@lyupro/codex-bridge 0.5.4 → 0.6.0

package/src/home/lib/run-config.mjs

@@ -16,11 +16,13 @@
  * The file is optional. Its absence is the default, not an error; a malformed one is an
  * error, because a typo must not silently change how runs behave.
  */
-import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { BRAND_CONFIG_PATH, BRAND_HOME } from './brand-home.mjs';
 import { readJsonFileSync } from './json-file.mjs';
+import { editRunConfig } from './config-edit.mjs';
+import { DEFAULTS, ROLES, SWITCH_KEYS, LIST_KEYS, OBJECT_KEYS, validateRunConfig } from './config-validate.mjs';
+export { DEFAULTS, DEFAULT_ENVIRONMENT_PATHS } from './config-validate.mjs';
 
 export const CONFIG_PATH = BRAND_CONFIG_PATH;
 
@@ -32,98 +34,6 @@ export const CONFIG_PATH = BRAND_CONFIG_PATH;
 const ORIGIN =
   BRAND_HOME.source === 'CODEX_BRIDGE_HOME' ? 'from CODEX_BRIDGE_HOME' : 'default location';
 
-const BUDGET_KEY = 'budgets';
-const BUDGET_MODES = ['scout', 'build', 'review'];
-const DEFAULT_BUDGETS = { scout: 15, build: 25, review: 20 };
-const RETENTION_KEY = 'retention';
-const RETENTION_FIELDS = ['enabled', 'days'];
-const DEFAULT_RETENTION = { enabled: true, days: 30 };
-
-/**
- * Files the surrounding tooling writes on its own, in any repository a run touches.
- *
- * A run is graded by comparing the worktree either side of it, which silently assumes the
- * run is the only writer. It is not: OMC rewrites .omc/ and Claude Code rewrites its own
- * caches while Codex works, and on 2026-08-02 an honest run was failed for
- * “out-of-scope changes: .omc/project-memory.json” — a file Codex never opened. These paths are
- * therefore attributed to the environment rather than to the run. They are not hidden: the
- * reply and meta.json list them separately, so a run that really did edit them is still visible.
- */
-export const DEFAULT_ENVIRONMENT_PATHS = [
-  '.omc/**',
-  '.claude/settings.local.json',
-  // Claude Code's own state, which only exists when the repository under a run is ~/.claude.
-  'mcp-needs-auth-cache.json',
-  'plugins/installed_plugins.json',
-  'plugins/known_marketplaces.json',
-];
-
-/** Off means the flag is passed to Codex as `--disable <key>`. */
-export const DEFAULTS = {
-  hooks: false,
-  plugins: false,
-  models: {},
-  budgets: DEFAULT_BUDGETS,
-  retention: DEFAULT_RETENTION,
-  environmentPaths: DEFAULT_ENVIRONMENT_PATHS,
-  answerLanguage: 'English',
-};
-
-/** Booleans the operator flips from the command line; structured keys are edited in the file. */
-const SWITCH_KEYS = ['hooks', 'plugins'];
-const LIST_KEYS = ['environmentPaths'];
-const OBJECT_KEYS = ['models'];
-const MODEL_KEYS = ['scout', 'build', 'review'];
-/**
- * A mode is configured as a pair, not as a model alone: reasoning depth is half of what a
- * model is worth. A cheap model at its default depth is a different worker from the same
- * model at "max", and pinning only the name would have silently kept every run at the
- * fallback depth the dispatcher happens to pass.
- */
-const PROFILE_KEYS = ['model', 'effort'];
-// Exactly the values the service enumerates, and no more. `minimal` sat here until 2026-08-26,
-// passed validation and was rejected by the model itself after the run had started
-// ("Unsupported value: 'minimal' is not supported with the … model"), so an order died four
-// seconds in on quota already spent. A validator that admits a known-dead value is worse than none.
-export const ALLOWED_EFFORTS = Object.freeze(['none', 'low', 'medium', 'high', 'xhigh', 'max']);
-/**
- * The language a run answers in. Left to the model it followed the task, the surrounding docs or
- * its own default: an English order came back in Russian, and artifacts of one project ended up in
- * two languages. English is the default because the package is read by strangers.
- */
-const STRING_KEYS = ['answerLanguage'];
-const KEYS = [...SWITCH_KEYS, ...LIST_KEYS, ...OBJECT_KEYS, ...STRING_KEYS, BUDGET_KEY, RETENTION_KEY];
-
-function readRetention(file, value) {
-  if (!value || typeof value !== 'object' || Array.isArray(value)) {
-    throw new Error(
-      `${file}: key “${RETENTION_KEY}” must be an object with enabled and days, not ${JSON.stringify(value)}`,
-    );
-  }
-  for (const key of Object.keys(value)) {
-    if (!RETENTION_FIELDS.includes(key)) {
-      throw new Error(
-        `${file}: key “${RETENTION_KEY}” has unknown field “${key}”. ` +
-          `Only ${RETENTION_FIELDS.join(', ')} are allowed`,
-      );
-    }
-  }
-  if (typeof value.enabled !== 'boolean') {
-    throw new Error(
-      `${file}: key “${RETENTION_KEY}.enabled” must be true or false, not ${JSON.stringify(value.enabled)}`,
-    );
-  }
-  // Plan_17 step 4 does not read days when disabled, so stale values cannot revive deletion after
-  // the step 3 incident where a copied default silently turned cleanup back on.
-  if (!value.enabled) return { enabled: false };
-  if (typeof value.days !== 'number' || !Number.isFinite(value.days) || value.days <= 0) {
-    throw new Error(
-      `${file}: key “${RETENTION_KEY}.days” must be a positive number of days, not ${JSON.stringify(value.days)}`,
-    );
-  }
-  return { enabled: true, days: value.days };
-}
-
 export function retentionNotice(config) {
   if (config?.retention?.enabled) {
     const days = config.retention.days;
@@ -138,43 +48,6 @@ export function retentionNotice(config) {
   };
 }
 
