@enderfga/claw-orchestrator 7.14.0 → 7.16.0

package/dist/src/ultraapp/versions.d.ts

@@ -1,12 +1,13 @@
 /**
  * Version snapshot + swap mechanics.
  *
- * Each successful patcher / spec-delta / structural-rerun bumps a version.
- * Versions live under `<runDir>/versions/v1/`, `v2/`, ..., each with their
- * own `artifact.json` carrying worktreePath + (optionally) deploy info.
+ * Each build and each successful patch takes a new version. Versions live under
+ * `<runDir>/versions/v1/`, `v2/`, ..., each with its own `codebase/` and an
+ * `artifact.json` carrying worktreePath + (once deployed) deploy info.
  *
- * `swapVersion` atomically retargets the router: deregister current slug,
- * stop current container, start new container, register slug to new port.
+ * `swapVersion` retargets the router between two deployed versions: deregister
+ * the slug, stop the current container, start the target, register the slug to
+ * the target's port.
  */
 export interface DeployInfoLite {
     url: string;
@@ -20,9 +21,30 @@ export interface VersionEntry {
     builtAt: string;
     source?: string;
     deploy?: DeployInfoLite;
+    deployedAt?: string;
 }
 export declare function listVersions(versionsDir: string): VersionEntry[];
+/**
+ * The next free version slot.
+ *
+ * Counts every `vN` directory, recorded or not, so a slot a failed build or patch
+ * left behind is skipped rather than written into.
+ */
+export declare function nextVersion(versionsDir: string): string;
+/**
+ * Copy a version's codebase into the next slot, so a change can be made to the
+ * copy while the original keeps serving.
+ *
+ * The copy is not listed until {@link snapshotVersion} records it, so a change
+ * that fails leaves nothing that could be promoted.
+ */
+export declare function forkVersion(versionsDir: string, fromWorktree: string): {
+    version: string;
+    worktreePath: string;
+};
+/** Record a forked version, which makes it listed and promotable. */
 export declare function snapshotVersion(versionsDir: string, args: {
+    version: string;
     worktreePath: string;
     source: string;
 }): string;

package/dist/src/ultraapp/versions.js

@@ -1,12 +1,13 @@
 /**
  * Version snapshot + swap mechanics.
  *
- * Each successful patcher / spec-delta / structural-rerun bumps a version.
- * Versions live under `<runDir>/versions/v1/`, `v2/`, ..., each with their
- * own `artifact.json` carrying worktreePath + (optionally) deploy info.
+ * Each build and each successful patch takes a new version. Versions live under
+ * `<runDir>/versions/v1/`, `v2/`, ..., each with its own `codebase/` and an
+ * `artifact.json` carrying worktreePath + (once deployed) deploy info.
  *
- * `swapVersion` atomically retargets the router: deregister current slug,
- * stop current container, start new container, register slug to new port.
+ * `swapVersion` retargets the router between two deployed versions: deregister
+ * the slug, stop the current container, start the target, register the slug to
+ * the target's port.
  */
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -30,18 +31,55 @@ function parseVersionNumber(version) {
     const m = /^v(\d+)$/.exec(version);
     return m ? parseInt(m[1], 10) : Number.MAX_SAFE_INTEGER;
 }
+/**
+ * The next free version slot.
+ *
+ * Counts every `vN` directory, recorded or not, so a slot a failed build or patch
+ * left behind is skipped rather than written into.
+ */
+export function nextVersion(versionsDir) {
+    let max = 0;
+    try {
+        for (const d of fs.readdirSync(versionsDir)) {
+            const m = /^v(\d+)$/.exec(d);
+            if (m)
+                max = Math.max(max, parseInt(m[1], 10));
+        }
+    }
+    catch {
+        /* no versions yet */
+    }
+    return `v${max + 1}`;
+}
+/**
+ * Not copied by a fork: every validation and deploy runs `npm install` first.
+ * Build output is copied, since a source directory can share its name.
+ */
+const NOT_FORKED = new Set(['node_modules']);
+/**
+ * Copy a version's codebase into the next slot, so a change can be made to the
+ * copy while the original keeps serving.
+ *
+ * The copy is not listed until {@link snapshotVersion} records it, so a change
+ * that fails leaves nothing that could be promoted.
+ */
+export function forkVersion(versionsDir, fromWorktree) {
+    const version = nextVersion(versionsDir);
+    const worktreePath = path.join(versionsDir, version, 'codebase');
+    fs.cpSync(fromWorktree, worktreePath, {
+        recursive: true,
+        filter: (src) => !NOT_FORKED.has(path.relative(fromWorktree, src)),
+    });
+    return { version, worktreePath };
+}
+/** Record a forked version, which makes it listed and promotable. */
 export function snapshotVersion(versionsDir, args) {
-    fs.mkdirSync(versionsDir, { recursive: true });
-    const existing = listVersions(versionsDir);
-    const next = `v${existing.length + 1}`;
-    const dir = path.join(versionsDir, next);
-    fs.mkdirSync(dir, { recursive: true });
-    fs.writeFileSync(path.join(dir, 'artifact.json'), JSON.stringify({
+    fs.writeFileSync(path.join(versionsDir, args.version, 'artifact.json'), JSON.stringify({
         worktreePath: args.worktreePath,
         builtAt: new Date().toISOString(),
         source: args.source,
     }, null, 2));
-    return next;
+    return args.version;
 }
 export async function swapVersion(args) {
     const versions = listVersions(args.versionsDir);
@@ -57,8 +95,15 @@ export async function swapVersion(args) {
         });
     }
     const r = await args.startContainer(to.deploy.containerName);
-    if (!r.ok)
+    if (!r.ok) {
+        // Leave the app on the version it was serving rather than on nothing.
+        if (from?.deploy) {
+            const back = await args.startContainer(from.deploy.containerName).catch(() => ({ ok: false }));
+            if (back.ok)
+                args.router.register(args.slug, from.deploy.port);
+        }
         return { ok: false, error: r.error };
+    }
     args.router.register(args.slug, to.deploy.port);
     return { ok: true };
 }

