@kyo-so/cli 0.12.0 → 0.13.0

package/dist/cli/pluginRuntimeContract.d.ts

@@ -10,9 +10,9 @@ export declare const PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 1;
 export declare const MINIMUM_SUPPORTED_CODEX_VERSION = "0.144.0-alpha.4";
 export declare const PLUGIN_RUNTIME_EXPECTED_CONTRACT: {
     readonly distribution: {
-        readonly pluginVersion: "0.5.0";
+        readonly pluginVersion: "0.6.0";
         readonly mcpCommand: "npx";
-        readonly mcpPackagePin: "@kyo-so/cli@0.11.0";
+        readonly mcpPackagePin: "@kyo-so/cli@0.12.0";
     };
     readonly marketplace: {
         readonly name: "kyoso";
@@ -50,7 +50,7 @@ export declare const PLUGIN_RUNTIME_EXPECTED_CONTRACT: {
             readonly envVars: readonly ["OPENAI_API_KEY", "CODEX_API_KEY", "CODEX_HOME", "CODEX_ACCESS_TOKEN", "OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"];
             readonly cwd: null;
             readonly startupTimeoutSec: 20;
-            readonly toolTimeoutSec: 360;
+            readonly toolTimeoutSec: 2160;
         };
         readonly pluginOverride: {
             readonly enabled: false;
@@ -59,7 +59,7 @@ export declare const PLUGIN_RUNTIME_EXPECTED_CONTRACT: {
             readonly envVars: readonly ["OPENAI_API_KEY", "CODEX_API_KEY", "CODEX_HOME", "CODEX_ACCESS_TOKEN", "OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"];
             readonly cwd: null;
             readonly startupTimeoutSec: 20;
-            readonly toolTimeoutSec: 360;
+            readonly toolTimeoutSec: 2160;
         };
         readonly manualOverride: {
             readonly enabled: true;
@@ -130,9 +130,9 @@ export declare const pluginRuntimeContract: {
     readonly pluginListTopLevelKeys: readonly ["installed", "available"];
     readonly expectedContract: {
         readonly distribution: {
-            readonly pluginVersion: "0.5.0";
+            readonly pluginVersion: "0.6.0";
             readonly mcpCommand: "npx";
-            readonly mcpPackagePin: "@kyo-so/cli@0.11.0";
+            readonly mcpPackagePin: "@kyo-so/cli@0.12.0";
         };
         readonly marketplace: {
             readonly name: "kyoso";
@@ -170,7 +170,7 @@ export declare const pluginRuntimeContract: {
                 readonly envVars: readonly ["OPENAI_API_KEY", "CODEX_API_KEY", "CODEX_HOME", "CODEX_ACCESS_TOKEN", "OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"];
                 readonly cwd: null;
                 readonly startupTimeoutSec: 20;
-                readonly toolTimeoutSec: 360;
+                readonly toolTimeoutSec: 2160;
             };
             readonly pluginOverride: {
                 readonly enabled: false;
@@ -179,7 +179,7 @@ export declare const pluginRuntimeContract: {
                 readonly envVars: readonly ["OPENAI_API_KEY", "CODEX_API_KEY", "CODEX_HOME", "CODEX_ACCESS_TOKEN", "OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"];
                 readonly cwd: null;
                 readonly startupTimeoutSec: 20;
-                readonly toolTimeoutSec: 360;
+                readonly toolTimeoutSec: 2160;
             };
             readonly manualOverride: {
                 readonly enabled: true;

package/dist/config/schema.d.ts

@@ -145,6 +145,7 @@ export declare const kyosoConfigSchema: z.ZodObject<{
     reviewBudget: z.ZodObject<{
         maxModelCalls: z.ZodNumber;
         maxTotalWallTimeMs: z.ZodNumber;
+        warnAgentOutputBytes: z.ZodNumber;
         maxAgentOutputBytes: z.ZodNumber;
         maxFindingsPerAgent: z.ZodNumber;
         skipOptionalPhasesWhenTokenUsageUnknown: z.ZodBoolean;

