agent-composer 0.1.15 → 0.2.1

package/dist/util/projectToolResult.js

@@ -0,0 +1,169 @@
+const DEFAULT_MAX_CHARS = 16_000;
+const PROJECTED_MARKER = /(?:^|\n)… \[elided \d+ chars \/ \d+ lines\] …(?:\n|$)/;
+const JSON_PREFIX = "[projected JSON:";
+const LOG_LINE = /^(?:\s*(?:PASS\b|FAIL\b|✓|✗|Error\b)|[^:\n]+:\d+:\d+\b|\s+at [^\n]+:\d+(?::\d+)?\b)/;
+export function projectToolResult(input, opts = {}) {
+    if (typeof input !== "string") {
+        throw new Error("projectToolResult: input must be a string");
+    }
+    const options = normalizeOptions(opts);
+    const kind = detectKind(input);
+    if (input.length === 0 || input.length <= options.maxChars || isAlreadyProjected(input)) {
+        return {
+            text: input,
+            projected: false,
+            originalChars: input.length,
+            keptChars: input.length,
+            kind,
+        };
+    }
+    const text = kind === "json"
+        ? projectJson(input, options.maxChars)
+        : projectText(input, options.headChars, options.tailChars);
+    return {
+        text,
+        projected: true,
+        originalChars: input.length,
+        keptChars: text.length,
+        kind,
+    };
+}
+function normalizeOptions(opts) {
+    const maxChars = normalizeLimit("maxChars", opts.maxChars, DEFAULT_MAX_CHARS);
+    const defaultHeadChars = Math.round(maxChars * 0.6);
+    const defaultTailChars = Math.round(maxChars * 0.25);
+    const headChars = normalizeLimit("headChars", opts.headChars, defaultHeadChars, true);
+    const tailChars = normalizeLimit("tailChars", opts.tailChars, defaultTailChars, true);
+    return { maxChars, headChars, tailChars };
+}
+function normalizeLimit(name, value, fallback, allowZero = false) {
+    const raw = value ?? fallback;
+    if (raw === Number.POSITIVE_INFINITY)
+        return Number.MAX_SAFE_INTEGER;
+    if (!Number.isFinite(raw)) {
+        throw new Error(`projectToolResult: ${name} must be a finite number`);
+    }
+    const rounded = Math.round(raw);
+    if (rounded < 0 || (!allowZero && rounded === 0)) {
+        const expectation = allowZero ? "non-negative" : "positive";
+        throw new Error(`projectToolResult: ${name} must be ${expectation}`);
+    }
+    return rounded;
+}
+function isAlreadyProjected(input) {
+    return input.startsWith(JSON_PREFIX) || PROJECTED_MARKER.test(input);
+}
+function detectKind(input) {
+    const trimmed = input.trim();
+    if (trimmed.length > 0 && (trimmed.startsWith("{") || trimmed.startsWith("["))) {
+        try {
+            JSON.parse(trimmed);
+            return "json";
+        }
+        catch {
+            // Invalid JSON still falls through to text heuristics.
+        }
+    }
+    if (looksLikeDiff(input))
+        return "diff";
+    if (looksLikeLog(input))
+        return "log";
+    return "generic";
+}
+function looksLikeDiff(input) {
+    if (/^diff --git /m.test(input) || /^@@ /m.test(input))
+        return true;
+    const plusMinusLines = input
+        .split("\n")
+        .filter((line) => /^[+-]/.test(line)).length;
+    return plusMinusLines >= 6;
+}
+function looksLikeLog(input) {
+    return input.split("\n").some((line) => LOG_LINE.test(line));
+}
+function projectText(input, headChars, tailChars) {
+    const collapsed = collapseRepeatedLines(input);
+    const head = collapsed.slice(0, headChars);
+    const tailStart = tailChars === 0
+        ? collapsed.length
+        : Math.max(head.length, collapsed.length - tailChars);
+    const middle = collapsed.slice(head.length, tailStart);
+    const tail = collapsed.slice(tailStart);
+    const marker = `\n… [elided ${middle.length} chars / ${countLines(middle)} lines] …\n`;
+    return `${head}${marker}${tail}`;
+}
+function collapseRepeatedLines(input) {
+    const lines = input.split("\n");
+    const collapsed = [];
+    for (let index = 0; index < lines.length;) {
+        const line = lines[index] ?? "";
+        let count = 1;
+        while (index + count < lines.length && lines[index + count] === line) {
+            count++;
+        }
+        collapsed.push(count > 3 ? `${line} … (×${count})` : lines.slice(index, index + count).join("\n"));
+        index += count;
+    }
+    return collapsed.join("\n");
+}
+function countLines(input) {
+    if (input.length === 0)
+        return 0;
+    return input.split("\n").length;
+}
+function projectJson(input, maxChars) {
+    const parsed = JSON.parse(input.trim());
+    const summary = summarizeJson(parsed);
+    const sample = JSON.stringify(sampleJson(parsed), null, 2) ?? "";
+    const prefix = `${JSON_PREFIX} ${summary}]\n`;
+    if (prefix.length >= maxChars) {
+        return `${prefix.slice(0, Math.max(0, maxChars - 1))}…`;
+    }
+    const remaining = maxChars - prefix.length;
+    return `${prefix}${truncate(sample, remaining)}`;
+}
+function summarizeJson(value, depth = 0) {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            return "array(length=0)";
+        if (depth >= 3)
+            return `array(length=${value.length})`;
+        return `array(length=${value.length}, sample=${summarizeJson(value[0], depth + 1)})`;
+    }
+    if (typeof value === "object") {
+        const entries = Object.entries(value);
+        if (entries.length === 0)
+            return "object{}";
+        if (depth >= 3)
+            return `object(keys=${entries.length})`;
+        const visibleEntries = entries.slice(0, 8).map(([key, entryValue]) => `${key}:${summarizeJson(entryValue, depth + 1)}`);
+        const hidden = entries.length - visibleEntries.length;
+        const suffix = hidden > 0 ? `,…+${hidden} keys` : "";
+        return `object{${visibleEntries.join(",")}${suffix}}`;
+    }
+    return typeof value;
+}
+function sampleJson(value, depth = 0) {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (depth >= 3)
+        return Array.isArray(value) ? [] : {};
+    if (Array.isArray(value)) {
+        return value.length > 0 ? [sampleJson(value[0], depth + 1)] : [];
+    }
+    return Object.fromEntries(Object.entries(value)
+        .slice(0, 8)
+        .map(([key, entryValue]) => [key, sampleJson(entryValue, depth + 1)]));
+}
+function truncate(input, maxChars) {
+    if (maxChars <= 0)
+        return "";
+    if (input.length <= maxChars)
+        return input;
+    if (maxChars === 1)
+        return "…";
+    return `${input.slice(0, maxChars - 1)}…`;
+}
+//# sourceMappingURL=projectToolResult.js.map

