devlyn-cli 4.3.29 → 4.3.30

package/AGENTS.md

@@ -27,7 +27,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/CLAUDE.md

@@ -27,7 +27,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/bin/engines.js

@@ -1,10 +1,7 @@
 // Engine IDs in the order of devlyn-os-v1/packages/contracts/src/engines.ts. An ID joins only once its
-// channels are confirmed on the real CLI, with that examined version as its floor below; the planner
+// channels are confirmed on the real CLI, with that examined version as its floor; the planner
 // refuses every other ID. CLI binary names (for example agy) are not engine IDs.
-const ENGINE_IDS = Object.freeze([
-  'claude', 'codex', 'grok', 'omp', 'antigravity', 'cursor', 'opencode', 'kimi', 'copilot', 'qwen', 'pi',
-]);
-
+//
 // The versions each channel was examined on. Any newer release, a new major included, is taken as
 // compatible: a version number is not evidence that a channel broke (omp 18 kept both flags devlyn
 // uses), and refusing unexamined majors turned working engines off. Only a version below the examined
@@ -23,18 +20,19 @@ const ENGINE_CAPABILITIES = Object.freeze({
   qwen: { minimum: '0.26.0', executor: false },
   pi: { minimum: '1.4.0', executor: false },
 });
+const ENGINE_IDS = Object.freeze(Object.keys(ENGINE_CAPABILITIES));
 
 function readableVersion(engine, version) {
   return typeof version === 'string'
     && (engine === 'cursor' ? /^\d{4}\.\d{2}\.\d{2}-[0-9a-f]+$/ : /^\d+\.\d+\.\d+$/).test(version);
 }
 
-function supportedVersion(engine, version) {
+// Whether `version` is at least `minimum`, the engine's floor unless a channel names a later examined one.
+function supportedVersion(engine, version, minimum = ENGINE_CAPABILITIES[engine].minimum) {
   if (!readableVersion(engine, version)) return false;
-  const capability = ENGINE_CAPABILITIES[engine];
-  if (engine === 'cursor') return version.slice(0, 10).replace(/\./g, '') >= capability.minimum.slice(0, 10).replace(/\./g, '');
+  if (engine === 'cursor') return version.slice(0, 10).replace(/\./g, '') >= minimum.slice(0, 10).replace(/\./g, '');
   const actual = version.split('.').map(Number);
-  const floor = capability.minimum.split('.').map(Number);
+  const floor = minimum.split('.').map(Number);
   for (let i = 0; i < 3; i++) {
     if (actual[i] !== floor[i]) return actual[i] > floor[i];
   }

package/bin/harness-activation.js

@@ -8,6 +8,10 @@ const history = require('./skill-history.json');
 const { MARKER, marketplaceName, projectionPath, inspectProjection } = require('./codex-projection');
 
 const SKILLS = ['devlyn-ideate', 'devlyn-engines'];
+// The version an engine's run-folder channel was examined on; bin/engines.js keeps the engine's floor. An
+// older version, and Windows (channelGate), keep the plan they had before the channel: only a first task
+// carries the principles.
+const CHANNEL_MINIMUM = { antigravity: '1.5.4', cursor: '2026.11.05-86047df' };
 const object = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
 const textValue = (value) => typeof value === 'string' && !value.includes('\0');
 const strings = (value) => Array.isArray(value) && value.every(textValue);
@@ -139,6 +143,10 @@ function discoveryRoots(context, env, config) {
   const roots = [...(context.skillRoots || [])];
   const add = (base, ...parts) => { if (base) roots.push(path.resolve(base, ...parts)); };
   const engine = context.engine;
+  // Antigravity and Cursor search the folders their examined version reads only where they get their run-folder
+  // channel; elsewhere they keep the folders searched before it.
+  const channelled = ['antigravity', 'cursor'].includes(engine) && !channelGate(context);
+  const antigravity = channelled && engine === 'antigravity';
   const native = {
     claude: [env.CLAUDE_CONFIG_DIR || path.join(home, '.claude'), '.claude'],
     codex: [context.accountHome || env.CODEX_HOME || path.join(home, '.codex'), '.agents'],
@@ -153,7 +161,9 @@ function discoveryRoots(context, env, config) {
   }[engine];
   if (engine !== 'codex') add(native[0], 'skills');
   const copilotDefaultHome = !env.COPILOT_HOME || path.resolve(env.COPILOT_HOME) === path.join(home, '.copilot');
-  if (!['claude', 'cursor'].includes(engine) && (engine !== 'copilot' || copilotDefaultHome)) add(engine === 'pi' ? pi.agentsHome : home, '.agents/skills');
+  if (!['claude', 'cursor'].includes(engine) && !antigravity && (engine !== 'copilot' || copilotDefaultHome)) add(engine === 'pi' ? pi.agentsHome : home, '.agents/skills');
+  // The examined Antigravity reads ~/.gemini/skills and its personal folder ~/.gemini/config instead.
+  if (antigravity) { add(home, '.gemini/skills'); add(home, '.gemini/config/skills'); }
   if (['omp', 'opencode', 'grok'].includes(engine)) add(home, '.claude/skills');
   if (engine === 'omp') {
     add(home, '.codex/skills'); add(home, '.agent/skills');
@@ -166,12 +176,24 @@ function discoveryRoots(context, env, config) {
   }
   if (engine === 'copilot') for (const dir of (config?.skillsDirs ?? env.COPILOT_SKILLS_DIRS ?? '').split(',').filter(Boolean)) add(context.cwd, dir);
   if (engine === 'pi') add(context.cwd, '.pi/skills');
+  const walk = [];
   for (let dir = path.resolve(context.cwd); ; dir = path.dirname(dir)) {
+    walk.push(dir);
+    if (fs.existsSync(path.join(dir, '.git'))) break;
+    // Outside any repository the examined Antigravity reads the working directory alone.
+    if (dir === path.dirname(dir)) { if (antigravity) walk.splice(1); break; }
+  }
+  // The examined Cursor also searches nested folders below the working directory, which the planner does not.
+  const cursorFolders = channelled && engine === 'cursor' ? ['.cursor', '.agents', '.claude', '.codex', '.grok'] : [];
+  for (const folder of cursorFolders) add(home, folder, 'skills');
+  if (cursorFolders.length) add(home, '.cursor/skills-cursor');
+  for (const dir of walk) {
+    for (const folder of cursorFolders) add(dir, folder, 'skills');
     if (native[1]) add(dir, native[1], 'skills');
     if (!['claude', 'cursor'].includes(engine)) add(dir, '.agents/skills');
     if (['grok', 'omp', 'opencode', 'copilot'].includes(engine)) add(dir, '.claude/skills');
     if (['omp', 'antigravity'].includes(engine)) add(dir, '.agent/skills');
-    if (fs.existsSync(path.join(dir, '.git')) || dir === path.dirname(dir)) break;
+    if (antigravity) { add(dir, '_agents/skills'); add(dir, '_agent/skills'); }
   }
   return [...new Set(roots)];
 }
@@ -377,10 +399,73 @@ function skillCatalog(release, paths = path) {
   return ['Devlyn session skill catalog (read the absolute file to invoke):',
     ...SKILLS.map((name) => `${name}: ${paths.join(root, name, 'SKILL.md')}`),
     `This session's _shared folder is ${paths.join(root, '_shared')}.`,
-    'Use that absolute folder wherever the Devlyn defaults name _shared/, including the Quick Start references to .claude/skills/ or .agents/skills/.',
+    'Use that absolute folder wherever the Devlyn defaults name _shared/.',
   ].join('\n');
 }
 
