@r1z4x/tezgah 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -6,6 +6,99 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.6.0] - 2026-10-10
+
+### Added
+
+- **A data, metric or dashboard ask reaches the product rule.** "Bu veriye uygun bir metric dashboard tasarla" armed no rule before. A dashboard, chart or metric-choice ask now arms `product`, judged per clause. A code marker in the same clause, such as a metrics endpoint, keeps it out.
+- **product-analysis chooses metrics.** It names a North Star and its input metrics. Each metric gets one record: goal, signal, definition, window, baseline and more.
+- **Dashboard rules in design-contract.** The new `data-views.md` picks the chart for the question. It also sets the context, the window and the widget states.
+- **feature-audit forward mode.** A feature not built yet gets its five matrices in `spec.md`. The audit after the build compares against it.
+- **analyze-app writes the design measurement.** Nothing produced `measurement.json` before. The skill now gives its shape and the snippet that reads it.
+- **The local skill search reaches design-library's entries.** The search now reads the entries a skill's `INDEX.md` lists, one row each.
+- **The product-flow skill and `tezgah-research next`.** A new product capability now runs in a fixed order, from research to re-measure. Each step leaves a file under `.tezgah/analysis/<topic>/`: a `## <step>` note in `flow.md`, or `spec.md` for the forward spec. `tezgah-research next --topic <t>` prints each step's status from those files, and a re-measure is due once the decision's `observe after:` date has passed. It then names the first missing or due step's skill and command. The skill lists the steps, and `FLOWS` in `hooks/tezgah_product.py` holds their done rules.
+
+### Removed
+
+- **The product ledger is cut before release (ADR 025).** Plan 075's measured run did not show the ledger beating the playbook alone. Gone: writing and reading `.tezgah/product/ledger.jsonl`, `tezgah-research record`, `due` and `commit --product`, the ledger part of `check`, `product:` citations and the session-start note on due decisions. An existing `ledger.jsonl` is left in place, and nothing reads it.
+
+### Changed
+
+- **The session runs the plan lifecycle itself.** The gate refused a session's
+  own `tezgah-task start|phase|allow|stop`. It told the session to ask the user,
+  so every plan ended with a command handed back. That refusal is gone. A phase
+  or scope refusal now names the move (`tezgah-task phase implementation`,
+  `tezgah-task allow`). The CLI still checks Acceptance, the spike, the
+  checkpoint and the review on each move. The gate still refuses a write to the
+  plan file itself. `tezgah-task allow` now needs `--why`, and `status` prints
+  the reason next to the widened scope.
+- **`close` cleans up.** `tezgah-task close` on the active task clears its
+  phase instead of refusing. It then removes each linked worktree whose branch
+  has landed and which holds nothing else, through Orca when Orca tracks it. A
+  squash merge counts as landed. A branch whose commits cancel out does not. It
+  prints every worktree it keeps, with the reason. Uncommitted files, unknown
+  ignored files and `.tezgah` data keep a worktree. So do an unmerged branch, a
+  branch nobody committed on, an agent at work and an Orca that does not answer.
+- **No process questions.** The contract says the orchestrator picks a process
+  parameter the user did not set, such as a spend ceiling, and states it.
+  `consult` on exit 4/5 records the first member of another model family
+  itself instead of asking the user to choose. After two review rounds the
+  session fixes what is left and closes with `close NNN done --resolved`. A
+  missing credential sends it to a route that needs none first. A silent gate
+  has it run `tezgah-setup --report` itself.
+
+### Fixed
+
+- **product-analysis no longer says `check` demands three compared solutions.** An analysis answers once. A choice between solutions goes under `decisions/`.
+
+## [1.5.1] - 2026-10-09
+
+### Fixed
+
+- **Subagents load in the first session.** Claude and Codex missed every role a
+  session wrote into a new repo until the next session. Codex also ignored
+  `.codex/agents` in an untrusted repo. The install now writes the roles to
+  `~/.claude/agents` and `$CODEX_HOME/agents`, as it already did for omp. A
+  session removes the copies an older release left in a repo's `.claude/agents`
+  and `.codex/agents`. Cursor read 9 of 10 role descriptions as ">" and got a
+  model id it does not list. It now gets its own `.cursor/agents` with a
+  one-line description and `model: inherit`.
+
+- **`tezgah-route` names the specialists.** It could only name a tier. The
+  five specialists ran 0 times in 121 delegations. The generic task agent ran 86.
+  The judge now also answers whether a brief is a specialist's whole
+  job, and the route names that agent. `--phase review` and `--phase research`
+  name the reviewer and the researcher. A security brief that only reviews
+  goes to `tezgah-security`. The routing and fan-out text say to spawn the
+  named agent, never the generic one.
+- **Jev through OpenRouter asks a model OpenRouter has.** The carrier sent
+  `typesafe/jev-latest`, which OpenRouter answers with 400 (no such model). It
+  now sends the bare `jev-latest`, which OpenRouter maps itself.
+- **The Workers AI model id picks Clef.** `tezgah-setup` refused
+  `--jev @cf/cloudflare/clef-flash`, and the same value in
+  `TEZGAH_JEV_PROVIDER` chose no carrier. Both now name `clef-flash`, and
+  `@cf/cloudflare/clef` names `clef`.
+- **opencode's judge run denies tools at agent level too.** A user's
+  `agent.build.permission` beat the inline top-level deny.
+- **The refusal note needs an asked session CLI.** The seam writes it only
+  when it asked the session CLI first. A caller that named the CLI gets it.
+- **A chosen carrier reads only its own key.** A `clef` choice no longer opens
+  omp's login database on every status-line redraw.
+- **`pnpm test` names a command.** An Acceptance item counted as a command
+  only when a word after the first was an option or a path. So `pnpm test`,
+  `cargo test` and `make test` read as missing, and the phase move refused the
+  plan. A known runner followed by `test` or `run` now counts. Prose such as
+  `run the tests` still does not.
+- **Each carrier's price is now pinned by a test.** The one cost check priced a
+  TypeSafe answer at Jev's rate. It passed with or without per-carrier pricing.
+  New tests in `tezgah-taste`, `tezgah-triage` and the replay labeller price Clef
+  and Clef-flash answers at their own rates. A run with an unpriced answer prints
+  `cost unknown`.
+- **Claude lists the reviewer once.** The plugin shipped its own
+  `agents/tezgah-reviewer.md`, which Claude shows as `tezgah:tezgah-reviewer`
+  beside the generated reviewer and never shadows. The plugin now ships no
+  agent, and its release-time renderer is gone with it.
+
 ## [1.5.0] - 2026-10-09
 
