agent-composer 0.1.0

package/dist/providers/CLIProvider.d.ts

@@ -0,0 +1,30 @@
+import type { IProvider, IProviderExecuteInput, IProviderExecuteOutput, ProviderId } from "./IProvider.js";
+export interface ExecFileResult {
+    stdout: string;
+    stderr: string;
+}
+export type ExecFileFn = (file: string, args: ReadonlyArray<string>, options: {
+    maxBuffer?: number;
+    timeout?: number;
+}) => Promise<ExecFileResult>;
+export interface CLIProviderOptions {
+    /** argv array: [binary, ...staticArgs]. Prompt is appended at runtime. */
+    cli: ReadonlyArray<string>;
+    /** Optional human-readable model label; defaults to the binary name. */
+    model?: string;
+    timeoutMs?: number;
+    maxBuffer?: number;
+    /** Override execFile for tests. */
+    execFn?: ExecFileFn;
+}
+export declare class CLIProvider implements IProvider {
+    readonly id: ProviderId;
+    readonly modelLabel: string;
+    private readonly argv;
+    private readonly exec;
+    private readonly timeoutMs;
+    private readonly maxBuffer;
+    constructor(opts: CLIProviderOptions);
+    healthCheck(): Promise<boolean>;
+    execute(input: IProviderExecuteInput): Promise<IProviderExecuteOutput>;
+}

package/dist/providers/CLIProvider.js

@@ -0,0 +1,106 @@
+// Wave 1 F1.2 — IProvider that shells out to a CLI (default target: `agy`).
+//
+// CRITICAL: uses child_process.execFile (array args), NEVER child_process.exec
+// or any shell-interpolated path — see plan §4 + §9.5 risk matrix. Prompt
+// is appended as the LAST positional argument so quoting/backticks in the
+// prompt cannot break out into the shell.
+import { spawn } from "node:child_process";
+// Default executor uses spawn (not execFile) so we can explicitly ignore
+// stdin. Some CLIs (notably `agy --print`) hang forever waiting on stdin
+// when launched from a non-TTY parent if stdin is inherited.
+const DEFAULT_EXEC = (file, args, options) => new Promise((resolve, reject) => {
+    const maxBuffer = options.maxBuffer ?? 32 * 1024 * 1024;
+    const timeoutMs = options.timeout;
+    const child = spawn(file, [...args], {
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    let bufferExceeded = false;
+    const timer = typeof timeoutMs === "number" && timeoutMs > 0
+        ? setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGTERM");
+        }, timeoutMs)
+        : null;
+    const checkBuffer = (kind, payload) => {
+        if (payload.length > maxBuffer) {
+            bufferExceeded = true;
+            child.kill("SIGTERM");
+        }
+        else if (kind === "stdout") {
+            stdout = payload;
+        }
+        else {
+            stderr = payload;
+        }
+    };
+    child.stdout?.on("data", (chunk) => {
+        checkBuffer("stdout", stdout + chunk.toString());
+    });
+    child.stderr?.on("data", (chunk) => {
+        checkBuffer("stderr", stderr + chunk.toString());
+    });
+    child.once("error", (err) => {
+        if (timer)
+            clearTimeout(timer);
+        reject(err);
+    });
+    child.once("close", (code, signal) => {
+        if (timer)
+            clearTimeout(timer);
+        if (timedOut) {
+            return reject(new Error(`CLIProvider: '${file}' timed out after ${timeoutMs}ms`));
+        }
+        if (bufferExceeded) {
+            return reject(new Error(`CLIProvider: '${file}' exceeded maxBuffer ${maxBuffer}`));
+        }
+        if (code !== 0) {
+            return reject(new Error(`CLIProvider: '${file}' exited code=${code} signal=${signal ?? "none"}; stderr: ${stderr.slice(0, 500)}`));
+        }
+        resolve({ stdout, stderr });
+    });
+});
+const DEFAULT_TIMEOUT_MS = 5 * 60_000; // 5 min — matches tdd_plan.md §6 per-experiment budget cap.
+const DEFAULT_MAX_BUFFER = 32 * 1024 * 1024; // 32 MB.
+export class CLIProvider {
+    id = "cli";
+    modelLabel;
+    argv;
+    exec;
+    timeoutMs;
+    maxBuffer;
+    constructor(opts) {
+        if (!opts.cli || opts.cli.length === 0) {
+            throw new Error("CLIProvider: cli argv must contain at least 1 element (binary path)");
+        }
+        this.argv = opts.cli;
+        const bin = opts.cli[0] ?? "cli";
+        this.modelLabel = opts.model ?? bin;
+        this.exec = opts.execFn ?? DEFAULT_EXEC;
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.maxBuffer = opts.maxBuffer ?? DEFAULT_MAX_BUFFER;
+    }
+    async healthCheck() {
+        // Spawning the binary just to probe would block. Caller is expected
+        // to verify the binary exists on PATH at startup.
+        return true;
+    }
+    async execute(input) {
+        const fullPrompt = input.context
+            ? `Context:\n${input.context}\n\nTask:\n${input.prompt}`
+            : input.prompt;
+        const [bin, ...staticArgs] = this.argv;
+        if (!bin) {
+            throw new Error("CLIProvider: argv missing binary");
+        }
+        const args = [...staticArgs, fullPrompt];
+        const { stdout } = await this.exec(bin, args, {
+            maxBuffer: this.maxBuffer,
+            timeout: this.timeoutMs,
+        });
+        return { text: stdout };
+    }
+}
+//# sourceMappingURL=CLIProvider.js.map

