@ngockhoale/ukit 2.7.1 → 2.7.3

package/src/core/runInstallPipeline.js

@@ -15,6 +15,8 @@ import { ensureGitignore } from './ensureGitignore.js';
 import { repairBrokenHooks } from './repairBrokenHooks.js';
 import { applyGatewayResilienceEnv } from './gatewayResilienceEnv.js';
 import { cleanupEmptyParents, readJsonIfExists, removeFileOrLinkOnly, resolveProjectRelativePath } from './fileOps.js';
+import { findOpencodeArtifacts, opencodeSteerMessage } from './opencodeSteer.js';
+import { loadRuntimeConfig } from './runtimeConfig.js';
 
 const AUTO_PRUNE_OBSOLETE_PREFIXES = [
   '.claude/skills/',
@@ -261,6 +263,15 @@ export async function runInstallPipeline({
   const installMetaData = await readJsonIfExists(pathConfig.installMetaPath);
   const isReinstall = Boolean(installMetaData?.tool === 'ukit');
 
+  // SPEC FR-004/§security — a leftover opencode.json is a user file: detect and
+  // steer toward manual removal. Install never writes, merges, repairs, or
+  // deletes it (obsolete-path pruning excludes it; only `ukit uninstall` may
+  // remove it).
+  const opencodeArtifacts = findOpencodeArtifacts(pathConfig.projectRoot);
+  if (opencodeArtifacts.length > 0) {
+    console.warn(opencodeSteerMessage(opencodeArtifacts));
+  }
+
   if (isReinstall && !dryRun) {
     await migrateLegacyRuntimeRoot(pathConfig.projectRoot);
   }
@@ -269,6 +280,10 @@ export async function runInstallPipeline({
   const stackContext = await detectStack(pathConfig.projectRoot);
   const projectContext = await detectProjectContext(pathConfig.projectRoot);
   const providerContext = await detectProviders(pathConfig.projectRoot);
+  // FR-004 — feeds the omp.evalApproval render variable. Missing/invalid config
+  // degrades to defaults (allowUnsafeEval: false) inside loadRuntimeConfig, so
+  // the rendered eval approval fails closed to `deny`.
+  const runtimeConfig = await loadRuntimeConfig(pathConfig.projectRoot);
 
   const variables = buildTemplateVariables({
     projectContext,
@@ -276,6 +291,7 @@ export async function runInstallPipeline({
     packageVersion,
     providerContext,
     withCodegraph,
+    runtimeConfig,
   });
 
   const plan = await buildInstallPlan({
@@ -321,6 +337,15 @@ export async function runInstallPipeline({
       console.log(`[UKit] .omp/config.yml: migrated approval surface (prompt→removed: ${removed}, preserved: ${preserved})`);
     }
 
+    // TASK-002 / FR-002: any `{{token}}` that survived into merged .omp/config.yml
+    // output means the render lane lacked the variable — warn instead of silently
+    // persisting the literal (the original autoCompactWindow bug mechanism).
+    for (const entry of diffResults) {
+      const tokens = entry?.migrationReport?.unresolvedTokens;
+      if (!tokens || tokens.length === 0) continue;
+      console.warn(`[UKit] Warning: .omp/config.yml contains unresolved template tokens: ${tokens.join(', ')} — report this to UKit maintainers; no value was fabricated.`);
+    }
+
     // BUG-C22-19: bound the .bak accumulation — every overwrite_with_backup write
     // adds one and nothing removed them. Advisory: a prune failure must never
     // fail the install.

package/src/core/runtimeConfig.js

@@ -9,8 +9,10 @@ const require = createRequire(import.meta.url);
 const { version: PACKAGE_VERSION } = require('../../package.json');
 
 // legacy: 'antigravity' stays valid — Antigravity adapter removed in v2.2.0, but an existing
-// config.json naming it must not become invalid.
-const VALID_AGENTS = new Set(['claude-code', 'codex', 'antigravity', 'opencode', 'omp']);
+// config.json naming it must not become invalid. 'opencode' is NOT kept valid here: the
+// OpenCode lane was removed this cycle, so stale 'opencode' values are normalized away
+// (strip + console.warn) in normalizeLegacyOpencodeEntries instead of hard-failing.
+const VALID_AGENTS = new Set(['claude-code', 'codex', 'antigravity', 'omp']);
 
