devlyn-cli 4.3.23 → 4.3.25

package/bin/engines.js

@@ -4,10 +4,11 @@ const ENGINE_IDS = Object.freeze([
   'claude', 'codex', 'grok', 'omp', 'antigravity', 'cursor', 'opencode', 'kimi', 'copilot', 'qwen',
 ]);
 
-// The versions each channel was examined on. Newer releases of the same major are taken as
-// compatible: these CLIs ship minor releases weekly, and gating on the examined minor would turn
-// the harness off at every one of them. A new major (or a Cursor build older than the examined one)
-// is refused, since any flag may change there.
+// The versions each channel was examined on. Any newer release, a new major included, is taken as
+// compatible: a version number is not evidence that a channel broke (omp 18 kept both flags devlyn
+// uses), and refusing unexamined majors turned working engines off. Only a version below the examined
+// floor (or a Cursor build older than the examined one) is refused; an unreadable version is refused
+// with its own reason.
 const ENGINE_CAPABILITIES = Object.freeze({
   claude: { minimum: '2.1.307', executor: true },
   codex: { minimum: '0.163.0', executor: true },
@@ -21,20 +22,21 @@ const ENGINE_CAPABILITIES = Object.freeze({
   qwen: { minimum: '0.26.0', executor: false },
 });
 
+function readableVersion(engine, version) {
+  return typeof version === 'string'
+    && (engine === 'cursor' ? /^\d{4}\.\d{2}\.\d{2}-[0-9a-f]+$/ : /^\d+\.\d+\.\d+$/).test(version);
+}
+
 function supportedVersion(engine, version) {
+  if (!readableVersion(engine, version)) return false;
   const capability = ENGINE_CAPABILITIES[engine];
-  if (engine === 'cursor') {
-    const build = typeof version === 'string' && version.match(/^(\d{4})\.(\d{2})\.(\d{2})-[0-9a-f]+$/);
-    return Boolean(build) && build.slice(1).join('') >= capability.minimum.slice(0, 10).replace(/\./g, '');
-  }
-  if (typeof version !== 'string' || !/^\d+\.\d+\.\d+$/.test(version)) return false;
+  if (engine === 'cursor') return version.slice(0, 10).replace(/\./g, '') >= capability.minimum.slice(0, 10).replace(/\./g, '');
   const actual = version.split('.').map(Number);
   const floor = capability.minimum.split('.').map(Number);
-  if (actual[0] !== floor[0]) return false;
-  for (let i = 1; i < 3; i++) {
+  for (let i = 0; i < 3; i++) {
     if (actual[i] !== floor[i]) return actual[i] > floor[i];
   }
   return true;
 }
 
-module.exports = { ENGINE_IDS, ENGINE_CAPABILITIES, supportedVersion };
+module.exports = { ENGINE_IDS, ENGINE_CAPABILITIES, readableVersion, supportedVersion };

