@kyo-so/cli 0.1.0 → 0.3.0

package/dist/cli/args.d.ts

@@ -1,5 +1,6 @@
 export type ParsedArgs = {
     command: string;
+    positionals: string[];
     flags: Record<string, string | boolean | string[]>;
 };
 export declare function parseArgs(argv: string[]): ParsedArgs;

package/dist/cli/setup.d.ts

@@ -0,0 +1,29 @@
+export type SetupClient = "codex" | "claude-code";
+export type SetupRunner = "npx" | "bunx";
+export type SetupScope = "project" | "global";
+export type SetupOptions = {
+    cwd: string;
+    client?: string;
+    write: boolean;
+    global: boolean;
+    runner?: string;
+    command?: string;
+    env?: NodeJS.ProcessEnv;
+};
+type McpCommand = {
+    command: string;
+    args: string[];
+};
+export declare function runSetup(options: SetupOptions): Promise<string>;
+export declare function commandForRunner(runner: SetupRunner): McpCommand;
+export declare function buildCodexMcpToml(command: McpCommand): string;
+export declare function buildClaudeMcpEntry(command: McpCommand): Record<string, unknown>;
+export declare function skillDestination(client: SetupClient, scope: SetupScope, cwd: string, home: string): string;
+export declare function detectSetup(options: {
+    cwd: string;
+    home?: string;
+}): Record<SetupClient, {
+    mcp: boolean;
+    skill: boolean;
+}>;
+export {};

package/dist/config/schema.d.ts

@@ -23,6 +23,7 @@ export declare const kyosoConfigSchema: z.ZodObject<{
             role: z.ZodEnum<{
                 implementation_reviewer: "implementation_reviewer";
                 architecture_security_reviewer: "architecture_security_reviewer";
+                combined_reviewer: "combined_reviewer";
             }>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
             env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -43,6 +44,7 @@ export declare const kyosoConfigSchema: z.ZodObject<{
             role: z.ZodEnum<{
                 implementation_reviewer: "implementation_reviewer";
                 architecture_security_reviewer: "architecture_security_reviewer";
+                combined_reviewer: "combined_reviewer";
             }>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
             env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;

package/dist/core/constants.d.ts

@@ -4,4 +4,4 @@ export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.1.0";
+export declare const KYOSO_VERSION = "0.3.0";

package/dist/core/types.d.ts

@@ -59,7 +59,8 @@ export type CisaSecureByDesignResult = {
     notes: string[];
 };
 export type AgentName = "codex" | "claude";
-export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer";
+export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer" | "combined_reviewer";
+export type ReviewMode = "multi_agent" | "single_agent";
 export type NormalizedAgentOpinion = {
     agent: AgentName;
     role: string;
@@ -110,6 +111,8 @@ export type AgentRunResult = {
 export type KyosoResult = {
     decision: KyosoDecision;
     degraded: boolean;
+    agentsUsed: AgentName[];
+    reviewMode: ReviewMode;
     summaryMarkdown: string;
     findings: KyosoFinding[];
     cisaSecureByDesign?: CisaSecureByDesignResult;

package/dist/index.js

@@ -183783,7 +183783,11 @@ var agentSchema = exports_external.object({
   command: exports_external.string(),
   args: exports_external.array(exports_external.string()).default([]),
   model: exports_external.string().optional(),
-  role: exports_external.enum(["implementation_reviewer", "architecture_security_reviewer"]),
+  role: exports_external.enum([
+    "implementation_reviewer",
+    "architecture_security_reviewer",
+    "combined_reviewer"
+  ]),
   timeoutMs: exports_external.number().int().positive().default(120000),
   env: exports_external.record(exports_external.string(), exports_external.string()).default({}),
   auth: exports_external.object({
@@ -188100,7 +188104,7 @@ function buildOpinion(agent, role, tool) {
 }
 
 // src/acp/prompts.ts
-function buildAgentPrompt(tool, request, agent) {
+function buildAgentPrompt(tool, request, agent, role) {
   const shared = [
     "You are running as a Kyoso child reviewer.",
     "Do not edit files.",
@@ -188113,15 +188117,26 @@ function buildAgentPrompt(tool, request, agent) {
     "Use empty arrays when no finding, test, risk, or question exists; do not copy the example finding."
   ].join(`
 `);
-  const role = agent === "codex" ? [
-    "You are the Codex implementation reviewer in Kyoso.",
-    "Focus on feasibility, minimal change, existing code consistency, regression risk, tests, migration risk, and maintainability."
-  ].join(`
-`) : [
-    "You are the Claude architecture and security reviewer in Kyoso.",
-    "Focus on architecture, threat modeling, authn/authz, secrets, privacy, secure defaults, CISA Secure by Design, and edge cases."
-  ].join(`
-`);
+  const roleInstructions = {
+    implementation_reviewer: [
+      "You are the implementation reviewer role in Kyoso.",
+      "Focus on feasibility, minimal change, existing code consistency, regression risk, tests, migration risk, and maintainability."
+    ].join(`
+`),
+    architecture_security_reviewer: [
+      "You are the architecture and security reviewer role in Kyoso.",
+      "Focus on architecture, threat modeling, authn/authz, secrets, privacy, secure defaults, CISA Secure by Design, and edge cases."
+    ].join(`
+`),
+    combined_reviewer: [
+      "You are the combined reviewer role in Kyoso.",
+      "Cover both implementation review and architecture/security review in one pass.",
+      "First assess feasibility, minimal change, existing code consistency, regression risk, tests, migration risk, and maintainability.",
+      "Then assess architecture, threat modeling, authn/authz, secrets, privacy, secure defaults, CISA Secure by Design, and edge cases.",
+      "Use finding category values so readers can distinguish implementation, architecture, and security concerns."
+    ].join(`
+`)
+  };
   const cisaInstruction = tool === "security_review" ? [
     "For security_review, include cisaMapping on each security-relevant finding when applicable.",
     "Also include cisaSecureByDesign with all four gate dimensions."
@@ -188129,7 +188144,9 @@ function buildAgentPrompt(tool, request, agent) {
 `) : "For plan_review and diff_review, include cisaMapping and cisaSecureByDesign only when relevant.";
   return `${shared}
 
