@kbediako/codex-orchestrator 0.1.38 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (311) hide show
  1. package/.agents/plugins/marketplace.json +20 -0
  2. package/README.md +46 -317
  3. package/bin/codex-orchestrator.js +161 -0
  4. package/codex.orchestrator.json +149 -13
  5. package/dist/bin/codex-orchestrator.js +797 -1154
  6. package/dist/orchestrator/src/cli/adapters/CommandBuilder.js +50 -0
  7. package/dist/orchestrator/src/cli/adapters/CommandPlanner.js +22 -4
  8. package/dist/orchestrator/src/cli/adapters/CommandReviewer.js +3 -3
  9. package/dist/orchestrator/src/cli/adapters/CommandTester.js +2 -2
  10. package/dist/orchestrator/src/cli/adapters/cloudFailureDiagnostics.js +295 -11
  11. package/dist/orchestrator/src/cli/coStatusAttachCliShell.js +402 -0
  12. package/dist/orchestrator/src/cli/coStatusCliShell.js +451 -0
  13. package/dist/orchestrator/src/cli/coStatusOperatorAutopilotCliShell.js +120 -0
  14. package/dist/orchestrator/src/cli/codexCliShell.js +119 -0
  15. package/dist/orchestrator/src/cli/codexDefaultsSetup.js +265 -36
  16. package/dist/orchestrator/src/cli/config/delegationConfig.js +317 -5
  17. package/dist/orchestrator/src/cli/config/repoConfigPolicy.js +2 -3
  18. package/dist/orchestrator/src/cli/config/userConfig.js +28 -13
  19. package/dist/orchestrator/src/cli/control/authenticatedControlRouteGate.js +69 -0
  20. package/dist/orchestrator/src/cli/control/authenticatedRouteComposition.js +267 -0
  21. package/dist/orchestrator/src/cli/control/authenticatedRouteController.js +5 -0
  22. package/dist/orchestrator/src/cli/control/authenticatedRouteDispatcher.js +41 -0
  23. package/dist/orchestrator/src/cli/control/compatibilityIssuePresenter.js +1035 -0
  24. package/dist/orchestrator/src/cli/control/confirmationApproveController.js +62 -0
  25. package/dist/orchestrator/src/cli/control/confirmationCreateController.js +69 -0
  26. package/dist/orchestrator/src/cli/control/confirmationIssueConsumeController.js +43 -0
  27. package/dist/orchestrator/src/cli/control/confirmationListController.js +22 -0
  28. package/dist/orchestrator/src/cli/control/confirmationValidateController.js +58 -0
  29. package/dist/orchestrator/src/cli/control/confirmations.js +25 -3
  30. package/dist/orchestrator/src/cli/control/controlActionCancelConfirmation.js +65 -0
  31. package/dist/orchestrator/src/cli/control/controlActionController.js +77 -0
  32. package/dist/orchestrator/src/cli/control/controlActionControllerSequencing.js +161 -0
  33. package/dist/orchestrator/src/cli/control/controlActionExecution.js +142 -0
  34. package/dist/orchestrator/src/cli/control/controlActionFinalization.js +43 -0
  35. package/dist/orchestrator/src/cli/control/controlActionOutcome.js +60 -0
  36. package/dist/orchestrator/src/cli/control/controlActionPreflight.js +476 -0
  37. package/dist/orchestrator/src/cli/control/controlAuthenticatedRouteHandoff.js +57 -0
  38. package/dist/orchestrator/src/cli/control/controlBootstrapAssembly.js +39 -0
  39. package/dist/orchestrator/src/cli/control/controlBootstrapMetadataPersistence.js +16 -0
  40. package/dist/orchestrator/src/cli/control/controlEventTransport.js +49 -0
  41. package/dist/orchestrator/src/cli/control/controlExpiryLifecycle.js +102 -0
  42. package/dist/orchestrator/src/cli/control/controlHostOwnership.js +480 -0
  43. package/dist/orchestrator/src/cli/control/controlHostSupervision.js +630 -0
  44. package/dist/orchestrator/src/cli/control/controlOversightFacade.js +8 -0
  45. package/dist/orchestrator/src/cli/control/controlOversightReadContract.js +1 -0
  46. package/dist/orchestrator/src/cli/control/controlOversightReadService.js +16 -0
  47. package/dist/orchestrator/src/cli/control/controlOversightUpdateContract.js +1 -0
  48. package/dist/orchestrator/src/cli/control/controlPersistenceFiles.js +6 -0
  49. package/dist/orchestrator/src/cli/control/controlQuestionChildResolution.js +18 -0
  50. package/dist/orchestrator/src/cli/control/controlRequestContext.js +42 -0
  51. package/dist/orchestrator/src/cli/control/controlRequestController.js +9 -0
  52. package/dist/orchestrator/src/cli/control/controlRequestPredispatch.js +17 -0
  53. package/dist/orchestrator/src/cli/control/controlRequestRouteDispatch.js +44 -0
  54. package/dist/orchestrator/src/cli/control/controlRuntime.js +1003 -0
