okstra 0.223.2 → 0.225.0

package/dist/commands/execute/render-bundle.mjs

@@ -4,10 +4,9 @@ import { resolveRuntime } from "../../lib/host-registry-client.mjs";
 const USAGE = `okstra render-bundle — preview the task bundle without launching a lead
 
 This is a thin shim over \`python3 -m okstra_ctl.run\` that forces
-\`--render-only\`. Use it to preview where prepare_task_bundle() would
-materialize files (INSTRUCTION_SET_DIR, RUN_DIR, lead prompt path,
-final report template path, etc.) for a given task/phase, without
-actually creating the run-state or spawning the launcher.
+\`--render-only\`. It prepares the run state and task artifacts without
+launching a new lead process. Add --summary-only to keep the artifact paths
+and preparation status in stdout without repeating the saved lead prompt.
 
 Usage:
   okstra render-bundle --project-root <dir> --project-id <id> \\
@@ -23,14 +22,17 @@ Usage:
     [--clarification-response <path>] [--work-category <cat>] \\
     [--selected-direction <selection-final-report.md>] \\
     [--stage <auto|N>] [--stages <csv>] [--pr-template-path <path>] \\
-    [--fix-cycle <yes|no>] [--discussion-start <link|text|task-key>]
+    [--fix-cycle <yes|no>] [--discussion-start <link|text|task-key>] \\
+    [--reasoning-effort <low|medium|high|xhigh>] [--summary-only]
 
+  --summary-only      omit the lead prompt body; preparation and validation are unchanged
   --stage             implementation / final-verification only
   --stages            release-handoff only: PR stage bundle csv (empty = whole-task)
   --lead-runtime      registered host ID or alias
   --pr-template-path  release-handoff only
   --fix-cycle         entry phase only: record this re-entry of a done task as a
                       bug-fix cycle (yes opens/continues the cycle)
+  --reasoning-effort  effort every claude, codex and grok worker CLI is started with
   --analysis-target   feature-analysis only: required target identifier or text
   --evidence-inputs   analysis task types except project-analysis: report path csv
   --discussion-start  discussion only, required there: a ticket or project link,

package/dist/commands/execute/render-bundle.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"render-bundle.mjs","sourceRoot":"","sources":["../../../src/commands/execute/render-bundle.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGpE,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Cb,CAAC;AAEF,SAAS,aAAa,CAAC,IAAa,EAAE,IAAY;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC7B,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,SAAS;QAChD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAClC,GAAG,KAAK,wBAAwB;WAC7B,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC;WACzC,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAC3C,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,GAAG,IAAI,uEAAuE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAa,EACb,aAAqB,EACrB,UAAiC;IAEjC,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,OAAO;QACL,kBAAkB,EAAE,aAAa;QACjC,eAAe;QACf,GAAG,qBAAqB,CAAC,UAAU,CAAC;QACpC,GAAG,kBAAkB,CAAC,IAAI,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAiC;IACrE,MAAM,IAAI,GAAG;QACX,gBAAgB,EAAE,UAAU,CAAC,eAAe,IAAI,MAAM;QACtD,wBAAwB,EAAE,UAAU,CAAC,gBAAgB;KACtD,CAAC;IACF,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,IAAI,CACP,2BAA2B,EAAE,UAAU,CAAC,IAAI,EAC5C,iCAAiC,EAAE,UAAU,CAAC,UAAU,EACxD,+BAA+B,UAAU,CAAC,MAAM,EAAE,CACnD,CAAC;IACF,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,sCAAsC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAuB;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,WAAW,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IAEnC,8CAA8C;IAC9C,MAAM,SAAS,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,CAAC,uEAAuE,CACnF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC;IACzE,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC;QAC7C,gBAAgB;QAChB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,iBAAiB,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,eAAe,CAAC;IAC1D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CACrC,IAAI,EACJ,KAAK,CAAC,SAAS,EACf,iBAAiB,CAClB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
+{"version":3,"file":"render-bundle.mjs","sourceRoot":"","sources":["../../../src/commands/execute/render-bundle.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGpE,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDb,CAAC;AAEF,SAAS,aAAa,CAAC,IAAa,EAAE,IAAY;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC7B,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,SAAS;QAChD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAClC,GAAG,KAAK,wBAAwB;WAC7B,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC;WACzC,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAC3C,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,GAAG,IAAI,uEAAuE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAa,EACb,aAAqB,EACrB,UAAiC;IAEjC,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,OAAO;QACL,kBAAkB,EAAE,aAAa;QACjC,eAAe;QACf,GAAG,qBAAqB,CAAC,UAAU,CAAC;QACpC,GAAG,kBAAkB,CAAC,IAAI,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAiC;IACrE,MAAM,IAAI,GAAG;QACX,gBAAgB,EAAE,UAAU,CAAC,eAAe,IAAI,MAAM;QACtD,wBAAwB,EAAE,UAAU,CAAC,gBAAgB;KACtD,CAAC;IACF,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,IAAI,CACP,2BAA2B,EAAE,UAAU,CAAC,IAAI,EAC5C,iCAAiC,EAAE,UAAU,CAAC,UAAU,EACxD,+BAA+B,UAAU,CAAC,MAAM,EAAE,CACnD,CAAC;IACF,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,sCAAsC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAuB;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,WAAW,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IAEnC,8CAA8C;IAC9C,MAAM,SAAS,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,CAAC,uEAAuE,CACnF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC;IACzE,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC;QAC7C,gBAAgB;QAChB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,iBAAiB,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,eAAe,CAAC;IAC1D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CACrC,IAAI,EACJ,KAAK,CAAC,SAAS,EACf,iBAAiB,CAClB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/docs/cli.md

