devlyn-cli 4.2.13 → 4.2.15

package/README.md

@@ -37,6 +37,8 @@ In a project, AGENTS.md readers load the skills from `.agents/skills/`; Claude C
 
 Without prompts, `npx devlyn-cli -y` installs AGENTS.md + `.agents/skills/` plus every target this project already has; add `--claude` for Claude Code. With `--global` it installs for every project on this machine, plus `~/.claude/skills/` with `--claude` or when it already has a devlyn install. After a project install or update, the installer names the changed files to commit, including installed files a `.gitignore` hides, so teammates and `/devlyn-ideate` drains can use them.
 
+`npx devlyn-cli update` — Update every devlyn install already here (this project and your global skill folders) to this version; installs nothing new.
+
 ---
 
 ## How It Works — Principles and Loops
@@ -102,8 +104,9 @@ files and rules outside managed blocks retain their contents. Unknown old text
 is kept conservatively, even when it may contain obsolete defaults.
 Malformed or duplicate managed markers still stop with an exact `.backup`, new
 defaults in `.incoming`, and a `.merge.md` guide; the original remains unchanged.
-Release packaging refreshes the offline fingerprints from Git history using
-`node scripts/update-instruction-templates.js`; installation needs no Git or network.
+Portability refreshes the offline fingerprints from Git history using
+`node scripts/update-instruction-templates.js` before testing; publish ships that tested tarball.
+Installation needs no Git or network.
 Use 3.1.3 or newer consistently: older installers still overwrite `CLAUDE.md`.
 
 Upgrading to 4.1.0: `npx devlyn-cli -y` in a 4.x project keeps its Claude Code install
@@ -215,7 +218,7 @@ Selected during install. Run `npx devlyn-cli` again to add more.
 
 ---
 
-Installer updates preserve user work: before writing any selected target, devlyn refuses to replace or remove edited skills, directories with extra files (including hidden files), links, or unknown copies. `-y` does not bypass this check. Unedited copies from every published version upgrade automatically, including committed copies, historical install-path stamps and generated Python bytecode caches. Release packaging derives the offline skill history from Git with `node scripts/update-skill-history.js`. Move conflicting folders to a backup and migrate them manually; also remove conflicting tracked paths from the Git index before rerunning.
+Installer updates preserve user work: before writing any selected target, devlyn refuses to replace or remove edited skills, directories with extra files (including hidden files), links, or unknown copies. `-y` does not bypass this check. Unedited copies from every published version upgrade automatically, including committed copies, historical install-path stamps and generated Python bytecode caches. Portability derives the offline skill history from Git with `node scripts/update-skill-history.js` before testing; publish ships that tested tarball. Move conflicting folders to a backup and migrate them manually; also remove conflicting tracked paths from the Git index before rerunning.
 
 Only `__pycache__` directories containing exclusively regular `*.pyc` files count as generated Python caches. Other entries make the directory ordinary content; links and special files are refused. Standalone `*.pyc` files count as content: none of the 113 published versions through 4.2.5 shipped them. Historical path normalization applies only to the escaped absolute assignment defaults written into Markdown by the 2.8.0–4.0.0 installers.
 

package/bin/devlyn.js

@@ -3,6 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const crypto = require('crypto');
 const { execSync, spawnSync } = require('child_process');
 
 const CONFIG_SOURCE = path.join(__dirname, '..', 'config');
@@ -29,6 +30,7 @@ const RENAMED_SKILLS = {
   'devlyn:reap': 'devlyn-reap',
 };
 const DEVLYN_INSTALL_MARKER = '.devlyn-install.json';
+const DEVLYN_INSTALL_LOCK = '.devlyn-install.lock';
 // Project settings earlier releases added for the retired pipeline.
 const RETIRED_STOP_HOOK = 'python3 "$CLAUDE_PROJECT_DIR/.claude/skills/_shared/resolve-stop-hook.py"';
 const RETIRED_ENV = ['CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS'];
@@ -101,6 +103,26 @@ function skillRoots(target, global) {
   return dirs.map((dir) => path.join(global ? os.homedir() : projectDir(), dir, 'skills'));
 }
 
