@kylecheng3146/agent-ops 0.5.3 → 0.7.0

package/dist/packages/cli/src/run-setup-entry.js

@@ -0,0 +1,32 @@
+import { FileRunRepository } from "../../../runtime/src/run/service.js";
+import { readRunPolicy, runRuntimeHash } from "../../../runtime/src/run/policy.js";
+import { activeWallTimeMs } from "../../../runtime/src/run/scheduler.js";
+import { runVerificationCommand, NodeVerificationProcessRunner } from "../../../runtime/src/verify/spawn.js";
+import { redactSecrets } from "../../../runtime/src/security/redact.js";
+import { join } from "node:path";
+import { realpath } from "node:fs/promises";
+import { execFileSync } from "node:child_process";
+// This entry is released by run-step-entry only after its process group is registered.
+const [commonDir, runId, root, index, expectedPolicy] = process.argv.slice(2);
+if ([commonDir, runId, root, index, expectedPolicy].some(v => v === undefined))
+    throw new Error("Incomplete run setup identity.");
+const repository = new FileRunRepository(join(commonDir, "agent-ops/runs"), commonDir);
+const state = await repository.read(runId);
+const group = process.env.AGENT_OPS_RUN_PROOF_PID;
+const actualCommon = execFileSync("git", ["rev-parse", "--path-format=absolute", "--git-common-dir"], { cwd: root, encoding: "utf8" }).trim();
+if (state === null || state.status !== "active" || state.disableRestart || state.proofProcess?.processId !== Number(group) ||
+    state.policyBinding?.artifactDigest !== expectedPolicy || await realpath(actualCommon) !== await realpath(state.commonDir))
+    throw new Error("Stale run setup authorization.");
+const policy = await readRunPolicy(state, await runRuntimeHash());
+const step = /^(?:0|[1-9][0-9]*)$/u.test(index) ? policy?.config.worktree?.setup?.[Number(index)] : undefined;
+if (step === undefined)
+    throw new Error("Setup must select an authorized fixed policy command.");
+const remaining = state.budget.limitMs - activeWallTimeMs(state.budget.activeIntervals, Date.now());
+if (remaining <= 0)
+    throw new Error("Run budget is exhausted.");
+const result = await runVerificationCommand({ id: "run-setup", ...step, cwd: ".", required: true,
+    timeoutMs: Math.min(step.timeoutMs ?? 600000, remaining), evidence: { kind: "exit-code" } }, {
+    cwd: root, runner: new NodeVerificationProcessRunner({ processGroupId: Number(group) })
+});
+process.stdout.write(JSON.stringify({ exitCode: result.status === "PASS" ? 0 : result.exitCode ?? 1,
+    output: redactSecrets(result.stdout + result.stderr) }) + "\n");

package/dist/packages/cli/src/run-step-entry.js

@@ -0,0 +1,58 @@
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+/** Dormant process group: the supervisor records this PID before releasing the CLI. */
+const cli = fileURLToPath(new URL("./bin.js", import.meta.url));
+const setup = fileURLToPath(new URL("./run-setup-entry.js", import.meta.url));
+const target = process.argv[2];
+if (target !== cli && target !== setup)
+    throw new Error("Run proof entry must use its own installed execution entry.");
+let input = "";
+let started = false;
+process.stdin.setEncoding("utf8");
+process.stdin.on("data", chunk => {
+    if (started)
+        return;
+    input += chunk;
+    if (input.length > 16 || (input.includes("\n") && input !== "start\n"))
+        process.exit(1);
+    if (input !== "start\n")
+        return;
+    started = true;
+    // Keep this identity alive until the CLI finishes its signal cleanup.
+    process.on("SIGTERM", () => { });
+    process.on("SIGINT", () => { });
+    process.stdin.pause();
+    process.env.AGENT_OPS_RUN_PROOF_PID = String(process.pid);
+    const child = spawn(process.execPath, [target, ...process.argv.slice(3)], { env: process.env, stdio: ["ignore", "inherit", "inherit"] });
+    child.once("error", () => process.exit(1));
+    child.once("close", (code, signal) => {
+        const deadline = Date.now() + 3000;
+        const reconcile = () => {
+            const listing = spawn("ps", ["-axo", "pid=,pgid="], { detached: true, stdio: ["ignore", "pipe", "ignore"] });
+            let output = "";
+            listing.stdout.on("data", chunk => { output += chunk.toString(); });
+            listing.once("error", () => process.kill(-process.pid, "SIGKILL"));
+            listing.once("close", status => {
+                if (status !== 0)
+                    process.kill(-process.pid, "SIGKILL");
+                const remaining = output.split("\n").some(line => {
+                    const [pid, group] = line.trim().split(/\s+/u).map(Number);
+                    return group === process.pid && pid !== process.pid;
+                });
+                if (remaining && Date.now() < deadline) {
+                    setTimeout(reconcile, 50);
+                    return;
+                }
+                if (remaining)
+                    process.kill(-process.pid, "SIGKILL");
+                else if (signal !== null)
+                    process.exit(1);
+                else
+                    process.exit(code ?? 1);
+            });
+        };
+        reconcile();
+    });
+});
+process.stdin.on("end", () => { if (!started)
+    process.exit(1); });

