delegation-layer 0.1.22 → 0.1.25

package/README.md

@@ -225,6 +225,26 @@ choices. Per-model effort metadata is independent of the harness-wide list.
 Discovery exits `0` for `available` or `partial`, `2` for `blocked` or
 `unavailable`, and `1` for `failed`.
 
+For Codex's native read-only review command, select `codex:review` and make
+the Git state explicit:
+
+```sh
+delegate --root "$HOME/delegation-state" dispatch \
+  --provider codex:review \
+  --review-target uncommitted \
+  --brief "$PWD/review-brief.txt" \
+  --cwd "$HOME/delegation-workspace" \
+  --permission read-only \
+  --budget 30m \
+  --json
+```
+
+Use `base:BRANCH` or `commit:SHA` for a different review target. Review tasks
+are persisted as read-only tasks and do not support continuation or active-turn
+interaction. The brief is retained in the task evidence; Codex's explicit
+review target supplies the native review scope because the Codex CLI does not
+accept a prompt together with these target flags.
+
 If a task reports `status: "timed_out"` and
 `continuation.resumable: true`, continue the exact session:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "delegation-layer",
-  "version": "0.1.22",
+  "version": "0.1.25",
   "description": "Multi-provider AI agent delegation CLI and Agent Skill for running bounded coding tasks across provider CLIs.",
   "keywords": [
     "ai-agents",

package/plugins/delegation-layer/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "delegation-layer",
   "displayName": "Delegation Layer",
-  "version": "0.1.22",
+  "version": "0.1.25",
   "description": "Consult external AI harnesses and CCR-configured models for reviews, research, implementation, and debate through the resumable Delegate CLI.",
   "author": {
     "name": "Hesham Karam",

package/plugins/delegation-layer/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "delegation-layer",
-  "version": "0.1.22",
+  "version": "0.1.25",
   "description": "Consult external AI harnesses and CCR-configured models for reviews, research, implementation, and debate through the resumable Delegate CLI.",
   "author": {
     "name": "Hesham Karam",

package/plugins/delegation-layer/skills/agent-integration/SKILL.md

@@ -96,15 +96,25 @@ tasks may proceed; the failed attempt must remain reported as failed or blocked.
 9. Never put credentials, tokens, or unrestricted provider output in a brief,
    option, receipt, or agent message.
 10. Permission modes select provider-native behavior, not an independent sandbox.
-   Providers load their own configuration and extensions. If a task is rejected,
-   report delegate's evidence; do not assume the user's configuration is faulty
-   or remove MCP servers, plugins, settings, or credentials to make it pass.
+    Providers load their own configuration and extensions. If a task is rejected,
+    report delegate's evidence; do not assume the user's configuration is faulty
+    or remove MCP servers, plugins, settings, or credentials to make it pass.
 11. The model chooses ordinary-task fan-out by issuing independent `dispatch`
     commands concurrently. The private supervisor does not impose a task-count
     or CPU-based limit. Use this for independent investigation, debate, review,
     or provider comparison. Concurrent write tasks must use separate workspaces
     or explicit coordination to avoid file conflicts.
 
+For an explicit Codex code review, use the discoverable `codex:review` profile
+with one persisted target: `--review-target uncommitted`,
+`--review-target base:BRANCH`, or `--review-target commit:SHA`. It is read-only
+and does not support `--interactive`, continuation, or workspace-write. Use
+ordinary `codex:exec` when the request is a general investigation or asks the
+provider to edit files; the review profile is for Codex's native review
+operation and keeps the reviewed Git state explicit. The brief is retained as
+task evidence; the review target supplies Codex's review scope because its
+native command does not accept a prompt with the target flag.
+
 ## Operating procedure
 
 ### 1. Verify the control CLI

package/plugins/delegation-layer/skills/agent-integration/evals/routing.json

@@ -5,7 +5,7 @@
       "name": "codex-review",
       "prompt": "Ask Codex to review pricing.py for correctness. Return the finding without editing files.",
       "external": true,
-      "provider": "codex:exec",
+      "provider": "codex:review",
       "split": "development",
       "native_alternative_for": "codex"
     },

package/plugins/delegation-layer/skills/agent-integration/references/command-reference.md

@@ -27,12 +27,15 @@ provider’s own responsibility and is never performed by this skill.
 
