@kyo-so/cli 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.0] - 2026-07-09
+
+### Added
+
+- `agents.<name>.effort` config field for Codex and Claude, mirroring
+  `agents.<name>.model`. Kyoso sends it once per session as an ACP
+  `session/set_config_option` request (`effort` for Claude,
+  `reasoning_effort` for Codex). The request is fail-soft: a rejection is
+  logged to stderr as a sanitized warning and surfaced to MCP/JSON callers
+  via `result.audit.warnings`, and the review continues at the backend's
+  own default effort. Settable from both user-global and project TOML
+  (same risk profile as `model`: no command execution or env forwarding).
+
+### Fixed
+
+- Documentation still described the default Claude agent timeout as 240
+  seconds; README (all languages), the design document, and the example
+  config now reflect the 300-second default introduced in 0.6.0.
+
 ## [0.6.0] - 2026-07-08
 
 ### Added

package/README.ja.md

@@ -22,6 +22,16 @@ Kyo-so は Codex と Claude の reviewer を連携させ、次のレビューを
 
 Kyoso はコード変更を適用しません。
 
+## Review Flow
+
+3 つの review tool はすべて同じパイプラインで動きます。secret scan の後、read-only の一時スナップショット上で reviewer ensemble を ACP 経由で並列実行し、所見の集約・ゲート適用・決定を行います。
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/hokupod/kyoso/main/docs/assets/kyoso-review-flow.ja.svg" alt="Kyo-so のレビュー実行フロー。MCP/CLI リクエストから secret scan、スナップショット、アンサンブルレビュー、集約、ゲート、最終決定まで" width="640">
+</p>
+
+backend が 1 つだけ有効な場合は、2 role の ensemble の代わりに 1 agent が `combined_reviewer` として実行されます。この図の Mermaid ソースは [docs/assets/](docs/assets/) にあります。
+
 ## Quick Start
 
 グローバルインストールは不要です。Kyoso は `npx` または `bunx` で実行します。
@@ -229,18 +239,20 @@ Default child-agent env allowlist:
 
 Kyoso は subprocesses の起動に必要な最小限の runtime env も forward します: `PATH`, `HOME`, `TMPDIR`, `TEMP`, `TMP`, `LANG`, `LC_ALL`, `SHELL`, `USER`, `USERNAME`, `SystemRoot`。
 
-## Agent Models
+## Agent Models and Effort
 
-`agents.<name>.model` を省略すると、各 agent 独自の default を使用します。Codex は `~/.codex/config.toml` などの local Codex config を使用し、Claude は adapter default を使用します。
+`agents.<name>.model` または `agents.<name>.effort` を省略すると、各 agent 独自の default を使用します。Codex は `~/.codex/config.toml` などの local Codex config を使用し、Claude は adapter default を使用します。
 
 指定できる model 名は [Claude models overview](https://platform.claude.com/docs/en/about-claude/models/overview) と [Codex models](https://developers.openai.com/codex/models) を参照してください。
 
 ```toml
 [agents.codex]
 model = "gpt-5.5"
+effort = "medium"
 
 [agents.claude]
 model = "claude-sonnet-5"
+effort = "high"
 ```
 
 Kyoso は model pins を adapter-supported configuration に mapping します。
@@ -248,6 +260,8 @@ Kyoso は model pins を adapter-supported configuration に mapping します
 - Claude: `agents.claude.env` または whitelisted parent env で未設定の場合に `ANTHROPIC_MODEL` を設定します。
 - Codex: `CODEX_CONFIG` が未設定の場合、`CODEX_CONFIG={"model":"..."}` を設定します。model pin と他の Codex session config を組み合わせるには、`agents.codex.env.CODEX_CONFIG` を直接設定してください。
 
+effort は仕組みが異なります。Kyoso は env var を設定せず、session ごとに最初の prompt の前に一度、backend agent へ ACP の `session/set_config_option` リクエストを送信します(Claude は `configId: "effort"`、Codex は `configId: "reasoning_effort"`)。有効な値は backend agent のバージョンと選択した model に依存します(例えば Claude は effort levels に対応した model でのみこの option を公開します)。Kyoso は `effort` の値自体を validate しません。backend agent がリクエストを reject した場合、または対応していない場合、Kyoso は stderr に log を出力してレビューを継続します。
+
 ## Audit
 
