axstack 0.52.1 → 0.53.0

package/docs/workflows.md

@@ -137,12 +137,20 @@ Haiku 5.5 high, with class `haiku` and exact pin
 holds that role without substitution. `codex-only` keeps its Codex
 assignments for those roles. Scout adds a Luna xhigh codebase seat in `mixed`
 and `codex-only`. In `claude-only`, Luna is intentionally absent.
+For a needed web claim in mixed, pair `axstack-research-web` (Sonnet high)
+with optional `axstack-research-web-sol` (Terra high), independently on the same
+bounded brief without cross-reading. Both single-provider presets explicitly
+mark the web pair absent and keep their base web researcher. Optional launch
+failures retain fencing and the mixed research provider floor.
 The mixed X route uses Grok.
 The mixed `axstack-auditor` uses Haiku 5.5 xhigh, pinned to `claude-haiku-5-5`;
 missing that ID or xhigh effort holds without substitution. The mixed
-`axstack-explainer-review` uses Terra medium; `axstack-explainer` pins
+`axstack-explainer-review` uses Terra high; `axstack-explainer` pins
 `claude-sonnet-5-5` high with class `sonnet`. Both roles cover every Explain
-visual, including chat Mermaid and anatomy figures.
+visual, including chat Mermaid and anatomy figures. The existing mixed
+`axstack-ui-verifier` resolves the Codex Terra class at high effort with
+full-access mode; its read-only browser verification duties stay unchanged.
+An unavailable model or effort holds without substitution.
 In `claude-only`, `axstack-auditor` uses the Claude Sonnet class at high effort.
 The `-sol` research-code and explore-execution seats use Terra high in `mixed`
 and Sol high in `codex-only`; the auditor pair stays Sol high in both.
@@ -163,7 +171,7 @@ Peer roles use the stable IDs `axstack-reviewer-primary` and
 `axstack-reviewer-peer`; their provider/class mappings come only from the
 selected preset and the ordered reviewer table above. The mixed peer coordinator and review-lane binding
 `axstack-owner` uses Sol high and never reviews. `axstack-reviewer-secondary`
-uses Terra xhigh for Sol-authored candidates in `codex-only`. It is used
+uses Terra high for Sol-authored candidates in `codex-only`. It is used
 in the authored mapping and, alongside `axstack-reviewer-primary`,
 in codebase findings mode.
 
@@ -619,3 +627,15 @@ runtime receipts; evidence from one route does not establish support for all rol
 Bun >=1.3.14, with no runtime dependencies. Workflow checks use
 `bun test tests/workflows/`; the only approved Node built-ins are Bun-backed
 `node:fs` and `node:fs/promises`.
+
+## UI improvement
+
+For “improve this screen”, Improve reports ranked defects for a named screen or
+flow using Playwright evidence from the existing read-only UI verifier. Each
+fix has observable acceptance criteria; missing renders remain unverified.
+Authorized bounded changes enter Implement's [UI improvement loop](../skills/axstack/references/ui-improvement-loop.md):
+one writer and hypothesis, a frozen capture protocol, fresh renders each attempt,
+independent blind A/B, hard functional/accessibility/interaction gates and
+keep/revert to the best-known candidate. Record a finite budget and plateau
+threshold before editing; stop at goal, plateau or budget. Aesthetic scores
+alone cannot establish success. Existing exact-revision delivery gates remain.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.52.1",
+  "version": "0.53.0",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks T3 Code capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/claude-only.json