@@ -30,6 +30,7 @@ The Node CLI requires Node.js 22 or newer. Its TypeScript sources are compiled f
   - [`--evidence-inputs`](#--evidence-inputs)
   - [`--directive`](#--directive)
   - [`--fix-cycle`](#--fix-cycle)
+  - [`--reasoning-effort`](#--reasoning-effort)
   - [`--role-count`](#--role-count)
   - [`--role-model`](#--role-model)
   - [`--lead-runtime`](#--lead-runtime)
@@ -61,7 +62,7 @@ The Node CLI requires Node.js 22 or newer. Its TypeScript sources are compiled f
 Base command for initial entry with full arguments:
 
 ```bash
-scripts/okstra.sh [--render-only] [--yes] [--no-plan-verification] [--terminal-backend cmux-pane|cli-wrapper] --task-type <task-type> [--role-count <role>=<N>] [--role-model <role>=<modelRef>] [--lead-runtime <host-id-or-alias>] [--lead-provider <provider>] [--lead-model <model>] [--worker-model provider=model,...] [--report-writer-provider <provider>] [--report-writer-model <model>] [--executor claude|codex|antigravity|grok|kimi] [--critic claude|codex|antigravity|grok|kimi] [--related-tasks taskA,taskB] [--work-category bugfix|feature|refactor|ops|improvement|unknown] [--base-ref <branch|tag|sha>] [--clarification-response <previous-final-report>] [--selected-direction <selection-final-report.md>] [--approved-plan <plan-path>] [--approve] --project-id <project-id> --task-group <task-group> --task-id <task-id> (--task-brief <brief-path> | --discussion-start <start-input>) [--directive <directive>] [--fix-cycle <yes|no>]
+scripts/okstra.sh [--render-only] [--yes] [--no-plan-verification] [--terminal-backend cmux-pane|cli-wrapper] --task-type <task-type> [--role-count <role>=<N>] [--role-model <role>=<modelRef>] [--lead-runtime <host-id-or-alias>] [--lead-provider <provider>] [--lead-model <model>] [--worker-model provider=model,...] [--report-writer-provider <provider>] [--report-writer-model <model>] [--executor claude|codex|antigravity|grok|kimi] [--critic claude|codex|antigravity|grok|kimi] [--related-tasks taskA,taskB] [--work-category bugfix|feature|refactor|ops|improvement|unknown] [--base-ref <branch|tag|sha>] [--clarification-response <previous-final-report>] [--selected-direction <selection-final-report.md>] [--approved-plan <plan-path>] [--approve] --project-id <project-id> --task-group <task-group> --task-id <task-id> (--task-brief <brief-path> | --discussion-start <start-input>) [--directive <directive>] [--fix-cycle <yes|no>] [--reasoning-effort low|medium|high|xhigh]
 ```
 
 Analysis input ownership is narrower than the base shell command. The `/okstra-run` wizard collects `--analysis-target` and `--evidence-inputs` values and passes them internally to `node bin/okstra render-bundle`. `scripts/okstra.sh` does not accept either flag. Because `feature-analysis` requires a target, start that task type with the in-host skill; the two option sections below document the internal Node render inputs, not standalone shell options.
@@ -443,6 +444,12 @@ scripts/okstra.sh --task-type implementation-planning ... \
 - `--fix-cycle <yes|no>` records whether re-entry into an entry phase (`requirements-discovery` / `error-analysis` / `implementation-option-selection` / `implementation-planning`) after completion through release-handoff is a bug-fix cycle. When omitted, no cycle is recorded. The `fix_cycle_confirm` step in the okstra-run wizard accepts the same input.
 - `yes` opens a new cycle only when both conditions hold: the task type is an entry phase, and the manifest's `workflow.lastCompletedPhase` is `release-handoff` with delivery finished — a release-handoff that ended in `skip` or left a stage's PR `skipped` points the next phase back at `release-handoff`, and that task is refused. Preparation rejects the request if either condition is false. Once a cycle is open, later runs for the same task attach to it automatically without this flag.
 
+### `--reasoning-effort`
+
+- `--reasoning-effort <low|medium|high|xhigh>` sets the reasoning effort of every worker CLI the run starts. The value is stored as `reasoningEffort` in the run manifest, and `okstra-provider-exec.py` passes it on each dispatch: `--effort` to claude, `-c model_reasoning_effort=` to codex, and `--reasoning-effort` to grok. The `reasoning_effort` step in the okstra-run wizard asks for the same value after the role screens.
+- When omitted, each CLI keeps its own configuration, and codex keeps the catalog's `high` for `gpt-6.1-sol`.
+- antigravity, kimi and zai do not receive it. antigravity encodes the effort in the model identity (`gemini-3.8-flash-high`) and rejects `--effort` beside it, and that identity is fixed when roles are assigned. Whether the kimi CLI and z.ai's endpoint accept an effort setting has not been verified.
+
 ### `--lead-runtime`
 
 Selects a lead adapter by registered host ID or alias. The default is `claude-code`. Terminal `okstra run <host-id-or-alias>` requests the same registry entry and verifies its `spawn-process` readiness before launch; an unavailable selected host is never replaced silently.
@@ -903,11 +910,12 @@ The `okstra` Node CLI (`bin/okstra`) provides both installer/admin commands and
 | `okstra incremental-scope <args…>` | Decide re-verify vs carry-forward scope for an `implementation-planning` clarification re-run. Thin shim into `scripts/okstra_ctl/incremental_scope.py` (deterministic): it reads the dependency graph from the prior run `data.json`'s `implementationPlanning.stageMap` and returns `mode:"incremental"` only when the base-ref SHA is unchanged and the affected stages' `downstream_stage_closure` covers at most half of all stages; `--full-reason` (selected option / Stage Map / approach) still forces `mode:"full"`. An answered `C-NNN` that traces to no stage returns `mode:"unresolved"` rather than full — pass `--impacted` with the stage numbers or `--full-reason`. `--run-manifest <path>` is required for a decision (not for `--preview`): the same decision is written to the record that manifest names in `incrementalDecisionPath`, so the report writer's authoring contract and `okstra incremental-carry` read it instead of CSVs the lead re-typed. `mode: "unresolved"` is a question back to the lead and is deliberately not recorded. `--preview --prev-data <path> --answered-clarifications <csv>` runs the link half alone — no base SHA, no side effects — and prints `{wouldForceFull, unlinkedIds, reason}`; unlinked ids set `wouldForceFull: false` and fill `unlinkedIds` |
 | `okstra incremental-carry <args…>` | Merge carried-forward plan-item verdicts into an incremental re-run. Contract v3 takes `--prev-data`, `--cur-narrative`, and the convergence-owned `--state`; it verifies carried stage rows and writes only `--out-state`, tagging copied verdicts with `carriedForwardFromSeq`. Pass `--decision <incrementalDecisionPath>` for the two stage sets — the same record the report writer's authoring contract was built from — instead of `--carry-stages` / `--reverify-stages`, which the lead re-typed off stdout; the two forms cannot be combined, and a record whose `mode` is not `incremental` is refused. Unchanged `P-Val-*` / `P-Req-*` / `P-Rb-*` rows whose extract hash still matches are carried the same way, and the sibling `plan-items-*.json` `dispatchQueue` is rewritten to match. The historical v2 `--cur-data --out` form remains readable. Ownership, scope, item, or schema drift raises `CarryError` and forces a full fallback. |
 | `okstra code-review target --task-key <k> --stage <N> [--project-root <dir>] [--cwd <dir>] [--json]` / `okstra code-review target --branch <name> [--base <ref>] [--date <YYYY-MM-DD>] [--project-root <dir>] [--cwd <dir>] [--json]` | Resolve what a code review reads and where its result file goes. Output is always JSON, so `--json` only makes that explicit. `--project-root` and `--cwd` are shared pre-dispatch arguments and apply to both modes; `--cwd` is only consulted when `--project-root` is absent. Both modes return `{ ok, projectRoot, mode, worktreePath, branch, baseCommit, headCommit, reviewPath, round }`; stage mode additionally returns `taskKey`, `taskRoot`, and `stage`. Stage mode takes the diff base from the `base_ref` recorded on that stage's worktree-registry row when it was provisioned — not from a rule re-applied at review time — and names the result `.okstra/tasks/<task-group>/<task-id>/code-reviews/stage-<NN>.md`, where a re-review of the same stage becomes `-r2`, `-r3`, … (the `round` field). Only a legacy row provisioned before `base_ref` was recorded falls back to re-deriving the base through `stage_targets`, and a failure there is reported as `stage_base_unresolved`. `worktreePath` comes back empty whenever the stage worktree is not usable as a live checkout — the registry row is no longer `active` (whole-task final-verification released it), the row never carried a path, or the recorded directory is gone — and the review then reads the `branch` ref instead. Branch mode uses `--base` when given, otherwise the merge-base with the default branch (`refs/remotes/origin/HEAD`, else `main`/`master`), and names the result `.project-docs/code-reviews/<branch>/<YYYY-MM-DD>-<NN>.md`, where `<NN>` (the `round` field) is the next sequence number for that date — the highest already on disk plus one. Read-only: it resolves paths and creates no directory and no file, so the review directory does not exist until the caller writes the report. Backend for the okstra-code-review skill |
+| `okstra code-review check-coverage --project-root <dir> --census <table-path> --completion <completion-path> [--completion <gap-fill-path> ...]` | Audits compact grouped-cell verdicts from one reviewer's verified standalone completions. Rejects changed model assignments or invalid evidence (exit 2); lists missing/unknown IDs (exit 1); complete usable coverage exits 0. The census has `## Rules` (Rule, Group, Reference) and `## Cells` (Cell, Target, Group) tables. Each result row explicitly accounts for the group's rules through Checked, N/A and Findings, with one existing target-source path:line. Missing rules are reported without expanding a target-by-bullet table; the lead audits selected references and semantic truth. |
 | `okstra set-work-status <token> <todo\|in-progress\|blocked\|done> [--note <text> \| --note-file <path>] [--task-group <g>] [--project-root <dir>]` | Update user-managed `workStatus`. Existing briefs can be registered without a run. Direct completion requires a work and verification summary; use a UTF-8 note file for longer results. Records are shared through group context, inspect, and subsequent runs without claiming cross-verification. Ambiguous IDs return `matches[]`. A `share` failure with `statusRecorded:true` can be retried with the same command. |
 | `okstra worktree-lookup <project-id> <task-group> <task-id>` | Return the `worktree_registry.lookup` result: reserved path, branch, base ref, and current status |
 | `okstra worktree-status [--path <dir>] [--check-clean]` | Answer "is this worktree clean?" over source paths only, excluding what okstra provisioned there — `.okstra`, the configured sync entries (`.project-docs`, `.claude`, …), and any nested stage worktree. A bare `git status --porcelain` in a task worktree is never empty for that reason, so a plan step asserting a clean tree with one fails on okstra's scaffolding instead of on the stage's own work; this is the same gate `handoff` and stage integration use. Output is JSON `{ ok, path, clean, entries, excluded }` where `entries` holds the `git status --short` rows that made it dirty. Exit code is 0 regardless unless `--check-clean` is given, which exits 1 on a dirty tree so it can stand as a shell assertion (`okstra worktree-status --check-clean`). okstra writes `stage-<N>-exit` itself when it settles the stage, so a plan step must not tag. A path outside a git work tree exits 2 rather than reporting a clean tree |
 | `okstra plan-validate <plan-path>` | Run `_validate_approved_plan` and report frontmatter `approved` recognition plus unresolved Blocks=approval rows |
-| `okstra render-bundle <args…> [--stage <auto\|N>] [--stages <csv>]` | Thin shim over `prepare_task_bundle(render_only=True)` with the same signature as `python3 -m okstra_ctl.run --render-only`. `--stage` is for `implementation` and `final-verification`: for implementation, `auto` (default) selects the earliest incomplete stage with satisfied dependencies, while `<N>` forces a stage; for final-verification, `<N>` verifies one stage with artifacts under `runs/final-verification/stage-<N>/` and a `-fv-s<N>` team suffix, while an empty value performs whole-task verification with the flat layout. The separate `--stages <csv>` channel is for `release-handoff`: it names the stages to open a PR for, one PR per stage, and an empty value takes every eligible stage. Preparation enforces eligibility—`done` + accepted `verified` + not yet `pr`—and automatically creates an input document that cites verification reports. `--discussion-start <link\|text\|task-key>` is for `discussion`, which takes no `--task-brief`: prepare records the start input in the task's discussion record and writes the input document from it |
+| `okstra render-bundle <args…> [--stage <auto\|N>] [--stages <csv>] [--summary-only]` | Thin shim over `prepare_task_bundle(render_only=True)` with the same signature as `python3 -m okstra_ctl.run --render-only`. `--summary-only` omits the lead prompt body from stdout while preserving preparation status, artifact paths, concurrency warnings, and all saved artifacts; default output still includes the full prompt. `--stage` is for `implementation` and `final-verification`: for implementation, `auto` (default) selects the earliest incomplete stage with satisfied dependencies, while `<N>` forces a stage; for final-verification, `<N>` verifies one stage with artifacts under `runs/final-verification/stage-<N>/` and a `-fv-s<N>` team suffix, while an empty value performs whole-task verification with the flat layout. The separate `--stages <csv>` channel is for `release-handoff`: it names the stages to open a PR for, one PR per stage, and an empty value takes every eligible stage. Preparation enforces eligibility—`done` + accepted `verified` + not yet `pr`—and automatically creates an input document that cites verification reports. `--discussion-start <link\|text\|task-key>` is for `discussion`, which takes no `--task-brief`: prepare records the start input in the task's discussion record and writes the input document from it |
 | `okstra profile show <task-type> [--resolved]` | Print a phase profile. `--resolved` expands its `{{INCLUDE:}}` targets and appends the lazy-read sidecars named in the profile body — transitively, because sidecars name sidecars of their own (`_implementation-executor.md` points at the coding-conventions preflight, the diff-review sweep, and the completion self-check). That matters because a profile is assembled from three places, so grepping only the top-level file returns false negatives: `grep clarification scripts/okstra_ctl/phases/implementation/profile.md` finds nothing while the assembled profile has many hits. One grep over this output answers whether a task-type covers a rule. The sidecar list is read from the profile body, never hard-coded, so a newly added sidecar is picked up without a code change. Read-only: it writes no manifest and registers no run, which is what separates it from `render-bundle` — `render-bundle` answers the same question but records a run in `recent.jsonl`, so it cannot be used to look something up. Exits 2 for an unknown task-type |
 | `okstra codex-run <args…>` | Codex lead-adapter dry-run entry point. Accepts the same arguments as `render-bundle` but owns `--render-only --lead-runtime codex`. It prepares the task bundle and prints the prompt for the Codex lead without dispatching workers |
 | `okstra worker-dispatch --project-root <dir> --run-manifest <path> [--workers <csv>] [--dry-run]` | Provider-neutral deterministic dispatcher for `runner=cli-wrapper` assignments. It verifies each adjacent invocation specification against the immutable run manifest immediately before process creation and records `core-pre-dispatch`; native-session rows stay with the host. The default selects CLI analysis assignments only. Phase 6 uses explicit `--workers report-writer`, and a mixed analysis/report batch is rejected. `--dry-run` performs the same verification and resolution without starting a provider process. A real dispatch records the lead checkpoints it owns in the run's lead-events ledger and returns them as `progressLines`: `phase-3-team-create` when it writes the implicit-team marker, `phase-4-dispatch` for each `initial` job, `phase-6-synthesis` on the first report-writer dispatch, and `phase-5-collect` for each `initial` dispatch it settled. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okstra",
-  "version": "0.223.2",
+  "version": "0.225.0",
   "description": "Host-aware multi-provider cross-verification orchestrator runtime and agent skills.",
   "license": "MIT",
   "author": "devonshin",