package/bin/harness-activation.js

@@ -1,7 +1,7 @@
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
-const { ENGINE_IDS, ENGINE_CAPABILITIES, supportedVersion } = require('./engines');
+const { ENGINE_IDS, ENGINE_CAPABILITIES, readableVersion, supportedVersion } = require('./engines');
 const { verifyRelease, sha256, fail, options, HarnessError } = require('./release');
 const { fingerprint } = require('./skill-ownership');
 const history = require('./skill-history.json');
@@ -301,7 +301,9 @@ function planActivation(releaseRoot, input, env = process.env) {
   if (off) return finish(plan);
   plan.release = release;
   if (!supported) {
-    const reasons = [reason('engine-version-unsupported', { minimum: ENGINE_CAPABILITIES[context.engine].minimum })];
+    const reasons = [readableVersion(context.engine, context.version)
+      ? reason('engine-version-unsupported', { minimum: ENGINE_CAPABILITIES[context.engine].minimum })
+      : reason('engine-version-unreadable')];
     status.principles = channel('unavailable', null, reasons);
     status.skills = channel('unavailable', null, reasons);
     return finish(plan);
@@ -312,7 +314,8 @@ function planActivation(releaseRoot, input, env = process.env) {
     status.skills = channel('partial', null, reasons);
     return finish(plan);
   }
-  const defaults = context.committedBlockApplies ? '' : fs.readFileSync(path.join(release.root, 'config/skills/_shared/runtime-principles.md'), 'utf8');
+  // The selected release is the one source of principles; a committed project block never suppresses it.
+  const defaults = fs.readFileSync(path.join(release.root, 'config/skills/_shared/runtime-principles.md'), 'utf8');
   const catalog = skillCatalog(release);
   const instructions = joinText(defaults, catalog);
   const file = (relativePath, utf8) => {
@@ -327,7 +330,7 @@ function planActivation(releaseRoot, input, env = process.env) {
     plan.files.push({ relativePath, utf8, sha256: sha256(utf8) });
     return path.join(context.runDir, relativePath);
   };
-  const principles = (mechanism) => { status.principles = channel('configured', context.committedBlockApplies ? 'native-project' : mechanism); };
+  const principles = (mechanism) => { status.principles = channel('configured', mechanism); };
   const fallback = (reasons = []) => {
     status.skills = channel('partial', 'absolute-catalog', [...reasons, reason('skills-catalog')]);
     status.invocation = { kind: 'read-file', text: `Read ${path.join(release.root, 'config/skills/devlyn-ideate/SKILL.md')}` };
@@ -419,16 +422,14 @@ function planActivation(releaseRoot, input, env = process.env) {
       break;
     }
     case 'copilot': {
-      if (!context.committedBlockApplies) {
-        const directory = path.join(context.runDir, 'copilot');
-        if (directory.includes(',')) {
-          status.principles = channel('unavailable', null, [reason('principles-unavailable', { detail: 'comma-in-path' })]);
-        } else {
-          file('copilot/devlyn.instructions.md', '---\napplyTo: "**"\n---\n' + instructions);
-          const dirs = config.instructionsDirs ?? env.COPILOT_CUSTOM_INSTRUCTIONS_DIRS ?? '';
-          plan.envPatch.COPILOT_CUSTOM_INSTRUCTIONS_DIRS = dirs.split(',').includes(directory) ? dirs : (dirs ? `${dirs},${directory}` : directory);
-          principles('COPILOT_CUSTOM_INSTRUCTIONS_DIRS');
-        }
+      const directory = path.join(context.runDir, 'copilot');
+      if (directory.includes(',')) {
+        status.principles = channel('unavailable', null, [reason('principles-unavailable', { detail: 'comma-in-path' })]);
+      } else {
+        file('copilot/devlyn.instructions.md', '---\napplyTo: "**"\n---\n' + instructions);
+        const dirs = config.instructionsDirs ?? env.COPILOT_CUSTOM_INSTRUCTIONS_DIRS ?? '';
+        plan.envPatch.COPILOT_CUSTOM_INSTRUCTIONS_DIRS = dirs.split(',').includes(directory) ? dirs : (dirs ? `${dirs},${directory}` : directory);
+        principles('COPILOT_CUSTOM_INSTRUCTIONS_DIRS');
       }
       const root = path.join(release.root, 'config/skills');
       if (root.includes(',') || collisions.length || errors.length) {
@@ -464,7 +465,6 @@ function planActivation(releaseRoot, input, env = process.env) {
       } else status.skills = channel('partial', null, [reason('skills-unavailable', { detail: 'no-initial-task' })]);
       break;
   }
-  if (context.committedBlockApplies) status.principles = channel('configured', 'native-project');
   if (plan.engineArgs.length || Object.keys(plan.envPatch).length || plan.prompt) plan.envPatch.DEVLYN_HARNESS_ROOT = release.root;
   return finish(plan);
 }

package/bin/instructions.js

@@ -24,7 +24,7 @@ function managedBlock(template, eol = '\n') {
 }
 
 function sessionDefaults(template) {
-  return 'The following Devlyn instructions are defaults for this session. Applicable explicit user instructions and native owner/project instructions take precedence over these defaults. This delegation applies only to the Devlyn defaults below; it does not change other engine instructions or permissions.\n\n'
+  return 'The following Devlyn instructions are defaults for this session. Explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace. They change no other engine instructions or permissions.\n\n'
     + normalize(template);
 }
 