+// A skill entry of Antigravity's run folder: the release skill's own name and description lines as
+// written, then the release SKILL.md to follow. A copy cannot be planned (plan files are text and the
+// skills carry scripts), and since 1.5.2 Antigravity skips a link or a manifest entry that leads outside
+// the added folder. Each line must be one complete top-level entry, or the plan fails.
+function antigravitySkill(release, name) {
+  const dir = path.join(release.root, 'config/skills', name);
+  const file = path.join(dir, 'SKILL.md');
+  const text = fs.readFileSync(file, 'utf8').replace(/\r\n/g, '\n');
+  const end = text.startsWith('---\n') ? text.indexOf('\n---\n', 3) : -1;
+  const lines = end < 0 ? [] : text.slice(4, end).split('\n');
+  const header = ['name', 'description'].map((field) => {
+    const at = lines.flatMap((line, index) => (line.startsWith(`${field}:`) ? [index] : []));
+    if (at.length !== 1 || !lines[at[0]].slice(field.length + 1).trim() || /^\s/.test(lines[at[0] + 1] ?? '')) {
+      fail('config-unreadable', { path: file, field }, 1);
+    }
+    return lines[at[0]];
+  });
+  return `---\n${header.join('\n')}\n---\nRead ${file} and follow it as this skill. `
+    + `Its folder, ${dir}, is the skill's folder (DEVLYN_SKILL_DIR), not the folder of this file.\n`;
+}
+
+// The path with the links of its existing part resolved; parts that do not exist yet are kept as given.
+function physicalPath(target) {
+  let parent = path.resolve(target);
+  const missing = [];
+  while (!fs.existsSync(parent)) { missing.unshift(path.basename(parent)); parent = path.dirname(parent); }
+  return path.join(fs.realpathSync(parent), ...missing);
+}
+
+// The reasons for the principles and the skills when neither reaches the session.
+const withheld = (params) => [reason('principles-unavailable', params), reason('skills-unavailable', params)];
+
+// Why an engine keeps the plan it had before its run-folder channel, as the reasons for the principles and the
+// skills when no first task carries them, or null when it gets the channel. The channels were examined on macOS
+// and are not planned on Windows, whatever the version: it cannot show who owns a folder, and an argument that
+// misbehaves there would break a pane. Below the version a channel was examined on, updating the engine gets it.
+function channelGate(context) {
+  if (process.platform === 'win32') return withheld({ detail: 'platform-unexamined' });
+  const minimum = CHANNEL_MINIMUM[context.engine];
+  if (supportedVersion(context.engine, context.version, minimum)) return null;
+  const outdated = reason('engine-version-unsupported', { minimum });
+  return [outdated, outdated];
+}
+
+// The first directory that makes a run-folder channel's `folder`, inside a resolved run directory (physicalPath),
+// unsafe to hand an engine that loads what it finds there, or null. Every existing level from the folder up, the
+// folder included, must be a real directory (a link is not one) of this user or root that no one else can write:
+// another user could put a .git or a folder of their own there later. With `git`, no directory from the folder up
+// may hold a .git entry of any kind: Antigravity 1.5.4 loads the agents and hooks of a Git root above an added
+// folder with no trust check. A level that does not exist yet is skipped; a level lstat cannot read cannot be
+// shown safe. Access-control lists are not read.
+function unsafeRunDir(folder, git) {
+  const entry = (file) => {
+    try { return fs.lstatSync(file, { throwIfNoEntry: false }) ?? null; } catch { return false; }
+  };
+  for (let dir = folder; ; dir = path.dirname(dir)) {
+    const stats = entry(dir);
+    if (stats === false || (stats && (!stats.isDirectory() || ![process.getuid(), 0].includes(stats.uid) || stats.mode & 0o022))) return dir;
+    if (git && entry(path.join(dir, '.git')) !== null) return dir;
+    if (dir === path.dirname(dir)) return null;
+  }
+}
+
 function codexRegistrations(config, accountHome) {
   const owned = [], errors = [];
   for (const [key, plugin] of Object.entries(config.plugins || {})) {
@@ -478,11 +563,7 @@ function planActivation(releaseRoot, input, env = process.env) {
   const catalog = skillCatalog(release);
   const instructions = joinText(defaults, catalog);
   const file = (relativePath, utf8) => {
-    let parent = path.resolve(context.runDir);
-    const missing = [];
-    while (!fs.existsSync(parent)) { missing.unshift(path.basename(parent)); parent = path.dirname(parent); }
-    const physical = path.join(fs.realpathSync(parent), ...missing);
-    const relative = path.relative(release.root, physical);
+    const relative = path.relative(release.root, physicalPath(context.runDir));
     if (!relative || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative))) {
       fail('invalid-arguments', { argument: 'runDir must be outside the release' }, 2);
     }
@@ -497,6 +578,19 @@ function planActivation(releaseRoot, input, env = process.env) {
     status.invocation = { kind: 'read-file', text: `Read ${path.join(release.root, 'config/skills/devlyn-ideate/SKILL.md')}` };
   };
   const native = (mechanism, kind, text) => { status.skills = channel('configured', mechanism); status.invocation = { kind, text }; };
+  // Where no run-folder channel is planned, only a first task carries the principles and the catalog, ahead
+  // of its text; without one nothing reaches the session and each channel gives its reason.
+  const firstTask = ([principlesReason, skillsReason]) => {
+    if (context.initialPrompt) {
+      status.principles = channel('partial', 'initial-task', [reason('principles-task-only')]);
+      plan.prompt = { ...context.initialPrompt, text: joinText(instructions, context.initialPrompt.text) };
+      fallback();
+    } else {
+      status.principles = channel('unavailable', null, [principlesReason]);
+      status.skills = channel('unavailable', null, [skillsReason]);
+    }
+  };
+  // A skill folder that cannot be inspected is also found, so every inspection error comes with a collision.
   const collisions = found.map((entry) => reason('name-collision', { name: entry.name, path: entry.path }));
   switch (context.engine) {
     case 'claude': {
@@ -645,18 +739,73 @@ function planActivation(releaseRoot, input, env = process.env) {
         } else fallback([...collisions, ...errors, ...kimi.errors]);
       }
       break;
-    case 'antigravity':
-    case 'cursor':
-      // Only a first task carries the principles and the catalog: without one nothing reaches the session.
-      if (context.initialPrompt) {
-        status.principles = channel('partial', 'initial-task', [reason('principles-task-only')]);
-        plan.prompt = { ...context.initialPrompt, text: joinText(instructions, context.initialPrompt.text) };
-        fallback();
+    case 'antigravity': {
+      // Antigravity reads AGENTS.md (always on) and .agents/skills in every workspace folder, and a folder given
+      // by --add-dir is one. A conversation keeps its added folders and reads them from disk again on every
+      // launch, so the plan is the same in every launch mode and a caller hands a resumed conversation the same
+      // runDir: with another, both folders apply while the old one exists. A folder removed later only stops
+      // applying. It truncates a rule file over 24,000 bytes.
+      const gate = channelGate(context);
+      if (gate) {
+        firstTask(gate);
+        break;
+      }
+      // The engine is given the resolved folder, the one the checks ran on.
+      const folder = path.join(physicalPath(context.runDir), 'antigravity');
+      const unsafe = unsafeRunDir(folder, true);
+      if (unsafe) {
+        firstTask(withheld({ detail: 'run-dir-unsafe', path: unsafe }));
+        break;
+      }
+      const bytes = Buffer.byteLength(instructions), maximum = 24000;
+      if (bytes > maximum) {
+        status.principles = channel('unavailable', null, [reason('principles-unavailable', { detail: 'too-large', bytes, maximum })]);
       } else {
-        status.principles = channel('unavailable', null, [reason('principles-unavailable', { detail: 'no-initial-task' })]);
-        status.skills = channel('unavailable', null, [reason('skills-unavailable', { detail: 'no-initial-task' })]);
+        file('antigravity/AGENTS.md', instructions);
+        principles('add-dir');
       }
+      if (collisions.length) fallback([...collisions, ...errors], bytes <= maximum);
+      else {
+        for (const name of SKILLS) file(`antigravity/.agents/skills/${name}/SKILL.md`, antigravitySkill(release, name));
+        native('add-dir', 'slash', '/devlyn-ideate');
+      }
+      if (plan.files.length) plan.engineArgs.push('--add-dir', folder);
       break;
+    }
+    case 'cursor': {
+      const gate = channelGate(context);
+      if (gate) {
+        firstTask(gate);
+        break;
+      }
+      // A --plugin-dir folder's sessionStart command hook runs when a session is created, and Cursor puts the
+      // additional_context it prints before the model as instructions, kept with the conversation (10,200
+      // characters were delivered whole). A resumed chat runs no hook and keeps what its first launch had
+      // (measured); a fork is treated the same way, because what it gets is not established. The hook is a
+      // command Cursor runs, so it is planned only in a safe run directory, by its resolved absolute path, quoted
+      // for the shell: no lookup through PATH or the working folder. The skills come from the release, whatever
+      // the run directory.
+      const hook = path.join(physicalPath(context.runDir), 'cursor');
+      const unsafe = unsafeRunDir(hook);
+      if (unsafe || !isFile('/bin/cat')) {
+        firstTask(withheld(unsafe ? { detail: 'run-dir-unsafe', path: unsafe } : { detail: 'platform-unexamined' }));
+      } else {
+        const command = `/bin/cat '${path.join(hook, 'context.json').replace(/'/g, "'\\''")}'`;
+        file('cursor/hooks/hooks.json', JSON.stringify({ version: 1, hooks: { sessionStart: [{ command }] } }) + '\n');
+        // Every non-ASCII character escaped, so no shell or code page can change the text.
+        file('cursor/context.json', JSON.stringify({ additional_context: instructions })
+          .replace(/[\u0080-\uffff]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, '0')}`) + '\n');
+        plan.engineArgs.push('--plugin-dir', hook);
+        status.principles = continuation ? channel('partial', 'session-start-hook', [reason('principles-session-start-only')])
+          : channel('configured', 'session-start-hook');
+      }
+      if (collisions.length) fallback([...collisions, ...errors], plan.files.length > 0 || plan.prompt !== null);
+      else {
+        plan.engineArgs.push('--plugin-dir', path.join(release.root, 'config'));
+        native('plugin-dir', 'slash', '/devlyn-ideate');
+      }
+      break;
+    }
   }
   if (plan.engineArgs.length || Object.keys(plan.envPatch).length || plan.prompt) plan.envPatch.DEVLYN_HARNESS_ROOT = release.root;
   return finish(plan);

