@zaip-ai/cli 2.0.0 → 2.6.0

package/templates/.agents/config/clients/codex/agents/zaip-agent-security-auditor.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-security-auditor (ZAIP catalog id agent-securi
 Perform independent read-only technical security audits and prioritized recommendations.
 Capabilities: security-audit, security-review, risk-assessment.
 Allowed tools: shell-read, test-runner, package-inspector.
-Required skills: zaip-skill-review, zaip-skill-security.
-Model policy: gpt-5.6-sol; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-review, zaip-skill-security; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: read-only.
 This role is read-only. Do not create, modify, move, or delete workspace files.
 Inputs: audit-scope, evidence-manifest, release-candidate.
@@ -21,11 +21,8 @@ Use when: Security audit, sensitive change, or release requires independent asse
 Do not use when: Implementation, remediation authorship, or deployment..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-security-auditor and task_name must be exactly luiz_security_auditor_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You may approve only roles outside: auditor.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-task-executor.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=3fe9c73f3fe3e731012fd873bbdfd1a83f719a9e4b13a39d09779fc5d31c5b85
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=098255c07fba5ee22ae2c2726a64740b32f38723fa2530ad3e7bd809580c5422
 name = "zaip-agent-task-executor"
 description = "Execute one bounded generic Task, including dashboard or local scope, and return verification evidence to the orchestrator."
 nickname_candidates = ["leo_software_engineer_zaip_agent"]
@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-task-executor (ZAIP catalog id agent-task-exec
 Execute one bounded generic Task, including dashboard or local scope, and return verification evidence to the orchestrator.
 Capabilities: task-delivery, verification, evidence-production.
 Allowed tools: apply-patch, shell-read, test-runner.
-Required skills: zaip-skill-change.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-change, zaip-skill-architecture-design, zaip-skill-dev-environment, zaip-skill-module-scaffold, zaip-skill-testing-strategy, zaip-skill-test-data, zaip-skill-systematic-debugging; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.
@@ -22,11 +22,8 @@ Do not use when: Macro planning, coordination, or independent review..
 Execute generic dashboard/local Tasks only when their scopes do not select a mandatory specialist.
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-task-executor and task_name must be exactly leo_software_engineer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-website-developer.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=3dc5a440b02971d4809aef9f06740d323d32a27c8f6cbbf4ed79c659897df81c
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=edd4971df57c31601d5dee84ef5362627f83a2f0c650d96c489552a85e0cb2bf
 name = "zaip-agent-website-developer"
 description = "Build website experiences with design-system, SEO, GEO, Markdown for Agents, and Agent Readiness awareness."
 nickname_candidates = ["jonny_website_developer_zaip_agent"]
@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-website-developer (ZAIP catalog id agent-websi
 Build website experiences with design-system, SEO, GEO, Markdown for Agents, and Agent Readiness awareness.
 Capabilities: website-delivery, design-system, seo, geo, markdown-for-agents, agent-readiness, meta-devtools-access.
 Allowed tools: apply-patch, shell-read, test-runner, meta-devtools-mcp.
-Required skills: zaip-skill-change, zaip-skill-website-readiness, zaip-skill-meta-devtools-api-integration.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-change, zaip-skill-website-readiness, zaip-skill-frontend-componentization, zaip-skill-meta-devtools-api-integration; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: apps/site/*.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, website-context.
@@ -21,11 +21,8 @@ Use when: apps/site/**, institutional site, landing page, SEO, GEO, or Markdown
 Do not use when: Product app, backend, or central design-rule changes..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-website-developer and task_name must be exactly jonny_website_developer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-writer.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-writer (ZAIP catalog id agent-text-summarizer)
 Produce faithful summaries, timestamp-aware transcript analyses, and source-grounded documentation for a declared audience without unsupported claims.
 Capabilities: faithful-summarization, timestamped-transcript-analysis, source-grounded-documentation.
 Allowed tools: apply-patch, shell-read, test-runner.
-Required skills: zaip-skill-context, zaip-skill-change, zaip-skill-text-encoding.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-context, zaip-skill-change, zaip-skill-text-encoding; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, source-material, audience, output-constraints.
