agent-bios 0.10.0 → 0.11.0

package/launch/agent-launch.toml

@@ -11,33 +11,21 @@ passthrough_args = ["--dangerously-skip-permissions"]
 # Optional dependencies. `command` gates the route: unresolvable means the route
 # is unavailable and the review setup degrades without it. `install` is the single
 # source for both the one-line hint shown when it is missing and what
-# `agent-bios install --with <name>` runs.
-[capabilities.onto]
-command = "onto"
-install = "npm i -g onto-mcp"
-# How this tool exposes an operation. The adapter is a protocol codec owned by core,
-# never a method identity, so a second method reusing the tag is data-only.
-# `evidence` names what this tool reports back about the dispatch it performed, and a
-# receipt missing any of it is not credited. These three are what onto's override already
-# returns on its warning channel. They are here because of a measured incident, not a
-# guess: an override that reached no seat resolved to a default provider with a null model
-# and did NOT fail, so a reporter with nothing to check would have called it a success.
-offers = [{ operation = "structured-review", adapter = "mcp-stdio-v1", hosts = ["codex", "claude"], evidence = ["reached_seat", "billing_mode", "auth_defaulted"] }]
-
-# ── dynamic workflow, one concept and two host-bound tools ─────────────────
-# `ultracode` runs ON CLAUDE and `ultracode-for-codex` runs ON CODEX — the names say which,
-# and getting them the wrong way round is the mistake to avoid: the package name is
-# "ultracode, ported for codex", not "the codex one is the real one".
-#
-# What they are FOR, which is what a reader choosing between reviewers actually needs:
-# both drive a dynamic workflow, used here as a flexible many-perspective check on an
-# IMPLEMENTATION — does it function, does it survive an adversary, does the logic hold,
-# does it hold under a real scenario, does it hold under stress. That makes them
-# COMPLEMENTARY to onto rather than competing with it: onto looks hardest at whether
-# authority, gates and harness are consistent with each other. The two are independently
-# selectable, and both single-sided choices are legitimate — a thing whose whole point is
-# that it WORKS can be reviewed by the workflow alone, and a logic-bearing document,
-# ontology, harness or gate can be reviewed by onto alone.
+# `agent-bios install --with <name>` runs. How a tool exposes an operation is its
+# `offers` list: the adapter there is a protocol codec owned by core, never a method
+# identity, so a second method reusing the tag is data-only, and `evidence` names what
+# the tool reports back about the dispatch it performed — a receipt missing any of it
+# is not credited.
+
+# ── deep review, one concept and two host-bound mechanisms ─────────────────
+# Both shipped deep reviewers are the host CLIs themselves — nothing to install beyond
+# the CLI, which is a host rather than a reviewer. `ultracode` runs ON CLAUDE (the
+# Claude Code workflow keyword); `codex-exec` runs ON CODEX (the CLI's non-interactive
+# exec mode). What they are FOR: a deep check on an IMPLEMENTATION — does it function,
+# does it survive an adversary, does the logic hold, does it hold under a real scenario,
+# does it hold under stress. The Claude side fans that across many agents; the Codex
+# side hands the whole packet to one frontier-effort pass. Personal or third-party
+# reviewers register in the user-owned methods file, never here.
 
 [capabilities.ultracode]
 # Not a separate tool: the Claude Code CLI's own dynamic workflow, opened by putting the
@@ -55,17 +43,24 @@ command = "${backend}"
 # claude only: the keyword trigger is a Claude Code feature, so a codex seat cannot run it.
 offers = [{ operation = "workflow-review", adapter = "host-workflow-v1", hosts = ["claude"] }]
 
-[capabilities.ultracode-for-codex]
-command = "ultracode-for-codex"
-install = "npm i -g ultracode-for-codex"
-# codex only, and this is the tool's nature rather than a policy: it drives the Codex
-# app-server and takes its model catalog from there, so a reviewer seated on the
-# claude host is a seat it cannot fill. Declaring both hosts made a codex-main launch
-# emit "run ultracode-for-codex on claude-fable-5", which cannot work.
+[capabilities.codex-exec]
+# The Codex CLI's own non-interactive exec mode. As with `ultracode` above, the command
+# IS the configured backend — `${backend}` and not a duplicated literal, because a
+# duplicated default breaks for anyone whose backend is a wrapper or an absolute path.
+# No `install`: that field is EXECUTED by `agent-bios install --with`, and a missing
+# codex CLI is a missing host, not a missing reviewer.
+command = "${backend}"
+# codex only, and this is the tool's nature rather than a policy: `exec`,
+# `-s read-only`, `-c model_reasoning_effort` and `-c service_tier` are Codex CLI
+# surface (verified against installed codex-cli 0.146.0), so a claude seat cannot
+# run it. `-s read-only` pins the sandbox the descriptor promises; what stays
+# inherited is the ambient ~/.codex configuration (AGENTS.md, config.toml), so
+# this reviewer is read-only but not hermetic — the codex-run wrapper remains the
+# hermetic dispatch when that matters.
 #
-# Between the two, this review is available CROSS-FAMILY from either main — which the
-# codex arm previously had no way to express, and so silently went without.
-offers = [{ operation = "workflow-review", adapter = "host-workflow-v1", hosts = ["codex"] }]
+# Between the two, this review is available CROSS-FAMILY from a claude main — the
+# opposite family's CLI is dispatched as a fresh read-only subprocess.
+offers = [{ operation = "exec-review", adapter = "exec-stdio-v1", hosts = ["codex"] }]
 
 # ── review methods (DESIGN.md §1) ───────────────────────────────────────────
 # Data only. Adding a method here — including one this repo has never seen — must
@@ -92,59 +87,33 @@ aggregation = "majority"
 severity_emits = ["blocker", "high", "medium", "low", "info"]
 severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "low", info = "info" }
 
-[review_methods.onto]
-label = "onto structured lens review"
-description = "Audits any target — code, a design doc, a whole repo — against the intent you state, looking hardest at whether authority, gates and harness are consistent with one another; complementary to the ultracode workflows rather than an alternative, and enough on its own for a logic-bearing document, ontology, harness or gate. Six lenses, cited issues, dissent kept as an artifact. Needs no diff. Returns a handle, not a result: poll 10+ min, and read record_status before believing a clean report."
-capability = "onto"
-operation = "structured-review"
-# `effort` is sent and `auth` is deliberately NOT. onto's per-call override REPLACES
-# a seat whose route differs, so what it omits is dropped rather than inherited —
-# which is why effort must be stated: this binding IS the reviewer's pinned rigour.
-# auth is the opposite case. onto selects the metered route only when a seat says so in
-# writing — `auth = "api_key"` or an `api_key_env` naming the variable to call — and
-# defaults to the subscription worker otherwise, so an omitted auth cannot land on
-# metered and stating one buys nothing. It does cost something: switching a seat to
-# oauth is a route change, so a user who deliberately chose metered loses both their
-# auth and the api_key_env that carried it. Omitting it lets onto's default protect the
-# unconfigured seat and its overlay preserve the configured one.
-instructions = 'call onto_review/onto_prepare_review with llmOverride={{"provider":"{provider}","model":"{model}","effort":"{effort}"}} so onto runs on {provider} at {effort}'
+[review_methods.codex-exec]
+label = "Codex deep exec review"
+# Named for the mechanism, not for the legacy layer. The legacy route token `ultracode`
+# used to BE its capability's key, so naming another tool with the bare name silently
+# repointed the legacy route — the golden caught that, and the fix was to bind the legacy
+# token to a capability explicitly (`LEGACY_ULTRACODE_CAPABILITY`) rather than let a setup
+# name and a tool id be the same string.
+description = "One deep pass by the Codex CLI in non-interactive exec mode: the whole packet handed to a single frontier-effort model rather than fanned out over agents. Use it on things that have to WORK when the strongest single reader beats many angles; the Claude-side workflow below is the fan-out counterpart. Reviews whatever packet you hand it on stdin, so it needs no working-tree state and nothing installed beyond the codex CLI itself."
+capability = "codex-exec"
+operation = "exec-review"
+# The exec flags are the whole mechanism, so they are stated as literals rather than left
+# to the dispatcher's memory. The severity ladder is stated too, and that is what makes
+# the identity map below TRUE rather than copied: this reviewer has no vocabulary of its
+# own — it reports on the ladder because the request tells it to.
+instructions = 'dispatch {command} exec -s read-only -m {model} -c model_reasoning_effort="{effort}" as a fresh read-only process with a self-contained review packet on stdin (the -s flag is what makes read-only true rather than promised; append -c service_tier="fast" only when a faster, shallower turnaround is explicitly wanted), and require every finding to carry one of {severities}'
 output = "review-v1"
-perspectives = ["axiology", "coverage", "evolution", "logic", "semantics", "structure"]
+perspectives = ["deep-exec"]
 trials = 1
 order = "fixed"
 swap_augmentation = false
 aggregation = "union"
-# onto's own REVIEW_SEVERITY_ORDER is this same ladder — read in its source, not
-# assumed. Identity is correct here for a different reason than the panel below.
 severity_emits = ["blocker", "high", "medium", "low", "info"]
 severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "low", info = "info" }
 