 // Reserved permission modes for orchestration.permissionMode (single source of truth).
 // 'unattended' is the only mode implemented this cycle; interactive/safe-auto are reserved.
@@ -90,7 +92,6 @@ export function buildDefaultRuntimeConfig(overrides = {}) {
         mustNotBlockMainTask: true,
         targets: {
           claude: { autoCompact: true, mode: 'precompact-reinject', preserveExistingHooks: true },
-          opencode: { autoCompact: true, mode: 'native-auto-prune', preserveExistingCompaction: true },
           // 'precompact-reinject' like claude, NOT codex's 'soft-handoff': omp exposes real
           // pre-compaction hook events, so there is nothing to work around with a state file.
           omp: { autoCompact: true, mode: 'precompact-reinject', preserveExistingHooks: true },
@@ -142,6 +143,10 @@ export function buildDefaultRuntimeConfig(overrides = {}) {
       orchestratorModel: 'claude-sonnet-5',
       advisorEnabled: true,
       permissionMode: 'unattended',
+      // FR-003: eval-subprocess gate for rendered omp approval (tools.approval.eval).
+      // Fail-closed: only an explicit user `true` renders `eval: allow`; absent,
+      // false, or an unreadable config all render `deny`. Migration never sets it.
+      allowUnsafeEval: false,
       contracts: buildConfigContracts(),
       modelTiers: {
         // ompRole is the .omp/config.yml modelRoles key this tier binds to.
@@ -406,6 +411,9 @@ export function validateRuntimeConfig(config) {
       && !VALID_PERMISSION_MODES.has(config.orchestration.permissionMode)) {
       errors.push(`orchestration.permissionMode must be one of: ${[...VALID_PERMISSION_MODES].join(', ')}.`);
     }
+    if (config.orchestration.allowUnsafeEval !== undefined) {
+      pushBooleanError(errors, config.orchestration.allowUnsafeEval, 'orchestration.allowUnsafeEval');
+    }
     if (!isPlainObject(config.orchestration.contracts)) {
       errors.push('orchestration.contracts must be an object.');
     }
@@ -653,6 +661,37 @@ export function validateRuntimeConfig(config) {
   };
 }
 
+// OpenCode was removed as an adapter this cycle. Stale 'opencode' values inside
+// validated agent lists/keys are stripped with a steer warning — never a hard-fail —
+// so an old config.json still loads instead of falling back to defaults.
+function normalizeLegacyOpencodeEntries(config) {
+  const warned = { value: false };
+  const warnOnce = () => {
+    if (!warned.value) {
+      console.warn(`[UKit] Removed stale 'opencode' agent entries from UKit runtime config — OpenCode is no longer supported.`);
+      warned.value = true;
+    }
+  };
+
+  if (isPlainObject(config) && config.agent === 'opencode') {
+    warnOnce();
+    config.agent = 'claude-code';
+  }
+
+  if (isPlainObject(config) && Array.isArray(config.agents) && config.agents.includes('opencode')) {
+    warnOnce();
+    config.agents = config.agents.filter((agent) => agent !== 'opencode');
+  }
+
+  const targets = config?.compact?.agentContext?.targets;
+  if (isPlainObject(targets) && 'opencode' in targets) {
+    warnOnce();
+    delete targets.opencode;
+  }
+
+  return config;
+}
+
 export async function inspectRuntimeConfig(projectRoot) {
   const runtimePaths = buildRuntimePaths(projectRoot);
   let exists = false;
@@ -670,7 +709,7 @@ export async function inspectRuntimeConfig(projectRoot) {
     }
   }
 
-  const config = buildDefaultRuntimeConfig(rawConfig ?? {});
+  const config = normalizeLegacyOpencodeEntries(buildDefaultRuntimeConfig(rawConfig ?? {}));
   const validation = validateRuntimeConfig(config);
   const errors = [
     ...(parseError ? [`config.json parse error: ${parseError}`] : []),

package/src/core/status.js

@@ -8,13 +8,13 @@ import { countMemoryItems } from './memory/store.js';
 import { buildCompactPressureState } from './compact/threshold.js';
 import { detectProjectContext } from '../context/detectProjectContext.js';
 import { inspectProjectImportant, inspectProjectImportantWiring } from './projectImportant.js';
+import { opencodeSteerMessage } from './opencodeSteer.js';
 
 function formatPrimaryAgent(agentKey) {
   if (agentKey === 'claude-code') return 'Claude Code';
   if (agentKey === 'codex') return 'OpenAI Codex';
   // legacy: Antigravity adapter removed in this release; existing config.json may still name it
   if (agentKey === 'antigravity') return 'Antigravity';
-  if (agentKey === 'opencode') return 'OpenCode';
   if (agentKey === 'omp') return 'Oh My Pi (omp)';
   return agentKey || 'Unknown';
 }
@@ -24,7 +24,6 @@ async function detectAdapterLabels(projectRoot, primaryAgent) {
 
   const checks = [
     { label: 'OpenAI Codex', path: '.codex/settings.json' },
-    { label: 'OpenCode', path: 'opencode.json' },
     { label: 'Oh My Pi (omp)', path: '.omp/config.yml' },
   ];
 
