docks-kit 0.10.2 → 0.11.0

package/AGENTS.md

@@ -20,9 +20,9 @@ launcher can fall back to Bun source.
 | Path | Purpose |
 |------|---------|
 | `docks-kit` | CLI launcher: on supported hosts, runs the platform binary in `cli/dist/` only when its `--version` matches `package.json`, otherwise Bun-from-source (auto-installs Bun + `node_modules`). Unsupported hosts fail before source fallback. No-Bun recovery is the standalone platform release binary |
-| `cli/src/engine-native/` | EngineNative implementation for `sync`, `model`, `workflow`, and `toolchain`; idempotent, flag-gated for destructive reconciliation |
+| `cli/src/engine-native/` | EngineNative implementation for `sync`, `model`, and `toolchain`; idempotent, flag-gated for destructive reconciliation |
 | `cli/` | Effect-TS CLI + bundled docs topics |
-| `SoT/models.json` | Kit-verified model catalog plus the strict Docks workflow-role registry |
+| `SoT/models.json` | Kit-verified Claude and Codex model catalog |
 | `SoT/toolchain.json` | Toolchain floors manifest (verified pins consumed by EngineNative) |
 | `SoT/.claude/bin/` | Dependency-free Bun runtime programs for Claude's statusline, SessionStart, and Notification |
 | `install.sh` | Global installer |
@@ -42,8 +42,6 @@ Codex SoT notes:
 - `SoT/.codex/plugins/marketplace.json` deploys to Codex's personal marketplace path at `~/.agents/plugins/marketplace.json`; when the `codex` CLI is available, sync reruns `codex plugin add <plugin@marketplace>` for enabled SoT plugins so stale cached installs are refreshed.
 - `docks-kit status` verifies Session Relay only through the supported `codex plugin list --json` inventory. `ready` means installed and enabled for a newly started Codex session; it is not evidence about an old process, lifecycle state, receive-path health, or worker quiescence. The global prompt SoTs carry the owner's standing authorization for Docks cross-company plan review, which never overrides host or platform denial.
 - Claude and Codex sync call `sessionRelayCli.ts ensureSessionRelayCli` immediately before their plugin passes. It installs the exact source-pinned precompiled command at `~/.local/bin/session-relay` for Linux/macOS x64/arm64 only, requires committed digest = same-release `SHA256SUMS` row = downloaded bytes, smoke-tests the staged version, and atomically replaces the stable path. `agents`-only sync never enters this boundary. The four pinned production digests correspond to the stable `session-relay--v0.12.0` assets and its `SHA256SUMS`.
-- Both global prompt SoTs carry one byte-identical compact `Docks-workflow-models:` record. Root `--model-orchestrator` / `--model-reviewer` / `--model-implementer` / review-bound flags update only that deployed record; `docks-kit models workflow` lists the closed selectors, and a flag-less sync restores defaults.
-- Codex workflow selectors use the closed `<tool>:<model>@<effort>[+fast]` routing grammar. Fast is intentionally absent from the global SoT: no suffix means Standard and keeps the backward-compatible schema-1 record; `+fast` emits a schema-2 candidate with `service_tier: "fast"`. Docks and Session Relay consumers must explicitly launch unsuffixed Codex roles with the default service tier so a user's global Fast preference cannot leak into workflows.
 - The `codex` CLI binary is upstream-owned, not kit-owned. The official standalone installer keeps package metadata under `$CODEX_HOME/packages/standalone` and places the `codex` symlink in `~/.local/bin` by default; sync only warns with a download-then-run installer command when the CLI is missing. Existing installs can self-update with `codex update`; npm and Homebrew remain upstream alternatives.
 - Neither global prompt SoT imports `@RTK.md`; Claude uses the hook-backed RTK integration, while Codex has no kit-managed RTK integration.
 - Claude runtime settings are an authoring template with sentinels. `claudeRuntime.ts` materializes absolute Bun/script paths only after the shared `bun.ts` bootstrap is ready; `claudeSync.ts` writes all runtime assets before atomically committing settings, then prunes the legacy shell scripts and Stop hook. Native `rate_limits` is the sole quota source, so jq/curl/OAuth caches are not runtime dependencies. A missing Bun defers only this cutover and preserves legacy pointers/files.
@@ -93,9 +91,9 @@ When a kit-mechanic skill, its `references/`, or a wrapper agent (`.claude/agent
 
 ## Plans
 
-Multi-commit plans live in `docs/plans/active/`; lifecycle is a frontmatter field. `docs/plans/finished/` is the terminal archive. Every plan is a complete cold handoff. `plan-workspace` owns bootstrap/migrate/audit/explicit refresh, `plan-creator` owns creation of one nonexistent plan, `plan-manager` owns every existing-plan and lifecycle operation, `plan-reviewer` returns sealed-bundle evidence only, and `plan-repairer` returns one exact accepted-blocker patch or `cannot_repair`. Historical `plan-improver` is not a live skill; `plan-manager` alone validates, applies, and persists the repairer result. `active/` is multi-occupancy.
+Canonical plans live in `docs/plans/active/`; status is frontmatter and `docs/plans/finished/` is terminal. Exactly three skills are live: `plan-workspace` maintains the workspace; main-context `plan-manager` classifies, drafts, reviews, repairs once, executes, verifies, and archives; internal `plan-reviewer` returns read-only `PlanReviewV1` evidence from one immutable bundle. Only the reviewer has Claude/Codex wrappers.
 
-The complete schema-6 contract lives in `docs/plans/AGENTS.md`; schemas 1–5 are historical validation-only. `docs/plans/CLAUDE.md` contains only `@AGENTS.md`. Optional project-local dispatch wrappers exist only for `plan-manager` and `plan-reviewer`; the five skills remain canonical.
+Current plans carry one compact-JCS `Plan-run: PlanRunV1` record. Schemas 1–6 are historical validation/quarantine only and never authorize current dispatch or external effects. Persisted requested effects are intent, not authority; any probe, production access, publish, push, release, or deploy requires matching live authority from the exact current-user request. The full contract lives in `docs/plans/AGENTS.md`.
 
 Distinct from per-tool **Open Concerns** sections (wait-on-upstream
 blockers tied to a vendor shipping a fix — these live inside the per-tool

package/README.md

@@ -43,7 +43,7 @@ RTK/Bun download boundaries, not as a global sync prerequisite.
 docks-kit sync [claude] [codex] [agents]   deploy the SoT (default: all three)
 docks-kit update [--no-sync]               self-update the kit (autodetects checkout vs global install), then sync
 docks-kit model <claude|codex> [value]     get/set the DEPLOYED model (TTY picker)
-docks-kit models [claude|codex|workflow]   model and workflow-role catalogs (`--json`)
+docks-kit models [claude|codex]            model catalogs (`--json`)
 docks-kit toolchain [check|ensure <tool>]  verified-version floors for external tools
 docks-kit status [--json]                  deployed-vs-SoT drift + toolchain + counts
 docks-kit plugins list [--json]            enabledPlugins tri-state vs installed
@@ -76,23 +76,6 @@ golden-regression coverage for dry-run output, mutation snapshots, and argv logs
 and a later flag-less sync reverts them. Full reference: `docks-kit docs flags`
 (includes the old→new rename table for the pre-CLI `sync.sh` flags).
 
-### Docks workflow roles (root flags)
-
-| Flag | Effect |
-|------|--------|
-| `--model-orchestrator=<selector>` | Override the Docks orchestrator candidate/profile |
-| `--model-reviewer=<selector>` | Override the Docks reviewer candidate/profile |
-| `--model-implementer=<selector>` | Override the Docks implementer candidate/profile |
-| `--review-min-score=<0..100>` | Override the completion-review target |
-| `--review-max-rounds=<1..10>` | Bound completion-review batches |
-
-Selectors are strict `profile:<name>` or `<tool>:<model>@<effort>[+fast]`
-values from `docks-kit models workflow`; `+fast` is Codex-only. A selector
-without `+fast` means Standard, while `+fast` writes a schema-2 candidate with
-`service_tier: "fast"`. These root flags update only the identical compact record
-in `~/.claude/CLAUDE.md` and `~/.codex/AGENTS.md`; omitted fields retain their
-current valid values, while a later flag-less sync restores all defaults.
-
 ## How syncing works
 
 - **Additive by default** — user-only settings keys, plugins, and skills
@@ -112,7 +95,7 @@ current valid values, while a later flag-less sync restores all defaults.
   command. The four production digests are pinned for the stable
   `session-relay--v0.12.0` assets and match the same-release `SHA256SUMS`.
 - **Model catalog** — `SoT/models.json` is the research-verified source for
-  model validation, listings, pickers, and the Docks workflow-role registry.
+  model validation, listings, and pickers.
 - **Claude runtime** — sync materializes three dependency-free Bun `.mjs`
   programs for statusline, SessionStart, and Notification. Quota display uses
   Claude's native `rate_limits`; there is no OAuth fetch, shared usage cache,
@@ -126,7 +109,7 @@ current valid values, while a later flag-less sync restores all defaults.
 | `SoT/.claude/` | Claude Code SoT (settings template, Bun runtime programs, CLAUDE.md) |
 | `SoT/.codex/` | Codex SoT (config.toml, rules, AGENTS.md, marketplace) |
 | `SoT/.agents/` | Universal-skill manifest |
-| `SoT/models.json` | Kit-verified model and Docks workflow-role catalog |
+| `SoT/models.json` | Kit-verified Claude and Codex model catalog |
 | `SoT/toolchain.json` | Verified-version floors |
 | `cli/src/engine-native/` | EngineNative sync/model/toolchain implementation |
 | `cli/src/generated/sotPayload.ts` | Generated in-memory payload used by standalone and npm installs |

package/cli/docs/flags.md

@@ -40,26 +40,6 @@ Bare model, effort, or advisor modifiers print the relevant valid-value catalog
 and exit 2. A modifier for a target not selected by the positional arguments is
 ignored with a warning; Claude modifiers never touch Codex config and vice versa.
 
-## Docks workflow root flags
-
-These flags belong at the root (`docks-kit --model-reviewer=...`), not after
-`sync`. They update only the shared deployed workflow record.
-
-| Flag | Accepted value |
-|------|----------------|
-| `--model-orchestrator=<selector>` | `profile:<name>` or `<tool>:<model>@<effort>[+fast]` |
-| `--model-reviewer=<selector>` | same strict selector grammar |
-| `--model-implementer=<selector>` | same strict selector grammar |
-| `--review-min-score=<n>` | base-10 integer `0..100` |
-| `--review-max-rounds=<n>` | base-10 integer `1..10` |
-
-Use `docks-kit models workflow [--json]` for the closed registry. Bare, empty,
-unknown, or malformed values print that helper and exit 2 before either prompt
-file changes. `+fast` is accepted only on Codex exact targets and writes
-`service_tier: "fast"` in workflow record schema 2. Without `+fast`, the role is
-Standard and the record remains schema 1 unless another role is Fast. Shell
-quotes are optional but recommended around selectors containing `+fast`.
-
 ## Renamed legacy flags (pre-CLI sync.sh)
 
 Old flags exit with a rename hint — there is no compat behavior.

package/cli/docs/models.md

@@ -31,35 +31,8 @@ docks-kit models claude --json    # machine-readable
 docks-kit model claude            # current deployed + SoT + picker (TTY)
 docks-kit model claude opus       # per-machine override from the Fable SoT
 docks-kit sync claude --claude-model=opus   # same, as part of a sync
-docks-kit models workflow             # Docks workflow profiles and defaults
-docks-kit models workflow --json      # closed machine-readable registry
 ```
 
-## Docks workflow-role registry
-
-The `workflow` section is strict even though ordinary tool-model modifiers are
-forward-compatible. It accepts only known `profile:<name>` values or exact
-`<tool>:<model>@<effort>[+fast]` targets whose model and effort both appear in
-the catalog. `+fast` is accepted only for Codex exact targets. The defaults are:
-
-- orchestrator: `profile:claude-best`, ordered as `claude:fable@high` then
-  `claude:opus@xhigh`;
-- reviewer and implementer: `codex:gpt-5.6-sol@high`;
-- review minimum score 90 and maximum 3 rounds.
-
-`claude:best@high` is Claude's native one-model alias. It is deliberately not
-the same as the Docks-managed `profile:claude-best` candidate chain.
-Availability is `checked_when_used`: Docks classifies each launch attempt;
-docks-kit neither probes providers nor promises provider-wide fallback.
-
-The default and every unsuffixed selector emit the backward-compatible schema-1
-record with no service-tier field; absence means Standard. A `+fast` selector
-promotes the complete record to schema 2 and adds `service_tier: "fast"` only to
-the selected Codex candidate. Replacing the last Fast selector with an
-unsuffixed selector demotes the record back to schema 1. Docks and Session Relay
-must support schema 2 before `+fast` is deployed, and must explicitly select the
-default tier for unsuffixed roles so global Codex configuration cannot leak in.
-
 ## Advisor pairing note (Claude)
 
 The SoT ships `model: fable` with advisor off (`advisorModel` unset).

package/cli/docs/modifiers.md

@@ -33,13 +33,6 @@ owns that key for the run: `on` writes `fable`; `off` and `default` delete it.
 Codex has no advisor modifier because its documented config has no advisor
 setting; `review_model` applies only to `/review`.
 
-Codex Fast mode is intentionally not a global SoT default or per-machine
-modifier. It is role-scoped through the root workflow flags: append `+fast` to a
-Codex exact selector to emit `service_tier: "fast"` in record schema 2. Without
-the suffix, the role means Standard and emits no tier field. Docks and Session
-Relay consumers must map that absence to an explicit default-tier process
-override rather than inherit a user's global Fast preference.
-
 ## Standalone get/set (no full sync)
 
 ```
@@ -52,32 +45,6 @@ docks-kit model codex gpt-5.5     # codex flavor
 The set path calls the same engine functions as the sync flags —
 one implementation, two entry points.
 
