@zaip-ai/cli 4.2.0 → 4.3.0

package/templates/.agents/config/clients/codex/agents/zaip-agent-governance-compliance.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-governance-compliance"
 description = "Prepare operational governance and compliance artifacts for HR, legal operations, policies, privacy, vendors, and risks inside declared scopes."
 nickname_candidates = ["renata_governance_compliance_specialist_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-governance-compliance (ZAIP catalog id agent-governance-compliance) with role builder.
@@ -12,6 +10,7 @@ Capabilities: governance-compliance, task-delivery, hr-artifacts, legal-operatio
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-change, zaip-skill-decisions, zaip-skill-governance-compliance; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, governance-context.

package/templates/.agents/config/clients/codex/agents/zaip-agent-growth-strategist.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-growth-strategist"
 description = "Advise on business strategy, Growth, RevOps, portfolio priorities, business models, and revenue-or-cost decisions inside declared scopes."
 nickname_candidates = ["robert_growth_strategist_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-growth-strategist (ZAIP catalog id agent-growth-strategist) with role builder.
@@ -12,6 +10,7 @@ Capabilities: growth-strategy, revops-strategy, experimentation-strategy, revenu
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-change, zaip-skill-growth-strategy-revops; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: request-or-task, requirements, growth-context, business-metrics.

package/templates/.agents/config/clients/codex/agents/zaip-agent-marketing-analyst.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-marketing-analyst"
 description = "Create evidence-grounded marketing strategy, copy, campaigns, content, and assets inside declared scopes."
 nickname_candidates = ["lucia_marketing_analyst_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-marketing-analyst (ZAIP catalog id agent-marketing-analyst) with role builder.
@@ -12,6 +10,7 @@ Capabilities: marketing-strategy, copywriting, campaign-planning, marketing-asse
 Allowed tools: apply-patch, shell-read, imagegen, meta-ads-mcp.
 Available skills: zaip-skill-change, zaip-skill-marketing, zaip-skill-meta-ads; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: request-or-task, requirements, marketing-context, approved-brandbook.

package/templates/.agents/config/clients/codex/agents/zaip-agent-orchestrator.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-orchestrator"
 description = "Resolve the DAG and delegate only to capable least-privilege agents."
 nickname_candidates = ["dave_product_owner_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "read-only"
 developer_instructions = """
 Operate as Codex agent zaip-agent-orchestrator (ZAIP catalog id agent-orchestrator) with role orchestrator.
@@ -12,6 +10,7 @@ Capabilities: dag-orchestration, lifecycle-governance.
 Allowed tools: zaip-cli, shell-read, tool-discovery, native-collaboration.
 Available skills: zaip-skill-execution; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: read-only.
 This role is read-only. Do not create, modify, move, or delete workspace files.
 Inputs: prepared-plan, active-work.

package/templates/.agents/config/clients/codex/agents/zaip-agent-refactoring-specialist.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-refactoring-specialist"
 description = "Plan and execute safe refactors, migrations, modularization, and architecture improvements from an inventory-backed map with reversible slices and explicit validation gates."
 nickname_candidates = ["tati_refactoring_specialist_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-refactoring-specialist (ZAIP catalog id agent-refactoring-specialist) with role builder.
@@ -12,6 +10,7 @@ Capabilities: refactor-existing-code, migration, modularization, architecture, s
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-change, zaip-skill-refactor-existing-code, zaip-skill-enforce-architecture; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, source-root, target-architecture, baseline.

package/templates/.agents/config/clients/codex/agents/zaip-agent-sales-specialist.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-sales-specialist"
 description = "Create, edit, and advise on internal sales methodology, processes, sales-facing scripts, qualification, enablement, and handoffs inside declared scopes."
 nickname_candidates = ["aaron_sales_specialist_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-sales-specialist (ZAIP catalog id agent-sales-specialist) with role builder.
@@ -12,6 +10,7 @@ Capabilities: sales-strategy, sales-methodology, sales-process, sales-playbook,
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-change, zaip-skill-sales-methodology; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: request-or-task, requirements, sales-context.

