codehere 0.3.0-rc.2 → 0.3.0-rc.27

package/dist/domain/services/codebase-detector.js

@@ -9,7 +9,7 @@ import { join, dirname, resolve } from 'path';
  */
 export function findCodebaseRoot(startPath = process.cwd()) {
     const resolvedStart = resolve(startPath);
-    let currentDir = resolvedStart;
+    const currentDir = resolvedStart;
     // Try to find git root first
     const gitRoot = findGitRoot(currentDir);
     if (gitRoot) {

package/dist/index.js

@@ -14,7 +14,6 @@ import { Command } from 'commander';
 import { config } from 'dotenv';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
-import { existsSync, readFileSync } from 'fs';
 import { executeSetupCommand } from './presentation/cli/commands/setup-command.js';
 import { executeConfigCommand } from './presentation/cli/commands/config-command.js';
 import { executeHelpCommand } from './presentation/cli/commands/help-command.js';
@@ -38,60 +37,53 @@ catch {
 }
 config();
 import { getVersion } from './utils/version.js';
+import { checkTypo } from './utils/typo-guard.js';
 const program = new Command();
 program
     .name('codehere')
     .description('A PM for your AI coding agents. Delegate a task, watch it run, get a plain-English report with a trust score on every file.')
     .version(getVersion())
-    .configureHelp({ helpWidth: 80, sortSubcommands: true });
-// Default action · show welcome + quick start (no REPL; v0.3 is web-UI-first)
+    .configureHelp({ helpWidth: 80, sortSubcommands: true })
+    // rc.18: many users hit `codehere --help` first and get Commander's flat
+    // list. The grouped `codehere help` is more useful for discovery. Surface
+    // it inline so muscle-memory `--help` users find the better page.
+    // (Pin: no raw ANSI in --help output — existing commands.test.ts asserts
+    // this, see test/cli/commands.test.ts "no raw ANSI escape codes in --help".)
+    .addHelpText('after', '\nTip: `codehere help` shows commands grouped by use case (Delegate · Safety & Trust · Configuration).');
+// Default action · show welcome, then drop into the interactive REPL on TTY.
+// codehere offers TWO surfaces, both first-class: the CLI REPL (here) and the
+// web UI (`codehere start`). Users pick whichever fits their workflow.
 program
-    .argument('[query]', 'Reserved — the PM intake lives at http://127.0.0.1:3773 after you run `codehere start`')
+    .argument('[query]', 'Optional initial task to delegate (otherwise enter interactive REPL)')
     .action(async (query) => {
+    // One-shot delegate: `codehere "review src/auth.ts"` runs that task and exits.
+    // Useful for scripting or quick one-offs without entering the REPL.
     if (query && query.trim()) {
-        console.error(error('Direct-query routing was removed in v0.3 (D7 trim).'));
-        console.log(colors.dim('Use the PM intake instead:'));
-        console.log('  ' + colors.cyan('codehere start') + '          → web UI at http://127.0.0.1:3773');
-        console.log('  ' + colors.cyan(`codehere task "${query.trim().slice(0, 40)}..."`) + ' → spawn via CLI');
-        process.exit(1);
+        const trimmed = query.trim();
+        // Typo guard — see src/utils/typo-guard.ts for heuristics.
+        // Returns suggestions when input looks like a typo; null falls through.