  55. package/dist/orchestrator/src/cli/control/controlServer.js +23 -1456
  56. package/dist/orchestrator/src/cli/control/controlServerAuditAndErrorHelpers.js +115 -0
  57. package/dist/orchestrator/src/cli/control/controlServerAuthenticatedRouteBranch.js +29 -0
  58. package/dist/orchestrator/src/cli/control/controlServerBootstrapLifecycle.js +30 -0
  59. package/dist/orchestrator/src/cli/control/controlServerBootstrapStartSequence.js +21 -0
  60. package/dist/orchestrator/src/cli/control/controlServerOwnedRuntimeLifecycle.js +67 -0
  61. package/dist/orchestrator/src/cli/control/controlServerPublicLifecycle.js +756 -0
  62. package/dist/orchestrator/src/cli/control/controlServerPublicRouteHelpers.js +86 -0
  63. package/dist/orchestrator/src/cli/control/controlServerReadyInstanceLifecycle.js +25 -0
  64. package/dist/orchestrator/src/cli/control/controlServerReadyInstanceStartup.js +18 -0
  65. package/dist/orchestrator/src/cli/control/controlServerRequestBodyHelpers.js +37 -0
  66. package/dist/orchestrator/src/cli/control/controlServerRequestShell.js +40 -0
  67. package/dist/orchestrator/src/cli/control/controlServerRequestShellBinding.js +17 -0
  68. package/dist/orchestrator/src/cli/control/controlServerSeedLoading.js +27 -0
  69. package/dist/orchestrator/src/cli/control/controlServerSeededRuntimeAssembly.js +186 -0
  70. package/dist/orchestrator/src/cli/control/controlServerStartupInputPreparation.js +31 -0
  71. package/dist/orchestrator/src/cli/control/controlServerStartupSequence.js +49 -0
  72. package/dist/orchestrator/src/cli/control/controlState.js +233 -2
  73. package/dist/orchestrator/src/cli/control/controlStatusDashboard.js +1904 -0
  74. package/dist/orchestrator/src/cli/control/controlTelegramBridgeBootstrapLifecycle.js +22 -0
  75. package/dist/orchestrator/src/cli/control/controlTelegramBridgeLifecycle.js +67 -0
  76. package/dist/orchestrator/src/cli/control/controlTelegramBridgeOversightFacadeFactory.js +8 -0
  77. package/dist/orchestrator/src/cli/control/controlTelegramCommandController.js +49 -0
  78. package/dist/orchestrator/src/cli/control/controlTelegramDispatchRead.js +40 -0
  79. package/dist/orchestrator/src/cli/control/controlTelegramPollingController.js +89 -0
  80. package/dist/orchestrator/src/cli/control/controlTelegramProjectionNotificationController.js +29 -0
  81. package/dist/orchestrator/src/cli/control/controlTelegramPushState.js +63 -0
  82. package/dist/orchestrator/src/cli/control/controlTelegramQuestionRead.js +13 -0
  83. package/dist/orchestrator/src/cli/control/controlTelegramReadController.js +216 -0
  84. package/dist/orchestrator/src/cli/control/controlTelegramUpdateHandler.js +63 -0
  85. package/dist/orchestrator/src/cli/control/controlWatcher.js +73 -5
  86. package/dist/orchestrator/src/cli/control/delegationRegisterController.js +35 -0
  87. package/dist/orchestrator/src/cli/control/dynamicToolBridgePolicy.js +139 -0
  88. package/dist/orchestrator/src/cli/control/eventsSseController.js +12 -0
  89. package/dist/orchestrator/src/cli/control/linearBudgetState.js +1789 -0
  90. package/dist/orchestrator/src/cli/control/linearDispatchSource.js +1137 -0
  91. package/dist/orchestrator/src/cli/control/linearGraphqlClient.js +150 -0
  92. package/dist/orchestrator/src/cli/control/linearRateLimit.js +102 -0
  93. package/dist/orchestrator/src/cli/control/linearWebhookController.js +499 -0
  94. package/dist/orchestrator/src/cli/control/liveLinearAdvisoryRuntime.js +70 -0
  95. package/dist/orchestrator/src/cli/control/observabilityApiController.js +173 -0
  96. package/dist/orchestrator/src/cli/control/observabilityReadModel.js +500 -0
  97. package/dist/orchestrator/src/cli/control/observabilitySurface.js +284 -0
  98. package/dist/orchestrator/src/cli/control/observabilityUpdateNotifier.js +22 -0
  99. package/dist/orchestrator/src/cli/control/operatorDashboardPresenter.js +252 -0
  100. package/dist/orchestrator/src/cli/control/providerAgentCapacity.js +70 -0
  101. package/dist/orchestrator/src/cli/control/providerControlHostFreshnessGauge.js +1068 -0
  102. package/dist/orchestrator/src/cli/control/providerIntakeState.js +473 -0
  103. package/dist/orchestrator/src/cli/control/providerIssueHandoff.js +6811 -0
  104. package/dist/orchestrator/src/cli/control/providerIssueObservability.js +1348 -0
  105. package/dist/orchestrator/src/cli/control/providerIssueRetryQueue.js +84 -0