package/dist/util/projectToolResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectToolResult.js","sourceRoot":"","sources":["../../src/util/projectToolResult.ts"],"names":[],"mappings":"AAgBA,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AACjF,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,QAAQ,GAAG,qFAAqF,CAAC;AAQvG,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,OAAuB,EAAE;IAEzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK,CAAC,MAAM;YAC3B,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,IAAI;SACL,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/D,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,KAAK,CAAC,MAAM;QAC3B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAoB;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9E,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAEtF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,KAAyB,EACzB,QAAgB,EAChB,SAAS,GAAG,KAAK;IAEjB,MAAM,GAAG,GAAG,KAAK,IAAI,QAAQ,CAAC;IAC9B,IAAI,GAAG,KAAK,MAAM,CAAC,iBAAiB;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,0BAA0B,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,YAAY,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,cAAc,GAAG,KAAK;SACzB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,cAAc,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB,EAAE,SAAiB;IACtE,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,eAAe,MAAM,CAAC,MAAM,YAAY,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;IACvF,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACrE,KAAK,EAAE,CAAC;QACV,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnG,KAAK,IAAI,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,QAAgB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAY,CAAC;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,GAAG,WAAW,IAAI,OAAO,KAAK,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC;QACjD,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,gBAAgB,KAAK,CAAC,MAAM,GAAG,CAAC;QACvD,OAAO,gBAAgB,KAAK,CAAC,MAAM,YAAY,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QAC5C,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,eAAe,OAAO,CAAC,MAAM,GAAG,CAAC;QACxD,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAC5C,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CACxE,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,UAAU,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,QAAgB;IAC/C,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/B,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agent-composer",
-  "version": "0.1.15",
+  "version": "0.2.1",
   "type": "module",
-  "description": "Multi-agent orchestration MCP server. Claude orchestrates; GLM and agy do the work.",
+  "description": "Multi-agent orchestration MCP server. Claude orchestrates; GLM, Codex, and agy do the work.",
   "bin": {
     "agent-composer": "./dist/index.js"
   },
@@ -32,6 +32,7 @@
     "test:hooks": "bash tests/hooks/run.sh",
     "test:scripts": "bash tests/scripts/run.sh",
     "test:all": "npm run test && npm run test:hooks && npm run test:scripts",
+    "eval:routes": "tsx evals/scripts/route-compare.ts",
     "usage": "npx -y ccusage daily",
     "schema:lint": "ajv compile --strict=true -c ajv-formats -s composer.config.schema.json && ajv validate --strict=false -c ajv-formats -s composer.config.schema.json -d composer.config.json && ajv compile --strict=true -s plugin.schema.json && ajv validate --strict=true -s plugin.schema.json -d 'plugin/*/plugin.json'",
     "prepublishOnly": "npm run lint && npm run test && npm run build && npm run schema:lint"

