@open-agent-toolkit/cli 0.1.50 → 0.1.52

package/assets/skills/oat-project-pr-final/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-pr-final
-version: 1.4.1
+version: 1.4.2
 description: Use when the user requests or confirms opening the final PR for an active OAT project — e.g. "open the final PR", "ship it", "run oat-project-pr-final", or confirms a previously offered final-PR step. Do NOT auto-invoke when phases are marked complete. Generates the final lifecycle PR description from artifacts and creates the PR.
 disable-model-invocation: false
 user-invocable: true
@@ -168,6 +168,13 @@ If `FINAL_ROW` is missing or does not contain `passed`:
 
 ### Step 3: Collect Project Summary
 
+Before generating a summary, inspect `oat_post_implement_sequence`. Reuse a
+completed `summary` step instead of regenerating it; when no completed sequence
+summary exists, retain normal summary generation. Every state update in this
+skill must merge with, never replace, `oat_post_implement_sequence`. If a PR
+was partially created, reconcile the durable PR state before retrying its `pr`
+sequence step.
+
 **Step 3.0: Check for summary.md**
 
 Check if `{PROJECT_PATH}/summary.md` exists:

package/assets/skills/oat-project-quick-start/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-quick-start
-version: 2.1.13
+version: 2.1.14
 description: Use when a task is small enough for quick mode or rapid iteration is preferred. Scaffolds a lightweight OAT project from discovery directly to a runnable plan, with optional brainstorming and lightweight design.
 argument-hint: '<project-name> ["project description"]'
 oat_gateable: true
@@ -563,20 +563,20 @@ copy compiled provider targets into this shape or user config. `Uncapped` and
 `Inherit Host Defaults` remain explicit modes; `Leave Unresolved` and
 non-interactive unresolved state are not implementation-ready.
 
-### Step 3.55: Configure Optional Phase Review
+### Step 3.55: Configure Optional Phase Gate Review
 
 After the generated quick plan has stable phase IDs and before Step 3.6 starts
-the plan artifact review, invoke the `Shared Phase-Review Setup Contract` from
+the plan artifact review, invoke the `Shared Phase Gate Review Setup Contract` from
 `oat-project-plan-writing`.
 
 If `plan.md` already contains an explicit `oat_phase_review_gate`, preserve it
 through the shared contract without probing, prompting, or mutation. Otherwise
 let the contract probe qualifying targets and offer all phases, selected
 phases, or disabled. If the probe fails, no target qualifies, or the user
-declines, leave phase review disabled and continue with the contract's concise
+declines, leave Phase gate review disabled and continue with the contract's concise
 status output.
 
-This phase-review setup is independent from HiLL checkpoints. Do not read or
+This Phase gate review setup is independent from HiLL checkpoints. Do not read or
 change HiLL fields here, and do not add a provider/model `--target` to any
 lifecycle command.
 

package/assets/skills/oat-project-review-provide/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-provide
-version: 1.3.13
+version: 1.3.14
 description: Use when the user explicitly asks to review an OAT project — e.g. "review project", "review the project", "run project review", or confirms a previously offered review. Do NOT auto-invoke on completed work alone. Resolves a project review scope and offers before running.
 disable-model-invocation: false
 user-invocable: true
@@ -555,13 +555,16 @@ fallbacks.
 A concrete managed Codex target takes precedence over tier availability.
 Build the actual provider invocation before reporting the target as enforced:
 