  106. package/dist/orchestrator/src/cli/control/providerLinearRuntimeProof.js +588 -0
  107. package/dist/orchestrator/src/cli/control/providerLinearScreenshotProof.js +473 -0
  108. package/dist/orchestrator/src/cli/control/providerLinearWorkerTruth.js +383 -0
  109. package/dist/orchestrator/src/cli/control/providerLinearWorkflowAudit.js +254 -0
  110. package/dist/orchestrator/src/cli/control/providerLinearWorkflowFacade.js +5573 -0
  111. package/dist/orchestrator/src/cli/control/providerLinearWorkflowStates.js +115 -0
  112. package/dist/orchestrator/src/cli/control/providerMergeCloseout.js +1868 -0
  113. package/dist/orchestrator/src/cli/control/providerOperatorAutopilot.js +1580 -0
  114. package/dist/orchestrator/src/cli/control/providerOperatorAutopilotLifecycle.js +154 -0
  115. package/dist/orchestrator/src/cli/control/providerOperatorAutopilotLocalRolloutExecution.js +1006 -0
  116. package/dist/orchestrator/src/cli/control/providerPollingHealth.js +435 -0
  117. package/dist/orchestrator/src/cli/control/providerTerminalCleanup.js +516 -0
  118. package/dist/orchestrator/src/cli/control/providerWorkerHosts.js +191 -0
  119. package/dist/orchestrator/src/cli/control/providerWorkflowConfigStore.js +515 -0
  120. package/dist/orchestrator/src/cli/control/questionChildResolutionAdapter.js +361 -0
  121. package/dist/orchestrator/src/cli/control/questionQueueController.js +181 -0
  122. package/dist/orchestrator/src/cli/control/questionReadRetryDeduplication.js +9 -0
  123. package/dist/orchestrator/src/cli/control/questionReadSequence.js +10 -0
  124. package/dist/orchestrator/src/cli/control/securityViolationController.js +27 -0
  125. package/dist/orchestrator/src/cli/control/selectedRunProjection.js +1885 -0
  126. package/dist/orchestrator/src/cli/control/telegramOversightApiClient.js +48 -0
  127. package/dist/orchestrator/src/cli/control/telegramOversightBridge.js +180 -0
  128. package/dist/orchestrator/src/cli/control/telegramOversightBridgeProjectionDeliveryQueue.js +25 -0
  129. package/dist/orchestrator/src/cli/control/telegramOversightBridgeRuntimeLifecycle.js +45 -0
  130. package/dist/orchestrator/src/cli/control/telegramOversightBridgeStateStore.js +77 -0
  131. package/dist/orchestrator/src/cli/control/telegramOversightControlActionApiClient.js +45 -0
  132. package/dist/orchestrator/src/cli/control/trackerDispatchPilot.js +439 -0
  133. package/dist/orchestrator/src/cli/control/uiDataController.js +34 -0
  134. package/dist/orchestrator/src/cli/control/uiSessionController.js +100 -0
  135. package/dist/orchestrator/src/cli/controlHostCliShell.js +860 -0
  136. package/dist/orchestrator/src/cli/controlHostFreshnessGaugeCliShell.js +129 -0
  137. package/dist/orchestrator/src/cli/controlHostSupervisionCliShell.js +2127 -0
  138. package/dist/orchestrator/src/cli/delegationCliShell.js +62 -0
  139. package/dist/orchestrator/src/cli/delegationServer.js +567 -678
  140. package/dist/orchestrator/src/cli/delegationServerCliShell.js +52 -0
  141. package/dist/orchestrator/src/cli/delegationServerQuestionFlowShell.js +228 -0
  142. package/dist/orchestrator/src/cli/delegationServerToolDispatchShell.js +411 -0
  143. package/dist/orchestrator/src/cli/delegationServerTransport.js +274 -0
  144. package/dist/orchestrator/src/cli/delegationSetup.js +51 -171
  145. package/dist/orchestrator/src/cli/devtoolsCliShell.js +34 -0
  146. package/dist/orchestrator/src/cli/doctor.js +678 -164
  147. package/dist/orchestrator/src/cli/doctorCliRequestShell.js +72 -0
  148. package/dist/orchestrator/src/cli/doctorCliShell.js +138 -0
  149. package/dist/orchestrator/src/cli/doctorUsage.js +119 -15
  150. package/dist/orchestrator/src/cli/exec/experience.js +16 -2
  151. package/dist/orchestrator/src/cli/exec/summary.js +3 -0
  152. package/dist/orchestrator/src/cli/execCliShell.js +51 -0
  153. package/dist/orchestrator/src/cli/flowCliRequestShell.js +44 -0
  154. package/dist/orchestrator/src/cli/flowCliShell.js +239 -0
  155. package/dist/orchestrator/src/cli/frontendTestCliRequestShell.js +80 -0
  156. package/dist/orchestrator/src/cli/frontendTestCliShell.js +41 -0
  157. package/dist/orchestrator/src/cli/init.js +95 -1
  158. package/dist/orchestrator/src/cli/initCliShell.js +50 -0
  159. package/dist/orchestrator/src/cli/linearCliShell.js +1200 -0
  160. package/dist/orchestrator/src/cli/mcpEnableCliShell.js +132 -0
