@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/core/mission-context/types-slice2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types-slice2.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/types-slice2.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM7D,qDAAqD;AACrD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,OAAO;IACtB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,wEAAwE;IACxE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE;QACN,IAAI,EAAE,OAAO,CAAC;QACd;;;;;;;WAOG;QACH,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;QAC7B,IAAI,EAAE,OAAO,EAAE,CAAC;QAChB,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7D,kFAAkF;QAClF,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC5C,sFAAsF;QACtF,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,cAAc,EAAE,IAAI,GAAG,aAAa,CAAC;QACrC,QAAQ,CAAC,EAAE;YAAE,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC;YAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;YAAC,YAAY,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAC;gBAAC,gBAAgB,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC3L,GAAG,IAAI,CAAC;CACV;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAE1E,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,sEAAsE;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6EAA6E;IAC7E,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,CAAC;QAChB;;;;;WAKG;QACH,IAAI,EAAE,SAAS,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;CACV;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE;QACN,IAAI,EAAE,WAAW,CAAC;QAClB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI,CAAC;CACV"}
+{"version":3,"file":"types-slice2.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/types-slice2.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM7D,qDAAqD;AACrD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,wEAAwE;IACxE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE;QACN,IAAI,EAAE,OAAO,CAAC;QACd;;;;;;;WAOG;QACH,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;QAC7B,IAAI,EAAE,OAAO,EAAE,CAAC;QAChB,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7D,kFAAkF;QAClF,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC5C,sFAAsF;QACtF,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,cAAc,EAAE,IAAI,GAAG,aAAa,CAAC;QACrC,QAAQ,CAAC,EAAE;YAAE,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC;YAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;YAAC,YAAY,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAC;gBAAC,gBAAgB,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;QAC1L;;;;;WAKG;QACH,UAAU,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,WAAW,EAAE,CAAA;SAAE,CAAC;KACxD,GAAG,IAAI,CAAC;CACV;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAE1E,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,sEAAsE;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6EAA6E;IAC7E,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,CAAC;QAChB;;;;;WAKG;QACH,IAAI,EAAE,SAAS,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;CACV;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE;QACN,IAAI,EAAE,WAAW,CAAC;QAClB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI,CAAC;CACV"}

package/server/dist/core/model-tier-config-reader.d.ts

@@ -1,13 +1,26 @@
 export declare const MODEL_TIER_ROLES: readonly ["plan_review", "review", "finalization", "execution"];
 export type ModelTierRole = (typeof MODEL_TIER_ROLES)[number];
-export type ModelTier = "opus" | "sonnet" | "haiku" | "inherit";
+export type ModelTier = "opus" | "sonnet" | "haiku" | "fable" | "inherit";
 export type ModelTierSource = "project_config" | "unset";
 export interface EffectiveModelTier {
     tier: ModelTier;
     source: ModelTierSource;
 }
+/**
+ * shipwright#771 (iterate-2026-09-18-codex-review-tier-config) — the two
+ * optional Codex-reviewer-identity keys. NOT part of the Claude
+ * `MODEL_TIER_ROLES`/tier axis: a free-form Codex model slug, validated
+ * shipwright-side by an unconditional syntactic allowlist
+ * (`shared/scripts/lib/codex_review_transport.py`), never checked against
+ * a closed tier enum here either. Read-only, same as the Claude tiers —
+ * webui never writes `shipwright_model_config.json`.
+ */
+export declare const CODEX_REVIEWER_ROLES: readonly ["codex_review", "codex_plan_review"];
+export type CodexReviewerRole = (typeof CODEX_REVIEWER_ROLES)[number];
 export interface ModelTierConfigReadResult {
     tiers: Record<ModelTierRole, EffectiveModelTier>;
+    /** Present only when at least one Codex-reviewer key is configured. */
+    codex?: Partial<Record<CodexReviewerRole, string>>;
     /** A safe, operator-facing warning; it never contains raw config content. */
     warning?: "model_config_missing" | "model_config_unreadable" | "model_config_invalid";
 }

package/server/dist/core/model-tier-config-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-tier-config-reader.d.ts","sourceRoot":"","sources":["../../src/core/model-tier-config-reader.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,gBAAgB,iEAKnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACjD,6EAA6E;IAC7E,OAAO,CAAC,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,sBAAsB,CAAC;CACvF;AAWD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA2C9E;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,yBAAyB,CA2BlF"}
+{"version":3,"file":"model-tier-config-reader.d.ts","sourceRoot":"","sources":["../../src/core/model-tier-config-reader.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,gBAAgB,iEAKnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,gDAAiD,CAAC;AACnF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACjD,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,6EAA6E;IAC7E,OAAO,CAAC,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,sBAAsB,CAAC;CACvF;AAWD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA2C9E;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,yBAAyB,CAkDlF"}