+        const known = program.commands.map((c) => c.name());
+        const suggestions = checkTypo(trimmed, known);
+        if (suggestions) {
+            console.error(`codehere: unknown command '${trimmed}'.`);
+            console.error('');
+            console.error('  Did you mean:');
+            for (const s of suggestions)
+                console.error(`    codehere ${s}`);
+            console.error('');
+            console.error(`  If you meant to ask a question, quote it: codehere "${trimmed}"`);
+            process.exit(1);
+        }
+        const { runOneShot } = await import('./presentation/cli/repl.js');
+        await runOneShot(trimmed);
+        return;
     }
     if (!process.stdin.isTTY) {
         console.log(createWelcomeMessage());
         return;
     }
-    const codehereDir = join(process.env.HOME || '', '.codehere');
-    const settingsPath = join(process.env.HOME || '', '.claude', 'settings.json');
-    const hasHooks = existsSync(settingsPath) && readFileSync(settingsPath, 'utf-8').includes('codehere');
-    const hasAuditLog = existsSync(join(codehereDir, 'audit', 'hook-events.jsonl'));
-    console.log(createWelcomeMessage());
-    newline();
-    if (!hasHooks && !hasAuditLog) {
-        console.log(colors.bold("Welcome! Let's get you set up."));
-        newline();
-        console.log('  ' + colors.bold('Safety first — no API key, instant'));
-        console.log(colors.dim('  Every AI write gets scanned. Catches injections, hardcoded secrets,'));
-        console.log(colors.dim('  destructive ops, and more.'));
-        newline();
-        console.log('    → Run ' + colors.cyan('codehere hook install') + ' to activate safety');
-        console.log('    → Run ' + colors.cyan('codehere trust .') + ' to scan this project');
-        newline();
-        console.log('  ' + colors.bold('Delegate tasks — the PM for your AI coding agents'));
-        console.log(colors.dim('  Pick Claude Code, Codex, Aider, or OpenCode. codehere coordinates.'));
-        newline();
-        console.log('    → Run ' + colors.cyan('codehere start') + ' to open the task UI');
-        newline();
-    }
-    else {
-        console.log(colors.bold('Quick start:'));
-        newline();
-        console.log('  ' + colors.cyan('codehere start') + '            Task intake UI at http://127.0.0.1:3773');
-        console.log('  ' + colors.cyan('codehere status') + '           Dashboard · sessions · blocked calls');
-        console.log('  ' + colors.cyan('codehere report') + '           Generate a shareable audit report');
-        console.log('  ' + colors.cyan('codehere trust .') + '          Scan this project now');
-        newline();
-        console.log(colors.dim('  Run `codehere --help` for all commands.'));
-        newline();
-    }
+    const { runInteractiveRepl } = await import('./presentation/cli/repl.js');
+    await runInteractiveRepl();
 });
 // ── setup ────────────────────────────────────────────────────────────────────
 program
@@ -133,8 +125,23 @@ program
     .command('health')
     .description('Check system health and metrics')
     .option('-m, --metrics', 'Show detailed metrics')
+    .option('--json', 'Machine-readable JSON (for monitoring/CI)')
     .action((options) => {
     const health = performHealthCheck();
+    if (options.json) {
+        // Machine-readable: status + checks (+ metrics when --metrics).
+        // Stdout is the contract — never mix with the human banner.
+        // Use process.exitCode (not process.exit) so a piped consumer sees the
+        // full JSON before the process tears down (rc.16: Codex flagged the old
+        // process.exit call as a truncation hazard under stdout redirection).
+        const payload = { status: health.status, checks: health.checks };
+        if (options.metrics)
+            payload.metrics = getMetrics();
+        console.log(JSON.stringify(payload, null, 2));
+        if (health.status === 'unhealthy')
+            process.exitCode = 1;
+        return;
+    }
     if (isMinimalStyle()) {
         printMinimalHeader('health', '');
     }
@@ -232,9 +239,9 @@ program
     .command('report')
     .description('Generate a shareable security audit report — narrative, not just a score')
     .argument('[target]', 'File or directory to audit (default: current directory)')
-    .option('--out <file>', 'Write report to a specific file (default: codehere-audit.md)')
-    .option('--stdout', 'Print the report to stdout instead of writing a file')
-    .option('--json', 'Output machine-readable JSON instead of markdown')
+    .option('--out <file>', 'Write report to a specific file (default: codehere-audit.md for markdown)')
+    .option('--stdout', 'Print the report to stdout (already the default for --json)')
+    .option('--json', 'Output machine-readable JSON to stdout (pipe to jq, etc.)')
     .option('--simple', 'Plain English output — no jargon, for non-technical stakeholders')
     .addHelpText('after', `
 Examples:
@@ -354,10 +361,30 @@ program
     const port = parseInt(options?.port ?? '3773', 10);
     const host = options?.host ?? '127.0.0.1';
     const shouldOpen = options?.open !== false;
+    const url = `http://${host}:${port}/`;
+    const openBrowser = async () => {
+        if (!shouldOpen)
+            return;
+        const { spawn } = await import('child_process');
+        const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
+        try {
+            spawn(opener, [url], { detached: true, stdio: 'ignore' }).unref();
+        }
+        catch {
+            /* browser open is best-effort */
+        }
+    };
     try {
         const { startMCPServer } = await import('./infrastructure/protocols/mcp-server-impl.js');
         const server = startMCPServer({ port, host });
-        const url = `http://${host}:${port}/`;
+        // Wait for the server to either start listening or fail. The default
+        // Node behavior on listen() failure is an unhandled 'error' event which
+        // crashes the process with a stack trace. We catch it here so the user
+        // sees a friendly message instead.