-[review_methods.ultracode-for-codex]
-label = "Ultracode workflow review (Codex)"
-# Named for the tool, not for the legacy layer. The legacy route token `ultracode` used to
-# BE this capability's key, so naming the Claude tool `ultracode` silently repointed the
-# legacy route at it — the golden caught that, and the fix was to bind the legacy token to
-# a capability explicitly (`LEGACY_ULTRACODE_CAPABILITY`) rather than let a setup name and
-# a tool id be the same string.
-description = "The same dynamic workflow, ported to Codex — same use: things that have to WORK, checked from many angles rather than one. Fans dozens of Codex agents over your UNCOMMITTED working-tree changes for file:line defects, each candidate verified by its own agent. Its built-in code-review fails before spawning anything when the tree holds no reviewable change — clean, or only types it excludes such as .java, Dockerfile or dist/. Passing that gate is not the same as your files being reviewed. Detached: launching exits 0 even when the run dies."
-capability = "ultracode-for-codex"
-operation = "workflow-review"
-instructions = "run {command} against a self-contained review packet on {model}/{effort}"
-output = "review-v1"
-perspectives = ["orchestration"]
-trials = 1
-order = "fixed"
-swap_augmentation = false
-aggregation = "union"
-# P0..P3 plus a null severity, taken from the tool's own result contract. The mapping
-# is the owner's call: the tool documents the vocabulary but not what each level
-# means, so it cannot be derived. "null" keys a finding the tool reports with none.
-severity_emits = ["P0", "P1", "P2", "P3", "null"]
-severity_map = { P0 = "blocker", P1 = "high", P2 = "medium", P3 = "low", null = "info" }
-
 [review_methods.ultracode]
 label = "Ultracode workflow review (Claude)"
-description = "Claude Code's own dynamic workflow, on Claude. Decomposes the request across many agents and adversarially verifies each candidate finding before it survives. Use it on things that have to WORK — functional, adversarial, logic, scenario and stress passes — where onto is the one to reach for when the question is whether authority, gates and harness agree. Reviews whatever packet you hand it, so it needs no working-tree state. The keyword in the prompt is what opens the workflow: without it the turn is an ordinary session that will answer, plausibly, alone. PRECONDITION this launcher cannot establish: the keyword trigger must be enabled (`workflowKeywordTriggerEnabled`, default true, verified in claude 2.1.220). A resolvable claude CLI proves the command exists, not that the workflow opens — with that setting off the review runs as an ordinary session and would report as though it were orchestrated."
+description = "Claude Code's own dynamic workflow, on Claude. Decomposes the request across many agents and adversarially verifies each candidate finding before it survives. Use it on things that have to WORK — functional, adversarial, logic, scenario and stress passes; the Codex-side deep exec review above is the single-reader counterpart. Reviews whatever packet you hand it, so it needs no working-tree state. The keyword in the prompt is what opens the workflow: without it the turn is an ordinary session that will answer, plausibly, alone. PRECONDITION this launcher cannot establish: the keyword trigger must be enabled (`workflowKeywordTriggerEnabled`, default true, verified in claude 2.1.220). A resolvable claude CLI proves the command exists, not that the workflow opens — with that setting off the review runs as an ordinary session and would report as though it were orchestrated."
 capability = "ultracode"
 operation = "workflow-review"
 # The keyword is the whole mechanism, so it is stated as a literal rather than left to the
@@ -167,9 +136,6 @@ severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "l
 # the reverse map must be unique so it resolves to exactly one validatable seat.
 provider = "openai"
 models = ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"]
-# onto review seat used when a CROSS-family main (Claude) routes onto review to
-# this (gpt/codex) family; must be an onto review-role registered (provider, model).
-onto_review = { provider = "openai", model = "gpt-5.6-sol" }
 
