holycodex 0.13.3 → 0.13.4

package/dist/cli.js

@@ -1,7 +1,7 @@
 import process$1 from "node:process";
 import { access, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
-import { delimiter, dirname, join } from "node:path";
+import { delimiter, dirname, join, resolve } from "node:path";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { Buffer } from "node:buffer";
@@ -4391,7 +4391,7 @@ function superRefine(fn, params) {
 }
 //#endregion
 //#region packages/cli/src/catalog.ts
-var VERSION = "0.13.3";
+var VERSION = "0.13.4";
 var SKILLS = [
 	"ast-grep",
 	"babysit-ci",
@@ -4524,7 +4524,7 @@ function workflowFor(permittedRoutes, limits, projectedUsage, maxInputTokens) {
 		}
 	};
 }
-var DEFAULT_PLAN = "plus-low";
+var DEFAULT_PLAN = "plus";
 var LUNA_HIGH = {
 	model: "gpt-5.6-luna",
 	reasoningEffort: "high"
@@ -5139,9 +5139,9 @@ function parseCliArguments(args) {
 	if (fastFlags.length > 1) throw new Error(`Conflicting Fast flags: ${fastFlags.join(", ")}`);
 	const computerUseFlags = ["--computer-use", "--no-computer-use"].filter((flag) => values.has(flag));
 	if (computerUseFlags.length > 1) throw new Error(`Conflicting Computer Use flags: ${computerUseFlags.join(", ")}`);
-	const planValue = values.get("--plan") ?? "plus-low";
-	const plan = PlanNameSchema.safeParse(planValue);
-	if (!plan.success) throw new Error(`Unknown plan: ${String(planValue)}. Valid plans: ${PLAN_NAMES.join(", ")}.`);
+	const planValue = values.get("--plan");
+	const plan = planValue === void 0 ? void 0 : PlanNameSchema.safeParse(planValue);
+	if (plan !== void 0 && !plan.success) throw new Error(`Unknown plan: ${String(planValue)}. Valid plans: ${PLAN_NAMES.join(", ")}.`);
 	const maxValue = values.get("--max-subagents");
 	if (maxValue !== void 0 && (typeof maxValue !== "string" || !/^\d+$/.test(maxValue) || Number(maxValue) > 3)) throw new Error(`Invalid --max-subagents value: ${String(maxValue)}. Expected an integer from 0 through 3.`);
 	const autonomy = values.has("--dangerous-codex-autonomous") ? {
@@ -5161,7 +5161,7 @@ function parseCliArguments(args) {
 		command,
 		json: values.has("--json"),
 		noTui: values.has("--no-tui"),
-		plan: plan.data,
+		...plan === void 0 ? {} : { plan: plan.data },
 		...maxValue === void 0 ? {} : { maxSubagents: Number(maxValue) },
 		autonomy,
 		...computerUse === void 0 ? {} : { computerUse },
@@ -5174,7 +5174,6 @@ function base(action) {
 		action,
 		json: false,
 		noTui: false,
-		plan: DEFAULT_PLAN,
 		autonomy: { requested: false },
 		fast: "standard",
 		verbose: false
@@ -6586,8 +6585,9 @@ function mergedStatusLine(original) {
 	return `[${items.map((item) => JSON.stringify(item)).join(", ")}]`;
 }
 /** Installs config. */
-function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents, fastMode = "standard", computerUse) {
+function installConfig(input, mode, _platform, requestedPlan, maxSubagents, fastMode = "standard", computerUse) {
 	const request = normalizeRequestedAutonomy(mode);
+	const plan = requestedPlan ?? readManagedPlan(input) ?? "plus";
 	const effectiveComputerUse = computerUse ?? readManagedComputerUse(input) ?? "disabled";
 	const priorAutonomy = readAutonomyMetadata(input);
 	const previousOriginalRoot = readOriginalRootMetadata(input);
@@ -6749,6 +6749,11 @@ function executableOnPath(name) {
 }
 //#endregion
 //#region packages/cli/src/core-instructions.ts
+/** Formats the installed workflow runtime command for the active shell. */
+function formatInstalledRuntimeGuidance(pluginRoot) {
+	const quotedPath = `'${(/^[A-Za-z]:[\\/]/.test(pluginRoot) || pluginRoot.startsWith("\\\\") || pluginRoot.startsWith("/") ? `${pluginRoot.replace(/[\\/]+$/, "")}/runtime/workflow.js` : resolve(pluginRoot, "runtime", "workflow.js")).replaceAll("\\", "/").replaceAll("'", "'\\\"'\\\"'")}'`;
+	return `Use the installed HolyCodex workflow runtime with an absolute path: node ${quotedPath}. For help, run node ${quotedPath} --help.`;
+}
 /** Shared HolyCodex root instructions. */
 var CORE_INSTRUCTIONS = "HolyCodex: Root is user-facing. Before updates, classify intent and load required skills. Start with \"I detect [intent] intent — [action].\" Choose the accurate intent naturally; no fixed intent taxonomy applies. `plan` and `plan-review` instead own their exact heading and intent as the first visible block; no other mode prints a heading. Do not conceal orchestration. Give concise updates naming each specialist type and what it will do, such as \"Explorer maps X\", \"Librarian verifies Y\", or \"Worker implements Z\". Do not disclose Root orchestration mechanics or explain why delegation is running unless asked. Skills govern method only. Root owns interaction, intent, scope, architecture, product choices, ambiguity, integration, external state, and final judgment and verification. Root is not another implementation branch: evaluate specialist output against scope, fixed architecture, user decisions, repository conventions, and proof; reject or repair weak output and integrate only accepted work. On every plan other than Go, use a CLI workflow for substantive discovery, implementation, verification, multi-file work, risky changes, or architecture-sensitive work. Root may work directly for genuinely small bounded operations such as repository synchronization, one quick mechanical edit, or an equivalent one-off change. State when the direct-work exception applies, and never use it to bypass delegation for broader work. Never invoke regular Codex collaboration subagents. If a required workflow is unavailable or cannot perform the operation, report the blocker instead of bypassing delegation. Missing task-child visibility is not a reason to avoid workflows. Go does not support workflows, so Root works directly without specialist subagents. A task may contain multiple sequential workflows. Prefer the smallest useful fan-out, stop discovery when evidence is sufficient, and avoid duplicate investigation. The selected plan is authoritative: enforce its permitted model routes for each agent and stage, low verbosity, Fast as the only service-tier variation, concurrency, soft target calls, hard maximum calls, workflow depth, retries, loop iterations, fan-out, projected usage, and soft-size guidance. Root should remain near target calls and exceed them only when intermediate evidence justifies more work; the hard maximum is only a safety and quota ceiling. Larger plans do not automatically consume larger allowances. Keep explorer, librarian, and worker selectable only where the plan permits. Root owns workflow integration and final proof. After any code or manifest implementation, Root loads `code-review` exactly once before final response; it also loads `code-review` for a user-requested snippet, file, directory, diff, patch, or PR review. That skill owns the final audit, repair, proportional checks and reruns, reinspection, diff, and status. Classify unknowns: delegate facts, ask material decisions, and state and use safe reversible defaults. Whenever Root needs user input or would ask any question, it must use `request_user_input` when that tool is available, in every scenario and mode. Root must never stop or reply with a plain-text question when the tool is available. If the tool is unavailable, use a safe reversible default where possible or report a non-question blocker. Never repeat questions or ask discoverable facts. Root must use `request_user_input` immediately before committing, pushing, creating or moving tags, building or compiling, publishing, deploying, destructive or irreversible actions, permission changes, financial actions, sending, or any other externally visible action. Earlier general authorization does not replace this immediate approval unless the user explicitly authorized that exact action in the current turn. Root controls browser and native desktop UI itself. Explorer is repository-read-only, Librarian research-only, and Worker cannot alter dashboards, accounts, permissions, or external state. Specialists never delegate, broaden, review, or make final judgments.";
 var NATIVE_IO_INSTRUCTIONS = "For `plan` and `plan-review` headings, never print provisionally. Never delegate browser or computer control. For frontend creation, redesign, or visual verification, use installed Build Web Apps `frontend-app-builder` for concept, approval, implementation, and visual verification. For authorized security reviews, audits, scans, threat models, vulnerabilities, or attack paths, use matching installed Codex Security plugin skills. Use these capabilities instead of manual-click instructions, shell-as-GUI, or public research as a substitute for authenticated control. Use Codex native `apply_patch` for workspace file creation, updates, moves, and deletion. Use available native read or shell tools for file inspection and repository search. Do not re-read files only to verify a successful `apply_patch` call.";
@@ -6756,12 +6761,12 @@ var COMPUTER_USE_INSTRUCTIONS = "For native desktop tasks, use the available Com
 var ROOT_LUNA_POLICY = "Root is the judgment and control plane: own interaction, scope, architecture, product and risk decisions, workflow integration, material ambiguity, external state, and the final decision. Luna specialists are bounded execution context: Explorer maps sufficient repository facts, Librarian verifies assigned current facts, and Worker implements, integrates, inspects diffs, runs checks, performs mechanical repair and retest, routine review, evidence compression, and optional synthesis. Root accepts successful structured Luna evidence without rereading or re-verifying it; material architecture, product, scope, risk, or contradictory-evidence decisions return to Root. On plus-low, prefer retained context, compact outcomes, Luna-local loops and synthesis, sufficient discovery, and genuine concurrency without changing plan quotas. Structured substantive outcomes are the branching contract, not prose parsing. Escalate Luna high to xhigh to max only when the evidence justifies it and the active plan permits the route; max insufficiency returns compact evidence to Root and never creates a Sol specialist.";
 var CODE_REVIEW_ACTIVATION_POLICY = "After loading `code-review`, its first visible line is **CODE REVIEW MODE ACTIVATED**.";
 /** Gets core instructions with platform and active agent-capacity context. */
-function coreInstructions(platform, capacity, computerUseEnabled = false) {
+function coreInstructions(platform, capacity, computerUseEnabled = false, pluginRoot) {
 	const threads = capacity?.maxThreads;
 	const depth = capacity?.maxDepth;
-	const capacityInstructions = threads === void 0 || depth === void 0 ? "Before delegation, use active collaboration tool instructions as the authoritative agent-capacity limit." : `Host agent capacity: agents.max_concurrent_threads_per_session=${threads} includes Root. The host nesting limit is ${depth}; the active plan's maxCalls is the hard workflow call ceiling and targetCalls is soft planning guidance. Its lower concurrency, depth, and fan-out limits remain authoritative. On plans other than Go, Root always delegates at least one bounded task through a CLI workflow and reports a blocker if that runtime is unavailable or cannot perform the operation. Go does not support workflows, so Root works directly without specialist subagents.`;
+	const capacityInstructions = threads === void 0 || depth === void 0 ? "Before delegation, use active collaboration tool instructions as the authoritative agent-capacity limit." : `Host agent capacity: agents.max_concurrent_threads_per_session=${threads} includes Root. The host nesting limit is ${depth}; the active plan's maxCalls is the hard workflow call ceiling and targetCalls is soft planning guidance. Its lower concurrency, depth, and fan-out limits remain authoritative. Substantive, multi-file, risky, and architecture-sensitive work uses a CLI workflow; genuinely small bounded operations may remain direct. Report a blocker when a required workflow runtime is unavailable. Go does not support workflows, so Root works directly without specialist subagents.`;
 	const platformInstructions = platform === "win32" ? ` ${WINDOWS_SHELL_POLICY}` : "";
-	return `${CORE_INSTRUCTIONS} ${ROOT_LUNA_POLICY} ${LITE_WRITING_POLICY} ${CONTEXT7_POLICY} ${NATIVE_IO_INSTRUCTIONS}${computerUseEnabled ? ` ${COMPUTER_USE_INSTRUCTIONS}` : ""} ${CODE_REVIEW_ACTIVATION_POLICY} ${capacityInstructions}${platformInstructions}`;
+	return `${CORE_INSTRUCTIONS} ${ROOT_LUNA_POLICY} ${LITE_WRITING_POLICY} ${CONTEXT7_POLICY} ${NATIVE_IO_INSTRUCTIONS}${computerUseEnabled ? ` ${COMPUTER_USE_INSTRUCTIONS}` : ""} ${CODE_REVIEW_ACTIVATION_POLICY} ${capacityInstructions}${platformInstructions}${pluginRoot === void 0 ? "" : ` ${formatInstalledRuntimeGuidance(pluginRoot)}`}`;
 }
 //#endregion
 //#region packages/cli/src/doctor.ts
@@ -6998,9 +7003,9 @@ async function install(options, runtime = defaultRuntime) {
 	notify(options, "prerequisites", "Checking prerequisites", "running");
 	assertGitBashReady(runtime.platform, runtime.gitBash());
 	notify(options, "prerequisites", "Checking prerequisites", "complete");
-	const plan = options.plan ?? "plus-low";
 	const target = paths();
 	const existingConfig = await readText(target.config);
+	const plan = options.plan ?? readManagedPlan(existingConfig) ?? "plus";
 	const computerUseChoice = resolveComputerUseChoice(options);
 	const root = backupRoot();
 	notify(options, "backup", "Backing up existing installation", "running");
@@ -7143,7 +7148,7 @@ async function restoreTarget(target, source) {
 }
 async function removeObsoleteVersionCaches(cacheRoot) {
 	if (!await exists(cacheRoot)) return;
-	for (const entry of await readdir(cacheRoot)) if (entry !== "0.13.3") await rm(join(cacheRoot, entry), {
+	for (const entry of await readdir(cacheRoot)) if (entry !== "0.13.4") await rm(join(cacheRoot, entry), {
 		recursive: true,
 		force: true
 	});
@@ -7406,7 +7411,7 @@ async function main() {
 		...parsed.computerUse === void 0 ? {} : { computerUse: parsed.computerUse },
 		fast: parsed.fast,
 		json: parsed.json,
-		plan: parsed.plan,
+		...parsed.plan === void 0 ? {} : { plan: parsed.plan },
 		verbose: parsed.verbose,
 		...parsed.command === "install" && !parsed.json ? { onProgress: (event) => process$1.stdout.write(renderInstallProgress(event, stdoutColor, process$1.stdout.isTTY === true, parsed.verbose)) } : {},
 		...parsed.maxSubagents === void 0 ? {} : { maxSubagents: parsed.maxSubagents }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.13.3",
+  "version": "0.13.4",
   "description": "Lean Codex-only agent toolkit installer and doctor",
   "keywords": [
     "agents",
@@ -39,7 +39,7 @@
     "prepack": "vp run --workspace-root build"
   },
   "dependencies": {
-    "@holycodex/plugin": "0.13.3",
+    "@holycodex/plugin": "0.13.4",
     "zod": "^4.4.3"
   },
   "devDependencies": {