 Audit traces は次の場所に書き込まれます。
@@ -269,7 +283,7 @@ Kyoso は次の順に config を load します。
 - project TOML: `<cwd>/kyoso.toml`
 - `--network` などの CLI flags
 
-Project `kyoso.toml` は declarative で、trust approval は不要です。tools toggles、agent `enabled` / `model` / `role` / `timeoutMs`、workspace byte limits と additive `workspace.deny`、verification settings、advisory judge settings、tightening-only security/network settings を設定できます。
+Project `kyoso.toml` は declarative で、trust approval は不要です。tools toggles、agent `enabled` / `model` / `effort` / `role` / `timeoutMs`、workspace byte limits と additive `workspace.deny`、verification settings、advisory judge settings、tightening-only security/network settings を設定できます。
 
 Global TOML は command 実行や env forwarding を含む user-owned settings 用です。
 
@@ -284,7 +298,7 @@ CODEX_CONFIG = '{"model":"gpt-5.5"}'
 
 `kyoso.config.ts` は deprecated ですが、互換性のため引き続き supported です。trust-on-first-use approval の後にのみ load され、trusted hashes は `~/.kyoso/trusted-configs.json` に保存されます。`kyoso.toml` と `kyoso.config.ts` が両方ある場合、Kyoso は TOML を使用し TypeScript config を無視します。
 
-Default agent timeouts は Codex 120 秒、Claude 240 秒です。MCP clients は tool calls に少なくとも 360 秒を許可してください。`verification.enabled` が true の場合、Kyoso は追加の cross-agent verification round を実行することがあるため、少なくとも 480 秒を許可してください。
+Default agent timeouts は Codex 120 秒、Claude 300 秒です。MCP clients は tool calls に少なくとも 360 秒を許可してください。`verification.enabled` が true の場合、Kyoso は追加の cross-agent verification round を実行することがあるため、少なくとも 480 秒を許可してください。
 
 Optional finding verification は default で disabled です:
 
@@ -318,7 +332,7 @@ Team admins は organization Usage credits も確認してください。Credits
 
 ## Troubleshooting
 
-- MCP timeout: client tool timeouts を少なくとも 360 秒、`verification.enabled` が true の場合は少なくとも 480 秒に設定してください。Kyoso defaults は Codex 120 秒、Claude 240 秒、verification 90 秒です。
+- MCP timeout: client tool timeouts を少なくとも 360 秒、`verification.enabled` が true の場合は少なくとも 480 秒に設定してください。Kyoso defaults は Codex 120 秒、Claude 300 秒、verification 90 秒です。
 - Fresh npm release: safe-chain などの minimum-package-age protection により、publish 直後は `npx @kyo-so/cli` の解決が一時的に block される場合があります。
 - Deprecated TypeScript config: `--trust-config` を渡さない限り、untrusted `kyoso.config.ts` は skip されます。新規設定は `kyoso.toml` を使ってください。
 

package/README.md

@@ -20,6 +20,16 @@ It coordinates Codex and Claude reviewers for:
 
 Kyoso does not apply code changes.
 
+## Review Flow
+
+All three review tools run the same pipeline: scan for secrets, snapshot the workspace read-only, run the reviewer ensemble in parallel over ACP, then aggregate findings, apply gates, and decide.
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/hokupod/kyoso/main/docs/assets/kyoso-review-flow.en.svg" alt="Kyo-so review execution flow, from MCP/CLI request through secret scan, snapshot, ensemble review, aggregation, gates, and final decision" width="640">
+</p>
+
+With a single backend enabled, one agent runs as `combined_reviewer` instead of the two-role ensemble. The Mermaid sources for this diagram live in [docs/assets/](docs/assets/).
+
 ## Quick Start
 
 No global install is required. Run Kyoso through `npx` or `bunx`.
@@ -230,18 +240,20 @@ Default child-agent env allowlist:
 
 Kyoso also forwards minimal runtime env needed to launch subprocesses: `PATH`, `HOME`, `TMPDIR`, `TEMP`, `TMP`, `LANG`, `LC_ALL`, `SHELL`, `USER`, `USERNAME`, and `SystemRoot`.
 
-## Agent Models
+## Agent Models and Effort
 
-Omit `agents.<name>.model` to use each agent's own default. Codex uses the local Codex config, such as `~/.codex/config.toml`; Claude uses the adapter default.
+Omit `agents.<name>.model` or `agents.<name>.effort` to use each agent's own default. Codex uses the local Codex config, such as `~/.codex/config.toml`; Claude uses the adapter default.
 
