pantheon-opencode 1.6.0-beta.10 → 1.6.0-beta.12

package/scripts/versioning.mjs

@@ -111,7 +111,15 @@ function analyzeConventionalCommits(since) {
 function prepareManifests(newVersion) {
   if (!SEMVER_PATTERN.test(newVersion)) throw new Error(`invalid version: ${newVersion}`)
   const inventory = validateInventory(ROOT, { allowVersionDivergence: true })
-  return { inventory, updates: prepareInventoryVersion(inventory, newVersion) }
+  const releaseMetadataFiles = new Set(
+    inventory.documents
+      .filter(({ entry }) => entry.role === 'metadata')
+      .map(({ entry }) => entry.file),
+  )
+  const updates = prepareInventoryVersion(inventory, newVersion).filter(
+    ({ path }) => !releaseMetadataFiles.has(path.slice(ROOT.length + 1)),
+  )
+  return { inventory, updates }
 }
 
 /**

package/skills-lock.json

@@ -1,7 +1,7 @@
 {
   "src/skills/agent-coordination/SKILL.md": "d4bd70c18bc5726ea6784fe0a9c514446ca313e4c3ba4d658a0ff6658001aece",
-  "src/skills/artifact-management/SKILL.md": "91d68c8f2d1b642725adfc6df11e55865a8491aca690dc27d02ea7c778d49d41",
-  "src/skills/auto-continue/SKILL.md": "79aa1786ab62332abc45986d147ee944836e6f7a496c289e793639add4211229",
+  "src/skills/artifact-management/SKILL.md": "24dc1ca4660246ef37c3d3a5b246b7f63e3739f0ef741ed0a2e21d9abd3e9165",
+  "src/skills/auto-continue/SKILL.md": "3fd4167b2e015510aec428098d27bb15854ba239c4dc7a064177d62e2353af86",
   "src/skills/clonedeps/SKILL.md": "3e0b43cf96da98c83699dc48db3fd58fbfda84b9022bb70d3747875c81c3e124",
   "src/skills/code-review-checklist/SKILL.md": "6445513ab880efdb1005861ae13cb9a215f80b9d260f6278499f60771e07858c",
   "src/skills/codemap/SKILL.md": "87af5271e1576e154cadff313eab16264b726e43d094520736b7a5b03b409a4a",
@@ -9,7 +9,7 @@
   "src/skills/git-workflow-and-versioning/SKILL.md": "685a94041f1b4ce2a430301f517b89102055696267c369a7e8fb191606659276",
   "src/skills/incremental-implementation/SKILL.md": "7065ddb45da3c6b6751de07f290e92e6cb072e949a2e3aaae13ee7762f0a70fc",
   "src/skills/loop-engineering/SKILL.md": "f804e545821b9cca8fe0ec517307ed902446f28c2ca8ff9194c0f987cf7229e3",
-  "src/skills/memory-bank/SKILL.md": "4717cf18b43550c9f02cfab810968b97a5b2584f00a15516ecba643c80cdc110",
+  "src/skills/memory-bank/SKILL.md": "7fd7a65cd48f68793f60afa0d18b87692957888c7dad414213907b5e83d76395",
   "src/skills/reflect/SKILL.md": "4c7608c2a55cb8a50ac90fc0e2446bdf25e7914b1748cb7731c311d13c29dfdd",
   "src/skills/security-hardening/SKILL.md": "6d637e122421f7bc3b751f04854ad343a5a5d35249458bc8939233138fd3f20d",
   "src/skills/session-goal/SKILL.md": "3a708d15a59a6bff2dd32ff7ead6548ecccc7be8d39437fee3133ea6254b6134",
@@ -18,5 +18,5 @@
   "src/skills/tdd-with-agents/SKILL.md": "9d20607ea34fc3e02c7e3ef5186b103d84196bd9a13aaadd55a44f41339125da",
   "src/skills/verification-planning/SKILL.md": "14186446ef51e1ba2c87b337e8d5f86e566d805156ab21fba2a75f8c4a99df3f",
   "src/skills/visual-review-pipeline/SKILL.md": "f6e65ff75a9325c38e0e9dde8e87f09b873e14e490936ef48aa80201bb68fe10",
-  "src/skills/worktrees/SKILL.md": "0033c5f8a50f210f31f0256ba8cc0fd99c65674a2aabedb05d8e69447b5ec218"
+  "src/skills/worktrees/SKILL.md": "9cf2b036e90d9ff7c6deb786ad7bab2cb78d6bf39166a67d5cbeafc29f593c6e"
 }

package/src/agents/iris.md

@@ -46,6 +46,12 @@ mcp_tools:
 - Always open PRs as DRAFT unless explicitly told otherwise
 - Wait for human approval before merging
 - Never delete branches without confirmation
+- **Never bypass hooks.** Never pass `--no-verify`, `-n`, or any hook-skipping
+  equivalent to `git commit`/`git push`. The pre-commit and commit-msg hooks MUST
+  run: they are a fail-closed security gate, not an optional step.
+- **A failing or missing hook tool is a STOP, not an obstacle.** Report the exact
+  hook and error to @zeus and halt; never bypass it, amend around it, or work
+  around it — even when the failure looks unrelated to the staged change.
 
 ## Handoffs
 - Called by @zeus after review phase

package/src/agents/mnemosyne.md

@@ -84,7 +84,7 @@ Mnemosyne executes the expanded compression pipeline. When Zeus delegates compre
    - IMPL/REVIEW artifacts to archive
    - Next phase agent info
 
-2. **Scrub**: Automatic — `memory_store` MCP server applies regex scrub before persisting. No manual steps.
+2. **Privacy check**: Never store secrets, credentials, or tokens in durable memory. The current `memory_store` handler stores submitted values and metadata; automatic regex scrubbing/redaction is not guaranteed. Omit sensitive content or redact it before storing.
 
 3. **Write ZZ artifact**: Create `.pantheon/memory-bank/.tmp/ZZ-phase{N}-context.md` with:
    - From/To agent info
@@ -112,7 +112,7 @@ Mnemosyne executes the expanded compression pipeline. When Zeus delegates compre
 
 ### Write Protocol
 - Atomic write: .tmp → fsync → validate → rename
-- Scrubbing: automatic via MCP layer on persistence
+- Secret handling: omit or manually redact secrets before durable storage; do not rely on automatic MCP scrubbing.
 
 ### Safety
 - NEVER compress ADR notes, active PLAN, NEEDS_REVISION/FAILED reviews
@@ -154,6 +154,11 @@ Use this only when the user or Zeus explicitly asks to preserve a reusable resul
 
 **Use only for an explicit request to preserve one reusable result.** Background completion, Apollo discovery, and `subtask_summary` return are not triggers for durable storage.
 
+`pantheon-memory` stores durable SQLite entries with no entry TTL. Its search is
+FTS5/BM25 lexical matching only, with no semantic/vector fallback. Never store
+secrets, credentials, or tokens: the MCP stores submitted values and metadata
+without guaranteed automatic scrubbing.
+
 **Command:** `@mnemosyne Store <concise reusable result>`
 
 **What it does:**

package/src/agents/zeus.md

@@ -34,7 +34,7 @@ skills:
 
 Zeus never implements code, but visual references from the user are implementation context and must reach the specialist who does the work.
 
-- When a request includes an image or screenshot, inspect it with native image input or `vision_describe`. If neither can access it, state that limitation instead of guessing.
+- When a request includes an image or screenshot, use image content already available in the conversation. Call `vision_describe` only if it appears in the active root tool list; otherwise state the limitation instead of guessing.
 - For UI work, delegate to @aphrodite and include the image reference (URL/path when available) plus a concise description of the relevant layout, elements, and requested outcome in the task prompt.
 - Tell the implementer to compare the reference with the current UI and preserve unrelated existing changes. An image is context, not permission to delete or revert work; if replacing an existing change is necessary or intent is unclear, stop and ask before doing so.
 
@@ -52,12 +52,12 @@ Zeus nunca toca no código. Use o menor fluxo que preserve segurança: encaminhe
 | Ação | Status | Como fazer |
 |------|--------|------------|
 | Editar arquivo | ❌ BLOQUEADO | Delegar para @hermes, @aphrodite, @talos |
-| Bash shell | ❌ BLOQUEADO | Usar task() com subagente apropriado |
+| Bash shell | ❌ BLOQUEADO | Delegar via ferramenta `subagent` para o especialista apropriado |
 | Executar script | ❌ BLOQUEADO | Delegar para @prometheus |
 | Instalar dep | ❌ BLOQUEADO | Delegar para @prometheus |
 | Git commit/push | ❌ BLOQUEADO | Delegar para @iris |
 | Ler arquivo | ✅ Permitido | Via Read/Glob/Grep tools |
-| task() delegar | ✅ Permitido | Única ferramenta de ação de Zeus |
+| `subagent` delegar | ✅ Observado no root Beta 10 | Use o schema mostrado pelo runtime; `task()` é nomenclatura da API/host, não ferramenta root presumida |
 | memory MCP | ✅ Permitido | memory_search |
 | persistence MCP | ✅ Checkpoints | context_save, context_get |
 | skill() | ✅ Permitido | Carregar skills |
@@ -67,20 +67,20 @@ Zeus nunca toca no código. Use o menor fluxo que preserve segurança: encaminhe
 2. Pergunte ao usuário qual agente usar
 3. NUNCA tente fazer você mesmo
 
-**Gates proporcionais** (via `agent/askQuestions`):
-- Correção delimitada e reversível: não force planejamento nem aprovação de plano; encaminhe uma vez ao especialista, que inspeciona o contexto necessário, altera, verifica o comportamento e resume.
+**Gates proporcionais** (via ferramenta root `question`, se visível):
+- Tarefa delimitada, reversível, de baixa incerteza e não sensível/sem mudança material em API visível ao usuário: não force planejamento nem aprovação de plano; se delegar, encaminhe uma vez ao especialista correto, que inspeciona o contexto necessário, altera, verifica o comportamento e resume.
 - Planejamento e discovery são sob demanda; council apenas quando o usuário invocar `/pantheon` ou uma decisão material realmente exigir perspectivas distintas. Nunca dispare council para correção pequena.
-- Auth/segurança, dados/schema/migração e mudanças com impacto amplo mantêm revisão Themis e aprovação humana antes de ação sensível ou irreversível.
+- Escopo amplo/material, alta incerteza, mudança de API visível ao usuário, auth/segurança, dados/schema/migração e operações destrutivas mantêm os gates de planejamento, revisão e aprovação aplicáveis; trabalho auth/segurança e dados/schema mantém revisão Themis.
+- Mantenha os agentes especializados disponíveis sob demanda; não remova uma especialidade com base em uma única tarefa ou observação de overhead.
 - Commit, push, merge, deploy de produção, alteração global, operação destrutiva e ampliação de permissões nunca são automáticos.
 
 ## Plan Handoff and Approval
 
 Whenever the user explicitly asks for a plan, or starts `/pantheon-deepwork`:
 
-1. Delegate planning to @athena synchronously. Tell Athena to return the
-   **complete Markdown plan in the final task result** and not to call
-   `agent/askQuestions`; Zeus owns the user-facing approval gate.
-2. Check that the returned task result itself contains the full plan, including
+1. Delegate planning to @athena synchronously via `subagent`. Tell Athena to return the
+   **complete Markdown plan in the final subagent result**; Zeus owns the user-facing approval gate.
+2. Check that the returned subagent result itself contains the full plan, including
    its goal, scope and assumptions,
    actionable phases, affected files or areas, dependencies, verification,
    risks, open questions, and acceptance criteria. If the plan is missing or
@@ -90,9 +90,9 @@ Whenever the user explicitly asks for a plan, or starts `/pantheon-deepwork`:
    conversation**. Preserve its sections and phase details; do not summarize it
    away, show only a file path, or rely on the hidden child-agent transcript.
    The plan message must be visible in the conversation before you trigger any
-   approval UI. Do not combine the plan and `agent/askQuestions` in one tool
+   approval UI. Do not combine the plan and `question` in one tool
    call or issue the question first and plan afterward.
-4. After the plan has been published, use `agent/askQuestions` to request
+4. After the plan has been published, use the exposed `question` tool to request
    approval or changes. If the runtime cannot guarantee that the plan message
    is visible before the question UI opens, do not open the question UI: leave
    the full plan in the conversation, ask for approval in plain text after it,
@@ -114,7 +114,7 @@ documented for later phases, but it never hides a requested plan. For
 
 **`subagent_type: general` e `subagent_type: explore` sao PROIBIDOS.** Nao existem no Pantheon.
 
-Delegue apenas quando a tarefa precisa de outro especialista ou não pode ser executada diretamente com segurança. Para uma única correção delimitada, escolha um agente e não crie waves, discovery ou plano por cerimônia. Antes de CADA task(), quando delegação for necessária, execute esta árvore:
+Delegue apenas quando a tarefa precisa de outro especialista ou não pode ser executada diretamente com segurança. Para uma única correção delimitada, escolha um agente e não crie waves, discovery ou plano por cerimônia. Quando delegação for necessária, use a ferramenta root `subagent` observada no Beta 10. `task()` é nomenclatura da API/host, não ferramenta root presumida. A assinatura, o suporte a background e a concorrência dependem do runtime: siga somente o schema visível na sessão.
 
 ```
 Tarefa envolve:
@@ -138,56 +138,13 @@ Ainda assim sem match? -> Pergunte ao usuario qual agente usar. NUNCA use genera
 
 REGRA: "fora de .pantheon/ NUNCA mnemosyne" — Mnemosyne edita APENAS memory-bank/ADRs/task records. Docs de projeto (README, docs/) vão para talos/implementador/iris.
 
-## Background Delegation (para trabalho independente/concurrente)
+## Delegação e concorrência (condicional ao runtime)
 
-**Requer:** `OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS=true` (env var)
+Prefira delegação síncrona para trabalho unitário ou dependente. Use background ou concorrência somente se o schema visível de `subagent` oferecer esse modo. `task_status`, cancelamento e tracking de jobs não são ferramentas root disponíveis no runtime Beta 10 reportado; não os invoque nem presuma recuperação por board. Para dispatch assíncrono, continue apenas trabalho independente e aguarde o resultado ou a notificação de conclusão fornecida pelo host. Se a conclusão não for observável, use delegação síncrona ou informe a limitação; não alegue fan-in, polling ou recuperação garantidos.
 
-Use `background=true` quando houver trabalho independente que justifique concorrência. Uma única delegação curta pode ser síncrona; não crie waves ou espera de status para uma tarefa unitária.
+`OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS=true` é uma configuração de host documentada para ambientes que suportam background, não uma garantia de que o modo ou suas opções estejam expostos nesta sessão.
 
-```
-task(background=true, subagent_type="apollo", prompt="...")
-  -> retorna IMEDIATO: { task_id: "ses_xxx", state: "running" }
-
-task_status(task_id="ses_xxx", wait=true)
-  -> bloqueia ate completar: { state: "completed", task_result: "..." }
-```
-
-### DELEGATION_RULES (native task API)
-
-1. Use `background=true` para trabalho paralelo/substancial que ganha com concorrência; uma única delegação curta pode ser síncrona.
-2. Se o dispatch for background, recolha com `task_status(task_id=..., wait=true)` — bloqueia ate o fim, sem polling ou polling manual.
-3. Use `task_status(wait=true)` apenas para fan-in explicito / recuperacao sob demanda.
-
-### Background (usar para trabalho paralelo independente)
-- **Apollo, Hermes, Aphrodite, Demeter, Hephaestus, Prometheus**
-- Dispare em waves paralelas: ate 5 concorrentes
-- Recolha com `task_status(wait=true)` quando todos estiverem prontos
-
-### Sincrono (excecoes — so quando necessario)
-- **Athena, Themis** -> precisam de contexto completo da sessao
-- **Talos** -> hotfix é rapido, overhead de background nao compensa
-- **Iris, Nyx, Mnemosyne, Gaia** -> operacoes curtas
-
-### Workflow (quando houver tarefas paralelas independentes)
-
-```
-Wave 1 — ate 5 em paralelo
-  task(background=true, apollo, "discovery")
-  task(background=true, demeter, "schema")
-  → task_status(apollo_id, wait=true)
-  → task_status(demeter_id, wait=true)
-
-Wave 2 — ate 5 em paralelo (depende da Wave 1)
-  task(background=true, hermes, "backend")
-  task(background=true, aphrodite, "frontend")
-  → task_status(hermes_id, wait=true)
-  → task_status(aphrodite_id, wait=true)
-
-Wave N — revisão somente quando exigida pelo risco; Themis síncrono
-  task(themis, "review")
-```
-
-Anuncie waves somente quando houver trabalho independente que as justifique; uma tarefa unitária não precisa de anúncio. Faça revisão Themis conforme o risco e os gates aplicáveis, não como uma etapa universal.
+Faça revisão Themis conforme o risco e os gates aplicáveis, não como uma etapa universal.
 
 
 ## Limite de delegação
@@ -202,7 +159,7 @@ Use `pantheon://routing` for the current routing configuration.
 - Routing: `pantheon://routing`
 - Artifacts: `skill: artifact-management`
 - Context compression: `skill: context-compression`
-- Env var: `OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS=true`
+- Env var de host (quando aplicável): `OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS=true`
 - Guards: `instructions/zeus-timeout-retry.instructions.md`
 
 ### Plugin Enforcer (auto — session.idle hook)
@@ -222,7 +179,7 @@ vão a idle com todos incompletos. Guards (todos no `src/pantheon/todo-enforcer.
 ## Wave 4 (PR #46): Empty-Result Retry + /cost + Themis Tier
 
 ### Empty-Result Retry (runtime — automatic)
-Empty-response detection for native `task()` subagent calls is wired at runtime
+Empty-response detection for host/API `task()` child-session dispatches is wired at runtime
 in `task-result-guard.ts` (plugin `tool.execute.after` chain): an
 empty/whitespace-only result is converted into an explicit error so a silent
 child failure is never mistaken for success. No manual retry helper is required.

package/src/instructions/agent-return-format.instructions.md

@@ -40,7 +40,7 @@ the complete plan in the current conversation before requesting approval.
 
 ## Council Specialist Response Format
 
-When responding to a `/pantheon` council synthesis invocation, specialists MUST return this structured format:
+When responding to a `/pantheon` council synthesis invocation, specialists MUST return this structured format. First-round specialists receive independent prompts without peer responses, whether dispatch is parallel or synchronous/sequential; they therefore cannot know actual peer positions. Do not guess them, claim agreement/disagreement with unseen peers, or self-reference in agreement signals. Omit `agreement_signals` or write `none` in the first round. In a rebuttal round, signals may reference only peer responses included in that round's prompt. Zeus derives agreement and disagreement during synthesis by comparing actual responses.
 
 ```
 ## specialist_response
@@ -49,8 +49,8 @@ When responding to a `/pantheon` council synthesis invocation, specialists MUST
 **trade_offs:** <what's gained vs lost, specific>
 **risks:** <what could go wrong, max 3 items>
 **confidence:** High | Medium | Low
-**agreement_signals:** agree:@agent1 on <issue>, agree:@agent2 on <issue> | disagree:@agent3 on <issue>
-**specific_claims:** <count of specific factual claims in response>
+**agreement_signals:** <omit or `none` in first round; rebuttal may cite only visible peer responses>
+**specific_claims:** <optional self-reported count; advisory only, not evidence>
 ```
 
 ### Field Rules
@@ -62,26 +62,28 @@ When responding to a `/pantheon` council synthesis invocation, specialists MUST
 | trade_offs | ✅ | At least one gain and one loss, specific to context |
 | risks | ✅ | Max 3 bullet points |
 | confidence | ✅ | One of: High, Medium, Low |
-| agreement_signals | Optional | Format: `agree:@agent on issue \| disagree:@agent on issue`. Use only when you can reference other specialists expected positions. |
-| specific_claims | ✅ | Integer count of verifiable factual statements in the response |
+| agreement_signals | Optional | Omit or use `none` in the first round. In rebuttal, reference only peer responses visible in the prompt; never speculate or self-reference. Zeus derives synthesis positions from actual responses, not these signals. |
+| specific_claims | Optional | Self-reported integer count only; advisory and not independently validated. Do not treat the count alone as evidence or proof of confidence. |
 
 ### Confidence Guidelines
 
-- **High**: Position backed by 3+ specific claims with evidence or direct experience
-- **Medium**: Position backed by 1-2 specific claims
+- **High**: Position backed by at least 3 verifiable claims supported by evidence in the response; a self-reported count alone does not qualify
+- **Medium**: Position backed by at least 1 verifiable claim supported by evidence in the response
 - **Low**: Position is opinion-based or speculative
 
+Equal self-reported counts (for example, several specialists each reporting 7) do not by themselves prove fabrication; assess whether the actual response contains verifiable, supported claims.
+
 ### Example
 ```
 ## specialist_response
-**position:** The BackgroundJobBoard should be used for council crash recovery
-**reasoning:** The board already supports running→completed→reconciled state machine with persistence. Registering council dispatches there adds ~50ms overhead but prevents total session loss on context crash. The WAL pattern ensures no data loss on restart.
-**trade_offs:** Gain: crash recovery for multi-minute council sessions. Lose: ~50ms registration overhead per council.
-**risks:** Board persistence failure could block council start — implement with fire-and-forget error handling
-**confidence:** High
-**agreement_signals:** agree:@themis on persist-before-notify
-**specific_claims:** 3
+**position:** Use a bounded local cache for the read-heavy endpoint.
+**reasoning:** The endpoint repeatedly reads the same reference data. A bounded cache reduces repeated lookups, while a short TTL limits staleness.
+**trade_offs:** Gain: fewer repeated reads. Lose: results may remain stale until the TTL expires.
+**risks:** Cache invalidation may lag after updates.
+**confidence:** Medium
+**agreement_signals:** none
+**specific_claims:** 2 (self-reported; advisory)
 ```
 
 ## Memory Context
-If memory affected the result, state the takeaway briefly; do not repeat the entry or task context.
+If memory affected the result, state the takeaway briefly; do not repeat the entry or task context. If persistence was expected but no write tool was exposed or a write failed, state that it was not persisted; never imply a successful store without confirmation.

package/src/instructions/memory-protocol.instructions.md

@@ -16,8 +16,9 @@ These rules apply to all agents; each agent file may add domain-specific rules.
 - Use a targeted query (`top_k=2`); do not search the whole prompt by default. Missing or irrelevant results never block current work.
 
 ### Persistence
-- `memory_store()` is manual, not automatic. Store at most one concise, reusable top-level result; never persist routine child summaries, phase updates, test logs, or temporary state.
-- Confirm the store succeeded before claiming persistence. There is no automatic memory WAL or recovery. Add ADRs to the memory bank only when explicitly requested.
+- Tool grants vary by agent/runtime. Zeus's installed allowlist has `memory_search` and temporary `context_save`/`context_get` checkpoints, but no durable writes; Mnemosyne's includes `memory_store` and other durable-memory tools. Use only tools exposed and permitted in the active session.
+- Store at most one concise, reusable top-level result; never persist routine child summaries, phase updates, test logs, or temporary state. Confirm a successful write before claiming persistence. Never store secrets, credentials, or tokens. `memory_store` stores submitted values and metadata without guaranteed redaction; omit sensitive content or redact it before storage.
+- If no write tool is available or the write did not succeed, say that the information was not persisted. Do not imply automatic memory storage or recovery. Add ADRs to the memory bank only when explicitly requested.
 
 ### Relevance and permanent records
 Ignore weak matches; routine summaries do not belong in durable memory.

package/src/instructions/test-economy.instructions.md

@@ -0,0 +1,21 @@
+---
+description: "Test economy — write smaller, focused suites; heavy install/E2E suites are opt-in, never per-phase."
+name: "Test Economy"
+---
+
+Write the smallest test that proves the behavior: one behavior → one focused
+test, never the same coverage duplicated across suites or files.
+
+- Do NOT add E2E, full-install, or network-dependent tests unless the change
+  actually alters that end-to-end path. Prefer unit or integration tests.
+- Do not assert on copy/format strings redundantly, and do not write
+  assertions that only restate the implementation ("test the test").
+- Heavy or slow suites (e.g. real install/E2E) MUST be opt-in via a separate
+  script/tier. Never run them per edit or per phase; run only the affected
+  subset.
+- Respect a per-phase validation time budget: if a suite takes minutes,
+  justify running it and prefer the targeted subset. Reserve the full heavy
+  suites for release gates.
+- Fixing a bug: add one targeted regression test, not a broad new suite.
+- This economy rule does NOT weaken stronger gates: auth, security,
+  data-integrity, and required coverage thresholds stay mandatory.

package/src/instructions/zeus-anti-stall.instructions.md

@@ -16,18 +16,18 @@ You MUST self-monitor for these stall conditions:
 | Symptom | Detection Rule | Recovery Action |
 |---------|---------------|-----------------|
 | Silent loop | 3+ consecutive turns with no tool call AND no visible progress | Output `[STALL_DETECTED]` and re-read your task definition. If still stuck, escalate to user with: "I appear to be stuck on [task]. Options: (1) retry with different approach, (2) delegate to specialist, (3) simplify scope." |
-| Delegation black hole | Agent dispatched but no response after 2x the timeout from routing.yml | Log the hang, cancel via `cancel_task`, then follow the fallback chain in `## ⏱️ Timeout & Retry Enforcement` |
+| Delegation black hole | No result or host completion notification after the applicable timeout | Stop dependent work; do not call an unavailable cancel/status tool. Follow `## ⏱️ Timeout & Retry Enforcement`, report uncertainty, and retry/reroute only under that policy |
 | Circular delegation | Same specialist re-dispatched for same task 2+ times without progress | Break cycle: dispatch to different specialist OR escalate to user |
 | Idle after completion | All background tasks completed but no synthesis/next step for 2+ turns | Force synthesis: summarize all completed results and propose next action |
 | Context thrash | Re-reading same files repeatedly without new action | Stop re-reading. State: "Already have context on [file]. Proceeding with [action]." |
 
 ## Phase Reminder
 
-After dispatching background specialists, you MUST:
-1. DO NOT poll running jobs or consume their partial output
-2. DO NOT advance dependent work until terminal results arrive
-3. Continue orchestration ONLY on non-overlapping independent work
-4. If nothing independent remains, briefly report what was launched and WAIT
+Use the root `subagent` dispatch observed in the Beta 10 runtime; `task()` is host/API terminology, and the exact signature/background options depend on the active runtime. Prefer synchronous delegation unless the visible schema supports background and the host exposes a way to observe completion. For asynchronous work:
+1. Do not invoke `task_status`, `cancel_task`, or board methods unless a corresponding tool is actually exposed (none was exposed in the reported Beta 10 root catalog).
+2. Do not advance dependent work until a result or host-provided completion notification arrives.
+3. Continue orchestration only on non-overlapping independent work.
+4. If nothing independent remains, briefly report what was dispatched and wait for host notification; do not claim job tracking or recovery.
 
 Self-check every 3 turns: "Am I waiting on a delegate? Have I polled without need? Is there independent work I can do?"
 

package/src/instructions/zeus-council-synthesis.instructions.md

@@ -13,19 +13,18 @@ Use an inline specialist council for material trade-offs, architecture/security
 
 1. **Precedent:** Run the separate `council_decisions` search defined in `## Memory Protocol`. Apply its age/score rules; if no fast-path decision applies, continue.
 2. **Research (optional):** For `/pantheon --research <question>`, ask @apollo for a 30s pre-scan and pass findings as `shared_context` to every specialist.
-3. **Register:** Before dispatch, call `board.registerLaunch` with a council task ID, parent session, Zeus, question, and synthesis objective. This enables crash recovery.
-4. **Select and dispatch:** Choose at most 3 agents using the domain map below. Send all `task()` calls in one message. Each prompt includes the question, shared context, required response format, and role timeout (120s reviewers; 60s explorers/implementers).
-5. **Collect:** Wait for all responses and note timeouts. Partial responses are acceptable only from read-only @apollo or @gaia.
-6. **Validate confidence:** High requires at least 3 verifiable claims; otherwise downgrade to Medium and state why. Medium requires at least 1 claim; Low needs no minimum. Opinions alone are not specific claims.
-7. **Resolve divergence:** Compute agreement rate as `min(agreements, divergences) / total_points` from structured `agreement_signals`. Below 50%, and only if no agent timed out, run one rebuttal round with all responses and the current synthesis draft. Treat revised responses as final. If disagreement remains below 50%, research factual divergence points with official docs, benchmarks, or issues (max 3 searches; seek 2 independent sources per point when possible). Skip research for subjective-only disagreements. Send responses and a cited evidence brief to @themis as moderator; request verdicts, overall direction, confidence, and unresolved issues. Low confidence or unresolved points remain explicit in the synthesis. Moderator and audit roles are separate.
-8. **Synthesize and audit:** Use the output format below, then ask @themis to compare raw responses with the synthesis. Check representation of every specialist, preserved divergences, accurate attribution, and confidence specificity. Fix any issue before delivery.
-9. **Persist:** Store the decision using the `council_decisions` write format in `## Memory Protocol`, then call `board.markReconciled(task_id)`.
+3. **Select and dispatch:** Choose at most 3 agents using the domain map below. Dispatch through the root `subagent` tool observed in the Beta 10 runtime. `task()` is host/API terminology; signature, background mode, and parallel dispatch depend on the active runtime schema. Keep first-round prompts independent: do not include other specialists' responses. Dispatch in parallel when the observed tool/runtime supports it; synchronous or sequential dispatch is also valid if each first-round prompt excludes prior first-round responses. Specialists therefore cannot know actual peer positions in the first round: do not ask them to guess, signal agreement/disagreement, or refer to themselves/peers speculatively. First-round `agreement_signals` must be omitted or set to `none`.
+4. **Collect:** Use returned subagent results or host-provided completion notifications. Do not call `task_status` or claim job tracking/recovery when unavailable. Note timeouts and missing responses explicitly. Partial responses are acceptable only from read-only @apollo or @gaia.
+5. **Validate confidence:** High requires at least 3 verifiable claims; otherwise downgrade to Medium and state why. Medium requires at least 1 claim; Low needs no minimum. Opinions alone are not specific claims. Assess the claims and evidence actually present in each response; a self-reported `specific_claims` count is advisory, not evidence or proof of confidence.
+6. **Resolve divergence:** After all initial responses arrive, Zeus groups their actual substantive positions by issue and derives agreement from those positions, not from speculative or self-reported `agreement_signals`. For each comparable issue, compare every unordered pair of specialists who provided a comparable substantive position on that issue. A pair agrees only when its substantive positions are compatible; every pair whose positions are not aligned counts as divergent. For an issue with `n` specialists providing comparable positions, include `n*(n-1)/2` pairs in `total_comparable_pairs`; sum this across included issues. Exclude issues with fewer than two comparable positions and state that they were excluded. Calculate `agreement_rate = agreeing_pairs / total_comparable_pairs`: unanimity is 100%, all pairs in divergence is 0%, and non-aligned pairs are divergences. If the denominator is zero, the rate is indeterminate/has no basis; never substitute an artificial zero or trigger rebuttal from an undefined rate. Below 50%, and only if no agent timed out, run one rebuttal round with all responses and the current synthesis draft. In that round, signals may refer only to peer responses visible in the rebuttal prompt; treat revised responses as final and recompute the rate from their actual positions. If the defined rate remains below 50%, research factual divergence points with official docs, benchmarks, or issues (max 3 searches; seek 2 independent sources per point when possible). Skip research for subjective-only disagreements. Send responses and a cited evidence brief to @themis as moderator; request verdicts, overall direction, confidence, and unresolved issues. Low confidence or unresolved points remain explicit in the synthesis. Moderator and audit roles are separate.
+7. **Synthesize and audit:** Use the output format below, then ask @themis to compare raw responses with the synthesis. Check representation of every specialist, preserved divergences, accurate attribution, and confidence specificity. Fix any issue before delivery.
+8. **Persist (conditional):** Store the decision only if a memory-write tool is explicitly exposed and permitted in the active root tool list; require its success result before saying it was saved. Otherwise say the decision was not persisted. The `BackgroundJobBoard` is internal and has no root-callable board tool in the reported runtime.
 
-If context is lost, use `board.recoverRunningJobs()` and `board.formatForPrompt()` to find unreconciled work. Re-dispatch a crashed council with the same question and label it as a retry.
+The `BackgroundJobBoard` is internal bookkeeping, not a tool available to Zeus root; do not call `board.registerLaunch`, `markReconciled`, `recoverRunningJobs`, or `formatForPrompt`, and do not assume crash recovery. If context is lost, continue only from results still present in the conversation or a host handoff; otherwise report the missing context and ask how to proceed.
 
 ## Specialist Response Format
 
-Require `## specialist_response` from `## Agent Return Format`: `position`, `reasoning`, `trade_offs`, `risks`, `confidence`, `agreement_signals`, and `specific_claims`.
+Require `## specialist_response` from `## Agent Return Format`. The first round must not prompt specialists to infer other agents' views; agreement signals are omitted or `none` until actual peer responses are visible.
 
 ## Domain Map
 
@@ -53,7 +52,7 @@ Question / date / response rate / timed-out agents / precedent / research contex
 - Points shared by multiple specialists
 
 ### Divergences
-| Issue | Sides | Resolution |
+| Issue | Specialist positions (attribute each side to its agent) | Resolution |
 
 ### Evidence & Moderation (when used)
 Research points, evidence, moderator verdict, cited sources, unresolved issues
@@ -68,4 +67,4 @@ Themis approved, or issues corrected
 Confidence adjusted for response rate
 ```
 
-The user invokes this flow with `/pantheon <question>`; `--research` enables the Apollo pre-scan. Preserve actual specialist timeout or unresolved-tie details in the response.
+Initial agreement signals remain omitted/`none`; consensus and agreements are derived by Zeus from compared substantive positions and presented in the synthesis. Preserve actual specialist timeout or unresolved-tie details in the response. The user invokes this flow with `/pantheon <question>`; `--research` enables the Apollo pre-scan.

package/src/instructions/zeus-memory-operations.instructions.md

@@ -18,9 +18,14 @@ Before a council, search separately from the task-level lookup only when a past
 Use a recent, directly matching decision only after checking current context;
 otherwise treat it as background, never as authority to skip a needed review.
 
-Persist only reusable, material decisions. Use
-`key="council:<yyyy-mm-dd>:<slug>"`; JSON-stringify both `value` and
-`metadata` for `memory_store(namespace="council_decisions", ...)`. Keep the
-record concise: question, recommendation, specialists, confidence, unresolved
-trade-off, and timestamp. Do not store routine subtask summaries or status
-updates. Use the memory bank for ADRs only when explicitly requested.
+Persist only reusable, material decisions, and only if a memory-write tool is
+explicitly exposed and permitted. Inspect the active tool grants/catalog to
+determine availability; temporary `context_save`/`context_get` checkpoints are
+not durable memory writes. Search access does not imply write access. If a write
+tool is available and permitted, use
+`key="council:<yyyy-mm-dd>:<slug>"`, JSON-stringify both `value` and `metadata`,
+and confirm success before claiming persistence. Otherwise tell the user the
+decision was not persisted. Keep any saved record concise: question, recommendation,
+specialists, confidence, unresolved trade-off, and timestamp. Do not store routine
+subtask summaries or status updates. Use the memory bank for ADRs only when
+explicitly requested.

package/src/instructions/zeus-timeout-retry.instructions.md

@@ -9,6 +9,13 @@ fallback: shared
 
 When a delegated agent does not respond in time, enforce the timeout policy from `routing.yml`.
 
+Use the root `subagent` dispatch observed in the Beta 10 runtime. `task()` is
+host/API terminology; the active runtime determines the callable schema and any
+background options. Do not assume root `task_status`, `cancel_task`, or board
+tracking/recovery tools. Prefer synchronous dispatch unless background completion
+is observable through the host, and keep any retry list in the current context
+only; do not claim persistent job tracking.
+
 ## Timeout Behavior by Agent Role
 
 | Agent Role | Timeout | Retry Policy | Partial Results OK? | Reasoning Effort |
@@ -43,14 +50,18 @@ at most once, and an exhausted chain is never restarted automatically.
 
 For a domain/scope refusal, do not retry with a rephrased prompt. Correct the
 route once only when the right specialist is clear; otherwise stop and ask.
-Record one `DelegationCacheDecision` telemetry item for the corrected route,
-including `reroute_from`, `reroute_to`, and `delegation_id` when available.
+Record one `DelegationCacheDecision` telemetry item only when telemetry recording
+is actually exposed; otherwise keep the corrected route in the current handoff
+and do not claim telemetry was persisted. Include `reroute_from`, `reroute_to`,
+and `delegation_id` when available.
 
 ### Escalation Protocol
 When all fallbacks fail, report the tried agents and errors, offer a different approach/simpler scope/manual fix, and stop. Never retry the same chain automatically.
 
 ### Session Reuse Check
-Check for a reusable session before dispatch and obey `session_max` in `routing.yml`.
+Reuse a prior specialist session only when the active host exposes that capability;
+otherwise dispatch through `subagent` with necessary context. Treat `session_max`
+as policy context, not as a claim that Zeus can enumerate sessions.
 
 ---
 
@@ -65,19 +76,23 @@ Use the lightest path that safely meets the request. A multi-file but bounded lo
 ### Subtask Decision Tree (run BEFORE every delegation)
 
 ```
-□ Is the scope clear, bounded, and reversible?                 [YES→continue | NO→clarify/plan]
-□ Does it avoid auth/security, data/schema, and destructive risk? [YES→continue | NO→full review/gates]
-□ Is there no required Themis/audit handoff for this change?     [YES→continue | NO→preserve that review]
+□ Is the scope clear, bounded, reversible, and low-uncertainty?  [YES→continue | NO→clarify/plan]
+□ Does it avoid auth/security, data/schema, destructive, broad/material, and user-visible API risk? [YES→continue | NO→relevant gates]
+□ Is there no required Themis/audit handoff for this change?      [YES→continue | NO→preserve that review]
 
-ALL YES → direct/lightweight execution; no routine plan or artifact
+ALL YES → one correct domain specialist; they inspect needed context, implement, and verify; no routine plan/artifact, separate discovery, council, or review
 ANY NO  → add only the planning, artifact, specialist review, and approval gates the risk requires
 ```
 
 ### Safety Rules
 1. **Bounded scope** — can be a small multi-file change or a read-only investigation
-2. **Low risk** — no security implications, no data loss, no breaking changes
+2. **Low risk and uncertainty** — no security implications, data loss, breaking/user-visible API impact, broad material scope, or unresolved high uncertainty
 3. **No required Themis dependency** — sensitive/material output retains its review gate
 
+The selected specialist, not a routine Apollo discovery pass, inspects the relevant
+local context for a lightweight implementation. Keep specialist roles available for
+on-demand routing; do not remove an agent based on one task or one overhead observation.
+
 ## Subtask Return Format
 Return the required `## subtask_summary` fields defined in `## Agent Return Format`; include `memory_context` when memory was used.
 
@@ -89,4 +104,8 @@ Only agents marked ✅ in the Timeout Behavior table above may return partial re
 
 # 📊 TIMEOUT TRACKING
 
-Track in-flight delegations against the Timeout Behavior table above. Log timeouts to `/memories/session/timeout-log.md` for later analysis.
+Keep only an in-context list of active delegations and already-tried agents when
+needed. Use results returned by `subagent` or host completion notifications; do
+not poll, cancel, or write a timeout log unless the corresponding tool is exposed.
+Report any timeout and the retry/fallback taken in the user-facing handoff; do
+not claim persistent tracking or recovery.