agent-composer 0.3.0 → 0.4.0

package/dist/providers/SpendGuardProvider.js

@@ -0,0 +1,98 @@
+/** Thrown when a priced call is blocked by spendAuthorization (deny mode or a cap). */
+export class SpendLimitError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SpendLimitError";
+    }
+}
+/** Mutable, registry-scoped accumulator of estimated USD spend for the session. */
+export class SpendLedger {
+    #spentUsd = 0;
+    get spentUsd() {
+        return this.#spentUsd;
+    }
+    add(usd) {
+        if (Number.isFinite(usd) && usd > 0)
+            this.#spentUsd += usd;
+    }
+}
+// Rough public list prices (USD per 1M tokens). Estimates only — the guard is a
+// conservative ceiling, not an accountant. Unknown models fall back to a
+// deliberately high default so an unrecognized model is more likely to trip a
+// cap than to silently overspend.
+const PRICE_TABLE = [
+    { match: /glm/i, price: { inPerMTok: 0.6, outPerMTok: 2.2 } },
+    { match: /haiku/i, price: { inPerMTok: 1, outPerMTok: 5 } },
+    { match: /sonnet/i, price: { inPerMTok: 3, outPerMTok: 15 } },
+    { match: /opus/i, price: { inPerMTok: 15, outPerMTok: 75 } },
+];
+const DEFAULT_PRICE = { inPerMTok: 3, outPerMTok: 15 };
+const CHARS_PER_TOKEN = 4;
+const DEFAULT_MAX_OUTPUT_TOKENS = 4096;
+function priceFor(model) {
+    for (const entry of PRICE_TABLE) {
+        if (entry.match.test(model))
+            return entry.price;
+    }
+    return DEFAULT_PRICE;
+}
+function estimateUsd(model, tokensIn, tokensOut) {
+    const price = priceFor(model);
+    return (tokensIn / 1_000_000) * price.inPerMTok + (tokensOut / 1_000_000) * price.outPerMTok;
+}
+/**
+ * Decorator that enforces spendAuthorization on a priced inner provider.
+ * - mode "deny": blocks every call.
+ * - maxUsdPerCall: blocks if the worst-case (maxTokens) estimate exceeds the cap.
+ * - maxUsdPerSession: blocks if the running ledger + this call's estimate exceeds the cap.
+ * After a successful call, the ledger is incremented by the ACTUAL token cost
+ * (from the provider's reported usage) when available, else the estimate.
+ */
+export class SpendGuardProvider {
+    inner;
+    auth;
+    ledger;
+    defaultMaxTokens;
+    id;
+    modelLabel;
+    constructor(inner, auth, ledger, defaultMaxTokens) {
+        this.inner = inner;
+        this.auth = auth;
+        this.ledger = ledger;
+        this.defaultMaxTokens = defaultMaxTokens;
+        this.id = inner.id;
+        this.modelLabel = inner.modelLabel;
+    }
+    healthCheck() {
+        return this.inner.healthCheck();
+    }
+    async execute(input) {
+        if (this.auth.mode === "deny") {
+            throw new SpendLimitError(`Priced provider '${this.modelLabel}' blocked: spendAuthorization.mode="deny".`);
+        }
+        const inputChars = (input.prompt?.length ?? 0) + (input.context?.length ?? 0);
+        const estTokensIn = Math.ceil(inputChars / CHARS_PER_TOKEN);
+        const estTokensOut = typeof input.maxTokens === "number" && input.maxTokens > 0
+            ? input.maxTokens
+            : typeof this.defaultMaxTokens === "number" && this.defaultMaxTokens > 0
+                ? this.defaultMaxTokens
+                : DEFAULT_MAX_OUTPUT_TOKENS;
+        const estCallUsd = estimateUsd(this.modelLabel, estTokensIn, estTokensOut);
+        if (this.auth.maxUsdPerCall !== undefined && estCallUsd > this.auth.maxUsdPerCall) {
+            throw new SpendLimitError(`Estimated $${estCallUsd.toFixed(4)} for this '${this.modelLabel}' call exceeds maxUsdPerCall $${this.auth.maxUsdPerCall}.`);
+        }
+        if (this.auth.maxUsdPerSession !== undefined &&
+            this.ledger.spentUsd + estCallUsd > this.auth.maxUsdPerSession) {
+            throw new SpendLimitError(`Estimated session spend $${(this.ledger.spentUsd + estCallUsd).toFixed(4)} would exceed maxUsdPerSession $${this.auth.maxUsdPerSession} (already $${this.ledger.spentUsd.toFixed(4)}).`);
+        }
+        const output = await this.inner.execute(input);
+        const actualTokensIn = output.tokensIn ?? estTokensIn;
+        const actualTokensOut = output.tokensOut ?? estTokensOut;
+        this.ledger.add(estimateUsd(this.modelLabel, actualTokensIn, actualTokensOut));
+        return output;
+    }
+}
+export function isPricedProvider(id) {
+    return id === "anthropic" || id === "openai_compatible";
+}
+//# sourceMappingURL=SpendGuardProvider.js.map