  161. package/dist/orchestrator/src/cli/metrics/metricsAggregator.js +3 -2
  162. package/dist/orchestrator/src/cli/metrics/metricsRecorder.js +56 -0
  163. package/dist/orchestrator/src/cli/orchestrator.js +66 -1376
  164. package/dist/orchestrator/src/cli/planCliShell.js +19 -0
  165. package/dist/orchestrator/src/cli/prCliShell.js +41 -0
  166. package/dist/orchestrator/src/cli/providerLinearChildLanePhaseContract.js +204 -0
  167. package/dist/orchestrator/src/cli/providerLinearChildLaneRunner.js +1835 -0
  168. package/dist/orchestrator/src/cli/providerLinearChildLaneShell.js +2420 -0
  169. package/dist/orchestrator/src/cli/providerLinearChildStreamShell.js +385 -0
  170. package/dist/orchestrator/src/cli/providerLinearWorkerRunner.js +6834 -0
  171. package/dist/orchestrator/src/cli/resumeCliShell.js +14 -0
  172. package/dist/orchestrator/src/cli/reviewCliLaunchShell.js +72 -0
  173. package/dist/orchestrator/src/cli/rlm/alignment.js +3 -3
  174. package/dist/orchestrator/src/cli/rlm/context.js +94 -7
  175. package/dist/orchestrator/src/cli/rlm/rlmCodexRuntimeShell.js +546 -0
  176. package/dist/orchestrator/src/cli/rlm/symbolic.js +4 -2
  177. package/dist/orchestrator/src/cli/rlmCliRequestShell.js +42 -0
  178. package/dist/orchestrator/src/cli/rlmCompletionCliShell.js +46 -0
  179. package/dist/orchestrator/src/cli/rlmLaunchCliShell.js +51 -0
  180. package/dist/orchestrator/src/cli/rlmRunner.js +83 -523
  181. package/dist/orchestrator/src/cli/run/blockMemory.js +500 -0
  182. package/dist/orchestrator/src/cli/run/manifest.js +410 -73
  183. package/dist/orchestrator/src/cli/run/manifestPersister.js +45 -14
  184. package/dist/orchestrator/src/cli/run/runMemoryController.js +216 -0
  185. package/dist/orchestrator/src/cli/run/source0.js +690 -0
  186. package/dist/orchestrator/src/cli/run/workspacePath.js +101 -0
  187. package/dist/orchestrator/src/cli/runtime/mode.js +2 -1
  188. package/dist/orchestrator/src/cli/runtime/provider.js +39 -2
  189. package/dist/orchestrator/src/cli/selfCheckCliShell.js +12 -0
  190. package/dist/orchestrator/src/cli/services/commandRunner.js +698 -18
  191. package/dist/orchestrator/src/cli/services/execRuntime.js +66 -1
  192. package/dist/orchestrator/src/cli/services/orchestratorAutoScoutEvidenceRecorder.js +71 -0
  193. package/dist/orchestrator/src/cli/services/orchestratorCloudBranchResolution.js +8 -0
  194. package/dist/orchestrator/src/cli/services/orchestratorCloudEnvironmentResolution.js +22 -0
  195. package/dist/orchestrator/src/cli/services/orchestratorCloudExecutionLifecycleShell.js +39 -0
  196. package/dist/orchestrator/src/cli/services/orchestratorCloudPromptBuilder.js +37 -0
  197. package/dist/orchestrator/src/cli/services/orchestratorCloudRouteFallbackContract.js +45 -0
  198. package/dist/orchestrator/src/cli/services/orchestratorCloudRouteShell.js +36 -0
  199. package/dist/orchestrator/src/cli/services/orchestratorCloudTargetExecutor.js +277 -0
  200. package/dist/orchestrator/src/cli/services/orchestratorControlPlaneLifecycle.js +98 -0
  201. package/dist/orchestrator/src/cli/services/orchestratorControlPlaneLifecycleShell.js +54 -0
  202. package/dist/orchestrator/src/cli/services/orchestratorExecutionLifecycle.js +112 -0
  203. package/dist/orchestrator/src/cli/services/orchestratorExecutionModePolicy.js +27 -0
  204. package/dist/orchestrator/src/cli/services/orchestratorExecutionRouteAdapterShell.js +59 -0
  205. package/dist/orchestrator/src/cli/services/orchestratorExecutionRouteDecisionShell.js +57 -0
  206. package/dist/orchestrator/src/cli/services/orchestratorExecutionRouteState.js +21 -0
  207. package/dist/orchestrator/src/cli/services/orchestratorExecutionRouter.js +2 -0
  208. package/dist/orchestrator/src/cli/services/orchestratorLocalPipelineExecutor.js +149 -0
  209. package/dist/orchestrator/src/cli/services/orchestratorLocalRouteShell.js +63 -0
  210. package/dist/orchestrator/src/cli/services/orchestratorPlanShell.js +54 -0
  211. package/dist/orchestrator/src/cli/services/orchestratorPlanTargetTracker.js +16 -0
  212. package/dist/orchestrator/src/cli/services/orchestratorResumePreparationShell.js +84 -0
  213. package/dist/orchestrator/src/cli/services/orchestratorResumeTokenValidation.js +15 -0
  214. package/dist/orchestrator/src/cli/services/orchestratorRunLifecycleCompletion.js +31 -0