@@ -118,6 +118,15 @@
       "notes": "Sonnet high research web reader: gathers primary-source facts efficiently. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
+    {
+      "id": "axstack-research-web-sol",
+      "name": "Axstack research web Terra",
+      "provider": "claude",
+      "model": null,
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence: the mixed Terra web pair is unavailable in this preset. Record the absence and use the base web researcher without substitution."
+    },
     {
       "id": "axstack-research-x",
       "name": "Axstack research X (unavailable)",

package/profiles/presets/codex-only.json

@@ -51,8 +51,8 @@
       "name": "Axstack reviewer (secondary)",
       "provider": "codex",
       "modeId": "full-access",
-      "thinkingOptionId": "xhigh",
-      "notes": "Terra xhigh authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance.",
+      "thinkingOptionId": "high",
+      "notes": "Terra high authored reviewer for a Sol-authored candidate. Never author or owner; review exact SHA and base across all six angles and acceptance.",
       "modelClass": "terra"
     },
     {
@@ -118,6 +118,15 @@
       "notes": "Research web reader: gathers primary-source facts efficiently. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "sol"
     },
+    {
+      "id": "axstack-research-web-sol",
+      "name": "Axstack research web Terra",
+      "provider": "codex",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Intentional single-provider absence: the mixed Terra web pair is unavailable in this preset. Record the absence and use the base web researcher without substitution."
+    },
     {
       "id": "axstack-research-x",
       "name": "Axstack research X (unavailable)",

package/profiles/presets/mixed.json

@@ -118,6 +118,15 @@
       "notes": "Sonnet high research web reader: gathers primary-source facts efficiently. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
+    {
+      "id": "axstack-research-web-sol",
+      "name": "Axstack research web Terra",
+      "provider": "codex",
+      "modeId": "full-access",
+      "thinkingOptionId": "high",
+      "notes": "Independent Terra high web researcher on the same bounded brief as the Sonnet base seat without cross-reading. Cites primary sources for driver reconciliation per claim; optional seat failures follow the role roster.",
+      "modelClass": "terra"
+    },
     {
       "id": "axstack-research-x",
       "name": "Axstack research X",
@@ -142,18 +151,18 @@
       "name": "Axstack explainer reviewer",
       "provider": "codex",
       "modeId": "full-access",
-      "thinkingOptionId": "medium",
-      "notes": "Independent Terra medium explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md hard rules and FRONTEND-DESIGN.md (calibration defaults, restraint and quality floor) for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit. If only design findings remain after the second round, deliver the visual with each finding named. Never describe a remaining finding as fixed or a clean pass. Apply Delivery's normal holds for other failures and unknown renders. Chat Mermaid and anatomy keep their existing review.",
+      "thinkingOptionId": "high",
+      "notes": "Independent Terra high explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md hard rules and FRONTEND-DESIGN.md (calibration defaults, restraint and quality floor) for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit. If only design findings remain after the second round, deliver the visual with each finding named. Never describe a remaining finding as fixed or a clean pass. Apply Delivery's normal holds for other failures and unknown renders. Chat Mermaid and anatomy keep their existing review.",
       "modelClass": "terra"
     },
     {
       "id": "axstack-ui-verifier",
       "name": "Axstack UI verifier",
-      "provider": "claude",
-      "modeId": "bypassPermissions",
+      "provider": "codex",
+      "modeId": "full-access",
       "thinkingOptionId": "high",
-      "notes": "Read-only UI verifier: uses the configured verifier browser tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
-      "modelClass": "sonnet"
+      "notes": "Read-only UI verifier: uses the configured verifier browser tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. Resolve the Terra class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
+      "modelClass": "terra"
     },
     {
       "id": "axstack-explore-codebase",