-/**
- * A run gets a hard wall-clock budget, because the caller's timeout is not a run contract:
- * on 2026-08-03 one order restarted six times and spent 170,293 accounted tokens while four
- * killed callers left their Codex processes and token spend unrecorded.
- */
-function readBudgets(file, value) {
-  if (!value || typeof value !== 'object' || Array.isArray(value)) {
-    throw new Error(
-      `${file}: key “${BUDGET_KEY}” must be an object keyed by ${BUDGET_MODES.join(', ')}, ` +
-        `each holding a positive number of minutes, not ${JSON.stringify(value)}`,
-    );
-  }
-  const budgets = { ...DEFAULT_BUDGETS };
-  for (const [mode, minutes] of Object.entries(value)) {
-    if (!BUDGET_MODES.includes(mode)) {
-      throw new Error(
-        `${file}: key “${BUDGET_KEY}” has unknown mode “${mode}”. ` +
-          `Only ${BUDGET_MODES.join(', ')} are allowed`,
-      );
-    }
-    if (typeof minutes === 'string' && !minutes.trim()) {
-      throw new Error(
-        `${file}: key “${BUDGET_KEY}.${mode}” is empty; remove the field to use the default ` +
-          `(${DEFAULT_BUDGETS[mode]} minutes), or give it a positive number of minutes`,
-      );
-    }
-    if (typeof minutes !== 'number' || !Number.isFinite(minutes) || minutes <= 0) {
-      throw new Error(
-        `${file}: key “${BUDGET_KEY}.${mode}” must be a positive number of minutes, ` +
-          `not ${JSON.stringify(minutes)}`,
-      );
-    }
-    budgets[mode] = minutes;
-  }
-  return budgets;
-}
-
 export function readRunConfig(file = CONFIG_PATH) {
   let parsed;
   try {
@@ -186,113 +59,7 @@ export function readRunConfig(file = CONFIG_PATH) {
         'the default mode applies: hooks and plugins are disabled.',
     );
   }
-  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-    throw new Error(`${file} must contain an object like {"hooks": false, "plugins": false}`);
-  }
-  const config = { ...DEFAULTS };
-  for (const [key, value] of Object.entries(parsed)) {
-    if (!KEYS.includes(key)) {
-      throw new Error(`${file}: unknown key “${key}”. Only ${KEYS.join(', ')} are allowed`);
-    }
-    if (STRING_KEYS.includes(key)) {
-      if (typeof value !== 'string' || !value.trim()) {
-        throw new Error(
-          `${file}: key “${key}” must be a non-empty string, not ${JSON.stringify(value)}. ` +
-            `Remove the key to keep the default (${DEFAULTS[key]}).`,
-        );
-      }
-      config[key] = value.trim();
-      continue;
-    }
-    if (key === BUDGET_KEY) {
-      config[key] = readBudgets(file, value);
-      continue;
-    }
-    if (key === RETENTION_KEY) {
-      config[key] = readRetention(file, value);
-      continue;
-    }
-    if (LIST_KEYS.includes(key)) {
-      if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
-        throw new Error(
-          `${file}: key “${key}” must be a list of string patterns, not ${JSON.stringify(value)}. ` +
-            'An empty list means “the environment writes nothing”; an absent key uses the default.',
-        );
-      }
-      config[key] = value.map((item) => item.trim()).filter(Boolean);
-      continue;
-    }
-    if (OBJECT_KEYS.includes(key)) {
-      if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        throw new Error(
-          `${file}: key “${key}” must be an object keyed by ${MODEL_KEYS.join(', ')}, ` +
-            `each holding {"model": "...", "effort": "..."}, not ${JSON.stringify(value)}`,
-        );
-      }
-      const models = {};
-      for (const [mode, profile] of Object.entries(value)) {
-        if (!MODEL_KEYS.includes(mode)) {
-          throw new Error(
-            `${file}: key “${key}” has unknown mode “${mode}”. Only ${MODEL_KEYS.join(', ')} are allowed`,
-          );
-        }
-        if (!profile || typeof profile !== 'object' || Array.isArray(profile)) {
-          throw new Error(
-            `${file}: key “${key}.${mode}” must be an object like ` +
-              `{"model": "...", "effort": "..."}, not ${JSON.stringify(profile)}`,
-          );
-        }
-        const resolved = {};
-        for (const [field, fieldValue] of Object.entries(profile)) {
-          if (!PROFILE_KEYS.includes(field)) {
-            throw new Error(
-              `${file}: key “${key}.${mode}” has unknown field “${field}”. ` +
-                `Only ${PROFILE_KEYS.join(', ')} are allowed`,
-            );
-          }
-          if (typeof fieldValue !== 'string') {
-            throw new Error(
-              `${file}: key “${key}.${mode}.${field}” must be a string, not ${JSON.stringify(fieldValue)}`,
-            );
-          }
-          const trimmed = fieldValue.trim();
-          // A field written as an empty string is a mistake, not an absence: dropping it silently
-          // would send the run to another profile's depth past every check below.
-          if (!trimmed) {
-            throw new Error(
-              `${file}: key “${key}.${mode}.${field}” is empty; remove the field to fall back, ` +
-                'or give it a value',
-            );
-          }
-          resolved[field] = trimmed;
-        }
-        if (resolved.effort && /\s/.test(resolved.effort)) {
-          throw new Error(
-            `${file}: key “${key}.${mode}.effort” must be a single word; ` +
-              `allowed values: ${ALLOWED_EFFORTS.join(', ')}`,
-          );
-        }
-        if (resolved.effort && !ALLOWED_EFFORTS.includes(resolved.effort)) {
-          throw new Error(
-            `${file}: key “${key}.${mode}.effort” must be one of: ` +
-              `${ALLOWED_EFFORTS.join(', ')}; got ${JSON.stringify(resolved.effort)}`,
-          );
-        }
-        if (Object.keys(resolved).length) models[mode] = resolved;
-      }
-      config[key] = models;
-      continue;
-    }
-    if (typeof value !== 'boolean') {
-      throw new Error(`${file}: key “${key}” must be true or false, not ${JSON.stringify(value)}`);
-    }
-    config[key] = value;
-  }
-  return config;
-}
-
-export function writeRunConfig(config, file = CONFIG_PATH) {
-  fs.writeFileSync(file, `${JSON.stringify(config, null, 2)}\n`);
+  return validateRunConfig(file, parsed);
 }
 
