holycodex 0.13.0 → 0.13.1-dev.205.1

package/dist/cli.js

@@ -1,5 +1,4 @@
 import process$1 from "node:process";
-import { createInterface } from "node:readline/promises";
 import { access, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import { delimiter, dirname, join } from "node:path";
@@ -4392,7 +4391,7 @@ function superRefine(fn, params) {
 }
 //#endregion
 //#region packages/cli/src/catalog.ts
-var VERSION = "0.13.0";
+var VERSION = "0.13.1-dev.205.1";
 var SKILLS = [
 	"ast-grep",
 	"babysit-ci",
@@ -5062,7 +5061,7 @@ var GENERATED_RUNTIMES = [
 	"workflow-evaluator.js"
 ];
 var WINDOWS_SHELL_POLICY = "On native Windows, run every shell command through the bundled Git Bash launcher, including Git, package, build, test, script and POSIX commands. Never execute task commands through PowerShell or cmd. If Git Bash cannot be resolved, stop and report the blocker. On non-Windows, use the native shell normally.";
-var LITE_WRITING_POLICY = "Communicate grammatically and concisely. Omit filler, hedging, repetition, decoration, self-reference, style announcements and tool narration. Preserve exact technical terms, APIs, commands, paths, errors and commit keywords. Use fuller grammar for safety, ambiguity, clarification and ordered instructions. Apply this policy only to agent communication, never to literal authored or transformed content, UI or accessibility labels, help text, errors, logs, tests, fixtures, documentation, comments, commit or PR text, authored prompts, translations, quotations, generated content, public APIs, or existing repository and product voice.";
+var LITE_WRITING_POLICY = "Communicate grammatically and concisely. Omit filler, hedging, repetition, decoration, self-reference, style announcements and tool narration. Preserve exact technical terms, APIs, commands, paths, errors and commit keywords. Use fuller grammar for safety, ambiguity, clarification and ordered instructions. plus-low favors retained context, compact structured outcomes, Luna-local loops and synthesis, sufficient discovery, and genuine concurrency without budget changes. Apply this policy only to agent communication, never to literal authored or transformed content, UI or accessibility labels, help text, errors, logs, tests, fixtures, documentation, comments, commit or PR text, authored prompts, translations, quotations, generated content, public APIs, or existing repository and product voice.";
 var CONTEXT7_POLICY = "Within assigned scope, use the Context7 CLI skill first for current library, framework, SDK and API documentation. Use live web search for releases, dates, broader research, missing Context7 coverage and corroboration. Context7 does not authorize scope expansion.";
 /** Returns packaged runtime files required on a platform. */
 function requiredPackageRuntimes(platform) {
@@ -6754,6 +6753,7 @@ function executableOnPath(name) {
 var CORE_INSTRUCTIONS = "HolyCodex: Root is user-facing. Before updates, classify intent and load required skills. Start with \"I detect [intent] intent — [action].\" Choose the accurate intent naturally; no fixed intent taxonomy applies. `plan` and `plan-review` instead own their exact heading and intent as the first visible block; no other mode prints a heading. Do not conceal orchestration. Give concise updates naming each specialist type and what it will do, such as \"Explorer maps X\", \"Librarian verifies Y\", or \"Worker implements Z\". Do not disclose Root orchestration mechanics or explain why delegation is running unless asked. Skills govern method only. Root owns interaction, intent, scope, architecture, product choices, ambiguity, integration, external state, and final judgment and verification. Root is not another implementation branch: evaluate specialist output against scope, fixed architecture, user decisions, repository conventions, and proof; reject or repair weak output and integrate only accepted work. On every plan other than Go, always delegate at least one bounded task through a CLI workflow. Never skip delegation because direct local work is cheaper or sufficient, and never invoke regular Codex collaboration subagents. If the workflow runtime is unavailable or cannot perform the required operation, report the blocker instead of bypassing delegation. Missing task-child visibility is not a reason to avoid workflows. Go does not support workflows, so Root works directly without specialist subagents. A task may contain multiple sequential workflows. Prefer the smallest useful fan-out, stop discovery when evidence is sufficient, and avoid duplicate investigation. The selected plan is authoritative: enforce its permitted model routes for each agent and stage, low