package/plugin/composer-mastermind/README.md

@@ -1,18 +1,35 @@
 # composer-mastermind
 
-> Multi-agent orchestrator plugin for Claude Code. Claude orchestrates; GLM and agy execute.
+> Multi-agent orchestrator plugin for Claude Code. Claude orchestrates; GLM, Codex, and agy execute. Claude Code CLI is available as a premium review escalation.
 
 ## What it is
 
-Composer-mastermind is a Claude Code plugin that turns the main session into a coordinator. The orchestrator never writes code, runs bash, or edits files directly — instead it dispatches work through three subagents wired to the `agent-composer` MCP server:
+Composer-mastermind is a Claude Code plugin that turns the main session into a coordinator. The orchestrator never writes code or edits files directly; it may use Bash for inspection and verification. Code changes are dispatched through subagents and direct apply tools wired to the `agent-composer` MCP server:
 
 | Subagent | Tool | Role |
 |---|---|---|
-| `coder` | `mcp__composer__composer_code` | Writes code via GLM (Anthropic-compatible endpoint) |
-| `researcher` | `mcp__composer__composer_research` | Docs lookup + research via `agy` CLI (Gemini) |
+| direct | `mcp__composer__composer_handoff_create` | Writes shared context packets for multi-provider work |
+| direct | `mcp__composer__composer_code_cli` | Default coding path; CLI executor applies code directly from the MCP server root; configure as Codex or agy |
+| direct | `mcp__composer__composer_code_chain` | GLM-authored fallback; server applies complete-file blocks deterministically |
+| `coder` | `mcp__composer__composer_code` | Patch-only legacy path via GLM (Anthropic-compatible endpoint) |
+| `researcher` | `mcp__composer__composer_research` | Docs lookup + web research via Codex CLI search in read-only mode |
 | `reviewer` | `mcp__composer__composer_review` | Code review via `agy` CLI |
+| `reviewer-claude` | `mcp__composer__composer_review_claude` | Premium Claude second-opinion review for explicit/risky cases |
 
-The orchestrator's allowed-tool surface is enforced by `boundary_guard.sh` — `Edit`, `Write`, `Bash`, `NotebookEdit` are denied; only the three composer MCP tools plus `Read`/`Glob` pass.
+The orchestrator's allowed-tool surface is enforced by `boundary_guard.sh` — `Edit`, `Update`, `Write`, `NotebookEdit`, and MCP write/edit/exec variants are denied; native Bash, composer MCP tools, `Read`, and `Glob` pass.
+
+Soft-disable Composer hooks without editing Claude Code settings:
+
+```bash
+COMPOSER_ENABLED=0 claude          # one launch
+touch ~/.claude/composer.disabled  # global live toggle off
+rm -f ~/.claude/composer.disabled  # global live toggle on
+touch .composer-disabled           # project-local toggle off
+```
+
+The sentinel disables hooks immediately. To fully suppress skill autoload,
+set `"composer-mastermind": "off"` in Claude Code `skillOverrides` and restart
+CC.
 
