cowork-flow 1.9.2 → 2.1.0

package/presets/opencode/cowork-flow/plugin-core.js

@@ -1,11 +1,11 @@
 // Transport shim behind the opencode plugin. Every workflow fact
 // (contract digest, workflow-state, decision anchor, stage contract,
-// runtime-context bind) is rendered by the Python source
-// <scripts>/adapters/host/inject.py --host opencode; this module moves
-// bytes only. What stays here is what the Python side cannot reach:
-// the config-hook skills registration, the shell.env context-key
-// export, and the edit-phase spec-check the tool.execute.after hook
-// delegates to the project runtime.
+// runtime-context bind, edit-scope warning) is rendered by the Python
+// source <scripts>/adapters/host/inject.py --host opencode; this module
+// moves bytes only. What stays here is what the Python side cannot
+// reach: the config-hook skills registration, the shell.env context-key
+// export, and the tool-shape translation for the tool.execute.after
+// edit-scope delegation.
 //
 // This module must NOT live under plugins/: opencode
 // treats every file directly inside plugins/ as a plugin
@@ -16,7 +16,7 @@
 // install, so the adapter's relative import resolves in
 // both.
 
-import { spawn } from "node:child_process"
+import { spawn, spawnSync } from "node:child_process"
 import { existsSync } from "node:fs"
 import { dirname, resolve } from "node:path"
 import { fileURLToPath } from "node:url"
@@ -24,6 +24,27 @@ import { fileURLToPath } from "node:url"
 const DIR_WORKFLOW = ".cowork-flow"
 // One prompt assembly must not wait longer than a host hook event.
 const INJECT_TIMEOUT_MS = 4800
+// The .cowork-flow/run floor, reused here: a candidate that cannot run
+// Python 3.10+ is skipped like a missing binary, so a stale `python3`
+// never hides a working `python` further down the list.
+const MIN_PYTHON_CHECK =
+  "import sys; raise SystemExit(0 if sys.version_info >= (3, 10) else 1)"
+
+function interpreterIsUsable(candidate) {
+  try {
+    const probe = spawnSync(candidate[0], [...candidate.slice(1), "-c", MIN_PYTHON_CHECK], {
+      timeout: INJECT_TIMEOUT_MS,
+      windowsHide: true,
+    })
+    // A probe killed by its own timeout reached no verdict — a loaded machine,
+    // not a bad interpreter — so let the real spawn decide; it carries the
+    // same timeout and its own diagnostics.
+    if (probe.error && probe.error.code === "ETIMEDOUT") return true
+    return !probe.error && probe.status === 0
+  } catch {
+    return false
+  }
+}
 
 // Last-resort repository root: this module lives at
 // <payload>/cowork-flow/plugin-core.js, next to plugins/,
@@ -175,8 +196,9 @@ function runInject(candidate, script, payload) {
 // inject.py and hand back whatever it printed. The payload spreads the
 // host input so every session/runtime-context key the Python identity
 // table knows arrives unchanged; hook_event_name and cwd are the two
-// fields the hook contract requires.
-async function renderViaInject(input) {
+// fields the hook contract requires. `overrides` swaps the event name
+// and adds the tool fields the PostToolUse contract needs.
+async function renderViaInject(input, overrides = null) {
   if (
     process.env.COWORK_FLOW_HOOKS === "0" ||
     process.env.COWORK_FLOW_DISABLE_HOOKS === "1"
@@ -188,21 +210,57 @@ async function renderViaInject(input) {
   if (!script) {
     return ""
   }
+  const extra = overrides && typeof overrides === "object" ? overrides : {}
   const payload = {
     ...(input && typeof input === "object" ? input : {}),
-    hook_event_name: "UserPromptSubmit",
+    ...extra,
+    hook_event_name: extra.hook_event_name || "UserPromptSubmit",
     cwd: inputCwd(input) || (root === pluginRoot ? null : root) || process.cwd(),
   }
   for (const candidate of pythonCandidates()) {
+    if (!interpreterIsUsable(candidate)) {
+      continue
+    }
     const result = await runInject(candidate, script, payload)
     if (!result.ran) {
       continue
     }
     return result.stdout.trim()
   }
+  console.error(
+    "cowork-flow opencode plugin: no Python 3.10+ interpreter found; skipping injection"
+  )
   return ""
 }
 