package/templates/.agents/config/clients/codex/agents/zaip-agent-task-executor.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-task-executor"
 description = "Execute one bounded generic Task, including dashboard or local scope, and return verification evidence to the orchestrator."
 nickname_candidates = ["leo_software_engineer_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-task-executor (ZAIP catalog id agent-task-executor) with role task-executor.
@@ -12,6 +10,7 @@ Capabilities: task-delivery, verification, evidence-production.
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-change, zaip-skill-architecture-design, zaip-skill-dev-environment, zaip-skill-module-scaffold, zaip-skill-testing-strategy, zaip-skill-test-data, zaip-skill-systematic-debugging; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.

package/templates/.agents/config/clients/codex/agents/zaip-agent-website-developer.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-website-developer"
 description = "Build website experiences with design-system, SEO, GEO, Markdown for Agents, and Agent Readiness awareness."
 nickname_candidates = ["jonny_website_developer_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-website-developer (ZAIP catalog id agent-website-developer) with role builder.
@@ -12,6 +10,7 @@ Capabilities: website-delivery, design-system, seo, geo, markdown-for-agents, ag
 Allowed tools: apply-patch, shell-read, test-runner, meta-devtools-mcp.
 Available skills: zaip-skill-change, zaip-skill-website-readiness, zaip-skill-frontend-componentization, zaip-skill-meta-devtools-api-integration; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: apps/site/*.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, website-context.

package/templates/.agents/config/clients/codex/agents/zaip-agent-writer.toml

@@ -2,8 +2,6 @@
 name = "zaip-agent-writer"
 description = "Produce faithful summaries, timestamp-aware transcript analyses, and source-grounded documentation for a declared audience without unsupported claims."
 nickname_candidates = ["lia_technical_writer_zaip_agent"]
-model = "gpt-6-sol"
-model_reasoning_effort = "medium"
 sandbox_mode = "workspace-write"
 developer_instructions = """
 Operate as Codex agent zaip-agent-writer (ZAIP catalog id agent-text-summarizer) with role task-executor.
@@ -12,6 +10,7 @@ Capabilities: faithful-summarization, timestamped-transcript-analysis, source-gr
 Allowed tools: apply-patch, shell-read, test-runner.
 Available skills: zaip-skill-context, zaip-skill-change, zaip-skill-text-encoding; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
+Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, source-material, audience, output-constraints.

package/templates/.agents/dashboard/.zaip-managed.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "4.2.0",
+  "version": "4.3.0",
   "files": [
     {
       "path": "DATA-DICTIONARY.md",
@@ -15,28 +15,28 @@
       "sha256": "a5ee8934997171e871200e5ab6db33dcef0446c37c9547a3d22f6bb3aff491b1"
     },
     {
-      "path": "apps/frontend/dist/assets/DashboardHelpDialog-DRI_XwUf.css",
-      "sha256": "95dbb5c26ad73831f36f2a51d5e08ef5eee7ca85190764a3e63bf1e700fbadf8"
+      "path": "apps/frontend/dist/assets/DashboardHelpDialog-CkQ_y8kg.js",
+      "sha256": "439758f84a3522a55eb38ba14db5a023d6b135d10ad9671cdd43e46e692708e2"
     },
     {
-      "path": "apps/frontend/dist/assets/DashboardHelpDialog-DlN5EMmD.js",
-      "sha256": "b2f283db1ec9e7e0e3c54f2efb19922bdb3d1df6ec40a452748b0a2f63bdb2c4"
+      "path": "apps/frontend/dist/assets/DashboardHelpDialog-DRI_XwUf.css",
+      "sha256": "95dbb5c26ad73831f36f2a51d5e08ef5eee7ca85190764a3e63bf1e700fbadf8"
     },
     {
       "path": "apps/frontend/dist/assets/PricingSettingsDialog-v9zGRTlk.js",
       "sha256": "b0ff1ac14837810711047d1be79a55e7f91988a5930661094ea79c0f5371d143"
     },
-    {
-      "path": "apps/frontend/dist/assets/ProjectSettingsPage-BRdoeTWk.js",
-      "sha256": "f3706bbe409eed0b35164d931e4f067c5bfb6f3552217ca787d73eea71d02004"
-    },
     {
       "path": "apps/frontend/dist/assets/ProjectSettingsPage-CQMhvzvJ.css",
       "sha256": "10e875c4e3ab6c252983822e25a85db3d707d903c0fcf39812909fdd1d013f48"
     },
     {
-      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-B_5u4Xnp.js",
-      "sha256": "969e137acd41925cf06229bd97e483f569260665e3385e439731443530e25fdd"
+      "path": "apps/frontend/dist/assets/ProjectSettingsPage-doIMhei7.js",
+      "sha256": "28b6167a8e8b74c7aaa09ff600eb31f10e89af0dd8510c79dca40633aa38f63f"
+    },
+    {
+      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-C_4ftjyB.js",
+      "sha256": "baa839e93efa3beeca6904e997d35a04d471287f8b58a5d69d4a2092575508ef"
     },
     {
       "path": "apps/frontend/dist/assets/TraceabilityWorkspace-DvvavDLY.css",
@@ -58,14 +58,14 @@
       "path": "apps/frontend/dist/assets/icons-vendor-Cv3WBFIF.js",
       "sha256": "f2bde355996235413fec4a9fc854f4669f9a233421e104cead02fa2bce7003de"
     },
-    {
-      "path": "apps/frontend/dist/assets/index-C4rLXrz_.js",
-      "sha256": "97e8deebdc4636afcea722941ae974031bca75d3b36ed8fc844541a548636954"
-    },
     {
       "path": "apps/frontend/dist/assets/index-OBJXZOwe.css",
       "sha256": "43de3012ecb2f5ffd2e8096c0543f35b390066d0d2033440b81682b01e560e89"
     },
+    {
+      "path": "apps/frontend/dist/assets/index-Rbmpz4UO.js",
+      "sha256": "c12cea4a30399bff81a6aac1f12e6b935377551f2bc54d508d6c0c44eb404d80"
+    },
     {
       "path": "apps/frontend/dist/assets/logo_novo_azul-BBx5pA2B.png",
       "sha256": "bb6043bda9fc53a111aaea4d6a004559b9ce8a3569691c060d217a7c6aafa0ae"
@@ -92,7 +92,7 @@
     },
     {
       "path": "apps/frontend/dist/index.html",
-      "sha256": "3b8cd7772ee8589aec743d3607c24808feefd1d0cc6e145c14793396d3b67d50"
+      "sha256": "cf07311e4835a7df3e1e0ed767755d7954578204f999381fe33e38e2085e1816"
     },
     {
       "path": "apps/frontend/dist/logo_novo_azul.png",
@@ -104,7 +104,7 @@
     },
     {
       "path": "apps/frontend/package.json",
-      "sha256": "65231c216c31aeade0c984b814397cc999859fafafa0db6d91524518c2f57f09"
+      "sha256": "d9daf0f6687d5ed2b8800f25a5e24a05a5fadabb24c797140f1c9c0d8b0a95cc"
     },
     {
       "path": "apps/frontend/playwright.dom.config.ts",
@@ -564,7 +564,7 @@
     },
     {
       "path": "modules/cost-monitor/package.json",
-      "sha256": "343ed9bbab867ada90f732bf0bc520c831c4991adb4d209ecb02ec84207e0f19"
+      "sha256": "4c72bcc560c646d36016be1c1a124a4eee8d45ff4630dca5a6551e381d79b86b"
     },
     {
       "path": "modules/cost-monitor/src/agent-groups.test.ts",
@@ -972,7 +972,7 @@
     },
     {
       "path": "modules/operations/package.json",
-      "sha256": "ed9ab59b13875adabf69fef75f5e4c137e31fe9b94e3e83b2c50b46b78135181"
+      "sha256": "8eee832c3121a1b666a8c35b3da037fbe1589b1d196131004b945abea802ccab"
     },
     {
       "path": "modules/operations/src/contracts.ts",
@@ -1680,7 +1680,7 @@
     },
     {
       "path": "modules/traceability/package.json",
-      "sha256": "23191c5d6fd9f685376cbb18fbcc8f28fb689dbd258046b4b74f5d8f76817b0c"
+      "sha256": "c7e00829e871c9c6208f65bbd9bf4487a777d7254856de5df140d578acebf994"
     },
     {
       "path": "modules/traceability/src/contracts.ts",
@@ -1752,7 +1752,7 @@
     },
     {
       "path": "packages/branding/package.json",
-      "sha256": "f351a461d51ad492b725b158da51cc465d54a769f290efd20c896d0c6c7ca159"
+      "sha256": "27a606878749103823a7633875dc4780e90dc1669fc90bf1e45f6560846973ae"
     },
     {
       "path": "packages/branding/src/index.ts",
@@ -1764,7 +1764,7 @@
     },
     {
       "path": "packages/contracts/package.json",
-      "sha256": "ec3c28bd8df852391f9f05544bcf97e57185b365f2982b2a5f9965ad85e4724b"
+      "sha256": "689492a98681d1a4d6b5f550d95a99852804c09becf46a8d5b240f0a293084f7"
     },
     {
       "path": "packages/contracts/src/export.ts",
@@ -1784,7 +1784,7 @@
     },
     {
       "path": "packages/data-export/package.json",
-      "sha256": "ae468b1c4936071fbf57f2b7c6a9c073c39dfa827a9b16e849b74f7a1dd08f56"
+      "sha256": "ccacbb202ff1a31a511f9e156394e4ea82b21104436d3596d2fbcd18f5ffefeb"
     },
     {
       "path": "packages/data-export/src/index.test.ts",
@@ -1808,15 +1808,15 @@
     },
     {
       "path": "packages/local-runtime/dist/server.cjs",
-      "sha256": "6247f923afacbf3b5be41beea52e218385d303ace283d69744c0eeb9afc9917a"
+      "sha256": "a7bee10ccb501a54f778394ba9b678c6a909d0a44c2af203afbc3942db3f9c08"
     },
     {
       "path": "packages/local-runtime/dist/sqlite-read-model.cjs",
-      "sha256": "9f2f4c64d8b3b803eca23ddf72d90d8b3befe22c710effec8f6d4d4d441a7bdd"
+      "sha256": "2e457565c0ddddc71655d5989bfe0690fb16e3bf3bb34aae49f5f31c99ef29a8"
     },
     {
       "path": "packages/local-runtime/package.json",
-      "sha256": "413b1c75aa4c59a0414cdf9bd4e27fa52d9ebaab8ff7b0d5574f3fc9fb45d7fb"
+      "sha256": "378e289a749143672cc67bf9ad3ebc5f25c61bea95fbd8cf51dbd90a76a5a9d2"
     },
     {
       "path": "packages/local-runtime/scripts/build-sqlite-dashboard.mjs",
@@ -1852,7 +1852,7 @@
     },
     {
       "path": "packages/local-runtime/server.mjs",
-      "sha256": "5daeb27d545afda48158801f1560676526770abc807898868aac27e31010c8c1"
+      "sha256": "86b4489d7322af0892aabc49a004be85f6fc9454d0fb5b473849850f77af0bae"
     },
     {
       "path": "packages/local-runtime/src/active-codex-telemetry.test.ts",
@@ -1974,6 +1974,10 @@
       "path": "packages/local-runtime/src/server-macro-population.test.ts",
       "sha256": "cdfe55242dbeb1d6d0eec87781221ad80325a30fcb84de6924707037c8ba76e5"
     },
+    {
+      "path": "packages/local-runtime/src/server-operation-detail.test.ts",
+      "sha256": "77922d17e7b82cbed608c61b45f34af4f7fd0d8cb2d0ff6c50d441d71ec122ff"
+    },
     {
       "path": "packages/local-runtime/src/server-operations-page-filters.ts",
       "sha256": "26259f9bc22e10a75086f0c520bf5ca2320d4a2e72dfc0770e1d67034b8fb047"
@@ -2128,7 +2132,7 @@
     },
     {
       "path": "packages/local-runtime/src/server.test.ts",
-      "sha256": "6b8d006446755d26ab119745dd4d47407e83bf0cf9c1487c0a2cd16e27534d40"
+      "sha256": "81bfe4dc9bd019a50892e64584ee10bb6ab8e261497e542fde5bd612cbb46b72"
     },
     {
       "path": "packages/local-runtime/src/server.ts",
@@ -2380,7 +2384,11 @@
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-counts-every-root-execution-day-returns.test.ts",
-      "sha256": "c3c4bc0ceddcbf0addeae9d64b1b0e9128f6f0ca9ec5aadb618c3c1605b9fd50"
+      "sha256": "754c06e8774234062eaf8b45f7ccc4a6fb745d448aaf82469acef557c7b5c2c6"
+    },
+    {
+      "path": "packages/local-runtime/src/sqlite-read-model-counts-fixture.test-support.ts",
+      "sha256": "782e4571cdfbb332654078b1896e814d85b9deadb351198a7c5f5397d8dae432"
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-does-not-convert-delayed-historical-finalizer.test.ts",
@@ -2540,7 +2548,7 @@
     },
     {
       "path": "packages/local-runtime/start-dashboard-launch-page.test.mjs",
-      "sha256": "908ff7972dc0e6d2fc631bd96c7572383e975b8c81ecd5ab711682d85a74e598"
+      "sha256": "ce94603b829d2db9af509fc9d7b63cbe970046580b4a093433043d8db3c97749"
     },
     {
       "path": "packages/local-runtime/start-dashboard-lifecycle.mjs",
@@ -2612,7 +2620,7 @@
     },
     {
       "path": "packages/ui/package.json",
-      "sha256": "4573a6671dc05fa8604e474d2cfb70dc48b0abfb25b94d95e10af127fe3097be"
+      "sha256": "4a18c468bfdf9999ab01ce62dd117d5c490fa7146dae03b14dcaa65c5159db80"
     },
     {
       "path": "packages/ui/src/DashboardHeader.test.mjs",
@@ -2720,7 +2728,7 @@
     },
     {
       "path": "tests/e2e/package.json",
-      "sha256": "89247d6597c2e8f32c62dab3065a5bb138b376715baefeeac05e20a40bad996e"
+      "sha256": "ebcae8b159031e69475a0c3daad3e83a3d8c6fa779f0640f32572414df081aa5"
     },
     {
       "path": "tests/e2e/playwright.config.ts",

package/templates/.agents/dashboard/apps/frontend/dist/assets/{DashboardHelpDialog-DlN5EMmD.js → DashboardHelpDialog-CkQ_y8kg.js}

@@ -760,7 +760,7 @@ Se uma Task estiver presa em executing/verifying, use o popup Reconciliar para o
 
 Se o problema for de instalacao ou integridade, consulte \`framework.lock.yaml\`.
 
-Se “finalizar” tentou entregar um PRD \`draft\`, confira adapters/skills: o correto é lapidar e mover para \`ready\`. Se uma DAG nova cruza SPECs, una as capacidades em uma SPEC e mantenha a dependência entre suas Tasks. PRD cancelado não reabre; crie sucessor \`rework\`.
+Se “finalizar o documento” tentou entregar um PRD \`draft\`, confira adapters/skills: criar ou lapidar mantém \`draft\`; somente pedido explícito promove para \`ready\`. Pedido de executar pode preparar e ir diretamente para execução. DAG entre SPECs deve preservar os vínculos e dependências no PreparedPlan do PRD, sem consolidar documentos silenciosamente. PRD cancelado não reabre; crie sucessor \`rework\`.
 
 ## Repetição, orçamento e recibos
 
@@ -781,6 +781,57 @@ A tolerância de dez minutos para Run órfã no reparo manual não é prazo de
 desistência de Task em atividade. Um timeout operacional também não comprova
 falha do produto. Veja [autonomia](19-assurance-e-autonomia.md) e
 [relay de fechamento](16-lifecycle-e-reconciliacao.md).
+
+## Hooks e retomada no Codex
+
+### Classificar antes de corrigir
+
+\`Falhou\` indica erro técnico do hook; \`Bloqueado\` indica uma decisão de política.
+Uma contagem histórica não prova regressão atual. Reproduza a operação autorizada
+com o hook ativo e compare o motivo, a sessão e o turno da nova execução.
+
+| Caso | Comportamento esperado e teste |
+| --- | --- |
+| Stop com \`invalid stop hook JSON output\` | A saída usa \`{}\` ou \`decision: block\` com \`reason\`, nunca um \`hookSpecificOutput\` de Stop. Testar todos os caminhos de saída, inclusive erro e continuação. |
+| Resposta útil substituída por aviso de telemetria no Stop | Pendência de transcript, contabilização, lock ou CLI fica no recibo e retorna \`{}\`, sem criar outro prompt. Somente estado de Task própria comprovado nesta invocação pode pedir uma continuação; \`stop_hook_active\` impede repetição. |
+| Transcript local \`\\\\?\\C:\\...\` | Normalizar o namespace local nas duas camadas de verificação. UNC de rede, devices, links e sessão divergente continuam recusados. |
+| Executor nativo bloqueado por correlação | Conferir sessão do pai + turno do filho, além da sessão nativa do filho. Registrar somente vínculo comprovado; não usar a Task global mais recente. |
+| Busca textual por \`AC-...\`, \`Remove-Item\` ou \`;\` | Diferenciar argumento literal de comando executável. Leituras literais não viram mutação por palavras na pesquisa; redirecionamentos e composição destrutiva continuam protegidos. |
+| Git com separadores | Um separador dentro de argumento entre aspas é texto. Separadores fora das aspas continuam exigindo chamadas Git separadas. |
+| Hook repetido em Usuário e Projeto | O instalador só retira registro global reconhecidamente ZAIP após verificar os hooks canônicos do projeto; preserva terceiros e mantém fallback quando não houver confirmação. |
+
+O vínculo local do executor é conferido contra os escopos e o estado da Task
+canônica. Ele não permite que o filho edite seus próprios bindings ou registros
+de autoridade. Patches também verificam os ancestrais físicos: junctions, links
+e hardlinks não viram uma autorização para escapar do escopo textual.
+
+A migração global publica a nova configuração sem substituir um arquivo que um
+editor tenha recriado durante a operação. Em conflito, preserva a versão do
+usuário e o backup original, informa o caminho recuperável e não declara sucesso.
+Mesmo no sucesso, o arquivo original permanece recuperável em
+\`config.toml.zaip-saved-<id>\` junto à configuração privada do Codex. Isso preserva
+também gravações tardias de um editor que mantinha o arquivo anterior aberto.
+Uma segunda execução sem mudanças não cria outro backup. Esses arquivos não
+devem ser publicados nem removidos automaticamente.
+
+Um Stop sem transcript deixa recibo pendente, sem inventar conclusão. Repetição da
+mesma sessão/turno pode reutilizar o caminho já recebido; outro turno não pode.
+Esse recibo não é motivo para solicitar uma nova resposta do modelo: permitir o
+encerramento da interface não significa aprovar ou concluir registros canônicos.
+Falhas permanecem explícitas e recuperáveis; não se promete execução após o Codex parar.
+Transcripts grandes avançam por cursor limitado e podem exigir mais de uma
+recuperação; acompanhe o avanço, não faça varredura global nem apague o recibo.
+
+### Recuperação segura
+
