@dzhechkov/keysarium 1.7.14 → 1.7.18

package/src/cli.js

@@ -10,7 +10,7 @@ function showBanner() {
   console.log('');
   console.log(cyan('╔══════════════════════════════════════════════════════╗'));
   console.log(cyan('║') + bold('        \uD83D\uDD2C DZ-KEYSARIUM — AI Research Toolkit        ') + cyan('║'));
-  console.log(cyan('║') + '     Full 7-phase pipeline for Claude Code           ' + cyan('║'));
+  console.log(cyan('║') + '        Full 7-phase research pipeline               ' + cyan('║'));
   console.log(cyan('╚══════════════════════════════════════════════════════╝'));
   console.log('');
 }
@@ -40,6 +40,8 @@ function showHelp() {
   console.log('  ' + yellow('--minimal') + '    Install only .claude/ directory (skills, commands, rules)');
   console.log('  ' + yellow('--force') + '      Overwrite existing files without prompting');
   console.log('  ' + yellow('--with-docs') + '  Include docs/ directory');
+  console.log('  ' + yellow('--target') + '     Install for claude (default) or codex');
+  console.log('  ' + yellow('--project') + '    Project directory (default: current directory)');
   console.log('  ' + yellow('--dry-run') + '    Show what would be done without making changes');
   console.log('  ' + yellow('--help, -h') + '   Show this help message');
   console.log('  ' + yellow('--version, -v') + ' Show version number');
@@ -47,6 +49,7 @@ function showHelp() {
   console.log(bold('Examples:'));
   console.log(dim('  $ ') + 'npx @dzhechkov/keysarium init');
   console.log(dim('  $ ') + 'npx @dzhechkov/keysarium init --minimal --force');
+  console.log(dim('  $ ') + 'npx @dzhechkov/keysarium init --target codex --project ./my-case');
   console.log(dim('  $ ') + 'npx @dzhechkov/keysarium update --dry-run');
   console.log(dim('  $ ') + 'npx @dzhechkov/keysarium doctor');
   console.log('');
@@ -64,11 +67,14 @@ function parseArgs(argv) {
     withDocs: false,
     dryRun: false,
     targetDir: process.cwd(),
+    target: 'claude',
+    targetSpecified: false,
   };
 
   let command = null;
 
-  for (const arg of args) {
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
     switch (arg) {
       case '--minimal':
         flags.minimal = true;
@@ -82,6 +88,25 @@ function parseArgs(argv) {
       case '--dry-run':
         flags.dryRun = true;
         break;
+      case '--target': {
+        const value = args[++index];
+        if (value !== 'claude' && value !== 'codex') {
+          error('--target must be claude or codex');
+          process.exit(1);
+        }
+        flags.target = value;
+        flags.targetSpecified = true;
+        break;
+      }
+      case '--project': {
+        const value = args[++index];
+        if (!value || value.startsWith('-')) {
+          error('--project requires a directory path');
+          process.exit(1);
+        }
+        flags.targetDir = path.resolve(value);
+        break;
+      }
       case '--help':
       case '-h':
         command = 'help';
@@ -132,6 +157,11 @@ function main() {
 
   // Route to command handlers
   const resolvedCommand = command || 'init';
+  if (flags.targetSpecified && resolvedCommand !== 'init') {
+    error('--target is supported only by init; update and doctor use the installation manifest');
+    process.exitCode = 1;
+    return;
+  }
 
   switch (resolvedCommand) {
     case 'init':