package/dist/src/ultraapp/versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../../src/ultraapp/versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAiBlC,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAGvF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,IAA8C;IACjG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAC/B,IAAI,CAAC,SAAS,CACZ;QACE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,IAAI,CAAC,SAAS,qBAAqB,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC7D,iBAAiB;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../../src/ultraapp/versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAkBlC,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAGvF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC;gBAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,OAAO,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,YAAoB;IACnE,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACjE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE;QACpC,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;KACnE,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,IAA+D;IAE/D,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EACrD,IAAI,CAAC,SAAS,CACZ;QACE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,IAAI,CAAC,SAAS,qBAAqB,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC7D,iBAAiB;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,sEAAsE;QACtE,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/F,IAAI,IAAI,CAAC,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "claw-orchestrator",
   "name": "Claw Orchestrator",
-  "description": "Run Claude Code, Codex, Antigravity, Grok Build, OpenCode, any ACP agent and custom coding CLIs as one unified runtime. Persistent sessions, multi-engine orchestration, multi-agent council, worktree isolation, multi-model proxy, structured output, plan mode workflows.",
+  "description": "Run Claude Code, Codex, Antigravity, Grok Build, OpenCode, any ACP agent and custom coding CLIs as one unified runtime. Persistent sessions, multi-engine orchestration, multi-agent council, worktree isolation, durable workflows with acceptance contracts, multi-model proxy, structured output, plan mode.",
   "enabledByDefault": false,
   "configSchema": {
     "type": "object",
@@ -36,6 +36,7 @@
           "high",
           "xhigh",
           "max",
+          "ultra",
           "auto"
         ],
         "default": "auto"
@@ -56,18 +57,8 @@
         "properties": {
           "enabled": {
             "type": "boolean",
-            "default": false,
-            "description": "Enable built-in multi-model proxy"
-          },
-          "bigModel": {
-            "type": "string",
-            "default": "gemini-2.5-pro",
-            "description": "Default model for complex requests"
-          },
-          "smallModel": {
-            "type": "string",
-            "default": "gemini-2.5-flash",
-            "description": "Default model for fast requests"
+            "default": true,
+            "description": "Register the multi-model proxy routes on the gateway. The proxy routes each request by the model it names"
           }
         }
       },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@enderfga/claw-orchestrator",
-  "version": "7.14.0",
-  "description": "Claw Orchestrator — run Claude Code, Codex, Antigravity, Grok Build, OpenCode, any ACP agent and custom coding CLIs as one unified runtime. Drop into Hermes Agent, Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, Goose or any Model Context Protocol (MCP) host, install as an OpenClaw plugin, or run standalone. Persistent sessions, multi-agent council, ultraplan, ultrareview, autoloop, tool orchestration.",
+  "version": "7.16.0",
+  "description": "Claw Orchestrator — run Claude Code, Codex, Antigravity, Grok Build, OpenCode, any ACP agent and custom coding CLIs as one unified runtime. Drop into Hermes Agent, Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, Goose or any Model Context Protocol (MCP) host, serve editors as an ACP agent, install as an OpenClaw plugin, or run standalone. Persistent sessions, durable resumable workflows, acceptance checks the runtime runs itself, fan-out, multi-agent council, Codex /goal runs, autoloop, ultraplan, ultrareview, and a per-turn cost ledger with spend caps.",
   "type": "module",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -22,8 +22,7 @@
     "skills/",
     "openclaw.plugin.json",
     "README.md",
-    "LICENSE",
-    "assets/banner.jpg"
+    "LICENSE"
   ],
   "scripts": {
     "build": "rm -rf dist && tsc && node scripts/postbuild.mjs",
@@ -48,8 +47,10 @@
     "claude-code",
     "codex",
     "cursor",
-    "cursor-agent",
     "opencode",
+    "grok",
+    "grok-build",
+    "kimi-code",
     "coding-agent",
     "ai-agent",
     "agent-orchestration",
@@ -85,7 +86,13 @@
     "neovim",
     "antigravity",
     "coding-agent-protocol",
-    "deepseek-harness"
+    "deepseek-harness",
+    "durable-workflow",
+    "verification",
+    "acceptance-tests",
+    "fan-out",
+    "codex-goal",
+    "cost-tracking"
   ],
   "author": "enderfga",
   "repository": {

