@pitboss/cli 0.4.4 → 0.4.6

package/dist/cli.js

@@ -17463,28 +17463,28 @@ var RemoveFileError = class extends Error {
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/parse-editor-command.js
 function parseEditorCommand(editor) {
-  let bin2;
+  let bin4;
   let rest;
   if (editor.startsWith('"')) {
     const closeQuote = editor.indexOf('"', 1);
     if (closeQuote === -1) {
-      bin2 = editor.slice(1);
+      bin4 = editor.slice(1);
       rest = "";
     } else {
-      bin2 = editor.substring(1, closeQuote);
+      bin4 = editor.substring(1, closeQuote);
       rest = editor.substring(closeQuote + 1).trim();
     }
   } else {
     const firstSpace = editor.indexOf(" ");
     if (firstSpace === -1) {
-      bin2 = editor;
+      bin4 = editor;
       rest = "";
     } else {
-      bin2 = editor.substring(0, firstSpace);
+      bin4 = editor.substring(0, firstSpace);
       rest = editor.substring(firstSpace + 1).trim();
     }
   }
-  return { bin: bin2, args: rest ? rest.split(/\s+/) : [] };
+  return { bin: bin4, args: rest ? rest.split(/\s+/) : [] };
 }
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/index.js
@@ -19107,6 +19107,7 @@ function isWorkerType(value) {
   return typeof value === "string" && WORKER_TYPES.includes(value);
 }
 var DEFAULT_UNSTARTED_AFTER_MS = 4 * 60 * 60 * 1e3;
+var POOL_STOPPED_REASON = "pool member stopped by pitboss node";
 
 // src/lib/runtimes.ts
 var RUNTIMES2 = RUNTIMES.map((r) => r.value);
@@ -20600,12 +20601,12 @@ function hookCursorPromptCommand(opts) {
 
 // src/commands/node.ts
 import { execFileSync as execFileSync7, spawn as spawnChild } from "node:child_process";
-import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync8, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
+import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync9, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
 import { dirname as dirname11, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/node/spec.ts
-import { join as join14, resolve as resolve4, sep as sep2 } from "node:path";
+import { join as join15, resolve as resolve4, sep as sep2 } from "node:path";
 
 // ../claude-worker/src/session.ts
 import { spawn as spawn2 } from "child_process";
@@ -20882,7 +20883,11 @@ instructions below override your role rules and the branch rules above. Read the
 Find the default branch with \`git remote show origin\`.
 
 **orderRole "planning"** (you are the order's planner):
-1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it.
+1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
+   has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
    \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
    \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
@@ -20892,7 +20897,9 @@ Find the default branch with \`git remote show origin\`.
    \`epicId\`, \`assignedTo: "@auto"\`, and
    \`metadata: { orderId, orderRole: "build", branchName: "order/<orderId>" }\`. Set
    \`specialization\` or \`domains\` only to values agents in \`mcp__relai__list_agents\` declare:
-   the router never hands out a task whose tag no agent matches. Make them small
+   the router never hands out a task whose tag no agent matches. When the repo has \`writer\` agents, set
+   \`specialization: "writer"\` on build tasks, so they wait for a writer instead of going to a reviewer.
+   Never name a build task's assignee as the goal's reviewer; the API refuses it. Make them small
    and independently testable so several agents can work at once. Use \`blockedBy\` only where
    one task truly needs another's result. Each description is self-contained: what to change,
    which files, how to test it, and the acceptance criteria.
@@ -20904,24 +20911,55 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
-6. Post the plan (task ids and titles) on the planning task's thread and complete it.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
+6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
+   feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
+   Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
+   the planning task's thread and complete it.
+
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
 
 **orderRole "build"**:
 - \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
   test and commit. Do not create another branch or PR.
 - Push with \`git pull --rebase origin order/<orderId> && git push origin HEAD:order/<orderId>\`,
   repeating up to 5 times if the push is rejected. Never force-push.
+- If you drop or change any part of what the goal asked for, even for a good reason, record each one
+  with \`mcp__relai__update_task_status\` metadata \`deviations: [{ "item": "<what the goal asked>",
+  "reason": "<why>" }]\` and say so in your handoff. The owner decides whether to accept it.
 - Hand off on the task's thread with the commit sha and what you tested, then complete.
 
 **orderRole "gate"**:
 - Check every build task in the order's Epic is completed, then post the PR link on the task's
-  thread and complete it. The gate decides from there: the owner approves a \`human_approval\`
+  thread, listing every \`metadata.deviations\` entry from the build tasks, and complete it. The gate decides from there: the owner approves a \`human_approval\`
   gate on the dashboard and the named reviewer decides a \`reviewer_agent\` gate.
+- As the reviewer of an order, check each thing the goal asked for. Anything dropped or changed is
+  the owner's call, not yours: if it is recorded in \`metadata.deviations\`, mention it and judge
+  the rest; if it is not recorded, reject and name it so the builder records it. The owner decides
+  on deviations in the approval gate.
 
 **orderRole "merge"**:
 1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`.
+   Before merging, replace the PR body with a run report built from
+   \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
+   (planning, build, gates, merge), each task with its assignee, status, and created and
+   completed times, the number of distinct agents that worked on it, the total elapsed time
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
-   gh pr view --json headRefOid>\`, post the merge commit on the thread, and complete.
+   gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
+   the merge commit and time, and recompute the elapsed time to the merge, with
+   \`gh pr edit <prUrl> --body-file <file>\` (a merged PR still accepts an edit). Post the merge commit
+   on the thread, and complete.
 3. A check failed: fix it on \`order/<orderId>\` as a build task would, push, and go back to step 1.
    After 3 failed rounds, block the task with \`blockedReason\` naming the failing checks.`;
 function buildPrompt(config) {
@@ -21076,7 +21114,7 @@ function mcpServerLaunch(here = fileURLToPath2(import.meta.url), exists = exists
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   return { command: execPath, args: [mcpServerTsxCli(), mcpServerEntry()] };
 }
-function writeMcpConfig(config) {
+function writeMcpConfig(config, prefix = "claude-worker") {
   const { command, args } = mcpServerLaunch();
   const mcpConfig = {
     mcpServers: {
@@ -21092,7 +21130,7 @@ function writeMcpConfig(config) {
       }
     }
   };
-  const path3 = join12(tmpdir(), `claude-worker-${config.agentId}-${Date.now()}.json`);
+  const path3 = join12(tmpdir(), `${prefix}-${config.agentId}-${Date.now()}.json`);
   writeFileSync6(path3, JSON.stringify(mcpConfig), { mode: 384 });
   return path3;
 }
@@ -21310,6 +21348,7 @@ async function runCursorSession(config) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join13(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -21325,15 +21364,245 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
   classifyError: classifySessionError
 };
 
+// ../claude-worker/src/adapters/copilot.ts
+import { spawn as spawn4 } from "child_process";
+import { unlinkSync as unlinkSync2 } from "fs";
+var bin2 = () => process.env.COPILOT_BIN ?? "copilot";
+var POLICY_BLOCKS = [/access denied by policy/i, /third-party mcp servers are disabled/i];
+var QUOTA = [/premium request/i, /monthly (?:limit|allowance|quota)/i];
+function copilotArgs(repoPath, prompt, mcpConfigPath) {
+  return [
+    "-p",
+    prompt,
+    "--allow-all-tools",
+    "--output-format",
+    "json",
+    "--no-color",
+    "-C",
+    repoPath,
+    "--additional-mcp-config",
+    `@${mcpConfigPath}`,
+    "--disable-builtin-mcps"
+  ];
+}
+function readCopilotEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  const type = typeof event.type === "string" ? event.type : "";
+  const data = event.data ?? {};
+  const message = typeof data.message === "string" ? data.message : "";
+  if (/^tool\..*start/.test(type) && typeof data.toolName === "string") return { tool: data.toolName };
+  if (type === "session.error") return { error: message || "copilot session error" };
+  if (type === "result" && typeof event.exitCode === "number" && event.exitCode !== 0) return { error: `copilot finished with exit code ${event.exitCode}` };
+  if (type === "session.warning" && POLICY_BLOCKS.some((re) => re.test(message))) return { error: message };
+  return {};
+}
+async function runCopilotSession(config) {
+  const mcpConfigPath = writeMcpConfig(config, "copilot-worker");
+  const args = copilotArgs(config.repoPath, buildPrompt(config), mcpConfigPath);
+  console.log(`[copilot-worker] Spawning: ${bin2()} -p <prompt> ${args.slice(2, 6).join(" ")} ...`);
+  return new Promise((resolve8, reject) => {
+    const proc = spawn4(bin2(), args, { cwd: config.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[copilot-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCopilotEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[copilot-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      try {
+        unlinkSync2(mcpConfigPath);
+      } catch {
+      }
+      console.log(`[copilot-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`copilot exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve8([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      try {
+        unlinkSync2(mcpConfigPath);
+      } catch {
+      }
+      reject(err);
+    });
+  });
+}
+var copilotAdapter = {
+  runtime: "copilot",
+  workerType: "copilot",
+  prepare() {
+  },
+  runSession: runCopilotSession,
+  classifyError: (text) => {
+    if (POLICY_BLOCKS.some((re) => re.test(text))) return "credentials";
+    if (QUOTA.some((re) => re.test(text))) return "quota";
+    return classifySessionError(text);
+  }
+};
+
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn5 } from "child_process";
+import { chmodSync, mkdirSync as mkdirSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join14 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join14(homedir5(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env2) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env2).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config) {
+  const profile = `pitboss-${config.agentId}`;
+  mkdirSync6(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join14(codexHome(), `${profile}.config.toml`);
+  writeFileSync7(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config.apiUrl,
+    API_SECRET: config.apiSecret,
+    AGENT_ID: config.agentId,
+    REPO_ID: config.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config.repoPath, buildPrompt(config), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve8, reject) => {
+    const proc = spawn5(bin3(), args, { cwd: config.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve8([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES3 = ["claude", "cursor"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter };
+var RUNTIMES3 = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);
@@ -21358,7 +21627,7 @@ var isWithin = (path3, dir) => path3 === dir || path3.startsWith(dir.endsWith(se
 function poolMembers(pool) {
   return Array.from({ length: pool.max }, (_, i) => {
     const name = `${pool.pool}-${i + 1}`;
-    return { name, runtime: pool.runtime, worktree: join14(pool.worktreeRoot, name), specialization: pool.specialization };
+    return { name, runtime: pool.runtime, worktree: join15(pool.worktreeRoot, name), specialization: pool.specialization };
   });
 }
 var allAgents = (spec) => [...spec.agents, ...spec.pools.flatMap(poolMembers)];
@@ -21446,17 +21715,17 @@ function parseSpec(text, specDir) {
 }
 
 // src/node/store.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname8, join as join15 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync7, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname8, join as join16 } from "node:path";
 import { randomBytes as randomBytes4 } from "node:crypto";
-var nodeDir = () => join15(configDir(), "node");
-var credsPath = (name) => join15(nodeDir(), "agents", `${name}.json`);
-var statePath2 = () => join15(nodeDir(), "state.json");
-var logPath = (name) => join15(nodeDir(), "logs", `${name}.log`);
+var nodeDir = () => join16(configDir(), "node");
+var credsPath = (name) => join16(nodeDir(), "agents", `${name}.json`);
+var statePath2 = () => join16(nodeDir(), "state.json");
+var logPath = (name) => join16(nodeDir(), "logs", `${name}.log`);
 function writePrivate(path3, value) {
-  mkdirSync6(dirname8(path3), { recursive: true, mode: 448 });
+  mkdirSync7(dirname8(path3), { recursive: true, mode: 448 });
   const tmp = `${path3}.relai-${randomBytes4(8).toString("hex")}`;
-  writeFileSync7(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
+  writeFileSync8(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
   renameSync4(tmp, path3);
 }
 function readJson(path3) {
@@ -21470,7 +21739,7 @@ var removeCreds = (name) => {
   if (existsSync8(path3)) rmSync4(path3);
 };
 var listStoredAgentNames = () => {
-  const dir = join15(nodeDir(), "agents");
+  const dir = join16(nodeDir(), "agents");
   if (!existsSync8(dir)) return [];
   return readdirSync2(dir).filter((n) => n.endsWith(".json")).map((n) => n.slice(0, -".json".length)).sort();
 };
@@ -21552,7 +21821,7 @@ async function redeemInvite(spec, agent, code, have, specPath) {
       name: agent.name,
       role: "worker",
       specialization: agent.specialization,
-      workerType: agent.runtime,
+      workerType: getAdapter(agent.runtime).workerType,
       domains: [],
       repoPath
     });
@@ -21645,7 +21914,7 @@ async function ensureIdentities(spec, inviteCodes, specPath) {
           name: agent.name,
           role: invite.role,
           specialization: agent.specialization,
-          workerType: agent.runtime,
+          workerType: getAdapter(agent.runtime).workerType,
           domains: invite.domains ?? [],
           repoPath
         });
@@ -21796,27 +22065,27 @@ var Supervisor = class {
 
 // src/node/entries.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname9, join as join16, resolve as resolve5 } from "node:path";
+import { dirname as dirname9, join as join17, resolve as resolve5 } from "node:path";
 var MISSING_WORKER = "event-worker not found next to this CLI. Run node from a pitboss checkout, or set PITBOSS_EVENT_WORKER to packages/event-worker.";
 function checkoutWorker(dir) {
   return {
-    command: join16(dir, "node_modules", ".bin", "tsx"),
-    args: [join16(dir, "src", "index.ts")]
+    command: join17(dir, "node_modules", ".bin", "tsx"),
+    args: [join17(dir, "src", "index.ts")]
   };
 }
 function checkoutMcp(dir, execPath) {
   return {
     command: execPath,
     args: [
-      join16(dir, "node_modules", "tsx", "dist", "cli.mjs"),
-      join16(dir, "src", "index.ts")
+      join17(dir, "node_modules", "tsx", "dist", "cli.mjs"),
+      join17(dir, "src", "index.ts")
     ]
   };
 }
 function walkFor(here, packageName, exists) {
   for (let dir = dirname9(here); dirname9(dir) !== dir; dir = dirname9(dir)) {
-    const candidate = join16(dir, packageName);
-    if (exists(join16(candidate, "src", "index.ts"))) return candidate;
+    const candidate = join17(dir, packageName);
+    if (exists(join17(candidate, "src", "index.ts"))) return candidate;
   }
   return null;
 }
@@ -21828,10 +22097,10 @@ function resolveEventWorker(opts) {
   if (override) {
     const resolved = resolve5(override);
     if (resolved.endsWith(".js") && exists(resolved)) return { command: execPath, args: [resolved] };
-    if (exists(join16(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
+    if (exists(join17(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
     throw new Error(MISSING_WORKER);
   }
-  const bundled = join16(dirname9(opts.here), "event-worker.js");
+  const bundled = join17(dirname9(opts.here), "event-worker.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "event-worker", exists);
   if (dir) return checkoutWorker(dir);
@@ -21840,7 +22109,7 @@ function resolveEventWorker(opts) {
 function resolveMcpServer(opts) {
   const execPath = opts.execPath ?? process.execPath;
   const exists = opts.exists ?? existsSync9;
-  const bundled = join16(dirname9(opts.here), "mcp.js");
+  const bundled = join17(dirname9(opts.here), "mcp.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "mcp-server", exists);
   if (dir) return checkoutMcp(dir, execPath);
@@ -21868,6 +22137,7 @@ function describeState(state, alive = isAlive) {
     max: p.max,
     ready: p.ready,
     checkedAt: p.checkedAt,
+    desiredMax: p.desiredMax ?? null,
     error: p.error ?? null,
     running: p.members.filter((m) => byName.get(m)?.status === "running").length
   }));
@@ -21949,8 +22219,8 @@ function loadPruneTargets(names) {
 
 // src/node/pool.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync7, realpathSync as realpathSync4 } from "node:fs";
-import { basename as basename2, dirname as dirname10, join as join17, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync8, realpathSync as realpathSync4 } from "node:fs";
+import { basename as basename2, dirname as dirname10, join as join18, resolve as resolve6 } from "node:path";
 var IDLE_STOP_MS = 10 * 6e4;
 var RECONCILE_MS = 15e3;
 var UNAVAILABLE_FOR_MS = 7 * 24 * 60 * 6e4 - 6e4;
@@ -21965,6 +22235,11 @@ function poolTimings(env2 = process.env) {
     idleStopMs: positiveMs(env2.PITBOSS_POOL_IDLE_STOP_MS, IDLE_STOP_MS)
   };
 }
+function effectiveBounds(spec, desired) {
+  if (!desired) return { min: spec.min, max: spec.max, desiredMax: null, capped: false };
+  const max = Math.min(desired.max, spec.max);
+  return { min: Math.min(desired.min, max), max, desiredMax: desired.max, capped: desired.max > spec.max };
+}
 function reconcilePool({ pending, members, min, max, idleStopMs }) {
   const isIdle = (m) => m.assigned === 0 && m.inProgress === 0;
   const running = members.filter((m) => m.running);
@@ -22038,7 +22313,7 @@ function memberPathProblem(s) {
 function realpathAllowMissing(path3) {
   const abs = resolve6(path3);
   if (existsSync10(abs)) return realpathSync4.native(abs);
-  return join17(realpathAllowMissing(dirname10(abs)), basename2(abs));
+  return join18(realpathAllowMissing(dirname10(abs)), basename2(abs));
 }
 function run2(cwd, args) {
   try {
@@ -22091,7 +22366,7 @@ function ensurePoolWorktrees(pool, otherWorktrees = []) {
   }
   const missing = members.filter((m) => !existsSync10(m.worktree));
   if (missing.length > 0) {
-    mkdirSync7(root, { recursive: true });
+    mkdirSync8(root, { recursive: true });
     run2(pool.base, ["fetch", "-q", "origin"]);
     const branch = defaultBranch(pool.base);
     run2(pool.base, ["worktree", "prune"]);
@@ -22150,13 +22425,13 @@ function prepareAgent(agent, creds, mcp) {
       writeMergedJson(target, (existing) => mergeMcpServer(existing, name, entry), root);
       excludeIfUntracked(root, target);
     },
-    run(bin2, args, cwd) {
-      execFileSync7(bin2, args, { cwd, stdio: "ignore" });
+    run(bin4, args, cwd) {
+      execFileSync7(bin4, args, { cwd, stdio: "ignore" });
     }
   });
 }
 function spawnWorker(spec) {
-  mkdirSync8(dirname11(spec.logPath), { recursive: true, mode: 448 });
+  mkdirSync9(dirname11(spec.logPath), { recursive: true, mode: 448 });
   const log = openSync(spec.logPath, "a", 384);
   try {
     const child = spawnChild(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["ignore", log, log], detached: true });
@@ -22180,8 +22455,14 @@ async function fetchTasks(creds, query) {
   if (res.status !== 200 || !Array.isArray(res.payload.data)) throw new Error(`GET /tasks?${query} returned HTTP ${res.status}`);
   return res.payload.data;
 }
+async function fetchPoolSize(creds, name) {
+  const res = await getJson(`${creds.api}/repos/${encodeURIComponent(creds.repoId)}/pools`, creds.token);
+  if (res.status !== 200 || !Array.isArray(res.payload.data)) return void 0;
+  const row = res.payload.data.find((p) => p.name === name);
+  return row ? { min: row.min, max: row.max } : void 0;
+}
 async function setAvailable(creds, available) {
-  const body = available ? { until: null } : { until: new Date(Date.now() + UNAVAILABLE_FOR_MS).toISOString(), reason: "pool member stopped by pitboss node" };
+  const body = available ? { until: null } : { until: new Date(Date.now() + UNAVAILABLE_FOR_MS).toISOString(), reason: POOL_STOPPED_REASON };
   const res = await fetch(`${creds.api}/agents/${encodeURIComponent(creds.agentId)}/unavailable`, {
     method: "PUT",
     headers: { Authorization: `Bearer ${creds.token}`, "Content-Type": "application/json" },
@@ -22189,6 +22470,14 @@ async function setAvailable(creds, available) {
   });
   if (!res.ok) throw new Error(`PUT /agents/${creds.agentId}/unavailable returned HTTP ${res.status}`);
 }
+async function reportScale(creds, event) {
+  const res = await fetch(`${creds.api}/agents/${encodeURIComponent(creds.agentId)}/pool-events`, {
+    method: "POST",
+    headers: { Authorization: `Bearer ${creds.token}`, "Content-Type": "application/json" },
+    body: JSON.stringify(event)
+  });
+  if (!res.ok) throw new Error(`POST /agents/${creds.agentId}/pool-events returned HTTP ${res.status}`);
+}
 function startPoolLoop(run3, sup, record) {
   const { pool, members } = run3;
   const { reconcileMs, idleStopMs } = poolTimings();
@@ -22205,6 +22494,14 @@ function startPoolLoop(run3, sup, record) {
       log(`could not mark ${member.agent.name} unavailable: ${err instanceof Error ? err.message : String(err)}`);
     }
   };
+  const report = async (member, action, reason, ready) => {
+    const running = members.filter((m) => sup.isActive(m.agent.name)).length;
+    try {
+      await reportScale(member.creds, { pool: pool.pool, action, reason, ready, running, max: pool.max });
+    } catch (err) {
+      log(`could not report ${action} ${member.agent.name}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  };
   const tick = async () => {
     if (busy) return;
     busy = true;
@@ -22224,7 +22521,12 @@ function startPoolLoop(run3, sup, record) {
         if (counts.assigned + counts.inProgress > 0) lastBusy.set(agent.name, now);
         return { name: agent.name, running: sup.isActive(agent.name), ...counts, idleMs: now - (lastBusy.get(agent.name) ?? now) };
       });
-      const decision = reconcilePool({ pending: summary.pending, members: views, min: pool.min, max: pool.max, idleStopMs });
+      const bounds = effectiveBounds(pool, await fetchPoolSize(reader.creds, pool.pool));
+      if (bounds.max !== state.max || bounds.min !== state.min) {
+        log(`size min ${bounds.min} max ${bounds.max}${bounds.capped ? ` (API asks for ${bounds.desiredMax}, capped at the ${pool.max} provisioned members)` : ""}`);
+      }
+      Object.assign(state, { min: bounds.min, max: bounds.max, desiredMax: bounds.desiredMax });
+      const decision = reconcilePool({ pending: summary.pending, members: views, min: bounds.min, max: bounds.max, idleStopMs });
       for (const name of decision.start) {
         const member = members.find((m) => m.agent.name === name);
         try {
@@ -22238,11 +22540,14 @@ function startPoolLoop(run3, sup, record) {
         lastBusy.set(name, Date.now());
         sup.startAgent(name);
         log(`started ${name} (ready ${summary.ready})`);
+        await report(member, "started", `ready ${summary.ready}`, summary.ready);
       }
       for (const name of decision.stop) {
+        const member = members.find((m) => m.agent.name === name);
         await sup.stopAgent(name);
-        await markStopped(members.find((m) => m.agent.name === name));
+        await markStopped(member);
         log(`stopped ${name} after ${Math.round(idleStopMs / 1e3)}s idle`);
+        await report(member, "stopped", `idle ${Math.round(idleStopMs / 1e3)}s`, summary.ready);
       }
       Object.assign(state, { ready: summary.ready, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), error: void 0 });
     } catch (err) {
@@ -22417,7 +22722,7 @@ function nodeStatusCommand(opts) {
   }
   for (const p of pools) {
     const ready = p.ready === null ? "-" : String(p.ready);
-    console.log(`  pool ${p.name.padEnd(11)} running ${p.running}/${p.max} (min ${p.min})  ready ${ready}  members ${p.members.join(", ")}${p.error ? source_default.red(`  ${p.error}`) : ""}`);
+    console.log(`  pool ${p.name.padEnd(11)} running ${p.running}/${p.max} (min ${p.min})${p.desiredMax !== null && p.desiredMax > p.max ? source_default.yellow(` desired ${p.desiredMax}, capped`) : ""}  ready ${ready}  members ${p.members.join(", ")}${p.error ? source_default.red(`  ${p.error}`) : ""}`);
   }
 }
 

package/dist/event-worker.js

@@ -275,7 +275,11 @@ instructions below override your role rules and the branch rules above. Read the
 Find the default branch with \`git remote show origin\`.
 
 **orderRole "planning"** (you are the order's planner):
-1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it.
+1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
+   has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
    \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
    \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
@@ -285,7 +289,9 @@ Find the default branch with \`git remote show origin\`.
    \`epicId\`, \`assignedTo: "@auto"\`, and
    \`metadata: { orderId, orderRole: "build", branchName: "order/<orderId>" }\`. Set
    \`specialization\` or \`domains\` only to values agents in \`mcp__relai__list_agents\` declare:
-   the router never hands out a task whose tag no agent matches. Make them small
+   the router never hands out a task whose tag no agent matches. When the repo has \`writer\` agents, set
+   \`specialization: "writer"\` on build tasks, so they wait for a writer instead of going to a reviewer.
+   Never name a build task's assignee as the goal's reviewer; the API refuses it. Make them small
    and independently testable so several agents can work at once. Use \`blockedBy\` only where
    one task truly needs another's result. Each description is self-contained: what to change,
    which files, how to test it, and the acceptance criteria.
@@ -297,24 +303,55 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
-6. Post the plan (task ids and titles) on the planning task's thread and complete it.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
+6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
+   feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
+   Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
+   the planning task's thread and complete it.
+
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
 
 **orderRole "build"**:
 - \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
   test and commit. Do not create another branch or PR.
 - Push with \`git pull --rebase origin order/<orderId> && git push origin HEAD:order/<orderId>\`,
   repeating up to 5 times if the push is rejected. Never force-push.
+- If you drop or change any part of what the goal asked for, even for a good reason, record each one
+  with \`mcp__relai__update_task_status\` metadata \`deviations: [{ "item": "<what the goal asked>",
+  "reason": "<why>" }]\` and say so in your handoff. The owner decides whether to accept it.
 - Hand off on the task's thread with the commit sha and what you tested, then complete.
 
 **orderRole "gate"**:
 - Check every build task in the order's Epic is completed, then post the PR link on the task's
-  thread and complete it. The gate decides from there: the owner approves a \`human_approval\`
+  thread, listing every \`metadata.deviations\` entry from the build tasks, and complete it. The gate decides from there: the owner approves a \`human_approval\`
   gate on the dashboard and the named reviewer decides a \`reviewer_agent\` gate.
+- As the reviewer of an order, check each thing the goal asked for. Anything dropped or changed is
+  the owner's call, not yours: if it is recorded in \`metadata.deviations\`, mention it and judge
+  the rest; if it is not recorded, reject and name it so the builder records it. The owner decides
+  on deviations in the approval gate.
 
 **orderRole "merge"**:
 1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`.
+   Before merging, replace the PR body with a run report built from
+   \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
+   (planning, build, gates, merge), each task with its assignee, status, and created and
+   completed times, the number of distinct agents that worked on it, the total elapsed time
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
-   gh pr view --json headRefOid>\`, post the merge commit on the thread, and complete.
+   gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
+   the merge commit and time, and recompute the elapsed time to the merge, with
+   \`gh pr edit <prUrl> --body-file <file>\` (a merged PR still accepts an edit). Post the merge commit
+   on the thread, and complete.
 3. A check failed: fix it on \`order/<orderId>\` as a build task would, push, and go back to step 1.
    After 3 failed rounds, block the task with \`blockedReason\` naming the failing checks.`;
 function buildPrompt(config2) {
@@ -469,7 +506,7 @@ function mcpServerLaunch(here = fileURLToPath(import.meta.url), exists = existsS
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   return { command: execPath, args: [mcpServerTsxCli(), mcpServerEntry()] };
 }
-function writeMcpConfig(config2) {
+function writeMcpConfig(config2, prefix = "claude-worker") {
   const { command, args } = mcpServerLaunch();
   const mcpConfig = {
     mcpServers: {
@@ -485,7 +522,7 @@ function writeMcpConfig(config2) {
       }
     }
   };
-  const path = join(tmpdir(), `claude-worker-${config2.agentId}-${Date.now()}.json`);
+  const path = join(tmpdir(), `${prefix}-${config2.agentId}-${Date.now()}.json`);
   writeFileSync(path, JSON.stringify(mcpConfig), { mode: 384 });
   return path;
 }
@@ -703,6 +740,7 @@ async function runCursorSession(config2) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join2(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -718,15 +756,245 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
   classifyError: classifySessionError
 };
 
+// ../claude-worker/src/adapters/copilot.ts
+import { spawn as spawn3 } from "child_process";
+import { unlinkSync as unlinkSync2 } from "fs";
+var bin2 = () => process.env.COPILOT_BIN ?? "copilot";
+var POLICY_BLOCKS = [/access denied by policy/i, /third-party mcp servers are disabled/i];
+var QUOTA = [/premium request/i, /monthly (?:limit|allowance|quota)/i];
+function copilotArgs(repoPath, prompt, mcpConfigPath) {
+  return [
+    "-p",
+    prompt,
+    "--allow-all-tools",
+    "--output-format",
+    "json",
+    "--no-color",
+    "-C",
+    repoPath,
+    "--additional-mcp-config",
+    `@${mcpConfigPath}`,
+    "--disable-builtin-mcps"
+  ];
+}
+function readCopilotEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  const type = typeof event.type === "string" ? event.type : "";
+  const data = event.data ?? {};
+  const message = typeof data.message === "string" ? data.message : "";
+  if (/^tool\..*start/.test(type) && typeof data.toolName === "string") return { tool: data.toolName };
+  if (type === "session.error") return { error: message || "copilot session error" };
+  if (type === "result" && typeof event.exitCode === "number" && event.exitCode !== 0) return { error: `copilot finished with exit code ${event.exitCode}` };
+  if (type === "session.warning" && POLICY_BLOCKS.some((re) => re.test(message))) return { error: message };
+  return {};
+}
+async function runCopilotSession(config2) {
+  const mcpConfigPath = writeMcpConfig(config2, "copilot-worker");
+  const args = copilotArgs(config2.repoPath, buildPrompt(config2), mcpConfigPath);
+  console.log(`[copilot-worker] Spawning: ${bin2()} -p <prompt> ${args.slice(2, 6).join(" ")} ...`);
+  return new Promise((resolve, reject) => {
+    const proc = spawn3(bin2(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[copilot-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCopilotEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[copilot-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      try {
+        unlinkSync2(mcpConfigPath);
+      } catch {
+      }
+      console.log(`[copilot-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`copilot exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      try {
+        unlinkSync2(mcpConfigPath);
+      } catch {
+      }
+      reject(err);
+    });
+  });
+}
+var copilotAdapter = {
+  runtime: "copilot",
+  workerType: "copilot",
+  prepare() {
+  },
+  runSession: runCopilotSession,
+  classifyError: (text) => {
+    if (POLICY_BLOCKS.some((re) => re.test(text))) return "credentials";
+    if (QUOTA.some((re) => re.test(text))) return "quota";
+    return classifySessionError(text);
+  }
+};
+
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn4 } from "child_process";
+import { chmodSync, mkdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { join as join3 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join3(homedir(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config2) {
+  const profile = `pitboss-${config2.agentId}`;
+  mkdirSync(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join3(codexHome(), `${profile}.config.toml`);
+  writeFileSync2(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config2.apiUrl,
+    API_SECRET: config2.apiSecret,
+    AGENT_ID: config2.agentId,
+    REPO_ID: config2.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve, reject) => {
+    const proc = spawn4(bin3(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES = ["claude", "cursor"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter };
+var RUNTIMES = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);

package/dist/mcp.js

@@ -12433,6 +12433,12 @@ var ApiClient = class {
   archiveThread(threadId) {
     return this.request("PUT", `/threads/${threadId}/archive`, {});
   }
+  listPools(repoId) {
+    return this.request("GET", `/repos/${encodeURIComponent(repoId)}/pools`);
+  }
+  setPoolSize(repoId, name, body) {
+    return this.request("PUT", `/repos/${encodeURIComponent(repoId)}/pools/${encodeURIComponent(name)}`, body);
+  }
   createOrder(body) {
     return this.request("POST", "/orders", body);
   }
@@ -12530,15 +12536,24 @@ function buildCreateOrderTool(client, repoId, opts) {
     description: "Create a factory order: a request to change a repo, plus the gates that make it done. Creates the order in planning, its Epic, and a planning task for the repo's orchestrator. " + ORDER_GATE_NOTE + (opts.ownerScoped ? " As the owner's agent you may pass repoId to file in any repo your owner owns; it defaults to your home repo." : ""),
     inputSchema: external_exports.object({
       repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to file the order in: any repo your owner owns. Defaults to your home repo." : "Repo to file the order in. Defaults to this agent's home repo."),
-      feature: external_exports.string().min(1).describe("What to build, in the requester's words."),
+      feature: external_exports.string().min(1).optional().describe("What to build, in the requester's words. Optional when issueUrl is given."),
+      issueUrl: external_exports.string().optional().describe("A GitHub issue in this repo to build from (https://github.com/<owner>/<repo>/issues/<n>). The planner reads it, and the merge closes it."),
+      planReviewers: external_exports.number().int().min(0).max(3).optional().describe("How many other agents must approve the plan before building starts (0 to 3). Reviewers are picked by the API, preferring reviewer agents on another vendor."),
+      pairBuilds: external_exports.boolean().optional().describe("Pair every build task with a reviewer on a different vendor: each build carries its own review gate, and the builder is never on the reviewer's vendor."),
+      title: external_exports.string().min(1).max(120).optional().describe("A short name for the goal. The planner writes one when omitted."),
       acceptance: external_exports.array(external_exports.enum(["ci_passed", "human_approval", "reviewer_agent"])).optional().describe("Gates that must all pass. Defaults to human_approval."),
       budget: external_exports.record(external_exports.unknown()).optional().describe("Optional ceilings. Stored only; not enforced.")
     }),
     handler: async (input) => {
+      if (!input.feature && !input.issueUrl) return mcpFail("create_order needs feature or issueUrl");
       try {
         const created = await client.createOrder({
           repoId: targetRepo(input),
-          feature: input.feature,
+          ...input.feature ? { feature: input.feature } : {},
+          ...input.issueUrl ? { issueUrl: input.issueUrl } : {},
+          ...input.planReviewers ? { planReviewers: input.planReviewers } : {},
+          ...input.pairBuilds ? { pairBuilds: true } : {},
+          ...input.title ? { title: input.title } : {},
           acceptance: input.acceptance,
           budget: input.budget
         });
@@ -12553,15 +12568,17 @@ function buildCreateOrderTool(client, repoId, opts) {
 function buildUpdateOrderTool(client) {
   return {
     name: "update_order",
-    description: "Record the order's branch and PR, or cancel it. For the repo orchestrator and the order's planner. " + ORDER_GATE_NOTE,
+    description: "Record the order's short title, branch and PR, or cancel it. For the repo orchestrator and the order's planner. " + ORDER_GATE_NOTE,
     inputSchema: external_exports.object({
       id: external_exports.string().describe("The order id (ord_\u2026)."),
+      title: external_exports.string().min(1).max(120).optional().describe("A short name for the goal."),
       branch: external_exports.string().min(1).optional().describe("The order's branch."),
       prUrl: external_exports.string().url().optional().describe("The order's pull request URL."),
       cancel: external_exports.boolean().optional().describe("Set true to cancel the order.")
     }),
     handler: async (input) => {
       const body = {};
+      if (input.title !== void 0) body.title = input.title;
       if (input.branch !== void 0) body.branch = input.branch;
       if (input.prUrl !== void 0) body.prUrl = input.prUrl;
       if (input.cancel) body.status = "cancelled";
@@ -12574,6 +12591,46 @@ function buildUpdateOrderTool(client) {
     }
   };
 }
+var POOL_NOTE = "A pool is a set of pre-approved workers that pitboss node starts and stops to match the ready work. The size set here is a target: the node never runs more members than it provisioned for the pool.";
+function buildListPoolsTool(client, repoId, opts) {
+  const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
+  return {
+    name: "list_pools",
+    description: "List the worker pool sizes set for a repo. " + POOL_NOTE,
+    inputSchema: external_exports.object({
+      repoId: external_exports.string().optional().describe("Repo to read. Defaults to this agent's home repo.")
+    }),
+    handler: async (input) => {
+      try {
+        const data = await client.listPools(targetRepo(input));
+        return { content: [{ type: "text", text: JSON.stringify({ data }, null, 2) }] };
+      } catch (err) {
+        return mcpFail(err);
+      }
+    }
+  };
+}
+function buildSetPoolSizeTool(client, repoId, opts) {
+  const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
+  return {
+    name: "set_pool_size",
+    description: "Set how many workers a repo's pool may run (max) and keep warm (min). " + POOL_NOTE + (opts.ownerScoped ? " As the owner's agent you may pass repoId for any repo your owner owns." : ""),
+    inputSchema: external_exports.object({
+      repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo the pool belongs to. Defaults to your home repo." : "Ignored; the pool is in this agent's repo."),
+      pool: external_exports.string().min(1).describe("The pool name from the node spec, e.g. 'ni-pool'."),
+      min: external_exports.number().int().min(0).max(32).optional().describe("Members to keep running when idle. Defaults to 0."),
+      max: external_exports.number().int().min(1).max(32).describe("Most members to run at once.")
+    }),
+    handler: async (input) => {
+      try {
+        const row = await client.setPoolSize(targetRepo(input), input.pool, { min: input.min ?? 0, max: input.max });
+        return { content: [{ type: "text", text: JSON.stringify(row, null, 2) }] };
+      } catch (err) {
+        return mcpFail(err);
+      }
+    }
+  };
+}
 function resolveAgentRef(candidates, ref, scope) {
   const available = candidates.length ? ` Available: ${candidates.map((a) => `${a.name} (${a.id})`).join(", ")}` : ` ${scope} has no agents.`;
   if (ref.startsWith("agent_")) {
@@ -13169,6 +13226,8 @@ ${version.body}`
     ...buildOrderReadTools(client, repoId, opts),
     ...opts.ownerScoped || opts.role === "orchestrator" ? [buildCreateOrderTool(client, repoId, opts)] : [],
     ...opts.role === "orchestrator" || (opts.tier ?? 0) >= 2 ? [buildUpdateOrderTool(client)] : [],
+    buildListPoolsTool(client, repoId, opts),
+    ...opts.ownerScoped || opts.role === "orchestrator" ? [buildSetPoolSizeTool(client, repoId, opts)] : [],
     // Additive, never a swap: an owner-scoped agent is still an agent and needs
     // everything above. buildOperatorTools assumes no agent identity, and its
     // create_task bypasses propose/commit.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitboss/cli",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [