@zalom/plastic 1.9.0 → 1.11.0

package/PLASTIC.md

@@ -31,7 +31,7 @@ store/
     spec.md               # optional - specification (Why deliverable)
     plan.md               # optional - implementation plan (How deliverable)
     checklist.md          # optional - execution registry (How deliverable)
-    outcome.md            # optional - detailed result (Exec deliverable)
+    outcome.md            # detailed result (Exec deliverable) - mandatory at a terminal (Completed and Abandoned alike)
     actions/              # optional - real action files (How deliverable, at least one required)
     resources/            # optional - research, references, screenshots, diagrams
     savepoint.md          # optional - deterministic cycle-step ledger (auto-written)
@@ -61,7 +61,7 @@ tags: [plastic, architecture]
 
 - Context contract: load `sources` strongly (they are what the intent was built from);
   traverse `chain` lightly for discovery. See
-  docs/concepts/how-plastic-sources-and-chains-intents.md for the full model.
+  [`how-plastic-sources-and-chains-intents.md`](https://github.com/zalom/plastic/blob/main/docs/concepts/how-plastic-sources-and-chains-intents.md) for the full model.
 - IDs use Luhmann's alternating convention: `1` → `1a` → `1a1` → `1a1a`
 - Multiple branches increment: `1a`, `1b`, `1c`
 
@@ -73,7 +73,7 @@ of influence (sources/chain/tags) and the `## Links` projection rules.
 | Stage | Section | Deliverable | Detail |
 |-------|---------|-------------|--------|
 | **What** | `## Intent` | `{ID}--{slug}.md` | `plastic-intent-creating` |
-| **Why** | `## Context` + Decisions | `spec.md` | `plastic-intent-brainstorming` |
+| **Why** | `## Context` + Decisions | `spec.md` | `plastic-intent-brainstorming` enriches Context/Decisions; `plastic-intent-speccing` writes `spec.md` |
 | **How** | Planning | `plan.md` + `actions/ACTION_N.md` (at least one) + `checklist.md` | `plastic-intent-planning` |
 | **Exec** | Execution | `outcome.md` | `plastic-intent-executing` |
 
@@ -113,6 +113,13 @@ M = one subsystem (about a day); L = cross-cutting or novel design.
 Tier is recorded as a `Tier: S|M|L` line at the top of spec.md. It is convention-only,
 read by the orchestrator, not enforced by any gate or by doctor.
 
+Settledness is recorded separately, as a `Settled: yes (<reason>)` line directly beneath the
+`Tier:` line, above the `# Spec:` heading. It records that a design has already done its
+thinking, so a later stage can trust it without deriving it again. An absent line means not
+settled; there is no `Settled: no` form. Settledness and scope are independent, so a large
+intent can be settled and never becomes a smaller tier. `scripts/lib/spec_header.rb` is the
+only parser of both lines; nothing else reads the grammar.
+
 See `plastic-conventions > references/tiers-and-dispatch.md` for topology by tier, what never
 gets cut, and guided mode.
 
@@ -194,7 +201,7 @@ Format: `ID--three-to-five-words` (all stores).
 - Root intents: sequential numbers (`1`, `2`, `3`)
 - Branches alternate: `1` → `1a` → `1a1` → `1a1a`
 - Intent file matches directory: `1a1--slug/1a1--slug.md`
-- Next ID: `"${CLAUDE_PLUGIN_ROOT}/scripts/folgezettel-id" <parent_id> <store_path>`
+- Next ID: `ruby ~/.plastic/scripts/folgezettel-id <parent_id> <store_path>`
 
 See `plastic-conventions > references/knowledge-graph.md` for the branch-vs-root semantic
 decision: when to branch versus start a root.
@@ -286,12 +293,20 @@ One line each. On Claude the five edit-path gates (savepoint-pre, lock-gate, cod
 links-gate, create-gate) run inside one dispatcher process per Write or Edit, in that fixed
 order with the first deny winning; what each gate checks is unchanged.
 
-- **create-gate** validates the proposed intent file at What write-time.
-- **gate-check** enforces lifecycle stage order.
+- **savepoint-pre** appends the savepoint ledger line before a write into an intent dir; it
+  records and never denies.
 - **lock-gate** admits only the intent's lock owner or a registered delegate to write into an
   active intent directory.
-- **bash-gate** intercepts a write attempted through a bash or interpreter one-liner, mirrored
-  by the code gate for Write and Edit.
+- **code-gate** denies a code edit before How is delivered and a code edit outside the
+  provisioned worktree (stage rule or worktree rule, first match wins), with the audited
+  `# plastic-ok` escape.
+- **links-gate** enforces the derived `## Links` projection contract at write time.
+- **create-gate** validates the proposed intent file at What write-time.
+- **bash-gate** (on the Bash matcher) intercepts a write attempted through a bash or
+  interpreter one-liner, with the same audited escape.
+- **gate-check** (PostToolUse) enforces lifecycle stage order after each write.
+- **future-intent-check** (UserPromptSubmit) surfaces parked future intents whose keywords
+  match the user's message; it informs and never denies.
 
 See `plastic-conventions > references/gates-and-enforcement.md` for the escape and logging
 detail.

package/README.md

@@ -63,7 +63,7 @@ It solves problems that builder already feels:
 One command installs Plastic for your agent:
 
 ```bash
-npx @zalom/plastic --claude
+npx -y @zalom/plastic install --claude
 ```
 
 Then load the conventions and begin:
@@ -139,7 +139,7 @@ Walk this once in
 | Intent | `plastic-continuing`, `plastic-intent-creating`, `plastic-intent-starting`, `plastic-intent-brainstorming`, `plastic-intent-grilling`, `plastic-intent-speccing`, `plastic-intent-planning`, `plastic-intent-executing`, `plastic-intent-ending`, `plastic-intent-continuing`, `plastic-intent-researching` |
 | Project and delivery | `plastic-project-creating`, `plastic-project-continuing`, `plastic-roadmap`, `plastic-roadmap-continuing`, `plastic-releasing` |
 | Skill | `plastic-skill-creating`, `plastic-skill-evaluating` |
-| Product | `plastic-install`, `plastic-update`, `plastic-uninstall`, `plastic-rollback`, `plastic-doctor`, `plastic-humanizer` |
+| Product | `plastic-install`, `plastic-update`, `plastic-uninstall`, `plastic-rollback`, `plastic-doctor` |
 
 See [`docs/guides/index.md`](docs/guides/index.md) for task-oriented walkthroughs.
 
@@ -149,7 +149,8 @@ plan a machine can build from exactly. Read
 
 ## Compatibility and ownership
 
-- Native installers for Claude (Codex, Hermes, and and others coming soon).
+- Native installers for Claude Code and Codex CLI, both from npm. Hermes is a packaging
+  target for now. See [harness support](docs/reference/harness-adapters.md).
 - Plain Markdown plus Git. The work stays in files you own.
 - Personal stores by default.
 - Guided delivery with a human at every gate, or autonomous delivery when you
@@ -160,8 +161,18 @@ plan a machine can build from exactly. Read
   the frontier reasoning discipline inline, much cheaper; Fable 5 is the frontier model
   itself. Choose the default at install, switch it any time.
 
-Plastic needs Ruby (already on macOS and Linux) and Node.js 18 or later. Bun
-users can run `bunx` in place of `npx`; Bun is never required.
+Plastic needs Ruby 3.0 or later and Node.js 18 or later. Most Linux systems already
+have a new enough Ruby. macOS ships Ruby 2.6, which is too old, so a clean Mac needs
+a newer one first:
+
+```
+curl https://mise.run | sh        # only if mise is not installed yet
+mise use --global ruby@3.3
+```
+
+The installer checks this before it does anything and tells you the same thing if the
+Ruby it finds is too old. Bun users can run `bunx` in place of `npx`; Bun is never
+required.
 
 ## Built with Plastic
 

package/agents/plastic-enforcer.md

@@ -68,13 +68,14 @@ ceremony, never these guarantees.
 1. Arm the gate, then dispatch the brainstorming specialist; gate its `## Context` + `### Decisions`
 2. Dispatch the spec-specialist; gate `spec.md`. Then the planner; gate `plan.md` + `checklist.md`
 3. Dispatch the executor; require a green suite. Sequential, one team per intent, on one branch when files are shared
-4. Dispatch and review by default through Plastic's native engine, `plastic-intent-executing` (implementer plus two-stage review, no external plugin). If `superpowers:subagent-driven-development` and `superpowers:dispatching-parallel-agents` are available, or the user asks for them, delegate to them as an enhancement
+4. Dispatch and review by default through Plastic's native engine, `plastic-intent-executing` (no external plugin): at S and M, one executor dispatch for the whole consolidated action; at L, implementer plus two-stage review per task. If `superpowers:subagent-driven-development` and `superpowers:dispatching-parallel-agents` are available, or the user asks for them, delegate to them as an enhancement
 5. At the final gate, dispatch an independent reviewer subagent, then complete the intent
 
 ## Human-facing stage reporting
 
 At each gate, the orchestrator briefs the human in EM-to-CTO voice: impact first, the one risk
-that matters, then the decision left to them. The shape and per-stage content live in
+that matters, then the decision left to them. This is the depth at M and L; at S the briefing
+fires once, at How. The shape and per-stage content live in
 `skills/auto/references/human-report-contract.md`; follow it rather than improvising a report.
 This is separate from the intent 74 report contract (`skills/auto/references/agent-report-contract.md`),
 which is the internal, structured handoff a dispatched specialist sends back to the orchestrator.

package/agents/plastic-intent-discovery.md

@@ -11,6 +11,13 @@ activation, after the lock is armed and before Why begins, under the lock as
 the owner session, you gather the context that already exists and deposit it
 for the Why stage to consume.
 
+## Skip precondition (Tier S only)
+If a `Tier: S` line is already stamped at the top of `spec.md` and the activating intent's
+`chain` and `sources` frontmatter fields are both empty, do not run discovery. Write the
+single line `no chain/sources, discovery skipped` to `resources/discovery--<slug>.md` and
+stop. Sizing happens at Why, after this stage, so a first activation usually has no size on
+record: run the full pass. Never guess a size to unlock the skip.
+
 ## Responsibilities
 1. **Read the intent's links.** Load the activating intent file's `chain` and
    `sources` frontmatter fields.

package/bin/plastic.js

@@ -46,16 +46,25 @@ if (!existsSync(script)) {
 try {
   execFileSync('ruby', [script, ...rest], {
     stdio: 'inherit',
-    env: { ...process.env, PLASTIC_PACKAGE_ROOT: packageRoot },
+    // Clear RUBYOPT last, after the spread, so a global setting (for example --yjit)
+    // cannot reach a ruby that does not know the flag. A machine with an old ruby
+    // must get preflight's real message, not a crash.
+    env: { ...process.env, PLASTIC_PACKAGE_ROOT: packageRoot, RUBYOPT: '' },
   })
 } catch (err) {
   if (err.status) process.exit(err.status)
-  // Ruby cannot run to print its own message when it is missing, so this
-  // mirrors scripts/lib/preflight.rb's FATAL block word for word.
-  console.error('Plastic needs Ruby 3.0.0 or newer to run its scripts (found not found).')
-  console.error('Install a pinned Ruby with mise:')
-  console.error('  curl https://mise.run | sh        # only if mise is not installed yet')
-  console.error('  mise use --global ruby@3.3')
-  console.error('Then re-run the Plastic installer.')
+  // We only get here when ruby could not be executed at all. A ruby that runs but is
+  // too old exits with a status, handled on the line above, and prints its own real
+  // message from scripts/lib/preflight.rb naming the version actually found.
+  if (err.code === 'ENOENT') {
+    console.error('Plastic needs Ruby 3.0.0 or newer to run its scripts (ruby was not found on PATH).')
+    console.error('Install a pinned Ruby with mise:')
+    console.error('  curl https://mise.run | sh        # only if mise is not installed yet')
+    console.error('  mise use --global ruby@3.3')
+    console.error('Then re-run the Plastic installer.')
+  } else {
+    console.error(`Plastic could not run ruby: ${err.message}`)
+    console.error('Check that `ruby -v` works in this shell, then re-run the Plastic installer.')
+  }
   process.exit(1)
 }

package/hooks/auto-arm

@@ -1,5 +1,5 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].to_s' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].to_s' 2>/dev/null || echo "")
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-auto-arm" "$MESSAGE"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-auto-arm" "$MESSAGE"

package/hooks/bash-gate

@@ -1,3 +1,3 @@
 #!/bin/bash
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec ruby "$SCRIPT_DIR/../scripts/hook-bash-gate"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-bash-gate"

package/hooks/check-update

@@ -31,7 +31,7 @@ fi
     exit 0
   fi
 
-  TARGET=$(printf '%s' "$TAGS" | ruby "$SELECTOR" "$CURRENT" 2>/dev/null)
+  TARGET=$(printf '%s' "$TAGS" | env -u RUBYOPT ruby "$SELECTOR" "$CURRENT" 2>/dev/null)
   CHECKED=$(date -u +%Y-%m-%dT%H:%M:%SZ)
 
   if [ -n "$TARGET" ]; then

package/hooks/continue

@@ -1,6 +1,6 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"]' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"]' 2>/dev/null || echo "")
 
 if echo "$MESSAGE" | grep -iq '\bcontinue\b'; then
   GLOBAL_INDEX="$HOME/.plastic/INDEX.md"
@@ -14,7 +14,7 @@ if echo "$MESSAGE" | grep -iq '\bcontinue\b'; then
   MODE="global"
 
   SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-  OUTPUT=$(ruby "$SCRIPT_DIR/../scripts/hook-continue" "$INDEX" "$STORE_ROOT" "$MODE" 2>/dev/null)
+  OUTPUT=$(env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-continue" "$INDEX" "$STORE_ROOT" "$MODE" 2>/dev/null)
 
   if [ -n "$OUTPUT" ]; then
     echo "$OUTPUT"

package/hooks/edit-gates

@@ -1,3 +1,3 @@
 #!/bin/bash
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec ruby "$SCRIPT_DIR/../scripts/hook-edit-gates"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-edit-gates"

package/hooks/future-intent-check

@@ -1,6 +1,6 @@
 #!/bin/bash
 INPUT=$(cat)
-MESSAGE=$(echo "$INPUT" | ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].downcase' 2>/dev/null || echo "")
+MESSAGE=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'puts JSON.parse(STDIN.read)["user_prompt"].downcase' 2>/dev/null || echo "")
 
 if [ ${#MESSAGE} -lt 10 ]; then
   exit 0
@@ -22,4 +22,4 @@ else
 fi
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-future-intent-check" "$STORE_ROOT" "$MESSAGE"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-future-intent-check" "$STORE_ROOT" "$MESSAGE"

package/hooks/gate-check

@@ -1,12 +1,12 @@
 #!/bin/bash
 INPUT=$(cat)
-FILE_PATH=$(echo "$INPUT" | ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("tool_params", "file_path") || data.dig("tool_input", "file_path") || ""' 2>/dev/null)
+FILE_PATH=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("tool_params", "file_path") || data.dig("tool_input", "file_path") || ""' 2>/dev/null)
 
 if [ -z "$FILE_PATH" ]; then
   exit 0
 fi
 
-SESSION_ID=$(echo "$INPUT" | ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("session_id") || ""' 2>/dev/null)
+SESSION_ID=$(echo "$INPUT" | env -u RUBYOPT ruby -rjson -e 'data = JSON.parse(STDIN.read); puts data.dig("session_id") || ""' 2>/dev/null)
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-gate-check" "$FILE_PATH" "$SESSION_ID"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-gate-check" "$FILE_PATH" "$SESSION_ID"

package/hooks/power-tools

@@ -5,4 +5,4 @@ if [ ! -f "$GLOBAL_INDEX" ]; then
   exit 0
 fi
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec ruby "$SCRIPT_DIR/../scripts/hook-power-tools"
+exec env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-power-tools"

package/hooks/session-start

@@ -6,4 +6,4 @@ if [ ! -f "$GLOBAL_INDEX" ]; then
 fi
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ruby "$SCRIPT_DIR/../scripts/hook-session-start" "$GLOBAL_INDEX" "$HOME/.plastic" "global" "${CLAUDE_PLUGIN_ROOT:-}"
+env -u RUBYOPT ruby "$SCRIPT_DIR/../scripts/hook-session-start" "$GLOBAL_INDEX" "$HOME/.plastic" "global" "${CLAUDE_PLUGIN_ROOT:-}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zalom/plastic",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "Intent-driven idea development system for AI coding agents",
   "type": "module",
   "bin": {

package/scripts/codex-hook

@@ -3,34 +3,37 @@
 # frozen_string_literal: true
 #
 # Usage: codex-hook <gate>
-#   file-mutation gates: code-gate | lock-gate | savepoint-pre | gate-check | create-gate | links-gate
+#   file-mutation gates: edit-gates | gate-check
 #   live-state hooks (intent 199): session-start | check-update | continue |
 #     future-intent-check | auto-arm | power-tools | savepoint
 #   shell-tool gate (intent 203): bash-gate
 #
-# The Codex input adapter (intent 102, extended by 199 and 203). Reads a Codex
-# hook stdin payload once. Three shapes exist and the gate name alone selects
-# which path runs (Codex's own hooks.json registration guarantees they never
-# cross): the file-mutation gates read session_id at top level and the
-# apply_patch command in tool_input.command [guide Part 4], parse the diff
-# envelope via ApplyPatchEnvelope, and drive Plastic's payload-agnostic Ruby
-# gate/savepoint cores once per file operation, relaying stdout/stderr/exit
-# unchanged. The live-state hooks carry no tool_input at all (they are not tool
-# calls); the dispatcher execs the SAME launcher file Claude already runs for
-# that hook (hooks/<name>), which is already harness-agnostic (resolves
-# ~/.plastic off $HOME, reads only the common stdin fields the guide confirms
-# Codex shares with Claude for these three events), so the body is reused, not
-# rewritten (D3). The shell-tool gate (bash-gate) reports tool_name: "Bash" with
-# the command in tool_input.command, but MUST NOT be routed through
-# ApplyPatchEnvelope.parse below: a plain shell command has no
-# *** Begin Patch/*** End Patch envelope, so it would parse to an empty op list
-# and hit this file's own `exit 0 if ops.empty?` line, silently allowing every
-# Bash call and reopening the exact hole intent 203 closes. So it execs the SAME
-# scripts/hook-bash-gate file Claude already runs, unmodified, the identical
-# "drive the body, relay its output" pattern used for the live-state hooks. The
-# one adaptation shared by both the live-state and shell-tool paths is threading
-# the payload's session_id into CLAUDE_CODE_SESSION_ID, since Codex's own
-# process env never carries it, plus
+# The Codex input adapter (intent 102, extended by 199, 203, and collapsed by
+# 251). Reads a Codex hook stdin payload once. Three shapes exist and the gate
+# name alone selects which path runs (Codex's own hooks.json registration
+# guarantees they never cross): the apply_patch path reads session_id at top
+# level and the apply_patch command in tool_input.command [guide Part 4],
+# parses the diff envelope once via ApplyPatchEnvelope, and runs all five gates
+# (savepoint-pre, lock-gate, code-gate, links-gate, create-gate) IN-PROCESS
+# through scripts/lib/codex_edit_gates.rb, which drives the same
+# scripts/lib/edit_gates.rb functions Claude's merged dispatcher drives
+# (mirroring intent 244). This replaced five registered PreToolUse commands and
+# three nested run_core children with one process. The live-state hooks carry
+# no tool_input at all (they are not tool calls); the dispatcher execs the SAME
+# launcher file Claude already runs for that hook (hooks/<name>), which is
+# already harness-agnostic (resolves ~/.plastic off $HOME, reads only the
+# common stdin fields the guide confirms Codex shares with Claude for these
+# three events), so the body is reused, not rewritten (D3). The shell-tool gate
+# (bash-gate) reports tool_name: "Bash" with the command in tool_input.command,
+# but MUST NOT be routed through ApplyPatchEnvelope.parse below: a plain shell
+# command has no *** Begin Patch/*** End Patch envelope, so it would parse to
+# an empty op list and hit this file's own `exit 0 if ops.empty?` line,
+# silently allowing every Bash call and reopening the exact hole intent 203
+# closes. So it execs the SAME scripts/hook-bash-gate file Claude already runs,
+# unmodified, the identical "drive the body, relay its output" pattern used for
+# the live-state hooks. The one adaptation shared by both the live-state and
+# shell-tool paths is threading the payload's session_id into
+# CLAUDE_CODE_SESSION_ID, since Codex's own process env never carries it, plus
 # a bounded timeout: hooks/check-update backgrounds a real npm network call
 # without redirecting its output away from the inherited stdout/stderr pipes,
 # and Codex invokes hooks synchronously, so without a bound a slow network call
@@ -39,9 +42,6 @@ require "json"
 require "open3"
 require "rbconfig"
 require "timeout"
-require_relative "lib/apply_patch_envelope"
-require_relative "lib/intent_validator"
-require_relative "lib/links_gate"
 