 For available model names, see the [Claude models overview](https://platform.claude.com/docs/en/about-claude/models/overview) and the [Codex models list](https://developers.openai.com/codex/models).
 
 ```toml
 [agents.codex]
 model = "gpt-5.5"
+effort = "medium"
 
 [agents.claude]
 model = "claude-sonnet-5"
+effort = "high"
 ```
 
 Kyoso maps model pins to adapter-supported configuration:
@@ -249,6 +261,8 @@ Kyoso maps model pins to adapter-supported configuration:
 - Claude: sets `ANTHROPIC_MODEL` when not already set in `agents.claude.env` or a whitelisted parent env.
 - Codex: sets `CODEX_CONFIG={"model":"..."}` when `CODEX_CONFIG` is not already set. To combine other Codex session config with a model pin, set `agents.codex.env.CODEX_CONFIG` directly.
 
+Effort works differently: Kyoso does not set an env var for it. Instead, it sends an ACP `session/set_config_option` request to the backend agent once per session, before the first prompt: `configId: "effort"` for Claude, `configId: "reasoning_effort"` for Codex. Valid values depend on the backend agent version and the selected model (for example, Claude only exposes effort levels for models that support them). Kyoso does not validate `effort` values itself; if the backend agent rejects the request or does not support it, Kyoso logs it to stderr and continues the review.
+
 ## Audit
 
 Audit traces are written to:
@@ -270,7 +284,7 @@ Kyoso loads config in this order:
 - project TOML: `<cwd>/kyoso.toml`
 - CLI flags such as `--network`
 
-Project `kyoso.toml` is declarative and does not require trust approval. It can set safe project-scoped keys such as tool toggles, agent `enabled` / `model` / `role` / `timeoutMs`, workspace byte limits and additive `workspace.deny`, verification settings, advisory judge settings, and tightening-only security/network settings.
+Project `kyoso.toml` is declarative and does not require trust approval. It can set safe project-scoped keys such as tool toggles, agent `enabled` / `model` / `effort` / `role` / `timeoutMs`, workspace byte limits and additive `workspace.deny`, verification settings, advisory judge settings, and tightening-only security/network settings.
 
 Global TOML is for user-owned settings that can launch commands or forward environment variables:
 
@@ -285,7 +299,7 @@ CODEX_CONFIG = '{"model":"gpt-5.5"}'
 
 `kyoso.config.ts` is deprecated but still supported for compatibility. It is loaded only after trust-on-first-use approval; trusted hashes are stored in `~/.kyoso/trusted-configs.json`. If both `kyoso.toml` and `kyoso.config.ts` exist, Kyoso uses TOML and ignores the TypeScript config.
 
-Default agent timeouts are Codex 120 seconds and Claude 240 seconds. MCP clients should allow at least 360 seconds for tool calls. If `verification.enabled` is true, allow at least 480 seconds because Kyoso may run an additional cross-agent verification round.
+Default agent timeouts are Codex 120 seconds and Claude 300 seconds. MCP clients should allow at least 360 seconds for tool calls. If `verification.enabled` is true, allow at least 480 seconds because Kyoso may run an additional cross-agent verification round.
 
 Optional finding verification is disabled by default:
 
@@ -319,7 +333,7 @@ Team admins should also check organization Usage credits. If credits are enabled
 
 ## Troubleshooting
 
-- MCP timeout: set client tool timeouts to at least 360 seconds, or at least 480 seconds when `verification.enabled` is true. Kyoso defaults are Codex 120 seconds, Claude 240 seconds, and verification 90 seconds.
+- MCP timeout: set client tool timeouts to at least 360 seconds, or at least 480 seconds when `verification.enabled` is true. Kyoso defaults are Codex 120 seconds, Claude 300 seconds, and verification 90 seconds.
 - Fresh npm release: minimum-package-age protection in tools such as safe-chain may briefly block `npx @kyo-so/cli` resolution after publish.
 - Deprecated TypeScript config: untrusted `kyoso.config.ts` is skipped unless you pass `--trust-config`; prefer `kyoso.toml`.
 

package/README.zh-CN.md

@@ -22,6 +22,16 @@ Kyo-so (Kyoso / 協奏) 是面向 AI coding workflows 的 MCP-native、ACP-power
 
 Kyoso 不会应用代码更改。
 
+## Review Flow
+
+三个 review tool 都运行同一条流水线：先进行 secret scan，在 read-only 的临时快照上通过 ACP 并行运行 reviewer ensemble，然后聚合发现、应用门禁并作出决定。
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/hokupod/kyoso/main/docs/assets/kyoso-review-flow.zh-CN.svg" alt="Kyo-so 评审执行流程：从 MCP/CLI 请求到 secret scan、快照、协奏评审、聚合、门禁与最终决定" width="640">
+</p>
+
+当只启用一个 backend 时，会由 1 个 agent 以 `combined_reviewer` 运行，替代双角色 ensemble。此图的 Mermaid 源文件位于 [docs/assets/](docs/assets/)。
+
 ## Quick Start
 
 无需全局安装。通过 `npx` 或 `bunx` 运行 Kyoso。
@@ -229,18 +239,20 @@ Default child-agent env allowlist:
 
 Kyoso 还会 forward 启动 subprocesses 所需的最小 runtime env：`PATH`, `HOME`, `TMPDIR`, `TEMP`, `TMP`, `LANG`, `LC_ALL`, `SHELL`, `USER`, `USERNAME`, and `SystemRoot`。
 
-## Agent Models
+## Agent Models and Effort
 
-省略 `agents.<name>.model` 时，会使用各 agent 自身的 default。Codex 使用 local Codex config，例如 `~/.codex/config.toml`；Claude 使用 adapter default。
+省略 `agents.<name>.model` 或 `agents.<name>.effort` 时，会使用各 agent 自身的 default。Codex 使用 local Codex config，例如 `~/.codex/config.toml`；Claude 使用 adapter default。
 
 可指定的 model 名称请参阅 [Claude models overview](https://platform.claude.com/docs/en/about-claude/models/overview) 与 [Codex models](https://developers.openai.com/codex/models)。
 
 ```toml
 [agents.codex]
 model = "gpt-5.5"
+effort = "medium"
 
 [agents.claude]
 model = "claude-sonnet-5"
+effort = "high"
 ```
 
 Kyoso 会将 model pins 映射到 adapter-supported configuration：
@@ -248,6 +260,8 @@ Kyoso 会将 model pins 映射到 adapter-supported configuration：
 - Claude: 当 `agents.claude.env` 或 whitelisted parent env 中尚未设置时，设置 `ANTHROPIC_MODEL`。
 - Codex: 当 `CODEX_CONFIG` 尚未设置时，设置 `CODEX_CONFIG={"model":"..."}`。若要将 model pin 与其他 Codex session config 组合，请直接设置 `agents.codex.env.CODEX_CONFIG`。
 
+effort 的工作方式不同：Kyoso 不会为它设置 env var，而是在每个 session 中、发送第一个 prompt 之前，向 backend agent 发送一次 ACP `session/set_config_option` 请求(Claude 为 `configId: "effort"`，Codex 为 `configId: "reasoning_effort"`)。有效值取决于 backend agent 的版本和所选的 model(例如，Claude 仅对支持 effort levels 的 model 公开该 option)。Kyoso 本身不会 validate `effort` 的值；如果 backend agent reject 了该请求，或不支持该 option，Kyoso 会将其记录到 stderr 并继续 review。
+
 ## Audit
 
 Audit traces 写入：
@@ -269,7 +283,7 @@ Kyoso 按以下顺序 load config：
 - project TOML: `<cwd>/kyoso.toml`
 - `--network` 等 CLI flags
 
-Project `kyoso.toml` 是 declarative config，不需要 trust approval。它可以设置 tools toggles、agent `enabled` / `model` / `role` / `timeoutMs`、workspace byte limits 和 additive `workspace.deny`、verification settings、advisory judge settings，以及 tightening-only security/network settings。
+Project `kyoso.toml` 是 declarative config，不需要 trust approval。它可以设置 tools toggles、agent `enabled` / `model` / `effort` / `role` / `timeoutMs`、workspace byte limits 和 additive `workspace.deny`、verification settings、advisory judge settings，以及 tightening-only security/network settings。
 
 Global TOML 用于 user-owned settings，包括 command 启动和 env forwarding。
 
@@ -284,7 +298,7 @@ CODEX_CONFIG = '{"model":"gpt-5.5"}'
 