+// Editor-phase scope warning: opencode sessions get the same
+// single-line out-of-scope advisory the other hosts receive on
+// PostToolUse. Best-effort — a missing runtime, a timeout, or any
+// error stays silent and never blocks the edit that already happened.
+const EDIT_TOOL_NAMES = new Set(["edit", "write"])
+
+function editedFilePath(input) {
+  const tool = typeof input?.tool === "string" ? input.tool : ""
+  if (!EDIT_TOOL_NAMES.has(tool)) {
+    return ""
+  }
+  const args = input?.args
+  const candidate = args && typeof args === "object" ? args.filePath : null
+  return typeof candidate === "string" && candidate.trim() ? candidate.trim() : ""
+}
+
+async function renderEditScopeWarning(input) {
+  const filePath = editedFilePath(input)
+  if (!filePath) {
+    return ""
+  }
+  return renderViaInject(input, {
+    hook_event_name: "PostToolUse",
+    tool_name: typeof input?.tool === "string" ? input.tool : "edit",
+    tool_input: { file_path: filePath },
+  })
+}
+
 function sanitize(value) {
   return String(value ?? "")
     .trim()
@@ -262,82 +320,6 @@ function injectShellEnv(input, output) {
   }
 }
 
-// Editor-phase spec-check: opencode sessions get the same
-// single-line violation hint zcode and claude-code
-// receive. Best-effort — a missing runtime, a timeout, or
-// any error stays silent and never blocks the edit that
-// already happened.
-const EDIT_TOOL_NAMES = new Set(["edit", "write"])
-const EDIT_CHECK_TIMEOUT_MS = 2500
-
-function editedFilePath(input) {
-  const tool = typeof input?.tool === "string" ? input.tool : ""
-  if (!EDIT_TOOL_NAMES.has(tool)) {
-    return ""
-  }
-  const args = input?.args
-  const candidate = args && typeof args === "object" ? args.filePath : null
-  return typeof candidate === "string" && candidate.trim() ? candidate.trim() : ""
-}
-
-function runEditSpecCheck(root, filePath) {
-  return new Promise((resolvePromise) => {
-    let settled = false
-    const finish = (value) => {
-      if (!settled) {
-        settled = true
-        resolvePromise(value)
-      }
-    }
-    const entry = resolve(
-      root,
-      DIR_WORKFLOW,
-      process.platform === "win32" ? "run.cmd" : "run"
-    )
-    if (!existsSync(entry)) {
-      finish("")
-      return
-    }
-    let child
-    try {
-      child = spawn(
-        entry,
-        ["spec-check", "--phase", "edit", "--file", filePath, "--throttled"],
-        {
-          cwd: root,
-          stdio: ["ignore", "pipe", "ignore"],
-          shell: process.platform === "win32",
-        }
-      )
-    } catch {
-      finish("")
-      return
-    }
-    const timer = setTimeout(() => {
-      try {
-        child.kill()
-      } catch {
-        // the edit must not be held up by a stuck checker
-      }
-      finish("")
-    }, EDIT_CHECK_TIMEOUT_MS)
-    let stdout = ""
-    if (child.stdout) {
-      child.stdout.on("data", (chunk) => {
-        stdout += String(chunk)
-      })
-    }
-    child.on("error", () => {
-      clearTimeout(timer)
-      finish("")
-    })
-    child.on("close", () => {
-      clearTimeout(timer)
-      finish(stdout.trim())
-    })
-  })
-}
-
 // The payload's own skills directory, located from this
 // module's file path and not from the repository root: the
 // machine install puts this file in
@@ -382,11 +364,11 @@ export function registerPayloadSkills(config) {
 
 // The plugin adapter imports the hook helpers; these are
 // the unit-test surface (transport, fail-open, shell env,
-// edit-phase delegation). opencode never reads this module.
+// edit-scope delegation). opencode never reads this module.
 export {
   renderViaInject,
   editedFilePath,
+  renderEditScopeWarning,
   findRepoRoot,
   injectShellEnv,
-  runEditSpecCheck,
 }

package/presets/opencode/plugins/cowork-flow.js

@@ -7,12 +7,10 @@
 // re-exported helper would be called as a plugin and break
 // host bootstrap.
 import {
-  editedFilePath,
-  findRepoRoot,
   injectShellEnv,
   registerPayloadSkills,
-  renderViaInject,
-  runEditSpecCheck
+  renderEditScopeWarning,
+  renderViaInject
 } from "../cowork-flow/plugin-core.js"
 
