@zalom/plastic 1.8.0 → 1.10.0

package/README.md

@@ -63,7 +63,7 @@ It solves problems that builder already feels:
 One command installs Plastic for your agent:
 
 ```bash
-npx @zalom/plastic --claude
+npx -y @zalom/plastic install --claude
 ```
 
 Then load the conventions and begin:
@@ -149,7 +149,8 @@ plan a machine can build from exactly. Read
 
 ## Compatibility and ownership
 
-- Native installers for Claude (Codex, Hermes, and and others coming soon).
+- Native installers for Claude Code and Codex CLI, both from npm. Hermes is a packaging
+  target for now. See [harness support](docs/reference/harness-adapters.md).
 - Plain Markdown plus Git. The work stays in files you own.
 - Personal stores by default.
 - Guided delivery with a human at every gate, or autonomous delivery when you
@@ -160,8 +161,18 @@ plan a machine can build from exactly. Read
   the frontier reasoning discipline inline, much cheaper; Fable 5 is the frontier model
   itself. Choose the default at install, switch it any time.
 
-Plastic needs Ruby (already on macOS and Linux) and Node.js 18 or later. Bun
-users can run `bunx` in place of `npx`; Bun is never required.
+Plastic needs Ruby 3.0 or later and Node.js 18 or later. Most Linux systems already
+have a new enough Ruby. macOS ships Ruby 2.6, which is too old, so a clean Mac needs
+a newer one first:
+
+```
+curl https://mise.run | sh        # only if mise is not installed yet
+mise use --global ruby@3.3
+```
+
+The installer checks this before it does anything and tells you the same thing if the
+Ruby it finds is too old. Bun users can run `bunx` in place of `npx`; Bun is never
+required.
 
 ## Built with Plastic
 
@@ -183,8 +194,9 @@ behind releases are part of the repository, not a hidden process.
 
 ## Conventions
 
-Plastic conventions live in `PLASTIC.md`, distributed to `~/.plastic/PLASTIC.md`
-and overwritten on every update. Project-specific rules live in `AGENTS.md`.
+The always-on core conventions live in `PLASTIC.md`, distributed to `~/.plastic/PLASTIC.md`
+and overwritten on every update. Deeper doctrine lives in the `plastic-conventions` skill,
+loaded on demand by the skills that need it. Project-specific rules live in `AGENTS.md`.
 Run `plastic-doctor` to check installation health; it compares files against
 the manifests, checks store state, and runs automatically after every update.
 

package/agents/plastic-enforcer.md

@@ -68,13 +68,14 @@ ceremony, never these guarantees.
 1. Arm the gate, then dispatch the brainstorming specialist; gate its `## Context` + `### Decisions`
 2. Dispatch the spec-specialist; gate `spec.md`. Then the planner; gate `plan.md` + `checklist.md`
 3. Dispatch the executor; require a green suite. Sequential, one team per intent, on one branch when files are shared
-4. Dispatch and review by default through Plastic's native engine, `plastic-intent-executing` (implementer plus two-stage review, no external plugin). If `superpowers:subagent-driven-development` and `superpowers:dispatching-parallel-agents` are available, or the user asks for them, delegate to them as an enhancement
+4. Dispatch and review by default through Plastic's native engine, `plastic-intent-executing` (no external plugin): at S and M, one executor dispatch for the whole consolidated action; at L, implementer plus two-stage review per task. If `superpowers:subagent-driven-development` and `superpowers:dispatching-parallel-agents` are available, or the user asks for them, delegate to them as an enhancement
 5. At the final gate, dispatch an independent reviewer subagent, then complete the intent
 
 ## Human-facing stage reporting
 
 At each gate, the orchestrator briefs the human in EM-to-CTO voice: impact first, the one risk
-that matters, then the decision left to them. The shape and per-stage content live in
+that matters, then the decision left to them. This is the depth at M and L; at S the briefing
+fires once, at How. The shape and per-stage content live in
 `skills/auto/references/human-report-contract.md`; follow it rather than improvising a report.
 This is separate from the intent 74 report contract (`skills/auto/references/agent-report-contract.md`),
 which is the internal, structured handoff a dispatched specialist sends back to the orchestrator.

