@pitboss/cli 0.4.5 → 0.4.7

package/dist/cli.js

@@ -17463,28 +17463,28 @@ var RemoveFileError = class extends Error {
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/parse-editor-command.js
 function parseEditorCommand(editor) {
-  let bin3;
+  let bin4;
   let rest;
   if (editor.startsWith('"')) {
     const closeQuote = editor.indexOf('"', 1);
     if (closeQuote === -1) {
-      bin3 = editor.slice(1);
+      bin4 = editor.slice(1);
       rest = "";
     } else {
-      bin3 = editor.substring(1, closeQuote);
+      bin4 = editor.substring(1, closeQuote);
       rest = editor.substring(closeQuote + 1).trim();
     }
   } else {
     const firstSpace = editor.indexOf(" ");
     if (firstSpace === -1) {
-      bin3 = editor;
+      bin4 = editor;
       rest = "";
     } else {
-      bin3 = editor.substring(0, firstSpace);
+      bin4 = editor.substring(0, firstSpace);
       rest = editor.substring(firstSpace + 1).trim();
     }
   }
-  return { bin: bin3, args: rest ? rest.split(/\s+/) : [] };
+  return { bin: bin4, args: rest ? rest.split(/\s+/) : [] };
 }
 
 // ../../node_modules/.pnpm/@inquirer+external-editor@3.0.4_@types+node@22.19.17/node_modules/@inquirer/external-editor/dist/index.js
@@ -20601,12 +20601,12 @@ function hookCursorPromptCommand(opts) {
 
 // src/commands/node.ts
 import { execFileSync as execFileSync7, spawn as spawnChild } from "node:child_process";
-import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync8, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
+import { closeSync, existsSync as existsSync11, mkdirSync as mkdirSync9, openSync, readFileSync as readFileSync12, realpathSync as realpathSync5 } from "node:fs";
 import { dirname as dirname11, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/node/spec.ts
-import { join as join14, resolve as resolve4, sep as sep2 } from "node:path";
+import { join as join15, resolve as resolve4, sep as sep2 } from "node:path";
 
 // ../claude-worker/src/session.ts
 import { spawn as spawn2 } from "child_process";
@@ -20885,10 +20885,15 @@ Find the default branch with \`git remote show origin\`.
 **orderRole "planning"** (you are the order's planner):
 1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
    has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
-   \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
-   \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
+   \`git fetch origin && git checkout --detach origin/<default>\`,
+   \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push origin HEAD:refs/heads/order/<orderId>\`,
    then \`gh pr create --draft --base <default> --head order/<orderId> --title "<feature>" --body "Order <orderId>"\`.
+   Work detached and never check out \`order/<orderId>\` as a local branch: every agent's worktree
+   shares one repository, and git lets only one worktree hold a branch.
    Record both with \`mcp__relai__update_order\` (\`branch\`, \`prUrl\`).
 3. Build tasks: \`mcp__relai__create_task\` for each piece of work, with \`epicId\` = the order's
    \`epicId\`, \`assignedTo: "@auto"\`, and
@@ -20908,15 +20913,27 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
 6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
    feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
    Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
    the planning task's thread and complete it.
 
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
+
 **orderRole "build"**:
-- \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
-  test and commit. Do not create another branch or PR.
-- Push with \`git pull --rebase origin order/<orderId> && git push origin HEAD:order/<orderId>\`,
+- \`git fetch origin && git checkout --detach origin/order/<orderId>\`, then implement, test and commit
+  on the detached head. Do not create a local branch, another branch on the remote, or a PR.
+- Push with \`git fetch origin && git rebase origin/order/<orderId> && git push origin HEAD:order/<orderId>\`,
   repeating up to 5 times if the push is rejected. Never force-push.
 - If you drop or change any part of what the goal asked for, even for a good reason, record each one
   with \`mcp__relai__update_task_status\` metadata \`deviations: [{ "item": "<what the goal asked>",
@@ -20933,12 +20950,15 @@ Find the default branch with \`git remote show origin\`.
   on deviations in the approval gate.
 