 /** Flags for `codex exec`: a switch that is off becomes an explicit --disable. */
@@ -305,17 +72,18 @@ const state = (config) => [
   ),
   `environmentPaths: ${(config.environmentPaths || []).length} patterns — changes in them are ` +
     'treated as environment work, not run work',
-  `models: ${MODEL_KEYS.map((key) => {
+  `models: ${ROLES.map((key) => {
     const profile = config.models?.[key];
-    if (!profile?.model && !profile?.effort) return `${key}: default — chosen by Codex`;
+    if (!profile?.model && !profile?.effort && !profile?.speed) return `${key}: default — chosen by Codex`;
     const model = profile.model || 'default model';
-    return `${key}: ${model}${profile.effort ? ` at ${profile.effort} effort` : ''}`;
+    return `${key}: ${model}${profile.effort ? ` at ${profile.effort} effort` : ''}`
+      + (profile.speed ? ` on ${profile.speed} tier` : '');
   }).join('; ')}`,
-  `budgets: ${BUDGET_MODES.map((mode) => `${mode}: ${config.budgets?.[mode] ?? DEFAULT_BUDGETS[mode]} minutes`).join('; ')}`,
+  `budgets: ${ROLES.map((role) => `${role}: ${config.budgets?.[role] ?? DEFAULTS.budgets[role]} minutes`).join('; ')}`,
   `retention: ${config.retention?.enabled ? `on — transport older than ${config.retention.days} days` : 'off — automatic cleanup disabled'}`,
 ];
 