package/skills/axstack/references/role-roster.md

@@ -15,7 +15,7 @@
   | --- | --- | --- |
   | `mixed` | `codex/sol` | `axstack-reviewer-secondary` (`claude/opus` high) |
   | `mixed` | `claude/opus` | `axstack-reviewer-primary` (`codex/sol` high) |
-  | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` xhigh) |
+  | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` high) |
   | `claude-only` | `claude/opus` | `axstack-reviewer-secondary` (`claude/sonnet` high) |
 - `axstack-advisor-astra`/`axstack-advisor-opus` advise and author candidates;
   `axstack-arena-candidate-grok` adds a family.
@@ -24,7 +24,7 @@
   `axstack-auditor` audits; `axstack-checker` reports discrepancies.
 - `axstack-explainer` authors every visual Explain delivers, including pages,
   chat Mermaid and anatomy figures; mixed pins Sonnet 5.5 high exactly.
-- `axstack-explainer-review` always reviews every visual; `codex/terra` medium in mixed.
+- `axstack-explainer-review` always reviews every visual; `codex/terra` high in mixed.
   Consequential or complex driver-written prose keeps its review rule; every
   whiteboard defense is consequential, in chat too.
 - `axstack-diligence`: read-only [diligence checks](diligence.md) for every authored PR
@@ -52,8 +52,13 @@
   independently from its base seat on the same bounded brief without
   cross-reading. The driver reconciles findings per claim, never averages.
   Record intentional absence and continue with Sonnet alone.
+- Web pair `axstack-research-web`/`axstack-research-web-sol`: Sonnet high +
+  Terra high in mixed, independently on the same bounded brief without
+  cross-reading, with driver reconciliation per claim. The `-sol` web seat is
+  intentionally absent in both single-provider presets; use the base seat alone.
 - Optional seats: `axstack-arena-candidate-grok`,
   `axstack-research-x`, `axstack-checker`, `axstack-research-code-sol`,
+  `axstack-research-web-sol`,
   `axstack-explore-execution-sol`, `axstack-auditor-sol`.
   Always dispatch optional seats when configured and available, except research
   branches, which follow [Research step 2](../../axstack-research/SKILL.md#procedure) sizing.

package/skills/axstack/references/routing.md

@@ -32,6 +32,8 @@ provider's first listed model from saved capabilities and records its exact ID.
 A Codex or Claude role with neither model nor class is an intentional absence
 and holds.
 Resume must reuse the saved capabilities and role snapshot with no re-resolution; changes require the user’s explicit decision.
+Every Terra class or explicit Terra model pin requires exactly high effort.
+Missing high effort holds without substitution or silently coercing the request.
 An unavailable provider, model, role, mode or effort holds that role with no substitution.
 Preset changes apply to new runs only; an active run keeps its snapshot.
 Replacing a session needs an explicit user decision and revalidation.
@@ -68,7 +70,7 @@ step (3) for user routing: no substitution or same-provider review.
 - A bug, failing test, regression, or wrong behavior, red loop wanted ->
   `axstack-debug`: diagnose, escalate via adviser-directed investigators, hand
   off a classified repair (explain: how; debug: what's wrong).
-- Code quality/refactor discovery -> `axstack-improve`: rank bounded
+- Code quality/refactor or named UI screen/flow discovery -> `axstack-improve`: rank bounded
   candidates with evidence; report only, no source edits.
 - Repeated mistakes need evidence and stronger checks -> `axstack-correct`:
   user-invoked, report only.

package/skills/axstack/references/ui-improvement-loop.md

@@ -0,0 +1,75 @@
+# Bounded UI improvement
+
+Use this loop only for authorized UI changes to the named screen or flow.
+Improve owns report-only discovery; Implement owns changes. Reuse the existing
+PR author, `axstack-ui-verifier` and independent authored reviewer from the
+run's role snapshot; create no new roles. Follow [UI verification](ui-verification.md)
+for read-only Playwright capture in the verifier's isolated checkout and private
+evidence folder. The author never reviews its own change.
+
+## Establish the comparison
+
+Before the first edit, anchor task and visual goals to acceptance criteria.
+Use the discovery's ranked defects: for example, the primary action is visible
+at the agreed mobile width, labels remain legible in both themes, and the named
+keyboard task completes. Describe intended users and the visual direction in
+concrete terms so preference has an inspectable basis.
+Before the first edit, record a finite attempt and time budget plus a plateau
+threshold (consecutive attempts without a supported improvement).
+Freeze the capture protocol with routes, fixtures, viewports, themes and states.
+Include browser/build settings, data and authentication fixtures, font loading,
+animation settling, scroll position, and the interactions used to reach each
+state. Freeze the procedure, not a candidate image. Keep comparable evidence
+for loading, empty, error and populated states where relevant.
+Capture the baseline through the verifier before editing.
+Preserve the baseline as the best-known revision with its evidence.
+When the protocol changes, recapture both sides before comparison and record why.
+
+## Attempt, compare, decide
+
+Use one writer and one hypothesis for each attempt.
+Tie the small change to one ranked defect and its acceptance checks; keep
+unrelated cleanup outside the attempt. Apply Implement's normal TDD path.
+For a visual-only attempt, red requires axstack-ui-verifier to execute the
+anchored acceptance check against best-known before the edit and record its
+failure with capture evidence. Never count a screenshot alone as behavioral red.
+Never count a subjective score as behavioral red.
+Green requires the verifier's fresh candidate to pass that same acceptance
+check plus all hard gates. Observable repository behavior tests remain required
+where applicable. Browser checks, including red and green, remain delegated to
+axstack-ui-verifier. If a meaningful test-first check is unavailable, hold
+dependent implementation for a scoped decision. Never count retrospective
+checks as red.
+Each attempt requires fresh renders of best-known and candidate exact revisions
+under the same protocol. Bind screenshots and interaction logs to revision,
+route, fixture, viewport, theme and state in the private evidence manifest.
+A missing or failed capture or uncertain comparison cannot justify a win.
+
+Give an independent reviewer a blind A/B with random labels and the anchored
+criteria. The driver retains the label-to-revision mapping separately from the
+review packet. Hide author identity, change narrative, hypothesis and expected
+winner; supply matching task context and state coverage for both sides. Review
+all captures and relevant interaction evidence, with findings tied to specific
+regions or actions. Record preference, reasons, regressions and uncertainty
+before revealing the mapping; never treat the author's preference as review.
+
+Functional, accessibility and interaction hard gates must pass before any keep
+decision. Verify the named task, keyboard/focus behavior, accessible names,
+contrast, responsive layout, reduced motion and affected tests as applicable;
+an unrun applicable gate remains unknown and prevents keeping the attempt.
+Keep only an evidence-backed improvement against the criteria, otherwise revert
+to best-known. Record the decision, rejected hypothesis and exact resulting
+revision; preserve each accepted best-known candidate and its evidence.
+Resolve disagreement with specific evidence and recapture within budget, then
+retain best-known if unresolved. Recheck the disputed state with a fresh blind
+independent comparison; ties and unresolved tradeoffs are inconclusive, never
+a forced win or averaged vote. Failed attempts consume the budget too.
+Never use a numeric aesthetic score as the sole success criterion.
+
+Stop at the goal, budget exhaustion or plateau and report unverified boundaries.
+Return the best-known revision, attempt/keep/revert ledger, evidence paths,
+criteria met, remaining defects and stop reason. Budget exhaustion may leave
+the UI goal unmet; say so. The driver can finish an authorized bounded run
+without a new human taste approval. Explain's two-round visual limit does not
+apply to this loop. Existing exact-revision review, verification and merge gates
+remain required; this comparison grants no publication or merge authority.

package/skills/axstack/scripts/resolve-models.js

@@ -87,6 +87,9 @@ try {
   const catalog = JSON.parse(readFileSync(path, 'utf8'));
   const instance = providerFrom(catalog, provider);
   const model = modelFrom(instance.models, options);
+  if ((options.class === 'terra' || /^gpt-\d+(?:\.\d+)*-terra$/.test(model.id)) && effort !== 'high') {
+    throw new Error('Terra requires exactly high effort');
+  }
   const effortOptions = model.options.filter((option) => option.id === effortIds[provider]);
   if (effortOptions.length !== 1 || !effortOptions[0].options?.some((value) => value.id === effort)
     || (provider === 'grok' && effort === 'max')) {

package/skills/axstack-audit/SKILL.md

@@ -109,7 +109,7 @@ counts with denominators plus the evidence behind the count:
   | --- | --- | --- |
   | `mixed` | `codex/sol` | `axstack-reviewer-secondary` (`claude/opus` high) |
   | `mixed` | `claude/opus` | `axstack-reviewer-primary` (`codex/sol` high) |
-  | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` xhigh) |
+  | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` high) |
   | `claude-only` | `claude/opus` | `axstack-reviewer-secondary` (`claude/sonnet` high) |
 - Simplification applicability determinations evidenced / total candidate diffs,
   and complete simplification receipts / total candidates, broken down as

package/skills/axstack-implement/SKILL.md

@@ -84,6 +84,8 @@ Size alone never requires user approval.
 
 ## 3. Establish test-first evidence
 
+For authorized UI improvement work, load [UI improvement loop](../axstack/references/ui-improvement-loop.md).
+
 For performance work only, load [Performance loop](../axstack/references/perf-loop.md).
 For performance work, run the change loop defined in [Performance loop](../axstack/references/perf-loop.md).
 For an accepted optimization scope without new behavior explicitly marked structure-preserving, use the structure-preserving path with the same checks green before and after plus the measured delta.

package/skills/axstack-improve/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: axstack-improve
-description: When assessing codebase quality or planning a refactor, use axstack-improve to find evidenced improvements and prepare behavior-preserving changes.
+description: When assessing codebase quality, improving a named screen or flow, or planning a refactor, use axstack-improve to report evidenced improvements and prepare bounded changes.
 ---
 
 # Improve
@@ -9,8 +9,8 @@ On driver entry, sweep under [Workspace hygiene](../axstack/references/workspace
 For every dispatch brief, name its private `<run dir>/evidence/<dispatch>/` folder.
 
 Find a small set of worthwhile maintainability, architecture, or testability
-improvements from inspected code. This is a direct discovery route: it needs no
-spec or tickets and writes only the requested report. No worthwhile
+improvements from inspected code or rendered UI. This is a direct discovery
+route: it needs no spec or tickets and writes only the requested report. No worthwhile
 improvement is a valid result.
 
 Before acting, load [Standing contracts](../axstack/references/contracts.md),
@@ -50,6 +50,23 @@ For performance work, rank candidates in mantra order.
 4. Apply KISS, YAGNI, and SOLID as judgment, not a mandatory scorecard. Use no
    invented metrics and no arbitrary complexity targets.
 
+### UI discovery
+
+UI discovery for a named screen or flow remains report-only.
+Record the user's task, exact build/revision, inspected route and relevant
+fixtures, themes, viewports and interaction states before assessing it.
+UI discovery requires Playwright render evidence from `axstack-ui-verifier`
+at the exact revision under [UI verification](../axstack/references/ui-verification.md).
+Rank UI defects in hierarchy, typography, spacing, contrast, responsive layout
+and interaction with evidence and acceptance criteria. Link each defect to a
+capture or observed action, explain user impact, and rank by task blockage,
+severity and likely benefit relative to effort; separate observation from preference.
+UI discovery labels a missing or failed capture unverified.
+Return the ranked report and capture boundaries, including a no-change result
+when warranted. Clear authorized UI work routes to Implement with its accepted
+small-change intent; selection alone retains section 3's action boundary.
+For the execution handoff, read [UI improvement loop](../axstack/references/ui-improvement-loop.md).
+
 ### Test-audit lens
 
 For a test audit, load [Test value](../axstack/references/test-value.md) and

package/skills/axstack-research/SKILL.md

@@ -37,7 +37,9 @@ is part of research.
    For each needed source class, retain two isolated branches where configured.
    In mixed, each needed source class retains branches from different providers.
    The code pair is `axstack-research-code` +
-   `axstack-research-code-sol`; the web branch is `axstack-research-web`;
+   `axstack-research-code-sol`.
+   In mixed the web pair is `axstack-research-web` +
+   `axstack-research-web-sol` (Terra high);
    the execution pair is `axstack-explore-execution` +
    `axstack-explore-execution-sol`. Requirements, code, and web use Sonnet high
    in mixed/claude-only and Codex in codex-only; X uses Grok.
@@ -57,13 +59,14 @@ is part of research.
    - `axstack-research-code`: code behavior.
    - `axstack-research-code-sol`: independent code investigation (Terra high in mixed, Sol high in codex-only).
    - `axstack-research-web`: web and external sources.
+   - `axstack-research-web-sol`: independent Terra high web reader in mixed; intentionally absent in both single-provider presets.
    - `axstack-research-x`: X (Twitter) posts and threads via Grok; cite post URLs and dates.
    - For broad codebase mapping, use `axstack-scout`.
      Never dispatch `axstack-explore-codebase` directly for broad mapping.
    - `axstack-explore-execution`: execution and runtime traces.
    - `axstack-explore-execution-sol`: independent execution investigation (Terra high in mixed, Sol high in codex-only).
 
-   When dispatching `axstack-research-code` or `axstack-explore-execution`,
+   When dispatching `axstack-research-web`, `axstack-research-code` or `axstack-explore-execution`,
    dispatch its `-sol` pair independently on the same bounded brief without
    cross-reading. The driver reconciles agreement and disagreement per claim,
    never averaging findings. Record an intentionally absent pair and proceed

package/skills/axstack-review/references/review-candidate.md

@@ -36,7 +36,7 @@ This section applies to peer and authored PR modes.
      | --- | --- | --- |
      | `mixed` | `codex/sol` | `axstack-reviewer-secondary` (`claude/opus` high) |
      | `mixed` | `claude/opus` | `axstack-reviewer-primary` (`codex/sol` high) |
-     | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` xhigh) |
+     | `codex-only` | `codex/sol` | `axstack-reviewer-secondary` (`codex/terra` high) |
      | `claude-only` | `claude/opus` | `axstack-reviewer-secondary` (`claude/sonnet` high) |
 
      The diligence receipt is separate and does not count as a reviewer receipt.

package/src/roles.js

@@ -22,7 +22,7 @@ const AUTHORED_ROUTES = Object.freeze({
     'claude/opus': ['axstack-reviewer-primary', 'codex/sol', 'high'],
   },
   'codex-only': {
-    'codex/sol': ['axstack-reviewer-secondary', 'codex/terra', 'xhigh'],
+    'codex/sol': ['axstack-reviewer-secondary', 'codex/terra', 'high'],
   },
   'claude-only': {
     'claude/opus': ['axstack-reviewer-secondary', 'claude/sonnet', 'high'],
@@ -66,6 +66,9 @@ export function assertBundleRoles(roles) {
     if (hasClass && typeof role.model === 'string' && deriveModelClass(role.model) !== role.modelClass) {
       throw new Error(`invalid bundle roles: ${role.id} model pin does not match model class`);
     }
+    if (roleClass(role) === 'terra' && role.thinkingOptionId !== 'high') {
+      throw new Error(`invalid bundle roles: ${role.id} Terra requires exactly high effort`);
+    }
     for (const field of ['icon', 'color', 'modeId', 'thinkingOptionId', 'notes']) {
       if (role[field] !== undefined && typeof role[field] !== 'string') {
         throw new Error(`invalid bundle roles: ${field} must be a string when present`);
@@ -89,8 +92,8 @@ export function assessRoleReadiness(roles, preset) {
   const isIntentionalAbsence = (role) => role.model === null && (
     (preset === 'mixed' && role.id === 'axstack-research-x' && role.provider === 'grok') ||
     (preset === 'mixed' && role.id === 'axstack-arena-candidate-grok' && role.provider === 'grok') ||
-    (preset === 'codex-only' && ['axstack-advisor-opus', 'axstack-escalation-fable', 'axstack-arena-judge-opus', 'axstack-research-x', 'axstack-arena-candidate-grok'].includes(role.id)) ||
-    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-auditor-sol', 'axstack-research-code-sol', 'axstack-explore-execution-sol', 'axstack-explore-codebase-luna'].includes(role.id))
+    (preset === 'codex-only' && ['axstack-advisor-opus', 'axstack-escalation-fable', 'axstack-arena-judge-opus', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-research-web-sol'].includes(role.id)) ||
+    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-auditor-sol', 'axstack-research-code-sol', 'axstack-explore-execution-sol', 'axstack-explore-codebase-luna', 'axstack-research-web-sol'].includes(role.id))
   );
   for (const role of roles) {
     if (!bounds.has(role.provider)) {