package/dist/core/constants.d.ts

@@ -1,9 +1,10 @@
-export declare const DEFAULT_AGENT_TIMEOUT_MS = 120000;
+export declare const DEFAULT_AGENT_TIMEOUT_MS = 600000;
 export declare const DEFAULT_MAX_CONTEXT_BYTES = 500000;
 export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
+export declare const DEFAULT_WARN_AGENT_OUTPUT_BYTES = 524288;
 export declare const MAX_AGENT_OUTPUT_BYTES = 1048576;
 export declare const JUDGE_MAX_OUTPUT_TOKENS = 4096;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.12.0";
+export declare const KYOSO_VERSION = "0.13.0";

package/dist/core/modelExecutionIdentity.d.ts

@@ -0,0 +1,9 @@
+import type { ModelExecutionIdentity, ModelProviderRoute } from "./types.js";
+export declare const MODEL_EXECUTION_IDENTITY_MAX_CHARS = 160;
+export declare function createModelExecutionIdentity(input: {
+    providerRoute: ModelProviderRoute;
+    requestedModel?: unknown;
+    reportedProvider?: unknown;
+    reportedModel?: unknown;
+}): ModelExecutionIdentity;
+export declare function normalizeModelExecutionIdentity(value: unknown): ModelExecutionIdentity | undefined;

package/dist/core/requestFingerprint.d.ts

@@ -1,12 +1,12 @@
 import type { KyosoConfig } from "../config/schema.js";
-import type { AgentRole, KyosoReviewRequest, ReviewBudget, ReviewTool } from "./types.js";
+import type { AgentRole, KyosoReviewRequest, ResolvedReviewBudget, ReviewTool } from "./types.js";
 export declare const REVIEW_CONTRACT_VERSION = "2026-07-16-v3";
 export declare function createRequestFingerprint(input: {
     tool: ReviewTool;
     request: KyosoReviewRequest;
     config: KyosoConfig;
     roles: Partial<Record<"codex" | "claude", AgentRole>>;
-    budget: ReviewBudget;
+    budget: ResolvedReviewBudget;
     entrypoint?: "cli" | "mcp" | "core";
 }): string;
 export declare function canonicalJson(value: unknown): string;

