prizmkit 1.1.58 → 1.1.61

package/bin/create-prizmkit.js

@@ -5,10 +5,10 @@
  *
  * Usage:
  *   npx prizmkit install .
- *   npx prizmkit install my-project --platform claude --non-interactive
+ *   npx prizmkit install my-project --platform claude --runtime unix --non-interactive
  *   npx prizmkit uninstall . --dry-run
  *   npx prizmkit upgrade .
- *   npx prizmkit config . --platform codebuddy
+ *   npx prizmkit config . --platform codebuddy --runtime windows
  */
 
 import { readFileSync } from 'fs';
@@ -31,7 +31,8 @@ program
 program
   .command('install [directory]')
   .description('Install PrizmKit into a project directory')
-  .option('--platform <platform>', 'Target platform: codebuddy, claude, or both')
+  .option('--platform <platform>', 'Target platform: codebuddy, claude, codex, or all')
+  .option('--runtime <runtime>', 'Runtime assets: unix, windows, or auto')
   .option('--skills <suite>', 'Skill suite: core, minimal, or recommended:<type> (frontend/backend/fullstack/library)', 'core')
   .option('--team', 'Enable multi-agent team mode (default: true)')
   .option('--no-team', 'Disable multi-agent team mode')
@@ -44,7 +45,7 @@ program
   .option('--open-cli-auto-download', 'Auto-download opencli extension if missing (default: true)')
   .option('--no-open-cli-auto-download', 'Skip auto-download, show manual steps only')
   .option('--rules <preset>', 'Rules preset: recommended, minimal, or none', 'recommended')
-  .option('--ai-cli <command>', 'AI CLI executable command (e.g. cbc, claude, claude-internal)')
+  .option('--ai-cli <command>', 'AI CLI executable command (e.g. cbc, claude, codex)')
   .option('--external-skills <names>', 'Comma-separated external skill names to install (e.g. find-skills,impeccable)')
   .option('--non-interactive', 'Skip interactive prompts (requires --platform)')
   .option('--dry-run', 'Show what would be created without making changes')
@@ -89,10 +90,11 @@ program
 program
   .command('config [directory]')
   .description('Reconfigure existing PrizmKit installation (change platform, skills, rules, options)')
-  .option('--platform <platform>', 'Target platform: codebuddy, claude, or both')
+  .option('--platform <platform>', 'Target platform: codebuddy, claude, codex, or all')
+  .option('--runtime <runtime>', 'Runtime assets: unix, windows, or auto')
   .option('--skills <suite>', 'Skill suite: core, minimal, or recommended:<type>')
   .option('--rules <preset>', 'Rules preset: recommended, minimal, or none')
-  .option('--ai-cli <command>', 'AI CLI executable command (e.g. cbc, claude)')
+  .option('--ai-cli <command>', 'AI CLI executable command (e.g. cbc, claude, codex)')
   .option('--team', 'Enable multi-agent team mode')
   .option('--no-team', 'Disable multi-agent team mode')
   .option('--pipeline', 'Enable dev-pipeline')

package/bundled/VERSION.json

@@ -1,5 +1,5 @@
 {
-  "frameworkVersion": "1.1.58",
-  "bundledAt": "2026-06-07T03:11:13.582Z",
-  "bundledFrom": "a8dffc3"
+  "frameworkVersion": "1.1.61",
+  "bundledAt": "2026-06-08T16:20:29.783Z",
+  "bundledFrom": "819ffc3"
 }