package/dist/packages/cli/src/wizard.js

@@ -3,7 +3,7 @@ import { DEFAULT_REVIEW_TARGETS, REVIEW_TARGET_ORDER } from "../../../runtime/sr
 import { HARNESS_IDS, resolveHarnessSelection } from "../../../runtime/src/install/harness.js";
 import { selectOption, selectOptions } from "./ui.js";
 const SCOPES = new Set(["project", "user"]);
-const PROFILES = new Set(["advisory", "core", "guardrails", "loop"]);
+const PROFILES = new Set(["advisory", "core", "guardrails", "loop", "run"]);
 const DEFAULT_HARNESS = [];
 const REVIEW_TARGET_SET = new Set(REVIEW_TARGET_ORDER);
 const REVIEW_TARGET_CHOICES = DEFAULT_REVIEW_TARGETS.map((id) => ({
@@ -77,6 +77,11 @@ const PROFILE_CHOICES = [
         label: "loop",
         value: "loop",
         description: "Installs the local loop; agy uses its supported lifecycle subset and is reported as degraded."
+    },
+    {
+        label: "run",
+        value: "run",
+        description: "Adds loop; Claude Code and Codex hand changes needing more than five acceptance criteria to agent-ops run."
     }
 ];
 const WIZARD_SUBTITLE = "Safe setup for agy, Codex, Claude Code, and opencode with profile-driven rules, verification, and hooks.";
@@ -207,12 +212,17 @@ export async function completeInitChoices(args, io, setup = {}) {
                 }
             ], selectorIo))
             : undefined);
+        const office = args.office ?? (await selectOption("Enable Office (Preview)?", [
+            { label: "no", value: "off", description: "Default. Keep the pixel office disabled." },
+            { label: "yes", value: "on", description: "Show sessions and teams in a local, read-only pixel office." }
+        ], selectorIo));
         await probeReviewTargets(reviewTargets, setup);
         return {
             ...args,
             scope,
             harness,
             profiles,
+            office,
             ...(completionGate ? { completionGate: true } : {}),
             ...(reviewTargets.length === 0 ? {} : { reviewTargets }),
             ...(worktree !== undefined ? { worktree } : {})
@@ -226,7 +236,7 @@ export async function completeInitChoices(args, io, setup = {}) {
             selectHarness(await session.question(`Harness (${HARNESS_IDS.join(",")}): `));
         const profiles = args.profiles.length > 0
             ? args.profiles
-            : selectProfiles(await session.question("Profiles (core,advisory,guardrails,loop) [core]: "));
+            : selectProfiles(await session.question("Profiles (core,advisory,guardrails,loop,run) [core]: "));
         const completionGate = args.completionGate ?? (completionGateEligible(scope, harness, profiles)
             ? !/^(n|no)$/i.test((await session.question("Enable the recommended agy completion gate? [Y/n]: ")).trim())
             : false);
@@ -238,11 +248,13 @@ export async function completeInitChoices(args, io, setup = {}) {
         const worktree = args.worktree ?? (scope === "project"
             ? (!/^(n|no)$/i.test((await session.question("Enable Git worktree isolation for parallel agent sessions? [Y/n]: ")).trim()) ? "auto" : "off")
             : undefined);
+        const office = args.office ?? (affirmative(await session.question("Enable Office (Preview)? [y/N]: ")) ? "on" : "off");
         return {
             ...args,
             scope,
             harness,
             profiles,
+            office,
             ...(completionGate ? { completionGate: true } : {}),
             ...(reviewTargets.length === 0 ? {} : { reviewTargets }),
             ...(worktree !== undefined ? { worktree } : {})

package/dist/runtime/src/adapters/agy/config.js

@@ -54,13 +54,14 @@ export function buildAgyHookSettings(capabilities, runtimePath, platform = proce
         throw new AgentOpsError("AGY_HOOK_PATH_INVALID", "agy hook runtime path is invalid.");
     }
     const hooks = {};
-    if (capabilities.includes("lifecycle-summary") || capabilities.includes("project-loop")) {
+    if ((capabilities.includes("lifecycle-summary") || capabilities.includes("office-presence")) || capabilities.includes("project-loop")) {
         hooks.PreInvocation = [handler(runtimePath, "SessionStart", platform)];
     }
-    if (capabilities.includes("command-policy") || capabilities.includes("project-loop")) {
+    if ((capabilities.includes("command-policy") || capabilities.includes("office-presence")) || capabilities.includes("project-loop")) {
         hooks.PreToolUse = [{ matcher: "run_command", hooks: [handler(runtimePath, "PreToolUse", platform)] }];
     }
-    if (capabilities.includes("optional-stop-verify") ||
+    if (capabilities.includes("office-presence") ||
+        capabilities.includes("optional-stop-verify") ||
         capabilities.includes("completion-gate")) {
         hooks.Stop = [handler(runtimePath, "Stop", platform, capabilities.includes("completion-gate"))];
     }