-- Codex uses the exact registered reviewer role or variant from
-  `providers.codex.dispatchArgs.variant` when selectable. If the current host
-  cannot select it, launch a fresh Codex child with the resolver target's
-  explicit model, reasoning effort, canonical role instructions from
-  `.agents/agents/oat-reviewer.md`, and the same Review Scope payload.
-  If that fresh child is unavailable, use only a verified-equivalent inline
-  route or block the review.
+- Codex must send the resolver-returned Codex variant first as the native
+  `agent_type`. Spawn acceptance plus the complete launcher payload is
+  configured invocation evidence; it does not require reviewer self-report or
+  separate runtime telemetry. A native role-selection rejection means an
+  explicit host rejection of that exact `agent_type` before any reviewer or
+  child starts. Only after that pre-start rejection may the workflow launch a
+  fresh Codex child with the resolver target's explicit model, reasoning
+  effort, canonical role instructions from `.agents/agents/oat-reviewer.md`,
+  and the same Review Scope payload. If neither exact route is available, use
+  only a verified-equivalent inline route or block the review.
 - Claude requires a non-empty `providers.claude.dispatchArgs.model`; the actual
   provider invocation must include that exact value as its `model` argument.
 - Cursor requires a non-empty `providers.cursor.dispatchArgs.model`; the actual
@@ -573,6 +576,18 @@ candidate ladder, fail closed before review. Route interactive repair through
 the planning workflow's `Complete Dispatch Ladder Adoption Contract`; do not
 invent a reviewer target.
 
+After constructing the complete provider payload, record the launcher-owned
+`target`, `model_axis`, and `effort_axis` with
+`launcher-selected/config-declared` provenance. These fields are immutable:
+missing telemetry, missing reviewer self-report, or contradictory self-report
+must not populate, replace, or overwrite them and must not trigger fallback.
+
+Once the native host accepts a reviewer, every terminal result is an
+authoritative review outcome. An accepted reviewer returning `BLOCKED` is a
+terminal blocking review outcome: it blocks the review and does not invoke or
+trigger the fresh-child fallback. Absent findings from that terminal must not
+be parsed, interpreted, or treated as a passing review.
+
 On timeout or retry, reuse the same exact role or complete invocation payload,
 including the Claude or Cursor model argument. If the host cannot apply a
 required role or model argument, fail closed or block unless inline execution
@@ -623,7 +638,7 @@ Then spawn the reviewer:
 - Use provider-appropriate dispatch:
   - Claude Code: Task tool with `subagent_type: "oat-reviewer"` (resolves from `.claude/agents/oat-reviewer.md`). For a concrete managed target, the payload must also contain `model: providers.claude.dispatchArgs.model` with the resolver-returned value.
   - Cursor: explicit invocation `/oat-reviewer` (or natural mention) with agent resolved from `.cursor/agents/oat-reviewer.md` or `.claude/agents/oat-reviewer.md` compatibility path. For a concrete managed target, the invocation must also contain `model: providers.cursor.dispatchArgs.model` with the exact opaque resolver-returned string.
-  - Codex style: for a concrete managed target, spawn the exact resolver-returned `agent_type`; if it cannot be selected, use the explicitly pinned fresh-child route from Step 6.0. Generic auto-selection is permitted only for the documented base-role exceptions.
+  - Codex style: for a concrete managed target, first spawn the exact resolver-returned native `agent_type`; only an explicit pre-start native role-selection rejection permits the explicitly pinned fresh-child route from Step 6.0. Generic auto-selection is permitted only for the documented base-role exceptions.
 - Pass the Review Scope metadata block from Step 5 as the prompt
 - Include the pre-computed artifact path for the subagent to write to
 - **If a worktree was resolved in Step 1.5:** include the worktree path in the prompt so the subagent writes the artifact to the worktree directory, not the current session's working directory
@@ -633,6 +648,9 @@ The `oat-reviewer` agent definition contains the full review process, mode contr
 
 After the subagent completes:
 