 **orderRole "merge"**:
-1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`.
+1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`. If the PR has no checks
+   (the repo has no CI), check out the PR head and run the repo's own lint, typecheck and test scripts
+   from its package manifest instead, and treat a failure there as a failed check.
    Before merging, replace the PR body with a run report built from
    \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
    (planning, build, gates, merge), each task with its assignee, status, and created and
    completed times, the number of distinct agents that worked on it, the total elapsed time
-   from the planning task's creation, and the CI checks that ran. Use \`gh pr edit <prUrl> --body-file <file>\`.
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
    gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
    the merge commit and time, and recompute the elapsed time to the merge, with
@@ -21332,6 +21352,7 @@ async function runCursorSession(config) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join13(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -21347,6 +21368,7 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
@@ -21445,6 +21467,7 @@ async function runCopilotSession(config) {
 }
 var copilotAdapter = {
   runtime: "copilot",
+  workerType: "copilot",
   prepare() {
   },
   runSession: runCopilotSession,
@@ -21455,9 +21478,135 @@ var copilotAdapter = {
   }
 };
 
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn5 } from "child_process";
+import { chmodSync, mkdirSync as mkdirSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join14 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join14(homedir5(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env2) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env2).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config) {
+  const profile = `pitboss-${config.agentId}`;
+  mkdirSync6(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join14(codexHome(), `${profile}.config.toml`);
+  writeFileSync7(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config.apiUrl,
+    API_SECRET: config.apiSecret,
+    AGENT_ID: config.agentId,
+    REPO_ID: config.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config.repoPath, buildPrompt(config), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve8, reject) => {
+    const proc = spawn5(bin3(), args, { cwd: config.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve8([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES3 = ["claude", "cursor", "copilot"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter };
+var RUNTIMES3 = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);
@@ -21482,7 +21631,7 @@ var isWithin = (path3, dir) => path3 === dir || path3.startsWith(dir.endsWith(se
 function poolMembers(pool) {
   return Array.from({ length: pool.max }, (_, i) => {
     const name = `${pool.pool}-${i + 1}`;
-    return { name, runtime: pool.runtime, worktree: join14(pool.worktreeRoot, name), specialization: pool.specialization };
+    return { name, runtime: pool.runtime, worktree: join15(pool.worktreeRoot, name), specialization: pool.specialization };
   });
 }
 var allAgents = (spec) => [...spec.agents, ...spec.pools.flatMap(poolMembers)];
@@ -21570,17 +21719,17 @@ function parseSpec(text, specDir) {
 }
 
 // src/node/store.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname8, join as join15 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync7, readdirSync as readdirSync2, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname8, join as join16 } from "node:path";
 import { randomBytes as randomBytes4 } from "node:crypto";
-var nodeDir = () => join15(configDir(), "node");
-var credsPath = (name) => join15(nodeDir(), "agents", `${name}.json`);
-var statePath2 = () => join15(nodeDir(), "state.json");
-var logPath = (name) => join15(nodeDir(), "logs", `${name}.log`);
+var nodeDir = () => join16(configDir(), "node");
+var credsPath = (name) => join16(nodeDir(), "agents", `${name}.json`);
+var statePath2 = () => join16(nodeDir(), "state.json");
+var logPath = (name) => join16(nodeDir(), "logs", `${name}.log`);
 function writePrivate(path3, value) {
-  mkdirSync6(dirname8(path3), { recursive: true, mode: 448 });
+  mkdirSync7(dirname8(path3), { recursive: true, mode: 448 });
   const tmp = `${path3}.relai-${randomBytes4(8).toString("hex")}`;
-  writeFileSync7(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
+  writeFileSync8(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
   renameSync4(tmp, path3);
 }
 function readJson(path3) {
@@ -21594,7 +21743,7 @@ var removeCreds = (name) => {
   if (existsSync8(path3)) rmSync4(path3);
 };
 var listStoredAgentNames = () => {
-  const dir = join15(nodeDir(), "agents");
+  const dir = join16(nodeDir(), "agents");
   if (!existsSync8(dir)) return [];
   return readdirSync2(dir).filter((n) => n.endsWith(".json")).map((n) => n.slice(0, -".json".length)).sort();
 };
@@ -21676,7 +21825,7 @@ async function redeemInvite(spec, agent, code, have, specPath) {
       name: agent.name,
       role: "worker",
       specialization: agent.specialization,
-      workerType: agent.runtime,
+      workerType: getAdapter(agent.runtime).workerType,
       domains: [],
       repoPath
     });
@@ -21769,7 +21918,7 @@ async function ensureIdentities(spec, inviteCodes, specPath) {
           name: agent.name,
           role: invite.role,
           specialization: agent.specialization,
-          workerType: agent.runtime,
+          workerType: getAdapter(agent.runtime).workerType,
           domains: invite.domains ?? [],
           repoPath
         });
@@ -21920,27 +22069,27 @@ var Supervisor = class {
 