 export const CoworkFlowPlugin = async () => {
@@ -37,12 +35,12 @@ export const CoworkFlowPlugin = async () => {
         output.system.push(text)
       }
     },
+    // Editor-phase scope advisory: the tool already ran, so
+    // the single out-of-scope line is appended to its output
+    // and the call is never blocked. Non-edit tools and a
+    // missing/failing runtime stay silent.
     "tool.execute.after": async (input, output) => {
-      const filePath = editedFilePath(input)
-      if (!filePath) {
-        return
-      }
-      const warning = await runEditSpecCheck(findRepoRoot(input), filePath)
+      const warning = await renderEditScopeWarning(input)
       if (warning) {
         output.output = [output.output, warning].filter(Boolean).join("\n")
       }

package/presets/qoder/.qoder-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-flow",
-  "version": "1.9.2",
+  "version": "2.1.0",
   "description": "AI 协作工作流引擎：任务生命周期、子代理调度、门禁与状态注入。将 cowork-flow 的完整工作流带入 Qoder。",
   "displayName": "Cowork Flow",
   "author": {

package/presets/qoder/hooks/hooks.json

@@ -41,7 +41,7 @@
               "${QODER_PLUGIN_ROOT}/hooks/inject-context.mjs"
             ],
             "timeout": 30,
-            "statusMessage": "cowork-flow: 规范自查"
+            "statusMessage": "cowork-flow: 编辑越界自查"
           }
         ]
       }

package/presets/qoder/hooks/inject-context.mjs

@@ -33,6 +33,27 @@ const HOST = "qoder";
 const DIR_WORKFLOW = ".cowork-flow";
 // hooks.json grants 30s per event.
 const SPAWN_TIMEOUT_MS = 25000;
+// The .cowork-flow/run floor, reused here: a candidate that cannot run
+// Python 3.10+ is skipped like a missing binary, so a stale `python3`
+// never hides a working `python` further down the list.
+const MIN_PYTHON_CHECK = "import sys; raise SystemExit(0 if sys.version_info >= (3, 10) else 1)";
+
+function interpreterIsUsable(candidate) {
+  try {
+    const probe = spawnSync(
+      candidate[0],
+      [...candidate.slice(1), "-c", MIN_PYTHON_CHECK],
+      { timeout: SPAWN_TIMEOUT_MS, windowsHide: true }
+    );
+    // A probe killed by its own timeout reached no verdict — a loaded machine,
+    // not a bad interpreter — so let the real spawn decide; it carries the
+    // same timeout and its own diagnostics.
+    if (probe.error && probe.error.code === "ETIMEDOUT") return true;
+    return !probe.error && probe.status === 0;
+  } catch {
+    return false;
+  }
+}
 
 function readHookInput() {
   if (process.stdin.isTTY) return { raw: "", parsed: {} };
@@ -113,6 +134,7 @@ function main() {
   if (!existsSync(injectScript)) process.exit(0);
 
   for (const candidate of pythonCandidates()) {
+    if (!interpreterIsUsable(candidate)) continue;
     let result;
     try {
       result = spawnSync(
@@ -142,8 +164,12 @@ function main() {
     }
     process.exit(0);
   }
-  // No interpreter could run the entry: stay silent rather
-  // than break the host's event stream (fail-open).
+  // No candidate could run the entry: stay fail-open, but say why once
+  // instead of hiding a misconfiguration (a Python below the floor, or
+  // none at all).
+  process.stderr.write(
+    "cowork-flow qoder hook: no Python 3.10+ interpreter found; skipping injection\n"
+  );
   process.exit(0);
 }
 

package/presets/zcode/.zcode-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-flow",
-  "version": "1.9.2",
+  "version": "2.1.0",
   "description": "AI 协作工作流引擎：任务生命周期、子代理调度、门禁与状态注入。将 cowork-flow 的完整工作流带入 ZCode。",
   "author": {
     "name": "fishlikewater",

package/presets/zcode/hooks/inject-context.mjs

@@ -35,6 +35,27 @@ const DIR_WORKFLOW = ".cowork-flow";
 const LIFECYCLE_BASH_RE = /\brun(?:\.cmd)?\s+(?:task|subagent|resume)\b/;
 // hooks.json grants 5s per event.
 const SPAWN_TIMEOUT_MS = 4800;
+// The .cowork-flow/run floor, reused here: a candidate that cannot run
+// Python 3.10+ is skipped like a missing binary, so a stale `python3`
+// never hides a working `python` further down the list.
+const MIN_PYTHON_CHECK = "import sys; raise SystemExit(0 if sys.version_info >= (3, 10) else 1)";
+
+function interpreterIsUsable(candidate) {
+  try {
+    const probe = spawnSync(
+      candidate[0],
+      [...candidate.slice(1), "-c", MIN_PYTHON_CHECK],
+      { timeout: SPAWN_TIMEOUT_MS, windowsHide: true }
+    );
+    // A probe killed by its own timeout reached no verdict — a loaded machine,
+    // not a bad interpreter — so let the real spawn decide; it carries the
+    // same timeout and its own diagnostics.
+    if (probe.error && probe.error.code === "ETIMEDOUT") return true;
+    return !probe.error && probe.status === 0;
+  } catch {
+    return false;
+  }
+}
 