+// Core and historical skills count, as does an install in progress. _shared is not
+// unique to devlyn, and a marker alone can outlive its skills; optional addons stand alone.
+function hasDevlynInstall(root) {
+  try {
+    const stat = (name) => fs.lstatSync(name, { throwIfNoEntry: false });
+    if (!stat(root)?.isDirectory()) return false;
+    const optional = new Set(OPTIONAL_ADDONS.map((addon) => addon.name));
+    const names = [...DEVLYN_CORE_SKILLS, ...DEPRECATED_DIRS.map((name) => path.basename(name)),
+      ...Object.keys(RENAMED_SKILLS)].filter((name) => name.startsWith('devlyn')
+        && !optional.has(name.replace(/[:\uF03A]/g, '-')));
+    return !!stat(path.join(root, DEVLYN_INSTALL_LOCK))
+      || names.some((name) => [...legacySkillPaths(root, name.replace(/^devlyn-/, 'devlyn:')),
+        path.join(root, name.replace(/:/g, '-'))].some((full) => stat(full)?.isDirectory()))
+      || (!!stat(path.join(root, DEVLYN_INSTALL_MARKER)) && stat(path.join(root, '_shared'))?.isDirectory());
+  } catch (error) {
+    if (error.code === 'ENOTDIR') return false;
+    throw new InstructionError(`Cannot inspect ${root}: ${error.message}. Check its permissions and run again.`);
+  }
+}
+
 // A devlyn Claude install in this scope. Globally only the marker a `--global --claude` run
 // writes counts; in a project also a devlyn skill (0.6.0 and later), command (0.2-0.5) or
 // CLAUDE.md with devlyn defaults, held or imported from AGENTS.md, which a team may commit
@@ -914,6 +936,76 @@ function installClaudeCore(installedSkills = new Map()) {
   return written;
 }
 
+// Shared user roots need one writer from ownership checks through the last addon write.
+// Never reap a foreign lock: PID reuse and slow installs make age/liveness unsafe evidence.
+function withUserSkillLocks(roots, action) {
+  const locks = [];
+  const createdDirs = [];
+  try {
+    for (const root of roots) {
+      const lock = path.join(root, DEVLYN_INSTALL_LOCK);
+      try {
+        for (const dir of [path.dirname(root), root]) {
+          const stat = fs.lstatSync(dir, { throwIfNoEntry: false });
+          if (stat && !stat.isDirectory()) throw new Error(`not a real directory: ${dir}`);
+        }
+        const missing = [];
+        for (let dir = root; !fs.existsSync(dir); dir = path.dirname(dir)) {
+          missing.push(dir);
+          if (path.dirname(dir) === dir) break;
+        }
+        fs.mkdirSync(root, { recursive: true });
+        createdDirs.push(...missing);
+        const token = crypto.randomBytes(16).toString('hex');
+        const fd = fs.openSync(lock, 'wx', 0o600);
+        try {
+          fs.writeFileSync(fd, JSON.stringify({ pid: process.pid, token }) + '\n');
+          locks.push({ lock, token });
+        } catch (error) {
+          // A failed initial write may not leave parseable JSON; verify the open file's identity.
+          const opened = fs.fstatSync(fd);
+          const current = fs.lstatSync(lock, { throwIfNoEntry: false });
+          if (current?.dev === opened.dev && current?.ino === opened.ino) fs.unlinkSync(lock);
+          throw error;
+        } finally {
+          fs.closeSync(fd);
+        }
+      } catch (error) {
+        if (error.code === 'EEXIST') {
+          let owner;
+          try {
+            owner = `pid ${JSON.parse(fs.readFileSync(lock, 'utf8')).pid}`;
+          } catch (readError) {
+            owner = `cannot read lock owner: ${readError.message}`;
+          }
+          throw new InstructionError(`Another devlyn-cli is changing ${root} (${owner}). `
+            + `If none is running, delete ${lock} and run again.`);
+        }
+        throw new InstructionError(`Cannot lock ${root}: ${error.message}. Check ${lock} and run again.`);
+      }
+    }
+    return action();
+  } finally {
+    const errors = [];
+    for (const { lock, token } of locks.reverse()) {
+      try {
+        if (JSON.parse(fs.readFileSync(lock, 'utf8')).token === token) fs.unlinkSync(lock);
+      } catch (error) {
+        if (error.code !== 'ENOENT') errors.push(`${lock}: ${error.message}`);
+      }
+    }
+    // Refusal must not leave empty roots created just to acquire their locks.
+    for (const dir of createdDirs) {
+      try {
+        fs.rmdirSync(dir);
+      } catch (error) {
+        if (!['ENOTEMPTY', 'EEXIST', 'ENOENT'].includes(error.code)) errors.push(`${dir}: ${error.message}`);
+      }
+    }
+    if (errors.length) throw new InstructionError(`Cannot release install locks; check these paths:\n${errors.join('\n')}`);
+  }
+}
+
 // Installs the targets in one scope; returns the skill roots written.
 function install(targets, global, optionalNames = []) {
   // In the home folder CLAUDE.md, AGENTS.md (agents read a parent folder's too) and
@@ -926,23 +1018,25 @@ function install(targets, global, optionalNames = []) {
       + 'would apply to every project. Run from a project folder, or use --global for skills only.');
   }
   const roots = targets.flatMap((target) => skillRoots(target, global));
-  const written = [];
-  const installedSkills = new Map();
-  if (!global) readProjectGitignore();
-  preflightSkills(roots, optionalNames,
-    !global && targets.includes('claude') ? path.dirname(skillRoots('claude', false)[0]) : null);
-  // AGENTS.md first, whatever order the menu gave: a new CLAUDE.md holds the block only when AGENTS.md does not.
-  for (const target of ['agents', 'claude'].filter((name) => targets.includes(name))) {
-    if (global) skillRoots(target, true).forEach((root) => installCoreSkills(root));
-    else if (target === 'agents') written.push(...installAgentsProject(targets.includes('claude'), installedSkills));
-    else written.push(...installClaudeCore(installedSkills));
-  }
-  for (const name of optionalNames) installLocalSkill(name, roots, written, installedSkills);
-  log(`\n✅ devlyn ${PKG.version} installed`, 'green');
-  if (global) log('The principles block installs per project: run npx devlyn-cli in the project without --global.');
-  else noticeProjectChanges(written, installedSkills);
-  noticeGlobalDrift(roots);
-  return roots;
+  return withUserSkillLocks(global ? roots : [], () => {
+    const written = [];
+    const installedSkills = new Map();
+    if (!global) readProjectGitignore();
+    preflightSkills(roots, optionalNames,
+      !global && targets.includes('claude') ? path.dirname(skillRoots('claude', false)[0]) : null);
+    // AGENTS.md first, whatever order the menu gave: a new CLAUDE.md holds the block only when AGENTS.md does not.
+    for (const target of ['agents', 'claude'].filter((name) => targets.includes(name))) {
+      if (global) skillRoots(target, true).forEach((root) => installCoreSkills(root));
+      else if (target === 'agents') written.push(...installAgentsProject(targets.includes('claude'), installedSkills));
+      else written.push(...installClaudeCore(installedSkills));
+    }
+    for (const name of optionalNames) installLocalSkill(name, roots, written, installedSkills);
+    log(`\n✅ devlyn ${PKG.version} installed`, 'green');
+    if (global) log('The principles block installs per project: run npx devlyn-cli in the project without --global.');
+    noticeGlobalDrift(roots);
+    if (!global) noticeProjectChanges(written, installedSkills);
+    return roots;
+  });
 }
 