 [hosts.codex.tiers.frontier]
 model = "gpt-5.6-sol"
@@ -209,9 +175,6 @@ sweep = "${CODEX_HOME}/agents/sweep.toml"
 [hosts.claude]
 provider = "anthropic"
 models = ["claude-fable-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5"]
-# onto review seat used when a CROSS-family main (Codex) routes onto review to
-# this (anthropic/claude) family; must be an onto review-role registered (provider, model).
-onto_review = { provider = "anthropic", model = "claude-fable-5" }
 
 [hosts.claude.tiers.frontier]
 model = "claude-fable-5"
@@ -241,7 +204,7 @@ claude_permission_mode = "bypassPermissions"
 
 [presets.deep-review]
 label = "Deep review"
-description = "HELM with hybrid onto, native, and Ultracode review at deep FRONTIER effort."
+description = "HELM with the base panel plus both deep reviewers — Codex exec at ultra and the Claude workflow — at FRONTIER effort."
 mode = "builder"
 main_tier = "helm"
 frontier_effort = { codex = "ultra", claude = "max" }
@@ -318,22 +281,15 @@ tier = "helm"
 provider = "openai"
 tier = "frontier"
 
-[presets.deep-review.review.hosts.claude.methods."onto"]
-provider = "openai"
-tier = "frontier"
-
-[presets.deep-review.review.hosts.claude.methods."ultracode-for-codex"]
+[presets.deep-review.review.hosts.claude.methods."codex-exec"]
 provider = "openai"
-tier = "frontier"
+model = "gpt-5.6-sol"
+effort = "ultra"
 
 [presets.deep-review.review.hosts.codex.base]
 provider = "anthropic"
 tier = "frontier"
 
-[presets.deep-review.review.hosts.codex.methods."onto"]
-provider = "anthropic"
-tier = "frontier"
-
 [presets.deep-review.review.hosts.codex.methods."ultracode"]
 provider = "anthropic"
 tier = "frontier"
@@ -350,22 +306,15 @@ tier = "workhorse"
 provider = "openai"
 tier = "frontier"
 
-[presets.session-distill.review.hosts.claude.methods."onto"]
+[presets.session-distill.review.hosts.claude.methods."codex-exec"]
 provider = "openai"
-tier = "frontier"
-
-[presets.session-distill.review.hosts.claude.methods."ultracode-for-codex"]
-provider = "openai"
-tier = "frontier"
+model = "gpt-5.6-sol"
+effort = "ultra"
 
 [presets.session-distill.review.hosts.codex.base]
 provider = "anthropic"
 tier = "frontier"
 
-[presets.session-distill.review.hosts.codex.methods."onto"]
-provider = "anthropic"
-tier = "frontier"
-
 [presets.session-distill.review.hosts.codex.methods."ultracode"]
 provider = "anthropic"
 tier = "frontier"

package/launch/i18n/en.toml

@@ -0,0 +1,66 @@
+# UI text catalog: English, the reference key-set. Every `t("key")` in
+# launch/agent-launch.py must exist here, and ko.toml/ja.toml must carry
+# exactly this key-set — the parity gate holds all three, both directions.
+# Chrome only: launch-contract text is never sourced from a catalog.
+
+"mode.title" = "Mode"
+"mode.swe.label" = "Software Engineer"
+"mode.swe.description" = "Repo-scoped work that defers to the project's own AGENTS.md/CLAUDE.md: a bare Vanilla session, or Custom to configure one."
+"mode.builder.label" = "Builder"
+"mode.builder.description" = "Tune tiers, review routes, and permissions across fixed presets; includes Custom."
+"mode.distill.label" = "Session distill"
+"mode.distill.description" = "Enter the dedicated session-distill hub: status, packages, versions, and session start."
+
+"language.label" = "Language"
+"language.description" = "Choose the TUI language (English / 한국어 / 日本語). The corpus the AI consumes stays English; this changes the launcher's screens only."
+"language.title" = "Language"
+"language.en.description" = "Show the launcher's screens in English."
+"language.ko.description" = "런처 화면을 한국어로 표시합니다."
+"language.ja.description" = "ランチャーの画面を日本語で表示します。"
+
+"corpus.label" = "Corpus packages"
+"corpus.description" = "Choose which corpus domain packages are installed; applying runs the installer's onboard loop (install + activation canary)."
+"corpus.title" = "Corpus packages"
+"corpus.core.line" = "core + infra always install; the checklist covers the optional domain packages."
+"corpus.toggle.description" = "Toggle this domain package. Nothing changes until Apply."
+"corpus.apply.label" = "Apply selection"
+"corpus.apply.description" = "Run agent-bios onboard with exactly the checked set; the installer deploys, canaries, and records the outcome."
+"corpus.apply.unchanged" = "the checked set equals the applied one — nothing to apply"
+"corpus.unavailable.line1" = "The corpus status projection is missing or predates domain reporting."
+"corpus.unavailable.line2" = "Run: agent-bios install   (it rewrites the projection this screen reads)"
+"corpus.back.hint" = "Return to the mode menu."
+
+"wizard.title" = "Register another reviewer"
+"wizard.id.label" = "Method id (kebab-case)"
+"wizard.label.label" = "Label (shown in the method list)"
+"wizard.description.label" = "Description (what it reviews best)"
+"wizard.drives.title" = "What runs this reviewer?"
+"wizard.drives.tool.label" = "An installed tool"
+"wizard.drives.tool.description" = "The method drives a capability: a command this machine can resolve, with an operation/adapter/hosts offer."
+"wizard.drives.panel.label" = "Fresh host subprocesses (panel-shaped)"
+"wizard.drives.panel.description" = "No tool: isolated passes by the host CLI itself. The reader requires at least 2 distinct perspectives and 2 trials."
+"wizard.cap.name.label" = "Capability name"
+"wizard.cap.command.label" = "Command (resolved on PATH, or ${backend} for the host CLI)"
+"wizard.cap.install.label" = "Install line (runs via agent-bios install --with; '-' for none)"
+"wizard.cap.operation.label" = "Operation (the join key between method and offer)"
+"wizard.cap.adapter.title" = "Adapter (core protocol codec)"
+"wizard.cap.hosts.title" = "Which host seats can this tool fill?"
+"wizard.cap.hosts.both" = "both (codex and claude)"
+"wizard.perspectives.label" = "Perspectives (comma-separated, at least 2)"
+"wizard.trials.label" = "Trials (at least 2)"
+"wizard.instructions.label" = "Instructions (slots: {command} {model} {effort} {provider} {host} {service_tier} {perspectives} {trials} {severities})"
+"wizard.emits.label" = "Severity values YOUR reviewer reports, verbatim (comma-separated)"
+"wizard.map.title" = "Map to the canonical ladder"
+"wizard.confirm.title" = "The reader accepted this block — write it?"
+"wizard.confirm.target" = "Appends to:"
+"wizard.confirm.write.label" = "Write it"
+"wizard.confirm.write.description" = "Append atomically; your file's existing content is untouched."
+"wizard.confirm.edit.label" = "Edit answers again"
+"wizard.refused.title" = "The reader refused this block"
+"wizard.refused.header" = "Validation is the reader's own; its message, verbatim:"
+"wizard.refused.edit.label" = "Edit answers (kept as defaults)"
+"wizard.refused.edit.description" = "Walk the questions again; every answer is pre-filled."
+"wizard.refused.contract.label" = "Show the file contract"
+"wizard.raced.line" = "The methods file changed while the wizard was open; nothing was written. Re-run the registration."
+"wizard.postwrite.line" = "Post-write re-read did not show the method; the file was restored from your shell's perspective — inspect it by hand."
+"wizard.done.line" = "Registered and live in this launcher:"

