@fro.bot/systematic 3.16.1 → 3.16.3

package/dist/cli.js

@@ -33,7 +33,7 @@ import {
   findCommandsInDir,
   findSkillsInDir,
   discoverSkills
-} from "./index-ae6mhwth.js";
+} from "./index-65g87tgr.js";
 var __defProp = Object.defineProperty;
 var __returnValue = (v) => v;
 function __exportSetter(name, newValue) {
@@ -2085,6 +2085,23 @@ function isLegacyReviewArtifact(value) {
 function hasParentDirectoryTraversal(input) {
   return input.split(/[\\/]+/).some((segment) => segment === "..");
 }
+var ALLOW_OUTSIDE_ARTIFACT_ROOT_FLAG = "--allow-outside-artifact-root";
+var VALIDATE_REVIEW_ARTIFACT_USAGE = "Usage: systematic validate-review-artifact <path> [--allow-outside-artifact-root]";
+function parseValidateReviewArtifactArguments(argv) {
+  const allowOutsideArtifactRoot = argv.includes(ALLOW_OUTSIDE_ARTIFACT_ROOT_FLAG);
+  const positional = argv.filter((arg) => arg !== ALLOW_OUTSIDE_ARTIFACT_ROOT_FLAG);
+  if (positional.length !== 1)
+    return;
+  const path = positional[0];
+  if (path === undefined)
+    return;
+  return { allowOutsideArtifactRoot, path };
+}
+var REVIEW_ARTIFACT_VALID_MESSAGE = "Review artifact is valid";
+var REVIEW_ARTIFACT_VALID_EXTERNAL_MESSAGE = "Review artifact is valid (validated outside the run directory; not evidence for this run)";
+function formatReviewArtifactSuccessMessage(allowOutsideArtifactRoot) {
+  return allowOutsideArtifactRoot ? REVIEW_ARTIFACT_VALID_EXTERNAL_MESSAGE : REVIEW_ARTIFACT_VALID_MESSAGE;
+}
 function pathContainsSymlink(candidate) {
   let current = path3.parse(candidate).root;
   const relative = path3.relative(current, candidate);
@@ -2105,30 +2122,33 @@ function isWithinDirectory(candidate, directory) {
   const relative = path3.relative(directory, candidate);
   return relative !== "" && relative !== ".." && !relative.startsWith(`..${path3.sep}`) && !path3.isAbsolute(relative);
 }
-function resolveReviewArtifactPath(input, cwd) {
+function resolveReviewArtifactPath(input, cwd, options = {}) {
+  const allowOutsideArtifactRoot = options.allowOutsideArtifactRoot ?? false;
   if (hasParentDirectoryTraversal(input)) {
     return {
       message: "Review artifact path must not contain parent-directory traversal",
       ok: false
     };
   }
-  const artifactRoot = path3.resolve(cwd, ".context", "systematic", "ce-review");
   let canonicalRoot;
-  try {
-    canonicalRoot = fs4.realpathSync(artifactRoot);
-    if (!fs4.statSync(canonicalRoot).isDirectory()) {
-      return {
-        message: "Review artifact directory is not a directory",
-        ok: false
-      };
+  if (!allowOutsideArtifactRoot) {
+    const artifactRoot = path3.resolve(cwd, ".context", "systematic", "ce-review");
+    try {
+      canonicalRoot = fs4.realpathSync(artifactRoot);
+      if (!fs4.statSync(canonicalRoot).isDirectory()) {
+        return {
+          message: "Review artifact directory is not a directory",
+          ok: false
+        };
+      }
+    } catch {
+      return { message: "Review artifact directory is unavailable", ok: false };
     }
-  } catch {
-    return { message: "Review artifact directory is unavailable", ok: false };
   }
   const candidate = path3.resolve(cwd, input);
   if (pathContainsSymlink(candidate)) {
     return {
-      message: "Review artifact path must not contain symlinks",
+      message: "Review artifact path must not contain symlinks; pass a fully resolved path",
       ok: false
     };
   }
@@ -2138,7 +2158,7 @@ function resolveReviewArtifactPath(input, cwd) {
   } catch {
     return { message: "Review artifact file was not found", ok: false };
   }
-  if (!isWithinDirectory(canonicalTarget, canonicalRoot)) {
