@kyo-so/cli 0.1.0

package/dist/judge/anthropic.d.ts

@@ -0,0 +1,2 @@
+import type { JudgeRunInput, JudgeOutput } from "./provider.js";
+export declare function runAnthropicJudge(input: JudgeRunInput, timeoutMs: number): Promise<JudgeOutput>;

package/dist/judge/deterministicFallback.d.ts

@@ -0,0 +1,3 @@
+import type { KyosoResult } from "../core/types.js";
+import type { JudgeOutput } from "./provider.js";
+export declare function runDeterministicJudge(result: Omit<KyosoResult, "summaryMarkdown">, summaryText: string): JudgeOutput;

package/dist/judge/openai.d.ts

@@ -0,0 +1,2 @@
+import type { JudgeRunInput, JudgeOutput } from "./provider.js";
+export declare function runOpenAiJudge(input: JudgeRunInput, timeoutMs: number): Promise<JudgeOutput>;

package/dist/judge/prompt.d.ts

@@ -0,0 +1,9 @@
+import type { KyosoResult, ReviewTool } from "../core/types.js";
+export declare function buildJudgePrompt(tool: ReviewTool, result: Omit<KyosoResult, "summaryMarkdown">, summaryText: string): string;
+export declare function parseJudgeOutput(text: string, fallbackSummaryText: string): {
+    summaryText: string;
+    disagreementComments: Array<{
+        topic: string;
+        judgeComment: string;
+    }>;
+};

package/dist/judge/provider.d.ts

@@ -0,0 +1,26 @@
+import type { KyosoConfig } from "../config/schema.js";
+import type { KyosoResult, JudgeProvider, ReviewTool } from "../core/types.js";
+export type JudgeOutput = {
+    summaryText: string;
+    disagreementComments: Array<{
+        topic: string;
+        judgeComment: string;
+    }>;
+};
+export type ResolvedJudgeProvider = Exclude<JudgeProvider, "auto"> | "deterministic_fallback";
+export type JudgeRunResult = {
+    provider: ResolvedJudgeProvider;
+    status: "completed" | "deterministic_fallback" | "failed_fallback";
+    output: JudgeOutput;
+    error?: string;
+};
+export type JudgeRunInput = {
+    tool: ReviewTool;
+    result: Omit<KyosoResult, "summaryMarkdown">;
+    summaryText: string;
+    config: KyosoConfig["judge"];
+    requestedProvider?: JudgeProvider;
+    env: NodeJS.ProcessEnv;
+};
+export declare function resolveJudgeProvider(provider: JudgeProvider, env: NodeJS.ProcessEnv): ResolvedJudgeProvider;
+export declare function runJudge(input: JudgeRunInput): Promise<JudgeRunResult>;

package/dist/mcp/formatMcpResponse.d.ts

@@ -0,0 +1,7 @@
+import type { KyosoResult } from "../core/types.js";
+export declare function formatMcpResponse(result: KyosoResult): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};

package/dist/mcp/schemas.d.ts

@@ -0,0 +1,38 @@
+import * as z from "zod/v4";
+export declare const kyosoReviewRequestSchema: z.ZodObject<{
+    goal: z.ZodString;
+    repoSummary: z.ZodOptional<z.ZodString>;
+    currentPlan: z.ZodOptional<z.ZodString>;
+    selectedFiles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        language: z.ZodOptional<z.ZodString>;
+        content: z.ZodString;
+        truncated: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    diff: z.ZodOptional<z.ZodObject<{
+        baseRef: z.ZodOptional<z.ZodString>;
+        headRef: z.ZodOptional<z.ZodString>;
+        unifiedDiff: z.ZodString;
+    }, z.core.$strip>>;
+    constraints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    workspace: z.ZodOptional<z.ZodObject<{
+        root: z.ZodOptional<z.ZodString>;
+        allowRead: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        denyRead: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    options: z.ZodOptional<z.ZodObject<{
+        network: z.ZodOptional<z.ZodEnum<{
+            model_only: "model_only";
+            unrestricted: "unrestricted";
+        }>>;
+        maxAgentTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        includeAgentRawOutputs: z.ZodOptional<z.ZodBoolean>;
+        judgeProvider: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            openai: "openai";
+            anthropic: "anthropic";
+            none: "none";
+        }>>;
+        allowSecretRedaction: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;

package/dist/mcp/server.d.ts

@@ -0,0 +1,6 @@
+import { McpServer } from "@modelcontextprotocol/server";
+import { type RunReviewOptions } from "../core/runReview.js";
+export declare const KYOSO_MCP_INSTRUCTIONS = "Kyoso is a multi-agent planning and review gate. Use it only when the user explicitly asks for Kyoso, multi-agent review, plan review, security review, CISA Secure by Design review, or diff review. Kyoso does not apply code changes. It returns structured review results and Markdown summaries.";
+export declare function listKyosoMcpTools(): string[];
+export declare function createMcpServer(options?: RunReviewOptions): McpServer;
+export declare function startMcpServer(options?: RunReviewOptions): Promise<void>;

package/dist/output/markdown.d.ts

@@ -0,0 +1,7 @@
+import type { KyosoResult, ReviewTool } from "../core/types.js";
+type MarkdownRenderOptions = {
+    summaryText?: string;
+};
+export declare function renderMarkdownResult(tool: ReviewTool, result: Omit<KyosoResult, "summaryMarkdown">, options?: MarkdownRenderOptions): string;
+export declare function defaultSummaryText(result: Omit<KyosoResult, "summaryMarkdown">): string;
+export {};

