nubos-pilot 1.2.4 → 1.3.0

package/workflows/verify-work.md

@@ -81,6 +81,23 @@ Spawn `agents/np-verifier.md` (tier: sonnet, READ-ONLY tools) with:
 
 The agent emits a structured verdict per SC: Pass | Fail | Needs-User-Confirm | Defer (never invents a SC, never edits source).
 
+**Off-host (ADR-0021):** when `np-verifier` routes to an `openai-compat` provider, run it via `spawn-offhost --read-only` instead of the host spawn. The verifier never edits source and **emits** its per-SC verdict as the final message — exactly the contract the native path already consumes — so it needs no worktree, no Bash, no Write. Pass `--output-schema verification` for the dispatch-level lint hook, then feed the returned `.content` (the emitted verdict) into the SAME Pass-1 `emit-draft` / Pass-2 `record-sc` persistence below; `VERIFICATION.md` is produced exactly as for the native agent.
+
+```bash
+VERIFIER_KIND=$(node .nubos-pilot/bin/np-tools.cjs resolve-model np-verifier --json 2>/dev/null \
+  | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{try{console.log(JSON.parse(s).kind||"native")}catch{console.log("native")}})')
+if [ "$VERIFIER_KIND" = "openai-compat" ]; then
+  VERIFIER_PROMPT="${TMPDIR:-/tmp}/np-offhost-verifier-${MILESTONE_ID}.md"
+  # … render the SAME spawn prompt (files_to_read + success_criteria +
+  #   $VERIFICATION_SCHEMA) PLUS $LANG_DIRECTIVE into "$VERIFIER_PROMPT" …
+  VERIFIER_OUT=$(node .nubos-pilot/bin/np-tools.cjs spawn-offhost \
+    --agent np-verifier --task-file "$VERIFIER_PROMPT" --read-only \
+    --output-schema verification --phase "$PHASE")
+  # The emitted verdict is `.content` of $VERIFIER_OUT — it drives emit-draft / record-sc below.
+fi
+# else → native host spawn per the block above.
+```
+
 Persist the deterministic draft:
 
 ```bash