codehere 0.3.0-rc.1 → 0.3.0-rc.11

package/dist/index.js

@@ -14,7 +14,6 @@ import { Command } from 'commander';
 import { config } from 'dotenv';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
-import { existsSync, readFileSync } from 'fs';
 import { executeSetupCommand } from './presentation/cli/commands/setup-command.js';
 import { executeConfigCommand } from './presentation/cli/commands/config-command.js';
 import { executeHelpCommand } from './presentation/cli/commands/help-command.js';
@@ -44,54 +43,25 @@ program
     .description('A PM for your AI coding agents. Delegate a task, watch it run, get a plain-English report with a trust score on every file.')
     .version(getVersion())
     .configureHelp({ helpWidth: 80, sortSubcommands: true });
-// Default action · show welcome + quick start (no REPL; v0.3 is web-UI-first)
+// Default action · show welcome, then drop into the interactive REPL on TTY.
+// codehere offers TWO surfaces, both first-class: the CLI REPL (here) and the
+// web UI (`codehere start`). Users pick whichever fits their workflow.
 program
-    .argument('[query]', 'Reserved — the PM intake lives at http://127.0.0.1:3773 after you run `codehere start`')
+    .argument('[query]', 'Optional initial task to delegate (otherwise enter interactive REPL)')
     .action(async (query) => {
+    // One-shot delegate: `codehere "review src/auth.ts"` runs that task and exits.
+    // Useful for scripting or quick one-offs without entering the REPL.
     if (query && query.trim()) {
-        console.error(error('Direct-query routing was removed in v0.3 (D7 trim).'));
-        console.log(colors.dim('Use the PM intake instead:'));
-        console.log('  ' + colors.cyan('codehere start') + '          → web UI at http://127.0.0.1:3773');
-        console.log('  ' + colors.cyan(`codehere task "${query.trim().slice(0, 40)}..."`) + ' → spawn via CLI');
-        process.exit(1);
+        const { runOneShot } = await import('./presentation/cli/repl.js');
+        await runOneShot(query.trim());
+        return;
     }
     if (!process.stdin.isTTY) {
         console.log(createWelcomeMessage());
         return;
     }
-    const codehereDir = join(process.env.HOME || '', '.codehere');
-    const settingsPath = join(process.env.HOME || '', '.claude', 'settings.json');
-    const hasHooks = existsSync(settingsPath) && readFileSync(settingsPath, 'utf-8').includes('codehere');
-    const hasAuditLog = existsSync(join(codehereDir, 'audit', 'hook-events.jsonl'));
-    console.log(createWelcomeMessage());
-    newline();
-    if (!hasHooks && !hasAuditLog) {
-        console.log(colors.bold("Welcome! Let's get you set up."));
-        newline();
-        console.log('  ' + colors.bold('Safety first — no API key, instant'));
-        console.log(colors.dim('  Every AI write gets scanned. Catches injections, hardcoded secrets,'));
-        console.log(colors.dim('  destructive ops, and more.'));
-        newline();
-        console.log('    → Run ' + colors.cyan('codehere hook install') + ' to activate safety');
-        console.log('    → Run ' + colors.cyan('codehere trust .') + ' to scan this project');
-        newline();
-        console.log('  ' + colors.bold('Delegate tasks — the PM for your AI coding agents'));
-        console.log(colors.dim('  Pick Claude Code, Codex, Aider, or OpenCode. codehere coordinates.'));
-        newline();
-        console.log('    → Run ' + colors.cyan('codehere start') + ' to open the task UI');
-        newline();
-    }
-    else {
-        console.log(colors.bold('Quick start:'));
-        newline();
-        console.log('  ' + colors.cyan('codehere start') + '            Task intake UI at http://127.0.0.1:3773');
-        console.log('  ' + colors.cyan('codehere status') + '           Dashboard · sessions · blocked calls');
-        console.log('  ' + colors.cyan('codehere report') + '           Generate a shareable audit report');
-        console.log('  ' + colors.cyan('codehere trust .') + '          Scan this project now');
-        newline();
-        console.log(colors.dim('  Run `codehere --help` for all commands.'));
-        newline();
-    }
+    const { runInteractiveRepl } = await import('./presentation/cli/repl.js');
+    await runInteractiveRepl();
 });
 // ── setup ────────────────────────────────────────────────────────────────────
 program
@@ -354,10 +324,30 @@ program
     const port = parseInt(options?.port ?? '3773', 10);
     const host = options?.host ?? '127.0.0.1';
     const shouldOpen = options?.open !== false;
+    const url = `http://${host}:${port}/`;
+    const openBrowser = async () => {
+        if (!shouldOpen)
+            return;
+        const { spawn } = await import('child_process');
+        const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
+        try {
+            spawn(opener, [url], { detached: true, stdio: 'ignore' }).unref();
+        }
+        catch {
+            /* browser open is best-effort */
+        }
+    };
     try {
         const { startMCPServer } = await import('./infrastructure/protocols/mcp-server-impl.js');
         const server = startMCPServer({ port, host });
-        const url = `http://${host}:${port}/`;
+        // Wait for the server to either start listening or fail. The default
+        // Node behavior on listen() failure is an unhandled 'error' event which
+        // crashes the process with a stack trace. We catch it here so the user
+        // sees a friendly message instead.
