@mycompbox/compbox-cli 1.13.0

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAevD,SAAS,iBAAiB;IACxB,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,eAAe,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,+DAA+D;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,sFAAsF,CAAC;KACnG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAEhC,oBAAoB;AACpB,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEnC,kBAAkB;AAClB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@mycompbox/compbox-cli",
+  "version": "1.13.0",
+  "description": "CompBox CLI - Install, update, and manage Skill Packs",
+  "type": "module",
+  "bin": {
+    "compbox": "./index.js"
+  },
+  "main": "./index.js",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mycompbox/CompBox.git",
+    "directory": "packages/cli"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.110.0",
+    "axios": "^1.7.0",
+    "chalk": "^5.4.0",
+    "cli-table3": "^0.6.5",
+    "commander": "^12.1.0",
+    "form-data": "^4.0.0",
+    "ora": "^8.1.0",
+    "semver": "^7.7.4",
+    "tar": "^7.5.9"
+  }
+}

package/utils/agent-invoker.d.ts

@@ -0,0 +1,393 @@
+/**
+ * Agent invoker (ENG-E23 / ENG-122-2) — the daemon's "heart": actually runs a
+ * claimed job instead of immediately reporting it as unimplemented.
+ *
+ * Two agentModes are implemented, both for `epic_request` jobs only
+ * (`start_execution` — running planner/orchestrator locally — is NOT
+ * implemented here):
+ *   - `api`: Anthropic Messages API, directly (Anthropic API key, billed
+ *     per-token). See invokeEpicRequestViaApi.
+ *   - `claude-subscription`: shells out to the local `claude` CLI
+ *     non-interactively, using whichever account is already logged in on
+ *     this machine (personal Pro/Max or a company Team seat) — no API key
+ *     ever touches CompBox. See invokeEpicRequestViaSubscription.
+ *
+ * Common to both:
+ *   - The interview is driven by the shared, declarative INTERVIEW_DEFINITION
+ *     (@mycompbox/shared, ENG-143) so the machine/mailbox interview reaches the
+ *     SAME depth as the CLI request-formulator: it covers all seven sections
+ *     (problem, solution, impact, success metrics, target audience, technical
+ *     context, alternatives) rather than only the 3 required fields. The system
+ *     prompt is rendered from that definition (buildInterviewSystemPrompt), and
+ *     the completion object carries the required fields plus any optional ones
+ *     the employee provided; there is no shortened variant left in this path.
+ *
+ * Turn relay: the mailbox has no "wait for a new turn" primitive for a
+ * machine caller (next-job's "resume active job" path returns immediately
+ * with whatever the job's current state is — see jobService.ts tryClaimOnce).
+ * So after posting an agent question, this module polls next-job on a short
+ * client-side interval until it observes a new trailing user turn, with a
+ * bounded overall timeout so an abandoned interview eventually fails cleanly
+ * instead of polling forever.
+ */
+import Anthropic from '@anthropic-ai/sdk';
+import { spawn } from 'node:child_process';
+import { type PxpipeRouting, type InterviewSeedPayload } from '@mycompbox/shared';
+import type { MailboxAttachment, MailboxClient, MailboxJob, MailboxJobTurn } from './mailbox-client.js';
+/**
+ * pxpipe routing (ENG-136). Anthropic SDK options carrying the proxy `baseURL`
+ * when routed through pxpipe, otherwise just the API key. Pure — unit tested.
+ */
+export declare function anthropicClientOptions(apiKey: string, routing: PxpipeRouting): {
+    apiKey: string;
+    baseURL?: string;
+};
+/**
+ * pxpipe routing (ENG-136). Child-process env carrying `ANTHROPIC_BASE_URL` when
+ * routed through pxpipe, otherwise the base env unchanged. Pure — unit tested.
+ */
+export declare function claudeSpawnEnv(base: NodeJS.ProcessEnv, routing: PxpipeRouting): NodeJS.ProcessEnv;
+/** A warning sink; defaults to stderr so a skipped attachment is visible in daemon logs. */
+export type WarnFn = (message: string) => void;
+/** Whether a MIME type is a supported (vision-capable) image type. Pure. */
+export declare function isSupportedImageMediaType(mime: string): boolean;
+/**
+ * Select the image attachments to actually fetch for a turn: supported image
+ * types only, capped by count and by cumulative DECLARED bytes (the real fetched
+ * bytes are re-capped in {@link fetchImageBlocks}). Non-images and over-budget
+ * entries are dropped. Pure — no network, no warnings.
