@massa-ai/codex-plugin 1.26.0 → 1.29.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "massa-ai",
-  "version": "1.26.0",
+  "version": "1.29.0",
   "description": "massa-ai — semantic code search, memory, and context compression for Codex",
   "author": {
     "name": "Luiz Massa",

package/agent-profiles/balanced/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "high"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agent-profiles/balanced/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agent-profiles/balanced/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/agent-profiles/cheap/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-luna"
 model_reasoning_effort = "high"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agent-profiles/cheap/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agent-profiles/cheap/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/agent-profiles/heavy/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "xhigh"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agent-profiles/heavy/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agent-profiles/heavy/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/agent-profiles/home/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-terra"
 model_reasoning_effort = "xhigh"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agent-profiles/home/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agent-profiles/home/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/agent-profiles/work/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "high"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agent-profiles/work/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agent-profiles/work/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/agents/massa-ai-judge.toml

@@ -1,9 +1,9 @@
 # massa-ai-owned
 name = "massa-ai-judge"
-description = "Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
+description = "Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence."
 model = "gpt-5.6-sol"
 model_reasoning_effort = "high"
-sandbox_mode = "read-only"
+sandbox_mode = "workspace-write"
 developer_instructions = """# Judge Agent Skill
 
 ## Mission
@@ -78,12 +78,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/agents/massa-ai-meta-judge.toml

@@ -69,11 +69,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/agents/massa-ai-navigator.toml

@@ -10,7 +10,7 @@ developer_instructions = """# Navigator Agent Skill
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/install.sh

@@ -68,6 +68,38 @@ done
 source "$SCRIPT_DIR/../../scripts/banner.sh"
 massa_ai_banner
 
+# ── Generated-bundle contract (T6, design Component 4 / UGB-05..07) ─────────
+# Why: apps/*-plugin generated subtrees (skills/, agents/, agent-profiles/,
+#      hooks/massa-ai-hook, lib/opencode-config.cjs) are gitignored build
+#      output (UGB-01) — a repo checkout must regenerate them before this
+#      installer copies or registers anything; a published tarball ships them
+#      pre-generated and has no generator sources to run at all. Runs before
+#      any host-config mutation (before CODEX_DIR resolution below).
+# Impacts: UGB-05 checkout generates, UGB-06 tarball skips, UGB-07 loud
+#          failure before mutation, UGB-08 (skip-env honored for harness runs).
+# Test: apps/codex-plugin/__tests__/install.test.ts (skip-branch + loud-failure cases)
+if [[ -f "$REPO_ROOT/scripts/generate-skill-artifacts.ts" ]]; then
+  if [[ "${MASSA_AI_SKIP_ARTIFACT_GENERATION:-0}" != "1" ]]; then
+    if ! command -v bun &>/dev/null; then
+      echo "Error: bun required to generate plugin bundles in a repo checkout (scripts/generate-*.ts)" >&2
+      exit 3
+    fi
+    bun "$REPO_ROOT/scripts/generate-skill-artifacts.ts"
+    bun "$REPO_ROOT/scripts/generate-subagent-artifacts.ts"
+  fi
+fi
+# Tarball installs (generator sources absent) skip the block above entirely
+# and fall straight through to this sentinel, which every context must pass:
+# the bundle this installer is about to copy/register has to actually exist.
+if [[ ! -f "$SCRIPT_DIR/skills/massa-ai/SKILL.md" ]]; then
+  echo "Error: missing $SCRIPT_DIR/skills/massa-ai/SKILL.md — run 'bun run generate:artifacts' first" >&2
+  exit 1
+fi
+if [[ ! -d "$SCRIPT_DIR/agents" ]] || [[ -z "$(ls -A "$SCRIPT_DIR/agents" 2>/dev/null)" ]]; then
+  echo "Error: missing or empty $SCRIPT_DIR/agents — run 'bun run generate:artifacts' first" >&2
+  exit 1
+fi
+
 # Resolve target base dir
 if [[ "$SCOPE" == "project" ]]; then
   CODEX_DIR="$(pwd)/.codex"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/codex-plugin",
-  "version": "1.26.0",
+  "version": "1.29.0",
   "description": "massa-ai plugin for Codex — semantic code search, memory, and context compression",
   "files": [
     "agents",

package/skills/agents/judge/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: judge
-description: Read-only debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence.
+description: Debate-panel evaluator for judge-with-debate. Score an artifact against the meta-judge's evaluation specification with quoted evidence, then defend or revise scores across up to 3 debate rounds until the panel reaches consensus. Writes only its own judge-N report file per dispatch. Never judges outside the specification, never revises without quoted evidence.
 license: MIT
 metadata:
   author: S1LV4, luizgmassa
-  version: "1.0.0"
+  version: "1.2.0"
   model_tier: deep
-  permission: read-only
+  permission: write
 ---
 