  215. package/dist/orchestrator/src/cli/services/orchestratorRunLifecycleExecutionRegistration.js +37 -0
  216. package/dist/orchestrator/src/cli/services/orchestratorRunLifecycleOrchestrationShell.js +83 -0
  217. package/dist/orchestrator/src/cli/services/orchestratorRunLifecycleTaskManagerShell.js +37 -0
  218. package/dist/orchestrator/src/cli/services/orchestratorRuntimeManifestMutation.js +20 -0
  219. package/dist/orchestrator/src/cli/services/orchestratorStartPreparationShell.js +56 -0
  220. package/dist/orchestrator/src/cli/services/orchestratorStatusShell.js +70 -0
  221. package/dist/orchestrator/src/cli/services/pipelineResolver.js +7 -3
  222. package/dist/orchestrator/src/cli/services/plannerMemory.js +119 -0
  223. package/dist/orchestrator/src/cli/services/runPreparation.js +7 -3
  224. package/dist/orchestrator/src/cli/services/runSummaryWriter.js +9 -0
  225. package/dist/orchestrator/src/cli/setupBootstrapShell.js +114 -0
  226. package/dist/orchestrator/src/cli/setupCliShell.js +51 -0
  227. package/dist/orchestrator/src/cli/skillsCliShell.js +56 -0
  228. package/dist/orchestrator/src/cli/startCliRequestShell.js +53 -0
  229. package/dist/orchestrator/src/cli/startCliShell.js +68 -0
  230. package/dist/orchestrator/src/cli/statusCliShell.js +22 -0
  231. package/dist/orchestrator/src/cli/utils/authProvenanceFingerprint.js +27 -0
  232. package/dist/orchestrator/src/cli/utils/cloudPreflight.js +285 -7
  233. package/dist/orchestrator/src/cli/utils/codexFeatures.js +60 -0
  234. package/dist/orchestrator/src/cli/utils/delegationConfigParser.js +250 -0
  235. package/dist/orchestrator/src/cli/utils/delegationMcpHealth.js +1382 -0
  236. package/dist/orchestrator/src/cli/utils/devtools.js +2 -54
  237. package/dist/orchestrator/src/cli/utils/mcpServerEntry.js +53 -0
  238. package/dist/orchestrator/src/cli/utils/packageProgramResolver.js +151 -0
  239. package/dist/orchestrator/src/cli/utils/providerOverrideEnv.js +71 -0
  240. package/dist/orchestrator/src/cli/utils/trailingJsonObject.js +59 -0
  241. package/dist/orchestrator/src/learning/crystalizer.js +2 -2
  242. package/dist/orchestrator/src/manager.js +74 -4
  243. package/dist/orchestrator/src/persistence/ExperienceStore.js +233 -49
  244. package/dist/orchestrator/src/persistence/TaskStateStore.js +6 -6
  245. package/dist/orchestrator/src/persistence/lockFile.js +70 -4
  246. package/dist/orchestrator/src/persistence/sanitizeIdentifier.js +39 -0
  247. package/dist/orchestrator/src/sync/createCloudSyncWorker.js +3 -2
  248. package/dist/orchestrator/src/utils/atomicWrite.js +17 -2
  249. package/dist/packages/orchestrator/src/exec/unified-exec.js +99 -6
  250. package/dist/packages/orchestrator/src/instructions/promptPacks.js +150 -19
  251. package/dist/packages/sdk-node/src/orchestrator.js +137 -13
  252. package/dist/packages/shared/config/designConfig.js +8 -1
  253. package/dist/packages/shared/streams/stdio.js +1 -1
  254. package/dist/scripts/design/pipeline/permit.js +15 -0
  255. package/dist/scripts/lib/docs-catalog.js +399 -0
  256. package/dist/scripts/lib/docs-helpers.js +87 -5
  257. package/dist/scripts/lib/pr-watch-merge.js +1088 -80
  258. package/dist/scripts/lib/provider-run-contract.js +26 -0
  259. package/dist/scripts/lib/review-command-intent-classification.js +532 -0
  260. package/dist/scripts/lib/review-command-probe-classification.js +385 -0
  261. package/dist/scripts/lib/review-execution-boundary-preflight.js +279 -0
  262. package/dist/scripts/lib/review-execution-runtime.js +753 -0
  263. package/dist/scripts/lib/review-execution-state.js +1144 -0
  264. package/dist/scripts/lib/review-execution-telemetry.js +215 -0
  265. package/dist/scripts/lib/review-inspection-target-parsing.js +78 -0
  266. package/dist/scripts/lib/review-launch-attempt.js +601 -0
  267. package/dist/scripts/lib/review-meta-surface-boundary-analysis.js +300 -0
  268. package/dist/scripts/lib/review-meta-surface-normalization.js +746 -0
  269. package/dist/scripts/lib/review-non-interactive-handoff.js +61 -0
  270. package/dist/scripts/lib/review-prompt-context.js +376 -0
  271. package/dist/scripts/lib/review-scope-advisory.js +286 -0
  272. package/dist/scripts/lib/review-scope-paths.js +123 -0
  273. package/dist/scripts/lib/review-shell-command-parser.js +389 -0
  274. package/dist/scripts/lib/review-shell-env-interpreter.js +340 -0