package/bin/harness-context.js

@@ -8,7 +8,7 @@ const path = require('path');
 const crypto = require('crypto');
 const readline = require('readline');
 const { spawn, spawnSync } = require('child_process');
-const { verifyRelease, materializeRelease, fail } = require('./release');
+const { physicalRoot, materializeRelease, fail } = require('./release');
 
 const ENGINES = Object.freeze(['claude', 'codex', 'omp']);
 const READ_MS = 6000;
@@ -209,13 +209,13 @@ function appState(home, common) {
   return { defaultRelease: state.defaultRelease || null, choice };
 }
 
-// A release chosen by a record must verify as recorded; it never yields to another release.
+// A release chosen by a record must be the one recorded; its own planner verifies its files.
 function recorded(root, version, digest, source) {
-  let release;
-  try { release = verifyRelease(root).release; }
-  catch (error) { fail('release-unavailable', { source, version, detail: error.reason?.code || error.message }, 3); }
-  if (release.version !== version || release.digest !== digest) fail('release-version-conflict', { source, version }, 3);
-  return { release, source };
+  let manifest;
+  try { root = physicalRoot(root); manifest = JSON.parse(fs.readFileSync(path.join(root, 'release.json'), 'utf8')); }
+  catch (error) { fail('release-unavailable', { source, version, detail: error.reason?.code || error.code || 'unreadable' }, 3); }
+  if (manifest?.version !== version || manifest?.digest?.value !== digest) fail('release-version-conflict', { source, version }, 3);
+  return { release: { package: 'devlyn-cli', version, digest, root }, source };
 }
 
