@kyo-so/cli 0.13.1 → 0.15.0

package/dist/cli/integration.d.ts

@@ -1,4 +1,4 @@
-import type { ManualMcpStatus } from "./setup.js";
+import type { ManualMcpRegistration, ManualMcpStatus } from "./setup.js";
 export type IntegrationMode = "manual-mcp" | "cli-skill" | "skill-on-demand" | "mcp-only" | "cli-only" | "missing" | "unknown";
 export type InstalledCli = {
     kind: "installed";
@@ -8,10 +8,11 @@ export type InstalledCli = {
 export type CliAvailability = InstalledCli | {
     kind: "missing" | "transient" | "unknown";
 };
+export type RunnerAvailability = "available" | "missing" | "present-unverified";
 export type CliDetection = {
     kyoso: CliAvailability;
-    npx: boolean;
-    bunx: boolean;
+    npx: RunnerAvailability;
+    bunx: RunnerAvailability;
 };
 export type NonPluginIntegration = {
     mode: IntegrationMode;
@@ -24,7 +25,9 @@ export declare function detectCli(options: {
 }): CliDetection;
 export declare function determineNonPluginIntegration(options: {
     manualMcpStatus: ManualMcpStatus;
+    manualMcpRegistrations: readonly ManualMcpRegistration[];
     hasSkill: boolean;
     cli: CliDetection;
 }): NonPluginIntegration;
+export declare function formatRunnerAvailability(runner: RunnerAvailability): string;
 export declare function formatCliAvailability(cli: CliAvailability): string;

package/dist/cli/knownSkillDigests.d.ts

@@ -1,5 +1,9 @@
-export declare const CURRENT_SKILL_DIGEST = "sha256:8654e68ea61f2acea29027056802bf627ad737f084c9a86ab052946943538409";
+export declare const CURRENT_SKILL_DIGEST = "sha256:d28acaadf490df9e58e12f195804f181a683d0d33344275d7989efbee26a4504";
 export declare const KNOWN_SKILL_DIGESTS_BY_VERSION: {
+    readonly "0.13.1": readonly [{
+        readonly digest: "sha256:8654e68ea61f2acea29027056802bf627ad737f084c9a86ab052946943538409";
+        readonly kind: "historical";
+    }];
     readonly "0.11.0": readonly [{
         readonly digest: "sha256:110dd872a3d1c8a71474a0eadb226f51a6addd86f9d4f3ed17b73678b3179a4e";
         readonly kind: "historical";

package/dist/cli/manualMcpInvocation.d.ts

@@ -0,0 +1,11 @@
+import { type KyosoPackageCommand, type KyosoPackageRunner } from "./packageRunner.js";
+export type ManualMcpInvocationKind = "current" | "legacy" | "custom" | "unknown";
+export type ManualMcpInvocationInspection = {
+    kind: ManualMcpInvocationKind;
+    runner?: KyosoPackageRunner;
+    packageSpec?: string;
+    legacyArgs?: readonly string[];
+    replacement?: KyosoPackageCommand;
+    reason: string;
+};
+export declare function inspectManualMcpInvocation(value: unknown): ManualMcpInvocationInspection;

package/dist/cli/packageRunner.d.ts

@@ -0,0 +1,15 @@
+export declare const KYOSO_PACKAGE_NAME = "@kyo-so/cli";
+export declare const KYOSO_EXECUTABLE_NAME = "kyoso";
+export type KyosoPackageRunner = "npx" | "bunx";
+export type KyosoPackageCommand = {
+    command: KyosoPackageRunner;
+    args: string[];
+};
+export type BuildKyosoPackageCommandOptions = {
+    runner: KyosoPackageRunner;
+    cliArgs: readonly string[];
+    version?: string;
+};
+export declare function buildKyosoPackageCommand(options: BuildKyosoPackageCommandOptions): KyosoPackageCommand;
+export declare function formatKyosoPackageCommand(options: BuildKyosoPackageCommandOptions): string;
+export declare function isCompleteSemVer(value: string): boolean;