 // src/node/entries.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname9, join as join16, resolve as resolve5 } from "node:path";
+import { dirname as dirname9, join as join17, resolve as resolve5 } from "node:path";
 var MISSING_WORKER = "event-worker not found next to this CLI. Run node from a pitboss checkout, or set PITBOSS_EVENT_WORKER to packages/event-worker.";
 function checkoutWorker(dir) {
   return {
-    command: join16(dir, "node_modules", ".bin", "tsx"),
-    args: [join16(dir, "src", "index.ts")]
+    command: join17(dir, "node_modules", ".bin", "tsx"),
+    args: [join17(dir, "src", "index.ts")]
   };
 }
 function checkoutMcp(dir, execPath) {
   return {
     command: execPath,
     args: [
-      join16(dir, "node_modules", "tsx", "dist", "cli.mjs"),
-      join16(dir, "src", "index.ts")
+      join17(dir, "node_modules", "tsx", "dist", "cli.mjs"),
+      join17(dir, "src", "index.ts")
     ]
   };
 }
 function walkFor(here, packageName, exists) {
   for (let dir = dirname9(here); dirname9(dir) !== dir; dir = dirname9(dir)) {
-    const candidate = join16(dir, packageName);
-    if (exists(join16(candidate, "src", "index.ts"))) return candidate;
+    const candidate = join17(dir, packageName);
+    if (exists(join17(candidate, "src", "index.ts"))) return candidate;
   }
   return null;
 }
@@ -21952,10 +22101,10 @@ function resolveEventWorker(opts) {
   if (override) {
     const resolved = resolve5(override);
     if (resolved.endsWith(".js") && exists(resolved)) return { command: execPath, args: [resolved] };
-    if (exists(join16(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
+    if (exists(join17(resolved, "src", "index.ts"))) return checkoutWorker(resolved);
     throw new Error(MISSING_WORKER);
   }
-  const bundled = join16(dirname9(opts.here), "event-worker.js");
+  const bundled = join17(dirname9(opts.here), "event-worker.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "event-worker", exists);
   if (dir) return checkoutWorker(dir);
@@ -21964,7 +22113,7 @@ function resolveEventWorker(opts) {
 function resolveMcpServer(opts) {
   const execPath = opts.execPath ?? process.execPath;
   const exists = opts.exists ?? existsSync9;
-  const bundled = join16(dirname9(opts.here), "mcp.js");
+  const bundled = join17(dirname9(opts.here), "mcp.js");
   if (exists(bundled)) return { command: execPath, args: [bundled] };
   const dir = walkFor(opts.here, "mcp-server", exists);
   if (dir) return checkoutMcp(dir, execPath);
@@ -22074,8 +22223,8 @@ function loadPruneTargets(names) {
 