package/dist/providers/CLIProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CLIProvider.js","sourceRoot":"","sources":["../../src/providers/CLIProvider.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,0EAA0E;AAC1E,0CAA0C;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAmB3C,yEAAyE;AACzE,yEAAyE;AACzE,6DAA6D;AAC7D,MAAM,YAAY,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACvD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAElC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACnC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC;QAC5C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC;QACf,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,WAAW,GAAG,CAAC,IAAyB,EAAE,OAAe,EAAE,EAAE;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAClD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAClD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CACX,IAAI,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,SAAS,IAAI,CAAC,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,MAAM,CACX,IAAI,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,SAAS,EAAE,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,OAAO,MAAM,CACX,IAAI,KAAK,CACP,iBAAiB,IAAI,iBAAiB,IAAI,WAAW,MAAM,IAAI,MAAM,aAAa,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACzG,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAaL,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,4DAA4D;AACnG,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAEtD,MAAM,OAAO,WAAW;IACb,EAAE,GAAe,KAAK,CAAC;IACvB,UAAU,CAAS;IAEX,IAAI,CAAwB;IAC5B,IAAI,CAAa;IACjB,SAAS,CAAS;IAClB,SAAS,CAAS;IAEnC,YAAY,IAAwB;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,WAAW;QACf,oEAAoE;QACpE,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAA4B;QAE5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO;YAC9B,CAAC,CAAC,aAAa,KAAK,CAAC,OAAO,cAAc,KAAK,CAAC,MAAM,EAAE;YACxD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAEjB,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,SAAS;SACxB,CAAC,CAAC;QAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;CACF"}

package/dist/providers/IProvider.d.ts

@@ -0,0 +1,17 @@
+export type ProviderId = "anthropic" | "openai_compatible" | "cli" | "mock";
+export interface IProviderExecuteInput {
+    prompt: string;
+    context?: string;
+    maxTokens?: number;
+}
+export interface IProviderExecuteOutput {
+    text: string;
+    tokensIn?: number;
+    tokensOut?: number;
+}
+export interface IProvider {
+    readonly id: ProviderId;
+    readonly modelLabel: string;
+    healthCheck(): Promise<boolean>;
+    execute(input: IProviderExecuteInput): Promise<IProviderExecuteOutput>;
+}

package/dist/providers/IProvider.js

@@ -0,0 +1,4 @@
+// C0.1 — Wave 0 frozen contract. See docs/adr/0001-contracts.md.
+// Append-only during Wave 1: new optional fields OK; renames / removals NOT.
+export {};
+//# sourceMappingURL=IProvider.js.map