 # Sync stdout so a relayed launcher's stdout and stderr land on the merged
 # pipe in call order. Ruby buffers STDOUT (but not STDERR) when it is not a
@@ -68,7 +68,7 @@ if STATE_HOOKS.include?(gate)
   cwd = Dir.pwd if cwd.empty? || !Dir.exist?(cwd)
   env = { "CLAUDE_CODE_SESSION_ID" => (session.empty? ? nil : session) }
   out, err, status = begin
-    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env, launcher, stdin_data: raw, chdir: cwd) }
+    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env.merge("RUBYOPT" => nil), launcher, stdin_data: raw, chdir: cwd) }
   rescue StandardError
     ["", "", nil] # fail open: launcher missing, unexecutable, crashed, or too slow
   end
@@ -88,7 +88,7 @@ if SHELL_HOOKS.include?(gate)
   script = File.join(__dir__, "hook-#{gate}")
   argv = [script]
   out, err, status = begin
-    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env, RbConfig.ruby, *argv, stdin_data: raw, chdir: cwd) }
+    Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env.merge("RUBYOPT" => nil), RbConfig.ruby, *argv, stdin_data: raw, chdir: cwd) }
   rescue StandardError
     ["", "", nil] # fail open: script missing, unexecutable, crashed, or too slow
   end
@@ -97,6 +97,8 @@ if SHELL_HOOKS.include?(gate)
   exit(status ? status.exitstatus : 0)
 end
 
+require_relative "lib/apply_patch_envelope"
+
 command = payload.dig("tool_input", "command") || payload.dig("tool_params", "command")
 exit 0 if command.nil? # fail-open: no tool_input at all (unrecognized gate name or non-tool-call payload)
 ops = ApplyPatchEnvelope.parse(command)
@@ -104,54 +106,30 @@ exit 0 if ops.empty? # fail-open: nothing parseable to gate
 
 CORES = __dir__ # ~/.plastic/scripts
 def run_core(name, *argv)
-  out = IO.popen([RbConfig.ruby, File.join(CORES, name), *argv], "r", err: [:child, :out], &:read)
+  out = IO.popen([{ "RUBYOPT" => nil }, RbConfig.ruby, File.join(CORES, name), *argv], "r", err: [:child, :out], &:read)
   [out, $?.exitstatus]
 end
 