+        await new Promise((resolve, reject) => {
+            server.once('listening', () => resolve());
+            server.once('error', reject);
+        });
         newline();
         console.log(success('codehere is running'));
         newline();
@@ -367,16 +394,7 @@ program
         newline();
         console.log(colors.dim('  Press Ctrl+C to stop'));
         newline();
-        if (shouldOpen) {
-            const { spawn } = await import('child_process');
-            const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
-            try {
-                spawn(opener, [url], { detached: true, stdio: 'ignore' }).unref();
-            }
-            catch {
-                /* browser open is best-effort */
-            }
-        }
+        await openBrowser();
         process.on('SIGINT', () => {
             server.close();
             console.log(colors.dim('\ncodehere stopped'));
@@ -387,6 +405,28 @@ program
         });
     }
     catch (err) {
+        const code = err?.code;
+        if (code === 'EADDRINUSE') {
+            // Port is taken. Probe to find out by what — if it's a running codehere,
+            // we should hand the user the existing URL; if it's something else,
+            // tell them to pick a different port.
+            const { isCodehereOnPort } = await import('./infrastructure/protocols/probe-port.js');
+            const existing = await isCodehereOnPort(host, port);
+            newline();
+            if (existing.isCodehere) {
+                console.log(success(`codehere is already running at ${url}`));
+                if (existing.version) {
+                    console.log(colors.dim(`  version: ${existing.version}`));
+                }
+                newline();
+                console.log(colors.dim('  Opening browser...'));
+                await openBrowser();
+                process.exit(0);
+            }
+            console.error(error(`Port ${port} is in use by another process.`));
+            console.error(colors.dim(`  Try: codehere start --port ${port + 1}`));
+            process.exit(1);
+        }
         console.error(error('Failed to start:'), err instanceof Error ? err.message : String(err));
         process.exit(1);
     }

package/dist/infrastructure/hooks/claude-sdk-hook.js

@@ -44,7 +44,7 @@ const PATTERNS = [
         description: 'Role hijacking attempt',
     },
     {
-        regex: /system\s*prompt|<\/?system>|(?<!['"\\])<\/?instruction>/i,
+        regex: /\bsystem\s+prompt\b|<\/?system>|(?<!['"\\])<\/?instruction>/i,
         severity: 'critical',
         category: 'Prompt Injection',
         description: 'System prompt injection',
@@ -56,7 +56,7 @@ const PATTERNS = [
         description: 'Instruction override attempt',
     },
     {
-        regex: /jailbreak|DAN\s+mode|developer\s+mode\s+enabled/i,
+        regex: /\bjailbreak\b|\bDAN\s+mode\b|\bdeveloper\s+mode\s+enabled\b/i,
         severity: 'critical',
         category: 'Prompt Injection',
         description: 'Jailbreak attempt',
@@ -93,7 +93,7 @@ const PATTERNS = [
         description: 'Exfiltrates env secrets',
     },
     {
-        regex: /printenv|env\s*\|\s*(grep|curl|wget|nc)\b/i,
+        regex: /\bprintenv\b|\benv\s*\|\s*(grep|curl|wget|nc)\b/i,
         severity: 'high',
         category: 'Credential Theft',
         description: 'Environment variable exfiltration',
@@ -119,7 +119,7 @@ const PATTERNS = [
         description: 'SSH key tooling access',
     },
     {
-        regex: /keychain|security\s+find-generic-password/i,
+        regex: /\bkeychain\b|\bsecurity\s+find-generic-password\b/i,
         severity: 'high',
         category: 'Credential Theft',
         description: 'macOS keychain access attempt',

package/dist/infrastructure/hooks/session-analyzer.js

@@ -76,17 +76,26 @@ export function detectAmplificationAlerts(sessions) {
             continue;
         let message = '';
         const risk = session.amplificationRisk;
-        if (session.blockedCalls > 0 && session.totalCalls > 20) {
-            message = `${session.totalCalls} tool calls with ${session.blockedCalls} blocked — possible injection in multi-agent chain`;
+        // rc.17 framing: don't accuse "injection" by default — that wording scares
+        // users on perfectly normal long attended sessions. Reserve the strong
+        // language for cases where the *blocked-call ratio* is high (real signal
+        // of prompts trying things they shouldn't), not just call volume.