 `kyoso.config.ts` 已 deprecated，但为了兼容仍然 supported。它只会在 trust-on-first-use approval 之后 load；trusted hashes 保存在 `~/.kyoso/trusted-configs.json`。如果 `kyoso.toml` 和 `kyoso.config.ts` 同时存在，Kyoso 使用 TOML 并忽略 TypeScript config。
 
-Default agent timeouts 是 Codex 120 秒、Claude 240 秒。MCP clients 应允许 tool calls 至少运行 360 秒。如果 `verification.enabled` 为 true，Kyoso 可能会运行额外的 cross-agent verification round，因此建议至少允许 480 秒。
+Default agent timeouts 是 Codex 120 秒、Claude 300 秒。MCP clients 应允许 tool calls 至少运行 360 秒。如果 `verification.enabled` 为 true，Kyoso 可能会运行额外的 cross-agent verification round，因此建议至少允许 480 秒。
 
 Optional finding verification 默认 disabled:
 
@@ -318,7 +332,7 @@ Team admins 还应检查 organization Usage credits。如果启用了 credits，
 
 ## Troubleshooting
 
-- MCP timeout: 将 client tool timeouts 设置为至少 360 秒；当 `verification.enabled` 为 true 时，设置为至少 480 秒。Kyoso defaults 是 Codex 120 秒、Claude 240 秒、verification 90 秒。
+- MCP timeout: 将 client tool timeouts 设置为至少 360 秒；当 `verification.enabled` 为 true 时，设置为至少 480 秒。Kyoso defaults 是 Codex 120 秒、Claude 300 秒、verification 90 秒。
 - Fresh npm release: safe-chain 等 minimum-package-age protection 可能会在 publish 后短时间内 block `npx @kyo-so/cli` resolution。
 - Deprecated TypeScript config: 除非传入 `--trust-config`，否则 untrusted `kyoso.config.ts` 会被 skip；新配置请使用 `kyoso.toml`。
 

package/dist/bin/kyoso.js

@@ -169774,7 +169774,7 @@ function isAllowedProjectPath(path) {
   if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
     return true;
   }
-  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "role", "timeoutMs"].includes(third ?? "")) {
+  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "effort", "role", "timeoutMs"].includes(third ?? "")) {
     return true;
   }
   if (top === "verification" && path.length === 2 && ["enabled", "maxFindings", "timeoutMs"].includes(second ?? "")) {
@@ -184186,6 +184186,7 @@ var agentSchema = exports_external.object({
   command: exports_external.string(),
   args: exports_external.array(exports_external.string()).default([]),
   model: exports_external.string().optional(),
+  effort: exports_external.string().optional(),
   role: exports_external.enum([
     "implementation_reviewer",
     "architecture_security_reviewer",
@@ -184273,6 +184274,7 @@ function agentConfigLeafPaths(agent) {
     `agents.${agent}.command`,
     `agents.${agent}.args`,
     `agents.${agent}.model`,
+    `agents.${agent}.effort`,
     `agents.${agent}.role`,
     `agents.${agent}.timeoutMs`,
     `agents.${agent}.env`,
@@ -184347,7 +184349,7 @@ var REDACTION = "[KYOSO_REDACTED]";
 var DEFAULT_AGENT_TIMEOUT_MS = 120000;
 var RAW_OUTPUT_MAX_CHARS = 16384;
 var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-var KYOSO_VERSION = "0.6.0";
+var KYOSO_VERSION = "0.7.0";
 
 // src/security/sanitizeText.ts
 var SENSITIVE_TEXT_PATTERNS = [
@@ -203406,7 +203408,7 @@ async function runSubprocessAgent(agent, agentConfig, input2) {
         error: failure
       });
     });
-    runAcpClientWorkflow(child, input2, abortController.signal).then((rawText) => {
+    runAcpClientWorkflow(child, input2, abortController.signal, resolveEffortConfigOption(agent, agentConfig.effort)).then(({ rawText, warnings }) => {
       stdout = rawText;
       resolveOnce({
         agent,
@@ -203415,7 +203417,8 @@ async function runSubprocessAgent(agent, agentConfig, input2) {
         rawText,
         normalized: normalizeAgentOutput(agent, input2.role, rawText),
         startedAt,
-        completedAt: new Date().toISOString()
+        completedAt: new Date().toISOString(),
+        ...warnings.length > 0 ? { warnings } : {}
       });
     }).catch((error51) => {
       if (abortController.signal.aborted)
@@ -203450,7 +203453,7 @@ async function runSubprocessAgent(agent, agentConfig, input2) {
     });
   });
 }
-async function runAcpClientWorkflow(child, input2, signal) {
+async function runAcpClientWorkflow(child, input2, signal, configOption) {
   if (!child.stdin || !child.stdout) {
     throw new Error("Agent process did not expose stdio streams.");
   }
@@ -203498,15 +203501,36 @@ async function runAcpClientWorkflow(child, input2, signal) {
         kyosoReadOnly: true
       }
     }).withSession(async (session) => {
+      const warnings = [];
+      if (configOption) {
+        await ctx.request(methods.agent.session.setConfigOption, { sessionId: session.sessionId, ...configOption }, { cancellationSignal: signal }).catch((error51) => {
+          if (signal.aborted)
+            return;
+          const sanitizedValue = sanitizeTextForDisplay(configOption.value);
+          const detail = sanitizeTextForDisplay(formatAgentErrorDetail(error51));
+          const warning = `rejected effort config option (configId=${configOption.configId}, value=${sanitizedValue}); continuing without it: ${detail}`;
+          warnings.push(warning);
+          console.error(`kyoso: ${warning}`);
+        });
+      }
       const promptResponse = session.prompt(input2.prompt, {
         cancellationSignal: signal
       });
       const text = await session.readText();
       await promptResponse;
-      return text;
+      return { rawText: text, warnings };
     });
   });
 }
+function resolveEffortConfigOption(agent, effort) {
+  if (!effort)
+    return;
+  if (agent === "codex")
+    return { configId: "reasoning_effort", value: effort };
+  if (agent === "claude")
+    return { configId: "effort", value: effort };
+  return;
+}
 async function readWorkspaceFile(workspaceDir, requestedPath, line, limit) {
   const workspaceRoot = await realpath(workspaceDir);
   const candidates = resolveReadablePaths(workspaceRoot, requestedPath);
@@ -205160,6 +205184,7 @@ async function runReview(tool, request, options = {}) {
       manager,
       trace
     });
+    warnings.push(...agentResults.flatMap((result2) => (result2.warnings ?? []).map((warning) => `Agent ${result2.agent} ${warning}`)));
     const normalizedAgentResults = agentResults.map(normalizeAgentRunResult);
     const agentsUsed = normalizedAgentResults.map((result2) => result2.agent);
     const reviewMode = agentsUsed.length === 1 ? "single_agent" : "multi_agent";

package/dist/config/schema.d.ts

@@ -20,6 +20,7 @@ export declare const kyosoConfigSchema: z.ZodObject<{
             command: z.ZodString;
             args: z.ZodDefault<z.ZodArray<z.ZodString>>;
             model: z.ZodOptional<z.ZodString>;
+            effort: z.ZodOptional<z.ZodString>;
             role: z.ZodEnum<{
                 implementation_reviewer: "implementation_reviewer";
                 architecture_security_reviewer: "architecture_security_reviewer";
@@ -41,6 +42,7 @@ export declare const kyosoConfigSchema: z.ZodObject<{
             command: z.ZodString;
             args: z.ZodDefault<z.ZodArray<z.ZodString>>;
             model: z.ZodOptional<z.ZodString>;
+            effort: z.ZodOptional<z.ZodString>;
             role: z.ZodEnum<{
                 implementation_reviewer: "implementation_reviewer";
                 architecture_security_reviewer: "architecture_security_reviewer";

package/dist/core/constants.d.ts

@@ -4,4 +4,4 @@ export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.6.0";
+export declare const KYOSO_VERSION = "0.7.0";

package/dist/core/types.d.ts

@@ -123,6 +123,7 @@ export type AgentRunResult = {
         message: string;
         detail?: string;
     };
+    warnings?: string[];
     startedAt: string;
     completedAt?: string;
 };