 ## What's inside
 
@@ -23,7 +40,8 @@ composer-mastermind/
 ├── agents/                                  # haiku-wrapped subagent defs
 │   ├── coder.md
 │   ├── researcher.md
-│   └── reviewer.md
+│   ├── reviewer.md
+│   └── reviewer-claude.md
 ├── commands/
 │   └── evolve.md                            # /evolve slash command (GEPA loop)
 └── hooks/

package/plugin/composer-mastermind/agents/coder.md

@@ -1,13 +1,13 @@
 ---
 name: coder
 description: Use when the orchestrator needs code written, refactored, debugged, or implemented. Delegates code generation to composer_code (GLM) and applies the patch to disk.
-tools: mcp__composer__composer_code, Read, Glob, Edit, Write, Bash
+tools: mcp__composer__composer_code, Read, Glob, Edit, Update, Write, Bash
 model: haiku
 ---
 
 You are the Composer **Coder** subagent. Your job is two-step:
 1. Call `mcp__composer__composer_code` to get the code/patch from GLM.
-2. Apply that patch to disk using `Edit` or `Write`.
+2. Apply that patch to disk using `Edit` / `Update` or `Write`.
 
 # Workflow
 
@@ -15,18 +15,18 @@ You are the Composer **Coder** subagent. Your job is two-step:
 2. Use `Read` / `Glob` to pin exact file paths, surrounding code, and imports — feed these into the `prompt` / `context` arguments. GLM cannot see the repo itself.
 3. Call `mcp__composer__composer_code` ONCE with the assembled brief.
 4. Parse GLM's response:
-   - If GLM returns a unified diff → apply via `Edit` (or multiple `Edit` calls).
+   - If GLM returns a unified diff → apply via `Edit` / `Update` (or multiple calls).
    - If GLM returns full file content → use `Write`.
-   - If GLM returns a code block targeting a specific location → use `Edit` with the matching `old_string` / `new_string`.
+   - If GLM returns a code block targeting a specific location → use `Edit` / `Update` with the matching `old_string` / `new_string`.
 5. Return a 1-3 sentence summary of what changed (file + line range + intent). DO NOT return GLM's raw output — only the final result.
 
 # Hard rules
 
 - DO call `composer_code` exactly ONCE per task. If GLM's output is malformed, fail to the orchestrator with a short error.
-- DO apply patches via Edit/Write — that's why those tools are in your list.
-- DO NOT re-Read after Edit/Write — trust the tool's return value. PostToolUse hooks run lint + tsc as the verification gate. If a real bug shipped, the reviewer subagent catches it on the next pass.
+- DO apply patches via Edit/Update/Write — that's why those tools are in your list.
+- DO NOT re-Read after Edit/Update/Write — trust the tool's return value. PostToolUse hooks run lint + tsc as the verification gate. If a real bug shipped, the reviewer subagent catches it on the next pass.
 - DO NOT write code yourself or modify GLM's output beyond mechanical patch application.
 - DO NOT call composer_code more than once — if it fails, return the error.
 - DO use `Bash` for filesystem setup and verification: `mkdir -p` before a Write, `ls`/`cat` to confirm a patch actually landed on disk, and the self-check gate (`npm run typecheck`, `vitest run <file>`). This prevents the "wrote files" / "cannot access filesystem" contradiction.
-- DO NOT hand-author code edits through Bash (no `sed`/`awk`/`perl` to rewrite source). Apply GLM's actual code via `Edit`/`Write` only — Bash is for setup, inspection, and verification, never for authoring.
+- DO NOT hand-author code edits through Bash (no `sed`/`awk`/`perl` to rewrite source). Apply GLM's actual code via `Edit`/`Update`/`Write` only — Bash is for setup, inspection, and verification, never for authoring.
 - DO NOT critique the returned code — that is the reviewer's job.