package/skills/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: claw-orchestrator
-description: Manage persistent coding sessions across Claude Code, Codex, Antigravity (agy), Grok Build, and OpenCode engines. Use when orchestrating multi-engine coding agents, starting/sending/stopping sessions, running multi-agent council collaborations, cross-session messaging, ultraplan deep planning, ultrareview parallel code review, autoloop autonomous workspace iteration, ultraapp building deployable web apps from a structured Q&A interview, switching models/tools at runtime, exposing the orchestrator's 78 tools as an MCP server to Hermes Agent / Claude Desktop / Cursor / Cline / Continue / Zed / Windsurf / Goose, or running as an Agent Client Protocol (ACP) agent that Zed / JetBrains / Neovim / Emacs / VS Code / dsh can drive directly. Triggers on "start a session", "send to session", "run council", "ultraplan", "ultrareview", "autoloop", "ultraapp", "Forge tab", "build a web app", "one-click app", "AppSpec", "autonomous iteration", "iterate until goal", "auto research", "switch model", "hand off a session", "session handoff", "switch engine", "continue on codex", "continue on claude", "move this session to another engine", "multi-agent coding", "coding session", "session inbox", "grok session", "grok build", "opencode", "mcp server", "clawo-mcp", "hermes mcp", "model context protocol", "ultracode", "dynamic workflow", "fanout", "fan-out", "best-of-N", "steer turn", "interrupt turn", "fork thread", "rollback turns", "acp", "agent client protocol", "clawo acp", "zed agent", "jetbrains agent", "external agent", "dsh subagent", "deepseek harness", "acp engine", "acp agent", "kimi code", "kimi acp", "dsh acp", "any acp agent", "clawo runs", "run ledger", "session cost", "coding-agent token usage", "spend cap", "budget limit", "maxBudgetUsd", "durable workflow", "resume a run", "verify a coding run", "acceptance contract", "evidence bundle", "did the agent's tests actually pass", "protected tests", "agent edited the tests", "human gate", "repair loop", "clawo workflow", "clawo verify", "clawo solve", "clawo fanout", "fix and verify", "solve from the terminal", "codex goal", "/goal", "clawo goal", "long-horizon goal", "unattended codex run", "goal node", "run codex in a sandbox", "launcher".
+description: Manage persistent coding sessions across Claude Code, Codex, Antigravity (agy), Grok Build, OpenCode, any Agent Client Protocol agent (Kimi Code, dsh) and custom CLIs. Use when orchestrating multi-engine coding agents, starting/sending/stopping sessions, running durable, resumable workflows (solve / fanout / council / Codex goal) and having the runtime verify the result against an acceptance contract, fanning one task out to several engines, running multi-agent council collaborations, cross-session messaging, ultraplan deep planning, ultrareview parallel code review, autoloop autonomous workspace iteration, ultraapp building deployable web apps from a structured Q&A interview, switching models/tools at runtime, tracking per-turn cost and spend caps across engines, exposing the orchestrator's 78 tools as an MCP server to Hermes Agent / Claude Desktop / Cursor / Cline / Continue / Zed / Windsurf / Goose, or running as an Agent Client Protocol (ACP) agent that Zed / JetBrains / Neovim / Emacs / VS Code / dsh can drive directly. Triggers on "start a session", "send to session", "run council", "ultraplan", "ultrareview", "autoloop", "ultraapp", "Forge tab", "build a web app", "one-click app", "AppSpec", "autonomous iteration", "iterate until goal", "auto research", "switch model", "hand off a session", "session handoff", "switch engine", "continue on codex", "continue on claude", "move this session to another engine", "multi-agent coding", "coding session", "session inbox", "grok session", "grok build", "opencode", "mcp server", "clawo-mcp", "hermes mcp", "model context protocol", "ultracode", "dynamic workflow", "fanout", "fan-out", "best-of-N", "steer turn", "interrupt turn", "fork thread", "rollback turns", "acp", "agent client protocol", "clawo acp", "zed agent", "jetbrains agent", "external agent", "dsh subagent", "deepseek harness", "acp engine", "acp agent", "kimi code", "kimi acp", "dsh acp", "any acp agent", "clawo runs", "run ledger", "session cost", "coding-agent token usage", "spend cap", "budget limit", "maxBudgetUsd", "durable workflow", "resume a run", "verify a coding run", "acceptance contract", "evidence bundle", "did the agent's tests actually pass", "protected tests", "agent edited the tests", "human gate", "repair loop", "clawo workflow", "clawo verify", "clawo solve", "clawo fanout", "fix and verify", "solve from the terminal", "codex goal", "/goal", "clawo goal", "long-horizon goal", "unattended codex run", "goal node", "run codex in a sandbox", "launcher".
 metadata:
   {
     'openclaw':
@@ -36,17 +36,20 @@ metadata:
 
 # Claw Orchestrator Skill
 
-Claw Orchestrator — persistent multi-engine coding session manager for claw-style agent systems. Runs as a standalone CLI/server, with first-class OpenClaw plugin support. Wraps Claude Code, Codex, Antigravity, Grok Build, OpenCode, and custom CLIs into headless agentic engines with 78 tools.
+Claw Orchestrator — persistent multi-engine coding session manager for claw-style agent systems. Runs as a standalone CLI/server, with first-class OpenClaw plugin support. Wraps Claude Code, Codex, Antigravity, Grok Build, OpenCode, any Agent Client Protocol agent, and custom CLIs into headless agentic engines with 78 tools.
 
 ## Engine Quick Reference
 
-| Engine     | CLI            | Session Type          | Best For                                                 |
-| ---------- | -------------- | --------------------- | -------------------------------------------------------- |
-| `claude`   | `claude`       | Persistent subprocess | Multi-turn, complex tasks                                |
-| `codex`    | `codex exec`   | Per-message spawn     | One-shot execution                                       |
-| `agy`      | `agy -p`       | Per-message spawn     | Google Antigravity; plain-text, auto conversation resume |
-| `grok`     | `grok -p`      | Per-message spawn     | xAI Grok Build; engine-reported cost, resumable session  |
-| `opencode` | `opencode run` | Per-message spawn     | Provider-agnostic (`provider/model`)                     |
+| Engine      | CLI                          | Session Type          | Best For                                                                           |
+| ----------- | ---------------------------- | --------------------- | ---------------------------------------------------------------------------------- |
+| `claude`    | `claude`                     | Persistent subprocess | Multi-turn, complex tasks                                                          |
+| `codex`     | `codex exec`                 | Per-message spawn     | One-shot execution; the thread is resumed on each send                             |
+| `codex-app` | `codex app-server`           | Persistent subprocess | Codex `/goal`, plus interrupt / steer / fork / rollback of turns                   |
+| `agy`       | `agy -p`                     | Per-message spawn     | Google Antigravity; reported token usage, conversation resumed by id               |
+| `grok`      | `grok -p`                    | Per-message spawn     | xAI Grok Build; engine-reported cost, resumable session                            |
+| `opencode`  | `opencode run`               | Per-message spawn     | Provider-agnostic (`provider/model`)                                               |
+| `acp`       | the agent's own command      | Persistent subprocess | Any Agent Client Protocol agent, named by `acpAgent` (presets: `kimi-code`, `dsh`) |
+| `custom`    | yours (`CustomEngineConfig`) | Either (`persistent`) | Any other coding CLI, described by a config or a bundled preset                    |
 
 ## Core Workflow
 
@@ -62,6 +65,7 @@ session_start({
   engine: 'opencode',
   model: 'anthropic/claude-sonnet-5',
 });
+session_start({ name: 'kimi-task', cwd: '/path/to/project', engine: 'acp', acpAgent: 'kimi-code' });
 
 // 2. Send messages
 session_send({ name: 'myproject', message: 'Fix the auth bug' });
@@ -76,14 +80,18 @@ session_stop({ name: 'myproject' });
 
 ## Session Options
 
-| Parameter        | Description                                                                                                     |
-| ---------------- | --------------------------------------------------------------------------------------------------------------- |
-| `engine`         | `claude` (default), `codex`, `agy`, `grok`, `opencode`, `custom`                                                |
-| `model`          | Model name or alias (`fable`, `opus` → claude-opus-5-5, `sonnet`, `haiku`, `gpt-5.5`, `agy-pro`)                |
-| `permissionMode` | `acceptEdits`, `auto`, `plan`, `bypassPermissions`, `manual`, `dontAsk` (`default` = legacy alias for `manual`) |
-| `effort`         | `low`, `medium`, `high`, `xhigh`, `max`, `ultra`, `auto` (each engine clamps to its own ceiling)                |
-| `maxBudgetUsd`   | Cost limit in USD                                                                                               |
-| `allowedTools`   | List of allowed tool names                                                                                      |
+| Parameter         | Description                                                                                                                                                                                                                                                           |
+| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `engine`          | `claude` (default), `codex`, `codex-app`, `agy`, `grok`, `opencode`, `acp`, `custom`                                                                                                                                                                                  |
+| `model`           | Model name or alias (`fable`, `opus` → claude-opus-5-5, `sonnet`, `haiku`, `gpt-5.5`, `agy-pro`)                                                                                                                                                                      |
+| `permissionMode`  | `acceptEdits`, `auto`, `plan`, `bypassPermissions`, `manual`, `dontAsk` (`default` = legacy alias for `manual`)                                                                                                                                                       |
+| `effort`          | `low`, `medium`, `high`, `xhigh`, `max`, `ultra`, `auto` (each engine clamps to its own ceiling)                                                                                                                                                                      |
+| `maxBudgetUsd`    | Cost limit in USD, enforced by the runtime on every engine                                                                                                                                                                                                            |
+| `allowedTools`    | List of allowed tool names                                                                                                                                                                                                                                            |
+| `sandboxMode`     | `read-only`, `workspace-write`, `danger-full-access`. Codex applies all three; claude, agy, grok and opencode enforce `read-only` through their own plan/read-only modes; a custom engine must map it through `permissionModes` or refuses to start; `acp` refuses it |
+| `acpAgent`        | With `engine: 'acp'`: a bundled preset id (`clawo engines`), or an inline `{ name, command, args, env }` from a local caller                                                                                                                                          |
+| `customEngine`    | With `engine: 'custom'`: a bundled preset id, or an inline `CustomEngineConfig` from a local caller                                                                                                                                                                   |
+| `resumeSessionId` | Resume an earlier conversation by the engine's own id (session, thread or conversation id)                                                                                                                                                                            |
 
 ### Claude-engine options
 
@@ -152,14 +160,14 @@ team_send({ name: 'myproject', teammate: 'teammate', message: 'Review this' });
 
 ## Ultraplan & Ultrareview
 
-- **Ultraplan**: Opus deep planning session (up to 30 min), produces detailed implementation plan
-- **Ultrareview**: 1-20 read-only reviewer agents (default 5) running in parallel, each from one angle (security, logic, perf, types, etc.), merged by a synthesis pass
+- **Ultraplan**: Opus deep planning session (default timeout 30 min), produces detailed implementation plan
+- **Ultrareview**: 1-20 read-only reviewer agents (default 5) running in parallel, each from one angle (security, logic, perf, types, etc.), merged by a synthesis pass. Reviewers can be spread across engines; `custom` and `acp` are refused because they cannot be held read-only
 
 Both are async — start then poll status.
 
