code-mower 1.1.1__tar.gz → 1.2.0__tar.gz

{code_mower-1.1.1 → code_mower-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 1.1.1
+Version: 1.2.0
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/codemower-ai/code-mower
@@ -34,9 +34,9 @@ Code Mower helps teams set up AI peer-programmer and reviewer lanes on real
 GitHub pull requests, then measure which builders and reviewers are useful on
 their actual codebase.
 
-Code Mower 1.0 is supervised-pilot, bring-your-own-agent-loop software for
-teams willing to calibrate reviewers. It is not a drop-in unattended merge
-gate.
+The current Code Mower release line is supervised-pilot,
+bring-your-own-agent-loop software for teams willing to calibrate reviewers.
+It is not a drop-in unattended merge gate.
 
 The short version:
 
@@ -55,6 +55,11 @@ Code Mower is local-first. The OSS tool works without the hosted service.
 Default cloud bundles exclude source code, raw diffs, raw model transcripts,
 raw stdout/stderr, auth output, and secrets.
 
+Documentation on `main` follows the source on `main`. If you install the
+published `code-mower==1.2.0` package, use the documentation from the matching
+[`v1.2.0` tag](https://github.com/codemower-ai/code-mower/tree/v1.2.0) so the
+commands and package stay aligned as development continues.
+
 ## Design Principles
 
 Code Mower should feel like an engineering tool, not a demo harness:
@@ -188,10 +193,12 @@ When a team wants the same operator picture on CodeMower.com, run
 zero-report, metadata-only mirror event, then add `--yes` only after review.
 The v1.0 supervised-pilot automation and event boundary is defined in
 [Supervised Pilot Contract](docs/supervised-pilot-contract.md).
-As that controller lands, `code-mower controller run --repo OWNER/REPO` is the
-dry-run-first policy check: it selects the current dispatch/merge/owner-action
-decision from metadata, can write a sanitized event with `--event-file`, and
-does not mutate GitHub state.
+`code-mower controller run --repo OWNER/REPO` is the dry-run-first policy
+check: it selects the current dispatch/merge/owner-action decision from
+metadata, can write a sanitized event with `--event-file`, and does not mutate
+GitHub state. Its modes change policy evaluation and evidence requirements;
+the generated workflows and provider transports own any separately authorized
+mutation.
 
 ## See The Value Shape First
 
@@ -245,7 +252,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.1.1/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.2.0/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -310,14 +317,26 @@ reports `running` / `waiting_for_user`, so a finished informational Devin
 attempt is no longer recorded as owner-blocked. An explicit terminal API
 failure and a `waiting_for_approval` session still take precedence over any
 structured output.
+The v1.0.15 patch makes productivity current-state metrics prefer live GitHub
+state over historical Board snapshots and distinguishes historical evidence in
+reports.
 The v1.1 release adds optional Jira Cloud work tracking while keeping GitHub
 pull requests, checks, and merge gates authoritative. Jira setup starts
 read-only; mutation requires both explicit configuration and an explicit
 apply command. Controller queue visibility, Board, and PR-to-Jira milestones
 share the same bounded metadata contract, and GitHub-only repositories keep
 their existing behavior and generated workflows.
-Package-only users can start from the public package rather than a source
-checkout.
+The v1.1.1 patch hardens hosted release qualification with authenticated GitHub
+fallback, durable campaign issue binding, persistent trusted result authors,
+and bounded remote install failure reasons. The v1.1.2 patch keeps large Jira
+queues inside the response budget and adds a narrow issue-type discovery
+fallback when Jira's create-metadata inventory returns 404.
+
+The v1.2 release gives every orchestrator host the same Jira authority brief,
+adds a local single-orchestrator session lease with Board visibility, records
+controller orchestrator telemetry, qualifies Cursor against the Codex/Claude
+orchestrator contract, and makes hosted release qualification reproduce the
+validated local result command exactly.
 