+- \`Bloqueado\` com caminho fora do repositório ou Git composto pode ser uma recusa de segurança correta; não é \`Falhou\`. Separe comandos Git e use somente os caminhos externos autorizados no helper de release.
+- Correlação ausente não autoriza escolher a última Task global. O resolvedor procura também o nome da sessão histórica do thread exato, valida seu cabeçalho/workspace e lê somente esse transcript; um chat antigo não perde identidade por ultrapassar três dias.
+- Runs históricas já gravadas com turno local não se tornam correlacionadas por inferência. Preserve-as; uma retomada com turno observado deve capturar sua identidade real antes de mutações persistentes.
+- Falha de verificação antes de Gui usa [o reparo canônico](../../skills/zaip-skill-execution/references/correction-cycle.md). A barreira de um finalizador já iniciado não pode ser reaberta.
+- EPERM transitório ao ler um lock incumbente no Windows permite no máximo três leituras dentro do deadline. EPERM persistente, EACCES, processo vivo ou contenção inválida continuam falhando fechado; nunca apague um lock vivo para obter verde.
+- Depois de atualizar os hooks, aprovar o conteúdo modificado não comprova que PreToolUse está ativo: confirme o interruptor e execute cenários reais novos. Estatísticas antigas não são apagadas nem transformadas em aprovações.
+- \`doctor\` acusa \`.agents/local\`: preserve qualquer conteúdo legado antes de migrá-lo para \`.local\`. Somente diretórios comprovadamente vazios podem ser removidos de forma não recursiva, com Task e turno correlacionados; não suprima o diagnóstico nem apague histórico para obter aprovação.
+- Um agente de entrega/orquestração aparece com modelo/esforço fixos em Sol mesmo após ajuste: confira a origem canônica e regenere os adaptadores. As preferências do catálogo não são travas; a seleção explícita deve seguir o ledger. O schema da sessão pode continuar carregando o perfil anterior até recarga pelo host. Não reinicie o computador, não troque identidade do agente e não declare Astra observado sem metadados reais. Testes determinísticos provam a política, mas não substituem a homologação nativa Sol/high → Sol/high → Astra/high.
 `,v="# Tools e setup do Codex\n\n1. Peça ao agente para listar ou ativar uma tool; ele usa `$zaip-skill-tool-setup`.\n2. A skill lê somente catálogo e manifesto aplicável.\n3. MCP confiável é registrado desabilitado em `.codex/config.toml` e validado antes da ativação.\n4. API sem MCP confiável aciona `$zaip-skill-api-to-mcp` para gerar um adaptador seguro.\n5. Secrets nunca são coladas no chat; nomes ficam em `.agents/.env.example` e valores em armazenamento local ignorado.\n6. Alterações de configuração devem ser reversíveis e preservar preferências existentes.\n\nAtive por padrão apenas integrações públicas, read-only e sem autenticação, como documentação oficial. Browser/Playwright deve ser opt-in do perfil de desenvolvimento, pois inicia processos e amplia a superfície operacional.\n\n## MCP local gerado de API\n\n1. Modele um `adapter.yaml` a partir de documentação oficial; use o exemplo da skill API-to-MCP.\n2. Execute `scaffold-local-mcp.mjs` para gerar `definition.json`, `server.mjs` e `cli.mjs`.\n3. Rode `node .agents/tools/servers/<id>/cli.mjs doctor`.\n4. Faça chamadas read-only com `cli.mjs call <tool> '<json>'`.\n5. Gere um preview do Codex com `configure-local-mcp.mjs <id>`.\n6. Revise e aplique com `--write`; use `--enable` somente quando o doctor estiver pronto.\n\nO servidor usa STDIO, não abre porta e não exige deploy. Escritas ficam bloqueadas sem aprovação e `ZAIP_ALLOW_MCP_WRITES=1`.\n\n## Documentacao OpenAI\n\nO perfil default habilita `openaiDeveloperDocs` em `.codex/config.toml`, sem credencial e em modo read-only. Perguntas sobre OpenAI API, modelos, SDKs, Codex ou MCP devem acionar `$zaip-skill-openai-docs`, pesquisar o MCP oficial e citar a pagina consultada.\n",y=`# Lifecycle e reconciliacao
 
 ## Entradas
@@ -3015,6 +3066,14 @@ O modelo de ameaça, a matriz allow/deny, todas as camadas, limitações, opera
 rollout, rollback e comandos de verificação estão documentados no
 [guia completo de segurança dos perfis ZAIP-AIOS](.agents/zaip-aios/guides/10-seguranca.md).
 
+Na qualificação dos hooks, diferencie falha técnica, falso bloqueio e recusa de
+segurança esperada. Exija testes do pacote empacotado e uma edição real por
+subagente nativo com o hook ativo; testes simulados não comprovam a identidade
+que o host entrega. O [guia de diagnóstico](.agents/zaip-aios/guides/14-troubleshooting.md)
+descreve os formatos de sessão/turno, o contrato JSON de Stop e a recuperação
+limitada por recibo. Qualificação local não significa publicação no npm nem
+garantia de ausência de bugs em todo ambiente.
+
 
 ## Automação e integrações opcionais