instar 1.3.64 → 1.3.65

package/dist/core/CircuitBreakingIntelligenceProvider.d.ts

@@ -0,0 +1,40 @@
+/**
+ * CircuitBreakingIntelligenceProvider — wraps any IntelligenceProvider with the
+ * account-global LlmCircuitBreaker.
+ *
+ * This is the structural chokepoint that makes the breaker universal: every
+ * IntelligenceProvider built by the factory (and at the few direct construction
+ * sites) is wrapped once, so EVERY consumer — current and future — is protected
+ * without having to remember to consult the breaker (Structure > Willpower).
+ *
+ * Behaviour:
+ *   - Before delegating, ask the breaker. If it's open, throw
+ *     LlmCircuitOpenError WITHOUT spawning the underlying provider — this is
+ *     what actually stops the bleeding: no `claude -p` subprocess, no tokens.
+ *   - On success, tell the breaker the provider responded (closes it).
+ *   - On a rate-limit error, trip the breaker and re-throw a typed
+ *     RateLimitError so callers/telemetry can distinguish it.
+ *   - On any other error, close the breaker (the limit isn't the cause) and
+ *     re-throw the original error unchanged so existing fallback paths behave
+ *     exactly as before.
+ *
+ * Callers that already swallow provider errors (e.g. PromptGate's silent
+ * fallback) will swallow LlmCircuitOpenError too — which is precisely the
+ * desired behaviour: skip the LLM step while the breaker is open and fall back
+ * to heuristics, at zero subprocess cost.
+ */
+import type { IntelligenceProvider, IntelligenceOptions } from './types.js';
+import { LlmCircuitBreaker } from './LlmCircuitBreaker.js';
+export declare class CircuitBreakingIntelligenceProvider implements IntelligenceProvider {
+    private readonly inner;
+    private readonly breaker;
+    constructor(inner: IntelligenceProvider, breaker?: LlmCircuitBreaker);
+    evaluate(prompt: string, options?: IntelligenceOptions): Promise<string>;
+}
+/**
+ * Wrap a provider with the shared circuit breaker. No-ops on null (so callers
+ * can pass a possibly-null factory result through unchanged) and is idempotent
+ * (never double-wraps).
+ */
+export declare function wrapIntelligenceWithCircuitBreaker(provider: IntelligenceProvider | null | undefined): IntelligenceProvider | null;
+//# sourceMappingURL=CircuitBreakingIntelligenceProvider.d.ts.map

package/dist/core/CircuitBreakingIntelligenceProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CircuitBreakingIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/CircuitBreakingIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EACL,iBAAiB,EAKlB,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,mCAAoC,YAAW,oBAAoB;IAE5E,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE,iBAA0C;IAGhE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAwB/E;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAChD,oBAAoB,GAAG,IAAI,CAI7B"}

package/dist/core/CircuitBreakingIntelligenceProvider.js

@@ -0,0 +1,72 @@
+/**
+ * CircuitBreakingIntelligenceProvider — wraps any IntelligenceProvider with the
+ * account-global LlmCircuitBreaker.
+ *
+ * This is the structural chokepoint that makes the breaker universal: every
+ * IntelligenceProvider built by the factory (and at the few direct construction
+ * sites) is wrapped once, so EVERY consumer — current and future — is protected
+ * without having to remember to consult the breaker (Structure > Willpower).
+ *
+ * Behaviour:
+ *   - Before delegating, ask the breaker. If it's open, throw
+ *     LlmCircuitOpenError WITHOUT spawning the underlying provider — this is
+ *     what actually stops the bleeding: no `claude -p` subprocess, no tokens.
+ *   - On success, tell the breaker the provider responded (closes it).
+ *   - On a rate-limit error, trip the breaker and re-throw a typed
+ *     RateLimitError so callers/telemetry can distinguish it.
+ *   - On any other error, close the breaker (the limit isn't the cause) and
+ *     re-throw the original error unchanged so existing fallback paths behave
+ *     exactly as before.
+ *
+ * Callers that already swallow provider errors (e.g. PromptGate's silent
+ * fallback) will swallow LlmCircuitOpenError too — which is precisely the
+ * desired behaviour: skip the LLM step while the breaker is open and fall back
+ * to heuristics, at zero subprocess cost.
+ */
+import { LlmCircuitOpenError, RateLimitError, getLlmCircuitBreaker, isRateLimitError, } from './LlmCircuitBreaker.js';
+export class CircuitBreakingIntelligenceProvider {
+    inner;
+    breaker;
+    constructor(inner, breaker = getLlmCircuitBreaker()) {
+        this.inner = inner;
+        this.breaker = breaker;
+    }
+    async evaluate(prompt, options) {
+        const gate = this.breaker.acquire();
+        if (!gate.allow) {
+            throw new LlmCircuitOpenError(gate.retryAfterMs);
+        }
+        try {
+            const result = await this.inner.evaluate(prompt, options);
+            this.breaker.onResolved();
+            return result;
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (err instanceof RateLimitError || isRateLimitError(message)) {
+                this.breaker.onRateLimited(message);
+                if (err instanceof RateLimitError)
+                    throw err;
+                throw new RateLimitError(message, err);
+            }
+            // Non-rate-limit failure (timeout, parse error, network blip, …): not the
+            // breaker's concern. Close it so we don't keep all LLM features down on an
+            // unrelated error, and surface the original error to the caller's fallback.
+            this.breaker.onResolved();
+            throw err;
+        }
+    }
+}
+/**
+ * Wrap a provider with the shared circuit breaker. No-ops on null (so callers
+ * can pass a possibly-null factory result through unchanged) and is idempotent
+ * (never double-wraps).
+ */
+export function wrapIntelligenceWithCircuitBreaker(provider) {
+    if (!provider)
+        return null;
+    if (provider instanceof CircuitBreakingIntelligenceProvider)
+        return provider;
+    return new CircuitBreakingIntelligenceProvider(provider);
+}
+//# sourceMappingURL=CircuitBreakingIntelligenceProvider.js.map

package/dist/core/CircuitBreakingIntelligenceProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CircuitBreakingIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/CircuitBreakingIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAEL,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,mCAAmC;IAE3B;IACA;IAFnB,YACmB,KAA2B,EAC3B,UAA6B,oBAAoB,EAAE;QADnD,UAAK,GAAL,KAAK,CAAsB;QAC3B,YAAO,GAAP,OAAO,CAA4C;IACnE,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,GAAG,YAAY,cAAc,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,GAAG,YAAY,cAAc;oBAAE,MAAM,GAAG,CAAC;gBAC7C,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YACD,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAAiD;IAEjD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,QAAQ,YAAY,mCAAmC;QAAE,OAAO,QAAQ,CAAC;IAC7E,OAAO,IAAI,mCAAmC,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC"}

package/dist/core/ClaudeCliIntelligenceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ClaudeCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/ClaudeCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAO5E,qBAAa,6BAA8B,YAAW,oBAAoB;IACxE,OAAO,CAAC,UAAU,CAAS;gBAEf,UAAU,EAAE,MAAM;IAYxB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CA4C/E"}
+{"version":3,"file":"ClaudeCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/ClaudeCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAO5E,qBAAa,6BAA8B,YAAW,oBAAoB;IACxE,OAAO,CAAC,UAAU,CAAS;gBAEf,UAAU,EAAE,MAAM;IAYxB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CA+C/E"}

package/dist/core/ClaudeCliIntelligenceProvider.js

@@ -55,8 +55,11 @@ export class ClaudeCliIntelligenceProvider {
                 env: childEnv,
             }, (error, stdout, stderr) => {
                 if (error) {
-                    // Timeout or other error — return empty so caller can fall back
-                    reject(new Error(`Claude CLI error: ${error.message}${stderr ? ` — ${stderr.slice(0, 200)}` : ''}`));
+                    // Timeout or other error — reject so caller can fall back. Include a
+                    // generous stderr slice so the circuit breaker's rate-limit
+                    // classifier (isRateLimitError) can see usage/limit language that
+                    // often appears past the first 200 chars.
+                    reject(new Error(`Claude CLI error: ${error.message}${stderr ? ` — ${stderr.slice(0, 600)}` : ''}`));
                     return;
                 }
                 resolve(stdout.trim());

package/dist/core/ClaudeCliIntelligenceProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ClaudeCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/ClaudeCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,6BAA6B;IAChC,UAAU,CAAS;IAE3B,YAAY,UAAkB;QAC5B,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,yDAAyD;QACzD,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC,CAAC;QAE9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,GAAG;gBAClB,iBAAiB,EAAE,MAAM;gBACzB,8DAA8D;gBAC9D,4DAA4D;gBAC5D,mBAAmB,EAAE,MAAM;aAC5B,CAAC;YAEF,uEAAuE;YACvE,4EAA4E;YAC5E,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,UAAU,CAAC;YAC3B,OAAO,QAAQ,CAAC,iBAAiB,CAAC;YAElC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC5C,2EAA2E;gBAC3E,2EAA2E;gBAC3E,qEAAqE;gBACrE,8DAA8D;gBAC9D,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;gBAC9B,GAAG,EAAE,QAAQ;aACd,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC3B,IAAI,KAAK,EAAE,CAAC;oBACV,gEAAgE;oBAChE,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBACrG,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"ClaudeCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/ClaudeCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,6BAA6B;IAChC,UAAU,CAAS;IAE3B,YAAY,UAAkB;QAC5B,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,yDAAyD;QACzD,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC,CAAC;QAE9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,GAAG;gBAClB,iBAAiB,EAAE,MAAM;gBACzB,8DAA8D;gBAC9D,4DAA4D;gBAC5D,mBAAmB,EAAE,MAAM;aAC5B,CAAC;YAEF,uEAAuE;YACvE,4EAA4E;YAC5E,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,UAAU,CAAC;YAC3B,OAAO,QAAQ,CAAC,iBAAiB,CAAC;YAElC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC5C,2EAA2E;gBAC3E,2EAA2E;gBAC3E,qEAAqE;gBACrE,8DAA8D;gBAC9D,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;gBAC9B,GAAG,EAAE,QAAQ;aACd,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC3B,IAAI,KAAK,EAAE,CAAC;oBACV,qEAAqE;oBACrE,4DAA4D;oBAC5D,kEAAkE;oBAClE,0CAA0C;oBAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBACrG,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/CodexCliIntelligenceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CodexCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA6C5E,MAAM,WAAW,mCAAmC;IAClD,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACrE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,4BAA6B,YAAW,oBAAoB;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyD;gBAEzE,OAAO,EAAE,mCAAmC;IASlD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CA+E/E"}
+{"version":3,"file":"CodexCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA6C5E,MAAM,WAAW,mCAAmC;IAClD,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACrE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,4BAA6B,YAAW,oBAAoB;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyD;gBAEzE,OAAO,EAAE,mCAAmC;IASlD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAiF/E"}