 ## What Calibration Does And Does Not Prove
 
@@ -348,7 +367,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.1.1` / `code-mower==1.1.1`. The
+the package-index procedure for `v1.2.0` / `code-mower==1.2.0`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -542,8 +561,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.1.1`, with pinned package
-install spec `code-mower==1.1.1`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.2.0`, with pinned package
+install spec `code-mower==1.2.0`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -584,11 +603,14 @@ first so local work exercises the same package entrypoint users install.
 
 ## Docs Map
 
+### Start And Operate
+
 - [Install And Bootstrap](docs/install.md)
 - [Upgrade An Existing Repository](docs/upgrade-existing-repo.md)
 - [Try Code Mower In 10 Minutes](docs/try-in-10-minutes.md)
 - [Build Loop In 30 Minutes](docs/build-loop-in-30-minutes.md)
 - [Quickstart Reference](docs/quickstart.md)
+- [Participants And Sessions](docs/sessions.md)
 - [Orchestrator Prompt Pack](docs/orchestrator-prompt-pack.md)
 - [Planning And Work Orders](docs/planning-work-orders.md)
 - [Builder Providers: Grok And Cursor](docs/builders-grok-cursor.md)
@@ -604,11 +626,31 @@ first so local work exercises the same package entrypoint users install.
 - [GitHub Setup](docs/github-setup.md)
 - [Jira Cloud Setup](docs/jira-cloud-setup.md)
 - [Jira Adoption Rehearsal](docs/jira-adoption-rehearsal.md)
+- [Work Tracker Data Contract](docs/tracker-data-contract.md)
+- [Release Qualification](docs/release-qualification.md)
+- [Launch Command Surface](docs/launch-command-surface.md)
+- [Troubleshooting](docs/troubleshooting.md)
+
+### Trust, Architecture, And Evidence
+
+- [Architecture](docs/architecture.md)
+- [Lane Promotion Policy](docs/lane-promotion-policy.md)
+- [Cloud Sharing](docs/cloud-sharing.md)
+- [Cloud Data Contract](docs/cloud-data-contract.md)
+- [Board Data Contract](docs/board-data-contract.md)
+- [Privacy And Threat Model](docs/privacy-threat-model.md)
+- [Current State And Roadmap](docs/current-state-and-roadmap.md)
+- [Public Release Checklist](docs/public-release-checklist.md)
+- [PyPI Release Runbook](docs/pypi-release.md)
+- [Sample Doctor Output](docs/sample-doctor-output.md)
 - [First Run Transcript](docs/first-run-transcript.md)
 - [First-User Demo Transcript](docs/first-user-demo-transcript.md)
 - [First-User Install Rehearsal](docs/first-user-install-rehearsal.md)
-- [Release Qualification](docs/release-qualification.md)
-- [Launch Command Surface](docs/launch-command-surface.md)
+- [Demo Calibration Example](examples/demo-calibration/README.md)
+- [Board Demo Rehearsal](examples/board-demo/README.md)
+
+### History And Release Records
+
 - [v0.6 Truth Baseline](docs/v06-truth-baseline.md)
 - [v0.6 Release Notes](docs/v06-release-notes.md)
 - [v0.8 Release Notes](docs/v08-release-notes.md)
@@ -629,22 +671,15 @@ first so local work exercises the same package entrypoint users install.
 - [v1.0.13 Release Notes](docs/v1013-release-notes.md)
 - [v1.0.14 Release Notes](docs/v1014-release-notes.md)
 - [v1.0.15 Release Notes](docs/v1015-release-notes.md)
-- [v1.1.1 Release Notes](docs/v111-release-notes.md)
 - [v1.1 Release Notes](docs/v11-release-notes.md)
+- [v1.1.1 Release Notes](docs/v111-release-notes.md)
+- [v1.1.2 Release Notes](docs/v112-release-notes.md)
+- [v1.2 Release Notes](docs/v12-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
-- [Demo Calibration Example](examples/demo-calibration/README.md)
-- [Board Demo Rehearsal](examples/board-demo/README.md)
-- [PyPI Release Runbook](docs/pypi-release.md)
-- [Sample Doctor Output](docs/sample-doctor-output.md)
-- [Architecture](docs/architecture.md)
-- [Lane Promotion Policy](docs/lane-promotion-policy.md)
-- [Cloud Sharing](docs/cloud-sharing.md)
-- [Cloud Data Contract](docs/cloud-data-contract.md)
-- [Board Data Contract](docs/board-data-contract.md)
-- [Privacy And Threat Model](docs/privacy-threat-model.md)
-- [Current State And Roadmap](docs/current-state-and-roadmap.md)
-- [Public Release Checklist](docs/public-release-checklist.md)
+
+### Project
+
 - [Changelog](CHANGELOG.md)
 - [Contributing](CONTRIBUTING.md)
 - [Support](SUPPORT.md)

{code_mower-1.1.1 → code_mower-1.2.0}/README.md

@@ -4,9 +4,9 @@ Code Mower helps teams set up AI peer-programmer and reviewer lanes on real
 GitHub pull requests, then measure which builders and reviewers are useful on
 their actual codebase.
 
-Code Mower 1.0 is supervised-pilot, bring-your-own-agent-loop software for
-teams willing to calibrate reviewers. It is not a drop-in unattended merge
-gate.
+The current Code Mower release line is supervised-pilot,
+bring-your-own-agent-loop software for teams willing to calibrate reviewers.
+It is not a drop-in unattended merge gate.
 
 The short version:
 
@@ -25,6 +25,11 @@ Code Mower is local-first. The OSS tool works without the hosted service.
 Default cloud bundles exclude source code, raw diffs, raw model transcripts,
 raw stdout/stderr, auth output, and secrets.
 
+Documentation on `main` follows the source on `main`. If you install the
+published `code-mower==1.2.0` package, use the documentation from the matching
+[`v1.2.0` tag](https://github.com/codemower-ai/code-mower/tree/v1.2.0) so the
+commands and package stay aligned as development continues.
+
 ## Design Principles
 
 Code Mower should feel like an engineering tool, not a demo harness:
@@ -158,10 +163,12 @@ When a team wants the same operator picture on CodeMower.com, run
 zero-report, metadata-only mirror event, then add `--yes` only after review.
 The v1.0 supervised-pilot automation and event boundary is defined in
 [Supervised Pilot Contract](docs/supervised-pilot-contract.md).
-As that controller lands, `code-mower controller run --repo OWNER/REPO` is the
-dry-run-first policy check: it selects the current dispatch/merge/owner-action
-decision from metadata, can write a sanitized event with `--event-file`, and
-does not mutate GitHub state.
+`code-mower controller run --repo OWNER/REPO` is the dry-run-first policy
+check: it selects the current dispatch/merge/owner-action decision from
+metadata, can write a sanitized event with `--event-file`, and does not mutate
+GitHub state. Its modes change policy evaluation and evidence requirements;
+the generated workflows and provider transports own any separately authorized
+mutation.
 
 ## See The Value Shape First
 
@@ -215,7 +222,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.1.1/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.2.0/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -280,14 +287,26 @@ reports `running` / `waiting_for_user`, so a finished informational Devin
 attempt is no longer recorded as owner-blocked. An explicit terminal API
 failure and a `waiting_for_approval` session still take precedence over any
 structured output.
+The v1.0.15 patch makes productivity current-state metrics prefer live GitHub
+state over historical Board snapshots and distinguishes historical evidence in
+reports.
 The v1.1 release adds optional Jira Cloud work tracking while keeping GitHub
 pull requests, checks, and merge gates authoritative. Jira setup starts
 read-only; mutation requires both explicit configuration and an explicit
 apply command. Controller queue visibility, Board, and PR-to-Jira milestones
 share the same bounded metadata contract, and GitHub-only repositories keep
 their existing behavior and generated workflows.
-Package-only users can start from the public package rather than a source
-checkout.
+The v1.1.1 patch hardens hosted release qualification with authenticated GitHub
+fallback, durable campaign issue binding, persistent trusted result authors,
+and bounded remote install failure reasons. The v1.1.2 patch keeps large Jira
+queues inside the response budget and adds a narrow issue-type discovery
+fallback when Jira's create-metadata inventory returns 404.
+
+The v1.2 release gives every orchestrator host the same Jira authority brief,
+adds a local single-orchestrator session lease with Board visibility, records
+controller orchestrator telemetry, qualifies Cursor against the Codex/Claude
+orchestrator contract, and makes hosted release qualification reproduce the
+validated local result command exactly.
 
 ## What Calibration Does And Does Not Prove
 
@@ -318,7 +337,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.1.1` / `code-mower==1.1.1`. The
+the package-index procedure for `v1.2.0` / `code-mower==1.2.0`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -512,8 +531,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.1.1`, with pinned package
-install spec `code-mower==1.1.1`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.2.0`, with pinned package
+install spec `code-mower==1.2.0`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -554,11 +573,14 @@ first so local work exercises the same package entrypoint users install.
 
 ## Docs Map
 
+### Start And Operate
+
 - [Install And Bootstrap](docs/install.md)
 - [Upgrade An Existing Repository](docs/upgrade-existing-repo.md)
 - [Try Code Mower In 10 Minutes](docs/try-in-10-minutes.md)
 - [Build Loop In 30 Minutes](docs/build-loop-in-30-minutes.md)
 - [Quickstart Reference](docs/quickstart.md)
+- [Participants And Sessions](docs/sessions.md)
 - [Orchestrator Prompt Pack](docs/orchestrator-prompt-pack.md)
 - [Planning And Work Orders](docs/planning-work-orders.md)
 - [Builder Providers: Grok And Cursor](docs/builders-grok-cursor.md)
@@ -574,11 +596,31 @@ first so local work exercises the same package entrypoint users install.
 - [GitHub Setup](docs/github-setup.md)
 - [Jira Cloud Setup](docs/jira-cloud-setup.md)
 - [Jira Adoption Rehearsal](docs/jira-adoption-rehearsal.md)
+- [Work Tracker Data Contract](docs/tracker-data-contract.md)
+- [Release Qualification](docs/release-qualification.md)
+- [Launch Command Surface](docs/launch-command-surface.md)
+- [Troubleshooting](docs/troubleshooting.md)
+
+### Trust, Architecture, And Evidence
+
+- [Architecture](docs/architecture.md)
+- [Lane Promotion Policy](docs/lane-promotion-policy.md)
+- [Cloud Sharing](docs/cloud-sharing.md)
+- [Cloud Data Contract](docs/cloud-data-contract.md)
+- [Board Data Contract](docs/board-data-contract.md)
+- [Privacy And Threat Model](docs/privacy-threat-model.md)
+- [Current State And Roadmap](docs/current-state-and-roadmap.md)
+- [Public Release Checklist](docs/public-release-checklist.md)
+- [PyPI Release Runbook](docs/pypi-release.md)
+- [Sample Doctor Output](docs/sample-doctor-output.md)
 - [First Run Transcript](docs/first-run-transcript.md)
 - [First-User Demo Transcript](docs/first-user-demo-transcript.md)
 - [First-User Install Rehearsal](docs/first-user-install-rehearsal.md)
-- [Release Qualification](docs/release-qualification.md)
-- [Launch Command Surface](docs/launch-command-surface.md)
+- [Demo Calibration Example](examples/demo-calibration/README.md)
+- [Board Demo Rehearsal](examples/board-demo/README.md)
+
+### History And Release Records
+
 - [v0.6 Truth Baseline](docs/v06-truth-baseline.md)
 - [v0.6 Release Notes](docs/v06-release-notes.md)
 - [v0.8 Release Notes](docs/v08-release-notes.md)
@@ -599,22 +641,15 @@ first so local work exercises the same package entrypoint users install.
 - [v1.0.13 Release Notes](docs/v1013-release-notes.md)
 - [v1.0.14 Release Notes](docs/v1014-release-notes.md)
 - [v1.0.15 Release Notes](docs/v1015-release-notes.md)
-- [v1.1.1 Release Notes](docs/v111-release-notes.md)
 - [v1.1 Release Notes](docs/v11-release-notes.md)
+- [v1.1.1 Release Notes](docs/v111-release-notes.md)
+- [v1.1.2 Release Notes](docs/v112-release-notes.md)
+- [v1.2 Release Notes](docs/v12-release-notes.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
-- [Demo Calibration Example](examples/demo-calibration/README.md)
-- [Board Demo Rehearsal](examples/board-demo/README.md)
-- [PyPI Release Runbook](docs/pypi-release.md)
-- [Sample Doctor Output](docs/sample-doctor-output.md)
-- [Architecture](docs/architecture.md)
-- [Lane Promotion Policy](docs/lane-promotion-policy.md)
-- [Cloud Sharing](docs/cloud-sharing.md)
-- [Cloud Data Contract](docs/cloud-data-contract.md)
-- [Board Data Contract](docs/board-data-contract.md)
-- [Privacy And Threat Model](docs/privacy-threat-model.md)
-- [Current State And Roadmap](docs/current-state-and-roadmap.md)
-- [Public Release Checklist](docs/public-release-checklist.md)
+
+### Project
+
 - [Changelog](CHANGELOG.md)
 - [Contributing](CONTRIBUTING.md)
 - [Support](SUPPORT.md)