 // The release a terminal launch plans with: an unfinished queue's bound release in this repository,

package/bin/instruction-templates.json

@@ -494,6 +494,7 @@
       "cc8bf51efb9ef8e5fa4134743f2d25434f4fd51595128edcfd2331dbf29d7dd5",
       "ccacf091bab4102d7156631c6227120a661bb4ec0df514e14a59db44b7bd5dfd",
       "ce1b0d9d0621fd057e684dc18b43156d30f589c72ed20189ea1232ea4f7ce6c6",
+      "ce8c1ea5c851fed75b898759fcf8359bd95ec04b30e547ed06bdf4101a2dddd8",
       "cebacda3b11db7aa161d96b12edd6f3f790ee2850404cd42ecdf2912ed53de08",
       "cefad7acb7dcd92777f888081aa6585b1418aa581366736fd44db68b1bd66dd0",
       "cf43eb0460beebdfe1efbfb1a35a39e5fe450137252ea2c83e51d978faa1f17e",
@@ -1024,6 +1025,7 @@
       "ce351bfa301b000f0786cac24959108a3db6cdf1cad3733cb07b394c62d35227",
       "ce3cceeb74119953afde95da84dbe1bd6e3da3dbde5f85dd123a0fe8afec5d36",
       "ce4b307083addc337a833547cb6998cb34a38d82e572587e9a57dc2cf46d275a",
+      "ce8c1ea5c851fed75b898759fcf8359bd95ec04b30e547ed06bdf4101a2dddd8",
       "ce9c73a3305e4ec9cd559cec6fdd10b8f4a9f3124b42ea4598340dc16a575505",
       "ceddbf09792093c7417e72c7e2cf08e4780e9798dcd107292cdd095b023c2a8c",
       "cf04e7c73e16d8e0e561e89d4a6519a1c47b9ffa08f88d1e5bda75ad2983f4df",

package/bin/skill-history.json

@@ -124,6 +124,7 @@
       "97e7ad89c74c609b15dfbf6f9f7ac61df8b50e97e4bc318f72922e058ecffba4",
       "9815b6e6963e068872a6dbeae24068143bf92042bb035f67bafd1a224d65bcb0",
       "998343c148618b937556b58b83749c05d5aa3283280d751c118da6a542fb87f2",
+      "9ca5956a73070555a93f19ecb1f92a8f57cec6fd1170a2809eeacc49cc0841be",
       "9dd3ec225818efe0ad3726192db94ff129154e995617a9d3c150fc58ad0f9f2c",
       "9e4d06fd466fa896040109bac0018fcfb2f1604d55abb4180ff1f1a0b665bbc8",
       "9f14ca629e41730b1a9fb5d0ad1a39cff558fe34758d6ceccbb9de498f9f384e",
@@ -398,6 +399,7 @@
       "c8e375aab574148542f392b093cbbf3f2e8dc623826b45e35df0a1a2c3862226",
       "ce282a55328c2d071cacc377670fbebea4da4b9a7fee81b25293fb26763f17c9",
       "cf61a917a804503ef1e26fbb1cf498181e843a0758ec001f84edb7bcac837448",
+      "d622e92c7bf32d315a5aabe2554efbc9f62790ace19a088ead9a7cef195fc715",
       "d6433bf0f96dd9dd485c3623885255738654674b3e23cfcc1a2cfd24f3cda96e",
       "db8d921aabf0d04811b55465a3757c62c4b39631aebaf6eecc994ca241cfbe56",
       "e25da746dc37b2e82c658a28d9481fd69741151045683eee2119582ddaf731cd",
@@ -822,6 +824,7 @@
     "4.3.28",
     "4.3.29",
     "4.3.3",
+    "4.3.30",
     "4.3.4",
     "4.3.5",
     "4.3.6",

package/config/skills/_shared/engine-preflight.md

@@ -1,7 +1,5 @@
 # Shared — Executor Pre-flight
 
-Used by `/devlyn-ideate` and `/devlyn-engines`: one rule for which engine executes implementation work and what happens when it is missing.
-
 ## Selection
 
 The executor is the `executor` pin in `.devlyn/engines.json` at the checkout root (set with `/devlyn-engines executor <name>`), else the CLI the user opened. A linked worktree or subdirectory has no pin unless one is set there. Only Claude and Codex can execute, so a drain from any other CLI needs a claude or codex pin. Keys earlier releases wrote for retired pipeline roles (`pair_judge_priority`, `roles`) stay as written and select nothing: a worker profile never becomes the executor.

package/config/skills/_shared/runtime-principles.md

@@ -29,7 +29,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/config/skills/_shared/task-completion.md

@@ -62,9 +62,6 @@ The repository comes from the remote's GitHub URL and the base from the reposito
 A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
-Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.
-On Windows, allocation marks only a newly created shared container hidden and creates the worktree not content-indexed (content only; names stay indexed); files copied in keep their own attributes.
-A marking failure continues allocation and is reported in `warnings`.
 Remote allocation first cleans earlier merged deliveries, then allocation refuses with `BLOCKED:disk`
 without creating a receipt, branch or worktree when that filesystem has less than max(10 GiB, 2%) free; free space and allocate again.
 A publication allocation normally starts at the exact fetched remote base,
@@ -122,9 +119,7 @@ Git config `devlyn.warmBuildDirs` is true, or it is unset and the Cargo workspac
 Cargo.toml sets `[workspace.metadata.devlyn] warm-build-dirs = true`,
 allocation seeds that directory from a built checkout of the repository, so
 the first build does not rebuild every dependency; `build_dirs` in its result
-and receipt says what it did, and a skip means an ordinary cold build. The
-Git setting takes precedence on this machine: false disables and invalid values
-skip; global, system, include and per-worktree values are not consulted. Seeding
+and receipt says what it did, and a skip means an ordinary cold build. Seeding
 keeps dependency outputs that may hold the other checkout's paths, and those
 follow that checkout's later rebuilds. `warm-build-dirs.py <worktree>` does the same for a
 worktree made without allocation. A warmed directory leaves with the worktree
@@ -146,11 +141,7 @@ python3 "$DEVLYN_SHARED_DIR/task-complete.py" clean-scratch \
   --receipt '<returned receipt.json>' --writers-stopped
 ```
 
-This empties only the prospectively owned scratch, preserves its directory
-identity for interrupted cleanup and later builds, checks live users and reports
-the logical byte count separately from actual free disk space.
-Unknown historical roots, source/recovery data, shared caches and terminal
-history are never adopted or swept. A refused cleanup does not block source
+A refused cleanup does not block source
 delivery; it stays visible in the handoff with its receipt and retry command
 (`CLEANUP_PENDING` after delivered source). No task is described as cleaned
 while owned disposable files remain. On resumption, finish any pending scratch
@@ -257,9 +248,6 @@ are preserved beside it as `records.<digest>/.devlyn`, never rewriting earlier c
 Non-regular files or symlinks there, partial/corrupt custody, an unreadable
 earlier copy or a mismatched `records.<digest>` copy retain the tree for repair.
 
-Legacy in-place receipts retire refs only once their task branch is no longer
-checked out; their checkout is never modified. Local ref deletion is guarded by
-the expected SHA; remote deletion uses an exact force-with-lease solely as
-compare-and-delete, never for product publication. A changed remote branch is
+A changed remote branch is
 retained. Retry uses the external receipt/evidence after removal. Recovery
 refs/evidence have no automatic expiry.

package/config/skills/devlyn-ideate/references/loop.md

@@ -55,11 +55,9 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 ## Release binding and read-only consumers
 
-`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. A different release refuses: use the exact recovery argv when it gives one (a JSON argv array preserving the caller’s arguments); otherwise do what it says (Drain in Devlyn, the tasks to finish first, or a repair). Never build the bound queue’s path yourself. No caller substitutes another implementation.
+`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. No caller substitutes another implementation.
 
-`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
-
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
 
 ## Executor exchange
 

package/config/skills/devlyn-ideate/references/package-format.md

@@ -107,7 +107,6 @@ Coverage proves that every obligation has evidence. Whether the checks express t
 - The only legal transition turns one pending row into `[x]` or `[F]` with every other byte unchanged, so a terminal commit changes one line of its loop's file. Terminal rows are never reinterpreted or rerun. The blank lines let transitions of adjacent rows merge, and loops never share a file.
 - Identities are unique; equal titles are fine.
 - `docs/specs/queue.md` is the legacy queue. Its raw rows are intents: readable, never executed, never written (a row there that fully matches this grammar is ignored). `add --materialize <line>` plans one pending legacy row as a loop whose `## Intent` reproduces it verbatim (whitespace may reflow); that loop's queue file starts with `<!-- replaces docs/specs/queue.md row (occurrence <n>): <row> -->`, the row's exact text and its occurrence among equal rows, line endings aside. Every checkout, a fresh clone included, then shows the loop's rows in that row's place. A claim matching no row replaces nothing; a row two loops claim (two clones each materializing it) is hidden, neither loop taking its place, so it is never planned again.
-- Status and drain read the legacy rows in file order, each replaced row as its loop's rows; then the other recorded loops in add order, from their captures; then loops without a record here, as in a fresh clone, from the checkout's tracked queue files in loop-id order.
 
 ## Commands
 

package/harness/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- devlyn:instructions:begin sha256=f2206e5ed1c96a6c5fc368836bb041e8e77328048ca617f902ed6fb72dcb742d -->
+<!-- devlyn:instructions:begin sha256=eaf6d144bcb25ac8c5e628a134dc4422f5af7641f9c34ccdb8f06d1613718c48 -->
 Project-specific instructions outside this managed block take precedence over these defaults.
 
 # Project Instructions
@@ -30,7 +30,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/harness/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- devlyn:instructions:begin sha256=f2206e5ed1c96a6c5fc368836bb041e8e77328048ca617f902ed6fb72dcb742d -->
+<!-- devlyn:instructions:begin sha256=eaf6d144bcb25ac8c5e628a134dc4422f5af7641f9c34ccdb8f06d1613718c48 -->
 Project-specific instructions outside this managed block take precedence over these defaults.
 
 # Project Instructions
@@ -30,7 +30,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/native/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.29",
+  "version": "4.3.30",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/claude/skills/_shared/engine-preflight.md

@@ -1,7 +1,5 @@
 # Shared — Executor Pre-flight
 
-Used by `/devlyn-ideate` and `/devlyn-engines`: one rule for which engine executes implementation work and what happens when it is missing.
-
 ## Selection
 
 The executor is the `executor` pin in `.devlyn/engines.json` at the checkout root (set with `/devlyn-engines executor <name>`), else the CLI the user opened. A linked worktree or subdirectory has no pin unless one is set there. Only Claude and Codex can execute, so a drain from any other CLI needs a claude or codex pin. Keys earlier releases wrote for retired pipeline roles (`pair_judge_priority`, `roles`) stay as written and select nothing: a worker profile never becomes the executor.

package/native/claude/skills/_shared/runtime-principles.md

@@ -29,7 +29,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/native/claude/skills/_shared/task-completion.md

@@ -62,9 +62,6 @@ The repository comes from the remote's GitHub URL and the base from the reposito
 A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
-Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.
-On Windows, allocation marks only a newly created shared container hidden and creates the worktree not content-indexed (content only; names stay indexed); files copied in keep their own attributes.
-A marking failure continues allocation and is reported in `warnings`.
 Remote allocation first cleans earlier merged deliveries, then allocation refuses with `BLOCKED:disk`
 without creating a receipt, branch or worktree when that filesystem has less than max(10 GiB, 2%) free; free space and allocate again.
 A publication allocation normally starts at the exact fetched remote base,
@@ -122,9 +119,7 @@ Git config `devlyn.warmBuildDirs` is true, or it is unset and the Cargo workspac
 Cargo.toml sets `[workspace.metadata.devlyn] warm-build-dirs = true`,
 allocation seeds that directory from a built checkout of the repository, so
 the first build does not rebuild every dependency; `build_dirs` in its result
-and receipt says what it did, and a skip means an ordinary cold build. The
-Git setting takes precedence on this machine: false disables and invalid values
-skip; global, system, include and per-worktree values are not consulted. Seeding
+and receipt says what it did, and a skip means an ordinary cold build. Seeding
 keeps dependency outputs that may hold the other checkout's paths, and those
 follow that checkout's later rebuilds. `warm-build-dirs.py <worktree>` does the same for a
 worktree made without allocation. A warmed directory leaves with the worktree
@@ -146,11 +141,7 @@ python3 "$DEVLYN_SHARED_DIR/task-complete.py" clean-scratch \
   --receipt '<returned receipt.json>' --writers-stopped
 ```
 
-This empties only the prospectively owned scratch, preserves its directory
-identity for interrupted cleanup and later builds, checks live users and reports
-the logical byte count separately from actual free disk space.
-Unknown historical roots, source/recovery data, shared caches and terminal
-history are never adopted or swept. A refused cleanup does not block source
+A refused cleanup does not block source
 delivery; it stays visible in the handoff with its receipt and retry command
 (`CLEANUP_PENDING` after delivered source). No task is described as cleaned
 while owned disposable files remain. On resumption, finish any pending scratch
@@ -257,9 +248,6 @@ are preserved beside it as `records.<digest>/.devlyn`, never rewriting earlier c
 Non-regular files or symlinks there, partial/corrupt custody, an unreadable
 earlier copy or a mismatched `records.<digest>` copy retain the tree for repair.
 
-Legacy in-place receipts retire refs only once their task branch is no longer
-checked out; their checkout is never modified. Local ref deletion is guarded by
-the expected SHA; remote deletion uses an exact force-with-lease solely as
-compare-and-delete, never for product publication. A changed remote branch is
+A changed remote branch is
 retained. Retry uses the external receipt/evidence after removal. Recovery
 refs/evidence have no automatic expiry.

package/native/claude/skills/devlyn-ideate/references/loop.md

@@ -55,11 +55,9 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 ## Release binding and read-only consumers
 
-`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. A different release refuses: use the exact recovery argv when it gives one (a JSON argv array preserving the caller’s arguments); otherwise do what it says (Drain in Devlyn, the tasks to finish first, or a repair). Never build the bound queue’s path yourself. No caller substitutes another implementation.
+`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. No caller substitutes another implementation.
 
-`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
-
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
 
 ## Executor exchange
 

package/native/claude/skills/devlyn-ideate/references/package-format.md

@@ -107,7 +107,6 @@ Coverage proves that every obligation has evidence. Whether the checks express t
 - The only legal transition turns one pending row into `[x]` or `[F]` with every other byte unchanged, so a terminal commit changes one line of its loop's file. Terminal rows are never reinterpreted or rerun. The blank lines let transitions of adjacent rows merge, and loops never share a file.
 - Identities are unique; equal titles are fine.
 - `docs/specs/queue.md` is the legacy queue. Its raw rows are intents: readable, never executed, never written (a row there that fully matches this grammar is ignored). `add --materialize <line>` plans one pending legacy row as a loop whose `## Intent` reproduces it verbatim (whitespace may reflow); that loop's queue file starts with `<!-- replaces docs/specs/queue.md row (occurrence <n>): <row> -->`, the row's exact text and its occurrence among equal rows, line endings aside. Every checkout, a fresh clone included, then shows the loop's rows in that row's place. A claim matching no row replaces nothing; a row two loops claim (two clones each materializing it) is hidden, neither loop taking its place, so it is never planned again.
-- Status and drain read the legacy rows in file order, each replaced row as its loop's rows; then the other recorded loops in add order, from their captures; then loops without a record here, as in a fresh clone, from the checkout's tracked queue files in loop-id order.
 
 ## Commands
 

package/native/codex/.agents/plugins/marketplace.json

@@ -1,5 +1,5 @@
 {
-  "name": "devlyn-harness-v4-3-29",
+  "name": "devlyn-harness-v4-3-30",
   "plugins": [
     {
       "name": "devlyn",

package/native/codex/plugins/devlyn/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.29",
+  "version": "4.3.30",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/codex/plugins/devlyn/skills/_shared/engine-preflight.md

@@ -1,7 +1,5 @@
 # Shared — Executor Pre-flight
 
-Used by `/devlyn-ideate` and `/devlyn-engines`: one rule for which engine executes implementation work and what happens when it is missing.
-
 ## Selection
 
 The executor is the `executor` pin in `.devlyn/engines.json` at the checkout root (set with `/devlyn-engines executor <name>`), else the CLI the user opened. A linked worktree or subdirectory has no pin unless one is set there. Only Claude and Codex can execute, so a drain from any other CLI needs a claude or codex pin. Keys earlier releases wrote for retired pipeline roles (`pair_judge_priority`, `roles`) stay as written and select nothing: a worker profile never becomes the executor.

package/native/codex/plugins/devlyn/skills/_shared/runtime-principles.md

@@ -29,7 +29,7 @@ Three discipline rules govern HOW the principles are applied:
 ## Quick Start
 
 - `devlyn-ideate` — loop designer and intent queue: `plan <intent or document>` writes a validated loop package, `add` queues its tasks, `status` (or no arguments) reports the queue, `drain` executes it serially.
-- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md` in `.claude/skills/` or `.agents/skills/` (project, else `~`). With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
+- Delivery — direct work edits the current checkout; deliver completed, verified requests with changes by project policy (default PR and merge), following `_shared/task-completion.md`. With known concurrent writers, isolate before editing; on unexplained changes, pause writes until safe or isolated. An ideate drain delivers every task. Explicit limits win; commit alone stays local.
 - Executor — `devlyn-engines` shows it and pins it in `.devlyn/engines.json`. A pinned executor does the implementation work, direct or drained: when it is not you, delegate to it, and when it is unavailable stop with `BLOCKED:<engine>-unavailable`. Without a pin, you are the executor.
 
 Each skill's `SKILL.md` is the source of truth for its flags and workflow.

