@open-agent-toolkit/cli 0.1.46 → 0.1.48

package/dist/config/resolve.js

@@ -1,4 +1,4 @@
-import { BUILTIN_EXEC_TARGETS, readOatConfig, readOatLocalConfig, readUserConfig, } from './oat-config.js';
+import { BUILTIN_EXEC_TARGETS, isWorkflowDispatchCandidateLadder, readOatConfig, readOatLocalConfig, readUserConfig, } from './oat-config.js';
 const DEFAULT_DEPENDENCIES = {
     readOatConfig,
     readOatLocalConfig,
@@ -167,6 +167,53 @@ export function resolveExecTargets(effective) {
     }
     return targets;
 }
+export function resolveExecTargetViews(effective) {
+    const targets = cloneExecTargetRegistry(BUILTIN_EXEC_TARGETS);
+    const views = Object.fromEntries(Object.entries(targets).map(([id, target]) => [
+        id,
+        {
+            target: cloneExecTarget(target),
+            origin: 'builtin',
+            explicitlyConfigured: false,
+            enabled: true,
+        },
+    ]));
+    for (const [origin, layer] of [
+        ['user', effective.user.workflow?.gates?.execTargets],
+        ['shared', effective.shared.workflow?.gates?.execTargets],
+        ['local', effective.local.workflow?.gates?.execTargets],
+    ]) {
+        if (!layer) {
+            continue;
+        }
+        for (const [id, override] of Object.entries(layer)) {
+            if (override === null) {
+                const target = targets[id] ?? views[id]?.target;
+                delete targets[id];
+                if (target) {
+                    views[id] = {
+                        target: cloneExecTarget(target),
+                        origin,
+                        explicitlyConfigured: true,
+                        enabled: false,
+                    };
+                }
+                continue;
+            }
+            mergeExecTargetLayer(targets, { [id]: override });
+            const target = targets[id];
+            if (target) {
+                views[id] = {
+                    target: cloneExecTarget(target),
+                    origin,
+                    explicitlyConfigured: true,
+                    enabled: true,
+                };
+            }
+        }
+    }
+    return views;
+}
 function mergeExecTargetLayer(targets, layer) {
     if (!layer) {
         return;
@@ -181,6 +228,7 @@ function mergeExecTargetLayer(targets, layer) {
             targets[id] = cloneExecTarget({
                 runtime: override.runtime ?? existing.runtime,
                 baseCommand: override.baseCommand ?? existing.baseCommand,
+                invocation: mergeExecTargetInvocation(existing.invocation, override.invocation),
                 models: override.models ?? existing.models,
                 hostDetectionCommand: override.hostDetectionCommand ?? existing.hostDetectionCommand,
                 availabilityCommand: override.availabilityCommand ?? existing.availabilityCommand,
@@ -209,6 +257,9 @@ function cloneExecTarget(target) {
     if (target.hostDetectionCommand) {
         next.hostDetectionCommand = [...target.hostDetectionCommand];
     }
+    if (target.invocation) {
+        next.invocation = { ...target.invocation };
+    }
     if (target.availabilityCommand) {
         next.availabilityCommand = [...target.availabilityCommand];
     }
@@ -229,6 +280,9 @@ function toCompleteExecTarget(target) {
             ? target.priority
             : 0,
     };
+    if (target.invocation) {
+        completeTarget.invocation = { ...target.invocation };
+    }
     if (isValidArgv(target.hostDetectionCommand)) {
         completeTarget.hostDetectionCommand = [...target.hostDetectionCommand];
     }
@@ -240,6 +294,15 @@ function toCompleteExecTarget(target) {
     }
     return completeTarget;
 }
+function mergeExecTargetInvocation(existing, override) {
+    if (!existing && !override) {
+        return undefined;
+    }
+    return {
+        ...existing,
+        ...override,
+    };
+}
 function isValidStringList(value) {
     return (Array.isArray(value) &&
         value.length > 0 &&
@@ -264,7 +327,8 @@ function flattenConfig(value, prefix = '') {
             continue;
         }
         const nextKey = prefix ? `${prefix}.${key}` : key;
-        if (isRecord(nestedValue)) {
+        if (isRecord(nestedValue) &&
+            !isWorkflowDispatchCandidateLadder(nestedValue)) {
             Object.assign(flattened, flattenConfig(nestedValue, nextKey));
             continue;
         }