  275. package/dist/scripts/lib/run-manifests.js +192 -36
  276. package/dist/scripts/lib/spark-policy-classifier.js +593 -0
  277. package/dist/scripts/run-review.js +507 -1777
  278. package/docs/README.md +43 -20
  279. package/docs/book/README.md +19 -0
  280. package/docs/book/codex-cli-0124-adoption.md +68 -0
  281. package/docs/book/local-hook-impact.md +73 -0
  282. package/docs/book/operations.md +60 -0
  283. package/docs/book/public-posture.md +34 -0
  284. package/docs/book/setup.md +91 -0
  285. package/docs/book/skills.md +11 -0
  286. package/docs/guides/codex-version-policy.md +104 -0
  287. package/docs/public/downstream-setup.md +113 -0
  288. package/docs/public/provider-onboarding.md +173 -0
  289. package/package.json +23 -10
  290. package/plugins/codex-orchestrator/.codex-plugin/plugin.json +30 -0
  291. package/plugins/codex-orchestrator/.mcp.json +13 -0
  292. package/plugins/codex-orchestrator/launcher.mjs +361 -0
  293. package/schemas/manifest.json +411 -0
  294. package/skills/README.md +26 -0
  295. package/skills/collab-subagents-first/SKILL.md +1 -1
  296. package/skills/delegation-usage/DELEGATION_GUIDE.md +30 -12
  297. package/skills/delegation-usage/SKILL.md +25 -14
  298. package/skills/land/SKILL.md +77 -0
  299. package/skills/linear/SKILL.md +255 -0
  300. package/skills/release/SKILL.md +47 -3
  301. package/skills/standalone-review/SKILL.md +6 -1
  302. package/templates/README.md +4 -2
  303. package/templates/codex/.codex/agents/awaiter-high.toml +2 -2
  304. package/templates/codex/.codex/agents/worker-complex.toml +1 -1
  305. package/templates/codex/.codex/config.toml +3 -4
  306. package/templates/codex/.codex/providers/README.md +13 -0
  307. package/templates/codex/.codex/providers/control.example.json +18 -0
  308. package/templates/codex/.codex/providers/provider.env.example +15 -0
  309. package/templates/codex/AGENTS.md +15 -8
  310. package/templates/codex/mcp-client.json +5 -1
  311. package/docs/assets/setup.gif +0 -0
@@ -0,0 +1,389 @@
1
+ export const REVIEW_SHELL_COMMANDS = new Set([
2
+ 'bash',
3
+ 'sh',
4
+ 'zsh',
5
+ 'ksh',
6
+ 'fish',
7
+ 'pwsh',
8
+ 'powershell',
9
+ 'cmd',
10
+ 'cmd.exe'
11
+ ]);
12
+ export function normalizeShellCommandPathSeparators(command) {
13
+ let normalized = '';
14
+ let currentToken = '';
15
+ let quote = null;
16
+ let escaped = false;
17
+ const flushToken = () => {
18
+ if (!currentToken) {
19
+ return;
20
+ }
21
+ normalized += looksLikeWindowsPathToken(currentToken)
22
+ ? normalizeWindowsPathToken(currentToken)
23
+ : currentToken;
24
+ currentToken = '';
25
+ };
26
+ for (let index = 0; index < command.length; index += 1) {
27
+ const char = command[index] ?? '';
28
+ const next = command[index + 1] ?? '';
29
+ if (escaped) {
30
+ currentToken += char;
31
+ escaped = false;
32
+ continue;
33
+ }
34
+ if (char === '\\' && quote !== "'") {
35
+ currentToken += char;
36
+ escaped = true;
37
+ continue;
38
+ }
39
+ if (quote) {
40
+ if (char === quote) {
41
+ quote = null;
42
+ }
43
+ currentToken += char;
44
+ continue;
45
+ }
46
+ if (char === '"' || char === "'" || char === '`') {
47
+ quote = char;
48
+ currentToken += char;
49
+ continue;
50
+ }
51
+ if (/\s/u.test(char)) {
52
+ flushToken();
53
+ normalized += char;
54
+ continue;
55
+ }
56
+ if (char === ';' || char === '\n') {
57
+ flushToken();
58
+ normalized += char;
59
+ continue;
60
+ }
61
+ if (char === '&') {
62
+ flushToken();
63
+ if (next === '&') {
64
+ normalized += '&&';
65
+ index += 1;
66
+ }
67
+ else {
68
+ normalized += '&';
69
+ }
70
+ continue;
71
+ }
72
+ if (char === '|') {
73
+ flushToken();
74
+ if (next === '|') {
75
+ normalized += '||';
76
+ index += 1;
77
+ }
78
+ else {
79
+ normalized += '|';
80
+ }
81
+ continue;
82
+ }
83
+ currentToken += char;
84
+ }
85
+ flushToken();
86
+ return normalized;
87
+ }
88
+ function looksLikeWindowsPathToken(token) {
89
+ const quote = getMatchingQuote(token);
90
+ const unquoted = quote ? token.slice(1, -1) : token;
91
+ const candidate = stripTrailingShellControlSuffix(unquoted);
92
+ if (/^[A-Za-z]:\\/u.test(candidate) || /^\\\\[^\\/\s"'`]+[\\/]/u.test(candidate)) {
93
+ return true;
94
+ }
95
+ // Single-quoted relative tokens already preserve backslashes during tokenization.
96
+ // Leave them untouched so quoted regex/search literals do not regress again.