package/dist/providers/SpendGuardProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpendGuardProvider.js","sourceRoot":"","sources":["../../src/providers/SpendGuardProvider.ts"],"names":[],"mappings":"AAQA,uFAAuF;AACvF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,WAAW;IACtB,SAAS,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,GAAG,CAAC,GAAW;QACb,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IAC7D,CAAC;CACF;AAOD,gFAAgF;AAChF,yEAAyE;AACzE,8EAA8E;AAC9E,kCAAkC;AAClC,MAAM,WAAW,GAAmD;IAClE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;IAC7D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;IAC3D,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;IAC7D,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;CAC7D,CAAC;AACF,MAAM,aAAa,GAAU,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAE9D,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,SAAS,QAAQ,CAAC,KAAa;IAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAClD,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAKV;IACA;IACA;IACA;IAPV,EAAE,CAAa;IACf,UAAU,CAAS;IAE5B,YACmB,KAAgB,EAChB,IAAwB,EACxB,MAAmB,EACnB,gBAAyB;QAHzB,UAAK,GAAL,KAAK,CAAW;QAChB,SAAI,GAAJ,IAAI,CAAoB;QACxB,WAAM,GAAN,MAAM,CAAa;QACnB,qBAAgB,GAAhB,gBAAgB,CAAS;QAE1C,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,oBAAoB,IAAI,CAAC,UAAU,4CAA4C,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,CAAC;QAC5D,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;YACxD,CAAC,CAAC,KAAK,CAAC,SAAS;YACjB,CAAC,CAAC,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,GAAG,CAAC;gBACtE,CAAC,CAAC,IAAI,CAAC,gBAAgB;gBACvB,CAAC,CAAC,yBAAyB,CAAC;QAClC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAE3E,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAClF,MAAM,IAAI,eAAe,CACvB,cAAc,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,UAAU,iCAAiC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,CAC5H,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC9D,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,IAAI,CAAC,IAAI,CAAC,gBAAgB,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzL,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE/C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QACtD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,YAAY,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;QAE/E,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAc;IAC7C,OAAO,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,mBAAmB,CAAC;AAC1D,CAAC"}

package/dist/registry.d.ts

@@ -5,7 +5,7 @@ import type { ComposerConfig, RoleName } from "./config/schema.js";
  * nor composer.config.json role.model are provided. Tracks the current
  * GLM family release (z.ai Anthropic-compat endpoint).
  */
-export declare const DEFAULT_ANTHROPIC_MODEL = "glm-5.1";
+export declare const DEFAULT_ANTHROPIC_MODEL = "glm-5.2";
 export declare class ProviderNotImplementedError extends Error {
     constructor(providerId: string);
 }
@@ -13,9 +13,12 @@ export declare class ProviderConfigError extends Error {
     constructor(providerId: string, field: string);
 }
 export declare class ProviderRegistry {
-    private readonly config;
+    private config;
     private readonly cache;
+    private readonly spendLedger;
     constructor(config: ComposerConfig);
+    setConfig(config: ComposerConfig): void;
     getProviderForRole(role: RoleName): IProvider;
+    private maybeGuard;
     private buildProvider;
 }