package/dist/providers/IProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IProvider.js","sourceRoot":"","sources":["../../src/providers/IProvider.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,6EAA6E"}

package/dist/providers/MockProvider.d.ts

@@ -0,0 +1,28 @@
+import type { IProvider, IProviderExecuteInput, IProviderExecuteOutput } from "./IProvider.js";
+export type MockResponse = string | ((input: IProviderExecuteInput) => string | IProviderExecuteOutput);
+export interface MockProviderOptions {
+    /** Override the default 'mock-default' model label. */
+    modelLabel?: string;
+    /**
+     * Scripted responses returned in order; cycles modulo length when exhausted.
+     * String entries become `{ text, tokensIn: prompt.length, tokensOut: text.length }`.
+     * Function entries get the full execute() input and may return either a string
+     * (token counts derived) or a full IProviderExecuteOutput.
+     * If omitted, a deterministic echo response is generated.
+     */
+    responses?: ReadonlyArray<MockResponse>;
+    /** Toggle healthCheck() return value. */
+    healthy?: boolean;
+}
+export declare class MockProvider implements IProvider {
+    readonly id: "mock";
+    readonly modelLabel: string;
+    private readonly _healthy;
+    private readonly _responses?;
+    private readonly _calls;
+    constructor(opts?: MockProviderOptions);
+    get callCount(): number;
+    get calls(): readonly IProviderExecuteInput[];
+    healthCheck(): Promise<boolean>;
+    execute(input: IProviderExecuteInput): Promise<IProviderExecuteOutput>;
+}

package/dist/providers/MockProvider.js

@@ -0,0 +1,66 @@
+// Wave 1 F1.3 — in-memory IProvider for unit tests + offline eval.
+// Real providers (F1.1 AnthropicCompatible, F1.2 CLI) are tape-replayed
+// against fixtures captured ONCE on real GLM/agy traffic; everything else
+// runs against MockProvider so tests stay deterministic + zero-cost.
+export class MockProvider {
+    id = "mock";
+    modelLabel;
+    _healthy;
+    _responses;
+    _calls = [];
+    constructor(opts = {}) {
+        this.modelLabel = opts.modelLabel ?? "mock-default";
+        this._healthy = opts.healthy ?? true;
+        this._responses = opts.responses;
+    }
+    get callCount() {
+        return this._calls.length;
+    }
+    get calls() {
+        return this._calls;
+    }
+    async healthCheck() {
+        return this._healthy;
+    }
+    async execute(input) {
+        const callIndex = this._calls.length;
+        this._calls.push(input);
+        if (this._responses && this._responses.length > 0) {
+            const slot = callIndex % this._responses.length;
+            const r = this._responses[slot];
+            if (r !== undefined) {
+                return resolveResponse(r, input);
+            }
+        }
+        const text = echoText(input);
+        return {
+            text,
+            tokensIn: input.prompt.length,
+            tokensOut: text.length,
+        };
+    }
+}
+function echoText(input) {
+    const ctx = input.context ? `|ctx:${input.context}` : "";
+    const cap = input.maxTokens !== undefined ? `|cap:${input.maxTokens}` : "";
+    return `mock:${input.prompt}${ctx}${cap}`;
+}
+function resolveResponse(r, input) {
+    if (typeof r === "string") {
+        return {
+            text: r,
+            tokensIn: input.prompt.length,
+            tokensOut: r.length,
+        };
+    }
+    const result = r(input);
+    if (typeof result === "string") {
+        return {
+            text: result,
+            tokensIn: input.prompt.length,
+            tokensOut: result.length,
+        };
+    }
+    return result;
+}
+//# sourceMappingURL=MockProvider.js.map