package/agents/plastic-intent-curator.md

@@ -27,9 +27,9 @@ You are the Plastic Intent Curator. Your role is to maintain the health and navi
 5. On a terminal-state transition (Completed OR Abandoned), do these things:
    a. Author a real `outcome.md` in the intent directory from `~/.plastic/templates/outcome.md`, with the frontmatter `disposition: delivered` for a completed intent or `disposition: abandoned` for an abandoned one. `outcome.md` is MANDATORY at every terminal, delivered and abandoned alike: on abandon it records the abandonment reason and replaces the scaffolded placeholder sentinel (never leave `outcome.md` a placeholder at a terminal).
    b. Call `plastic-intent-ending` for the terminal-transition close (INDEX move, savepoint `Done` bookend, store commit, disarm, and the QMD reindex last): `ruby ~/.plastic/scripts/end-intent --store <store> --id <id> --disposition delivered|abandoned`, then follow that skill's own disarm and reindex steps. Never restate the INDEX/savepoint/reindex one-liners here.
-6. Structural maintenance is move-and-record, and it is NEVER done without its receipt: remove the misplaced section, file, or ref from its artifact, then create or append `revisions.md` in that intent directory (copy the FORM from `~/.plastic/templates/revisions.md`) IN THE SAME PASS as the edit. If you cannot write `revisions.md` for any reason (permissions, a read-only path), you MUST NOT make the structural edit either - report the blocker instead of leaving an unrecorded change (this mirrors the tool-side rule: project-links, rebuild-graph, and restore-intent-v1 refuse rather than write a change with no receipt; you hold yourself to the same rule by hand). One entry per relocated item, newest at the bottom: a `## Revision vN - YYYY-MM-DD-HH:MM` header, a one-sentence `Why` ending with `[rule: <tag>]`, `Prior location`, and either `Content held` (verbatim) or a one-line `Change` for a frontmatter edit. For a stray file, embed its full content and delete the original. The violation-tag catalog is canonical in PLASTIC.md. A graph edit must move TOWARD ground truth (drop a dangling/false edge, add a reciprocity-forced or documented-real one) and must NEVER invent a relationship - "might be related" is never a valid `[rule:]` reason (PLASTIC.md > WORK vs MAINTENANCE).
+6. Structural maintenance is move-and-record, and it is NEVER done without its receipt: remove the misplaced section, file, or ref from its artifact, then create or append `revisions.md` in that intent directory (copy the FORM from `~/.plastic/templates/revisions.md`) IN THE SAME PASS as the edit. If you cannot write `revisions.md` for any reason (permissions, a read-only path), you MUST NOT make the structural edit either - report the blocker instead of leaving an unrecorded change (this mirrors the tool-side rule: project-links, rebuild-graph, and restore-intent-v1 refuse rather than write a change with no receipt; you hold yourself to the same rule by hand). One entry per relocated item, newest at the bottom: a `## Revision vN - YYYY-MM-DD-HH:MM` header, a one-sentence `Why` ending with `[rule: <tag>]`, `Prior location`, and either `Content held` (verbatim) or a one-line `Change` for a frontmatter edit. For a stray file, embed its full content and delete the original. The violation-tag catalog is canonical in `plastic-conventions > references/maintenance-and-revisions.md`. A graph edit must move TOWARD ground truth (drop a dangling/false edge, add a reciprocity-forced or documented-real one) and must NEVER invent a relationship - "might be related" is never a valid `[rule:]` reason (`plastic-conventions > references/maintenance-and-revisions.md`, WORK vs MAINTENANCE).
 7. Before performing structural maintenance on ANY intent that is NOT the one your own session is currently delivering under its own held delivery lock, you must:
-   a. Check the target's lock freshness: `ruby ~/.plastic/scripts/plastic-lock status --intent-dir <target-intent-dir>` and read the `lock_fresh` field of its JSON output. If `true`, DEFER: make no edit to that intent, and report it as skipped (an active delivery is in progress). This is DETECT-ONLY - you never acquire, create, or hold any lock of your own for maintenance (PLASTIC.md > WORK vs MAINTENANCE; there is exactly one lock in Plastic, the delivery lock).
+   a. Check the target's lock freshness: `ruby ~/.plastic/scripts/plastic-lock status --intent-dir <target-intent-dir>` and read the `lock_fresh` field of its JSON output. If `true`, DEFER: make no edit to that intent, and report it as skipped (an active delivery is in progress). This is DETECT-ONLY - you never acquire, create, or hold any lock of your own for maintenance (`plastic-conventions > references/maintenance-and-revisions.md`, WORK vs MAINTENANCE; there is exactly one lock in Plastic, the delivery lock).
    b. Require a clean store working tree before starting: `git -C ~/.plastic status --porcelain` (or the project store's own root, if not global) must be empty. If it is not, STOP and report the dirty paths rather than risk sweeping an unrelated concurrent change into your own commit; do not proceed until the tree is clean.
    c. Create a fresh branch from the current tip of that repo's main: `git -C <repo-root> checkout -b maintenance/curator-<UTC-timestamp> main`.
    d. Make the scoped edit plus its `revisions.md` receipt (step 6 above), touching nothing else.

