Start one Claude->Codex->Claude run and return immediately with its run_id.

delivery_mode decides where the work ends up:

• direct_branch (the default) works on the branch the repository is already on, so finalize commits there -- to main if that is where the user is. This is what "make this change" normally means. It requires a clean tree and an attached HEAD, because the run edits the checkout in place.

• review_branch parks the work on a new agent-duet/<id> branch that somebody then has to merge. Use it only when the user explicitly requested a new or separate branch.

Interactive model callers must pass direct_branch unless the user explicitly asked for a new branch. Never infer or suggest review_branch because the working tree is dirty. The argument is required: omission must never inherit a setting that silently creates a branch.

Side effects: creates a durable run record, a branch and private worktree (in review_branch mode), and a detached worker process that will modify files in that worktree. It NEVER commits, pushes, deploys, changes remotes, or rewrites history; publishing is duet_finalize only. Call this once per task, keep the run_id, and poll with duet_wait.

Return durable status and concise evidence for one run. No side effects.

Wait briefly for one run to change phase, then return its durable status.

Accepts legacy inputs through 300 seconds, but the effective wait is always capped at 90 seconds so Claude Code keeps the call in the foreground. Keep only one call in flight for a run and wait for its response before polling again. No side effects.

Request cancellation and terminate the run's process group.

Side effects: signals the detached worker and its children (SIGTERM, then SIGKILL after a grace period). Files the run already wrote are left in place; nothing is committed, pushed, or deployed. Safe to call more than once.

Publish a validated run: commit, optionally push, optionally verify deployment.

Side effects: creates a real commit and, when push is true, pushes it to the named remote and runs the configured deployment verifier. A local-only commit needs no remote or remote URL. Only ever call this after the user has seen the evidence from duet_status/duet_wait and explicitly approved. Refuses unless the run is exactly AWAITING_FINALIZE and the branch and validated diff fingerprint still match; pushes additionally require an exact remote URL match.