@@ -171,8 +170,11 @@ export async function buildStatusReport(projectRoot) {
       claude: piWiring.claude.wired,
       omp: piWiring.omp.installed ? piWiring.omp.wired : undefined,
       codex: piWiring.codex.installed ? piWiring.codex.wired : undefined,
-      opencode: piWiring.opencode.installed ? piWiring.opencode.wired : undefined,
     },
+    // SPEC FR-006 — leftover opencode.json is a user file: steer, never wire.
+    opencodeSteer: piWiring.opencodeArtifacts.length > 0
+      ? opencodeSteerMessage(piWiring.opencodeArtifacts)
+      : null,
   };
 
   return {
@@ -226,7 +228,6 @@ function formatProjectImportantWiring(pi) {
   const parts = [`Claude runtime ${mark(pi.wiring.claude)}`];
   if (pi.wiring.omp !== undefined) parts.push(`omp runtime ${mark(pi.wiring.omp)}`);
   if (pi.wiring.codex !== undefined) parts.push(`Codex fallback ${mark(pi.wiring.codex)}`);
-  if (pi.wiring.opencode !== undefined) parts.push(`OpenCode fallback ${mark(pi.wiring.opencode)}`);
   return parts.join(' / ');
 }
 
@@ -237,6 +238,7 @@ export function formatStatusReport(report) {
     `${padLabel('Project')} ${report.projectName}`,
     `${padLabel('Project rules')} ${formatProjectImportantRules(report.projectImportant)}`,
     `${padLabel('Rule wiring')} ${formatProjectImportantWiring(report.projectImportant)}`,
+    ...(report.projectImportant.opencodeSteer ? [report.projectImportant.opencodeSteer] : []),
     `${padLabel('Adapters')} ${report.adapters.join(', ')}`,
     `${padLabel('Memory items')} ${report.memoryCounts.projectCount} project / ${report.memoryCounts.sessionCount} session / ${report.memoryCounts.userCount} user`,
     `${padLabel('Last compact')} ${report.lastCompact}`,

package/src/core/unattendedDoctor.js

@@ -70,6 +70,8 @@ export async function inspectUnattendedMode({ projectRoot, ompPath = 'omp' }) {
   const permissionModeValid = permissionModeRaw === undefined
     || VALID_PERMISSION_MODES.has(permissionModeRaw);
   const permissionMode = permissionModeRaw === undefined ? 'unattended' : permissionModeRaw;
+  const allowUnsafeEval = runtimeConfig?.orchestration?.allowUnsafeEval === true;
+  const expectedEval = allowUnsafeEval ? 'allow' : 'deny';
 
   const omp = await readOmpConfig(projectRoot);
   const tools = omp.parsed?.tools ?? {};
@@ -163,14 +165,16 @@ export async function inspectUnattendedMode({ projectRoot, ompPath = 'omp' }) {
         'Run ukit install to pin tools.approvalMode: yolo in .omp/config.yml.',
         { detail: `value: ${effectiveApprovalMode} (source: ${approvalSource})` },
       ),
-    // 3 — eval/bash policy allow
+    // 3 — eval/bash policy vs compiled posture (FR-004/FR-006): bash stays
+    // allow; eval matches the allowUnsafeEval knob (deny by default — fail
+    // closed), never prompt.
     check(
-      "eval/bash policy 'allow'",
-      omp.exists && approvalMap.eval === 'allow' && approvalMap.bash === 'allow',
+      'eval/bash policy matches compiled posture',
+      omp.exists && approvalMap.bash === 'allow' && approvalMap.eval === expectedEval,
       'install-repairable',
-      'Run ukit install to restore tools.approval.eval/bash: allow.',
+      `Run ukit install to restore tools.approval.bash: allow and tools.approval.eval: ${expectedEval}.`,
       omp.exists
-        ? {}
+        ? { detail: `eval expected ${expectedEval} (allowUnsafeEval=${allowUnsafeEval}), got ${approvalMap.eval ?? 'absent'}` }
         : { applicable: false, detail: '.omp/config.yml absent' },
     ),
     // 4 — zero prompt policies

package/src/manifest/selectItems.js

@@ -5,7 +5,6 @@ export const OPTIONAL_ADAPTER_ITEM_IDS = new Set([
   'multi-codex-settings-json',
   'multi-codex-settings-local',
   'multi-codex-agents-link',
-  'multi-opencode-config',
   'multi-omp-agents-md',
   'multi-omp-rules',
   'multi-omp-config',

package/src/render/buildVariables.js

@@ -13,12 +13,18 @@ UKit routing, memory, and skill activation remain primary. CodeGraph is the inde
 To disable: rerun \`ukit install\` without \`--with-codegraph\`.
 `;
 