package/server/dist/core/model-tier-config-reader.js

@@ -15,8 +15,18 @@ export const MODEL_TIER_ROLES = [
     "finalization",
     "execution",
 ];
+/**
+ * shipwright#771 (iterate-2026-09-18-codex-review-tier-config) — the two
+ * optional Codex-reviewer-identity keys. NOT part of the Claude
+ * `MODEL_TIER_ROLES`/tier axis: a free-form Codex model slug, validated
+ * shipwright-side by an unconditional syntactic allowlist
+ * (`shared/scripts/lib/codex_review_transport.py`), never checked against
+ * a closed tier enum here either. Read-only, same as the Claude tiers —
+ * webui never writes `shipwright_model_config.json`.
+ */
+export const CODEX_REVIEWER_ROLES = ["codex_review", "codex_plan_review"];
 const FILENAME = "shipwright_model_config.json";
-const VALID_TIERS = new Set(["opus", "sonnet", "haiku", "inherit"]);
+const VALID_TIERS = new Set(["opus", "sonnet", "haiku", "fable", "inherit"]);
 function inheritedTiers() {
     return Object.fromEntries(MODEL_TIER_ROLES.map((role) => [role, { tier: "inherit", source: "unset" }]));
 }
@@ -82,6 +92,28 @@ export function readModelTierConfig(projectPath) {
             invalidRoleValue = true;
         }
     }
-    return invalidRoleValue ? { tiers, warning: "model_config_invalid" } : { tiers };
+    // shipwright#771 — same shape check as `lib.model_tier_config.load_model_config`
+    // (non-empty string after trim); the syntactic slug allowlist is a
+    // transport-time concern (`codex_review_transport.py`), not applied here.
+    const codex = {};
+    let invalidCodexValue = false;
+    for (const role of CODEX_REVIEWER_ROLES) {
+        const candidate = raw[role];
+        if (candidate === undefined)
+            continue;
+        if (typeof candidate === "string" && candidate.trim().length > 0) {
+            codex[role] = candidate.trim();
+        }
+        else {
+            invalidCodexValue = true;
+        }
+    }
+    const hasCodex = Object.keys(codex).length > 0;
+    const warning = invalidRoleValue || invalidCodexValue ? "model_config_invalid" : undefined;
+    return {
+        tiers,
+        ...(hasCodex ? { codex } : {}),
+        ...(warning ? { warning } : {}),
+    };
 }
 //# sourceMappingURL=model-tier-config-reader.js.map

package/server/dist/core/model-tier-config-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-tier-config-reader.js","sourceRoot":"","sources":["../../src/core/model-tier-config-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,QAAQ;IACR,cAAc;IACd,WAAW;CACH,CAAC;AAiBX,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAChC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,EACJ,cAAc,EAAE,aAAa,EAC7B,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,aAAa,EAC7B,aAAa,EAAE,YAAY,EAC3B,GAAG,cAAc,EAClB,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CACtB,KAAK,EACL,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EACnC;YACE,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS;aAC9B,KAAK,CAAC,OAAO,CAAC;aACd,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7C,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,8EAA8E;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAEzE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,SAAsB,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAsB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3E,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACnF,CAAC"}
+{"version":3,"file":"model-tier-config-reader.js","sourceRoot":"","sources":["../../src/core/model-tier-config-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,QAAQ;IACR,cAAc;IACd,WAAW;CACH,CAAC;AAWX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAU,CAAC;AAWnF,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAExF,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAChC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,EACJ,cAAc,EAAE,aAAa,EAC7B,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,aAAa,EAC7B,aAAa,EAAE,YAAY,EAC3B,GAAG,cAAc,EAClB,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CACtB,KAAK,EACL,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EACnC;YACE,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS;aAC9B,KAAK,CAAC,OAAO,CAAC;aACd,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7C,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,8EAA8E;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAEzE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,SAAsB,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAsB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3E,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,mEAAmE;IACnE,0EAA0E;IAC1E,MAAM,KAAK,GAA+C,EAAE,CAAC;IAC7D,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/C,MAAM,OAAO,GACX,gBAAgB,IAAI,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO;QACL,KAAK;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/server/dist/core/powershell-probe.smoke-helpers.d.ts

@@ -0,0 +1,12 @@
+/** Keep pwsh off the network / first-run telemetry paths while under test. */
+export declare const POWERSHELL_QUIET_ENV: Record<string, string>;
+export interface PowerShellProbe {
+    bin: string | null;
+    diagnostics: string[];
+}
+export declare function resolvePowerShell(): PowerShellProbe;
+export declare function isCi(env?: NodeJS.ProcessEnv): boolean;
+/** `it.skipIf` predicate: skip only off-CI; in CI the test runs and fails loud. */
+export declare function powershellSkip(): boolean;
+export declare function requirePowerShell(): string;
+//# sourceMappingURL=powershell-probe.smoke-helpers.d.ts.map

package/server/dist/core/powershell-probe.smoke-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"powershell-probe.smoke-helpers.d.ts","sourceRoot":"","sources":["../../src/core/powershell-probe.smoke-helpers.ts"],"names":[],"mappings":"AAwBA,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAKvD,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAmCD,wBAAgB,iBAAiB,IAAI,eAAe,CAGnD;AAED,wBAAgB,IAAI,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAElE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C"}