-function main(argv) {
+async function main(argv) {
   const [key, value] = argv;
 
   if (!key) {
@@ -325,7 +93,7 @@ function main(argv) {
   }
 
   if (key === 'reset') {
-    writeRunConfig({ ...DEFAULTS });
+    await editRunConfig({ reset: true }, undefined);
     console.log([...state(DEFAULTS), `Reset to defaults · ${CONFIG_PATH} (${ORIGIN})`].join('\n'));
     return 0;
   }
@@ -334,7 +102,8 @@ function main(argv) {
     const known = LIST_KEYS.includes(key)
       ? `“${key}” is a pattern list, not a switch: edit it directly in ${CONFIG_PATH}`
       : OBJECT_KEYS.includes(key)
-        ? `“${key}” is configured in the file, not as a switch: edit it directly in ${CONFIG_PATH}`
+        ? `“${key}” is not a switch: change it with “codex-bridge model set <role> <model> [effort]” `
+          + `or “codex-bridge model unset <role>”, which check the pair against the live catalogue`
         : `unknown switch “${key}”. Allowed: ${SWITCH_KEYS.join(', ')}, reset`;
     console.error(`run-config: ${known}`);
     return 2;
@@ -344,8 +113,7 @@ function main(argv) {
     return 2;
   }
 
-  const config = { ...readRunConfig(), [key]: value === 'on' };
-  writeRunConfig(config);
+  const config = await editRunConfig(key, () => value === 'on');
   console.log([...state(config), `File: ${CONFIG_PATH} (${ORIGIN})`].join('\n'));
   return 0;
 }
@@ -355,7 +123,7 @@ const invokedDirectly =
 
 if (invokedDirectly) {
   try {
-    process.exit(main(process.argv.slice(2)));
+    process.exit(await main(process.argv.slice(2)));
   } catch (err) {
     console.error(`run-config: ${err.message}`);
     process.exit(2);