-## Workflow-role overrides (root, no full sync)
-
-The root workflow flags are deployed modifiers for Docks rather than one tool:
-
-```text
-docks-kit --model-orchestrator=profile:claude-best \
-  --model-reviewer="codex:gpt-5.6-sol@high+fast" \
-  --model-implementer=codex:gpt-5.6-sol@high \
-  --review-min-score=80 --review-max-rounds=5
-```
-
-They atomically write one byte-identical complete record to
-`~/.claude/CLAUDE.md` and `~/.codex/AGENTS.md`. Omitted fields retain the
-current valid record; a missing side is repaired. Invalid or conflicting state
-stops before mutation, a repeated request is a no-op, and failure on the second
-atomic write restores both snapshots. A later flag-less sync restores the
-embedded defaults. Start fresh sessions after changing the record.
-
-Selectors are strict `profile:<name>` or `<tool>:<model>@<effort>[+fast]`
-entries from `docks-kit models workflow`. `+fast` is Codex-only and quotes are
-optional; its absence means Standard. `profile:claude-best` is the ordered Docks
-Fable-high then Opus-xhigh chain; `claude:best@high` is instead Claude's native
-single-model alias. Docks checks each candidate when used—there is no docks-kit
-provider preflight. Install schema-2 support in Docks and Session Relay before
-using a Fast selector.
-
 ## Sticky opt-ins are NOT modifiers
 
 `--claude-plugin=<name>` installs+enables an optional plugin and it STAYS

package/cli/src/commands/models.ts

@@ -2,10 +2,9 @@ import { Args, Command, Options } from "@effect/cli"
 import { Console, Effect, Option } from "effect"
 import { bail } from "../engine"
 import { modelCatalog, type Tool } from "../manifests"
-import { workflowCatalog, workflowRegistryJson } from "../workflowModels"
 
 const tool = Args.text({ name: "tool" }).pipe(
-  Args.withDescription("claude | codex | workflow (omit for both tool catalogs)"),
+  Args.withDescription("claude | codex (omit for both tool catalogs)"),
   Args.optional
 )
 const json = Options.boolean("json").pipe(
@@ -25,11 +24,8 @@ const renderTool = (t: Tool) =>
 export const modelsCommand = Command.make("models", { tool, json }, (config) =>
   Effect.gen(function* () {
     const requested = Option.getOrUndefined(config.tool)
-    if (requested === "workflow") {
-      return yield* Console.log(config.json ? workflowRegistryJson() : workflowCatalog())
-    }
     if (requested !== undefined && requested !== "claude" && requested !== "codex") {
-      return yield* bail(`Unknown tool '${requested}' (valid: claude, codex, workflow)`)
+      return yield* bail(`Unknown tool '${requested}' (valid: claude, codex)`)
     }
     const tools: Array<Tool> = requested !== undefined ? [requested as Tool] : ["claude", "codex"]
 
@@ -46,5 +42,5 @@ export const modelsCommand = Command.make("models", { tool, json }, (config) =>
     )
   })
 ).pipe(
-  Command.withDescription("List kit-verified tool models or the Docks workflow role registry (SoT/models.json).")
+  Command.withDescription("List kit-verified Claude and Codex models (SoT/models.json).")
 )

package/cli/src/engine-native/claudeSync.ts

@@ -31,7 +31,6 @@ import { ExitError } from "./parseArgs"
 import { mergeSettings, reconcileSettings } from "./settings"
 import { ensure, field } from "./toolchain"
 import { payloadBytes, payloadDisplayPath, payloadText } from "../payload"
-import { renderDefaultWorkflowInstructions } from "./workflowDeploy"
 import { ensureSessionRelayCli } from "./sessionRelayCli"
 
 export type ClaudeRuntimeState =
@@ -207,7 +206,7 @@ function syncClaudeMd(ctx: Ctx, claudeDir: string): void {
     return
   }
 
-  const source = renderDefaultWorkflowInstructions(payloadText("SoT/.claude/CLAUDE.md"))
+  const source = payloadText("SoT/.claude/CLAUDE.md")
   if (writeTextIfChanged(p(claudeDir, "CLAUDE.md"), source)) {
     change("CLAUDE.md synced")
   } else {

package/cli/src/engine-native/codexSync.ts

@@ -12,7 +12,6 @@ import type { Ctx } from "./index"
 import { compareCodepoints, isObject, jqStringify, parseJson, type Json } from "./jq"
 import { sessionRelayReadiness } from "./sessionRelayReadiness"
 import { payloadBytes, payloadDisplayPath, payloadPaths, payloadText, type PayloadPath } from "../payload"
-import { renderDefaultWorkflowInstructions } from "./workflowDeploy"
 import { ensureSessionRelayCli } from "./sessionRelayCli"
 
 export function codexSync(ctx: Ctx): void {
@@ -26,7 +25,7 @@ export function codexSync(ctx: Ctx): void {
   syncCodexModel(ctx, ctx.codexModel)
   syncCodexEffort(ctx, ctx.codexEffort)
   syncRules(ctx, payloadPaths("SoT/.codex/rules/"), p(codexDir, "rules"))
-  syncAgentsMd(ctx, renderDefaultWorkflowInstructions(payloadText("SoT/.codex/AGENTS.md")), p(codexDir, "AGENTS.md"))
+  syncAgentsMd(ctx, payloadText("SoT/.codex/AGENTS.md"), p(codexDir, "AGENTS.md"))
   syncMarketplace(ctx, payloadText("SoT/.codex/plugins/marketplace.json"), p(ctx.agentsDir, "plugins", "marketplace.json"))
   removeLegacyDocksMarketplace(ctx, userConfig)
   ensureSessionRelayCli(ctx)

package/cli/src/engine-native/index.ts

@@ -15,8 +15,7 @@ import { claudeNextSteps, claudeSummary, claudeSync } from "./claudeSync"
 import { codexNextSteps, codexSummary, codexSync } from "./codexSync"
 import { skillsNextSteps, skillsSummary, skillsSync } from "./skillsSync"
 import { modeModel, modeToolchain } from "./modes"
-import { ExitError, parseArgs, parseWorkflowArgs, printWorkflowUsage, validateModifierFlags } from "./parseArgs"
-import { deployWorkflowOverrides } from "./workflowDeploy"
+import { ExitError, parseArgs, validateModifierFlags } from "./parseArgs"
 
 export type ModifierFlag =
   | "--claude-model"
@@ -127,18 +126,6 @@ function engineSync(ctx: Ctx, args: ReadonlyArray<string>): number {
   return 0
 }
 
-function engineWorkflow(ctx: Ctx, args: ReadonlyArray<string>): number {
-  try {
-    const overrides = parseWorkflowArgs(ctx, args)
-    deployWorkflowOverrides(ctx, overrides)
-    return 0
-  } catch (error) {
-    if (error instanceof ExitError) throw error
-    printWorkflowUsage(ctx)
-    ctx.services.logger.err(error instanceof Error ? error.message : String(error))
-    throw new ExitError(2)
-  }
-}
 
 export function runEngineNative(argv: ReadonlyArray<string>, services?: EngineServices): number {
   let ctx!: Ctx
@@ -165,8 +152,6 @@ export function runEngineNative(argv: ReadonlyArray<string>, services?: EngineSe
         return modeModel(ctx, argv.slice(1))
       case "toolchain":
         return modeToolchain(ctx, argv.slice(1))
-      case "workflow":
-        return engineWorkflow(ctx, argv.slice(1))
       case "sync":
         return engineSync(ctx, argv.slice(1))
       default:

package/cli/src/engine-native/parseArgs.ts

@@ -16,11 +16,6 @@ import {
   isEffortModifierValue
 } from "../efforts"
 import { printModels, validateClaudeModel, validateCodexModel } from "./models"
-import {
-  buildWorkflowRecord,
-  workflowCatalog,
-  type WorkflowOverrides
-} from "../workflowModels"
 
 export class ExitError extends Error {
   constructor(readonly code: number) {
@@ -268,64 +263,6 @@ function printCatalog(ctx: Ctx, catalog: string): void {
   for (const line of catalog.split("\n")) ctx.services.logger.echo(line)
 }
 
-const WORKFLOW_FLAGS = {
-  "--model-orchestrator": "orchestrator",
-  "--model-reviewer": "reviewer",
-  "--model-implementer": "implementer",
-  "--review-min-score": "minimumScore",
-  "--review-max-rounds": "maxRounds"
-} as const satisfies Readonly<Record<string, keyof WorkflowOverrides>>
-
-function workflowUsage(ctx: Ctx): void {
-  printCatalog(ctx, workflowCatalog())
-  ctx.services.logger.echo("")
-  ctx.services.logger.echo("Workflow override flags:")
-  ctx.services.logger.echo("  --model-orchestrator=<profile:name|tool:model@effort[+fast]>")
-  ctx.services.logger.echo("  --model-reviewer=<profile:name|tool:model@effort[+fast]>")
-  ctx.services.logger.echo("  --model-implementer=<profile:name|tool:model@effort[+fast]>")
-  ctx.services.logger.echo("  --review-min-score=<0..100>")
-  ctx.services.logger.echo("  --review-max-rounds=<1..10>")
-}
-
-export function parseWorkflowArgs(ctx: Ctx, args: ReadonlyArray<string>): WorkflowOverrides {
-  const overrides: Partial<Record<keyof WorkflowOverrides, string>> = {}
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index] ?? ""
-    if (arg === "-h" || arg === "--help") {
-      workflowUsage(ctx)
-      throw new ExitError(0)
-    }
-
-    const equals = arg.indexOf("=")
-    const flag = equals === -1 ? arg : arg.slice(0, equals)
-    const key = WORKFLOW_FLAGS[flag as keyof typeof WORKFLOW_FLAGS]
-    if (key === undefined) throw new Error(`Unknown workflow arg: ${arg}`)
-
-    let value: string
-    if (equals !== -1) {
-      value = arg.slice(equals + 1)
-    } else {
-      const next = args[index + 1]
-      if (next === undefined || next.startsWith("--")) {
-        throw new Error(`${flag} requires a value: ${flag}=<value>`)
-      }
-      value = next
-      index += 1
-    }
-    if (value === "") throw new Error(`${flag} requires a value: ${flag}=<value>`)
-    overrides[key] = value
-  }
-
-  if (Object.keys(overrides).length === 0) {
-    throw new Error("At least one workflow override flag is required")
-  }
-  buildWorkflowRecord(overrides)
-  return overrides
-}
-
-export function printWorkflowUsage(ctx: Ctx): void {
-  workflowUsage(ctx)
-}
 
 export function validateModifierFlags(ctx: Ctx): void {
   const { err, warn } = ctx.services.logger

package/cli/src/generated/sotPayload.ts

@@ -1,19 +1,19 @@
 // Generated by cli/scripts/generate-sot-payload.ts. DO NOT EDIT.
 // Edit SoT/, notification.mp3, or package.json, then run: bun cli/scripts/generate-sot-payload.ts
 
-export const GENERATED_PACKAGE_VERSION = "0.10.2"
+export const GENERATED_PACKAGE_VERSION = "0.11.0"
 
 export const GENERATED_PAYLOAD_TEXT = {
   "SoT/.agents/skills.txt": "# Universal AI-agent skill manifest intentionally empty.\n# Global skill discovery is opt-in: add one <owner>/<repo> slug per line.\n# EngineNative ignores comments and blank lines.\n",
-  "SoT/models.json": "{\n  \"$comment\": \"Kit-verified model catalog — single source for EngineNative validators, the docks-kit CLI (models/model commands, workflow selectors, pickers, bare-flag help), and docs. Entries are research-proofed: update an entry and its tool-level `verified` date when a model ships or retires. Deploy-time model flags remain permissive; workflow selectors are strict.\",\n  \"claude\": {\n    \"verified\": \"2026-07-22\",\n    \"models\": [\n      { \"id\": \"best\", \"kind\": \"alias\", \"note\": \"Fable 5 where the org has access, latest Opus otherwise (Claude Code >=2.1.170)\" },\n      { \"id\": \"opus\", \"kind\": \"alias\", \"note\": \"latest Opus (currently Opus 4.8)\" },\n      { \"id\": \"fable\", \"kind\": \"alias\", \"note\": \"Fable 5 — the kit SoT default; needs org access + Claude Code >=2.1.170\" },\n      { \"id\": \"sonnet\", \"kind\": \"alias\", \"note\": \"latest Sonnet (currently Sonnet 5)\" },\n      { \"id\": \"haiku\", \"kind\": \"alias\", \"note\": \"latest Haiku (currently Haiku 4.5)\" },\n      { \"id\": \"default\", \"kind\": \"alias\", \"note\": \"engine pseudo-value: deletes the deployed model key so the account default applies\" },\n      { \"id\": \"claude-fable-5\", \"kind\": \"id\", \"note\": \"Fable 5\" },\n      { \"id\": \"claude-opus-4-8\", \"kind\": \"id\", \"note\": \"Opus 4.8\" },\n      { \"id\": \"claude-sonnet-5\", \"kind\": \"id\", \"note\": \"Sonnet 5\" },\n      { \"id\": \"claude-haiku-4-5-20251001\", \"kind\": \"id\", \"note\": \"Haiku 4.5\" }\n    ]\n  },\n  \"codex\": {\n    \"verified\": \"2026-07-16\",\n    \"models\": [\n      { \"id\": \"gpt-5.6-sol\", \"kind\": \"id\", \"note\": \"GPT-5.6 Sol — frontier, recommended default; the kit SoT pin\" },\n      { \"id\": \"gpt-5.6-terra\", \"kind\": \"id\", \"note\": \"GPT-5.6 Terra — balanced tier\" },\n      { \"id\": \"gpt-5.6-luna\", \"kind\": \"id\", \"note\": \"GPT-5.6 Luna — fast/light tier\" },\n      { \"id\": \"gpt-5.5\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5.5-codex\", \"kind\": \"id\", \"note\": \"codex-tuned gpt-5.5\" },\n      { \"id\": \"gpt-5.1\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5-codex\", \"kind\": \"id\", \"note\": \"codex-tuned gpt-5\" }\n    ]\n  },\n  \"workflow\": {\n    \"schema\": 2,\n    \"profiles\": {\n      \"claude-best\": {\n        \"candidates\": [\n          { \"company\": \"anthropic\", \"tool\": \"claude\", \"model\": \"fable\", \"effort\": \"high\" },\n          { \"company\": \"anthropic\", \"tool\": \"claude\", \"model\": \"claude-opus-4-8\", \"effort\": \"xhigh\" }\n        ]\n      }\n    },\n    \"defaults\": {\n      \"orchestrator\": \"profile:claude-best\",\n      \"reviewer\": \"codex:gpt-5.6-sol@high\",\n      \"implementer\": \"codex:gpt-5.6-sol@high\",\n      \"review\": {\n        \"minimum_score\": 90,\n        \"max_rounds\": 3\n      }\n    },\n    \"exact_target_grammar\": \"<tool>:<model>@<effort>[+fast]\",\n    \"availability\": \"checked_when_used\"\n  }\n}\n",
+  "SoT/models.json": "{\n  \"$comment\": \"Kit-verified model catalog — single source for EngineNative validators, the docks-kit CLI (models/model commands, pickers, and bare-flag help), and docs. Entries are research-proofed: update an entry and its tool-level `verified` date when a model ships or retires. Deploy-time model flags remain permissive.\",\n  \"claude\": {\n    \"verified\": \"2026-07-22\",\n    \"models\": [\n      { \"id\": \"best\", \"kind\": \"alias\", \"note\": \"Fable 5 where the org has access, latest Opus otherwise (Claude Code >=2.1.170)\" },\n      { \"id\": \"opus\", \"kind\": \"alias\", \"note\": \"latest Opus (currently Opus 4.8)\" },\n      { \"id\": \"fable\", \"kind\": \"alias\", \"note\": \"Fable 5 — the kit SoT default; needs org access + Claude Code >=2.1.170\" },\n      { \"id\": \"sonnet\", \"kind\": \"alias\", \"note\": \"latest Sonnet (currently Sonnet 5)\" },\n      { \"id\": \"haiku\", \"kind\": \"alias\", \"note\": \"latest Haiku (currently Haiku 4.5)\" },\n      { \"id\": \"default\", \"kind\": \"alias\", \"note\": \"engine pseudo-value: deletes the deployed model key so the account default applies\" },\n      { \"id\": \"claude-fable-5\", \"kind\": \"id\", \"note\": \"Fable 5\" },\n      { \"id\": \"claude-opus-4-8\", \"kind\": \"id\", \"note\": \"Opus 4.8\" },\n      { \"id\": \"claude-sonnet-5\", \"kind\": \"id\", \"note\": \"Sonnet 5\" },\n      { \"id\": \"claude-haiku-4-5-20251001\", \"kind\": \"id\", \"note\": \"Haiku 4.5\" }\n    ]\n  },\n  \"codex\": {\n    \"verified\": \"2026-07-16\",\n    \"models\": [\n      { \"id\": \"gpt-5.6-sol\", \"kind\": \"id\", \"note\": \"GPT-5.6 Sol — frontier, recommended default; the kit SoT pin\" },\n      { \"id\": \"gpt-5.6-terra\", \"kind\": \"id\", \"note\": \"GPT-5.6 Terra — balanced tier\" },\n      { \"id\": \"gpt-5.6-luna\", \"kind\": \"id\", \"note\": \"GPT-5.6 Luna — fast/light tier\" },\n      { \"id\": \"gpt-5.5\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5.5-codex\", \"kind\": \"id\", \"note\": \"codex-tuned gpt-5.5\" },\n      { \"id\": \"gpt-5.1\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5\", \"kind\": \"id\", \"note\": \"previous generation\" },\n      { \"id\": \"gpt-5-codex\", \"kind\": \"id\", \"note\": \"codex-tuned gpt-5\" }\n    ]\n  }\n}\n",
   "SoT/toolchain.json": "{\n  \"$comment\": \"Kit toolchain manifest — DATA only (versions, floors, policy); check/install logic lives in cli/src/engine-native/toolchain.ts with per-surface sync callbacks in cli/src/engine-native/. kind: check (doctor visibility only) | managed (kit installs/upgrades it) | managed-release (dedicated source-pinned release installer) | pin (no binary probe — a version pin for a tool the kit invokes via npx). policy (managed only): track (upgrade toward latest, gated by `verified`) | present (install when missing, never upgrade); managed-release uses exact. `verified` = last kit-tested version — anything above it prompts before install (--yes auto-accepts; non-TTY declines and falls back to the pinned `verified` when pinnable). Supply-chain stance: every kit-driven install is pinned to `verified` or gated by it — never floating @latest (npm-worm/Shai-Hulud surface). Update `verified` after testing a new release.\",\n  \"tools\": {\n    \"jq\":     { \"kind\": \"check\", \"note\": \"optional operator CLI; EngineNative JSON and Claude runtime do not invoke it\" },\n    \"curl\":   { \"kind\": \"check\", \"note\": \"contextual POSIX installer transport for RTK/Bun bootstrap\" },\n    \"git\":    { \"kind\": \"check\", \"note\": \"plugin marketplaces (claude/codex clone them) + kit checkout updates\" },\n    \"node\":   { \"kind\": \"check\", \"note\": \"hosts npm globals (agent-browser, LSP servers)\" },\n    \"npm\":    { \"kind\": \"check\", \"note\": \"npm-global installer\" },\n    \"claude\": { \"kind\": \"check\", \"floor\": \"2.1.170\", \"note\": \"kit floor — `best` alias + Fable 5 need >=2.1.170 (mirrors settings minimumVersion)\" },\n    \"codex\":  { \"kind\": \"check\", \"note\": \"upstream-owned; standalone installer prints when missing\" },\n    \"ffplay\": { \"kind\": \"check\", \"note\": \"Notification hook sound (previously unchecked)\" },\n    \"bwrap\":  { \"kind\": \"check\", \"os\": \"linux\", \"note\": \"Codex Linux sandbox runtime\" },\n    \"intelephense\": { \"kind\": \"check\", \"verified\": \"1.18.5\", \"note\": \"php-lsp server binary; `verified` pins claude::sync_lsp_servers' npm install\" },\n    \"typescript-language-server\": { \"kind\": \"check\", \"verified\": \"5.3.0\", \"note\": \"typescript-lsp server binary; `verified` pins claude::sync_lsp_servers' npm install\" },\n    \"tsc\":    { \"kind\": \"check\", \"verified\": \"6.0.3\", \"note\": \"typescript-lsp dependency (npm package `typescript`); `verified` pins claude::sync_lsp_servers' npm install. Deliberately on the 6.x line: typescript-language-server embeds TypeScript's programmatic API, which TS7 (native) doesn't yet expose — the repo's own devDependency runs TS7 for tsc --noEmit\" },\n    \"rtk\":    { \"kind\": \"managed\", \"policy\": \"track\", \"floor\": \"0.43.0\", \"verified\": \"0.43.0\", \"pinnable\": true,\n                \"note\": \"PreToolUse hook — supply-chain review before unverified upgrades; installer honors RTK_VERSION=vX.Y.Z pin\" },\n    \"bun\":    { \"kind\": \"managed\", \"policy\": \"present\", \"verified\": \"1.3.14\", \"pinnable\": true,\n                \"note\": \"runtime for effect-solutions + the docks-kit CLI; bootstrap installs the verified release (installer takes bun-vX.Y.Z); self-updates via `bun upgrade` when wanted\" },\n    \"effect-solutions\": { \"kind\": \"managed\", \"policy\": \"track\", \"verified\": \"0.5.3\", \"pinnable\": true,\n                \"note\": \"Effect docs CLI (bun global) — track keeps it self-upgrading, gated by the verified pin\" },\n    \"agent-browser\":    { \"kind\": \"managed\", \"policy\": \"track\", \"verified\": \"0.32.0\", \"pinnable\": true,\n                \"note\": \"browser-automation CLI (npm global), gated by the verified pin; first install also downloads Chrome for Testing\" },\n    \"session-relay\": { \"kind\": \"managed-release\", \"policy\": \"exact\", \"verified\": \"0.13.0\", \"repository\": \"DocksDocks/docks\", \"tag\": \"session-relay--v0.13.0\", \"plugin_id\": \"session-relay@docks\", \"plugin_version\": \"0.13.0\", \"install_path\": \"~/.local/bin/session-relay\",\n                \"assets\": {\n                  \"x86_64-unknown-linux-musl\": \"f8c6374c2c704f48135cd646028fbd9e53fd43f9800b4a255fa36a0818744b7b\",\n                  \"aarch64-unknown-linux-musl\": \"6ebc6d9a38a8c3d1f191647d3ab679d56b69cffba36c3bc3c8eb99b0e163852e\",\n                  \"x86_64-apple-darwin\": \"06c046182922c6897e81278fecd7280008fa8040a489910993283017101f1be3\",\n                  \"aarch64-apple-darwin\": \"0686e68e3a88dd0dee647fc18211e941dd0d8012818d0bcfb79fac142b5baf21\"\n                } },\n    \"skills-cli\": { \"kind\": \"pin\", \"verified\": \"1.5.15\",\n                \"note\": \"the `skills` npm package the kit runs via `npx skills@<verified>` on every agents sync (universal-skill install/remove) — pinned, never @latest\" }\n  }\n}\n",
-  "SoT/.claude/CLAUDE.md": "## Research Before Implementation\n\nBefore writing or modifying code that uses an API, hook, method, or config surface you have not verified in this session, research current documentation first.\n\nResearch workflow:\n1. Prefer official documentation and primary sources for the specific library, framework, or API.\n2. If a local docs or MCP tool is available, use it before broad web search.\n3. Only then proceed to implementation.\n\nResearch when:\n- Installing or configuring a dependency.\n- Using an API, hook, method, or pattern not verified in this session.\n- Upgrading or migrating between versions.\n- Any task where relying on memory could cause stale syntax or behavior.\n\nDo not:\n- Assume API signatures, method names, or config options from memory.\n- Generate framework code without checking current docs first.\n- Skip research because the library seems familiar.\n\n<constraint>\nResearch the codebase before editing. Never change code you have not read.\n</constraint>\n\n## Agentic Harness Heuristics\n\n**1. Persistence.** Keep going until the user's query is completely resolved. Only yield when sure the problem is solved. Before ending a turn, check the last paragraph: if it is a plan, a question you can answer yourself, or a promise of work not done (\"I'll…\"), do that work now.\n\n**2. Default to parallel.** Whenever you have multiple independent operations (reads, greps, web fetches, independent edits), invoke them in a single response with multiple tool-use blocks. Sequential calls only when output of one operation is required as input to the next.\n\n**3. Multi-pass search.** First-pass search often misses — vary the wording (colleague-questions over keywords) before concluding something doesn't exist.\n\n**4. Trace symbols.** Before modifying a symbol, trace it to its definitions and all usages. Don't assume a function's behavior or a type's shape from the call site alone.\n\n**5. Linter-loop 3-strike rule.** Don't loop more than 3 times fixing linter errors on the same file. On the third attempt, stop and ask the user — repeated failure usually means the diagnosis is wrong, not the code.\n\n**6. Read-before-Edit TTL.** If you haven't read a file with the Read tool in the last ~5 messages, re-read it before editing. Cached file content goes stale silently when the user edits between turns.\n\n**7. Big-file rule.** For files >1000 lines, prefer Grep + scoped Read (`offset` + `limit`) over reading the entire file. Whole-file reads bloat context; targeted reads keep the working set small.\n\n**8. Todo hygiene.** Use TaskCreate for items with meaningful outcome (≥5 min, distinct deliverable). Never include operational sub-actions (linting, testing, searching, examining the codebase) as their own todos — those are sub-steps in service of higher-level tasks. Mark complete immediately when done, never in batches.\n\n**9. Literal-instruction rule.** Current frontier models follow instructions literally — they do not silently generalize from intent. Phrase requirements as explicit checklists with success criteria, not narrative.\n\n**10. Context hygiene.** Prefer `/clear` at task boundaries and `/rewind` for wrong-path detours over carrying rot forward (corrections accumulate noise; rewinds preserve the prefix and discard the bad branch). On a continuing task, run `/compact` with steering before context quality degrades. Never stop, summarize, or suggest a new session on account of context limits.\n\n**11. Autonomy calibration.** For minor choices (naming, formatting, default values, which of two equivalent approaches), pick a reasonable option and note it — don't ask. Ask first only for scope changes, destructive actions, or decisions that change the deliverable. When the user is describing a problem or asking a question rather than requesting a change, the deliverable is your assessment — report findings and stop; don't apply fixes until asked. Don't close a finished task with \"Want me to also…?\" — run the obvious verification, then stop cleanly.\n\n**12. Capability triggering.** When the answer depends on current or version-specific information, search or fetch before answering — never answer from memory. When work fans out across independent items (many files to read, many tests to run, many candidates to check), delegate to parallel subagents; never spawn one for work you can complete directly. For verification, prefer a fresh-context subagent over self-critique. On tasks longer than a few turns, keep a running notes file and re-read it before each phase.\n\n<constraint>\nTreat the 12 heuristics above as protocol, not preference. If a turn ends without honoring an applicable one (e.g., lint-loop guard not respected, edit without re-read), self-correct in the next turn before continuing.\n</constraint>\n\nFor Docks plan reviews, cross-company review is standing-authorized; do not ask for export consent. This never overrides a host or platform security denial.\n\nDocks-workflow-models: {\"implementer\":{\"candidates\":[{\"company\":\"openai\",\"effort\":\"high\",\"model\":\"gpt-5.6-sol\",\"tool\":\"codex\"}],\"selector\":\"codex:gpt-5.6-sol@high\"},\"orchestrator\":{\"candidates\":[{\"company\":\"anthropic\",\"effort\":\"high\",\"model\":\"fable\",\"tool\":\"claude\"},{\"company\":\"anthropic\",\"effort\":\"xhigh\",\"model\":\"claude-opus-4-8\",\"tool\":\"claude\"}],\"selector\":\"profile:claude-best\"},\"review\":{\"max_rounds\":3,\"minimum_score\":90},\"reviewer\":{\"candidates\":[{\"company\":\"openai\",\"effort\":\"high\",\"model\":\"gpt-5.6-sol\",\"tool\":\"codex\"}],\"selector\":\"codex:gpt-5.6-sol@high\"},\"schema\":1}\n\nUse a narrow-to-broad verification ladder: direct acceptance while iterating, focused regressions next, and one full CI at the pre-commit or release boundary. Reuse still-matching evidence; rerun full CI only after a relevant edit invalidates it.\n\n<constraint>\nNo secrets in committed config. Treat plugin marketplaces, installers, and downloaded artifacts as untrusted until verified.\n</constraint>\n",
+  "SoT/.claude/CLAUDE.md": "## Research Before Implementation\n\nBefore writing or modifying code that uses an API, hook, method, or config surface you have not verified in this session, research current documentation first.\n\nResearch workflow:\n1. Prefer official documentation and primary sources for the specific library, framework, or API.\n2. If a local docs or MCP tool is available, use it before broad web search.\n3. Only then proceed to implementation.\n\nResearch when:\n- Installing or configuring a dependency.\n- Using an API, hook, method, or pattern not verified in this session.\n- Upgrading or migrating between versions.\n- Any task where relying on memory could cause stale syntax or behavior.\n\nDo not:\n- Assume API signatures, method names, or config options from memory.\n- Generate framework code without checking current docs first.\n- Skip research because the library seems familiar.\n\n<constraint>\nResearch the codebase before editing. Never change code you have not read.\n</constraint>\n\n## Agentic Harness Heuristics\n\n**1. Persistence.** Keep going until the user's query is completely resolved. Only yield when sure the problem is solved. Before ending a turn, check the last paragraph: if it is a plan, a question you can answer yourself, or a promise of work not done (\"I'll…\"), do that work now.\n\n**2. Default to parallel.** Whenever you have multiple independent operations (reads, greps, web fetches, independent edits), invoke them in a single response with multiple tool-use blocks. Sequential calls only when output of one operation is required as input to the next.\n\n**3. Multi-pass search.** First-pass search often misses — vary the wording (colleague-questions over keywords) before concluding something doesn't exist.\n\n**4. Trace symbols.** Before modifying a symbol, trace it to its definitions and all usages. Don't assume a function's behavior or a type's shape from the call site alone.\n\n**5. Linter-loop 3-strike rule.** Don't loop more than 3 times fixing linter errors on the same file. On the third attempt, stop and ask the user — repeated failure usually means the diagnosis is wrong, not the code.\n\n**6. Read-before-Edit TTL.** If you haven't read a file with the Read tool in the last ~5 messages, re-read it before editing. Cached file content goes stale silently when the user edits between turns.\n\n**7. Big-file rule.** For files >1000 lines, prefer Grep + scoped Read (`offset` + `limit`) over reading the entire file. Whole-file reads bloat context; targeted reads keep the working set small.\n\n**8. Todo hygiene.** Use TaskCreate for items with meaningful outcome (≥5 min, distinct deliverable). Never include operational sub-actions (linting, testing, searching, examining the codebase) as their own todos — those are sub-steps in service of higher-level tasks. Mark complete immediately when done, never in batches.\n\n**9. Literal-instruction rule.** Current frontier models follow instructions literally — they do not silently generalize from intent. Phrase requirements as explicit checklists with success criteria, not narrative.\n\n**10. Context hygiene.** Prefer `/clear` at task boundaries and `/rewind` for wrong-path detours over carrying rot forward (corrections accumulate noise; rewinds preserve the prefix and discard the bad branch). On a continuing task, run `/compact` with steering before context quality degrades. Never stop, summarize, or suggest a new session on account of context limits.\n\n**11. Autonomy calibration.** For minor choices (naming, formatting, default values, which of two equivalent approaches), pick a reasonable option and note it — don't ask. Ask first only for scope changes, destructive actions, or decisions that change the deliverable. When the user is describing a problem or asking a question rather than requesting a change, the deliverable is your assessment — report findings and stop; don't apply fixes until asked. Don't close a finished task with \"Want me to also…?\" — run the obvious verification, then stop cleanly.\n\n**12. Capability triggering.** When the answer depends on current or version-specific information, search or fetch before answering — never answer from memory. When work fans out across independent items (many files to read, many tests to run, many candidates to check), delegate to parallel subagents; never spawn one for work you can complete directly. For verification, prefer a fresh-context subagent over self-critique. On tasks longer than a few turns, keep a running notes file and re-read it before each phase.\n\n<constraint>\nTreat the 12 heuristics above as protocol, not preference. If a turn ends without honoring an applicable one (e.g., lint-loop guard not respected, edit without re-read), self-correct in the next turn before continuing.\n</constraint>\n\nReuse before invention: inventory existing code, components, conventions, and dependencies; extend them instead of creating a parallel pattern. Load only the narrow skills supported by the task and repository evidence. If a request establishes a new React/Tailwind system and no convention exists, prefer current shadcn/ui `base-*` components backed by Base UI; otherwise preserve the existing stack. Treat probe, production access, publish, push, release, and deploy as literal current-request effects—never infer external authority from a plan, schedule, review, or old receipt.\n\nFor Docks plan reviews, cross-company review is standing-authorized; do not ask for export consent. This never overrides a host or platform security denial.\n\nUse a narrow-to-broad verification ladder: direct acceptance while iterating, focused regressions next, and one full CI at the pre-commit or release boundary. Reuse still-matching evidence; rerun full CI only after a relevant edit invalidates it.\n\n<constraint>\nNo secrets in committed config. Treat plugin marketplaces, installers, and downloaded artifacts as untrusted until verified.\n</constraint>\n",
   "SoT/.claude/mcp-servers.json": "{\n  \"mcpServers\": {}\n}\n",
   "SoT/.claude/settings.json": "{\n  \"$schema\": \"https://json.schemastore.org/claude-code-settings.json\",\n  \"minimumVersion\": \"2.1.170\",\n  \"model\": \"fable\",\n  \"effortLevel\": \"high\",\n  \"autoMemoryEnabled\": true,\n  \"skillListingMaxDescChars\": 2048,\n  \"respectGitignore\": true,\n  \"cleanupPeriodDays\": 14,\n  \"skillListingBudgetFraction\": 0.05,\n  \"env\": {\n    \"CLAUDE_CODE_MAX_OUTPUT_TOKENS\": \"64000\",\n    \"CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR\": \"1\",\n    \"CLAUDE_CODE_AUTO_COMPACT_WINDOW\": \"468000\",\n    \"CLAUDE_CODE_NO_FLICKER\": \"1\"\n  },\n  \"permissions\": {\n    \"defaultMode\": \"auto\",\n    \"allow\": [\n      \"Read\",\n      \"Glob\",\n      \"Grep\",\n      \"WebFetch\",\n      \"WebSearch\",\n      \"Edit(./)\",\n      \"Bash(git *)\",\n      \"Bash(git add *)\",\n      \"Bash(git commit *)\",\n      \"Bash(git status *)\",\n      \"Bash(git diff *)\",\n      \"Bash(git log *)\",\n      \"Bash(git branch *)\",\n      \"Bash(git checkout *)\",\n      \"Bash(git switch *)\",\n      \"Bash(git stash *)\",\n      \"Bash(git fetch *)\",\n      \"Bash(git pull *)\",\n      \"Bash(git tag *)\",\n      \"Bash(git show *)\",\n      \"Bash(git blame *)\",\n      \"Bash(git worktree *)\",\n      \"Bash(gh *)\",\n      \"Bash(pnpm *)\",\n      \"Bash(npm *)\",\n      \"Bash(npx *)\",\n      \"Bash(node *)\",\n      \"Bash(docker *)\",\n      \"Bash(docker-compose *)\",\n      \"Bash(rtk *)\",\n      \"Bash(ls *)\",\n      \"Bash(cat *)\",\n      \"Bash(find *)\",\n      \"Bash(grep *)\",\n      \"Bash(head *)\",\n      \"Bash(tail *)\",\n      \"Bash(wc *)\",\n      \"Bash(sort *)\",\n      \"Bash(uniq *)\",\n      \"Bash(diff *)\",\n      \"Bash(which *)\",\n      \"Bash(pwd *)\",\n      \"Bash(date *)\",\n      \"Bash(mkdir *)\",\n      \"Bash(basename *)\",\n      \"Bash(dirname *)\",\n      \"Bash(realpath *)\",\n      \"Bash(jq *)\",\n      \"Bash(curl *)\",\n      \"Bash(tree *)\",\n      \"Bash(sed *)\",\n      \"Bash(awk *)\",\n      \"Bash(cut *)\",\n      \"Bash(tr *)\",\n      \"Bash(tee *)\",\n      \"Bash(echo *)\",\n      \"Bash(printf *)\",\n      \"Bash(env *)\",\n      \"Bash(printenv *)\",\n      \"Bash(uname *)\",\n      \"Bash(file *)\",\n      \"Bash(stat *)\",\n      \"Bash(du *)\",\n      \"Bash(id *)\",\n      \"Bash(whoami *)\",\n      \"Bash(php *)\",\n      \"Bash(composer *)\",\n      \"Bash(python3 *)\",\n      \"Bash(python *)\",\n      \"Bash(pip *)\",\n      \"Bash(pip3 *)\"\n    ],\n    \"deny\": [\n      \"Read(**/.env)\",\n      \"Read(**/.env.local)\",\n      \"Read(**/secrets/**)\",\n      \"Read(**/*.key)\",\n      \"Read(**/*.pem)\",\n      \"Read(**/*.p12)\",\n      \"Read(**/.credentials*)\",\n      \"Edit(**/.env)\",\n      \"Edit(**/.env.local)\",\n      \"Edit(**/secrets/**)\",\n      \"Bash(sudo *)\",\n      \"Bash(rm -rf /)\",\n      \"Bash(rm -rf / *)\",\n      \"Bash(rm -rf ~)\",\n      \"Bash(rm -rf ~ *)\",\n      \"Bash(rm -rf $HOME)\",\n      \"Bash(rm -rf $HOME *)\",\n      \"Bash(> /dev *)\",\n      \"Bash(dd if= *)\",\n      \"Bash(mkfs *)\",\n      \"Bash(eval *)\",\n      \"Bash(chmod 777 *)\",\n      \"Bash(chmod -R 777 *)\",\n      \"Bash(git push --force origin main *)\",\n      \"Bash(git push --force origin master *)\",\n      \"Bash(git push -f origin main *)\",\n      \"Bash(git push -f origin master *)\"\n    ],\n    \"ask\": [\n      \"Bash(git clean *)\",\n      \"Bash(docker volume rm *)\",\n      \"Bash(docker system prune *)\"\n    ]\n  },\n  \"hooks\": {\n    \"SessionStart\": [\n      {\n        \"hooks\": [\n          {\n            \"type\": \"command\",\n            \"command\": \"__DOCKS_KIT_BUN__\",\n            \"args\": [\"__DOCKS_KIT_SESSION_START__\"],\n            \"timeout\": 5\n          }\n        ]\n      }\n    ],\n    \"Notification\": [\n      {\n        \"hooks\": [\n          {\n            \"type\": \"command\",\n            \"command\": \"__DOCKS_KIT_BUN__\",\n            \"args\": [\"__DOCKS_KIT_NOTIFY__\"],\n            \"timeout\": 10,\n            \"async\": true\n          }\n        ]\n      }\n    ],\n    \"PreToolUse\": [\n      {\n        \"matcher\": \"Bash\",\n        \"hooks\": [\n          {\n            \"type\": \"command\",\n            \"command\": \"rtk hook claude\"\n          }\n        ]\n      }\n    ],\n    \"PostToolUseFailure\": [\n      {\n        \"matcher\": \"Bash\",\n        \"hooks\": [\n          {\n            \"type\": \"command\",\n            \"command\": \"echo '{\\\"hookSpecificOutput\\\":{\\\"hookEventName\\\":\\\"PostToolUseFailure\\\",\\\"additionalContext\\\":\\\"Last bash command failed. Repository / file state may have shifted \\u2014 re-read affected files before retrying. If the failure is a missing dependency or env mismatch, surface it to the user rather than retrying blindly.\\\"}}'\",\n            \"timeout\": 5\n          }\n        ]\n      }\n    ],\n    \"SubagentStop\": [\n      {\n        \"hooks\": [\n          {\n            \"type\": \"prompt\",\n            \"prompt\": \"You are a quality gate for subagent outputs in a multi-agent code-analysis pipeline.\\n\\nEvaluate the subagent's `last_assistant_message` field (in the JSON below) against these requirements:\\n\\n1. ALLOW (return `{}`): Mode-selection or no-issues responses. Examples: \\\"Which mode do you prefer\\\", \\\"select an option\\\", \\\"no issues / problems / violations / blockers found\\\".\\n\\n2. ALLOW (return `{}`): Output contains at least one concrete file:line citation \\u2014 e.g. `src/auth.ts:42`, `lib/db.ts:100-115`, or path references that include line numbers.\\n\\n3. BLOCK (return `{\\\"decision\\\":\\\"block\\\",\\\"reason\\\":\\\"<one-line explanation>\\\"}`): Output claims about code or findings WITHOUT concrete file:line citations. Vague references like \\\"the auth handler\\\" or \\\"near the database code\\\" are not acceptable as the only evidence.\\n\\nSubagent invocation JSON:\\n$ARGUMENTS\\n\\nReturn ONLY the JSON decision (no commentary, no markdown fences).\",\n            \"timeout\": 30\n          }\n        ]\n      }\n    ]\n  },\n  \"statusLine\": {\n    \"type\": \"command\",\n    \"command\": \"__DOCKS_KIT_STATUSLINE__\",\n    \"refreshInterval\": 5\n  },\n  \"enabledPlugins\": {\n    \"docks@docks\": true,\n    \"session-relay@docks\": true,\n    \"effect-kit@docks\": true,\n    \"php-lsp@claude-plugins-official\": true,\n    \"typescript-lsp@claude-plugins-official\": true\n  },\n  \"extraKnownMarketplaces\": {\n    \"docks\": {\n      \"source\": {\n        \"source\": \"github\",\n        \"repo\": \"DocksDocks/docks\"\n      }\n    }\n  },\n  \"alwaysThinkingEnabled\": true,\n  \"showThinkingSummaries\": true,\n  \"viewMode\": \"default\",\n  \"theme\": \"dark-daltonized\",\n  \"skipDangerousModePermissionPrompt\": true\n}\n",
   "SoT/.claude/bin/statusline.mjs": "const ESC = \"\\x1b[\"\nconst PIPE = `${ESC}90m | ${ESC}0m`\nconst DOT = `${ESC}90m • ${ESC}0m`\nconst DIM = `${ESC}2m${ESC}38;2;156;162;175m`\n\nfunction isRecord(value) {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction finitePercentage(value) {\n  return typeof value === \"number\" && Number.isFinite(value) && value >= 0 && value <= 100\n    ? value\n    : undefined\n}\n\nfunction roundHalfEven(value) {\n  const lower = Math.floor(value)\n  const fraction = value - lower\n  if (fraction < 0.5) return lower\n  if (fraction > 0.5) return lower + 1\n  return lower % 2 === 0 ? lower : lower + 1\n}\n\nfunction pathBasename(path) {\n  const parts = path.split(/[\\\\/]+/).filter((part) => part !== \"\")\n  return parts.at(-1) ?? \"\"\n}\n\nfunction modelName(input) {\n  const model = isRecord(input.model) && typeof input.model.display_name === \"string\"\n    ? input.model.display_name\n    : \"\"\n  const suffix = model.indexOf(\" (\")\n  return suffix === -1 ? model : model.slice(0, suffix)\n}\n\nfunction workingDirectory(input, cwd) {\n  if (isRecord(input.workspace) && typeof input.workspace.current_dir === \"string\" && input.workspace.current_dir !== \"\") {\n    return input.workspace.current_dir\n  }\n  if (typeof input.cwd === \"string\" && input.cwd !== \"\") return input.cwd\n  return cwd\n}\n\nfunction compactWindow(env, total) {\n  const raw = env.CLAUDE_CODE_AUTO_COMPACT_WINDOW\n  if (typeof raw !== \"string\" || !/^[0-9]+$/.test(raw)) return total\n  const parsed = Number(raw)\n  return Number.isSafeInteger(parsed) && parsed >= 1000 && parsed < total ? parsed : total\n}\n\nfunction formatTokensK(value) {\n  if (value < 1000) return `${value}k`\n  if (value % 1000 === 0) return `${value / 1000}M`\n  return `${(roundHalfEven(value / 100) / 10).toFixed(1)}M`\n}\n\nfunction contextSegment(input, env) {\n  if (!isRecord(input.context_window)) return \"\"\n  const used = finitePercentage(input.context_window.used_percentage)\n  if (used === undefined) return \"\"\n\n  const total = input.context_window.context_window_size\n  if (typeof total !== \"number\" || !Number.isFinite(total) || total <= 0) {\n    return `${ESC}38;2;130;160;230mctx ${roundHalfEven(used)}%${ESC}0m`\n  }\n\n  const usedK = roundHalfEven((used / 100) * (total / 1000))\n  const effectiveK = Math.trunc(compactWindow(env, total) / 1000)\n  if (effectiveK <= 0) return `${ESC}38;2;130;160;230mctx ${roundHalfEven(used)}%${ESC}0m`\n  const effectivePercentage = roundHalfEven((usedK / effectiveK) * 100)\n  return `${ESC}38;2;130;160;230mctx ${effectivePercentage}%${ESC}0m ${DIM}(${formatTokensK(usedK)}/${formatTokensK(effectiveK)})${ESC}0m`\n}\n\nfunction resetDelta(value, nowMs) {\n  if (typeof value !== \"number\" || !Number.isFinite(value) || value < 0) return \"\"\n  const seconds = Math.trunc(value) - Math.floor(nowMs / 1000)\n  if (seconds <= 0) return \"now\"\n  const days = Math.trunc(seconds / 86_400)\n  if (days > 0) return `${days}d`\n  const hours = Math.trunc((seconds % 86_400) / 3_600)\n  if (hours > 0) return `${hours}h`\n  return `${Math.trunc((seconds % 3_600) / 60)}m`\n}\n\nfunction quotaWindow(value, label, color, nowMs) {\n  if (!isRecord(value)) return \"\"\n  const used = finitePercentage(value.used_percentage)\n  if (used === undefined) return \"\"\n  const delta = resetDelta(value.resets_at, nowMs)\n  const reset = delta === \"\" ? \"\" : ` ${DIM}(${delta})${ESC}0m`\n  return `${ESC}38;2;${color}m${label} ${roundHalfEven(used)}%${ESC}0m${reset}`\n}\n\nfunction decodeStdout(result) {\n  const stdout = result?.stdout\n  if (stdout === undefined || stdout === null) return \"\"\n  return typeof stdout === \"string\" ? stdout : stdout.toString()\n}\n\nfunction resolveBranch(directory, which, spawnSync) {\n  const git = which(\"git\")\n  if (typeof git !== \"string\" || git === \"\") return \"\"\n  const commands = [\n    [git, \"-C\", directory, \"symbolic-ref\", \"--short\", \"HEAD\"],\n    [git, \"-C\", directory, \"rev-parse\", \"--short\", \"HEAD\"]\n  ]\n  for (const command of commands) {\n    try {\n      const result = spawnSync(command, { stdin: \"ignore\", stdout: \"pipe\", stderr: \"ignore\" })\n      if (result?.success === true) return decodeStdout(result).trim()\n    } catch {\n      return \"\"\n    }\n  }\n  return \"\"\n}\n\nexport function formatStatusline(input, options = {}) {\n  if (!isRecord(input)) return \"\"\n  const env = isRecord(options.env) ? options.env : process.env\n  const nowMs = typeof options.nowMs === \"number\" ? options.nowMs : Date.now()\n  const cwd = typeof options.cwd === \"string\" ? options.cwd : process.cwd()\n  const branch = typeof options.branch === \"string\" ? options.branch : \"\"\n  const directory = workingDirectory(input, cwd)\n\n  const model = `${ESC}38;5;208m${ESC}1m${modelName(input)}${ESC}22m${ESC}0m`\n  const folder = `${ESC}1m${ESC}38;2;76;208;222m${pathBasename(directory)}${ESC}22m${ESC}0m`\n  const branchSegment = branch === \"\" ? \"\" : `${DOT}${ESC}1m${ESC}38;2;192;103;222m${branch}${ESC}22m${ESC}0m`\n  const context = contextSegment(input, env)\n\n  const rateLimits = isRecord(input.rate_limits) ? input.rate_limits : {}\n  const fiveHour = quotaWindow(rateLimits.five_hour, \"5h\", \"100;200;200\", nowMs)\n  const sevenDay = quotaWindow(rateLimits.seven_day, \"7d\", \"230;180;90\", nowMs)\n  const quota = fiveHour === \"\" && sevenDay === \"\"\n    ? \"\"\n    : `${PIPE}${fiveHour}${fiveHour !== \"\" && sevenDay !== \"\" ? DOT : \"\"}${sevenDay}`\n\n  return `${model}${PIPE}${folder}${branchSegment}${context === \"\" ? \"\" : `${PIPE}${context}`}${quota}`\n}\n\nexport async function main(options = {}) {\n  const readStdin = options.readStdin ?? (() => Bun.stdin.text())\n  const writeStdout = options.writeStdout ?? ((value) => process.stdout.write(value))\n  let raw\n  try {\n    raw = await readStdin()\n  } catch {\n    return 0\n  }\n\n  let input\n  try {\n    input = JSON.parse(raw)\n  } catch {\n    return 0\n  }\n  if (!isRecord(input)) return 0\n\n  const cwd = typeof options.cwd === \"string\" ? options.cwd : process.cwd()\n  const directory = workingDirectory(input, cwd)\n  const branch = resolveBranch(\n    directory,\n    options.which ?? ((name) => Bun.which(name)),\n    options.spawnSync ?? ((argv, spawnOptions) => Bun.spawnSync(argv, spawnOptions))\n  )\n  const output = formatStatusline(input, {\n    env: options.env ?? process.env,\n    nowMs: options.nowMs ?? Date.now(),\n    cwd,\n    branch\n  })\n  if (output !== \"\") writeStdout(`${output}\\n`)\n  return 0\n}\n\nif (import.meta.main) process.exit(await main())\n",
   "SoT/.claude/bin/session-start.mjs": "import { readFileSync } from \"node:fs\"\nimport { homedir } from \"node:os\"\n\nfunction isRecord(value) {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction nonEmpty(value, fallback) {\n  return typeof value === \"string\" && value !== \"\" ? value : fallback\n}\n\nfunction pad(value) {\n  return String(value).padStart(2, \"0\")\n}\n\nfunction configuredEffort(home, readText) {\n  try {\n    const parsed = JSON.parse(readText(`${home}/.claude/settings.json`))\n    return isRecord(parsed) ? nonEmpty(parsed.effortLevel, \"default\") : \"default\"\n  } catch {\n    return \"default\"\n  }\n}\n\nfunction localZone(now) {\n  const part = new Intl.DateTimeFormat(\"en-US\", { timeZoneName: \"short\" })\n    .formatToParts(now)\n    .find((value) => value.type === \"timeZoneName\")\n  return part?.value ?? \"\"\n}\n\nexport function sessionStartLines(options = {}) {\n  const env = isRecord(options.env) ? options.env : process.env\n  const now = options.now instanceof Date ? options.now : new Date()\n  const home = typeof options.home === \"string\" ? options.home : homedir()\n  const readText = options.readText ?? ((path) => readFileSync(path, \"utf8\"))\n  const weekday = new Intl.DateTimeFormat(\"en-US\", { weekday: \"long\" }).format(now)\n  const date = `${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}`\n  const time = `${pad(now.getHours())}:${pad(now.getMinutes())}:${pad(now.getSeconds())}`\n  const effort = nonEmpty(env.CLAUDE_CODE_EFFORT_LEVEL, configuredEffort(home, readText))\n  const context = env.CLAUDE_CODE_DISABLE_1M_CONTEXT === \"1\" ? \"200K\" : \"1M\"\n  const compactWindow = nonEmpty(env.CLAUDE_CODE_AUTO_COMPACT_WINDOW, \"full\")\n  const subagent = nonEmpty(env.CLAUDE_CODE_SUBAGENT_MODEL, \"default\")\n  return [\n    `[CONTEXT] Current date: ${weekday}, ${date} ${time} ${localZone(now)}`,\n    `[CONFIG] Context: ${context} | Compact-window: ${compactWindow} | Effort: ${effort} | Thinking: adaptive | Subagent: ${subagent}`\n  ]\n}\n\nexport async function main(options = {}) {\n  const writeStdout = options.writeStdout ?? ((value) => process.stdout.write(value))\n  writeStdout(`${sessionStartLines(options).join(\"\\n\")}\\n`)\n  return 0\n}\n\nif (import.meta.main) process.exit(await main())\n",
   "SoT/.claude/bin/notify.mjs": "const DEFAULT_SOUND = `${import.meta.dir}/../notification.mp3`\n\nexport function selectPlayer(options = {}) {\n  const platform = options.platform ?? process.platform\n  const sound = options.sound ?? DEFAULT_SOUND\n  const which = options.which ?? ((name) => Bun.which(name))\n  if (platform === \"darwin\") {\n    const afplay = which(\"afplay\")\n    if (typeof afplay === \"string\" && afplay !== \"\") return [afplay, sound]\n  }\n  const ffplay = which(\"ffplay\")\n  if (typeof ffplay === \"string\" && ffplay !== \"\") {\n    return [ffplay, \"-nodisp\", \"-autoexit\", \"-loglevel\", \"quiet\", sound]\n  }\n  const paplay = which(\"paplay\")\n  if (typeof paplay === \"string\" && paplay !== \"\") return [paplay, sound]\n  const aplay = which(\"aplay\")\n  if (typeof aplay === \"string\" && aplay !== \"\") return [aplay, \"-q\", sound]\n  return undefined\n}\n\nexport async function main(options = {}) {\n  const sound = options.sound ?? DEFAULT_SOUND\n  const fileExists = options.fileExists ?? ((path) => Bun.file(path).exists())\n  if (!await fileExists(sound)) return 0\n  const command = selectPlayer({ ...options, sound })\n  if (command === undefined) return 0\n  const spawnSync = options.spawnSync ?? ((argv, spawnOptions) => Bun.spawnSync(argv, spawnOptions))\n  const result = spawnSync(command, { stdin: \"ignore\", stdout: \"ignore\", stderr: \"ignore\" })\n  return typeof result.exitCode === \"number\" ? result.exitCode : 1\n}\n\nif (import.meta.main) process.exit(await main())\n",
-  "SoT/.codex/AGENTS.md": "# AGENTS.md\n\n## Research Before Implementation\n\nBefore writing or modifying code that uses an API, hook, method, or config surface you have not verified in this session, research current documentation first.\n\nResearch workflow:\n1. Prefer official documentation and primary sources for the specific library, framework, or API.\n2. If a local docs or MCP tool is available, use it before broad web search.\n3. Only then proceed to implementation.\n\nResearch when:\n- Installing or configuring a dependency.\n- Using an API, hook, method, or pattern not verified in this session.\n- Upgrading or migrating between versions.\n- Any task where relying on memory could cause stale syntax or behavior.\n\nDo not:\n- Assume API signatures, method names, or config options from memory.\n- Generate framework code without checking current docs first.\n- Skip research because the library seems familiar.\n\n<constraint>\nResearch the codebase before editing. Never change code you have not read.\n</constraint>\n\n## Agentic Harness Heuristics\n\nModel-agnostic operating rules for coding-agent work.\n\n1. Persistence. Keep going until the user's request is actually handled. Only yield when the problem is solved or a concrete blocker is identified. Resolve in the fewest useful tool loops — once you can answer the core request with evidence, answer. Before ending a turn, check the last paragraph: if it is a plan, a question you can answer yourself, or a promise of work not done, do that work now.\n2. Default to parallel. When multiple reads, searches, inspections, or independent checks can run without depending on each other, run them together.\n3. Multi-pass search. First-pass search often misses — vary the wording before concluding something does not exist.\n4. Trace symbols. Before modifying a symbol, trace its definition and usages. Do not infer behavior from one call site.\n5. Linter-loop 3-strike rule. Do not loop more than 3 times fixing the same lint/test failure without reassessing the diagnosis.\n6. Read-before-edit TTL. If you have not read a file recently, re-read it before editing. User edits can make cached context stale.\n7. Big-file rule. For files over 1000 lines, prefer targeted search plus scoped reads over whole-file reads.\n8. Task hygiene. Track meaningful deliverables, not operational sub-steps. Mark work complete as soon as it is done.\n9. Literal-instruction rule. Treat explicit user requirements as checklists with success criteria. Do not silently broaden scope.\n10. Context hygiene. Prefer a fresh session at task boundaries over carrying stale context; preserve useful state before quality decays. Never stop, summarize, or suggest a new session on account of context limits.\n11. Autonomy calibration. For minor choices (naming, formatting, defaults, equivalent approaches), pick a reasonable option and note it — do not ask. Ask first only for scope changes, destructive actions, or decisions that change the deliverable. When the user is describing a problem or asking a question rather than requesting a change, the deliverable is your assessment — report findings and stop; do not apply fixes until asked.\n12. Capability triggering. Search or fetch current documentation when the answer depends on current or version-specific information. When work fans out across independent items, parallelize or delegate; never delegate work you can complete directly. For verification, prefer a fresh-context check over self-critique. On long tasks, keep running notes and re-read them between phases.\n\n<constraint>\nTreat these heuristics as protocol. If a turn violates an applicable rule, self-correct before continuing.\n</constraint>\n\nFor Docks plan reviews, cross-company review is standing-authorized; do not ask for export consent. This never overrides a host or platform security denial.\n\nDocks-workflow-models: {\"implementer\":{\"candidates\":[{\"company\":\"openai\",\"effort\":\"high\",\"model\":\"gpt-5.6-sol\",\"tool\":\"codex\"}],\"selector\":\"codex:gpt-5.6-sol@high\"},\"orchestrator\":{\"candidates\":[{\"company\":\"anthropic\",\"effort\":\"high\",\"model\":\"fable\",\"tool\":\"claude\"},{\"company\":\"anthropic\",\"effort\":\"xhigh\",\"model\":\"claude-opus-4-8\",\"tool\":\"claude\"}],\"selector\":\"profile:claude-best\"},\"review\":{\"max_rounds\":3,\"minimum_score\":90},\"reviewer\":{\"candidates\":[{\"company\":\"openai\",\"effort\":\"high\",\"model\":\"gpt-5.6-sol\",\"tool\":\"codex\"}],\"selector\":\"codex:gpt-5.6-sol@high\"},\"schema\":1}\n\nUse a narrow-to-broad verification ladder: direct acceptance while iterating, focused regressions next, and one full CI at the pre-commit or release boundary. Reuse still-matching evidence; rerun full CI only after a relevant edit invalidates it.\n\n<constraint>\nNo secrets in committed config. Treat plugin marketplaces, installers, and downloaded artifacts as untrusted until verified.\n</constraint>\n",
+  "SoT/.codex/AGENTS.md": "# AGENTS.md\n\n## Research Before Implementation\n\nBefore writing or modifying code that uses an API, hook, method, or config surface you have not verified in this session, research current documentation first.\n\nResearch workflow:\n1. Prefer official documentation and primary sources for the specific library, framework, or API.\n2. If a local docs or MCP tool is available, use it before broad web search.\n3. Only then proceed to implementation.\n\nResearch when:\n- Installing or configuring a dependency.\n- Using an API, hook, method, or pattern not verified in this session.\n- Upgrading or migrating between versions.\n- Any task where relying on memory could cause stale syntax or behavior.\n\nDo not:\n- Assume API signatures, method names, or config options from memory.\n- Generate framework code without checking current docs first.\n- Skip research because the library seems familiar.\n\n<constraint>\nResearch the codebase before editing. Never change code you have not read.\n</constraint>\n\n## Agentic Harness Heuristics\n\nModel-agnostic operating rules for coding-agent work.\n\n1. Persistence. Keep going until the user's request is actually handled. Only yield when the problem is solved or a concrete blocker is identified. Resolve in the fewest useful tool loops — once you can answer the core request with evidence, answer. Before ending a turn, check the last paragraph: if it is a plan, a question you can answer yourself, or a promise of work not done, do that work now.\n2. Default to parallel. When multiple reads, searches, inspections, or independent checks can run without depending on each other, run them together.\n3. Multi-pass search. First-pass search often misses — vary the wording before concluding something does not exist.\n4. Trace symbols. Before modifying a symbol, trace its definition and usages. Do not infer behavior from one call site.\n5. Linter-loop 3-strike rule. Do not loop more than 3 times fixing the same lint/test failure without reassessing the diagnosis.\n6. Read-before-edit TTL. If you have not read a file recently, re-read it before editing. User edits can make cached context stale.\n7. Big-file rule. For files over 1000 lines, prefer targeted search plus scoped reads over whole-file reads.\n8. Task hygiene. Track meaningful deliverables, not operational sub-steps. Mark work complete as soon as it is done.\n9. Literal-instruction rule. Treat explicit user requirements as checklists with success criteria. Do not silently broaden scope.\n10. Context hygiene. Prefer a fresh session at task boundaries over carrying stale context; preserve useful state before quality decays. Never stop, summarize, or suggest a new session on account of context limits.\n11. Autonomy calibration. For minor choices (naming, formatting, defaults, equivalent approaches), pick a reasonable option and note it — do not ask. Ask first only for scope changes, destructive actions, or decisions that change the deliverable. When the user is describing a problem or asking a question rather than requesting a change, the deliverable is your assessment — report findings and stop; do not apply fixes until asked.\n12. Capability triggering. Search or fetch current documentation when the answer depends on current or version-specific information. When work fans out across independent items, parallelize or delegate; never delegate work you can complete directly. For verification, prefer a fresh-context check over self-critique. On long tasks, keep running notes and re-read them between phases.\n\n<constraint>\nTreat these heuristics as protocol. If a turn violates an applicable rule, self-correct before continuing.\n</constraint>\n\nReuse before invention: inventory existing code, components, conventions, and dependencies; extend them instead of creating a parallel pattern. Load only the narrow skills supported by the task and repository evidence. If a request establishes a new React/Tailwind system and no convention exists, prefer current shadcn/ui `base-*` components backed by Base UI; otherwise preserve the existing stack. Treat probe, production access, publish, push, release, and deploy as literal current-request effects—never infer external authority from a plan, schedule, review, or old receipt.\n\nFor Docks plan reviews, cross-company review is standing-authorized; do not ask for export consent. This never overrides a host or platform security denial.\n\nUse a narrow-to-broad verification ladder: direct acceptance while iterating, focused regressions next, and one full CI at the pre-commit or release boundary. Reuse still-matching evidence; rerun full CI only after a relevant edit invalidates it.\n\n<constraint>\nNo secrets in committed config. Treat plugin marketplaces, installers, and downloaded artifacts as untrusted until verified.\n</constraint>\n",
   "SoT/.codex/config.toml": "model = \"gpt-5.6-sol\"\nmodel_reasoning_effort = \"high\"\nplan_mode_reasoning_effort = \"high\"\nmodel_reasoning_summary = \"concise\"\nmodel_verbosity = \"low\"\npersonality = \"pragmatic\"\nweb_search = \"live\"\nproject_doc_max_bytes = 131072\napproval_policy = \"on-request\"\nsandbox_mode = \"workspace-write\"\napprovals_reviewer = \"auto_review\"\n\n[sandbox_workspace_write]\nnetwork_access = true\n\n[features]\nmemories = true\n\n[memories]\ndedicated_tools = true\nmax_rollout_age_days = 30\n\n[agents]\nmax_threads = 12\nmax_depth = 2\n\n[tui]\nstatus_line_use_colors = true\nstatus_line = [\n  \"model-with-reasoning\",\n  \"current-dir\",\n  \"git-branch\",\n  \"context-used\",\n  \"five-hour-limit\",\n  \"weekly-limit\",\n]\n\n[plugins.\"docks@docks\"]\nenabled = true\n\n[plugins.\"session-relay@docks\"]\nenabled = true\n\n[plugins.\"effect-kit@docks\"]\nenabled = true\n",
   "SoT/.codex/plugins/marketplace.json": "{\n  \"name\": \"docks\",\n  \"interface\": {\n    \"displayName\": \"DocksDocks\"\n  },\n  \"plugins\": [\n    {\n      \"name\": \"docks\",\n      \"source\": {\n        \"source\": \"git-subdir\",\n        \"url\": \"https://github.com/DocksDocks/docks.git\",\n        \"path\": \"./plugins/docks\",\n        \"ref\": \"main\"\n      },\n      \"policy\": {\n        \"installation\": \"AVAILABLE\",\n        \"authentication\": \"ON_INSTALL\"\n      },\n      \"category\": \"Productivity\"\n    },\n    {\n      \"name\": \"session-relay\",\n      \"source\": {\n        \"source\": \"git-subdir\",\n        \"url\": \"https://github.com/DocksDocks/docks.git\",\n        \"path\": \"./plugins/session-relay\",\n        \"ref\": \"main\"\n      },\n      \"policy\": {\n        \"installation\": \"AVAILABLE\",\n        \"authentication\": \"ON_INSTALL\"\n      },\n      \"category\": \"Productivity\"\n    },\n    {\n      \"name\": \"effect-kit\",\n      \"source\": {\n        \"source\": \"git-subdir\",\n        \"url\": \"https://github.com/DocksDocks/docks.git\",\n        \"path\": \"./plugins/effect-kit\",\n        \"ref\": \"main\"\n      },\n      \"policy\": {\n        \"installation\": \"AVAILABLE\",\n        \"authentication\": \"ON_INSTALL\"\n      },\n      \"category\": \"Productivity\"\n    }\n  ]\n}\n",
   "SoT/.codex/rules/docks.rules": "prefix_rule(pattern=[\"pwd\"], decision=\"allow\")\nprefix_rule(pattern=[\"ls\"], decision=\"allow\")\nprefix_rule(pattern=[\"cat\"], decision=\"allow\")\nprefix_rule(pattern=[\"head\"], decision=\"allow\")\nprefix_rule(pattern=[\"tail\"], decision=\"allow\")\nprefix_rule(pattern=[\"wc\"], decision=\"allow\")\nprefix_rule(pattern=[\"nl\"], decision=\"allow\")\nprefix_rule(pattern=[\"grep\"], decision=\"allow\")\nprefix_rule(pattern=[\"sort\"], decision=\"allow\")\nprefix_rule(pattern=[\"uniq\"], decision=\"allow\")\nprefix_rule(pattern=[\"diff\"], decision=\"allow\")\nprefix_rule(pattern=[\"which\"], decision=\"allow\")\nprefix_rule(pattern=[\"date\"], decision=\"allow\")\nprefix_rule(pattern=[\"basename\"], decision=\"allow\")\nprefix_rule(pattern=[\"dirname\"], decision=\"allow\")\nprefix_rule(pattern=[\"realpath\"], decision=\"allow\")\nprefix_rule(pattern=[\"readlink\"], decision=\"allow\")\nprefix_rule(pattern=[\"jq\"], decision=\"allow\")\nprefix_rule(pattern=[\"tree\"], decision=\"allow\")\nprefix_rule(pattern=[\"cut\"], decision=\"allow\")\nprefix_rule(pattern=[\"tr\"], decision=\"allow\")\nprefix_rule(pattern=[\"echo\"], decision=\"allow\")\nprefix_rule(pattern=[\"printf\"], decision=\"allow\")\nprefix_rule(pattern=[\"printenv\"], decision=\"allow\")\nprefix_rule(pattern=[\"uname\"], decision=\"allow\")\nprefix_rule(pattern=[\"file\"], decision=\"allow\")\nprefix_rule(pattern=[\"stat\"], decision=\"allow\")\nprefix_rule(pattern=[\"du\"], decision=\"allow\")\nprefix_rule(pattern=[\"id\"], decision=\"allow\")\nprefix_rule(pattern=[\"whoami\"], decision=\"allow\")\n\nprefix_rule(pattern=[\"git\", \"status\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"diff\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"log\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"show\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"blame\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"rev-parse\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"ls-files\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"grep\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"ls-tree\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"branch\", \"--show-current\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"branch\", \"-vv\"], decision=\"allow\")\nprefix_rule(pattern=[\"git\", \"mv\"], decision=\"allow\")\n\nprefix_rule(pattern=[\"gh\", \"pr\", \"view\"], decision=\"allow\")\nprefix_rule(pattern=[\"gh\", \"pr\", \"list\"], decision=\"allow\")\nprefix_rule(pattern=[\"gh\", \"pr\", \"diff\"], decision=\"allow\")\nprefix_rule(pattern=[\"gh\", \"pr\", \"status\"], decision=\"allow\")\nprefix_rule(pattern=[\"gh\", \"pr\", \"checks\"], decision=\"allow\")\n\nprefix_rule(pattern=[\"docker\", \"ps\"], decision=\"allow\")\n\nprefix_rule(pattern=[\"git\", \"push\"], decision=\"prompt\")\nprefix_rule(pattern=[\"git\", \"reset\"], decision=\"prompt\")\nprefix_rule(pattern=[\"git\", \"clean\"], decision=\"prompt\")\nprefix_rule(pattern=[\"git\", \"merge\"], decision=\"prompt\")\nprefix_rule(pattern=[\"git\", \"rebase\"], decision=\"prompt\")\nprefix_rule(pattern=[\"git\", \"checkout\"], decision=\"prompt\")\n\nprefix_rule(pattern=[\"rm\"], decision=\"prompt\")\nprefix_rule(pattern=[\"mv\"], decision=\"prompt\")\nprefix_rule(pattern=[\"chmod\"], decision=\"prompt\")\nprefix_rule(pattern=[\"chown\"], decision=\"prompt\")\nprefix_rule(pattern=[\"kill\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pkill\"], decision=\"prompt\")\n\nprefix_rule(pattern=[\"npm\", \"install\"], decision=\"prompt\")\nprefix_rule(pattern=[\"npm\", \"uninstall\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pnpm\", \"add\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pnpm\", \"remove\"], decision=\"prompt\")\nprefix_rule(pattern=[\"yarn\", \"add\"], decision=\"prompt\")\nprefix_rule(pattern=[\"yarn\", \"remove\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pip\", \"install\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pip\", \"uninstall\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pip3\", \"install\"], decision=\"prompt\")\nprefix_rule(pattern=[\"pip3\", \"uninstall\"], decision=\"prompt\")\n\nprefix_rule(pattern=[\"docker\", \"run\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"rm\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"stop\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"volume\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"system\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"compose\", \"up\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"compose\", \"down\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"compose\", \"rm\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker\", \"compose\", \"stop\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker-compose\", \"up\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker-compose\", \"down\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker-compose\", \"rm\"], decision=\"prompt\")\nprefix_rule(pattern=[\"docker-compose\", \"stop\"], decision=\"prompt\")\n\n# `tail -f`/`--follow` never returns and hangs the agent (bare `tail` stays allowed above).\nprefix_rule(pattern=[\"tail\", \"-f\"], decision=\"prompt\")\nprefix_rule(pattern=[\"tail\", \"--follow\"], decision=\"prompt\")\n# rg and `sed -n` are prompt, NOT allow: argv-prefix matching cannot gate their\n# code-exec forms (rg --pre=CMD or a reordered --pre; sed -n 'e CMD' / -ni) while a\n# shorter allow prefix would auto-approve the whole command.\nprefix_rule(pattern=[\"rg\"], decision=\"prompt\")\nprefix_rule(pattern=[\"sed\", \"-n\"], decision=\"prompt\")\nprefix_rule(pattern=[\"find\"], decision=\"prompt\")\nprefix_rule(pattern=[\"sed\", \"-i\"], decision=\"prompt\")\nprefix_rule(pattern=[\"sed\", \"--in-place\"], decision=\"prompt\")\nprefix_rule(pattern=[\"awk\"], decision=\"prompt\")\nprefix_rule(pattern=[\"xargs\"], decision=\"prompt\")\nprefix_rule(pattern=[\"tee\"], decision=\"prompt\")\nprefix_rule(pattern=[\"curl\"], decision=\"prompt\")\nprefix_rule(pattern=[\"env\"], decision=\"prompt\")\n\nprefix_rule(pattern=[\"sudo\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"eval\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"mkfs\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"dd\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"git\", \"push\", \"--force\", \"origin\", \"main\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"git\", \"push\", \"--force\", \"origin\", \"master\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"git\", \"push\", \"-f\", \"origin\", \"main\"], decision=\"forbidden\")\nprefix_rule(pattern=[\"git\", \"push\", \"-f\", \"origin\", \"master\"], decision=\"forbidden\")\n"
@@ -40,4 +40,4 @@ export const GENERATED_PAYLOAD_PATHS = [
   "notification.mp3"
 ] as const
 
-export const GENERATED_PAYLOAD_HASH = "bcecc4e9055132d14ff1aebdc5359b36eaeae437a80a199bcf28cbe217c6e9a0"
+export const GENERATED_PAYLOAD_HASH = "940ea805811b304c9bb4da1d35b4ead0e9b653b7641632042cf298e97d88b789"

package/cli/src/main.ts

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
-import { Command, Options } from "@effect/cli"
+import { Command } from "@effect/cli"
 import { BunContext, BunRuntime } from "@effect/platform-bun"
-import { Console, Effect, Layer, Option } from "effect"
+import { Console, Effect, Layer } from "effect"
 import { engine } from "./engine"
 import { EngineServicesLive } from "./services"
 import { docsCommand } from "./commands/docs"
@@ -15,45 +15,9 @@ import { toolchainCommand } from "./commands/toolchain"
 import { updateCommand } from "./commands/update"
 import { GENERATED_PACKAGE_VERSION } from "./generated/sotPayload"
 
-const modelOrchestrator = Options.text("model-orchestrator").pipe(
-  Options.withDescription("Override the Docks workflow orchestrator role"),
-  Options.optional
-)
-const modelReviewer = Options.text("model-reviewer").pipe(
-  Options.withDescription("Override the Docks workflow reviewer role"),
-  Options.optional
-)
-const modelImplementer = Options.text("model-implementer").pipe(
-  Options.withDescription("Override the Docks workflow implementer role"),
-  Options.optional
-)
-const reviewMinScore = Options.text("review-min-score").pipe(
-  Options.withDescription("Override the Docks review minimum score (0..100)"),
-  Options.optional
-)
-const reviewMaxRounds = Options.text("review-max-rounds").pipe(
-  Options.withDescription("Override the Docks review maximum rounds (1..10)"),
-  Options.optional
-)
 
-const root = Command.make("docks-kit", {
-  modelOrchestrator,
-  modelReviewer,
-  modelImplementer,
-  reviewMinScore,
-  reviewMaxRounds
-}, (config) =>
+const root = Command.make("docks-kit", {}, () =>
   Effect.gen(function* () {
-    const workflowArgs: Array<string> = ["workflow"]
-    Option.map(config.modelOrchestrator, (value) => workflowArgs.push(`--model-orchestrator=${value}`))
-    Option.map(config.modelReviewer, (value) => workflowArgs.push(`--model-reviewer=${value}`))
-    Option.map(config.modelImplementer, (value) => workflowArgs.push(`--model-implementer=${value}`))
-    Option.map(config.reviewMinScore, (value) => workflowArgs.push(`--review-min-score=${value}`))
-    Option.map(config.reviewMaxRounds, (value) => workflowArgs.push(`--review-max-rounds=${value}`))
-    if (workflowArgs.length > 1) {
-      yield* engine(workflowArgs)
-      return
-    }
     yield* Console.log("docks-kit — portable AI coding agent config kit")
     yield* Console.log("")
     yield* Console.log("  docks-kit sync [claude] [codex] [agents]   deploy the SoT to this machine")
@@ -110,27 +74,12 @@ const emptyTextOptions = new Set([
   "--claude-advisor=",
   "--codex-model=",
   "--codex-effort=",
-  "--model-orchestrator=",
-  "--model-reviewer=",
-  "--model-implementer=",
-  "--review-min-score=",
-  "--review-max-rounds="
-])
-const workflowTextOptions = new Set([
-  "--model-orchestrator",
-  "--model-reviewer",
-  "--model-implementer",
-  "--review-min-score",
-  "--review-max-rounds"
 ])
 const argv = process.argv.flatMap((a, index, all) => {
   if (a.startsWith("--claude-plugin=")) {
     return ["--claude-plugin", a.slice("--claude-plugin=".length)]
   }
   if (emptyTextOptions.has(a)) return [a.slice(0, -1), ""]
-  if (workflowTextOptions.has(a) && (all[index + 1] === undefined || all[index + 1]!.startsWith("--"))) {
-    return [a, ""]
-  }
   return [a]
 })
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docks-kit",
-  "version": "0.10.2",
+  "version": "0.11.0",
   "description": "Portable AI coding agent config kit — SoT sync engine + typed CLI for Claude Code, Codex, and universal agent skills",
   "type": "module",
   "license": "MIT",

package/cli/src/engine-native/workflowDeploy.ts

@@ -1,139 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs"
-import { dirname } from "node:path"
-
-import type { Ctx } from "./index"
-import {
-  WORKFLOW_RECORD_PREFIX,
-  buildWorkflowRecord,
-  defaultWorkflowRecord,
-  parseWorkflowRecord,
-  renderWorkflowRecordLine,
-  type WorkflowOverrides,
-  type WorkflowRecord
-} from "../workflowModels"
-
-export interface WorkflowFileSystem {
-  readonly read: (path: string) => string | undefined
-  readonly writeAtomic: (path: string, bytes: string) => void
-  readonly remove: (path: string) => void
-}
-
-let atomicWriteSequence = 0
-
-const nodeFileSystem: WorkflowFileSystem = {
-  read: (path) => existsSync(path) ? readFileSync(path, "utf8") : undefined,
-  writeAtomic: (path, bytes) => {
-    mkdirSync(dirname(path), { recursive: true })
-    const temporary = `${path}.tmp-${process.pid}-${atomicWriteSequence++}`
-    try {
-      writeFileSync(temporary, bytes)
-      renameSync(temporary, path)
-    } finally {
-      rmSync(temporary, { force: true })
-    }
-  },
-  remove: (path) => rmSync(path, { force: true })
-}
-
-interface DocumentRecord {
-  readonly record: WorkflowRecord | undefined
-  readonly line: string | undefined
-}
-
-function readDocumentRecord(document: string | undefined, label: string): DocumentRecord {
-  const lines = (document ?? "").split("\n").filter((line) => line.startsWith(WORKFLOW_RECORD_PREFIX))
-  if (lines.length === 0) return { record: undefined, line: undefined }
-
-  let canonicalLine: string | undefined
-  let canonicalRecord: WorkflowRecord | undefined
-  for (const line of lines) {
-    let record: WorkflowRecord
-    try {
-      record = parseWorkflowRecord(JSON.parse(line.slice(WORKFLOW_RECORD_PREFIX.length)) as unknown)
-    } catch (error) {
-      const detail = error instanceof Error ? error.message : String(error)
-      throw new Error(`${label} contains a malformed Docks workflow record: ${detail}`)
-    }
-    const rendered = renderWorkflowRecordLine(record)
-    if (canonicalLine !== undefined && rendered !== canonicalLine) {
-      throw new Error(`${label} contains conflicting Docks workflow records`)
-    }
-    canonicalLine = rendered
-    canonicalRecord = record
-  }
-  return { record: canonicalRecord, line: canonicalLine }
-}
-
-export function upsertWorkflowRecord(document: string, record: WorkflowRecord): string {
-  const content = document
-    .split("\n")
-    .filter((line) => !line.startsWith(WORKFLOW_RECORD_PREFIX))
-    .join("\n")
-    .replace(/\n+$/, "")
-  const line = renderWorkflowRecordLine(record)
-  return content === "" ? `${line}\n` : `${content}\n${line}\n`
-}
-
-export function renderDefaultWorkflowInstructions(document: string): string {
-  readDocumentRecord(document, "SoT instruction document")
-  return upsertWorkflowRecord(document, defaultWorkflowRecord())
-}
-
-function restoreSnapshot(fileSystem: WorkflowFileSystem, path: string, snapshot: string | undefined): void {
-  if (snapshot === undefined) fileSystem.remove(path)
-  else fileSystem.writeAtomic(path, snapshot)
-}
-
-export function deployWorkflowOverrides(
-  ctx: Ctx,
-  overrides: WorkflowOverrides,
-  fileSystem: WorkflowFileSystem = nodeFileSystem
-): void {
-  const claudePath = `${ctx.home}/.claude/CLAUDE.md`
-  const codexPath = `${ctx.home}/.codex/AGENTS.md`
-  const claudeBefore = fileSystem.read(claudePath)
-  const codexBefore = fileSystem.read(codexPath)
-  const claudeState = readDocumentRecord(claudeBefore, claudePath)
-  const codexState = readDocumentRecord(codexBefore, codexPath)
-
-  if (claudeState.line !== undefined && codexState.line !== undefined && claudeState.line !== codexState.line) {
-    throw new Error("Claude and Codex instruction files contain conflicting Docks workflow records")
-  }
-
-  const base = claudeState.record ?? codexState.record ?? defaultWorkflowRecord()
-  const record = buildWorkflowRecord(overrides, base)
-  const claudeAfter = upsertWorkflowRecord(claudeBefore ?? "", record)
-  const codexAfter = upsertWorkflowRecord(codexBefore ?? "", record)
-  const claudeChanged = claudeBefore !== claudeAfter
-  const codexChanged = codexBefore !== codexAfter
-
-  if (ctx.dryRun) {
-    if (claudeChanged) ctx.services.logger.echo(`[dry-run] update Docks workflow record in ${claudePath}`)
-    if (codexChanged) ctx.services.logger.echo(`[dry-run] update Docks workflow record in ${codexPath}`)
-    if (!claudeChanged && !codexChanged) ctx.services.logger.verbose("Workflow models already match the requested state")
-    return
-  }
-
-  if (!claudeChanged && !codexChanged) {
-    ctx.services.logger.verbose("Workflow models already match the requested state")
-    return
-  }
-
-  try {
-    if (claudeChanged) fileSystem.writeAtomic(claudePath, claudeAfter)
-    if (codexChanged) fileSystem.writeAtomic(codexPath, codexAfter)
-  } catch (error) {
-    try {
-      restoreSnapshot(fileSystem, claudePath, claudeBefore)
-      restoreSnapshot(fileSystem, codexPath, codexBefore)
-    } finally {
-      ctx.services.logger.err("Workflow update failed; restored both instruction files to their pre-run state")
-    }
-    throw error
-  }
-
-  ctx.services.logger.change("Workflow models updated in Claude and Codex instructions")
-  ctx.services.logger.warn("Start fresh Claude Code and Codex sessions before relying on the new workflow roles")
-  ctx.nextStepTriggers.claudeRestart = true
-  ctx.nextStepTriggers.codexRestart = true
-}

package/cli/src/workflowModels.ts

@@ -1,452 +0,0 @@
-import {
-  CLAUDE_EFFORT_LEVELS,
-  CODEX_REASONING_EFFORTS
-} from "./efforts"
-import { payloadText } from "./payload"
-
-export type WorkflowTool = "claude" | "codex"
-export type WorkflowCompany = "anthropic" | "openai"
-export type WorkflowRoleName = "orchestrator" | "reviewer" | "implementer"
-export type WorkflowBoundName = "minimum_score" | "max_rounds"
-export type WorkflowServiceTier = "fast"
-
-export interface WorkflowCandidate {
-  readonly company: WorkflowCompany
-  readonly tool: WorkflowTool
-  readonly model: string
-  readonly effort: string
-  readonly service_tier?: WorkflowServiceTier
-}
-
-export interface WorkflowRole {
-  readonly selector: string
-  readonly candidates: ReadonlyArray<WorkflowCandidate>
-}
-
-export interface WorkflowRecordV1 {
-  readonly schema: 1
-  readonly orchestrator: WorkflowRole
-  readonly reviewer: WorkflowRole
-  readonly implementer: WorkflowRole
-  readonly review: {
-    readonly minimum_score: number
-    readonly max_rounds: number
-  }
-}
-
-export interface WorkflowRecordV2 {
-  readonly schema: 2
-  readonly orchestrator: WorkflowRole
-  readonly reviewer: WorkflowRole
-  readonly implementer: WorkflowRole
-  readonly review: {
-    readonly minimum_score: number
-    readonly max_rounds: number
-  }
-}
-
-export type WorkflowRecord = WorkflowRecordV1 | WorkflowRecordV2
-
-export interface WorkflowOverrides {
-  readonly orchestrator?: string
-  readonly reviewer?: string
-  readonly implementer?: string
-  readonly minimumScore?: string
-  readonly maxRounds?: string
-}
-
-interface WorkflowProfile {
-  readonly candidates: ReadonlyArray<WorkflowCandidate>
-}
-
-interface WorkflowRegistryCore {
-  readonly schema: 2
-  readonly profiles: Readonly<Record<string, WorkflowProfile>>
-  readonly defaults: {
-    readonly orchestrator: string
-    readonly reviewer: string
-    readonly implementer: string
-    readonly review: {
-      readonly minimum_score: number
-      readonly max_rounds: number
-    }
-  }
-  readonly exact_target_grammar: "<tool>:<model>@<effort>[+fast]"
-  readonly availability: "checked_when_used"
-}
-
-export interface WorkflowRegistryView extends WorkflowRegistryCore {
-  readonly tools: Readonly<Record<WorkflowTool, {
-    readonly models: ReadonlyArray<string>
-    readonly efforts: ReadonlyArray<string>
-  }>>
-}
-
-type UnknownRecord = Record<string, unknown>
-
-export const WORKFLOW_RECORD_PREFIX = "Docks-workflow-models: "
-
-const TOOL_COMPANIES: Readonly<Record<WorkflowTool, WorkflowCompany>> = {
-  claude: "anthropic",
-  codex: "openai"
-}
-
-const isRecord = (value: unknown): value is UnknownRecord =>
-  typeof value === "object" && value !== null && !Array.isArray(value)
-
-function hasExactKeys(value: UnknownRecord, keys: ReadonlyArray<string>): boolean {
-  const actual = Object.keys(value).sort()
-  return actual.length === keys.length && keys.every((key, index) => actual[index] === key)
-}
-
-function expectRecord(value: unknown, label: string, keys: ReadonlyArray<string>): UnknownRecord {
-  if (!isRecord(value) || !hasExactKeys(value, [...keys].sort())) {
-    throw new Error(`${label} must be a closed record`)
-  }
-  return value
-}
-
-function parseManifest(): UnknownRecord {
-  const parsed = JSON.parse(payloadText("SoT/models.json")) as unknown
-  if (!isRecord(parsed)) throw new Error("Embedded model catalog must be an object")
-  return parsed
-}
-
-function toolModels(manifest: UnknownRecord, tool: WorkflowTool): ReadonlyArray<string> {
-  const entry = manifest[tool]
-  if (!isRecord(entry) || !Array.isArray(entry["models"])) {
-    throw new Error(`Embedded ${tool} model catalog is invalid`)
-  }
-  const models = entry["models"].map((item) => {
-    if (!isRecord(item) || typeof item["id"] !== "string") {
-      throw new Error(`Embedded ${tool} model entry is invalid`)
-    }
-    return item["id"]
-  })
-  return models.filter((model) => model !== "default")
-}
-
-const toolEfforts = (tool: WorkflowTool): ReadonlyArray<string> =>
-  tool === "claude" ? CLAUDE_EFFORT_LEVELS : CODEX_REASONING_EFFORTS
-
-function parseCandidate(
-  value: unknown,
-  label: string,
-  tools: WorkflowRegistryView["tools"],
-  allowServiceTier: boolean
-): WorkflowCandidate {
-  const serviceTier = isRecord(value) ? value["service_tier"] : undefined
-  const keys = serviceTier === undefined
-    ? ["company", "effort", "model", "tool"]
-    : ["company", "effort", "model", "service_tier", "tool"]
-  const candidate = expectRecord(value, label, keys)
-  const tool = candidate["tool"]
-  if (tool !== "claude" && tool !== "codex") throw new Error(`${label} has an invalid tool`)
-  const company = candidate["company"]
-  const expectedCompany = TOOL_COMPANIES[tool]
-  if (company !== expectedCompany) throw new Error(`${label} has an invalid company`)
-  const model = candidate["model"]
-  if (typeof model !== "string" || !tools[tool].models.includes(model)) {
-    throw new Error(`${label} has an unverified ${tool} model`)
-  }
-  const effort = candidate["effort"]
-  if (typeof effort !== "string" || !tools[tool].efforts.includes(effort)) {
-    throw new Error(`${label} has an unverified ${tool} effort`)
-  }
-  if (serviceTier !== undefined) {
-    if (!allowServiceTier) throw new Error(`${label} requires workflow record schema 2 for a service tier`)
-    if (tool !== "codex" || serviceTier !== "fast") throw new Error(`${label} has an invalid service tier`)
-    return { company: expectedCompany, tool, model, effort, service_tier: "fast" }
-  }
-  return { company: expectedCompany, tool, model, effort }
-}
-
-function parseCandidates(
-  value: unknown,
-  label: string,
-  tools: WorkflowRegistryView["tools"],
-  allowServiceTier = false
-): ReadonlyArray<WorkflowCandidate> {
-  if (!Array.isArray(value) || value.length < 1 || value.length > 3) {
-    throw new Error(`${label} must contain one to three candidates`)
-  }
-  return value.map((candidate, index) =>
-    parseCandidate(candidate, `${label}[${index}]`, tools, allowServiceTier)
-  )
-}
-
-function parseNumericBound(name: WorkflowBoundName, value: unknown): number {
-  const [minimum, maximum] = name === "minimum_score" ? [0, 100] : [1, 10]
-  if (typeof value !== "number" || !Number.isInteger(value) || value < minimum || value > maximum) {
-    throw new Error(`${name} must be an integer in ${minimum}..${maximum}`)
-  }
-  return value
-}
-
-function resolveSelector(
-  selector: string,
-  registry: Pick<WorkflowRegistryView, "profiles" | "tools">
-): WorkflowRole {
-  const profileMatch = /^profile:([A-Za-z0-9._-]+)$/.exec(selector)
-  if (profileMatch !== null) {
-    const profileName = profileMatch[1]!
-    const profile = registry.profiles[profileName]
-    if (profile === undefined) throw new Error(`Unknown workflow profile '${profileName}'`)
-    return { selector, candidates: profile.candidates }
-  }
-
-  const exactMatch = /^(claude|codex):([A-Za-z0-9._-]+)@([A-Za-z0-9._-]+)(\+fast)?$/.exec(selector)
-  if (exactMatch === null) {
-    throw new Error(
-      `Invalid workflow selector '${selector}' — expected profile:<name> or <tool>:<model>@<effort>[+fast]`
-    )
-  }
-  const tool = exactMatch[1] as WorkflowTool
-  const model = exactMatch[2]!
-  const effort = exactMatch[3]!
-  const fast = exactMatch[4] !== undefined
-  if (!registry.tools[tool].models.includes(model)) {
-    throw new Error(`Unknown ${tool} workflow model '${model}'`)
-  }
-  if (!registry.tools[tool].efforts.includes(effort)) {
-    throw new Error(`Unknown ${tool} workflow effort '${effort}'`)
-  }
-  if (fast && tool !== "codex") {
-    throw new Error(`Invalid workflow selector '${selector}' — Fast is available only for Codex selectors`)
-  }
-  const candidate: WorkflowCandidate = { company: TOOL_COMPANIES[tool], tool, model, effort }
-  return {
-    selector,
-    candidates: [fast ? { ...candidate, service_tier: "fast" } : candidate]
-  }
-}
-
-function loadWorkflowRegistry(): WorkflowRegistryView {
-  const manifest = parseManifest()
-  const tools: WorkflowRegistryView["tools"] = {
-    claude: { models: toolModels(manifest, "claude"), efforts: toolEfforts("claude") },
-    codex: { models: toolModels(manifest, "codex"), efforts: toolEfforts("codex") }
-  }
-  const workflow = expectRecord(
-    manifest["workflow"],
-    "Embedded workflow registry",
-    ["availability", "defaults", "exact_target_grammar", "profiles", "schema"]
-  )
-  if (workflow["schema"] !== 2) throw new Error("Embedded workflow registry schema must be 2")
-  if (workflow["exact_target_grammar"] !== "<tool>:<model>@<effort>[+fast]") {
-    throw new Error("Embedded workflow exact-target grammar is invalid")
-  }
-  if (workflow["availability"] !== "checked_when_used") {
-    throw new Error("Embedded workflow availability contract is invalid")
-  }
-
-  const rawProfiles = workflow["profiles"]
-  if (!isRecord(rawProfiles) || Object.keys(rawProfiles).length === 0) {
-    throw new Error("Embedded workflow profiles must be a nonempty record")
-  }
-  const profiles: Record<string, WorkflowProfile> = {}
-  for (const [name, rawProfile] of Object.entries(rawProfiles)) {
-    if (!/^[A-Za-z0-9._-]+$/.test(name)) throw new Error(`Invalid workflow profile name '${name}'`)
-    const profile = expectRecord(rawProfile, `Workflow profile '${name}'`, ["candidates"])
-    profiles[name] = {
-      candidates: parseCandidates(profile["candidates"], `Workflow profile '${name}' candidates`, tools)
-    }
-  }
-
-  const rawDefaults = expectRecord(
-    workflow["defaults"],
-    "Embedded workflow defaults",
-    ["implementer", "orchestrator", "review", "reviewer"]
-  )
-  const rawReview = expectRecord(
-    rawDefaults["review"],
-    "Embedded workflow review defaults",
-    ["max_rounds", "minimum_score"]
-  )
-  for (const role of ["orchestrator", "reviewer", "implementer"] as const) {
-    if (typeof rawDefaults[role] !== "string") throw new Error(`Embedded workflow ${role} default is invalid`)
-  }
-  const registry: WorkflowRegistryView = {
-    schema: 2,
-    profiles,
-    defaults: {
-      orchestrator: rawDefaults["orchestrator"] as string,
-      reviewer: rawDefaults["reviewer"] as string,
-      implementer: rawDefaults["implementer"] as string,
-      review: {
-        minimum_score: parseNumericBound("minimum_score", rawReview["minimum_score"]),
-        max_rounds: parseNumericBound("max_rounds", rawReview["max_rounds"])
-      }
-    },
-    tools,
-    exact_target_grammar: "<tool>:<model>@<effort>[+fast]",
-    availability: "checked_when_used"
-  }
-  resolveSelector(registry.defaults.orchestrator, registry)
-  resolveSelector(registry.defaults.reviewer, registry)
-  resolveSelector(registry.defaults.implementer, registry)
-  return registry
-}
-
-export function workflowRegistryView(): WorkflowRegistryView {
-  return loadWorkflowRegistry()
-}
-
-export function resolveWorkflowSelector(selector: string): WorkflowRole {
-  return resolveSelector(selector, loadWorkflowRegistry())
-}
-
-export function parseWorkflowBound(name: WorkflowBoundName, value: string): number {
-  if (!/^[0-9]+$/.test(value)) {
-    const range = name === "minimum_score" ? "0..100" : "1..10"
-    throw new Error(`${name} must be a base-10 integer in ${range}`)
-  }
-  return parseNumericBound(name, Number(value))
-}
-
-export function defaultWorkflowRecord(): WorkflowRecordV1 {
-  const registry = loadWorkflowRegistry()
-  return {
-    schema: 1,
-    orchestrator: resolveSelector(registry.defaults.orchestrator, registry),
-    reviewer: resolveSelector(registry.defaults.reviewer, registry),
-    implementer: resolveSelector(registry.defaults.implementer, registry),
-    review: registry.defaults.review
-  }
-}
-
-function parseRole(
-  value: unknown,
-  name: WorkflowRoleName,
-  registry: WorkflowRegistryView,
-  schema: 1 | 2
-): WorkflowRole {
-  const role = expectRecord(value, `Workflow ${name} role`, ["candidates", "selector"])
-  if (typeof role["selector"] !== "string") throw new Error(`Workflow ${name} selector is invalid`)
-  const resolved = resolveSelector(role["selector"], registry)
-  const candidates = parseCandidates(
-    role["candidates"],
-    `Workflow ${name} candidates`,
-    registry.tools,
-    schema === 2
-  )
-  if (compactJcs(candidates) !== compactJcs(resolved.candidates)) {
-    throw new Error(`Workflow ${name} candidates do not match its selector`)
-  }
-  return resolved
-}
-
-function recordUsesFast(roles: ReadonlyArray<WorkflowRole>): boolean {
-  return roles.some((role) => role.candidates.some((candidate) => candidate.service_tier === "fast"))
-}
-
-export function parseWorkflowRecord(value: unknown): WorkflowRecord {
-  const record = expectRecord(
-    value,
-    "Workflow record",
-    ["implementer", "orchestrator", "review", "reviewer", "schema"]
-  )
-  const schema = record["schema"]
-  if (schema !== 1 && schema !== 2) throw new Error("Workflow record schema must be 1 or 2")
-  const registry = loadWorkflowRegistry()
-  const review = expectRecord(record["review"], "Workflow record review", ["max_rounds", "minimum_score"])
-  const orchestrator = parseRole(record["orchestrator"], "orchestrator", registry, schema)
-  const reviewer = parseRole(record["reviewer"], "reviewer", registry, schema)
-  const implementer = parseRole(record["implementer"], "implementer", registry, schema)
-  const parsed = {
-    orchestrator,
-    reviewer,
-    implementer,
-    review: {
-      minimum_score: parseNumericBound("minimum_score", review["minimum_score"]),
-      max_rounds: parseNumericBound("max_rounds", review["max_rounds"])
-    }
-  }
-  if (schema === 2 && !recordUsesFast([orchestrator, reviewer, implementer])) {
-    throw new Error("Workflow record schema 2 requires a Fast service tier")
-  }
-  return schema === 2 ? { schema: 2, ...parsed } : { schema: 1, ...parsed }
-}
-
-export function buildWorkflowRecord(
-  overrides: WorkflowOverrides,
-  base: WorkflowRecord = defaultWorkflowRecord()
-): WorkflowRecord {
-  const current = parseWorkflowRecord(base)
-  const orchestrator = overrides.orchestrator === undefined
-      ? current.orchestrator
-      : resolveWorkflowSelector(overrides.orchestrator)
-  const reviewer = overrides.reviewer === undefined
-      ? current.reviewer
-      : resolveWorkflowSelector(overrides.reviewer)
-  const implementer = overrides.implementer === undefined
-      ? current.implementer
-      : resolveWorkflowSelector(overrides.implementer)
-  const next = {
-    orchestrator,
-    reviewer,
-    implementer,
-    review: {
-      minimum_score: overrides.minimumScore === undefined
-        ? current.review.minimum_score
-        : parseWorkflowBound("minimum_score", overrides.minimumScore),
-      max_rounds: overrides.maxRounds === undefined
-        ? current.review.max_rounds
-        : parseWorkflowBound("max_rounds", overrides.maxRounds)
-    }
-  }
-  return recordUsesFast([orchestrator, reviewer, implementer])
-    ? { schema: 2, ...next }
-    : { schema: 1, ...next }
-}
-
-function canonicalValue(value: unknown): unknown {
-  if (value === null || typeof value === "string" || typeof value === "boolean") return value
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) throw new Error("JCS cannot encode a non-finite number")
-    return value
-  }
-  if (Array.isArray(value)) return value.map(canonicalValue)
-  if (isRecord(value)) {
-    return Object.fromEntries(
-      Object.entries(value)
-        .sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
-        .map(([key, item]) => [key, canonicalValue(item)])
-    )
-  }
-  throw new Error("JCS can encode only JSON values")
-}
-
-export function compactJcs(value: unknown): string {
-  return JSON.stringify(canonicalValue(value))
-}
-
-export function renderWorkflowRecordLine(record: WorkflowRecord): string {
-  return `${WORKFLOW_RECORD_PREFIX}${compactJcs(parseWorkflowRecord(record))}`
-}
-
-export function workflowRegistryJson(): string {
-  return JSON.stringify(workflowRegistryView(), null, 2)
-}
-
-export function workflowCatalog(): string {
-  const registry = workflowRegistryView()
-  const profileLines = Object.entries(registry.profiles).flatMap(([name, profile]) => [
-    `  profile:${name}`,
-    ...profile.candidates.map(({ tool, model, effort }) => `    ${tool}:${model}@${effort}`)
-  ])
-  return [
-    "Workflow model registry:",
-    "Profiles:",
-    ...profileLines,
-    "Defaults:",
-    `  orchestrator  ${registry.defaults.orchestrator}`,
-    `  reviewer      ${registry.defaults.reviewer}`,
-    `  implementer   ${registry.defaults.implementer}`,
-    `  review        minimum score ${registry.defaults.review.minimum_score}; maximum rounds ${registry.defaults.review.max_rounds}`,
-    `Exact targets: ${registry.exact_target_grammar}`,
-    "Fast: append +fast to a Codex exact target. Without +fast, Codex roles use Standard.",
-    "Compatibility: +fast requires a Docks consumer that supports workflow record schema 2.",
-    "Availability: checked when used by Docks; docks-kit does not probe providers."
-  ].join("\n")
-}