package/runtime/BUILD.json

@@ -1,5 +1,5 @@
 {
-  "package": "0.223.2",
-  "builtAt": "2026-10-22T08:47:32.015Z",
+  "package": "0.225.0",
+  "builtAt": "2026-10-25T11:09:38.785Z",
   "repoRoot": "/home/runner/work/okstra/okstra"
 }

package/runtime/bin/lib/okstra/cli.sh

@@ -190,6 +190,10 @@ while [[ $# -gt 0 ]]; do
       FIX_CYCLE="$(require_option_value --fix-cycle "${2-}")"
       shift 2
       ;;
+    --reasoning-effort)
+      REASONING_EFFORT="$(require_option_value --reasoning-effort "${2-}")"
+      shift 2
+      ;;
     --clarification-response)
       CLARIFICATION_RESPONSE_PATH="$(require_option_value --clarification-response "${2-}")"
       shift 2
@@ -256,7 +260,7 @@ while [[ $# -gt 0 ]]; do
           printf '  hint: did you mean --task-id?\n' >&2
           ;;
       esac
-      printf '  valid options: --render-only --resume-clarification --yes --role-count --role-model --lead-provider --lead-model --claude-model --codex-model --antigravity-model --worker-model --report-writer-provider --report-writer-model --lead-runtime --executor --critic --related-tasks --work-category --task-type --project-id --project-root --task-group --task-id --task-brief --discussion-start --directive --base-ref --fix-cycle --clarification-response --selected-direction --task-key --approved-plan --approve --implementation-option --stage --stages --qa-waiver --no-plan-verification -h|--help\n' >&2
+      printf '  valid options: --render-only --resume-clarification --yes --role-count --role-model --lead-provider --lead-model --claude-model --codex-model --antigravity-model --worker-model --report-writer-provider --report-writer-model --lead-runtime --executor --critic --related-tasks --work-category --task-type --project-id --project-root --task-group --task-id --task-brief --discussion-start --directive --base-ref --fix-cycle --reasoning-effort --clarification-response --selected-direction --task-key --approved-plan --approve --implementation-option --stage --stages --qa-waiver --no-plan-verification -h|--help\n' >&2
       usage
       exit 1
       ;;

package/runtime/bin/lib/okstra/globals.sh

@@ -49,6 +49,7 @@ TASK_KEY=""
 ANALYSIS_PROFILE=""
 DIRECTIVE=""
 FIX_CYCLE=""
+REASONING_EFFORT=""
 CLARIFICATION_RESPONSE_PATH=""
 SELECTED_DIRECTION_PATH=""
 APPROVED_PLAN_PATH=""

package/runtime/bin/lib/okstra/usage.sh

@@ -3,7 +3,7 @@
 usage() {
   cat >&2 <<USAGE_EOF
 usage:
-  $DISPLAY_COMMAND_NAME [--render-only] [--yes] [--no-plan-verification] --task-type <task-type> [--role-count <role>=<N>] [--role-model <role>=<provider/model>] [--lead-provider <provider>] [--lead-model <model>] [--worker-model provider=model,...] [--report-writer-provider <provider>] [--report-writer-model <model>] [--lead-runtime <host-id-or-alias>] [--executor claude|codex|antigravity] [--critic off|claude|codex|antigravity|grok|kimi] [--related-tasks taskA,taskB] --project-id <project-id> [--project-root <path>] --task-group <task-group> --task-id <task-id> (--task-brief <brief-path> | --discussion-start <start-input>) [--directive <directive>] [--fix-cycle <yes|no>]
+  $DISPLAY_COMMAND_NAME [--render-only] [--yes] [--no-plan-verification] --task-type <task-type> [--role-count <role>=<N>] [--role-model <role>=<provider/model>] [--lead-provider <provider>] [--lead-model <model>] [--worker-model provider=model,...] [--report-writer-provider <provider>] [--report-writer-model <model>] [--lead-runtime <host-id-or-alias>] [--executor claude|codex|antigravity] [--critic off|claude|codex|antigravity|grok|kimi] [--related-tasks taskA,taskB] --project-id <project-id> [--project-root <path>] --task-group <task-group> --task-id <task-id> (--task-brief <brief-path> | --discussion-start <start-input>) [--directive <directive>] [--fix-cycle <yes|no>] [--reasoning-effort low|medium|high|xhigh]
 
 summary:
   $DISPLAY_TOOL_NAME prepares a task-keyed instruction bundle. The standalone launcher defaults to an interactive Claude session; in-host skills keep the current registered host session as the native lead.
@@ -39,6 +39,9 @@ optional arguments:
                        release-handoff, decide whether to record this work as a bug-fix cycle.
                        'yes' opens a new cycle and attaches this run to it; 'no' or omitted records
                        nothing.
+  --reasoning-effort <low|medium|high|xhigh>
+                       Reasoning effort every claude, codex and grok worker CLI in this run is started
+                       with. Omitted leaves each CLI on its own configuration.
   --clarification-response
                        Low-level path argument. Carries an edited final-report.md from a prior
                        requirements-discovery or error-analysis run into this run as Section 0