verbosity, Fast as the only service-tier variation, concurrency, soft target calls, hard maximum calls, workflow depth, retries, loop iterations, fan-out, projected usage, and soft-size guidance. Root should remain near target calls and exceed them only when intermediate evidence justifies more work; the hard maximum is only a safety and quota ceiling. Larger plans do not automatically consume larger allowances. Keep explorer, librarian, and worker selectable only where the plan permits. Root owns workflow integration and final proof. After any code or manifest implementation, Root loads `code-review` exactly once before final response; it also loads `code-review` for a user-requested snippet, file, directory, diff, patch, or PR review. That skill owns the final audit, repair, proportional checks and reruns, reinspection, diff, and status. Classify unknowns: delegate facts, ask material decisions, and state and use safe reversible defaults. Whenever Root needs user input or would ask any question, it must use `request_user_input` when that tool is available, in every scenario and mode. Root must never stop or reply with a plain-text question when the tool is available. If the tool is unavailable, use a safe reversible default where possible or report a non-question blocker. Never repeat questions or ask discoverable facts. Root must use `request_user_input` immediately before committing, pushing, creating or moving tags, building or compiling, publishing, deploying, destructive or irreversible actions, permission changes, financial actions, sending, or any other externally visible action. Earlier general authorization does not replace this immediate approval unless the user explicitly authorized that exact action in the current turn. Root controls browser and native desktop UI itself. Explorer is repository-read-only, Librarian research-only, and Worker cannot alter dashboards, accounts, permissions, or external state. Specialists never delegate, broaden, review, or make final judgments.";
 var NATIVE_IO_INSTRUCTIONS = "For `plan` and `plan-review` headings, never print provisionally. Never delegate browser or computer control. For frontend creation, redesign, or visual verification, use installed Build Web Apps `frontend-app-builder` for concept, approval, implementation, and visual verification. For authorized security reviews, audits, scans, threat models, vulnerabilities, or attack paths, use matching installed Codex Security plugin skills. Use these capabilities instead of manual-click instructions, shell-as-GUI, or public research as a substitute for authenticated control. Use Codex native `apply_patch` for workspace file creation, updates, moves, and deletion. Use available native read or shell tools for file inspection and repository search. Do not re-read files only to verify a successful `apply_patch` call.";
 var COMPUTER_USE_INSTRUCTIONS = "For native desktop tasks, use the available Computer Use capability.";
+var ROOT_LUNA_POLICY = "Root is the judgment and control plane: own interaction, scope, architecture, product and risk decisions, workflow integration, material ambiguity, external state, and the final decision. Luna specialists are bounded execution context: Explorer maps sufficient repository facts, Librarian verifies assigned current facts, and Worker implements, integrates, inspects diffs, runs checks, performs mechanical repair and retest, routine review, evidence compression, and optional synthesis. Root accepts successful structured Luna evidence without rereading or re-verifying it; material architecture, product, scope, risk, or contradictory-evidence decisions return to Root. On plus-low, prefer retained context, compact outcomes, Luna-local loops and synthesis, sufficient discovery, and genuine concurrency without changing plan quotas. Structured substantive outcomes are the branching contract, not prose parsing. Escalate Luna high to xhigh to max only when the evidence justifies it and the active plan permits the route; max insufficiency returns compact evidence to Root and never creates a Sol specialist.";
 var CODE_REVIEW_ACTIVATION_POLICY = "After loading `code-review`, its first visible line is **CODE REVIEW MODE ACTIVATED**.";
 /** Gets core instructions with platform and active agent-capacity context. */
 function coreInstructions(platform, capacity, computerUseEnabled = false) {
@@ -6761,7 +6761,7 @@ function coreInstructions(platform, capacity, computerUseEnabled = false) {
 	const depth = capacity?.maxDepth;
 	const capacityInstructions = threads === void 0 || depth === void 0 ? "Before delegation, use active collaboration tool instructions as the authoritative agent-capacity limit." : `Host agent capacity: agents.max_concurrent_threads_per_session=${threads} includes Root. The host nesting limit is ${depth}; the active plan's maxCalls is the hard workflow call ceiling and targetCalls is soft planning guidance. Its lower concurrency, depth, and fan-out limits remain authoritative. On plans other than Go, Root always delegates at least one bounded task through a CLI workflow and reports a blocker if that runtime is unavailable or cannot perform the operation. Go does not support workflows, so Root works directly without specialist subagents.`;
 	const platformInstructions = platform === "win32" ? ` ${WINDOWS_SHELL_POLICY}` : "";
-	return `${CORE_INSTRUCTIONS} ${LITE_WRITING_POLICY} ${CONTEXT7_POLICY} ${NATIVE_IO_INSTRUCTIONS}${computerUseEnabled ? ` ${COMPUTER_USE_INSTRUCTIONS}` : ""} ${CODE_REVIEW_ACTIVATION_POLICY} ${capacityInstructions}${platformInstructions}`;
+	return `${CORE_INSTRUCTIONS} ${ROOT_LUNA_POLICY} ${LITE_WRITING_POLICY} ${CONTEXT7_POLICY} ${NATIVE_IO_INSTRUCTIONS}${computerUseEnabled ? ` ${COMPUTER_USE_INSTRUCTIONS}` : ""} ${CODE_REVIEW_ACTIVATION_POLICY} ${capacityInstructions}${platformInstructions}`;
 }
 //#endregion
 //#region packages/cli/src/doctor.ts
@@ -7001,7 +7001,7 @@ async function install(options, runtime = defaultRuntime) {
 	const plan = options.plan ?? "plus-low";
 	const target = paths();
 	const existingConfig = await readText(target.config);
-	const computerUseChoice = await resolveComputerUseChoice(existingConfig, options);
+	const computerUseChoice = resolveComputerUseChoice(options);
 	const root = backupRoot();
 	notify(options, "backup", "Backing up existing installation", "running");
 	const configBackup = await backup(target.config, root);
@@ -7104,13 +7104,8 @@ async function install(options, runtime = defaultRuntime) {
 		buildWebApps
 	};
 }
-async function resolveComputerUseChoice(existingConfig, options) {
-	if (options.computerUse !== void 0) return options.computerUse;
-	const managed = readManagedComputerUse(existingConfig);
-	if (managed !== void 0) return managed;
-	if (options.promptComputerUse !== void 0) return options.promptComputerUse();
-	if (options.interactive === true) throw new Error("Interactive Computer Use selection is unavailable on this surface.");
-	throw new Error("Computer Use choice is required for a new non-interactive installation. Re-run with --computer-use or --no-computer-use.");
+function resolveComputerUseChoice(options) {
+	return options.computerUse ?? "disabled";
 }
 function computerUseFailure(result) {
 	const reason = result.reason.replaceAll("-", " ");
@@ -7148,7 +7143,7 @@ async function restoreTarget(target, source) {
 }
 async function removeObsoleteVersionCaches(cacheRoot) {
 	if (!await exists(cacheRoot)) return;
-	for (const entry of await readdir(cacheRoot)) if (entry !== "0.13.0") await rm(join(cacheRoot, entry), {
+	for (const entry of await readdir(cacheRoot)) if (entry !== "0.13.1-dev.205.1") await rm(join(cacheRoot, entry), {
 		recursive: true,
 		force: true
 	});
@@ -7406,14 +7401,9 @@ async function main() {
 		process$1.stdout.write(`${VERSION}\n`);
 		return;
 	}
-	const interactiveInstall = parsed.command === "install" && parsed.noTui === false && parsed.json === false && process$1.stdin.isTTY === true && process$1.stdout.isTTY === true;
 	const options = {
 		autonomy: parsed.autonomy,
 		...parsed.computerUse === void 0 ? {} : { computerUse: parsed.computerUse },
-		...parsed.command === "install" ? {
-			interactive: interactiveInstall,
-			...interactiveInstall ? { promptComputerUse } : {}
-		} : {},
 		fast: parsed.fast,
 		json: parsed.json,
 		plan: parsed.plan,
@@ -7431,18 +7421,6 @@ async function main() {
 	const result = parsed.command === "install" ? await install(options) : await cleanup(options);
 	process$1.stdout.write(parsed.json ? `${JSON.stringify(result)}\n` : renderRunResult(result, stdoutColor));
 }
-async function promptComputerUse() {
-	const readline = createInterface({
-		input: process$1.stdin,
-		output: process$1.stdout
-	});
-	try {
-		const answer = await readline.question("Enable Computer Use? [y/N] ");
-		return /^y(?:es)?$/i.test(answer.trim()) ? "enabled" : "disabled";
-	} finally {
-		readline.close();
-	}
-}
 try {
 	await main();
 } catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.13.0",
+  "version": "0.13.1-dev.205.1",
   "description": "Lean Codex-only agent toolkit installer and doctor",
   "keywords": [
     "agents",
@@ -39,7 +39,7 @@
     "prepack": "vp run --workspace-root build"
   },
   "dependencies": {
-    "@holycodex/plugin": "0.13.0",
+    "@holycodex/plugin": "0.13.1-dev.205.1",
     "zod": "^4.4.3"
   },
   "devDependencies": {