+  if (canonicalRoot !== undefined && !isWithinDirectory(canonicalTarget, canonicalRoot)) {
     return {
       message: "Review artifact path must remain inside .context/systematic/ce-review",
       ok: false
@@ -2721,9 +2741,12 @@ Usage:
 Commands:
   list [type]                  List available skills, agents, or commands
   capabilities                 Read-only standalone-CLI observation; not a host-runtime or canonical-registry view
-  validate-review-artifact <path>
+  validate-review-artifact <path> [--allow-outside-artifact-root]
                                Validate a ce:review run artifact
                                The <path> argument is required by design; no artifact discovery is performed.
+                               --allow-outside-artifact-root skips the requirement that <path> resolve
+                               inside .context/systematic/ce-review, for validating artifacts copied from
+                               CI, issues, or fixtures. Not for the ce:review parent's own run artifact.
                                Exit statuses: 0 valid artifact, 1 validation failure,
                                2 operational failure, 3 legacy artifact with no schema_version
   config [subcommand]          Configuration management
@@ -2744,6 +2767,7 @@ Examples:
   systematic list skills
   systematic capabilities
   systematic validate-review-artifact .context/systematic/ce-review/review-summary.json
+  systematic validate-review-artifact --allow-outside-artifact-root /path/to/external-artifact.json
   systematic list agents
   systematic config show
   systematic config show --json
@@ -2774,7 +2798,6 @@ Scope:
   project   <cwd>/.pi/agents (default)
   global    $PI_CODING_AGENT_DIR/agents or ~/.pi/agent/agents
 `;
-var VALIDATE_REVIEW_ARTIFACT_USAGE = "Usage: systematic validate-review-artifact <path>";
 var REVIEW_ARTIFACT_SCHEMA_RELATIVE_PATH = "skills/ce-review/references/review-summary-schema.json";
 function defaultCapabilityRoots() {
   const configDir = process.env.XDG_CONFIG_HOME ? path5.join(process.env.XDG_CONFIG_HOME, "opencode") : path5.join(os2.homedir(), ".config/opencode");
@@ -2935,19 +2958,17 @@ function validateReviewArtifactArgument(argv) {
   const commandIndex = argv[0] === "systematic" ? 1 : 0;
   if (argv[commandIndex] !== "validate-review-artifact")
     return;
-  if (argv.length !== commandIndex + 2)
-    return;
-  return argv[commandIndex + 1];
+  return parseValidateReviewArtifactArguments(argv.slice(commandIndex + 1));
 }
 function runValidateReviewArtifact(options) {
   const outputSink = options.outputSink ?? ((message) => console.log(message));
   const errorSink = options.errorSink ?? ((message) => console.error(message));
-  const input = validateReviewArtifactArgument(options.argv);
-  if (input === undefined) {
+  const parsedArgs = validateReviewArtifactArgument(options.argv);
+  if (parsedArgs === undefined) {
     errorSink(VALIDATE_REVIEW_ARTIFACT_USAGE);
     return 2;
   }
-  const resolved = resolveReviewArtifactPath(input, options.cwd ?? process.cwd());
+  const resolved = resolveReviewArtifactPath(parsedArgs.path, options.cwd ?? process.cwd(), { allowOutsideArtifactRoot: parsedArgs.allowOutsideArtifactRoot });
   if (!resolved.ok) {
     errorSink(resolved.message);
     return 2;
@@ -2972,7 +2993,7 @@ function runValidateReviewArtifact(options) {
     errorSink(`Review artifact validation failed: ${result.error.issues.length} issue(s)`);
     return 1;
   }
-  outputSink("Review artifact is valid");
+  outputSink(formatReviewArtifactSuccessMessage(parsedArgs.allowOutsideArtifactRoot));
   return 0;
 }
 function runValidateReviewArtifactCli(options) {