-export function buildTemplateVariables({ projectContext, stackContext, packageVersion, providerContext, withCodegraph = false }) {
+export function buildTemplateVariables({ projectContext, stackContext, packageVersion, providerContext, withCodegraph = false, runtimeConfig }) {
   // Derived, never hand-written: .claude/settings.json is read by Claude Code itself and so
   // cannot consult .ukit/storage/config.json at runtime. Baking the window in here keeps
   // compact.hardCapTokens the single number that retunes both.
   const { autoCompactWindow } = loadShippedCompactBudget();
 
+  // FR-004 — fail closed: `allow` only on an explicit user opt-in
+  // (`orchestration.allowUnsafeEval === true`). Missing, unreadable, or
+  // non-boolean config all resolve `deny` — never `prompt`/`ask`, which would
+  // dead-end under unattended (SPEC §14).
+  const evalApproval = runtimeConfig?.orchestration?.allowUnsafeEval === true ? 'allow' : 'deny';
+
   return {
     compact: {
       autoCompactWindow: String(autoCompactWindow),
@@ -58,6 +64,9 @@ export function buildTemplateVariables({ projectContext, stackContext, packageVe
     user: {
       profile: 'default',
     },
+    omp: {
+      evalApproval,
+    },
     codegraphSection: withCodegraph ? CODEGRAPH_SECTION : '',
   };
 }

package/templates/.claude/agents/bug-debugger.md

@@ -50,7 +50,7 @@ Systematic debugging — understand before fixing.
 
 ```
 STATUS: DONE | BLOCKED | PARTIAL
-EXECUTOR_TOOL: [claude-code | kilo-code | codex | opencode | other]
+EXECUTOR_TOOL: [claude-code | kilo-code | codex | other]
 EXECUTOR_MODEL: [exact model name you are running as. "unknown" if you cannot tell.]
 EXECUTOR_SUBAGENT: [subagent name within your host, if any, else "-"]
 SUMMARY: [1-2 sentences — root cause and fix]

package/templates/.claude/agents/feature-implementer.md

@@ -72,7 +72,7 @@ and even then, report it, don't ask about it.
 
 ```
 STATUS: DONE | BLOCKED | PARTIAL
-EXECUTOR_TOOL: [claude-code | kilo-code | codex | opencode | other]
+EXECUTOR_TOOL: [claude-code | kilo-code | codex | other]
 EXECUTOR_MODEL: [exact model name you are running as — e.g. unic-code, claude-sonnet-4-5, gpt-5-mini. If you truly cannot tell, write "unknown" — reviewer treats unknown as suspicious and asks the human to confirm.]
 EXECUTOR_SUBAGENT: [name of the subagent you are, if your host has multiple — e.g. "Kilo:code", "Claude:feature-implementer". Otherwise "-".]
 SUMMARY: [1-2 sentences of what was implemented]

package/templates/.claude/agents/ukit-small-task-maintainer.md

@@ -24,7 +24,7 @@ You are UKit's internal small-task maintainer. You run as a sidecar/parallel/non
 - Summarizing `docs/STATUS.md`, `docs/TASKS.md`, `docs/WORKLOG.md`, or memory snippets into compact handoff notes.
 - Deciding fast vs slow lane, safe vs risky lane, whether a skill should be activated, and whether the current prompt has enough steps planned.
 - Choosing compact-now vs compact-later and summarize-vs-keep-detail for UKit context hygiene.
-- Keeping agent context compact without removing existing lanes: Claude PreCompact/reinject stays active, OpenCode native auto/prune compaction stays active, and Codex Desktop soft handoffs use `compact.codexContext.compactTarget` (default 150 lines; preferred 120-150; hard max 170) while preserving critical state.
+- Keeping agent context compact without removing existing lanes: Claude PreCompact/reinject stays active and Codex Desktop soft handoffs use `compact.codexContext.compactTarget` (default 150 lines; preferred 120-150; hard max 170) while preserving critical state.
 - Small, reversible UKit runtime maintenance decisions.
 
