devlyn-cli 4.3.30 → 4.3.32

package/native/codex/plugins/devlyn/skills/_shared/task-completion.md

@@ -201,14 +201,14 @@ publication mode pushes no task commit and opens no PR. Delivery is `COMPLETE` w
 `pr` pushes the exact accepted task ref and creates/reuses its exact repository,
 head and base PR. While OPEN, it cancels owned auto-merge, reports `PR` with its URL
 and retains the checkout. Once MERGED by any method, either mode cleans released
-resources in that call, on resume or at the next allocation. Default `auto` also requests
-a `--merge --match-head-commit <accepted SHA>` merge. Repository
-checks/reviews and merge policy remain authoritative: no admin bypass, strategy
+resources in that call, on resume or at the next allocation. Default `auto` also
+merges the accepted commit. Merge policy remains authoritative: no admin bypass, strategy
 fallback or repository setting changes. When the repository disallows merge
-commits or refuses the request, delivery reports `PR` with `merge_refused` and
+commits or refuses the merge, delivery reports `PR` with `merge_refused` and
 the PR waits for a person. Command success alone never proves merge.
 
-`PENDING` retains the workspace and reports a receipt-based resume command.
+`PENDING` retains the workspace; its receipt-based resume command merges once
+required checks or reviews pass, or a person merges it.
 `BLOCKED` names the cause and retry action; repair that condition before retrying.
 Resume reobserves Git/PR state under a per-receipt lock, reuses the original
 acceptance and performs only missing eligible effects.

package/native/codex/plugins/devlyn/skills/_shared/warm-build-dirs.py

@@ -706,9 +706,14 @@ class WarmTests(unittest.TestCase):
         (bin_dir / "cargo").write_text(FAKE_CARGO)
         (bin_dir / "cargo").chmod(0o755)
         self.fixture, self.log = self.root / "fixture.json", self.root / "cargo.log"
+        # A commit's detached automatic maintenance would still write into .git while a test reads the tree. Appended to
+        # the inherited GIT_CONFIG_COUNT entries, which this environment keeps.
+        count = int(os.environ.get("GIT_CONFIG_COUNT") or 0)
         self.environment = mock.patch.dict(os.environ, {
             "PATH": f"{bin_dir}{os.pathsep}{os.environ['PATH']}", "FAKE_CARGO": str(self.fixture),
             "FAKE_CARGO_LOG": str(self.log), "GIT_CONFIG_GLOBAL": os.devnull, "GIT_CONFIG_NOSYSTEM": "1",
+            "GIT_CONFIG_COUNT": str(count + 1), f"GIT_CONFIG_KEY_{count}": "maintenance.auto",
+            f"GIT_CONFIG_VALUE_{count}": "false",
             "PYTHONPATH": str(self.root) + os.pathsep + os.environ.get("PYTHONPATH", ""),
             "PYTHONDONTWRITEBYTECODE": "1",
             "GIT_AUTHOR_NAME": "t", "GIT_AUTHOR_EMAIL": "t@t", "GIT_COMMITTER_NAME": "t", "GIT_COMMITTER_EMAIL": "t@t"})
@@ -749,6 +754,14 @@ class WarmTests(unittest.TestCase):
     def git(self, work, *args):
         return subprocess.run(["git", "-C", str(work), *args], check=True, capture_output=True, text=True).stdout
 
+    def test_fixture_commit_starts_no_automatic_maintenance(self):
+        # Its detached child would still write into .git while a test reads the tree or cleanup removes it.