package/dist/index.js

@@ -183783,6 +183783,7 @@ var agentSchema = exports_external.object({
   command: exports_external.string(),
   args: exports_external.array(exports_external.string()).default([]),
   model: exports_external.string().optional(),
+  effort: exports_external.string().optional(),
   role: exports_external.enum([
     "implementation_reviewer",
     "architecture_security_reviewer",
@@ -183870,6 +183871,7 @@ function agentConfigLeafPaths(agent) {
     `agents.${agent}.command`,
     `agents.${agent}.args`,
     `agents.${agent}.model`,
+    `agents.${agent}.effort`,
     `agents.${agent}.role`,
     `agents.${agent}.timeoutMs`,
     `agents.${agent}.env`,
@@ -184109,7 +184111,7 @@ function isAllowedProjectPath(path) {
   if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
     return true;
   }
-  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "role", "timeoutMs"].includes(third ?? "")) {
+  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "effort", "role", "timeoutMs"].includes(third ?? "")) {
     return true;
   }
   if (top === "verification" && path.length === 2 && ["enabled", "maxFindings", "timeoutMs"].includes(second ?? "")) {
@@ -189141,7 +189143,7 @@ async function runSubprocessAgent(agent, agentConfig, input) {
         error: failure
       });
     });
-    runAcpClientWorkflow(child, input, abortController.signal).then((rawText) => {
+    runAcpClientWorkflow(child, input, abortController.signal, resolveEffortConfigOption(agent, agentConfig.effort)).then(({ rawText, warnings }) => {
       stdout = rawText;
       resolveOnce({
         agent,
@@ -189150,7 +189152,8 @@ async function runSubprocessAgent(agent, agentConfig, input) {
         rawText,
         normalized: normalizeAgentOutput(agent, input.role, rawText),
         startedAt,
-        completedAt: new Date().toISOString()
+        completedAt: new Date().toISOString(),
+        ...warnings.length > 0 ? { warnings } : {}
       });
     }).catch((error51) => {
       if (abortController.signal.aborted)
@@ -189185,7 +189188,7 @@ async function runSubprocessAgent(agent, agentConfig, input) {
     });
   });
 }
-async function runAcpClientWorkflow(child, input, signal) {
+async function runAcpClientWorkflow(child, input, signal, configOption) {
   if (!child.stdin || !child.stdout) {
     throw new Error("Agent process did not expose stdio streams.");
   }
@@ -189233,15 +189236,36 @@ async function runAcpClientWorkflow(child, input, signal) {
         kyosoReadOnly: true
       }
     }).withSession(async (session) => {
+      const warnings = [];
+      if (configOption) {
+        await ctx.request(methods.agent.session.setConfigOption, { sessionId: session.sessionId, ...configOption }, { cancellationSignal: signal }).catch((error51) => {
+          if (signal.aborted)
+            return;
+          const sanitizedValue = sanitizeTextForDisplay(configOption.value);
+          const detail = sanitizeTextForDisplay(formatAgentErrorDetail(error51));
+          const warning = `rejected effort config option (configId=${configOption.configId}, value=${sanitizedValue}); continuing without it: ${detail}`;
+          warnings.push(warning);
+          console.error(`kyoso: ${warning}`);
+        });
+      }
       const promptResponse = session.prompt(input.prompt, {
         cancellationSignal: signal
       });
       const text = await session.readText();
       await promptResponse;
-      return text;
+      return { rawText: text, warnings };
     });
   });
 }
+function resolveEffortConfigOption(agent, effort) {
+  if (!effort)
+    return;
+  if (agent === "codex")
+    return { configId: "reasoning_effort", value: effort };
+  if (agent === "claude")
+    return { configId: "effort", value: effort };
+  return;
+}
 async function readWorkspaceFile(workspaceDir, requestedPath, line, limit) {
   const workspaceRoot = await realpath(workspaceDir);
   const candidates = resolveReadablePaths(workspaceRoot, requestedPath);
@@ -191169,6 +191193,7 @@ async function runReview(tool, request, options = {}) {
       manager,
       trace
     });
+    warnings.push(...agentResults.flatMap((result2) => (result2.warnings ?? []).map((warning) => `Agent ${result2.agent} ${warning}`)));
     const normalizedAgentResults = agentResults.map(normalizeAgentRunResult);
     const agentsUsed = normalizedAgentResults.map((result2) => result2.agent);
     const reviewMode = agentsUsed.length === 1 ? "single_agent" : "multi_agent";

package/examples/kyoso.toml

@@ -8,4 +8,4 @@ defaultMode = "model_only"
 [agents.claude]
 # Omit model to use the Claude adapter default.
 # model = "claude-sonnet-5"
-timeoutMs = 240000
+timeoutMs = 300000

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyo-so/cli",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
   "license": "AGPL-3.0-or-later",
   "repository": {