package/bin/skill-history.json

@@ -58,6 +58,7 @@
       "45ef27af9ec27089e2861c13b882521fc6bf073dc6b7a356b326b4a27c5e6e24",
       "4685be6a94ad5587ce53785c14a60cccf9a852d9d23391dba0a5bcd0c64931cf",
       "484db9dd2635de5f5acbcf692e2f329f33c0a483951e27bcd77bcbafbc052e19",
+      "491fab4aca617e7e1c9735addfe4b0f249192a4c14c43a85225e65b99031c89b",
       "4ecb004b24a8adfe41c7416c3fa24e62cf76baa3b276ae1ce5091caef77e57b8",
       "4fed91aed4dc1cd28a9e07229dbe9b7f6d8127e5f763dde8f76bb1b6f6855cce",
       "514bfaf5667af3c9d4d36f391e6567a5eb759c6dfb06a5c3ea23cf29692844ef",
@@ -346,6 +347,7 @@
       "1d8c3bd31c8b755acd0c3c9f416acb5024dfa99fbf5e2c14d8d6df00a24fe9b4",
       "300d1af60cc53285935dc4b5b370e157707218d844a4303b96d7826eef36ed43",
       "302b1a6c109087dce02ed6af184d6aeeca6cecfd40ebe638beecf8bdf21cf59c",
+      "338a2b5ddde0f09444040c45922716663b1df76ec1a6c97ebdeb770b9e3ede49",
       "33cf196ba7dd2d96df119707d874317e6005f1323fc2cae677c53e2f134f9ff4",
       "36b58dbdc26e51abc05a60872c4582faeebd67e9fe5626a3933467ba07c68dc4",
       "40237cd5259dbcf7c490f130e844a9e32eea48a8edabd50800edee5029bf95a4",
@@ -800,6 +802,8 @@
     "4.3.21",
     "4.3.22",
     "4.3.23",
+    "4.3.24",
+    "4.3.25",
     "4.3.3",
     "4.3.4",
     "4.3.5",

package/config/skills/_shared/runtime-principles.md

@@ -1,4 +1,4 @@
-The following Devlyn instructions are defaults for this session. Applicable explicit user instructions and native owner/project instructions take precedence over these defaults. This delegation applies only to the Devlyn defaults below; it does not change other engine instructions or permissions.
+The following Devlyn instructions are defaults for this session. Explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace. They change no other engine instructions or permissions.
 