package/dist/{index-ae6mhwth.js → index-65g87tgr.js}

@@ -7539,11 +7539,11 @@ var permissionSchema = record(string(), permissionRuleSchema).meta({
   description: "Permission overrides per tool",
   examples: [{ edit: "allow", bash: { curl: "allow", rm: "deny" } }]
 });
-var MODEL_FORMAT_MESSAGE = 'must be in provider/model format (e.g., "anthropic/claude-sonnet-4")';
+var MODEL_FORMAT_MESSAGE = 'must be in provider/model format (e.g., "anthropic/claude-sonnet-5")';
 var MODEL_FORMAT_REGEX = /^[^\s/]+\/\S+$/;
 var modelSchema = string().min(1).regex(MODEL_FORMAT_REGEX, MODEL_FORMAT_MESSAGE).nullable().meta({
   description: "Model identifier in provider/model format, or null to inherit parent model",
-  examples: ["anthropic/claude-sonnet-4", null]
+  examples: ["anthropic/claude-sonnet-5", null]
 });
 var variantSchema = string().min(1).max(128, "variant must be at most 128 characters").regex(/^\S+$/, "must be a non-empty string without whitespace").meta({
   description: "Model variant identifier",
@@ -7618,7 +7618,7 @@ var OpencodeHarnessBlockSchema = object({
 }).strict().meta({
   description: "OpenCode-specific routing block. When present, model/variant here override the flat model/variant fields for OpenCode only; the flat fields remain the harness-neutral default and still apply to Pi. `variant` is bound to whichever layer supplies `model`: it is used only from that layer or a more specific one, and is dropped when a more specific layer sets (or nulls) `model` without repeating the variant. A `variant` with no `model` anywhere in the merged overlay is a config-load error raised by the routing resolver, not a parse-time error.",
   examples: [
-    { model: "anthropic/claude-opus-4-7", variant: "v2" },
+    { model: "anthropic/claude-opus-5", variant: "high" },
     { model: null }
   ]
 });
@@ -7628,7 +7628,7 @@ var PiHarnessBlockSchema = object({
 }).strict().meta({
   description: "Pi-specific routing block. When present, model/thinking here override the flat model field and the legacy `pi_subagents.<name>.thinking` value for Pi only; the flat model field remains the harness-neutral default and still applies to OpenCode. Unlike OpenCode's `variant`, `thinking` is independent of `model`: it applies to whatever model the delegate ends up running, including one inherited from the parent session, so `thinking` with no `model` anywhere in the merged overlay is valid and never a config-load error.",
   examples: [
-    { model: "anthropic/claude-opus-4-7", thinking: "high" },
+    { model: "anthropic/claude-opus-5", thinking: "high" },
     { model: null }
   ]
 });
@@ -7650,13 +7650,13 @@ var AgentOverlaySchema = object({
   description: "Per-agent configuration overlay",
   examples: [
     {
-      model: "anthropic/claude-opus-4-7",
+      model: "anthropic/claude-opus-5",
       temperature: 0.1,
       mode: "subagent"
     },
     {
-      opencode: { model: "anthropic/claude-opus-4-7", variant: "v2" },
-      pi: { model: "anthropic/claude-opus-4-7", thinking: "high" }
+      opencode: { model: "anthropic/claude-opus-5", variant: "high" },
+      pi: { model: "anthropic/claude-opus-5", thinking: "high" }
     }
   ]
 });
@@ -7676,8 +7676,8 @@ var CategoryOverlaySchema = object({
 }).strict().meta({
   description: "Per-category configuration overlay (same fields as agent minus disable)",
   examples: [
-    { model: "anthropic/claude-opus-4-7", temperature: 0.1 },
-    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+    { model: "anthropic/claude-opus-5", temperature: 0.1 },
+    { opencode: { variant: "high" }, pi: { thinking: "high" } }
   ]
 });
 var ProfileOverlaySchema = object({
@@ -7690,8 +7690,8 @@ var ProfileOverlaySchema = object({
 }).strict().meta({
   description: "Routing-only overlay fields permitted inside a named profile bundle entry: model, variant, temperature, top_p, and the opencode/pi harness blocks. Non-routing fields (permission, skills, mode, hidden, disable, steps, color) are rejected.",
   examples: [
-    { model: "anthropic/claude-opus-4-7" },
-    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+    { model: "anthropic/claude-opus-5" },
+    { opencode: { variant: "high" }, pi: { thinking: "high" } }
   ]
 });
 function createProfileBundleSchema(agentNames, qualifiedAgentIds) {
@@ -7701,17 +7701,19 @@ function createProfileBundleSchema(agentNames, qualifiedAgentIds) {
       ProfileOverlaySchema.optional()
     ]))).strict().optional().meta({
       description: "Per-agent routing overlays for this profile, keyed by bundled agent name (bare or qualified category/name), using the same routing-only field set as every profile entry. Unknown keys are rejected with a Zod parse error, exactly like the top-level `agents` field.",
-      examples: [{ "correctness-reviewer": { model: "openai/gpt-5" } }]
+      examples: [
+        { "correctness-reviewer": { model: "openai/gpt-6-astra" } }
+      ]
     }),
     categories: record(string(), ProfileOverlaySchema).optional().meta({
       description: "Per-category routing overlays for this profile, keyed by category name, using the same routing-only field set as every profile entry.",
-      examples: [{ review: { model: "anthropic/claude-opus-4-7" } }]
+      examples: [{ review: { model: "anthropic/claude-opus-5" } }]
     })
   }).strict().meta({
     description: "A named routing-only overlay bundle. Entries under agents/categories have the same shape as the top-level agents/categories overlays, restricted to routing fields.",
     examples: [
       {
-        agents: { fixer: { model: "anthropic/claude-opus-4-7" } },
+        agents: { fixer: { model: "anthropic/claude-opus-5" } },
         categories: { review: { pi: { thinking: "high" } } }
       }
     ]
@@ -7810,14 +7812,16 @@ function createSystematicConfigSchema(opts) {
     }),
     categories: record(string(), CategoryOverlaySchema).default({}).meta({
       description: "Per-category configuration overlays keyed by category name",
-      examples: [{ review: { model: "anthropic/claude-opus-4-7" } }, {}]
+      examples: [{ review: { model: "anthropic/claude-opus-5" } }, {}]
     }),
     profiles: record(string(), createProfileBundleSchema(agentNames, qualifiedAgentIds)).default({}).meta({
       description: "Named routing-only overlay bundles, selectable by name via the profile field. Only valid in user config or OPENCODE_CONFIG_DIR config \u2014 a project config may select a profile but may not define this field.",
       examples: [
         {
           personal: {
-            agents: { "correctness-reviewer": { model: "openai/gpt-5" } }
+            agents: {
+              "correctness-reviewer": { model: "openai/gpt-6-astra" }
+            }
           }
         },
         {}

