indusagi-coding-agent 0.2.11 → 0.2.13

package/.env.review.example

@@ -0,0 +1,25 @@
+# Requested Supabase project: sdsdsd (bnaadeovgcqgbrnrfcef)
+SUPABASE_URL=https://bnaadeovgcqgbrnrfcef.supabase.co
+# Server-only secret. Retrieve it from Supabase project settings; never commit it.
+SUPABASE_SERVICE_ROLE_KEY=
+
+# GitHub webhook and GitHub App credentials
+GITHUB_WEBHOOK_SECRET=
+GITHUB_APP_ID=
+# PEM may use literal newlines or escaped \n sequences.
+GITHUB_APP_PRIVATE_KEY=
+
+# Development-only alternative to GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY
+# GITHUB_TOKEN=
+
+# Indusagi review model
+INDUSAGI_REVIEW_MODEL=anthropic/claude-sonnet-4-6
+ANTHROPIC_API_KEY=
+# OPENAI_API_KEY=
+# GOOGLE_API_KEY=
+# MISTRAL_API_KEY=
+
+REVIEW_AGENT_HOST=0.0.0.0
+REVIEW_AGENT_PORT=8787
+REVIEW_AGENT_POLL_MS=2000
+REVIEW_AGENT_JOBS_PER_TICK=5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.2.12]
+
+### Fixed
+- **One-shot NDJSON routing**: combining `--print --json` now runs one-shot mode with structured signal output instead of selecting the stdin-driven RPC mode.
+- **Structured tool signal contract**: `tool_start` and `tool_end` types now include the arguments, result, and error fields already emitted at runtime.
+
 ## [0.2.11]
 
 ### Fixed

package/README.md

@@ -127,6 +127,17 @@ First connect may open a browser for Zoho OAuth. Tokens persist under
 
 See [`ZOHO_NATIVE_PLAN.md`](./ZOHO_NATIVE_PLAN.md) for architecture and precedence.
 
+## GitHub review agent
+
+This package also includes `indusagi-review`, a durable GitHub pull-request
+review worker powered by the Indusagi conductor and backed by Supabase. It
+validates signed webhooks, reads repository context through read-only GitHub
+tools, posts inline review findings and a check run, and persists retryable
+jobs without Prisma.
+
+See [REVIEW_AGENT.md](./REVIEW_AGENT.md) for GitHub App permissions, Supabase
+schema, environment variables, deployment, and security details.
+
 ## Sarvam AI (native MCP)
 
