okstra 0.195.3 → 0.196.0

package/docs/architecture.md

@@ -99,7 +99,7 @@ The host-native Okstra lead owns judgment policy and worker orchestration. okstr
 
 Canonical roles are `leader`, `analyser`, `critic`, `designer`, `planner`, `implementer`, `verifier`, `report-writer`, and `translator`. `lead` is a compatibility alias for `leader`. `executor` is a compatibility alias for `implementer`. New artifacts write only the canonical names.
 
-Selection is role-first: `--role-count <role>=<N>` creates `RoleInstance` ordinals, `--role-model <role>=<modelRef>` and `modelDefaults` feed `ModelPool`, and a pinned model is kept only when the host can bind it exactly. The resulting `RoleExecution` owns `Invocation` and `Attempt` rows plus the stored `executionLabel`. Pane titles use that label. Shared Git object stores and other-stage refs are observed-projection only; they are not an audit enforcement surface.
+Selection is role-first: `--role-count <role>=<N>` creates `RoleInstance` ordinals, `--role-model <role>=<modelRef>` and `modelDefaults` feed `ModelPool`, and a pinned model is kept only when the host can bind it exactly. The resulting `RoleExecution` owns `Invocation` and `Attempt` rows plus the stored `executionLabel`. Worker pane titles use that label. The lead's own cmux surface is titled `<task-group>/<task-id>` by `prepare_task_bundle` (`run.py` `_title_lead_pane`, cmux backend only): prepare runs in the lead's pane, so the calling surface from `cmux identify` is the lead's. A rename cmux refuses is a stderr line, not a failed prepare. Shared Git object stores and other-stage refs are observed-projection only; they are not an audit enforcement surface.
 
 ## Runtime assets vs support assets
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okstra",
-  "version": "0.195.3",
+  "version": "0.196.0",
   "description": "Host-aware multi-provider cross-verification orchestrator runtime and agent skills.",
   "license": "MIT",
   "author": "devonshin",

package/runtime/BUILD.json

@@ -1,5 +1,5 @@
 {
-  "package": "0.195.3",
-  "builtAt": "2026-09-09T16:13:30.574Z",
+  "package": "0.196.0",
+  "builtAt": "2026-09-09T20:48:12.483Z",
   "repoRoot": "/home/runner/work/okstra/okstra"
 }

package/runtime/python/okstra_ctl/adapters/hosts/capability_adapter.py

@@ -151,6 +151,11 @@ class CapabilityInteractionPort:
         """
         return self._limits.max_options
 
+    @property
+    def native_question_limit(self) -> int:
+        """이 호스트의 네이티브 질문 묶음이 한 화면에 받는 질문 수."""
+        return self._limits.max_questions
+
     def _native_options_fit(self, prompt: WizardPrompt) -> bool:
         labels = tuple(option.label for option in prompt.options)
         return (

package/runtime/python/okstra_ctl/adapters/providers/codex/adapter.py

@@ -93,7 +93,9 @@ class CodexExecution:
     """
 
     def build_command(self, request: WorkerExecRequest) -> ExecCommand:
-        argv = ["codex", "exec", "-C", str(request.project_root)]
+        # 출력은 파이프로 수집하므로 auto 는 색상을 끈다. 화면 표시와 기록의
+        # 색상 제거 여부는 공통 세션 기록기가 목적지에 맞춰 결정한다.
+        argv = ["codex", "exec", "--color", "always", "-C", str(request.project_root)]
         for directory in request.policy.write_scope:
             if directory != request.project_root:
                 argv += ["--add-dir", str(directory)]

package/runtime/python/okstra_ctl/cmux.py

@@ -421,7 +421,7 @@ def worker_command_line(
     """
     return (
         f"cd {shlex.quote(str(cwd))} && "
-        f"PATH={shlex.quote(path_value)} exec {shlex.join(argv)}"
+        f"PATH={shlex.quote(path_value)} FORCE_COLOR=1 exec {shlex.join(argv)}"
     )
 
 
@@ -456,7 +456,7 @@ def spawn_worker_surface(
     )
     target = _pane_by_id(panes, placement.pane_id)
     surface_uuid = _open_worker_surface(workspace, placement, target)
-    run_cmux(["rename-tab", "--surface", surface_uuid, "--title", title])
+    rename_surface(surface_uuid, title)
     _exec_worker(surface_uuid, cwd=cwd, command=command)
     owned = (*owned_surface_ids, surface_uuid)
     _size_lead_pane(workspace, owned)
@@ -464,6 +464,37 @@ def spawn_worker_surface(
     return surface_uuid
 
 
+def rename_surface(surface: str, title: str) -> subprocess.CompletedProcess[str]:
+    """Set the tab title cmux shows for one surface.
+
+    `surface` is a UUID for the worker surfaces okstra opened and a short ref
+    (`surface:N`) for the caller's own surface; cmux accepts both.
+    """
+    return run_cmux(["rename-tab", "--surface", surface, "--title", title])
+
+
+def rename_lead_surface(title: str) -> str:
+    """Title the surface this process runs in; "" on success, else the reason.
+
+    The lead is whatever pane invoked okstra, so the surface comes from
+    `identify` rather than from anything okstra recorded. A failure is returned
+    instead of raised: the title is a courtesy for the person watching the
+    workspace, and prepare has already written every manifest by the time it
+    is applied.
+    """
+    surface = identify_caller().get("surface_ref", "")
+    if not surface:
+        return "cmux could not identify the calling surface"
+    try:
+        result = rename_surface(surface, title)
+    except (OSError, subprocess.SubprocessError) as exc:
+        return f"cmux rename-tab failed: {exc}"
+    if result.returncode != 0:
+        detail = (result.stderr or result.stdout).strip() or f"exit {result.returncode}"
+        return f"cmux rename-tab failed: {detail}"
+    return ""
+
+
 def close_surface(surface_uuid: str) -> None:
     """Close an okstra-created surface, killing whatever still runs inside it."""
     try:

package/runtime/python/okstra_ctl/domain/worker_presentation.py

@@ -13,6 +13,7 @@ CLI 는 갈라 읽어야 한다.
 from __future__ import annotations
 
 import json
+import re
 from dataclasses import dataclass, field
 from pathlib import Path
 from typing import Any, Callable, Literal, Mapping, Protocol, runtime_checkable
@@ -34,6 +35,11 @@ ObserveServedModel = Callable[[Mapping[str, Any]], str | None]
 ObserveUsage = Callable[[Mapping[str, Any]], Mapping[str, Any] | None]
 
 WORKER = "worker"
+_TERMINAL_COLORS = re.compile(r"\x1b\[[0-9;:]*m")
+
+
+def strip_terminal_colors(text: str) -> str:
+    return _TERMINAL_COLORS.sub("", text)
 
 
 class TranscriptWriter(Protocol):
@@ -93,7 +99,7 @@ class SplitText:
     def sinks(self, writer: TranscriptWriter) -> tuple[SinkSpec, ...]:
         def result(line: str) -> str | None:
             writer.write(WORKER, line)
-            return line
+            return strip_terminal_colors(line)
 
         def progress(line: str) -> str | None:
             writer.write(WORKER, line)

package/runtime/python/okstra_ctl/run.py

@@ -4563,6 +4563,25 @@ def _resolve_terminal_backend(project_root: Path, inp: PrepareInputs) -> str:
     ) if part))
 
 
+def lead_pane_title(task_group: str, task_id: str) -> str:
+    """cmux 에서 리드 pane 에 붙는 제목. 사용자가 여러 task 의 pane 을 구분하는
+    이름이므로 slug 가 아니라 입력한 task-group / task-id 그대로 쓴다."""
+    return f"{task_group}/{task_id}"
+
+
+def _title_lead_pane(inp: PrepareInputs) -> None:
+    """리드 pane 제목을 `<task-group>/<task-id>` 로 바꾼다 (cmux 백엔드 전용).
+
+    prepare 는 리드 세션(또는 리드를 띄울 pane)에서 실행되므로 호출 surface 가
+    곧 리드 pane 이다. 제목은 화면 편의라 실패해도 run 을 막지 않지만, 무엇이
+    막았는지는 stderr 에 남긴다 — codex 샌드박스가 cmux 소켓을 EPERM 으로 막는
+    경우가 실제로 있다(`_resolve_terminal_backend` 참조).
+    """
+    reason = cmux.rename_lead_surface(lead_pane_title(inp.task_group, inp.task_id))
+    if reason:
+        print(f"okstra: lead pane title not applied — {reason}", file=sys.stderr)
+
+
 def prepare_task_bundle(inp: PrepareInputs) -> PrepareOutputs:
     """Produce a complete okstra task bundle on disk. See module docstring."""
     workspace_root = Path(inp.workspace_root)
@@ -4872,6 +4891,9 @@ def prepare_task_bundle(inp: PrepareInputs) -> PrepareOutputs:
 
     _record_run_in_central_index(inp, ctx, workspace_root, run_seq_override)
 
+    if terminal_backend == BACKEND_CMUX_PANE:
+        _title_lead_pane(inp)
+
     if not inp.render_only:
         _provision_settings_symlink(inp)
 

package/runtime/python/okstra_ctl/session_transcript.py

@@ -11,8 +11,9 @@ from datetime import datetime
 from pathlib import Path
 from typing import Callable
 
+from .domain.worker_presentation import strip_terminal_colors
+
 OKSTRA = "okstra"
-_SPEAKER_WIDTH = 14
 _RESET = "\x1b[0m"
 _MUTED = "\x1b[90m"
 _LIVE_COLORS = (
@@ -50,11 +51,20 @@ class SessionTranscript:
         path.parent.mkdir(parents=True, exist_ok=True)
         self._file = path.open("w", encoding="utf-8")
         self._live = live
+        # cmux 워커는 색상 사용을 명시한다. 리드에서 상속한 비대화형 출력
+        # 설정이 워커 터미널의 색상까지 끄지 않도록 명시적 요청을 우선한다.
+        force_color = os.environ.get("FORCE_COLOR", "")
         self._color = (
             live
             and sys.stdout.isatty()
-            and not os.environ.get("NO_COLOR")
-            and os.environ.get("TERM") != "dumb"
+            and (
+                force_color not in ("", "0")
+                or (
+                    force_color != "0"
+                    and not os.environ.get("NO_COLOR")
+                    and os.environ.get("TERM") != "dumb"
+                )
+            )
         )
         self._clock = clock
         self._archived = 0
@@ -89,9 +99,7 @@ class SessionTranscript:
             self._keep(self._row(speaker, line), capped=True)
 
     def _row(self, speaker: str, line: str) -> str:
-        # 패딩이 본문 앞 공백을 겸한다. 뒤에 공백을 한 칸 더 넣으면
-        # `[worker:grok]`(13칸) 줄이 두 칸이 되고 `[okstra]` 정렬이 깨진다.
-        label = f"[{speaker}]".ljust(_SPEAKER_WIDTH)
+        label = f"[{speaker}] "
         return f"{self._clock()} {label}{line}".rstrip()
 
     def _show(self, row: str, line: str) -> None:
@@ -110,7 +118,7 @@ class SessionTranscript:
                     f"{_MUTED}{row[:prefix_size]}{_RESET}"
                     f"{color}{row[prefix_size:]}{_RESET}"
                 )
-            print(row, flush=True)
+            print(row if self._color else strip_terminal_colors(row), flush=True)
 
     def _keep(self, row: str, *, capped: bool) -> None:
         if not capped:
@@ -136,7 +144,7 @@ class SessionTranscript:
         self._file.close()
 
     def _append(self, row: str) -> None:
-        self._file.write(row + "\n")
+        self._file.write(strip_terminal_colors(row) + "\n")
         self._file.flush()
 
     def _note_elision(self) -> None:

package/runtime/python/okstra_ctl/wizard/engine.py

@@ -33,7 +33,13 @@ from .ids import (
 )
 from .state import Prompt, WizardError, WizardState, _is_role_selection_step
 from .prompts import _domain_prompt
-from .picker_navigation import present_picker, accept_picker_answer
+from .picker_navigation import (
+    accept_picker_answer,
+    is_split_checkbox,
+    merge_split_checkbox_answer,
+    present_picker,
+    split_checkbox,
+)
 from .roles import _submit_role_prompt, next_role_prompt
 from .steps_identity import _submit_task_pick
 from .steps_analysis import _advance_design_prep_item
@@ -135,12 +141,14 @@ def _native_picker_screen(state: WizardState, prompt: Prompt) -> Prompt:
     """호스트 네이티브 선택기 한도에 맞춘 화면.
 
     단일 선택이 한도를 넘으면 쪽으로 나눈다(`present_picker`). 체크박스(`multi`)는
-    나누지 않는다 — 네이티브 체크박스에 못 실으면 `CapabilityInteractionPort.plan`
-    이 `numbered-multi` 로 내려 전체 목록을 한 번에 보인다. 종전엔 체크박스도
-    한 줄씩 토글하는 쪽으로 내렸는데, claude-code 한도 4 에서 후보 12개는 쪽당
-    2개가 됐고, 쪽 사본이 추천 표시를 단 채 단일 선택이 돼 `Prompt` 의 추천
-    불변식(단일 선택은 추천 정확히 하나)에 걸려 화면이 열리지 않았다(실측
-    2026-09-09, verifier 전체 후보 화면).
+    쪽으로 나누지 않는다 — 종전엔 한 줄씩 토글하는 쪽으로 내렸는데, claude-code
+    한도 4 에서 후보 12개는 쪽당 2개가 됐고, 쪽 사본이 추천 표시를 단 채 단일
+    선택이 돼 `Prompt` 의 추천 불변식(단일 선택은 추천 정확히 하나)에 걸려
+    화면이 열리지 않았다(실측 2026-09-09, verifier 전체 후보 화면). 대신
+    네이티브 질문 묶음에 실리는 크기(claude-code 4×4=16)면 같은 화면의 체크박스
+    질문 여러 개로 자른다(`split_checkbox`) — 묶음이 네이티브에 실릴 때만이고,
+    아니면 `CapabilityInteractionPort.plan` 이 `numbered-multi` 로 내려 전체
+    목록을 한 번에 보인다.
     """
     if "native_single_select" not in state.available_functions:
         return prompt
@@ -148,10 +156,17 @@ def _native_picker_screen(state: WizardState, prompt: Prompt) -> Prompt:
         if _interaction_plan(state, prompt).kind == "native-group":
             return prompt
         prompt = prompt.questions[0]
+    port = default_host_registry().resolve(state.host_runtime).interaction()
     if prompt.multi:
+        split = split_checkbox(
+            prompt,
+            max_options=port.native_option_limit,
+            max_questions=port.native_question_limit,
+        )
+        if split is not prompt and _interaction_plan(state, split).kind == "native-group":
+            return split
         return prompt
-    limit = default_host_registry().resolve(state.host_runtime).interaction().native_option_limit
-    return present_picker(state, prompt, limit=limit)
+    return present_picker(state, prompt, limit=port.native_option_limit)
 
 
 def _next_prompt_screen(state: WizardState) -> Prompt:
@@ -204,6 +219,9 @@ def _sim_answer(prompt: Prompt) -> str:
 def _sim_advance(state: WizardState, prompt: Prompt) -> None:
     """기본답으로 한 화면 전진한다. progress 를 재계산하는 submit()/
     _submit_group() 은 호출하지 않고 step.submit 만 직접 호출해 재귀를 막는다."""
+    if is_split_checkbox(prompt):
+        # 조각 질문의 step 은 등록된 step 이 아니다 — 잘리지 않은 원본으로 낸다.
+        prompt = _next_prompt_screen(state)
     try:
         if _is_role_selection_step(prompt.step):
             # 화면은 호스트 한도에 맞춰 쪽으로 잘린 사본일 수 있다 — 기본답은
@@ -384,7 +402,12 @@ def submit(state: WizardState, value: str) -> dict[str, Any]:
         value = accept_picker_answer(state, original, value)
         if value is None:
             return {"echo": "", "next": prompt_payload(state, next_prompt(state))}
-    if prompt.kind == "pick_group":
+    if is_split_checkbox(prompt):
+        # 질문 묶음으로 잘린 체크박스 — 탭별 CSV 를 한 줄로 합쳐 원본 step 의
+        # 제출 경로로 보낸다. 원본의 선택지로 검증한다.
+        value = merge_split_checkbox_answer(prompt, value)
+        prompt = _next_prompt_screen(state)
+    elif prompt.kind == "pick_group":
         return _submit_group(state, prompt, value)
     if _is_role_selection_step(prompt.step):
         # 고정 단일 역할의 화면은 호스트 한도에 맞춰 쪽으로 잘린 사본일 수