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   extractCommandFrontmatter,
   findSkillsInDir,
   discoverSkills
-} from "./index-ae6mhwth.js";
+} from "./index-65g87tgr.js";
 
 // src/index.ts
 import { createHash as createHash4 } from "crypto";

package/dist/lib/review-artifact-path.d.ts

@@ -16,5 +16,16 @@ export declare function formatReviewArtifactIssuePath(issuePath: readonly Proper
 export declare function readReviewArtifact(filePath: string): ReadArtifactResult;
 export declare function isLegacyReviewArtifact(value: unknown): boolean;
 export declare function hasParentDirectoryTraversal(input: string): boolean;
+export declare const ALLOW_OUTSIDE_ARTIFACT_ROOT_FLAG = "--allow-outside-artifact-root";
+export declare const VALIDATE_REVIEW_ARTIFACT_USAGE = "Usage: systematic validate-review-artifact <path> [--allow-outside-artifact-root]";
+export interface ValidateReviewArtifactArguments {
+    readonly path: string;
+    readonly allowOutsideArtifactRoot: boolean;
+}
+export declare function parseValidateReviewArtifactArguments(argv: readonly string[]): ValidateReviewArtifactArguments | undefined;
+export declare function formatReviewArtifactSuccessMessage(allowOutsideArtifactRoot: boolean): string;
 export declare function pathContainsSymlink(candidate: string): boolean;
-export declare function resolveReviewArtifactPath(input: string, cwd: string): ArtifactPathResult;
+export interface ResolveReviewArtifactPathOptions {
+    readonly allowOutsideArtifactRoot?: boolean;
+}
+export declare function resolveReviewArtifactPath(input: string, cwd: string, options?: ResolveReviewArtifactPathOptions): ArtifactPathResult;