package/launch/i18n/ja.toml

@@ -0,0 +1,63 @@
+# UI text catalog: Japanese. Key-set must equal en.toml exactly (gate-enforced).
+
+"mode.title" = "モード"
+"mode.swe.label" = "Software Engineer"
+"mode.swe.description" = "プロジェクト自身の AGENTS.md/CLAUDE.md に従うリポジトリ範囲の作業: 素の Vanilla セッション、または Custom で構成します。"
+"mode.builder.label" = "Builder"
+"mode.builder.description" = "固定プリセットで tier・レビュールート・権限を調整します。Custom を含みます。"
+"mode.distill.label" = "Session distill"
+"mode.distill.description" = "専用の session-distill ハブへ: ステータス、パッケージ、バージョン、セッション開始。"
+
+"language.label" = "言語"
+"language.description" = "TUI の言語を選択します (English / 한국어 / 日本語)。AI が消費するコーパスは英語のままで、ランチャーの画面だけが変わります。"
+"language.title" = "言語"
+"language.en.description" = "Show the launcher's screens in English."
+"language.ko.description" = "런처 화면을 한국어로 표시합니다."
+"language.ja.description" = "ランチャーの画面を日本語で表示します。"
+
+"corpus.label" = "コーパスパッケージ"
+"corpus.description" = "インストールするコーパスのドメインパッケージを選択します。適用するとインストーラーの onboard ループ（インストール + 起動カナリア）が実行されます。"
+"corpus.title" = "コーパスパッケージ"
+"corpus.core.line" = "core + infra は常にインストールされます。このチェックリストは任意のドメインパッケージのみを扱います。"
+"corpus.toggle.description" = "このドメインパッケージを切り替えます。Apply まで何も変わりません。"
+"corpus.apply.label" = "選択を適用"
+"corpus.apply.description" = "チェックされた集合そのままで agent-bios onboard を実行します。デプロイ・カナリア・結果記録はインストーラーが行います。"
+"corpus.apply.unchanged" = "チェックされた集合は適用済みの集合と同じです — 適用するものがありません"
+"corpus.unavailable.line1" = "corpus status projection が存在しないか、ドメイン報告以前のバージョンです。"
+"corpus.unavailable.line2" = "実行: agent-bios install   (この画面が読む projection を書き直します)"
+"corpus.back.hint" = "モードメニューに戻ります。"
+
+"wizard.title" = "別のレビュアーを登録"
+"wizard.id.label" = "Method id (kebab-case)"
+"wizard.label.label" = "ラベル (method 一覧に表示)"
+"wizard.description.label" = "説明 (何のレビューが得意か)"
+"wizard.drives.title" = "このレビュアーは何が実行しますか?"
+"wizard.drives.tool.label" = "インストール済みのツール"
+"wizard.drives.tool.description" = "method が capability を駆動します: このマシンで解決できる command と operation/adapter/hosts offer。"
+"wizard.drives.panel.label" = "新しい host サブプロセス (panel 型)"
+"wizard.drives.panel.description" = "ツールなし: host CLI 自体の隔離パス。reader は相異なる perspective 2 つ以上と trial 2 回以上を要求します。"
+"wizard.cap.name.label" = "Capability 名"
+"wizard.cap.command.label" = "Command (PATH で解決、host CLI なら ${backend})"
+"wizard.cap.install.label" = "Install 行 (agent-bios install --with が実行; なければ '-')"
+"wizard.cap.operation.label" = "Operation (method と offer を結ぶ join key)"
+"wizard.cap.adapter.title" = "Adapter (core プロトコル codec)"
+"wizard.cap.hosts.title" = "このツールが担える host seat は?"
+"wizard.cap.hosts.both" = "両方 (codex と claude)"
+"wizard.perspectives.label" = "Perspectives (カンマ区切り、2 つ以上)"
+"wizard.trials.label" = "Trials (2 以上)"
+"wizard.instructions.label" = "Instructions (slot: {command} {model} {effort} {provider} {host} {service_tier} {perspectives} {trials} {severities})"
+"wizard.emits.label" = "レビュアーが実際に報告する severity 値、そのまま (カンマ区切り)"
+"wizard.map.title" = "canonical ladder へマッピング"
+"wizard.confirm.title" = "reader がこのブロックを受理しました — 書き込みますか?"
+"wizard.confirm.target" = "追記先:"
+"wizard.confirm.write.label" = "書き込む"
+"wizard.confirm.write.description" = "アトミックに追記します。ファイルの既存内容には触れません。"
+"wizard.confirm.edit.label" = "回答を再編集"
+"wizard.refused.title" = "reader がこのブロックを拒否しました"
+"wizard.refused.header" = "検証は reader のものです。そのメッセージをそのまま:"
+"wizard.refused.edit.label" = "回答を編集 (既定値として保持)"
+"wizard.refused.edit.description" = "質問をやり直します。すべての回答が事前入力されています。"
+"wizard.refused.contract.label" = "ファイル契約を表示"
+"wizard.raced.line" = "ウィザードを開いている間に methods ファイルが変更されました。何も書き込んでいません。登録をやり直してください。"
+"wizard.postwrite.line" = "書き込み後の再読込で method が見つかりません。ファイルを直接確認してください。"
+"wizard.done.line" = "登録完了、このランチャーで即時利用可能:"

package/launch/i18n/ko.toml

@@ -0,0 +1,63 @@
+# UI text catalog: Korean. Key-set must equal en.toml exactly (gate-enforced).
+
+"mode.title" = "모드"
+"mode.swe.label" = "Software Engineer"
+"mode.swe.description" = "프로젝트 자체의 AGENTS.md/CLAUDE.md를 따르는 레포 범위 작업: 순정 Vanilla 세션 또는 Custom으로 직접 구성합니다."
+"mode.builder.label" = "Builder"
+"mode.builder.description" = "고정 프리셋들에서 tier·리뷰 라우트·권한을 조정합니다. Custom 포함."
+"mode.distill.label" = "Session distill"
+"mode.distill.description" = "전용 session-distill 허브로 이동: 상태, 패키지, 버전, 세션 시작."
+
+"language.label" = "언어"
+"language.description" = "TUI 언어를 선택합니다 (English / 한국어 / 日本語). AI가 소비하는 코퍼스는 영어 그대로이며, 런처 화면만 바뀝니다."
+"language.title" = "언어"
+"language.en.description" = "Show the launcher's screens in English."
+"language.ko.description" = "런처 화면을 한국어로 표시합니다."
+"language.ja.description" = "ランチャーの画面を日本語で表示します。"
+
+"corpus.label" = "코퍼스 패키지"
+"corpus.description" = "설치할 코퍼스 도메인 패키지를 선택합니다. 적용하면 설치기의 onboard 루프(설치 + 활성화 카나리)가 실행됩니다."
+"corpus.title" = "코퍼스 패키지"
+"corpus.core.line" = "core + infra는 항상 설치됩니다. 이 체크리스트는 선택 도메인 패키지만 다룹니다."
+"corpus.toggle.description" = "이 도메인 패키지를 토글합니다. Apply 전까지 아무것도 바뀌지 않습니다."
+"corpus.apply.label" = "선택 적용"
+"corpus.apply.description" = "체크된 집합 그대로 agent-bios onboard를 실행합니다. 배포·카나리·결과 기록은 설치기가 수행합니다."
+"corpus.apply.unchanged" = "체크된 집합이 적용된 집합과 같습니다 — 적용할 것이 없습니다"
+"corpus.unavailable.line1" = "corpus status projection이 없거나 도메인 보고 이전 버전입니다."
+"corpus.unavailable.line2" = "실행: agent-bios install   (이 화면이 읽는 projection을 다시 씁니다)"
+"corpus.back.hint" = "모드 메뉴로 돌아갑니다."
+
+"wizard.title" = "다른 리뷰어 등록"
+"wizard.id.label" = "Method id (kebab-case)"
+"wizard.label.label" = "라벨 (method 목록에 표시)"
+"wizard.description.label" = "설명 (무엇을 가장 잘 리뷰하는지)"
+"wizard.drives.title" = "이 리뷰어는 무엇이 실행하나요?"
+"wizard.drives.tool.label" = "설치된 도구"
+"wizard.drives.tool.description" = "method가 capability를 구동합니다: 이 머신에서 해석 가능한 command와 operation/adapter/hosts offer."
+"wizard.drives.panel.label" = "새 host 서브프로세스 (panel형)"
+"wizard.drives.panel.description" = "도구 없음: host CLI 자체의 격리 pass. reader가 서로 다른 perspective 2개 이상과 trial 2회 이상을 요구합니다."
+"wizard.cap.name.label" = "Capability 이름"
+"wizard.cap.command.label" = "Command (PATH에서 해석, host CLI면 ${backend})"
+"wizard.cap.install.label" = "Install 라인 (agent-bios install --with가 실행; 없으면 '-')"
+"wizard.cap.operation.label" = "Operation (method와 offer를 잇는 join key)"
+"wizard.cap.adapter.title" = "Adapter (core 프로토콜 codec)"
+"wizard.cap.hosts.title" = "이 도구가 채울 수 있는 host seat는?"
+"wizard.cap.hosts.both" = "둘 다 (codex와 claude)"
+"wizard.perspectives.label" = "Perspectives (쉼표 구분, 2개 이상)"