package/plugin/composer-mastermind/agents/reviewer-claude.md

@@ -0,0 +1,31 @@
+---
+name: reviewer-claude
+description: Use when the user explicitly asks for Claude code review, or when a high-risk/security-sensitive diff needs a premium second-opinion review after the default reviewer. Delegates to the composer_review_claude MCP tool.
+tools: mcp__composer__composer_review_claude, Read, Glob
+model: haiku
+---
+
+You are the Composer **Claude Reviewer** subagent. Your only job is to call
+the `composer_review_claude` MCP tool with `{ prompt, diff }` and return its
+findings.
+
+# What you DO
+
+- Receive the orchestrator's review focus (`prompt`) and the candidate
+  patch (`diff`).
+- Use `Read` / `Glob` to load surrounding files when the diff alone is
+  insufficient context for the Claude reviewer provider.
+- In the `prompt` to `composer_review_claude`, you MUST include the changed
+  file content or diff inline, and tell it explicitly to run `npx tsc --noEmit`
+  plus any existing tests in the current directory and report verbatim output.
+- Call `mcp__composer__composer_review_claude` once.
+- Return the tool output verbatim.
+
+# What you DO NOT do
+
+- DO NOT replace the default `reviewer` gate for routine diffs unless the
+  user requested Claude or the orchestrator asked for premium escalation.
+- DO NOT propose fixes; only flag issues.
+- DO NOT edit or write files yourself, and do NOT run tests in YOUR context.
+- DO NOT call any tool other than `composer_review_claude`, `Read`, or `Glob`.
+- DO NOT soften or rephrase the reviewer's output.

package/plugin/composer-mastermind/hooks/boundary_guard.sh

@@ -9,11 +9,34 @@
 
 set -u
 
+composer_disabled() {
+  case "${COMPOSER_ENABLED:-}" in
+    0|false|FALSE|off|OFF|no|NO) return 0 ;;
+  esac
+  case "${COMPOSER_DISABLED:-}" in
+    1|true|TRUE|on|ON|yes|YES) return 0 ;;
+  esac
+  if [[ -n "${COMPOSER_DISABLED_FILE:-}" && -e "$COMPOSER_DISABLED_FILE" ]]; then
+    return 0
+  fi
+  if [[ -n "${CLAUDE_PROJECT_DIR:-}" && -e "$CLAUDE_PROJECT_DIR/.composer-disabled" ]]; then
+    return 0
+  fi
+  if [[ -n "${HOME:-}" && -e "$HOME/.claude/composer.disabled" ]]; then
+    return 0
+  fi
+  return 1
+}
+
+if composer_disabled; then
+  exit 0
+fi
+
 emit_deny() {
   local reason="$1"
   # Claude Code v2.1.150+ requires the decision wrapped in hookSpecificOutput.
   # Top-level {hookEventName,permissionDecision,permissionDecisionReason} is
-  # parsed without error but silently ignored — Edit/Write succeed anyway.
+  # parsed without error but silently ignored — Edit/Update/Write succeed anyway.
   jq -nc --arg r "$reason" \
     '{hookSpecificOutput:{hookEventName:"PreToolUse", permissionDecision:"deny", permissionDecisionReason:$r}}' 2>/dev/null \
     || printf '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"%s"}}\n' "$reason"
@@ -62,25 +85,32 @@ if [[ -e "$STOP_FILE" ]] && [[ "$TOOL" == mcp__composer__* ]]; then
 fi
 
 # 3.7. Subagent context bypass.
-#   Composer's coder subagent must Edit/Write to apply GLM's patch output.
+#   Composer's coder subagent must Edit/Update/Write to apply GLM's patch output.
 #   The hook fires identically for main-thread and subagent calls — without
 #   this carve-out the apply step is impossible. Detect subagent via the
 #   three field-name shapes Claude Code has emitted across recent versions.
 TRANSCRIPT="$(jq -r '.transcript_path // empty' <<<"$INPUT" 2>/dev/null)"
 AGENT_ID="$(jq -r '.agent_id // .agentId // empty' <<<"$INPUT" 2>/dev/null)"
+AGENT_NAME="$(jq -r '.agent_name // .agentName // .subagent_type // .subagentType // .tool_input.subagent_type // empty' <<<"$INPUT" 2>/dev/null)"
 SIDECHAIN="$(jq -r '.is_sidechain // .isSidechain // empty' <<<"$INPUT" 2>/dev/null)"
 if [[ "$TRANSCRIPT" == */subagents/* ]] \
+   || [[ "$TRANSCRIPT" == */agents/* ]] \
    || [[ -n "$AGENT_ID" ]] \
+   || [[ -n "$AGENT_NAME" ]] \
    || [[ "$SIDECHAIN" == "true" ]]; then
   exit 0
 fi
 
-# 4. Block list — native dangerous tools + MCP-prefixed variants.
+# 4. Block list — native dangerous file-mutating tools + MCP-prefixed variants.
+# Native Bash is allowed on the main thread for inspection and verification;
+# the orchestrator skill still forbids using Bash to author code or perform
+# destructive state changes. MCP exec/bash wrappers stay blocked because they
+# bypass Claude Code's native Bash permissions surface.
 case "$TOOL" in
-  Bash|Edit|Write|NotebookEdit \
+  Edit|Update|Write|NotebookEdit \
   | mcp__*__write_file | mcp__*__edit_file | mcp__*__bash \
   | mcp__*__write | mcp__*__edit | mcp__*__exec)
-    emit_deny "DENY (main thread): route Edit/Write via Task(subagent_type=\"coder\"). Coder applies the patch and may use Bash to verify."
+    emit_deny "DENY (main thread): route Edit/Update/Write via Task(subagent_type=\"coder\"). Native Bash is allowed for inspection and verification."
     ;;
 esac
 

package/plugin/composer-mastermind/hooks/learn.sh

@@ -8,6 +8,29 @@
 
 set -u
 
+composer_disabled() {
+  case "${COMPOSER_ENABLED:-}" in
+    0|false|FALSE|off|OFF|no|NO) return 0 ;;
+  esac
+  case "${COMPOSER_DISABLED:-}" in
+    1|true|TRUE|on|ON|yes|YES) return 0 ;;
+  esac
+  if [[ -n "${COMPOSER_DISABLED_FILE:-}" && -e "$COMPOSER_DISABLED_FILE" ]]; then
+    return 0
+  fi
+  if [[ -n "${CLAUDE_PROJECT_DIR:-}" && -e "$CLAUDE_PROJECT_DIR/.composer-disabled" ]]; then
+    return 0
+  fi
+  if [[ -n "${HOME:-}" && -e "$HOME/.claude/composer.disabled" ]]; then
+    return 0
+  fi
+  return 1
+}
+
+if composer_disabled; then
+  exit 0
+fi
+
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 LEARN_DIR="$PROJECT_DIR/.claude/learnings"
 MONTH="$(date +%Y-%m)"

package/plugin/composer-mastermind/hooks/lint-on-save.sh

@@ -1,6 +1,30 @@
 #!/usr/bin/env bash
-# PostToolUse hook: auto-lint after Edit/Write/NotebookEdit. Fail-soft.
+# PostToolUse hook: auto-lint after Edit/Update/Write/NotebookEdit. Fail-soft.
 set -u
+
+composer_disabled() {
+  case "${COMPOSER_ENABLED:-}" in
+    0|false|FALSE|off|OFF|no|NO) return 0 ;;
+  esac
+  case "${COMPOSER_DISABLED:-}" in
+    1|true|TRUE|on|ON|yes|YES) return 0 ;;
+  esac
+  if [[ -n "${COMPOSER_DISABLED_FILE:-}" && -e "$COMPOSER_DISABLED_FILE" ]]; then
+    return 0
+  fi
+  if [[ -n "${CLAUDE_PROJECT_DIR:-}" && -e "$CLAUDE_PROJECT_DIR/.composer-disabled" ]]; then
+    return 0
+  fi
+  if [[ -n "${HOME:-}" && -e "$HOME/.claude/composer.disabled" ]]; then
+    return 0
+  fi
+  return 1
+}
+
+if composer_disabled; then
+  exit 0
+fi
+
 command -v jq >/dev/null 2>&1 || exit 0
 INPUT="$(cat || true)"
 [[ -z "$INPUT" ]] && exit 0

package/plugin/composer-mastermind/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "composer-mastermind",
-  "version": "0.1.15",
-  "description": "Multi-agent orchestrator: Claude as brain, GLM/agy as executors. Dispatches code/research/review work to subagents wired through the @composer-mcp/server MCP server.",
+  "version": "0.2.0",
+  "description": "Multi-agent orchestrator: Claude as brain, GLM/Codex/agy as executors. Dispatches code/research/review work to subagents wired through the @composer-mcp/server MCP server.",
   "claudeCodeVersion": ">=4.6",
   "requires": [
     "agent-composer"
@@ -24,6 +24,7 @@
     "agents/coder.md",
     "agents/researcher.md",
     "agents/reviewer.md",
+    "agents/reviewer-claude.md",
     "agents/explorer.md"
   ],
   "commands": [