package/dist/providers/MockProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockProvider.js","sourceRoot":"","sources":["../../src/providers/MockProvider.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AA2BrE,MAAM,OAAO,YAAY;IACd,EAAE,GAAG,MAAe,CAAC;IACrB,UAAU,CAAS;IAEX,QAAQ,CAAU;IAClB,UAAU,CAA+B;IACzC,MAAM,GAA4B,EAAE,CAAC;IAEtD,YAAY,OAA4B,EAAE;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAChD,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC7B,SAAS,EAAE,IAAI,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAA4B;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,OAAO,QAAQ,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CACtB,CAAe,EACf,KAA4B;IAE5B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC7B,SAAS,EAAE,CAAC,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC7B,SAAS,EAAE,MAAM,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,21 @@
+import type { IProvider } from "./providers/IProvider.js";
+import type { ComposerConfig, RoleName } from "./config/schema.js";
+/**
+ * Wave 3 Step 4 — fallback when neither process.env.ANTHROPIC_MODEL
+ * nor composer.config.json role.model are provided. Tracks the current
+ * GLM family release (z.ai Anthropic-compat endpoint).
+ */
+export declare const DEFAULT_ANTHROPIC_MODEL = "glm-5.1";
+export declare class ProviderNotImplementedError extends Error {
+    constructor(providerId: string);
+}
+export declare class ProviderConfigError extends Error {
+    constructor(providerId: string, field: string);
+}
+export declare class ProviderRegistry {
+    private readonly config;
+    private readonly cache;
+    constructor(config: ComposerConfig);
+    getProviderForRole(role: RoleName): IProvider;
+    private buildProvider;
+}

package/dist/registry.js

@@ -0,0 +1,79 @@
+// Wave 1 F1.4 — ProviderFactory / role → IProvider resolver.
+//
+// Day 2 (2026-05-23): 'anthropic' and 'cli' now wire to real adapters
+// (F1.1 + F1.2). 'openai_compatible' still throws — YAGNI until a
+// concrete need surfaces.
+import { MockProvider } from "./providers/MockProvider.js";
+import { AnthropicCompatibleProvider } from "./providers/AnthropicCompatibleProvider.js";
+import { CLIProvider } from "./providers/CLIProvider.js";
+/**
+ * Wave 3 Step 4 — fallback when neither process.env.ANTHROPIC_MODEL
+ * nor composer.config.json role.model are provided. Tracks the current
+ * GLM family release (z.ai Anthropic-compat endpoint).
+ */
+export const DEFAULT_ANTHROPIC_MODEL = "glm-5.1";
+export class ProviderNotImplementedError extends Error {
+    constructor(providerId) {
+        super(`Provider '${providerId}' is not wired. Composer ships 'mock', 'anthropic', and 'cli' adapters; 'openai_compatible' is YAGNI until needed.`);
+        this.name = "ProviderNotImplementedError";
+    }
+}
+export class ProviderConfigError extends Error {
+    constructor(providerId, field) {
+        super(`Provider '${providerId}' requires '${field}' in composer.config.json (or its env var).`);
+        this.name = "ProviderConfigError";
+    }
+}
+export class ProviderRegistry {
+    config;
+    cache = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    getProviderForRole(role) {
+        const cached = this.cache.get(role);
+        if (cached)
+            return cached;
+        const created = this.buildProvider(this.config.roles[role]);
+        this.cache.set(role, created);
+        return created;
+    }
+    buildProvider(roleConfig) {
+        switch (roleConfig.provider) {
+            case "mock":
+                return new MockProvider({ modelLabel: roleConfig.model });
+            case "anthropic": {
+                if (!roleConfig.baseUrl)
+                    throw new ProviderConfigError("anthropic", "baseUrl");
+                if (!roleConfig.apiKeyEnv)
+                    throw new ProviderConfigError("anthropic", "apiKeyEnv");
+                const apiKey = process.env[roleConfig.apiKeyEnv];
+                if (!apiKey) {
+                    throw new ProviderConfigError("anthropic", `env var ${roleConfig.apiKeyEnv} (set it via .env.json or shell)`);
+                }
+                // Step 4 precedence: env > role.model > DEFAULT_ANTHROPIC_MODEL.
+                const envModel = process.env["ANTHROPIC_MODEL"];
+                const model = (typeof envModel === "string" && envModel.length > 0 ? envModel : undefined) ??
+                    roleConfig.model ??
+                    DEFAULT_ANTHROPIC_MODEL;
+                return new AnthropicCompatibleProvider({
+                    baseUrl: roleConfig.baseUrl,
+                    apiKey,
+                    model,
+                });
+            }
+            case "cli": {
+                if (!roleConfig.cli || roleConfig.cli.length === 0) {
+                    throw new ProviderConfigError("cli", "cli (argv array)");
+                }
+                return new CLIProvider({
+                    cli: roleConfig.cli,
+                    model: roleConfig.model,
+                });
+            }
+            case "openai_compatible":
+                throw new ProviderNotImplementedError(roleConfig.provider);
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,0BAA0B;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAOzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,UAAkB;QAC5B,KAAK,CACH,aAAa,UAAU,oHAAoH,CAC5I,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,UAAkB,EAAE,KAAa;QAC3C,KAAK,CACH,aAAa,UAAU,eAAe,KAAK,6CAA6C,CACzF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAGE;IAFZ,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,kBAAkB,CAAC,IAAc;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,UAAsB;QAC1C,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAE5D,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAC/E,IAAI,CAAC,UAAU,CAAC,SAAS;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,WAAW,UAAU,CAAC,SAAS,kCAAkC,CAClE,CAAC;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAChD,MAAM,KAAK,GACT,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5E,UAAU,CAAC,KAAK;oBAChB,uBAAuB,CAAC;gBAC1B,OAAO,IAAI,2BAA2B,CAAC;oBACrC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,MAAM;oBACN,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,IAAI,WAAW,CAAC;oBACrB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,mBAAmB;gBACtB,MAAM,IAAI,2BAA2B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}