 // Advisory only: a successful install stays successful when Git is unavailable or fails.
@@ -1023,12 +1117,92 @@ function noticeGlobalDrift(installed) {
     } catch (error) {
       version = `(unreadable marker: ${error.message})`;
     }
+    if (dir !== '.grok' && version === PKG.version) continue;
     // 4.0's Grok root; Grok now reads ~/.agents/skills, so --global never refreshes it.
     const advice = dir === '.grok' ? 'delete it' : 'refresh it with --global, or delete it';
     log(`Global devlyn ${version} in ${root.replace(os.homedir(), '~')} — ${advice}.`, 'yellow');
   }
 }
 
+// Skip project setup in the home folder, where instructions would affect every project.
+// Lock user roots, preflight all roots, check versions, then write; user roots go first
+// so the project's commit guidance remains the last output.
+function update() {
+  showLogo();
+  log('─'.repeat(44), 'dim');
+
+  const userCandidates = [...skillRoots('agents', true), ...skillRoots('claude', true)];
+  const linkedRoots = new Set();
+  const linkNotices = [];
+  for (const root of new Set([...userCandidates, ...skillRoots('agents', false), ...skillRoots('claude', false)])) {
+    try {
+      if (![path.dirname(root), root].some((dir) => fs.lstatSync(dir, { throwIfNoEntry: false })?.isSymbolicLink())) continue;
+      linkedRoots.add(root);
+      // Follow only for discovery; linked roots never enter the write/lock/preflight paths.
+      if (!fs.statSync(root, { throwIfNoEntry: false })?.isDirectory()) continue;
+      if (!fs.statSync(path.join(root, DEVLYN_INSTALL_MARKER), { throwIfNoEntry: false })
+          && !fs.readdirSync(root).some((name) => name.startsWith('devlyn')
+            && fs.statSync(path.join(root, name), { throwIfNoEntry: false })?.isDirectory())) continue;
+      const notice = `Not updated: ${root} is a link — devlyn-cli does not write through links. `
+        + 'Update the folder it points to, or replace the link with a folder.';
+      linkNotices.push(notice);
+      log(notice, 'yellow');
+    } catch (error) {
+      if (error.code === 'ENOTDIR') continue;
+      throw new InstructionError(`Cannot inspect ${root}: ${error.message}. Check its permissions and run again.`);
+    }
+  }
+  const userRoots = userCandidates.filter((root) => !linkedRoots.has(root) && hasDevlynInstall(root));
+  const home = fs.statSync(os.homedir(), { bigint: true, throwIfNoEntry: false });
+  const here = fs.statSync(projectDir(), { bigint: true });
+  const targets = [];
+  if (home?.dev !== here.dev || home?.ino !== here.ino) {
+    if (!linkedRoots.has(skillRoots('agents', false)[0]) && hasDevlynInstall(skillRoots('agents', false)[0])) targets.push('agents');
+    if (!linkedRoots.has(skillRoots('claude', false)[0]) && hasDevlynClaude(false)) targets.push('claude');
+  }
+  const projectRoots = targets.flatMap((target) => skillRoots(target, false));
+  const roots = [...userRoots, ...projectRoots];
+  if (!roots.length) {
+    throw new InstructionError(['No devlyn install here to update. Run npx devlyn-cli to install.', ...linkNotices].join('\n'));
+  }
+
+  return withUserSkillLocks(userRoots, () => {
+    if (targets.length) {
+      readProjectGitignore();
+      preflightSkills(projectRoots, [], targets.includes('claude') ? path.dirname(skillRoots('claude', false)[0]) : null);
+    }
+    preflightSkills(userRoots);
+    // Ownership preflight has already refused unreadable or invalid markers.
+    const current = PKG.version.split('.').map(BigInt);
+    const newer = roots.flatMap((root) => {
+      const marker = path.join(root, DEVLYN_INSTALL_MARKER);
+      if (!fs.existsSync(marker)) return [];
+      const { version } = JSON.parse(fs.readFileSync(marker, 'utf8'));
+      // SemVer 2.0.0's numbered-group regex: https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string
+      const parsed = typeof version === 'string' && version.match(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/);
+      if (!parsed || parsed[0] !== version) {
+        throw new InstructionError(`Update refused; nothing was changed. ${root}: cannot tell which devlyn-cli wrote it `
+          + '(missing or malformed marker version). Restore the original install marker and run again.');
+      }
+      // This package is a plain release: equal-core prereleases are older, and build metadata is ignored.
+      const parts = parsed.slice(1, 4).map(BigInt);
+      const difference = parts.findIndex((part, index) => part !== current[index]);
+      return difference !== -1 && parts[difference] > current[difference] ? [`  - ${root}: ${version}`] : [];
+    });
+    if (newer.length) {
+      throw new InstructionError('Update refused; nothing was changed. Newer devlyn installs:\n'
+        + newer.join('\n') + '\nRun npx devlyn-cli@latest update.');
+    }
+
+    userRoots.forEach((root) => installCoreSkills(root));
+    if (targets.length) install(targets, false);
+    else {
+      log(`\n✅ devlyn ${PKG.version} installed`, 'green');
+      noticeGlobalDrift(userRoots);
+    }
+  });
+}
+
 async function init({ yes, claude, global }) {
   showLogo();
   log('─'.repeat(44), 'dim');
@@ -1090,6 +1264,7 @@ function showHelp() {
   showLogo();
   log('Usage:', 'green');
   log('  npx devlyn-cli               Install/update devlyn: choose what (AGENTS.md, CLAUDE.md) and where (this project or global)');
+  log('  npx devlyn-cli update        Update every devlyn install already here (this project and your global skill folders) to this version; installs nothing new');
   log('  npx devlyn-cli -y            Without prompts: AGENTS.md + .agents/skills, plus CLAUDE.md + .claude/ if this project has them');
   log('  npx devlyn-cli -y --claude   Also install CLAUDE.md + .claude/ for Claude Code');
   log('  npx devlyn-cli -y --global   Skills only, for every project on this machine (~/.agents/skills, ~/.codex/skills; ~/.claude/skills with --claude, or when it already has a devlyn install)');
@@ -1133,13 +1308,17 @@ switch (command) {
     process.exitCode = 1;
     break;
   default: {
-    const flags = command === 'init' ? args.slice(1) : args;
-    const unknown = flags.find((flag) => !INSTALL_FLAGS.includes(flag));
+    const flags = command === 'init' || command === 'update' ? args.slice(1) : args;
+    const unknown = command === 'update' ? flags[0] : flags.find((flag) => !INSTALL_FLAGS.includes(flag));
     if (unknown !== undefined) {
       log(`Unknown command: ${unknown}`, 'yellow');
       showHelp();
       process.exit(1);
     }
+    if (command === 'update') {
+      update();
+      break;
+    }
     await init({ yes: flags.includes('-y') || flags.includes('--yes'), claude: flags.includes('--claude'), global: flags.includes('--global') });
   }
 }