package/agents/plastic-intent-discovery.md

@@ -11,6 +11,13 @@ activation, after the lock is armed and before Why begins, under the lock as
 the owner session, you gather the context that already exists and deposit it
 for the Why stage to consume.
 
+## Skip precondition (Tier S only)
+If a `Tier: S` line is already stamped at the top of `spec.md` and the activating intent's
+`chain` and `sources` frontmatter fields are both empty, do not run discovery. Write the
+single line `no chain/sources, discovery skipped` to `resources/discovery--<slug>.md` and
+stop. Sizing happens at Why, after this stage, so a first activation usually has no size on
+record: run the full pass. Never guess a size to unlock the skip.
+
 ## Responsibilities
 1. **Read the intent's links.** Load the activating intent file's `chain` and
    `sources` frontmatter fields.

package/bin/plastic.js

@@ -46,16 +46,25 @@ if (!existsSync(script)) {
 try {
   execFileSync('ruby', [script, ...rest], {
     stdio: 'inherit',
-    env: { ...process.env, PLASTIC_PACKAGE_ROOT: packageRoot },
+    // Clear RUBYOPT last, after the spread, so a global setting (for example --yjit)
+    // cannot reach a ruby that does not know the flag. A machine with an old ruby
+    // must get preflight's real message, not a crash.
+    env: { ...process.env, PLASTIC_PACKAGE_ROOT: packageRoot, RUBYOPT: '' },
   })
 } catch (err) {
   if (err.status) process.exit(err.status)
-  // Ruby cannot run to print its own message when it is missing, so this
-  // mirrors scripts/lib/preflight.rb's FATAL block word for word.
-  console.error('Plastic needs Ruby 3.0.0 or newer to run its scripts (found not found).')
-  console.error('Install a pinned Ruby with mise:')
-  console.error('  curl https://mise.run | sh        # only if mise is not installed yet')
-  console.error('  mise use --global ruby@3.3')
-  console.error('Then re-run the Plastic installer.')
+  // We only get here when ruby could not be executed at all. A ruby that runs but is
+  // too old exits with a status, handled on the line above, and prints its own real
+  // message from scripts/lib/preflight.rb naming the version actually found.
+  if (err.code === 'ENOENT') {
+    console.error('Plastic needs Ruby 3.0.0 or newer to run its scripts (ruby was not found on PATH).')
+    console.error('Install a pinned Ruby with mise:')
+    console.error('  curl https://mise.run | sh        # only if mise is not installed yet')
+    console.error('  mise use --global ruby@3.3')
+    console.error('Then re-run the Plastic installer.')
+  } else {
+    console.error(`Plastic could not run ruby: ${err.message}`)
+    console.error('Check that `ruby -v` works in this shell, then re-run the Plastic installer.')
+  }
   process.exit(1)
 }

package/deprecations.yml

@@ -1,6 +1,6 @@
 # Plastic deprecation notices
 # Each entry is shown to the user during SessionStart.
-# See PLASTIC.md "Deprecation Process" for the full convention.
+# See the plastic-releasing skill for the full convention.
 #
 # Schema:
 #   id: unique-slug (used for dismissal tracking)
@@ -11,4 +11,12 @@
 #   removal: semver where feature is removed
 #   link: optional URL to migration guide
 