package/server/dist/core/powershell-probe.smoke-helpers.js

@@ -0,0 +1,80 @@
+/*
+ * powershell-probe.smoke-helpers.ts — the ONE place the real-shell smoke
+ * tests decide whether (and which) PowerShell is available.
+ *
+ * Why this exists (iterate-2026-09-30-pwsh-probe-flake): both smoke suites
+ * used to probe with `it.skipIf(!findPowerShell())` (evaluated at COLLECTION)
+ * plus a second probe in `beforeAll`. Those are independent process spawns, so
+ * one could succeed while the other failed — the test then RAN but held
+ * `null` and died with "No PowerShell available" / a null passed to spawn
+ * (PR #496, Diff coverage job). pwsh was on the image the whole time. The
+ * fix is to probe ONCE per test file (module instance), retry a transient failure, and keep the
+ * failure diagnosable.
+ *
+ * Contract: `powershellSkip()` is the skipIf predicate — false in CI, so a
+ * missing PowerShell FAILS there (never a silent skip) via `requirePowerShell()`
+ * with the captured diagnostics. Locally (no pwsh) the tests skip as before.
+ */
+import { spawnSync } from "node:child_process";
+const PROBE_ATTEMPTS = 3;
+const PROBE_TIMEOUT_MS = 30_000;
+const PROBE_BACKOFF_MS = 300;
+/** Keep pwsh off the network / first-run telemetry paths while under test. */
+export const POWERSHELL_QUIET_ENV = {
+    POWERSHELL_TELEMETRY_OPTOUT: "1",
+    POWERSHELL_UPDATECHECK: "Off",
+    DOTNET_CLI_TELEMETRY_OPTOUT: "1",
+    DOTNET_NOLOGO: "1",
+};
+let cached = null;
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function probeOnce() {
+    const diagnostics = [];
+    for (let attempt = 1; attempt <= PROBE_ATTEMPTS; attempt++) {
+        let transient = false;
+        for (const candidate of ["pwsh", "powershell"]) {
+            const r = spawnSync(candidate, ["-NoProfile", "-Command", "$PSVersionTable.PSVersion.Major"], {
+                stdio: "pipe",
+                timeout: PROBE_TIMEOUT_MS,
+                env: { ...process.env, ...POWERSHELL_QUIET_ENV },
+            });
+            if (r.status === 0)
+                return { bin: candidate, diagnostics };
+            if (r.error?.code === "ENOENT") {
+                diagnostics.push(`${candidate}: not installed (ENOENT)`);
+                continue; // deterministic — never worth a retry
+            }
+            transient = true;
+            const why = r.error
+                ? `${r.error.name}: ${r.error.message}`
+                : `status=${r.status} signal=${r.signal ?? "none"} stderr=${r.stderr?.toString().trim().slice(0, 200) ?? ""}`;
+            diagnostics.push(`attempt ${attempt} ${candidate}: ${why}`);
+        }
+        if (!transient)
+            break; // every candidate is simply not installed — retrying cannot help
+        if (attempt < PROBE_ATTEMPTS)
+            sleepSync(PROBE_BACKOFF_MS * attempt);
+    }
+    return { bin: null, diagnostics };
+}
+export function resolvePowerShell() {
+    cached ??= probeOnce();
+    return cached;
+}
+export function isCi(env = process.env) {
+    return ["true", "1"].includes((env.CI ?? "").toLowerCase());
+}
+/** `it.skipIf` predicate: skip only off-CI; in CI the test runs and fails loud. */
+export function powershellSkip() {
+    return resolvePowerShell().bin === null && !isCi();
+}
+export function requirePowerShell() {
+    const { bin, diagnostics } = resolvePowerShell();
+    if (bin)
+        return bin;
+    throw new Error("PowerShell (pwsh/powershell) is required for the real-shell smoke tests but could not be run" +
+        ` after ${PROBE_ATTEMPTS} attempts.\n${diagnostics.join("\n")}`);
+}
+//# sourceMappingURL=powershell-probe.smoke-helpers.js.map

package/server/dist/core/powershell-probe.smoke-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"powershell-probe.smoke-helpers.js","sourceRoot":"","sources":["../../src/core/powershell-probe.smoke-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,2BAA2B,EAAE,GAAG;IAChC,sBAAsB,EAAE,KAAK;IAC7B,2BAA2B,EAAE,GAAG;IAChC,aAAa,EAAE,GAAG;CACnB,CAAC;AAOF,IAAI,MAAM,GAA2B,IAAI,CAAC;AAE1C,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC;QAC3D,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,iCAAiC,CAAC,EAAE;gBAC5F,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,gBAAgB;gBACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE;aACjD,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;YAC3D,IAAK,CAAC,CAAC,KAA2C,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,0BAA0B,CAAC,CAAC;gBACzD,SAAS,CAAC,sCAAsC;YAClD,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;gBACjB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE;gBACvC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,IAAI,MAAM,WAAW,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAChH,WAAW,CAAC,IAAI,CAAC,WAAW,OAAO,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iEAAiE;QACxF,IAAI,OAAO,GAAG,cAAc;YAAE,SAAS,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,SAAS,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc;IAC5B,OAAO,iBAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACjD,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,IAAI,KAAK,CACb,8FAA8F;QAC5F,UAAU,cAAc,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;AACJ,CAAC"}

package/server/dist/core/readiness-install-hints.d.ts

@@ -1,5 +1,5 @@
 /** A tool the repair command cannot install — it needs its own command. */
-export type ToolchainTool = "claude" | "uv" | "python" | "git";
+export type ToolchainTool = "claude" | "uv" | "python" | "git" | "codex";
 /**
  * Platform-correct, copy-pasteable install command for a missing prerequisite.
  * Mirrors `bootstrapper/lib/util.mjs installHint` field-for-field.

package/server/dist/core/readiness-install-hints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness-install-hints.d.ts","sourceRoot":"","sources":["../../src/core/readiness-install-hints.ts"],"names":[],"mappings":"AAeA,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/D;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAuBlF"}
+{"version":3,"file":"readiness-install-hints.d.ts","sourceRoot":"","sources":["../../src/core/readiness-install-hints.ts"],"names":[],"mappings":"AAeA,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CA4BlF"}

package/server/dist/core/readiness-install-hints.js

@@ -38,6 +38,11 @@ export function installHint(tool, platform) {
             return win
                 ? 'powershell -c "irm https://claude.ai/install.ps1 | iex"'
                 : "curl -fsSL https://claude.ai/install.sh | bash";
+        case "codex":
+            // Codex Light AC8 — no single canonical install-script URL is
+            // confirmed for this tool yet; point at the account/CLI docs rather
+            // than guess a command that could be wrong.
+            return "install the Codex CLI — see your Codex account's CLI setup instructions";
     }
 }
 //# sourceMappingURL=readiness-install-hints.js.map

package/server/dist/core/readiness-install-hints.js.map

@@ -1 +1 @@
-{"version":3,"file":"readiness-install-hints.js","sourceRoot":"","sources":["../../src/core/readiness-install-hints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAyB;IACxE,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC;IACjC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,IAAI;YACP,OAAO,GAAG;gBACR,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,iDAAiD,CAAC;QACxD,KAAK,QAAQ;YACX,qEAAqE;YACrE,2EAA2E;YAC3E,8EAA8E;YAC9E,OAAO,GAAG;gBACR,CAAC,CAAC,mIAAmI;gBACrI,CAAC,CAAC,oHAAoH,CAAC;QAC3H,KAAK,KAAK;YACR,OAAO,GAAG;gBACR,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,2DAA2D,CAAC;QAClE,KAAK,QAAQ;YACX,OAAO,GAAG;gBACR,CAAC,CAAC,yDAAyD;gBAC3D,CAAC,CAAC,gDAAgD,CAAC;IACzD,CAAC;AACH,CAAC"}
+{"version":3,"file":"readiness-install-hints.js","sourceRoot":"","sources":["../../src/core/readiness-install-hints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAyB;IACxE,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC;IACjC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,IAAI;YACP,OAAO,GAAG;gBACR,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,iDAAiD,CAAC;QACxD,KAAK,QAAQ;YACX,qEAAqE;YACrE,2EAA2E;YAC3E,8EAA8E;YAC9E,OAAO,GAAG;gBACR,CAAC,CAAC,mIAAmI;gBACrI,CAAC,CAAC,oHAAoH,CAAC;QAC3H,KAAK,KAAK;YACR,OAAO,GAAG;gBACR,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,2DAA2D,CAAC;QAClE,KAAK,QAAQ;YACX,OAAO,GAAG;gBACR,CAAC,CAAC,yDAAyD;gBAC3D,CAAC,CAAC,gDAAgD,CAAC;QACvD,KAAK,OAAO;YACV,8DAA8D;YAC9D,oEAAoE;YACpE,4CAA4C;YAC5C,OAAO,yEAAyE,CAAC;IACrF,CAAC;AACH,CAAC"}