+- Treat its terminal status as authoritative. An accepted `BLOCKED` result
+  blocks the review; do not invoke fallback and do not infer a pass from a
+  missing review artifact or absent findings.
 - Verify the review artifact was written to the expected path
 - Continue with Step 9 (plan update) and Step 9.5 (commit)
 

package/dist/commands/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAezC,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAahB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkFpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAo0DD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAsKT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAezC,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAehB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkFpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAq2DD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAsKT"}

package/dist/commands/config/index.js

@@ -7,7 +7,7 @@ import { readGlobalOptions } from '../shared/shared.utils.js';
 import { compileDispatchCeilingPreset } from '../../config/dispatch-ceiling-preset.js';
 import { normalizeDispatchMatrix, validateDispatchRouteTarget, walkDispatchMatrix, } from '../../config/dispatch-matrix.js';
 import { dispatchPolicyModeDescription, dispatchPolicyPolicyDescription, managedDispatchPolicyValueList, } from '../../config/dispatch-policy-options.js';
-import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
+import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, normalizeWorkflowPostImplementSequence, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
 import { resolveEffectiveConfig, } from '../../config/resolve.js';
 import { resolveAssetsRoot } from '../../fs/assets.js';
 import { resolveProjectRoot } from '../../fs/paths.js';
@@ -389,11 +389,11 @@ const CONFIG_CATALOG = [
         group: 'Workflow Preferences (3-layer: local > shared > user)',
         file: '.oat/config.local.json | .oat/config.json | ~/.oat/config.json',
         scope: 'workflow',
-        type: 'wait | summary | pr | docs-pr',
+        type: 'legacy string (wait | summary | pr | docs-pr) | structured JSON object',
         defaultValue: 'unset',
         mutability: 'read/write',
-        owningCommand: 'oat config set workflow.postImplementSequence <value>',
-        description: 'Default post-implementation chaining: "wait" stops without auto-chaining, "summary" generates summary only, "pr" runs pr-final (which auto-generates summary), "docs-pr" runs docs sync then pr-final. When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        owningCommand: "oat config set workflow.postImplementSequence '<legacy-or-json>'",
+        description: 'Default post-implementation chaining. Legacy strings remain supported unchanged. Structured JSON uses {"preApproval":[...],"postApproval":[...]} with the canonical sequence steps. Plain get/list/dump output serializes structured values as compact JSON; get --json preserves the object value. When unset, the skill prompts. Resolution: env > local > shared > user > default.',
     },
     {
         key: 'workflow.reviewExecutionModel',
@@ -717,6 +717,23 @@ function parseWorkflowValue(key, rawValue) {
         }
         return normalized === 'true';
     }
+    if (key === 'workflow.postImplementSequence') {
+        const normalized = rawValue.trim();
+        if (normalized.startsWith('{') || normalized.startsWith('[')) {
+            let parsed;
+            try {
+                parsed = JSON.parse(normalized);
+            }
+            catch {
+                throw new Error(`Invalid value for ${key}: expected valid structured JSON`);
+            }
+            const sequence = normalizeWorkflowPostImplementSequence(parsed);
+            if (!sequence || Array.isArray(parsed)) {
+                throw new Error(`Invalid value for ${key}: structured JSON must match {"preApproval":[...],"postApproval":[...]}`);
+            }
+            return sequence;
+        }
+    }
     const allowed = WORKFLOW_ENUM_VALUES[key];
     if (allowed) {
         const normalized = rawValue.trim();
@@ -828,6 +845,12 @@ function toAvailabilityRef(ref) {
 }
 function applyWorkflowValue(workflow, key, value) {
     const subKey = key.slice('workflow.'.length);
+    if (subKey === 'postImplementSequence') {
+        return {
+            ...workflow,
+            postImplementSequence: value,
+        };
+    }
     if (subKey === 'dispatchPolicy.mode') {
         const mode = value;
         if (mode === 'inherit') {
@@ -940,7 +963,7 @@ function formatResolvedValue(value) {
     }
     return String(value);
 }
-async function getConfigValue(repoRoot, userConfigDir, key, dependencies) {
+async function getConfigValue(repoRoot, userConfigDir, key, dependencies, preserveRawObject = false) {
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const entry = resolved.resolved[key];
     if (!entry) {
@@ -948,7 +971,9 @@ async function getConfigValue(repoRoot, userConfigDir, key, dependencies) {
     }
     return {
         key,
-        value: formatResolvedValue(entry.value),
+        value: preserveRawObject && typeof entry.value === 'object'
+            ? entry.value
+            : formatResolvedValue(entry.value),
         source: entry.source,
     };
 }
@@ -966,7 +991,7 @@ async function setConfigValue(repoRoot, userConfigDir, key, rawValue, surface, d
     const effectiveSurface = surface === 'auto' ? defaultSurfaceForKey(key) : surface;
     if (isWorkflowKey(key)) {
         const parsedValue = parseWorkflowValue(key, rawValue);
-        const displayValue = typeof parsedValue === 'boolean' ? String(parsedValue) : parsedValue;
+        const displayValue = formatResolvedValue(parsedValue);
         if (typeof parsedValue === 'string' && isDispatchCeilingProviderKey(key)) {
             const availability = await dependencies.validateMatrixCell(providerNameFromConfigKey(key), parsedValue, {
                 cwd: repoRoot,
@@ -1322,7 +1347,7 @@ async function runGet(keyArg, context, dependencies) {
         }
         const repoRoot = await dependencies.resolveProjectRoot(context.cwd);
         const userConfigDir = join(context.home, '.oat');
-        const value = await getConfigValue(repoRoot, userConfigDir, keyArg, dependencies);
+        const value = await getConfigValue(repoRoot, userConfigDir, keyArg, dependencies, context.json);
         if (context.json) {
             context.logger.json({
                 status: 'ok',
@@ -1330,7 +1355,7 @@ async function runGet(keyArg, context, dependencies) {
             });
         }
         else {
-            context.logger.info(value.value ?? '');
+            context.logger.info(formatResolvedValue(value.value) ?? '');
         }
         process.exitCode = 0;
     }