package/native/codex/plugins/devlyn/skills/_shared/task-completion.md

@@ -62,9 +62,6 @@ The repository comes from the remote's GitHub URL and the base from the reposito
 A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
-Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.
-On Windows, allocation marks only a newly created shared container hidden and creates the worktree not content-indexed (content only; names stay indexed); files copied in keep their own attributes.
-A marking failure continues allocation and is reported in `warnings`.
 Remote allocation first cleans earlier merged deliveries, then allocation refuses with `BLOCKED:disk`
 without creating a receipt, branch or worktree when that filesystem has less than max(10 GiB, 2%) free; free space and allocate again.
 A publication allocation normally starts at the exact fetched remote base,
@@ -122,9 +119,7 @@ Git config `devlyn.warmBuildDirs` is true, or it is unset and the Cargo workspac
 Cargo.toml sets `[workspace.metadata.devlyn] warm-build-dirs = true`,
 allocation seeds that directory from a built checkout of the repository, so
 the first build does not rebuild every dependency; `build_dirs` in its result
-and receipt says what it did, and a skip means an ordinary cold build. The
-Git setting takes precedence on this machine: false disables and invalid values
-skip; global, system, include and per-worktree values are not consulted. Seeding
+and receipt says what it did, and a skip means an ordinary cold build. Seeding
 keeps dependency outputs that may hold the other checkout's paths, and those
 follow that checkout's later rebuilds. `warm-build-dirs.py <worktree>` does the same for a
 worktree made without allocation. A warmed directory leaves with the worktree
@@ -146,11 +141,7 @@ python3 "$DEVLYN_SHARED_DIR/task-complete.py" clean-scratch \
   --receipt '<returned receipt.json>' --writers-stopped
 ```
 
-This empties only the prospectively owned scratch, preserves its directory
-identity for interrupted cleanup and later builds, checks live users and reports
-the logical byte count separately from actual free disk space.
-Unknown historical roots, source/recovery data, shared caches and terminal
-history are never adopted or swept. A refused cleanup does not block source
+A refused cleanup does not block source
 delivery; it stays visible in the handoff with its receipt and retry command
 (`CLEANUP_PENDING` after delivered source). No task is described as cleaned
 while owned disposable files remain. On resumption, finish any pending scratch
@@ -257,9 +248,6 @@ are preserved beside it as `records.<digest>/.devlyn`, never rewriting earlier c
 Non-regular files or symlinks there, partial/corrupt custody, an unreadable
 earlier copy or a mismatched `records.<digest>` copy retain the tree for repair.
 
-Legacy in-place receipts retire refs only once their task branch is no longer
-checked out; their checkout is never modified. Local ref deletion is guarded by
-the expected SHA; remote deletion uses an exact force-with-lease solely as
-compare-and-delete, never for product publication. A changed remote branch is
+A changed remote branch is
 retained. Retry uses the external receipt/evidence after removal. Recovery
 refs/evidence have no automatic expiry.

package/native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md

@@ -55,11 +55,9 @@ Package cleanup, parent pruning and report failures appear as diagnostics under
 
 ## Release binding and read-only consumers
 
-`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. A different release refuses: use the exact recovery argv when it gives one (a JSON argv array preserving the caller’s arguments); otherwise do what it says (Drain in Devlyn, the tasks to finish first, or a repair). Never build the bound queue’s path yourself. No caller substitutes another implementation.
+`<git-common-dir>/devlyn-loops/harness.json` is authoritative across linked worktrees: `{schemaVersion: 1, release: {package, version, digest, root}, defaults: {path, sha256}}`. Paths are absolute and hashes cover exact bytes. The queue lock covers binding before the first capture. An interrupted first add, unfinished tasks, recovery conflicts and pending delivery retain it; settlement removes it. No caller substitutes another implementation.
 
-`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. Apps should use this reader instead of `status`, which still reconciles cleanup. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
-
-Codex projection writers place `.devlyn-harness-projection.json` at the copied plugin root, beside `skills` and `.codex-plugin`: `{schemaVersion: 1, release: <ReleaseRef>, source: "native/codex/plugins/devlyn"}`. The reader verifies the named release and every projected file’s bytes/mode against that subtree (excluding only the marker). Symlinked skill invocations resolve through their real path. Standalone installs and existing unfinished unbound queues retain legacy behavior; new legacy packets use v2 with a null release, and their `defaults` name the invoking installation's own `_shared/runtime-principles.md` (`source: "skill"`). No engine applicability is inferred from instruction filenames: bound queues use verified release defaults with native instructions taking precedence, except a Devlyn managed block, which the defaults replace. Worker and runner paths point to the bound release, independent of a projection cache’s lifetime.
+`queue.py inspect --repo <dir> --json` reads without cleanup, locks or writes. It returns the status summary plus `binding` (null for legacy) and `compatibility`: `compatible`, `legacy`, `reasons`, `recoveryArgv`, `taskPacket` ranges and `queueBinding` ranges. Incompatible or unreadable state is reported, never migrated. For a mismatch, `recoveryArgv` names the bound queue’s inspect invocation when handoff is allowed, and is null when the refusal names Drain in Devlyn, tasks to finish first, or a repair. Use an exact recovery argv when provided; otherwise follow the refusal.
 
 ## Executor exchange
 

package/native/codex/plugins/devlyn/skills/devlyn-ideate/references/package-format.md

@@ -107,7 +107,6 @@ Coverage proves that every obligation has evidence. Whether the checks express t
 - The only legal transition turns one pending row into `[x]` or `[F]` with every other byte unchanged, so a terminal commit changes one line of its loop's file. Terminal rows are never reinterpreted or rerun. The blank lines let transitions of adjacent rows merge, and loops never share a file.
 - Identities are unique; equal titles are fine.
 - `docs/specs/queue.md` is the legacy queue. Its raw rows are intents: readable, never executed, never written (a row there that fully matches this grammar is ignored). `add --materialize <line>` plans one pending legacy row as a loop whose `## Intent` reproduces it verbatim (whitespace may reflow); that loop's queue file starts with `<!-- replaces docs/specs/queue.md row (occurrence <n>): <row> -->`, the row's exact text and its occurrence among equal rows, line endings aside. Every checkout, a fresh clone included, then shows the loop's rows in that row's place. A claim matching no row replaces nothing; a row two loops claim (two clones each materializing it) is hidden, neither loop taking its place, so it is never planned again.
-- Status and drain read the legacy rows in file order, each replaced row as its loop's rows; then the other recorded loops in add order, from their captures; then loops without a record here, as in a fresh clone, from the checkout's tracked queue files in loop-id order.
 
 ## Commands
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.3.29",
+  "version": "4.3.30",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for every session and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {

package/release.json

@@ -1,14 +1,14 @@
 {
   "schemaVersion": 1,
   "package": "devlyn-cli",
-  "version": "4.3.29",
+  "version": "4.3.30",
   "principles": {
     "defaults": "config/skills/_shared/runtime-principles.md",
     "memory": {
       "claude": "harness/CLAUDE.md",
       "agents": "harness/AGENTS.md"
     },