package/server/dist/core/readiness-probe-run.d.ts

@@ -49,6 +49,67 @@ export declare function defaultRun(cmd: string, args?: string[], deps?: {
     homedir?: string;
     env?: NodeJS.ProcessEnv;
 }): Promise<RunResult>;
+/**
+ * Probe a command that may resolve as a Windows PATHEXT SHIM (`.cmd`/`.bat`)
+ * rather than a genuine `.exe` — e.g. `codex`, which the Codex CLI installer
+ * drops on Windows as a `.cmd` wrapper (no `codex.exe`). `defaultRun` is
+ * deliberately `.exe`-only (its own doc comment: "This is deliberately NOT
+ * the bootstrapper preflight.mjs case, which shells out ONLY to resolve
+ * `.cmd` shims") — `execFile(cmd, args, {shell:false})` cannot invoke a
+ * `.cmd` without a shell (Node's CVE-2024-27980 hardening), so probing codex
+ * through `defaultRun` throws ENOENT even when Codex CLI is genuinely
+ * installed and working (iterate-2026-09-16-codex-probe-win32-shim).
+ *
+ * This is a SIBLING, not a `defaultRun` edit, because `defaultRun`'s win32
+ * branch is load-bearing for a DIFFERENT fix: it hands execFile the
+ * `probeEnv`-augmented `env` so a `~/.local/bin`-only uv is still found
+ * (iterate-2026-08-23; proven in readiness-probe-run.test.ts). `resolveSpawn`
+ * (ADR-044) has no `env` parameter — it resolves PATH from the real
+ * `process.env.PATH` only — so routing `defaultRun` itself through it would
+ * silently regress that augmented-PATH lookup for uv/python/git. Codex has no
+ * such augmented-PATH need (its installer puts the shim straight on PATH), so
+ * this sibling can use `resolveSpawn` unconditionally on win32 without that
+ * risk.
+ *
+ * POSIX is a pass-through to `defaultRun` — `execvp` already resolves a shim
+ * script (or any executable) by bare name, no `.cmd`/`.bat` concept exists.
+ *
+ * CAVEAT for a future caller: unlike `defaultRun`, this does NOT augment the
+ * lookup PATH — it resolves strictly from the real `process.env.PATH`
+ * (`resolveSpawn` takes no `env` override; that is the whole reason this is a
+ * sibling and not a `defaultRun` edit, per above). Fine for `codex`: unlike
+ * uv, whose specific installer script's KNOWN behavior is dropping to
+ * `~/.local/bin` without touching PATH until the next shell start (the
+ * concrete, previously-reported failure that justified `probeEnv`'s
+ * augmentation), no Codex CLI install method is known to place the shim
+ * anywhere off the server process's inherited PATH — it is an ordinary PATH
+ * shim like the already-working `claude`/`npm`/`gh` ones `win32-spawn.ts`
+ * already resolves elsewhere in this codebase. If that assumption turns out
+ * wrong for some install method, the fix is the same shape `probeEnv` already
+ * is: report the concrete failure, then add an equivalent augmentation here —
+ * not to speculate one in now against no observed case. A tool that already
+ * needs the `~/.local/bin`-style augmented lookup should keep using
+ * `defaultRun`, not this.
+ *
+ * SECURITY INVARIANT this function relies on, not enforces: `cmd`/`args` MUST
+ * be literal constants, never externally-influenced. Unlike the ONE existing
+ * caller of `resolveSpawn` (`preview-session-manager.tokenizeCommand`, a
+ * BLOCKLIST fence against shell metacharacters and `%…%` expansion),
+ * `defaultRunShim` calls `resolveSpawn` with NO fence in between — per
+ * `win32-spawn.ts`'s own header, "this module never assumes [the fence] ran".
+ * Today's two callers (`isCodexCliAvailable`, `probeReadiness`'s codex arm)
+ * both pass the hardcoded literal `"codex"`/`["--version"]`, so there is
+ * nothing to inject — but a future caller reusing this exported, generically
+ * named function with any externally-influenced `cmd`/`args` would silently
+ * inherit `win32CmdWrap`'s unfenced cmd.exe quoting (a token containing
+ * `&|<>^` or a space triggers the verbatim-quoted branch; `%VAR%` is never
+ * neutralized by quoting at all). Add a fence at the call site before doing
+ * that, the same way the preview caller does.
+ */
+export declare function defaultRunShim(cmd: string, args?: string[], deps?: {
+    platform?: NodeJS.Platform;
+    cwd?: string;
+}): Promise<RunResult>;
 /** First `\d+.\d+(.\d+)?` token in a `--version` blob, or "". */
 export declare function extractVersion(out: string): string;
 /** Numeric semver-ish compare: -1 / 0 / 1. Missing segments are 0. */

package/server/dist/core/readiness-probe-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness-probe-run.d.ts","sourceRoot":"","sources":["../../src/core/readiness-probe-run.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;qFAEiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AACD,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AAEzE;;kDAEkD;AAClD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAkB,EAC9B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACnF,OAAO,CAAC,SAAS,CAAC,CA2BpB;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAMhG"}
+{"version":3,"file":"readiness-probe-run.d.ts","sourceRoot":"","sources":["../../src/core/readiness-probe-run.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;qFAEiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AACD,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AAEzE;;kDAEkD;AAClD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAkB,EAC9B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACnF,OAAO,CAAC,SAAS,CAAC,CAapB;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAkB,EAC9B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,SAAS,CAAC,CAuBpB;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAMhG"}

package/server/dist/core/readiness-probe-run.js

@@ -9,6 +9,7 @@
 import { execFile } from "node:child_process";
 import os from "node:os";
 import { probeEnv, resolvePosixBin } from "./readiness-probe-path.js";
+import { resolveSpawn } from "./win32-spawn.js";
 /** Per-probe timeout. A `--version` that hangs longer than this is treated as
  *  "not found" — the process is killed, and because the runner is ASYNC the
  *  event loop is never blocked while it waits. */
@@ -51,21 +52,98 @@ export function defaultRun(cmd, args = ["--version"], deps = {}) {
     const env = probeEnv(platform, homedir, deps.env ?? process.env);
     const target = platform === "win32" ? cmd : resolvePosixBin(cmd, env);
     return new Promise((resolve) => {
-        execFile(target, args, { encoding: "utf-8", timeout: PROBE_TIMEOUT_MS, windowsHide: true, env }, (error, stdout, stderr) => {
-            const out = String(stdout ?? "");
-            const err = String(stderr ?? "");
-            // execFile sets `error` on a non-zero exit, a spawn failure (ENOENT) OR
-            // a timeout (killed) — all of which mean "did not run cleanly". A real
-            // tool exits 0 (no error) AND prints a version; the MS-Store python3 stub
-            // exits non-zero, so requiring no-error + a digit-bearing line rejects it
-            // (the whole reason this is not `command -v`).
-            const ok = !error && /\d+\.\d+/.test(out + err);
-            // Numeric exit status on non-zero exit; ENOENT/timeout set a STRING code
-            // / `killed` → report null so a code-gated caller never reads them as 0.
-            const errCode = error?.code;
-            const code = error == null ? 0 : typeof errCode === "number" ? errCode : null;
-            resolve({ ok, stdout: out, stderr: err, code });
-        });
+        execFile(target, args, { encoding: "utf-8", timeout: PROBE_TIMEOUT_MS, windowsHide: true, env }, (error, stdout, stderr) => resolve(parseExecResult(error, stdout, stderr)));
+    });
+}
+/**
+ * Shared execFile-callback → RunResult parsing for `defaultRun` and
+ * `defaultRunShim` (extracted iterate-2026-09-16-codex-probe-win32-shim, both
+ * callers need the identical ok/code contract; see `defaultRun`'s own doc
+ * comment for why `ok` requires no-error-AND-a-digit and why `code` is `null`
+ * rather than a string on ENOENT/timeout).
+ */
+function parseExecResult(error, stdout, stderr) {
+    const out = String(stdout ?? "");
+    const err = String(stderr ?? "");
+    const ok = !error && /\d+\.\d+/.test(out + err);
+    const errCode = error?.code;
+    const code = error == null ? 0 : typeof errCode === "number" ? errCode : null;
+    return { ok, stdout: out, stderr: err, code };
+}
+/**
+ * Probe a command that may resolve as a Windows PATHEXT SHIM (`.cmd`/`.bat`)
+ * rather than a genuine `.exe` — e.g. `codex`, which the Codex CLI installer
+ * drops on Windows as a `.cmd` wrapper (no `codex.exe`). `defaultRun` is
+ * deliberately `.exe`-only (its own doc comment: "This is deliberately NOT
+ * the bootstrapper preflight.mjs case, which shells out ONLY to resolve
+ * `.cmd` shims") — `execFile(cmd, args, {shell:false})` cannot invoke a
+ * `.cmd` without a shell (Node's CVE-2024-27980 hardening), so probing codex
+ * through `defaultRun` throws ENOENT even when Codex CLI is genuinely
+ * installed and working (iterate-2026-09-16-codex-probe-win32-shim).
+ *
+ * This is a SIBLING, not a `defaultRun` edit, because `defaultRun`'s win32
+ * branch is load-bearing for a DIFFERENT fix: it hands execFile the
+ * `probeEnv`-augmented `env` so a `~/.local/bin`-only uv is still found
+ * (iterate-2026-08-23; proven in readiness-probe-run.test.ts). `resolveSpawn`
+ * (ADR-044) has no `env` parameter — it resolves PATH from the real
+ * `process.env.PATH` only — so routing `defaultRun` itself through it would
+ * silently regress that augmented-PATH lookup for uv/python/git. Codex has no
+ * such augmented-PATH need (its installer puts the shim straight on PATH), so
+ * this sibling can use `resolveSpawn` unconditionally on win32 without that
+ * risk.
+ *
+ * POSIX is a pass-through to `defaultRun` — `execvp` already resolves a shim
+ * script (or any executable) by bare name, no `.cmd`/`.bat` concept exists.
+ *
+ * CAVEAT for a future caller: unlike `defaultRun`, this does NOT augment the
+ * lookup PATH — it resolves strictly from the real `process.env.PATH`
+ * (`resolveSpawn` takes no `env` override; that is the whole reason this is a
+ * sibling and not a `defaultRun` edit, per above). Fine for `codex`: unlike
+ * uv, whose specific installer script's KNOWN behavior is dropping to
+ * `~/.local/bin` without touching PATH until the next shell start (the
+ * concrete, previously-reported failure that justified `probeEnv`'s
+ * augmentation), no Codex CLI install method is known to place the shim
+ * anywhere off the server process's inherited PATH — it is an ordinary PATH
+ * shim like the already-working `claude`/`npm`/`gh` ones `win32-spawn.ts`
+ * already resolves elsewhere in this codebase. If that assumption turns out
+ * wrong for some install method, the fix is the same shape `probeEnv` already
+ * is: report the concrete failure, then add an equivalent augmentation here —
+ * not to speculate one in now against no observed case. A tool that already
+ * needs the `~/.local/bin`-style augmented lookup should keep using
+ * `defaultRun`, not this.
+ *
+ * SECURITY INVARIANT this function relies on, not enforces: `cmd`/`args` MUST
+ * be literal constants, never externally-influenced. Unlike the ONE existing
+ * caller of `resolveSpawn` (`preview-session-manager.tokenizeCommand`, a
+ * BLOCKLIST fence against shell metacharacters and `%…%` expansion),
+ * `defaultRunShim` calls `resolveSpawn` with NO fence in between — per
+ * `win32-spawn.ts`'s own header, "this module never assumes [the fence] ran".
+ * Today's two callers (`isCodexCliAvailable`, `probeReadiness`'s codex arm)
+ * both pass the hardcoded literal `"codex"`/`["--version"]`, so there is
+ * nothing to inject — but a future caller reusing this exported, generically
+ * named function with any externally-influenced `cmd`/`args` would silently
+ * inherit `win32CmdWrap`'s unfenced cmd.exe quoting (a token containing
+ * `&|<>^` or a space triggers the verbatim-quoted branch; `%VAR%` is never
+ * neutralized by quoting at all). Add a fence at the call site before doing
+ * that, the same way the preview caller does.
+ */
+export function defaultRunShim(cmd, args = ["--version"], deps = {}) {
+    const platform = deps.platform ?? process.platform;
+    if (platform !== "win32") {
+        return defaultRun(cmd, args, { platform });
+    }
+    const cwd = deps.cwd ?? process.cwd();
+    const resolved = resolveSpawn([cmd, ...args], cwd);
+    if (!resolved) {
+        return Promise.resolve({ ok: false, stdout: "", stderr: "", code: null });
+    }
+    return new Promise((resolve) => {
+        execFile(resolved.command, resolved.args, {
+            encoding: "utf-8",
+            timeout: PROBE_TIMEOUT_MS,
+            windowsHide: true,
+            windowsVerbatimArguments: resolved.windowsVerbatimArguments,
+        }, (error, stdout, stderr) => resolve(parseExecResult(error, stdout, stderr)));
     });
 }
 /** First `\d+.\d+(.\d+)?` token in a `--version` blob, or "". */