-deprecations: []
+deprecations:
+  - id: plastic-reference-md-absorbed
+    severity: info
+    summary: "PLASTIC-reference.md has been absorbed into the plastic-conventions skill and removed; its content now lives in that skill's reference chapters."
+    migration_steps:
+      - "No action is required. Running plastic update removes the leftover ~/.plastic/PLASTIC-reference.md automatically."
+      - "If you hand-copied or hand-edited that file, delete your own copy; it is no longer read by Plastic."
+    introduced: "1.9.0"
+    removal: "1.11.0"

package/hooks/auto-arm

@@ -1,5 +1,5 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].to_s' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].to_s' 2>/dev/null || echo "")
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-auto-arm" "$MESSAGE"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-auto-arm" "$MESSAGE"

package/hooks/bash-gate

@@ -1,3 +1,3 @@
 #!/bin/bash
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec ruby "$SCRIPT_DIR/../scripts/hook-bash-gate"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-bash-gate"

package/hooks/check-update

@@ -31,7 +31,7 @@ fi
     exit 0
   fi
 
-  TARGET=$(printf '%s' "$TAGS" | ruby "$SELECTOR" "$CURRENT" 2>/dev/null)
+  TARGET=$(printf '%s' "$TAGS" | env -u RUBYOPT ruby "$SELECTOR" "$CURRENT" 2>/dev/null)
   CHECKED=$(date -u +%Y-%m-%dT%H:%M:%SZ)
 
   if [ -n "$TARGET" ]; then

package/hooks/continue

@@ -1,6 +1,6 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"]' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"]' 2>/dev/null || echo "")
 
 if echo "$MESSAGE" | grep -iq '\bcontinue\b'; then
   GLOBAL_INDEX="$HOME/.plastic/INDEX.md"
@@ -14,7 +14,7 @@ if echo "$MESSAGE" | grep -iq '\bcontinue\b'; then
   MODE="global"
 
   SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-  OUTPUT=$(ruby "$SCRIPT_DIR/../scripts/hook-continue" "$INDEX" "$STORE_ROOT" "$MODE" 2>/dev/null)
+  OUTPUT=$(env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-continue" "$INDEX" "$STORE_ROOT" "$MODE" 2>/dev/null)
 
   if [ -n "$OUTPUT" ]; then
     echo "$OUTPUT"

package/hooks/edit-gates

@@ -0,0 +1,3 @@
+#!/bin/bash
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-edit-gates"

package/hooks/future-intent-check

@@ -1,6 +1,6 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].downcase' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].downcase' 2>/dev/null || echo "")
 
 if [ ${#MESSAGE} -lt 10 ]; then
   exit 0
@@ -22,4 +22,4 @@ else
 fi
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-future-intent-check" "$STORE_ROOT" "$MESSAGE"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-future-intent-check" "$STORE_ROOT" "$MESSAGE"

package/hooks/gate-check

@@ -1,12 +1,12 @@
 #!/bin/bash
 INPUT=$(cat)
-FILE_PATH=$(echo "$INPUT" | ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("tool_params", "file_path") || data.dig("tool_input", "file_path") || ""' 2>/dev/null)
+FILE_PATH=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("tool_params", "file_path") || data.dig("tool_input", "file_path") || ""' 2>/dev/null)
 
 if [ -z "$FILE_PATH" ]; then
   exit 0
 fi
 
-SESSION_ID=$(echo "$INPUT" | ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("session_id") || ""' 2>/dev/null)
+SESSION_ID=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("session_id") || ""' 2>/dev/null)
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-gate-check" "$FILE_PATH" "$SESSION_ID"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-gate-check" "$FILE_PATH" "$SESSION_ID"