package/bundled/adapters/codex/agent-adapter.js

@@ -0,0 +1,38 @@
+/**
+ * Codex Agent Adapter
+ *
+ * Converts core/ agent definitions to native Codex TOML subagent files.
+ */
+
+import { mkdirSync } from 'node:fs';
+import { readFile, writeFile } from 'node:fs/promises';
+import path from 'path';
+import { parseFrontmatter } from '../shared/frontmatter.js';
+
+function toTomlString(value) {
+  return JSON.stringify(String(value ?? ''));
+}
+
+export function convertAgent(agentContent, options = {}) {
+  const { frontmatter, body } = parseFrontmatter(agentContent);
+  const name = frontmatter.name || options.name || 'prizmkit-agent';
+  const description = frontmatter.description || `${name} PrizmKit subagent`;
+  const developerInstructions = body.trimEnd();
+
+  return [
+    `name = ${toTomlString(name)}`,
+    `description = ${toTomlString(description)}`,
+    `developer_instructions = ${toTomlString(developerInstructions)}`,
+    '',
+  ].join('\n');
+}
+
+export async function installAgent(corePath, targetRoot) {
+  const baseName = path.basename(corePath, path.extname(corePath));
+  const filename = `${baseName}.toml`;
+  const targetDir = path.join(targetRoot, '.codex', 'agents');
+  mkdirSync(targetDir, { recursive: true });
+
+  const content = await readFile(corePath, 'utf8');
+  await writeFile(path.join(targetDir, filename), convertAgent(content, { name: baseName }));
+}

package/bundled/adapters/codex/paths.js

@@ -0,0 +1,27 @@
+/**
+ * Codex platform path constants and conventions.
+ */
+
+export const PLATFORM_ID = 'codex';
+export const CLI_COMMAND = 'codex';
+
+// Project-level paths (relative to project root)
+export const SKILLS_DIR = '.agents/skills';
+export const AGENTS_DIR = '.codex/agents';
+export const RULES_DIR = '.agents/rules';
+export const SETTINGS_FILE = '.codex/config.toml';
+export const PROJECT_MEMORY_FILE = 'AGENTS.md';
+
+// Skill file conventions
+export const SKILL_DEFINITION_FILE = 'SKILL.md';
+export const SKILL_DIR_VAR = '${SKILL_DIR}';
+
+// Agent definition format
+export const AGENT_FILE_EXT = '.toml';
+
+// CLI flags
+export const CLI_FLAGS = {
+  nonInteractive: 'exec',
+  approvalNever: '--ask-for-approval never',
+  sandboxFullAccess: '--sandbox danger-full-access',
+};

package/bundled/adapters/codex/rules-adapter.js

@@ -0,0 +1,30 @@
+/**
+ * Codex Rules Adapter
+ *
+ * PrizmKit rules are behavioral Markdown guidance, not Codex execpolicy
+ * .rules files. Install them as project-local guidance resources and point
+ * AGENTS.md to this directory.
+ */
+
+import { mkdirSync, rmSync } from 'node:fs';
+import { writeFile } from 'node:fs/promises';
+import path from 'path';
+
+export const CODEX_RULES_DIR = '.agents/rules';
+
+export async function installRules(targetRoot, ruleFiles) {
+  const rulesDir = path.join(targetRoot, CODEX_RULES_DIR);
+  mkdirSync(rulesDir, { recursive: true });
+
+  for (const rule of ruleFiles) {
+    const baseName = rule.name.includes('/') ? rule.name.split('/').pop() : rule.name;
+    await writeFile(path.join(rulesDir, `${baseName}.md`), rule.content);
+  }
+}
+
+export function removeLegacyCodexRules(targetRoot, ruleFileNames) {
+  const legacyRulesDir = path.join(targetRoot, '.codex', 'rules');
+  for (const fileName of ruleFileNames) {
+    rmSync(path.join(legacyRulesDir, path.basename(fileName)), { force: true });
+  }
+}

package/bundled/adapters/codex/settings-adapter.js

@@ -0,0 +1,27 @@
+/**
+ * Codex Settings Adapter
+ *
+ * Writes native Codex project configuration for PrizmKit installs.
+ */
+
+import { mkdirSync, rmSync } from 'node:fs';
+import { writeFile } from 'node:fs/promises';
+import path from 'path';
+
+export async function generateSettings(targetRoot) {
+  const configPath = path.join(targetRoot, '.codex', 'config.toml');
+  mkdirSync(path.dirname(configPath), { recursive: true });
+
+  const configToml = `# Generated by PrizmKit for Codex CLI project configuration.
+# Keep project guidance in AGENTS.md; repository skills in .agents/skills/;
+# PrizmKit behavioral rules live in .agents/rules/; native Codex subagents live in .codex/agents/.
+
+project_doc_fallback_filenames = ["CLAUDE.md", "CODEBUDDY.md"]
+
+[agents]
+max_depth = 1
+`;
+
+  await writeFile(configPath, configToml);
+  rmSync(path.join(targetRoot, '.codex', 'prizmkit-settings.json'), { force: true });
+}