package/dist/runtime/src/adapters/agy/events.js

@@ -1,4 +1,13 @@
 export const AGY_CAPABILITY_REGISTRATIONS = [
+    {
+        capability: "office-presence",
+        normalizedEvent: "session-start",
+        nativeEvent: "SessionStart",
+        hostEvent: "PreInvocation",
+        surfaceId: "agy-hooks",
+        support: "degraded",
+        runtimeFailure: "fail-open"
+    },
     {
         capability: "lifecycle-summary",
         normalizedEvent: "session-start",

package/dist/runtime/src/adapters/claude/config.js

@@ -110,10 +110,10 @@ export function buildClaudeHookSettings(capabilities, runtimePath, platform = pr
         }
     }
     else {
-        if (capabilities.includes("lifecycle-summary")) {
+        if (capabilities.includes("lifecycle-summary") || capabilities.includes("office-presence")) {
             hooks.SessionStart = [matcherGroup("SessionStart", runtimePath)];
         }
-        if (capabilities.includes("command-policy")) {
+        if (capabilities.includes("command-policy") || capabilities.includes("office-presence")) {
             hooks.PreToolUse = [matcherGroup("PreToolUse", runtimePath)];
         }
     }
@@ -122,7 +122,7 @@ export function buildClaudeHookSettings(capabilities, runtimePath, platform = pr
     if (capabilities.includes("completion-gate")) {
         hooks.Stop = [matcherGroup("Stop", runtimePath, true)];
     }
-    else if (capabilities.includes("optional-stop-verify")) {
+    else if (capabilities.includes("optional-stop-verify") || capabilities.includes("office-presence")) {
         hooks.Stop = [matcherGroup("Stop", runtimePath)];
     }
     return { hooks };

package/dist/runtime/src/adapters/claude/events.js

@@ -14,6 +14,14 @@ export function claudeNonInteractiveTrust(printMode) {
     return printMode ? "dialog-skipped" : "interactive-dialog";
 }
 export const CLAUDE_CAPABILITY_REGISTRATIONS = [
+    {
+        capability: "office-presence",
+        normalizedEvent: "session-start",
+        nativeEvent: "SessionStart",
+        surfaceId: "claude-settings",
+        support: "supported",
+        runtimeFailure: "fail-open"
+    },
     {
         capability: "lifecycle-summary",
         normalizedEvent: "session-start",

package/dist/runtime/src/adapters/codex/config.js

@@ -79,14 +79,14 @@ export function buildCodexHookConfig(capabilities, runtimePath) {
         }
     }
     else {
-        if (capabilities.includes("lifecycle-summary")) {
+        if (capabilities.includes("lifecycle-summary") || capabilities.includes("office-presence")) {
             hooks.SessionStart = [matcherGroup("SessionStart", runtimePath)];
         }
-        if (capabilities.includes("command-policy")) {
+        if (capabilities.includes("command-policy") || capabilities.includes("office-presence")) {
             hooks.PreToolUse = [matcherGroup("PreToolUse", runtimePath)];
         }
     }
-    if (capabilities.includes("optional-stop-verify")) {
+    if (capabilities.includes("optional-stop-verify") || capabilities.includes("office-presence")) {
         hooks.Stop = [matcherGroup("Stop", runtimePath)];
     }
     return {

package/dist/runtime/src/adapters/codex/events.js

@@ -14,6 +14,14 @@ export function codexMatcherSupport(event) {
     return event === "PreToolUse" ? "tool-name" : "unsupported";
 }
 export const CODEX_CAPABILITY_REGISTRATIONS = [
+    {
+        capability: "office-presence",
+        normalizedEvent: "session-start",
+        nativeEvent: "SessionStart",
+        surfaceId: "codex-hooks",
+        support: "degraded",
+        runtimeFailure: "fail-open"
+    },
     {
         capability: "lifecycle-summary",
         normalizedEvent: "session-start",

package/dist/runtime/src/adapters/opencode/config.js

@@ -67,13 +67,13 @@ function assertRuntimePath(runtimePath) {
 }
 export function opencodePluginEvents(capabilities) {
     const events = [];
-    if (capabilities.includes("lifecycle-summary")) {
+    if (capabilities.includes("lifecycle-summary") || capabilities.includes("office-presence")) {
         events.push("SessionStart");
     }
-    if (capabilities.includes("command-policy")) {
+    if (capabilities.includes("command-policy") || capabilities.includes("office-presence")) {
         events.push("PreToolUse");
     }
-    if (capabilities.includes("optional-stop-verify")) {
+    if (capabilities.includes("optional-stop-verify") || capabilities.includes("office-presence")) {
         events.push("Stop");
     }
     return events;
@@ -91,6 +91,7 @@ export function buildOpencodePlugin(capabilities, runtimePath) {
         return null;
     }
     assertRuntimePath(runtimePath);
+    const displayOnly = capabilities.includes("office-presence") && !capabilities.includes("command-policy");
     const lines = [
         "// Managed by agent-ops. Do not edit: `agent-ops update` rewrites this file.",
         `const RUNTIME_PATH = ${JSON.stringify(runtimePath)};`,
@@ -115,7 +116,7 @@ export function buildOpencodePlugin(capabilities, runtimePath) {
         "async function runManagedHook($, event, payload) {",
         "  const decision = await invokeRuntime($, event, payload, payload.projectRoot);",
         "  if (decision === null) {",
-        "    if (event === \"PreToolUse\") throw new Error(\"agent-ops: command policy is unavailable\");",
+        ...(displayOnly ? [] : ["    if (event === \"PreToolUse\") throw new Error(\"agent-ops: command policy is unavailable\");"]),
         "    return;",
         "  }",
         "  if (decision.decision === \"deny\") {",