+        // UX_OBSERVATIONS.md P1.
+        const blockRatio = session.totalCalls > 0 ? session.blockedCalls / session.totalCalls : 0;
+        if (session.blockedCalls > 0 && session.totalCalls > 20 && blockRatio > 0.05) {
+            message = `${session.totalCalls} tool calls, ${session.blockedCalls} blocked (${(blockRatio * 100).toFixed(0)}%) — high block ratio, review for injection`;
+        }
+        else if (session.blockedCalls > 0 && session.totalCalls > 20) {
+            message = `${session.totalCalls} tool calls, ${session.blockedCalls} blocked — long session, review if unattended`;
         }
         else if (session.totalCalls > 50) {
-            message = `${session.totalCalls} tool calls in one session — check for amplification`;
+            message = `${session.totalCalls} tool calls in one session — high density, review if unattended`;
         }
         else if ((session.toolMix['Bash'] ?? 0) > 10) {
-            message = `${session.toolMix['Bash']} Bash calls in one session — elevated risk`;
+            message = `${session.toolMix['Bash']} Bash calls in one session — elevated tool-mix`;
         }
         else {
-            message = `${session.totalCalls} calls, ${session.blockedCalls} blocked — worth reviewing`;
+            message = `${session.totalCalls} calls, ${session.blockedCalls} blocked — worth a glance`;
         }
         alerts.push({
             sessionId: session.sessionId,

package/dist/infrastructure/orchestration/conductor-adapter.js

@@ -0,0 +1,351 @@
+/**
+ * F6 Conductor — codehere's own meta-agent.
+ *
+ * Plain English in, agent actions out. The Conductor is a first-class
+ * AgentAdapter that doesn't fork a subprocess — instead it ROUTES the
+ * incoming prompt to one of the dogfooded specialists (Claude Code, Codex,
+ * Aider, OpenCode) based on intent, then proxies the spawned session's
+ * events back to the caller verbatim, with a single Conductor-attributed
+ * "delegated to X" event prepended so the audit log records the routing
+ * decision.
+ *
+ * This is the v0.4-alpha SCAFFOLD. Routing is rule-based (keyword → adapter)
+ * for now. The v0.4 stable target replaces the rule lookup with an LLM
+ * classifier — Claude Haiku 4.5 prompted to pick the best specialist given
+ * the user's request, the available agents, and any context from past
+ * sessions. The seam (`pickSpecialist`) is the same; only the body changes.
+ *
+ * Why this matters: until Conductor exists, codehere is "a UI over other
+ * people's agents." With Conductor, codehere becomes a participant in the
+ * thread — the user talks to *codehere*, codehere talks to the agents, and
+ * the user gets a single conversational surface instead of having to know
+ * which specialist suits the task. This is the seam the v0.4+ Slack-shape
+ * thread UX (`@conductor` mention) attaches to.
+ *
+ * What v0.4-alpha intentionally does NOT do:
+ *  - LLM-backed classifier (rule-based only)
+ *  - Multi-step plans (one prompt → one specialist)
+ *  - Cross-session memory (Conductor sees only the current prompt)
+ *  - Mid-session redirection (once delegated, the specialist owns the session)
+ *
+ * Adding any of those before v0.4-stable rc.1 violates the "rc.N is feature-
+ * frozen, beta.N+1 may only harden or fix" rule.