package/hooks/hooks.json

@@ -35,38 +35,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" code-gate",
-            "statusMessage": "Checking lifecycle gate..."
-          },
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" lock-gate",
-            "statusMessage": "Checking lock gate..."
-          }
-        ]
-      },
-      {
-        "matcher": "Write|Edit",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" savepoint-pre",
-            "statusMessage": "Recording stage start..."
-          },
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" links-gate",
-            "statusMessage": "Checking Links gate..."
-          }
-        ]
-      },
-      {
-        "matcher": "Write|Edit|mcp__serena__replace_content|mcp__serena__replace_symbol_body|mcp__serena__insert_after_symbol|mcp__serena__insert_before_symbol|mcp__serena__safe_delete_symbol|mcp__serena__rename_symbol",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" create-gate",
-            "statusMessage": "Checking create gate..."
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" edit-gates",
+            "statusMessage": "Checking Plastic gates..."
           }
         ]
       },
@@ -79,16 +49,6 @@
             "statusMessage": "Checking lifecycle gate..."
           }
         ]
-      },
-      {
-        "matcher": "Bash|Read|Grep|Glob",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" retrieval-gate",
-            "statusMessage": "Checking retrieval gate..."
-          }
-        ]
       }
     ],
     "PostToolUse": [
@@ -139,8 +99,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" qmd-search",
-            "statusMessage": "Searching QMD..."
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" power-tools",
+            "statusMessage": "Checking power tools..."
           }
         ]
       }

package/hooks/power-tools

@@ -0,0 +1,8 @@
+#!/bin/bash
+# power-tools mandate hook launcher (intents 66, 66b, 187, 246). No-op when there is no global store.
+GLOBAL_INDEX="$HOME/.plastic/INDEX.md"
+if [ ! -f "$GLOBAL_INDEX" ]; then
+  exit 0
+fi
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-power-tools"

package/hooks/session-start

@@ -6,4 +6,4 @@ if [ ! -f "$GLOBAL_INDEX" ]; then
 fi
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-session-start" "$GLOBAL_INDEX" "$HOME/.plastic" "global" "${CLAUDE_PLUGIN_ROOT:-}"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-session-start" "$GLOBAL_INDEX" "$HOME/.plastic" "global" "${CLAUDE_PLUGIN_ROOT:-}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zalom/plastic",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "description": "Intent-driven idea development system for AI coding agents",
   "type": "module",
   "bin": {
@@ -38,7 +38,6 @@
     "agents/",
     "templates/",
     "PLASTIC.md",
-    "PLASTIC-reference.md",
     "deprecations.yml"
   ]
 }