package/plugin/composer-mastermind/skills/composer-mastermind/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: composer-mastermind
-description: MUST USE for any code change request — edit, modify, add, remove, fix, refactor, implement, write, change, update files. Also for research, documentation lookup, or code review. Routes work to subagents (researcher / coder / reviewer) via Task tool. Main Claude does NOT call Edit/Write/NotebookEdit directly; the boundary_guard hook will deny them and require dispatch.
+description: MUST USE for any code change request — edit, modify, add, remove, fix, refactor, implement, write, change, update files. Also for research, documentation lookup, or code review. Routes work to subagents (researcher / coder / reviewer / reviewer-claude) via Task tool. Main Claude does NOT call Edit/Update/Write/NotebookEdit directly; the boundary_guard hook will deny them and require dispatch. Main Claude may use Bash only for inspection and verification.
 ---
 
 # Composer Mastermind
 
 You are the **orchestrator**. Your sole job is memory, planning,
-delegation, and integration. Workers (the `researcher`, `coder`, and
-`reviewer` subagents) execute. Your context window is the most expensive
+delegation, and integration. Workers (the `researcher`, `coder`, `reviewer`,
+and `reviewer-claude` subagents) execute. Your context window is the most expensive
 resource in the entire system — spend it on planning, not on raw worker
 output.
 
@@ -18,20 +18,30 @@ output.
 
 # Hard prohibitions
 
-- **DO NOT** use `Edit`, `Write`, `Bash`, or `NotebookEdit`. If you
+- **DO NOT** use `Edit`, `Update`, `Write`, or `NotebookEdit`. If you
   need any of these, delegate to a subagent or ask the user.
+- **DO** use `Bash` for bounded inspection and verification: `git status`,
+  `git diff`, `ls`, `pwd`, `npm test`, and targeted type/test commands.
+  **DO NOT** use Bash to author code, rewrite files, install dependencies,
+  remove files, push, deploy, or mutate state outside the requested workflow.
 - **DO NOT** call `mcp__composer__composer_research`, `composer_code`,
   or `composer_review` directly from the main session. **ALWAYS**
   dispatch via the `Task` tool to the matching subagent so the worker's
   context window stays isolated and only the summary returns to you.
+- **DO** call `composer_handoff_create` directly before multi-provider
+  or multi-worker work. It writes a compact shared packet under
+  `.composer/handoffs/`; pass the returned `handoffPath` into Codex,
+  GLM, agy, researcher, and reviewer calls so they share the same facts.
 - **EXCEPTION — `composer_code_chain` / `composer_code_cli`:** call these
   **directly** from the main session for any file create / edit / refactor.
   They return only a short summary (the executor already applied the files
   off-CC), so there is no large patch to isolate and no CC tokens spent
   applying. Do NOT wrap in a subagent or follow with `Edit`/`Write`.
-  **Default to `composer_code_chain`** (GLM authors off-CC → agy applies
-  off-CC); use `composer_code_cli` when agy may author directly (fastest).
-- **NEVER** write code in the main session — not even a one-liner. Delegate to `coder`.
+  **Default to `composer_code_cli`** for coding; the configured CLI executor
+  is Codex on this machine. Use `composer_code_chain` when you explicitly
+  want GLM to author complete files and the server to apply them.
+- **NEVER** write code in the main session — not even a one-liner or a Bash
+  heredoc / `sed` / `awk` rewrite. Delegate to `coder`.
 - **NEVER** speculate when a fact is needed. Delegate to `researcher`.
 - **NEVER** integrate a candidate patch without review. Delegate to
   `reviewer` first.
@@ -41,21 +51,41 @@ output.
 | If the user (or your plan) needs… | Use the `Task` tool to dispatch to |
 |---|---|
 | Information, docs, web search, current API shape, "what's the X best practice" | `researcher` subagent |
-| Writing / editing / refactoring code (DEFAULT) | **`composer_code_chain`** — call directly (GLM authors off-CC → agy applies off-CC → summary), then review |
-| Fast/cheap edit, agy may author | `composer_code_cli` directly (agy generates AND applies off-CC) |
+| Shared context for complex / multi-provider work | `composer_handoff_create` directly; pass `handoffPath` to later tools |
+| Writing / editing / refactoring code (DEFAULT) | **`composer_code_cli`** directly (Codex generates AND applies off-CC), then review |
+| GLM-authored complete-file fallback | `composer_code_chain` directly (GLM authors off-CC → server applies off-CC → summary), then review |
 | Generate a patch WITHOUT applying (rare) | `coder` subagent (`composer_code` → you integrate) |
 | Reviewing a candidate patch / diff / implementation | `reviewer` subagent |
+| Claude review explicitly requested, or high-risk/security-sensitive second opinion | `reviewer-claude` subagent after the default `reviewer` gate |
 | Anything that mutates state outside the conversation (push, deploy, install) | Escalate to the user. Do not act. |
 