package/src/home/lib/runner/args.mjs

@@ -8,7 +8,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { AGENTS } from '../write-meta.mjs';
-import { ALLOWED_EFFORTS } from '../run-config.mjs';
 import { isAbsoluteTaskFilePath, requiredInputsFor } from '../required-inputs.mjs';
 import { firstShellUnsafeSequence } from '../shell-unsafe.mjs';
 import { parseTaskDocument } from './task-file.mjs';
@@ -88,7 +87,7 @@ const SHELL_CHECKED_FLAGS = Object.freeze([
   'repo',
   'agent',
   'effort',
-  'mode',
+  'changeset',
   'task-file',
 ]);
 const BOOLEAN_YES = /^(1|true|yes)$/i;
@@ -100,6 +99,8 @@ export function parseArgs(argv) {
     const key = argv[i];
     if (!key.startsWith('--')) die(`unexpected argument: ${key}`);
     const name = key.slice(2);
+    // Plan_56 D10 requires --changeset: a stale reviewer flag must not silently select uncommitted work.
+    if (name === 'mode') die('unknown flag: --mode; use --changeset instead');
     const value = argv[i + 1];
     if (BOOLEAN_FLAGS.has(name)) {
       if (value !== undefined && !value.startsWith('--')) {
@@ -163,14 +164,11 @@ export function parseArgs(argv) {
       die('--question must not be empty for codex-scout; no quota was spent');
     }
   }
-  const allowedEfforts = ALLOWED_EFFORTS.join(', ');
-  // Left unset when not given, rather than defaulted here: the mode's configured profile is
+  // Left unset when not given, rather than defaulted here: the role's configured profile is
   // what fills the gap, and a default applied this early would always win over it.
-  if (opts.effort !== undefined && /\s/.test(opts.effort)) {
-    die(`--effort must be a single word; allowed values: ${allowedEfforts}`);
-  }
-  if (opts.effort !== undefined && !ALLOWED_EFFORTS.includes(opts.effort)) {
-    die(`--effort must be one of: ${allowedEfforts}; got ${JSON.stringify(opts.effort)}`);
+  // Plan_56 step 3: support belongs to the live catalogue on write and Codex at run start.
+  if (opts.effort !== undefined && (!opts.effort || /\s/.test(opts.effort))) {
+    die(`--effort must be a non-empty single word with no whitespace; got ${JSON.stringify(opts.effort)}`);
   }
   opts.repo = path.resolve(opts.repo || process.cwd());
   const slugSource = opts.slug ? '--slug' : '--order-id';
@@ -183,7 +181,7 @@ export function parseArgs(argv) {
         `${JSON.stringify(opts.slug)} must contain a letter or digit.`,
     );
   }
-  opts.mode = opts.mode || 'uncommitted';
+  opts.changeset = opts.changeset || 'uncommitted';
   // A writing run without a declared scope is how `!Plans/*.md` got edited by a run that was
   // told in prose not to touch them: prose does not bind, a file list does. Required rather
   // than defaulted to "everything", and checked here — before the folder exists and before a

package/src/home/lib/runner/codex-args.mjs

@@ -14,15 +14,16 @@
  * run from starting a process on Windows).
  */
 import path from 'node:path';
+import { agentRole } from '../agents.mjs';
 import { CLEAN_ENV, RUN_ENV } from './run-env.mjs';
 import { platformSandboxArgs } from './sandbox-flags.mjs';
 
 /**
- * Which model runs a mode, and how deep it reasons.
+ * Which model runs a role, and how deep it reasons.
  *
- * Three sources, in this order: what the dispatcher asked for this one task, the mode's
+ * Three sources, in this order: what the dispatcher asked for this one task, the role's
  * configured profile, and finally a depth to fall back on. The order is the whole point —
- * pinning a model without its depth leaves every run at the fallback, which is how a mode
+ * pinning a model without its depth leaves every run at the fallback, which is how a role
  * configured for maximum reasoning would quietly keep working at the shallowest setting.
  */
 const FALLBACK_EFFORT = 'medium';
@@ -37,34 +38,25 @@ const FALLBACK_EFFORT = 'medium';
 const NO_SUBAGENTS = ['-c', 'agents.enabled=false'];
 
 /**
- * Which configured mode an agent is. One table, because the launcher needs the same answer to
- * pick a run's time budget: a second copy of this mapping is a second place to forget a mode.
- */
-export const runMode = (agent) =>
-  ({
-    'codex-scout': 'scout',
-    'codex-build': 'build',
-    'codex-review': 'review',
-  })[agent];
-
-/**
- * Which model and depth this run gets, and — as part of the same answer — where each came from.
+ * Which model, depth and tier this run requests, and where each came from.
  *
  * The provenance is not decoration. A configured profile failed to reach any run for three
  * releases (2026-08-26) and nothing said so: the reply named no model, meta.json recorded none,
  * and a depth silently served by the fallback is indistinguishable from one the operator chose.
- * `model_source` is `config` or `codex default`; `effort_source` is `request`, `config` or
- * `fallback`, in the order the values are consulted above.
+ * `model_source` and `speed_source` are `config` or `codex default`; `effort_source` is
+ * `request`, `config` or `fallback`, in the order the values are consulted above.
  */
 export function runProfile(opts) {
-  const mode = runMode(opts.agent);
+  const role = agentRole(opts.agent);
   // opts.models is how tests state a configuration; a real run reads the one loaded for it.
-  const configured = (opts.models || RUN_ENV?.models || {})[mode] || {};
+  const configured = (opts.models || RUN_ENV?.models || {})[role] || {};
   return {
     model: configured.model || '',
     model_source: configured.model ? 'config' : 'codex default',
     effort: opts.effort || configured.effort || FALLBACK_EFFORT,
     effort_source: opts.effort ? 'request' : configured.effort ? 'config' : 'fallback',
+    speed: configured.speed || '',
+    speed_source: configured.speed ? 'config' : 'codex default',
   };
 }
 