package/bundled/adapters/codex/skill-adapter.js

@@ -0,0 +1,65 @@
+/**
+ * Codex Skill Adapter
+ *
+ * Codex discovers repository skills from .agents/skills in the current
+ * directory and parent directories up to the repository root. Project-scoped
+ * PrizmKit installs therefore write Codex skills to .agents/skills/.
+ */
+
+import { parseFrontmatter, buildMarkdown } from '../shared/frontmatter.js';
+import { SKILL_DEFINITION_FILE } from './paths.js';
+import { existsSync, mkdirSync, cpSync, readdirSync } from 'node:fs';
+import { readFile, writeFile } from 'node:fs/promises';
+import path from 'path';
+
+function toCodexSkillReference(commandName) {
+  return `PrizmKit skill \`${commandName}\` (\`.agents/skills/${commandName}/SKILL.md\`)`;
+}
+
+export function convertSkill(skillContent, skillName) {
+  const { frontmatter, body } = parseFrontmatter(skillContent);
+
+  if (!frontmatter.name) frontmatter.name = skillName;
+
+  let convertedBody = body.replace(
+    /\$\{SKILL_DIR\}/g,
+    `.agents/skills/${skillName}`
+  );
+
+  convertedBody = convertedBody.replace(
+    /prizmkit\.(\w+)/g,
+    (_match, sub) => {
+      const commandName = `prizmkit-${sub.replace(/_/g, '-')}`;
+      return toCodexSkillReference(commandName);
+    }
+  );
+
+  const codexNote = `> Codex project install: when instructions mention a PrizmKit slash command such as \`/prizmkit-plan\`, read and execute the matching project skill at \`.agents/skills/prizmkit-plan/SKILL.md\`.\n\n`;
+
+  return buildMarkdown(frontmatter, codexNote + convertedBody);
+}
+
+export async function installSkill(corePath, targetRoot) {
+  const skillName = path.basename(corePath);
+  const targetDir = path.join(targetRoot, '.agents', 'skills', skillName);
+  mkdirSync(targetDir, { recursive: true });
+
+  const skillMdPath = path.join(corePath, SKILL_DEFINITION_FILE);
+  if (existsSync(skillMdPath)) {
+    const content = await readFile(skillMdPath, 'utf8');
+    const converted = convertSkill(content, skillName);
+    await writeFile(path.join(targetDir, SKILL_DEFINITION_FILE), converted);
+  }
+
+  if (existsSync(corePath)) {
+    for (const entry of readdirSync(corePath, { withFileTypes: true })) {
+      if (entry.isDirectory()) {
+        cpSync(
+          path.join(corePath, entry.name),
+          path.join(targetDir, entry.name),
+          { recursive: true }
+        );
+      }
+    }
+  }
+}

package/bundled/adapters/codex/team-adapter.js

@@ -0,0 +1,37 @@
+/**
+ * Codex Team Adapter
+ *
+ * Codex does not require a separate team registry for PrizmKit. The team
+ * topology is installed as project metadata and referenced by AGENTS.md and
+ * pipeline prompts.
+ */
+
+import { mkdirSync } from 'node:fs';
+import { writeFile } from 'node:fs/promises';
+import path from 'path';
+
+export async function installTeam(teamDef, targetRoot) {
+  const codexDir = path.join(targetRoot, '.codex');
+  mkdirSync(codexDir, { recursive: true });
+
+  const teamInfo = {
+    name: teamDef.name,
+    description: teamDef.description,
+    platform: 'codex',
+    orchestrationMode: 'codex-subagents',
+    agents: teamDef.members
+      .filter(m => m.role !== 'lead')
+      .map(m => ({
+        name: m.name,
+        role: m.role,
+        agentFile: `.codex/agents/${m.agentDefinition}.toml`,
+        prompt: m.prompt,
+        subscriptions: m.subscriptions || [],
+      })),
+  };
+
+  await writeFile(
+    path.join(codexDir, 'team-info.json'),
+    JSON.stringify(teamInfo, null, 2)
+  );
+}