-    "sourceBlockSha256": "f2206e5ed1c96a6c5fc368836bb041e8e77328048ca617f902ed6fb72dcb742d"
+    "sourceBlockSha256": "eaf6d144bcb25ac8c5e628a134dc4422f5af7641f9c34ccdb8f06d1613718c48"
   },
   "skills": {
     "root": "config/skills",
@@ -99,12 +99,12 @@
   "files": [
     {
       "path": "AGENTS.md",
-      "sha256": "7a624c175486712f08ad5ad45c7979db1c1d0db35f3bfd2c4a068585b7f23f13",
+      "sha256": "df67efd70f4760d2415c414eb96d4cc426277c20e18f17e401257f85b489eb59",
       "executable": false
     },
     {
       "path": "CLAUDE.md",
-      "sha256": "7a624c175486712f08ad5ad45c7979db1c1d0db35f3bfd2c4a068585b7f23f13",
+      "sha256": "df67efd70f4760d2415c414eb96d4cc426277c20e18f17e401257f85b489eb59",
       "executable": false
     },
     {
@@ -134,17 +134,17 @@
     },
     {
       "path": "bin/engines.js",
-      "sha256": "299b6166c37e51100171435bf09ea776281e0415c807b3d07fe42bf3576e6af8",
+      "sha256": "7c1910a2b399d61c4dd8e576244e6bfe91215581f599cb84fc763487a3bce743",
       "executable": false
     },
     {
       "path": "bin/harness-activation.js",
-      "sha256": "49e80301845d550dea4d3b651de8229abe2068e806875814165c64677a21a12f",
+      "sha256": "e5428bf6fb2dc40e0f7bebcc834b54573c0b8c648570fea8bd51774d5e865727",
       "executable": false
     },
     {
       "path": "bin/harness-context.js",
-      "sha256": "6b2e8d35592305c533bc0c3ee63a3655e1f51620a4baad977cb2f31f6b60d2c2",
+      "sha256": "2d2cd812fec2db659b7bb8b40f22fa10acde1c754c16265b81994645a9bfc29f",
       "executable": false
     },
     {
@@ -159,7 +159,7 @@
     },
     {
       "path": "bin/instruction-templates.json",
-      "sha256": "5a46284e5d7024e406b7c2e55eb53beb9253108abb890bf550358bdde82ee4e6",
+      "sha256": "752cc4b023930ca696395fb071b93d17a6fabf34aec9e2b993e88f2d2d1673c9",
       "executable": false
     },
     {
@@ -174,7 +174,7 @@
     },
     {
       "path": "bin/skill-history.json",
-      "sha256": "a4d39a9cb232c2b0f73cec671a4626a30dad191a345a4be8e630c2eefc80fd9b",
+      "sha256": "de454d15a5d1e81f0f69f5d1d781ea02d8b19554695458a993d74596d5055146",
       "executable": false
     },
     {
@@ -219,7 +219,7 @@
     },
     {
       "path": "config/skills/_shared/engine-preflight.md",
-      "sha256": "09c12a9e86e77333231370ddb1de5184fe390ff97fd75fa94329ea0caaa271be",
+      "sha256": "d1cc430847a659fe0ea946ce09bfac30ec2596ce8707c5bf280e60f24a0771fb",
       "executable": false
     },
     {
@@ -259,7 +259,7 @@
     },
     {
       "path": "config/skills/_shared/runtime-principles.md",
-      "sha256": "f1c0647e8da37b900c5d83487948dc85d4663275e0f0a282e9d49df219f9b085",
+      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
       "executable": false
     },
     {
@@ -279,7 +279,7 @@
     },
     {
       "path": "config/skills/_shared/task-completion.md",
-      "sha256": "7466b99c4323dd2790ac76d964b6c8a676557a7401897cf74a3ad1ea640be004",
+      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
       "executable": false
     },
     {
@@ -314,12 +314,12 @@
     },
     {
       "path": "config/skills/devlyn-ideate/references/loop.md",
-      "sha256": "dc8907a01727fc8e866d659004ca2e7e4642252793b70adc2d10e61812ee92d6",
+      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
       "executable": false
     },
     {
       "path": "config/skills/devlyn-ideate/references/package-format.md",
-      "sha256": "8d295f6d97d3acaca4ca867447cf95e8cf141cbc7d9f05598ec72c1156f8d87c",
+      "sha256": "0b7c780db5f8e3149f1da5802ad5d9def7d60b46d21699807c72c997fe2d67fc",
       "executable": false
     },
     {
@@ -344,17 +344,17 @@
     },
     {
       "path": "harness/AGENTS.md",
-      "sha256": "5f5522addafc26ff778e24552b3bdbeb41412f82881032bc91621ff392cd40d5",
+      "sha256": "68c354a51eae0b77eaa909ec2a11b1ca498c62905e133375929c73085c638d10",
       "executable": false
     },
     {
       "path": "harness/CLAUDE.md",
-      "sha256": "5f5522addafc26ff778e24552b3bdbeb41412f82881032bc91621ff392cd40d5",
+      "sha256": "68c354a51eae0b77eaa909ec2a11b1ca498c62905e133375929c73085c638d10",
       "executable": false
     },
     {
       "path": "native/claude/.claude-plugin/plugin.json",
-      "sha256": "b5df06d3ba91c79bb1fa8e10ceed26f462010f410777e4427f7fe45b8177cfe6",
+      "sha256": "1c66282653ed10919933b783dbff4353b9a315340d1ceb6d9edb9caf963a23e1",
       "executable": false
     },
     {
@@ -394,7 +394,7 @@
     },
     {
       "path": "native/claude/skills/_shared/engine-preflight.md",
-      "sha256": "09c12a9e86e77333231370ddb1de5184fe390ff97fd75fa94329ea0caaa271be",
+      "sha256": "d1cc430847a659fe0ea946ce09bfac30ec2596ce8707c5bf280e60f24a0771fb",
       "executable": false
     },
     {
@@ -434,7 +434,7 @@
     },
     {
       "path": "native/claude/skills/_shared/runtime-principles.md",
-      "sha256": "f1c0647e8da37b900c5d83487948dc85d4663275e0f0a282e9d49df219f9b085",
+      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
       "executable": false
     },
     {
@@ -454,7 +454,7 @@
     },
     {
       "path": "native/claude/skills/_shared/task-completion.md",
-      "sha256": "7466b99c4323dd2790ac76d964b6c8a676557a7401897cf74a3ad1ea640be004",
+      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
       "executable": false
     },
     {
@@ -489,12 +489,12 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/references/loop.md",
-      "sha256": "dc8907a01727fc8e866d659004ca2e7e4642252793b70adc2d10e61812ee92d6",
+      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
       "executable": false
     },
     {
       "path": "native/claude/skills/devlyn-ideate/references/package-format.md",
-      "sha256": "8d295f6d97d3acaca4ca867447cf95e8cf141cbc7d9f05598ec72c1156f8d87c",
+      "sha256": "0b7c780db5f8e3149f1da5802ad5d9def7d60b46d21699807c72c997fe2d67fc",
       "executable": false
     },
     {
@@ -514,12 +514,12 @@
     },
     {
       "path": "native/codex/.agents/plugins/marketplace.json",
-      "sha256": "235c0de55f65d76155982567747b458ab9800f9f95d39f134a4bdb98336b5ecc",
+      "sha256": "2b589b387dd262bbb68f68738c9da6315dd06595d0af0dc5c088151235a5a7c8",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/.codex-plugin/plugin.json",
-      "sha256": "b5df06d3ba91c79bb1fa8e10ceed26f462010f410777e4427f7fe45b8177cfe6",
+      "sha256": "1c66282653ed10919933b783dbff4353b9a315340d1ceb6d9edb9caf963a23e1",
       "executable": false
     },
     {
@@ -559,7 +559,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/engine-preflight.md",
-      "sha256": "09c12a9e86e77333231370ddb1de5184fe390ff97fd75fa94329ea0caaa271be",
+      "sha256": "d1cc430847a659fe0ea946ce09bfac30ec2596ce8707c5bf280e60f24a0771fb",
       "executable": false
     },
     {
@@ -599,7 +599,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/runtime-principles.md",
-      "sha256": "f1c0647e8da37b900c5d83487948dc85d4663275e0f0a282e9d49df219f9b085",
+      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
       "executable": false
     },
     {
@@ -619,7 +619,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/task-completion.md",
-      "sha256": "7466b99c4323dd2790ac76d964b6c8a676557a7401897cf74a3ad1ea640be004",
+      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
       "executable": false
     },
     {
@@ -654,12 +654,12 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md",
-      "sha256": "dc8907a01727fc8e866d659004ca2e7e4642252793b70adc2d10e61812ee92d6",
+      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/references/package-format.md",
-      "sha256": "8d295f6d97d3acaca4ca867447cf95e8cf141cbc7d9f05598ec72c1156f8d87c",
+      "sha256": "0b7c780db5f8e3149f1da5802ad5d9def7d60b46d21699807c72c997fe2d67fc",
       "executable": false
     },
     {
@@ -1819,12 +1819,12 @@
     },
     {
       "path": "package.json",
-      "sha256": "871e2644320f977a82b1adb183423c2775456da1922bf45a7b72aa5e54f9d576",
+      "sha256": "e4f8b96ad2ca5dd7298d1db30e321e3e965f76d1fa0e4fc4a3e4e1012e124822",
       "executable": false
     }
   ],
   "digest": {
     "algorithm": "sha256",
-    "value": "1ce25067c67dc184bc312fafc2e7ac382fbce2e6d348296bc5975752c5219743"
+    "value": "53a2f9f2d3d8cf8cf43391dd92224aa5190e331f0a993649d0a06256ca6a417d"
   }
 }