package/dist/pi.js

@@ -9217,11 +9217,11 @@ var permissionSchema = record(string2(), permissionRuleSchema).meta({
   description: "Permission overrides per tool",
   examples: [{ edit: "allow", bash: { curl: "allow", rm: "deny" } }]
 });
-var MODEL_FORMAT_MESSAGE = 'must be in provider/model format (e.g., "anthropic/claude-sonnet-4")';
+var MODEL_FORMAT_MESSAGE = 'must be in provider/model format (e.g., "anthropic/claude-sonnet-5")';
 var MODEL_FORMAT_REGEX = /^[^\s/]+\/\S+$/;
 var modelSchema = string2().min(1).regex(MODEL_FORMAT_REGEX, MODEL_FORMAT_MESSAGE).nullable().meta({
   description: "Model identifier in provider/model format, or null to inherit parent model",
-  examples: ["anthropic/claude-sonnet-4", null]
+  examples: ["anthropic/claude-sonnet-5", null]
 });
 var variantSchema = string2().min(1).max(128, "variant must be at most 128 characters").regex(/^\S+$/, "must be a non-empty string without whitespace").meta({
   description: "Model variant identifier",
@@ -9296,7 +9296,7 @@ var OpencodeHarnessBlockSchema = object({
 }).strict().meta({
   description: "OpenCode-specific routing block. When present, model/variant here override the flat model/variant fields for OpenCode only; the flat fields remain the harness-neutral default and still apply to Pi. `variant` is bound to whichever layer supplies `model`: it is used only from that layer or a more specific one, and is dropped when a more specific layer sets (or nulls) `model` without repeating the variant. A `variant` with no `model` anywhere in the merged overlay is a config-load error raised by the routing resolver, not a parse-time error.",
   examples: [
-    { model: "anthropic/claude-opus-4-7", variant: "v2" },
+    { model: "anthropic/claude-opus-5", variant: "high" },
     { model: null }
   ]
 });
@@ -9306,7 +9306,7 @@ var PiHarnessBlockSchema = object({
 }).strict().meta({
   description: "Pi-specific routing block. When present, model/thinking here override the flat model field and the legacy `pi_subagents.<name>.thinking` value for Pi only; the flat model field remains the harness-neutral default and still applies to OpenCode. Unlike OpenCode's `variant`, `thinking` is independent of `model`: it applies to whatever model the delegate ends up running, including one inherited from the parent session, so `thinking` with no `model` anywhere in the merged overlay is valid and never a config-load error.",
   examples: [
-    { model: "anthropic/claude-opus-4-7", thinking: "high" },
+    { model: "anthropic/claude-opus-5", thinking: "high" },
     { model: null }
   ]
 });
@@ -9328,13 +9328,13 @@ var AgentOverlaySchema = object({
   description: "Per-agent configuration overlay",
   examples: [
     {
-      model: "anthropic/claude-opus-4-7",
+      model: "anthropic/claude-opus-5",
       temperature: 0.1,
       mode: "subagent"
     },
     {
-      opencode: { model: "anthropic/claude-opus-4-7", variant: "v2" },
-      pi: { model: "anthropic/claude-opus-4-7", thinking: "high" }
+      opencode: { model: "anthropic/claude-opus-5", variant: "high" },
+      pi: { model: "anthropic/claude-opus-5", thinking: "high" }
     }
   ]
 });
@@ -9354,8 +9354,8 @@ var CategoryOverlaySchema = object({
 }).strict().meta({
   description: "Per-category configuration overlay (same fields as agent minus disable)",
   examples: [
-    { model: "anthropic/claude-opus-4-7", temperature: 0.1 },
-    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+    { model: "anthropic/claude-opus-5", temperature: 0.1 },
+    { opencode: { variant: "high" }, pi: { thinking: "high" } }
   ]
 });
 var ProfileOverlaySchema = object({
@@ -9368,8 +9368,8 @@ var ProfileOverlaySchema = object({
 }).strict().meta({
   description: "Routing-only overlay fields permitted inside a named profile bundle entry: model, variant, temperature, top_p, and the opencode/pi harness blocks. Non-routing fields (permission, skills, mode, hidden, disable, steps, color) are rejected.",
   examples: [
-    { model: "anthropic/claude-opus-4-7" },
-    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+    { model: "anthropic/claude-opus-5" },
+    { opencode: { variant: "high" }, pi: { thinking: "high" } }
   ]
 });
 function createProfileBundleSchema(agentNames, qualifiedAgentIds) {
@@ -9379,17 +9379,19 @@ function createProfileBundleSchema(agentNames, qualifiedAgentIds) {
       ProfileOverlaySchema.optional()
     ]))).strict().optional().meta({
       description: "Per-agent routing overlays for this profile, keyed by bundled agent name (bare or qualified category/name), using the same routing-only field set as every profile entry. Unknown keys are rejected with a Zod parse error, exactly like the top-level `agents` field.",
-      examples: [{ "correctness-reviewer": { model: "openai/gpt-5" } }]
+      examples: [
+        { "correctness-reviewer": { model: "openai/gpt-6-astra" } }
+      ]
     }),
     categories: record(string2(), ProfileOverlaySchema).optional().meta({
       description: "Per-category routing overlays for this profile, keyed by category name, using the same routing-only field set as every profile entry.",
-      examples: [{ review: { model: "anthropic/claude-opus-4-7" } }]
+      examples: [{ review: { model: "anthropic/claude-opus-5" } }]
     })
   }).strict().meta({
     description: "A named routing-only overlay bundle. Entries under agents/categories have the same shape as the top-level agents/categories overlays, restricted to routing fields.",
     examples: [
       {
-        agents: { fixer: { model: "anthropic/claude-opus-4-7" } },
+        agents: { fixer: { model: "anthropic/claude-opus-5" } },
         categories: { review: { pi: { thinking: "high" } } }
       }
     ]
@@ -9488,14 +9490,16 @@ function createSystematicConfigSchema(opts) {
     }),
     categories: record(string2(), CategoryOverlaySchema).default({}).meta({
       description: "Per-category configuration overlays keyed by category name",
-      examples: [{ review: { model: "anthropic/claude-opus-4-7" } }, {}]
+      examples: [{ review: { model: "anthropic/claude-opus-5" } }, {}]
     }),
     profiles: record(string2(), createProfileBundleSchema(agentNames, qualifiedAgentIds)).default({}).meta({
       description: "Named routing-only overlay bundles, selectable by name via the profile field. Only valid in user config or OPENCODE_CONFIG_DIR config — a project config may select a profile but may not define this field.",
       examples: [
         {
           personal: {
-            agents: { "correctness-reviewer": { model: "openai/gpt-5" } }
+            agents: {
+              "correctness-reviewer": { model: "openai/gpt-6-astra" }
+            }
           }
         },
         {}