package/dist/runtime/src/adapters/opencode/events.js

@@ -22,6 +22,14 @@ export const OPENCODE_STOP_BLOCKING = "UNKNOWN";
  */
 export const OPENCODE_SESSION_START_FIDELITY = "app-init";
 export const OPENCODE_CAPABILITY_REGISTRATIONS = [
+    {
+        capability: "office-presence",
+        normalizedEvent: "session-start",
+        nativeEvent: "SessionStart",
+        surfaceId: "opencode-plugin",
+        support: "degraded",
+        runtimeFailure: "fail-open"
+    },
     {
         capability: "lifecycle-summary",
         normalizedEvent: "session-start",

package/dist/runtime/src/config/explain.js

@@ -2,6 +2,11 @@ export function explainConfig(merged) {
     return {
         schemaVersion: merged.config.schemaVersion,
         features: {
+            office: {
+                enabled: merged.config.features.office?.enabled === true,
+                source: merged.provenance.features.source,
+                sourcePath: merged.provenance.features.sourcePath
+            },
             completionGate: {
                 enabled: merged.config.features.completionGate.enabled,
                 source: merged.provenance.features.source,
@@ -29,6 +34,12 @@ export function explainConfig(merged) {
             source: entry.source,
             sourcePath: entry.sourcePath
         })),
+        ...(merged.provenance.acceptanceRunners === undefined ? {} : {
+            acceptanceRunners: merged.provenance.acceptanceRunners.map(entry => ({
+                id: entry.value.id, adapter: entry.value.adapter,
+                source: entry.source, sourcePath: entry.sourcePath
+            }))
+        }),
         pathMappings: merged.provenance.pathMappings.map((entry) => ({
             path: entry.value.path,
             verifierIds: [...entry.value.verifierIds],

package/dist/runtime/src/config/hash.js

@@ -1,6 +1,6 @@
 import { sha256 } from "../fs/hash.js";
 import { AgentOpsError } from "../fs/paths.js";
-function canonicalJson(value) {
+export function canonicalJson(value) {
     if (value === null ||
         typeof value === "boolean" ||
         typeof value === "number" ||

package/dist/runtime/src/config/merge.js

@@ -105,6 +105,7 @@ export function mergeConfigLayers(inputLayers) {
     const layers = [...inputLayers].sort((left, right) => SOURCE_RANK[left.source] - SOURCE_RANK[right.source]);
     const profiles = new Map();
     const commands = new Map();
+    const acceptanceRunners = new Map();
     const mappings = new Map();
     const exceptions = new Map();
     const reviewRoles = new Map();
@@ -128,6 +129,9 @@ export function mergeConfigLayers(inputLayers) {
             }
             commands.set(command.id, effective(command, layer));
         }
+        for (const runner of layer.config.verification.acceptanceRunners ?? []) {
+            acceptanceRunners.set(runner.id, effective(runner, layer));
+        }
         for (const mapping of layer.config.pathMappings) {
             const key = mappingKey(mapping);
             if (layer.source === "project") {
@@ -162,6 +166,7 @@ export function mergeConfigLayers(inputLayers) {
         features,
         profiles: [...profiles.values()],
         verificationCommands: [...commands.values()],
+        ...(acceptanceRunners.size === 0 ? {} : { acceptanceRunners: [...acceptanceRunners.values()] }),
         pathMappings: [...mappings.values()],
         securityExceptions: [...exceptions.values()],
         reviewRoles: [...reviewRoles.values()],
@@ -171,7 +176,10 @@ export function mergeConfigLayers(inputLayers) {
         schemaVersion: schemaVersion.value,
         profiles: provenance.profiles.map(({ value }) => value),
         verification: {
-            commands: provenance.verificationCommands.map(({ value }) => value)
+            commands: provenance.verificationCommands.map(({ value }) => value),
+            ...(provenance.acceptanceRunners === undefined ? {} : {
+                acceptanceRunners: provenance.acceptanceRunners.map(({ value }) => value)
+            })
         },
         features: provenance.features.value,
         pathMappings: provenance.pathMappings.map(({ value }) => value),