package/scripts/codex-hook

@@ -3,33 +3,36 @@
 # frozen_string_literal: true
 #
 # Usage: codex-hook <gate>
-#   file-mutation gates: code-gate | lock-gate | savepoint-pre | gate-check | create-gate | links-gate
+#   file-mutation gates: edit-gates | gate-check
 #   live-state hooks (intent 199): session-start | check-update | continue |
-#     future-intent-check | auto-arm | qmd-search | savepoint
-#   shell-tool gates (intent 203): bash-gate | retrieval-gate
+#     future-intent-check | auto-arm | power-tools | savepoint
+#   shell-tool gate (intent 203): bash-gate
 #
-# The Codex input adapter (intent 102, extended by 199 and 203). Reads a Codex
-# hook stdin payload once. Three shapes exist and the gate name alone selects
-# which path runs (Codex's own hooks.json registration guarantees they never
-# cross): the file-mutation gates read session_id at top level and the
-# apply_patch command in tool_input.command [guide Part 4], parse the diff
-# envelope via ApplyPatchEnvelope, and drive Plastic's payload-agnostic Ruby
-# gate/savepoint cores once per file operation, relaying stdout/stderr/exit
-# unchanged. The live-state hooks carry no tool_input at all (they are not tool
-# calls); the dispatcher execs the SAME launcher file Claude already runs for
-# that hook (hooks/<name>), which is already harness-agnostic (resolves
-# ~/.plastic off $HOME, reads only the common stdin fields the guide confirms
-# Codex shares with Claude for these three events), so the body is reused, not
-# rewritten (D3). The shell-tool gates (bash-gate, retrieval-gate) report
-# tool_name: "Bash" with the command in tool_input.command, but MUST NOT be
-# routed through ApplyPatchEnvelope.parse below: a plain shell command has no
-# *** Begin Patch/*** End Patch envelope, so it would parse to an empty op list
-# and hit this file's own `exit 0 if ops.empty?` line, silently allowing every
-# Bash call and reopening the exact hole intent 203 closes. So these two exec
-# the SAME scripts/hook-bash-gate / scripts/hook-retrieval-gate files Claude
-# already runs, unmodified, the identical "drive the body, relay its output"
-# pattern used for the live-state hooks. The one adaptation shared by both the
-# live-state and shell-tool paths is threading the payload's session_id into
+# The Codex input adapter (intent 102, extended by 199, 203, and collapsed by
+# 251). Reads a Codex hook stdin payload once. Three shapes exist and the gate
+# name alone selects which path runs (Codex's own hooks.json registration
+# guarantees they never cross): the apply_patch path reads session_id at top
+# level and the apply_patch command in tool_input.command [guide Part 4],
+# parses the diff envelope once via ApplyPatchEnvelope, and runs all five gates
+# (savepoint-pre, lock-gate, code-gate, links-gate, create-gate) IN-PROCESS
+# through scripts/lib/codex_edit_gates.rb, which drives the same
+# scripts/lib/edit_gates.rb functions Claude's merged dispatcher drives
+# (mirroring intent 244). This replaced five registered PreToolUse commands and
+# three nested run_core children with one process. The live-state hooks carry
+# no tool_input at all (they are not tool calls); the dispatcher execs the SAME
+# launcher file Claude already runs for that hook (hooks/<name>), which is
+# already harness-agnostic (resolves ~/.plastic off $HOME, reads only the
+# common stdin fields the guide confirms Codex shares with Claude for these
+# three events), so the body is reused, not rewritten (D3). The shell-tool gate
+# (bash-gate) reports tool_name: "Bash" with the command in tool_input.command,
+# but MUST NOT be routed through ApplyPatchEnvelope.parse below: a plain shell
+# command has no *** Begin Patch/*** End Patch envelope, so it would parse to
+# an empty op list and hit this file's own `exit 0 if ops.empty?` line,
+# silently allowing every Bash call and reopening the exact hole intent 203
+# closes. So it execs the SAME scripts/hook-bash-gate file Claude already runs,
+# unmodified, the identical "drive the body, relay its output" pattern used for
+# the live-state hooks. The one adaptation shared by both the live-state and
+# shell-tool paths is threading the payload's session_id into
 # CLAUDE_CODE_SESSION_ID, since Codex's own process env never carries it, plus
 # a bounded timeout: hooks/check-update backgrounds a real npm network call
 # without redirecting its output away from the inherited stdout/stderr pipes,
@@ -39,9 +42,6 @@ require "json"
 require "open3"
 require "rbconfig"
 require "timeout"
-require_relative "lib/apply_patch_envelope"
-require_relative "lib/intent_validator"
-require_relative "lib/links_gate"
 
 # Sync stdout so a relayed launcher's stdout and stderr land on the merged
 # pipe in call order. Ruby buffers STDOUT (but not STDERR) when it is not a
@@ -50,9 +50,9 @@ require_relative "lib/links_gate"
 # caller that merges the dispatcher's own stdout and stderr.
 $stdout.sync = true
 