+"wizard.trials.label" = "Trials (2 이상)"
+"wizard.instructions.label" = "Instructions (slot: {command} {model} {effort} {provider} {host} {service_tier} {perspectives} {trials} {severities})"
+"wizard.emits.label" = "리뷰어가 실제로 보고하는 severity 값들, 그대로 (쉼표 구분)"
+"wizard.map.title" = "canonical ladder로 매핑"
+"wizard.confirm.title" = "reader가 이 블록을 수락했습니다 — 기록할까요?"
+"wizard.confirm.target" = "추가 대상:"
+"wizard.confirm.write.label" = "기록"
+"wizard.confirm.write.description" = "원자적으로 append합니다. 파일의 기존 내용은 건드리지 않습니다."
+"wizard.confirm.edit.label" = "답변 다시 편집"
+"wizard.refused.title" = "reader가 이 블록을 거부했습니다"
+"wizard.refused.header" = "검증은 reader의 것입니다. 그 메시지 그대로:"
+"wizard.refused.edit.label" = "답변 편집 (기본값으로 유지됨)"
+"wizard.refused.edit.description" = "질문을 다시 진행합니다. 모든 답이 미리 채워져 있습니다."
+"wizard.refused.contract.label" = "파일 계약 보기"
+"wizard.raced.line" = "마법사가 열려 있는 동안 methods 파일이 바뀌었습니다. 아무것도 기록하지 않았습니다. 등록을 다시 실행하세요."
+"wizard.postwrite.line" = "기록 후 재확인에서 method가 보이지 않습니다. 파일을 직접 확인하세요."
+"wizard.done.line" = "등록 완료, 이 런처에서 즉시 사용 가능:"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bios",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "releaseDate": "2026-08-10",
   "description": "A thin, low-level instruction layer for LLM CLI agents: one set of principles and behavior whichever model you run. Deploys into $HOME by copy via an explicit `agent-bios install`.",
   "bin": {
@@ -17,6 +17,7 @@
     "codex/agents/",
     "codex/config-additions.toml",
     "launch/agent-launch.toml",
+    "launch/i18n",
     "compose/domains.json",
     "learn/learning.schema.json",
     "learn/promotions.json",

package/provenance.json

@@ -1 +1 @@
-{"commit":"2accbf670c653ecc3fcd8fa023cd33a8da7c177d","committedAt":"2026-08-10T06:03:23+09:00","dirty":false}
+{"commit":"7726933922b63dc7d3749e6aa971fb395a26cfad","committedAt":"2026-08-10T16:38:38+09:00","dirty":false}

package/wrappers/codex-run.sh

@@ -4,7 +4,7 @@
 # Purpose: let a caller (e.g. Claude driving Codex CLI) control, per invocation,
 # the three levers that otherwise silently vary by consumer — raw Codex CLI and
 # codex-plugin-cc inherit the real ~/.codex (AGENTS.md + full config.toml), while
-# ultracode-for-codex subagents run hermetic (no AGENTS.md, minimal config). This
+# a hermetic reviewer must see none of it (no AGENTS.md, minimal config). This
 # raw adapter makes that choice explicit instead of implicit. It is not a policy
 # boundary; callers that pass -c are making expert overrides:
 #   (1) AGENTS.md / global instructions   — via CODEX_HOME (the --profile)