package/dist/runtime/src/contracts.js

@@ -1,6 +1,6 @@
 export const CONFIG_SCHEMA_VERSION = 3;
-export const TASK_SCHEMA_VERSION = 1;
-export const EVIDENCE_SCHEMA_VERSION = 3;
+export const TASK_SCHEMA_VERSION = 2;
+export const EVIDENCE_SCHEMA_VERSION = 4;
 /** @deprecated Use the document-specific schema version constants. */
 export const SCHEMA_VERSION = CONFIG_SCHEMA_VERSION;
 /**

package/dist/runtime/src/hooks/codex-loop.js

@@ -278,6 +278,10 @@ async function resolveLoopRoot(input, fallback, harness) {
     }
     return null;
 }
+/** Validated project-local loop root for display-only observers. */
+export async function resolveProjectLoopRoot(input, fallback, harness) {
+    return await resolveLoopRoot(input, fallback, harness);
+}
 function loopPath(root, harness, name) {
     return join(root, `.${harness}`, name);
 }

package/dist/runtime/src/hooks/completion-gate.js

@@ -6,6 +6,7 @@ import { readPrivateFile, withPrivateFileLock, writePrivateFile } from "../secur
 import { checkTaskCompletionEvidence, findIncompleteSubtask } from "../task/completion.js";
 import { collectBaseChangePaths, collectChangeSurface } from "../verify/change-surface.js";
 import { calculateSourceFingerprint } from "../verify/source-fingerprint.js";
+import { resolveReviewScope } from "../review/scope.js";
 import { NOTES_REF, noteSessionLine, readWorktreeRecord } from "../parallel/service.js";
 const FINGERPRINT = /^[a-f0-9]{64}$/u;
 const SESSION = /^[^\0\r\n]{1,256}$/u;
@@ -192,7 +193,7 @@ export class CompletionGateService {
      * range is recomputed here rather than trusted, so evidence for a range that
      * no longer ends at HEAD still fails.
      */
-    async #evidenceFingerprint(completionBase) {
+    async #evidenceFingerprint(completionBase, noChangePaths) {
         const worktree = await this.#fingerprint();
         if (completionBase === null) {
             return worktree;
@@ -202,6 +203,11 @@ export class CompletionGateService {
             return worktree;
         }
         try {
+            if (noChangePaths !== undefined) {
+                const scope = await resolveReviewScope({ root: this.#options.root, runner: this.#options.gitRunner,
+                    base: completionBase, noChangePaths });
+                return await calculateSourceFingerprint(this.#options.root, scope, this.#options.gitRunner);
+            }
             const changedFiles = await collectBaseChangePaths(this.#options.gitRunner, completionBase);
             if (changedFiles.length === 0) {
                 return worktree;
@@ -367,7 +373,7 @@ export class CompletionGateService {
         if (unfinished !== undefined) {
             return gateResult("block", "FAIL", "COMPLETION_GATE_SUBTASK_INCOMPLETE", `Complete subtask ${unfinished.task.id} before its parent.`);
         }
-        const sourceFingerprint = await this.#evidenceFingerprint(stored.completionBase);
+        const sourceFingerprint = await this.#evidenceFingerprint(stored.completionBase, stored.noChangePaths);
         const problem = await checkTaskCompletionEvidence(stored, {
             ...this.#options,
             sourceFingerprint

package/dist/runtime/src/install/doctor.js

@@ -548,6 +548,8 @@ export async function doctorInstallation(options) {
             ? []
             : [await checkProbe("root-ghost-files", options.probes.rootGhostFiles)])
     ];
+    if (options.probes?.acceptanceCoverage !== undefined)
+        checks.push(await checkProbe("acceptance-coverage", options.probes.acceptanceCoverage));
     return {
         checks,
         surfaces: surfaceInventory.surfaces,

package/dist/runtime/src/install/harness.js

@@ -305,6 +305,49 @@ function subagentInstruction(descriptor) {
             return "Delegate it with this harness's subagent or task tool when it has one; otherwise run the same bounded steps sequentially in this session.";
     }
 }
+/**
+ * The `run` profile's hand-off of feature-sized work to `agent-ops run`.
+ * agy keeps the subtask flow: `run` launches only Claude Code or Codex.
+ * AGENTS.md is shared by Codex and opencode, so it carries the Codex form.
+ */
+function autoRunInstruction(descriptor, context) {
+    const file = descriptor.control.instructionFile;
+    if (!context.capabilities.includes("auto-run") || file === "GEMINI.md") {
+        return [];
+    }
+    const host = file === "CLAUDE.md" ? "claude" : "codex";
+    const start = `agent-ops run --goal-file .agent-ops/state/run-goal.md --host ${host} --wait`;
+    return [
+        "With the `run` profile, a change that needs more than five acceptance",
+        "criteria goes to `agent-ops run` instead of being split here; five or",
+        "fewer stay in this session. From the main checkout, before any `task",
+        "create` (its worktree makes `run` refuse with `WORKTREE_NESTED`), write",
+        "the user's prompt verbatim, then your proposed acceptance criteria marked",
+        "as proposals, to `.agent-ops/state/run-goal.md` (gitignored), and start",
+        ...(host === "claude"
+            ? [`\`${start}\``, "as a background shell command."]
+            : [
+                "it as a background shell command through the trusted outer host",
+                "runner, like review: the outer request uses",
+                "`sandbox_permissions: \"require_escalated\"`, and the shell form is",
+                `\`env -u CODEX_SANDBOX_NETWORK_DISABLED ${start}\`.`
+            ]),
+        "When it returns awaiting input, relay the question to the user, run",
+        "`agent-ops run respond <id> --question-id <q> --answer <text>`, and poll",
+        "`agent-ops run status <id>` until it finishes or asks again; on",
+        "completion report the result. If the start is refused with",
+        "`RUN_TARGET_REQUIRED`, `RUN_BACKGROUND_UNSUPPORTED`, `RUN_TARGET_DIRTY` or",
+        "`WORKTREE_NESTED`, say so in one line naming the code and fall back to",
+        "the subtask flow (`task create --parent`, then batch or advance).",
+        "`RUN_REPO_UNTRUSTED` means stop and ask the user; never work",
+        "around trust. If the run ends without completing (blocked, budget",
+        "exhausted, stopped, failing review), report the `agent-ops run status",
+        "<id>` state and code, the last `agent-ops run logs <id>` events, and the",
+        "exact `agent-ops run resume <id>` and `agent-ops run stop <id>` commands,",
+        "then stop: never resume automatically or take over the run's work.",
+        ""
+    ];
+}
 export function managedRules(descriptor, context) {
     const lines = [
         "# Loop Engineering",
@@ -322,7 +365,7 @@ export function managedRules(descriptor, context) {
         lines.push("For every change:", "", "1. Define two to five mechanically verifiable acceptance criteria.", "2. Inspect the smallest relevant scope and preserve unrelated changes.", "3. Apply the smallest safe change.", "4. Run evidence-producing verification for every criterion.", "5. Obtain complete independent review before claiming completion, via", "   `agent-ops review --task <task-id> --yes` (or the CLI's equivalent invocation).", "   Never call a", "   review-target CLI (agy, codex, claude) directly — direct calls skip", "   the enforced read-only sandbox flags and can hang or fail on command", "   permission prompts.", "   Start this command through the trusted outer host runner as its first", "   and only invocation. On Codex, the outer tool request must use", "   `sandbox_permissions: \"require_escalated\"` so network and loopback", "   are available; in that same request, unset", "   `CODEX_SANDBOX_NETWORK_DISABLED` and set `AGENT_OPS_HOST` when three", "   targets are configured. The Codex shell form is", "   `env -u CODEX_SANDBOX_NETWORK_DISABLED AGENT_OPS_HOST=<current-host> agent-ops review --task <task-id> --yes`.", "   Keep it a plain command line: to keep the output add `--output <file>`", "   (the JSON envelope is written there and one line is printed) instead of", "   a shell redirect, which the host can only allow by matching the whole", "   command string, task id included.", "   Do not run it once in the restricted sandbox and retry; changing the", "   variable inside that sandbox is not elevation.", "   Review runs exactly two fresh sessions: with three configured targets,", "   set `AGENT_OPS_HOST` to the current CLI id so it is excluded; with two", "   targets both run in configured order; with one target it runs twice.", "   The first session is necessary; a PASS then requires an adversarial", "   re-check carrying the first report. A first FAIL or NOT_RUN stops.", "", "Treat `.agent-ops/config.json` as verifier authority. Discovery output is", "only a proposal until a user confirms it. Repository commands require an", "exact matching trust record. Confirmed project init/update grants it", "automatically when verification commands are configured.", "");
     }
     if (context.capabilities.includes("task")) {
-        lines.push("Split a change that exceeds five acceptance criteria into subtasks:", "`agent-ops task create --parent <task-id>` records one, and", "`agent-ops task status --parent <task-id>` lists them. Each subtask", "carries its own criteria and verification; final review covers all", "tasks together when their worktrees are integrated;", "completing one never completes its parent.", "", "To review every active subtask of a parent together, run", "`agent-ops batch --parent <task-id> --yes` instead of one review per", "subtask. It needs what review needs: start it through the trusted outer", "host runner as its first and only invocation, with the same Codex", "elevation, and keep `--output <file>` instead of a shell redirect. It", "verifies, one task at a time, each task that lacks fresh evidence, and", "reviews a few tasks at once. Do not commit or edit the worktree while it", "runs: a moved HEAD voids every verify and review in the batch.", "For subagents in separate worktrees, use `task advance` instead.", "", "Delegate a subtask whose scope spans unknown files, broad scans, or an", "independent workstream instead of doing it inline. Name the bounded", "scope, the artifact to return, and the acceptance criteria it serves.", subagentInstruction(descriptor), "Read every returned artifact