 ### Changed
@@ -933,7 +1026,9 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   the copy could not find `hooks/` and died on import. It now links into the
   installed tree, and also installs the command as `tezgah`.
 
-[Unreleased]: https://github.com/r1z4x/tezgah/compare/v1.5.0...HEAD
+[Unreleased]: https://github.com/r1z4x/tezgah/compare/v1.6.0...HEAD
+[1.6.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.6.0
+[1.5.1]: https://github.com/r1z4x/tezgah/releases/tag/v1.5.1
 [1.5.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.5.0
 [1.4.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.4.0
 [1.3.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.3.0

package/MANIFEST

@@ -19,7 +19,6 @@ README.md
 README.tr.md
 RELEASING.md
 SECURITY.md
-agents/tezgah-reviewer.md
 assets/logo/README.md
 assets/logo/tezgah-logo-16.png
 assets/logo/tezgah-logo-256.png
@@ -134,6 +133,7 @@ hooks/tezgah_models.py
 hooks/tezgah_orca.py
 hooks/tezgah_paths.py
 hooks/tezgah_policy.py
+hooks/tezgah_product.py
 hooks/tezgah_rank.py
 hooks/tezgah_replay.py
 hooks/tezgah_research.py
@@ -546,6 +546,7 @@ skills/analyze-app/EVALS.md
 skills/analyze-app/SKILL.md
 skills/design-contract/EVALS.md
 skills/design-contract/SKILL.md
+skills/design-contract/data-views.md
 skills/design-library/EVALS.md
 skills/design-library/INDEX.md
 skills/design-library/SKILL.md
@@ -613,6 +614,8 @@ skills/ponytail/EVALS.md
 skills/ponytail/SKILL.md
 skills/product-analysis/EVALS.md
 skills/product-analysis/SKILL.md
+skills/product-flow/EVALS.md
+skills/product-flow/SKILL.md
 skills/research/EVALS.md
 skills/research/SKILL.md
 skills/rl-env/SKILL.md
@@ -734,6 +737,8 @@ tests/test_packaging_scripts.py
 tests/test_paths.py
 tests/test_paths_worktree.py
 tests/test_platform.py
+tests/test_product_flow_e2e.py
+tests/test_product_next.py
 tests/test_providers.py
 tests/test_rank.py
 tests/test_replay.py