97
+ if (quote === "'") {
98
+ return false;
99
+ }
100
+ if (quote === '"' && !looksLikeExplicitDoubleQuotedWindowsPathToken(candidate)) {
101
+ return false;
102
+ }
103
+ return looksLikeRelativeWindowsLauncherToken(candidate);
104
+ }
105
+ function stripTrailingShellControlSuffix(token) {
106
+ return token.replace(/(?:&&|\|\||[;&|])+$/u, '');
107
+ }
108
+ function looksLikeRelativeWindowsLauncherToken(token) {
109
+ if (!token.includes('\\')) {
110
+ return false;
111
+ }
112
+ if (/^(?:\.\.?\\)+(?:[^\\/\s"'`]+\\)+[^\\/\s"'`]+$/u.test(token)) {
113
+ return true;
114
+ }
115
+ if (/^(?!-)(?:[^\\/\s"'`=;&|<>]+\\)+[^\\/\s"'`.=;&|<>]+$/u.test(token)) {
116
+ return true;
117
+ }
118
+ if (/^(?!-)(?:[^\\/\s"'`=;&|<>]+\\)+[^\\/\s"'`=;&|<>]+\.(?:js|ts|mjs|cjs|mts|cts|\{js,ts\})$/iu.test(token)) {
119
+ return true;
120
+ }
121
+ if (/^node_modules\\\.bin\\[^\\/\s"'`]+$/iu.test(token)) {
122
+ return true;
123
+ }
124
+ if (/\\[^\\/\s"'`]+\.(?:cmd|exe|bat|com|ps1)$/iu.test(token)) {
125
+ return true;
126
+ }
127
+ return false;
128
+ }
129
+ function looksLikeExplicitDoubleQuotedWindowsPathToken(token) {
130
+ if (/^(?:\.\.?\\)+/u.test(token) || /^node_modules\\\.bin\\/iu.test(token)) {
131
+ return true;
132
+ }
133
+ return /^(?!-)(?:[^\\/\s"'`=;&|<>]+\\)+[^\\/\s"'`]+\.(?:cmd|exe|bat|com|ps1)$/iu.test(token);
134
+ }
135
+ function getMatchingQuote(token) {
136
+ if (token.length < 2) {
137
+ return null;
138
+ }
139
+ const first = token[0] ?? '';
140
+ const last = token[token.length - 1] ?? '';
141
+ if ((first === '"' || first === "'" || first === '`') && last === first) {
142
+ return first;
143
+ }
144
+ return null;
145
+ }
146
+ function normalizeWindowsPathToken(token) {
147
+ const first = token[0] ?? '';
148
+ const last = token[token.length - 1] ?? '';
149
+ const hasMatchingQuotes = token.length >= 2 && (first === '"' || first === "'" || first === '`') && last === first;
150
+ const raw = hasMatchingQuotes ? token.slice(1, -1) : token;
151
+ const normalized = raw.replace(/\\\\(?=$|[^\\\s])/gu, '//').replace(/\\(?=$|[^\\\s])/gu, '/');
152
+ return hasMatchingQuotes ? `${first}${normalized}${last}` : normalized;
153
+ }
154
+ export function splitShellControlSegmentsDetailed(command) {
155
+ if (!command.trim()) {
156
+ return [];
157
+ }
158
+ const segments = [];
159
+ let current = '';
160
+ let quote = null;
161
+ let escaped = false;
162
+ const pushCurrent = (separatorAfter) => {
163
+ const trimmed = current.trim();
164
+ if (trimmed.length > 0) {
165
+ segments.push({ segment: trimmed, separatorAfter });
166
+ }
167
+ current = '';
168
+ };
169
+ for (let index = 0; index < command.length; index += 1) {
170
+ const char = command[index] ?? '';
171
+ const next = command[index + 1] ?? '';
172
+ if (escaped) {
173
+ current += char;
174
+ escaped = false;
175
+ continue;
176
+ }
177
+ if (char === '\\' && quote !== "'") {
178
+ current += char;
179
+ escaped = true;
180
+ continue;
181
+ }
182
+ if (quote) {
183
+ if (char === quote) {
184
+ quote = null;
185
+ }
186
+ current += char;
187
+ continue;
188
+ }
189
+ if (char === '"' || char === "'" || char === '`') {
190
+ quote = char;
191
+ current += char;
192
+ continue;
193
+ }
194
+ if (char === ';' || char === '\n') {
195
+ pushCurrent(char);
196
+ continue;
197
+ }
198
+ if (char === '&') {
199
+ if (next === '&') {
200
+ pushCurrent('&&');
201
+ index += 1;
202
+ continue;
203
+ }
204
+ pushCurrent('&');
205
+ continue;
206
+ }
207
+ if (char === '|') {
208
+ if (next === '|') {
209
+ pushCurrent('||');
210
+ index += 1;
211
+ continue;
212
+ }
213
+ pushCurrent('|');
214
+ continue;
215
+ }
216
+ current += char;
217
+ }
218
+ pushCurrent(null);
219
+ return segments;
220
+ }
221
+ export function splitShellControlSegments(command) {
222
+ return splitShellControlSegmentsDetailed(command).map((entry) => entry.segment);
223
+ }
224
+ export function separatorCarriesParentShellStateForward(separator) {
225
+ return separator !== '|' && separator !== '&';
226
+ }
227
+ export function inferStaticShellTruthiness(segment) {
228
+ const rawTokens = tokenizeShellSegment(segment);
229
+ const strippedTokens = stripLeadingEnvAssignments(rawTokens);
230
+ if (strippedTokens.length === 0) {
231
+ return null;
232
+ }
233
+ const tokens = unwrapEnvCommandTokens(strippedTokens);
234
+ if (tokens.length === 0) {
235
+ return null;
236
+ }
237