 # Judge Agent Skill
@@ -83,12 +83,9 @@ next_step: <string>
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests per-slot
-model diversity at dispatch time on hosts that support it — `workflows/judge-with-debate.md` is
-the single source for the current slot assignments, not this file. When dispatch-time selection
-is unavailable, every slot runs the charter default and the orchestrator records
-`DIVERSITY DEGRADED` per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the per-slot fallback; `workflows/judge-with-debate.md` owns the live slot
+assignments.
 
 ## Validation Sensors
 - Every criterion score carries an exact quotation from the artifact.

package/skills/agents/meta-judge/SKILL.md

@@ -4,7 +4,7 @@ description: Read-only evaluation-specification author for judge-with-debate. Ge
 license: MIT
 metadata:
   author: S1LV4, luizgmassa
-  version: "1.0.0"
+  version: "1.1.0"
   model_tier: deep
   permission: read-only
 ---
@@ -74,11 +74,8 @@ overall: weighted-mean
 - References: `references/agent-orchestration.md`, `references/audit-report-io.md` (Judge With Debate Report Contracts).
 
 ## Model Hint
-This charter's `metadata.model_tier` (`deep`) is the fallback every host runs when dispatch-time
-model selection is unavailable. The `judge-with-debate` workflow additionally requests a specific
-model for this slot at dispatch time on hosts that support it — `workflows/judge-with-debate.md`
-is the single source for the current assignment, not this file. When dispatch-time selection is
-unavailable, the orchestrator records a diversity warning per the workflow contract.
+See `references/agent-orchestration.md` (Model Diversity Fallback): `metadata.model_tier`
+(`deep`) is the fallback; `workflows/judge-with-debate.md` owns the live model assignment.
 
 ## Validation Sensors
 - Output parses as YAML; weights sum to 1.0 (±0.001); every criterion carries id, name, weight, scale (min 1, max 5), rubric anchors for 1/3/5, and a non-empty checklist.

package/skills/agents/navigator/SKILL.md

@@ -4,7 +4,7 @@ description: Code exploration specialist that leverages the massa-ai semantic in
 license: MIT
 metadata:
   author: S1LV4, luizgmassa
-  version: "1.0.0"
+  version: "1.1.0"
   model_tier: deep
   permission: read-only
   tools: mcp-index
@@ -16,7 +16,7 @@ metadata:
 Answer codebase questions through the massa-ai semantic index, reading files only once the index has narrowed the target to one to three of them.
 
 ## Core Principle
-The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not to read files blindly. File reads are expensive in context; massa-ai index queries are not.
+The user's codebase is **already indexed** by massa-ai. The first move on any question is to query the index, not read files blindly — file reads are expensive in context; massa-ai index queries are not.
 
 ## Responsibilities
 - Resolve the current project: run `pwd`, match the basename against `list_projects`.

package/skills/massa-ai/SKILL.md

@@ -80,6 +80,8 @@ Before reading any massa-ai file:
   requirement meaning, scope boundaries, destructive/irreversible choices,
   contradictory evidence — ask the user rather than choose silently. Facts
   are looked up; decisions are asked.
+- Before writing or changing implementation code, load
+  `references/coding-guidelines.md` if not already loaded.
 - Complete Evidence Gate before claiming done.
 
 Use internal references only when needed:
@@ -164,6 +166,8 @@ current context already contains it.
 | `commit` | draft or create safe Conventional Commits with Jira branch prefixes and audit report exclusions | `workflows/commit.md` |
 | `the-fool` | direct challenge, red-team, pre-mortem, evidence audit | `workflows/the-fool.md` |
 | `judge-with-debate` | standalone multi-judge debate evaluation of user-supplied artifacts | `workflows/judge-with-debate.md` |
+| `to-prd` | turn the current conversation into a PRD without a new interview | `workflows/to-prd.md` |
+| `skill-architect` | design and build a new skill through structured conversation | `workflows/skill-architect.md` |
 | `furps-refinement` | FURPS+ refinement of a PRD and/or ADR before implementation, with The Fool pre-validation and DoR coverage | `workflows/refinement/furps-refinement.md` |
 | `general` | coding work with no more specific workflow | `workflows/general.md` |
 
@@ -176,7 +180,7 @@ match or no match is resolved deterministically without asking.
 Deterministic routing precedence, first match wins:
 
 1. **Explicit route:** user names a massa-ai workflow, report family, saved finding type, or asks for a direct challenge.
-2. **Requested artifact:** ADR, RFC, TDD, Jira ticket, commit, session guide, audit report, implementation audit report, mobile Figma report, or FURPS refinement report.
+2. **Requested artifact:** ADR, RFC, TDD, Jira ticket, commit, session guide, audit report, implementation audit report, mobile Figma report, FURPS refinement report, PRD synthesized from the current conversation -> `to-prd` (explicit request only; refining an existing PRD stays `furps-refinement`), or new SKILL.md / skill design -> `skill-architect`.
 3. **Target type:** broken behavior/error -> `debug`; saved audit finding -> matching `*-fix`; implementation scope review -> `implementation-audit`; Maestro E2E/device automation target -> `maestro`, `maestro-audit`, or child-only `maestro-fix` before generic tests workflows; security/privacy/auth finding -> security workflow; tests/flakes/coverage finding -> tests workflow; supplied Figma/screenshot mobile UI design -> `design`; mobile Figma compare/audit -> `mobile-figma-audit`; saved `MFM-*` findings -> `mobile-figma-fix`.
 4. **Primary verb:** create/add/implement -> `feature` unless the concrete target is new Maestro flow work, which routes to `maestro`; restructure without behavior change -> `refactor`; inspect/understand only -> `exploration`; record selected decision -> `adr`; compare open options -> `rfc`; design settled implementation -> `tdd`; refine/quality-check an existing PRD or ADR document (not implementation auditing) -> `furps-refinement`.
 5. **Risk domain escalation:** migrations, irreversible operations, auth/privacy, cross-service contracts, public compatibility, or work over 10 files routes to `spec-driven` unless the user explicitly requests a narrower workflow and accepts the containment.
@@ -312,22 +316,7 @@ Load only when a selected workflow asks for them:
 
 ## Graceful Degradation
 
-| Failure | Behavior |
-|---|---|
-| `recall` empty | Continue as cold start; do not invent memory. |
-| massa-ai server unavailable | Fall back to focused shell/file reads; keep session concept. |
-| Synapse unavailable | Continue with stateless search. |
-| Synapse prime/access mismatch | Use verified REST fallback or skip that optional step. |
-| index incomplete or stale | Use recall; skip search-dependent steps until ready. Graph tools (`trace_path`, `impact_analysis`, `get_architecture`) fall back to `search`/`get_references`; record reduced retrieval confidence. |
-| no meaningful memory | Say memory was intentionally skipped. |
-| memory write fails | Continue and report the unpersisted insight. |
-| `create_checkpoint` unavailable | Continue with `.specs/` artifact state as fallback. |
-| `handoff_begin` unavailable (`HANDOFFS_ENABLED=false`) | Fall back to `remember` + `.specs/` writes; record skipped handoff-table write. |
-| `bootstrap` unavailable | Proceed with manual `remember` calls. |
-| `compact_snapshot` unavailable | Continue with `compress` + `remember`; record skipped snapshot. |
-| code execution (`execute`/`execute_file`/`batch_execute`) unavailable | Load file into context instead; note the local-dev-only trust model still applies. |
-| `fetch_and_index` unavailable | Use native web fetch + manual indexing or skip external content. |
-| feedback reference unavailable | Continue without feedback lines; do not block the workflow. |
+On any tool/index/MCP failure (server unavailable, index incomplete, Synapse unavailable, `create_checkpoint`/`handoff_begin`/`bootstrap`/`compact_snapshot`/`execute`/`fetch_and_index` unavailable), load and follow `references/graceful-degradation.md` instead of blocking.
 
 ## Completion
 

package/skills/massa-ai/references/adr-authoring.md

@@ -1,6 +1,6 @@
 # ADR Authoring
 
-Use this reference from `workflows/adr.md`. It defines how massa-ai creates Architecture Decision Records without delegating orchestration to another ADR skill.
+Use from `workflows/adr.md`. Defines how massa-ai creates Architecture Decision Records without delegating orchestration to another ADR skill.
 
 ## Core Rule
 
@@ -15,9 +15,9 @@ Route matrix:
 | Direction is selected and implementation architecture/contracts/rollout need a blueprint | TDD |
 | Requirements, design, tasks, and execution all need staged approval | Spec-driven |
 
-Source relevance requires the source to name at least one target, constraint, risk, dependency, public contract, rejected option, decision owner, or rollout/rollback consequence for this ADR. Sources that provide only style or adjacent context are examples, not facts.
+Source relevance requires the source to name at least one target, constraint, risk, dependency, public contract, rejected option, decision owner, or rollout/rollback consequence for this ADR. Sources providing only style or adjacent context are examples, not facts.
 
-Do not guess. Missing source facts become questions, source gaps, or a workflow route change.
+Do not guess — missing source facts become questions, source gaps, or a workflow route change.
 
 ## Source Order
 

package/skills/massa-ai/references/agent-orchestration.md

@@ -1,6 +1,6 @@
 # Agent Orchestration
 
-Use this reference when a workflow benefits from isolated context, parallel work, or independent verification.
+Use when a workflow benefits from isolated context, parallel work, or independent verification.
 
 Load `references/context-firewall.md` first when the delegated work may involve verbose logs, snapshots, generated reports, external research, or broad source inspection.
 
@@ -23,7 +23,7 @@ Subagents do bounded work only. Do not delegate everything.
 
 Tokens are spent once; context shapes every decision that follows. The orchestrator's
 working memory is the asset every rule below protects — delegation exists to keep
-disposable reasoning out of the main thread, not only to parallelize.
+disposable reasoning out of the main thread, not just to parallelize.
 
 - **Never poll a running subagent for status, and never ingest a subagent's raw
   transcript, JSONL, or intermediate reasoning — running or completed.** The
@@ -98,6 +98,21 @@ installed, spawning forbidden by platform policy, or the host returns an unknown
 delegated scope locally against the same output contract, and report the skipped
 delegation with its reason in the Evidence Gate.
 
+## Model Diversity Fallback
+
+Applies to any charter whose `metadata.model_tier` is a fallback and whose
+dispatching workflow additionally requests per-invocation model diversity at
+dispatch time (e.g. `judge` — 3 parallel slots; `meta-judge` — one slot).
+
+- The charter's `metadata.model_tier` is the fallback every host runs when
+  dispatch-time model selection is unavailable.
+- The dispatching workflow (e.g. `workflows/judge-with-debate.md`) is the
+  single source for the current slot/model assignment, not the charter file.
+- When dispatch-time selection is unavailable, every affected slot runs the
+  charter default, and the orchestrator records `DIVERSITY DEGRADED`
+  (multi-slot) or an equivalent diversity warning (single-slot) per the
+  dispatching workflow's own contract.
+
 ## Roles
 
 Use the role names in prompts and memory tags; use the host agent names to
@@ -133,7 +148,7 @@ only, never a dispatch target.
 
 ## Capability Packet
 
-**This section is the sole canonical Capability Packet definition.** `references/subagent-design.md` and the root `skills/AGENTS.md` registry defer to or mirror this list; `scripts/__tests__/capability-packet-parity.test.ts` fails when the `skills/AGENTS.md` mirror diverges. Bespoke packets (judge panel, FURPS analyst, phase-batch worker) are declared specializations that map onto these fields in their own workflow files.
+**This section is the sole canonical Capability Packet definition.** `references/subagent-design.md` mirrors this list and the root `skills/AGENTS.md` registry points here without restating it. Bespoke packets (judge panel, FURPS analyst, phase-batch worker) are declared specializations that map onto these fields in their own workflow files.
 
 **A subagent inherits nothing from the parent session** — no skills, no personas, no loaded references, no conversation history. Everything the subagent needs is named explicitly in the packet, including the exact reference file paths it must read itself.
 

package/skills/massa-ai/references/architecture-coupling-lens.md

@@ -1,6 +1,6 @@
 # Architecture Coupling Lens
 
-Use this detail reference when an architecture audit or execution task needs dependency health, dependency direction, integration cost, or coupling reduction.
+Use when an architecture audit or execution task needs dependency health, dependency direction, integration cost, or coupling reduction.
 
 ## Contents
 

package/skills/massa-ai/references/architecture-deepening-lens.md

@@ -1,6 +1,6 @@
 # Architecture Deepening Lens
 
-Use this detail reference when an architecture audit or execution task needs module depth, seams, adapters, testability, locality, or AI-navigability analysis.
+Use when an architecture audit or execution task needs module depth, seams, adapters, testability, locality, or AI-navigability analysis.
 
 ## Contents