package/bundled/agents/prizm-dev-team-dev.md

@@ -48,8 +48,8 @@ If the snapshot does not exist:
 8. Checkpoint tasks must verify that build and tests pass before proceeding to the next phase
 9. Execute sequential tasks in order; stop on failure. Parallel `[P]` tasks may continue
 10. When creating a new sub-module, generate the corresponding `.prizmkit/prizm-docs/` L2 document. **Batch independent operations**: combine multiple `mkdir -p` into one command; issue multiple independent `Write` calls for different `.prizmkit/prizm-docs/` files in a single message turn (they have no dependencies between them).
-11. **`.prizmkit/prizm-docs/` write safety**: Before writing ANY `.prizmkit/prizm-docs/` file, check if it already exists (`ls <path>`). If it **exists**: only append or update structural fields (KEY_FILES, INTERFACES, DEPENDENCIES, file counts, UPDATED date) — **never overwrite the full file**. DECISIONS and CHANGELOG sections are **append-only** — never delete or replace existing entries. If it does **not** exist: create it only for sub-modules you are actively creating in this session. Do NOT write `.prizmkit/prizm-docs/` files for modules you are not directly creating.
-11. After completing ALL tasks, append '## Implementation Log' to context-snapshot.md: files changed/created, key decisions, notable discoveries
+11. **`.prizmkit/prizm-docs/` write safety**: Before writing ANY `.prizmkit/prizm-docs/` file, check if it already exists (`ls <path>`). If it **exists**: update only durable structural/knowledge fields (KEY_FILES, INTERFACES, DEPENDENCIES, file counts, RULES, TRAPS, DECISIONS) — **never overwrite the full file**. Do not add CHANGELOG, UPDATED/date fields, Bug IDs, feature IDs, refactor IDs, task IDs, session IDs, run IDs, pipeline IDs, workflow IDs, branch names, absolute worktree paths, pipeline artifact paths, or `.prizmkit/specs` / `.prizmkit/dev-pipeline` artifact paths. If a durable fact changes, update the existing section in place. If the file does **not** exist: create it only for sub-modules you are actively creating in this session. Do NOT write `.prizmkit/prizm-docs/` files for modules you are not directly creating.
+12. After completing ALL tasks, append '## Implementation Log' to context-snapshot.md: files changed/created, key decisions, notable discoveries
 
 ### Never Do (NEVER)
 
@@ -59,7 +59,8 @@ If the snapshot does not exist:
 - **Do not execute any git operations** (git commit / git add / git reset / git push are all prohibited — the Orchestrator handles commits via /prizmkit-committer)
 - Do not modify any files in `.prizmkit/specs/` except `plan.md` (marking Tasks [x]) and `context-snapshot.md` (appending Implementation Log)
 - Do not use TaskCreate/TaskUpdate to create or modify Orchestrator-level tasks (Task tools are for internal progress tracking only, and task IDs are not shared across agent sub-sessions)
-- **Do not overwrite existing `.prizmkit/prizm-docs/` files in full** — if a doc already exists, only update structural fields; never replace the entire file. Do NOT write `.prizmkit/prizm-docs/` entries for modules you are not actively creating in this session.
+- **Do not overwrite existing `.prizmkit/prizm-docs/` files in full** — if a doc already exists, only update the affected durable fields; never replace the entire file. Do NOT write `.prizmkit/prizm-docs/` entries for modules you are not actively creating in this session.
+- **Do not leak internal PrizmKit metadata into product surfaces or memory docs** — feature IDs (`F-001`), bug/refactor IDs, task IDs, session IDs, run IDs, pipeline IDs, workflow IDs, branch names, absolute worktree paths, pipeline artifact paths, and `.prizmkit/specs` / `.prizmkit/dev-pipeline` artifact paths must not appear in `.prizmkit/prizm-docs/`, user-visible UI copy, API responses, emails, notifications, or tests that assert visible product text.
 