package/dist/security/cisaGate.d.ts

@@ -0,0 +1,2 @@
+import type { AgentRunResult, CisaSecureByDesignResult, KyosoFinding } from "../core/types.js";
+export declare function computeCisaGate(findings: KyosoFinding[], agentResults: AgentRunResult[]): CisaSecureByDesignResult;

package/dist/security/decision.d.ts

@@ -0,0 +1,10 @@
+import type { CisaSecureByDesignResult, KyosoDecision, KyosoFinding, ReviewTool, SecretScanResult } from "../core/types.js";
+export declare function decide(input: {
+    tool: ReviewTool;
+    findings: KyosoFinding[];
+    cisa?: CisaSecureByDesignResult;
+    degraded: boolean;
+    secretScan: Pick<SecretScanResult, "detected"> & {
+        blocked: boolean;
+    };
+}): KyosoDecision;

package/dist/security/recursionGuard.d.ts

@@ -0,0 +1 @@
+export declare function assertNotChildAgent(env?: NodeJS.ProcessEnv): void;

package/dist/security/redact.d.ts

@@ -0,0 +1,5 @@
+export declare const REDACTION = "[KYOSO_REDACTED]";
+export declare function redactValue(text: string, pattern: RegExp): {
+    text: string;
+    count: number;
+};

package/dist/security/sanitizeText.d.ts

@@ -0,0 +1,3 @@
+export declare function sanitizeText(value: string): string;
+export declare function sanitizeTextForDisplay(value: string, maxChars?: number): string;
+export declare function sanitizeTextForRawOutput(value: string, maxChars?: number): string;

package/dist/security/secretScan.d.ts

@@ -0,0 +1,2 @@
+import type { KyosoReviewRequest, SecretScanResult } from "../core/types.js";
+export declare function scanAndRedactSecrets(request: KyosoReviewRequest): SecretScanResult;

package/dist/utils/env.d.ts

@@ -0,0 +1,5 @@
+export declare function buildChildEnv(parentEnv: NodeJS.ProcessEnv, whitelist: string[], explicit: Record<string, string>, options?: {
+    agent?: "codex" | "claude";
+    model?: string;
+    preferApiKey?: boolean;
+}): NodeJS.ProcessEnv;

package/dist/utils/ids.d.ts

@@ -0,0 +1 @@
+export declare function newTraceId(): string;

package/dist/workspace/cleanup.d.ts

@@ -0,0 +1 @@
+export declare function cleanupSnapshot(path: string): Promise<void>;

package/dist/workspace/createSnapshot.d.ts

@@ -0,0 +1,11 @@
+import type { KyosoReviewRequest, ReviewTool } from "../core/types.js";
+export type Snapshot = {
+    root: string;
+    repoDir: string;
+    contextDir: string;
+    fileCount: number;
+};
+export declare function createSnapshot(traceId: string, tool: ReviewTool, request: KyosoReviewRequest, options?: {
+    denyPatterns?: string[];
+    allowPatterns?: string[];
+}): Promise<Snapshot>;

package/examples/claude-code-mcp.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "kyoso": {
+      "command": "npx",
+      "args": ["-y", "@kyo-so/cli", "mcp"],
+      "env": {
+        "OPENAI_API_KEY": "${OPENAI_API_KEY}",
+        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
+        "CLAUDE_CODE_OAUTH_TOKEN": "${CLAUDE_CODE_OAUTH_TOKEN}"
+      }
+    }
+  }
+}

package/examples/codex-config.toml

@@ -0,0 +1,11 @@
+[mcp_servers.kyoso]
+command = "npx"
+args = ["-y", "@kyo-so/cli", "mcp"]
+env_vars = ["OPENAI_API_KEY", "CODEX_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"]
+startup_timeout_sec = 20
+tool_timeout_sec = 360
+enabled = true
+
+# Bun alternative:
+# command = "bunx"
+# args = ["@kyo-so/cli", "mcp"]

package/examples/kyoso.config.ts

@@ -0,0 +1,22 @@
+import { defineConfig } from "@kyo-so/cli";
+
+export default defineConfig({
+  network: {
+    defaultMode: "model_only",
+    allowUnrestricted: true,
+  },
+  agents: {
+    codex: {
+      // Omit model to use the user's Codex default from ~/.codex/config.toml.
+      // model: "gpt-5.5",
+    },
+    claude: {
+      // Omit model to use the Claude adapter default.
+      // model: "claude-sonnet-5",
+      timeoutMs: 240_000,
+      auth: {
+        preferApiKey: false,
+      },
+    },
+  },
+});

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@kyo-so/cli",
+  "version": "0.1.0",
+  "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
+  "license": "AGPL-3.0-or-later",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "kyoso": "dist/bin/kyoso.js"
+  },
+  "files": [
+    "dist",
+    ".agents/skills/kyoso-review",
+    "examples",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "dev": "bun run src/cli/main.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "build": "bun build src/index.ts --target=node --outfile dist/index.js && bun build src/cli/main.ts --target=node --outfile dist/bin/kyoso.js --banner '#!/usr/bin/env node' && node -e \"require('node:fs').chmodSync('dist/bin/kyoso.js', 0o755)\" && tsc -p tsconfig.build.json",
+    "lint": "tsc --noEmit",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "pack:verify": "node scripts/verify-pack.mjs",
+    "prepack": "bun run build"
+  },
+  "dependencies": {
+    "@agentclientprotocol/sdk": "1.0.0",
+    "@modelcontextprotocol/server": "2.0.0-alpha.3",
+    "typescript": "6.0.3",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@types/bun": "1.3.14",
+    "prettier": "3.9.1"
+  }
+}