+ *
+ * @see docs/CONDUCTOR.md for the full design + roadmap from scaffold → stable
+ * @see memory/project_decisions_log.md Decision 05 (F6 as first-class foundation)
+ */
+import { EventEmitter } from 'events';
+import { randomUUID } from 'crypto';
+const ROUTING_RULES = [
+    {
+        triggers: ['review', 'audit', 'explain', 'understand', 'analyze', 'analyse', 'why', 'what does'],
+        preferred: ['claude-code', 'codex', 'aider'],
+        reason: 'review/audit/explain tasks favor Claude Code',
+    },
+    {
+        triggers: ['refactor', 'restructure', 'reorganize', 'reorganise', 'rewrite the', 'extract'],
+        preferred: ['codex', 'claude-code', 'aider'],
+        reason: 'structural refactors favor Codex',
+    },
+    {
+        triggers: ['fix', 'patch', 'bugfix', 'hotfix', 'repair', 'resolve'],
+        preferred: ['aider', 'claude-code', 'codex'],
+        reason: 'targeted fixes favor Aider',
+    },
+    {
+        triggers: ['scaffold', 'generate', 'create new', 'bootstrap', 'set up'],
+        preferred: ['opencode', 'claude-code', 'codex'],
+        reason: 'greenfield generation favors OpenCode',
+    },
+    {
+        triggers: ['add tests', 'write tests', 'test coverage', 'unit test', 'integration test'],
+        preferred: ['codex', 'claude-code', 'aider'],
+        reason: 'test authoring favors Codex',
+    },
+];
+/** Default specialist when no routing rule matches. */
+const DEFAULT_SPECIALIST = 'claude-code';
+/**
+ * Tokenize a prompt for trigger matching. Splits on any non-alphanumeric
+ * boundary (whitespace, hyphens, punctuation), lowercases everything. So:
+ *
+ *   "Bug fix"        → ["bug", "fix"]
+ *   "set-up auth"    → ["set", "up", "auth"]    (trigger "set up" still matches via phrase below)
+ *   "unit-test it"   → ["unit", "test", "it"]
+ *   "prefix matter"  → ["prefix", "matter"]      (does NOT match `fix`)
+ *   "hotfixes"       → ["hotfixes"]              (does NOT match `fix`)
+ *
+ * Multi-word triggers ("add tests", "create new") are matched against the
+ * normalized prompt directly using word boundaries — so they catch
+ * "add tests" but not "added testing harness".
+ */
+function tokenize(prompt) {
+    const tokens = new Set(prompt
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter(Boolean));
+    // Normalized form for multi-word phrase matching: ANY non-alphanumeric char
+    // (hyphens, underscores, slashes, dots, colons, commas, etc.) becomes a space,
+    // then collapse runs of whitespace. This matches the tokenizer's split rule
+    // exactly, so multi-word triggers like "add tests" catch all of:
+    //   "add tests"  "add-tests"  "add_tests"  "add/tests"  "add:tests"  "add.tests"
+    // Note: must NOT collapse the leading/trailing spaces — they're load-bearing
+    // for the boundary check below (`.includes(' ' + t + ' ')`).
+    const normalized = ' ' +
+        prompt
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, ' ')
+            .trim() +
+        ' ';
+    return { tokens, normalized };
+}
+/**
+ * Test whether a routing trigger matches a prompt. Single-word triggers must
+ * appear as whole tokens (no substring matches). Multi-word triggers must
+ * appear as a phrase in the normalized prompt (with leading/trailing spaces
+ * to enforce word boundaries on the ends).
+ */
+function triggerMatches(trigger, tokens, normalized) {
+    const t = trigger.toLowerCase().trim();
+    if (!t)
+        return false;
+    if (t.includes(' ')) {
+        return normalized.includes(' ' + t + ' ');
+    }
+    return tokens.has(t);
+}
+/**
+ * Pick the right specialist for a given prompt.
+ *
+ * Algorithm:
+ *  1. Tokenize the prompt (whole-word matching, no substring false-positives).
+ *  2. Walk routing rules in order. Stop at the first rule whose triggers match.
+ *  3. Within that rule, return the first preferred adapter that's installed.
+ *  4. If that rule had a match but none of its preferred adapters are
+ *     installed, return DEFAULT_SPECIALIST (or first installed) with a
+ *     HONEST reason that names the matched rule and the fallback.
+ *  5. If no rule matched at all, return DEFAULT_SPECIALIST (or first
+ *     installed) with a "no intent matched" reason.
+ *
+ * Returns null if NO specialist is installed (caller must handle).
+ *
+ * Known limitation: a prompt with multiple intents (e.g. "fix the bug and
+ * add tests") routes by the first matching rule, not the dominant intent.
+ * The v0.4 LLM classifier inherently handles dominance via confidence
+ * scoring; the rule-based path here keeps the deterministic-priority
+ * contract instead.