package/dist/cli/pluginRuntimeContract.d.ts

@@ -6,13 +6,14 @@
  * retains dated probe metadata, which deliberately does not belong in the
  * published CLI.
  */
-export declare const PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 1;
+export declare const PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 2;
 export declare const MINIMUM_SUPPORTED_CODEX_VERSION = "0.144.0-alpha.4";
 export declare const PLUGIN_RUNTIME_EXPECTED_CONTRACT: {
     readonly distribution: {
-        readonly pluginVersion: "0.7.0";
+        readonly pluginVersion: "0.7.3";
         readonly mcpCommand: "npx";
-        readonly mcpPackagePin: "@kyo-so/cli@0.13.0";
+        readonly mcpPackagePin: "@kyo-so/cli@0.14.0";
+        readonly mcpExecutable: "kyoso";
     };
     readonly marketplace: {
         readonly name: "kyoso";
@@ -124,15 +125,16 @@ export declare const PLUGIN_LIST_JSON_SCHEMA: {
 };
 /** Stable runtime contract consumed by Doctor and distribution verification. */
 export declare const pluginRuntimeContract: {
-    readonly schemaVersion: 1;
+    readonly schemaVersion: 2;
     readonly minimumSupportedCodexVersion: "0.144.0-alpha.4";
     readonly pluginId: "kyoso@kyoso";
     readonly pluginListTopLevelKeys: readonly ["installed", "available"];
     readonly expectedContract: {
         readonly distribution: {
-            readonly pluginVersion: "0.7.0";
+            readonly pluginVersion: "0.7.3";
             readonly mcpCommand: "npx";
-            readonly mcpPackagePin: "@kyo-so/cli@0.13.0";
+            readonly mcpPackagePin: "@kyo-so/cli@0.14.0";
+            readonly mcpExecutable: "kyoso";
         };
         readonly marketplace: {
             readonly name: "kyoso";

package/dist/cli/progress.d.ts

@@ -0,0 +1,5 @@
+import type { ReviewProgressEvent, ReviewProgressSink } from "../core/progress.js";
+export type CliProgressMode = "auto" | "plain" | "jsonl" | "off";
+export declare function resolveCliProgressMode(value: string | undefined, stderrIsTty: boolean): CliProgressMode;
+export declare function createCliProgressSink(mode: CliProgressMode, stderrWrite: (line: string) => void): ReviewProgressSink | undefined;
+export declare function formatPlainProgressMessage(event: ReviewProgressEvent): string;

package/dist/cli/setup.d.ts

@@ -1,14 +1,36 @@
+import { type ManualMcpInvocationInspection } from "./manualMcpInvocation.js";
+import { type KyosoPackageRunner } from "./packageRunner.js";
 export type SetupClient = "codex" | "claude-code";
-export type SetupRunner = "npx" | "bunx";
+export type SetupRunner = KyosoPackageRunner;
 export type SetupScope = "project" | "global";
 export type ManualMcpStatus = "enabled" | "disabled" | "missing" | "unknown";
+export type ManualMcpScope = "codex-global" | "claude-project" | "claude-global" | "claude-global-project";
+export type ManualMcpRegistration = {
+    path: string;
+    scope: ManualMcpScope;
+    status: ManualMcpStatus;
+    invocation: ManualMcpInvocationInspection;
+    autoMigrationEligible: boolean;
+};
 export type SetupDetection = {
     mcp: boolean;
     skill: boolean;
     manualMcpStatus: ManualMcpStatus;
+    manualMcpRegistrations: ManualMcpRegistration[];
     mcpPaths: string[];
     skillPaths: string[];
 };
+export type BunxVersionProbeResult = {
+    status: "verified";
+    version: string;
+} | {
+    status: "missing" | "failed" | "timeout" | "invalid" | "unsupported";
+    detail: string;
+};
+export type BunxVersionProbe = (options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+}) => BunxVersionProbeResult;
 export type CodexPluginMcpOverride = {
     status: ManualMcpStatus;
     path: string;
@@ -24,6 +46,12 @@ export type SetupOptions = {
     skillOnly?: boolean;
     force?: boolean;
     env?: NodeJS.ProcessEnv;
+    bunxVersionProbe?: BunxVersionProbe;
+    beforeManualMcpWrite?: (path: string) => void | Promise<void>;
+    beforeManualMcpCommit?: (path: string) => void | Promise<void>;
+    afterManualMcpValidation?: (path: string) => void | Promise<void>;
+    beforeManualMcpRename?: (path: string) => void | Promise<void>;
+    manualMcpRename?: (source: string, destination: string) => Promise<void>;
 };
 type McpCommand = {
     command: string;
@@ -47,4 +75,8 @@ export declare function detectSetup(options: {
     codexHome?: string;
     env?: NodeJS.ProcessEnv;
 }): Record<SetupClient, SetupDetection>;
+export declare function probeBunxVersion(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+}): BunxVersionProbeResult;
 export {};