-def intent_file?(path)
-  abs = File.expand_path(path)
-  dir = File.dirname(abs)
-  dir.match?(%r{/store/[^/]+--[^/]+\z}) && File.basename(abs) == "#{File.basename(dir)}.md"
-end
-
 case gate
-when "create-gate"
-  # Pre-write veto: born-complete validation for Add ops on intent files only.
-  # Update/Delete/Move defer to the PostToolUse gate-check backstop (spec Decision 5).
-  ops.each do |o|
-    next unless o.op == :add && intent_file?(o.path)
-    result = IntentValidator.validate_content(o.added_content.to_s)
-    next if result[:ok]
-    $stderr.puts "PLASTIC CREATE GATE - #{File.basename(o.path)} is not a valid intent:"
-    result[:errors].each { |e| $stderr.puts "  #{e}" }
-    $stderr.puts "Create intents via new-intent / plastic-intent-creating; do not hand-author them."
-    exit 2
-  end
-  exit 0
-
-when "lock-gate"
-  # Deny is signalled by JSON on stdout at exit 0. Relay the first deny.
-  # "codex" is threaded as the harness (intent 201 D2): hook-lock-gate renders
-  # any deny reason with the $plastic-<name> form instead of Claude's default
-  # slash.
-  ops.each do |o|
-    out, _ = run_core("hook-lock-gate", o.path, session, "codex")
-    if out.include?('"permissionDecision":"deny"') || out.include?('"permissionDecision": "deny"')
-      print out
-      exit 0
-    end
+when "edit-gates"
+  # The ONE registered PreToolUse command on the apply_patch matcher (intent
+  # 251). Five gates, in-process, in Claude's evaluation order, first deny wins,
+  # each deny shape reproduced exactly: stderr plus exit 2 for code-gate,
+  # links-gate and create-gate; stdout permissionDecision JSON plus exit 0 for
+  # lock-gate. Fail-open at both levels, per gate inside EditGates.dispatch and
+  # again at this file's own top level.
+  begin
+    require_relative "lib/codex_edit_gates"
+    exit CodexEditGates.dispatch(ops: ops, payload: payload)
+  rescue StandardError, ScriptError => e
+    # Dispatcher-internal failure: never impersonate a deny. ScriptError (a
+    # sibling of StandardError, not a subclass) covers LoadError: a future
+    # manifest gap (a lib file required here but not distributed, exactly the
+    # bug the full suite caught during this intent's own delivery) must fail
+    # open with a gate decision, never exit 1 with no decision at all.
+    $stderr.puts "plastic codex edit-gates error: #{e.message}"
+    exit 0
   end
-  exit 0
-
-when "code-gate"
-  ops.each do |o|
-    out, code = run_core("hook-code-gate", o.path, session, o.added_content.to_s)
-    if code == 2
-      $stderr.print out
-      exit 2
-    end
-  end
-  exit 0
 
 when "gate-check"
   last_allow = nil
@@ -166,40 +144,6 @@ when "gate-check"
   print last_allow if last_allow
   exit 0
 
-when "savepoint-pre"
-  ops.each { |o| run_core("hook-savepoint-pre", o.path) }
-  exit 0
-
-when "links-gate"
-  # Write-time belt for the PLASTIC.md ## Links contract (intent 192), reusing
-  # the SAME LinksGate.decision Claude's hook-links-gate already drives, so
-  # both harnesses share one decision function. before_content is the real
-  # on-disk file (File.read, or "" when it does not yet exist); after_content
-  # is the proposed result, o.added_content.
-  #
-  # DISCLOSED, NARROWER judgment than Claude's version (intent 198, Decision
-  # D3): ApplyPatchEnvelope.parse only ever captures a diff's ADDED lines,
-  # never its removed or context lines, so for an Update whose diff is a
-  # partial hunk rather than a full-file rewrite, after_content may not be the
-  # complete proposed file. This is the same class of disclosed limitation
-  # create-gate already carries for Update/Delete/Move (best effort, never a
-  # hard crash). links-gate has no PostToolUse backstop to defer to on Claude
-  # either, so running this best-effort compare on Update ops too is strictly
-  # more coverage than the prior total fail-open.
-  ops.each do |o|
-    next unless intent_file?(o.path)
-
-    before_content = File.exist?(o.path) ? File.read(o.path) : ""
-    plastic_home = ENV.fetch("PLASTIC_HOME") { File.join(Dir.home, ".plastic") }
-    reason = LinksGate.decision(file_path: o.path, before_content: before_content,
-                                 after_content: o.added_content.to_s, plastic_home: plastic_home)
-    next unless reason
-
-    $stderr.puts reason
-    exit 2
-  end
-  exit 0
-
 else
   exit 0
 end