 # Project Instructions
 

package/config/skills/devlyn-ideate/SKILL.md

@@ -116,7 +116,7 @@ Follow [loop.md](references/loop.md). The executor is the configured route, the
 Another engine needs an argv that starts one fresh non-interactive session able, without prompts, to edit, run commands and commit in its task worktree and to write the packet's submission file. `<prompt>` carries the absolute binding values, while `{packet}` stays literal for the drain to fill:
 
 ```text
-Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
+Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence, except a Devlyn managed block (devlyn:instructions markers), which those defaults replace; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
 ```
 
 ```sh

package/config/skills/devlyn-ideate/references/loop.md

@@ -59,7 +59,7 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 `queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation; use the same bound queue entry point for authorized add/drain operations.
 
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
 
 ## Executor exchange
 
@@ -75,7 +75,7 @@ The packet (`<receipt dir>/packet.json`) carries everything a fresh executor nee
 | `shared_constraints` | The meta-prompt's `Constraints and exclusions`. |
 | `dependencies` | `{task, receipt, source_sha}` of each accepted prerequisite. |
 | `schema_version`, `harness` | New packets use version 2 and the bound release reference, or null for legacy unbound queues. Existing v1 packets execute unchanged. |
-| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence. No native engine applicability is inferred from filenames. |
+| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which the defaults replace. No native engine applicability is inferred from filenames. |
 | `workerPrompt` | `{path, sha256}` of the task’s worker instructions, or null for legacy unbound queues. Read it before working. |
 | `delivery` | `local-only`, `auto` or `pr`. |
 | `evidence_dir`, `runner` | Where loop evidence lives (`<worktree>/.devlyn/loop`, ignored by Git) and the runner argv. |

package/config/skills/devlyn-ideate/scripts/queue.py

@@ -1215,7 +1215,7 @@ def ensure_packet(v, row, path, receipt):
         packet["runner"][1] = str(bound_skills / "devlyn-ideate/scripts/acceptance.py")
         prompt = path.parent / "worker-prompt.md"
         body = (f"Execute task packet {packet_path}. Work only in {worktree} on its owned branch.\n"
-                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win.\n"
+                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace.\n"
                 f"Set DEVLYN_SKILL_DIR={bound_skills / 'devlyn-ideate'} and DEVLYN_SHARED_DIR={bound_skills / '_shared'}.\n"
                 f"Follow Executor exchange and Review records in {bound_skills / 'devlyn-ideate/references/loop.md'}.\n"
                 f"Meet the packet obligations, run its runner and write {packet['submission']}. Never push, open a pull request or merge.\n")

package/native/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.23",
+  "version": "4.3.25",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/claude/skills/_shared/runtime-principles.md

@@ -1,4 +1,4 @@
-The following Devlyn instructions are defaults for this session. Applicable explicit user instructions and native owner/project instructions take precedence over these defaults. This delegation applies only to the Devlyn defaults below; it does not change other engine instructions or permissions.
+The following Devlyn instructions are defaults for this session. Explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace. They change no other engine instructions or permissions.
 
 # Project Instructions
 

package/native/claude/skills/devlyn-ideate/SKILL.md

@@ -116,7 +116,7 @@ Follow [loop.md](references/loop.md). The executor is the configured route, the
 Another engine needs an argv that starts one fresh non-interactive session able, without prompts, to edit, run commands and commit in its task worktree and to write the packet's submission file. `<prompt>` carries the absolute binding values, while `{packet}` stays literal for the drain to fill:
 
 ```text
-Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
+Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence, except a Devlyn managed block (devlyn:instructions markers), which those defaults replace; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
 ```
 
 ```sh

package/native/claude/skills/devlyn-ideate/references/loop.md

@@ -59,7 +59,7 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 `queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation; use the same bound queue entry point for authorized add/drain operations.
 
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
 
 ## Executor exchange
 
@@ -75,7 +75,7 @@ The packet (`<receipt dir>/packet.json`) carries everything a fresh executor nee
 | `shared_constraints` | The meta-prompt's `Constraints and exclusions`. |
 | `dependencies` | `{task, receipt, source_sha}` of each accepted prerequisite. |
 | `schema_version`, `harness` | New packets use version 2 and the bound release reference, or null for legacy unbound queues. Existing v1 packets execute unchanged. |
-| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence. No native engine applicability is inferred from filenames. |
+| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which the defaults replace. No native engine applicability is inferred from filenames. |
 | `workerPrompt` | `{path, sha256}` of the task’s worker instructions, or null for legacy unbound queues. Read it before working. |
 | `delivery` | `local-only`, `auto` or `pr`. |
 | `evidence_dir`, `runner` | Where loop evidence lives (`<worktree>/.devlyn/loop`, ignored by Git) and the runner argv. |

package/native/claude/skills/devlyn-ideate/scripts/queue.py

@@ -1215,7 +1215,7 @@ def ensure_packet(v, row, path, receipt):
         packet["runner"][1] = str(bound_skills / "devlyn-ideate/scripts/acceptance.py")
         prompt = path.parent / "worker-prompt.md"
         body = (f"Execute task packet {packet_path}. Work only in {worktree} on its owned branch.\n"
-                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win.\n"
+                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace.\n"
                 f"Set DEVLYN_SKILL_DIR={bound_skills / 'devlyn-ideate'} and DEVLYN_SHARED_DIR={bound_skills / '_shared'}.\n"
                 f"Follow Executor exchange and Review records in {bound_skills / 'devlyn-ideate/references/loop.md'}.\n"
                 f"Meet the packet obligations, run its runner and write {packet['submission']}. Never push, open a pull request or merge.\n")

package/native/codex/.agents/plugins/marketplace.json

@@ -1,5 +1,5 @@
 {
-  "name": "devlyn-harness-v4-3-23",
+  "name": "devlyn-harness-v4-3-25",
   "plugins": [
     {
       "name": "devlyn",

package/native/codex/plugins/devlyn/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.23",
+  "version": "4.3.25",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/codex/plugins/devlyn/skills/_shared/runtime-principles.md

@@ -1,4 +1,4 @@
-The following Devlyn instructions are defaults for this session. Applicable explicit user instructions and native owner/project instructions take precedence over these defaults. This delegation applies only to the Devlyn defaults below; it does not change other engine instructions or permissions.
+The following Devlyn instructions are defaults for this session. Explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace. They change no other engine instructions or permissions.
 