package/runtime/bin/okstra-provider-exec.py

@@ -39,7 +39,7 @@ from okstra_ctl.worker_request import build_request, idle_timeout  # noqa: E402
 from okstra_ctl.worker_runner import LIVE, QUIET, run_worker  # noqa: E402
 from okstra_ctl.dispatch_core import verify_served_model  # noqa: E402
 from okstra_ctl.dispatch_state import DispatchError  # noqa: E402
-from okstra_ctl.execution_manifest import read_execution_manifest  # noqa: E402
+from okstra_ctl.execution_manifest import read_execution_manifest_view  # noqa: E402
 from okstra_ctl.write_policy import (  # noqa: E402
     WriteEnforcement,
     WritePolicy,
@@ -90,6 +90,7 @@ class _V2InvocationContext:
     verify_attestation: Callable[[ServedModelAttestation], str]
     write_policy: WritePolicy
     write_enforcement: WriteEnforcement
+    reasoning_effort: str
 
 
 def parse_invocation(argv: list[str]) -> Invocation:
@@ -120,6 +121,7 @@ def parse_invocation(argv: list[str]) -> Invocation:
     served_model_verifier: Callable[[ServedModelAttestation], str] | None = None
     write_policy: WritePolicy | None = None
     write_enforcement: WriteEnforcement | None = None
+    reasoning_effort = ""
     if metadata_raw:
         context = _v2_status_extra(
             metadata_path=_existing_file(
@@ -136,22 +138,27 @@ def parse_invocation(argv: list[str]) -> Invocation:
         served_model_verifier = context.verify_attestation
         write_policy = context.write_policy
         write_enforcement = context.write_enforcement
+        reasoning_effort = context.reasoning_effort
         if not spec.supports_role(role):
             raise PreflightError(
                 64, f"provider {provider_id!r} does not support role {role!r}"
             )
 
-    request = build_request(
-        prompt_text=prompt_path.read_text(encoding="utf-8"),
-        model=model,
-        project_root=project_root,
-        worktree_path=worktree,
-        role=role,
-        idle_timeout_seconds=idle_timeout_seconds,
-        session_id=session_id,
-        write_policy=write_policy,
-        write_enforcement=write_enforcement,
-    )
+    try:
+        request = build_request(
+            prompt_text=prompt_path.read_text(encoding="utf-8"),
+            model=model,
+            project_root=project_root,
+            worktree_path=worktree,
+            role=role,
+            idle_timeout_seconds=idle_timeout_seconds,
+            session_id=session_id,
+            write_policy=write_policy,
+            write_enforcement=write_enforcement,
+            reasoning_effort=reasoning_effort,
+        )
+    except ValueError as exc:
+        raise PreflightError(64, str(exc)) from exc
     strategy = spec.exec_strategy
     _check_command(strategy, request)
     return Invocation(
@@ -252,7 +259,7 @@ def _v2_status_extra(
         recorded = project_root / recorded
     if recorded.resolve(strict=False) != prompt_path.resolve(strict=True):
         raise PreflightError(64, "invocation metadata prompt does not match wrapper")
-    role_execution, attempt_row, pool = _execution_authority(
+    role_execution, attempt_row, pool, reasoning_effort = _execution_authority(
         metadata=metadata,
         project_root=project_root,
         role_execution_ref=identity.role_execution_ref,
@@ -291,7 +298,7 @@ def _v2_status_extra(
     except ValueError as exc:
         raise PreflightError(64, f"invocation write contract is invalid: {exc}") from exc
 
-    return _V2InvocationContext({
+    status_extra: dict[str, Any] = {
         "schemaVersion": "2.0",
         "executionIdentityVersion": 2,
         "participantRef": identity.participant_ref,
@@ -308,7 +315,12 @@ def _v2_status_extra(
         },
         "writePolicyDigest": attempt_row.write_policy_digest,
         "writeEnforcement": write_enforcement.to_payload(),
-    }, verify_attestation, write_policy, write_enforcement)
+    }
+    if reasoning_effort:
+        status_extra["reasoningEffort"] = reasoning_effort
+    return _V2InvocationContext(
+        status_extra, verify_attestation, write_policy, write_enforcement, reasoning_effort
+    )
 
 
 def _execution_authority(
@@ -329,7 +341,7 @@ def _execution_authority(
     try:
         manifest_path = manifest_path.resolve(strict=True)
         manifest_path.relative_to(project_root.resolve(strict=True))
-        manifest = read_execution_manifest(manifest_path)
+        manifest, manifest_payload = read_execution_manifest_view(manifest_path)
     except (OSError, ValueError) as exc:
         raise PreflightError(64, "invocation metadata run manifest is invalid") from exc
     role_execution = next((
@@ -358,10 +370,14 @@ def _execution_authority(
         raise PreflightError(
             64, "invocation metadata attempt does not match run manifest"
         )
+    reasoning_effort = manifest_payload.get("reasoningEffort") or ""
+    if not isinstance(reasoning_effort, str):
+        raise PreflightError(64, "run manifest reasoningEffort must be a string")
     return (
         role_execution,
         attempt_row,
         ModelPool.from_registry(default_provider_registry()),
+        reasoning_effort,
     )
 
 

package/runtime/bin/okstra.sh

@@ -226,6 +226,7 @@ else
 fi
 [[ -n "${DIRECTIVE-}" ]] && PY_ARGS+=(--directive "$DIRECTIVE")
 [[ -n "${FIX_CYCLE-}" ]] && PY_ARGS+=(--fix-cycle "$FIX_CYCLE")
+[[ -n "${REASONING_EFFORT-}" ]] && PY_ARGS+=(--reasoning-effort "$REASONING_EFFORT")
 for role_count in "${ROLE_COUNTS[@]-}"; do
   [[ -z "$role_count" ]] && continue
   PY_ARGS+=(--role-count "$role_count")

package/runtime/prompts/coding-preflight/clean-code.md

@@ -20,7 +20,7 @@ Good:
 const sum = (arr) => arr.reduce((acc, x) => acc + x, 0);
 ```
 
-Caveat: do not extract until the duplication is real (rule of three). Premature abstraction is also a code smell.
+Caveat: do not extract until the duplication is real (rule of three). Premature abstraction is also a code smell. The caveat does not cover a literal copy: a new block byte-identical to one already in the repository — test helpers included — reuses or moves the existing one.
 
 Two more forms of duplication that hide from symbol-level grep:
 
@@ -325,6 +325,13 @@ For every source file this change touches, follow the paths the change creates o
 - **concurrent** — something else is still writing, or the deadline fired and the work did not stop.
 - **selection** — when several candidates fail, which one's evidence survives.
 
+The failures the plan names are where the trace starts, not where it stops. Two orderings produce most error-path defects:
+
+- **cleanup registered after a call that can throw** — inside a `try` whose `catch` / `finally` cleans up, the object to clean up must be registered before any call that can throw: a property write, a read, a call that starts other work whose completion the cleanup must wait for. Registered after it, the failure leaves the object behind or lets the cleanup run before that work settles.
+- **order changed by a move** — when the change moves or restructures existing code, compare the order of throwing calls and cleanup registration with the base version; a refactor that swaps them is a behaviour change.
+
+A failure the test fakes cannot produce is not covered by a passing test. Name it as unverified rather than calling the path clean.
+
 **A finding names the input or state that produces the wrong result.** *"If the archive yields no entries, line 42 reports success and stores an empty result"* is a finding. Code that works as written is `clean`, however you would have written it differently: alternative structures, guards for states no caller can reach, extra tests for covered paths, and "consider extracting / renaming / memoizing" are improvements, not findings. A real failure that is small and cheap to fix is still a finding.
 
 ## Untrusted input and security

package/runtime/prompts/duties/code-reviewer.json

@@ -6,7 +6,8 @@
     "Return an evidence-backed verdict for every assigned review census cell, acting as a correctness and maintainability gate rather than a style commentator, and without changing the census or the code under review."
   ],
   "requiredConduct": [
-    "Inspect every cell's actual diff and surrounding behavior, apply the assigned standard, trace affected call paths and tests where relevant, look for regressions and missing validation, preserve the cell identifier, and return either concrete findings or an evidence-backed clean verdict."
+    "Inspect every cell's actual diff and surrounding behavior, apply the assigned standard, trace affected call paths and tests where relevant, look for regressions and missing validation, preserve the cell identifier, and return either concrete findings or an evidence-backed clean verdict.",
+    "Return one compact Coverage Verdicts table row per assigned target/group cell. Explicitly account for every shared-catalog rule ID under Checked, N/A with an inline applicability reason, or Findings with finding IDs. Share one literal inspected target-source path:line per row. Do not expand pack bullets into separate verdict rows, use all-checked claims, or mark unread rules checked."
   ],
   "decisionPrinciples": [
     "Report only actionable defects with a demonstrated consequence. Calibrate priority from impact and likelihood, distinguish correctness from preference, avoid duplicate findings across cells, and recommend the smallest fix that addresses the established problem."
@@ -15,13 +16,14 @@
     "Review only the provided census and fixed comparison range. Do not add, merge, split, omit, or reinterpret cells; do not edit source, broaden the diff, or redesign unrelated code."
   ],
   "evidenceStandards": [
-    "Each finding must identify its cell, exact code evidence, violated behavior or project standard, consequence, and feasible correction. A clean verdict must name what was inspected and why no actionable issue was found."
+    "Each finding must identify its cell, exact code evidence, violated behavior or project standard, consequence, and feasible correction. A clean verdict must name what was inspected and why no actionable issue was found.",
+    "Classify each finding as execution-error or design-violation. An execution error establishes a reachable failure and wrong result. A design violation identifies the applicable assigned rule, code evidence, and concrete design or maintenance impact; it does not require a runtime failure. Both kinds include a feasible fix; preference alone is insufficient."
   ],
   "collaborationContract": [
     "Keep verdicts independent from other reviewers and the author. Do not echo a finding without verifying it, suppress a unique defect for consistency, or resolve cross-cell overlap by changing identifiers; return overlap information to the lead."
   ],
   "completionCriteria": [
-    "Every census cell appears exactly once with a finding or an explicit clean verdict, all findings are prioritized and evidenced, duplicates are excluded, and blocked cells identify what prevents evaluation."