package/dist/commands/doctor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAY9B,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAO9D,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,KACd,OAAO,CACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CACnE,CAAC;IACF,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC3C,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,cAAc,EAAE,oBAAoB,EAAE,CAAC;CACxC;AA2pBD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,OAAO,CAcT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAY9B,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAO9D,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,KACd,OAAO,CACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CACnE,CAAC;IACF,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC3C,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,cAAc,EAAE,oBAAoB,EAAE,CAAC;CACxC;AA8wBD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,OAAO,CAcT"}

package/dist/commands/doctor/index.js

@@ -1,6 +1,6 @@
 import { access, mkdtemp, readdir, readFile, rm, symlink, } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
 import { buildCommandContext, } from '../../app/command-context.js';
 import { compareVersions } from '../init/tools/shared/version.js';
 import { createPjmDisabledCheck, runPjmDoctorChecks, } from '../pjm/doctor.js';
@@ -279,6 +279,152 @@ async function isManagedCodexRoleConfig(scopeRoot, roleName, configFile, depende
         return false;
     }
 }
+function getCodexAgents(config) {
+    const agents = config.agents;
+    return agents && typeof agents === 'object' && !Array.isArray(agents)
+        ? agents
+        : {};
+}
+function getCodexMaxDepthEntry(config) {
+    const agents = getCodexAgents(config);
+    return {
+        present: Object.prototype.hasOwnProperty.call(agents, 'max_depth'),
+        value: agents.max_depth,
+    };
+}
+/**
+ * Applies Codex config precedence without letting an invalid project value fall
+ * through to the lower-precedence user value.
+ */
+async function resolveDoctorCodexMaxDepth(scope, parsedConfig, userHome, dependencies) {
+    const scopedEntry = getCodexMaxDepthEntry(parsedConfig);
+    if (scope !== 'project' || scopedEntry.present) {
+        return scopedEntry;
+    }
+    const userConfigPath = join(userHome, '.codex', 'config.toml');
+    if (!(await dependencies.pathExists(userConfigPath))) {
+        return scopedEntry;
+    }
+    try {
+        return getCodexMaxDepthEntry(TOML.parse(await dependencies.readFile(userConfigPath)));
+    }
+    catch {
+        return { present: true, value: null };
+    }
+}
+function createCodexMaxDepthCheck(scope, entry) {
+    const topology = 'root (0) → phase coordinator (1) → task worker (2)';
+    const numericDepth = typeof entry.value === 'number' && Number.isFinite(entry.value)
+        ? entry.value
+        : null;
+    const sufficient = numericDepth !== null && numericDepth >= 2;
+    let state;
+    if (!entry.present) {
+        state = 'agents.max_depth is missing';
+    }
+    else if (numericDepth === null) {
+        state = 'agents.max_depth is not a valid number';
+    }
+    else {
+        state = `agents.max_depth is ${numericDepth}`;
+    }
+    return {
+        name: `${scope}:codex_max_depth`,
+        description: 'Codex managed-role nested dispatch depth',
+        status: sufficient ? 'pass' : 'warn',
+        message: sufficient
+            ? `${state}; sufficient for ${topology}.`
+            : `${state}; OAT managed implementation requires ${topology}.`,
+        fix: sufficient
+            ? undefined
+            : `Run \`oat sync --scope ${scope}\`, or materialize a single role with \`oat providers codex materialize <agent-name> --model <model> --effort <effort> --scope ${scope}\`.`,
+    };
+}
+async function runCodexChecksForScope(scope, scopeRoot, userHome, dependencies) {
+    const checks = [];
+    const codexConfigPath = join(scopeRoot, '.codex', 'config.toml');
+    if (!(await dependencies.pathExists(codexConfigPath))) {
+        return checks;
+    }
+    let parsedConfig;
+    try {
+        parsedConfig = TOML.parse(await dependencies.readFile(codexConfigPath));
+        checks.push({
+            name: `${scope}:codex_config_toml`,
+            description: 'Codex config TOML parseability',
+            status: 'pass',
+            message: '.codex/config.toml parsed successfully.',
+        });
+    }
+    catch (error) {
+        checks.push({
+            name: `${scope}:codex_config_toml`,
+            description: 'Codex config TOML parseability',
+            status: 'fail',
+            message: error instanceof Error
+                ? `Failed to parse .codex/config.toml: ${error.message}`
+                : 'Failed to parse .codex/config.toml.',
+            fix: 'Repair .codex/config.toml syntax and rerun doctor.',
+        });
+        return checks;
+    }
+    const features = parsedConfig.features &&
+        typeof parsedConfig.features === 'object' &&
+        !Array.isArray(parsedConfig.features)
+        ? parsedConfig.features
+        : null;
+    const agents = getCodexAgents(parsedConfig);
+    const managedRoles = [];
+    const roleConfigFiles = new Map();
+    for (const [roleName, roleConfig] of Object.entries(agents)) {
+        const configFile = getCodexAgentConfigFile(roleConfig);
+        if (!configFile) {
+            continue;
+        }
+        roleConfigFiles.set(roleName, configFile);
+        if (await isManagedCodexRoleConfig(scopeRoot, roleName, configFile, dependencies)) {
+            managedRoles.push(roleName);
+        }
+    }
+    if (managedRoles.length === 0) {
+        return checks;
+    }
+    const multiAgentEnabled = features?.multi_agent === true || features?.multi_agent === 'true';
+    checks.push({
+        name: `${scope}:codex_multi_agent`,
+        description: 'Codex multi-agent feature flag',
+        status: multiAgentEnabled ? 'pass' : 'warn',
+        message: multiAgentEnabled
+            ? 'features.multi_agent is enabled for codex managed roles.'
+            : 'Codex managed roles detected but features.multi_agent is not true.',
+        fix: multiAgentEnabled
+            ? undefined
+            : 'Set [features] multi_agent = true in .codex/config.toml.',
+    });
+    checks.push(createCodexMaxDepthCheck(scope, await resolveDoctorCodexMaxDepth(scope, parsedConfig, userHome, dependencies)));
+    const missingRoleFiles = [];
+    for (const roleName of managedRoles) {
+        const configFile = roleConfigFiles.get(roleName);
+        if (!configFile)
+            continue;
+        const absoluteRolePath = join(scopeRoot, '.codex', configFile);
+        if (!(await dependencies.pathExists(absoluteRolePath))) {
+            missingRoleFiles.push(configFile);
+        }
+    }
+    checks.push({
+        name: `${scope}:codex_role_file_refs`,
+        description: 'Codex role config_file references',
+        status: missingRoleFiles.length === 0 ? 'pass' : 'warn',
+        message: missingRoleFiles.length === 0
+            ? 'All codex role config_file references exist.'
+            : `Missing codex role files: ${missingRoleFiles.join(', ')}`,
+        fix: missingRoleFiles.length === 0
+            ? undefined
+            : `Regenerate codex roles with \`oat sync --scope ${scope}\`, or materialize a single role with \`oat providers codex materialize <agent-name> --model <model> --effort <effort> --scope ${scope}\`.`,
+    });
+    return checks;
+}
 async function runChecksForScope(scope, scopeRoot, userConfigDir, dependencies) {
     const checks = [];
     const skillsPath = join(scopeRoot, '.agents', 'skills');
@@ -354,6 +500,7 @@ async function runChecksForScope(scope, scopeRoot, userConfigDir, dependencies)
             ? undefined
             : 'Install or enable a provider directory (e.g. .claude, .cursor, .codex).',
     });
+    checks.push(...(await runCodexChecksForScope(scope, scopeRoot, dirname(userConfigDir), dependencies)));
     if (scope === 'project') {
         try {
             const assetsRoot = await dependencies.resolveAssetsRoot();
@@ -403,90 +550,6 @@ async function runChecksForScope(scope, scopeRoot, userConfigDir, dependencies)
                 fix: 'Run `pnpm build` and rerun `oat doctor`.',
             });
         }
-        const codexConfigPath = join(scopeRoot, '.codex', 'config.toml');
-        const codexConfigExists = await dependencies.pathExists(codexConfigPath);
-        if (codexConfigExists) {
-            let parsedConfig = null;
-            try {
-                parsedConfig = TOML.parse(await dependencies.readFile(codexConfigPath));
-                checks.push({