package/dist/registry.js

@@ -6,12 +6,13 @@
 import { MockProvider } from "./providers/MockProvider.js";
 import { AnthropicCompatibleProvider } from "./providers/AnthropicCompatibleProvider.js";
 import { CLIProvider } from "./providers/CLIProvider.js";
+import { SpendGuardProvider, SpendLedger, isPricedProvider } from "./providers/SpendGuardProvider.js";
 /**
  * Wave 3 Step 4 — fallback when neither process.env.ANTHROPIC_MODEL
  * nor composer.config.json role.model are provided. Tracks the current
  * GLM family release (z.ai Anthropic-compat endpoint).
  */
-export const DEFAULT_ANTHROPIC_MODEL = "glm-5.1";
+export const DEFAULT_ANTHROPIC_MODEL = "glm-5.2";
 export class ProviderNotImplementedError extends Error {
     constructor(providerId) {
         super(`Provider '${providerId}' is not wired. Composer ships 'mock', 'anthropic', and 'cli' adapters; 'openai_compatible' is YAGNI until needed.`);
@@ -27,9 +28,16 @@ export class ProviderConfigError extends Error {
 export class ProviderRegistry {
     config;
     cache = new Map();
+    spendLedger = new SpendLedger();
     constructor(config) {
         this.config = config;
     }
+    setConfig(config) {
+        if (config === this.config)
+            return;
+        this.config = config;
+        this.cache.clear();
+    }
     getProviderForRole(role) {
         const cached = this.cache.get(role);
         if (cached)
@@ -38,10 +46,16 @@ export class ProviderRegistry {
         if (!rc) {
             throw new ProviderConfigError(role, "role not configured in composer.config.json roles");
         }
-        const created = this.buildProvider(rc);
+        const created = this.maybeGuard(this.buildProvider(rc), rc.maxTokens);
         this.cache.set(role, created);
         return created;
     }
+    maybeGuard(provider, defaultMaxTokens) {
+        const auth = this.config.spendAuthorization;
+        if (!auth || !isPricedProvider(provider.id))
+            return provider;
+        return new SpendGuardProvider(provider, auth, this.spendLedger, defaultMaxTokens);
+    }
     buildProvider(roleConfig) {
         switch (roleConfig.provider) {
             case "mock":
@@ -76,6 +90,7 @@ export class ProviderRegistry {
                     cli: roleConfig.cli,
                     model: roleConfig.model,
                     timeoutMs: roleConfig.timeoutMs,
+                    totalWallClockMs: roleConfig.totalWallClockMs,
                     maxBuffer: roleConfig.maxBuffer,
                     retries: roleConfig.retries,
                     maxResultChars: roleConfig.maxResultChars,

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,0BAA0B;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAOzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,UAAkB;QAC5B,KAAK,CACH,aAAa,UAAU,oHAAoH,CAC5I,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,UAAkB,EAAE,KAAa;QAC3C,KAAK,CACH,aAAa,UAAU,eAAe,KAAK,6CAA6C,CACzF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAGE;IAFZ,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,kBAAkB,CAAC,IAAc;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,UAAsB;QAC1C,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAE5D,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAC/E,IAAI,CAAC,UAAU,CAAC,SAAS;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,WAAW,UAAU,CAAC,SAAS,kCAAkC,CAClE,CAAC;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAChD,MAAM,KAAK,GACT,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5E,UAAU,CAAC,KAAK;oBAChB,uBAAuB,CAAC;gBAC1B,OAAO,IAAI,2BAA2B,CAAC;oBACrC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,MAAM;oBACN,KAAK;oBACL,gBAAgB,EAAE,UAAU,CAAC,SAAS;oBACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,IAAI,WAAW,CAAC;oBACrB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CAAC;YACL,CAAC;YAED,KAAK,mBAAmB;gBACtB,MAAM,IAAI,2BAA2B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,0BAA0B;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAOtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,UAAkB;QAC5B,KAAK,CACH,aAAa,UAAU,oHAAoH,CAC5I,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,UAAkB,EAAE,KAAa;QAC3C,KAAK,CACH,aAAa,UAAU,eAAe,KAAK,6CAA6C,CACzF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAIP;IAHH,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IAEjD,YAAoB,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAE9C,SAAS,CAAC,MAAsB;QAC9B,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,kBAAkB,CAAC,IAAc;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,UAAU,CAAC,QAAmB,EAAE,gBAAyB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC7D,OAAO,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACpF,CAAC;IAEO,aAAa,CAAC,UAAsB;QAC1C,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAE5D,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAC/E,IAAI,CAAC,UAAU,CAAC,SAAS;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,WAAW,UAAU,CAAC,SAAS,kCAAkC,CAClE,CAAC;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAChD,MAAM,KAAK,GACT,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5E,UAAU,CAAC,KAAK;oBAChB,uBAAuB,CAAC;gBAC1B,OAAO,IAAI,2BAA2B,CAAC;oBACrC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,MAAM;oBACN,KAAK;oBACL,gBAAgB,EAAE,UAAU,CAAC,SAAS;oBACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,IAAI,WAAW,CAAC;oBACrB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CAAC;YACL,CAAC;YAED,KAAK,mBAAmB;gBACtB,MAAM,IAAI,2BAA2B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}

package/dist/server/activeRuns.d.ts

@@ -0,0 +1,17 @@
+export interface ActiveRun {
+    id: number;
+    tool: string;
+    providerLabel?: string;
+    providerRole?: string;
+    startedAt: string;
+}
+export interface ActiveRunTracker {
+    start(input: {
+        tool: string;
+        providerRole?: string;
+        providerLabel?: string;
+    }): number;
+    finish(id: number): void;
+    list(): ActiveRun[];
+}
+export declare function createActiveRunTracker(): ActiveRunTracker;

package/dist/server/activeRuns.js

@@ -0,0 +1,114 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { COMPOSER_STATE_DIR_ENV } from "../util/codexLifecycleJob.js";
+const ACTIVE_RUN_TTL_MS_ENV = "COMPOSER_ACTIVE_RUN_TTL_MS";
+const DEFAULT_STALE_RUN_TTL_MS = 2 * 60 * 60_000;
+const STALE_RUN_TTL_MS = resolvePositiveEnvMs(ACTIVE_RUN_TTL_MS_ENV, DEFAULT_STALE_RUN_TTL_MS);
+let persistQueue = Promise.resolve();
+export function createActiveRunTracker() {
+    let nextId = 1;
+    const runs = new Map();
+    prunePersistedActiveRuns(STALE_RUN_TTL_MS);
+    return {
+        start({ tool, providerRole, providerLabel }) {
+            const id = nextId++;
+            runs.set(id, {
+                id,
+                tool,
+                providerRole,
+                providerLabel,
+                startedAt: new Date().toISOString(),
+            });
+            persistActiveRuns([...runs.values()]);
+            return id;
+        },
+        finish(id) {
+            runs.delete(id);
+            persistActiveRuns([...runs.values()]);
+        },
+        list() {
+            return [...runs.values()];
+        },
+    };
+}
+function persistActiveRuns(runs) {
+    persistQueue = persistQueue
+        .catch(() => { })
+        .then(() => persistActiveRunsAsync(runs))
+        .catch(() => {
+        // Statusline persistence is advisory only.
+    });
+}
+async function persistActiveRunsAsync(runs) {
+    const stateDir = composerStateDir();
+    await fs.promises.mkdir(stateDir, { recursive: true, mode: 0o700 });
+    const filePath = path.join(stateDir, "active-runs.json");
+    const tmpPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    const payload = activeRunPayload(runs);
+    try {
+        await fs.promises.writeFile(tmpPath, `${JSON.stringify(payload, null, 2)}\n`, {
+            encoding: "utf8",
+            mode: 0o600,
+            flag: "wx",
+        });
+        await fs.promises.rename(tmpPath, filePath);
+    }
+    catch (error) {
+        await fs.promises.rm(tmpPath, { force: true }).catch(() => { });
+        throw error;
+    }
+}
+function prunePersistedActiveRuns(ttlMs) {
+    persistQueue = persistQueue
+        .catch(() => { })
+        .then(() => prunePersistedActiveRunsAsync(ttlMs))
+        .catch(() => {
+        // Statusline persistence is advisory only.
+    });
+}
+async function prunePersistedActiveRunsAsync(ttlMs) {
+    const filePath = path.join(composerStateDir(), "active-runs.json");
+    const raw = await fs.promises.readFile(filePath, "utf8").catch(() => undefined);
+    if (raw === undefined)
+        return;
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed))
+        return;
+    const cutoff = Date.now() - ttlMs;
+    const fresh = parsed.filter((entry) => {
+        if (!entry || typeof entry !== "object")
+            return false;
+        const candidate = entry;
+        if (typeof candidate.tool !== "string" || typeof candidate.startedAt !== "string") {
+            return false;
+        }
+        const startedAtMs = Date.parse(candidate.startedAt);
+        return Number.isFinite(startedAtMs) && startedAtMs >= cutoff;
+    });
+    if (fresh.length === parsed.length)
+        return;
+    await persistActiveRunsAsync(fresh);
+}
+function activeRunPayload(runs) {
+    return runs.map(({ tool, providerLabel, providerRole, startedAt }) => ({
+        tool,
+        ...(providerLabel ? { providerLabel } : {}),
+        ...(providerRole ? { providerRole } : {}),
+        startedAt,
+    }));
+}
+function composerStateDir() {
+    const override = process.env[COMPOSER_STATE_DIR_ENV]?.trim();
+    if (override)
+        return path.resolve(override);
+    return path.join(os.homedir(), ".composer", "state");
+}
+function resolvePositiveEnvMs(envName, fallbackMs) {
+    const raw = process.env[envName]?.trim();
+    if (!raw)
+        return fallbackMs;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallbackMs;
+}
+//# sourceMappingURL=activeRuns.js.map