 # Project Instructions
 

package/native/codex/plugins/devlyn/skills/devlyn-ideate/SKILL.md

@@ -116,7 +116,7 @@ Follow [loop.md](references/loop.md). The executor is the configured route, the
 Another engine needs an argv that starts one fresh non-interactive session able, without prompts, to edit, run commands and commit in its task worktree and to write the packet's submission file. `<prompt>` carries the absolute binding values, while `{packet}` stays literal for the drain to fill:
 
 ```text
-Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
+Execute the devlyn loop task packet {packet}: read its workerPrompt when present; read methodology.defaults.path when named and apply those verified defaults, with explicit user and native owner/project instructions taking precedence, except a Devlyn managed block (devlyn:instructions markers), which those defaults replace; work only in its owned worktree under the installed instructions; meet its obligations, then write its submission and any review records as "Executor exchange" and "Review records" in <DEVLYN_SKILL_DIR>/references/loop.md specify. Use the literal DEVLYN_SKILL_DIR and DEVLYN_SHARED_DIR bindings in workerPrompt when present; otherwise set DEVLYN_SKILL_DIR=<DEVLYN_SKILL_DIR> and DEVLYN_SHARED_DIR=<DEVLYN_SHARED_DIR> from these literal values. Never use inherited environment values. Never push, open a pull request or merge: the drain delivers.
 ```
 
 ```sh

package/native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md

@@ -59,7 +59,7 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 `queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation; use the same bound queue entry point for authorized add/drain operations.
 
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
 
 ## Executor exchange
 
@@ -75,7 +75,7 @@ The packet (`<receipt dir>/packet.json`) carries everything a fresh executor nee
 | `shared_constraints` | The meta-prompt's `Constraints and exclusions`. |
 | `dependencies` | `{task, receipt, source_sha}` of each accepted prerequisite. |
 | `schema_version`, `harness` | New packets use version 2 and the bound release reference, or null for legacy unbound queues. Existing v1 packets execute unchanged. |
-| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence. No native engine applicability is inferred from filenames. |
+| `methodology` | `projectInstructions`: `{path, sha256}` of instruction bytes at the inputs commit. `defaults`: `{source: "release", path, sha256}` from the verified binding; for an unbound queue `{source: "skill", path, sha256}` of the installation's own `_shared/runtime-principles.md`. A task whose executor would get no principles at all (no defaults and no committed CLAUDE.md/AGENTS.md) waits with that reason instead of running. Read the named defaults; explicit user and native owner/project instructions take precedence, except a Devlyn managed block (devlyn:instructions markers), which the defaults replace. No native engine applicability is inferred from filenames. |
 | `workerPrompt` | `{path, sha256}` of the task’s worker instructions, or null for legacy unbound queues. Read it before working. |
 | `delivery` | `local-only`, `auto` or `pr`. |
 | `evidence_dir`, `runner` | Where loop evidence lives (`<worktree>/.devlyn/loop`, ignored by Git) and the runner argv. |

package/native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/queue.py

@@ -1215,7 +1215,7 @@ def ensure_packet(v, row, path, receipt):
         packet["runner"][1] = str(bound_skills / "devlyn-ideate/scripts/acceptance.py")
         prompt = path.parent / "worker-prompt.md"