package/src/commands/doctor.js

@@ -293,6 +293,28 @@ function checkSettingsValid(targetDir) {
   });
 }
 
+function checkCodexEntrypoint(targetDir) {
+  return check('Codex entrypoint', () => {
+    const entry = path.join(targetDir, '.agents', 'skills', 'casarium', 'SKILL.md');
+    const command = path.join(targetDir, '.claude', 'commands', 'casarium.md');
+    const shards = path.join(targetDir, '.claude', 'shards');
+    const missing = [entry, command, shards].filter((item) => !fileExists(item));
+    if (missing.length > 0) {
+      return { passed: false, detail: `Missing ${missing.map((item) => path.relative(targetDir, item)).join(', ')}`,
+        fix: 'Run keysarium update to restore the installed Codex entrypoint.' };
+    }
+    const body = fs.readFileSync(entry, 'utf8');
+    const frontmatter = body.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
+    if (!frontmatter || !/^name:\s*casarium\s*$/m.test(frontmatter[1])
+      || !/^description:\s*\S.+$/m.test(frontmatter[1])
+      || !body.includes('.claude/commands/casarium.md')) {
+      return { passed: false, detail: 'SKILL.md lacks Codex discovery metadata or the canonical command reference',
+        fix: 'Run keysarium update to restore the Codex entrypoint.' };
+    }
+    return { passed: true, detail: 'Project skill and canonical pipeline references present' };
+  });
+}
+
 /**
  * Check 8: researches/ directory exists.
  */
@@ -372,7 +394,9 @@ async function run(options) {
     checkRulesPresent(targetDir),
     checkShardsPresent(targetDir),
     checkAgentsPresent(targetDir),
-    checkSettingsValid(targetDir),
+    manifest.components?.includes('codex_entry')
+      ? checkCodexEntrypoint(targetDir)
+      : checkSettingsValid(targetDir),
     checkResearchDir(targetDir),
   ];
 

package/src/commands/init.js

@@ -22,8 +22,10 @@ const {
  *   --with-docs: add docs group
  */
 function resolveComponents(options) {
-  const { minimal, withDocs } = options;
-  const coreKeys = ['skills', 'commands', 'rules', 'shards', 'agents', 'hooks', 'claude_md', 'harvest'];
+  const { minimal, withDocs, target } = options;
+  const coreKeys = ['skills', 'commands', 'rules', 'shards', 'agents', 'claude_md', 'harvest'];
+  if (target === 'codex') coreKeys.push('codex_entry');
+  else coreKeys.push('hooks');
   const keys = [...coreKeys];
 
   if (!minimal) {
@@ -81,9 +83,10 @@ function installComponent(comp, templatesDir, targetDir, force) {
  * @param {boolean} options.withDocs  — Include docs/ directory
  * @param {boolean} options.dryRun    — Preview without writing anything
  * @param {string}  options.targetDir — Destination project root
+ * @param {string}  options.target    — claude (default) or codex
  */
 async function run(options) {
-  const { force, dryRun, targetDir } = options;
+  const { force, dryRun, targetDir, target = 'claude' } = options;
   const manifestPath = path.join(targetDir, MANIFEST_FILE);
 
   // ── a) Check for existing installation ──────────────────────────────────
@@ -93,9 +96,25 @@ async function run(options) {
       info(`Run ${cyan('npx @dzhechkov/keysarium update')} to update, or use ${yellow('--force')} to overwrite.`);
       process.exit(1);
     }
+    const existing = readJSON(manifestPath);
+    if (!existing || !Array.isArray(existing.components)) {
+      logError('Existing .keysarium.json is invalid; refusing to overwrite its ownership record.');
+      process.exit(1);
+    }
+    const existingTarget = existing.components.includes('codex_entry') ? 'codex' : 'claude';
+    if (existingTarget !== target) {
+      logError(`Cannot switch an installed ${existingTarget} toolkit to ${target} with --force. Remove it first, then init for the new target.`);
+      process.exit(1);
+    }
     warn('Existing installation found — overwriting (--force).');
   }
 
+  const codexEntryPath = path.join(targetDir, '.agents', 'skills', 'casarium', 'SKILL.md');
+  if (target === 'codex' && fileExists(codexEntryPath) && !force) {
+    logError('A project skill named casarium already exists. Use --force only if it may be replaced.');
+    process.exit(1);
+  }
+
   // ── b) Determine components ─────────────────────────────────────────────
   const componentKeys = resolveComponents(options);
   const templatesDir = getTemplatesDir();
@@ -103,6 +122,7 @@ async function run(options) {
   // ── c) Show plan ────────────────────────────────────────────────────────
   console.log('');
   info(bold('Installation plan:'));
+  info(`Target: ${target}; project: ${targetDir}`);
   console.log('');
 
   for (const key of componentKeys) {
@@ -161,16 +181,30 @@ async function run(options) {
 
   console.log('');
   console.log(bold('Next steps:'));
-  console.log(`  1. Open ${cyan('Claude Code')} in this directory`);
-  console.log(`  2. Run ${cyan('/casarium [your case description]')}`);
-  console.log(`  3. Follow the 7-phase pipeline`);
-  console.log('');
-  console.log(bold('Available commands:'));
-  console.log(`  ${cyan('/casarium')}          ${dim('\u2014 Full pipeline')}`);
-  console.log(`  ${cyan('/new-research')}      ${dim('\u2014 New research')}`);
-  console.log(`  ${cyan('/parallel-research')} ${dim('\u2014 Multiple cases in parallel')}`);
-  console.log(`  ${cyan('/harvest')}           ${dim('\u2014 Extract knowledge')}`);
+  if (target === 'codex') {
+    console.log(`  1. Open ${cyan('Codex')} in ${targetDir}`);
+    console.log(`  2. Invoke ${cyan('$casarium [your case description]')}`);
+    console.log(`  3. Confirm each phase checkpoint and select a CJM variant`);
+    console.log('');
+    console.log(bold('Codex integration status:'));
+    console.log('  Bundled workflow skills: installed under .claude/skills/ as phase references');
+    console.log('  Full pipeline entrypoint: installed at .agents/skills/casarium/SKILL.md');
+    console.log('  Codex hooks and MCP integrations: not installed');
+    console.log('  Claude settings/hooks: not installed for this target');
+  } else {
+    console.log(`  1. Open ${cyan('Claude Code')} in this directory`);
+    console.log(`  2. Run ${cyan('/casarium [your case description]')}`);
+    console.log(`  3. Follow the 7-phase pipeline`);
+  }
   console.log('');
+  if (target === 'claude') {
+    console.log(bold('Available commands:'));
+    console.log(`  ${cyan('/casarium')}          ${dim('\u2014 Full pipeline')}`);
+    console.log(`  ${cyan('/new-research')}      ${dim('\u2014 New research')}`);
+    console.log(`  ${cyan('/parallel-research')} ${dim('\u2014 Multiple cases in parallel')}`);
+    console.log(`  ${cyan('/harvest')}           ${dim('\u2014 Extract knowledge')}`);
+    console.log('');
+  }
 
   process.exit(0);
 }

package/src/utils.js

@@ -311,6 +311,7 @@ const COMPONENT_SPECS = {
   docs:      { src: 'docs',                  name: 'Documentation',    unit: 'guides',         countMode: 'files', group: 'docs' },
   claude_md: { src: 'CLAUDE.md',             name: 'Master instructions', group: 'core', isFile: true },
   harvest:   { src: 'TOOLKIT_HARVEST.md',    name: 'Knowledge harvest tracker', group: 'core', isFile: true },
+  codex_entry: { src: '.agents/skills/casarium', name: 'Codex pipeline entrypoint', unit: 'entrypoint', countMode: 'files', group: 'codex' },
 };
 
 /**

package/templates/.agents/skills/casarium/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: casarium
+description: Run the installed Keysarium seven-phase case research pipeline in Codex, with phase artifacts and user checkpoints. Use when the user invokes $casarium or asks to work through a Keysarium case.
+---
+
+# Casarium in Codex
+
+This project contains the complete Keysarium workflow. Start by reading
+`.claude/commands/casarium.md`; it is the source of truth for phase order, outputs and
+checkpoints. Treat its `$ARGUMENTS` as the user's request after `$casarium`. If the case is
+missing, ask for it.
+
+For each phase, read only its `.claude/shards/phase-*.shard.md` and the skill files it names
+under `.claude/skills/`. Read `.claude/rules/checkpoint-protocol.md` and
+`.claude/rules/research-quality.md` when reaching their gates. Create phase artifacts under
+`researches/<case-name>/` as the phase runs. Show the checkpoint and wait for the user's
+confirmation before advancing. Phase 2.5 requires an explicit CJM choice; preserve that
+choice in later phases. A failed research gate cannot emit a success promise.
+
+The `.claude/` files are workflow references in Codex. Claude slash commands, Agent tool
+calls, hook settings and model names inside them are not Codex commands or installed Codex
+integrations. Use available Codex tools for the work and state any unavailable capability;
+do not claim that a named Claude agent or hook ran. Parallel work is optional when the host
+supports it. The research mode requirements still apply to every worker.
+
+If the case asks for AI Factory mapping, read
+`.claude/shards/phase-ai-factory.shard.md` and its referenced skill before Phase 0. Otherwise
+leave that branch inactive. The project-local `$casarium` skill is the Codex entrypoint;
+`/casarium` remains the Claude Code entrypoint.