+        await new Promise((resolve, reject) => {
+            server.once('listening', () => resolve());
+            server.once('error', reject);
+        });
         newline();
         console.log(success('codehere is running'));
         newline();
@@ -367,16 +357,7 @@ program
         newline();
         console.log(colors.dim('  Press Ctrl+C to stop'));
         newline();
-        if (shouldOpen) {
-            const { spawn } = await import('child_process');
-            const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
-            try {
-                spawn(opener, [url], { detached: true, stdio: 'ignore' }).unref();
-            }
-            catch {
-                /* browser open is best-effort */
-            }
-        }
+        await openBrowser();
         process.on('SIGINT', () => {
             server.close();
             console.log(colors.dim('\ncodehere stopped'));
@@ -387,6 +368,28 @@ program
         });
     }
     catch (err) {
+        const code = err?.code;
+        if (code === 'EADDRINUSE') {
+            // Port is taken. Probe to find out by what — if it's a running codehere,
+            // we should hand the user the existing URL; if it's something else,
+            // tell them to pick a different port.
+            const { isCodehereOnPort } = await import('./infrastructure/protocols/probe-port.js');
+            const existing = await isCodehereOnPort(host, port);
+            newline();
+            if (existing.isCodehere) {
+                console.log(success(`codehere is already running at ${url}`));
+                if (existing.version) {
+                    console.log(colors.dim(`  version: ${existing.version}`));
+                }
+                newline();
+                console.log(colors.dim('  Opening browser...'));
+                await openBrowser();
+                process.exit(0);
+            }
+            console.error(error(`Port ${port} is in use by another process.`));
+            console.error(colors.dim(`  Try: codehere start --port ${port + 1}`));
+            process.exit(1);
+        }
         console.error(error('Failed to start:'), err instanceof Error ? err.message : String(err));
         process.exit(1);
     }

package/dist/infrastructure/hooks/claude-sdk-hook.js

@@ -44,7 +44,7 @@ const PATTERNS = [
         description: 'Role hijacking attempt',
     },
     {
-        regex: /system\s*prompt|<\/?system>|(?<!['"\\])<\/?instruction>/i,
+        regex: /\bsystem\s+prompt\b|<\/?system>|(?<!['"\\])<\/?instruction>/i,
         severity: 'critical',
         category: 'Prompt Injection',
         description: 'System prompt injection',
@@ -56,7 +56,7 @@ const PATTERNS = [
         description: 'Instruction override attempt',
     },
     {
-        regex: /jailbreak|DAN\s+mode|developer\s+mode\s+enabled/i,
+        regex: /\bjailbreak\b|\bDAN\s+mode\b|\bdeveloper\s+mode\s+enabled\b/i,
         severity: 'critical',
         category: 'Prompt Injection',
         description: 'Jailbreak attempt',
@@ -93,7 +93,7 @@ const PATTERNS = [
         description: 'Exfiltrates env secrets',
     },
     {
-        regex: /printenv|env\s*\|\s*(grep|curl|wget|nc)\b/i,
+        regex: /\bprintenv\b|\benv\s*\|\s*(grep|curl|wget|nc)\b/i,
         severity: 'high',
         category: 'Credential Theft',
         description: 'Environment variable exfiltration',
@@ -119,7 +119,7 @@ const PATTERNS = [
         description: 'SSH key tooling access',
     },
     {
-        regex: /keychain|security\s+find-generic-password/i,
+        regex: /\bkeychain\b|\bsecurity\s+find-generic-password\b/i,
         severity: 'high',
         category: 'Credential Theft',
         description: 'macOS keychain access attempt',
@@ -417,10 +417,14 @@ export function appendAuditLog(entry) {
  *   not execution — strip the search term so pattern strings in args don't
  *   trigger the scanner.
  *
- * Write / Edit / MultiEdit: the content is data being written to disk,
- *   not executed. Only scan the file path (destination) and, for Edit,
- *   the old_string (what we're matching). Never scan new_string / content
- *   — that would block writing security documentation, test fixtures, etc.
+ * Write / Edit / MultiEdit: the content is DATA being written to disk, not
+ *   a command being executed. Only scan the file path (destination) — that's
+ *   enough to catch writes to sensitive files (~/.ssh/id_rsa, ~/.aws/credentials).
+ *   Do NOT scan content: it produces false positives on legitimate source code
+ *   that mentions attack-shaped strings (i18n with "system prompt", README docs
+ *   describing what we block, LLM-prompt-engineering code, security tests).
+ *   The Bash surface is the right place to catch prompt-injection / code-injection
+ *   patterns; Edit-time content is data, not execution intent.
  */
 function buildScanPayload(toolName, toolInput) {
     if (toolName === 'Bash') {
@@ -438,11 +442,11 @@ function buildScanPayload(toolName, toolInput) {
         return JSON.stringify({ file_path: toolInput.file_path ?? '' });
     }
     if (toolName === 'Edit') {
-        // Scan destination path + old_string (the selector), not new_string (the replacement)
-        return JSON.stringify({
-            file_path: toolInput.file_path ?? '',
-            old_string: toolInput.old_string ?? '',
-        });
+        // Same model as Write: scan only the destination. The old_string is
+        // EXISTING file content (data), not execution intent — scanning it
+        // produced false positives on legitimate edits to files containing
+        // attack-shaped strings (e.g. i18n.js with a "system prompt" key).
+        return JSON.stringify({ file_path: toolInput.file_path ?? '' });
     }
     if (toolName === 'MultiEdit') {
         // Scan file paths only

package/dist/infrastructure/orchestration/conductor-adapter.js

@@ -0,0 +1,340 @@
+/**
+ * F6 Conductor — codehere's own meta-agent.