package/dist/core/CodexCliIntelligenceProvider.js

@@ -119,8 +119,10 @@ export class CodexCliIntelligenceProvider {
                 env: childEnv,
             }, (error, stdout, stderr) => {
                 if (error) {
+                    // Generous stderr slice so the circuit breaker's rate-limit
+                    // classifier can see usage/limit language past the first 200 chars.
                     reject(new Error(`Codex CLI error: ${error.message}` +
-                        (stderr ? ` — ${stderr.slice(0, 200)}` : '')));
+                        (stderr ? ` — ${stderr.slice(0, 600)}` : '')));
                     return;
                 }
                 resolve(stdout.trim());

package/dist/core/CodexCliIntelligenceProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"CodexCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAEhG,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAEtE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAS,6BAA6B;IACpC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9E,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAqBD,MAAM,OAAO,4BAA4B;IACtB,SAAS,CAAS;IAClB,WAAW,CAAyD;IAErF,YAAY,OAA4C;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;QACtD,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;IACvE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;QAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,sEAAsE;gBACtE,oEAAoE;gBACpE,yDAAyD;gBACzD,mEAAmE;gBACnE,qEAAqE;gBACrE,uDAAuD;gBACvD,MAAM,EAAE,UAAU;gBAClB,oEAAoE;gBACpE,+DAA+D;gBAC/D,IAAI,EAAE,yBAAyB;gBAC/B,iEAAiE;gBACjE,+DAA+D;gBAC/D,iEAAiE;gBACjE,sCAAsC;gBACtC,kFAAkF;gBAClF,6DAA6D;gBAC7D,iEAAiE;gBACjE,4BAA4B;gBAC5B,uBAAuB;gBACvB,6DAA6D;gBAC7D,gEAAgE;gBAChE,gEAAgE;gBAChE,YAAY;gBACZ,MAAM;aACP,CAAC;YAEF,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,2DAA2D;YAC3D,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YAEtC,MAAM,KAAK,GAAG,QAAQ,CACpB,IAAI,CAAC,SAAS,EACd,IAAI,EACJ;gBACE,2EAA2E;gBAC3E,2EAA2E;gBAC3E,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI;gBACtB,GAAG,EAAE,QAAQ;aACd,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CACJ,IAAI,KAAK,CACP,oBAAoB,KAAK,CAAC,OAAO,EAAE;wBACjC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CACF,CAAC;YAEF,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"CodexCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAEhG,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAEtE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAS,6BAA6B;IACpC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9E,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAqBD,MAAM,OAAO,4BAA4B;IACtB,SAAS,CAAS;IAClB,WAAW,CAAyD;IAErF,YAAY,OAA4C;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;QACtD,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;IACvE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;QAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,sEAAsE;gBACtE,oEAAoE;gBACpE,yDAAyD;gBACzD,mEAAmE;gBACnE,qEAAqE;gBACrE,uDAAuD;gBACvD,MAAM,EAAE,UAAU;gBAClB,oEAAoE;gBACpE,+DAA+D;gBAC/D,IAAI,EAAE,yBAAyB;gBAC/B,iEAAiE;gBACjE,+DAA+D;gBAC/D,iEAAiE;gBACjE,sCAAsC;gBACtC,kFAAkF;gBAClF,6DAA6D;gBAC7D,iEAAiE;gBACjE,4BAA4B;gBAC5B,uBAAuB;gBACvB,6DAA6D;gBAC7D,gEAAgE;gBAChE,gEAAgE;gBAChE,YAAY;gBACZ,MAAM;aACP,CAAC;YAEF,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,2DAA2D;YAC3D,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YAEtC,MAAM,KAAK,GAAG,QAAQ,CACpB,IAAI,CAAC,SAAS,EACd,IAAI,EACJ;gBACE,2EAA2E;gBAC3E,2EAA2E;gBAC3E,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI;gBACtB,GAAG,EAAE,QAAQ;aACd,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,EAAE,CAAC;oBACV,4DAA4D;oBAC5D,oEAAoE;oBACpE,MAAM,CACJ,IAAI,KAAK,CACP,oBAAoB,KAAK,CAAC,OAAO,EAAE;wBACjC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CACF,CAAC;YAEF,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/LlmCircuitBreaker.d.ts

