codehere 1.0.1 → 1.0.3

package/dist/infrastructure/orchestration/control/control-surface.js

@@ -1,15 +0,0 @@
-/**
- * ControlSurface · the vendor-neutral "drive another agent" abstraction.
- *
- * The POC (agent/test/evidence/poc/control-channel/) proved the cross-agent
- * finding: each agent exposes a DIFFERENT control surface (codex app-server
- * turn/steer · claude --channels · etc.), so codehere's control layer is one
- * interface implemented per-adapter — exactly the adapter pattern codehere
- * already uses for spawning.
- *
- * `inject(message)` is the core primitive: push a message INTO a running agent
- * session (the remote-control headline). Today: codex app-server. Next: claude
- * channel.
- */
-export {};
-//# sourceMappingURL=control-surface.js.map

package/dist/infrastructure/orchestration/detect-ollama.js

@@ -1,75 +0,0 @@
-/**
- * Detect a local Ollama install with at least one model — so codehere can offer
- * a RELIABLE, FREE, LOCAL second vendor (aider → ollama) instead of depending on
- * flaky free tiers or the user's cloud billing. This is the unlock for the
- * cross-vendor wedge (V2) on a machine that has Ollama: a local model that
- * completes real coding tasks with no rate limits and no key.
- *
- * Cheap + cached: `ollama list` is shelled at most once per TTL window; if Ollama
- * isn't installed/running the call fails fast and we cache "not available", so the
- * common no-Ollama path costs ~one bounded spawn every 30s, never per task.
- */
-import { execFileSync } from 'node:child_process';
-let cache;
-let cachedAt = 0;
-const TTL_MS = 30_000;
-/** Embedding / non-chat models aider can't drive as a coder. Routing to one
- *  would fail silently, so they're never auto-picked (self-audit 2026-06-09). */
-const NON_CHAT = /embed|rerank|bge|nomic|minilm|e5-|gte-|clip|whisper|moondream|llava-phi/i;
-/** Pick the model to run: an explicit CODEHERE_OLLAMA_MODEL override if it's
- *  actually installed, else the first GENERATIVE model. We don't guess a "best"
- *  coder (a /coder/ bias picked an 18GB model — slow); we only EXCLUDE models
- *  aider can't use. The user knows their hardware — CODEHERE_OLLAMA_MODEL is the
- *  knob (refuter + self-audit 2026-06-09). */
-function pickModel(models) {
-    if (models.length === 0)
-        return undefined;
-    const override = process.env.CODEHERE_OLLAMA_MODEL;
-    if (override && models.includes(override))
-        return override; // explicit wins, even if "non-chat"
-    // :cloud tags are ollama's CLOUD-proxied models — no local weights, billed
-    // account required. Auto-picking one breaks this module's whole promise
-    // (reliable, free, local) with "couldn't reach the model provider" — hit
-    // live 2026-07-02 when glm-5.2:cloud was first in `ollama list`. Explicit
-    // override above still allows them; auto-pick never does.
-    return models.find((m) => !NON_CHAT.test(m) && !/:cloud$/i.test(m)) ?? undefined;
-}
-/** Detect a usable local Ollama. Never throws. */
-export function detectOllama() {
-    const now = Date.now();
-    if (cache && now - cachedAt < TTL_MS)
-        return cache;
-    let info = { available: false };
-    try {
-        // Short timeout: this is a SYNC call and readiness runs it on the daemon's
-        // event loop (the UI polls readiness), so a HUNG ollama must not block the
-        // daemon for long. 700ms once per TTL window is a tolerable worst case; the
-        // common (fast or absent) paths return in ~20ms (refuter 2026-06-09).
-        const out = execFileSync('ollama', ['list'], {
-            timeout: 700,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-        });
-        // `ollama list` prints a header row then "NAME  ID  SIZE  MODIFIED" rows.
-        const models = out
-            .split('\n')
-            .slice(1)
-            .map((l) => l.trim().split(/\s+/)[0])
-            .filter((m) => m && m !== 'NAME');
-        const model = pickModel(models);
-        if (model)
-            info = { available: true, model };
-    }
-    catch {
-        /* ollama not installed / not serving → not available */
-    }
-    cache = info;
-    cachedAt = now;
-    return info;
-}
-/** @internal test seam — clear the memoized detection. */
-export function __resetOllamaCache() {
-    cache = undefined;
-    cachedAt = 0;
-}
-//# sourceMappingURL=detect-ollama.js.map