 Indian-language STT / TTS / translate / vision tools via local

package/REVIEW_AGENT.md

@@ -0,0 +1,137 @@
+# Indusagi GitHub Review Agent
+
+A Supabase-backed GitHub pull-request reviewer powered by the same Indusagi framework Agent and `SessionConductor` as the terminal coding agent.
+
+## What it does
+
+1. Receives signed GitHub `pull_request` webhooks.
+2. Atomically deduplicates deliveries and persists durable jobs in Supabase.
+3. Claims work with PostgreSQL `FOR UPDATE SKIP LOCKED`.
+4. Exchanges GitHub App credentials for a short-lived installation token.
+5. Reads PR metadata, every changed-file page, and the unified diff.
+6. Runs the Indusagi conductor with read-only `github_read_file` and `github_search_code` tools.
+7. Validates structured findings against actual changed diff lines.
+8. Posts a formal GitHub review with inline comments; falls back to one sticky timeline comment if GitHub rejects line coordinates.
+9. Publishes a GitHub check run, stores the result in Supabase, and reconciles failed check updates.
+
+The service never checks out or executes pull-request code.
+
+## Supabase
+
+This repository is configured to default to the requested project:
+
+- Project: `sdsdsd`
+- Project ref: `bnaadeovgcqgbrnrfcef`
+- URL: `https://bnaadeovgcqgbrnrfcef.supabase.co`
+
+Migrations:
+
+```text
+supabase/migrations/20260827031803_indusagi_review_agent.sql
+supabase/migrations/20260827035747_atomic_webhook_enqueue.sql
+supabase/migrations/20260827040104_check_run_reconciliation.sql
+supabase/migrations/20260827041049_owned_job_leases.sql
+supabase/migrations/20260827042500_static_token_webhooks.sql
+```
+
+They create RLS-enabled `indusagi_review_deliveries` and `indusagi_review_jobs`
+tables plus atomic webhook-enqueue, ownership-safe renewable job leases,
+periodic stale-recovery, and check-run reconciliation support. No anonymous or authenticated policies are created;
+the backend must use the service-role/secret key.
+
+Never commit the service-role key. The publishable/anon key is intentionally not used because the webhook worker requires privileged server-side writes.
+
+## GitHub App setup
+
+Create a GitHub App with:
+
+### Repository permissions
+
+- Contents: Read
+- Metadata: Read
+- Pull requests: Read and write
+- Issues: Read and write (sticky fallback)
+- Checks: Read and write
+
+### Events
+
+Subscribe to `Pull request`. Point the webhook URL to:
+
+```text
+https://YOUR_HOST/webhooks/github
+```
+
+Set a strong webhook secret and configure the same value as `GITHUB_WEBHOOK_SECRET`.
+
+The service processes `opened`, `reopened`, `synchronize`, and `ready_for_review`. Drafts are ignored until ready.
+
+## Configuration
+
+Copy `.env.review.example` into your deployment secret manager. Required production values:
+
+```text
+SUPABASE_SERVICE_ROLE_KEY
+GITHUB_WEBHOOK_SECRET
+GITHUB_APP_ID
+GITHUB_APP_PRIVATE_KEY
+ANTHROPIC_API_KEY
+```
+
+`GITHUB_TOKEN` is a development-only alternative to GitHub App credentials.
+In this mode, ordinary repository webhooks without an `installation` field are
+accepted and stored with installation ID `0`; the static token provider ignores
+that sentinel value.
+
+The private key may contain literal newlines or escaped `\n` sequences.
+
+## Build and run
+
+```bash
+npm install
+npm test
+npm run typecheck
+npm run build
+npm run review:server
+```
+
+The server exposes:
+
+- `GET /healthz`
+- `POST /webhooks/github`
+
+Default port: `8787`.
+
+## Model
+
+Default:
+
+```text
+anthropic/claude-sonnet-4-6
+```
+
+Override with `INDUSAGI_REVIEW_MODEL=provider/model`. Configure the matching provider API key. The review is executed through `createSessionConductor`, with high thinking and only two read-only GitHub tools.
+
+## Security properties
+
+- Webhook signatures are mandatory and compared in constant time.
+- GitHub delivery IDs are deduplicated in Supabase.
+- Pull-request content is explicitly marked untrusted in the system and user prompts.
+- No bash, write, edit, process, or local repository tools are exposed.
+- Findings below 0.80 confidence are discarded.
+- Findings not mapped to changed diff lines are discarded.
+- The current PR head SHA is checked immediately before review generation.
+- GitHub App installation tokens are short-lived.
+- GitHub reviews and checks use deterministic markers/external IDs so retries
+  reuse already-visible side effects instead of posting duplicates.
+- GitHub and Supabase requests have 30-second deadlines; model reviews have a
+  10-minute deadline and abort the Indusagi conductor when exceeded.
+- Supabase tables have RLS enabled and no client policies.
+
+## Production notes
+
+Run at least one always-on worker process. Multiple instances are safe: the
+database claim function serializes each claim with `SKIP LOCKED`, issues a
+unique five-minute lease token, and every running-job mutation verifies that
+token. Workers renew leases every minute. Expired leases are recovered every
+minute without requiring a restart. Failed jobs use bounded exponential
+backoff and stop after three attempts.

package/dist/entry.js

@@ -18,7 +18,7 @@ var BRAND = Object.freeze({
   envShareViewer: "INDUSAGI_SHARE_VIEWER_URL",
   shareViewerUrl: "https://buildwithindusagi.ai/session/"
 });
-var VERSION = "0.2.11";
+var VERSION = "0.2.12";
 
 // src/launch/credentials.ts
 import { createInterface as createInterface2 } from "node:readline/promises";
@@ -31,7 +31,8 @@ var THINKING_EFFORTS = [
   "low",
   "medium",
   "high",
-  "xhigh"
+  "xhigh",
+  "max"
 ];
 function isThinkingEffort(value) {
   return THINKING_EFFORTS.includes(value);
@@ -1157,7 +1158,7 @@ var FLAG_GROUPS = [
   { id: "tools", title: "Tools" },
   { id: "meta", title: "Meta" }
 ];
-var THINKING_CHOICES = ["off", "minimal", "low", "medium", "high", "xhigh"];
+var THINKING_CHOICES = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 var FLAG_SPECS = [
   /* ---- Output ---------------------------------------------------------- */
   {
@@ -1330,6 +1331,76 @@ var FLAG_SPECS = [
   }
 ];
 