-STATE_HOOKS = %w[session-start check-update continue future-intent-check auto-arm qmd-search savepoint].freeze
+STATE_HOOKS = %w[session-start check-update continue future-intent-check auto-arm power-tools savepoint].freeze
 STATE_TIMEOUT = 5
-SHELL_HOOKS = %w[bash-gate retrieval-gate].freeze
+SHELL_HOOKS = %w[bash-gate].freeze
 
 gate = ARGV[0].to_s
 raw = ($stdin.read rescue nil)
@@ -68,7 +68,7 @@ if STATE_HOOKS.include?(gate)
   cwd = Dir.pwd if cwd.empty? || !Dir.exist?(cwd)
   env = { "CLAUDE_CODE_SESSION_ID" => (session.empty? ? nil : session) }
   out, err, status = begin
-    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env, launcher, stdin_data: raw, chdir: cwd) }
+    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env.merge("RUBYOPT" => nil), launcher, stdin_data: raw, chdir: cwd) }
   rescue StandardError
     ["", "", nil] # fail open: launcher missing, unexecutable, crashed, or too slow
   end
@@ -78,22 +78,17 @@ if STATE_HOOKS.include?(gate)
 end
 
 if SHELL_HOOKS.include?(gate)
-  # bash-gate / retrieval-gate (intent 203): a shell command has no apply_patch
-  # diff envelope, so this branch execs the SAME scripts/hook-bash-gate /
-  # scripts/hook-retrieval-gate files Claude already runs, unmodified, and
-  # relays their exit code and stderr. It must never fall through to
-  # ApplyPatchEnvelope.parse below (see header comment).
+  # bash-gate (intent 203): a shell command has no apply_patch diff envelope, so
+  # this branch execs the SAME scripts/hook-bash-gate file Claude already runs,
+  # unmodified, and relays its exit code and stderr. It must never fall through
+  # to ApplyPatchEnvelope.parse below (see header comment).
   cwd = payload["cwd"].to_s
   cwd = Dir.pwd if cwd.empty? || !Dir.exist?(cwd)
   env = { "CLAUDE_CODE_SESSION_ID" => (session.empty? ? nil : session) }
   script = File.join(__dir__, "hook-#{gate}")
   argv = [script]
-  # hook-retrieval-gate reads plastic_home off ARGV[0] (mirrors hooks/retrieval-gate's
-  # own launcher, which passes "$HOME/.plastic"); hook-bash-gate takes no args, it
-  # resolves Dir.home directly.
-  argv << ENV.fetch("PLASTIC_HOME") { File.join(Dir.home, ".plastic") } if gate == "retrieval-gate"
   out, err, status = begin
-    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env, RbConfig.ruby, *argv, stdin_data: raw, chdir: cwd) }
+    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env.merge("RUBYOPT" => nil), RbConfig.ruby, *argv, stdin_data: raw, chdir: cwd) }
   rescue StandardError
     ["", "", nil] # fail open: script missing, unexecutable, crashed, or too slow
   end
@@ -102,6 +97,8 @@ if SHELL_HOOKS.include?(gate)
   exit(status ? status.exitstatus : 0)
 end
 
+require_relative "lib/apply_patch_envelope"
+
 command = payload.dig("tool_input", "command") || payload.dig("tool_params", "command")
 exit 0 if command.nil? # fail-open: no tool_input at all (unrecognized gate name or non-tool-call payload)
 ops = ApplyPatchEnvelope.parse(command)
@@ -109,54 +106,30 @@ exit 0 if ops.empty? # fail-open: nothing parseable to gate
 
 CORES = __dir__ # ~/.plastic/scripts
 def run_core(name, *argv)
-  out = IO.popen([RbConfig.ruby, File.join(CORES, name), *argv], "r", err: [:child, :out], &:read)
+  out = IO.popen([{ "RUBYOPT" => nil }, RbConfig.ruby, File.join(CORES, name), *argv], "r", err: [:child, :out], &:read)
   [out, $?.exitstatus]
 end
 