{code_mower-1.1.1 → code_mower-1.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "1.1.1"
+version = "1.2.0"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.12"
 readme = "README.md"

{code_mower-1.1.1 → code_mower-1.2.0}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "1.1.1"
+__version__ = "1.2.0"

{code_mower-1.1.1 → code_mower-1.2.0}/src/code_mower/board.py

@@ -34,6 +34,7 @@ from . import controller
 from . import lane_status
 from . import productivity_report
 from . import reviewer_spend
+from . import session_lease
 
 
 DEFAULT_HOST = "127.0.0.1"
@@ -235,6 +236,7 @@ def status_payload(
             "interval_seconds": config.record_interval_seconds,
         },
     }
+    payload["orchestrator_lease"] = session_lease.observe_lease(start=config.repo_path)
     payload["agent_adapters"] = agent_adapters_payload(config)
     payload["release_campaigns"] = release_campaigns_payload(config)
     payload["owner_queue"] = owner_queue_payload(payload)
@@ -275,6 +277,7 @@ def _recording_metadata(config: BoardConfig, status: str, **extra: Any) -> dict[
 def _recordable_payload(payload: dict[str, Any]) -> dict[str, Any]:
     snapshot = dict(payload)
     snapshot.pop("productivity", None)
+    snapshot.pop("orchestrator_lease", None)
     return snapshot
 
 
@@ -544,6 +547,7 @@ def _pending_status_payload(config: BoardConfig) -> dict[str, Any]:
         "local_paths": "shown" if config.show_local_paths else "redacted",
         "recording": {"enabled": config.record_events, "interval_seconds": config.record_interval_seconds},
     }
+    payload["orchestrator_lease"] = session_lease.observe_lease(start=config.repo_path)
     payload["agent_adapters"] = agent_adapters_payload(config)
     payload["owner_queue"] = owner_queue_payload(payload)
     payload["supervised_pilot"] = _supervised_disabled(
@@ -1302,6 +1306,7 @@ def render_board_html(config: BoardConfig) -> str:
     <section><h2>Supervised Pilot</h2><div class="rows" id="supervised"></div></section>
     <section><h2>Productivity</h2><div class="rows" id="productivity"></div></section>
     <section><h2>Owner Queue</h2><div class="rows" id="owner"></div></section>
+    <section><h2>Local Orchestrator Lease</h2><div class="rows" id="lease"></div></section>
     <section><h2>Agent Cards</h2><div class="rows" id="agents"></div></section>
     <section><h2>Release Campaigns</h2><div class="rows" id="campaigns"></div></section>
     <section><h2>Open PRs</h2><div class="rows" id="prs"></div></section>
@@ -1368,7 +1373,13 @@ def render_board_html(config: BoardConfig) -> str:
     function checks(list) {{
       return (list || []).map(c => `<span class="${{stateClass(c.state)}}">${{esc(c.name)}}=${{esc(c.state)}}</span>`).join(", ") || '<span class="muted">none</span>';
     }}
+    function renderLease(lease) {{
+      const messages = {{absent: "No orchestrator lease in this working copy.", expired: "Lease expired.", malformed: "Local lease is malformed.", unavailable: "Local lease is unavailable."}};
+      const state = lease?.state || "unavailable";
+      return `<div class="row"><div class="line">${{pill(state)}}<b>Provider: ${{esc(lease?.provider || "none")}}</b></div><div>Expires: ${{lease?.expires_at ? localTime(lease.expires_at) : "n/a"}}</div><div class="muted">${{esc(messages[state] || "Local orchestration lease is active.")}}</div></div>`;
+    }}
     function render(data) {{
+      put("lease", renderLease(data.orchestrator_lease));
       document.getElementById("repo").textContent = REPO;
       const version = data.board?.version || {{}};
       const servingVersion = version.serving_version || "unknown";

{code_mower-1.1.1 → code_mower-1.2.0}/src/code_mower/cloud_client/events.py

@@ -4,12 +4,14 @@ from __future__ import annotations
 
 import datetime as dt
 import json
+import re
 import subprocess
 import uuid
 from pathlib import Path
 from typing import Any, Mapping
 
 from code_mower import __version__
+from code_mower.participants import PARTICIPANTS
 from code_mower.provider_registry import REFERENCE_PROVIDERS
 from code_mower.providers import (
     build_code_mower_tool_provenance,
@@ -46,6 +48,13 @@ from .work_types import validate_work_type_metadata
 
 
 EVENT_SCHEMA = "code_mower.benchmarkEvent.v1"
+CONTROLLER_EVENT_TYPES = frozenset({
+    "controller_decision", "merge_decision", "queue_state_snapshot", "owner_intervention",
+})
+ORCHESTRATOR_PROVIDERS = frozenset(
+    name for name, participant in PARTICIPANTS.items() if participant.orchestrator
+)
+CUSTOM_ORCHESTRATOR_RE = re.compile(r"custom:[a-z][a-z0-9-]{0,63}")
 AUTHORING_RUN_SCHEMA = "code_mower.authoringRun.v1"
 CLOUD_EVENT_STRING_FIELDS = (
     "schema",
@@ -358,6 +367,21 @@ def build_provider_catalog_snapshot_events(
     return events
 
 
+def validate_orchestrator_provider(value: Any) -> str:
+    """Validate categorical host identity without echoing untrusted input."""
+    if not isinstance(value, str) or (
+        value not in ORCHESTRATOR_PROVIDERS
+        and CUSTOM_ORCHESTRATOR_RE.fullmatch(value) is None
+    ):
+        raise CloudBundleError(
+            "orchestrator_provider must be a known orchestrator provider "
+            f"({', '.join(sorted(ORCHESTRATOR_PROVIDERS))}) or custom:<slug>; "
+            "slug must be 1-64 lowercase letters, digits, or hyphens, starting with a letter"
+        )
+    validate_metadata_payload({"orchestrator_provider": value})
+    return value
+
+
 def validate_cloud_event(value: Any) -> dict[str, Any]:
     """Validate Code Mower's metadata-only cloud event boundary.
 
@@ -380,6 +404,11 @@ def validate_cloud_event(value: Any) -> dict[str, Any]:
     for key in ("metrics", "dimensions", "tool"):
         if not isinstance(value.get(key), dict):
             raise CloudBundleError(f"structured event field {key} must be an object")
+    if (
+        value["event_type"] in CONTROLLER_EVENT_TYPES
+        and "orchestrator_provider" in value["dimensions"]
+    ):
+        validate_orchestrator_provider(value["dimensions"]["orchestrator_provider"])
     if value["event_type"] == PRODUCTIVITY_EVENT_TYPE:
         validate_productivity_summary_payload(value)
     if value["event_type"] == PR_OUTCOME_EVENT_TYPE:

{code_mower-1.1.1 → code_mower-1.2.0}/src/code_mower/controller.py

@@ -17,7 +17,9 @@ from . import __version__
 from . import config as code_mower_config
 from . import lane_status, tracker_queue
 from .cloud_client.errors import CloudBundleError
-from .cloud_client.events import EVENT_SCHEMA, normalize_event, utc_now, validate_cloud_event
+from .cloud_client.events import (
+    EVENT_SCHEMA, normalize_event, utc_now, validate_cloud_event, validate_orchestrator_provider,
+)
 from .providers import build_code_mower_tool_provenance
 
 
@@ -52,6 +54,11 @@ class ControllerOptions:
     auto_merge_enabled: bool = False
     merge_token_ready: bool = False
     issue_limit: int = 50
+    orchestrator_provider: str | None = None
+
+    def __post_init__(self) -> None:
+        if self.orchestrator_provider is not None:
+            validate_orchestrator_provider(self.orchestrator_provider)
 
 
 def _text(value: Any) -> str:
@@ -618,6 +625,8 @@ def evaluate_controller_report(
             "ready_issue_errors": list(issue_payload.get("errors") or []),
         },
     }
+    if options.orchestrator_provider is not None:
+        report["orchestrator_provider"] = options.orchestrator_provider
     if tracker_queue.jira_enabled(config) and "tracker" in issue_payload:
         report["tracker"] = issue_payload["tracker"]
     return report
@@ -682,6 +691,10 @@ def build_controller_event(
         "merge_method": _text(decision.get("merge_method")),
         "would_mutate": bool(decision.get("would_mutate")),
     }
+    if "orchestrator_provider" in report:
+        dimensions["orchestrator_provider"] = validate_orchestrator_provider(
+            report["orchestrator_provider"]
+        )
     dimensions = {
         key: value
         for key, value in dimensions.items()
@@ -788,10 +801,14 @@ def render_text(report: Mapping[str, Any]) -> str:
         f"Code Mower controller for {report.get('repo')}",
         f"Generated: {report.get('generated_at')}",
         f"Mode: {report.get('mode')}",
+    ]
+    if "orchestrator_provider" in report:
+        lines.append(f"Orchestrator: {report['orchestrator_provider']}")
+    lines.extend([
         "",
         f"Decision: {decision.get('decision_state')}",
         f"Next: {decision.get('next_action')}",
-    ]
+    ])
     if decision.get("next_detail"):
         lines.append(f"Detail: {decision.get('next_detail')}")
     if decision.get("pr_number"):
@@ -852,6 +869,10 @@ def main(
     run.add_argument("--auto-merge-enabled", action="store_true")
     run.add_argument("--merge-token-ready", action="store_true")
     run.add_argument("--issue-limit", type=int, default=50)
+    run.add_argument(
+        "--orchestrator", metavar="PROVIDER",
+        help="orchestrator provider (e.g. codex, claude, or custom:<slug>); overrides CODE_MOWER_HOST",
+    )
     run.add_argument("--event-file", type=Path, default=None)
     run.add_argument("--team-id", default="")
     run.add_argument("--install-id", default="")
@@ -864,6 +885,7 @@ def main(
     args = parser.parse_args(list(argv or ()))
     if args.command != "run":  # pragma: no cover - argparse validates commands.
         raise AssertionError(f"unhandled controller command: {args.command}")
+    environ = os.environ if env is None else env
     try:
         options = ControllerOptions(
             repo=args.repo,
@@ -872,6 +894,10 @@ def main(
             auto_merge_enabled=args.auto_merge_enabled,
             merge_token_ready=args.merge_token_ready,
             issue_limit=args.issue_limit,
+            orchestrator_provider=(
+                args.orchestrator if args.orchestrator is not None
+                else environ.get("CODE_MOWER_HOST")
+            ),
         )
         config = code_mower_config.load_config(args.config)
         jira_reader = tracker_queue.resolve_jira_queue_reader(
@@ -885,7 +911,7 @@ def main(
             config_dir=(
                 Path(args.provider_config_dir) if args.provider_config_dir else None
             ),
-            env=os.environ if env is None else env,
+            env=environ,
             timeout_seconds=args.http_timeout,
             client_factory=jira_client_factory,
         )