+// src/models.ts
+import { ModelRegistry } from "indusagi/ai";
+var GPT_6_ASTRA_BASE = {
+  id: "gpt-6-astra",
+  name: "GPT-6 Astra",
+  api: "openai-responses",
+  reasoning: true,
+  reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+  input: ["text", "image"],
+  cost: {
+    input: 10,
+    cacheRead: 1,
+    cacheWrite: 12.5,
+    output: 50
+  },
+  contextWindow: 105e4,
+  maxTokens: 128e3,
+  longContextPricing: {
+    threshold: 272e3,
+    multipliers: {
+      input: 2,
+      cacheRead: 2,
+      cacheWrite: 2,
+      output: 1.5
+    }
+  }
+};
+var CODING_AGENT_MODELS = [
+  {
+    ...GPT_6_ASTRA_BASE,
+    provider: "openai",
+    baseUrl: "https://api.openai.com/v1"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    api: "openai-codex-responses",
+    provider: "openai-codex",
+    baseUrl: "https://chatgpt.com/backend-api"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    provider: "codex-cli",
+    baseUrl: "bridge:codex-cli"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    id: "openai/gpt-6-astra",
+    provider: "indusagi-cli",
+    baseUrl: "bridge:indusagi-cli"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    id: "openai-codex/gpt-6-astra",
+    api: "openai-codex-responses",
+    provider: "indusagi-cli",
+    baseUrl: "bridge:indusagi-cli"
+  }
+];
+function applyCodingAgentModelOverlay(registry) {
+  for (const model of CODING_AGENT_MODELS) registry.registerCustomModel(model);
+  return registry;
+}
+function createCodingAgentModelRegistry() {
+  return applyCodingAgentModelOverlay(new ModelRegistry());
+}
+function isReasoningEffortSupported(modelId, effort) {
+  if (modelId?.split("/").at(-1) !== "gpt-6-astra") return true;
+  return GPT_6_ASTRA_BASE.reasoningEfforts.includes(effort);
+}
+
 // src/launch/invocation/read.ts
 function isFlagToken(token) {
   return token.length > 1 && token.startsWith("-");
@@ -1441,13 +1512,13 @@ function readBool(flags, key) {
   return flags[key] === true;
 }
 function deriveMode(flags) {
-  if (readBool(flags, "json")) return "rpc";
   if (readBool(flags, "print") && !readBool(flags, "interactive")) return "json";
+  if (readBool(flags, "json")) return "rpc";
   return "text";
 }
-function resolveThinking(flags) {
+function resolveThinking(flags, modelId) {
   const raw = readString(flags, "thinking");
-  return raw !== void 0 && isThinkingEffort(raw) ? raw : void 0;
+  return raw !== void 0 && isThinkingEffort(raw) && isReasoningEffortSupported(modelId, raw) ? raw : void 0;
 }
 function resolveTools(flags) {
   const raw = readList(flags, "tools");
@@ -1496,7 +1567,7 @@ function readInvocation(argv2) {
   const cwd = readString(flags, "cwd");
   const system = readString(flags, "system");
   const appendSystem = readString(flags, "append-system");
-  const thinking = resolveThinking(flags);
+  const thinking = resolveThinking(flags, model);
   const tools = resolveTools(flags);
   return {
     mode,
@@ -1580,7 +1651,7 @@ var MAX_TEXT_BYTES = 10 * 1024 * 1024;
 var MAX_IMAGE_BYTES = 20 * 1024 * 1024;
 
 // src/launch/catalog.ts
-import { ModelRegistry } from "indusagi/ai";
+import { ModelRegistry as ModelRegistry2 } from "indusagi/ai";
 function defaultCatalogIo() {
   return {
     print(line) {
@@ -1589,10 +1660,11 @@ function defaultCatalogIo() {
     }
   };
 }
-function registrySource(registry = new ModelRegistry()) {
+function registrySource(registry = new ModelRegistry2()) {
+  const overlaid = applyCodingAgentModelOverlay(registry);
   return {
-    providers: () => registry.getProviders(),
-    models: (provider) => registry.getModels(provider)
+    providers: () => overlaid.getProviders(),
+    models: (provider) => overlaid.getModels(provider)
   };
 }
 var HEADERS = [
@@ -2139,11 +2211,7 @@ async function loadDefaultSettings() {
   }
 }
 async function loadModelRegistry() {
-  const mod = await import("indusagi/ai");
-  if (typeof mod.ModelRegistry === "function") {
-    return new mod.ModelRegistry();
-  }
-  return mod.modelRegistry;
+  return createCodingAgentModelRegistry();
 }
 var selectRunnerStage = {
   name: "select-runner",
@@ -5218,7 +5286,7 @@ import * as path3 from "node:path";
 
 // src/conductor/catalog/catalog.ts
 import { z } from "zod";
-import { getModels, getProviders } from "indusagi/ai";
+import { getModels, getProviders, modelRegistry } from "indusagi/ai";
 var rawModelGate = z.object({
   id: z.string().min(1),
   name: z.string().min(1),
@@ -5228,6 +5296,7 @@ var rawModelGate = z.object({
   contextWindow: z.number().optional()
 });
 var EXCLUDED_PROVIDERS = /* @__PURE__ */ new Set(["mock"]);
+applyCodingAgentModelOverlay(modelRegistry);
 var frameworkSource = {
   providers: () => getProviders().filter((provider) => !EXCLUDED_PROVIDERS.has(String(provider))),
   models: (provider) => getModels(provider)
@@ -6758,7 +6827,7 @@ function reduceState(prev, action) {
   }
 }
 var DEFAULT_RETRY = { maxAttempts: 2, baseDelayMs: 250 };
-var THINKING_LADDER = ["off", "low", "medium", "high"];
+var DEFAULT_THINKING_LADDER = ["off", "low", "medium", "high"];
 var PERMISSION_CYCLE = ["default", "acceptEdits", "plan", "bypass"];
 function newSessionId() {
   return `s_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
@@ -6780,6 +6849,10 @@ function isOverloadFault(error) {
   const text = errorText(error).toLowerCase();
   return text.includes("529") || text.includes("overload");
 }
+function thinkingLadderForModel(model) {
+  const efforts = model?.reasoningEfforts;
+  return efforts?.length ? efforts : DEFAULT_THINKING_LADDER;
+}
 function withGatewayBaseUrl(model, gatewayBaseUrls) {
   const url = gatewayBaseUrls?.[model.provider];
   return url ? { ...model, baseUrl: url } : model;
@@ -7160,11 +7233,13 @@ ${outcome.output}`.trimEnd(), timestamp: Date.now() }, "note");
     return this.#thinking;
   }
   setThinkingLevel(level) {
+    if (!isReasoningEffortSupported(this.#boundModel?.id, level)) return;
     this.#thinking = level;
     this.agent.setThinkingLevel?.(level);
   }
   cycleThinkingLevel() {
-    const next = THINKING_LADDER[(THINKING_LADDER.indexOf(this.#thinking) + 1) % THINKING_LADDER.length];
+    const ladder = thinkingLadderForModel(this.#boundModel);
+    const next = ladder[(ladder.indexOf(this.#thinking) + 1) % ladder.length];
     this.setThinkingLevel(next);
     return next;
   }
@@ -9689,7 +9764,7 @@ var HOTKEYS = [
   ["Tab", "Accept the highlighted completion"],
   ["Ctrl+C", "Interrupt the running turn"],
   ["Ctrl+T", "Toggle reasoning / thinking rows"],
-  ["/thinking", "Cycle thinking effort level (off \u2192 low \u2192 medium)"],
+  ["/thinking", "Cycle the selected model's supported reasoning efforts"],
   ["Ctrl+V", "Attach an image from the clipboard"],
   ["Ctrl+G", "Edit the composer in your external editor"],
   ["Ctrl+O", "Expand or collapse full tool output"],
@@ -9771,7 +9846,7 @@ var workbenchCommands = [
   },
   {
     name: "thinking",
-    summary: "Cycle thinking effort level (off \u2192 low \u2192 medium \u2192 off)",
+    summary: "Cycle reasoning effort using the selected model's supported levels",
     run: (ctx) => {
       ctx.conductor.cycleThinkingLevel();
       return HANDLED;
@@ -12016,6 +12091,9 @@ var DEFAULT_REDACTOR = createRedactor();
 // src/insight/replay.ts
 var TEXT_DECODER3 = new TextDecoder();
 
+// src/review-agent/reviewer.ts
+import { Type as Type8 } from "@sinclair/typebox";
+
 // src/console/overlays/approval-queue.ts
 var EMPTY_APPROVAL_QUEUE = { entries: [] };
 function approvalQueueReducer(state, event) {
@@ -16158,9 +16236,9 @@ function buildKeyResolver(ctx, vault, requestedAccount) {
     }
   };
 }
-var THINKING_LEVELS = /* @__PURE__ */ new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
-function resolveThinkingLevel(raw) {
-  return raw !== void 0 && THINKING_LEVELS.has(raw) ? raw : void 0;
+var THINKING_LEVELS = /* @__PURE__ */ new Set(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
+function resolveThinkingLevel(raw, modelId) {
+  return raw !== void 0 && THINKING_LEVELS.has(raw) && isReasoningEffortSupported(modelId, raw) ? raw : void 0;
 }
 function resolveText(value) {
   try {
@@ -16461,7 +16539,7 @@ async function buildSessionConductor(ctx) {
   const tools = wrapToolsWithAddons(concatAddonTools(deck, addons), addons);
   const skills = gatherModelSkills(cwd);
   const system = composeSystem(tools, inv, cwd, skills, memoryDoc);
-  const thinking = resolveThinkingLevel(inv.thinking);
+  const thinking = resolveThinkingLevel(inv.thinking, modelId);
   const fallbackModelId = inv.fallbackModelId;
   const planReachable = inv.mode === "repl";
   const canUseTool = buildPermissionGate(permissionRules, permissionMode, tools, planReachable);

package/dist/guardrails.js

@@ -1996,7 +1996,72 @@ import { createZeroUsage as createZeroUsage2 } from "indusagi/ai";
 
 // src/conductor/catalog/catalog.ts
 import { z } from "zod";
-import { getModels, getProviders } from "indusagi/ai";
+import { getModels, getProviders, modelRegistry } from "indusagi/ai";
+
+// src/models.ts
+import { ModelRegistry } from "indusagi/ai";
+var GPT_6_ASTRA_BASE = {
+  id: "gpt-6-astra",
+  name: "GPT-6 Astra",
+  api: "openai-responses",
+  reasoning: true,
+  reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+  input: ["text", "image"],
+  cost: {
+    input: 10,
+    cacheRead: 1,
+    cacheWrite: 12.5,
+    output: 50
+  },
+  contextWindow: 105e4,
+  maxTokens: 128e3,
+  longContextPricing: {
+    threshold: 272e3,
+    multipliers: {
+      input: 2,
+      cacheRead: 2,
+      cacheWrite: 2,
+      output: 1.5
+    }
+  }
+};
+var CODING_AGENT_MODELS = [
+  {
+    ...GPT_6_ASTRA_BASE,
+    provider: "openai",
+    baseUrl: "https://api.openai.com/v1"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    api: "openai-codex-responses",
+    provider: "openai-codex",
+    baseUrl: "https://chatgpt.com/backend-api"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    provider: "codex-cli",
+    baseUrl: "bridge:codex-cli"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    id: "openai/gpt-6-astra",
+    provider: "indusagi-cli",
+    baseUrl: "bridge:indusagi-cli"
+  },
+  {
+    ...GPT_6_ASTRA_BASE,
+    id: "openai-codex/gpt-6-astra",
+    api: "openai-codex-responses",
+    provider: "indusagi-cli",
+    baseUrl: "bridge:indusagi-cli"
+  }
+];
+function applyCodingAgentModelOverlay(registry) {
+  for (const model of CODING_AGENT_MODELS) registry.registerCustomModel(model);
+  return registry;
+}
+
+// src/conductor/catalog/catalog.ts
 var rawModelGate = z.object({
   id: z.string().min(1),
   name: z.string().min(1),
@@ -2005,6 +2070,7 @@ var rawModelGate = z.object({
   input: z.array(z.string()).optional(),
   contextWindow: z.number().optional()
 });
+applyCodingAgentModelOverlay(modelRegistry);
 
 // src/conductor/signal-hub/translate.ts
 import { createZeroUsage } from "indusagi/ai";