package/dist/config/projectScope.d.ts

@@ -6,7 +6,7 @@ type Violation = {
     path: string;
     reason?: string;
 };
-export declare const kyosoConfigOverridePaths: readonly ["agents.codex.enabled", "agents.codex.model", "agents.codex.provider", "agents.codex.effort", "agents.codex.role", "agents.codex.timeoutMs", "agents.claude.enabled", "agents.claude.model", "agents.claude.effort", "agents.claude.role", "agents.claude.timeoutMs", "verification.enabled", "verification.maxFindings", "verification.timeoutMs", "judge.mode", "judge.provider", "judge.timeoutMs"];
+export declare const kyosoConfigOverridePaths: readonly ["agents.codex.enabled", "agents.codex.model", "agents.codex.provider", "agents.codex.openRouter.streamIdleTimeoutMs", "agents.codex.openRouter.streamMaxRetries", "agents.codex.openRouter.requestMaxRetries", "agents.codex.effort", "agents.codex.role", "agents.codex.timeoutMs", "agents.claude.enabled", "agents.claude.model", "agents.claude.effort", "agents.claude.role", "agents.claude.timeoutMs", "verification.enabled", "verification.maxFindings", "verification.timeoutMs", "judge.mode", "judge.provider", "judge.timeoutMs"];
 export declare function isAllowedConfigOverridePath(path: string[]): boolean;
 export declare function mergeProjectTomlConfig(baseConfig: unknown, projectConfig: unknown, options: ProjectScopeOptions): unknown;
 export declare function collectProjectScopeViolations(config: unknown): Violation[];

package/dist/config/schema.d.ts

@@ -2,6 +2,7 @@ import { z } from "zod";
 export declare const CODEX_OPENROUTER_PROVIDER: "openrouter";
 export declare const CODEX_DEFAULT_PROVIDER: "default";
 export declare const CODEX_OPENROUTER_MODEL_REQUIRED_ISSUE: "codex_openrouter_model_required";
+export declare const CODEX_OPENROUTER_POLICY_REQUIRES_PROVIDER_ISSUE: "codex_openrouter_policy_requires_provider";
 export type CodexProvider = typeof CODEX_OPENROUTER_PROVIDER | typeof CODEX_DEFAULT_PROVIDER;
 type PartialDeep<T> = {
     [K in keyof T]?: T[K] extends Record<string, unknown> ? PartialDeep<T[K]> : T[K];
@@ -63,6 +64,11 @@ export declare const kyosoConfigSchema: z.ZodObject<{
                 default: "default";
             }>>;
             allowProjectProvider: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            openRouter: z.ZodDefault<z.ZodObject<{
+                streamIdleTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                streamMaxRetries: z.ZodOptional<z.ZodNumber>;
+                requestMaxRetries: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
         claude: z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/core/constants.d.ts

@@ -7,4 +7,4 @@ export declare const JUDGE_MAX_OUTPUT_TOKENS = 4096;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.13.1";
+export declare const KYOSO_VERSION = "0.15.0";

package/dist/core/errors.d.ts

@@ -2,3 +2,8 @@ export declare class KyosoRequestError extends Error {
     readonly code: string;
     constructor(message: string, code: string);
 }
+export declare class KyosoCancellationError extends Error {
+    readonly code = "REQUEST_CANCELLED";
+    constructor(message?: string);
+}
+export declare function throwIfAborted(signal?: AbortSignal): void;