package/server/dist/core/readiness-probe-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"readiness-probe-run.js","sourceRoot":"","sources":["../../src/core/readiness-probe-run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAatE;;kDAEkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,OAAiB,CAAC,WAAW,CAAC,EAC9B,OAAkF,EAAE;IAEpF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,MAAM,EACN,IAAI,EACJ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EACxE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACjC,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,0EAA0E;YAC1E,+CAA+C;YAC/C,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YAChD,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,OAAO,GAAI,KAAmC,EAAE,IAAI,CAAC;YAC3D,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9E,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAU;IAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"readiness-probe-run.js","sourceRoot":"","sources":["../../src/core/readiness-probe-run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAahD;;kDAEkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,OAAiB,CAAC,WAAW,CAAC,EAC9B,OAAkF,EAAE;IAEpF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,MAAM,EACN,IAAI,EACJ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EACxE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,KAA0C,EAC1C,MAAe,EACf,MAAe;IAEf,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,OAAiB,CAAC,WAAW,CAAC,EAC9B,OAAqD,EAAE;IAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,IAAI,EACb;YACE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,gBAAgB;YACzB,WAAW,EAAE,IAAI;YACjB,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;SAC5D,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAU;IAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/dist/core/readiness-probe.d.ts

@@ -1,5 +1,5 @@
 import { type RunFn } from "./readiness-probe-run.js";
-export { compareVersions, defaultRun, extractVersion, resolvePython, PROBE_TIMEOUT_MS, type RunFn, type RunResult, } from "./readiness-probe-run.js";
+export { compareVersions, defaultRun, defaultRunShim, extractVersion, resolvePython, PROBE_TIMEOUT_MS, type RunFn, type RunResult, } from "./readiness-probe-run.js";
 /** The one command that repairs every not-ready check (installs plugins + syncs the cache). */
 export declare const READINESS_REPAIR_COMMAND = "npx @svenroth-ai/shipwright@latest";
 /** Minimum working Python the plugin hooks require. */

package/server/dist/core/readiness-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness-probe.d.ts","sourceRoot":"","sources":["../../src/core/readiness-probe.ts"],"names":[],"mappings":"AAqCA,OAAO,EAKL,KAAK,KAAK,EAEX,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EACL,eAAe,EACf,UAAU,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,SAAS,GACf,MAAM,0BAA0B,CAAC;AAElC,+FAA+F;AAC/F,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,UAAU,WAAW,CAAC;AAEnC,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB;;yDAEqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,8EAA8E;IAC9E,MAAM,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,mDAAoD,CAAC;AAEvF;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAkI9E"}
+{"version":3,"file":"readiness-probe.d.ts","sourceRoot":"","sources":["../../src/core/readiness-probe.ts"],"names":[],"mappings":"AAqCA,OAAO,EAML,KAAK,KAAK,EAEX,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EACL,eAAe,EACf,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,SAAS,GACf,MAAM,0BAA0B,CAAC;AAElC,+FAA+F;AAC/F,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,UAAU,WAAW,CAAC;AAEnC,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB;;yDAEqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,8EAA8E;IAC9E,MAAM,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,mDAAoD,CAAC;AAEvF;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CA+J9E"}