@@ -73,6 +65,8 @@ export function codexArgs(opts, runDir, isGitRepo) {
   const profile = runProfile(opts);
   const effort = `model_reasoning_effort=${profile.effort}`;
   const modelArgs = profile.model ? ['-m', profile.model] : [];
+  // Plan_56 D35: there is no identifier for ordinary speed; an unpinned tier adds no override.
+  const speedArgs = profile.speed ? ['-c', `service_tier=${profile.speed}`] : [];
   if (opts.agent === 'codex-scout') {
     return [
       'exec',
@@ -81,6 +75,7 @@ export function codexArgs(opts, runDir, isGitRepo) {
       '--ignore-user-config',
       '-c',
       effort,
+      ...speedArgs,
       ...NO_SUBAGENTS,
       ...platformSandboxArgs(),
       ...modelArgs,
@@ -105,6 +100,7 @@ export function codexArgs(opts, runDir, isGitRepo) {
       ...CLEAN_ENV,
       '-c',
       effort,
+      ...speedArgs,
       ...NO_SUBAGENTS,
       ...platformSandboxArgs(),
       ...modelArgs,
@@ -138,6 +134,7 @@ export function codexArgs(opts, runDir, isGitRepo) {
     '--ignore-user-config',
     '-c',
     effort,
+    ...speedArgs,
     ...NO_SUBAGENTS,
     ...platformSandboxArgs(),
     ...modelArgs,

package/src/home/lib/runner/git-state.mjs

@@ -112,9 +112,9 @@ export function findFakeDone(repo) {
 }
 
 /** What exactly is under review, resolved from git rather than from wording. */
-export function reviewScope(repo, mode) {
-  if (mode.startsWith('base:')) {
-    const base = mode.slice(5);
+export function reviewScope(repo, changeset) {
+  if (changeset.startsWith('base:')) {
+    const base = changeset.slice(5);
     return {
       label: `branch changes against base ${base}`,
       diffCommand: `git diff ${base}...HEAD`,
@@ -123,8 +123,8 @@ export function reviewScope(repo, mode) {
         .filter(Boolean),
     };
   }
-  if (mode.startsWith('commit:')) {
-    const sha = mode.slice(7);
+  if (changeset.startsWith('commit:')) {
+    const sha = changeset.slice(7);
     return {
       label: `commit ${sha}`,
       diffCommand: `git show ${sha}`,

package/src/home/lib/runner/launcher.mjs

@@ -31,7 +31,8 @@ import { continuationRefusal } from './continuation.mjs';
 import { SCHEMAS } from './schemas.mjs';
 import { INSTRUCTIONS } from './prompts.mjs';
 import { git, headSha, branchName, worktreeSnapshot, reviewScope } from './git-state.mjs';
-import { codexArgs, runMode, runProfile } from './codex-args.mjs';
+import { agentRole } from '../agents.mjs';
+import { codexArgs, runProfile } from './codex-args.mjs';
 import { writeWorkerOrder } from './worker-order.mjs';
 import { requireCodex, unsafeForCmd } from './codex-cmd.mjs';
 import { runsRoot } from './runs-root.mjs';
@@ -254,7 +255,7 @@ export async function launcher(argv = process.argv.slice(2)) {
 
   requireCodex(runDir, opts.agent);
 
-  const scope = opts.agent === 'codex-review' ? reviewScope(repoRoot, opts.mode) : null;
+  const scope = opts.agent === 'codex-review' ? reviewScope(repoRoot, opts.changeset) : null;
   if (scope) {
     fs.writeFileSync(
       path.join(runDir, 'scope.txt'),
@@ -347,7 +348,7 @@ export async function launcher(argv = process.argv.slice(2)) {
     repo: repoRoot,
     isGitRepo,
     launcherPid: process.pid,
-    budgetMinutes: RUN_ENV?.budgets?.[runMode(opts.agent)],
+    budgetMinutes: RUN_ENV?.budgets?.[agentRole(opts.agent)],
     scopeNew: opts.scopeNewPatterns,
     profile: runProfile({ ...opts, repo: repoRoot }),
     args: codexArgv,