+ *
+ * Plain English in, agent actions out. The Conductor is a first-class
+ * AgentAdapter that doesn't fork a subprocess — instead it ROUTES the
+ * incoming prompt to one of the dogfooded specialists (Claude Code, Codex,
+ * Aider, OpenCode) based on intent, then proxies the spawned session's
+ * events back to the caller verbatim, with a single Conductor-attributed
+ * "delegated to X" event prepended so the audit log records the routing
+ * decision.
+ *
+ * This is the v0.4-alpha SCAFFOLD. Routing is rule-based (keyword → adapter)
+ * for now. The v0.4 stable target replaces the rule lookup with an LLM
+ * classifier — Claude Haiku 4.5 prompted to pick the best specialist given
+ * the user's request, the available agents, and any context from past
+ * sessions. The seam (`pickSpecialist`) is the same; only the body changes.
+ *
+ * Why this matters: until Conductor exists, codehere is "a UI over other
+ * people's agents." With Conductor, codehere becomes a participant in the
+ * thread — the user talks to *codehere*, codehere talks to the agents, and
+ * the user gets a single conversational surface instead of having to know
+ * which specialist suits the task. This is the seam the v0.4+ Slack-shape
+ * thread UX (`@conductor` mention) attaches to.
+ *
+ * What v0.4-alpha intentionally does NOT do:
+ *  - LLM-backed classifier (rule-based only)
+ *  - Multi-step plans (one prompt → one specialist)
+ *  - Cross-session memory (Conductor sees only the current prompt)
+ *  - Mid-session redirection (once delegated, the specialist owns the session)
+ *
+ * Adding any of those before v0.4-stable rc.1 violates the "rc.N is feature-
+ * frozen, beta.N+1 may only harden or fix" rule.
+ *
+ * @see docs/CONDUCTOR.md for the full design + roadmap from scaffold → stable
+ * @see memory/project_decisions_log.md Decision 05 (F6 as first-class foundation)
+ */
+import { EventEmitter } from 'events';
+import { randomUUID } from 'crypto';
+const ROUTING_RULES = [
+    {
+        triggers: ['review', 'audit', 'explain', 'understand', 'analyze', 'analyse', 'why', 'what does'],
+        preferred: ['claude-code', 'codex', 'aider'],
+        reason: 'review/audit/explain tasks favor Claude Code',
+    },
+    {
+        triggers: ['refactor', 'restructure', 'reorganize', 'reorganise', 'rewrite the', 'extract'],
+        preferred: ['codex', 'claude-code', 'aider'],
+        reason: 'structural refactors favor Codex',
+    },
+    {
+        triggers: ['fix', 'patch', 'bugfix', 'hotfix', 'repair', 'resolve'],
+        preferred: ['aider', 'claude-code', 'codex'],
+        reason: 'targeted fixes favor Aider',
+    },
+    {
+        triggers: ['scaffold', 'generate', 'create new', 'bootstrap', 'set up'],
+        preferred: ['opencode', 'claude-code', 'codex'],
+        reason: 'greenfield generation favors OpenCode',
+    },
+    {
+        triggers: ['add tests', 'write tests', 'test coverage', 'unit test', 'integration test'],
+        preferred: ['codex', 'claude-code', 'aider'],
+        reason: 'test authoring favors Codex',
+    },
+];
+/** Default specialist when no routing rule matches. */
+const DEFAULT_SPECIALIST = 'claude-code';
+/**
+ * Tokenize a prompt for trigger matching. Splits on any non-alphanumeric
+ * boundary (whitespace, hyphens, punctuation), lowercases everything. So:
+ *
+ *   "Bug fix"        → ["bug", "fix"]
+ *   "set-up auth"    → ["set", "up", "auth"]    (trigger "set up" still matches via phrase below)
+ *   "unit-test it"   → ["unit", "test", "it"]
+ *   "prefix matter"  → ["prefix", "matter"]      (does NOT match `fix`)
+ *   "hotfixes"       → ["hotfixes"]              (does NOT match `fix`)
+ *
+ * Multi-word triggers ("add tests", "create new") are matched against the
+ * normalized prompt directly using word boundaries — so they catch
+ * "add tests" but not "added testing harness".
+ */
+function tokenize(prompt) {
+    const tokens = new Set(prompt
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter(Boolean));
+    // Normalized form for multi-word phrase matching: ANY non-alphanumeric char
+    // (hyphens, underscores, slashes, dots, colons, commas, etc.) becomes a space,
+    // then collapse runs of whitespace. This matches the tokenizer's split rule
+    // exactly, so multi-word triggers like "add tests" catch all of:
+    //   "add tests"  "add-tests"  "add_tests"  "add/tests"  "add:tests"  "add.tests"
+    // Note: must NOT collapse the leading/trailing spaces — they're load-bearing
+    // for the boundary check below (`.includes(' ' + t + ' ')`).
+    const normalized = ' ' + prompt.toLowerCase().replace(/[^a-z0-9]+/g, ' ').trim() + ' ';
+    return { tokens, normalized };
+}
+/**
+ * Test whether a routing trigger matches a prompt. Single-word triggers must
+ * appear as whole tokens (no substring matches). Multi-word triggers must
+ * appear as a phrase in the normalized prompt (with leading/trailing spaces
+ * to enforce word boundaries on the ends).