 ## Never Use For
@@ -45,7 +45,7 @@ You are UKit's internal small-task maintainer. You run as a sidecar/parallel/non
 5. If safe, make the smallest cleanup/summary/classification/routing decision.
 6. Follow the CoDev priority order: output quality first, then safety, then speed, then token discipline. Spend tokens/steps when they protect correctness.
 7. Use small step budgets: trivial = 1 step, simple = up to 2 steps, non-trivial = up to 4 planned steps before the main model reassesses.
-8. For long sessions, preserve existing Claude/OpenCode auto-compact behavior; for Codex Desktop, target a compact handoff of about 120-150 lines, never above 170 lines for this lane, not a full transcript replay.
+8. For long sessions, preserve existing Claude auto-compact behavior; for Codex Desktop, target a compact handoff of about 120-150 lines, never above 170 lines for this lane, not a full transcript replay.
 9. Preserve user-owned content; do not delete unclear tasks.
 10. Report exactly what changed or what decision was made.
 

package/templates/.claude/commands/ukit/handoff-create.md

@@ -1,7 +1,7 @@
 # /ukit:handoff-create — Phase 1 + 2: Plan
 
 **Role: PLANNER**
-**Tool: any** (Claude Code / Codex / omp / Kilo / OpenCode — your choice)
+**Tool: any** (Claude Code / Codex / omp / Kilo — your choice)
 **Model split:**
 - Read/understand → lite model (haiku · unic-lite · cheapest available)
 - Write plan + tasks → strong model (Opus · unic-smart · strongest available)
@@ -49,7 +49,7 @@ After the batched call, run Steps 1–2.5 to completion without further question
 4. Read `docs/AI_HANDOFF/tasks/_TEMPLATE.md` → task file structure
 5. Return a compact summary. Do NOT write anything yet.
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the lite model, run the steps above yourself, keep the summary in context.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the lite model, run the steps above yourself, keep the summary in context.
 
 ---
 
@@ -122,7 +122,7 @@ The planner agent does the following (use Step 1 summary — do NOT re-read file
 
 8. Report: task IDs, dependency graph, any `needs_breakdown` + reason
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the strong model, execute steps 1–7 above yourself.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the strong model, execute steps 1–7 above yourself.
 
 ---
 
@@ -143,7 +143,7 @@ intact. What it no longer does is hand a stalled plan back and wait.
 2. `Issues Found` → route back to Step 2: planner revises `PLAN.md` and the affected `TASK-xxx.md` files to address every finding, then re-submit for another Step 2.5 review (this becomes the next round). Do NOT commit or hand off to executor on `Issues Found`.
 3. `Approved` → append `PLAN_REVIEW: Approved by <reviewer model>` to PLAN.md's `## Planner Report` footer, then proceed.
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the strong model in a **separate** chat/session from Step 2, paste PLAN.md, review using the Spec/Plan Review checklist in `.claude/agents/code-reviewer.md`.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the strong model in a **separate** chat/session from Step 2, paste PLAN.md, review using the Spec/Plan Review checklist in `.claude/agents/code-reviewer.md`.
 
 ---
 

package/templates/.claude/commands/ukit/handoff-fullstack.md

@@ -1,7 +1,7 @@
 # /ukit:handoff-fullstack — Full Pipeline: Plan → Implement → Review
 
 **Role: ORCHESTRATOR**
-**Tool: any** (Claude Code / Codex / omp / Kilo / OpenCode — your choice)
+**Tool: any** (Claude Code / Codex / omp / Kilo — your choice)
 
 ## Model Split
 
@@ -186,7 +186,7 @@ counter and starts a new cycle automatically.
 
 Return a compact summary. Do NOT write any files yet.
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the lite model and run P1 yourself.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the lite model and run P1 yourself.
 
 ### P2 — Write PLAN.md + task files (strong model)
 
@@ -270,7 +270,7 @@ is written. What it no longer does is hand a stalled plan back to a human who is
 2. `Issues Found` → route back to P2: `handoff-planner` revises `PLAN.md` and the affected `TASK-xxx.md` files to address every finding, then re-submit for one more P2.5 review round — subject to the loop cap above.
 3. `Approved` → append `PLAN_REVIEW: Approved by <reviewer model>` to PLAN.md's `## Planner Report` footer, then proceed to P3.
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the strong model in a **separate** chat/session from P2, paste PLAN.md, review using the Spec/Plan Review checklist in `.claude/agents/code-reviewer.md`.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the strong model in a **separate** chat/session from P2, paste PLAN.md, review using the Spec/Plan Review checklist in `.claude/agents/code-reviewer.md`.
 
 ### P3 — Commit the plan (lite model)
 
@@ -281,7 +281,7 @@ git add docs/AI_HANDOFF/ && git commit -m "handoff: plan — <goal>"
 
 Replace `<goal>` with the one-sentence goal from ACTIVE.md. This locks the plan in git before any implementation begins.
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the lite model for P2/P3.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the lite model for P2/P3.
 
