.enforcesReadOnly ? "enforces=yes" : "enforces=NO";
-      io.out(`  ${pid}  agent=${p.agentId}  session=${p.session}  permissions=${p.permissions.filesystem}  adapter=${p.adapter}  ${enforces}
+      io.out(`  ${pid}  agent=${p.agentId}  session=${p.session}  ${participantPermissionText(p)}  adapter=${p.adapter}
 `);
       const pairs = p.adapter === "unknown" ? "unresolved (unknown agent)" : configPairs(p.config).map(([k, v]) => `${k}=${v}`).join("  ");
       io.out(`    config  ${pairs}
@@ -38092,9 +38256,10 @@ Permission enforcement: each participant's declared permissions are checked
 against the chosen adapter's capabilities at install time. If the adapter
 cannot enforce a permission, the run is rejected unless
 --allow-unenforced-permissions is set. Both built-in adapters enforce
-filesystem read_only today: codex-exec via --sandbox read-only (a hard OS
-sandbox), claude-cli via --permission-mode plan (Claude plan-mode permissions,
-not an OS/filesystem sandbox).
+filesystem read_only today: codex-exec via an OS sandbox (--sandbox read-only
+for a reviewer, --sandbox workspace-write for a write-capable implementer),
+claude-cli via --permission-mode plan (a Claude plan-mode permission, not an
+OS/filesystem sandbox).
 
 Limitations in this build:
 - file[] inputs are not yet supported via the CLI.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@chit-run/cli",
-	"version": "0.7.0",
+	"version": "0.9.0",
 	"description": "Versioned, cross-vendor agent routines with an audit trail. Stop being the glue between your agents.",
 	"type": "module",
 	"license": "MIT",