+ */
+function triggerMatches(trigger, tokens, normalized) {
+    const t = trigger.toLowerCase().trim();
+    if (!t)
+        return false;
+    if (t.includes(' ')) {
+        return normalized.includes(' ' + t + ' ');
+    }
+    return tokens.has(t);
+}
+/**
+ * Pick the right specialist for a given prompt.
+ *
+ * Algorithm:
+ *  1. Tokenize the prompt (whole-word matching, no substring false-positives).
+ *  2. Walk routing rules in order. Stop at the first rule whose triggers match.
+ *  3. Within that rule, return the first preferred adapter that's installed.
+ *  4. If that rule had a match but none of its preferred adapters are
+ *     installed, return DEFAULT_SPECIALIST (or first installed) with a
+ *     HONEST reason that names the matched rule and the fallback.
+ *  5. If no rule matched at all, return DEFAULT_SPECIALIST (or first
+ *     installed) with a "no intent matched" reason.
+ *
+ * Returns null if NO specialist is installed (caller must handle).
+ *
+ * Known limitation: a prompt with multiple intents (e.g. "fix the bug and
+ * add tests") routes by the first matching rule, not the dominant intent.
+ * The v0.4 LLM classifier inherently handles dominance via confidence
+ * scoring; the rule-based path here keeps the deterministic-priority
+ * contract instead.
+ */
+export function pickSpecialist(prompt, installedAgentIds) {
+    if (installedAgentIds.length === 0) {
+        return null;
+    }
+    const installedSet = new Set(installedAgentIds);
+    const { tokens, normalized } = tokenize(prompt);
+    for (const rule of ROUTING_RULES) {
+        const matches = rule.triggers.some((t) => triggerMatches(t, tokens, normalized));
+        if (!matches)
+            continue;
+        // Rule matched. Walk preferred specialists in order.
+        for (const candidate of rule.preferred) {
+            if (installedSet.has(candidate)) {
+                return { agentId: candidate, reason: rule.reason };
+            }
+        }
+        // Rule matched but none of its preferred specialists are installed.
+        // Fall through with an HONEST reason that names the matched rule + fallback,
+        // so the audit log records what actually happened (Codex review caught
+        // the prior version saying "default routing" here, which was a lie).
+        const fallbackId = installedSet.has(DEFAULT_SPECIALIST) ? DEFAULT_SPECIALIST : installedAgentIds[0];
+        return {
+            agentId: fallbackId,
+            reason: `${rule.reason} — but none of [${rule.preferred.join(', ')}] installed; falling back to ${fallbackId}`,
+        };
+    }
+    // No rule matched. Default routing.
+    if (installedSet.has(DEFAULT_SPECIALIST)) {
+        return { agentId: DEFAULT_SPECIALIST, reason: 'default routing (no specific intent matched)' };
+    }
+    return { agentId: installedAgentIds[0], reason: 'fallback to first available specialist' };
+}
+/**
+ * Build the Conductor adapter. The lookup function is injected so we can
+ * register against the same registry without creating an import cycle.
+ *
+ * IMPORTANT: the lookup is called at spawn time, NOT module-load time, so
+ * it sees the fully-populated registry including any user-config adapters.
+ */
+export function buildConductorAdapter(lookup) {
+    const adapter = {
+        id: 'conductor',
+        label: 'Conductor (codehere)',
+        // Conductor doesn't run as its own OS process — there's nothing to detect
+        // via `ps`. The processPattern returned here will never match, by design.
+        processPattern: /__conductor_never_matches__/,
+        isInstalled() {
+            // Conductor is "installed" iff at least one specialist is installed.
+            // Anything else would be a confusing UX (offer Conductor when it has
+            // nothing to delegate to).
+            return lookup().some((a) => a.id !== 'conductor' && a.isInstalled());
+        },
+        checkReadiness() {
+            const specialists = lookup().filter((a) => a.id !== 'conductor');
+            const installedSpecialists = specialists.filter((a) => a.isInstalled());
+            if (installedSpecialists.length === 0) {
+                return {
+                    id: 'conductor',
+                    label: 'Conductor (codehere)',
+                    state: 'needs_install',
+                    installed: false,
+                    installHint: {
+                        command: 'npm install -g @anthropic-ai/claude-code',
+                        url: 'https://github.com/codehere/codehere#install',
+                    },
+                    authHint: {
+                        detail: 'Conductor delegates to specialists. Install at least one (Claude Code, Codex, Aider, or OpenCode) and Conductor becomes available automatically.',
+                    },
+                };
+            }
+            return {
+                id: 'conductor',
+                label: 'Conductor (codehere)',
+                state: 'ready',
+                installed: true,
+            };
+        },
+        spawn(prompt, options) {
+            return spawnConductor(prompt, options ?? {}, lookup);
+        },
+    };
+    return adapter;
+}
+/**
+ * Spawn the Conductor session. Does not fork a process — instead picks a
+ * specialist, spawns it, and proxies its events through with a single
+ * "delegated" event prepended to the buffer.
+ */
+function spawnConductor(prompt, options, lookup) {
+    const sessionId = randomUUID();
+    const startedAt = Date.now();
+    const emitter = new EventEmitter();
+    const buffer = [];
+    let statusValue = 'running';
+    // Look up installed specialists (excluding Conductor itself to avoid recursion)
+    const installedAgentIds = lookup()
+        .filter((a) => a.id !== 'conductor' && a.isInstalled())
+        .map((a) => a.id);
+    const decision = pickSpecialist(prompt, installedAgentIds);
+    // If nothing's installed, emit an error event and return a non-running session.
+    if (!decision) {
+        statusValue = 'error';
+        const errEvent = {
+            type: 'error',
+            timestamp: Date.now(),
+            data: {
+                message: 'Conductor has no specialists to delegate to. Install at least one of: Claude Code, Codex, Aider, OpenCode.',
+            },
+        };
+        buffer.push(errEvent);
+        queueMicrotask(() => emitter.emit('event', errEvent));
+        return synthesizeSession({ sessionId, startedAt, prompt, statusValue, emitter, buffer });
+    }
+    // Emit the routing-decision event FIRST so the audit log records WHY this
+    // specialist was chosen. Layer 7 agent-provenance — every action attributable.
+    const routingEvent = {
+        type: 'codehere:conductor-routing',
+        timestamp: Date.now(),
+        data: {
+            conductorSessionId: sessionId,
+            delegatedTo: decision.agentId,
+            reason: decision.reason,
+            promptExcerpt: prompt.slice(0, 200),
+        },
+    };
+    buffer.push(routingEvent);
+    queueMicrotask(() => emitter.emit('event', routingEvent));
+    // Find the chosen specialist adapter and spawn against it.
+    const specialist = lookup().find((a) => a.id === decision.agentId);
+    if (!specialist) {
+        // Defensive: pickSpecialist returned an ID not in the registry. Shouldn't
+        // happen if installedAgentIds was derived from lookup(), but guard anyway.
+        statusValue = 'error';
+        const errEvent = {
+            type: 'error',
+            timestamp: Date.now(),
+            data: { message: `Conductor picked '${decision.agentId}' but no adapter with that ID is registered.` },
+        };
+        buffer.push(errEvent);
+        queueMicrotask(() => emitter.emit('event', errEvent));
+        return synthesizeSession({ sessionId, startedAt, prompt, statusValue, emitter, buffer });
+    }
+    // Spawn the specialist session and proxy every event through.
+    const specialistSession = specialist.spawn(prompt, options);
+    let stepsSnapshot = [];
+    let artifactsSnapshot;
+    specialistSession.subscribe((evt) => {
+        buffer.push(evt);
+        emitter.emit('event', evt);
+        // Mirror progress + artifacts so PM-UX layers see them on the Conductor session, too.
+        if (specialistSession.steps)
+            stepsSnapshot = specialistSession.steps;
+        if (specialistSession.artifacts)
+            artifactsSnapshot = specialistSession.artifacts;
+        if (evt.type === 'codehere:complete' || evt.type === 'codehere:error') {
+            statusValue = specialistSession.status;
+        }
+    });
+    return {
+        sessionId,
+        startedAt,
+        prompt,
+        agent: 'conductor',
+        get status() {
+            return statusValue;
+        },
+        get steps() {
+            return stepsSnapshot;
+        },
+        get artifacts() {
+            return artifactsSnapshot;
+        },
+        canAppendMessage: false, // v0.4-alpha doesn't support mid-session redirection
+        subscribe(handler) {
+            for (const e of buffer)
+                handler(e);
+            emitter.on('event', handler);
+            return () => emitter.off('event', handler);
+        },
+        kill() {
+            specialistSession.kill();
+            statusValue = 'killed';
+        },
+    };
+}
+/** Build a TaskSession that just replays an event buffer — used for error states. */
+function synthesizeSession(args) {
+    const { sessionId, startedAt, prompt, statusValue, emitter, buffer } = args;
+    return {
+        sessionId,
+        startedAt,
+        prompt,
+        agent: 'conductor',
+        get status() {
+            return statusValue;
+        },
+        subscribe(handler) {
+            for (const e of buffer)
+                handler(e);
+            emitter.on('event', handler);
+            return () => emitter.off('event', handler);
+        },
+        kill() {
+            /* nothing to kill — never started */
+        },
+    };
+}
+//# sourceMappingURL=conductor-adapter.js.map

package/dist/infrastructure/orchestration/session-manager.js

@@ -18,6 +18,7 @@ import { CodexAdapter } from './codex-adapter.js';
 import { AiderAdapter } from './aider-adapter.js';
 import { OpenCodeAdapter } from './opencode-adapter.js';
 import { buildGenericAdapter, loadAgentsConfig } from './generic-cli-adapter.js';
+import { buildConductorAdapter } from './conductor-adapter.js';
 import { seedAgentsConfig } from './agents-config-seed.js';
 import { AUDIT_FILE } from '../hooks/claude-sdk-hook.js';
 import { appendSpawned, appendCompleted, loadRecent } from './session-persistence.js';
@@ -37,6 +38,11 @@ const REGISTRY = [
     // popular CLI agents above. Users can add/edit/remove entries freely.
     ...loadAgentsConfig().map(buildGenericAdapter),
 ];
+// F6 Conductor — the meta-agent. Registered LAST so it sees the full registry
+// at lookup time. The lookup function is closed over `REGISTRY` so it always
+// returns the current populated array (including any future user adapters).
+// Conductor is appended to the same array so UIs that iterate REGISTRY see it.
+REGISTRY.push(buildConductorAdapter(() => REGISTRY));
 export function availableAgents() {
     return REGISTRY.map((a) => ({ id: a.id, label: a.label, installed: a.isInstalled() }));
 }

package/dist/infrastructure/protocols/probe-port.js

@@ -0,0 +1,36 @@
+/**
+ * Detect whether a given host:port is already serving a codehere instance.