-def intent_file?(path)
-  abs = File.expand_path(path)
-  dir = File.dirname(abs)
-  dir.match?(%r{/store/[^/]+--[^/]+\z}) && File.basename(abs) == "#{File.basename(dir)}.md"
-end
-
 case gate
-when "create-gate"
-  # Pre-write veto: born-complete validation for Add ops on intent files only.
-  # Update/Delete/Move defer to the PostToolUse gate-check backstop (spec Decision 5).
-  ops.each do |o|
-    next unless o.op == :add && intent_file?(o.path)
-    result = IntentValidator.validate_content(o.added_content.to_s)
-    next if result[:ok]
-    $stderr.puts "PLASTIC CREATE GATE - #{File.basename(o.path)} is not a valid intent:"
-    result[:errors].each { |e| $stderr.puts "  #{e}" }
-    $stderr.puts "Create intents via new-intent / plastic-intent-creating; do not hand-author them."
-    exit 2
-  end
-  exit 0
-
-when "lock-gate"
-  # Deny is signalled by JSON on stdout at exit 0. Relay the first deny.
-  # "codex" is threaded as the harness (intent 201 D2): hook-lock-gate renders
-  # any deny reason with the $plastic-<name> form instead of Claude's default
-  # slash.
-  ops.each do |o|
-    out, _ = run_core("hook-lock-gate", o.path, session, "codex")
-    if out.include?('"permissionDecision":"deny"') || out.include?('"permissionDecision": "deny"')
-      print out
-      exit 0
-    end
+when "edit-gates"
+  # The ONE registered PreToolUse command on the apply_patch matcher (intent
+  # 251). Five gates, in-process, in Claude's evaluation order, first deny wins,
+  # each deny shape reproduced exactly: stderr plus exit 2 for code-gate,
+  # links-gate and create-gate; stdout permissionDecision JSON plus exit 0 for
+  # lock-gate. Fail-open at both levels, per gate inside EditGates.dispatch and
+  # again at this file's own top level.
+  begin
+    require_relative "lib/codex_edit_gates"
+    exit CodexEditGates.dispatch(ops: ops, payload: payload)
+  rescue StandardError, ScriptError => e
+    # Dispatcher-internal failure: never impersonate a deny. ScriptError (a
+    # sibling of StandardError, not a subclass) covers LoadError: a future
+    # manifest gap (a lib file required here but not distributed, exactly the
+    # bug the full suite caught during this intent's own delivery) must fail
+    # open with a gate decision, never exit 1 with no decision at all.
+    $stderr.puts "plastic codex edit-gates error: #{e.message}"
+    exit 0
   end
-  exit 0
-
-when "code-gate"
-  ops.each do |o|
-    out, code = run_core("hook-code-gate", o.path, session, o.added_content.to_s)
-    if code == 2
-      $stderr.print out
-      exit 2
-    end
-  end
-  exit 0
 
 when "gate-check"
   last_allow = nil
@@ -171,40 +144,6 @@ when "gate-check"
   print last_allow if last_allow
   exit 0
 
-when "savepoint-pre"
-  ops.each { |o| run_core("hook-savepoint-pre", o.path) }
-  exit 0
-
-when "links-gate"
-  # Write-time belt for the PLASTIC.md ## Links contract (intent 192), reusing
-  # the SAME LinksGate.decision Claude's hook-links-gate already drives, so
-  # both harnesses share one decision function. before_content is the real
-  # on-disk file (File.read, or "" when it does not yet exist); after_content
-  # is the proposed result, o.added_content.
-  #
-  # DISCLOSED, NARROWER judgment than Claude's version (intent 198, Decision
-  # D3): ApplyPatchEnvelope.parse only ever captures a diff's ADDED lines,
-  # never its removed or context lines, so for an Update whose diff is a
-  # partial hunk rather than a full-file rewrite, after_content may not be the
-  # complete proposed file. This is the same class of disclosed limitation
-  # create-gate already carries for Update/Delete/Move (best effort, never a
-  # hard crash). links-gate has no PostToolUse backstop to defer to on Claude
-  # either, so running this best-effort compare on Update ops too is strictly
-  # more coverage than the prior total fail-open.
-  ops.each do |o|
-    next unless intent_file?(o.path)
-
-    before_content = File.exist?(o.path) ? File.read(o.path) : ""
-    plastic_home = ENV.fetch("PLASTIC_HOME") { File.join(Dir.home, ".plastic") }
-    reason = LinksGate.decision(file_path: o.path, before_content: before_content,
-                                 after_content: o.added_content.to_s, plastic_home: plastic_home)
-    next unless reason
-
-    $stderr.puts reason
-    exit 2
-  end
-  exit 0
-
 else
   exit 0
 end