+ */
+export function pickSpecialist(prompt, installedAgentIds) {
+    if (installedAgentIds.length === 0) {
+        return null;
+    }
+    const installedSet = new Set(installedAgentIds);
+    const { tokens, normalized } = tokenize(prompt);
+    for (const rule of ROUTING_RULES) {
+        const matches = rule.triggers.some((t) => triggerMatches(t, tokens, normalized));
+        if (!matches)
+            continue;
+        // Rule matched. Walk preferred specialists in order.
+        for (const candidate of rule.preferred) {
+            if (installedSet.has(candidate)) {
+                return { agentId: candidate, reason: rule.reason };
+            }
+        }
+        // Rule matched but none of its preferred specialists are installed.
+        // Fall through with an HONEST reason that names the matched rule + fallback,
+        // so the audit log records what actually happened (Codex review caught
+        // the prior version saying "default routing" here, which was a lie).
+        const fallbackId = installedSet.has(DEFAULT_SPECIALIST) ? DEFAULT_SPECIALIST : installedAgentIds[0];
+        return {
+            agentId: fallbackId,
+            reason: `${rule.reason} — but none of [${rule.preferred.join(', ')}] installed; falling back to ${fallbackId}`,
+        };
+    }
+    // No rule matched. Default routing.
+    if (installedSet.has(DEFAULT_SPECIALIST)) {
+        return { agentId: DEFAULT_SPECIALIST, reason: 'default routing (no specific intent matched)' };
+    }
+    return { agentId: installedAgentIds[0], reason: 'fallback to first available specialist' };
+}
+/**
+ * Build the Conductor adapter. The lookup function is injected so we can
+ * register against the same registry without creating an import cycle.
+ *
+ * IMPORTANT: the lookup is called at spawn time, NOT module-load time, so
+ * it sees the fully-populated registry including any user-config adapters.
+ */
+export function buildConductorAdapter(lookup) {
+    const adapter = {
+        id: 'conductor',
+        label: 'Conductor (codehere)',
+        // Conductor doesn't run as its own OS process — there's nothing to detect
+        // via `ps`. The processPattern returned here will never match, by design.
+        processPattern: /__conductor_never_matches__/,
+        isInstalled() {
+            // Conductor is "installed" iff at least one specialist is installed.
+            // Anything else would be a confusing UX (offer Conductor when it has
+            // nothing to delegate to).
+            return lookup().some((a) => a.id !== 'conductor' && a.isInstalled());
+        },
+        checkReadiness() {
+            const specialists = lookup().filter((a) => a.id !== 'conductor');
+            const installedSpecialists = specialists.filter((a) => a.isInstalled());
+            if (installedSpecialists.length === 0) {
+                return {
+                    id: 'conductor',
+                    label: 'Conductor (codehere)',
+                    state: 'needs_install',
+                    installed: false,
+                    installHint: {
+                        command: 'npm install -g @anthropic-ai/claude-code',
+                        url: 'https://github.com/codehere/codehere#install',
+                    },
+                    authHint: {
+                        detail: 'Conductor delegates to specialists. Install at least one (Claude Code, Codex, Aider, or OpenCode) and Conductor becomes available automatically.',
+                    },
+                };
+            }
+            return {
+                id: 'conductor',
+                label: 'Conductor (codehere)',
+                state: 'ready',
+                installed: true,
+            };
+        },
+        spawn(prompt, options) {
+            return spawnConductor(prompt, options ?? {}, lookup);
+        },
+    };
+    return adapter;
+}
+/**
+ * Spawn the Conductor session. Does not fork a process — instead picks a
+ * specialist, spawns it, and proxies its events through with a single
+ * "delegated" event prepended to the buffer.
+ */
+function spawnConductor(prompt, options, lookup) {
+    const sessionId = randomUUID();
+    const startedAt = Date.now();
+    const emitter = new EventEmitter();
+    const buffer = [];
+    let statusValue = 'running';
+    // Look up installed specialists (excluding Conductor itself to avoid recursion)
+    const installedAgentIds = lookup()
+        .filter((a) => a.id !== 'conductor' && a.isInstalled())
+        .map((a) => a.id);
+    const decision = pickSpecialist(prompt, installedAgentIds);
+    // If nothing's installed, emit an error event and return a non-running session.