 Dispatch flags:
 
-- `--brief FILE`: bounded task instructions;
+- `--brief FILE`: bounded task instructions; for `codex:review`, the brief is
+  retained as task evidence and the explicit review target supplies Codex's
+  native scope;
 - `--cwd ABS`: workspace for the delegated turn;
 - `--permission read-only|workspace-write`: read-only investigation or authorized unattended write execution, including commands (not independent containment);
 - `--budget DURATION`: finite turn budget;
 - `--auto`: let the CLI select a ready provider;
 - `--provider ID`: preserve the caller’s named harness or provider, resolved through the catalog;
+- `--review-target uncommitted|base:BRANCH|commit:SHA`: select the explicit Git state for `codex:review`; it is required for that read-only profile and unsupported by other profiles;
 - `--model MODEL` and `--effort VALUE`: provider-advertised choices (CCR requires a model alias);
   Codex maps effort to TOML `model_reasoning_effort` for ordinary turns or a native
   turn parameter for interactive turns, while Claude and AGY

package/skills/agent-integration/SKILL.md

@@ -96,15 +96,25 @@ tasks may proceed; the failed attempt must remain reported as failed or blocked.
 9. Never put credentials, tokens, or unrestricted provider output in a brief,
    option, receipt, or agent message.
 10. Permission modes select provider-native behavior, not an independent sandbox.
-   Providers load their own configuration and extensions. If a task is rejected,
-   report delegate's evidence; do not assume the user's configuration is faulty
-   or remove MCP servers, plugins, settings, or credentials to make it pass.
+    Providers load their own configuration and extensions. If a task is rejected,
+    report delegate's evidence; do not assume the user's configuration is faulty
+    or remove MCP servers, plugins, settings, or credentials to make it pass.
 11. The model chooses ordinary-task fan-out by issuing independent `dispatch`
     commands concurrently. The private supervisor does not impose a task-count
     or CPU-based limit. Use this for independent investigation, debate, review,
     or provider comparison. Concurrent write tasks must use separate workspaces
     or explicit coordination to avoid file conflicts.
 
+For an explicit Codex code review, use the discoverable `codex:review` profile
+with one persisted target: `--review-target uncommitted`,
+`--review-target base:BRANCH`, or `--review-target commit:SHA`. It is read-only
+and does not support `--interactive`, continuation, or workspace-write. Use
+ordinary `codex:exec` when the request is a general investigation or asks the
+provider to edit files; the review profile is for Codex's native review
+operation and keeps the reviewed Git state explicit. The brief is retained as
+task evidence; the review target supplies Codex's review scope because its
+native command does not accept a prompt with the target flag.
+
 ## Operating procedure
 
 ### 1. Verify the control CLI

package/skills/agent-integration/evals/routing.json

@@ -5,7 +5,7 @@
       "name": "codex-review",
       "prompt": "Ask Codex to review pricing.py for correctness. Return the finding without editing files.",
       "external": true,
-      "provider": "codex:exec",
+      "provider": "codex:review",
       "split": "development",
       "native_alternative_for": "codex"
     },

package/skills/agent-integration/references/command-reference.md

@@ -27,12 +27,15 @@ provider’s own responsibility and is never performed by this skill.
 
 Dispatch flags:
 
-- `--brief FILE`: bounded task instructions;
+- `--brief FILE`: bounded task instructions; for `codex:review`, the brief is
+  retained as task evidence and the explicit review target supplies Codex's
+  native scope;
 - `--cwd ABS`: workspace for the delegated turn;
 - `--permission read-only|workspace-write`: read-only investigation or authorized unattended write execution, including commands (not independent containment);
 - `--budget DURATION`: finite turn budget;
 - `--auto`: let the CLI select a ready provider;
 - `--provider ID`: preserve the caller’s named harness or provider, resolved through the catalog;
+- `--review-target uncommitted|base:BRANCH|commit:SHA`: select the explicit Git state for `codex:review`; it is required for that read-only profile and unsupported by other profiles;
 - `--model MODEL` and `--effort VALUE`: provider-advertised choices (CCR requires a model alias);
   Codex maps effort to TOML `model_reasoning_effort` for ordinary turns or a native
   turn parameter for interactive turns, while Claude and AGY