 // src/node/pool.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync7, realpathSync as realpathSync4 } from "node:fs";
-import { basename as basename2, dirname as dirname10, join as join17, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync10, lstatSync as lstatSync3, mkdirSync as mkdirSync8, realpathSync as realpathSync4 } from "node:fs";
+import { basename as basename2, dirname as dirname10, join as join18, resolve as resolve6 } from "node:path";
 var IDLE_STOP_MS = 10 * 6e4;
 var RECONCILE_MS = 15e3;
 var UNAVAILABLE_FOR_MS = 7 * 24 * 60 * 6e4 - 6e4;
@@ -22168,7 +22317,7 @@ function memberPathProblem(s) {
 function realpathAllowMissing(path3) {
   const abs = resolve6(path3);
   if (existsSync10(abs)) return realpathSync4.native(abs);
-  return join17(realpathAllowMissing(dirname10(abs)), basename2(abs));
+  return join18(realpathAllowMissing(dirname10(abs)), basename2(abs));
 }
 function run2(cwd, args) {
   try {
@@ -22221,7 +22370,7 @@ function ensurePoolWorktrees(pool, otherWorktrees = []) {
   }
   const missing = members.filter((m) => !existsSync10(m.worktree));
   if (missing.length > 0) {
-    mkdirSync7(root, { recursive: true });
+    mkdirSync8(root, { recursive: true });
     run2(pool.base, ["fetch", "-q", "origin"]);
     const branch = defaultBranch(pool.base);
     run2(pool.base, ["worktree", "prune"]);
@@ -22280,13 +22429,13 @@ function prepareAgent(agent, creds, mcp) {
       writeMergedJson(target, (existing) => mergeMcpServer(existing, name, entry), root);
       excludeIfUntracked(root, target);
     },
-    run(bin3, args, cwd) {
-      execFileSync7(bin3, args, { cwd, stdio: "ignore" });
+    run(bin4, args, cwd) {
+      execFileSync7(bin4, args, { cwd, stdio: "ignore" });
     }
   });
 }
 function spawnWorker(spec) {
-  mkdirSync8(dirname11(spec.logPath), { recursive: true, mode: 448 });
+  mkdirSync9(dirname11(spec.logPath), { recursive: true, mode: 448 });
   const log = openSync(spec.logPath, "a", 384);
   try {
     const child = spawnChild(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["ignore", log, log], detached: true });

package/dist/event-worker.js

@@ -277,10 +277,15 @@ Find the default branch with \`git remote show origin\`.
 **orderRole "planning"** (you are the order's planner):
 1. Read the order's \`feature\` and \`acceptance\`, and read the repo enough to plan it. If the order
    has no \`title\`, give it a short one (a few words) with \`mcp__relai__update_order\`.
+   If the order has an \`issueUrl\`, read it with \`gh issue view <issueUrl> --comments\` and treat the
+   issue as the spec; the order's \`feature\` text, when it says more than "Resolve the GitHub issue",
+   narrows or adds to it. Put \`Closes #<n>\` (the issue number) in the PR body so the merge closes it.
 2. Create the branch and PR:
-   \`git fetch origin && git checkout -B order/<orderId> origin/<default>\`,
-   \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push -u origin order/<orderId>\`,
+   \`git fetch origin && git checkout --detach origin/<default>\`,
+   \`git commit --allow-empty -m "Start order <orderId>"\`, \`git push origin HEAD:refs/heads/order/<orderId>\`,
    then \`gh pr create --draft --base <default> --head order/<orderId> --title "<feature>" --body "Order <orderId>"\`.
+   Work detached and never check out \`order/<orderId>\` as a local branch: every agent's worktree
+   shares one repository, and git lets only one worktree hold a branch.
    Record both with \`mcp__relai__update_order\` (\`branch\`, \`prUrl\`).
 3. Build tasks: \`mcp__relai__create_task\` for each piece of work, with \`epicId\` = the order's
    \`epicId\`, \`assignedTo: "@auto"\`, and
@@ -300,15 +305,27 @@ Find the default branch with \`git remote show origin\`.
    - \`ci_passed\` gets no gate task: the merge task checks CI. Say so on the planning task's thread.
 5. One merge task, blocked by every gate task (or every build task when there are no gates),
    \`assignedTo: "@auto"\`, \`metadata: { orderId, orderRole: "merge", prUrl }\`.
+   If the order has \`pairBuilds\`, every build task needs \`verifyKind: "reviewer_agent"\` and a
+   \`verifyReviewerId\` on a different \`workerType\` from the writers (see \`mcp__relai__list_agents\`);
+   the API refuses a paired build task without one and routes it away from the reviewer's vendor.
 6. Write the plan into the PR body so a reader of the PR sees how it will be built: the
    feature, the acceptance gates, and a table of every task (id, title, role, blockedBy).
    Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
    the planning task's thread and complete it.
 
+**orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
+- After the task graph is written, complete each plan review task. That hands the plan to its
+  reviewer. Every build task waits until all plan reviews are approved.
+- On a reject the task comes back to you with the reviewer's note: revise the plan under the Epic
+  (edit, add or cancel tasks), reply on the task's thread with what changed, and complete it again.
+- As the reviewer of a plan review: read the goal and every task under its Epic. Approve when the
+  tasks cover the goal, are small and independent, and their \`blockedBy\` order is right; otherwise
+  reject with exactly what to change.
+
 **orderRole "build"**:
-- \`git fetch origin && git checkout -B order/<orderId> origin/order/<orderId>\`, then implement,
-  test and commit. Do not create another branch or PR.
-- Push with \`git pull --rebase origin order/<orderId> && git push origin HEAD:order/<orderId>\`,
+- \`git fetch origin && git checkout --detach origin/order/<orderId>\`, then implement, test and commit
+  on the detached head. Do not create a local branch, another branch on the remote, or a PR.
+- Push with \`git fetch origin && git rebase origin/order/<orderId> && git push origin HEAD:order/<orderId>\`,
   repeating up to 5 times if the push is rejected. Never force-push.
 - If you drop or change any part of what the goal asked for, even for a good reason, record each one
   with \`mcp__relai__update_task_status\` metadata \`deviations: [{ "item": "<what the goal asked>",
@@ -325,12 +342,15 @@ Find the default branch with \`git remote show origin\`.
   on deviations in the approval gate.
 
 **orderRole "merge"**:
-1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`.
+1. \`gh pr ready <prUrl>\`, then \`gh pr checks <prUrl> --watch --fail-fast\`. If the PR has no checks
+   (the repo has no CI), check out the PR head and run the repo's own lint, typecheck and test scripts
+   from its package manifest instead, and treat a failure there as a failed check.
    Before merging, replace the PR body with a run report built from
    \`mcp__relai__list_all_tasks\` filtered to the order's Epic: the feature, the workflow
    (planning, build, gates, merge), each task with its assignee, status, and created and
    completed times, the number of distinct agents that worked on it, the total elapsed time
-   from the planning task's creation, and the CI checks that ran. Use \`gh pr edit <prUrl> --body-file <file>\`.
+   from the planning task's creation, and the CI checks that ran. Keep any \`Closes #<n>\` line. Use
+   \`gh pr edit <prUrl> --body-file <file>\`.
 2. Every check passed: \`gh pr merge <prUrl> --squash --match-head-commit <head sha from
    gh pr view --json headRefOid>\`. Then update the run report: mark the merge task completed with
    the merge commit and time, and recompute the elapsed time to the merge, with
@@ -724,6 +744,7 @@ async function runCursorSession(config2) {
 }
 var cursorAdapter = {
   runtime: "cursor",
+  workerType: "cursor",
   prepare(ctx) {
     ctx.writeMcpServer(join2(ctx.worktree, ".cursor", "mcp.json"), "relai", {
       command: ctx.mcp.command,
@@ -739,6 +760,7 @@ var cursorAdapter = {
 // ../claude-worker/src/adapters/claude.ts
 var claudeAdapter = {
   runtime: "claude",
+  workerType: "claude",
   prepare() {
   },
   runSession: runClaudeSession,
@@ -837,6 +859,7 @@ async function runCopilotSession(config2) {
 }
 var copilotAdapter = {
   runtime: "copilot",
+  workerType: "copilot",
   prepare() {
   },
   runSession: runCopilotSession,
@@ -847,9 +870,135 @@ var copilotAdapter = {
   }
 };
 