+    if (!decision) {
+        statusValue = 'error';
+        const errEvent = {
+            type: 'error',
+            timestamp: Date.now(),
+            data: {
+                message: 'Conductor has no specialists to delegate to. Install at least one of: Claude Code, Codex, Aider, OpenCode.',
+            },
+        };
+        buffer.push(errEvent);
+        return synthesizeSession({ sessionId, startedAt, prompt, statusValue, emitter, buffer });
+    }
+    // Emit the routing-decision event FIRST so the audit log records WHY this
+    // specialist was chosen. Layer 7 agent-provenance — every action attributable.
+    const routingEvent = {
+        type: 'codehere:conductor-routing',
+        timestamp: Date.now(),
+        data: {
+            conductorSessionId: sessionId,
+            delegatedTo: decision.agentId,
+            reason: decision.reason,
+            promptExcerpt: prompt.slice(0, 200),
+        },
+    };
+    // Buffer replay on subscribe() handles delivery to the first subscriber. Do
+    // NOT also queueMicrotask(emit) — the microtask fires AFTER subscribe attaches
+    // its handler, so the handler would receive routingEvent twice (rc.13 bug:
+    // duplicate "routing → ..." line in the REPL).
+    buffer.push(routingEvent);
+    // Find the chosen specialist adapter and spawn against it.
+    const specialist = lookup().find((a) => a.id === decision.agentId);
+    if (!specialist) {
+        // Defensive: pickSpecialist returned an ID not in the registry. Shouldn't
+        // happen if installedAgentIds was derived from lookup(), but guard anyway.
+        statusValue = 'error';
+        const errEvent = {
+            type: 'error',
+            timestamp: Date.now(),
+            data: { message: `Conductor picked '${decision.agentId}' but no adapter with that ID is registered.` },
+        };
+        buffer.push(errEvent);
+        return synthesizeSession({ sessionId, startedAt, prompt, statusValue, emitter, buffer });
+    }
+    // Spawn the specialist session and proxy every event through.
+    const specialistSession = specialist.spawn(prompt, options);
+    let stepsSnapshot = [];
+    let artifactsSnapshot;
+    specialistSession.subscribe((evt) => {
+        buffer.push(evt);
+        emitter.emit('event', evt);
+        // Mirror progress + artifacts so PM-UX layers see them on the Conductor session, too.
+        if (specialistSession.steps)
+            stepsSnapshot = specialistSession.steps;
+        if (specialistSession.artifacts)
+            artifactsSnapshot = specialistSession.artifacts;
+        // Specialist adapters terminate with an 'exit' event — never emit
+        // 'codehere:complete' / 'codehere:error'. Without mirroring on 'exit',
+        // session.status stayed 'running' forever and the REPL printed
+        // "✗ └─ running" (rc.13 bug). Also keep the legacy types for safety in
+        // case a future adapter emits them.
+        if (evt.type === 'exit' || evt.type === 'codehere:complete' || evt.type === 'codehere:error') {
+            statusValue = specialistSession.status;
+        }
+    });
+    return {
+        sessionId,
+        startedAt,
+        prompt,
+        agent: 'conductor',
+        get status() {
+            return statusValue;
+        },
+        get steps() {
+            return stepsSnapshot;
+        },
+        get artifacts() {
+            return artifactsSnapshot;
+        },
+        canAppendMessage: false, // v0.4-alpha doesn't support mid-session redirection
+        subscribe(handler) {
+            for (const e of buffer)
+                handler(e);
+            emitter.on('event', handler);
+            return () => emitter.off('event', handler);
+        },
+        kill() {
+            specialistSession.kill();
+            statusValue = 'killed';
+        },
+    };
+}
+/** Build a TaskSession that just replays an event buffer — used for error states. */
+function synthesizeSession(args) {
+    const { sessionId, startedAt, prompt, statusValue, emitter, buffer } = args;
+    return {
+        sessionId,
+        startedAt,
+        prompt,
+        agent: 'conductor',
+        get status() {
+            return statusValue;
+        },
+        subscribe(handler) {
+            for (const e of buffer)
+                handler(e);
+            emitter.on('event', handler);
+            return () => emitter.off('event', handler);
+        },
+        kill() {
+            /* nothing to kill — never started */
+        },
+    };
+}
+//# sourceMappingURL=conductor-adapter.js.map