@pitboss/cli 0.4.5 → 0.4.6

package/dist/cli.js

@@ -17463,28 +17463,28 @@ var RemoveFileError = class extends Error {
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/parse-editor-command.js
 function parseEditorCommand(editor) {
-  let bin3;
+  let bin4;
   let rest;
   if (editor.startsWith('"')) {
     const closeQuote = editor.indexOf('"', 1);
     if (closeQuote === -1) {
-      bin3 = editor.slice(1);
+      bin4 = editor.slice(1);
       rest = "";
     } else {
-      bin3 = editor.substring(1, closeQuote);
+      bin4 = editor.substring(1, closeQuote);
       rest = editor.substring(closeQuote + 1).trim();
     }
   } else {
     const firstSpace = editor.indexOf(" ");
     if (firstSpace === -1) {
-      bin3 = editor;
+      bin4 = editor;
       rest = "";
     } else {
-      bin3 = editor.substring(0, firstSpace);
+      bin4 = editor.substring(0, firstSpace);
       rest = editor.substring(firstSpace + 1).trim();
     }
   }
-  return { bin: bin3, args: rest ? rest.split(/\s+/) : [] };
+  return { bin: bin4, args: rest ? rest.split(/\s+/) : [] };
 }
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/index.js
@@ -20601,12 +20601,12 @@ function hookCursorPromptCommand(opts) {
 
 // src/commands/node.ts
 import { execFileSync as execFileSync7, spawn as spawnChild } from "node:child_process";
-import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync8, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
+import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync9, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
 import { dirname as dirname11, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/node/spec.ts
-import { join as join14, resolve as resolve4, sep as sep2 } from "node:path";
+import { join as join15, resolve as resolve4, sep as sep2 } from "node:path";
 
 // ../claude-worker/src/session.ts
 import { spawn as spawn2 } from "child_process";
@@ -20885,6 +20885,9 @@ Find the default branch with \`git remote show origin\`.
 **orderRole "planning"** (you are the order's planner):
 1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
    has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
    \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
    \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
@@ -20908,11 +20911,23 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
 6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
    feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
    Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
    the planning task's thread and complete it.
 
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
+
 **orderRole "build"**:
 - \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
   test and commit. Do not create another branch or PR.
@@ -20938,7 +20953,8 @@ Find the default branch with \`git remote show origin\`.
    \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
    (planning, build, gates, merge), each task with its assignee, status, and created and
    completed times, the number of distinct agents that worked on it, the total elapsed time
-   from the planning task's creation, and the CI checks that ran. Use \`gh pr edit <prUrl> --body-file <file>\`.
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
    gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
    the merge commit and time, and recompute the elapsed time to the merge, with
@@ -21332,6 +21348,7 @@ async function runCursorSession(config) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join13(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -21347,6 +21364,7 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
@@ -21445,6 +21463,7 @@ async function runCopilotSession(config) {
 }
 var copilotAdapter = {
   runtime: "copilot",
+  workerType: "copilot",
   prepare() {
   },
   runSession: runCopilotSession,
@@ -21455,9 +21474,135 @@ var copilotAdapter = {
   }
 };
 
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn5 } from "child_process";
+import { chmodSync, mkdirSync as mkdirSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join14 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join14(homedir5(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env2) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env2).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config) {
+  const profile = `pitboss-${config.agentId}`;
+  mkdirSync6(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join14(codexHome(), `${profile}.config.toml`);
+  writeFileSync7(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config.apiUrl,
+    API_SECRET: config.apiSecret,
+    AGENT_ID: config.agentId,
+    REPO_ID: config.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config.repoPath, buildPrompt(config), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve8, reject) => {
+    const proc = spawn5(bin3(), args, { cwd: config.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve8([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES3 = ["claude", "cursor", "copilot"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter };
+var RUNTIMES3 = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);
@@ -21482,7 +21627,7 @@ var isWithin = (path3, dir) => path3 === dir || path3.startsWith(dir.endsWith(se
 function poolMembers(pool) {
   return Array.from({ length: pool.max }, (_, i) => {
     const name = `${pool.pool}-${i + 1}`;
-    return { name, runtime: pool.runtime, worktree: join14(pool.worktreeRoot, name), specialization: pool.specialization };
+    return { name, runtime: pool.runtime, worktree: join15(pool.worktreeRoot, name), specialization: pool.specialization };
   });
 }
 var allAgents = (spec) => [...spec.agents, ...spec.pools.flatMap(poolMembers)];
@@ -21570,17 +21715,17 @@ function parseSpec(text, specDir) {
 }
 
 // src/node/store.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname8, join as join15 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync7, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname8, join as join16 } from "node:path";
 import { randomBytes as randomBytes4 } from "node:crypto";
-var nodeDir = () => join15(configDir(), "node");
-var credsPath = (name) => join15(nodeDir(), "agents", `${name}.json`);
-var statePath2 = () => join15(nodeDir(), "state.json");
-var logPath = (name) => join15(nodeDir(), "logs", `${name}.log`);
+var nodeDir = () => join16(configDir(), "node");
+var credsPath = (name) => join16(nodeDir(), "agents", `${name}.json`);
+var statePath2 = () => join16(nodeDir(), "state.json");
+var logPath = (name) => join16(nodeDir(), "logs", `${name}.log`);
 function writePrivate(path3, value) {
-  mkdirSync6(dirname8(path3), { recursive: true, mode: 448 });
+  mkdirSync7(dirname8(path3), { recursive: true, mode: 448 });
   const tmp = `${path3}.relai-${randomBytes4(8).toString("hex")}`;
-  writeFileSync7(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
+  writeFileSync8(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
   renameSync4(tmp, path3);
 }
 function readJson(path3) {
@@ -21594,7 +21739,7 @@ var removeCreds = (name) => {
   if (existsSync8(path3)) rmSync4(path3);
 };
 var listStoredAgentNames = () => {
-  const dir = join15(nodeDir(), "agents");
+  const dir = join16(nodeDir(), "agents");
   if (!existsSync8(dir)) return [];
   return readdirSync2(dir).filter((n) => n.endsWith(".json")).map((n) => n.slice(0, -".json".length)).sort();
 };
@@ -21676,7 +21821,7 @@ async function redeemInvite(spec, agent, code, have, specPath) {
       name: agent.name,
       role: "worker",
       specialization: agent.specialization,
-      workerType: agent.runtime,
+      workerType: getAdapter(agent.runtime).workerType,
       domains: [],
       repoPath
     });
@@ -21769,7 +21914,7 @@ async function ensureIdentities(spec, inviteCodes, specPath) {
           name: agent.name,
           role: invite.role,
           specialization: agent.specialization,
-          workerType: agent.runtime,
+          workerType: getAdapter(agent.runtime).workerType,
           domains: invite.domains ?? [],
           repoPath
         });
@@ -21920,27 +22065,27 @@ var Supervisor = class {
 