package/dist/core/reviewBudget.d.ts

@@ -1,4 +1,4 @@
-import type { AgentName, ModelCallKind, ModelTokenUsage, ReviewBudget, ReviewBudgetRequest, ReviewCompletion, ReviewCompletionReason, ReviewExecutionBudget, ReviewModelCallAudit } from "./types.js";
+import type { AgentName, ModelExecutionIdentity, ModelCallKind, ModelTokenUsage, ReviewBudget, ReviewBudgetRequest, ReviewCompletion, ReviewCompletionReason, ReviewExecutionBudget, ReviewModelCallPlan, ReviewModelCallAudit, ResolvedReviewBudget } from "./types.js";
 type ReservationStatus = "reserved" | "started" | "completed" | "skipped";
 type Reservation = {
     id: number;
@@ -6,24 +6,39 @@ type Reservation = {
     agent?: AgentName;
     status: ReservationStatus;
     reason?: string;
+    messageBytes?: number;
+    thoughtBytes?: number;
     outputBytes?: number;
+    outputWarningTriggered?: boolean;
+    salvaged?: boolean;
+    reportedFindings?: number;
+    findingsTargetExceeded?: boolean;
     usage?: ModelTokenUsage;
+    executionIdentity?: ModelExecutionIdentity;
     stopReason?: string;
 };
 export type ModelCallReservation = Pick<Reservation, "id" | "kind" | "agent">;
 export type BudgetReservationFailure = {
     reason: "model_call_budget" | "deadline";
 };
-export declare function resolveReviewBudget(ceiling: ReviewBudget, requested: ReviewBudgetRequest | undefined): ReviewBudget;
+export declare function resolveReviewBudget(ceiling: ReviewBudget, requested: ReviewBudgetRequest | undefined): ResolvedReviewBudget;
+export declare function buildReviewModelCallPlan(input: {
+    maxModelCalls: number;
+    requiredPrimaryCalls: number;
+    verificationEnabled: boolean;
+    verificationMaxFindings: number;
+    llmJudgeAvailable: boolean;
+}): ReviewModelCallPlan;
 export declare class ReviewBudgetTracker {
-    readonly budget: ReviewBudget;
+    readonly budget: ResolvedReviewBudget;
     readonly startedAtEpochMs: number;
+    readonly modelCallPlan: ReviewModelCallPlan;
     readonly deadlineAtEpochMs: number;
     private readonly reservations;
     private readonly skippedCalls;
     private readonly incompleteReasons;
     private nextReservationId;
-    constructor(budget: ReviewBudget, startedAtEpochMs?: number);
+    constructor(budget: ResolvedReviewBudget, startedAtEpochMs?: number, modelCallPlan?: ReviewModelCallPlan);
     remainingWallTimeMs(now?: number): number;
     hasDeadlineExpired(now?: number): boolean;
     reserveMany(inputs: Array<{
@@ -42,11 +57,19 @@ export declare class ReviewBudgetTracker {
     } | {
         failure: BudgetReservationFailure;
     };
-    markStarted(reservation: ModelCallReservation): void;
+    markStarted(reservation: ModelCallReservation, executionIdentity?: ModelExecutionIdentity): void;
     hasStarted(reservation: ModelCallReservation): boolean;
+    executionIdentity(reservation: ModelCallReservation): ModelExecutionIdentity | undefined;
     complete(reservation: ModelCallReservation, values?: {
+        messageBytes?: number;
+        thoughtBytes?: number;
         outputBytes?: number;
+        outputWarningTriggered?: boolean;
+        salvaged?: boolean;
+        reportedFindings?: number;
+        findingsTargetExceeded?: boolean;
         usage?: ModelTokenUsage;
+        executionIdentity?: ModelExecutionIdentity;
         stopReason?: string;
     }): void;
     skip(reservation: ModelCallReservation, reason: string): void;