package/dist/infrastructure/orchestration/failover-classifier.js

@@ -1,151 +0,0 @@
-/**
- * Failover classifier — v0.6.x rate-limit fail-over wedge (Slice A).
- *
- * Interprets adapter error codes to decide whether fail-over to a different
- * adapter should be offered to the user. Pure function — no I/O, no adapter
- * spawning. Adapters already detect rate-limit / quota errors via their
- * ERROR_PATTERNS arrays and emit `codehere:error` events with codes:
- *   - 'rate_limit'      — Anthropic / OpenAI / Google 429s
- *   - 'quota_exceeded'  — credit balance / quota exhausted
- *   - 'auth_invalid'    — NOT failover-eligible (different fix)
- *   - other codes       — NOT failover-eligible (specific to provider)
- *
- * This module's job: take an emitted error code, return either a FailoverSignal
- * (caller should ask user "switch to Codex?") or null (don't offer failover).
- *
- * Per `feedback_research_sharpens_not_pivots.md` — this sharpens what already
- * ships (per-adapter error patterns) rather than introducing a new detection
- * mechanism. Per claim_market_position v4 — the fail-over capability is the
- * v0.6 outward proof point that demonstrates codehere's vendor-neutral value
- * (only a vendor-neutral layer can switch you off Claude when Claude refuses).
- *
- * Slice A scope (this commit): the pure classifier + retry-after parser +
- * tests. Slices B-F wire policy resolution, user consent, mid-task hand-off,
- * UI surfacing, and end-to-end integration.
- */
-/**
- * Error codes that should trigger a fail-over offer. Keep tight — false
- * positives waste user attention with "switch?" prompts they don't want.
- *
- * Verified against current adapter ERROR_PATTERNS (May 2026):
- *   - 'rate_limit'      — emitted by all 5 adapters on 429s
- *   - 'quota_exceeded'  — emitted by codex-adapter, gemini-adapter
- *   - 'credit_low'      — emitted by claude-code-adapter, aider-adapter
- *                         when API credit balance is exhausted
- *
- * NOT included (and why):
- *   - 'auth_invalid' — fixing the wrong adapter doesn't help; switching to
- *     a different agent that ALSO needs auth doesn't fix anything
- *   - generic errors — no signal that another adapter would do better
- *   - timeouts — could be transient on either side
- */
-const FAILOVER_TRIGGER_CODES = new Set(['rate_limit', 'quota_exceeded', 'credit_low']);
-/**
- * Returns a FailoverSignal if the error code suggests we should offer
- * fail-over to a different adapter, null otherwise. Pure function — no
- * side effects. Caller decides how to surface the offer (CLI prompt,
- * web UI banner, programmatic auto-failover).
- *
- * @param fromAgent  Adapter id of the agent that hit the error
- * @param errorCode  Code from the adapter's ERROR_PATTERNS classification
- * @param errorMessage  Original error text (used to extract retry-after)
- */
-export function classifyFailoverEligibility(fromAgent, errorCode, errorMessage) {
-    if (!FAILOVER_TRIGGER_CODES.has(errorCode))
-        return null;
-    if (!fromAgent)
-        return null;
-    const retryAfterMs = parseRetryAfterMs(errorMessage);
-    const signal = {
-        fromAgent,
-        errorCode,
-        reason: errorMessage || `${fromAgent} hit ${errorCode}`,
-    };
-    if (retryAfterMs !== undefined)
-        signal.retryAfterMs = retryAfterMs;
-    return signal;
-}
-/**
- * Best-effort extraction of retry-after from common error message shapes.
- * Returns milliseconds or undefined. Conservative — only matches patterns
- * we've seen in real provider responses; unknown shapes return undefined
- * (caller treats as "unknown — show indefinite wait").
- *
- * Patterns recognized:
- *   - "Retry-After: 60"
- *   - "retry after 60s"
- *   - "retry after 60 seconds"
- *   - "try again in 2 minutes"
- *   - "wait 5 min"
- *   - "wait 90 seconds"
- *   - "in 2m 30s" (rare, treat as 2 minutes)
- *
- * NOT matched (intentionally — too ambiguous):
- *   - bare numbers ("60") — could be anything
- *   - "wait a moment" — no quantity
- */
-export function parseRetryAfterMs(message) {
-    if (!message)
-        return undefined;
-    // "Retry-After: <N> <unit>" — HTTP header style with EXPLICIT unit.
-    // Per RFC 7231, default unit is seconds; we also accept explicit unit
-    // suffix (some providers add one for clarity, e.g. "Retry-After: 5 minutes").
-    // Must NOT match HTTP-date forms ("Retry-After: Wed, 21 Oct ...").
-    const headerWithUnitMatch = message.match(/retry-?after[:\s]+(\d+)\s*(seconds?|secs?|s\b|minutes?|mins?|m\b|hours?|hrs?|h\b)/i);
-    if (headerWithUnitMatch) {
-        const n = Number(headerWithUnitMatch[1]);
-        const unit = headerWithUnitMatch[2].toLowerCase();
-        if (Number.isFinite(n) && n > 0)
-            return convertToMs(n, unit);
-    }
-    // "Retry-After: 60" — bare header with no unit, defaults to seconds per RFC.
-    // Negative lookahead rejects HTTP-date forms (alphabetic chars after the digits).
-    const headerBareMatch = message.match(/retry-?after[:\s]+(\d+)(?!\s*[A-Za-z])/i);
-    if (headerBareMatch) {
-        const sec = Number(headerBareMatch[1]);
-        if (Number.isFinite(sec) && sec > 0)
-            return sec * 1000;
-    }
-    // Order matters: try LARGER units first so compound durations like
-    // "2m 30s" or "1h 45m" don't get misread as the smaller unit. Without
-    // this, "try again in 2m 30s" would match the seconds pattern on "30s"
-    // and return 30 seconds instead of ~2 minutes.
-    //
-    // Each pattern accepts a fractional value (e.g. OpenAI's "try again in 1.23s")
-    // — bare-int regex would have matched "23s" and missed the "1." prefix,
-    // returning 23 seconds instead of ~1.23 seconds. Capture group is "\d+(?:\.\d+)?".
-    // "in 2 hours" / "try again in 1 hour" — common for daily / weekly limits
-    const naturalHoursMatch = message.match(/(?:retry|try again|in|wait|reset).*?(\d+(?:\.\d+)?)\s*hours?\b/i);
-    if (naturalHoursMatch) {
-        const hr = Number(naturalHoursMatch[1]);
-        if (Number.isFinite(hr) && hr > 0)
-            return Math.round(hr * 60 * 60 * 1000);
-    }
-    // "retry after 2 minutes" / "try again in 5 min" / "wait 5 min" / "in 2m 30s"
-    const naturalMinutesMatch = message.match(/(?:retry|try again|wait).*?(\d+(?:\.\d+)?)\s*(?:minutes?|mins?|m\b)/i);
-    if (naturalMinutesMatch) {
-        const min = Number(naturalMinutesMatch[1]);
-        if (Number.isFinite(min) && min > 0)
-            return Math.round(min * 60 * 1000);
-    }
-    // "retry after 60s" / "try again in 60s" / "wait 60s" / "try again in 1.23s"
-    // (OpenAI returns fractional seconds for sub-2-second rate-limit windows).
-    // Last because compound durations like "2m 30s" should be read as minutes.
-    const naturalSecondsMatch = message.match(/(?:retry|try again|wait).*?(\d+(?:\.\d+)?)\s*(?:seconds?|secs?|s\b)/i);
-    if (naturalSecondsMatch) {
-        const sec = Number(naturalSecondsMatch[1]);
-        if (Number.isFinite(sec) && sec > 0)
-            return Math.round(sec * 1000);
-    }
-    return undefined;
-}
-/** Convert a number + unit string to milliseconds. Unit is one of the regex
- *  alternatives in the header-with-unit pattern above. */
-function convertToMs(n, unit) {
-    if (/^h/i.test(unit))
-        return n * 60 * 60 * 1000;
-    if (/^m/i.test(unit))
-        return n * 60 * 1000;
-    return n * 1000; // seconds (default)
-}
-//# sourceMappingURL=failover-classifier.js.map

package/dist/infrastructure/orchestration/failover-config.js

@@ -1,67 +0,0 @@
-/**
- * Failover config loader — v0.6.x rate-limit fail-over wedge (Slice C).
- *
- * Reads `failoverChain` from `~/.codehere/config.json` and validates it
- * against the known agent ids. Returns the validated chain or undefined
- * if the user has not configured one (caller falls back to the default).
- *
- * Config shape (~/.codehere/config.json):
- *   {
- *     "version": "0.6.0",
- *     "failover": {
- *       "chain": ["codex", "claude-code", "aider"]
- *     }
- *   }
- *
- * If `failover.chain` is missing, empty, or invalid, returns undefined
- * so the caller uses DEFAULT_FAILOVER_CHAIN from failover-policy.ts.
- *
- * Slice C scope: config read + validation. Slice D wires it into
- * SessionManager so the resolved chain flows into the resolver.
- */
-import { readFileSync, existsSync } from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-import { validateFailoverChain } from './failover-policy.js';
-const GLOBAL_CONFIG_PATH = join(process.env.CODEHERE_HOME || homedir(), '.codehere', 'config.json');
-/**
- * Load failover configuration from ~/.codehere/config.json.
- * Returns undefined if the config file does not exist or has no failover section.
- *
- * Safe to call at any time — no side effects, no caching, no I/O errors
- * propagated (returns undefined on any read failure).
- */
-export function loadFailoverConfig() {
-    if (!existsSync(GLOBAL_CONFIG_PATH))
-        return undefined;
-    try {
-        const raw = JSON.parse(readFileSync(GLOBAL_CONFIG_PATH, 'utf-8'));
-        if (!raw || typeof raw !== 'object')
-            return undefined;
-        const failover = raw.failover;
-        if (!failover || typeof failover !== 'object')
-            return undefined;
-        const config = {};
-        // Validate chain if present
-        if (Array.isArray(failover.chain)) {
-            try {
-                config.chain = validateFailoverChain(failover.chain);
-            }
-            catch {
-                // Invalid chain — skip it, caller uses default
-                config.chain = undefined;
-            }
-        }
-        // autoFailover — boolean, defaults to false
-        if (typeof failover.autoFailover === 'boolean') {
-            config.autoFailover = failover.autoFailover;
-        }
-        return config;
-    }
-    catch {
-        // Config file exists but is malformed — return undefined so caller
-        // falls back to defaults without crashing.
-        return undefined;
-    }
-}
-//# sourceMappingURL=failover-config.js.map