@@ -23,11 +23,8 @@ Select exactly one writing mode per bounded unit. For a faithful summary, preser
 For delivery documentation, write only inside the declared scope; validate links, referenced commands, and UTF-8 encoding, then return source-grounding evidence. For interaction-only work, do not mutate the workspace.
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-writer and task_name must be exactly lia_technical_writer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/pricing/models.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "updated_at": "2026-09-05T02:45:00.000Z",
+  "updated_at": "2026-09-06T15:04:18Z",
   "source": "official-provider-pricing",
   "disclaimer": "Estimated equivalent API cost using standard token pricing. This is not an invoice or account charge.",
   "models": [
@@ -23,23 +23,28 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
         "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
-        "Priority/Fast pricing uses the official 2x Standard rates."
-      ]
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 12.5,
+      "priority_cache_write_input_per_million_usd": 25,
+      "priority_long_context_supported": true
     },
     {
       "id": "gpt-5.6-sol",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 5,
-      "cached_input_per_million_usd": 0.5,
-      "output_per_million_usd": 30,
-      "reasoning_per_million_usd": 30,
-      "priority_input_per_million_usd": 10,
-      "priority_cached_input_per_million_usd": 1,
-      "priority_output_per_million_usd": 60,
-      "priority_reasoning_per_million_usd": 60,
+      "input_per_million_usd": 4,
+      "cached_input_per_million_usd": 0.4,
+      "output_per_million_usd": 20,
+      "reasoning_per_million_usd": 20,
+      "priority_input_per_million_usd": 8,
+      "priority_cached_input_per_million_usd": 0.8,
+      "priority_output_per_million_usd": 40,
+      "priority_reasoning_per_million_usd": 40,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -47,22 +52,29 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard.",
+        "OpenAI states promotional pricing is available at least through 2026-11-21; reverify before future pricing changes."
+      ],
+      "cache_write_input_per_million_usd": 5,
+      "priority_cache_write_input_per_million_usd": 10,
+      "priority_long_context_supported": true
     },
     {
       "id": "gpt-5.6-terra",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 2.5,
-      "cached_input_per_million_usd": 0.25,
-      "output_per_million_usd": 15,
-      "reasoning_per_million_usd": 15,
-      "priority_input_per_million_usd": 5,
-      "priority_cached_input_per_million_usd": 0.5,
-      "priority_output_per_million_usd": 30,
-      "priority_reasoning_per_million_usd": 30,
+      "input_per_million_usd": 2,
+      "cached_input_per_million_usd": 0.2,
+      "output_per_million_usd": 12,
+      "reasoning_per_million_usd": 12,
+      "priority_input_per_million_usd": 4,
+      "priority_cached_input_per_million_usd": 0.4,
+      "priority_output_per_million_usd": 24,
+      "priority_reasoning_per_million_usd": 24,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -70,22 +82,28 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 2.5,
+      "priority_cache_write_input_per_million_usd": 5,
+      "priority_long_context_supported": true
     },
     {
       "id": "gpt-5.6-luna",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 1,
-      "cached_input_per_million_usd": 0.1,
-      "output_per_million_usd": 6,
-      "reasoning_per_million_usd": 6,
-      "priority_input_per_million_usd": 2,
-      "priority_cached_input_per_million_usd": 0.2,
-      "priority_output_per_million_usd": 12,
-      "priority_reasoning_per_million_usd": 12,
+      "input_per_million_usd": 0.2,
+      "cached_input_per_million_usd": 0.02,
+      "output_per_million_usd": 1.2,
+      "reasoning_per_million_usd": 1.2,
+      "priority_input_per_million_usd": 0.4,
+      "priority_cached_input_per_million_usd": 0.04,
+      "priority_output_per_million_usd": 2.4,
+      "priority_reasoning_per_million_usd": 2.4,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -93,9 +111,15 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 0.25,
+      "priority_cache_write_input_per_million_usd": 0.5,
+      "priority_long_context_supported": true
     },
     {
       "id": "gpt-5.5",

package/templates/.agents/config/project.yaml

@@ -39,7 +39,18 @@ tracking:
   currency: BRL
   storage_mode: tracked_sanitized
 deploy:
-  branch: main
+  # Application targets are persisted authorization. main is permitted when chosen here.
+  frontend:
+    branch: beta
+  backend:
+    branch: beta
+  # Database migrations are always submitted to beta; installation never creates a hosted branch.
+  database:
+    branch: beta
+  # Legacy default for framework-release tooling only.
+  branch: beta
+  production_branch: main
+  allow_production: false
 execution:
   runtime: manual
 assurance: