code-mower 1.0.9__tar.gz → 1.0.11__tar.gz

{code_mower-1.0.9 → code_mower-1.0.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 1.0.9
+Version: 1.0.11
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/codemower-ai/code-mower
@@ -40,8 +40,7 @@ gate.
 
 The short version:
 
-- create safe, manual-first reviewer lanes for Codex, Claude, Gitar, and other
-  AI review tools;
+- create safe, manual-first peer-review lanes for Codex and Claude;
 - run setup diagnostics before a lane can surprise you with spend, source
   exposure, or GitHub Actions churn;
 - turn issue text, external docs, and project doctrine into local work orders
@@ -73,6 +72,18 @@ Code Mower should feel like an engineering tool, not a demo harness:
 
 ## What It Looks Like
 
+Start with Claude Code and Codex, or choose your participants during setup with
+`code-mower init --interactive`. For example, `code-mower init --with
+claude,codex,devin` previews that selection. The generated configuration remembers
+your choices for later sessions.
+
+Ask the agent you are using to start a Code Mower session; that agent is the
+default orchestrator. `code-mower session start --repo OWNER/REPO --with
+claude,codex,devin --host codex` prepares the operating brief when invoked from
+Codex. The host agent drives the work using available execution paths.
+See [Participants And Sessions](docs/sessions.md) for setup, host identity,
+and product-specific capabilities.
+
 `code-mower doctor --adoption --repo OWNER/REPO` is the first useful command
 for a real repository. It checks your runtime, GitHub setup, provider CLIs,
 token posture, optional cloud setup, private-repo Actions cost traps, and
@@ -92,7 +103,7 @@ Example, shortened:
 ```text
 $ code-mower doctor --adoption --repo OWNER/REPO
 PASS  config.validate             config validates
-PASS  profile.select              selected profile: codex, claude_audit, gitar
+PASS  profile.select              selected profile: codex, claude_audit
 PASS  runtime.python              Python 3.12 satisfies Code Mower requirements
 PASS  runtime.github_auth         GitHub CLI auth probe succeeded
 PASS  runtime.local_cli codex     codex found
@@ -205,6 +216,12 @@ Cold adopters should start with the reviewer gate, then add builders, then
 measure builder experiments; provider experiments come after that base loop is
 observable.
 
+The initial reviewer and builder paths default to Claude + Codex. Other
+participants require an explicit setup selection. `code-mower next-steps --repo
+OWNER/REPO --pr NUMBER` shows setup, peer-audit requests, status, and local
+evidence. Add `--advanced` for calibration, migration, package rehearsal, and
+optional cloud guidance after the initial loop works.
+
 Install first from the [Install And Bootstrap](docs/install.md) matrix: pipx for
 laptops, uv tool installs for hosted agents or CI boxes, and an editable venv
 for Code Mower contributors. All paths require Python 3.12 or newer. For
@@ -224,7 +241,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.9/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.11/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -263,6 +280,15 @@ The v1.0.9 patch makes Board refresh recovery deterministic, turns package
 installation failures into bounded actionable diagnostics, and lets release
 campaigns require established providers while retaining slower or experimental
 providers as informational evidence.
+The v1.0.10 patch makes local builder lanes deliverable and recoverable: a
+provider-neutral delivery contract with bounded no-change and owner-action
+outcomes, process-group cleanup so a finished provider is not reported as a
+timeout, simpler first-run defaults, host-led participant sessions, and a
+published 20-sample provider calibration scorecard.
+The v1.0.11 patch moves canonical hosted Devin release campaigns onto the
+bounded, pollable Sessions API transport and keeps macOS Claude release
+qualification inside the maintained strict sandbox by using pip's
+TLS-verifying certifi certificate path.
 Package-only users can start from the public package rather than a source
 checkout.
 
@@ -295,7 +321,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.0.9` / `code-mower==1.0.9`. The
+the package-index procedure for `v1.0.11` / `code-mower==1.0.11`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -358,10 +384,11 @@ optional work order, single-writer branch, reviewer lanes, and fix rounds. Code
 Mower's templates now support that loop end to end; humans still own
 credentials, branch protection, calibration, and owner decisions.
 
-The reference adoption shape is Claude Code as orchestrator; Claude Code,
-Codex, and Cursor as builder lanes; Claude Code and Codex as reviewer lanes;
-and Gitar or Antigravity as informational reviewer signal until local
-calibration says otherwise.
+The initial adoption shape uses Claude Code or Codex as orchestrator, builder,
+and peer reviewer. The owning builder remains the only writer, and the other
+provider supplies independent review. Other builders and reviewers are explicit
+later additions; they follow the same lane policy with provider-specific
+execution and authentication where needed.
 
 ## Why Not Just Run Codex Or Claude Yourself?
 
@@ -443,12 +470,16 @@ The first recommended lanes are local/manual:
 | --- | --- | --- |
 | Codex audit | structured local peer audit | merge-gating eligible after setup |
 | Claude audit | structured local peer audit | merge-gating eligible after setup |
-| Gitar | advisory third signal | informational until calibrated |
 
-Everything else starts manual or informational until your own calibration data
-proves it is useful: Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
+Everything else is opt-in after the Claude + Codex loop works and stays manual
+or informational until your own calibration data proves it is useful: Gitar,
+Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
 BugBot, Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
 
+Hosted Devin dispatches use the Devin Sessions API v3. They require a service-user
+`DEVIN_API_KEY`, its opaque `DEVIN_ORG_ID`, and an exact repository acknowledgement
+in `CODE_MOWER_DEVIN_REPOSITORIES`; see `docs/release-qualification.md` for setup.
+
 Gemini CLI and Antigravity are distinct lane ids even though both are Google
 surfaces and may use Gemini model infrastructure. Keep their auth, model
 provenance, calibration evidence, and release notes separate.
@@ -484,8 +515,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.0.9`, with pinned package
-install spec `code-mower==1.0.9`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.0.11`, with pinned package
+install spec `code-mower==1.0.11`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -520,8 +551,9 @@ first so local work exercises the same package entrypoint users install.
   conservative and team-controlled while automated retention jobs are roadmap
   work.
 - Advanced/provider/operator commands remain available behind
-  `code-mower --help-all`. The default help path stays focused on `init`,
-  `doctor`, calibration, value reports, and optional cloud export/upload.
+  `code-mower --help-all`. The default help path stays focused on setup,
+  `next-steps`, lane status, and local evidence; calibration and cloud commands
+  remain available through `--help-all`.
 
 ## Docs Map
 
@@ -541,6 +573,7 @@ first so local work exercises the same package entrypoint users install.
 - [Claude Lane Standing Instructions](docs/lanes/claude.md)
 - [Cursor Hosted Lane Standing Instructions](docs/lanes/cursor.md)
 - [Provider Matrix](docs/provider-matrix.md)
+- [Provider Calibration Scorecard](docs/provider-calibration-scorecard.md)
 - [GitHub Setup](docs/github-setup.md)
 - [First Run Transcript](docs/first-run-transcript.md)
 - [First-User Demo Transcript](docs/first-user-demo-transcript.md)
@@ -561,6 +594,8 @@ first so local work exercises the same package entrypoint users install.
 - [v1.0.7 Release Notes](docs/v107-release-notes.md)
 - [v1.0.8 Release Notes](docs/v108-release-notes.md)
 - [v1.0.9 Release Notes](docs/v109-release-notes.md)
+- [v1.0.10 Release Notes](docs/v1010-release-notes.md)
+- [v1.0.11 Release Notes](docs/v1011-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
 - [Demo Calibration Example](examples/demo-calibration/README.md)

{code_mower-1.0.9 → code_mower-1.0.11}/README.md

@@ -10,8 +10,7 @@ gate.
 
 The short version:
 
-- create safe, manual-first reviewer lanes for Codex, Claude, Gitar, and other
-  AI review tools;
+- create safe, manual-first peer-review lanes for Codex and Claude;
 - run setup diagnostics before a lane can surprise you with spend, source
   exposure, or GitHub Actions churn;
 - turn issue text, external docs, and project doctrine into local work orders
@@ -43,6 +42,18 @@ Code Mower should feel like an engineering tool, not a demo harness:
 
 ## What It Looks Like
 
+Start with Claude Code and Codex, or choose your participants during setup with
+`code-mower init --interactive`. For example, `code-mower init --with
+claude,codex,devin` previews that selection. The generated configuration remembers
+your choices for later sessions.
+
+Ask the agent you are using to start a Code Mower session; that agent is the
+default orchestrator. `code-mower session start --repo OWNER/REPO --with
+claude,codex,devin --host codex` prepares the operating brief when invoked from
+Codex. The host agent drives the work using available execution paths.
+See [Participants And Sessions](docs/sessions.md) for setup, host identity,
+and product-specific capabilities.
+
 `code-mower doctor --adoption --repo OWNER/REPO` is the first useful command
 for a real repository. It checks your runtime, GitHub setup, provider CLIs,
 token posture, optional cloud setup, private-repo Actions cost traps, and
@@ -62,7 +73,7 @@ Example, shortened:
 ```text
 $ code-mower doctor --adoption --repo OWNER/REPO
 PASS  config.validate             config validates
-PASS  profile.select              selected profile: codex, claude_audit, gitar
+PASS  profile.select              selected profile: codex, claude_audit
 PASS  runtime.python              Python 3.12 satisfies Code Mower requirements
 PASS  runtime.github_auth         GitHub CLI auth probe succeeded
 PASS  runtime.local_cli codex     codex found
@@ -175,6 +186,12 @@ Cold adopters should start with the reviewer gate, then add builders, then
 measure builder experiments; provider experiments come after that base loop is
 observable.
 
+The initial reviewer and builder paths default to Claude + Codex. Other
+participants require an explicit setup selection. `code-mower next-steps --repo
+OWNER/REPO --pr NUMBER` shows setup, peer-audit requests, status, and local
+evidence. Add `--advanced` for calibration, migration, package rehearsal, and
+optional cloud guidance after the initial loop works.
+
 Install first from the [Install And Bootstrap](docs/install.md) matrix: pipx for
 laptops, uv tool installs for hosted agents or CI boxes, and an editable venv
 for Code Mower contributors. All paths require Python 3.12 or newer. For
@@ -194,7 +211,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.9/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.0.11/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -233,6 +250,15 @@ The v1.0.9 patch makes Board refresh recovery deterministic, turns package
 installation failures into bounded actionable diagnostics, and lets release
 campaigns require established providers while retaining slower or experimental
 providers as informational evidence.
+The v1.0.10 patch makes local builder lanes deliverable and recoverable: a
+provider-neutral delivery contract with bounded no-change and owner-action
+outcomes, process-group cleanup so a finished provider is not reported as a
+timeout, simpler first-run defaults, host-led participant sessions, and a
+published 20-sample provider calibration scorecard.
+The v1.0.11 patch moves canonical hosted Devin release campaigns onto the
+bounded, pollable Sessions API transport and keeps macOS Claude release
+qualification inside the maintained strict sandbox by using pip's
+TLS-verifying certifi certificate path.
 Package-only users can start from the public package rather than a source
 checkout.
 
@@ -265,7 +291,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.0.9` / `code-mower==1.0.9`. The
+the package-index procedure for `v1.0.11` / `code-mower==1.0.11`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -328,10 +354,11 @@ optional work order, single-writer branch, reviewer lanes, and fix rounds. Code
 Mower's templates now support that loop end to end; humans still own
 credentials, branch protection, calibration, and owner decisions.
 
-The reference adoption shape is Claude Code as orchestrator; Claude Code,
-Codex, and Cursor as builder lanes; Claude Code and Codex as reviewer lanes;
-and Gitar or Antigravity as informational reviewer signal until local
-calibration says otherwise.
+The initial adoption shape uses Claude Code or Codex as orchestrator, builder,
+and peer reviewer. The owning builder remains the only writer, and the other
+provider supplies independent review. Other builders and reviewers are explicit
+later additions; they follow the same lane policy with provider-specific
+execution and authentication where needed.
 
 ## Why Not Just Run Codex Or Claude Yourself?
 
@@ -413,12 +440,16 @@ The first recommended lanes are local/manual:
 | --- | --- | --- |
 | Codex audit | structured local peer audit | merge-gating eligible after setup |
 | Claude audit | structured local peer audit | merge-gating eligible after setup |
-| Gitar | advisory third signal | informational until calibrated |
 
-Everything else starts manual or informational until your own calibration data
-proves it is useful: Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
+Everything else is opt-in after the Claude + Codex loop works and stays manual
+or informational until your own calibration data proves it is useful: Gitar,
+Antigravity/Gemini, Muse, Hermes, CodeRabbit CLI, Cursor
 BugBot, Qodo, Greptile, Devin, local LLMs, and future ACP bridges.
 
+Hosted Devin dispatches use the Devin Sessions API v3. They require a service-user
+`DEVIN_API_KEY`, its opaque `DEVIN_ORG_ID`, and an exact repository acknowledgement
+in `CODE_MOWER_DEVIN_REPOSITORIES`; see `docs/release-qualification.md` for setup.
+
 Gemini CLI and Antigravity are distinct lane ids even though both are Google
 surfaces and may use Gemini model infrastructure. Keep their auth, model
 provenance, calibration evidence, and release notes separate.
@@ -454,8 +485,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.0.9`, with pinned package
-install spec `code-mower==1.0.9`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.0.11`, with pinned package
+install spec `code-mower==1.0.11`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -490,8 +521,9 @@ first so local work exercises the same package entrypoint users install.
   conservative and team-controlled while automated retention jobs are roadmap
   work.
 - Advanced/provider/operator commands remain available behind
-  `code-mower --help-all`. The default help path stays focused on `init`,
-  `doctor`, calibration, value reports, and optional cloud export/upload.
+  `code-mower --help-all`. The default help path stays focused on setup,
+  `next-steps`, lane status, and local evidence; calibration and cloud commands
+  remain available through `--help-all`.
 
 ## Docs Map
 
@@ -511,6 +543,7 @@ first so local work exercises the same package entrypoint users install.
 - [Claude Lane Standing Instructions](docs/lanes/claude.md)
 - [Cursor Hosted Lane Standing Instructions](docs/lanes/cursor.md)
 - [Provider Matrix](docs/provider-matrix.md)
+- [Provider Calibration Scorecard](docs/provider-calibration-scorecard.md)
 - [GitHub Setup](docs/github-setup.md)
 - [First Run Transcript](docs/first-run-transcript.md)
 - [First-User Demo Transcript](docs/first-user-demo-transcript.md)
@@ -531,6 +564,8 @@ first so local work exercises the same package entrypoint users install.
 - [v1.0.7 Release Notes](docs/v107-release-notes.md)
 - [v1.0.8 Release Notes](docs/v108-release-notes.md)
 - [v1.0.9 Release Notes](docs/v109-release-notes.md)
+- [v1.0.10 Release Notes](docs/v1010-release-notes.md)
+- [v1.0.11 Release Notes](docs/v1011-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
 - [Demo Calibration Example](examples/demo-calibration/README.md)

{code_mower-1.0.9 → code_mower-1.0.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "1.0.9"
+version = "1.0.11"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.12"
 readme = "README.md"

{code_mower-1.0.9 → code_mower-1.0.11}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "1.0.9"
+__version__ = "1.0.11"

{code_mower-1.0.9 → code_mower-1.0.11}/src/code_mower/builder_runs.py

@@ -39,6 +39,8 @@ AUTHOR_INFERENCE_RULES = {
     "claude-bot": ("claude", "claude_code_action"),
     "cursor[bot]": ("cursor_cloud_agent", "cursor_cloud_agent"),
     "cursor": ("cursor_cloud_agent", "cursor_cloud_agent"),
+    "devin-ai-integration": ("devin", "devin"),
+    "devin-ai-integration[bot]": ("devin", "devin"),
 }
 BRANCH_PREFIX_INFERENCE_RULES = (
     ("cursor/", "cursor_cloud_agent", "cursor_cloud_agent"),
@@ -49,6 +51,8 @@ BRANCH_PREFIX_INFERENCE_RULES = (
     ("chatgpt-codex-", "codex", "chatgpt-codex-connector"),
     ("claude/", "claude", "claude_code_action"),
     ("claude-", "claude", "claude_code_action"),
+    ("devin/", "devin_cli", "devin_cli"),
+    ("devin-", "devin_cli", "devin_cli"),
 )