package/dist/engine/index.d.ts

@@ -5,5 +5,5 @@ export { configureLocalHooksPath, getHookInstallInfo, HOOK_DRIFT_WARNING, HOOK_M
 export type { HookInstallInfo, HookStatus } from './hook.js';
 export { hasMarker, insertMarker, OAT_DIRECTORY_SENTINEL, OAT_MARKER_PREFIX, writeDirectorySentinel, } from './markers.js';
 export type { CanonicalEntry } from './scanner.js';
-export { scanCanonical } from './scanner.js';
+export { scanBundledManagedCodexAgents, scanCanonical } from './scanner.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/engine/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/dist/engine/index.js

@@ -3,4 +3,4 @@ export { SYNC_OPERATION_TYPES, } from './engine.types.js';
 export { executeSyncPlan } from './execute-plan.js';
 export { configureLocalHooksPath, getHookInstallInfo, HOOK_DRIFT_WARNING, HOOK_MARKER_END, HOOK_MARKER_START, HOOK_STRAY_INFO, installHook, isHookInstalled, REPO_GITHOOKS_PATH, runHookCheck, uninstallHook, } from './hook.js';
 export { hasMarker, insertMarker, OAT_DIRECTORY_SENTINEL, OAT_MARKER_PREFIX, writeDirectorySentinel, } from './markers.js';
-export { scanCanonical } from './scanner.js';
+export { scanBundledManagedCodexAgents, scanCanonical } from './scanner.js';

package/dist/engine/scanner.d.ts

@@ -6,6 +6,7 @@ export interface CanonicalEntry {
     canonicalPath: string;
     isFile: boolean;
 }
+export declare function scanBundledManagedCodexAgents(): Promise<CanonicalEntry[]>;
 export declare function scanCanonical(basePath: string, scope: ConcreteScope): Promise<CanonicalEntry[]>;
 export {};
 //# sourceMappingURL=scanner.d.ts.map

package/dist/engine/scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/engine/scanner.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAEhE,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AA0DD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,EAAE,CAAC,CA2B3B"}
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/engine/scanner.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,KAAK,EACX,MAAM,eAAe,CAAC;AAEvB,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AA0DD,wBAAsB,6BAA6B,IAAI,OAAO,CAC5D,cAAc,EAAE,CACjB,CAsBA;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,EAAE,CAAC,CA2B3B"}

package/dist/engine/scanner.js

@@ -1,7 +1,8 @@
 import { readdir } from 'node:fs/promises';
 import { join, resolve } from 'node:path';
 import { CliError } from '../errors/index.js';
-import { SCOPE_CONTENT_TYPES } from '../shared/types.js';
+import { resolveAssetsRoot } from '../fs/assets.js';
+import { SCOPE_CONTENT_TYPES, USER_SCOPE_MANAGED_AGENT_FILES, } from '../shared/types.js';
 function canonicalDirectoryName(contentType) {
     if (contentType === 'skill') {
         return 'skills';
@@ -42,6 +43,21 @@ async function readEntries(dirPath) {
         throw error;
     }
 }
+export async function scanBundledManagedCodexAgents() {
+    const agentsDir = join(await resolveAssetsRoot(), 'agents');
+    const entries = await readEntries(agentsDir);
+    const available = new Set(entries.filter((entry) => entry.isFile).map((entry) => entry.name));
+    const missing = USER_SCOPE_MANAGED_AGENT_FILES.filter((name) => !available.has(name));
+    if (missing.length > 0) {
+        throw new CliError(`Bundled managed Codex role definitions are unavailable: ${missing.join(', ')}. Reinstall or rebuild OAT before running user sync.`);
+    }
+    return USER_SCOPE_MANAGED_AGENT_FILES.map((name) => ({
+        name,
+        type: 'agent',
+        canonicalPath: join(agentsDir, name),
+        isFile: true,
+    }));
+}
 export async function scanCanonical(basePath, scope) {
     const scopeRoot = resolve(basePath);
     const entries = [];

package/dist/fs/paths.d.ts

@@ -5,5 +5,9 @@ export declare function resolveScopeRoot(scope: ConcreteScope, cwd: string, home
 export declare function toPosixPath(pathValue: string): string;
 export declare function normalizeToPosixPath(pathValue: string): string;
 export declare function validatePathWithinScope(candidatePath: string, scopeRoot: string): string;
+export declare function validateRealPathWithinScope(candidatePath: string, scopeRoot: string): Promise<{
+    realScopeRoot: string;
+    realPath: string;
+}>;
 export {};
 //# sourceMappingURL=paths.d.ts.map