package/server/dist/core/readiness-probe.js

@@ -33,10 +33,10 @@ import { existsSync as fsExistsSync, readdirSync as fsReaddirSync } from "node:f
 import os from "node:os";
 import path from "node:path";
 import { installHint } from "./readiness-install-hints.js";
-import { compareVersions, defaultRun, extractVersion, resolvePython, } from "./readiness-probe-run.js";
+import { compareVersions, defaultRun, defaultRunShim, extractVersion, resolvePython, } from "./readiness-probe-run.js";
 // Re-export the probe RUN + version primitives (moved to readiness-probe-run.ts
 // for the 300-LOC guideline) so every existing importer keeps its path stable.
-export { compareVersions, defaultRun, extractVersion, resolvePython, PROBE_TIMEOUT_MS, } from "./readiness-probe-run.js";
+export { compareVersions, defaultRun, defaultRunShim, extractVersion, resolvePython, PROBE_TIMEOUT_MS, } from "./readiness-probe-run.js";
 /** The one command that repairs every not-ready check (installs plugins + syncs the cache). */
 export const READINESS_REPAIR_COMMAND = "npx @svenroth-ai/shipwright@latest";
 /** Minimum working Python the plugin hooks require. */
@@ -63,6 +63,12 @@ export const DOOR_REQUIRED_PLUGINS = ["shipwright-adopt", "shipwright-grade"];
  */
 export async function probeReadiness(deps) {
     const run = deps.run ?? defaultRun;
+    // codex installs as a `.cmd` PATH shim on Windows (no `codex.exe`), which
+    // `defaultRun` cannot spawn under `shell:false` — see `defaultRunShim`'s doc
+    // comment (iterate-2026-09-16-codex-probe-win32-shim). `deps.run`, when
+    // injected (tests), still governs both arms identically — a caller that
+    // wants a single mock for every tool keeps getting exactly that.
+    const runCodex = deps.run ?? defaultRunShim;
     const existsFn = deps.existsFn ?? fsExistsSync;
     const readdirFn = deps.readdirFn ?? ((p) => fsReaddirSync(p));
     const homeDir = deps.homeDir ?? os.homedir();
@@ -70,14 +76,21 @@ export async function probeReadiness(deps) {
     const cacheRoot = shipwrightCacheRoot(homeDir);
     // Fire the independent toolchain arms concurrently — the event loop is free
     // the whole time (execFile is async). The python arm may run up to 3 sequential
-    // probes internally (resolvePython), so the wait is max(uv, PYTHON-ARM, git).
-    const [uv, py, git] = await Promise.all([
+    // probes internally (resolvePython), so the wait is max(uv, PYTHON-ARM, git, codex).
+    const [uv, py, git, codex] = await Promise.all([
         run("uv", ["--version"]),
         resolvePython(run),
         run("git", ["--version"]),
+        runCodex("codex", ["--version"]),
     ]);
     const checks = [];
-    // Claude CLI — the engine. Verdict comes pre-resolved from cli-compat.
+    // Claude CLI — one of the two engines. Verdict comes pre-resolved from
+    // cli-compat. Codex Light AC8 (revised 2026-09-16): a per-task runtime
+    // toggle means either CLI can be picked on any task regardless of the
+    // global default, so this can no longer be individually `critical` — an
+    // all-Codex operator with no Claude CLI installed must still reach ready.
+    // Reported informationally here; the combined "at least one engine" gate
+    // below is what actually blocks readiness.
     checks.push({
         key: "claude",
         label: "Claude CLI",
@@ -87,10 +100,22 @@ export async function probeReadiness(deps) {
             : deps.claude.raw
                 ? `${deps.claude.raw} (need >= ${deps.claude.minSupported})`
                 : "not found",
-        why: "the engine the Command Center drives",
-        critical: true,
+        why: "one of two engines the Command Center can drive — needs at least one of Claude CLI / Codex CLI",
+        critical: false,
         hint: deps.claude.supported ? undefined : installHint("claude", platform),
     });
+    // Codex CLI — the other engine (Spec/codex-light-webui.md AC8). Presence
+    // alone is the bar (no version-compat table exists for Codex yet, unlike
+    // Claude's MIN_SUPPORTED_CLI / cli-compat.ts).
+    checks.push({
+        key: "codex",
+        label: "Codex CLI",
+        ok: codex.ok,
+        detail: codex.ok ? extractVersion(codex.stdout + codex.stderr) || "detected" : "not found",
+        why: "one of two engines the Command Center can drive — needs at least one of Claude CLI / Codex CLI",
+        critical: false,
+        hint: codex.ok ? undefined : installHint("codex", platform),
+    });
     // Shipwright plugins installed — the marketplace cache holds one dir per plugin.
     // A door-critical plugin that is absent means that door opens into a missing
     // command, so "some plugins installed" is not the same as "ready".
@@ -180,7 +205,10 @@ export async function probeReadiness(deps) {
         critical: true,
         hint: git.ok ? undefined : installHint("git", platform),
     });
-    const ready = checks.every((c) => c.ok || !c.critical);
+    // AC8's combined gate: at least one engine must be usable, on top of every
+    // other individually-critical check (plugins/cache/uv/python/git).
+    const engineReady = deps.claude.supported || codex.ok;
+    const ready = engineReady && checks.every((c) => c.ok || !c.critical);
     return { ready, checks, repairCommand: READINESS_REPAIR_COMMAND };
 }
 //# sourceMappingURL=readiness-probe.js.map