greprag 5.59.4 → 5.60.2

package/dist/session-id.js

@@ -49,6 +49,7 @@ exports.peerHumanTag = peerHumanTag;
 exports.readIdentityAlias = readIdentityAlias;
 exports.buildSessionIdContext = buildSessionIdContext;
 exports.armMonitorCommand = armMonitorCommand;
+exports.buildArmDirective = buildArmDirective;
 exports.handleSessionIdHook = handleSessionIdHook;
 const path = __importStar(require("path"));
 const fs = __importStar(require("fs"));
@@ -175,6 +176,18 @@ function armMonitorCommand(short, ownerPid, assistant = false, mechanic = false)
     // the relaunch rate so a persistent crash can't spin.
     return `while true; do ${watch}; case $? in 0|64) break;; esac; sleep 1; done`;
 }
+/** Backward-compatible copyable watcher directive for older hook consumers.
+ *  Current hooks use the detection-gated reminder registry, but keeping this
+ *  pure formatter exported preserves the public helper and older integrations. */
+function buildArmDirective(short, alias = null, ownerPid, assistant = false, mechanic = false) {
+    const reply = `${alias || '<handle>'}@greprag.com/${short}`;
+    const command = armMonitorCommand(short, ownerPid, assistant, mechanic);
+    return 'STOP IMMEDIATELY AND READ THIS. '
+        + `No live inbox watcher is armed for ${reply}. `
+        + 'ToolSearch query "select:Monitor" and arm a persistent:true Monitor '
+        + `(description:"greprag inbox ${short}", timeout_ms:3600000) with command: ${command}. `
+        + 'Then answer the waiting peer message.';
+}
 /** Handle `greprag-hook session-id`. Reads the Claude Code hook payload
  *  from `input.session_id`, emits a JSON response with hookSpecificOutput.
  *  additionalContext to stdout. Silent on missing session_id (other hook

package/dist/session-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../src/session-id.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,8CAKC;AAWD,wCAQC;AAaD,oCAIC;AASD,8CAaC;AAWD,sDAUC;AAuBD,8CAkBC;AAWD,kDAaC;AAjKD,2CAA6B;AAC7B,uCAAyB;AAEzB;;;;;;;;kDAQkD;AAClD,SAAgB,iBAAiB,CAAC,SAAoC;IACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;sCAQsC;AACtC,SAAgB,cAAc;IAC5B,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB;WAC/B,OAAO,CAAC,GAAG,CAAC,eAAe;WAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,IAAI,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;yDAUyD;AACzD,SAAgB,YAAY,CAAC,SAAoC;IAC/D,OAAO,SAAS;QACd,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,6CAA6C,CAAC;AACpD,CAAC;AAED;;;;;;0CAM0C;AAC1C,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACpD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;+EAQ+E;AAC/E,SAAgB,qBAAqB,CACnC,KAAa,EACb,QAAuB,IAAI;IAE3B,MAAM,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC;IACnC,OAAO,CACL,4BAA4B,KAAK,IAAI;UACnC,iBAAiB,MAAM,gBAAgB,KAAK,GAAG;UAC/C,2BAA2B,MAAM,wEAAwE,CAC5G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;0EAoB0E;AAC1E,SAAgB,iBAAiB,CAC/B,KAAa,EACb,QAAwB,EACxB,SAAS,GAAG,KAAK,EACjB,QAAQ,GAAG,KAAK;IAEhB,kFAAkF;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,iCAAiC,KAAK,UAAU,KAAK,GAAG,IAAI,EAAE,CAAC;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,sDAAsD;IACtD,OAAO,kBAAkB,KAAK,gDAAgD,CAAC;AACjF,CAAC;AAED;;;;;;;;qDAQqD;AACrD,SAAgB,mBAAmB,CACjC,KAA8B;IAE9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,cAAc;YAC7B,iBAAiB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;SACvD;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../src/session-id.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,8CAKC;AAWD,wCAQC;AAaD,oCAIC;AASD,8CAaC;AAWD,sDAUC;AAuBD,8CAkBC;AAKD,8CAcC;AAWD,kDAaC;AApLD,2CAA6B;AAC7B,uCAAyB;AAEzB;;;;;;;;kDAQkD;AAClD,SAAgB,iBAAiB,CAAC,SAAoC;IACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;sCAQsC;AACtC,SAAgB,cAAc;IAC5B,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB;WAC/B,OAAO,CAAC,GAAG,CAAC,eAAe;WAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,IAAI,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;yDAUyD;AACzD,SAAgB,YAAY,CAAC,SAAoC;IAC/D,OAAO,SAAS;QACd,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,6CAA6C,CAAC;AACpD,CAAC;AAED;;;;;;0CAM0C;AAC1C,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACpD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;+EAQ+E;AAC/E,SAAgB,qBAAqB,CACnC,KAAa,EACb,QAAuB,IAAI;IAE3B,MAAM,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC;IACnC,OAAO,CACL,4BAA4B,KAAK,IAAI;UACnC,iBAAiB,MAAM,gBAAgB,KAAK,GAAG;UAC/C,2BAA2B,MAAM,wEAAwE,CAC5G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;0EAoB0E;AAC1E,SAAgB,iBAAiB,CAC/B,KAAa,EACb,QAAwB,EACxB,SAAS,GAAG,KAAK,EACjB,QAAQ,GAAG,KAAK;IAEhB,kFAAkF;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,iCAAiC,KAAK,UAAU,KAAK,GAAG,IAAI,EAAE,CAAC;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,sDAAsD;IACtD,OAAO,kBAAkB,KAAK,gDAAgD,CAAC;AACjF,CAAC;AAED;;kFAEkF;AAClF,SAAgB,iBAAiB,CAC/B,KAAa,EACb,QAAuB,IAAI,EAC3B,QAAwB,EACxB,SAAS,GAAG,KAAK,EACjB,QAAQ,GAAG,KAAK;IAEhB,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,UAAU,gBAAgB,KAAK,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxE,OAAO,kCAAkC;UACrC,sCAAsC,KAAK,IAAI;UAC/C,sEAAsE;UACtE,+BAA+B,KAAK,wCAAwC,OAAO,IAAI;UACvF,uCAAuC,CAAC;AAC9C,CAAC;AAED;;;;;;;;qDAQqD;AACrD,SAAgB,mBAAmB,CACjC,KAA8B;IAE9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,cAAc;YAC7B,iBAAiB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;SACvD;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "greprag",
-  "version": "5.59.4",
+  "version": "5.60.2",
   "description": "GrepRAG — agent memory for Claude Code, Codex, and OpenCode.",
   "main": "dist/index.js",
   "bin": {

package/skill/greprag/SKILL.md

@@ -130,7 +130,7 @@ Aliases (silent back-compat): `greprag memory briefing` → `recap` (renamed v5.
 
 **Codex: DO NOT CLAIM HOOKS ARE ACTIVE JUST BECAUSE `~/.codex/hooks.json` EXISTS.** Codex Desktop requires Settings -> Settings -> Hooks trust review before command hooks run automatically. If turn capture is missing after `greprag init --codex`, tell the user: open Codex Desktop Settings -> Settings -> Hooks, trust the GrepRAG hooks, then start a fresh Codex session.
 
-**Codex live inbox push requires the startup watcher plus target-thread delivery.** Hooks only fire at Codex turn/tool/session boundaries. Public installs should use `greprag init --codex --tenant-id <handle> --install-watcher`; run `greprag codex doctor --wake-test` to inspect state, and use `greprag codex watch --session <id>` only for foreground testing. The sidecar listens to GrepRAG inbox SSE. Native `send_message_to_thread` / `codex_delegation` proved the messaging pattern; on Windows the public sidecar uses Codex app-server stdio `thread/resume` for the exact target thread, then `turn/start` or `turn/steer`, and keeps the bridge alive until the turn settles. `codex exec resume` is diagnostic/history-only because it can append to history without surfacing in the active Desktop pane. If wake-test reports no app-server-resume path, describe live push as unavailable/non-visible and rely on turn-bound inbox steering for reliable delivery.
+**Codex live inbox push requires the startup watcher plus target-thread delivery.** Hooks only fire at Codex turn/tool/session boundaries. Public installs should use `greprag init --codex --tenant-id <handle> --install-watcher`; run `greprag codex doctor --wake-test` to inspect state, and use `greprag codex watch --session <id>` only for foreground testing. The sidecar listens to GrepRAG inbox SSE. BREAKTHROUGH is the sole agent-visible control rail: it records queued → injected → acknowledged → acted with a nonce-bound target acknowledgment. Codex app-server `thread/resume`, `turn/start`, and `turn/steer` are private transports behind that rail. A completed empty turn, `codex exec resume`, or persisted history entry is not delivery; natural turn-drain is degraded fallback only. If wake-test reports no loaded/native path, surface delivery degradation and keep the breakthrough pending for retry.
 
 **ABOUT TO `greprag send` TO A `@gmail.com` / `@anthropic.com` / REAL EMAIL ADDRESS? STOP — for `inbox`/`send` (internal cross-session messaging), `users.email` IS NEVER A ROUTING ADDRESS.** Use the numeric handle (`1834729@greprag.com`) or claimed vanity alias (`travis@greprag.com`). If you don't know the recipient's handle, ASK — don't guess from their email. adr: adr/numeric-handles.md. Full grammar: `docs/inbox.md § address`.
 

package/skill/greprag/docs/codex-chip.md

@@ -13,14 +13,16 @@ greprag codex chip spawn "<task>" --name <slug> --title "<Purview>" \
 Native-v4 sends the full mission, selected model/effort, and worktree in the
 initial `create_thread`. There is no bootstrap task and no second assignment.
 The initial hook binds the lease before tools; attach emits `IN-FLIGHT` and
-starts monitoring only. A single task is `Chip: <Purview>`. Multi-chip missions
-use `LEAD: <Mission>` and unique `Chip A/B/C: <Specific Purview>` identities.
-
-The standard/default profile is `gpt-5.6-luna` at `xhigh`. Use
-`--profile complex` (or `--complex`) for `gpt-5.6-sol` at `high` when the chip
-owns orchestration or unusually difficult work. Explicit `--model <model-id>`
-and `--effort none|minimal|low|medium|high|xhigh|max|ultra` create a custom
-override.
+starts monitoring only. Exact roles are `PLANNER: <Mission>` (intent and final
+acceptance), `LEAD: <Mission>` (Luna/xhigh orchestration), `Chip A/B/C:
+<Specific Purview>` (Luna/xhigh workers), and `ADVISOR: <Purview>` (read-only
+Sol advice for a documented fundamental blocker).
+
+Role gates are explicit: LEAD and worker execution are fixed to
+`gpt-5.6-luna/xhigh`; PLANNER may use Luna/xhigh or Sol/high for planning;
+ADVISOR is read-only Sol/high and requires `--model-reason "Fundamental
+blocker: ..."`. Complexity flags no longer route new execution chips to Sol.
+Use `codex chip breakthrough <id> --reason "..."` for boundary routing.
 
 Declare every path the child may change. Split overlapping work differently;
 never bypass a lease collision. Use `--read-only` for research or review.

package/skill/greprag/docs/setup.md

@@ -65,12 +65,12 @@ greprag codex watch --session <8hex-or-full-codex-session-id>
 
 If `--session` is omitted, it uses the latest Codex session recorded in
 `~/.codex/session_index.jsonl`. The sidecar stays attached to GrepRAG inbox SSE
-and should wake Codex through the Desktop app-layer thread continuation path,
-equivalent to Codex's `send_message_to_thread` tool. The successful visible
-shape is a delegated turn in the target thread (`codex_delegation` with the
-source thread id). `codex exec resume <session> -` can append to Codex's thread
-store, but it is not a reliable visible wake in the active Desktop pane and
-must be treated as fallback/diagnostic only.
+and routes agent-visible control through the nonce-bound BREAKTHROUGH protocol.
+Private app-server continuation may create the target turn, but success requires
+visible `BREAKTHROUGH_ACK:<nonce>` output; persisted history or an empty turn is
+not delivery. `codex exec resume <session> -` can append to Codex's thread store,
+but it is not a reliable visible wake in the active Desktop pane and must be
+treated as fallback/diagnostic only.
 Use `greprag codex startup status` to inspect the login entry and
 `greprag codex startup remove` to uninstall it.
 

package/skill/templates/chip-leader.md

@@ -13,12 +13,15 @@ before mobilizing the troops.
 
 ## Codex Desktop standard
 
-For Codex, the leader first creates one durable mission goal with objective,
-observable final state, and criterion IDs. The leader task is named
-`LEAD: <Mission>`. Before dispatch it assigns each workstream a unique letter
-and human purview—`Chip A: <Specific Purview>`, `Chip B: ...`—plus disjoint
-leases and explicit `--covers` criteria. Every spawn uses `--multi-chip`, its
-`--label`, and its proper `--title`.
+For Codex, the `PLANNER: <Mission>` first creates one durable mission goal with
+objective, observable final state, and criterion IDs, then launches exactly one
+`LEAD: <Mission>` at `gpt-5.6-luna/xhigh`. The LEAD owns decomposition, child
+dispatch, integration, checks, release proof, and immediate child closeout.
+Before dispatch it assigns each workstream a unique letter and human
+purview—`Chip A: <Specific Purview>`, `Chip B: ...`—plus disjoint leases and
+explicit `--covers` criteria. Every worker spawn uses `--multi-chip`, its
+`--label`, and its proper `--title`; workers stay Luna/xhigh. `ADVISOR:` is a
+read-only Sol/high escape hatch only for a documented fundamental blocker.
 
 Dispatch uses the native-v4 `createRequest` exactly once. It contains the real
 mission, the parent-selected model/effort, and native worktree setup; never send

package/skill/templates/codex-chip-spawn.md

@@ -3,6 +3,12 @@
 This is the Codex Desktop chip method. It is separate from Claude Code
 `spawn_task`: never use or copy the Claude Block 1/Block 2 prompt here.
 
+Exact visible titles are role contracts: `PLANNER: <Mission>` owns intent and
+acceptance, `LEAD: <Mission>` is always Luna/xhigh and owns orchestration,
+`Chip A/B/C: <Specific Purview>` are Luna/xhigh workers, and
+`ADVISOR: <Purview>` is read-only Sol/high advice for a documented fundamental
+blocker.
+
 ## Gate: one chip or a mission?
 
 A single independent task proceeds directly. If two or more chips target one
@@ -18,6 +24,10 @@ uniquely named `Chip A: <Specific Purview>`, `Chip B: ...`; a single worker is
 Every mission starts with a durable parent-owned goal. Give it a concrete
 objective, final state, and stable acceptance criterion IDs. Every write chip
 declares non-overlapping ownership leases; research uses `--read-only`.
+After the planner attaches the Luna LEAD, the LEAD creates one nested goal and
+runs `greprag codex chip goal bind-lead <lead-id> --goal-id <nested-goal-id>`.
+That emits `GOAL_READY:<goalId>`; no LEAD execution or child dispatch is valid
+before it. All later Chips, ADVISOR, and MECHANIC tasks use that exact goal.
 
 ```bash
 greprag codex chip goal create \
@@ -36,30 +46,18 @@ greprag codex chip spawn "<independent task>" \
 ```
 
 The parent/`LEAD:` selects each worker model before dispatch; the child never
-self-selects or changes it. Defaults are exact:
-
-- **Standard — `gpt-5.6-luna` / `xhigh`:** bounded single-owner execution with
-  clear acceptance criteria: scoped implementation, tests, docs, or focused
-  research/review.
-- **Complex — `gpt-5.6-sol` / `high`:** use when *any* hard signal applies:
-  orchestration/decomposition; multi-chip integration or merge arbitration;
-  architecture/API/schema decisions; cross-cutting ownership; ambiguous
-  requirements needing synthesis; high-risk migration/security/accounting
-  correctness; or novel diagnosis with multiple interacting hypotheses.
-
-In multi-chip missions the `LEAD:` itself is Sol/high, but it classifies every
-worker independently—workers do not inherit Sol. Complex selection requires a
-concise `--model-reason` plus one or more `--complexity-signal` values:
-`orchestration`, `multi-chip-integration`, `architecture-api-schema`,
-`cross-cutting-ownership`, `ambiguous-synthesis`, `high-risk-correctness`, or
-`novel-multi-hypothesis-diagnosis`. Explicit `--model`/`--effort` overrides are
-supported and require `--model-reason`; standard records its rubric reason by
-default. Native Desktop `thinking` uses the callable enum and is checked against
-the selected model's advertised effort matrix.
-An arbitrary custom native model also requires `--native-model-verified`, which
-means the parent verified it on the Desktop surface before dispatch. The
-manifest persists profile/model/effort, parent session in
-`selectedBy`, reason, and matched signals.
+self-selects or changes it. `LEAD` and ordinary Chips are fixed to
+`gpt-5.6-luna/xhigh`.
+`PLANNER` may use Luna/xhigh or explicitly Sol/high. `ADVISOR` must be
+`--read-only`, Sol/high, and carry `--model-reason "Fundamental blocker: ..."`.
+The old `--complex`, `--profile complex`, and `--complexity-signal` routing is
+rejected for new spawns. Native Desktop `thinking` uses the callable enum and
+is checked against the selected model's advertised effort matrix. The manifest
+persists role, model, effort, parent session, reason, and criterion evidence.
+The auditable selection fields are `selectedBy`, `reason`, and `matched signals`.
+The hard-signal rubric covers `architecture/API/schema` and
+`high-risk migration/security/accounting`; a scope boundary sends a
+`breakthrough message` and the child `never swaps models autonomously`.
 
 Native Desktop is the default runtime.
 `--runtime cli` is opt-in and only valid when PATH Codex `model/list` actually
@@ -73,6 +71,9 @@ The spawn command creates a unique starting branch, records the manifest and
 lease, and returns a `greprag-codex-native-v4` handoff. Pass `createRequest`
 exactly to native `create_thread`: it already contains the full real mission,
 selected `model`, `thinking`, project target, and worktree starting branch.
+The native target schema is `target.type=project` with
+`startingState={type:"branch", branchName}` inside the worktree environment;
+do not invent a checkout path or second bootstrap turn. Do not add `cwd`, `title`, `model`, or `effort` to the native create request; those values belong to the handoff and post-create verification contract.
 `expectedBaseSha` is the attach-time commit invariant behind that reserved branch.
 This is the only assignment turn. Never create a bootstrap task and never send
 the mission again after attach.
@@ -91,6 +92,8 @@ and starts the monitor. The enforced order is create-real-mission → provisiona
 bind → resolve → rename/verify → attach → IN-FLIGHT → monitor. A standalone CLI cannot
 invoke the Desktop-owned surface, so it prepares rather than pretending an old
 PATH app-server successfully ran a 5.6 turn.
+The title race contract is `set_thread_title` → read it back twice →
+`IN-FLIGHT → mission` monitor only after the exact title remains stable.
 
 ## Mandatory parent inbox lifecycle
 
@@ -101,9 +104,9 @@ The child must address the recorded parent session, not a bare mailbox:
   report` command in its opening prompt.
 - `BLOCKED` before ending when it cannot finish, by running the exact `codex
   chip block` command.
-- If the work crosses the selected model boundary, send a breakthrough message
-  explaining the new signal. The parent decides whether to steer or relaunch;
-  the child never swaps models autonomously.
+- If the work crosses the selected model boundary, run
+  `codex chip breakthrough <id> --reason "..."`. This emits a typed
+  `BREAKTHROUGH` event to the recorded parent; the child never swaps models.
 
 The attached host monitor validates receipts from the recorded native cwd,
 exact base ancestry, clean state, and every changed path against the lease. A
@@ -112,13 +115,17 @@ reserved chip ref, then sends the terminal inbox event. The
 child never merges, pushes, cleans up, or edits the parent checkout. Reports map
 concrete evidence to every covered goal criterion. The parent reviews the diff,
 integrates it, and runs `greprag codex chip goal accept <goal-id> --summary
-"<review judgment>"` only when all criteria and chips are satisfied. For a
-verified squash/cherry-pick add `--integrated <chip-id>` to acceptance. Acceptance
+"<review judgment>"` only when all criteria and chips are satisfied. A
+LEAD-owned goal with no additional child chip records final proofs with
+`goal attest --commit <release-commit>` plus repeated `--evidence` and `--check`
+before acceptance. For a verified squash/cherry-pick add `--integrated <chip-id>`
+to acceptance. Acceptance
 returns machine-readable closeout entries: apply each native `archiveRequest`
 first, then its exact `cleanupCommand`. Cleanup does not imply acceptance, is
 refused before it, and requires `--native-archived` for native tasks.
 
-Native chips have a receipt deadline (default 180 minutes; override with
+Native chips require parent-side `--native-model-verified` proof before monitor
+start and have a receipt deadline (default 180 minutes; override with
 `--native-timeout-minutes`). This standalone CLI cannot query Desktop-private
 turn status, so it never guesses that a settled task succeeded: write *and read*
 chips must submit `report`/`block`, and timeout fails loudly. One live monitor
@@ -145,12 +152,15 @@ Useful recovery commands:
 ```bash
 greprag codex chip handoff <id> --json
 greprag codex chip status <id>
-greprag codex chip steer <id> "<follow-up>"
+greprag codex chip breakthrough <id> --reason "<follow-up>"
 greprag codex chip resume <id>
 greprag codex chip stop <id>
 ```
 
-For a native chip, `steer` emits a `send_message_to_thread` handoff. Stop fails
+For a native chip, `BREAKTHROUGH` is the sole agent-visible control envelope;
+native turn transport remains private. Breakthrough delivery is
+durably queued → injected → acknowledged → acted; empty completed turns are
+not delivery, and natural-turn drain is degraded fallback only. Stop fails
 loud until the parent interrupts the Desktop task, then confirms that fact with
 `stop <id> --native-interrupted`; the CLI never records a false cancellation.
 After restart/usage interruption, use `resume`, deliver its handoff, and wait for
@@ -161,3 +171,7 @@ For an invalid terminal launch, preserve the mission and run `goal exclude
 replacement. Excluded evidence cannot satisfy acceptance. To abandon the whole
 mission, stop every chip first, then use `goal cancel <goal-id> --reason
 "<concrete reason>"`; cancelled closeout is not acceptance.
+
+Mechanic repair incidents are not Mechanic task termination: `REPAIR-READY/CLOSED`
+returns the same Luna/xhigh Mechanic to `OPEN+DORMANT` for later typed friction.
+Only final LEAD teardown may accept/clean it with `--mechanic-final`.