+ *
+ * Used by `codehere start` when the listen() fails with EADDRINUSE: we'd
+ * rather give the user a friendly "codehere already running, opening browser"
+ * than a Node stack trace. If something ELSE holds the port we tell them to
+ * pick a different one.
+ *
+ * Approach: hit the existing server's /health endpoint. The codehere MCP
+ * server returns a JSON body with `server: 'codehere-mcp'` — no other tool
+ * uses that exact identifier. Generous 1.5-second timeout so a slow loopback
+ * doesn't false-negative.
+ */
+export async function isCodehereOnPort(host, port, timeoutMs = 1500) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), timeoutMs);
+    try {
+        const res = await fetch(`http://${host}:${port}/health`, { signal: ac.signal });
+        if (!res.ok)
+            return { isCodehere: false };
+        const body = (await res.json());
+        if (body?.server === 'codehere-mcp') {
+            return { isCodehere: true, version: body.version };
+        }
+        return { isCodehere: false };
+    }
+    catch {
+        // Connection refused, timeout, malformed response — anything that's not
+        // a positive codehere identification. Treat as "not codehere."
+        return { isCodehere: false };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=probe-port.js.map

package/dist/presentation/cli/repl.js

@@ -0,0 +1,401 @@
+/**
+ * Interactive REPL · faithful port of v0.2's session.ts (commit 796d4b7).
+ *
+ * Same banner, prompt, slash dispatcher, /help formatter, legacy non-slash
+ * syntax, and keyboard-shortcut hints as the v0.2 REPL. Backends adapted
+ * to v0.3 reality:
+ *   - chat/edit/review/planner functions (removed in D7) → Conductor.spawn
+ *   - /cost (no v0.3 cost tracking) → alias to /status
+ *   - /trust → runs `codehere trust` inline
+ *   - /undo (no v0.3 undo layer) → queued for v0.5 (F3 memory)
+ *
+ * Citing 796d4b7 for lineage. Do not redesign without searching git first.
+ */
+import * as readline from 'readline';
+import { colors, newline, success, error, warning, info, createWelcomeMessage } from '../../ui.js';
+import { SessionManager, availableAgents } from '../../infrastructure/orchestration/session-manager.js';
+export async function runInteractiveRepl() {
+    console.clear();
+    console.log(createWelcomeMessage());
+    newline();
+    console.log(colors.dim('Type your questions naturally, or use /commands. Type /help for all commands, exit to quit.'));
+    newline();
+    console.log(colors.dim('Keyboard Shortcuts: ↑/↓ for history, Ctrl+C to cancel, Ctrl+D to exit, Ctrl+L to clear'));
+    newline();
+    console.log(colors.dim('────────────────────────────────────────────────────'));
+    newline();
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        prompt: colors.cyan('codehere> '),
+        historySize: 100,
+        terminal: true,
+    });
+    const state = { history: [] };
+    rl.prompt();
+    rl.on('line', async (input) => {
+        const trimmed = input.trim();
+        if (!trimmed) {
+            rl.prompt();
+            return;
+        }
+        const lower = trimmed.toLowerCase();
+        if (lower === 'exit' || lower === 'quit' || trimmed === 'q') {
+            console.log(info('Goodbye! 👋'));
+            rl.close();
+            return;
+        }
+        if (lower === 'help' || trimmed === '?') {
+            showHelp();
+            showKeyboardShortcuts();
+            rl.prompt();
+            return;
+        }
+        if (lower === 'clear') {
+            console.clear();
+            console.log(createWelcomeMessage());
+            newline();
+            rl.prompt();
+            return;
+        }
+        try {
+            await executeCommand(trimmed, state);
+        }
+        catch (err) {
+            console.error(error('Error:'), err instanceof Error ? err.message : String(err));
+        }
+        rl.prompt();
+    });
+    rl.on('close', () => {
+        newline();
+        console.log(colors.dim('Session ended.'));
+        process.exit(0);
+    });
+}
+/** One-shot · `codehere "review src/auth.ts"` runs that task and exits. */
+export async function runOneShot(prompt) {
+    const installed = availableAgents().filter((a) => a.installed);
+    if (installed.length === 0) {
+        console.log(warning('No specialist installed. Run `codehere setup` and try again.'));
+        process.exit(1);
+    }
+    try {
+        await spawnViaConductor(prompt);
+    }
+    catch (err) {
+        console.error(error('Error:'), err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function executeCommand(input, state) {
+    const lower = input.toLowerCase().trim();
+    if (lower.startsWith('/')) {
+        await handleSlashCommand(input.substring(1), state);
+        return;
+    }
+    // Legacy non-slash syntax (v0.2 backwards compat)
+    if (lower.startsWith('explain ') || lower.startsWith('e ')) {
+        const file = input.substring(lower.startsWith('explain ') ? 8 : 2).trim();
+        await handleExplain(file);
+    }
+    else if (lower.startsWith('fix ') || lower.startsWith('edit ')) {
+        const rest = input.substring(lower.startsWith('fix ') ? 4 : 5).trim();
+        const parts = rest.split(' ');
+        const file = parts[0];
+        const instruction = parts.slice(1).join(' ');
+        await handleFix(file, instruction);
+    }
+    else if (lower.startsWith('review ')) {
+        await handleReview(input.substring(7).trim());
+    }
+    else if (lower.startsWith('plan ')) {
+        await handlePlan(input.substring(5).trim());
+    }
+    else {
+        // Default: delegate via Conductor
+        await handleAsk(input, state);
+    }
+}
+async function handleSlashCommand(input, state) {
+    const parts = input.trim().split(/\s+/);
+    const command = parts[0].toLowerCase();
+    const args = parts.slice(1).join(' ');
+    switch (command) {