package/runtime/python/okstra_ctl/wizard/picker_navigation.py

@@ -1,16 +1,93 @@
-"""호스트 선택기 한도 안에서 단일 선택의 원래 선택지를 보존하는 쪽 나누기.
+"""호스트 선택기 한도 안에서 원래 선택지를 보존하는 두 가지 강등.
 
-체크박스(`multi`)는 여기 오지 않는다 — 네이티브 체크박스에 못 실으면
-`numbered-multi` 로 전체 목록을 한 번에 보인다(`engine._native_picker_screen`).
-쪽 사본이 추천 표시를 단 채 단일 선택으로 바뀌면 `Prompt` 의 추천 불변식에
-걸리므로, 한 줄씩 토글하던 체크박스 쪽 나누기는 2026-09-09 에 뺐다.
+단일 선택은 쪽으로 나눈다(`present_picker`). 체크박스(`multi`)는 쪽으로 나누지
+않는다 — 쪽 사본이 추천 표시를 단 채 단일 선택으로 바뀌면 `Prompt` 의 추천
+불변식에 걸리므로, 한 줄씩 토글하던 체크박스 쪽 나누기는 2026-09-09 에 뺐다.
+대신 네이티브 질문 묶음(claude-code `AskUserQuestion` 의 질문 4개 × 옵션 4개)에
+실리는 크기면 같은 화면 안의 체크박스 질문 여러 개로 자른다(`split_checkbox`):
+사용자는 탭마다 체크하고, 답은 하나의 CSV 로 합쳐져(`merge_split_checkbox_answer`)
+원래 step 의 제출 경로로 간다. 그 크기도 넘으면 `numbered-multi` 로 전체 목록을
+한 번에 보인다(`engine._native_picker_screen`).
 """
+import json
+import math
 from dataclasses import replace
 
 from .ids import PICK_TYPE_CUSTOM
 from .state import Option, Prompt, WizardError, WizardState
 
 _PAGE_PREFIX = "__okstra_picker_page__:"
+_SPLIT_SEPARATOR = "#"
+
+
+def split_checkbox(
+    prompt: Prompt, *, max_options: int, max_questions: int,
+) -> Prompt:
+    """옵션이 `max_options` 를 넘는 체크박스를 같은 화면의 질문 묶음으로 자른다.
+
+    질문 수는 옵션이 들어가는 최소 개수이고 옵션은 질문에 고르게 나눈다 —
+    마지막 질문이 한 줄짜리가 되면 호스트 최소 옵션 수(2)에 걸려 묶음 전체가
+    네이티브에 못 실린다. 추천은 원래 목록의 앞머리 run 이라 어느 조각에서도
+    앞머리 run 이 된다(`Prompt._check_recommendations`). `max_questions` 도
+    넘으면 자르지 않고 그대로 돌려준다.
+    """
+    if prompt.kind != "pick" or not prompt.multi or len(prompt.options) <= max_options:
+        return prompt
+    count = len(prompt.options)
+    questions = math.ceil(count / max_options)
+    if questions > max_questions:
+        return prompt
+    base, extra = divmod(count, questions)
+    chunks: list[Prompt] = []
+    offset = 0
+    for index in range(questions):
+        size = base + (1 if index < extra else 0)
+        shown = prompt.options[offset:offset + size]
+        chunks.append(replace(
+            prompt,
+            step=f"{prompt.step}{_SPLIT_SEPARATOR}{index + 1}",
+            label=f"{prompt.label} ({offset + 1}–{offset + size}/{count})",
+            options=shown,
+        ))
+        offset += size
+    return Prompt(
+        step=prompt.step,
+        kind="pick_group",
+        label=prompt.label,
+        help=prompt.help,
+        echo_template=prompt.echo_template,
+        questions=chunks,
+    )
+
+
+def is_split_checkbox(prompt: Prompt) -> bool:
+    return prompt.kind == "pick_group" and bool(prompt.questions) and all(
+        question.multi
+        and question.step.startswith(f"{prompt.step}{_SPLIT_SEPARATOR}")
+        for question in prompt.questions
+    )
+
+
+def merge_split_checkbox_answer(prompt: Prompt, value: str) -> str:
+    """질문 묶음 답(JSON, 조각 step → CSV)을 원래 체크박스의 CSV 한 줄로 합친다."""
+    try:
+        answers = json.loads(value or "{}")
+    except json.JSONDecodeError as exc:
+        raise WizardError(f"pick_group answer must be a JSON object: {exc}") from exc
+    if not isinstance(answers, dict):
+        raise WizardError("pick_group answer must be a JSON object")
+    known = {question.step for question in prompt.questions}
+    unknown = sorted(set(answers) - known)
+    if unknown:
+        raise WizardError(
+            f"wizard step {prompt.step!r}: answer names unknown questions {unknown}; "
+            f"expected {sorted(known)}"
+        )
+    chosen: list[str] = []
+    for question in prompt.questions:
+        raw = str(answers.get(question.step, "") or "")
+        chosen.extend(item.strip() for item in raw.split(",") if item.strip())
+    return ",".join(chosen)
 
 
 def present_picker(state: WizardState, prompt: Prompt, *, limit: int) -> Prompt:

package/runtime/python/okstra_ctl/wizard/roles.py

@@ -10,10 +10,12 @@ verifier: `max > 1`)은 체크박스 한 장이고, 고른 모델 수가 곧 인
 체크박스 화면(`role-models:<role>`)은 실행 가능한 전체 후보를 한 번에 싣는다.
 기본 후보(프로젝트 `modelDefaults`, 없으면 카탈로그 기본값)가 앞이고 권장
 수만큼의 앞줄이 추천이다. 호스트 네이티브 선택기의 옵션 한도(claude-code 4,
-codex 3, grok 15)를 넘으면 `CapabilityInteractionPort.plan` 이 `numbered-multi`
-로 내려 번호 목록이 된다 — 기본 후보만 실은 짧은 화면과 "직접 선택" 이 여는
-두 번째 화면으로 나누던 설계는 2026-09-09 사용자 요청으로 뺐다(후보 12개 중
-3개만 보이고, 두 번째 화면은 쪽 나누기가 추천 불변식을 깨 열리지도 않았다).
+codex 3, grok 15)를 넘으면 네이티브 질문 묶음에 실리는 크기(claude-code 4×4)
+까지는 같은 화면의 체크박스 질문 여러 개로 자르고(`picker_navigation.split_checkbox`),
+그것도 넘으면 `CapabilityInteractionPort.plan` 이 `numbered-multi` 로 내려 번호
+목록이 된다 — 기본 후보만 실은 짧은 화면과 "직접 선택" 이 여는 두 번째 화면으로
+나누던 설계는 2026-09-09 사용자 요청으로 뺐다(후보 12개 중 3개만 보이고, 두
+번째 화면은 쪽 나누기가 추천 불변식을 깨 열리지도 않았다).
 """
 from __future__ import annotations
 

package/runtime/skills/okstra-run/SKILL.md

@@ -198,7 +198,7 @@ That is the entire interactive flow. The wizard handles:
 - base-ref pick + git rev-parse validation (skipped when reusing an active worktree),
 - `implementation`-only sub-flow: approved-plan path (frontmatter `approved: true` check) + stage pick (`auto` = the earliest incomplete stage whose dependencies are satisfied, or a specific stage number). Implementer slots use role-count / role-model like every other role (`executor` is only a compatibility alias for `implementer`). When an approved plan is selected and a `## PLAN DECISION` sidecar carrying `Status: approved`, exported from the report — matching the plan on source-report·seq — is detected in that run's sibling `user-responses/`, the approve-confirm step expands to 3 options (`yes_apply` recommended: approve + apply the option as exported / `yes` approve only / `no` abort) — `yes_apply` validates the option against the plan's `optionCandidates` before applying it via the existing approval·option path,
 - `release-handoff`-only sub-flow: after the approved plan auto-resolves, a `handoff_stage_pick` multi-select — choose an eligible stage bundle (stage-group) or the whole task (when an accepted whole-task verification report exists); the result goes out as render-args' `stages` key (csv, empty when whole-task),
-- launch selection after identity/worktree steps: one screen per static role, in profile order. A role that can run several instances (`max > 1`) is a checkbox step `role-models:<role>` (`multi: true`) — the number of models checked is the number of instances, there is no separate count question; the label states the profile range and recommended count, every executable candidate is listed on that one screen (defaults first, the recommended set flagged), and when the list exceeds the host's native checkbox limit the interaction plan is `numbered-multi` — render the whole list, never a shortlist or pages. An optional role (`min = 0`, e.g. critic) carries a `추가 안 함` row. A fixed single role (`min = max = 1`, e.g. report-writer) is a single pick `role-model:<role>:1`. current-session lead is this session and is listed on the confirmation summary, not as a wizard step. The wizard does not fork on defaults-vs-customize, does not show a provider roster multi-pick, and does not offer a separate implementer-provider pick. Dynamic verifiers are not chosen at launch. `--workers` is compatibility-only, not a launch picker. Repeated `--role-count` / `--role-model` tokens on `renderArgv` are intentional,
+- launch selection after identity/worktree steps: one screen per static role, in profile order. A role that can run several instances (`max > 1`) is a checkbox step `role-models:<role>` (`multi: true`) — the number of models checked is the number of instances, there is no separate count question; the label states the profile range and recommended count, every executable candidate is listed on that one screen (defaults first, the recommended set flagged), and when the list exceeds the host's native checkbox limit the runtime either splits it into several checkbox questions on one `pick_group` screen (interaction plan `native-group`; the question steps are `role-models:<role>#1`, `#2`, … and the answer is one JSON object keyed by them, each value a CSV) when the host's native question group holds every option, or returns the interaction plan `numbered-multi` — render the whole list, never a shortlist or pages. An optional role (`min = 0`, e.g. critic) carries a `추가 안 함` row. A fixed single role (`min = max = 1`, e.g. report-writer) is a single pick `role-model:<role>:1`. current-session lead is this session and is listed on the confirmation summary, not as a wizard step. The wizard does not fork on defaults-vs-customize, does not show a provider roster multi-pick, and does not offer a separate implementer-provider pick. Dynamic verifiers are not chosen at launch. `--workers` is compatibility-only, not a launch picker. Repeated `--role-count` / `--role-model` tokens on `renderArgv` are intentional,
 - **resume-clarification (in-session equivalent)** — there is no separate mode or flag matching the shell's `okstra.sh --resume-clarification`; two steps of the standard flow carry out its substance. (1) `reuse_previous` (yes/no to reuse the previous run's settings — in `requirements-discovery` / `error-analysis` / `implementation-planning`, only when prior run-inputs exist): YES prefills role-count·role-model·directive·related-tasks at once. (2) `clarification_pick`: if the **task-type's own** previous `final-report` exists it is auto-recommended as the carry-in input (falling back to the newest by mtime across all phases when absent), and the same run's `user-responses/` sidecar (answers the user filled in) is attached alongside. The chosen path is passed to prepare as `--clarification-response` — the user makes the sidecar via the report's `Export user response`, places it in `runs/<task-type>/user-responses/`, and re-runs the same phase,
 - **re-verification scope (`reverify_scope_pick`, `implementation-planning` clarification re-runs only)** — asked right before `confirm` when the re-run is narrowable **or** an answered `C-NNN` traces to no stage. When every answered id traces to a stage: 3 options — `auto` (recommended — leave it to the lead's `okstra incremental-scope` decision) / `full` (re-verify every stage) / Enter directly (a stage-number CSV, validated against the prior report's Stage Map). When an id is unlinked, `auto` is omitted and the user names stages or picks `full`; that unlinked id does not freeze the run at full. The answer goes out as `--reverify-scope` and reaches the lead prompt as the `REVERIFY_SCOPE_MODE` / `REVERIFY_SCOPE_STAGES` tokens; it shapes that CLI's inputs rather than replacing the decision. The confirmation block's `reverify-scope` line names unlinked ids as needing stage numbers, not as a forced full re-run,
 - `release-handoff` PR template override + persist scope,