+ */
+export declare function selectImageAttachments(attachments: MailboxAttachment[] | undefined): MailboxAttachment[];
+/** Count of supported image attachments on a turn (for the subscription note). Pure. */
+export declare function imageAttachmentCount(attachments: MailboxAttachment[] | undefined): number;
+/**
+ * Fetch the bytes for each already-selected attachment and turn them into
+ * Anthropic base64 image blocks. A broken/unreachable/empty attachment is
+ * SKIPPED with a warning — never fatal (requirement 5). Cumulative FETCHED bytes
+ * are capped so a lying `sizeBytes` can't blow the budget. `fetchImpl` is
+ * injectable for tests.
+ */
+export declare function fetchImageBlocks(attachments: MailboxAttachment[], warn?: WarnFn, fetchImpl?: typeof fetch): Promise<Anthropic.ImageBlockParam[]>;
+/**
+ * Assemble a user-message `content` for API mode: the raw string when there are
+ * no image blocks (byte-identical to the pre-ENG-153 behavior), otherwise an
+ * ordered `[...images, {text}]` content array (images first — Anthropic's
+ * recommended ordering for a vision prompt). Pure.
+ */
+export declare function buildApiUserContent(text: string, imageBlocks: Anthropic.ImageBlockParam[]): string | Anthropic.ContentBlockParam[];
+/**
+ * The `content` to push for a USER turn in API mode: fetches + attaches image
+ * blocks when the turn has image attachments, otherwise returns the plain text
+ * unchanged (no fetch, no warning — a turn with no attachments behaves exactly
+ * as today). `fetchImpl` is injectable for tests.
+ */
+export declare function apiUserTurnContent(turn: Pick<MailboxJobTurn, 'content' | 'attachments'>, warn?: WarnFn, fetchImpl?: typeof fetch): Promise<string | Anthropic.ContentBlockParam[]>;
+/**
+ * Subscription-mode (A4) degradation: append an explicit `[N image(s)
+ * attached]` note to the prompt text when the turn carries images (the local
+ * `claude -p` invocation has no inline-image channel, so vision is deferred to
+ * API mode). Returns the text UNCHANGED when there are no images, so a
+ * no-attachment turn is byte-identical to today. Pure.
+ */
+export declare function appendAttachmentNote(text: string, imageCount: number): string;
+export interface InvokeResult {
+    status: 'done' | 'failed';
+    result: Record<string, unknown>;
+}
+export interface EpicRequestDraft {
+    title: string;
+    problemStatement: string;
+    proposedSolution: string;
+    impactAssessment: string;
+    /**
+     * Plain-text markdown description synthesized by the model from the whole
+     * conversation — sent as the Epic Request's top-level `description` field
+     * (distinct from structuredDesc). REQUIRED: compliance-validation's
+     * ER_NO_DESCRIPTION rule (see .github/skills/internal/compliance-validation)
+     * fails critical if this is empty, regardless of how good structuredDesc
+     * is — verified live: an epic request created with only the 3 structured
+     * fields populated (no description) scored 12/100, critical-fail, on
+     * ER_NO_DESCRIPTION, ER_NO_PROBLEM_STATEMENT, and ER_NO_IMPACT_ASSESSMENT
+     * (the latter two because a single terse summary sentence fell just under
+     * the rubric's 50-word/30-word minimums — 47 and 25 words respectively).
+     */
+    description: string;
+    successMetrics?: string;
+    targetAudience?: string;
+    alternatives?: string;
+    dependencies?: string;
+    estimatedEffort?: string;
+}
+/**
+ * ENG-149 — parse a claimed job's `payload` as an interview-CONTINUATION seed
+ * (the ENG-148 dispatch shape), or return null for a normal fresh-start job
+ * (empty/absent payload). Validates the two ids are present; tolerates a
+ * missing/malformed `priorTranscript` by defaulting it to empty (the daemon
+ * still seeds context from the job's own `turns`, which ENG-148 copies into
+ * jobB). Exported for unit testing.
+ */
+export declare function parseSeedPayload(payload: unknown): InterviewSeedPayload | null;
+/**
+ * ENG-149 — the interview system prompt for a job: a seed-aware RESUME/ENRICH
+ * prompt for a continuation, otherwise the module-level fresh-start prompt.