 function readHookInput() {
   if (process.stdin.isTTY) return { raw: "", parsed: {} };
@@ -152,6 +173,7 @@ function main() {
   if (!injectScript) process.exit(0);
 
   for (const candidate of pythonCandidates()) {
+    if (!interpreterIsUsable(candidate)) continue;
     let result;
     try {
       result = spawnSync(
@@ -180,9 +202,12 @@ function main() {
     }
     process.exit(0);
   }
-  // No interpreter could run the entry: stay silent rather
-  // than break the host's event stream (fail-open, like
-  // the spec-edit path).
+  // No candidate could run the entry: stay fail-open, but say why once
+  // instead of hiding a misconfiguration (a Python below the floor, or
+  // none at all).
+  process.stderr.write(
+    "cowork-flow zcode hook: no Python 3.10+ interpreter found; skipping injection\n"
+  );
   process.exit(0);
 }
 

package/src/commands/host.js

@@ -13,6 +13,8 @@ import { runInstallOpenCodePlugin, FLAGS as OPENCODE_PLUGIN_FLAGS } from './inst
 import { runInstallQoderPlugin, FLAGS as QODER_PLUGIN_FLAGS } from './install-qoder-plugin.js';
 import { runInstallZCodePlugin, FLAGS as ZCODE_PLUGIN_FLAGS } from './install-zcode-plugin.js';
 
+const KIMI_ALL_FLAGS = [...new Set([...KIMI_HOOK_FLAGS, ...KIMI_PLUGIN_FLAGS])].sort();
+
 
 // Which machine-level integrations a host has.
 // Deliberately not part of host-assets.json: that manifest
@@ -58,10 +60,11 @@ export const HOST_COMPONENTS = {
     }
   },
   'kimi-code': {
-    default: 'plugin',
+    default: 'all',
     components: {
       plugin: { summary: 'Kimi Code plugin: the bootstrap Skill it loads at session start', flags: KIMI_PLUGIN_FLAGS, run: runInstallKimiPlugin },
-      hook: { summary: 'Kimi Code context-injection hook as a user-level config.toml [[hooks]] row', flags: KIMI_HOOK_FLAGS, run: runInstallKimiHook }
+      hook: { summary: 'Kimi Code context-injection hook as a user-level config.toml [[hooks]] row', flags: KIMI_HOOK_FLAGS, run: runInstallKimiHook },
+      all: { summary: 'Kimi Code hook plus plugin, installed in one command (the default)', flags: KIMI_ALL_FLAGS, run: runInstallKimiAll }
     }
   }
 };
@@ -78,6 +81,24 @@ export const HOST_FLAGS = [...new Set(
 )].sort();
 
 
+function withoutForceFlag(args) {
+  return args.filter((arg) => arg !== '--force' && !arg.startsWith('--force='));
+}
+
+
+// kimi-code's default component: the hook (injection, the
+// required half) first, then the plugin, in one command.
+// Both installers stay the only validators — unknown flags
+// pass through untouched and are rejected by whichever
+// installer reaches them — but `--force` cannot: the hook
+// has no such flag, so the combined path strips it for the
+// hook segment only, and the plugin still receives it.
+async function runInstallKimiAll(args) {
+  await runInstallKimiHook(withoutForceFlag(args));
+  await runInstallKimiPlugin(args);
+}
+
+
 function resolveHost(token) {
   const id = hostRegistry.platformIdFor(token);
   if (id === null) {

package/src/commands/install-dsh-hook.js

@@ -1,7 +1,7 @@
 import { copyFile, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
-import { homedir } from 'node:os';
 
+import { getDshHome } from '../lib/dsh-home.js';
 import { parseInstallArgs, pathExists } from '../lib/install-support.js';
 import { packageRoot } from '../lib/paths.js';
 import { removeManagedBlock, upsertManagedBlock } from '../lib/payload-install.js';
@@ -19,11 +19,6 @@ const MANAGED_MARK = '# cowork-flow: managed workflow-state-hook row. Run "cowor
 export const FLAGS = ['--dry-run', '--force', '--uninstall'];
 
 
-function getDshHome() {
-  return process.env.DSH_HOME || join(homedir(), '.dsh');
-}
-
-
 async function readIfExists(file) {
   try {
     return await readFile(file, 'utf8');

package/src/commands/install-dsh-preset.js

@@ -1,8 +1,8 @@
 import { cp, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
-import { homedir } from 'node:os';
 import { pathToFileURL } from 'node:url';
 
+import { getDshHome } from '../lib/dsh-home.js';
 import { parseInstallArgs, pathExists, readJsonFile, writeJsonAtomic } from '../lib/install-support.js';
 import { packageRoot } from '../lib/paths.js';
 import { readPackageInfo } from '../lib/package-info.js';
@@ -34,11 +34,6 @@ const DESKTOP_PERSONA_KEY = /(- id: persona\n(?:.*\n)*? {4})text: /;
 export const FLAGS = ['--dry-run', '--force', '--uninstall'];
 
 
-function getDshHome() {
-  return process.env.DSH_HOME || join(homedir(), '.dsh');
-}
-
-
 function getDshPresetRoot() {
   return join(getDshHome(), '.agent-presets');
 }

package/src/commands/install-zcode-plugin.js

@@ -250,9 +250,8 @@ async function materializePlugin({ pluginSrc, destDir, cacheRoot, manifest, vers
   // folder; keep workflow runtime files out of scaffold.
   await rm(join(destDir, "scaffold", ".cowork-flow"), { recursive: true, force: true });
 
-  // The presets/zcode/hooks/runtime/scripts copy is stale;
-  // overwrite it with the authoritative version from the
-  // template.
+  // The preset ships no runtime payload, so materialize
+  // the authoritative workflow scripts from the template.
   const mainScriptsSrc = join(templateRoot, ".cowork-flow", "scripts");
   const pluginScriptsDest = join(destDir, "hooks", "runtime", "scripts");
   if (await pathExists(mainScriptsSrc)) {

package/src/commands/registry.js

@@ -41,9 +41,11 @@ const HOST_NOTE = `Hosts: ${Object.entries(HOST_COMPONENTS)
   .join('; ')}.`;
 // The union across hosts contains one gap: kimi-code's
 // hook has no --force, so the help names it instead of
-// letting the user hit a usage error.
+// letting the user hit a usage error. kimi-code's default
+// component routes --force to the plugin segment only.
 const HOST_FORCE_NOTE = '`--force` applies to every component except kimi-code\'s hook, '
-  + 'which overwrites unconditionally and therefore does not accept the flag.';
+  + 'which overwrites unconditionally and therefore does not accept the flag; '
+  + 'kimi-code\'s default component consumes it for the plugin only.';
 
 export const COMMANDS = [
   {

package/src/lib/asset-plan.js

@@ -5,7 +5,7 @@ import { resolve } from 'node:path';
 const VERSION_PATH = '.cowork-flow/.version';
 const MATERIALIZED_ACTIONS = new Set(['create', 'update']);
 
-function sha256(content) {
+export function sha256(content) {
   return createHash('sha256').update(content).digest('hex');
 }
 

package/src/lib/dsh-home.js

@@ -0,0 +1,6 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+export function getDshHome() {
+  return process.env.DSH_HOME || join(homedir(), '.dsh');
+}

package/src/lib/plan-applier.js

@@ -1,8 +1,7 @@
-import { createHash } from 'node:crypto';
 import * as defaultFileSystem from 'node:fs/promises';
 import { basename, dirname, join, resolve, sep } from 'node:path';
 
-import { planActions } from './asset-plan.js';
+import { planActions, sha256 } from './asset-plan.js';
 
 const MATERIALIZED_ACTIONS = new Set(['create', 'update']);
 const VERSION_PATH = '.cowork-flow/.version';
@@ -15,10 +14,6 @@ const TRANSACTION_STATUSES = new Set([
   'committed'
 ]);
 
-function sha256(content) {
-  return createHash('sha256').update(content).digest('hex');
-}
-
 async function pathExists(fileSystem, path) {
   try {
     await fileSystem.access(path);

package/template/.claude/agents/cowork-check.md

@@ -23,6 +23,6 @@ Execution:
 Rules:
 
 - Do not use the Task tool or invoke subagents.
-- Do not run task start, finish, archive, unscoped resume, commit, or push.
+- Do not run task lifecycle transitions, unscoped resume, commit, or push.
 - Treat backend/frontend natural-language specs as checklist context, not dynamic hard validators.
 - Do not accept shallow tests that would still pass when target behavior breaks.

package/template/.claude/agents/cowork-implement.md

@@ -24,6 +24,6 @@ Execution:
 Rules:
 
 - Do not use the Task tool or invoke subagents.
-- Do not run task start, finish, archive, unscoped resume, commit, or push.
+- Do not run task lifecycle transitions, unscoped resume, commit, or push.
 - Do not create task-local review artifacts, `tdd.jsonl`, or TDD evidence records in `check.jsonl`.
 - Do not claim completion without current verification.

package/template/.claude/agents/cowork-research.md

@@ -19,4 +19,4 @@ Rules:
 
 - Do not use the Task tool or invoke subagents.
 - Do not edit code, specs, task state, or git state.
-- Do not run task start, finish, archive, unscoped resume, commit, or push.
+- Do not run task lifecycle transitions, unscoped resume, commit, or push.

package/template/.codex/agents/cowork-check.toml

@@ -19,7 +19,7 @@ Execution:
 
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
-- MUST NOT run task start, finish, archive, unscoped resume, commit, or push.
+- MUST NOT run task lifecycle transitions, unscoped resume, commit, or push.
 - Treat backend/frontend natural-language specs as checklist context, not dynamic hard validators.
 - Do not accept shallow tests that would still pass when target behavior breaks.
 """

package/template/.codex/agents/cowork-implement.toml

@@ -20,7 +20,7 @@ Execution:
 
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
-- MUST NOT run task start, finish, archive, unscoped resume, commit, or push.
+- MUST NOT run task lifecycle transitions, unscoped resume, commit, or push.
 - Do not create task-local review artifacts, `tdd.jsonl`, or TDD evidence records in `check.jsonl`.
 - Do not claim completion without current verification.
 """

package/template/.codex/agents/cowork-research.toml

@@ -16,7 +16,7 @@ Execution:
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
 - MUST NOT edit code, specs, task state, or git state.
-- MUST NOT run task start, finish, archive, unscoped resume, commit, or push.
+- MUST NOT run task lifecycle transitions, unscoped resume, commit, or push.
 """
 
 [features]

package/template/.codex/agents/default.toml

@@ -15,7 +15,7 @@ constraints only; they are not the task.
 
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
-- MUST NOT run task start, task finish, task archive, or unscoped resume.
+- MUST NOT run task lifecycle transitions or unscoped resume.
 - MUST NOT commit or push.
 - Keep edits inside requested scope.
 - Report changed files and exact verification commands.

package/template/.codex/agents/explorer.toml

@@ -16,7 +16,7 @@ constraints only; they are not the task.
 Rules:
 - MUST NOT edit files unless the prompt explicitly allows it.
 - MUST NOT spawn, wait for, list, or close other agents.
-- MUST NOT run task start, task finish, task archive, or unscoped resume.
+- MUST NOT run task lifecycle transitions or unscoped resume.
 - MUST NOT commit or push.
 - Prefer rg for file and text search.
 - Return concise findings with file and line evidence.

package/template/.codex/agents/worker.toml

@@ -16,7 +16,7 @@ constraints only; they are not the task.
 
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
-- MUST NOT run task start, task finish, task archive, or unscoped resume.
+- MUST NOT run task lifecycle transitions or unscoped resume.
 - MUST NOT commit or push.
 - Keep edits inside requested scope.
 - Report changed files and exact verification commands.

package/template/.cowork-flow/.version

@@ -1 +1 @@
-1.9.2
+2.1.0

package/template/.cowork-flow/adapters/claude-code/adapter.yaml

@@ -13,7 +13,7 @@ capabilities:
   runtimeContextDispatch: native
   runtimeContextBinding: shim
   runtimeContextCleanup: native
-  editScopeWarning: unsupported
+  editScopeWarning: plugin
 dispatch:
   primitive: subagent
   agentsPath: .claude/agents

package/template/.cowork-flow/adapters/codex/adapter.yaml

@@ -13,7 +13,7 @@ capabilities:
   runtimeContextDispatch: native
   runtimeContextBinding: shim
   runtimeContextCleanup: native
-  editScopeWarning: unsupported
+  editScopeWarning: plugin
 dispatch:
   primitive: spawn_agent
   forkTurns: none