-${role}
+Agent: ${agent}
+Role: ${role}
+${roleInstructions[role]}
 
 Tool: ${tool}
 ${cisaInstruction}
@@ -188716,6 +188733,7 @@ function renderMarkdownResult(tool, result, options = {}) {
     `**Decision:** ${result.decision}`,
     `**Mode:** ${tool}`,
     `**Agents:** ${result.agentOpinions.map((opinion) => `${title(opinion.agent)} ${opinion.status}`).join(", ")}`,
+    `**Review mode:** ${formatReviewMode(result)}`,
     `**Degraded:** ${String(result.degraded)}`,
     "",
     "## Summary",
@@ -188742,7 +188760,11 @@ function renderMarkdownResult(tool, result, options = {}) {
     lines.push(`### ${title(opinion.agent)}`, "", `${opinion.summary} (${opinion.status})`, "");
   }
   lines.push("", "## Disagreements", "");
-  lines.push(...result.disagreements.length > 0 ? result.disagreements.map((item) => `- ${item.topic}: ${item.judgeComment}`) : ["- None."]);
+  if (result.reviewMode === "single_agent") {
+    lines.push("- N/A - single-agent review.");
+  } else {
+    lines.push(...result.disagreements.length > 0 ? result.disagreements.map((item) => `- ${item.topic}: ${item.judgeComment}`) : ["- None."]);
+  }
   lines.push("", "## Notes", "", "Kyoso did not modify files. Review was performed on a temporary snapshot.");
   if (result.audit.networkMode === "unrestricted") {
     lines.push("Network mode was unrestricted. File modification policy remained denied.");
@@ -188756,6 +188778,14 @@ function defaultSummaryText(result) {
 function title(value) {
   return value.slice(0, 1).toUpperCase() + value.slice(1);
 }
+function formatReviewMode(result) {
+  if (result.reviewMode !== "single_agent")
+    return "multi-agent";
+  const opinion = result.agentOpinions[0];
+  const agent = opinion ? title(opinion.agent) : "single agent";
+  const role = opinion?.role === "combined_reviewer" ? "combined role" : "configured role";
+  return `single-agent (${agent}, ${role}; cross-model verification was not performed)`;
+}
 function notes(items) {
   return (items[0] ?? "No notes.").replaceAll("|", "\\|");
 }
@@ -189209,8 +189239,8 @@ async function createSnapshot(traceId, tool, request, options = {}) {
   }
   await writeFile2(join3(contextDir, "request.json"), JSON.stringify(stripContents(request), null, 2), "utf8");
   await writeFile2(join3(contextDir, "selected_files_manifest.json"), JSON.stringify(buildSelectedFilesManifest(request), null, 2), "utf8");
-  await writeFile2(join3(contextDir, "instructions.codex.md"), buildAgentPrompt(tool, request, "codex"), "utf8");
-  await writeFile2(join3(contextDir, "instructions.claude.md"), buildAgentPrompt(tool, request, "claude"), "utf8");
+  await writeFile2(join3(contextDir, "instructions.codex.md"), buildAgentPrompt(tool, request, "codex", options.agentRoles?.codex ?? "implementation_reviewer"), "utf8");
+  await writeFile2(join3(contextDir, "instructions.claude.md"), buildAgentPrompt(tool, request, "claude", options.agentRoles?.claude ?? "architecture_security_reviewer"), "utf8");
   if (request.repoSummary)
     await writeFile2(join3(contextDir, "repo_summary.md"), request.repoSummary, "utf8");
   if (request.currentPlan)
@@ -189372,9 +189402,11 @@ async function runReview(tool, request, options = {}) {
       allowPatterns
     });
     warnings.push(...built.warnings);
+    const agentRoles = resolveAgentRoles(loaded.config);
     snapshot = await createSnapshot(traceId, tool, built.request, {
       denyPatterns,
-      allowPatterns
+      allowPatterns,
+      agentRoles
     });
     await trace.write({
       type: "snapshot_created",
@@ -189394,6 +189426,8 @@ async function runReview(tool, request, options = {}) {
       trace
     });
     const normalizedAgentResults = agentResults.map(normalizeAgentRunResult);
+    const agentsUsed = normalizedAgentResults.map((result2) => result2.agent);
+    const reviewMode = agentsUsed.length === 1 ? "single_agent" : "multi_agent";
     const completed = normalizedAgentResults.filter((result2) => result2.status === "completed");
     const degraded = completed.length !== agentResults.length;
     let aggregate = aggregateAgentResults(normalizedAgentResults);
@@ -189445,6 +189479,8 @@ async function runReview(tool, request, options = {}) {
     const resultWithoutMarkdown = {
       decision,
       degraded,
+      agentsUsed,
+      reviewMode,
       findings: aggregate.findings,
       cisaSecureByDesign: cisa,
       disagreements: aggregate.disagreements,
@@ -189457,7 +189493,7 @@ async function runReview(tool, request, options = {}) {
         traceId,
         startedAt,
         completedAt,
-        agentsUsed: normalizedAgentResults.map((result2) => result2.agent),
+        agentsUsed,
         redactionsApplied: secretScan.redactions,
         networkMode,
         workspaceMode: "temp_snapshot",
@@ -189516,12 +189552,13 @@ async function runReview(tool, request, options = {}) {
   }
 }
 async function runAgents(input) {
+  const agentRoles = resolveAgentRoles(input.config);
   const agentInputs = ["codex", "claude"].filter((agent) => input.config.agents[agent].enabled).map((agent) => ({
     traceId: input.traceId,
     agent,
-    role: input.config.agents[agent].role,
+    role: agentRoles[agent] ?? input.config.agents[agent].role,
     tool: input.tool,
-    prompt: buildAgentPrompt(input.tool, input.request, agent),
+    prompt: buildAgentPrompt(input.tool, input.request, agent, agentRoles[agent] ?? input.config.agents[agent].role),
     workspaceDir: input.workspaceDir,
     timeoutMs: input.request.options?.maxAgentTimeoutMs ?? input.config.agents[agent].timeoutMs ?? DEFAULT_AGENT_TIMEOUT_MS,
     networkMode: input.networkMode
@@ -189530,6 +189567,7 @@ async function runAgents(input) {
     type: "agent_started",
     traceId: input.traceId,
     agent: agentInput.agent,
+    role: agentInput.role,
     timestamp: new Date().toISOString()
   })));
   const results = await input.manager.runAll(agentInputs);
@@ -189538,6 +189576,7 @@ async function runAgents(input) {
       type: "agent_completed",
       traceId: input.traceId,
       agent: result.agent,
+      role: result.role,
       status: result.status,
       startedAt: result.startedAt,
       completedAt: result.completedAt,
@@ -189554,6 +189593,15 @@ async function runAgents(input) {
   }));
   return results;
 }
+function resolveAgentRoles(config2) {
+  const enabledAgents = ["codex", "claude"].filter((agent) => config2.agents[agent].enabled);
+  const singleAgentMode = enabledAgents.length === 1;
+  const roles = {};
+  for (const agent of enabledAgents) {
+    roles[agent] = singleAgentMode ? "combined_reviewer" : config2.agents[agent].role;
+  }
+  return roles;
+}
 function defaultAgentManager(config2) {
   if (process.env.KYOSO_TEST_FAKE_AGENTS === "1")
     return new FakeAgentManager;
@@ -189591,6 +189639,8 @@ async function buildSecretBlockResult(input) {
   const resultWithoutMarkdown = {
     decision: "block",
     degraded: false,
+    agentsUsed: [],
+    reviewMode: "multi_agent",
     findings: [finding],
     cisaSecureByDesign: cisa,
     disagreements: [],
@@ -189671,6 +189721,8 @@ async function buildPolicyBlockResult(input) {
   const resultWithoutMarkdown = {
     decision: "block",
     degraded: false,
+    agentsUsed: [],
+    reviewMode: "multi_agent",
     findings: [input.finding],
     cisaSecureByDesign: input.tool === "security_review" ? computeCisaGate([input.finding], []) : undefined,
     disagreements: [],

package/dist/workspace/createSnapshot.d.ts

@@ -1,4 +1,4 @@
-import type { KyosoReviewRequest, ReviewTool } from "../core/types.js";
+import type { AgentName, AgentRole, KyosoReviewRequest, ReviewTool } from "../core/types.js";
 export type Snapshot = {
     root: string;
     repoDir: string;
@@ -8,4 +8,5 @@ export type Snapshot = {
 export declare function createSnapshot(traceId: string, tool: ReviewTool, request: KyosoReviewRequest, options?: {
     denyPatterns?: string[];
     allowPatterns?: string[];
+    agentRoles?: Partial<Record<AgentName, AgentRole>>;
 }): Promise<Snapshot>;

package/examples/claude-only.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "@kyo-so/cli";
+
+export default defineConfig({
+  agents: {
+    codex: {
+      enabled: false,
+    },
+  },
+});

package/examples/codex-only.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "@kyo-so/cli";
+
+export default defineConfig({
+  agents: {
+    claude: {
+      enabled: false,
+    },
+  },
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyo-so/cli",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
   "license": "AGPL-3.0-or-later",
   "type": "module",