session-orchestrator 4.0.0 → 4.0.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "Loop engineering for AI coding agents — turn ad-hoc sessions into a repeatable research → plan → wave-execute → close loop with verification gates. Runs on Claude Code, Codex CLI, Cursor, and Pi.",
-    "version": "4.0.0"
+    "version": "4.0.1"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "session-orchestrator",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Loop engineering for AI coding agents — turn ad-hoc sessions into a repeatable research → plan → wave-execute → close loop with verification gates. Runs on Claude Code, Codex CLI, Cursor, and Pi.",
   "author": {
     "name": "Bernhard Goetzendorfer",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "session-orchestrator",
-  "version": "4.0.0+codex.20260906130352",
+  "version": "4.0.1+codex.20260907191442",
   "description": "Loop engineering for AI coding agents — turn ad-hoc sessions into a repeatable research → plan → wave-execute → close loop with verification gates. Runs on Claude Code, Codex CLI, Cursor, and Pi.",
   "keywords": [
     "session",
@@ -11,7 +11,8 @@
     "quality-gates",
     "codex"
   ],
-  "skills": "./skills/",
+  "skills": "./.codex-plugin/skills/",
+  "commands": [],
   "hooks": "./hooks/hooks-codex.json",
   "mcpServers": "./.mcp.json",
   "interface": {

package/.codex-plugin/skills/architecture/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: architecture
+description: Use when the user asks to improve architecture, find refactoring opportunities, surface deepening opportunities, consolidate tightly-coupled modules, or make a codebase more testable and AI-navigable. Surfaces shallow modules and hypothetical seams using a precise vocabulary (Module / Interface / Implementation / Depth / Seam / Adapter / Leverage / Locality from LANGUAGE.md).
+license: MIT
+metadata:
+  model: inherit
+  derived-from: mattpocock/skills@90ea8ee
+  upstream-url: https://github.com/mattpocock/skills/tree/main/improve-codebase-architecture
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# architecture
+
+Read [`skills/architecture/SKILL.md`](../../../skills/architecture/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/autopilot/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: autopilot
+description: Autonomous session-orchestration loop with kill-switches (Phase C-1.b — all 10 kill-switches shipped)
+metadata:
+  argument-hint: '[--headless] [--verbose] [--max-sessions=N] [--max-hours=H] [--confidence-threshold=0.X] [--dry-run]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# autopilot
+
+Read [`commands/autopilot.md`](../../../commands/autopilot.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/autopilot/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: autopilot
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/bootstrap/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: bootstrap
+description: Scaffold the minimum repo structure required by session-orchestrator
+metadata:
+  disable-model-invocation: 'true'
+  argument-hint: '[--upgrade <tier>]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# bootstrap
+
+Read [`commands/bootstrap.md`](../../../commands/bootstrap.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/bootstrap/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: bootstrap
+policy:
+  allow_implicit_invocation: false

package/.codex-plugin/skills/brainstorm/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: brainstorm
+description: Run a lightweight Socratic design dialogue (3-5 AUQ rounds) and write a spec markdown file before any implementation work. Use BEFORE /plan feature when scope/UX is ambiguous.
+metadata:
+  disable-model-invocation: 'true'
+  argument-hint: '[topic-or-feature-slug]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# brainstorm
+
+Read [`commands/brainstorm.md`](../../../commands/brainstorm.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/brainstorm/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: brainstorm
+policy:
+  allow_implicit_invocation: false

package/.codex-plugin/skills/claude-md-drift-check/SKILL.md

@@ -0,0 +1,17 @@
+---
+name: claude-md-drift-check
+description: 'Use when detecting drift between CLAUDE.md (or AGENTS.md, the Codex CLI alias) / _meta narrative and live repository state. Ten checks: absolute-path resolution, 01-projects/ count claims, issue-reference freshness, session-file existence, command-count sync, session-config-parity (mandatory template keys = error, opt-in gaps = warning), vault-dir-parity (CLAUDE.md vs AGENTS.md), generated-rule-staleness (WARN-only), rule-scoping (paths:/globs: frontmatter defects, dangling rule citations, zero-match globs), and docs-parity (docs/components.md count-claims vs on-disk counts, template-vs-reference config-key parity, stale .claude/metrics/ paths). Full per-check spec in the body table. Invoked as an opt-in session-end phase; mirrors vault-sync''s lean JSON+exit-code contract.'
+metadata:
+  model: haiku
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# claude-md-drift-check
+
+Read [`skills/claude-md-drift-check/SKILL.md`](../../../skills/claude-md-drift-check/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/close/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: close
+description: End session with verification, commits, and documentation
+metadata:
+  disable-model-invocation: 'true'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# close
+
+Read [`commands/close.md`](../../../commands/close.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/close/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: close
+policy:
+  allow_implicit_invocation: false