+        case 'fix':
+        case 'edit': {
+            const fixParts = args.split(/\s+/);
+            if (fixParts.length < 2) {
+                console.log(warning('Usage: /fix <file> <instruction>'));
+                console.log(colors.dim('Example: /fix src/utils.ts "add error handling"'));
+                return;
+            }
+            await handleFix(fixParts[0], fixParts.slice(1).join(' '));
+            break;
+        }
+        case 'explain':
+        case 'e':
+            if (!args) {
+                console.log(warning('Usage: /explain <file>'));
+                console.log(colors.dim('Example: /explain src/auth.ts'));
+                return;
+            }
+            await handleExplain(args.split(/\s+/)[0]);
+            break;
+        case 'review':
+        case 'r':
+            if (!args) {
+                console.log(warning('Usage: /review <file>'));
+                console.log(colors.dim('Example: /review src/auth.ts'));
+                return;
+            }
+            await handleReview(args.split(/\s+/)[0]);
+            break;
+        case 'plan':
+        case 'p':
+            if (!args) {
+                console.log(warning('Usage: /plan <instruction>'));
+                console.log(colors.dim('Example: /plan "add user authentication"'));
+                return;
+            }
+            await handlePlan(args);
+            break;
+        case 'cost':
+        case 'status': {
+            // v0.3: no separate cost tracking; both surface the audit-log dashboard
+            try {
+                const { executeStatusCommand } = await import('./commands/status-command.js');
+                await executeStatusCommand({});
+            }
+            catch {
+                console.log(error('Failed to get status'));
+            }
+            break;
+        }
+        case 'trust': {
+            // v0.3: trust scan inline
+            const target = args || '.';
+            const { spawn } = await import('child_process');
+            const { fileURLToPath } = await import('url');
+            const { join, dirname } = await import('path');
+            const here = fileURLToPath(import.meta.url);
+            const cliPath = join(dirname(here), '..', '..', 'index.js');
+            await new Promise((resolve) => {
+                const child = spawn('node', [cliPath, 'trust', target], { stdio: 'inherit' });
+                child.on('close', () => resolve());
+                child.on('error', (err) => {
+                    console.log(error('Trust scan failed: ' + err.message));
+                    resolve();
+                });
+            });
+            break;
+        }
+        case 'agents': {
+            const all = availableAgents();
+            newline();
+            console.log(colors.bold('  Installed specialists:'));
+            for (const a of all) {
+                const tag = a.installed ? colors.green('  ✓ ') : colors.dim('  · ');
+                const status = a.installed ? '' : colors.dim('  (not installed)');
+                console.log(tag + colors.cyan(a.id.padEnd(14)) + colors.dim(a.label) + status);
+            }
+            newline();
+            break;
+        }
+        case 'undo':
+            console.log(colors.dim('  /undo is queued for v0.5 (F3 memory layer).'));
+            console.log(colors.dim('  For now: ') + colors.cyan('git diff') + colors.dim(' / ') + colors.cyan('git checkout -- <file>'));
+            break;
+        case 'history':
+        case 'h':
+            if (state.history.length === 0) {
+                console.log(colors.dim('No command history yet.'));
+            }
+            else {
+                console.log(colors.bold('Recent Commands:'));
+                state.history.slice(-10).forEach((h, i) => {
+                    const preview = h.command.length > 60 ? h.command.slice(0, 57) + '...' : h.command;
+                    console.log(colors.dim(`  ${i + 1}. ${preview}`));
+                });
+            }
+            break;
+        case 'clear':
+            console.clear();
+            console.log(createWelcomeMessage());
+            newline();
+            break;
+        case 'help':
+        case '?':
+            showSlashCommandHelp();
+            break;
+        default:
+            console.log(warning(`Unknown command: /${command}`));
+            console.log(colors.dim('Type /help to see available commands'));
+    }
+}
+function showSlashCommandHelp() {
+    newline();
+    console.log(colors.bold('Slash Commands'));
+    console.log(colors.dim('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    newline();
+    const commands = [
+        ['/fix <file> <instruction>', 'Apply AI-generated edit to a file'],
+        ['/explain <file>', 'Get AI explanation of a file'],
+        ['/review <file>', 'Review code quality and get suggestions'],
+        ['/plan <instruction>', 'Create an implementation plan'],
+        ['/agents', 'List installed specialist agents'],
+        ['/trust [path]', 'Scan path for security issues (default: cwd)'],
+        ['/status', 'Show project / audit dashboard'],
+        ['/cost', 'Alias for /status (no separate cost layer in v0.3)'],
+        ['/undo', 'Undo last edit (queued for v0.5)'],
+        ['/history', 'Show command history this session'],
+        ['/clear', 'Clear the screen'],
+        ['/help', 'Show this help message'],
+    ];
+    commands.forEach(([cmd, desc]) => {
+        console.log(`  ${colors.cyan(cmd.padEnd(30))} ${colors.dim(desc)}`);
+    });
+    newline();
+    console.log(colors.dim('Tip: You can also just type your question naturally!'));
+    console.log(colors.dim('Example: "how does authentication work?"'));
+    newline();
+}
+function showHelp() {
+    newline();
+    console.log(colors.bold('Slash Commands (recommended):'));
+    newline();
+    console.log(colors.cyan('  /fix <file> <instruction>') + '  Apply AI-generated edit');
+    console.log(colors.cyan('  /explain <file>') + '            Get AI explanation');
+    console.log(colors.cyan('  /review <file>') + '             Review code quality');
+    console.log(colors.cyan('  /plan <instruction>') + '        Create implementation plan');
+    console.log(colors.cyan('  /agents') + '                    List installed specialists');
+    console.log(colors.cyan('  /trust [path]') + '              Scan for security issues');
+    console.log(colors.cyan('  /status') + '                    Show project status');
+    console.log(colors.cyan('  /history') + '                   Show command history');
+    console.log(colors.cyan('  /help') + '                      Show all commands');
+    newline();
+    console.log(colors.bold('Quick Commands:'));
+    newline();
+    console.log(colors.cyan('  <question>') + '                 Ask anything · Conductor routes to the right specialist');
+    console.log(colors.cyan('  clear') + '                      Clear screen');
+    console.log(colors.cyan('  exit') + '                       Exit session (or: quit, q)');
+    newline();
+    console.log(colors.dim('Examples:'));
+    console.log(colors.dim('  How does authentication work?'));
+    console.log(colors.dim('  /explain src/auth.ts'));
+    console.log(colors.dim('  /fix src/utils.js "Add error handling"'));
+    newline();
+}
+function showKeyboardShortcuts() {
+    console.log(colors.bold('Keyboard Shortcuts:'));
+    newline();
+    console.log(colors.cyan('  ↑/↓') + '           Navigate command history');
+    console.log(colors.cyan('  Ctrl+C') + '        Cancel current command');
+    console.log(colors.cyan('  Ctrl+D') + '        Exit session');
+    console.log(colors.cyan('  Ctrl+L') + '        Clear screen');
+    newline();
+}
+// ── Handlers · all delegate via Conductor in v0.3 ────────────────────────
+async function handleAsk(question, state) {
+    await spawnViaConductor(question, state);
+}
+async function handleExplain(file) {
+    if (!file) {
+        console.log(warning('Usage: explain <file>'));
+        return;
+    }
+    await spawnViaConductor(`Explain this file in plain English: ${file}`);
+}
+async function handleFix(file, instruction) {
+    if (!file || !instruction) {
+        console.log(warning('Usage: fix <file> <instruction>'));
+        console.log(colors.dim('Example: fix src/utils.ts "add error handling"'));
+        return;
+    }
+    await spawnViaConductor(`fix ${file}: ${instruction}`);
+}
+async function handleReview(file) {
+    if (!file) {
+        console.log(warning('Usage: review <file>'));
+        return;
+    }
+    await spawnViaConductor(`Review ${file} for bugs, security issues, and risks. Concrete findings only.`);
+}
+async function handlePlan(instruction) {
+    if (!instruction) {
+        console.log(warning('Usage: plan <instruction>'));
+        return;
+    }
+    await spawnViaConductor(`Plan: ${instruction}. Break into concrete steps before any execution.`);
+}
+async function spawnViaConductor(prompt, state) {
+    const installed = availableAgents().filter((a) => a.installed);
+    if (installed.length === 0) {
+        console.log(warning('No specialist installed — install one and try again.'));
+        return;
+    }
+    const manager = SessionManager.getInstance();
+    const session = manager.spawn(prompt, 'conductor', { cwd: process.cwd() });
+    console.log(colors.dim('  ┌─ ') +
+        colors.bold(session.sessionId.slice(0, 8)) +
+        colors.dim(' · ' + new Date(session.startedAt).toLocaleTimeString()));
+    let captured = '';
+    await new Promise((resolve) => {
+        const unsubscribe = session.subscribe((event) => {
+            const text = renderEvent(event);
+            if (text)
+                captured += text + '\n';
+            if (event.type === 'codehere:complete' || event.type === 'codehere:error' || event.type === 'exit') {
+                unsubscribe();
+                resolve();
+            }
+        });
+    });
+    const status = session.status;
+    const verdict = status === 'completed'
+        ? success('  └─ done')
+        : status === 'killed'
+            ? warning('  └─ killed')
+            : error('  └─ ' + status);
+    console.log(verdict);
+    if (state) {
+        state.history.push({
+            command: prompt,
+            response: captured,
+            timestamp: new Date().toISOString(),
+        });
+    }
+}
+function renderEvent(event) {
+    switch (event.type) {
+        case 'codehere:conductor-routing': {
+            const data = event.data;
+            console.log(colors.dim('  │ ') +
+                colors.bold('routing → ') +
+                colors.cyan(data.delegatedTo ?? '?') +
+                colors.dim(' · ' + (data.reason ?? '')));
+            return null;
+        }
+        case 'stdout':
+        case 'stderr': {
+            const data = event.data;
+            const line = data?.line;
+            if (line) {
+                const text = String(line).trimEnd();
+                if (text) {
+                    console.log(colors.dim('  │ ') + text);
+                    return text;
+                }
+            }
+            return null;
+        }
+        case 'error': {
+            const data = event.data;
+            if (data?.message)
+                console.log(colors.red('  │ ✗ ') + data.message);
+            return null;
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=repl.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codehere",
-  "version": "0.3.0-rc.1",
+  "version": "0.3.0-rc.11",
   "description": "A PM for your AI coding agents. Delegate, orchestrate, and audit Claude Code, Codex, Aider, and OpenCode from one local web UI — every AI action traced, every file scored.",
   "main": "dist/index.js",
   "type": "module",