 ---
 

package/templates/.claude/commands/ukit/handoff-implement.md

@@ -1,7 +1,7 @@
 # /ukit:handoff-implement — Phase 3: Execute
 
 **Role: EXECUTOR (orchestrated)**
-**Tool: any** (Claude Code / Codex / omp / Kilo / OpenCode — your choice)
+**Tool: any** (Claude Code / Codex / omp / Kilo — your choice)
 **Model: code model** (Sonnet · unic-code · cheap-smart)
 
 > **omp model tiers:** the tiers above map to `.omp/config.yml`'s `modelRoles`, referenced from agent frontmatter as `@smol` / `@default` / `@slow`.
@@ -170,7 +170,7 @@ disk in the task file, which is where the reviewer reads them from. Pasting them
 second time is what blows up the orchestrator's context window and kills the run mid-wave.
 ```
 
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** open each task in a separate session with the code model.
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** open each task in a separate session with the code model.
 
 ### 3c — Orchestrator: copy changes to main + IMMEDIATELY delete worktree
 

package/templates/.claude/commands/ukit/handoff-review.md

@@ -1,7 +1,7 @@
 # /ukit:handoff-review — Phase 4: Review
 
 **Role: REVIEWER**
-**Tool: any** (Claude Code / Codex / omp / Kilo / OpenCode — your choice)
+**Tool: any** (Claude Code / Codex / omp / Kilo — your choice)
 **Model: strong model, MUST differ from executor** (Opus · unic-smart · strongest available)
 
 > **omp model tiers:** the tiers above map to `.omp/config.yml`'s `modelRoles`, referenced from agent frontmatter as `@smol` / `@default` / `@slow`.
@@ -191,4 +191,4 @@ This is the only place this command may ask for a compaction. All state lives in
 `INDEX.md` and `RUN.md`, so a compacted or fresh session resumes with nothing lost.
 
 > Orchestrator (this session) handles Step 1, 2e, and 3 directly — those are not delegated.
-> **For the human operator, on a tool with no agent support (Codex, OpenCode) — not an instruction to the model:** manually switch to the strong model, run 2a–2d per task (one session at a time).
+> **For the human operator, on a tool with no agent support (Codex) — not an instruction to the model:** manually switch to the strong model, run 2a–2d per task (one session at a time).

package/templates/.claude/settings.json

@@ -36,18 +36,26 @@
       "Bash(git worktree:*)",
       "Bash(jq:*)"
     ],
-    "ask": [
-      "Bash(gh pr create:*)",
-      "Bash(gh pr comment:*)",
-      "Bash(gh issue comment:*)"
-    ],
     "deny": [
       "Bash(git reset --hard:*)",
       "Bash(git push --force:*)",
+      "Bash(git push -f:*)",
       "Bash(git push --force-with-lease:*)",
+      "Bash(git clean -fd:*)",
+      "Bash(git checkout .:*)",
+      "Bash(git restore .:*)",
       "Bash(rm -rf /:*)",
       "Bash(rm -rf ~:*)",
-      "Bash(rm -rf ..:*)"
+      "Bash(rm -rf ..:*)",
+      "Bash(rm -rf .:*)",
+      "Bash(rm -rf:*)",
+      "Bash(dd if=/dev/:*)",
+      "Bash(*> /dev/sda:*)",
+      "Bash(mkfs:*)",
+      "Bash(:(){ :|:& };::*)",
+      "Bash(gh pr create:*)",
+      "Bash(gh pr comment:*)",
+      "Bash(gh issue comment:*)"
     ]
   },
   "hooks": {

package/templates/.claude/skills/update-status/SKILL.md

@@ -48,7 +48,7 @@ When updating meaningful state, update the header:
 ## Freshness
 
 - Last meaningful update: YYYY-MM-DD HH:mm
-- Updated by: Claude / Codex / OpenCode / human
+- Updated by: Claude / Codex / human
 - Status confidence: high / medium / low
 - Stale after: 72h
 ```

package/templates/.claude/ukit/index/route-task.mjs

@@ -816,7 +816,12 @@ async function main() {
   const lastPrompt = readFlagValue(args, '--last-prompt')
     ?? previousState?.routingContext?.lastExplicitUserPromptText
     ?? '';
-  const adapter = readFlagValue(args, '--adapter') ?? inferAdapterFromInvocation(process.argv[1] || '');
+  const KNOWN_ADAPTERS = new Set(['claude', 'codex', 'antigravity']);
+  const rawAdapter = readFlagValue(args, '--adapter') ?? inferAdapterFromInvocation(process.argv[1] || '');
+  const adapter = KNOWN_ADAPTERS.has(rawAdapter) ? rawAdapter : 'claude';
+  if (rawAdapter !== adapter) {
+    console.error(`route-task: unknown --adapter "${rawAdapter}" — falling back to claude`);
+  }
   const commandNamespace = adapter === 'codex'
     ? '.codex'
     : (adapter === 'antigravity' ? '.antigravity' : '.claude');
@@ -826,7 +831,7 @@ async function main() {
     .trim();
 