package/.codex-plugin/skills/convergence-monitoring/SKILL.md

@@ -0,0 +1,24 @@
+---
+name: convergence-monitoring
+description: 'Monitor iterative improvement loops for convergence. Three signals — shrinking diff, pass-rate plateau, velocity — drive a Stop/Continue/Investigate decision at each inter-wave checkpoint. Distinct from /evolve (retrospective) and session-reviewer (wave output review): convergence-monitoring answers "are we making progress?" not "was the last wave correct?". Primary consumer: /autoresearch loops and wave-executor inter-wave checkpoints.'
+metadata:
+  user-invocable: 'true'
+  tags: autoresearch, convergence, loop-control, wave-executor
+  model: haiku
+  model-preference: sonnet
+  model-preference-codex: gpt-5.4-mini
+  model-preference-cursor: claude-sonnet-4-6
+  attribution: |
+    Inspired by cavekit's documented convergence-monitoring concept (MIT, Julius Brussee). Implemented from spec since upstream skill not yet published as of 2026-04-30.
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# convergence-monitoring
+
+Read [`skills/convergence-monitoring/SKILL.md`](../../../skills/convergence-monitoring/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/debug/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: debug
+description: Run a 4-phase systematic debugging investigation before proposing any fix. Iron Law — NO FIXES WITHOUT ROOT CAUSE INVESTIGATION FIRST. Produces a `.orchestrator/debug/` artifact the fixer agent must reference.
+metadata:
+  argument-hint: '[bug-description-or-issue-ref]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# debug
+
+Read [`commands/debug.md`](../../../commands/debug.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/debug/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: debug
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/discovery/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: discovery
+description: Systematic quality discovery and issue detection
+metadata:
+  argument-hint: '[all|code|infra|ui|arch|session|audit|vault|feature] [--since <git-ref>] [--full]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# discovery
+
+Read [`commands/discovery.md`](../../../commands/discovery.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/discovery/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: discovery
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/dispatcher/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: dispatcher
+description: Pick the next-best repo to work on across the portfolio — rank free repos, recommend one, claim its lease atomically, and route to the entry command
+metadata:
+  argument-hint: '[--dry-run] [--repo <name>]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# dispatcher
+
+Read [`commands/dispatcher.md`](../../../commands/dispatcher.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/dispatcher/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: dispatcher
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/docs-orchestrator/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: docs-orchestrator
+description: 'Use this skill when orchestrating documentation generation and updates within a session. Maps session scope to audience-specific docs tasks (User / Dev / Vault), dispatches the docs-writer agent with source-grounded prompts, and reports coverage gaps to session-end. Gated on `docs-orchestrator.enabled: true` in Session Config. Zero overhead when disabled.'
+metadata:
+  user-invocable: 'false'
+  tags: docs, orchestration, audiences
+  model: sonnet
+  model-preference: sonnet
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# docs-orchestrator
+
+Read [`skills/docs-orchestrator/SKILL.md`](../../../skills/docs-orchestrator/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/ecosystem-health/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: ecosystem-health
+description: Monitor health across configured service endpoints, CI pipelines, and critical issues. Automatically invoked during session-start when ecosystem-health is enabled in Session Config.
+metadata:
+  user-invocable: 'false'
+  tags: reference, health, monitoring, ci, endpoints
+  model: haiku
+  model-preference: sonnet
+  model-preference-codex: gpt-5.4-mini
+  model-preference-cursor: claude-sonnet-4-6
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# ecosystem-health
+
+Read [`skills/ecosystem-health/SKILL.md`](../../../skills/ecosystem-health/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/eli5/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: eli5
+description: Say the last answer again in plain words — same facts, in the order the operator needs them. Optional topic argument.
+metadata:
+  argument-hint: '[topic]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# eli5
+
+Read [`commands/eli5.md`](../../../commands/eli5.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/eli5/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: eli5
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/eval/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: eval
+description: Run an honest session-process evaluation (Standard v1, aiat-llm-eval/1.0) — score the last completed session against the pre-registered rubric-v1 dimensions
+metadata:
+  argument-hint: '[--session <id>] [--no-write] [--verify <run-id>]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# eval
+
+Read [`commands/eval.md`](../../../commands/eval.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/eval/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: eval
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/evolve/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: evolve
+description: Extract session patterns into reusable learnings
+metadata:
+  argument-hint: '[analyze|review|list|dialectic [--apply]]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# evolve
+
+Read [`commands/evolve.md`](../../../commands/evolve.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/evolve/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: evolve
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/frontmatter-guard/SKILL.md

@@ -0,0 +1,17 @@
+---
+name: frontmatter-guard
+description: 'Injects the canonical vault frontmatter schema snippet into agent prompts before any vault-write task, preventing malformed YAML frontmatter in Obsidian notes. <example>Context: wave-executor is about to dispatch a vault-mirror agent that writes learning notes under ~/Projects/vault/40-learnings/. user: "dispatch vault-write agent" assistant: "Injecting frontmatter-guard snippet into agent prompt (vault scope detected). Required fields: id, type, created, updated. Enum type: note|daily|project|person|reference|idea|learning|session." <commentary>The wave-executor pre-dispatch hook calls detectVaultTaskScope() — the fileScope contains /Projects/vault/40-learnings/ so the guard triggers and the snippet is prepended to the agent system prompt.</commentary></example>'
+metadata:
+  model: inherit
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# frontmatter-guard
+
+Read [`skills/frontmatter-guard/SKILL.md`](../../../skills/frontmatter-guard/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/gitlab-ops/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: gitlab-ops
+description: 'Use this skill when performing VCS operations on GitLab or GitHub repositories — creating, updating, or closing issues and MRs, applying label taxonomy, running `glab`/`gh` CLI commands, or resolving project paths dynamically. Acts as the single source of truth for CLI command syntax and label conventions; consuming skills reference this rather than duplicating logic. Triggers: "create a GitLab issue", "list open MRs", "apply priority label", "how do I resolve the project ID", "what''s the carryover issue template". <example>Context: session-end needs to file a carryover issue for an incomplete task. user: "/close" assistant: "Creating carryover issue via glab with the Carryover Template from gitlab-ops — labels: carryover, priority::high."</example>'
+metadata:
+  user-invocable: 'false'
+  tags: reference, vcs, gitlab, github, issues
+  model: haiku
+  model-preference: sonnet
+  model-preference-codex: gpt-5.4-mini
+  model-preference-cursor: claude-sonnet-4-6
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# gitlab-ops
+
+Read [`skills/gitlab-ops/SKILL.md`](../../../skills/gitlab-ops/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/gitlab-portfolio/SKILL.md

@@ -0,0 +1,17 @@
+---
+name: gitlab-portfolio
+description: 'Use when you need a single-pane cross-repo health view across all vault-registered GitLab and GitHub projects. Discovers repos from `_overview.md` frontmatter in `<vault>/01-projects/*/`, aggregates open issues, MRs, critical labels, and stale signals via parallel `glab`/`gh` calls, then writes an idempotent `_PORTFOLIO.md` dashboard. Runs automatically at session-start Phase 2 when `gitlab-portfolio.enabled=true`. Triggers: "show portfolio status", "refresh the portfolio dashboard", "which repos have critical issues", "run /portfolio". <example>Context: session-start, gitlab-portfolio.enabled=true, vault has 5 registered repos. user: "/session deep" assistant: "Portfolio: 3 critical issues across 2 repos — run /portfolio for details. Dashboard written to vault/01-projects/_PORTFOLIO.md."</example>'
+metadata:
+  model: sonnet
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# gitlab-portfolio
+
+Read [`skills/gitlab-portfolio/SKILL.md`](../../../skills/gitlab-portfolio/SKILL.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/go/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: go
+description: Approve session plan and begin wave execution
+metadata:
+  disable-model-invocation: 'true'
+  argument-hint: '[optional instructions]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# go
+
+Read [`commands/go.md`](../../../commands/go.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/go/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: go
+policy:
+  allow_implicit_invocation: false

package/.codex-plugin/skills/grill/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: grill
+description: Stress-test a plan, design, or PRD before any build — relentless one-question-at-a-time interrogation that hunts contradictions against the code and challenges assumptions. Composable; no HARD-GATE.
+metadata:
+  argument-hint: '[file-path-or-topic]'
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# grill
+
+Read [`commands/grill.md`](../../../commands/grill.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/grill/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: grill
+policy:
+  allow_implicit_invocation: true

package/.codex-plugin/skills/harness-audit/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: harness-audit
+description: Run the harness audit and report the rubric score for this repository
+---
+
+<!-- Generated by scripts/generate-codex-skills.mjs; do not edit. -->
+
+# harness-audit
+
+Read [`commands/harness-audit.md`](../../../commands/harness-audit.md) in full before taking any action, then follow its complete workflow.
+The linked document is authoritative, including its prechecks, argument rules, and stop conditions.
+
+Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as `skills/` and `scripts/` from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.
+
+`$ARGUMENTS` means the trailing user input after the selected command skill, or an empty string when absent. Preserve flags, quoted text, and Unicode as data. Do not perform global substitution in the command document, shell expansion on the argument string, or execution of that string as shell code. When the workflow needs a command, pass its arguments through structured tool parameters or safely quoted individual arguments.
+
+Read the full command before invoking an internal skill. An instruction to invoke a skill (including `session-orchestrator:<name>` or the `Skill` tool) means read and follow the canonical `skills/<name>/SKILL.md` beneath the plugin root. Do not redispatch the public command adapter: a same-named command and internal skill are distinct documents, and redispatch would recurse.
+
+Regenerate with `node scripts/generate-codex-skills.mjs`.

package/.codex-plugin/skills/harness-audit/agents/openai.yaml

@@ -0,0 +1,5 @@
+# Generated by scripts/generate-codex-skills.mjs; do not edit.
+interface:
+  display_name: harness-audit
+policy:
+  allow_implicit_invocation: true