 ### Behavioral Rules
 
@@ -83,7 +84,8 @@ DEV-15: After ALL tasks, append '## Implementation Log' to context-snapshot.md (
 DEV-16: Without context-snapshot: read .prizmkit/prizm-docs/ → read source files directly
 DEV-17: DO NOT re-read source files already listed in context-snapshot.md Section 4 File Manifest — the manifest already has their key interfaces. Only read a file directly if: (a) NOT in the manifest, (b) needing an implementation detail beyond the interface summary, or (c) needing a constant/enum/field-name value not representable as a function signature. Unnecessary re-reads waste significant context budget.
 DEV-18: When tests fail, run `$TEST_CMD 2>&1 | tee /tmp/test-out.txt` ONCE, then grep `/tmp/test-out.txt` for failure details. Never re-run the full test suite just to apply a different grep filter to its output.
-DEV-19: Before writing any `.prizmkit/prizm-docs/` file, check if it exists. If it exists: only update structural fields (KEY_FILES, INTERFACES, DEPENDENCIES, file counts, UPDATED) — never overwrite the full file. DECISIONS/CHANGELOG are append-only. Only create new L2 docs for sub-modules you are actively creating in this session.
+DEV-19: Before writing any `.prizmkit/prizm-docs/` file, check if it exists. If it exists: only update durable fields (KEY_FILES, INTERFACES, DEPENDENCIES, file counts, RULES, TRAPS, DECISIONS) — never overwrite the full file. Never add CHANGELOG, UPDATED/date fields, or workflow metadata. Only create new L2 docs for sub-modules you are actively creating in this session.
+DEV-20: Internal tracking IDs are not product copy. Before writing UI text or UI-copy assertions, translate references like `F-003 guard` into product-language behavior such as `the high-risk guard`. Add regression coverage when a feature touches user-visible text.
 ```
 
 ### Workflow
@@ -121,4 +123,3 @@ Direct communication between Agents is allowed, but key messages and conclusions
 - Send COMPLETION_SIGNAL to indicate all tasks are complete
 - Send ESCALATION to report interface ambiguities or task blockers
 - Receive TASK_ASSIGNMENT to get assigned work
-

package/bundled/dev-pipeline/.env.example

@@ -16,7 +16,8 @@
                               # Unset or any other value = normal production mode
 
 # ─── AI CLI ───────────────────────────────────────────────────────────
-# AI_CLI=claude              # AI CLI command (auto-detected from PATH: claude > cbc)
+# AI_CLI=claude              # AI CLI command. If unset, PrizmKit prefers the installed
+                              # project platform, then PATH fallback: claude > cbc > codex
 # MODEL=                     # AI model override (e.g. claude-sonnet-4-20250514)
                               # Per-task model in *-list.json overrides this
 

package/bundled/dev-pipeline/README.md

@@ -6,7 +6,7 @@ Autonomous development pipeline that drives the `prizm-dev-team` multi-agent tea
 
 - Python 3.8+
 - [jq](https://jqlang.github.io/jq/) (`brew install jq`)
-- AI CLI in PATH: CodeBuddy (`cbc`) or Claude Code (`claude`)
+- AI CLI in PATH: CodeBuddy (`cbc`), Claude Code (`claude`), or Codex (`codex`)
 - `.prizmkit/plans/feature-list.json` generated by the `feature-planner` skill (for feature pipeline)
 - `.prizmkit/plans/bug-fix-list.json` generated by the `bug-planner` skill (for bug pipeline)
 
@@ -502,7 +502,7 @@ Sourced by daemon and runner scripts. Provides:
 
 | Function | Description |