package/dist/core/progress.d.ts

@@ -0,0 +1,83 @@
+import type { AgentName, AgentRole, KyosoDecision, ModelExecutionIdentity, ReviewCompletion, ReviewTool } from "./types.js";
+export type ReviewPhase = "preflight" | "context" | "snapshot" | "primary" | "aggregation" | "verification" | "judge" | "finalize";
+export type ReviewProgressEvent = {
+    type: "review_started";
+    traceId: string;
+    tool: ReviewTool;
+    timestamp: string;
+} | {
+    type: "phase_started";
+    traceId: string;
+    phase: ReviewPhase;
+    timestamp: string;
+} | {
+    type: "phase_completed";
+    traceId: string;
+    phase: ReviewPhase;
+    durationMs: number;
+    timestamp: string;
+} | {
+    type: "phase_skipped";
+    traceId: string;
+    phase: ReviewPhase;
+    reason: string;
+    timestamp: string;
+} | {
+    type: "agent_started";
+    traceId: string;
+    agent: AgentName;
+    role: AgentRole;
+    executionIdentity?: ModelExecutionIdentity;
+    timestamp: string;
+} | {
+    type: "agent_activity";
+    traceId: string;
+    agent: AgentName;
+    activity: "message" | "thought" | "protocol";
+    totalOutputBytes: number;
+    timestamp: string;
+} | {
+    type: "agent_waiting";
+    traceId: string;
+    agent: AgentName;
+    elapsedMs: number;
+    sinceLastAcpUpdateMs: number;
+    streamIdleTimeoutMs?: number;
+    timestamp: string;
+} | {
+    type: "agent_retrying";
+    traceId: string;
+    agent: AgentName;
+    observedRetry: number;
+    attempt?: number;
+    maxRetries?: number;
+    reason: string;
+    discardedMessageBytes: number;
+    timestamp: string;
+} | {
+    type: "agent_completed";
+    traceId: string;
+    agent: AgentName;
+    status: "completed" | "failed" | "timeout" | "skipped";
+    durationMs: number;
+    outputBytes?: number;
+    observedStreamRetries?: number;
+    timestamp: string;
+} | {
+    type: "review_completed";
+    traceId: string;
+    decision: KyosoDecision;
+    completionStatus: ReviewCompletion["status"];
+    durationMs: number;
+    timestamp: string;
+} | {
+    type: "review_failed";
+    traceId: string;
+    errorCode?: string;
+    timestamp: string;
+} | {
+    type: "review_cancelled";
+    traceId: string;
+    timestamp: string;
+};
+export type ReviewProgressSink = (event: ReviewProgressEvent) => void | Promise<void>;

package/dist/core/progressDispatcher.d.ts

@@ -0,0 +1,12 @@
+import type { ReviewProgressEvent, ReviewProgressSink } from "./progress.js";
+type ProgressDispatcherOptions = {
+    sinkTimeoutMs?: number;
+    maxQueue?: number;
+    onSinkDisabled?: (reason: string) => void;
+};
+export type ProgressDispatcher = {
+    emit(event: ReviewProgressEvent): void;
+    flush(maxWaitMs?: number): Promise<void>;
+};
+export declare function createProgressDispatcher(sink: ReviewProgressSink | undefined, options?: ProgressDispatcherOptions): ProgressDispatcher;
+export {};

package/dist/core/reviewBudget.d.ts

@@ -10,6 +10,10 @@ type Reservation = {
     thoughtBytes?: number;
     outputBytes?: number;
     outputWarningTriggered?: boolean;
+    observedStreamRetries?: number;
+    discardedRetryMessageBytes?: number;
+    firstOutputAt?: string;
+    lastAcpUpdateAt?: string;
     salvaged?: boolean;
     reportedFindings?: number;
     findingsTargetExceeded?: boolean;
@@ -65,6 +69,10 @@ export declare class ReviewBudgetTracker {
         thoughtBytes?: number;
         outputBytes?: number;
         outputWarningTriggered?: boolean;
+        observedStreamRetries?: number;
+        discardedRetryMessageBytes?: number;
+        firstOutputAt?: string;
+        lastAcpUpdateAt?: string;
         salvaged?: boolean;
         reportedFindings?: number;
         findingsTargetExceeded?: boolean;