         body = (f"Execute task packet {packet_path}. Work only in {worktree} on its owned branch.\n"
-                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win.\n"
+                f"Read {binding['defaults']['path']} and apply it as defaults; explicit user and native owner/project instructions win, except a Devlyn managed block (devlyn:instructions markers), which these defaults replace.\n"
                 f"Set DEVLYN_SKILL_DIR={bound_skills / 'devlyn-ideate'} and DEVLYN_SHARED_DIR={bound_skills / '_shared'}.\n"
                 f"Follow Executor exchange and Review records in {bound_skills / 'devlyn-ideate/references/loop.md'}.\n"
                 f"Meet the packet obligations, run its runner and write {packet['submission']}. Never push, open a pull request or merge.\n")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.3.23",
+  "version": "4.3.25",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for CLAUDE.md/AGENTS.md and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {

package/release.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "devlyn-cli",
-  "version": "4.3.23",
+  "version": "4.3.25",
   "principles": {
     "defaults": "config/skills/_shared/runtime-principles.md",
     "memory": {
@@ -134,12 +134,12 @@
     },
     {
       "path": "bin/engines.js",
-      "sha256": "4761b73b9117dc2935180c0ad46f4a39649ba22156903d683ce6984ed086af4d",
+      "sha256": "f36fe59473e050a6d53fde7642058c67b4f3353816d62042f0fe6c1004715bfa",
       "executable": false
     },
     {
       "path": "bin/harness-activation.js",
-      "sha256": "fecb47b04e7f6e72735a9ea50b6aa524eca611d42c6db1b03c1260ddf2259bbc",
+      "sha256": "b864c9e325e3e7bd6f800e51d456cb00d40925d6f0713a0c692cff207a9c6183",
       "executable": false
     },
     {
@@ -154,7 +154,7 @@
     },
     {
       "path": "bin/instructions.js",
-      "sha256": "b04f60f4d925b9361f2d0221a12f125dd51f6e95075cf302803c69f6252aa27e",
+      "sha256": "b47b8748f7138788f9f39d62feaf71ea0db7d91d67ee6fc911d5abeb99939b5b",
       "executable": false
     },
     {
@@ -164,7 +164,7 @@
     },
     {
       "path": "bin/skill-history.json",
-      "sha256": "3e5e0838642b335fc2b5f83b612aba576adad8ff5cac3b0bd045f25621f074db",
+      "sha256": "c137de72e6ca67b53800f1a5f777f44b00dcbdfa1e036ccf38174177f5fed69e",
       "executable": false
     },
     {
@@ -244,7 +244,7 @@
     },
     {
       "path": "config/skills/_shared/runtime-principles.md",
-      "sha256": "475e02133dce22b4d71fde86f4493453e10dea48c791f6f2cca124ebb205687c",
+      "sha256": "ca6e84c50e8fbe22acdd447f012ff894e0ebe72ba381de33d9a94c18dfa9cc19",
       "executable": false
     },
     {
@@ -284,7 +284,7 @@
     },
     {
       "path": "config/skills/devlyn-ideate/SKILL.md",
-      "sha256": "cf0d1f11475809471876cd4e909930d6032316c25b46859a26d6ab6e851631b3",
+      "sha256": "2901fa7cb69d41fd3321d3846b742b3bc1a77c760eb49bd874c4c745b550553d",
       "executable": false
     },
     {
@@ -294,7 +294,7 @@
     },
     {
       "path": "config/skills/devlyn-ideate/references/loop.md",
-      "sha256": "5217e576537bf9a24d5069da8a07f2793840e4d896bc970a34f4413d749c1c91",
+      "sha256": "8dd5ac20d9513e9c0b309a02170deec8642ae5945f1fb082ccc8b04fbc2422bc",
       "executable": false
     },
     {
@@ -314,7 +314,7 @@
     },
     {
       "path": "config/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "b7482e53fa309aa5c4e242dab3f1ae7cd73db0964d1c53029edd09a055e051d5",
+      "sha256": "afd2f9fc8e5be73641cfa46a9de40c38b573dff6b22714d1457babe04f5c1b2f",
       "executable": false
     },
     {
@@ -334,7 +334,7 @@
     },
     {
       "path": "native/claude/.claude-plugin/plugin.json",
-      "sha256": "eae924c1ac79ca2f8e755b070cf26d95cef1679efca9a5d33985a4a855df30fb",
+      "sha256": "f2d0eb5a6bccfe88a6e5b8a5117f309f41f724d00acdeff4eac8a1b310ca907b",
       "executable": false
     },
     {
@@ -409,7 +409,7 @@
     },
     {
       "path": "native/claude/skills/_shared/runtime-principles.md",
-      "sha256": "475e02133dce22b4d71fde86f4493453e10dea48c791f6f2cca124ebb205687c",
+      "sha256": "ca6e84c50e8fbe22acdd447f012ff894e0ebe72ba381de33d9a94c18dfa9cc19",
       "executable": false
     },
     {
@@ -449,7 +449,7 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/SKILL.md",
-      "sha256": "cf0d1f11475809471876cd4e909930d6032316c25b46859a26d6ab6e851631b3",
+      "sha256": "2901fa7cb69d41fd3321d3846b742b3bc1a77c760eb49bd874c4c745b550553d",
       "executable": false
     },
     {
@@ -459,7 +459,7 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/references/loop.md",
-      "sha256": "5217e576537bf9a24d5069da8a07f2793840e4d896bc970a34f4413d749c1c91",
+      "sha256": "8dd5ac20d9513e9c0b309a02170deec8642ae5945f1fb082ccc8b04fbc2422bc",
       "executable": false
     },
     {
@@ -479,17 +479,17 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "b7482e53fa309aa5c4e242dab3f1ae7cd73db0964d1c53029edd09a055e051d5",
+      "sha256": "afd2f9fc8e5be73641cfa46a9de40c38b573dff6b22714d1457babe04f5c1b2f",
       "executable": false
     },
     {
       "path": "native/codex/.agents/plugins/marketplace.json",
-      "sha256": "4552486a2a3c2af4d75c2b1bd4cbd1d3d29429dd08aa983c7558f55dd2208661",
+      "sha256": "3fcaa2f62b36f4aab8475d2ab10910ba0d6a55045a152399d358e2abbf2f5934",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/.codex-plugin/plugin.json",
-      "sha256": "eae924c1ac79ca2f8e755b070cf26d95cef1679efca9a5d33985a4a855df30fb",
+      "sha256": "f2d0eb5a6bccfe88a6e5b8a5117f309f41f724d00acdeff4eac8a1b310ca907b",
       "executable": false
     },
     {
@@ -564,7 +564,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/runtime-principles.md",
-      "sha256": "475e02133dce22b4d71fde86f4493453e10dea48c791f6f2cca124ebb205687c",
+      "sha256": "ca6e84c50e8fbe22acdd447f012ff894e0ebe72ba381de33d9a94c18dfa9cc19",
       "executable": false
     },
     {
@@ -604,7 +604,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/SKILL.md",
-      "sha256": "cf0d1f11475809471876cd4e909930d6032316c25b46859a26d6ab6e851631b3",
+      "sha256": "2901fa7cb69d41fd3321d3846b742b3bc1a77c760eb49bd874c4c745b550553d",
       "executable": false
     },
     {
@@ -614,7 +614,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md",
-      "sha256": "5217e576537bf9a24d5069da8a07f2793840e4d896bc970a34f4413d749c1c91",
+      "sha256": "8dd5ac20d9513e9c0b309a02170deec8642ae5945f1fb082ccc8b04fbc2422bc",
       "executable": false
     },
     {
@@ -634,7 +634,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "b7482e53fa309aa5c4e242dab3f1ae7cd73db0964d1c53029edd09a055e051d5",
+      "sha256": "afd2f9fc8e5be73641cfa46a9de40c38b573dff6b22714d1457babe04f5c1b2f",
       "executable": false
     },
     {
@@ -1779,12 +1779,12 @@
     },
     {
       "path": "package.json",
-      "sha256": "13b3d6b03f048bdbc3daa6269e76da455c99b50fab0dee664d757dc782888bd2",
+      "sha256": "2448478a5c2d95bc1cddde475d3d091942f4685c982ca5e52a7d1a267636fd4c",
       "executable": false
     }
   ],
   "digest": {
     "algorithm": "sha256",
-    "value": "5293f7baeca5d357b186fd05ac546e8679e045cfe2b420c56bf52cd9bac298e6"
+    "value": "2a0d645e703b3aa32324d5890cbb83d6bf9174074e12dbf3f16e00c2f1ba7cb1"
   }
 }