@@ -0,0 +1,137 @@
+/**
+ * LlmCircuitBreaker — account-global reactive circuit breaker for LLM calls.
+ *
+ * Motivating incident (2026-05-28): a wild agent burned $452/$455 in usage
+ * credits because PromptGate's per-tick Haiku detection loop kept calling
+ * `claude -p` while the account was over its weekly spend limit. The loop's
+ * error handler swallowed the rate-limit error with no backoff, so every
+ * monitor tick spawned another doomed (or, with auto-reload, freshly-billed)
+ * subprocess. There is NO legitimate reason to keep calling the LLM once the
+ * provider has told us we are over our limit — every further call is either
+ * wasted (rejected) or actively harmful (auto-reload refuels the burn).
+ *
+ * This breaker reacts to the provider's OWN rate-limit signal in milliseconds,
+ * which is distinct from (and complementary to) the volume-based
+ * token-burn-detection system (BurnDetector + LlmRateGate), which reacts to
+ * statistical token-share over a ~30-minute window. Where the burn system
+ * answers "this path is spending too much," the breaker answers "the provider
+ * just said we're rate-limited — stop."
+ *
+ * Scope: ACCOUNT-GLOBAL. A usage/rate limit applies to the whole subscription,
+ * not one session or one component, so a single shared breaker pauses every
+ * LLM-backed feature (PromptGate, PresenceProxy, PromiseBeacon, sentinels,
+ * reviewers) at once. It is wired structurally at the IntelligenceProvider
+ * construction chokepoint via CircuitBreakingIntelligenceProvider, so no
+ * consumer has to remember to consult it (Structure > Willpower).
+ *
+ * State: in-memory, process-local. A restart resets it — which is correct: the
+ * first call after restart probes the provider, and if still limited the
+ * breaker re-trips immediately.
+ */
+/** Thrown by a provider (or re-thrown by the decorator) when the underlying LLM call was rejected for a usage/rate limit. */
+export declare class RateLimitError extends Error {
+    readonly providerError?: unknown | undefined;
+    readonly isRateLimit: true;
+    constructor(message: string, providerError?: unknown | undefined);
+}
+/** Thrown by the decorator when the breaker is open — the call was refused WITHOUT spawning the underlying provider. */
+export declare class LlmCircuitOpenError extends Error {
+    readonly retryAfterMs: number;
+    readonly circuitOpen: true;
+    constructor(retryAfterMs: number);
+}
+/**
+ * Classify whether an error message indicates a provider usage/rate/spend
+ * limit (as opposed to a timeout, a parse error, a network blip, etc.).
+ *
+ * Pure + exported so it is unit-testable against representative CLI error
+ * strings from both `claude -p` and `codex exec`. Deliberately conservative:
+ * a false positive trips the breaker and degrades all LLM-backed features to
+ * heuristic-only for one open window, so we match only language that is
+ * unambiguously about hitting a usage/spend/quota ceiling — never generic
+ * "error"/"failed"/timeout text.
+ */
+export declare function isRateLimitError(message: string | null | undefined): boolean;
+type CircuitState = 'closed' | 'open' | 'half-open';
+export interface LlmCircuitBreakerOptions {
+    /** How long to stay fully open before allowing a single probe. Default 15 min. */
+    openMs?: number;
+    /** When false, the breaker is a passthrough — acquire() always allows, records are no-ops. Default true. */
+    enabled?: boolean;
+    /** Injectable clock for tests. */
+    now?: () => number;
+    /** Injectable logger (defaults to console.warn → server log). */
+    log?: (line: string) => void;
+}
+export interface AcquireDecision {
+    /** Whether the caller may invoke the underlying provider. */
+    allow: boolean;
+    /** True when this acquisition is the single half-open probe. */
+    probe: boolean;
+    /** When blocked, how long until the next probe window (ms). */
+    retryAfterMs: number;
+}
+export interface LlmCircuitBreakerStatus {
+    state: CircuitState;
+    enabled: boolean;
+    openUntil: number | null;
+    retryAfterMs: number;
+    tripCount: number;
+    lastReason: string | null;
+    lastTrippedAt: number | null;
+}
+export declare class LlmCircuitBreaker {
+    private state;
+    private openUntil;
+    private firstOpenedAt;
+    private probeInFlight;
+    private tripCount;
+    private lastReason;
+    private lastTrippedAt;
+    private openMs;
+    private enabled;
+    private readonly now;
+    private readonly log;
+    constructor(opts?: LlmCircuitBreakerOptions);
+    /** Runtime reconfiguration (called once at server startup from config). */
+    configure(opts: {
+        openMs?: number;
+        enabled?: boolean;
+    }): void;
+    /**
+     * Gate a call. Call BEFORE invoking the underlying provider. When it returns
+     * { allow: false }, the caller MUST NOT call the provider — throw
+     * LlmCircuitOpenError instead (the whole point is to avoid the spend).
+     *
+     * Exactly one probe is admitted when transitioning out of the open window;
+     * concurrent callers are blocked until that probe resolves.
+     */
+    acquire(): AcquireDecision;
+    /**
+     * Record that the underlying call returned (or threw a non-rate-limit
+     * error). Either way the rate-limit condition is not currently present, so
+     * the breaker closes. A non-rate-limit error is handled by the caller's own
+     * fallback — it is not the breaker's concern, and staying open on unrelated
+     * errors would needlessly keep all LLM features down.
+     */
+    onResolved(): void;
+    /**
+     * Record that the underlying call was rejected for a usage/rate limit. Opens
+     * (or re-extends) the breaker for a full window.
+     */
+    onRateLimited(reason: string): void;
+    status(): LlmCircuitBreakerStatus;
+    /** Reset to a clean closed state. For tests + an explicit operator override. */
+    reset(): void;
+}
+/** Process-wide account-global breaker. All wrapped providers share this instance. */
+export declare function getLlmCircuitBreaker(): LlmCircuitBreaker;
+/** Configure the singleton at startup. Safe to call before first use. */
+export declare function configureLlmCircuitBreaker(opts: {
+    openMs?: number;
+    enabled?: boolean;
+}): void;
+/** Test-only: drop the singleton so a fresh one is built next access. */
+export declare function __resetLlmCircuitBreakerSingleton(): void;
+export {};
+//# sourceMappingURL=LlmCircuitBreaker.d.ts.map

package/dist/core/LlmCircuitBreaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LlmCircuitBreaker.d.ts","sourceRoot":"","sources":["../../src/core/LlmCircuitBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,6HAA6H;AAC7H,qBAAa,cAAe,SAAQ,KAAK;IAEV,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO;IAD7D,QAAQ,CAAC,WAAW,EAAG,IAAI,CAAU;gBACzB,OAAO,EAAE,MAAM,EAAW,aAAa,CAAC,EAAE,OAAO,YAAA;CAI9D;AAED,wHAAwH;AACxH,qBAAa,mBAAoB,SAAQ,KAAK;IAEhC,QAAQ,CAAC,YAAY,EAAE,MAAM;IADzC,QAAQ,CAAC,WAAW,EAAG,IAAI,CAAU;gBAChB,YAAY,EAAE,MAAM;CAM1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAyC5E;AAED,KAAK,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAEpD,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,EAAE,OAAO,CAAC;IACf,gEAAgE;IAChE,KAAK,EAAE,OAAO,CAAC;IACf,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,aAAa,CAAuB;IAE5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyB;gBAEjC,IAAI,GAAE,wBAA6B;IAO/C,2EAA2E;IAC3E,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAK7D;;;;;;;OAOG;IACH,OAAO,IAAI,eAAe;IA+B1B;;;;;;OAMG;IACH,UAAU,IAAI,IAAI;IAUlB;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAmBnC,MAAM,IAAI,uBAAuB;IAajC,gFAAgF;IAChF,KAAK,IAAI,IAAI;CAMd;AAID,sFAAsF;AACtF,wBAAgB,oBAAoB,IAAI,iBAAiB,CAGxD;AAED,yEAAyE;AACzE,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAE7F;AAED,yEAAyE;AACzE,wBAAgB,iCAAiC,IAAI,IAAI,CAExD"}

package/dist/core/LlmCircuitBreaker.js

@@ -0,0 +1,236 @@
+/**
+ * LlmCircuitBreaker — account-global reactive circuit breaker for LLM calls.
+ *
+ * Motivating incident (2026-05-28): a wild agent burned $452/$455 in usage
+ * credits because PromptGate's per-tick Haiku detection loop kept calling
+ * `claude -p` while the account was over its weekly spend limit. The loop's
+ * error handler swallowed the rate-limit error with no backoff, so every
+ * monitor tick spawned another doomed (or, with auto-reload, freshly-billed)
+ * subprocess. There is NO legitimate reason to keep calling the LLM once the
+ * provider has told us we are over our limit — every further call is either
+ * wasted (rejected) or actively harmful (auto-reload refuels the burn).
+ *
+ * This breaker reacts to the provider's OWN rate-limit signal in milliseconds,
+ * which is distinct from (and complementary to) the volume-based
+ * token-burn-detection system (BurnDetector + LlmRateGate), which reacts to
+ * statistical token-share over a ~30-minute window. Where the burn system
+ * answers "this path is spending too much," the breaker answers "the provider
+ * just said we're rate-limited — stop."
+ *
+ * Scope: ACCOUNT-GLOBAL. A usage/rate limit applies to the whole subscription,
+ * not one session or one component, so a single shared breaker pauses every
+ * LLM-backed feature (PromptGate, PresenceProxy, PromiseBeacon, sentinels,
+ * reviewers) at once. It is wired structurally at the IntelligenceProvider
+ * construction chokepoint via CircuitBreakingIntelligenceProvider, so no
+ * consumer has to remember to consult it (Structure > Willpower).
+ *
+ * State: in-memory, process-local. A restart resets it — which is correct: the
+ * first call after restart probes the provider, and if still limited the
+ * breaker re-trips immediately.
+ */
+/** Thrown by a provider (or re-thrown by the decorator) when the underlying LLM call was rejected for a usage/rate limit. */
+export class RateLimitError extends Error {
+    providerError;
+    isRateLimit = true;
+    constructor(message, providerError) {
+        super(message);
+        this.providerError = providerError;
+        this.name = 'RateLimitError';
+    }
+}
+/** Thrown by the decorator when the breaker is open — the call was refused WITHOUT spawning the underlying provider. */
+export class LlmCircuitOpenError extends Error {
+    retryAfterMs;
+    circuitOpen = true;
+    constructor(retryAfterMs) {
+        super(`LLM circuit breaker open — provider rate-limited; pausing LLM-backed work, retry in ~${Math.ceil(retryAfterMs / 1000)}s`);
+        this.retryAfterMs = retryAfterMs;
+        this.name = 'LlmCircuitOpenError';
+    }
+}
+/**
+ * Classify whether an error message indicates a provider usage/rate/spend
+ * limit (as opposed to a timeout, a parse error, a network blip, etc.).
+ *
+ * Pure + exported so it is unit-testable against representative CLI error
+ * strings from both `claude -p` and `codex exec`. Deliberately conservative:
+ * a false positive trips the breaker and degrades all LLM-backed features to
+ * heuristic-only for one open window, so we match only language that is
+ * unambiguously about hitting a usage/spend/quota ceiling — never generic
+ * "error"/"failed"/timeout text.
+ */
+export function isRateLimitError(message) {
+    if (!message)
+        return false;
+    const m = message.toLowerCase();
+    // Explicit HTTP status codes for limit / billing rejections.
+    if (/\b429\b/.test(m))
+        return true; // Too Many Requests
+    if (/\b402\b/.test(m))
+        return true; // Payment Required
+    const phrases = [
+        'rate limit',
+        'rate-limit',
+        'rate_limit',
+        'ratelimit',
+        'too many requests',
+        'usage limit',
+        'usage_limit',
+        'usage-limit',
+        'limit reached',
+        'limit will reset',
+        'limit resets',
+        'reached your limit',
+        'payment required',
+        'out of credit',
+        'credit balance is too low',
+        'insufficient credit',
+        'insufficient quota',
+        'quota exceeded',
+        'exceeded your',
+        'spend limit',
+        'spending limit',
+        'billing',
+    ];
+    if (phrases.some((p) => m.includes(p)))
+        return true;
+    // "exceeded ... (limit|quota|usage)" with words in between.
+    if (/exceed(?:ed|s)?\b[^.\n]{0,40}(?:limit|quota|usage|credit)/.test(m))
+        return true;
+    // Bare "quota" is a strong-enough signal on its own (Anthropic/OpenAI both use it).
+    if (/\bquota\b/.test(m))
+        return true;
+    return false;
+}
+const DEFAULT_OPEN_MS = 15 * 60_000; // 15 minutes
+export class LlmCircuitBreaker {
+    state = 'closed';
+    openUntil = 0;
+    firstOpenedAt = 0;
+    probeInFlight = false;
+    tripCount = 0;
+    lastReason = null;
+    lastTrippedAt = null;
+    openMs;
+    enabled;
+    now;
+    log;
+    constructor(opts = {}) {
+        this.openMs = opts.openMs && opts.openMs > 0 ? opts.openMs : DEFAULT_OPEN_MS;
+        this.enabled = opts.enabled ?? true;
+        this.now = opts.now ?? (() => Date.now());
+        this.log = opts.log ?? ((line) => console.warn(line));
+    }
+    /** Runtime reconfiguration (called once at server startup from config). */
+    configure(opts) {
+        if (typeof opts.openMs === 'number' && opts.openMs > 0)
+            this.openMs = opts.openMs;
+        if (typeof opts.enabled === 'boolean')
+            this.enabled = opts.enabled;
+    }
+    /**
+     * Gate a call. Call BEFORE invoking the underlying provider. When it returns
+     * { allow: false }, the caller MUST NOT call the provider — throw
+     * LlmCircuitOpenError instead (the whole point is to avoid the spend).
+     *
+     * Exactly one probe is admitted when transitioning out of the open window;
+     * concurrent callers are blocked until that probe resolves.
+     */
+    acquire() {
+        if (!this.enabled)
+            return { allow: true, probe: false, retryAfterMs: 0 };
+        const now = this.now();
+        if (this.state === 'closed') {
+            return { allow: true, probe: false, retryAfterMs: 0 };
+        }
+        if (this.state === 'open') {
+            if (now >= this.openUntil) {
+                // Window elapsed → admit exactly one probe.
+                this.state = 'half-open';
+                this.probeInFlight = true;
+                this.log(`[llm-circuit] half-open: admitting one probe call after ~${Math.round((now - this.firstOpenedAt) / 1000)}s open`);
+                return { allow: true, probe: true, retryAfterMs: 0 };
+            }
+            return { allow: false, probe: false, retryAfterMs: this.openUntil - now };
+        }
+        // half-open
+        if (this.probeInFlight) {
+            // A probe is already out — block everyone else until it resolves.
+            return { allow: false, probe: false, retryAfterMs: Math.max(0, this.openUntil - now) };
+        }
+        // No probe in flight (defensive) — admit one.
+        this.probeInFlight = true;
+        return { allow: true, probe: true, retryAfterMs: 0 };
+    }
+    /**
+     * Record that the underlying call returned (or threw a non-rate-limit
+     * error). Either way the rate-limit condition is not currently present, so
+     * the breaker closes. A non-rate-limit error is handled by the caller's own
+     * fallback — it is not the breaker's concern, and staying open on unrelated
+     * errors would needlessly keep all LLM features down.
+     */
+    onResolved() {
+        if (!this.enabled)
+            return;
+        if (this.state !== 'closed') {
+            this.log(`[llm-circuit] closing: provider responded (was ${this.state})`);
+        }
+        this.state = 'closed';
+        this.probeInFlight = false;
+        this.openUntil = 0;
+    }
+    /**
+     * Record that the underlying call was rejected for a usage/rate limit. Opens
+     * (or re-extends) the breaker for a full window.
+     */
+    onRateLimited(reason) {
+        if (!this.enabled)
+            return;
+        const now = this.now();
+        if (this.state === 'closed') {
+            this.firstOpenedAt = now;
+        }
+        this.tripCount += 1;
+        this.lastReason = reason.slice(0, 200);
+        this.lastTrippedAt = now;
+        this.state = 'open';
+        this.openUntil = now + this.openMs;
+        this.probeInFlight = false;
+        this.log(`[llm-circuit] OPEN: provider rate-limited — pausing ALL LLM-backed work for ~${Math.round(this.openMs / 1000)}s (trip #${this.tripCount}); reason: ${this.lastReason}`);
+    }
+    status() {
+        const now = this.now();
+        return {
+            state: this.state,
+            enabled: this.enabled,
+            openUntil: this.state === 'closed' ? null : this.openUntil,
+            retryAfterMs: this.state === 'open' ? Math.max(0, this.openUntil - now) : 0,
+            tripCount: this.tripCount,
+            lastReason: this.lastReason,
+            lastTrippedAt: this.lastTrippedAt,
+        };
+    }
+    /** Reset to a clean closed state. For tests + an explicit operator override. */
+    reset() {
+        this.state = 'closed';
+        this.openUntil = 0;
+        this.firstOpenedAt = 0;
+        this.probeInFlight = false;
+    }
+}
+let _singleton = null;
+/** Process-wide account-global breaker. All wrapped providers share this instance. */
+export function getLlmCircuitBreaker() {
+    if (!_singleton)
+        _singleton = new LlmCircuitBreaker();
+    return _singleton;
+}
+/** Configure the singleton at startup. Safe to call before first use. */
+export function configureLlmCircuitBreaker(opts) {
+    getLlmCircuitBreaker().configure(opts);
+}
+/** Test-only: drop the singleton so a fresh one is built next access. */
+export function __resetLlmCircuitBreakerSingleton() {
+    _singleton = null;
+}
+//# sourceMappingURL=LlmCircuitBreaker.js.map

package/dist/core/LlmCircuitBreaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LlmCircuitBreaker.js","sourceRoot":"","sources":["../../src/core/LlmCircuitBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,6HAA6H;AAC7H,MAAM,OAAO,cAAe,SAAQ,KAAK;IAED;IAD7B,WAAW,GAAG,IAAa,CAAC;IACrC,YAAY,OAAe,EAAW,aAAuB;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,kBAAa,GAAb,aAAa,CAAU;QAE3D,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,wHAAwH;AACxH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEvB;IADZ,WAAW,GAAG,IAAa,CAAC;IACrC,YAAqB,YAAoB;QACvC,KAAK,CACH,wFAAwF,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAC1H,CAAC;QAHiB,iBAAY,GAAZ,YAAY,CAAQ;QAIvC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAkC;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEhC,6DAA6D;IAC7D,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IACxD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB;IAEvD,MAAM,OAAO,GAAG;QACd,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,mBAAmB;QACnB,aAAa;QACb,aAAa;QACb,aAAa;QACb,eAAe;QACf,kBAAkB;QAClB,cAAc;QACd,oBAAoB;QACpB,kBAAkB;QAClB,eAAe;QACf,2BAA2B;QAC3B,qBAAqB;QACrB,oBAAoB;QACpB,gBAAgB;QAChB,eAAe;QACf,aAAa;QACb,gBAAgB;QAChB,SAAS;KACV,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpD,4DAA4D;IAC5D,IAAI,2DAA2D,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErF,oFAAoF;IACpF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,KAAK,CAAC;AACf,CAAC;AAkCD,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;AAElD,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAAiB,QAAQ,CAAC;IAC/B,SAAS,GAAG,CAAC,CAAC;IACd,aAAa,GAAG,CAAC,CAAC;IAClB,aAAa,GAAG,KAAK,CAAC;IACtB,SAAS,GAAG,CAAC,CAAC;IACd,UAAU,GAAkB,IAAI,CAAC;IACjC,aAAa,GAAkB,IAAI,CAAC;IAEpC,MAAM,CAAS;IACf,OAAO,CAAU;IACR,GAAG,CAAe;IAClB,GAAG,CAAyB;IAE7C,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,2EAA2E;IAC3E,SAAS,CAAC,IAA4C;QACpD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAClF,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACH,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,4CAA4C;gBAC5C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;gBACzB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,GAAG,CACN,4DAA4D,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,QAAQ,CAClH,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC5E,CAAC;QAED,YAAY;QACZ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,kEAAkE;YAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,8CAA8C;QAC9C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IAED;;;;;;OAMG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,kDAAkD,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,CACN,gFAAgF,IAAI,CAAC,KAAK,CACxF,IAAI,CAAC,MAAM,GAAG,IAAI,CACnB,YAAY,IAAI,CAAC,SAAS,cAAc,IAAI,CAAC,UAAU,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;YAC1D,YAAY,EAAE,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;CACF;AAED,IAAI,UAAU,GAA6B,IAAI,CAAC;AAEhD,sFAAsF;AACtF,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,UAAU;QAAE,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CAAC,IAA4C;IACrF,oBAAoB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iCAAiC;IAC/C,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}

package/dist/core/intelligenceProviderFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intelligenceProviderFactory.d.ts","sourceRoot":"","sources":["../../src/core/intelligenceProviderFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKvD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,gCAAgC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,oBAAoB,GAAG,IAAI,CAyB7B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,qBAAqB,GAAG,IAAI,CAMnG"}
+{"version":3,"file":"intelligenceProviderFactory.d.ts","sourceRoot":"","sources":["../../src/core/intelligenceProviderFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAMvD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,gCAAgC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,oBAAoB,GAAG,IAAI,CA+B7B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,qBAAqB,GAAG,IAAI,CAMnG"}

package/dist/core/intelligenceProviderFactory.js

@@ -16,6 +16,7 @@
 import { detectClaudePath, detectCodexPath } from './Config.js';
 import { ClaudeCliIntelligenceProvider } from './ClaudeCliIntelligenceProvider.js';
 import { CodexCliIntelligenceProvider } from './CodexCliIntelligenceProvider.js';
+import { wrapIntelligenceWithCircuitBreaker } from './CircuitBreakingIntelligenceProvider.js';
 /**
  * Build an IntelligenceProvider for the given framework. Returns null
  * if the required binary can't be located. The caller decides what
@@ -30,21 +31,25 @@ import { CodexCliIntelligenceProvider } from './CodexCliIntelligenceProvider.js'
  */
 export function buildIntelligenceProvider(options = {}) {
     const framework = options.framework ?? 'claude-code';
+    // Every provider the factory hands out is wrapped with the account-global
+    // LLM circuit breaker (CircuitBreakingIntelligenceProvider). A closed breaker
+    // is a transparent passthrough, so this is always safe; it only acts when the
+    // provider reports a usage/rate limit. See LlmCircuitBreaker for the why.
     switch (framework) {
         case 'claude-code': {
             const path = options.binaryPath ?? detectClaudePath();
             if (!path)
                 return null;
-            return new ClaudeCliIntelligenceProvider(path);
+            return wrapIntelligenceWithCircuitBreaker(new ClaudeCliIntelligenceProvider(path));
         }
         case 'codex-cli': {
             const path = options.binaryPath ?? detectCodexPath();
             if (!path)
                 return null;
-            return new CodexCliIntelligenceProvider({
+            return wrapIntelligenceWithCircuitBreaker(new CodexCliIntelligenceProvider({
                 codexPath: path,
                 ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),
-            });
+            }));
         }
         default: {
             // Exhaustiveness check — extending IntelligenceFramework without

package/dist/core/intelligenceProviderFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"intelligenceProviderFactory.js","sourceRoot":"","sources":["../../src/core/intelligenceProviderFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AA0BjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAA4C,EAAE;IAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IAErD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,IAAI,4BAA4B,CAAC;gBACtC,SAAS,EAAE,IAAI;gBACf,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,iEAAiE;YACjE,sCAAsC;YACtC,MAAM,WAAW,GAAU,SAAS,CAAC;YACrC,KAAK,WAAW,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC;IACpE,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"intelligenceProviderFactory.js","sourceRoot":"","sources":["../../src/core/intelligenceProviderFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AA0B9F;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAA4C,EAAE;IAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IAErD,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,kCAAkC,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,kCAAkC,CACvC,IAAI,4BAA4B,CAAC;gBAC/B,SAAS,EAAE,IAAI;gBACf,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,iEAAiE;YACjE,sCAAsC;YACtC,MAAM,WAAW,GAAU,SAAS,CAAC;YACrC,KAAK,WAAW,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC;IACpE,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC"}