package/bin/instruction-templates.json

@@ -82,6 +82,7 @@
   "paragraphs": {
     "AGENTS.md": [
       "00044037bbe954aacee48c5edbe01b53aabef90fbe3f0c28c9136dc428fdd7df",
+      "0031285b60a5cf5e965df50482969315e5e62b163bb706695622fb4ed63f3dda",
       "0042d7a45818c8e1c451ac255502ee014fda81a2dbd2a4c04e75a66bc3493940",
       "0144d44eb6a0537211159e5f15baf2cacf11cc3275490ac5d295917df22cff27",
       "01e073f6a5722534affe03ab334fe4a394347f13de5ce191b757a0b7c6f51904",
@@ -91,6 +92,7 @@
       "03d85ed66f64ea52f2f96d9fb203b05ac6afc0ba634a4dfb3585429ce1531c44",
       "0467080d13d933b663362006ae5f5a0ad73baaed51ad50faf3f0d3d9f92244a3",
       "0634a245075d1a5aac4e58c1345f40f5f4c3b4909315f86aacd7ab239ea3ce61",
+      "072b63f736ee80f28550aec03277f033268a232e349ac86c3f1cab4bad9006c0",
       "0869633a322da8f8d800b1d2c23becc52f5ff592f0823533ea24f09de465c53a",
       "090f003bb30b98e6979865f3eb9bbc66eaa8f0cd74a89ff2eea5ef38cbee13b5",
       "0926622dde30d21c6cafe6b69b0bb0608b31e2528655615c7edbdedc6ae43d7c",
@@ -163,6 +165,7 @@
       "3e87f3023f1ee4810c769a27f63244a4c4825fa3c78417abd8a1a4bfb6350134",
       "3efd55e3caac3e3488b81921446bc9ca4ec92ac766abbcfefafeb183b21464a1",
       "3f05e197006cf9715612c67cb8709690e053262e9a0702723e69798ad29a2c08",
+      "3fde1f80f1d0e17ba79a674cb1124b8034df92801e9615c8fa443ce7c7a7672b",
       "41323b1c12be256f604edf8c49ff505acbaa75b6a1b938b76286d5eebec1ce95",
       "41660630582e14f984686f201e6af130e29bbd3fadc3c76a3c6055a7a8f78c4f",
       "41d2ff119ff97961c64e5eb57632c2d04b22794b50eb9227506c4ed763ebca3f",
@@ -374,6 +377,7 @@
       "e237f12ed08800ccc4c6eb4ae57cdd59d61198711f6a3b02dcb668aa08fddb93",
       "e289dbab99dadb30d8315b32b8243154148c82955f238936bce4c1fe1c3ae525",
       "e2bac40f3ff0b39726f95caaa9b19aa3b21596f165ac7a9dc68ebf42681d58cb",
+      "e389e1e77cc2da32214e95451b25b45402b1b586b26f5688bb373c492db3fcfb",
       "e3ee2da50e961046da3f5b68b0c328570307fb21a93424ae22536b8f216b55a3",
       "e43e4b5b86044fbf7be8d7fd1e3e27cd2089bfc8243e07dc2c3fc034c19794ea",
       "e44015948c7d04e60f3fed7e348c2052538e7784d8fe7ea3edf9f52de07448dd",
@@ -652,6 +656,7 @@
       "6170d780ab4f3cb5e2ea7d2757f9239d35dbbc1f9398e73877a95d5ef4c582ee",
       "624becc31a3b8619bab2b863a469b8bc6b19fc48acaa7d59a455057ff8d7cce1",
       "635097bbe52855009ba78ab992a905aad63b755a4b5c688179d8d597d5c9da01",
+      "65997521bd2bee492eeadc8570bf71f374cf1a05856d4acca499350b3db0dc7c",
       "65b903f779d8879f04e427a400a04bd29ab982ab28a62c2c172620773518242b",
       "6639e9e9622eca3d978923f26bf6f6ba1a95be4059206cc27c62e9deb026146a",
       "6693baa07666a5853ea606c25812f70550d28f6182d9c9dbfc1421270f1ec544",
@@ -665,6 +670,7 @@
       "6a08a11aea6a1dfaa99823a73bc8730e8fff9c483ec8989aaeca669cfc7b3ed6",
       "6a27907ba14fae9ddcacd551007b783b2f813c51c118828c74fd2174e09a7d41",
       "6a5ea10aa15a05ac992bd118adc3c0de48c85cea504aef655065d9678f93717c",
+      "6b098e67dbcdbec4569fb950f2067e4c4843a3b5f26a4e8886820102542eddee",
       "6b26d02b3f87d53a964b6fe405992104dd2ee85f8c1b3048951ece574d9005a8",
       "6b65f3883cfca3d531ab716c069c88f3a7d964657c5e026bda25eacdb37f16c5",
       "6b726d35cdc0851401769b6de9c422cfa475dbe7c0d036726706439a2cdbb02a",
@@ -699,6 +705,7 @@
       "7b47b07e3062f3dc839f11397bc3265120e01a35b0fda094d738e28a6729e6c3",
       "7bb5c341115c56592c0d1b5903d01321ce9c324136bc53babf9d438389796d94",
       "7c0dacd603b4381539d6d3cf21f5fe625cf54b05eb4aa750fce658529b11d81d",
+      "7c6c98c3dc37aa0760796051b0b81ac10b9ebad7c9d7da3615b3fd764e589766",
       "7c79750557c7d7156df6f135fb582ec09cc5f4987ac8e2af0f5113e42c117224",
       "7d083db061c678113c12453eb73299caa9e207dd6418ad63406154fd330f3309",
       "7d2239e2cd4893c57ac0bf1373a2ef46419f614d0ce18a12df51222bc7795327",
@@ -916,6 +923,7 @@
       "e2070548ec9a6244c569ef0b9a43c2e5dd99cf9c0fa4540a21fd0595b291e444",
       "e29fec7d54a144ea4867a3764fccdee6849d58d0f32eacdd56b2c317863fa1c6",
       "e2e0fc585321ee2013cccaed95d47c49fbca71b54c67abad9080d19d70e3c1a5",
+      "e389e1e77cc2da32214e95451b25b45402b1b586b26f5688bb373c492db3fcfb",
       "e3b2f7be15a793f07cbe8e51aa2feeac51d4c67077b94e5e20bad2e14be07fc5",
       "e468c242cc38c390f9679fca61f355848f58d51570249dfbb65b4f2e26a9dfb1",
       "e4bafa0f553e899b65f05feabf4cbe86d8246c57cbba745eb79e6aa858f40a6b",

package/bin/skill-history.json

@@ -59,6 +59,7 @@
       "59f0ecc2c1fd9620e4cac06be370e0bf9965a35c20616047445dbc42da6a1677",
       "5be2e643f96b6ce503ae8d631c67729f0c24b6c5d2b431c087161b520ccbe417",
       "61ec4c0435a2f0b307df8e88d81d9862c3abc1bf758648f2c18039581596659b",
+      "628a40e873d156e9179fd5a6bb3da9f910b6dde0886055804a506cdf8a631aaa",
       "628ee7de57717804cb2b4f4c9357751578276f241eb3ab53fdee49ae92d57513",
       "6320c0d8a5cb5ae82fc08c9c05c9151b00366ef759c824c16d4b777ccc30c771",
       "640500e3ada3d81645c293ddc956e9757f0c4ba0a06e3f914c9bdad4968cbc66",

package/config/skills/_shared/codex-monitored.sh

@@ -35,7 +35,7 @@
 #   6. Preserves codex's exact exit code.
 #
 # USAGE:
-#   bash codex-monitored.sh -C <repo> -s read-only -c model_reasoning_effort=xhigh "<prompt>"
+#   bash codex-monitored.sh -C <repo> -s read-only "<prompt>"
 #   bash codex-monitored.sh resume --last
 #   (Args after the script name are passed verbatim to `codex exec`.)
 #

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.2.13",
+  "version": "4.2.15",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for CLAUDE.md/AGENTS.md and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {