devrites 3.2.27 → 4.0.0

package/scripts/codex-generate.sh

@@ -35,125 +35,42 @@ gen_codex_markdown_file() {
 }
 
 gen_codex_skill_file() {
-  _src="$1"; _out="$2"; _internal="${3:-0}"
-  _tmp="$TMP_GEN_DIR/codex-skill-raw-$(basename "$(dirname "$_src")").md"
-  mkdir -p "$(dirname "$_out")"
-  # Give the 12 internal skills a short description in the Codex mirror. Codex
-  # uses descriptions for its 2% implicit-matching budget, but these skills are
-  # invoked by name. Shorter internal descriptions leave that budget for the
-  # public rite-* skills. Keep explicit invocation and each SKILL.md body
-  # unchanged.
-  awk -v internal="$_internal" '
-    BEGIN { fm = 0; inserted = 0 }
-    NR == 1 && $0 == "---" { print; fm = 1; next }
-    fm && internal == "1" && /^description:/ {
-      print "description: Internal DevRites skill; DevRites agents invoke it explicitly, not by prompt match."
-      next
-    }
-    fm && $0 == "---" {
-      print
-      print ""
-      print "## Codex compatibility"
-      print ""
-      print "This is the Codex mirror of a DevRites skill. In Codex:"
-      print ""
-      print "- Load DevRites engineering standards from `.agents/skills/devrites-lib/reference/standards/`. Read `.agents/skills/devrites-lib/reference/standards/core.md` before workflow work, then load the other `.agents/skills/devrites-lib/reference/standards/*.md` files exactly when this skill asks for them."
-      print "- Installed `.agents/` mirrors may be Git-ignored. If a repository-aware file tool refuses an ignored path, read it with a native filesystem command instead; a tool refusal is not a completed task."
-      print "- For automatic Engram calls, omit optional `project` and `session_id` unless an exact value came from Engram or repository configuration. Never derive either from `task_name`, a run ID, directory name, or normalized slug. Call `mem_session_summary` without them by default; on `unknown_session` or `unknown_project`, retry once with both optional fields omitted. If auto-detection is ambiguous, ask the user instead of guessing."
-      print "- Use the installed `devrites-engine` binary as the canonical runtime helper surface for orientation, gates, and state mutation."
-      print "- **Invocation and dispatch are different:** invoke means run a skill in this context; dispatch means start a fresh agent with `spawn_agent`, await it, and reconcile its result. Never describe inline skill work as a dispatch."
-      print "- On MultiAgent V2, call `spawn_agent` with the exact named `agent_type=devrites-<role>`, a unique `task_name`, and `fork_turns=\"none\"`. A missing visible `agent_type` field is still V2—not capability loss, V1, or HITL—so send it anyway. If the named call rejects it, stop before any generic/default spawn. Codex loads the role TOML'\''s `developer_instructions` natively; DevRites verifies the durable rollout, wait, completion, and delivered result."
-      print "- Only after the runtime explicitly identifies MultiAgent V1, use generic `explorer` for a read-only role with `fork_turns=\"none\"` and name exactly one `.codex/agents/devrites-<role>.toml` contract in the message. Trusted `.codex/hooks.json` injects that contract'\''s exact `developer_instructions` and binds the child to the fail-closed reviewer read-only guard."
-      print "- On explicitly identified MultiAgent V1, `devrites-slice-wright` uses generic `worker` with `fork_turns=\"none\"` and the exact role TOML named in the message. Trusted `.codex/hooks.json` binds it to the active reconcile window and `.wright-allowlist`."
-      print "- The invoked skill'\''s `required-agent-roles` frontmatter arms the fail-closed Stop receipt. Every listed role must have a confirmed start, wait, and non-empty result in this turn."
-      print "- If the required dispatch for the explicitly identified runtime is unavailable or rejected, stop for HITL. Never switch runtime lanes. Never execute a DevRites specialist role in the root context."
-      print "- Wait for every required fresh-context dispatch before reconciling or advancing. A backgrounded or lost result is incomplete."
-      print "- Codex project hooks are installed in `.codex/hooks.json`; declared-leaf hooks are scoped inside `.codex/agents/devrites-*.toml`. Review and trust them with `/hooks` before relying on hook enforcement."
-      print "- When this skill asks a HITL question via `AskUserQuestion`: Codex'\''s equivalent (`request_user_input`) exists only in Plan mode. Outside Plan mode, render the option set as a plain numbered list in chat and **end the turn** so the human answers: NEVER silently pick an option yourself; auto-picking is AFK'\''s contract, gated by the `.devrites/AFK` sentinel."
-      print ""
-      fm = 0
-      inserted = 1
-      next
-    }
-    { print }
-    END {
-      if (!inserted) {
-        print ""
-        print "## Codex compatibility"
-        print ""
-        print "Load DevRites engineering standards from `.agents/skills/devrites-lib/reference/standards/`. Invocation runs a skill inline; dispatch starts a fresh agent with `spawn_agent` and must be awaited. On V2 use the exact named `agent_type=devrites-<role>` even when hidden from the schema; omission is not V1 or HITL. Use guarded `explorer`/`worker` only after explicit V1 identification. If the selected runtime lane rejects dispatch, stop before switching lanes or running the role inline."
-      }
-    }
-  ' "$_src" > "$_tmp"
-  gen_codex_markdown_file "$_tmp" "$_out"
+  gen_codex_markdown_file "$1" "$2"
 }
 