+        trace = self.root / "trace.json"
+        os.environ["GIT_TRACE2_EVENT"] = str(trace)  # setUp's patch restores the environment
+        self.git(self.anchor, "commit", "-q", "--allow-empty", "-m", "traced")
+        children = [line for line in trace.read_text(encoding="utf-8").splitlines() if '"event":"child_start"' in line]
+        self.assertEqual(children, [])
+
     def write_fixture(self, **extra):
         packages = [
             {"name": "app", "source": None, "manifest_path": str(self.work / "Cargo.toml"), "targets": [{"kind": ["lib"], "name": "LIB"}]},

package/native/codex/plugins/devlyn/skills/devlyn-ideate/references/executor.md

@@ -59,4 +59,4 @@ Each `review_requirements` ID needs review evidence: a JSON record under `<workt
 }
 ```
 
-A record counts only when it binds this task, the candidate source and both contract digests; any other well-formed record is reported under `ignored_reviews` (a source change invalidates earlier reviews). A listed review or runner record that is unreadable or not this shape fails acceptance with its path named; keys a review record or finding adds beyond this shape are ignored. The counted records' `requirements` must cover `review_requirements`. Each finding's `disposition` is `open`, `resolved` or `rejected` (`rejected` needs a `reason`); an open binding finding blocks acceptance. The loop requires no particular engine or number of reviewers.
+A record counts only when it binds this task, the candidate source and both contract digests; any other well-formed record is reported under `ignored_reviews` (a source change invalidates earlier reviews; the record for the changed source may come from a pass that reads only the change and the invariants it touches). A listed review or runner record that is unreadable or not this shape fails acceptance with its path named; keys a review record or finding adds beyond this shape are ignored. The counted records' `requirements` must cover `review_requirements`. Each finding's `disposition` is `open`, `resolved` or `rejected` (`rejected` needs a `reason`); an open binding finding blocks acceptance. The loop requires no particular engine or number of reviewers.

package/native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md

@@ -32,7 +32,7 @@ The host supplies the executor and maps its configured engine to the argv; the l
 6. **Derive acceptance** with `acceptance.py accept`. It binds the committed contract to the packet digests; requires the candidate to be the owned branch head with HEAD checked out on that branch, to descend from the inputs, to leave the package (its queue file included) and `docs/specs/queue.md` untouched and to have a clean worktree; executes each declared command on that source, recording raw stdout/stderr and exit, timeout or spawn outcomes (a runner result is reused only when it is wholly clean — no reasons, so no failed check and no source change during its checks — for the same source and contract digests, with unchanged streams); evaluates the file and diff guards against the inputs; confirms the source is unchanged; checks review records; and writes `.devlyn/loop/acceptance.json`. Missing checks, missing review coverage and open binding findings cannot produce `[x]`, and acceptance weakening is not repair. This establishes command outcomes and evidence completeness, not a reviewer's semantic judgment; deliberate evidence forgery is outside the trust model.
 7. **Bind before terminal metadata.** `task-complete.py accept --receipt <receipt> --acceptance <worktree>/.devlyn/loop/acceptance.json` takes evidence custody and points the recovery ref at the source. Failed results are bound the same way; they never become a frontier or a publishable product.
 8. **Commit the terminal transition** under the queue lock: one commit whose sole parent is the bound source and whose only change is this task's row in `docs/specs/<loop-id>/queue.md` (`[x]`, or `[F] — <first reason> (receipt <id>)`), validated as the only legal transition. Then `task-complete.py attach --receipt <receipt> --commit <terminal> --file docs/specs/<loop-id>/queue.md` records it separately from the source and moves the recovery ref to it.
-9. **Deliver** after waiting for the executor, with `task-complete.py complete --receipt <receipt> --writers-stopped`, plus `--local-only` or, until the receipt records a mode, the packet's `--mode auto|pr`, so a per-task `--mode` persists. Local-only keeps source, custody and the recovery ref with no remote effect. `auto`/`pr` publish the terminal commit under the completion contract; a pending or refused delivery keeps product acceptance, resources and a resume command. Where writer cessation cannot be observed, or a process still uses the tree, a merged delivery settles (`COMPLETE`) with its workspace, task ref and custody retained and reported under workspace cleanup; retained cleanup never blocks the queue. Failed products are never published. The receipt's `delivery` field checkpoints the latest outcome. A local chain is never turned into stacked PRs; publishing it requires integrated acceptance of the actual publication candidate.
+9. **Deliver** after waiting for the executor, with `task-complete.py complete --receipt <receipt> --writers-stopped`, plus `--local-only` or, until the receipt records a mode, the packet's `--mode auto|pr`, so a per-task `--mode` persists. Local-only keeps source, custody and the recovery ref with no remote effect. `auto`/`pr` publish the terminal commit under the completion contract; a pending or refused delivery keeps product acceptance, resources and a resume command. A merged delivery whose cleanup is refused settles (`COMPLETE`) with what the refusal guards retained and reported under workspace cleanup; retained cleanup never blocks the queue. Failed products are never published. The receipt's `delivery` field checkpoints the latest outcome. A local chain is never turned into stacked PRs; publishing it requires integrated acceptance of the actual publication candidate.
 10. **Recover** from durable state only:
 
     | Interrupted | Resume |

package/native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/acceptance.py

@@ -515,6 +515,8 @@ class AcceptanceTests(unittest.TestCase):
         self.addCleanup(self.temp.cleanup)
         self.root = Path(self.temp.name).resolve()
         self.work = self.root / "work tree"
+        # A commit's detached automatic maintenance would still write into .git while a test reads the tree.
+        (self.root / "gitconfig").write_text("[maintenance]\n\tauto = false\n", encoding="utf-8")
         env = {"GIT_CONFIG_NOSYSTEM": "1", "GIT_CONFIG_GLOBAL": str(self.root / "gitconfig"), "GIT_AUTHOR_NAME": "Fixture",
                "GIT_AUTHOR_EMAIL": "fixture@example.invalid", "GIT_COMMITTER_NAME": "Fixture", "GIT_COMMITTER_EMAIL": "fixture@example.invalid"}
         self.saved = {key: os.environ.get(key) for key in env}
@@ -543,6 +545,15 @@ class AcceptanceTests(unittest.TestCase):
         self.g("commit", "-q", "-m", message)
         return self.g("rev-parse", "HEAD")
 
+    def test_fixture_commit_starts_no_automatic_maintenance(self):
+        # Its detached child would still write into .git while a test reads the tree or cleanup removes it.
+        from unittest import mock
+        trace = self.root / "trace.json"
+        with mock.patch.dict(os.environ, GIT_TRACE2_EVENT=str(trace)):
+            self.g("commit", "-q", "--allow-empty", "-m", "traced")
+        children = [line for line in trace.read_text(encoding="utf-8").splitlines() if '"event":"child_start"' in line]
+        self.assertEqual(children, [])
+
     def inputs(self, expected=None, review=()):
         base = self.g("rev-parse", "HEAD")
         files = {"docs/specs/l/meta.md": "# meta\n", "docs/specs/l/t/spec.md": "# task R1 R2\n",

package/native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/queue.py

@@ -1429,6 +1429,8 @@ def advance(v, row, opts):
         progress(identity, f"delivery {result['status']}")
         if result.get("merge_refused"):
             return f"merge refused: {result['merge_refused']}; a person merges the PR"
+        if waits := result.get("merge_waits"):
+            return f"merge waits: PR is {waits} ({'GitHub has not computed its mergeability yet' if waits == 'UNKNOWN' else 'required checks or reviews not passing yet'}); drain again later, or merge it"
     return None
 
 
@@ -1657,11 +1659,15 @@ def status_summary(v):
     row = next_task(v, set())
     annotate(v, {})
     tasks = [summary(v, r) for r in v["rows"] if r["identity"]]
+    # A task without a resume is no pending delivery, so a cleanup it retained is named here with its own resume.
+    retained = [f"{t['identity']}: {label} {t[key]}" for t in tasks if not t.get("resume")
+                for key, field, label in (("cleanup", "workspace_cleanup", "workspace cleanup"), ("scratch", "scratch_cleanup", "scratch cleanup"))
+                if ((v["states"][t["identity"]]["receipt"] or {}).get(field) or {}).get("reason")]
     return {"status": "OK", **skill_diagnostics(anchor), "counts": counts(v), "next": row["identity"] if row else None,
             "blockers": [f"{t['identity']}: {t['reason']}" for t in tasks if t.get("reason") and t["result"] in {"pending", "active", "blocked"}]
             + [f"legacy row {r['index'] + 1} needs planning: {r['text']}" for r in v["rows"] if not r["identity"] and r["mark"] == " "]
             + [f"unreadable receipt {item}" for item in v["unreadable"]],
-            "delivery": [t for t in tasks if t.get("resume")], "cleanup": v["cleanup"]}
+            "delivery": [t for t in tasks if t.get("resume")], "cleanup": v["cleanup"] + retained}
 
 
 def status(args):
@@ -1897,6 +1903,8 @@ class QueueTests(unittest.TestCase):
             "import shutil\nfrom types import SimpleNamespace\n"
             "shutil.disk_usage = lambda path: SimpleNamespace(total=100 * 1024**3, free=100 * 1024**3)\n",
             encoding="utf-8")
+        # A commit's detached automatic maintenance would still write into .git while a test reads the tree.
+        (self.root / "gitconfig").write_text("[maintenance]\n\tauto = false\n", encoding="utf-8")
         self.env = {**os.environ, "GIT_CONFIG_NOSYSTEM": "1", "GIT_CONFIG_GLOBAL": str(self.root / "gitconfig"),
                     "GIT_AUTHOR_NAME": "Fixture", "GIT_AUTHOR_EMAIL": "fixture@example.invalid",
                     "GIT_COMMITTER_NAME": "Fixture", "GIT_COMMITTER_EMAIL": "fixture@example.invalid"}
@@ -1940,6 +1948,14 @@ class QueueTests(unittest.TestCase):
             path.write_text(text.replace(old, new, 1), encoding="utf-8")
         return mutate
 
+    def test_fixture_commit_starts_no_automatic_maintenance(self):
+        # Its detached child would still write into .git while a test reads the tree or cleanup removes it.
+        trace = self.root / "trace.json"
+        subprocess.run(["git", "-C", str(self.anchor), "commit", "-q", "--allow-empty", "-m", "traced"], check=True,
+                       env={**self.env, "GIT_TRACE2_EVENT": str(trace)})
+        children = [line for line in trace.read_text(encoding="utf-8").splitlines() if '"event":"child_start"' in line]
+        self.assertEqual(children, [])
+
     def test_package_validation(self):
         self.assertEqual(self.cli("check", self.meta)["tasks"], ["inv.t1", "inv.t2"])
         manifest = json.loads(JSON_FENCE_RE.search((self.anchor / "docs/specs/inv/meta.md").read_text(encoding="utf-8")).group(1))

package/optional-skills/code-review-standards/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: code-review-standards
-description: Severity framework (CRITICAL security, HIGH code quality, MEDIUM best practice, LOW cleanup) and approval criteria for judging a code change. Use when reviewing, auditing or validating a diff, pull request or just-finished implementation, or when deciding whether a change is ready to approve.
+description: Severity framework (CRITICAL security, HIGH correctness and data, MEDIUM best practice, LOW cleanup) and approval criteria for judging a code change. Use when reviewing, auditing or validating a diff, pull request or just-finished implementation, or when deciding whether a change is ready to approve.
 ---
 # Code Review Standards
 
@@ -8,6 +8,8 @@ Severity framework and quality bar for reviewing code changes. Apply this framew
 
 ## Severity Framework
 
+A CRITICAL or HIGH finding names its concrete case: the input, state or path that leads to the harm. A finding that cannot name one is MEDIUM or lower.
+
 ### CRITICAL — Security (blocks approval)
 
 - Hardcoded credentials, API keys, tokens, secrets
@@ -17,17 +19,19 @@ Severity framework and quality bar for reviewing code changes. Apply this framew
 - Insecure dependencies (known CVEs)
 - Path traversal (unsanitized file paths)
 
-### HIGH — Code Quality (blocks approval)
+### HIGH — Correctness and data (blocks approval)
+
+- Wrong behavior or results
+- Lost or corrupted data
+- Missing error handling at a boundary, where a failure there gives one of the above
+
+### MEDIUM — Best Practices (fix or justify)
 
 - Functions > 50 lines → split
 - Files > 800 lines → decompose
 - Nesting > 4 levels → flatten or extract
-- Missing error handling at boundaries
 - `console.log` in production code → remove
 - Unresolved TODO/FIXME → resolve or remove
-
-### MEDIUM — Best Practices (fix or justify)
-
 - Mutation where immutable patterns preferred
 - Missing tests for new functionality
 - Accessibility gaps (alt text, ARIA, keyboard nav)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.3.30",
+  "version": "4.3.32",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for every session and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {

package/release.json

@@ -1,14 +1,14 @@
 {
   "schemaVersion": 1,
   "package": "devlyn-cli",
-  "version": "4.3.30",
+  "version": "4.3.32",
   "principles": {
     "defaults": "config/skills/_shared/runtime-principles.md",
     "memory": {
       "claude": "harness/CLAUDE.md",
       "agents": "harness/AGENTS.md"
     },
-    "sourceBlockSha256": "eaf6d144bcb25ac8c5e628a134dc4422f5af7641f9c34ccdb8f06d1613718c48"
+    "sourceBlockSha256": "7a484752888c37d7e91a9edfaa17d36b34ada221fc1d533ab9d73bc08c56ae7e"
   },
   "skills": {
     "root": "config/skills",
@@ -99,12 +99,12 @@
   "files": [
     {
       "path": "AGENTS.md",
-      "sha256": "df67efd70f4760d2415c414eb96d4cc426277c20e18f17e401257f85b489eb59",
+      "sha256": "207efe7b897a2704ec8a22163f02891ac1a17d521e8a44f4556e59d60a6de19f",
       "executable": false
     },
     {
       "path": "CLAUDE.md",
-      "sha256": "df67efd70f4760d2415c414eb96d4cc426277c20e18f17e401257f85b489eb59",
+      "sha256": "207efe7b897a2704ec8a22163f02891ac1a17d521e8a44f4556e59d60a6de19f",
       "executable": false
     },
     {
@@ -114,7 +114,7 @@
     },
     {
       "path": "README.md",
-      "sha256": "fa6956e7d769d1b7731b804af07f0a0d30fb775e5be7cf53e3099257f71f7ac8",
+      "sha256": "bbc875764d90876e032b71363bf833bc0919368940943bfd66f1fb72391306fe",
       "executable": false
     },
     {
@@ -129,7 +129,7 @@
     },
     {
       "path": "bin/devlyn.js",
-      "sha256": "d74e237346ffc0966867bbaf3a5c411b5a25888575b6c363f9347cd6a7c90b02",
+      "sha256": "3a68ed60da74b66fe6303819924128cb11b1bc64a63518b947dc6b26a631325d",
       "executable": true
     },
     {
@@ -139,7 +139,7 @@
     },
     {
       "path": "bin/harness-activation.js",
-      "sha256": "e5428bf6fb2dc40e0f7bebcc834b54573c0b8c648570fea8bd51774d5e865727",
+      "sha256": "8457005c714c93a31c0b65c26ccd604fdd760f7db978045dbdd1b5724532f742",
       "executable": false
     },
     {
@@ -154,12 +154,12 @@
     },
     {
       "path": "bin/harness-status.js",
-      "sha256": "7cc1bc83594952806142a7e3bda2430d21a583ae31a3b1800aa2811a645e0ad0",
+      "sha256": "6b0b209d77253eef4c92d38b939c4e0828705128d37ed7158d033bdadd762280",
       "executable": false
     },
     {
       "path": "bin/instruction-templates.json",
-      "sha256": "752cc4b023930ca696395fb071b93d17a6fabf34aec9e2b993e88f2d2d1673c9",
+      "sha256": "6e8998bcfa674c32fc92dc48c3e9b83e07fe7b48c3ae203e0943ae837181f473",
       "executable": false
     },
     {
@@ -174,7 +174,7 @@
     },
     {
       "path": "bin/skill-history.json",
-      "sha256": "de454d15a5d1e81f0f69f5d1d781ea02d8b19554695458a993d74596d5055146",
+      "sha256": "bb5a18a5c7f846c6e3b427a141600a1699dcf01e724193d840f9a10874954057",
       "executable": false
     },
     {
@@ -204,7 +204,7 @@
     },
     {
       "path": "config/skills/_shared/bring-in.py",
-      "sha256": "754b3892ceb611c855f814e0aa54b645b53de4a67ddec44418f254cb36774527",
+      "sha256": "b712de03e30b8a5b29f13f3eb9b0c3787f68edaaa980e0b25fe90885365861d5",
       "executable": false
     },
     {
@@ -259,7 +259,7 @@
     },
     {
       "path": "config/skills/_shared/runtime-principles.md",
-      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
+      "sha256": "7492c2e1854ef6b0aef8cf1f5dd85e612ed954cff90196ec7c17cc47d12c9937",
       "executable": false
     },
     {
@@ -274,12 +274,12 @@
     },
     {
       "path": "config/skills/_shared/task-complete.py",
-      "sha256": "1f39a27e0dc70c727dc79d47c2b294e75bfd1efbc8df4f0492d68578a29405a2",
+      "sha256": "5f893064511e273258ebe721e967166485a812fbe9a9f1e818e2c605ef039abc",
       "executable": false
     },
     {
       "path": "config/skills/_shared/task-completion.md",
-      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
+      "sha256": "26a0634d2c38753b0d226946eac7fc395b6f21b3e460433d2638b7eb6a57ad3a",
       "executable": false
     },
     {
@@ -289,7 +289,7 @@
     },
     {
       "path": "config/skills/_shared/warm-build-dirs.py",
-      "sha256": "ccc842227dfe8d531b06e0e32a13a580c127af9c354b086548da8c547af6c2b0",
+      "sha256": "981cab5ea6629182aef01dca1eb2b410ab91fd4581dd500f58e0a8313b39f245",
       "executable": false
     },
     {
@@ -309,12 +309,12 @@
     },
     {
       "path": "config/skills/devlyn-ideate/references/executor.md",
-      "sha256": "aa53076dffa1fcf49e2350206b5f0ba73306b92ccce3502160dca4f26113e4be",
+      "sha256": "40582ff8fad59f09fe327ac4f232463b6c55a91be1288c7470f7c8c0b3da95fe",
       "executable": false
     },
     {
       "path": "config/skills/devlyn-ideate/references/loop.md",
-      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
+      "sha256": "1b7f48ddbe5bbdf0145d7e6797784d5e7fa1af548e751ad6e6869a96de65b58f",
       "executable": false
     },
     {
@@ -329,12 +329,12 @@
     },
     {
       "path": "config/skills/devlyn-ideate/scripts/acceptance.py",
-      "sha256": "5e25ce6fcbd1773e988a1146f0f4a681676936dad113c43c693fdb0925aa168a",
+      "sha256": "1c2c173f05f9688839356898dea6e395fea83e78d5c8bc0e00b0d971a33381e9",
       "executable": false
     },
     {
       "path": "config/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "f8447d7f1a3d04332e9aefdd363e15a9351c46ce2b165d4e75cce45906f132cf",
+      "sha256": "db80fd2cae92dda70e9b6183e8b9396dca9592358a38ed19fb6893ed3a531dd2",
       "executable": false
     },
     {
@@ -344,17 +344,17 @@
     },
     {
       "path": "harness/AGENTS.md",
-      "sha256": "68c354a51eae0b77eaa909ec2a11b1ca498c62905e133375929c73085c638d10",
+      "sha256": "9c3daa27f67af1feff420f14d7c53cfbc905b7e72e2d32cc47bc8f2a6cbe3555",
       "executable": false
     },
     {
       "path": "harness/CLAUDE.md",
-      "sha256": "68c354a51eae0b77eaa909ec2a11b1ca498c62905e133375929c73085c638d10",
+      "sha256": "9c3daa27f67af1feff420f14d7c53cfbc905b7e72e2d32cc47bc8f2a6cbe3555",
       "executable": false
     },
     {
       "path": "native/claude/.claude-plugin/plugin.json",
-      "sha256": "1c66282653ed10919933b783dbff4353b9a315340d1ceb6d9edb9caf963a23e1",
+      "sha256": "ff300febb5b5d8469c3258416f63e156cc05b911ee6f3cf2cd818fbf70f5e80b",
       "executable": false
     },
     {
@@ -379,7 +379,7 @@
     },
     {
       "path": "native/claude/skills/_shared/bring-in.py",
-      "sha256": "754b3892ceb611c855f814e0aa54b645b53de4a67ddec44418f254cb36774527",
+      "sha256": "b712de03e30b8a5b29f13f3eb9b0c3787f68edaaa980e0b25fe90885365861d5",
       "executable": false
     },
     {
@@ -434,7 +434,7 @@
     },
     {
       "path": "native/claude/skills/_shared/runtime-principles.md",
-      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
+      "sha256": "7492c2e1854ef6b0aef8cf1f5dd85e612ed954cff90196ec7c17cc47d12c9937",
       "executable": false
     },
     {
@@ -449,12 +449,12 @@
     },
     {
       "path": "native/claude/skills/_shared/task-complete.py",
-      "sha256": "1f39a27e0dc70c727dc79d47c2b294e75bfd1efbc8df4f0492d68578a29405a2",
+      "sha256": "5f893064511e273258ebe721e967166485a812fbe9a9f1e818e2c605ef039abc",
       "executable": false
     },
     {
       "path": "native/claude/skills/_shared/task-completion.md",
-      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
+      "sha256": "26a0634d2c38753b0d226946eac7fc395b6f21b3e460433d2638b7eb6a57ad3a",
       "executable": false
     },
     {
@@ -464,7 +464,7 @@
     },
     {
       "path": "native/claude/skills/_shared/warm-build-dirs.py",
-      "sha256": "ccc842227dfe8d531b06e0e32a13a580c127af9c354b086548da8c547af6c2b0",
+      "sha256": "981cab5ea6629182aef01dca1eb2b410ab91fd4581dd500f58e0a8313b39f245",
       "executable": false
     },
     {
@@ -484,12 +484,12 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/references/executor.md",
-      "sha256": "aa53076dffa1fcf49e2350206b5f0ba73306b92ccce3502160dca4f26113e4be",
+      "sha256": "40582ff8fad59f09fe327ac4f232463b6c55a91be1288c7470f7c8c0b3da95fe",
       "executable": false
     },
     {
       "path": "native/claude/skills/devlyn-ideate/references/loop.md",
-      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
+      "sha256": "1b7f48ddbe5bbdf0145d7e6797784d5e7fa1af548e751ad6e6869a96de65b58f",
       "executable": false
     },
     {
@@ -504,22 +504,22 @@
     },
     {
       "path": "native/claude/skills/devlyn-ideate/scripts/acceptance.py",
-      "sha256": "5e25ce6fcbd1773e988a1146f0f4a681676936dad113c43c693fdb0925aa168a",
+      "sha256": "1c2c173f05f9688839356898dea6e395fea83e78d5c8bc0e00b0d971a33381e9",
       "executable": false
     },
     {
       "path": "native/claude/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "f8447d7f1a3d04332e9aefdd363e15a9351c46ce2b165d4e75cce45906f132cf",
+      "sha256": "db80fd2cae92dda70e9b6183e8b9396dca9592358a38ed19fb6893ed3a531dd2",
       "executable": false
     },
     {
       "path": "native/codex/.agents/plugins/marketplace.json",
-      "sha256": "2b589b387dd262bbb68f68738c9da6315dd06595d0af0dc5c088151235a5a7c8",
+      "sha256": "ae244d5c77ec77f0e794c358368ef83c01a07383b86be66cd459b23324504e61",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/.codex-plugin/plugin.json",
-      "sha256": "1c66282653ed10919933b783dbff4353b9a315340d1ceb6d9edb9caf963a23e1",
+      "sha256": "ff300febb5b5d8469c3258416f63e156cc05b911ee6f3cf2cd818fbf70f5e80b",
       "executable": false
     },
     {
@@ -544,7 +544,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/bring-in.py",
-      "sha256": "754b3892ceb611c855f814e0aa54b645b53de4a67ddec44418f254cb36774527",
+      "sha256": "b712de03e30b8a5b29f13f3eb9b0c3787f68edaaa980e0b25fe90885365861d5",
       "executable": false
     },
     {
@@ -599,7 +599,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/runtime-principles.md",
-      "sha256": "a8544f866db7b8e49617f14519908a601cbd8b92786cecb521cba5c28421a7f7",
+      "sha256": "7492c2e1854ef6b0aef8cf1f5dd85e612ed954cff90196ec7c17cc47d12c9937",
       "executable": false
     },
     {
@@ -614,12 +614,12 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/task-complete.py",
-      "sha256": "1f39a27e0dc70c727dc79d47c2b294e75bfd1efbc8df4f0492d68578a29405a2",
+      "sha256": "5f893064511e273258ebe721e967166485a812fbe9a9f1e818e2c605ef039abc",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/task-completion.md",
-      "sha256": "3b75502d363ba5fa3b45c06a1f3e0de7c88e609d4f91c41d75287a0acccdd504",
+      "sha256": "26a0634d2c38753b0d226946eac7fc395b6f21b3e460433d2638b7eb6a57ad3a",
       "executable": false
     },
     {
@@ -629,7 +629,7 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/warm-build-dirs.py",
-      "sha256": "ccc842227dfe8d531b06e0e32a13a580c127af9c354b086548da8c547af6c2b0",
+      "sha256": "981cab5ea6629182aef01dca1eb2b410ab91fd4581dd500f58e0a8313b39f245",
       "executable": false
     },
     {
@@ -649,12 +649,12 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/references/executor.md",
-      "sha256": "aa53076dffa1fcf49e2350206b5f0ba73306b92ccce3502160dca4f26113e4be",
+      "sha256": "40582ff8fad59f09fe327ac4f232463b6c55a91be1288c7470f7c8c0b3da95fe",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/references/loop.md",
-      "sha256": "ad64d90fb775b05ef774c2457fc9d994b062e17e017da07054be0d93d83e533f",
+      "sha256": "1b7f48ddbe5bbdf0145d7e6797784d5e7fa1af548e751ad6e6869a96de65b58f",
       "executable": false
     },
     {
@@ -669,12 +669,12 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/acceptance.py",
-      "sha256": "5e25ce6fcbd1773e988a1146f0f4a681676936dad113c43c693fdb0925aa168a",
+      "sha256": "1c2c173f05f9688839356898dea6e395fea83e78d5c8bc0e00b0d971a33381e9",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/skills/devlyn-ideate/scripts/queue.py",
-      "sha256": "f8447d7f1a3d04332e9aefdd363e15a9351c46ce2b165d4e75cce45906f132cf",
+      "sha256": "db80fd2cae92dda70e9b6183e8b9396dca9592358a38ed19fb6893ed3a531dd2",
       "executable": false
     },
     {
@@ -1554,7 +1554,7 @@
     },
     {
       "path": "optional-skills/code-review-standards/SKILL.md",
-      "sha256": "3f11f84adb7d3016c4d71bce743c40e35e682d09bc9376b03be957fc9c8d2b62",
+      "sha256": "24b5ffaea6876575cf9ae70ff8fb1f4b5a75633f5a7a976a87da82630d62a34f",
       "executable": false
     },
     {
@@ -1819,12 +1819,12 @@
     },
     {
       "path": "package.json",
-      "sha256": "e4f8b96ad2ca5dd7298d1db30e321e3e965f76d1fa0e4fc4a3e4e1012e124822",
+      "sha256": "0c1111039515ac152abe5f3e16b60272753467645bbced1be38936fe909ad04c",
       "executable": false
     }
   ],
   "digest": {
     "algorithm": "sha256",
-    "value": "53a2f9f2d3d8cf8cf43391dd92224aa5190e331f0a993649d0a06256ca6a417d"
+    "value": "87b80d4042da531f2cccef9bde9d9d9964a3c34d061be213199d49e117a8bda2"
   }
 }