+    "Every grouped cell accounts for all expected shared-catalog rule IDs exactly once, all findings are prioritized and evidenced, and blocked or unaccounted rules identify what prevents evaluation. Preserve the census IDs; do not silently infer clean verdicts from missing rule IDs."
   ],
   "prohibitions": [
     "Do not reinterpret, merge, omit, or add census cells; report speculative concerns as defects; use style preference as a blocking standard; edit the reviewed code; or claim a cell clean without inspecting its assigned evidence."

package/runtime/prompts/wizard/prompts.ko.json

@@ -252,6 +252,16 @@
       },
       "echo_template": "fix-cycle: {value}"
     },
+    "reasoning_effort": {
+      "label": "이번 run 의 모든 워커 CLI 를 어떤 추론 강도로 실행할까요? claude·codex·grok 에 같은 단계로 전달됩니다. antigravity·kimi·zai 는 각자의 설정을 따릅니다.",
+      "options": {
+        "low": "low — 가장 빠름, 깊은 추론이 필요한 단계에서는 품질 저하 가능",
+        "medium": "medium — 속도와 품질의 중간",
+        "high": "high — 지금까지의 codex 기본값",
+        "xhigh": "xhigh — 가장 느림, 가장 깊은 추론"
+      },
+      "echo_template": "reasoning-effort: {value}"
+    },
     "base_ref_text": {
       "label": "base ref 를 입력해주세요 (branch, tag, 또는 short/full SHA)",
       "echo_template": "base-ref: {value}"

package/runtime/python/okstra_ctl/adapters/providers/claude/adapter.py

@@ -129,6 +129,8 @@ class ClaudeExecution:
                 argv += ["--add-dir", str(directory)]
         if request.policy.auto_approve:
             argv += list(_APPROVAL_ARGS)
+        if request.reasoning_effort:
+            argv += ["--effort", request.reasoning_effort]
         # `--verbose` is mandatory, not cosmetic: Claude Code rejects `--print`
         # combined with `--output-format=stream-json` without it and exits 1 in
         # under a second.

package/runtime/python/okstra_ctl/adapters/providers/codex/adapter.py

@@ -108,7 +108,9 @@ class CodexExecution:
                 argv += ["--add-dir", str(directory)]
         argv += ["--model", request.model]
         spec = CODEX.get(request.model)
-        if spec is not None:
+        if request.reasoning_effort:
+            argv += ["-c", f"model_reasoning_effort={request.reasoning_effort}"]
+        elif spec is not None:
             argv += spec.cli_args
         argv += ["--sandbox", "danger-full-access"]
         if request.policy.auto_approve:

package/runtime/python/okstra_ctl/adapters/providers/grok/adapter.py

@@ -263,6 +263,11 @@ class GrokExecution:
         cwd = request.worktree_path or request.project_root
         # `-p` 기본 `plain` 은 종료 시에만 stdout 에 쓴다. 러너는 파이프라
         # TUI 도 열리지 않고, `--no-alt-screen` 도 그 침묵을 바꾸지 않는다.
+        effort = (
+            ("--reasoning-effort", request.reasoning_effort)
+            if request.reasoning_effort
+            else ()
+        )
         return ExecCommand(
             argv=(
                 "grok",
@@ -270,6 +275,7 @@ class GrokExecution:
                 request.prompt_text,
                 "-m",
                 request.model,
+                *effort,
                 "--cwd",
                 str(cwd),
                 "--output-format",

package/runtime/python/okstra_ctl/adapters/providers/zai/adapter.py

@@ -83,7 +83,11 @@ def _read_zai_api_key() -> str:
 class ZaiExecution:
     def build_command(self, request: WorkerExecRequest) -> ExecCommand:
         api_key = _read_zai_api_key()
-        command = ClaudeExecution().build_command(request)
+        # z.ai 의 Anthropic 호환 엔드포인트가 Claude Code 의 effort 를 받는지
+        # 확인되지 않았으므로 run 의 강도를 넘기지 않는다.
+        command = ClaudeExecution().build_command(
+            replace(request, reasoning_effort="")
+        )
         return replace(
             command,
             # 설정 파일의 env 가 자식 환경을 다시 덮어쓰지 않게 한다.

package/runtime/python/okstra_ctl/agent/prompt_cli/results.py

@@ -7,6 +7,7 @@ materialize 가 만든 명세에 대해, 이 층은 그 뒤에 오는 것들을
 from __future__ import annotations
 
 import argparse
+import json
 from datetime import datetime, timezone
 from pathlib import Path
 
@@ -87,6 +88,30 @@ def _link_result(args: argparse.Namespace) -> None:
         dispatch_id=args.dispatch_id,
         result_path=_project_input(project_root, args.result, "agent result"),
     )
+    from ...dispatch_core import existing_dispatch_plan
+    from ...paths import RUN_VALIDATOR_RELATIVE, find_asset_root
+    from ...phases.implementation_planning.round_completion import complete_ready_plan_round
+    from ...worker_prompt_policy import is_plan_verify_dispatch_kind
+
+    manifest_path = _project_input(project_root, args.run_manifest, "run manifest")
+    manifest = _read_json_object(manifest_path, "run manifest")
+    if manifest.get("taskType") == "implementation-planning":
+        team = _read_json_object(project_root / manifest["teamStatePath"], "team-state")
+        records = [row for collection in ("workerDispatches", "agentDispatches")
+                   for row in team.get(collection, []) if row.get("dispatchId") == args.dispatch_id]
+        if len(records) == 1 and is_plan_verify_dispatch_kind(str(records[0].get("kind") or records[0].get("dispatchKind", ""))):
+            assets = find_asset_root(RUN_VALIDATOR_RELATIVE)
+            if assets is None:
+                raise AgentPromptCliError("plan-body validator is unavailable")
+            completion = complete_ready_plan_round(existing_dispatch_plan(
+                project_root, assets, manifest_path, manifest,
+            ))
+            if completion:
+                link["planVerification"] = completion
+                if completion["status"] == "failed":
+                    raise AgentPromptCliError(completion["reason"])
+                if not args.json:
+                    print(json.dumps({"planVerification": completion}, ensure_ascii=False))
     _emit(link, args.json)