   if (!promptText && !commandText && !targetFile) {
-    console.error('Usage: node .codex/ukit/index/route-task.mjs "<prompt>" [--tool-command <cmd>] [--target <file>] [--type trivial|simple|non-trivial] [--session-id <id>] [--adapter codex|claude|antigravity|opencode]');
+    console.error('Usage: node .codex/ukit/index/route-task.mjs "<prompt>" [--tool-command <cmd>] [--target <file>] [--type trivial|simple|non-trivial] [--session-id <id>] [--adapter codex|claude|antigravity]');
     process.exitCode = 1;
     return;
   }

package/templates/.claude/ukit/skill-router-state.json

@@ -0,0 +1 @@
+{"fingerprint":"routefp-v3:VKbWKdhO0GSCeYRnXINdC_39mkvjp8UX9-pC9T_y3yQ","ts":1789910232582,"source":"skill-router","activeSkills":[],"routingContext":{"lastExplicitUserPromptText":"","taskType":null,"intentMode":null,"executionMode":null}}

package/templates/.codex/README.md

@@ -8,7 +8,7 @@ Auto-generated by UKit for OpenAI Codex.
 ## Core UKit Rule
 
 - Human-facing workflow should optimize for one remembered command: `ukit install`.
-- After install, normal work should feel natural inside **Claude/Codex/OpenCode/omp**.
+- After install, normal work should feel natural inside **Claude/Codex/omp**.
 - **Quality first, then speed, then token discipline**: do not waste reads, logs, or repeated helper output.
 - **Never stop after read-only steps.** For implement/apply/fix requests, continue to actual Edit/Write and verification in the same turn.
 

package/templates/.codex/settings.json

@@ -233,7 +233,6 @@
       },
       "agentContext": {
         "preserveClaudePreCompact": true,
-        "preserveOpenCodeCompaction": true,
         "codexSoftHandoff": {
           "autoCompact": true,
           "budgetTokens": 100000,

package/templates/.omp/agents/bug-debugger.md

@@ -49,7 +49,7 @@ Systematic debugging — understand before fixing.
 
 ```
 STATUS: DONE | BLOCKED | PARTIAL
-EXECUTOR_TOOL: [claude-code | kilo-code | codex | opencode | other]
+EXECUTOR_TOOL: [claude-code | kilo-code | codex | other]
 EXECUTOR_MODEL: [exact model name you are running as. "unknown" if you cannot tell.]
 EXECUTOR_SUBAGENT: [subagent name within your host, if any, else "-"]
 SUMMARY: [1-2 sentences — root cause and fix]

package/templates/.omp/agents/feature-implementer.md

@@ -71,7 +71,7 @@ and even then, report it, don't ask about it.
 
 ```
 STATUS: DONE | BLOCKED | PARTIAL
-EXECUTOR_TOOL: [claude-code | kilo-code | codex | opencode | other]
+EXECUTOR_TOOL: [claude-code | kilo-code | codex | other]
 EXECUTOR_MODEL: [exact model name you are running as — e.g. unic-code, claude-sonnet-4-5, gpt-5-mini. If you truly cannot tell, write "unknown" — reviewer treats unknown as suspicious and asks the human to confirm.]
 EXECUTOR_SUBAGENT: [name of the subagent you are, if your host has multiple — e.g. "Kilo:code", "Claude:feature-implementer". Otherwise "-".]
 SUMMARY: [1-2 sentences of what was implemented]

package/templates/.omp/agents/ukit-small-task-maintainer.md

@@ -24,7 +24,7 @@ You are UKit's internal small-task maintainer. You run as a sidecar/parallel/non
 - Summarizing `docs/STATUS.md`, `docs/TASKS.md`, `docs/WORKLOG.md`, or memory snippets into compact handoff notes.
 - Deciding fast vs slow lane, safe vs risky lane, whether a skill should be activated, and whether the current prompt has enough steps planned.
 - Choosing compact-now vs compact-later and summarize-vs-keep-detail for UKit context hygiene.
-- Keeping agent context compact without removing existing lanes: Claude PreCompact/reinject stays active, OpenCode native auto/prune compaction stays active, and Codex Desktop soft handoffs use `compact.codexContext.compactTarget` (default 150 lines; preferred 120-150; hard max 170) while preserving critical state.
+- Keeping agent context compact without removing existing lanes: Claude PreCompact/reinject stays active and Codex Desktop soft handoffs use `compact.codexContext.compactTarget` (default 150 lines; preferred 120-150; hard max 170) while preserving critical state.
 - Small, reversible UKit runtime maintenance decisions.
 