package/dist/fs/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/fs/paths.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBrE;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/fs/paths.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBrE;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBtD"}

package/dist/fs/paths.js

@@ -1,4 +1,4 @@
-import { access } from 'node:fs/promises';
+import { access, realpath } from 'node:fs/promises';
 import { dirname, posix, resolve, sep } from 'node:path';
 import { CliError } from '../errors/index.js';
 export async function resolveProjectRoot(cwd) {
@@ -40,3 +40,20 @@ export function validatePathWithinScope(candidatePath, scopeRoot) {
     }
     return resolvedCandidatePath;
 }
+export async function validateRealPathWithinScope(candidatePath, scopeRoot) {
+    const resolvedCandidatePath = validatePathWithinScope(candidatePath, scopeRoot);
+    let realScopeRoot;
+    let realCandidatePath;
+    try {
+        [realScopeRoot, realCandidatePath] = await Promise.all([
+            realpath(resolve(scopeRoot)),
+            realpath(resolvedCandidatePath),
+        ]);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? `: ${error.message}` : '';
+        throw new CliError(`Unable to resolve real path for ${candidatePath} within scope root ${scopeRoot}${detail}`);
+    }
+    validatePathWithinScope(realCandidatePath, realScopeRoot);
+    return { realScopeRoot, realPath: realCandidatePath };
+}

package/dist/providers/ceiling/registry.d.ts

@@ -27,6 +27,7 @@ export type CeilingDispatchArgs = {
 } | {
     model: string;
 } | null;
+export declare function isDirectDispatchRoleName(value: string): boolean;
 export interface ProviderCeilingAdapter {
     provider: string;
     supportsCeiling: boolean;

package/dist/providers/ceiling/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/providers/ceiling/registry.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,IAAI,CAAC;AAET,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,qBAAqB,GACzB,mBAAmB,CAAC;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;CACtE;AAMD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAK9C,CAAC;AAqGF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAE1E"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/providers/ceiling/registry.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,IAAI,CAAC;AAKT,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,qBAAqB,GACzB,mBAAmB,CAAC;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;CACtE;AAMD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAK9C,CAAC;AA4GF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAE1E"}

package/dist/providers/ceiling/registry.js

@@ -1,5 +1,9 @@
 import { VALID_CLAUDE_DISPATCH_CEILINGS, VALID_CODEX_DISPATCH_CEILINGS, } from '../../config/oat-config.js';
-import { buildCodexMaterializedRoleName } from '../codex/codec/materialize.js';
+import { buildCodexMaterializedTargetRoleName } from '../codex/codec/shared.js';
+const DIRECT_DISPATCH_ROLE_PATTERN = /^oat-(?:phase-implementer|reviewer)(?:-|$)/;
+export function isDirectDispatchRoleName(value) {
+    return DIRECT_DISPATCH_ROLE_PATTERN.test(value.trim());
+}
 /** Codex materialized-role base names (must match sync-extension output). */
 const CODEX_IMPLEMENTER_ROLE = 'oat-phase-implementer';
 const CODEX_REVIEWER_ROLE = 'oat-reviewer';
@@ -20,12 +24,14 @@ const codexAdapter = {
             return null;
         }
         const target = ctx.target;
-        if (!target?.model || !target.effort) {
+        if (!target?.model ||
+            !target.effort ||
+            isDirectDispatchRoleName(target.model)) {
             return null;
         }
         const baseRole = role === 'reviewer' ? CODEX_REVIEWER_ROLE : CODEX_IMPLEMENTER_ROLE;
         return {
-            variant: buildCodexMaterializedRoleName({
+            variant: buildCodexMaterializedTargetRoleName({
                 agentName: baseRole,
                 model: target.model,
                 effort: target.effort,
@@ -55,7 +61,8 @@ const claudeAdapter = {
     validValues: [...VALID_CLAUDE_DISPATCH_CEILINGS],
     mechanism: 'model-arg',
     compileToDispatchArgs(value) {
-        if (!VALID_CLAUDE_DISPATCH_CEILINGS.includes(value)) {
+        if (isDirectDispatchRoleName(value) ||
+            !VALID_CLAUDE_DISPATCH_CEILINGS.includes(value)) {
             return null;
         }
         return { model: value };
@@ -72,7 +79,7 @@ const cursorAdapter = {
     mechanism: 'model-arg',
     compileToDispatchArgs(value) {
         const model = value.trim();
-        return model ? { model } : null;
+        return model && !isDirectDispatchRoleName(model) ? { model } : null;
     },
     // Cursor model slugs do not share a total order, so upgrade verification is
     // not meaningful here; availability is checked by the identity oracle layer.

package/dist/providers/codex/codec/catalog.d.ts

@@ -0,0 +1,14 @@
+export { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export declare const SUPPORTED_CODEX_BASE_ROLES: readonly ["oat-phase-implementer", "oat-reviewer"];
+export interface SupportedCodexRoleCatalogueEntry {
+    baseRole: (typeof SUPPORTED_CODEX_BASE_ROLES)[number];
+    model: string;
+    effort: string;
+    roleName: string;
+}
+export declare function isSupportedCodexRoleTarget(target: {
+    model: string;
+    effort: string;
+}): boolean;
+export declare function expandSupportedCodexRoleCatalogue(): SupportedCodexRoleCatalogueEntry[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/providers/codex/codec/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC;AAExD,eAAO,MAAM,0BAA0B,oDAG7B,CAAC;AAEX,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAKV;AAED,wBAAgB,iCAAiC,IAAI,gCAAgC,EAAE,CAYtF"}

package/dist/providers/codex/codec/catalog.js

@@ -0,0 +1,21 @@
+import { buildCodexMaterializedRoleName } from './materialize.js';
+import { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export const SUPPORTED_CODEX_BASE_ROLES = [
+    'oat-phase-implementer',
+    'oat-reviewer',
+];
+export function isSupportedCodexRoleTarget(target) {
+    return SUPPORTED_CODEX_ROLE_TARGETS.some((supported) => supported.model === target.model && supported.effort === target.effort);
+}
+export function expandSupportedCodexRoleCatalogue() {
+    return SUPPORTED_CODEX_BASE_ROLES.flatMap((baseRole) => SUPPORTED_CODEX_ROLE_TARGETS.map((target) => ({
+        baseRole,
+        ...target,
+        roleName: buildCodexMaterializedRoleName({
+            agentName: baseRole,
+            model: target.model,
+            effort: target.effort,
+        }),
+    }))).sort((left, right) => left.roleName.localeCompare(right.roleName));
+}

package/dist/providers/codex/codec/materialize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/materialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGhE,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,8BAA8B,CAAC,EAC7C,SAAS,EACT,KAAK,EACL,MAAM,GACP,EAAE,gCAAgC,GAAG,MAAM,CAa3C;AAWD,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EACL,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,GAAG,eAAe,CA+B/C"}
+{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/materialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGhE,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,mBAAmB,CAAC;AAM3B,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,8BAA8B,CAAC,EAC7C,SAAS,EACT,KAAK,EACL,MAAM,GACP,EAAE,gCAAgC,GAAG,MAAM,CAY3C;AAWD,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EACL,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,GAAG,eAAe,CA+B/C"}

package/dist/providers/codex/codec/materialize.js

@@ -1,6 +1,6 @@
 import { CliError } from '../../../errors/index.js';
 import { exportCanonicalAgentToCodexRole, } from './export-to-codex.js';
-import { normalizeCodexRoleName, sanitizeCodexRoleName } from './shared.js';
+import { buildCodexMaterializedTargetRoleName, sanitizeCodexRoleName, } from './shared.js';
 function requireNonEmpty(value, label) {
     const normalized = value.trim();
     if (!normalized) {
@@ -9,10 +9,11 @@ function requireNonEmpty(value, label) {
     return normalized;
 }
 export function buildCodexMaterializedRoleName({ agentName, model, effort, }) {
-    const normalizedAgentName = sanitizeCodexRoleName(agentName);
-    const normalizedModel = normalizeCodexRoleName(model);
-    const normalizedEffort = normalizeCodexRoleName(effort);
-    const roleName = normalizeCodexRoleName(`${normalizedAgentName}-${normalizedModel}-${normalizedEffort}`);
+    const roleName = buildCodexMaterializedTargetRoleName({
+        agentName,
+        model,
+        effort,
+    });
     if (!roleName) {
         throw new CliError('Cannot materialize Codex role: missing role name.');
     }

package/dist/providers/codex/codec/shared.d.ts

@@ -1,8 +1,27 @@
 export declare const OAT_MANAGED_ROLE_HEADER = "# oat-managed: true";
 export declare const OAT_MANAGED_ROLE_NAME_PREFIX = "# oat-role: ";
+export declare const OAT_MANAGED_ROLE_OWNER_PREFIX = "# oat-owner: ";
+export type CodexRoleOwner = 'supported-catalogue' | 'user-config' | 'project-config';
+export declare const SUPPORTED_CODEX_ROLE_TARGETS: readonly ({
+    model: string;
+    effort: "high" | "medium" | "low" | "xhigh";
+} | {
+    model: string;
+    effort: "high" | "medium" | "low" | "xhigh";
+} | {
+    model: string;
+    effort: string;
+})[];
 export declare function sanitizeCodexRoleName(input: string): string;
 export declare function normalizeCodexRoleName(input: string): string;
+export declare function buildCodexMaterializedTargetRoleName(options: {
+    agentName: string;
+    model: string;
+    effort: string;
+}): string;
 export declare function isOatManagedCodexRoleFile(content: string, roleName?: string): boolean;
 export declare function withOatManagedCodexHeader(roleName: string, tomlBody: string): string;
+export declare function readOatManagedCodexRoleOwner(content: string): CodexRoleOwner | null;
+export declare function withOatManagedCodexRoleOwner(content: string, owner: CodexRoleOwner): string;
 export declare function stringifyToml(object: Record<string, unknown>): string;
 //# sourceMappingURL=shared.d.ts.map

package/dist/providers/codex/codec/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/shared.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAUT;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/shared.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAC3D,eAAO,MAAM,6BAA6B,kBAAkB,CAAC;AAE7D,MAAM,MAAM,cAAc,GACtB,qBAAqB,GACrB,aAAa,GACb,gBAAgB,CAAC;AAoBrB,eAAO,MAAM,4BAA4B;;;;;;;;;IAa/B,CAAC;AAEX,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO5D;AAQD,wBAAgB,oCAAoC,CAAC,OAAO,EAAE;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAiBT;AAgDD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAOT;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,GACd,cAAc,GAAG,IAAI,CAEvB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,GACpB,MAAM,CAkBR;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE"}

package/dist/providers/codex/codec/shared.js

@@ -1,6 +1,30 @@
+import { createHash } from 'node:crypto';
 import TOML from '@iarna/toml';
 export const OAT_MANAGED_ROLE_HEADER = '# oat-managed: true';
 export const OAT_MANAGED_ROLE_NAME_PREFIX = '# oat-role: ';
+export const OAT_MANAGED_ROLE_OWNER_PREFIX = '# oat-owner: ';
+const CODEX_ROLE_MARKER_PATTERN = /^# oat-role: ([a-zA-Z0-9_-]+)$/;
+const CODEX_OWNER_MARKER_PATTERN = /^# oat-owner: (supported-catalogue|user-config|project-config)$/;
+const STANDARD_SUPPORTED_CODEX_EFFORTS = [
+    'low',
+    'medium',
+    'high',
+    'xhigh',
+];
+export const SUPPORTED_CODEX_ROLE_TARGETS = [
+    ...STANDARD_SUPPORTED_CODEX_EFFORTS.map((effort) => ({
+        model: 'gpt-5.6-luna',
+        effort,
+    })),
+    ...STANDARD_SUPPORTED_CODEX_EFFORTS.map((effort) => ({
+        model: 'gpt-5.6-terra',
+        effort,
+    })),
+    ...[...STANDARD_SUPPORTED_CODEX_EFFORTS, 'max'].map((effort) => ({
+        model: 'gpt-5.6-sol',
+        effort,
+    })),
+];
 export function sanitizeCodexRoleName(input) {
     return normalizeCodexRoleName(input.replace(/\.md$/i, ''));
 }
@@ -12,18 +36,87 @@ export function normalizeCodexRoleName(input) {
         .replace(/-{2,}/g, '-')
         .replace(/^-+|-+$/g, '');
 }
+function isSupportedCodexRoleTarget(model, effort) {
+    return SUPPORTED_CODEX_ROLE_TARGETS.some((supported) => supported.model === model && supported.effort === effort);
+}
+export function buildCodexMaterializedTargetRoleName(options) {
+    const normalizedAgentName = sanitizeCodexRoleName(options.agentName);
+    const normalizedModel = normalizeCodexRoleName(options.model);
+    const normalizedEffort = normalizeCodexRoleName(options.effort);
+    const customTargetSuffix = isSupportedCodexRoleTarget(options.model, options.effort)
+        ? ''
+        : `-${createHash('sha256')
+            .update(`${options.model}\0${options.effort}`)
+            .digest('hex')
+            .slice(0, 10)}`;
+    return normalizeCodexRoleName(`${normalizedAgentName}-${normalizedModel}-${normalizedEffort}${customTargetSuffix}`);
+}
+function parseOatManagedCodexRoleHeader(content) {
+    const lines = content
+        .split('\n')
+        .map((line) => (line.endsWith('\r') ? line.slice(0, -1) : line));
+    const headerLines = [];
+    for (const line of lines) {
+        if (!line.startsWith('# oat-')) {
+            break;
+        }
+        headerLines.push(line);
+    }
+    if (headerLines.length < 2 ||
+        headerLines.length > 3 ||
+        headerLines[0] !== OAT_MANAGED_ROLE_HEADER) {
+        return null;
+    }
+    const roleMatch = CODEX_ROLE_MARKER_PATTERN.exec(headerLines[1]);
+    if (!roleMatch) {
+        return null;
+    }
+    let owner = null;
+    let ownerLineIndex = null;
+    if (headerLines.length === 3) {
+        const ownerMatch = CODEX_OWNER_MARKER_PATTERN.exec(headerLines[2]);
+        if (!ownerMatch) {
+            return null;
+        }
+        owner = ownerMatch[1];
+        ownerLineIndex = 2;
+    }
+    return {
+        roleName: roleMatch[1],
+        roleLineIndex: 1,
+        owner,
+        ownerLineIndex,
+    };
+}
 export function isOatManagedCodexRoleFile(content, roleName) {
-    if (!content.includes(OAT_MANAGED_ROLE_HEADER)) {
+    const header = parseOatManagedCodexRoleHeader(content);
+    if (!header) {
         return false;
     }
-    if (!roleName) {
-        return true;
-    }
-    return content.includes(`${OAT_MANAGED_ROLE_NAME_PREFIX}${roleName}`);
+    return roleName === undefined || header.roleName === roleName;
 }
 export function withOatManagedCodexHeader(roleName, tomlBody) {
     return `${OAT_MANAGED_ROLE_HEADER}\n${OAT_MANAGED_ROLE_NAME_PREFIX}${roleName}\n${tomlBody}`;
 }
+export function readOatManagedCodexRoleOwner(content) {
+    return parseOatManagedCodexRoleHeader(content)?.owner ?? null;
+}
+export function withOatManagedCodexRoleOwner(content, owner) {
+    const header = parseOatManagedCodexRoleHeader(content);
+    if (!header) {
+        return content;
+    }
+    const lines = content.split('\n');
+    const ownerLine = `${OAT_MANAGED_ROLE_OWNER_PREFIX}${owner}`;
+    const usesCarriageReturn = lines[header.roleLineIndex]?.endsWith('\r') ?? false;
+    const encodedOwnerLine = `${ownerLine}${usesCarriageReturn ? '\r' : ''}`;
+    if (header.ownerLineIndex !== null) {
+        lines[header.ownerLineIndex] = encodedOwnerLine;
+        return lines.join('\n');
+    }
+    lines.splice(header.roleLineIndex + 1, 0, encodedOwnerLine);
+    return lines.join('\n');
+}
 export function stringifyToml(object) {
     return TOML.stringify(object);
 }

package/dist/providers/codex/codec/sync-extension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-extension.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/sync-extension.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAUpD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,UAAU,iCAAiC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAmYD,wBAAsB,gCAAgC,CACpD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,cAAc,EAAE,EAClC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CA0H7B;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CA6BpC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAaA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,kBAAkB,GACvB,uBAAuB,EAAE,CAQ3B"}
+{"version":3,"file":"sync-extension.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/sync-extension.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAqBpD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD,UAAU,iCAAiC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAwhBD,wBAAsB,gCAAgC,CACpD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,cAAc,EAAE,EAClC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CA+I7B;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CA6BpC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAaA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,kBAAkB,GACvB,uBAAuB,EAAE,CAQ3B"}