package/README.md

@@ -109,10 +109,12 @@ it set out to arm is not armed.
   `~/.codex/AGENTS.md`, `~/.omp/agent/RULES.md`). Claude Code's hooks ship in a
   plugin registered through `claude plugin`; with no `claude` CLI, Claude stays
   unarmed and the report says so.
-- **Agent files in your repositories.** Inside the configured roots, a session
-  writes subagent files to `.claude/agents/`, `.codex/agents/` and
-  `.opencode/agents/`, and lists those directories in the clone's own
-  `.git/info/exclude` (`TEZGAH_NO_EXCLUDE=1` stops that).
+- **Agent files.** The install writes tezgah's subagent roles to
+  `~/.claude/agents/`, `$CODEX_HOME/agents/` (default `~/.codex/agents/`) and
+  `~/.omp/agent/agents/`. Inside the configured roots, a session writes them to
+  the repository's `.cursor/agents/` and `.opencode/agents/`, and lists those
+  directories in the clone's own `.git/info/exclude` (`TEZGAH_NO_EXCLUDE=1`
+  stops that).
 - **A daily update check.** The status line asks for a newer release at most
   once a day; `~/.config/tezgah/update-check-off` or `TEZGAH_UPDATE_CHECK=0`
   turns it off.

package/bin/consult

@@ -56,7 +56,8 @@ suffix); 2 no key for the chosen provider, or no member available at all; 3 the
 --provider/--models run got no answer; 4 no recorded choice - one "offer:" line
 per available member, nothing was asked; 5 every recorded member (and the
 fallback) failed - one "reoffer:" line per member still available that did not
-fail. On 4 or 5, ask the user which to use and record it with --use.
+fail. On 4 or 5, the agent records the first listed member of another model
+family with --use itself and asks again; the user is not asked to choose.
 """
 import concurrent.futures
 import json
@@ -504,11 +505,11 @@ def retry_hint(classes):
         return "the referee answered outside its five headings; re-run, or judge the panel yourself"
     if c == "credit":
         return ("the provider account has no credit (HTTP 402) - the key is fine; "
-                "top it up, or ask the user for another member and record it with --use")
+                "top it up, or record another member with --use")
     if c == "key":
-        return "set the provider's key, or ask the user for another member and record it with --use"
+        return "set the provider's key, or record another member with --use"
     if c == "missing":
-        return "the agent CLI is not installed; ask the user for another member and record it with --use"
+        return "the agent CLI is not installed; record another member with --use"
     if c.startswith("cli-exit"):
         return ("the agent CLI failed (not logged in, or a model name it does not "
                 "know); run it once by hand, or record another member with --use")
@@ -645,8 +646,9 @@ def main():
             print("consult: no recorded choice, so nothing was asked.")
             for opt in found:
                 print(offer_line("offer", opt))
-            print("next: ask the user which of these to use (two or more make a "
-                  "panel), then run: consult --use <member>[,<member>] and ask again")
+            print("next: record the first of these from a model family other than "
+                  "yours (two make a panel) with: consult --use <member>[,<member>], "
+                  "then ask again - do not ask the user to choose")
             sys.stdout.flush()
             os._exit(4)
 
@@ -775,14 +777,15 @@ def main():
         print("retry: %s" % hint)
     code = 0 if answers else 3
     if not answers and not explicit:
-        # The recorded choice is the user's, so consult never swaps it on its
-        # own: it names what is left and the agent asks again.
+        # consult never swaps the recorded choice on its own: it names what is
+        # left, and the agent records the next member and asks again.
         lost = {c[1] for c, _cls in failures} | skip_opts
         left = [o for o in options() if o not in lost]
         for opt in left:
             print(offer_line("reoffer", opt))
-        print("next: ask the user which of these to use instead, then run: "
-              "consult --use <member>[,<member>] and ask again" if left else
+        print("next: record the first of these from another model family with: "
+              "consult --use <member>[,<member>], then ask again - do not ask the "
+              "user to choose" if left else
               "next: nothing else can answer here; tell the user the second "
               "opinion was skipped (install an agent CLI or add a provider key)")
         code = 5