back yourself: integration, verification,", "and review stay with the coordinator.", "", "One writer at a time. `agent-ops verify` and `agent-ops review`", "fingerprint the working tree and report UNKNOWN when anything else", "writes it during the run, so delegate edits to one subagent at a time,", "or give each writer its own Git worktree and merge before verifying.", "Read-only delegation has no such limit and may run in parallel.", "", "Parallel conversations in one repository each need their own worktree.", "When `.agent-ops/config.json` sets `worktree.mode` to `auto`, run", "`agent-ops task create` from the main checkout before your first edit:", "it creates this session's worktree and puts the task there (`agent-ops", "worktree add <name> --session <session-id>` does the same without a", "task). Work only inside the printed path", "(Claude Code: EnterWorktree with that path; otherwise use it as every", "command's working directory). Commit, then run verify and review for", "each task with the printed `--base`; do not run `task complete` in the", "worktree. Leave it (Claude Code: ExitWorktree with action keep) and run", "`agent-ops worktree finish <name>` from the main checkout: it completes", "every task in the worktree, subtasks first, then merges. A finish that", "reports an incomplete task names it; verify or review that task again", "in the worktree and finish again. A finish that reports a conflict is", "resolved once, as a new task whose criteria cover both intents; if its", "verification or review fails, reset as instructed and report.", "", "For a session with writing subagents, record each child task's complete", "modification intent with `task create --intent <text>` before editing.", "Each child commits and runs local `verify --task` in its own worktree.", "From the main checkout run `agent-ops task advance --task <parent-id>", "--session <session-id> --yes` through the trusted outer host runner,", "unsetting `CODEX_SANDBOX_NETWORK_DISABLED` on Codex. Advance integrates", "child commits and intent into the coordinator worktree, verifies every", "task on the final candidate, then runs one two-round tree review.", "Only `NOT_RUN / scope-too-large` falls back to per-task two-round review;", "a substantive FAIL must be fixed. After PASS, advance writes a local", "receipt under the main checkout's Git common directory and calls finish.", "If the target moves, it retries the final gate once. An unresolved", "failure preserves worktrees and cannot be reported as finished.", "");
+        lines.push("Split a change that exceeds five acceptance criteria into subtasks:", "`agent-ops task create --parent <task-id>` records one, and", "`agent-ops task status --parent <task-id>` lists them. Each subtask", "carries its own criteria and verification; final review covers all", "tasks together when their worktrees are integrated;", "completing one never completes its parent.", "", ...autoRunInstruction(descriptor, context), "To review every active subtask of a parent together, run", "`agent-ops batch --parent <task-id> --yes` instead of one review per", "subtask. It needs what review needs: start it through the trusted outer", "host runner as its first and only invocation, with the same Codex", "elevation, and keep `--output <file>` instead of a shell redirect. It", "verifies, one task at a time, each task that lacks fresh evidence, and", "reviews a few tasks at once. Do not commit or edit the worktree while it", "runs: a moved HEAD voids every verify and review in the batch.", "For subagents in separate worktrees, use `task advance` instead.", "", "Delegate a subtask whose scope spans unknown files, broad scans, or an", "independent workstream instead of doing it inline. Name the bounded", "scope, the artifact to return, and the acceptance criteria it serves.", subagentInstruction(descriptor), "Read every returned artifact back yourself: integration, verification,", "and review stay with the coordinator.", "", "One writer at a time. `agent-ops verify` and `agent-ops review`", "fingerprint the working tree and report UNKNOWN when anything else", "writes it during the run, so delegate edits to one subagent at a time,", "or give each writer its own Git worktree and merge before verifying.", "Read-only delegation has no such limit and may run in parallel.", "", "Parallel conversations in one repository each need their own worktree.", "When `.agent-ops/config.json` sets `worktree.mode` to `auto`, run", "`agent-ops task create` from the main checkout before your first edit:", "it creates this session's worktree and puts the task there (`agent-ops", "worktree add <name> --session <session-id>` does the same without a", "task). Work only inside the printed path", "(Claude Code: EnterWorktree with that path; otherwise use it as every", "command's working directory). Commit, then run verify and review for", "each task with the printed `--base`; do not run `task complete` in the", "worktree. Leave it (Claude Code: ExitWorktree with action keep) and run", "`agent-ops worktree finish <name>` from the main checkout: it completes", "every task in the worktree, subtasks first, then merges. A finish that", "reports an incomplete task names it; verify or review that task again", "in the worktree and finish again. A finish that reports a conflict is", "resolved once, as a new task whose criteria cover both intents; if its", "verification or review fails, reset as instructed and report.", "", "For a session with writing subagents, record each child task's complete", "modification intent with `task create --intent <text>` before editing.", "Each child commits and runs local `verify --task` in its own worktree.", "From the main checkout run `agent-ops task advance --task <parent-id>", "--session <session-id> --yes` through the trusted outer host runner,", "unsetting `CODEX_SANDBOX_NETWORK_DISABLED` on Codex. Advance integrates", "child commits and intent into the coordinator worktree, verifies every", "task on the final candidate, then runs one two-round tree review.", "Only `NOT_RUN / scope-too-large` falls back to per-task two-round review;", "a substantive FAIL must be fixed. After PASS, advance writes a local", "receipt under the main checkout's Git common directory and calls finish.", "If the target moves, it retries the final gate once. An unresolved", "failure preserves worktrees and cannot be reported as finished.", "");
     }
     if (context.capabilities.includes("lifecycle-summary")) {
         lines.push("Advisory lifecycle summaries and local logs are informational. Advisory", "failures must remain fail-open and cannot become verification evidence.", "");

package/dist/runtime/src/install/plan.js

@@ -79,7 +79,7 @@ async function detectVerificationCommands(root) {
         blockers: discovery.decisions.map((decision) => `${decision.adapter}: ${decision.message}`)
     };
 }
-function buildConfig(profiles, existing, reviewTargets = [], detectedCommands = [], completionGateEnabled = false, worktree) {
+function buildConfig(profiles, existing, reviewTargets = [], detectedCommands = [], completionGateEnabled = false, worktree, officeEnabled) {
     // Absent reviewRoles means external review is disabled; an empty selection
     // must therefore omit the field rather than write an empty array.
     const reviewRoles = reviewTargets.length > 0
@@ -96,13 +96,14 @@ function buildConfig(profiles, existing, reviewTargets = [], detectedCommands =
         schemaVersion: CONFIG_SCHEMA_VERSION,
         profiles: [...profiles],
         verification,
-        features: existing?.features ?? {
-            stopVerification: {
-                enabled: false
-            },
-            completionGate: {
-                enabled: completionGateEnabled
-            }
+        features: {
+            ...(existing?.features ?? {
+                stopVerification: { enabled: false },
+                completionGate: { enabled: completionGateEnabled }
+            }),
+            ...(officeEnabled === undefined
+                ? (existing === undefined ? { office: { enabled: false } } : {})
+                : { office: { enabled: officeEnabled } })
         },
         pathMappings: existing?.pathMappings ?? [],
         securityExceptions: existing?.securityExceptions ?? [],
@@ -110,7 +111,7 @@ function buildConfig(profiles, existing, reviewTargets = [], detectedCommands =
         ...(effectiveWorktree === undefined ? {} : { worktree: effectiveWorktree })
     };
 }
-async function planConfig(root, profiles, existingManifest, suppliedConfig, reviewTargets = [], completionGateEnabled = false, worktree) {
+async function planConfig(root, profiles, existingManifest, suppliedConfig, reviewTargets = [], completionGateEnabled = false, worktree, officeEnabled) {
     const current = await readCurrentFile(root, CONFIG_PATH);
     const owned = findOwnedArtifact(existingManifest, CONFIG_PATH);
     if (current !== null && owned === undefined) {
@@ -146,7 +147,7 @@ async function planConfig(root, profiles, existingManifest, suppliedConfig, revi
         existingConfig.verification.commands.length === 0
         ? await detectVerificationCommands(root)
         : { commands: [], blockers: [] };
-    const config = buildConfig(profiles, existingConfig, reviewTargets, detected.commands, completionGateEnabled, worktree);
+    const config = buildConfig(profiles, existingConfig, reviewTargets, detected.commands, completionGateEnabled, worktree, officeEnabled);
     const content = `${JSON.stringify(config, null, 2)}\n`;
     return {
         operation: {
@@ -437,6 +438,10 @@ export async function createInstallPlan(options) {
     await assertCodexLoopConfiguration(options.root, options.harness, resolved.capabilities);
     const existing = await readExistingManifest(options.root);
     assertCompatibleManifest(existing?.manifest ?? null, options.scope, options.harness, options.allowHarnessChange === true);
+    const config = await planConfig(options.root, resolved.profiles, existing?.manifest ?? null, options.existingConfig, options.reviewTargets ?? [], completionGateEnabled, options.worktree, options.officeEnabled);
+    resolved.capabilities = resolved.capabilities.filter(capability => capability !== "office-presence");
+    if (config.config.features.office?.enabled === true)
+        resolved.capabilities.push("office-presence");
     const existingOpencodePluginPath = existing?.manifest.artifacts.find(({ id }) => id === "opencode-plugin")?.path;
     const explicitHookTargets = new Map();
     for (const target of options.hookTargets ?? []) {
@@ -520,7 +525,6 @@ export async function createInstallPlan(options) {
         : [];
     const operations = [];
     const artifacts = [];
-    const config = await planConfig(options.root, resolved.profiles, existing?.manifest ?? null, options.existingConfig, options.reviewTargets ?? [], completionGateEnabled, options.worktree);
     operations.push(config.operation);
     artifacts.push(config.record);
     const repaired = [];
@@ -634,6 +638,7 @@ export async function createInstallPlan(options) {
         scope: options.scope,
         harness: options.harness,
         desired: config.config.worktree?.mode === "auto",
+        run: resolved.profiles.includes("run"),
         ...(options.codexHome === undefined ? {} : { codexHome: options.codexHome })
     });
     return {