package/dist/schemas/systematic-config.schema.json

@@ -659,17 +659,17 @@
       "description": "Per-agent configuration overlay",
       "examples": [
         {
-          "model": "anthropic/claude-opus-4-7",
+          "model": "anthropic/claude-opus-5",
           "temperature": 0.1,
           "mode": "subagent"
         },
         {
           "opencode": {
-            "model": "anthropic/claude-opus-4-7",
-            "variant": "v2"
+            "model": "anthropic/claude-opus-5",
+            "variant": "high"
           },
           "pi": {
-            "model": "anthropic/claude-opus-4-7",
+            "model": "anthropic/claude-opus-5",
             "thinking": "high"
           }
         }
@@ -698,7 +698,7 @@
         }
       ],
       "description": "Model identifier in provider/model format, or null to inherit parent model",
-      "examples": ["anthropic/claude-sonnet-4", null]
+      "examples": ["anthropic/claude-sonnet-5", null]
     },
     "__schema8": {
       "trust": "project-or-higher",
@@ -932,8 +932,8 @@
       "description": "OpenCode-specific routing block. When present, model/variant here override the flat model/variant fields for OpenCode only; the flat fields remain the harness-neutral default and still apply to Pi. `variant` is bound to whichever layer supplies `model`: it is used only from that layer or a more specific one, and is dropped when a more specific layer sets (or nulls) `model` without repeating the variant. A `variant` with no `model` anywhere in the merged overlay is a config-load error raised by the routing resolver, not a parse-time error.",
       "examples": [
         {
-          "model": "anthropic/claude-opus-4-7",
-          "variant": "v2"
+          "model": "anthropic/claude-opus-5",
+          "variant": "high"
         },
         {
           "model": null
@@ -984,7 +984,7 @@
       "description": "Pi-specific routing block. When present, model/thinking here override the flat model field and the legacy `pi_subagents.<name>.thinking` value for Pi only; the flat model field remains the harness-neutral default and still applies to OpenCode. Unlike OpenCode's `variant`, `thinking` is independent of `model`: it applies to whatever model the delegate ends up running, including one inherited from the parent session, so `thinking` with no `model` anywhere in the merged overlay is valid and never a config-load error.",
       "examples": [
         {
-          "model": "anthropic/claude-opus-4-7",
+          "model": "anthropic/claude-opus-5",
           "thinking": "high"
         },
         {
@@ -998,7 +998,7 @@
       "examples": [
         {
           "review": {
-            "model": "anthropic/claude-opus-4-7"
+            "model": "anthropic/claude-opus-5"
           }
         },
         {}
@@ -1058,12 +1058,12 @@
         "description": "Per-category configuration overlay (same fields as agent minus disable)",
         "examples": [
           {
-            "model": "anthropic/claude-opus-4-7",
+            "model": "anthropic/claude-opus-5",
             "temperature": 0.1
           },
           {
             "opencode": {
-              "variant": "v2"
+              "variant": "high"
             },
             "pi": {
               "thinking": "high"
@@ -1172,7 +1172,7 @@
           "personal": {
             "agents": {
               "correctness-reviewer": {
-                "model": "openai/gpt-5"
+                "model": "openai/gpt-6-astra"
               }
             }
           }
@@ -1206,7 +1206,7 @@
           {
             "agents": {
               "fixer": {
-                "model": "anthropic/claude-opus-4-7"
+                "model": "anthropic/claude-opus-5"
               }
             },
             "categories": {
@@ -1225,7 +1225,7 @@
       "examples": [
         {
           "correctness-reviewer": {
-            "model": "openai/gpt-5"
+            "model": "openai/gpt-6-astra"
           }
         }
       ],
@@ -1785,11 +1785,11 @@
       "description": "Routing-only overlay fields permitted inside a named profile bundle entry: model, variant, temperature, top_p, and the opencode/pi harness blocks. Non-routing fields (permission, skills, mode, hidden, disable, steps, color) are rejected.",
       "examples": [
         {
-          "model": "anthropic/claude-opus-4-7"
+          "model": "anthropic/claude-opus-5"
         },
         {
           "opencode": {
-            "variant": "v2"
+            "variant": "high"
           },
           "pi": {
             "thinking": "high"
@@ -1850,7 +1850,7 @@
       "examples": [
         {
           "review": {
-            "model": "anthropic/claude-opus-4-7"
+            "model": "anthropic/claude-opus-5"
           }
         }
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fro.bot/systematic",
-  "version": "3.16.1",
+  "version": "3.16.3",
   "description": "Compound-engineering loops for OpenCode, Pi, and Claude Code",
   "type": "module",
   "homepage": "https://fro.bot/systematic",

package/skills/agent-native-architecture/references/agent-execution-patterns.md

@@ -234,9 +234,9 @@ enum ModelTier {
 
     var modelId: String {
         switch self {
-        case .fast: return "claude-3-haiku-20240307"
-        case .balanced: return "claude-sonnet-4-20250514"
-        case .powerful: return "claude-opus-4-20250514"
+        case .fast: return "claude-haiku-4-5"
+        case .balanced: return "claude-sonnet-5"
+        case .powerful: return "claude-opus-5"
         }
     }
 }

package/skills/ce-review/references/synthesis-artifact-contract.md

@@ -247,6 +247,18 @@ validation, and it does not delete the artifact to escape the check. A failing
 artifact is evidence and stays on disk; an absent artifact is never evidence
 of a clean run.
 
+Both commands also accept `--allow-outside-artifact-root`, which skips the
+containment check so a copy fetched from CI, an issue attachment, or a fixture
+can be validated from outside `.context/systematic/ce-review`. It also drops
+the requirement that `.context/systematic/ce-review` exist at all. That is not
+a workaround for the "directory is unavailable" degradation described above:
+that degradation is deliberate visible failure for the parent's own run
+artifact, and the flag does not change how the parent's own validation run is
+judged. This is an external-validation mode for artifacts the parent did not
+just produce. The parent must never pass this flag when validating its own
+run's `review-summary.json`; doing so would silently accept a mismatched or
+misplaced artifact as this run's evidence.
+
 This is enforcement by visible failure, not by containment. An agent that
 never runs the command can still finalize an artifact, but produces no evidence
 in either direction. That is why the command exists as an independently