package/dist/core/types.d.ts

@@ -26,11 +26,15 @@ export type EvidenceRef = {
 export type ReviewBudget = {
     maxModelCalls: number;
     maxTotalWallTimeMs: number;
+    warnAgentOutputBytes: number;
     maxAgentOutputBytes: number;
     maxFindingsPerAgent: number;
     skipOptionalPhasesWhenTokenUsageUnknown: boolean;
 };
-export type ReviewBudgetRequest = Partial<ReviewBudget>;
+export type ReviewBudgetRequest = Partial<Omit<ReviewBudget, "warnAgentOutputBytes">>;
+export type ResolvedReviewBudget = ReviewBudget & {
+    effectiveWarnAgentOutputBytes?: number;
+};
 export type ReviewCompletionReason = "model_call_budget" | "deadline" | "agent_output_limit" | "token_usage_unknown" | "coverage_incomplete" | "disputed_finding";
 export type ReviewCompletion = {
     status: "complete" | "incomplete";
@@ -38,6 +42,26 @@ export type ReviewCompletion = {
     retryable: false;
 };
 export type ModelCallKind = "primary" | "verifier" | "judge";
+export type ModelProviderRoute = "codex_default" | "claude_default" | "openrouter" | "openai" | "anthropic";
+export type ModelExecutionIdentity = {
+    providerRoute: ModelProviderRoute;
+    requestedModel?: string;
+    reportedProvider?: string;
+    reportedModel?: string;
+    reportingStatus: "reported" | "requested_only" | "unknown";
+};
+export type ReviewModelCallPlan = {
+    requiredPrimaryCalls: number;
+    potentialVerifierCalls: number;
+    potentialJudgeCalls: number;
+    potentialTotalCalls: number;
+    ceilingEffects: Array<{
+        kind: ModelCallKind;
+        action: "skip" | "deterministic_fallback";
+        calls: number;
+        reason: "model_call_budget";
+    }>;
+};
 export type ModelTokenUsage = {
     totalTokens?: number;
     inputTokens?: number;
@@ -178,9 +202,10 @@ export type AgentRunInput = {
     workspaceDir: string;
     timeoutMs: number;
     deadlineAtEpochMs?: number;
+    warnOutputBytes?: number;
     maxOutputBytes?: number;
     networkMode: NetworkMode;
-    onStarted?: (() => void) | (() => Promise<void>);
+    onStarted?: (executionIdentity?: ModelExecutionIdentity) => unknown;
 };
 export type AgentRunResult = {
     agent: AgentName;
@@ -195,13 +220,21 @@ export type AgentRunResult = {
     };
     warnings?: string[];
     usage?: ModelTokenUsage;
+    executionIdentity?: ModelExecutionIdentity;
+    messageBytes?: number;
+    thoughtBytes?: number;
     outputBytes?: number;
+    outputWarningTriggered?: boolean;
+    salvaged?: boolean;
+    reportedFindings?: number;
+    findingsTargetExceeded?: boolean;
     stopReason?: string;
     startedAt: string;
     completedAt?: string;
 };
 export type ReviewExecutionBudget = {
     maxModelCalls: number;
+    modelCallPlan: ReviewModelCallPlan;
     modelCalls: {
         planned: number;
         consumed: number;
@@ -217,6 +250,7 @@ export type ReviewExecutionBudget = {
         consumedMs: number;
         remainingMs: number;
     };
+    effectiveWarnAgentOutputBytes?: number;
     maxAgentOutputBytes: number;
     maxFindingsPerAgent: number;
     skipOptionalPhasesWhenTokenUsageUnknown: boolean;
@@ -233,8 +267,15 @@ export type ReviewModelCallAudit = {
     agent?: AgentName;
     status: "completed" | "skipped";
     reason?: string;
+    messageBytes?: number;
+    thoughtBytes?: number;
     outputBytes?: number;
+    outputWarningTriggered?: boolean;
+    salvaged?: boolean;
+    reportedFindings?: number;
+    findingsTargetExceeded?: boolean;
     usage?: ModelTokenUsage;
+    executionIdentity?: ModelExecutionIdentity;
     stopReason?: string;
 };
 export type KyosoResult = {
@@ -268,6 +309,7 @@ export type KyosoResult = {
         summary: string;
         status: "completed" | "failed" | "timeout" | "skipped";
         errorCode?: string;
+        salvaged?: boolean;
         rawText?: string;
     }>;
     audit: {

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 export { defineConfig } from "./config/defineConfig.js";
 export { runReview } from "./core/runReview.js";
-export type { ChangeRelation, CisaSecureByDesignResult, EvidenceQuality, EvidenceRef, FindingDisposition, GateStatus, KyosoDecision, KyosoFinding, KyosoResult, KyosoReviewRequest, ModelTokenUsage, NetworkMode, ReviewBudget, ReviewBudgetRequest, ReviewCompletion, ReviewContract, ReviewCoverage, ReviewExecutionBudget, ReviewLens, ReviewModelCallAudit, ReviewTool, } from "./core/types.js";
+export type { ChangeRelation, CisaSecureByDesignResult, EvidenceQuality, EvidenceRef, FindingDisposition, GateStatus, KyosoDecision, KyosoFinding, KyosoResult, KyosoReviewRequest, ModelExecutionIdentity, ModelProviderRoute, ModelTokenUsage, NetworkMode, ReviewBudget, ReviewBudgetRequest, ReviewCompletion, ReviewContract, ReviewCoverage, ReviewExecutionBudget, ReviewLens, ReviewModelCallAudit, ReviewTool, } from "./core/types.js";