 toml_escape() {
   printf '%s' "$1" | sed 's/\\/\\\\/g; s/"/\\"/g'
 }
 
-gen_codex_leaf_hook_toml() {
-  local _active_agent="$1" _required_var="$2" _subcommand="$3" _status="$4" _command
-  _command="cd \"\$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || { printf '%s\\n' 'DevRites: cannot resolve the project root for a declared Codex leaf. (devrites-codex-leaf-guard)' >&2; exit 2; }; DEVRITES_AGENT_RUN=1 DEVRITES_ACTIVE_AGENT=${_active_agent} ${_required_var}=1 devrites-engine hook ${_subcommand} --harness=codex; rc=\$?; case \"\$rc\" in 0) exit 0 ;; 2) exit 2 ;; *) printf '%s\\n' 'DevRites: declared Codex leaf guard unavailable or crashed; install or repair devrites-engine. (devrites-codex-leaf-guard)' >&2; exit 2 ;; esac"
-  printf '\n[[hooks.PreToolUse]]\n'
-  printf 'matcher = "Bash|Shell|sh|exec_command|run_command|Edit|Write|MultiEdit|NotebookEdit|apply_patch|exec|js|python|computer|computer_use|write_stdin|run_code|Agent|Task|spawn_agent|delegate|dispatch_agent|create_agent"\n\n'
-  printf '[[hooks.PreToolUse.hooks]]\n'
-  printf 'type = "command"\n'
-  printf "command = '''%s'''\n" "$_command"
-  printf 'statusMessage = "%s"\n' "$_status"
-}
-
 # Generate a Codex custom-agent TOML file from a Claude Code markdown agent.
 # Codex does not consume .claude/agents/*.md directly; it loads project agents
 # from .codex/agents/*.toml.
 gen_codex_agent() {
   local _src="$1" _out="$2"
-  local _name _desc _desc_tmp _desc_codex _tools _body_tmp _body_codex
+  local _name _desc _desc_tmp _desc_codex _body_tmp _body_codex _permissions
   _name="$(awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{exit} fm && /^name:[[:space:]]*/{sub(/^name:[[:space:]]*/, ""); print; exit}' "$_src")"
   _desc="$(awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{exit} fm && /^description:[[:space:]]*/{sub(/^description:[[:space:]]*/, ""); print; exit}' "$_src")"
   [ -n "$_name" ] || _name="$(basename "$_src" .md)"
   [ -n "$_desc" ] || _desc="DevRites custom agent."
+  _permissions=":read-only"
+  [ "$_name" = "devrites-slice-wright" ] && _permissions=":workspace"
   _desc_tmp="$TMP_GEN_DIR/codex-agent-desc-$(basename "$_src").txt"
   _desc_codex="$TMP_GEN_DIR/codex-agent-desc-$(basename "$_src").codex.txt"
   printf '%s' "$_desc" > "$_desc_tmp"
   gen_codex_markdown_file "$_desc_tmp" "$_desc_codex"
   _desc="$(cat "$_desc_codex")"
-  _tools="$(awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{exit} fm && /^tools:[[:space:]]*/{sub(/^tools:[[:space:]]*/, ""); print; exit}' "$_src")"
   mkdir -p "$(dirname "$_out")"
   {
     printf 'name = "%s"\n' "$(toml_escape "$_name")"
     printf 'description = "%s"\n' "$(toml_escape "$_desc")"
-    case "$_tools" in
-      *Edit*|*Write*|*MultiEdit*) : ;;
-      *) printf 'sandbox_mode = "read-only"\n' ;;
-    esac
+    printf 'default_permissions = "%s"\n' "$_permissions"
     printf "%s\n" "developer_instructions = '''"
-    printf 'You are the Codex custom-agent version of DevRites `%s`.\n' "$_name"
-    printf 'Follow the source agent instructions below. Treat any Claude Code-specific hook/tool metadata as unavailable in Codex unless the current session exposes an equivalent capability.\n\n'
-    printf 'Installed `.agents/` mirrors may be Git-ignored. If a repository-aware file tool refuses an ignored path, read it with a native filesystem command instead; a tool refusal is not a completed task.\n\n'
-    printf 'For automatic Engram calls, omit optional `project` and `session_id` unless an exact value came from Engram or repository configuration. Never derive either from `task_name`, a run ID, directory name, or normalized slug. Call `mem_session_summary` without them by default; on `unknown_session` or `unknown_project`, retry once with both optional fields omitted. If auto-detection is ambiguous, ask the user instead of guessing.\n\n'
     _body_tmp="$TMP_GEN_DIR/codex-agent-body-$(basename "$_src").md"
     _body_codex="$TMP_GEN_DIR/codex-agent-body-$(basename "$_src").codex.md"
     awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{fm=0; body=1; next} body{print}' "$_src" > "$_body_tmp"
     gen_codex_markdown_file "$_body_tmp" "$_body_codex"
     cat "$_body_codex"
     printf "\n%s\n" "'''"
-    case "$_name" in
-      devrites-slice-wright)
-        gen_codex_leaf_hook_toml \
-          "$_name" \
-          "DEVRITES_WRIGHT_AGENT_REQUIRED" \
-          "wright-scope" \
-          "DevRites: checking slice-wright boundary"
-        ;;
-      *)
-        gen_codex_leaf_hook_toml \
-          "$_name" \
-          "DEVRITES_REVIEWER_AGENT_REQUIRED" \
-          "reviewer-readonly" \
-          "DevRites: checking reviewer read-only boundary"
-        ;;
-    esac
   } > "$_out"
 }
 
@@ -167,7 +84,7 @@ This project has DevRites installed for both Claude Code and Codex.
 
 ## Codex usage
 
-- **Inspect before trust.** Codex skips project-scoped `.codex/` hooks, agents, and rules in an untrusted project. Before enabling them, inspect `.codex/hooks.json`, `.codex/agents/`, and the project guidance; use `/hooks` to review the commands Codex would run. The human operator decides whether to trust the folder. Until then, use DevRites only through explicitly inspected commands and treat hook enforcement as unavailable.
+- **Inspect before trust.** Codex skips project-scoped `.codex/` configuration and agents in an untrusted project. Before enabling them, inspect `.codex/config.toml`, `.codex/agents/`, and the project guidance. The human operator decides whether to trust the folder.
 - DevRites workflow skills are available to Codex from `.agents/skills`.
 - Use `$rite` or `$rite-<verb>` through Codex skills, or open `/skills` and select the matching DevRites skill.
 - If the user mentions a DevRites slash command such as `/rite spec`, `/rite-build`, or `/rite-seal`, treat that as an explicit request to use the corresponding DevRites skill.
@@ -177,9 +94,10 @@ This project has DevRites installed for both Claude Code and Codex.
 - For automatic Engram calls, omit optional `project` and `session_id` unless an exact value came from Engram or repository configuration. Never derive either from `task_name`, a run ID, directory name, or normalized slug. Call `mem_session_summary` without them by default; on `unknown_session` or `unknown_project`, retry once with both optional fields omitted. If auto-detection is ambiguous, ask the user instead of guessing.
 - Custom Codex subagents generated from the DevRites review agents live in `.codex/agents`.
 - In DevRites guidance, **invoke** means run a skill inline in the current context; **dispatch** means start a fresh agent with `spawn_agent`, wait for it, and reconcile its result.
-- Follow the invoked skill's generated **Codex compatibility** section for exact dispatch mechanics: V2 uses the named `devrites-<role>` even when `agent_type` is hidden from the visible schema; omission is not V1 or HITL. Only explicit V1 may use guarded generic compatibility. Both use `fork_turns="none"`.
-- The invoked skill's `required-agent-roles` frontmatter arms a fail-closed receipt. If a required dispatch is unavailable or rejected, stop for HITL; never execute a DevRites specialist role in the root context.
-- Claude Code agent hook metadata is not active in Codex. The generated Codex agents preserve read-only intent with Codex sandbox settings where possible; still follow DevRites' scope and no-mutation rules explicitly.
+- Dispatch every exact named `devrites-<role>` required by the active workflow in a fresh subagent thread, wait for it, and reconcile its result. If that role is unavailable, stop for HITL; never skip it, never substitute a generic/default child, and never execute the specialist role in the root context.
+- The root uses the workspace-capable `devrites-orchestrator` profile because Codex children cannot elevate above the parent permission ceiling. This permission is for native writer dispatch and workflow artifacts; the root must never edit source or tests itself.
+- Every generated specialist is hook-free. `devrites-slice-wright` alone uses `default_permissions = ":workspace"`; every other specialist uses `default_permissions = ":read-only"`. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path. Never bypass the wright, widen its contract, or edit source in the root; the root must never recreate an engine dispatch bridge.
+- A seal GO, AFK mode, or autocomplete flag never authorizes an irreversible action. Disclose the exact commit/push/tag/PR plan and obtain fresh explicit user approval for that attempt; any changed or retried plan needs fresh approval. Native host permission and sandbox prompts remain authoritative and cannot be inferred or bypassed.
 
 ## Workflow contract
 
@@ -190,193 +108,15 @@ This project has DevRites installed for both Claude Code and Codex.
 EOF
 }
 
-gen_codex_hooks_json() {
+gen_codex_config_toml() {
   _out="$1"
   cat > "$_out" <<'EOF'
-{
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Bash|Shell|sh|exec_command|run_command",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook git-guard --harness=codex",
-            "statusMessage": "DevRites: checking destructive Git authority"
-          },
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook allow --harness=codex",
-            "statusMessage": "DevRites: checking read-only helper approval"
-          }
-        ]
-      },
-      {
-        "matcher": "Edit|Write|apply_patch",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec env DEVRITES_A1_HOOK=enforce devrites-engine hook a1-guard --harness=codex",
-            "statusMessage": "DevRites: checking build write boundary"
-          }
-        ]
-      },
-      {
-        "matcher": "Bash|Shell|sh|exec_command|run_command|Edit|Write|MultiEdit|NotebookEdit|apply_patch|exec|js|python|computer|computer_use|write_stdin|run_code|Agent|Task|spawn_agent|delegate|dispatch_agent|create_agent|wait|wait_agent",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook agent-dispatch --harness=codex",
-            "statusMessage": "DevRites: verifying agent dispatch receipt"
-          },
-          {
-            "type": "command",
-            "command": "payload=\"$(cat)\"; if ! command -v devrites-engine >/dev/null 2>&1; then if printf '%s' \"$payload\" | grep -Eq '\"agent_type\"[[:space:]]*:[[:space:]]*\"(explorer|worker)\"'; then printf '%s\\n' 'DevRites: generic Codex leaf guard unavailable; install or repair devrites-engine. (devrites-codex-generic-guard)' >&2; exit 2; fi; exit 0; fi; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || { printf '%s\\n' 'DevRites: cannot resolve the project root for a generic Codex leaf. (devrites-codex-generic-guard)' >&2; exit 2; }; printf '%s' \"$payload\" | DEVRITES_CODEX_GENERIC_AGENT_COMPAT=1 devrites-engine hook reviewer-readonly --harness=codex; rc=$?; case \"$rc\" in 0) exit 0 ;; 2) exit 2 ;; *) printf '%s\\n' 'DevRites: generic Codex reviewer guard unavailable or crashed; install or repair devrites-engine. (devrites-codex-generic-guard)' >&2; exit 2 ;; esac",
-            "statusMessage": "DevRites: checking generic reviewer boundary"
-          },
-          {
-            "type": "command",
-            "command": "payload=\"$(cat)\"; if ! command -v devrites-engine >/dev/null 2>&1; then if printf '%s' \"$payload\" | grep -Eq '\"agent_type\"[[:space:]]*:[[:space:]]*\"(explorer|worker)\"'; then printf '%s\\n' 'DevRites: generic Codex leaf guard unavailable; install or repair devrites-engine. (devrites-codex-generic-guard)' >&2; exit 2; fi; exit 0; fi; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || { printf '%s\\n' 'DevRites: cannot resolve the project root for a generic Codex leaf. (devrites-codex-generic-guard)' >&2; exit 2; }; printf '%s' \"$payload\" | DEVRITES_CODEX_GENERIC_AGENT_COMPAT=1 devrites-engine hook wright-scope --harness=codex; rc=$?; case \"$rc\" in 0) exit 0 ;; 2) exit 2 ;; *) printf '%s\\n' 'DevRites: generic Codex wright guard unavailable or crashed; install or repair devrites-engine. (devrites-codex-generic-guard)' >&2; exit 2 ;; esac",
-            "statusMessage": "DevRites: checking generic wright boundary"
-          }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "matcher": "Bash|Shell|sh|exec_command|run_command",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook redwatch --harness=codex",
-            "statusMessage": "DevRites: checking test/build result"
-          }
-        ]
-      },
-      {
-        "matcher": "Bash|Shell|sh|exec_command|run_command|Edit|Write|MultiEdit|NotebookEdit|apply_patch|exec|js|python|computer|computer_use|write_stdin|run_code|Agent|Task|spawn_agent|delegate|dispatch_agent|create_agent|wait|wait_agent",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook agent-dispatch --harness=codex",
-            "statusMessage": "DevRites: retaining the pre-writer canonical boundary"
-          }
-        ]
-      }
-    ],
-    "PreCompact": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook handoff-snapshot",
-            "statusMessage": "DevRites: snapshotting active handoff"
-          }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook agent-dispatch --harness=codex",
-            "statusMessage": "DevRites: checking agent completion receipt"
-          }
-        ]
-      },
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook stop-gate --harness=codex",
-            "statusMessage": "DevRites: checking workspace stop gate"
-          }
-        ]
-      },
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook refresh-indexes",
-            "statusMessage": "DevRites: refreshing code indexes"
-          }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook agent-dispatch --harness=codex"
-          },
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook cursor --harness=codex"
-          }
-        ]
-      }
-    ],
-    "SubagentStart": [
-      {
-        "matcher": "devrites-.*|explorer|worker",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook subagent-orient --harness=codex",
-            "statusMessage": "DevRites: injecting subagent discipline"
-          }
-        ]
-      },
-      {
-        "matcher": "devrites-slice-wright",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "printf '%s\\n' 'DevRites: this subagent is the single write-capable slice-wright. Stay within the current slice contract and touched-files.md; write no .devrites bookkeeping.'"
-          }
-        ]
-      },
-      {
-        "matcher": "devrites-(code|test|frontend|security|performance|devex|doubt|simplifier|strategy|plan|spec)-reviewer|devrites-retrospector|devrites-forge-judge",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "printf '%s\\n' 'DevRites: this subagent is read-only. Inspect with read/search/test commands and return findings only; do not mutate the tree.'"
-          }
-        ]
-      }
-    ],
-    "SubagentStop": [
-      {
-        "matcher": "devrites-.*|explorer|worker",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook agent-dispatch --harness=codex",
-            "statusMessage": "DevRites: recording subagent result"
-          },
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook event subagent-stop"
-          }
-        ]
-      }
-    ],
-    "SessionStart": [
-      {
-        "matcher": "startup|resume|clear|compact",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v devrites-engine >/dev/null 2>&1 || exit 0; cd \"$(git rev-parse --show-toplevel 2>/dev/null || pwd)\" 2>/dev/null || exit 0; exec devrites-engine hook orient --harness=codex",
-            "statusMessage": "DevRites: loading project orientation"
-          }
-        ]
-      }
-    ]
-  }
-}
+# BEGIN DEVRITES CODEX PERMISSIONS
+default_permissions = "devrites-orchestrator"
+
+[permissions.devrites-orchestrator]
+description = "Workspace-capable orchestrator; source and test edits must be delegated to devrites-slice-wright."
+extends = ":workspace"
+# END DEVRITES CODEX PERMISSIONS
 EOF
 }

package/scripts/install-lib.sh

@@ -22,8 +22,8 @@ dr_abspath_dir() {
 }
 
 # ---- engine bootstrap ----------------------------------------------------
-# These helpers are deliberately limited to release/binary acquisition for the
-# shell shims. Install/update/uninstall policy lives in devrites-engine.
+# Shell shims own source and binary acquisition. The engine receives only local
+# source, payload, and a version-compatible binary handoff.
 dr_pkg_version() {
   _dr_source_dir="$1"
   sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$_dr_source_dir/package.json" 2>/dev/null | head -n1
@@ -31,45 +31,100 @@ dr_pkg_version() {
 
 dr_release_tag() {
   _dr_source_dir="$1"
-  if [ -n "${DEVRITES_REF:-}" ]; then
-    printf '%s\n' "$DEVRITES_REF"
-    return 0
+  if [ -n "${DEVRITES_REF:-}" ]; then _dr_version="${DEVRITES_REF#v}"; else _dr_version="$(dr_pkg_version "$_dr_source_dir")"; fi
+  printf '%s\n' "$_dr_version" | LC_ALL=C grep -Eq '^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$' || return 1
+  _dr_pre="${_dr_version%%+*}"
+  case "$_dr_pre" in *-*) _dr_pre="${_dr_pre#*-}" ;; *) _dr_pre="" ;; esac
+  if [ -n "$_dr_pre" ]; then
+    printf '%s\n' "$_dr_pre" | awk -F. '{ for (i=1;i<=NF;i++) if ($i ~ /^[0-9]+$/ && length($i)>1 && substr($i,1,1)=="0") exit 1 }' || return 1
   fi
-  _dr_version="$(dr_pkg_version "$_dr_source_dir")"
-  [ -n "$_dr_version" ] && printf 'v%s\n' "${_dr_version#v}"
+  printf 'v%s\n' "$_dr_version"
+}
+
+dr_valid_repo() {
+  printf '%s\n' "$1" | LC_ALL=C grep -Eq '^[A-Za-z0-9][A-Za-z0-9_.-]*/[A-Za-z0-9][A-Za-z0-9_.-]*$'
+}
+
+dr_bounded_download() {
+  _dr_url="$1"; _dr_out="$2"; _dr_limit="$3"
+  DR_DOWNLOAD_FAILURE=""
+  rm -f "$_dr_out" "$_dr_out.part"
+  curl -fL --proto '=https' --proto-redir '=https' --tlsv1.2 --connect-timeout 10 --max-time 120 \
+    "$_dr_url" 2>/dev/null | head -c "$((_dr_limit + 1))" > "$_dr_out.part"
+  _dr_pipeline_status=("${PIPESTATUS[@]}")
+  _dr_curl_status="${_dr_pipeline_status[0]}"
+  _dr_head_status="${_dr_pipeline_status[1]}"
+  _dr_bytes="$(wc -c < "$_dr_out.part" 2>/dev/null)" || {
+    DR_DOWNLOAD_FAILURE="local write"
+    rm -f "$_dr_out.part"
+    return 1
+  }
+  if [ "$_dr_bytes" -gt "$_dr_limit" ]; then
+    DR_DOWNLOAD_FAILURE="size limit"
+    rm -f "$_dr_out.part"
+    return 1
+  fi
+  if [ "$_dr_head_status" -ne 0 ]; then
+    DR_DOWNLOAD_FAILURE="local write"
+    rm -f "$_dr_out.part"
+    return 1
+  fi
+  if [ "$_dr_curl_status" -ne 0 ]; then
+    case "$_dr_curl_status" in
+      22) DR_DOWNLOAD_FAILURE="HTTP status" ;;
+      28) DR_DOWNLOAD_FAILURE="timeout" ;;
+      47) DR_DOWNLOAD_FAILURE="redirect" ;;
+      *) DR_DOWNLOAD_FAILURE="download" ;;
+    esac
+    rm -f "$_dr_out.part"
+    return 1
+  fi
+  mv "$_dr_out.part" "$_dr_out" || { DR_DOWNLOAD_FAILURE="local write"; rm -f "$_dr_out.part"; return 1; }
+}
+
+dr_verify_checksum() {
+  _dr_file="$1"; _dr_sidecar="$2"; _dr_asset="$3"
+  _dr_want="$(awk -v asset="$_dr_asset" '