 |----------|-------------|
-| `prizm_detect_cli_and_platform()` | Sets `CLI_CMD` and `PLATFORM`. Priority: `AI_CLI` env > `config.json` > `CODEBUDDY_CLI` > auto-detect |
+| `prizm_detect_cli_and_platform()` | Sets `CLI_CMD` and `PLATFORM`. Priority: `AI_CLI` env > `config.json` `ai_cli` > manifest/config platform > `CODEBUDDY_CLI` > installed PrizmKit artifacts > PATH |
 | `prizm_check_common_dependencies(cli_cmd)` | Verifies jq, python3, and CLI are installed |
 
 Also exports: `log_info`, `log_warn`, `log_error`, `log_success` (with timestamps), and color constants.
@@ -543,8 +543,8 @@ Also exports: `log_info`, `log_warn`, `log_error`, `log_success` (with timestamp
 
 | Variable | Default | Used By | Description |
 |----------|---------|---------|-------------|
-| `AI_CLI` | auto-detect | all shell scripts | AI CLI command name. Auto-detects `cbc` or `claude` |
-| `PRIZMKIT_PLATFORM` | auto-detect | all shell scripts | Force platform: `codebuddy` or `claude` |
+| `AI_CLI` | auto-detect | all shell scripts | AI CLI command name. Auto-detects `cbc`, `claude`, or `codex` |
+| `PRIZMKIT_PLATFORM` | auto-detect | all shell scripts | Platform hint for custom/wrapped AI CLI commands: `codebuddy`, `claude`, or `codex` |
 | `MODEL` | (none) | run-feature.sh, run-bugfix.sh | AI model fallback. Overridden by per-feature `model` field. See [Model Selection](#model-selection) |
 | `CODEBUDDY_CLI` | (deprecated) | all shell scripts | Legacy alias for `AI_CLI`. Prefer `AI_CLI` |
 | `VERBOSE` | `0` | run-feature.sh | Set to `1` to enable `--verbose` on AI CLI |
@@ -640,8 +640,10 @@ The pipeline auto-detects which AI CLI to use. Detection priority:
 
 1. `AI_CLI` environment variable (highest)
 2. `.prizmkit/config.json` → `ai_cli` field
-3. `CODEBUDDY_CLI` environment variable (legacy)
-4. Auto-detect: `cbc` in PATH → `claude` in PATH (lowest)
+3. `.prizmkit/manifest.json` or `.prizmkit/config.json` → `platform` field
+4. `CODEBUDDY_CLI` environment variable (legacy)
+5. Installed PrizmKit platform artifacts
+6. PATH fallback: `claude` → `cbc` → `codex`
 
 To permanently configure, create `.prizmkit/config.json`:
 
@@ -683,6 +685,7 @@ run-feature.sh main loop
   |
   +- AI CLI session               # claude -p "$(cat prompt)" --dangerously-skip-permissions
   |   |                           # cbc --print -y < prompt
+  |   |                           # codex --ask-for-approval never --sandbox danger-full-access exec --cd "$PROJECT_ROOT" --skip-git-repo-check - < prompt
   |   +- prizm-dev-team           # Multi-agent team implements the feature
   |       +- Orchestrator         # Main: init, context, plan, retrospective, commit
   |       +- Dev x N              # Implementation with TDD
@@ -946,7 +949,7 @@ Uses a background process + watchdog pattern instead of GNU `timeout`:
 Check `set -e` interactions. All python invocations in the main loop should have `|| true` guards.
 
 ### Session log is empty
-Verify CLI is functional: `claude -p "test" --dangerously-skip-permissions` or `echo "test" | cbc --print -y`
+Verify CLI is functional: `claude -p "test" --dangerously-skip-permissions`, `echo "test" | cbc --print -y`, or `echo "test" | codex --ask-for-approval never --sandbox danger-full-access exec --skip-git-repo-check -`
 
 ### "PIPELINE_BLOCKED" loops
 All remaining features have unmet dependencies. Use `./run-feature.sh status` to find the blocking feature, then reset or manually complete it.