package/dist/core/runReview.d.ts

@@ -2,6 +2,7 @@ import { type KyosoConfig } from "../config/schema.js";
 import { type LoadConfigOptions } from "../config/loadConfig.js";
 import type { AcpAgentManager } from "../acp/AcpAgentManager.js";
 import { type TraceWriter, type TraceWriterOptions } from "../audit/trace.js";
+import type { ReviewProgressSink } from "./progress.js";
 import type { KyosoResult, KyosoReviewRequest, NetworkMode, ReviewTool } from "./types.js";
 export type RunReviewOptions = LoadConfigOptions & {
     config?: KyosoConfig;
@@ -12,5 +13,8 @@ export type RunReviewOptions = LoadConfigOptions & {
     mcpNetworkMode?: NetworkMode;
     entrypoint?: "cli" | "mcp" | "core";
     traceWriterFactory?: (options: TraceWriterOptions) => TraceWriter;
+    onProgress?: ReviewProgressSink;
+    signal?: AbortSignal;
+    progressHeartbeatMs?: number;
 };
 export declare function runReview(tool: ReviewTool, request: KyosoReviewRequest, options?: RunReviewOptions): Promise<KyosoResult>;

package/dist/core/types.d.ts

@@ -193,6 +193,29 @@ export type CrossModelAnalysis = {
     }>;
     provider: string;
 };
+export type AgentProgressEvent = {
+    type: "agent_retrying";
+    agent: AgentName;
+    observedRetry: number;
+    attempt?: number;
+    maxRetries?: number;
+    reason: string;
+    discardedMessageBytes: number;
+    timestamp: string;
+} | {
+    type: "agent_activity";
+    agent: AgentName;
+    activity: "message" | "thought" | "protocol";
+    totalOutputBytes: number;
+    timestamp: string;
+} | {
+    type: "agent_waiting";
+    agent: AgentName;
+    elapsedMs: number;
+    sinceLastAcpUpdateMs: number;
+    streamIdleTimeoutMs?: number;
+    timestamp: string;
+};
 export type AgentRunInput = {
     traceId: string;
     agent: AgentName;
@@ -205,7 +228,11 @@ export type AgentRunInput = {
     warnOutputBytes?: number;
     maxOutputBytes?: number;
     networkMode: NetworkMode;
+    signal?: AbortSignal;
+    heartbeatMs?: number;
+    streamIdleTimeoutMs?: number;
     onStarted?: (executionIdentity?: ModelExecutionIdentity) => unknown;
+    onProgress?: (event: AgentProgressEvent) => unknown;
 };
 export type AgentRunResult = {
     agent: AgentName;
@@ -225,6 +252,10 @@ export type AgentRunResult = {
     thoughtBytes?: number;
     outputBytes?: number;
     outputWarningTriggered?: boolean;
+    observedStreamRetries?: number;
+    discardedRetryMessageBytes?: number;
+    firstOutputAt?: string;
+    lastAcpUpdateAt?: string;
     salvaged?: boolean;
     reportedFindings?: number;
     findingsTargetExceeded?: boolean;
@@ -271,6 +302,10 @@ export type ReviewModelCallAudit = {
     thoughtBytes?: number;
     outputBytes?: number;
     outputWarningTriggered?: boolean;
+    observedStreamRetries?: number;
+    discardedRetryMessageBytes?: number;
+    firstOutputAt?: string;
+    lastAcpUpdateAt?: string;
     salvaged?: boolean;
     reportedFindings?: number;
     findingsTargetExceeded?: boolean;

package/dist/index.d.ts

@@ -1,3 +1,5 @@
 export { defineConfig } from "./config/defineConfig.js";
 export { runReview } from "./core/runReview.js";
+export { KyosoCancellationError } from "./core/errors.js";
+export type { ReviewPhase, ReviewProgressEvent, ReviewProgressSink, } from "./core/progress.js";
 export type { ChangeRelation, CisaSecureByDesignResult, EvidenceQuality, EvidenceRef, FindingDisposition, GateStatus, KyosoDecision, KyosoFinding, KyosoResult, KyosoReviewRequest, ModelExecutionIdentity, ModelProviderRoute, ModelTokenUsage, NetworkMode, ReviewBudget, ReviewBudgetRequest, ReviewCompletion, ReviewContract, ReviewCoverage, ReviewExecutionBudget, ReviewLens, ReviewModelCallAudit, ReviewTool, } from "./core/types.js";