package/dist/server/activeRuns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activeRuns.js","sourceRoot":"","sources":["../../src/server/activeRuns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AACjD,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,qBAAqB,EACrB,wBAAwB,CACzB,CAAC;AACF,IAAI,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAgBpD,MAAM,UAAU,sBAAsB;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE;YACzC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;gBACX,EAAE;gBACF,IAAI;gBACJ,YAAY;gBACZ,aAAa;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,iBAAiB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,CAAC,EAAE;YACP,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,iBAAiB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,YAAY,GAAG,YAAY;SACxB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;SACf,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;SACxC,KAAK,CAAC,GAAG,EAAE;QACV,2CAA2C;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAiB;IACrD,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC5E,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,YAAY,GAAG,YAAY;SACxB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;SACf,IAAI,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;SAChD,KAAK,CAAC,GAAG,EAAE;QACV,2CAA2C;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,KAAa;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAsB,EAAE;QACxD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,SAAS,GAAG,KAA2B,CAAC;QAC9C,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,MAAM,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO;IAC3C,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAiB;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI;QACJ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,SAAS;KACV,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,UAAkB;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;AACrE,CAAC"}

package/dist/server/codexLifecycleRunner.d.ts

@@ -0,0 +1,29 @@
+import { type CodexLifecycleJob } from "../util/codexLifecycleJob.js";
+import { type CodexLifecycleFallback, type RoleName } from "../config/schema.js";
+import type { ProviderRegistry } from "../registry.js";
+export interface RunCodexLifecycleJobInput {
+    root: string;
+    registry: ProviderRegistry;
+    job: CodexLifecycleJob;
+    prompt: string;
+    context?: string;
+    handoffPath?: string;
+    projectDir?: string;
+    signal?: AbortSignal;
+    fallback?: CodexLifecycleFallback;
+    maxTotalMs?: number;
+    roleTimeoutMs?: Partial<Record<RoleName, number>>;
+    onProgress?: (update: {
+        phase?: string;
+        detail?: string;
+    }) => void;
+}
+export declare function runCodexLifecycleJob(input: RunCodexLifecycleJobInput): Promise<CodexLifecycleJob>;
+export declare function lifecycleProviderRoles(fallback: CodexLifecycleFallback | undefined): RoleName[];
+export declare function lifecycleExecutionTarget(role: RoleName, targetRoot: string): {
+    cwd: string;
+    projectDir?: string;
+    readOnly?: boolean;
+    cleanup: () => void;
+};
+export declare function codexLifecyclePrompt(job: CodexLifecycleJob, prompt: string, role: RoleName): string;

package/dist/server/codexLifecycleRunner.js

@@ -0,0 +1,188 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { resolveProjectDir } from "../util/applyFileBlocks.js";
+import { contextWithHandoff } from "./handoffContext.js";
+import { classifyCodexLifecycleUnavailable, updateCodexLifecycleJob, } from "../util/codexLifecycleJob.js";
+import { DEFAULT_CODEX_LIFECYCLE_TOTAL_WALL_CLOCK_MS, } from "../config/schema.js";
+import { createDeadlineSignal, isAbortError, } from "../util/asyncControl.js";
+const DEFAULT_RESEARCHER_TIMEOUT_MS = 180_000;
+const DEFAULT_CODER_TIMEOUT_MS = 300_000;
+const DEFAULT_REVIEWER_TIMEOUT_MS = 300_000;
+const DEFAULT_CODER_CLI_TIMEOUT_MS = 240_000;
+export async function runCodexLifecycleJob(input) {
+    const targetRoot = resolveProjectDir(input.projectDir, input.root);
+    let job = updateCodexLifecycleJob(input.root, input.job, {
+        status: "running",
+        startedAt: new Date().toISOString(),
+    });
+    const roles = lifecycleProviderRoles(input.fallback);
+    let lastError;
+    let lastReason = "unknown";
+    const maxTotalMs = resolvePositiveMs(input.maxTotalMs, DEFAULT_CODEX_LIFECYCLE_TOTAL_WALL_CLOCK_MS);
+    const deadline = createDeadlineSignal("composer_codex_lifecycle_run total_wall_clock_ms", maxTotalMs, input.signal);
+    try {
+        for (const role of roles) {
+            try {
+                deadline.throwIfAborted();
+            }
+            catch (error) {
+                return finishStoppedLifecycleJob(input.root, job, error);
+            }
+            const attemptStartedAt = new Date().toISOString();
+            const executionTarget = lifecycleExecutionTarget(role, targetRoot);
+            const attemptTimeoutMs = Math.max(1, Math.min(resolveRoleTimeoutMs(input.roleTimeoutMs?.[role], defaultRoleTimeoutMs(role)), deadline.remainingMs()));
+            const attemptSignal = createDeadlineSignal(`composer_codex_lifecycle_run ${role}`, attemptTimeoutMs, deadline.signal);
+            try {
+                const provider = input.registry.getProviderForRole(role);
+                const result = await provider.execute({
+                    prompt: codexLifecyclePrompt(job, input.prompt, role),
+                    context: contextWithHandoff(input.root, input.context, input.handoffPath),
+                    cwd: executionTarget.cwd,
+                    projectDir: executionTarget.projectDir,
+                    readOnly: executionTarget.readOnly,
+                    model: input.job.model,
+                    onProgress: input.onProgress,
+                    signal: attemptSignal.signal,
+                });
+                attemptSignal.throwIfAborted();
+                deadline.throwIfAborted();
+                job = updateCodexLifecycleJob(input.root, job, {
+                    status: "succeeded",
+                    completedAt: new Date().toISOString(),
+                    resultText: result.text,
+                    providerRole: role,
+                    fallbackUsed: role === "coderCli" ? undefined : role,
+                    attempts: [
+                        ...job.attempts,
+                        {
+                            role,
+                            status: "succeeded",
+                            startedAt: attemptStartedAt,
+                            completedAt: new Date().toISOString(),
+                        },
+                    ],
+                });
+                return job;
+            }
+            catch (error) {
+                lastError = error;
+                lastReason = classifyCodexLifecycleUnavailable(error);
+                job = updateCodexLifecycleJob(input.root, job, {
+                    attempts: [
+                        ...job.attempts,
+                        {
+                            role,
+                            status: "unavailable",
+                            startedAt: attemptStartedAt,
+                            completedAt: new Date().toISOString(),
+                            unavailableReason: lastReason,
+                            error: error instanceof Error ? error.message : String(error),
+                        },
+                    ],
+                });
+                if (deadline.signal.aborted || input.signal?.aborted || isAbortError(error)) {
+                    return finishStoppedLifecycleJob(input.root, job, error);
+                }
+                try {
+                    deadline.throwIfAborted();
+                }
+                catch (deadlineError) {
+                    return finishStoppedLifecycleJob(input.root, job, deadlineError);
+                }
+            }
+            finally {
+                attemptSignal.cleanup();
+                executionTarget.cleanup();
+            }
+        }
+        job = updateCodexLifecycleJob(input.root, job, {
+            status: "unavailable",
+            completedAt: new Date().toISOString(),
+            error: lastError instanceof Error ? lastError.message : String(lastError),
+            unavailableReason: lastReason,
+            resultText: `Lifecycle providers unavailable (${lastReason}) and no fallback provider succeeded. ` +
+                "Coco should continue optional lifecycle work without treating this as a policy skip; " +
+                "forced gates must fail closed in their own hook.",
+        });
+        return job;
+    }
+    finally {
+        deadline.cleanup();
+    }
+}
+function resolvePositiveMs(value, fallbackMs) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0
+        ? value
+        : fallbackMs;
+}
+function resolveRoleTimeoutMs(configuredTimeoutMs, fallbackMs) {
+    return resolvePositiveMs(configuredTimeoutMs, fallbackMs);
+}
+function defaultRoleTimeoutMs(role) {
+    switch (role) {
+        case "researcher":
+            return DEFAULT_RESEARCHER_TIMEOUT_MS;
+        case "coderCli":
+            return DEFAULT_CODER_CLI_TIMEOUT_MS;
+        case "coder":
+            return DEFAULT_CODER_TIMEOUT_MS;
+        case "reviewer":
+        case "reviewerClaude":
+        case "oraclePlanner":
+            return DEFAULT_REVIEWER_TIMEOUT_MS;
+    }
+}
+function finishStoppedLifecycleJob(root, job, error) {
+    const unavailableReason = classifyCodexLifecycleUnavailable(error);
+    return updateCodexLifecycleJob(root, job, {
+        status: "failed",
+        completedAt: new Date().toISOString(),
+        error: error instanceof Error ? error.message : String(error),
+        unavailableReason,
+        resultText: `Lifecycle run stopped (${unavailableReason}).`,
+    });
+}
+export function lifecycleProviderRoles(fallback) {
+    const roles = ["coderCli"];
+    if (fallback?.enabled) {
+        for (const role of fallback.order) {
+            if (!roles.includes(role))
+                roles.push(role);
+        }
+    }
+    return roles;
+}
+export function lifecycleExecutionTarget(role, targetRoot) {
+    if (role === "coderCli") {
+        return {
+            cwd: targetRoot,
+            projectDir: targetRoot,
+            readOnly: true,
+            cleanup: () => { },
+        };
+    }
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "composer-lifecycle-readonly-"));
+    return {
+        cwd: tempDir,
+        cleanup: () => fs.rmSync(tempDir, { recursive: true, force: true }),
+    };
+}
+export function codexLifecyclePrompt(job, prompt, role) {
+    return [
+        "You are a Composer lifecycle companion participating in a checkpoint.",
+        `Event: ${job.event}`,
+        `Job ID: ${job.jobId}`,
+        `Execution: ${job.execution}`,
+        `Provider role: ${role}`,
+        "",
+        "Return a concise result for Coco to merge back into the main development loop.",
+        "Do not silently mutate files in this lifecycle companion pass.",
+        "If code changes are needed, provide findings, file references, and patch guidance instead.",
+        "Use this structure: Verdict, Findings, Suggested next actions, Checks.",
+        "",
+        "Lifecycle task:",
+        prompt,
+    ].join("\n");
+}
+//# sourceMappingURL=codexLifecycleRunner.js.map