+ */
+export declare function resolveSystemPrompt(seed: InterviewSeedPayload | null): string;
+/** The server-computed compliance summary the daemon gates the interview on. */
+export interface ComplianceSummary {
+    overall: number;
+    tier: 'pass' | 'advisory' | 'critical-fail';
+    issues: {
+        message: string;
+        tier: 'critical' | 'advisory';
+    }[];
+}
+/**
+ * Submit the current draft and read back the server-computed compliance score
+ * (bug #2 — audit-aware finishing). Fresh interview: the FIRST submit
+ * (`currentErId === null`) CREATES the ER; every later quality round UPDATES that
+ * same ER. Continuation: `currentErId` is the target ER from the start, so every
+ * submit UPDATES it in place (never a duplicate). Returns the ER id plus its
+ * compliance summary (null when the server attaches none).
+ */
+export declare function submitAndScore(ctx: {
+    apiBaseUrl: string;
+    userApiToken: string;
+}, currentErId: string | null, draft: EpicRequestDraft): Promise<{
+    erId: string;
+    compliance: ComplianceSummary | null;
+}>;
+/**
+ * Whether the request is good enough to finish. Reaching the target tier
+ * (`pass` = >=90 with no criticals) finishes early. A null score is fail-open:
+ * the gate can only act on a score the server actually returned.
+ */
+export declare function meetsComplianceTarget(compliance: ComplianceSummary | null): boolean;
+/**
+ * Turn a failing compliance score into a corrective instruction: fix by
+ * EXPANDING what's already known where possible, otherwise ask ONE question.
+ */
+export declare function buildAuditFeedback(compliance: ComplianceSummary): string;
+/**
+ * Extracts a completion draft from a model reply, tolerant of the common LLM
+ * JSON defects (fenced/plain/bare, trailing commas, and — the big one — literal
+ * newlines inside string values). Returns null only when no repair strategy
+ * yields a VALID {@link isEpicRequestDraft} object.
+ */
+export declare function extractCompletionJson(text: string): EpicRequestDraft | null;
+/**
+ * True when a reply is clearly an ATTEMPT to finish (a JSON completion) even if
+ * it failed to parse/validate — so the daemon can correct the model instead of
+ * relaying raw JSON to the employee as if it were a question (which loops).
+ */
+export declare function looksLikeCompletionAttempt(text: string): boolean;
+/**
+ * Runs the epic_request interview end-to-end: converses with the user via
+ * post-turn/next-job until it has a title + the 3 required structured-desc
+ * fields, then creates a personal-scope epic request via the real API
+ * (POST /api/v1/me/epic-requests) using the user's own stored token.
+ */
+export declare function invokeEpicRequestViaApi(job: MailboxJob, ctx: {
+    mailboxClient: MailboxClient;
+    machineToken: string;
+    apiBaseUrl: string;
+    userApiToken: string;
+    anthropicApiKey: string;
+}): Promise<InvokeResult>;
+/**
+ * Runs the epic_request interview end-to-end using the local `claude` CLI
+ * (the employee's own Claude Code login) instead of the Anthropic API.
+ * Mirrors invokeEpicRequestViaApi's turn loop and completion handling
+ * exactly — only how a single assistant turn is produced differs.
+ */
+export declare function invokeEpicRequestViaSubscription(job: MailboxJob, ctx: {
+    mailboxClient: MailboxClient;
+    machineToken: string;
+    apiBaseUrl: string;
+    userApiToken: string;
+}): Promise<InvokeResult>;
+/**
+ * Per-run wall-clock budget for the headless planner child (H4). Deliberately
+ * FAR larger than the interview's {@link CLAUDE_CLI_TURN_TIMEOUT_MS} (~2 min):
+ * a full 5-stage `--from-request` planning pipeline (analyze → decompose →
+ * detail → evaluate → verify, with many MCP calls and self-correction passes)
+ * routinely runs many minutes. 30 minutes bounds a hung run without cutting a
+ * legitimate one short.
+ */
+export declare const PLANNER_RUN_TIMEOUT_MS: number;
+/**
+ * Cadence for the keep-alive heartbeat fired WHILE the planner child runs (H4).
+ * The daemon's own 60s runtime heartbeat lives in the poll loop, which is
+ * blocked for the entire (long) duration of this job — so without an
+ * independent heartbeat here the machine's `lastSeenAt` goes stale and central
+ * flips it offline mid-run. This interval pings on its own timer until the
+ * child exits.
+ */
+export declare const PLANNER_HEARTBEAT_INTERVAL_MS: number;
+/**
+ * Build the `claude` argv for a headless planner run (H1). Pure + exported so a
+ * unit test can assert the exact command shape: the `@planner` routing prompt,
+ * an unattended permission mode, and — critically — the ABSENCE of `--tools ""`
+ * and `--safe-mode` (which would strip the MCP tools and @agent routing the
+ * planner depends on). No `--system-prompt` (the persona comes from CLAUDE.md
+ * routing) and no `--model` override (planning is reasoning-heavy; let the
+ * account default apply — pxpipe routing rides on ANTHROPIC_BASE_URL, not the
+ * model name).
+ */
+export declare function buildPlannerArgs(epicRequestId: string): string[];
+/** Actionable failure when no project repo is configured (mirrors ENG-135's not-found copy). */
+export declare function projectDirNotConfiguredMessage(): string;
+/** Actionable failure when the configured path is not a git repository. */
+export declare function projectDirNotGitRepoMessage(dir: string): string;
+export interface NeedsReviewResult {
+    needsReview: boolean;
+    /** The parsed marker payload, when one was recovered. */
+    marker?: Record<string, unknown>;
+}
+/**
+ * Detect a planner (or orchestrator-compatible) "needs human review" outcome in
+ * the child's output (ENG-164-4). Matches BOTH markers so detection stays
+ * compatible across the pipeline:
+ *
+ *   - Planner (ENG-161): a JSON object whose `outcome` is `"needs-human-review"`
+ *     (emitted as the final output when EVALUATE lands advisory/critical-fail in
+ *     non-interactive mode) — see `.github/agents/claude/planner.md` Stage 4.
+ *   - Orchestrator (ENG-162): a `COMPBOX_NEEDS_HUMAN_REVIEW {json}` prefixed
+ *     final line — matched by prefix, exactly as ENG-165 will parse it.
+ *
+ * Pure + exported for unit testing. Fail-safe: if the phrase is present but no
+ * clean JSON object can be isolated, it still reports `needsReview: true` (better
+ * to surface for review than to mis-report success).
+ */
+export declare function detectNeedsHumanReview(output: string): NeedsReviewResult;
+export interface StartExecutionPlanCtx {
+    mailboxClient: MailboxClient;
+    machineToken: string;
+    jobId: string;
+    apiBaseUrl: string;
+    userApiToken: string;
+    /** The approved Epic Request to plan from (payload.epicRequestId). */
+    epicRequestId: string;
+    /** Resolved project repo dir (may be undefined/invalid — validated here). */
+    projectDir: string | undefined;
+}
+export interface StartExecutionPlanDeps {
+    /** Injectable child spawner (defaults to node's `spawn`) — tests never spawn a real `claude`. */
+    spawnImpl?: typeof spawn;
+    /** Injectable fetch for the converted-epic lookup (defaults to global fetch). */
+    fetchImpl?: typeof fetch;
+    /** Injectable git-repo predicate (defaults to a `.git` existence check via config-store). */
+    isGitRepo?: (dir: string) => boolean;
+    /** Injectable pxpipe routing resolver (defaults to the shared resolver). */
+    resolveRoutingImpl?: () => Promise<PxpipeRouting>;
+    /** Best-effort keep-alive fired every {@link PLANNER_HEARTBEAT_INTERVAL_MS} while the child runs (H4). */
+    heartbeat?: () => void | Promise<void>;
+    heartbeatIntervalMs?: number;
+    timeoutMs?: number;
+}
+/**
+ * Run the planner headless for a `start_execution`/`plan` job (ENG-164).
+ *
+ * Flow: validate the project repo → spawn the local `claude` CLI in that repo
+ * cwd with MCP + CLAUDE.md routing enabled (H1: unattended permission mode, NOT
+ * `--tools ""`/`--safe-mode`) running `@planner --from-request <ER> --gates=auto
+ * --non-interactive` with `COMPBOX_NONINTERACTIVE=1` and pxpipe's
+ * `ANTHROPIC_BASE_URL` preserved → keep the machine alive with a periodic
+ * heartbeat during the long run (H4) → relay a start + final turn to the
+ * mailbox → on a clean run resolve the produced epic id from the ER's
+ * `convertedEpicId` and complete `{ epicId }`; on a needs-review outcome or a
+ * non-zero exit, fail with a result the web failure banner can display.
+ */
+export declare function invokeStartExecutionPlan(ctx: StartExecutionPlanCtx, deps?: StartExecutionPlanDeps): Promise<InvokeResult>;
+/**
+ * Per-run wall-clock budget for the headless orchestrator child (H4). Executing
+ * a full epic (every phase, every feature-worker, reviewer + QA + security
+ * passes, worktree merges) runs FAR longer than a planning pass, so this is set
+ * well above {@link PLANNER_RUN_TIMEOUT_MS} (30 min). Three hours bounds a hung
+ * run without cutting a legitimate multi-feature epic short.
+ */
+export declare const ORCHESTRATOR_RUN_TIMEOUT_MS: number;
+/** Keep-alive cadence while the orchestrator child runs (H4) — same as the planner path. */
+export declare const ORCHESTRATOR_HEARTBEAT_INTERVAL_MS: number;
+/**
+ * Build the `claude` argv for a headless orchestrator run (H1). Pure + exported
+ * so a unit test can assert the exact command shape: the `@orchestrator execute
+ * epic <id> --non-interactive` routing prompt, an unattended permission mode,
+ * and the ABSENCE of `--tools ""`/`--safe-mode` (which would strip the MCP tools
+ * + @agent routing the orchestrator depends on). No `--system-prompt` (the
+ * persona comes from CLAUDE.md routing) and no `--model` override (execution is
+ * reasoning-heavy; the account default applies — pxpipe rides on
+ * ANTHROPIC_BASE_URL, not the model name). `--non-interactive` is what engages
+ * the agent-side serial-in-process fallback (H3).
+ */
+export declare function buildOrchestratorArgs(epicId: string): string[];
+/** Actionable failure when the configured project path is not a git repository. */
+export declare function orchestrateNotGitRepoMessage(dir: string): string;
+/** Actionable failure when `git worktree` is unavailable in the project dir. */
+export declare function worktreeUnavailableMessage(dir: string): string;
+/** Actionable failure when no JS test toolchain (package manager) is reachable. */
+export declare function toolchainMissingMessage(dir: string): string;
+/**
+ * Default precondition: `git worktree list` succeeds in `dir` (proves git is
+ * installed AND the directory is a worktree-capable checkout). Uses the same
+ * augmented child PATH as the spawn below so a launchd/GUI-spawned daemon (whose
+ * inherited PATH often lacks the git install dir) resolves `git` the same way
+ * the real run will. Injectable in tests — never shells out there.
+ */
+export declare function defaultWorktreeCapable(dir: string): boolean;
+/**
+ * Default precondition: a JS test toolchain is reachable. `node` is inherently
+ * present (this daemon runs on it), so the real check is that a package manager
+ * (pnpm preferred, npm fallback) resolves on the augmented PATH — the
+ * orchestrator's phase verification (install/build/typecheck/test) needs one.
+ * Injectable in tests — never shells out there.
+ */
+export declare function defaultToolchainPresent(_dir: string): boolean;
+export interface StartExecutionOrchestrateCtx {
+    mailboxClient: MailboxClient;
+    machineToken: string;
+    jobId: string;
+    /** The existing epic to execute (payload.epicId). */
+    epicId: string;
+    /** Resolved project repo dir (may be undefined/invalid — validated here). */
+    projectDir: string | undefined;
+}
+export interface StartExecutionOrchestrateDeps {
+    /** Injectable child spawner (defaults to node's `spawn`) — tests never spawn a real `claude`. */
+    spawnImpl?: typeof spawn;
+    /** Injectable git-repo predicate (defaults to a `.git` existence check via config-store). */
+    isGitRepo?: (dir: string) => boolean;
+    /** Injectable git-worktree-capability predicate (defaults to `git worktree list`). */
+    worktreeCapable?: (dir: string) => boolean;
+    /** Injectable test-toolchain predicate (defaults to a package-manager probe). */
+    toolchainPresent?: (dir: string) => boolean;
+    /** Injectable pxpipe routing resolver (defaults to the shared resolver). */
+    resolveRoutingImpl?: () => Promise<PxpipeRouting>;
+    /** Best-effort keep-alive fired every {@link ORCHESTRATOR_HEARTBEAT_INTERVAL_MS} while the child runs (H4). */
+    heartbeat?: () => void | Promise<void>;
+    heartbeatIntervalMs?: number;
+    timeoutMs?: number;
+}
+/**
+ * Turn a detected needs-review marker into the job result the web renders
+ * (ENG-165-3). Names the halting gate (and its reason/phase/feature when the
+ * orchestrator supplied them) so the failure banner is specific rather than a
+ * generic "needs review". Pure — exported for unit testing.