package/dist/server.d.ts

@@ -0,0 +1,6 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ProviderRegistry } from "./registry.js";
+export declare const COMPOSER_RESEARCH: "composer_research";
+export declare const COMPOSER_CODE: "composer_code";
+export declare const COMPOSER_REVIEW: "composer_review";
+export declare function createComposerServer(registry: ProviderRegistry): McpServer;

package/dist/server.js

@@ -0,0 +1,85 @@
+// Wave 1 F2.1 — factory for the Composer MCP server (per §8 Day 1).
+// Pure function: takes a ProviderRegistry, returns an unconnected McpServer
+// with the three C0.3 tools registered. Test code connects via
+// InMemoryTransport; src/index.ts connects via StdioServerTransport.
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+// C0.3 — locked MCP tool names. Referenced by subagent allowlists +
+// boundary_guard.sh; do not rename without a new ADR.
+export const COMPOSER_RESEARCH = "composer_research";
+export const COMPOSER_CODE = "composer_code";
+export const COMPOSER_REVIEW = "composer_review";
+const RESEARCH_DESCRIPTION = "MANDATORY for ALL research, documentation lookup, web search, and " +
+    "context gathering. The orchestrator MUST delegate research questions " +
+    "to this tool. Do not search or hypothesise in the main session.";
+const CODE_DESCRIPTION = "MANDATORY for ALL code writing, refactoring, debugging, and " +
+    "implementation. The orchestrator MUST delegate implementation to this " +
+    "tool. Do not write code in the main session.";
+const REVIEW_DESCRIPTION = "MANDATORY for ALL code review, diff critique, and finding bugs in " +
+    "candidate patches. The orchestrator MUST delegate review to this tool " +
+    "before integrating worker output.";
+export function createComposerServer(registry) {
+    const server = new McpServer({
+        name: "composer",
+        version: "0.0.0",
+    });
+    // Per advisor pass 2026-05-23: tool annotations signal behaviour to the
+    // orchestrator without changing execution. readOnlyHint / openWorldHint /
+    // destructiveHint / idempotentHint are append-only per ADR 0001.
+    server.registerTool(COMPOSER_RESEARCH, {
+        description: RESEARCH_DESCRIPTION,
+        inputSchema: {
+            prompt: z.string().min(1),
+            context: z.string().optional(),
+        },
+        annotations: {
+            title: "Composer Research",
+            readOnlyHint: true,
+            openWorldHint: true,
+            destructiveHint: false,
+            idempotentHint: false,
+        },
+    }, async ({ prompt, context }) => {
+        const provider = registry.getProviderForRole("researcher");
+        const result = await provider.execute({ prompt, context });
+        return { content: [{ type: "text", text: result.text }] };
+    });
+    server.registerTool(COMPOSER_CODE, {
+        description: CODE_DESCRIPTION,
+        inputSchema: {
+            prompt: z.string().min(1),
+            context: z.string().optional(),
+        },
+        annotations: {
+            title: "Composer Code",
+            readOnlyHint: false,
+            openWorldHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+        },
+    }, async ({ prompt, context }) => {
+        const provider = registry.getProviderForRole("coder");
+        const result = await provider.execute({ prompt, context });
+        return { content: [{ type: "text", text: result.text }] };
+    });
+    server.registerTool(COMPOSER_REVIEW, {
+        description: REVIEW_DESCRIPTION,
+        inputSchema: {
+            prompt: z.string().min(1),
+            diff: z.string().min(1),
+        },
+        annotations: {
+            title: "Composer Review",
+            readOnlyHint: true,
+            openWorldHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+        },
+    }, async ({ prompt, diff }) => {
+        const provider = registry.getProviderForRole("reviewer");
+        const result = await provider.execute({ prompt, context: diff });
+        return { content: [{ type: "text", text: result.text }] };
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,4EAA4E;AAC5E,+DAA+D;AAC/D,qEAAqE;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,oEAAoE;AACpE,sDAAsD;AACtD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG,eAAwB,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAA0B,CAAC;AAE1D,MAAM,oBAAoB,GACxB,oEAAoE;IACpE,uEAAuE;IACvE,iEAAiE,CAAC;AAEpE,MAAM,gBAAgB,GACpB,8DAA8D;IAC9D,wEAAwE;IACxE,8CAA8C,CAAC;AAEjD,MAAM,kBAAkB,GACtB,oEAAoE;IACpE,wEAAwE;IACxE,mCAAmC,CAAC;AAEtC,MAAM,UAAU,oBAAoB,CAAC,QAA0B;IAC7D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,wEAAwE;IACxE,0EAA0E;IAC1E,iEAAiE;IAEjE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC/B;QACD,WAAW,EAAE;YACX,KAAK,EAAE,mBAAmB;YAC1B,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;SACtB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC/B;QACD,WAAW,EAAE;YACX,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;SACtB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACxB;QACD,WAAW,EAAE;YACX,KAAK,EAAE,iBAAiB;YACxB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/util/slug.d.ts

@@ -0,0 +1 @@
+export declare function slugify(text: string): string;

package/dist/util/slug.js

@@ -0,0 +1,7 @@
+export function slugify(text) {
+    return text
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+}
+//# sourceMappingURL=slug.js.map

package/dist/util/slug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.js","sourceRoot":"","sources":["../../src/util/slug.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "agent-composer",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Multi-agent orchestration MCP server. Claude orchestrates; GLM and agy do the work.",
+  "bin": {
+    "agent-composer": "./dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "composer.config.schema.json",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./schema": "./composer.config.schema.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc && node scripts/postbuild.mjs",
+    "start": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "lint": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "test:hooks": "bash tests/hooks/run.sh",
+    "test:scripts": "bash tests/scripts/run.sh",
+    "test:all": "npm run test && npm run test:hooks && npm run test:scripts",
+    "usage": "npx -y ccusage daily",
+    "schema:lint": "ajv compile --strict=true -c ajv-formats -s composer.config.schema.json && ajv validate --strict=false -c ajv-formats -s composer.config.schema.json -d composer.config.json && ajv compile --strict=true -s plugin.schema.json && ajv validate --strict=true -s plugin.schema.json -d 'plugin/*/plugin.json'",
+    "prepublishOnly": "npm run lint && npm run test && npm run build && npm run schema:lint"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.98.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "dotenv": "^17.4.2",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@vitest/coverage-v8": "^4.1.7",
+    "ajv-cli": "^5.0.0",
+    "ajv-formats": "^3.0.1",
+    "tsx": "^4.22.3",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.7"
+  },
+  "engines": {
+    "node": ">=18.17.0"
+  }
+}