+// ../claude-worker/src/adapters/codex.ts
+import { spawn as spawn4 } from "child_process";
+import { chmodSync, mkdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { join as join3 } from "path";
+var bin3 = () => process.env.CODEX_BIN ?? "codex";
+var codexHome = () => process.env.CODEX_HOME ?? join3(homedir(), ".codex");
+var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
+var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
+function codexArgs(repoPath, prompt, profile) {
+  return [
+    "exec",
+    "--json",
+    "--ephemeral",
+    "--skip-git-repo-check",
+    "--dangerously-bypass-approvals-and-sandbox",
+    "-C",
+    repoPath,
+    "-p",
+    profile,
+    prompt
+  ];
+}
+var tomlString = (v) => JSON.stringify(v);
+function codexProfileToml(server, env) {
+  return [
+    "[mcp_servers.relai]",
+    `command = ${tomlString(server.command)}`,
+    `args = [${server.args.map(tomlString).join(", ")}]`,
+    "",
+    "[mcp_servers.relai.env]",
+    ...Object.entries(env).map(([k, v]) => `${k} = ${tomlString(v)}`),
+    ""
+  ].join("\n");
+}
+function readCodexEvent(line) {
+  let event;
+  try {
+    event = JSON.parse(line);
+  } catch {
+    return {};
+  }
+  if (event.type === "item.started" && event.item) {
+    if (event.item.type === "command_execution") return { tool: "shell" };
+    if (event.item.type === "mcp_tool_call") return { tool: `${String(event.item.server ?? "mcp")}-${String(event.item.tool ?? "tool")}` };
+    return {};
+  }
+  if (event.type === "turn.failed") return { error: String(event.error?.message ?? "codex turn failed") };
+  if (event.type === "error") return { error: String(event.message ?? "codex error") };
+  return {};
+}
+async function runCodexSession(config2) {
+  const profile = `pitboss-${config2.agentId}`;
+  mkdirSync(codexHome(), { recursive: true, mode: 448 });
+  const profilePath = join3(codexHome(), `${profile}.config.toml`);
+  writeFileSync2(profilePath, codexProfileToml(mcpServerLaunch(), {
+    API_URL: config2.apiUrl,
+    API_SECRET: config2.apiSecret,
+    AGENT_ID: config2.agentId,
+    REPO_ID: config2.repoId
+  }), { mode: 384 });
+  chmodSync(profilePath, 384);
+  const cleanup = () => {
+    try {
+      unlinkSync3(profilePath);
+    } catch {
+    }
+  };
+  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile);
+  console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
+  return new Promise((resolve, reject) => {
+    const proc = spawn4(bin3(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    console.log(`[codex-worker] Process PID: ${proc.pid}`);
+    const toolsUsed = [];
+    let buffer = "";
+    let sessionError = "";
+    let stderrOutput = "";
+    proc.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        const { tool, error } = readCodexEvent(line);
+        if (tool) {
+          toolsUsed.push(tool);
+          process.stdout.write(`  \u2699  ${tool}
+`);
+        }
+        if (error) {
+          sessionError = error;
+          console.error(`[codex-worker] Session failed: ${error}`);
+        }
+      }
+    });
+    proc.stderr.on("data", (chunk) => {
+      stderrOutput += chunk.toString();
+    });
+    proc.on("close", (code, signal) => {
+      cleanup();
+      console.log(`[codex-worker] Done \u2014 tools used: ${toolsUsed.length ? [...new Set(toolsUsed)].join(", ") : "none"}`);
+      if (sessionError || signal || code !== 0 && code !== null) {
+        const detail = (sessionError || stderrOutput).trim();
+        reject(new Error(`codex exited with ${signal ?? `code ${code}`}${detail ? `: ${detail}` : ""}`));
+      } else {
+        resolve([...new Set(toolsUsed)]);
+      }
+    });
+    proc.on("error", (err) => {
+      cleanup();
+      reject(err);
+    });
+  });
+}
+var codexAdapter = {
+  runtime: "codex",
+  workerType: "gpt",
+  prepare() {
+  },
+  runSession: runCodexSession,
+  classifyError: (text) => {
+    if (QUOTA2.some((re) => re.test(text))) return "quota";
+    if (CREDENTIALS.some((re) => re.test(text))) return "credentials";
+    return classifySessionError(text);
+  }
+};
+
 // ../claude-worker/src/adapters/index.ts
-var RUNTIMES = ["claude", "cursor", "copilot"];
-var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter };
+var RUNTIMES = ["claude", "cursor", "copilot", "codex"];
+var ADAPTERS = { claude: claudeAdapter, cursor: cursorAdapter, copilot: copilotAdapter, codex: codexAdapter };
 function getAdapter(runtime) {
   const adapter = ADAPTERS[runtime];
   if (!adapter) throw new Error(`no adapter for runtime "${runtime}"`);

package/dist/mcp.js

@@ -12536,16 +12536,23 @@ function buildCreateOrderTool(client, repoId, opts) {
     description: "Create a factory order: a request to change a repo, plus the gates that make it done. Creates the order in planning, its Epic, and a planning task for the repo's orchestrator. " + ORDER_GATE_NOTE + (opts.ownerScoped ? " As the owner's agent you may pass repoId to file in any repo your owner owns; it defaults to your home repo." : ""),
     inputSchema: external_exports.object({
       repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to file the order in: any repo your owner owns. Defaults to your home repo." : "Repo to file the order in. Defaults to this agent's home repo."),
-      feature: external_exports.string().min(1).describe("What to build, in the requester's words."),
+      feature: external_exports.string().min(1).optional().describe("What to build, in the requester's words. Optional when issueUrl is given."),
+      issueUrl: external_exports.string().optional().describe("A GitHub issue in this repo to build from (https://github.com/<owner>/<repo>/issues/<n>). The planner reads it, and the merge closes it."),
+      planReviewers: external_exports.number().int().min(0).max(3).optional().describe("How many other agents must approve the plan before building starts (0 to 3). Reviewers are picked by the API, preferring reviewer agents on another vendor."),
+      pairBuilds: external_exports.boolean().optional().describe("Pair every build task with a reviewer on a different vendor: each build carries its own review gate, and the builder is never on the reviewer's vendor."),
       title: external_exports.string().min(1).max(120).optional().describe("A short name for the goal. The planner writes one when omitted."),
       acceptance: external_exports.array(external_exports.enum(["ci_passed", "human_approval", "reviewer_agent"])).optional().describe("Gates that must all pass. Defaults to human_approval."),
       budget: external_exports.record(external_exports.unknown()).optional().describe("Optional ceilings. Stored only; not enforced.")
     }),
     handler: async (input) => {
+      if (!input.feature && !input.issueUrl) return mcpFail("create_order needs feature or issueUrl");
       try {
         const created = await client.createOrder({
           repoId: targetRepo(input),
-          feature: input.feature,
+          ...input.feature ? { feature: input.feature } : {},
+          ...input.issueUrl ? { issueUrl: input.issueUrl } : {},
+          ...input.planReviewers ? { planReviewers: input.planReviewers } : {},
+          ...input.pairBuilds ? { pairBuilds: true } : {},
           ...input.title ? { title: input.title } : {},
           acceptance: input.acceptance,
           budget: input.budget
@@ -13231,21 +13238,42 @@ ${version.body}`
     ] : []
   ];
 }
+var ATTENTION_STATUSES = "blocked,pending_verification,proposed";
+function attentionMaxAgeDays() {
+  const n = Number(process.env.ATTENTION_MAX_AGE_DAYS);
+  return Number.isFinite(n) && n > 0 ? n : 7;
+}
+var attentionWindowSchema = {
+  includeStale: external_exports.boolean().optional().describe("Include items untouched for longer than maxAgeDays. Off by default so new asks lead."),
+  maxAgeDays: external_exports.number().positive().optional().describe("Hide items untouched for longer than this many days (default 7).")
+};
+function attentionCutoff(input) {
+  if (input.includeStale) return void 0;
+  return new Date(Date.now() - (input.maxAgeDays ?? attentionMaxAgeDays()) * 864e5).toISOString();
+}
+async function staleAttentionCount(client, cutoff) {
+  if (!cutoff) return 0;
+  const { meta } = await client.getTasksPage({ status: ATTENTION_STATUSES, updatedBefore: cutoff, limit: 1, clip: true });
+  return meta?.total ?? 0;
+}
 function buildGodCoordinationTools(client) {
   return [
     {
       name: "list_attention",
-      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log). Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message on that thread, as if the owner had. One without it (stalled or overflowed work, or your own task) needs reassigning with assign_task or splitting instead. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
-      inputSchema: external_exports.object({}),
-      handler: async () => {