package/templates/.claude/agents/code-goal-planner.md

@@ -0,0 +1,9 @@
+---
+name: code-goal-planner
+description: Plans software changes with the bundled SPARC-GOAP protocol and testable milestones.
+color: blue
+---
+
+Read `.claude/skills/feature-adr/references/agentic-qe/code-goal-planner.md` before planning. It is the canonical protocol for this project agent.
+
+Use the feature requirements, ADR decisions, quality risks and current repository evidence to propose an ordered implementation plan. Give each milestone a deliverable and a check that could disprove completion. Identify unresolved inputs instead of inventing metrics or claiming that code has already been verified. Return the plan to Step 6 of feature-ADR; the lead checks it before recording the plan artifact.

package/templates/.claude/commands/analyst-manual.md

@@ -20,9 +20,11 @@ $ARGUMENTS
    - Output: `01_task_brief.md`
    - ⏸️ **CHECKPOINT 1:** Подтверждение Task Brief + выбор verification mode
 
-4. **Phase 2: Verified Research** (goap-research-ed25519)
+4. **Phase 2: Research** (goap-research-ed25519)
    - Используй `scripts/goap_planner.py` и `scripts/ed25519_verifier.py`
-   - Режим: выбранный на CHECKPOINT 1 (moderate/strict/paranoid)
+   - По умолчанию `moderate`; `strict`/`paranoid` выбираются только при подтверждённых `issuer_keys_available` и `source_class_verified`
+   - Если planner вернул `PlanNotFound`, покажи verdict и причину и остановись до Solve
+   - Статус подписи издателя бери из `verify_fact`, а целостность цепочки — отдельно из `verify_citation_chain`
    - Output: `02_research_findings.md`
    - ⏸️ **CHECKPOINT 2:** Подтверждение findings
 

package/templates/.claude/commands/casarium.md

@@ -195,7 +195,9 @@ researches/CASE_NAME/
 - Файлы создаются в момент фазы, не в Phase 6
 - ⭐ Phase 2.5 (CJM Prototype) — НИКОГДА НЕ ПРОПУСКАТЬ
 - ⭐ 08_executive_summary.md — ОБЯЗАТЕЛЕН
-- Research в paranoid mode — ноль непроверенных утверждений
+- Research: `moderate` для обычных источников; `strict`/`paranoid` только после проверки
+  `issuer_keys_available` и `source_class_verified` по `.claude/rules/research-quality.md`.
+  Недостижимая цель исследования останавливает checkpoint и следующие фазы.
 - {CHOSEN_CJM} передаётся в Phase 3-5
 - Если банк: on-premise, ФЗ-152, ЦБ, GigaChat/YandexGPT
 - Если мало времени: Quick Mode

package/templates/.claude/commands/cjm-prototype.md

@@ -23,7 +23,7 @@ $ARGUMENTS
 4. **Step 2:** Определить 3 варианта CJM (A/B/C)
 5. **Step 2.5:** VARIANT D — Future-Ready CJM (Trend-Based)
    - Загрузи `.claude/skills/goap-research-ed25519/SKILL.md` для trend research
-   - Исследуй 5 категорий трендов (PARANOID mode)
+   - Исследуй 5 категорий трендов в режиме, разрешённом `.claude/rules/research-quality.md`
    - Создай Trend Brief
    - Синтезируй Variant D
 6. **Step 3:** Сгенерируй React-прототип (.jsx) с 4 вариантами
@@ -38,5 +38,5 @@ $ARGUMENTS
 Запусти 3 агента параллельно:
 - Agent 1: CJM Variant A — один подход к точке входа
 - Agent 2: CJM Variant B + C — альтернативные подходы
-- Agent 3: Trend Research для Variant D (GOAP PARANOID)
+- Agent 3: Trend Research для Variant D (GOAP `moderate` для обычных источников)
 Затем синтезируй в единый прототип с 4 вариантами.

package/templates/.claude/commands/research.md

@@ -12,7 +12,10 @@ $ARGUMENTS
 
 1. **Загрузи скилл:** Прочитай `.claude/skills/goap-research-ed25519/SKILL.md`
 2. **Прочитай Phase 0-1** для контекста
-3. **Режим: PARANOID** — ноль непроверенных утверждений
+3. **Выбери режим по `.claude/rules/research-quality.md`:** `moderate` для обычных
+   источников; `strict`/`paranoid` только при подтверждённых ключах издателей и
+   подписанной выдаче. Если GOAP вернул `GOAL_UNREACHABLE`, покажи причину и не
+   отмечай фазу завершённой.
 
 4. **Исследуй по направлениям:**
    - Аналоги — кто решал похожую задачу

package/templates/.claude/rules/checkpoint-protocol.md

@@ -29,7 +29,7 @@ Promises are machine-readable markers that formalize phase gates.
 |-------|------------|---------|
 | Phase 0 | `<promise>DISCOVERY_COMPLETE</promise>` | JTBD + competitors + ROI analyzed |
 | Phase 1 | `<promise>CASE_EXPLORED</promise>` | Case fully understood, brief created |
-| Phase 2 | `<promise>RESEARCH_PARANOID_PASSED</promise>` | All claims verified, zero unverified |
+| Phase 2 | `<promise>RESEARCH_PARANOID_PASSED</promise>` | Legacy tag: evidence gate passed in the selected GOAP mode; no issuer-signature claim unless independently confirmed |
 | Phase 2.5 | `<promise>CJM_VALIDATED</promise>` | CJM prototype created and variant chosen |
 | Phase 3 | `<promise>SOLUTION_DESIGNED</promise>` | Solution strategy formulated |
 | Phase 4 | `<promise>ARCHITECTURE_DEFINED</promise>` | C4 diagrams + sequence flows ready |
@@ -57,6 +57,7 @@ Files created: [list] ✅
 ### Promise Validation Rules
 
 - A promise tag MUST only be emitted AFTER its conditions are verifiably met
+- GOAP `GOAL_UNREACHABLE` cannot satisfy the Phase 2 promise; report the missing capability and stop
 - If conditions are NOT met, emit `<promise>[TAG]_INCOMPLETE</promise>` instead
 - Downstream phases SHOULD check for upstream promises before starting
 - Promise tags serve as formal phase gates — they replace informal "phase done" signals

package/templates/.claude/rules/research-quality.md

@@ -1,10 +1,15 @@
 # Research Quality Rules
 
-## PARANOID Mode (Default for all research)
-- Every factual claim MUST have a verifiable source
-- Zero tolerance for hallucinated citations
-- Confidence threshold: 0.99 minimum
-- If source cannot be verified → mark as [UNVERIFIED] and flag
+## Research mode selection
+- Use GOAP `moderate` for ordinary web and publication sources. Cite material factual claims,
+  identify uncertainty and do not turn an unverified claim into a decisive conclusion.
+- Select GOAP `strict` or `paranoid` only after confirming both `issuer_keys_available` (real
+  pinned Ed25519 issuer keys) and `source_class_verified` (signed delivery for that source
+  class). A URL or citation alone establishes neither capability.
+- If the requested mode returns `GOAL_UNREACHABLE`, record the missing capabilities and stop
+  the research checkpoint. Do not emit a success promise or advance to the next phase.
+- Zero tolerance for invented citations applies in every mode. Source attribution and issuer
+  signature verification are different claims.
 
 ## Citation Requirements
 - Format: `[Claim] — Source: [URL or publication], [Date]`
@@ -14,7 +19,7 @@
 ## Verification Checklist
 Before completing any research phase:
 - [ ] All claims have sources
-- [ ] No unverified statistics or percentages
+- [ ] No unverified statistics or percentages presented as established facts
 - [ ] Competitor names verified to exist
 - [ ] Technology recommendations are for real, available products
 - [ ] Regulatory references cite actual laws/standards

package/templates/.claude/shards/phase-2-research.shard.md

@@ -13,12 +13,14 @@ Load: `.claude/skills/goap-research-ed25519/SKILL.md`
 ## Mandatory Outputs
 - `02_research_findings.md`
 
-## PARANOID Mode — ACTIVE
-- Every factual claim MUST have a verifiable source
-- Zero tolerance for hallucinated citations
-- Confidence threshold: 0.99 minimum
-- Unverifiable claims: mark as [UNVERIFIED] and flag
-- Citation format: `[Claim] — Source: [URL or publication], [Date]`
+## Research mode and evidence
+- Follow `.claude/rules/research-quality.md`: default GOAP `moderate` for ordinary sources.
+- Use `strict`/`paranoid` only if both issuer-key and signed-delivery capabilities are
+  confirmed for the selected source class. Do not infer signature verification from a URL.
+- Cite material factual claims; label unsupported claims `[UNVERIFIED]` and keep them out of
+  decisive conclusions. Invented citations are never acceptable.
+- Citation format: `[Claim] — Source: [URL or publication], [Date]`.
+- A `GOAL_UNREACHABLE` result blocks the checkpoint and transition to Phase 2.5.
 
 ## Agent Swarm (3 parallel, model: sonnet)
 - Agent 1: Analogues + Benchmarks
@@ -28,13 +30,15 @@ Load: `.claude/skills/goap-research-ed25519/SKILL.md`
 
 ## Quality Gates
 - ALL claims have sources
-- No unverified statistics or percentages
+- No unverified statistics or percentages presented as established facts
 - Competitor names verified to exist
 - Technology recommendations are for real, available products
 - Regulatory references cite actual laws/standards
 
 ## Promise
-On completion: `<promise>RESEARCH_PARANOID_PASSED</promise>`
+On successful evidence review in the selected mode: `<promise>RESEARCH_PARANOID_PASSED</promise>`.
+The tag name is retained for downstream compatibility; it does not assert GOAP paranoid mode or
+cryptographic issuer verification. On failure, emit the incomplete marker and do not advance.
 
 ## Anti-Patterns to Check
 - Bare claims without attribution → BLOCK

package/templates/.claude/shards/phase-25-cjm.shard.md

@@ -21,14 +21,15 @@
 ## Process
 1. Extract: primary_user, segments, aha_moment, solution_concept from Phases 0-2
 2. Define 3 CJM variants (A/B/C) with different approaches
-3. Research 5 trend categories for Variant D (PARANOID mode)
+3. Research 5 trend categories for Variant D in the GOAP mode allowed by
+   `.claude/rules/research-quality.md`; ordinary sources use `moderate`
 4. Generate React .jsx prototype with all 4 variants
 5. User selects winning variant → sets `{CHOSEN_CJM}`
 
 ## Agent Swarm (3 parallel)
 - Agent 1 (opus): CJM Variant A design
 - Agent 2 (opus): CJM Variants B + C design
-- Agent 3 (sonnet): Trend Research for Variant D (PARANOID mode, 5 categories)
+- Agent 3 (sonnet): Trend Research for Variant D (selected GOAP mode, 5 categories)
 
 ## Critical Variable
 `{CHOSEN_CJM}` — MUST be set by user selection. Passed to Phases 3-5.
@@ -36,7 +37,8 @@
 ## Quality Gates
 - Minimum 3 CJM variants (A/B/C) + 1 trend variant (D)
 - Prototype must be valid React JSX
-- Trend research in PARANOID mode (verified sources)
+- Trend research cites sources, labels uncertainty and does not claim issuer verification
+  without confirmed capabilities
 - User MUST explicitly select a variant
 
 ## Promise