+    NF == 0 { next }
+    { records++ }
+    NF == 2 && length($1) == 64 && $1 ~ /^[0-9A-Fa-f]+$/ && $2 == asset { valid++; hash=tolower($1) }
+    END { if (records == 1 && valid == 1) print hash; else exit 1 }
+  ' "$_dr_sidecar" 2>/dev/null)" || return 1
+  if command -v shasum >/dev/null 2>&1; then
+    _dr_got="$(shasum -a 256 "$_dr_file" | awk '{print $1}')"
+  elif command -v sha256sum >/dev/null 2>&1; then
+    _dr_got="$(sha256sum "$_dr_file" | awk '{print $1}')"
+  else
+    return 1
+  fi
+  [ "$_dr_got" = "$_dr_want" ]
 }
 
 dr_download_engine() {
   _dr_source_dir="$1"
   _dr_repo="$2"
   _dr_out="$3"
+  dr_valid_repo "$_dr_repo" || { DR_ACQUIRE_FAILURE="repository name validation failed"; rm -f "$_dr_out" "$_dr_out.sha256"; return 1; }
   _dr_tag="$(dr_release_tag "$_dr_source_dir")"
-  [ -n "$_dr_tag" ] || return 1
+  [ -n "$_dr_tag" ] || { DR_ACQUIRE_FAILURE="release tag validation failed"; rm -f "$_dr_out" "$_dr_out.sha256"; return 1; }
   _dr_os="$(uname -s 2>/dev/null | tr '[:upper:]' '[:lower:]')"
   _dr_arch="$(uname -m 2>/dev/null)"
   case "$_dr_arch" in
     x86_64|amd64) _dr_arch=amd64 ;;
     arm64|aarch64) _dr_arch=arm64 ;;
-    *) return 1 ;;
+    *) DR_ACQUIRE_FAILURE="release $_dr_tag has no asset for architecture $_dr_arch"; return 1 ;;
   esac
   case "$_dr_os" in
     linux|darwin) : ;;
-    *) return 1 ;;
+    *) DR_ACQUIRE_FAILURE="release $_dr_tag has no asset for operating system $_dr_os"; return 1 ;;
   esac
 
-  _dr_url="https://github.com/$_dr_repo/releases/download/$_dr_tag/devrites-$_dr_os-$_dr_arch"
-  curl -fsSL -o "$_dr_out" "$_dr_url" 2>/dev/null || return 1
-  curl -fsSL -o "$_dr_out.sha256" "$_dr_url.sha256" 2>/dev/null || return 1
-  _dr_want="$(awk '{print $1; exit}' "$_dr_out.sha256" 2>/dev/null)"
-  if command -v shasum >/dev/null 2>&1; then
-    _dr_got="$(shasum -a 256 "$_dr_out" | awk '{print $1}')"
-  elif command -v sha256sum >/dev/null 2>&1; then
-    _dr_got="$(sha256sum "$_dr_out" | awk '{print $1}')"
-  else
-    _dr_got=""
-  fi
-  [ -n "$_dr_got" ] && [ "$_dr_got" = "$_dr_want" ] || return 1
-  chmod +x "$_dr_out" 2>/dev/null || true
+  _dr_asset="devrites-$_dr_os-$_dr_arch"
+  _dr_url="https://github.com/$_dr_repo/releases/download/$_dr_tag/$_dr_asset"
+  dr_bounded_download "$_dr_url" "$_dr_out" 67108864 || { DR_ACQUIRE_FAILURE="release $_dr_tag asset $_dr_asset: ${DR_DOWNLOAD_FAILURE:-download} failed"; return 1; }
+  dr_bounded_download "$_dr_url.sha256" "$_dr_out.sha256" 4096 || { DR_ACQUIRE_FAILURE="release $_dr_tag asset $_dr_asset.sha256: ${DR_DOWNLOAD_FAILURE:-download} failed"; rm -f "$_dr_out"; return 1; }
+  dr_verify_checksum "$_dr_out" "$_dr_out.sha256" "$_dr_asset" || { DR_ACQUIRE_FAILURE="release $_dr_tag asset $_dr_asset: checksum failed"; rm -f "$_dr_out" "$_dr_out.sha256"; return 1; }
+  chmod +x "$_dr_out" || { DR_ACQUIRE_FAILURE="release $_dr_tag asset $_dr_asset: executable preparation failed"; rm -f "$_dr_out" "$_dr_out.sha256"; return 1; }
 }
 
 dr_build_engine() {
@@ -89,13 +144,32 @@ dr_engine_supports() {
   "$_dr_engine" "$_dr_subcommand" --help >/dev/null 2>&1
 }
 
+dr_engine_compatible() {
+  _dr_engine="$1"
+  _dr_source_dir="$2"
+  _dr_subcommand="$3"
+  dr_engine_supports "$_dr_engine" "$_dr_subcommand" || return 1
+  case "$_dr_subcommand" in
+    install|update)
+      _dr_want="$(dr_release_tag "$_dr_source_dir")"
+      [ -n "$_dr_want" ] || return 1
+      _dr_got="$("$_dr_engine" version 2>/dev/null)"
+      [ "${_dr_got#v}" = "${_dr_want#v}" ] || return 1
+      ;;
+  esac
+  return 0
+}
+
 dr_acquire_engine() {
   _dr_source_dir="$1"
   _dr_subcommand="$2"
   _dr_repo="$3"
 
+  DR_ENGINE_PATH=""
+  DR_ENGINE_TMP=""
+  DR_ACQUIRE_FAILURE=""
   if [ -n "${DEVRITES_ENGINE_CLI:-}" ] && [ -x "$DEVRITES_ENGINE_CLI" ]; then
-    dr_engine_supports "$DEVRITES_ENGINE_CLI" "$_dr_subcommand" && { printf '%s\n' "$DEVRITES_ENGINE_CLI"; return 0; }
+    dr_engine_compatible "$DEVRITES_ENGINE_CLI" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$DEVRITES_ENGINE_CLI"; return 0; }
   fi
 
   case "$_dr_subcommand" in
@@ -105,28 +179,41 @@ dr_acquire_engine() {
 
   if [ "$_dr_prefer_fresh" -eq 0 ] && command -v devrites-engine >/dev/null 2>&1; then
     _dr_path="$(command -v devrites-engine)"
-    dr_engine_supports "$_dr_path" "$_dr_subcommand" && { printf '%s\n' "$_dr_path"; return 0; }
-  fi
-
-  _dr_tmp="${TMPDIR:-/tmp}/devrites-engine-bootstrap.$$"
-  mkdir -p "$_dr_tmp"
-  if dr_build_engine "$_dr_source_dir" "$_dr_tmp/devrites-engine"; then
-    dr_engine_supports "$_dr_tmp/devrites-engine" "$_dr_subcommand" && { printf '%s\n' "$_dr_tmp/devrites-engine"; return 0; }
+    dr_engine_compatible "$_dr_path" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$_dr_path"; return 0; }
   fi
 
+  _dr_old_umask="$(umask)"
+  umask 077
+  DR_ENGINE_TMP="$(mktemp -d "${TMPDIR:-/tmp}/devrites-engine-bootstrap.XXXXXX" 2>/dev/null)" || {
+    umask "$_dr_old_umask"
+    DR_ENGINE_TMP=""
+    return 1
+  }
+  umask "$_dr_old_umask"
   if command -v curl >/dev/null 2>&1; then
-    if dr_download_engine "$_dr_source_dir" "$_dr_repo" "$_dr_tmp/devrites-engine"; then
-      dr_engine_supports "$_dr_tmp/devrites-engine" "$_dr_subcommand" && { printf '%s\n' "$_dr_tmp/devrites-engine"; return 0; }
+    if dr_download_engine "$_dr_source_dir" "$_dr_repo" "$DR_ENGINE_TMP/devrites-engine"; then
+      dr_engine_compatible "$DR_ENGINE_TMP/devrites-engine" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$DR_ENGINE_TMP/devrites-engine"; return 0; }
     fi
   fi
 
+  if dr_build_engine "$_dr_source_dir" "$DR_ENGINE_TMP/devrites-engine"; then
+    dr_engine_compatible "$DR_ENGINE_TMP/devrites-engine" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$DR_ENGINE_TMP/devrites-engine"; return 0; }
+  fi
+
   if [ "$_dr_prefer_fresh" -eq 1 ] && command -v devrites-engine >/dev/null 2>&1; then
     _dr_path="$(command -v devrites-engine)"
-    dr_engine_supports "$_dr_path" "$_dr_subcommand" && { printf '%s\n' "$_dr_path"; return 0; }
+    dr_engine_compatible "$_dr_path" "$_dr_source_dir" "$_dr_subcommand" && { rm -rf "$DR_ENGINE_TMP"; DR_ENGINE_TMP=""; DR_ENGINE_PATH="$_dr_path"; return 0; }
   fi
 
+  rm -rf "$DR_ENGINE_TMP"
+  DR_ENGINE_TMP=""
   return 1
 }
+
+dr_cleanup_engine() {
+  [ -z "${DR_ENGINE_TMP:-}" ] || rm -rf "$DR_ENGINE_TMP"
+  DR_ENGINE_TMP=""
+}
 # ---- manifest ------------------------------------------------------------
 # Manifest = newline list of target-relative paths. Pin aliases append to the
 # engine-owned manifest so the standard uninstaller can remove them.

package/uninstall.sh

@@ -2,7 +2,11 @@
 # uninstall.sh - bootstrap shim for the engine-owned DevRites uninstaller.
 set -u
 
-SELF_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" 2>/dev/null && pwd -P)" || SELF_DIR=""
+SELF_DIR=""
+SCRIPT_SOURCE="${BASH_SOURCE[0]:-}"
+if [ -n "$SCRIPT_SOURCE" ] && [ -f "$SCRIPT_SOURCE" ]; then
+  SELF_DIR="$(cd "$(dirname "$SCRIPT_SOURCE")" 2>/dev/null && pwd -P)" || SELF_DIR=""
+fi
 DEVRITES_REPO="${DEVRITES_REPO:-ViktorsBaikers/DevRites}"
 DEVRITES_REF="${DEVRITES_REF:-}"
 
@@ -11,26 +15,24 @@ if [ -z "$SELF_DIR" ] || [ ! -d "$SELF_DIR/pack" ]; then
     echo "error: bootstrap re-exec did not find pack/ - aborting." >&2
     exit 1
   fi
-  command -v curl >/dev/null 2>&1 || { echo "error: curl is required for the network uninstaller." >&2; exit 1; }
-  if [ -n "$DEVRITES_REF" ]; then
-    ref="$DEVRITES_REF"
-  else
-    ref="$(curl -fsSL "https://api.github.com/repos/$DEVRITES_REPO/releases/latest" 2>/dev/null | sed -n 's/.*"tag_name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n1)"
-  fi
-  ref="${ref:-main}"
-  url="https://raw.githubusercontent.com/$DEVRITES_REPO/$ref/install.sh"
-  tmp="$(mktemp 2>/dev/null || echo "${TMPDIR:-/tmp}/devrites-install.$$")"
-  curl -fsSL -o "$tmp" "$url" || { echo "error: could not download DevRites bootstrap from $url" >&2; rm -f "$tmp"; exit 1; }
-  bash "$tmp" uninstall "$@"
-  rc="$?"
-  rm -f "$tmp"
-  exit "$rc"
+  [ -n "$SELF_DIR" ] && [ -f "$SELF_DIR/install.sh" ] || {
+    echo "error: uninstall requires the canonical install bootstrap; run the documented curl command for install.sh." >&2
+    exit 1
+  }
+  bash "$SELF_DIR/install.sh" uninstall "$@"
+  exit "$?"
 fi
 
 INSTALL_LIB="$SELF_DIR/scripts/install-lib.sh"
 [ -f "$INSTALL_LIB" ] || { echo "error: extracted bundle is missing scripts/install-lib.sh" >&2; exit 1; }
 . "$INSTALL_LIB"
 
-ENGINE="$(dr_acquire_engine "$SELF_DIR" uninstall "$DEVRITES_REPO")" || { echo "error: could not acquire devrites-engine." >&2; exit 1; }
+DR_ENGINE_PATH=""; DR_ENGINE_TMP=""
+trap dr_cleanup_engine EXIT
+trap 'exit 1' HUP INT TERM
+dr_acquire_engine "$SELF_DIR" uninstall "$DEVRITES_REPO" || { echo "error: could not acquire devrites-engine${DR_ACQUIRE_FAILURE:+ ($DR_ACQUIRE_FAILURE)}." >&2; exit 1; }
+ENGINE="$DR_ENGINE_PATH"
 export DEVRITES_ENGINE_CLI="$ENGINE"
-exec "$ENGINE" uninstall --source-dir "$SELF_DIR" "$@"
+"$ENGINE" uninstall --source-dir "$SELF_DIR" "$@"
+rc="$?"
+exit "$rc"