 // src/node/entries.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname9, join as join16, resolve as resolve5 } from "node:path";
+import { dirname as dirname9, join as join17, resolve as resolve5 } from "node:path";
 var MISSING_WORKER = "event-worker not found next to this CLI. Run node from a pitboss checkout, or set PITBOSS_EVENT_WORKER to packages/event-worker.";
 function checkoutWorker(dir) {
   return {
-    command: join16(dir, "node_modules", ".bin", "tsx"),
-    args: [join16(dir, "src", "index.ts")]
+    command: join17(dir, "node_modules", ".bin", "tsx"),
+    args: [join17(dir, "src", "index.ts")]
   };
 }
 function checkoutMcp(dir, execPath) {
   return {
     command: execPath,
     args: [
-      join16(dir, "node_modules", "tsx", "dist", "cli.mjs"),
-      join16(dir, "src", "index.ts")
+      join17(dir, "node_modules", "tsx", "dist", "cli.mjs"),
+      join17(dir, "src", "index.ts")
     ]
   };
 }
 function walkFor(here, packageName, exists) {
   for (let dir = dirname9(here); dirname9(dir) !== dir; dir = dirname9(dir)) {
-    const candidate = join16(dir, packageName);
-    if (exists(join16(candidate, "src", "index.ts"))) return candidate;
+    const candidate = join17(dir, packageName);
+    if (exists(join17(candidate, "src", "index.ts"))) return candidate;
   }
   return null;
 }
@@ -21952,10 +22097,10 @@ function resolveEventWorker(opts) {
   if (override) {
     const resolved = resolve5(override);
     if (resolved.endsWith(".js") && exists(resolved)) return { command: execPath, args: [resolved] };
-    if (exists(join16(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
+    if (exists(join17(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
     throw new Error(MISSING_WORKER);
   }
-  const bundled = join16(dirname9(opts.here), "event-worker.js");
+  const bundled = join17(dirname9(opts.here), "event-worker.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "event-worker", exists);
   if (dir) return checkoutWorker(dir);
@@ -21964,7 +22109,7 @@ function resolveEventWorker(opts) {
 function resolveMcpServer(opts) {
   const execPath = opts.execPath ?? process.execPath;
   const exists = opts.exists ?? existsSync9;
-  const bundled = join16(dirname9(opts.here), "mcp.js");
+  const bundled = join17(dirname9(opts.here), "mcp.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "mcp-server", exists);
   if (dir) return checkoutMcp(dir, execPath);
@@ -22074,8 +22219,8 @@ function loadPruneTargets(names) {
 
 // src/node/pool.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync7, realpathSync as realpathSync4 } from "node:fs";
-import { basename as basename2, dirname as dirname10, join as join17, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync8, realpathSync as realpathSync4 } from "node:fs";
+import { basename as basename2, dirname as dirname10, join as join18, resolve as resolve6 } from "node:path";
 var IDLE_STOP_MS = 10 * 6e4;
 var RECONCILE_MS = 15e3;
 var UNAVAILABLE_FOR_MS = 7 * 24 * 60 * 6e4 - 6e4;
@@ -22168,7 +22313,7 @@ function memberPathProblem(s) {
 function realpathAllowMissing(path3) {
   const abs = resolve6(path3);
   if (existsSync10(abs)) return realpathSync4.native(abs);
-  return join17(realpathAllowMissing(dirname10(abs)), basename2(abs));
+  return join18(realpathAllowMissing(dirname10(abs)), basename2(abs));
 }
 function run2(cwd, args) {
   try {
@@ -22221,7 +22366,7 @@ function ensurePoolWorktrees(pool, otherWorktrees = []) {
   }
   const missing = members.filter((m) => !existsSync10(m.worktree));
   if (missing.length > 0) {
-    mkdirSync7(root, { recursive: true });
+    mkdirSync8(root, { recursive: true });
     run2(pool.base, ["fetch", "-q", "origin"]);
     const branch = defaultBranch(pool.base);
     run2(pool.base, ["worktree", "prune"]);
@@ -22280,13 +22425,13 @@ function prepareAgent(agent, creds, mcp) {
       writeMergedJson(target, (existing) => mergeMcpServer(existing, name, entry), root);
       excludeIfUntracked(root, target);
     },
-    run(bin3, args, cwd) {
-      execFileSync7(bin3, args, { cwd, stdio: "ignore" });
+    run(bin4, args, cwd) {
+      execFileSync7(bin4, args, { cwd, stdio: "ignore" });
     }
   });
 }
 function spawnWorker(spec) {
-  mkdirSync8(dirname11(spec.logPath), { recursive: true, mode: 448 });
+  mkdirSync9(dirname11(spec.logPath), { recursive: true, mode: 448 });
   const log = openSync(spec.logPath, "a", 384);
   try {
     const child = spawnChild(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["ignore", log, log], detached: true });

package/dist/event-worker.js

@@ -277,6 +277,9 @@ Find the default branch with \`git remote show origin\`.
 **orderRole "planning"** (you are the order's planner):
 1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
    has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
    \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
    \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
@@ -300,11 +303,23 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
 6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
    feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
    Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
    the planning task's thread and complete it.
 
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
+
 **orderRole "build"**:
 - \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
   test and commit. Do not create another branch or PR.
@@ -330,7 +345,8 @@ Find the default branch with \`git remote show origin\`.
    \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
    (planning, build, gates, merge), each task with its assignee, status, and created and
    completed times, the number of distinct agents that worked on it, the total elapsed time
-   from the planning task's creation, and the CI checks that ran. Use \`gh pr edit <prUrl> --body-file <file>\`.
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
    gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
    the merge commit and time, and recompute the elapsed time to the merge, with
@@ -724,6 +740,7 @@ async function runCursorSession(config2) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join2(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -739,6 +756,7 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
@@ -837,6 +855,7 @@ async function runCopilotSession(config2) {
 }
 var copilotAdapter = {
   runtime: "copilot",
+  workerType: "copilot",
   prepare() {
   },
   runSession: runCopilotSession,
@@ -847,9 +866,135 @@ var copilotAdapter = {
   }
 };
 
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn4 } from "child_process";
+import { chmodSync, mkdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { join as join3 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join3(homedir(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config2) {
+  const profile = `pitboss-${config2.agentId}`;
+  mkdirSync(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join3(codexHome(), `${profile}.config.toml`);
+  writeFileSync2(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config2.apiUrl,
+    API_SECRET: config2.apiSecret,
+    AGENT_ID: config2.agentId,
+    REPO_ID: config2.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve, reject) => {
+    const proc = spawn4(bin3(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES = ["claude", "cursor", "copilot"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter };
+var RUNTIMES = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);

package/dist/mcp.js

@@ -12536,16 +12536,23 @@ function buildCreateOrderTool(client, repoId, opts) {
     description: "Create a factory order: a request to change a repo, plus the gates that make it done. Creates the order in planning, its Epic, and a planning task for the repo's orchestrator. " + ORDER_GATE_NOTE + (opts.ownerScoped ? " As the owner's agent you may pass repoId to file in any repo your owner owns; it defaults to your home repo." : ""),
     inputSchema: external_exports.object({
       repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to file the order in: any repo your owner owns. Defaults to your home repo." : "Repo to file the order in. Defaults to this agent's home repo."),
-      feature: external_exports.string().min(1).describe("What to build, in the requester's words."),
+      feature: external_exports.string().min(1).optional().describe("What to build, in the requester's words. Optional when issueUrl is given."),
+      issueUrl: external_exports.string().optional().describe("A GitHub issue in this repo to build from (https://github.com/<owner>/<repo>/issues/<n>). The planner reads it, and the merge closes it."),
+      planReviewers: external_exports.number().int().min(0).max(3).optional().describe("How many other agents must approve the plan before building starts (0 to 3). Reviewers are picked by the API, preferring reviewer agents on another vendor."),
+      pairBuilds: external_exports.boolean().optional().describe("Pair every build task with a reviewer on a different vendor: each build carries its own review gate, and the builder is never on the reviewer's vendor."),
       title: external_exports.string().min(1).max(120).optional().describe("A short name for the goal. The planner writes one when omitted."),
       acceptance: external_exports.array(external_exports.enum(["ci_passed", "human_approval", "reviewer_agent"])).optional().describe("Gates that must all pass. Defaults to human_approval."),
       budget: external_exports.record(external_exports.unknown()).optional().describe("Optional ceilings. Stored only; not enforced.")
     }),
     handler: async (input) => {
+      if (!input.feature && !input.issueUrl) return mcpFail("create_order needs feature or issueUrl");
       try {
         const created = await client.createOrder({
           repoId: targetRepo(input),
-          feature: input.feature,
+          ...input.feature ? { feature: input.feature } : {},
+          ...input.issueUrl ? { issueUrl: input.issueUrl } : {},
+          ...input.planReviewers ? { planReviewers: input.planReviewers } : {},
+          ...input.pairBuilds ? { pairBuilds: true } : {},
           ...input.title ? { title: input.title } : {},
           acceptance: input.acceptance,
           budget: input.budget

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitboss/cli",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [