okstra 0.170.2 → 0.170.3

package/docs/cli.md

@@ -742,7 +742,7 @@ The `okstra` Node CLI (`bin/okstra`) provides both installer/admin commands and
 | `okstra doctor [--runtime claude-code\|codex\|antigravity\|external\|all] [--phase <phase>] [--json]` | Diagnose the runtime, Python imports, and skill/agent installation. The `codex`, `antigravity`, and `external` runtimes omit Claude skill checks. `--phase` adds readiness checks for `implementation`, `final-verification`, `release-handoff`, or `improvement-discovery` |
 | `okstra setup --project-id <id>` | Create or update `.okstra/project.json` in the current project |
 | `okstra check-project [--json]` | Verify that the current project is registered |
-| `okstra preflight [--runtime <name>] [--cwd <dir>] [--json]` | Single skill-preflight call combining `ensure-installed`, with silent reinstall when stale, `check-project`, and host-specific `runtimeReadiness` into one JSON response. A `claude-code` host checks project workspace trust; `codex`, `antigravity`, and `external` hosts return ready without reading Claude Code state. Step 0 of every project-scoped skill converges on this command |
+| `okstra preflight [--runtime <name>] [--cwd <dir>] [--json]` | Single skill-preflight call combining `ensure-installed`, with silent reinstall when stale, `check-project`, and host-specific `runtimeReadiness` into one JSON response. A `claude-code` host checks project workspace trust. A `codex` current-session host verifies write access to `~/.okstra/worktrees/registry.lock`; a sandbox denial blocks before the wizard with the `switch-codex-to-full-access-and-rerun` action. `antigravity` and `external` hosts return ready without reading Claude Code state. Step 0 of every project-scoped skill converges on this command |
 | `okstra convergence seed --groups <path> --work-state <path> --final-state <path> --migration-dir <dir> [--restart-from-round0]` | Create, resume, reuse, or explicitly recover deterministic convergence state |
 | `okstra convergence plan-round --work-state <path> --plan <path>` | Persist the next roster-aware dispatch plan without mutating working state |
 | `okstra convergence collect-results --plan <round-plan.json> --mode <adversarial\|collaborative> --result <worker>=<path>… --dispatch <worker>=<status>:<durationMs>… --output <round-results.json>` | Read one round's worker responses into the `apply-round --results` shape. `--mode` picks the verdict vocabulary — the adversarial prompt answers `REFUTED` / `SURVIVES` / `SURVIVES-WITH-CAVEAT` / `UNVERIFIABLE`, which this maps to `disagree` / `agree` / `supplement` / `unverifiable`, and copies `**Basis**` into `disagreeBasis`. `--dispatch` supplies the terminal status and duration, which live in the dispatch rather than the response; a worker that never returned gets a `--dispatch` and no `--result`. Exits 2 on a dispatched finding with no verdict, a verdict for a finding the plan did not dispatch to that worker, a planned worker with no recorded outcome, or a vote with no explanation |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okstra",
-  "version": "0.170.2",
+  "version": "0.170.3",
   "description": "Host-aware multi-provider cross-verification orchestrator runtime and agent skills.",
   "license": "MIT",
   "author": "devonshin",

package/runtime/BUILD.json

@@ -1,5 +1,5 @@
 {
-  "package": "0.170.2",
-  "builtAt": "2026-08-14T17:23:09.226Z",
+  "package": "0.170.3",
+  "builtAt": "2026-08-14T18:24:32.087Z",
   "repoRoot": "/home/runner/work/okstra/okstra"
 }

package/runtime/python/okstra_ctl/adapters/hosts/codex/adapter.py

@@ -1,6 +1,7 @@
 """Bundled Codex host strategy."""
 from __future__ import annotations
 
+import os
 import shutil
 from collections.abc import Callable
 from pathlib import Path
@@ -35,6 +36,27 @@ DESCRIPTOR = HostDescriptor(
 )
 
 
+def _okstra_home_write_checks(context) -> tuple[dict[str, object], ...]:
+    if context.entry_mode != "current-session":
+        return ({"id": "okstra-home-write", "status": "not-applicable"},)
+
+    home_dir = Path(os.environ.get("OKSTRA_PROBE_HOME_DIR", str(Path.home())))
+    registry_lock = home_dir / ".okstra" / "worktrees" / "registry.lock"
+    try:
+        registry_lock.parent.mkdir(parents=True, exist_ok=True)
+        if not registry_lock.exists():
+            registry_lock.touch()
+        with registry_lock.open("r+"):
+            pass
+    except PermissionError:
+        return ({
+            "id": "okstra-home-write",
+            "status": "required",
+            "action": "switch-codex-to-full-access-and-rerun",
+        },)
+    return ({"id": "okstra-home-write", "status": "accepted"},)
+
+
 def create_adapter(
     *,
     executable_finder: Callable[[str], str | None] = shutil.which,
@@ -59,6 +81,7 @@ def create_adapter(
         supported_functions=INTERACTION_FUNCTIONS,
         detector=no_automatic_claim,
         provider_registry=provider_registry,
+        readiness_probe=_okstra_home_write_checks,
         host_model_port=host_model_port or NativeExecutionValueHostModelBindingPort(
             DESCRIPTOR.id,
             DESCRIPTOR.native_provider_id,

package/runtime/python/okstra_ctl/domain/worker_stream.py

@@ -255,7 +255,27 @@ def _content_blocks(event: Mapping[str, Any]) -> list[Mapping[str, Any]]:
     return [block for block in content if isinstance(block, Mapping)]
 
 
+# A tool call's detail identifies itself at both ends and neither end alone. A
+# path's run-directory prefix is shared by every file a worker touches, so the
+# leaf is what tells two calls apart; a command's program name is at the front.
+# Cutting the tail served only the second, and on a project whose run directory
+# alone is 195 characters it rendered every file as the same visible string —
+# `→ Read: /Volumes/…/tasks/analysis-…` for all of them — leaving the reader
+# unable to tell one call from another. The head holds the tool name plus enough
+# of the detail to read a command; the rest of the budget goes to the tail.
+_HEAD_BUDGET = 32
+
+
 def _truncate(line: str, limit: int | None) -> str:
+    """Fold the middle, not the end.
+
+    The end is what distinguishes one line from the next, so it is the part the
+    screen must keep. Falls back to a tail cut only when the limit is too small
+    to hold a head, an ellipsis, and any tail at all.
+    """
     if limit is None or len(line) <= limit:
         return line
-    return line[: limit - 1] + "…"
+    tail_budget = limit - _HEAD_BUDGET - 1
+    if tail_budget < 1:
+        return line[: limit - 1] + "…"
+    return line[:_HEAD_BUDGET] + "…" + line[-tail_budget:]

package/runtime/python/okstra_ctl/run.py

@@ -1418,10 +1418,22 @@ class _ModelBindings:
     invocation_assignments: dict[str, dict[str, object]]
 
 
-def recommended_role_models() -> dict[str, str]:
+def recommended_role_models(*, lead_provider: str = "") -> dict[str, str]:
     """역할 → 추천 모델 display 값 (env override 반영). prepare 의 모델 해소와
-    wizard 의 안내 표기가 공유하는 단일 기준점."""
-    lead_default = _default("OKSTRA_DEFAULT_LEAD_MODEL", default_model("lead"))
+    wizard 의 안내 표기가 공유하는 단일 기준점.
+
+    lead 는 호스트가 provider 를 정한다 — codex 호스트의 in-session lead 는
+    codex 이고 다른 provider 요청은 거부된다(`resolve_lead_provider`). 그래서
+    `lead_provider` 를 받아 그 provider 의 기본값으로 해소한다. 받지 않으면
+    role 별 레거시 기본값(claude 계열)으로 떨어지는데, 그 값을 codex 호스트
+    화면에 그대로 쓰면 안내는 `opus` 인데 prepare 는 `gpt-5.6-sol` 을 배정한다.
+    """
+    lead_default = _default(
+        "OKSTRA_DEFAULT_LEAD_MODEL",
+        provider_default_model(lead_provider, "lead")
+        if lead_provider
+        else default_model("lead"),
+    )
     recommendations = {
         "lead": lead_default,
         "claude": _default("OKSTRA_DEFAULT_CLAUDE_MODEL", default_model("claude")),

package/runtime/python/okstra_ctl/wizard.py

@@ -3445,7 +3445,14 @@ def _role_model_lines(state: WizardState) -> str:
     """이번 run 에서 실제로 모델을 고르게 되는 역할만, 추천 모델과 함께 나열한다.
     뒤따르는 *_model 단계의 등장 조건과 1:1 로 맞춰 안내와 실제 화면이 어긋나지
     않게 한다 (그래서 분석에 참여하지 않는 antigravity 는 executor 일 때만 나온다)."""
-    rec = recommended_role_models()
+    # 이 화면의 lead 줄은 뒤따르는 lead-model picker 와 같은 provider 를
+    # 봐야 한다 — picker 는 호스트의 native provider 만 제시한다.
+    rec = recommended_role_models(
+        lead_provider=default_host_registry()
+        .resolve(state.host_runtime)
+        .descriptor.native_provider_id
+        or "",
+    )
     roster = _resolved_roster(state)
     impl = state.task_type == "implementation"