 ## Never Use For
@@ -45,7 +45,7 @@ You are UKit's internal small-task maintainer. You run as a sidecar/parallel/non
 5. If safe, make the smallest cleanup/summary/classification/routing decision.
 6. Follow the CoDev priority order: output quality first, then safety, then speed, then token discipline. Spend tokens/steps when they protect correctness.
 7. Use small step budgets: trivial = 1 step, simple = up to 2 steps, non-trivial = up to 4 planned steps before the main model reassesses.
-8. For long sessions, preserve existing Claude/OpenCode auto-compact behavior; for Codex Desktop, target a compact handoff of about 120-150 lines, never above 170 lines for this lane, not a full transcript replay.
+8. For long sessions, preserve existing Claude auto-compact behavior; for Codex Desktop, target a compact handoff of about 120-150 lines, never above 170 lines for this lane, not a full transcript replay.
 9. Preserve user-owned content; do not delete unclear tasks.
 10. Report exactly what changed or what decision was made.
 

package/templates/.omp/config.yml

@@ -36,14 +36,17 @@ tools:
   # TASK-004 hook-bridge deny chain, and this approval map still gate dangerous
   # ops — `allow` removes interactive prompts, not the deny checks.
   # Residual risk: yolo + all-allow IS dangerously autonomous and is a
-  # deliberate, user-chosen posture (unattended mode). `eval` stays `allow`
-  # (was `prompt` pre-TASK-001): bash.patterns never covers the eval tool, but
-  # the TASK-004 bridge maps `eval` -> `Bash`, so every eval call is gated by
-  # the same block-dangerous chain as a bash command.
+  # deliberate, user-chosen posture (unattended mode). `eval` renders from the
+  # `orchestration.allowUnsafeEval` knob in .ukit/storage/config.json — `allow`
+  # only on explicit user opt-in, else `deny` (never `prompt`/`ask`: a prompt
+  # dead-ends under unattended). bash.patterns never covers the eval tool —
+  # eval payloads (os.remove, shutil.rmtree, subprocess) bypass the text deny —
+  # but the TASK-004 bridge maps `eval` -> `Bash`, so an opted-in `allow` is
+  # still gated by the same block-dangerous chain as a bash command.
   approvalMode: yolo
   approval:
     bash: allow
-    eval: allow
+    eval: "{{omp.evalApproval}}"
     task: allow
     read: allow
     grep: allow
@@ -61,8 +64,9 @@ bash:
   # allow is NOT a universal escape hatch: any compound command (`&&`, `;`, `|`) not itself caught
   # by a `deny`/`prompt` entry falls through to `tools.approvalMode` instead of being auto-allowed.
   # `bash.patterns` does not cover the `eval` tool at all — that is why TASK-004's bridge
-  # separately maps `eval` -> `Bash`, and why `tools.approval.eval: allow` above does NOT
-  # weaken eval safety: eval stays gated by the bridge's Bash chain (TASK-001).
+  # separately maps `eval` -> `Bash`, and why an opted-in `tools.approval.eval: allow`
+  # (orchestration.allowUnsafeEval) does NOT weaken eval safety: eval stays gated by
+  # the bridge's Bash chain (TASK-001). Default render is `deny` (fail-closed).
   patterns:
     - match: "rm -rf /*"
       approval: deny
@@ -74,6 +78,8 @@ bash:
       approval: deny
     - match: "git push --force*"
       approval: deny
+    - match: "git push --force-with-lease*"
+      approval: deny
     - match: "git push -f *"
       approval: deny
     - match: "git reset --hard*"

package/templates/.ukit/storage/cache/hook-latency/unknown.jsonl

@@ -0,0 +1,4 @@
+{"v":1,"ts":1789910222307,"hook":"hook-chain-runner","elapsedMs":2,"outcome":"error","hookEvent":"PreToolUse","toolName":"Edit","toolUseId":null,"budgetMs":28000,"budgetExhausted":false,"scripts":[{"scriptName":"protect-files.sh","code":1,"killed":false,"failureKind":"error","elapsedMs":2}]}
+{"v":1,"ts":1789910232531,"hookEvent":"PreToolUse","toolName":"Edit","toolUseId":null,"hook":"protect-files.sh","elapsedMs":29,"outcome":"ok"}
+{"v":1,"ts":1789910232602,"hookEvent":"PreToolUse","toolName":"Edit","toolUseId":null,"hook":"skill-router.sh","elapsedMs":44,"outcome":"ok"}
+{"v":1,"ts":1789910232609,"hook":"hook-chain-runner","elapsedMs":580,"outcome":"ok","hookEvent":"PreToolUse","toolName":"Edit","toolUseId":null,"budgetMs":28000,"budgetExhausted":false,"scripts":[{"scriptName":"protect-files.sh","code":0,"killed":false,"failureKind":"ok","elapsedMs":510},{"scriptName":"skill-router.sh","code":0,"killed":false,"failureKind":"ok","elapsedMs":70}]}