package/bin/tezgah-docs

@@ -106,7 +106,7 @@ RUN = re.compile(r"((?:`[A-Za-z_][A-Za-z0-9_]*(?:\(\))?`\s*[/,]?\s*){1,5})$")
 CITE = re.compile(r"`([\w.-]+(?:/[\w.-]+)+|[\w-]+\.\w+):(\d+)(?:-(\d+))?`"
                   r"|`(:(\d+)(?:-(\d+))?)`")
 # The symbol written after the citation instead of before it, the way a table
-# cell reads: `hooks/tezgah_policy.py:678-946` (`CORE`).
+# cell reads: `hooks/tezgah_policy.py:697-972` (`CORE`).
 AFTER = re.compile(r"\s*\(`([A-Za-z_][A-Za-z0-9_]*)(?:\(\))?`\)")
 # Any `path:line`, backticked or not: what CITE does not match of these (a
 # bare token, a comma list `x.py:12,40`) is counted as unjudged, so a citation

package/bin/tezgah-research

@@ -16,11 +16,17 @@
   tezgah-research source <slug> <hypothesis> --run <orxRunId> [--command "<cmd>"]
                            [--scope real|fixture|derived] [--fixture "<what was generated>"]
   tezgah-research compare <slug> <decision>        record one variants x criteria cell from stdin
+  tezgah-research verdict <slug> <id> met|not-met|unanswerable --evidence "<ref>"
+                                                   record one success criterion's verdict
+  tezgah-research conclude <slug>                  conclude a line whose criteria all carry a verdict
+  tezgah-research migrate-layout                   move flat research/<slug> into open/ or done/
   tezgah-research close <slug> --limit "<reason>"  conclude a line as a deliberate limit
   tezgah-research seal <slug> [--history-lost] --ack "<owner decision>"
                                                    seal a line concluded before seals existed
   tezgah-research import <checkout> [<slug>] [--allow-open "<why>"]
                                                    bring lines from another checkout, with history
+  tezgah-research next --topic <t> [--flow metric-dashboard|feature] [--json]
+                                                   the product-flow steps of a topic and the next one
 
 A research line lives at <repo>/.tezgah/research/<slug>/ and holds the state an
 auditable investigation needs: the question, the decision log, the findings, the
@@ -103,6 +109,7 @@ import time
 HERE = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
 sys.path.insert(0, os.path.join(HERE, "hooks"))
 import tezgah_paths as tp  # noqa: E402
+import tezgah_product as tp_product  # noqa: E402
 import tezgah_research as tr  # noqa: E402
 
 
@@ -245,12 +252,17 @@ def cmd_commit(args):
     known = tr.slugs(repo)
     if slug not in known:
         return misuse("no such research line (have: %s)" % (", ".join(known) or "none"))
+    return commit_path(repo, tr.line_dir(repo, slug), message)
+
+
+def commit_path(repo, path, message):
+    """Stage and commit `path` alone in the private repository of `repo`."""
     ws = tp.ensure_workspace(repo)
     if ws is None:
         print("commit refused: %s is not a git work tree (or .tezgah could not be "
               "set up), so there is no private repository to commit into" % repo)
         return 1
-    rel = os.path.relpath(tr.line_dir(repo, slug), ws)
+    rel = os.path.relpath(path, ws)
     try:
         done = tp.ws_git(repo, "add", "-A", "--", rel)
         if not done.returncode:
@@ -298,6 +310,7 @@ def cmd_check(args):
                 print("warn %s: %s" % (slug, warn))
     else:
         print("no research line under %s" % tr.root(repo))
+    lines = len(report)
     if ask_orx:
         # The registry is the repository's, not a line's, so this runs whatever the
         # lines look like - which is also why it is only asked for when --orx says so.
@@ -313,7 +326,7 @@ def cmd_check(args):
         print(json.dumps(report, indent=2))
         return 1 if problems else 0
     if not problems:
-        print("research: %d line(s) ok" % len(report))
+        print("research: %d line(s) ok" % lines)
     if not rest and not all_lines:
         done = [slug for slug in known if tr.sealed(repo, slug)]
         if done:
@@ -576,6 +589,40 @@ def cmd_compare(args):
     return 0
 
 
+def cmd_next(args):
+    """The product-flow steps of one topic with their status, then the first
+    missing or due step's skill and command; a report, so exit 0."""
+    usage = "next --topic <t> [--flow %s] [--json]" % "|".join(tp_product.FLOWS)
+    opts, as_json, rest = {}, False, list(args)
+    while rest:
+        arg = rest.pop(0)
+        if arg == "--json":
+            as_json = True
+        elif arg in ("--topic", "--flow") and rest and arg not in opts:
+            opts[arg] = rest.pop(0)
+        else:
+            return misuse(usage)
+    flow = opts.get("--flow", "metric-dashboard")
+    if "--topic" not in opts:
+        return misuse(usage)
+    if flow not in tp_product.FLOWS:
+        return misuse("unknown flow %r (%s)" % (flow, ", ".join(tp_product.FLOWS)))
+    topic = opts["--topic"]
+    steps = tp_product.next_steps(repo_root(os.getcwd()), topic, flow)
+    if as_json:
+        # the step list next_steps returns; the next step is its first
+        # missing or due entry
+        print(json.dumps(steps, indent=2))
+        return 0
+    first = next((s for s in steps if s["status"] in ("missing", "due")), None)
+    for n, step in enumerate(steps, 1):
+        print("%d. %s [%s] %s - %s" % (n, step["id"], step["status"], step["skill"],
+                                       step["detail"]))
+    print("next: %s - %s" % (first["skill"], first["command"]) if first
+          else "next: nothing left")
+    return 0
+
+
 def cmd_verdict(args):
     """Record one success criterion's verdict, with the evidence it rests on."""
     if len(args) < 3:
@@ -769,6 +816,8 @@ def main(argv):
         return cmd_source(rest)
     if cmd == "compare":
         return cmd_compare(rest)
+    if cmd == "next":
+        return cmd_next(rest)
     if cmd == "verdict":
         return cmd_verdict(rest)
     if cmd == "conclude":
@@ -782,7 +831,8 @@ def main(argv):
     if cmd == "import":
         return cmd_import(rest)
     return misuse("unknown command %r (init, commit, check, status, --all, claim, predict, "
-                  "components, migrate, source, compare, close, seal, import)" % cmd)
+                  "components, migrate, source, compare, verdict, conclude, migrate-layout, "
+                  "close, seal, import, next)" % cmd)
 
 
 if __name__ == "__main__":

package/bin/tezgah-route

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-"""tezgah-route - which tier worker a delegated task goes to, and the model table.
+"""tezgah-route - which worker a delegated task goes to, and the model table.
 
   tezgah-route "<brief>" [--phase P] [--json]   the agent to spawn, and why
   tezgah-route --check                          the table's age and refresh flags
@@ -9,10 +9,13 @@
   tezgah-route --report                         each route's first check, by tier
 
 A brief naming stored data, a migration, credentials, the gate or security goes to
-tezgah-frontier by rule; otherwise Jev picks the tier (one Choice, ~650 input
-tokens, ~0.4 s); with no key or `judge-off`, `--phase`
-(explore|code|mechanical|plan|review|research) picks it from the static table, and
-with neither the middle tier is used. The brief is sent to the judge seam's
+tezgah-frontier by rule - or to tezgah-security when it only reviews; otherwise
+Jev answers two Choices in one call (~700 input tokens, ~0.4 s): the tier, and
+whether the brief is the whole job of a specialist (tezgah-tester, -docs,
+-security, -ui, -researcher, -reviewer), which is then the agent named. With no
+key or `judge-off`, `--phase review|research` names the reviewer or the
+researcher, another `--phase` (explore|code|mechanical|plan) picks the tier from
+the static table, and with neither the middle tier is used. The brief is sent to the judge seam's
 provider - the session's own CLI (omp, claude, opencode, cursor, codex) or the Jev
 model through TypeSafe, OpenRouter System One, Cloudflare Workers AI or a
 compatible endpoint (TEZGAH_JEV_PROVIDER picks one), else the OpenRouter chat

package/bin/tezgah-setup

@@ -13,7 +13,6 @@
   tezgah-setup --adopt                 move the predecessor wiring aside
   tezgah-setup --sync                  dev: copy this checkout over the Claude plugin copy
   tezgah-setup --write-manifest        release: regenerate the tracked MANIFEST from git
-  tezgah-setup --write-plugin-agents   release: re-render the plugin's agents/ from the role source
   tezgah-setup --status [PATH]         print the armed/used checklist
   tezgah-setup --agents [PATH]         regenerate this repo's subagent set
   tezgah-setup --deps [--dry-run]      install missing optional tools only
@@ -188,7 +187,7 @@ OMP_LESSONS = ("Read `.tezgah/lessons.md` in the repository if it exists and tre
 LOCAL_BIN = os.path.join(HOME, ".local", "bin")
 SKILLS = ["harness", "tezgah-contract", "ponytail", "i-have-adhd", "no-ai-slop",
           "analyze-app", "plan-add", "plan-status", "plan-sync", "research",
-          "product-analysis", "feature-audit", "design-contract",
+          "product-analysis", "product-flow", "feature-audit", "design-contract",
           "design-library", "pm-frameworks", "ai-research", "rl-env"]
 
 
@@ -1163,9 +1162,33 @@ def install_claude():
     # (`TEZGAH_CORE_IN_FILE`, hooks/projects-auto-init.py), so a session pays for
     # the contract once.
     print("%s %s (always-on contract)" % (OK, write_rules("claude")))
+    write_user_agents("claude")
     register_claude_plugin()
 
 
+def write_user_agents(host):
+    """The host's tezgah roles in its user agent dir, where it loads them from
+    the first session (a repo dir written at session start is missed there),
+    then tezgah's MARKER files no longer wanted - `agents-off`, a lost
+    capability, a retired role - are removed. The user's own files stay."""
+    agents_dir = tezgah_agents.user_agent_dir(host)
+    wanted = tezgah_agents.user_agents(host)
+    for name, text in sorted(wanted.items()):
+        path = os.path.join(agents_dir, name)
+        if write_if_changed(path, text):
+            print("%s %s" % (OK, path))
+    for path in tezgah_agents.remove_stale(agents_dir, wanted):
+        print("%s removed %s" % (OK, path))
+
+
+def user_agent_files(host):
+    """{filename: text} of tezgah's MARKER files in the host's user agent dir."""
+    d = tezgah_agents.user_agent_dir(host)
+    return {n: t for n in (os.listdir(d) if os.path.isdir(d) else [])
+            if n.startswith("tezgah-")
+            and tezgah_agents.MARKER in (t := tezgah_agents._read(os.path.join(d, n)) or "")}
+
+
 # The marketplace a manifest rendered by this installer carries, so Claude
 # installs the plugin as `tezgah@tezgah-local`. A manifest the tree already has
 # under another name (the maintainer's) is kept, name included.
@@ -1358,6 +1381,7 @@ def install_codex():
     # instructions Codex keeps for the whole session. Global, like omp's
     # RULES.md, because a per-project file would be a tracked project file.
     print("%s %s (always-on contract)" % (OK, write_rules("codex")))
+    write_user_agents("codex")
 
 
 def _toml_str(value):
@@ -3293,6 +3317,9 @@ def verify_uninstall(hosts, full):
         # the user's own CLAUDE.md may name tezgah; only the block is ours
         clean("claude global CLAUDE.md block gone", [CLAUDE_RULES],
               needle="<!-- tezgah:start")
+        claim("claude subagents gone",
+              [os.path.join(tezgah_agents.user_agent_dir("claude"), n)
+               for n in user_agent_files("claude")])
     if "codex" in hosts:
         clean("codex hooks.json unwired", [os.path.join(CODEX, "hooks.json")])
         claim("codex skills unlinked",
@@ -3304,6 +3331,9 @@ def verify_uninstall(hosts, full):
         clean("codex global AGENTS.md block gone",
               [os.path.join(CODEX, n) for n in CODEX_RULES],
               needle="<!-- tezgah:start")
+        claim("codex subagents gone",
+              [os.path.join(tezgah_agents.user_agent_dir("codex"), n)
+               for n in user_agent_files("codex")])
     if "opencode" in hosts:
         claim("opencode plugin unlinked",
               [os.path.join(OPENCODE, d, "tezgah.js") for d in ("plugins", "plugin")]
@@ -3454,6 +3484,13 @@ def uninstall_claude():
     unwire_claude_settings()
     drop_claude_mcp_row()
     strip_managed_md(CLAUDE_RULES)
+    remove_user_agents("claude")
+
+
+def remove_user_agents(host):
+    """Every tezgah MARKER file in the host's user agent dir; the user's stay."""
+    for path in tezgah_agents.remove_stale(tezgah_agents.user_agent_dir(host), ()):
+        print("%s removed %s" % (OK, path))
 
 
 def drop_claude_mcp_row():
@@ -3488,6 +3525,7 @@ def uninstall_codex():
     # both names: the override may have appeared, or gone, since the install
     for name in CODEX_RULES:
         strip_managed_md(os.path.join(CODEX, name))
+    remove_user_agents("codex")
 
 
 def uninstall_opencode():
@@ -4429,6 +4467,8 @@ def host_checks_claude():
          bool(copies) and all(plugin_copy_current(t) for t in copies)),
         ("CLAUDE.md carries the contract (matches a fresh render)",
          rules_current("claude")),
+        ("subagents in %s (match a fresh render)" % tezgah_agents.user_agent_dir("claude"),
+         user_agent_files("claude") == tezgah_agents.user_agents("claude")),
     ] + claude_mcp_rows(copies)
 
 
@@ -4617,6 +4657,8 @@ def host_checks_codex():
         ("MCP in config.toml", "mcp_servers.codegraph" in toml),
         ("%s carries the contract (matches a fresh render)"
          % os.path.basename(codex_rules()), rules_current("codex")),
+        ("subagents in %s (match a fresh render)" % tezgah_agents.user_agent_dir("codex"),
+         user_agent_files("codex") == tezgah_agents.user_agents("codex")),
     ] + mcp_rows(toml_servers(toml_path), "config.toml") + [
         mcp_row(TEZGAH_MCP_NAME, toml_mcp_entry(toml_path, TEZGAH_MCP_NAME),
                 "config.toml", tezgah_mcp_command()),
@@ -4929,24 +4971,6 @@ def write_manifest():
     return 0
 
 
-def write_plugin_agents():
-    """Re-render the plugin's tracked `agents/*.md` from tezgah_agents' role
-    bodies, the source the per-repo agents are generated from. A plain write,
-    not write_if_changed: a tracked file needs no `.tezgah-bak` beside it."""
-    for name, text in tezgah_agents.plugin_agents().items():
-        path = os.path.join(HERE, "agents", name)
-        try:
-            with open(path, encoding="utf-8") as fh:
-                if fh.read() == text:
-                    continue
-        except OSError:
-            pass
-        with open(path, "w", encoding="utf-8") as fh:
-            fh.write(text)
-        print("%s %s" % (OK, path))
-    return 0
-
-
 def tree_sha(root, files):
     """sha256 over each relpath and its bytes, or None when one is unreadable."""
     h = hashlib.sha256()
@@ -5647,8 +5671,6 @@ def main(argv):
                     help="regenerate this repo's subagent set (default: cwd)")
     ap.add_argument("--write-manifest", action="store_true",
                     help="release: regenerate the tracked MANIFEST from git")
-    ap.add_argument("--write-plugin-agents", action="store_true",
-                    help="release: re-render the plugin's agents/ from the role source")
     ap.add_argument("--deps", action="store_true")
     ap.add_argument("--mcp-schemas", action="store_true",
                     help="measure the MCP tool-schema band by asking each server")
@@ -5695,7 +5717,7 @@ def main(argv):
                     help="with --install: the language replies are asked for and "
                          "the Stop rule checks (config.json `reply_lang`; `tr` "
                          "when unset, `any` checks none)")
-    ap.add_argument("--jev", choices=tp.JEV_CHOICES,
+    ap.add_argument("--jev", type=tp.jev_name, choices=tp.JEV_CHOICES,
                     help="the carrier the judgement seam reaches the Jev model "
                          "through (config.json `jev`; `auto` tries every one "
                          "that resolves); TEZGAH_JEV_PROVIDER and JEV_PROVIDER "
@@ -5763,8 +5785,6 @@ def main(argv):
         return 0
     if args.write_manifest:
         return write_manifest()
-    if args.write_plugin_agents:
-        return write_plugin_agents()
     if args.status:
         print(tezgah_context.health_lines(os.path.realpath(expand(args.status))))
         # The install-health half of this report, from the same function the