package/dist/server/codexLifecycleRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexLifecycleRunner.js","sourceRoot":"","sources":["../../src/server/codexLifecycleRunner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EACL,iCAAiC,EACjC,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,2CAA2C,GAG5C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,yBAAyB,CAAC;AAiBjC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAC9C,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAC5C,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE;QACvD,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,SAAkB,CAAC;IACvB,IAAI,UAAU,GAAyD,SAAS,CAAC;IACjF,MAAM,UAAU,GAAG,iBAAiB,CAClC,KAAK,CAAC,UAAU,EAChB,2CAA2C,CAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CACnC,kDAAkD,EAClD,UAAU,EACV,KAAK,CAAC,MAAM,CACb,CAAC;IAEF,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,eAAe,GAAG,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B,CAAC,EACD,IAAI,CAAC,GAAG,CACN,oBAAoB,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAC7E,QAAQ,CAAC,WAAW,EAAE,CACvB,CACF,CAAC;YACF,MAAM,aAAa,GAAG,oBAAoB,CACxC,gCAAgC,IAAI,EAAE,EACtC,gBAAgB,EAChB,QAAQ,CAAC,MAAM,CAChB,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;oBACpC,MAAM,EAAE,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC;oBACrD,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC;oBACzE,GAAG,EAAE,eAAe,CAAC,GAAG;oBACxB,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,QAAQ,EAAE,eAAe,CAAC,QAAQ;oBAClC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;iBAC7B,CAAC,CAAC;gBACH,aAAa,CAAC,cAAc,EAAE,CAAC;gBAC/B,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC1B,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC7C,MAAM,EAAE,WAAW;oBACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACrC,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,YAAY,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;oBACpD,QAAQ,EAAE;wBACR,GAAG,GAAG,CAAC,QAAQ;wBACf;4BACE,IAAI;4BACJ,MAAM,EAAE,WAAW;4BACnB,SAAS,EAAE,gBAAgB;4BAC3B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACtC;qBACF;iBACF,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,UAAU,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;gBACtD,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC7C,QAAQ,EAAE;wBACR,GAAG,GAAG,CAAC,QAAQ;wBACf;4BACE,IAAI;4BACJ,MAAM,EAAE,aAAa;4BACrB,SAAS,EAAE,gBAAgB;4BAC3B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACrC,iBAAiB,EAAE,UAAU;4BAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D;qBACF;iBACF,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5E,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,CAAC;oBACH,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC5B,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,OAAO,EAAE,CAAC;gBACxB,eAAe,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;YAC7C,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;YACzE,iBAAiB,EAAE,UAAU;YAC7B,UAAU,EACR,oCAAoC,UAAU,wCAAwC;gBACtF,uFAAuF;gBACvF,kDAAkD;SACrD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,UAAkB;IAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACrE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,mBAA4B,EAAE,UAAkB;IAC5E,OAAO,iBAAiB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY;YACf,OAAO,6BAA6B,CAAC;QACvC,KAAK,UAAU;YACb,OAAO,4BAA4B,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,wBAAwB,CAAC;QAClC,KAAK,UAAU,CAAC;QAChB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe;YAClB,OAAO,2BAA2B,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY,EACZ,GAAsB,EACtB,KAAc;IAEd,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE;QACxC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7D,iBAAiB;QACjB,UAAU,EAAE,0BAA0B,iBAAiB,IAAI;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA4C;IACjF,MAAM,KAAK,GAAe,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAc,EACd,UAAkB;IAElB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO;YACL,GAAG,EAAE,UAAU;YACf,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,MAAc,EAAE,IAAc;IACzF,OAAO;QACL,uEAAuE;QACvE,UAAU,GAAG,CAAC,KAAK,EAAE;QACrB,WAAW,GAAG,CAAC,KAAK,EAAE;QACtB,cAAc,GAAG,CAAC,SAAS,EAAE;QAC7B,kBAAkB,IAAI,EAAE;QACxB,EAAE;QACF,gFAAgF;QAChF,gEAAgE;QAChE,4FAA4F;QAC5F,wEAAwE;QACxE,EAAE;QACF,iBAAiB;QACjB,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/server/configMutation.d.ts

@@ -0,0 +1,22 @@
+export type ConfigScope = "active" | "project" | "global";
+export interface ComposerConfigTarget {
+    scope: ConfigScope;
+    path: string;
+}
+export declare function resolveComposerConfigTarget(root: string, configuredPath: string | undefined, scope: ConfigScope): ComposerConfigTarget;
+export declare function applyComposerConfigPatch(before: Record<string, unknown>, patch: {
+    codexLifecycle?: unknown;
+    codexReview?: unknown;
+    oracle?: {
+        enabled?: boolean;
+        defaultMode?: string;
+        requireExplicitTag?: boolean;
+    };
+}): Record<string, unknown>;
+export declare function assertSafeConfigWriteTarget(root: string, target: ComposerConfigTarget): void;
+export declare function writeConfigFileAtomically(filePath: string, content: string): void;
+export declare function isGlobalComposerConfigPath(filePath: string): boolean;
+export declare function cloneJsonObject(value: Record<string, unknown>): Record<string, unknown>;
+export declare function readRecord(value: unknown): Record<string, unknown>;
+export declare function deepMergeRecords(target: Record<string, unknown>, patch: Record<string, unknown>): Record<string, unknown>;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;