 ## Autoloop (autonomous workspace iteration)
 
-Autoloop uses three persistent roles. You chat with the Planner to define `plan.md` and `goal.json`; after explicit approval it starts a Coder/Reviewer iteration loop. Each role may use a different engine.
+Autoloop uses three persistent roles. You chat with the Planner to define `plan.md` and `goal.json`; after explicit approval it starts a Coder/Reviewer iteration loop. Each role may use a different engine (any engine except `acp`).
 
 ```javascript
 autoloop_start({
@@ -175,7 +183,7 @@ autoloop_status({ run_id: 'fix-parser' });
 autoloop_stop({ run_id: 'fix-parser', reason: 'done' });
 ```
 
-Claude roles default to Planner `opus` and Coder/Reviewer `sonnet`. A non-Claude role with no model uses that engine's own default. Custom engine configs are supplied only at start (or HTTP resume), never by Planner output. The Reviewer runs in a restaged sandbox and returns advance/hold/rollback verdicts; push policy and SSE keep long runs observable.
+Claude roles default to Planner `opus` and Coder/Reviewer `sonnet`. A non-Claude role with no model uses that engine's own default. Custom engine configs come from a local caller at start or resume — or, on an HTTP resume, by reference (`plannerCustomEngineRef` etc., resolved from a `CLAWO_CUSTOM_ENGINE_<NAME>` variable on the host) — never from Planner output. The Reviewer runs in a restaged sandbox and returns advance/hold/rollback verdicts; push policy and SSE keep long runs observable.
 
 For the full control protocol, registry/resume behavior, and ledger layout, see [references/autoloop.md](references/autoloop.md).
 
@@ -214,14 +222,15 @@ For setup, the dsh YAML block, and the cancellation/permission limits: see [refe
 ## Durable workflows
 
 `workflow_start` runs a declarative graph of `agent` / `fanout` / `council` / `goal` /
-`verifier` / `human_gate` / `router` / `subflow` / `autoloop` / `ultraapp_synth` /
+`verifier` / `human_gate` / `router` / `subflow` nodes; autoloop runs (`autoloop_start`) and
+UltraApp builds use the same kernel through their own `autoloop` / `ultraapp_synth` /
 `ultraapp_deploy` nodes. Every state transition is checkpointed to
 `~/.claw-orchestrator/wf/<runId>/`, so a run survives a process restart and `workflow_resume`
 picks it up at the node boundary — nodes already succeeded are not re-run, and the one that
 was in flight is retried because a half-finished node left no result to trust.
 
-Four built-in templates: `solve` (triage → implement → verify → repair-until-green →
-review), `council`, `fanout`, and `goal` (a Codex `/goal` on one `codex-app` thread, run
+Four built-in templates: `solve` (triage → implement → optional review → verify →
+repair until green), `council`, `fanout`, and `goal` (a Codex `/goal` on one `codex-app` thread, run
 unattended for as long as it takes — reattached on resume, resumed after usage limits and
 stalls within a bound, optionally under a sandbox `launcher` — then verify → repair on the
 same thread; `clawo goal` from the terminal). Retry, per-node timeout, cancel, steer, human gates, and
@@ -267,6 +276,24 @@ at all means no contract was declared — not that it failed. `clawo runs --veri
 For the row schema, the query surfaces, and which engines report real token usage versus
 estimating it: see [references/observability.md](references/observability.md)
 
+## From the terminal
+
+With `clawo serve` running, the same runtime is scriptable from a shell. Commands that fail exit
+with status 1. Full list: [references/cli.md](references/cli.md).
+
+```bash
+clawo session-start fix -e codex -d /path/to/project
+clawo session-send fix --message-file task.md --json   # the whole result as one JSON line
+clawo session-status fix --json
+clawo solve "The test fails. Fix it." -e claude --check "npm test" --wait   # exit 0 only if it completes
+clawo fanout "Review this design" --engines claude,codex,grok --synthesize --wait
+clawo goal --objective-file GOAL.md --check "npm test" --wait
+clawo workflow list                                    # then: clawo workflow show <runId>
+clawo verify <runId>                                   # the evidence bundle
+clawo runs --since 24h                                 # the per-turn ledger
+clawo engines                                          # bundled community presets
+```
+
 ## Authentication Prerequisites
 
 Each engine requires its own auth before use:
@@ -276,3 +303,4 @@ Each engine requires its own auth before use:
 - **Antigravity**: run `agy` once and complete the Google OAuth login
 - **Grok**: run `grok` once and sign in (grok.com account or `XAI_API_KEY`)
 - **OpenCode**: `opencode auth login` (provider-agnostic; use `provider/model` form for `model`)
+- **ACP agents**: log in with the agent's own CLI first; the session runs no ACP authentication step