+ */
+export declare function buildOrchestrateNeedsReviewResult(epicId: string, marker: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * Run the orchestrator headless for a `start_execution`/`orchestrate` job
+ * (ENG-165).
+ *
+ * Flow: validate the project repo (git repo → worktree-capable → test toolchain
+ * present) → spawn the local `claude` CLI in that repo cwd with ENG-164's MCP +
+ * CLAUDE.md-routing profile (H1: unattended permission mode, NOT
+ * `--tools ""`/`--safe-mode`) running `@orchestrator execute epic <epicId>
+ * --non-interactive` with `COMPBOX_NONINTERACTIVE=1` (H3 signal) and pxpipe's
+ * `ANTHROPIC_BASE_URL` preserved → keep the machine alive with a periodic
+ * heartbeat during the long run (H4) → relay a start + final turn to the mailbox
+ * → on a needs-review HARD-gate marker complete as a needs-review failure naming
+ * the gate (ENG-165-3); on a non-zero exit fail with the reason; on a clean run
+ * complete `{ epicId }`. Never hangs.
+ */
+export declare function invokeStartExecutionOrchestrate(ctx: StartExecutionOrchestrateCtx, deps?: StartExecutionOrchestrateDeps): Promise<InvokeResult>;
+//# sourceMappingURL=agent-invoker.d.ts.map

package/utils/agent-invoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-invoker.d.ts","sourceRoot":"","sources":["../../src/utils/agent-invoker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAa,MAAM,oBAAoB,CAAC;AAItD,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,cAAc,EACf,MAAM,qBAAqB,CAAC;AA0B7B;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,GACrB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAItC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,OAAO,EAAE,aAAa,GACrB,MAAM,CAAC,UAAU,CAInB;AAyBD,4FAA4F;AAC5F,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAiB/C,4EAA4E;AAC5E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,iBAAiB,EAAE,GAAG,SAAS,GAC3C,iBAAiB,EAAE,CAarB;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,iBAAiB,EAAE,GAAG,SAAS,GAAG,MAAM,CAGzF;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,iBAAiB,EAAE,EAChC,IAAI,GAAE,MAAoB,EAC1B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,CAgCtC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,SAAS,CAAC,eAAe,EAAE,GACvC,MAAM,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAGxC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,aAAa,CAAC,EACrD,IAAI,GAAE,MAAoB,EAC1B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAKjD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAK7E;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,MAAM,CAAC;IAMpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAUD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,oBAAoB,GAAG,IAAI,CAuB9E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAAG,MAAM,CAM7E;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,eAAe,CAAC;IAC5C,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAA;KAAE,EAAE,CAAC;CAC9D;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACjD,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAA;CAAE,CAAC,CAYjE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAEnF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAaxE;AA+GD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAiB3E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUhE;AAqCD;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,UAAU,EACf,GAAG,EAAE;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAAC,YAAY,CAAC,CAmIvB;AA4KD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,GAAG,EAAE,UAAU,EACf,GAAG,EAAE;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,YAAY,CAAC,CA2HvB;AAcD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,QAAkB,CAAC;AAEtD;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAQxD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAUhE;AAED,gGAAgG;AAChG,wBAAgB,8BAA8B,IAAI,MAAM,CAQvD;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO/D;AAwCD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAcxE;AAuBD,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,iGAAiG;IACjG,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,0GAA0G;IAC1G,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,qBAAqB,EAC1B,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,YAAY,CAAC,CA4KvB;AA+BD;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,QAAsB,CAAC;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,kCAAkC,QAAgC,CAAC;AAKhF;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9D;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOhE;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa7D;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iGAAiG;IACjG,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,sFAAsF;IACtF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,+GAA+G;IAC/G,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,+BAA+B,CACnD,GAAG,EAAE,4BAA4B,EACjC,IAAI,GAAE,6BAAkC,GACvC,OAAO,CAAC,YAAY,CAAC,CA+JvB"}