+ const command = normalizeCommandToken(tokens[0] ?? '');
238
+ if (command === 'true' || command === ':' || command === 'export' || command === 'unset') {
239
+ return true;
240
+ }
241
+ if (command === 'false') {
242
+ return false;
243
+ }
244
+ return null;
245
+ }
246
+ export function segmentRunsInParentShell(separatorBefore, previousSegmentTruthiness) {
247
+ if (separatorBefore === null || separatorBefore === ';' || separatorBefore === '\n' || separatorBefore === '&') {
248
+ return true;
249
+ }
250
+ if (separatorBefore === '|') {
251
+ return false;
252
+ }
253
+ if (separatorBefore === '&&') {
254
+ return previousSegmentTruthiness === true;
255
+ }
256
+ if (separatorBefore === '||') {
257
+ return previousSegmentTruthiness === false;
258
+ }
259
+ return false;
260
+ }
261
+ function shellBackslashActsAsEscape(quote, nextChar) {
262
+ if (quote === "'") {
263
+ return false;
264
+ }
265
+ if (quote === '"') {
266
+ return nextChar === '"' || nextChar === '$' || nextChar === '`' || nextChar === '\\' || nextChar === '\n';
267
+ }
268
+ return true;
269
+ }
270
+ export function tokenizeShellSegment(segment) {
271
+ const tokens = [];
272
+ let current = '';
273
+ let quote = null;
274
+ let escaped = false;
275
+ const pushCurrent = () => {
276
+ if (current.length > 0) {
277
+ tokens.push(current);
278
+ current = '';
279
+ }
280
+ };
281
+ for (let index = 0; index < segment.length; index += 1) {
282
+ const char = segment[index] ?? '';
283
+ const next = segment[index + 1] ?? '';
284
+ if (escaped) {
285
+ current += char;
286
+ escaped = false;
287
+ continue;
288
+ }
289
+ if (char === '\\' && shellBackslashActsAsEscape(quote, next)) {
290
+ escaped = true;
291
+ continue;
292
+ }
293
+ if (char === '\\') {
294
+ current += char;
295
+ continue;
296
+ }
297
+ if (quote) {
298
+ if (char === quote) {
299
+ quote = null;
300
+ continue;
301
+ }
302
+ current += char;
303
+ continue;
304
+ }
305
+ if (char === '"' || char === "'" || char === '`') {
306
+ quote = char;
307
+ continue;
308
+ }
309
+ if (/\s/u.test(char)) {
310
+ pushCurrent();
311
+ continue;
312
+ }
313
+ current += char;
314
+ }
315
+ pushCurrent();
316
+ return tokens;
317
+ }
318
+ export function normalizeCommandToken(token) {
319
+ const normalized = token.trim().replace(/\\/gu, '/');
320
+ const basename = normalized.split('/').pop() ?? normalized;
321
+ return basename.replace(/\.(?:exe|cmd|bat|ps1)$/i, '').toLowerCase();
322
+ }
323
+ export function stripLeadingEnvAssignments(tokens) {
324
+ let index = 0;
325
+ while (index < tokens.length && /^[A-Za-z_][A-Za-z0-9_]*=.*/u.test(tokens[index] ?? '')) {
326
+ index += 1;
327
+ }
328
+ return tokens.slice(index);
329
+ }
330
+ export function unwrapEnvCommandTokens(tokens) {
331
+ if (tokens.length === 0 || normalizeCommandToken(tokens[0] ?? '') !== 'env') {
332
+ return tokens;
333
+ }
334
+ let index = 1;
335
+ while (index < tokens.length) {
336
+ const token = tokens[index] ?? '';
337
+ const normalized = token.toLowerCase();
338
+ if (token === '--') {
339
+ index += 1;
340
+ break;
341
+ }
342
+ if (/^[A-Za-z_][A-Za-z0-9_]*=.*/u.test(token)) {
343
+ index += 1;
344
+ continue;
345
+ }
346
+ if (normalized === '-u' || normalized === '--unset') {
347
+ index += 2;
348
+ continue;
349
+ }
350
+ if (normalized.startsWith('--unset=')) {
351
+ index += 1;
352
+ continue;
353
+ }
354
+ if (token.startsWith('-')) {
355
+ index += 1;
356
+ continue;
357
+ }
358
+ break;
359
+ }
360
+ return tokens.slice(index);
361
+ }
362
+ export function isShellCommandFlagWithPayload(flag) {
363
+ const normalized = flag.toLowerCase();
364
+ if (normalized === '/c' || normalized === '-c') {
365
+ return true;
366
+ }
367
+ return /^-[^-]*c[^-]*$/u.test(normalized);
368
+ }
369
+ export function extractShellCommandPayload(tokens) {
370
+ if (tokens.length < 2) {
371
+ return null;
372
+ }
373
+ const command = normalizeCommandToken(tokens[0] ?? '');
374
+ if (!REVIEW_SHELL_COMMANDS.has(command)) {
375
+ return null;
376
+ }
377
+ for (let index = 1; index < tokens.length; index += 1) {
378
+ if (!isShellCommandFlagWithPayload(tokens[index] ?? '')) {
379
+ continue;
380
+ }
381
+ if (command === 'cmd') {
382
+ const payload = tokens.slice(index + 1).join(' ').trim();
383
+ return payload.length > 0 ? payload : null;
384
+ }
385
+ const payload = tokens[index + 1];
386
+ return payload ? payload.trim() : null;
387
+ }
388
+ return null;
389
+ }