package/dist/infrastructure/orchestration/failover-policy.js

@@ -1,106 +0,0 @@
-/**
- * Failover policy — v0.6.x rate-limit fail-over wedge (Slice B).
- *
- * Given: an adapter that hit a fail-over-eligible error (per Slice A's
- * `classifyFailoverEligibility`), a user-configured preference chain, and
- * the set of currently-available adapters on this machine.
- * Returns: the next adapter to try, or null if no fail-over target is
- * available.
- *
- * Pure function — no I/O, no spawning. Caller (session-manager, Slice D)
- * uses the resolver output to drive the user-consent flow (Slice C) and
- * the mid-task hand-off.
- *
- * Default chain rationale:
- *   claude-code → codex → aider → opencode → gemini
- *
- * The default is ordered by capability+reliability for general coding work
- * as of May 2026:
- *   - claude-code: strongest at multi-file reasoning + tool use
- *   - codex: strongest at independent review + adversarial mode
- *   - aider: most reliable for surgical single-file edits
- *   - opencode: cross-vendor flexibility within itself
- *   - gemini: longest context window, but free-tier rate limits hit fast
- *
- * Users can override via `~/.codehere/config.json` `failoverChain` array.
- * Per-task override also supported via SpawnOptions.failoverChain (Slice D
- * wires this).
- *
- * Slice B scope (this commit): pure resolver + config schema + tests.
- * Slices C-F wire user consent, mid-task hand-off, UI surfacing, e2e.
- */
-/** Adapter ids in the order codehere supports. Keep in sync with adapter
- *  registry. Used as the strict ordering for chain validation. */
-export const KNOWN_AGENT_IDS = ['claude-code', 'codex', 'aider', 'opencode', 'gemini'];
-/** Default fail-over chain. See module docblock for ordering rationale.
- *  Each entry is the agent codehere will TRY in order when the previous
- *  one is unavailable or has already been tried this hand-off. */
-export const DEFAULT_FAILOVER_CHAIN = ['claude-code', 'codex', 'aider', 'opencode', 'gemini'];
-/**
- * Resolve the next fail-over target. Returns the adapter id to try, or
- * null if no eligible target exists.
- *
- * Selection rules (in order):
- *   1. Use preferredChain if provided, else DEFAULT_FAILOVER_CHAIN
- *   2. Skip the failed agent itself
- *   3. Skip any adapter in alreadyTried
- *   4. Skip adapters not present in available[] OR with ready=false
- *   5. Return the FIRST remaining adapter in chain order
- *   6. If nothing remains, return null
- *
- * Pure — no spawn, no config read. Caller assembles the inputs.
- */
-export function resolveFailoverTarget(opts) {
-    const chain = opts.preferredChain && opts.preferredChain.length > 0 ? opts.preferredChain : DEFAULT_FAILOVER_CHAIN;
-    const tried = new Set([opts.failedAgent, ...(opts.alreadyTried ?? [])]);
-    const readyById = new Map();
-    for (const a of opts.available)
-        readyById.set(a.id, a.ready);
-    for (const candidate of chain) {
-        if (tried.has(candidate))
-            continue;
-        if (readyById.get(candidate) !== true)
-            continue;
-        return candidate;
-    }
-    return null;
-}
-/**
- * Validate a user-supplied chain (e.g. read from config.json). Returns the
- * chain if every entry is a known agent id; throws otherwise. Caller
- * (config-loader, Slice C) uses this to give a helpful error if the user
- * mistypes an adapter name.
- */
-export function validateFailoverChain(chain) {
-    if (!Array.isArray(chain)) {
-        throw new Error('failoverChain must be an array of agent ids');
-    }
-    const validated = [];
-    for (const item of chain) {
-        if (typeof item !== 'string') {
-            throw new Error(`failoverChain entries must be strings, got ${typeof item}`);
-        }
-        if (!isKnownAgentId(item)) {
-            throw new Error(`Unknown agent id in failoverChain: "${item}". Valid ids: ${KNOWN_AGENT_IDS.join(', ')}`);
-        }
-        if (validated.includes(item)) {
-            throw new Error(`Duplicate agent id in failoverChain: "${item}"`);
-        }
-        validated.push(item);
-    }
-    return validated;
-}
-function isKnownAgentId(id) {
-    return KNOWN_AGENT_IDS.includes(id);
-}
-/**
- * Helper: convert an array of AgentAdapter (typically from an adapter
- * registry) to the AdapterAvailability shape this module expects, given
- * a readiness probe function. Used by callers who already have the
- * adapter instances handy. Caller passes a probe like
- * `adapter.checkReadiness().state === 'ready'`.
- */
-export function toAvailability(adapters, isReady) {
-    return adapters.map((a) => ({ id: a.id, ready: isReady(a) }));
-}
-//# sourceMappingURL=failover-policy.js.map