-                    name: `${scope}:codex_config_toml`,
-                    description: 'Codex config TOML parseability',
-                    status: 'pass',
-                    message: '.codex/config.toml parsed successfully.',
-                });
-            }
-            catch (error) {
-                checks.push({
-                    name: `${scope}:codex_config_toml`,
-                    description: 'Codex config TOML parseability',
-                    status: 'fail',
-                    message: error instanceof Error
-                        ? `Failed to parse .codex/config.toml: ${error.message}`
-                        : 'Failed to parse .codex/config.toml.',
-                    fix: 'Repair .codex/config.toml syntax and rerun doctor.',
-                });
-            }
-            if (parsedConfig) {
-                const features = parsedConfig.features &&
-                    typeof parsedConfig.features === 'object' &&
-                    !Array.isArray(parsedConfig.features)
-                    ? parsedConfig.features
-                    : null;
-                const agents = parsedConfig.agents &&
-                    typeof parsedConfig.agents === 'object' &&
-                    !Array.isArray(parsedConfig.agents)
-                    ? parsedConfig.agents
-                    : null;
-                const managedRoles = [];
-                const roleConfigFiles = new Map();
-                for (const [roleName, roleConfig] of Object.entries(agents ?? {})) {
-                    const configFile = getCodexAgentConfigFile(roleConfig);
-                    if (!configFile) {
-                        continue;
-                    }
-                    roleConfigFiles.set(roleName, configFile);
-                    if (await isManagedCodexRoleConfig(scopeRoot, roleName, configFile, dependencies)) {
-                        managedRoles.push(roleName);
-                    }
-                }
-                if (managedRoles.length > 0) {
-                    const multiAgentEnabled = features?.multi_agent === true || features?.multi_agent === 'true';
-                    checks.push({
-                        name: `${scope}:codex_multi_agent`,
-                        description: 'Codex multi-agent feature flag',
-                        status: multiAgentEnabled ? 'pass' : 'warn',
-                        message: multiAgentEnabled
-                            ? 'features.multi_agent is enabled for codex managed roles.'
-                            : 'Codex managed roles detected but features.multi_agent is not true.',
-                        fix: multiAgentEnabled
-                            ? undefined
-                            : 'Set [features] multi_agent = true in .codex/config.toml.',
-                    });
-                    const missingRoleFiles = [];
-                    for (const roleName of managedRoles) {
-                        const configFile = roleConfigFiles.get(roleName);
-                        if (!configFile)
-                            continue;
-                        const absoluteRolePath = join(scopeRoot, '.codex', configFile);
-                        if (!(await dependencies.pathExists(absoluteRolePath))) {
-                            missingRoleFiles.push(configFile);
-                        }
-                    }
-                    checks.push({
-                        name: `${scope}:codex_role_file_refs`,
-                        description: 'Codex role config_file references',
-                        status: missingRoleFiles.length === 0 ? 'pass' : 'warn',
-                        message: missingRoleFiles.length === 0
-                            ? 'All codex role config_file references exist.'
-                            : `Missing codex role files: ${missingRoleFiles.join(', ')}`,
-                        fix: missingRoleFiles.length === 0
-                            ? undefined
-                            : 'Regenerate codex roles with `oat sync --scope project`, or materialize a single role with `oat providers codex materialize ...`.',
-                    });
-                }
-            }
-        }
         const repoReferenceRoot = join(scopeRoot, '.oat', 'repo');
         const [userConfig, config, localConfig] = await Promise.all([
             dependencies.readUserConfig(userConfigDir),

package/dist/commands/gate/index.js

@@ -55,7 +55,7 @@ const VALID_IDENTITY_PROVENANCES = [
 ];
 const REVIEW_GATE_CONTEXT_NOTE = 'This review is gate-originated. If you run `oat-project-review-provide`, set `oat_review_invocation: gate` in the review artifact. Write a canonical review artifact with `### Critical`, `### Important`, `### Medium`, and `### Minor` headings in that order, using `None` for empty sections.';
 const GATE_CHECK_TIMEOUT_MS = 5_000;
-const GATE_EXEC_TIMEOUT_MS = 10 * 60 * 1_000;
+const GATE_EXEC_TIMEOUT_MS = 15 * 60 * 1_000;
 function reviewGateProjectContext(project) {
     return [
         `Resolved OAT project path: ${project.path}. Run the review for this project path.`,

package/dist/commands/project/dispatch-ceiling/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch-ceiling/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAa9B,OAAO,EAUL,KAAK,uBAAuB,EAY7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAsBzB,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAiC5C,UAAU,2BAA2B;IACnC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AA63ED,wBAAgB,mCAAmC,CACjD,SAAS,GAAE,OAAO,CAAC,2BAA2B,CAAM,GACnD,OAAO,CAkGT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch-ceiling/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAa9B,OAAO,EAUL,KAAK,uBAAuB,EAY7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAsBzB,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAiC5C,UAAU,2BAA2B;IACnC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAi/ED,wBAAgB,mCAAmC,CACjD,SAAS,GAAE,OAAO,CAAC,2BAA2B,CAAM,GACnD,OAAO,CAkGT"}

package/dist/commands/project/dispatch-ceiling/index.js

@@ -1175,6 +1175,58 @@ function readCodexDefaultFromToml(content) {
     const value = parsed['model_reasoning_effort'];
     return typeof value === 'string' && value.trim() ? value.trim() : null;
 }
+function readCodexMaxDepthEntry(content) {
+    let parsed;
+    try {
+        parsed = TOML.parse(content);
+    }
+    catch {
+        return { present: true, value: null };
+    }
+    const agents = parsed.agents;
+    if (!agents || typeof agents !== 'object' || Array.isArray(agents)) {
+        return { present: false, value: undefined };
+    }
+    const record = agents;
+    return {
+        present: Object.prototype.hasOwnProperty.call(record, 'max_depth'),
+        value: record.max_depth,
+    };
+}
+async function readCodexMaxDepthAtPath(path, dependencies) {
+    if (!(await dependencies.pathExists(path))) {
+        return { present: false, value: undefined };
+    }
+    try {
+        return readCodexMaxDepthEntry(await dependencies.readFile(path));
+    }
+    catch {
+        return { present: true, value: null };
+    }
+}
+/**
+ * Resolves the depth seen by Codex: project config wins whenever it declares a
+ * value, while an absent project value inherits the user config.
+ */
+async function resolveEffectiveCodexMaxDepth(scope, repoRoot, context, dependencies) {
+    const userPath = join(context.home, '.codex', 'config.toml');
+    if (scope === 'user') {
+        return readCodexMaxDepthAtPath(userPath, dependencies);
+    }
+    const projectEntry = await readCodexMaxDepthAtPath(join(repoRoot, '.codex', 'config.toml'), dependencies);
+    return projectEntry.present
+        ? projectEntry
+        : readCodexMaxDepthAtPath(userPath, dependencies);
+}
+function managedCodexDepthBlockMessage(scope, entry) {
+    const validDepth = typeof entry.value === 'number' && Number.isFinite(entry.value);
+    const state = !entry.present
+        ? 'agents.max_depth is missing'
+        : validDepth
+            ? `agents.max_depth is ${entry.value}`
+            : 'agents.max_depth is not a valid number';
+    return `BLOCKED: Codex ${state}; managed implementation requires root (0) → phase coordinator (1) → task worker (2).\nRun \`oat sync --scope ${scope}\`, or materialize a single role with \`oat providers codex materialize <agent-name> --model <model> --effort <effort> --scope ${scope}\`.`;
+}
 async function resolveCodexProviderDefaultEffort(repoRoot, context, dependencies) {
     const candidates = [
         join(repoRoot, '.codex', 'config.toml'),
@@ -1224,6 +1276,34 @@ async function resolveDispatchCeiling(context, dependencies, options) {
         [provider]: providerResolution,
     };
     if (resolvedValue) {
+        const requiresManagedCodexDepth = options.preflight === true &&
+            provider === 'codex' &&
+            role === 'implementer' &&
+            resolvedValue.mode === 'managed';
+        if (requiresManagedCodexDepth) {
+            const scope = context.scope === 'user' ? 'user' : 'project';
+            const depth = await resolveEffectiveCodexMaxDepth(scope, repoRoot, context, dependencies);
+            const numericDepth = typeof depth.value === 'number' && Number.isFinite(depth.value)
+                ? depth.value
+                : null;
+            if (numericDepth === null || numericDepth < 2) {
+                return {
+                    status: 'blocked',
+                    provider,
+                    value: resolvedValue.value,
+                    policyMode: resolvedValue.mode,
+                    policy: resolvedValue.policy,
+                    source: resolvedValue.source,
+                    preset: resolvedValue.preset,
+                    unresolved: true,
+                    projectPath,
+                    providerDefaultEffort,
+                    matrix: resolvedValue.matrix,
+                    providers,
+                    message: managedCodexDepthBlockMessage(scope, depth),
+                };
+            }
+        }
         const incompleteManagedPreflight = options.preflight === true &&
             resolvedValue.mode === 'managed' &&
             providerResolution.mode === 'advisory' &&

package/dist/commands/providers/codex/materialize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../../src/commands/providers/codex/materialize.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,sBAAsB,EACtB,qCAAqC,EACtC,MAAM,qCAAqC,CAAC;AAU7C,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAsD5C,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAaR;AA+GD,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,OAAO,CAAC,qCAAqC,CAAM,GAC7D,OAAO,CAoCT"}
+{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../../src/commands/providers/codex/materialize.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,sBAAsB,EACtB,qCAAqC,EACtC,MAAM,qCAAqC,CAAC;AAa7C,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAyD5C,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAaR;AAsID,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,OAAO,CAAC,qCAAqC,CAAM,GAC7D,OAAO,CAoCT"}