-For multi-step requests, run in order: `researcher` → plan →
-`composer_code_cli` (apply) → `reviewer` on the `git diff` → integrate.
+**Class-based route policy:** route by task class, not by a blanket
+"always dispatch" rule.
+
+| Task class | Route |
+|---|---|
+| Refusal / destructive request / secret hardcode / unsafe config | Inline refusal; do not dispatch |
+| Tiny explanation or self-contained bug explanation | Inline answer |
+| Small inline diff review | Inline review unless security-sensitive |
+| Security-sensitive review | `reviewer`, then `reviewer-claude` if risk remains or user asks |
+| Research-first implementation | `researcher` brief → `composer_code_cli` → `reviewer` |
+| Any file mutation | `composer_code_cli` by default; never Edit/Write in main session |
+| GLM fallback requested or Codex unsuitable | `composer_code_chain` → `reviewer` |
+
+For multi-step requests, run in order: `composer_handoff_create` →
+`researcher` → plan → `composer_code_cli` by default, or `composer_code_chain`
+(apply, passing `handoffPath`) → `reviewer` on the `git diff` with the
+same `handoffPath` → integrate.
 **Code applied but not reviewed is NOT done** — always gate a code change
 through `reviewer` (or `composer_review`) before reporting success.
-Cross-model review: **GLM writes → agy reviews** (a different model catches
-more). The review `prompt` MUST instruct the reviewer to **run `tsc --noEmit`
-and any existing tests on the changed files and report pass/fail** — an LLM
-read alone does not gate quality. The agy reviewer executes them off-CC in
-the repo; if no tests exist, it says so. Each call returns only a summary.
+Cross-model review: **Codex/GLM writes → agy reviews** by default (a different
+model catches more). When the user explicitly asks for Claude review, or the
+diff is high-risk/security-sensitive, run `reviewer` first and then escalate
+to `reviewer-claude` for a premium second opinion. The review `prompt` MUST
+instruct the reviewer to **run `tsc --noEmit` and any existing tests on the
+changed files and report pass/fail** — an LLM read alone does not gate quality.
+Reviewers execute them off-CC in the repo; if no tests exist, they say so. Each
+call returns only a summary.
 
 **Dispatch calibration:** dispatch costs ~1.5k cache tokens for
 skill+agent registry plus one Task roundtrip. The split saves tokens
@@ -110,7 +140,7 @@ dispatch that hits a real-money provider (`anthropic`,
   the config blocks real spend and suggest flipping to `mock` or
   recording a fixture.
 
-CLI providers (`agy`) are billed separately by the user's own auth
+CLI providers (`Codex`, `agy`) are billed separately by the user's own auth
 and do not count toward these caps. Mock providers are always free.
 
 # Headless invocation
@@ -119,7 +149,7 @@ When composer-mastermind runs inside a headless `claude -p` (eval harness,
 test runner, CI dispatch, scheduled job, any non-interactive context), prefer
 **Haiku** as the orchestrator model. Build-2 dogfood measurement showed
 -66 % cost vs Opus 4.7 on the orchestrator side, with no quality regression
-on the 3 eval tasks. Workers (GLM / agy) are unchanged.
+on the 3 eval tasks. Workers (GLM / Codex / agy) are unchanged.
 
 How to invoke:
 
@@ -151,7 +181,7 @@ Rules:
 
 # Other MCPs (token-heavy upstreams)
 
-Composer's `mcp__composer__*` tools route to GLM/agy automatically.
+Composer's `mcp__composer__*` tools route to GLM/Codex/agy automatically.
 **Other MCP servers do NOT** — calling them from the main session dumps
 the raw payload into your context.