+      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log). Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message (type decision) on that thread, as if the owner had, when the owner has given you a decide delegation for that repo; the task records clearedBy. Answer only reversible, branch-level confirmations yourself (editing, pushing or deleting files on an order branch, choosing between plan options). Merges into a default branch, deploys, deletes outside an order branch, and anything touching credentials or money go to the owner. One without it (stalled or overflowed work, or your own task) needs reassigning with assign_task or splitting instead. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
+      inputSchema: external_exports.object(attentionWindowSchema),
+      handler: async (input) => {
+        const cutoff = attentionCutoff(input);
         const [{ data, meta }, idleUnroutable] = await Promise.all([
           client.getTasksPage({
-            status: "blocked,pending_verification,proposed",
+            status: ATTENTION_STATUSES,
             limit: listTasksLimit(),
-            clip: true
+            clip: true,
+            ...cutoff ? { updatedAfter: cutoff } : {}
           }),
           client.getIdleUnroutable()
         ]);
+        const staleCount = await staleAttentionCount(client, cutoff);
         const tasks = data ?? [];
         const idle = idleUnroutable ?? [];
         const total = meta?.total ?? tasks.length;
@@ -13253,11 +13281,12 @@ function buildGodCoordinationTools(client) {
         return {
           content: [{
             type: "text",
-            text: tasks.length === 0 && idle.length === 0 ? "Nothing needs attention across your repos right now." : JSON.stringify({
+            text: tasks.length === 0 && idle.length === 0 && staleCount === 0 ? "Nothing needs attention across your repos right now." : JSON.stringify({
               tasks,
               taskCount: total,
               ...idle.length > 0 ? { idleUnroutable: idle } : {},
               ...notShown ? { notShown } : {},
+              ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {},
               peerBoundary: PEER_BOUNDARY
             }, null, 2)
           }]
@@ -13529,19 +13558,22 @@ function buildOperatorTools(client, ownerId) {
     {
       name: "list_attention",
       description: "List everything across ALL your projects that needs you right now: tasks that are 'blocked' (a worker is waiting on your input), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting your commit), plus idle workers that cannot take the ready work sitting there (idle_unroutable). Call this first to see what to act on. Each task carries its repoId and, for blocked tasks, metadata.blockedThreadId \u2014 the thread to post a reply on (via reply_human) to resume the worker. An idle_unroutable item names the agent and why each task is ineligible.",
-      inputSchema: external_exports.object({}),
-      handler: async () => {
-        const [tasks, idleUnroutable] = await Promise.all([
-          client.getTasks({ status: "blocked,pending_verification,proposed" }),
-          client.getIdleUnroutable()
+      inputSchema: external_exports.object(attentionWindowSchema),
+      handler: async (input) => {
+        const cutoff = attentionCutoff(input);
+        const [tasks, idleUnroutable, staleCount] = await Promise.all([
+          client.getTasks({ status: ATTENTION_STATUSES, ...cutoff ? { updatedAfter: cutoff } : {} }),
+          client.getIdleUnroutable(),
+          staleAttentionCount(client, cutoff)
         ]);
         const idle = idleUnroutable ?? [];
         return {
           content: [{
             type: "text",
-            text: tasks.length === 0 && idle.length === 0 ? "Nothing needs your attention across your projects right now." : JSON.stringify({
+            text: tasks.length === 0 && idle.length === 0 && staleCount === 0 ? "Nothing needs your attention across your projects right now." : JSON.stringify({
               tasks,
-              ...idle.length > 0 ? { idleUnroutable: idle } : {}
+              ...idle.length > 0 ? { idleUnroutable: idle } : {},
+              ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {}
             }, null, 2)
           }]
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitboss/cli",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [