sortie-dogs 0.13.9 → 0.13.10

package/.agents/skills/sortie-dogs/SKILL.md

@@ -24,7 +24,7 @@ Check the selected entrypoint with `<entrypoint> codex --help` before starting w
 
 ## Choose one route
 
-On a POSIX host with `/bin/bash`, use the natural-language Mission route:
+Use the natural-language Mission route on POSIX and Windows:
 
 ```text
 <entrypoint> codex mission --project-root <repository-root> --prompt <exact-user-request>
@@ -32,11 +32,17 @@ On a POSIX host with `/bin/bash`, use the natural-language Mission route:
 
 Forward `--model`, `--effort`, or `--permissions` only when the user selected those values. Never silently widen the native permission profile. If an existing Mission is reported, resume only its exact root with `--resume`; do not launch replacement work.
 
-On Windows, use the manifest-bound route until the full Mission shell path supports Windows natively:
+Leave `--model` unset to retain role-specific defaults: Sol 6.1 Operator/Coordinator/Reviewer and Luna-fast Worker. The Codex adapter maps the shared Luna-fast alias to native `gpt-6-luna` plus the `priority` (Fast) service tier; it does not alter OpenCode defaults. Fast consumes subscription limits faster than Standard; no metered API fallback is allowed.
+
+On Windows the same Mission command resolves existing PowerShell 7 automatically. Add `--trusted-pwsh <absolute-pwsh.exe>` only when an exact existing executable needs to be selected; do not add a separate shell preflight or approval step.
+
+The compatibility tool named `bash` executes PowerShell commands on Windows and POSIX bash on POSIX. Do not supply POSIX commands to the Windows shell. Shell and file commands still use the configured native permissions, or an explicitly integrated host executor. A sandbox startup failure is not a validation failure or success: preserve the failed execution and report the environment blocker; do not widen permissions or stop unrelated Codex processes.
+
+Use the manifest-bound `codex run` route only for an explicitly selected single-task manifest workflow. It is not the full multi-role Mission route:
 
 1. Read repository instructions and inspect only enough to identify bounded project-relative read scope, write scope, and meaningful validation commands.
 2. Create one temporary manifest under `.sortie-dogs/codex-skill/` with `version`, `task_id`, `read`, `write`, and non-empty `validation`. Reject external or uncertain write scope instead of broadening it.
-3. Resolve the exact PowerShell executable with `(Get-Command pwsh.exe -ErrorAction Stop).Source`. Invoke:
+3. On Windows the manifest workflow needs the exact PowerShell executable for command-envelope observation. Resolve it with `(Get-Command pwsh.exe -ErrorAction Stop).Source`, then invoke:
 
 ```text
 <entrypoint> codex run --project-root <repository-root> --manifest <temporary-manifest> --prompt <exact-user-request> --trusted-pwsh <resolved-pwsh.exe>

package/.agents/skills/sortie-dogs/sortie-dogs.version

@@ -1 +1 @@
-0.13.9-codex-skill-v1
+0.13.10-codex-skill-v2

package/README.md

@@ -35,10 +35,10 @@ implementation, validation, review, and model routing.
 Guides: [日本語](docs/guide-ja.md) · [简体中文](docs/guide-zh-CN.md) ·
 [Testing](docs/testing.md) · [CLI testing](docs/cli-testing.md)
 
-**Current release: [v0.13.9](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.13.9)**
-([release notes](docs/release-v0.13.9.md)). The default Mission runtime retains the `v010`
+**Current release: [v0.13.10](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.13.10)**
+([release notes](docs/release-v0.13.10.md)). The default Mission runtime retains the `v010`
 profile, command and configuration names for compatibility; these names do not mean v0.10 is installed.
-The current asset marker is `0.13.9-codex-operation-v1`.
+The current asset marker is `0.13.10-codex-windows-v1`.
 
 ## SWE-bench Lite: 170/300 (56.67%)
 
@@ -48,7 +48,7 @@ The fixed **Sortie-dogs v0.12.24** harness resolved **170 of 300 SWE-bench Lite
 
 The single official 300-instance report and frozen predictions are hash-bound in the report. Confirmed inference expense was **$162.99**; a separate **$34.60** of usage has unknown pricing and is held against the campaign cap, **not** counted as known expense. Leaderboard registration and maintainer acceptance are separate from this official local evaluation.
 
-Historical scores below belong to their fixed candidates, not v0.13.9. SWE-bench is a separate,
+Historical scores below belong to their fixed candidates, not v0.13.10. SWE-bench is a separate,
 optional measurement rather than a mandatory release gate.
 
 > **Beta:** v0.13.x is still stabilizing. Runtime behavior,
@@ -63,11 +63,11 @@ Use Node.js 22.6 or newer and an existing Codex CLI with ChatGPT authentication.
 used Node.js 22.22.1 and Codex 0.160.1. Sortie neither installs Codex nor starts a login flow, copies
 credentials, or creates a second host configuration. Mission execution refuses non-ChatGPT auth.
 
-The Codex Mission adapter and explicit skill are included in v0.13.9. Install the release in the
+The Codex Mission adapter and explicit skill are included in v0.13.10. Install the release in the
 target project and inspect the entrypoint before running a prompt:
 
 ```sh
-npm install --save-dev sortie-dogs@0.13.9
+npm install --save-dev sortie-dogs@0.13.10
 npx --no-install sortie-dogs codex init .
 npx --no-install sortie-dogs codex mission --help
 ```
@@ -87,9 +87,10 @@ $sortie-dogs Implement and verify the requested change
 `$sortie-dogs` is the current direct Skills syntax. Codex does not expose arbitrary custom commands
 as exact `/sortie-dogs` slash commands; `/skills` opens the skill picker. The skill is intentionally
 explicit-only so child Codex Mission turns cannot invoke another Sortie Mission recursively.
-On POSIX it selects the natural-language Mission route below. On Windows it derives a bounded
-operation manifest and uses `codex run`, which retains the documented post-execution observation
-boundary instead of claiming a pre-execution guard.
+On POSIX and Windows it selects the natural-language, multi-role Mission route below.
+Windows uses existing PowerShell 7; it does not route natural-language Missions through the
+single-task `codex run` manifest workflow. That workflow remains available when explicitly selected
+and retains its post-execution observation boundary, not a pre-execution guard.
 
 Sortie-dogs also exports a host adapter for the official Codex app-server stdio protocol. This is
 separate from selecting an OpenAI model through OpenCode: OpenCode model routing still uses the
@@ -123,7 +124,7 @@ server-initiated requests fail closed.
 For the existing Operator → Coordinator → Worker → Reviewer Mission workflow, use:
 
 ```sh
-npx --no-install sortie-dogs codex mission --prompt "Implement and review the requested change" --model gpt-6.1-sol --effort medium
+npx --no-install sortie-dogs codex mission --prompt "Implement and review the requested change"
 ```
 
 The equivalent public SDK entrypoint is:
@@ -133,8 +134,9 @@ import { CodexMissionSession } from "sortie-dogs";
 
 const mission = await CodexMissionSession.create({
   projectRoot: process.cwd(),
-  model: "gpt-6.1-sol", // Choose a model available to the existing signed-in account.
-  effort: "medium",
+  // Leave model/effort unset to preserve packaged role defaults.
+  // model: "gpt-6.1-sol", effort: "medium", // Explicit override for every role.
+  // trustedPowerShellExecutable: "C:/Program Files/PowerShell/7/pwsh.exe", // Windows, optional.
   // resumeThreadID: "saved-root-thread-id", // Continue the same Mission when needed.
 });
 try {
@@ -146,14 +148,26 @@ try {
 }
 ```
 
-This Linux-first route uses `CodexMissionSession` and the existing Mission tools, correction grants,
+This route uses `CodexMissionSession` and the existing Mission tools, correction grants,
 validation evidence, and final Operator acceptance. It runs saved native Codex threads with existing
 ChatGPT authentication; it does not import OpenCode settings or introduce a second Mission ledger.
-Commands run through `/bin/bash` using the native app-server's configured permissions. Sortie does not
+Commands run through `/bin/bash` on POSIX or existing `pwsh.exe -NoProfile -NonInteractive -Command`
+on Windows, using the native app-server's configured permissions. The compatibility tool remains
+named `bash`, but its Windows input must be PowerShell syntax. Windows callers can pin an absolute
+PowerShell 7 path with SDK `trustedPowerShellExecutable` or CLI `--trusted-pwsh`.
+Packaged roles retain Sol 6.1/xhigh for Operator, Coordinator and Reviewer. The shared Luna-fast/max
+Worker alias maps only in Codex to native `gpt-6-luna`/max plus `serviceTier: "priority"` (Fast).
+OpenCode routing is unchanged. Fast uses subscription limits faster than Standard; no metered API
+fallback is introduced. CLI progress exposes each role's native model, effort and separate service tier.
+Sortie does not
 replace them with a fixed repository-only or network-disabled policy, change host configuration, or select
 full access. Thread turns retain native thread permissions; standalone `command/exec` uses the server's
 configured policy, not a thread's temporary grants. A parent application's in-memory approval is not
 automatically transferred to a separately launched app-server.
+Windows recovery can reclaim a killed adapter only when its recorded Windows PID is absent.
+A live/reused PID, access denial, legacy owner without platform identity, or unresolved native
+execution remains unknown; no command is replayed. Sandbox startup errors must be resolved at the
+native host, not by silently widening Sortie's permissions or stopping unrelated Codex processes.
 SDK hosts can forward native command/file approval requests through `approval` and permission-subset
 requests through `permissionsApproval`. The native host remains responsible for deciding and enforcing
 the grant. The CLI reports approval requests but has no interactive approval bridge; without a connected
@@ -289,7 +303,19 @@ existing local bridge loads enforcement and model routing. OpenCode can reload w
 but replacing an installed dependency may require a full restart. A new chat session alone does not
 prove the newly installed plugin is loaded.
 
-## v0.13.9 runtime updates
+## v0.13.10 runtime updates
+
+PR #169 connects natural-language Windows Codex Missions to the same multi-role lifecycle using
+existing PowerShell 7, preserves command failure exits and native resume settings, and maps the
+Luna-fast Worker alias to native Luna/max with the separate priority tier. Directory reads list
+direct entries instead of requiring filename guesses. OpenCode model settings and native permission
+profiles remain unchanged. PR #168 provides one host-aware Anko runner, reuses unchanged setup,
+removes mandatory paid diagnostic probes, and preserves prior attempts, unknown usage and service
+evidence. Its recorded v0.13.9 Anko completion and PR #169's Windows Codex host-executor completion
+are historical fixed-candidate observations, not new v0.13.10 benchmark or native sandbox results.
+See [release notes](docs/release-v0.13.10.md).
+
+## v0.13.9 runtime updates (retained)
 
 PRs #163–#166 connect native Codex sessions to the existing Mission lifecycle, add the explicit
 `$sortie-dogs` skill and `codex init`, restore operation Reviewer correction within existing write
@@ -654,7 +680,7 @@ register stable and `v010` from the same package installation path in one host.
 Project-local installation is recommended. To expose the current Mission assets globally:
 
 ```sh
-npm install --global sortie-dogs@0.13.9
+npm install --global sortie-dogs@0.13.10
 sortie-dogs init --global --profile v010
 ```
 
@@ -666,7 +692,7 @@ can resolve a **separate dependency** under that config root. Updating npm-globa
 it. For that layout, also install the same release at the actual config root, then rerun global init:
 
 ```sh
-npm install --prefix "$HOME/.config/opencode" sortie-dogs@0.13.9
+npm install --prefix "$HOME/.config/opencode" sortie-dogs@0.13.10
 sortie-dogs init --global --profile v010
 ```
 
@@ -689,7 +715,7 @@ version, preserves user configuration, and stops safely on unknown ownership or
 conflicting files.
 
 Align any exact version pin or separate bridge dependency with the intended release too. An installed
-marker of `0.13.9-codex-operation-v1` identifies the assets; it does not prove an already-running
+marker of `0.13.10-codex-windows-v1` identifies the assets; it does not prove an already-running
 OpenCode process has reloaded the plugin.
 
 There is no supported uninstall command. Remove the npm dependency separately,

package/dist/asset-version.d.ts

@@ -3,6 +3,6 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.13.9-codex-operation-v1";
-export declare const CODEX_SKILL_ASSET_VERSION = "0.13.9-codex-skill-v1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.13.10-codex-windows-v1";
+export declare const CODEX_SKILL_ASSET_VERSION = "0.13.10-codex-skill-v2";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION | typeof CODEX_SKILL_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.13.9-codex-operation-v1";
-export const CODEX_SKILL_ASSET_VERSION = "0.13.9-codex-skill-v1";
+export const V010_RUNTIME_ASSET_VERSION = "0.13.10-codex-windows-v1";
+export const CODEX_SKILL_ASSET_VERSION = "0.13.10-codex-skill-v2";

package/dist/cli/codex-mission.d.ts

@@ -1,5 +1,5 @@
 import type { CodexTurnEvent } from "../codex/app-server.js";
-export declare const CODEX_MISSION_USAGE = "Usage: sortie-dogs codex mission --prompt <text>\n  [--resume <root-thread-id>] [--project-root <path>] [--executable <codex>] [--model <model>] [--effort <effort>] [--permissions <native-profile>]\n\nRuns the existing Mission Operator, Coordinator, Worker and Reviewer through Codex.\n--model and --effort explicitly override all roles; otherwise packaged role defaults apply.\n--permissions explicitly selects an existing native profile; omission retains native defaults.\nUses existing ChatGPT authentication and native Codex permissions.";
+export declare const CODEX_MISSION_USAGE = "Usage: sortie-dogs codex mission --prompt <text>\n  [--resume <root-thread-id>] [--project-root <path>] [--executable <codex>] [--model <model>] [--effort <effort>] [--permissions <native-profile>] [--trusted-pwsh <absolute-pwsh.exe>]\n\nRuns the existing Mission Operator, Coordinator, Worker and Reviewer through Codex.\n--model and --effort explicitly override all roles; otherwise packaged role defaults apply.\n--permissions explicitly selects an existing native profile; omission retains native defaults.\nWindows uses existing PowerShell 7; --trusted-pwsh pins its absolute executable path.\nThe packaged Luna-fast worker maps to native gpt-6-luna with the priority (Fast) service tier.\nUses existing ChatGPT authentication and native Codex permissions.";
 export declare function runCodexMissionCommand(argv: readonly string[]): Promise<number>;
 /** Bounded user-facing progress; do not dump control packets or hidden reasoning. */
 export declare function codexMissionProgress(event: CodexTurnEvent & {

package/dist/cli/codex-mission.js

@@ -1,10 +1,12 @@
 import { CodexMissionSession } from "../codex/mission-session.js";
 export const CODEX_MISSION_USAGE = `Usage: sortie-dogs codex mission --prompt <text>
-  [--resume <root-thread-id>] [--project-root <path>] [--executable <codex>] [--model <model>] [--effort <effort>] [--permissions <native-profile>]
+  [--resume <root-thread-id>] [--project-root <path>] [--executable <codex>] [--model <model>] [--effort <effort>] [--permissions <native-profile>] [--trusted-pwsh <absolute-pwsh.exe>]
 
 Runs the existing Mission Operator, Coordinator, Worker and Reviewer through Codex.
 --model and --effort explicitly override all roles; otherwise packaged role defaults apply.
 --permissions explicitly selects an existing native profile; omission retains native defaults.
+Windows uses existing PowerShell 7; --trusted-pwsh pins its absolute executable path.
+The packaged Luna-fast worker maps to native gpt-6-luna with the priority (Fast) service tier.
 Uses existing ChatGPT authentication and native Codex permissions.`;
 export async function runCodexMissionCommand(argv) {
     if (argv.length === 1 && argv[0] === "--help") {
@@ -12,7 +14,7 @@ export async function runCodexMissionCommand(argv) {
         return 0;
     }
     const values = new Map();
-    const allowed = new Set(["--prompt", "--resume", "--project-root", "--executable", "--model", "--effort", "--permissions"]);
+    const allowed = new Set(["--prompt", "--resume", "--project-root", "--executable", "--model", "--effort", "--permissions", "--trusted-pwsh"]);
     for (let index = 0; index < argv.length; index += 2) {
         const key = argv[index], value = argv[index + 1];
         if (!key || !allowed.has(key) || !value || value.startsWith("--") || values.has(key)) {
@@ -34,7 +36,8 @@ export async function runCodexMissionCommand(argv) {
     process.on("SIGINT", onInt);
     try {
         adapter = await CodexMissionSession.create({ projectRoot: values.get("--project-root") ?? process.cwd(),
-            resumeThreadID: values.get("--resume"), permissions: values.get("--permissions"), executable: values.get("--executable"), model: values.get("--model"), effort: values.get("--effort"), onEvent: event => {
+            resumeThreadID: values.get("--resume"), permissions: values.get("--permissions"), executable: values.get("--executable"), model: values.get("--model"), effort: values.get("--effort"),
+            trustedPowerShellExecutable: values.get("--trusted-pwsh"), onEvent: event => {
                 const progress = codexMissionProgress(event);
                 if (progress)
                     process.stderr.write(`${JSON.stringify(progress)}\n`);
@@ -63,6 +66,9 @@ export async function runCodexMissionCommand(argv) {
 }
 /** Bounded user-facing progress; do not dump control packets or hidden reasoning. */
 export function codexMissionProgress(event) {
+    if (event.method === "sortie/modelRoute")
+        return { thread_id: event.threadId, phase: "model-route", agent: event.params.agent, model: event.params.model,
+            effort: event.params.effort, service_tier: event.params.serviceTier };
     if (event.method === "sortie/permissions")
         return { thread_id: event.threadId, phase: "permissions", requested_profile: event.params.requestedProfile,
             effective_profile: event.params.profile, sandbox: event.params.sandbox, network_access: event.params.networkAccess,

package/dist/codex/app-server.d.ts

@@ -34,6 +34,8 @@ export interface CodexTurnOptions {
     readonly approvalPolicy?: "untrusted" | "on-failure" | "on-request" | "never" | "unlessTrusted" | "onRequest";
     readonly model?: string;
     readonly effort?: string;
+    /** Native service tier, separate from the model slug (for example priority/Fast). */
+    readonly serviceTier?: string;
     readonly outputSchema?: JsonObject;
     readonly onEvent?: (event: CodexTurnEvent) => void | Promise<void>;
 }
@@ -90,6 +92,8 @@ export declare class CodexAppServerHost {
     private initialized;
     private readonly permissions;
     private readonly models;
+    private readonly serviceTiers;
+    private readonly efforts;
     private closed;
     private closing?;
     private fault?;
@@ -104,6 +108,7 @@ export declare class CodexAppServerHost {
     startThread(params: {
         cwd: string;
         model?: string;
+        serviceTier?: string;
         ephemeral?: boolean;
         permissions?: string;
         developerInstructions?: string;
@@ -111,6 +116,10 @@ export declare class CodexAppServerHost {
         config?: JsonObject;
     }): Promise<string>;
     threadModel(threadID: string): string | undefined;
+    /** Null means the native default was observed; undefined means no observation. */
+    threadServiceTier(threadID: string): string | null | undefined;
+    threadEffort(threadID: string): string | null | undefined;
+    private captureModelSettings;
     threadPermissions(threadID: string): JsonObject | undefined;
     private capturePermissions;
     /** Read only the authentication mode and plan class; never expose tokens or account identifiers. */

package/dist/codex/app-server.js

@@ -76,6 +76,8 @@ export class CodexAppServerHost {
     initialized = false;
     permissions = new Map();
     models = new Map();
+    serviceTiers = new Map();
+    efforts = new Map();
     closed = false;
     closing;
     fault;
@@ -93,7 +95,7 @@ export class CodexAppServerHost {
     async initialize() {
         if (this.initialized)
             return;
-        await this.request("initialize", { clientInfo: { name: "sortie_dogs", title: "Sortie-dogs", version: this.options.clientVersion ?? "0.13.9" },
+        await this.request("initialize", { clientInfo: { name: "sortie_dogs", title: "Sortie-dogs", version: this.options.clientVersion ?? "0.13.10" },
             ...(this.options.dynamicTool || this.options.experimentalApi ? { capabilities: { experimentalApi: true } } : {}) });
         this.transport.send({ method: "initialized", params: {} });
         this.initialized = true;
@@ -102,6 +104,7 @@ export class CodexAppServerHost {
         await this.initialize();
         const result = await this.request("thread/start", { cwd: params.cwd, ...(params.model ? { model: params.model, allowProviderModelFallback: false } : {}),
             ...(params.ephemeral === undefined ? {} : { ephemeral: params.ephemeral }),
+            ...(params.serviceTier ? { serviceTier: params.serviceTier } : {}),
             ...(params.permissions ? { permissions: params.permissions } : {}),
             ...(params.developerInstructions ? { developerInstructions: params.developerInstructions } : {}),
             ...(params.dynamicTools ? { dynamicTools: params.dynamicTools } : {}),
@@ -109,12 +112,28 @@ export class CodexAppServerHost {
         const id = object(result) && object(result.thread) ? text(result.thread.id) : undefined;
         if (!id)
             throw new CodexHostError("protocol-invalid-response", "thread/start returned no thread id.");
-        if (object(result) && typeof result.model === "string")
-            this.models.set(id, result.model);
+        this.captureModelSettings(id, result);
         this.capturePermissions(id, result);
         return id;
     }
     threadModel(threadID) { return this.models.get(threadID); }
+    /** Null means the native default was observed; undefined means no observation. */
+    threadServiceTier(threadID) { return this.serviceTiers.get(threadID); }
+    threadEffort(threadID) { return this.efforts.get(threadID); }
+    captureModelSettings(threadID, result) {
+        if (!object(result))
+            return;
+        if (typeof result.model === "string")
+            this.models.set(threadID, result.model);
+        if (typeof result.serviceTier === "string")
+            this.serviceTiers.set(threadID, result.serviceTier);
+        else if (result.serviceTier === null)
+            this.serviceTiers.set(threadID, null);
+        if (typeof result.reasoningEffort === "string")
+            this.efforts.set(threadID, result.reasoningEffort);
+        else if (result.reasoningEffort === null)
+            this.efforts.set(threadID, null);
+    }
     threadPermissions(threadID) { return this.permissions.get(threadID); }
     capturePermissions(threadID, result) {
         if (!object(result))
@@ -149,6 +168,7 @@ export class CodexAppServerHost {
         const id = object(result) && object(result.thread) ? text(result.thread.id) : undefined;
         if (id !== threadID)
             throw new CodexHostError("protocol-invalid-response", "thread/resume returned a different thread id.");
+        this.captureModelSettings(id, result);
         this.capturePermissions(threadID, result);
     }
     async runTurn(threadID, prompt, options) {
@@ -160,6 +180,7 @@ export class CodexAppServerHost {
             ...(options.sandboxPolicy ? { sandboxPolicy: options.sandboxPolicy } : {}),
             ...(options.approvalPolicy ? { approvalPolicy: options.approvalPolicy } : {}),
             ...(options.model ? { model: options.model } : {}), ...(options.effort ? { effort: options.effort } : {}),
+            ...(options.serviceTier ? { serviceTier: options.serviceTier } : {}),
             ...(options.outputSchema ? { outputSchema: options.outputSchema } : {}) });
         if (this.closed)
             throw new CodexHostError("server-closed", "Codex host was closed.");

package/dist/codex/mission-session.d.ts

@@ -34,6 +34,8 @@ export interface CodexMissionSessionOptions {
     }>>;
     readonly effort?: string;
     readonly executable?: string;
+    /** Windows only: existing absolute PowerShell 7 executable; otherwise resolve pwsh.exe on PATH. */
+    readonly trustedPowerShellExecutable?: string;
     readonly transportFactory?: () => CodexAppServerTransport;
     /** Delegate exact post-hook commands to the parent host; omission retains native command/exec. */
     readonly executeCommand?: CodexMissionCommandExecutor;
@@ -46,6 +48,7 @@ export interface CodexMissionSessionOptions {
 /** Native Codex transport for the existing Mission tools, roles and acceptance state. */
 export declare class CodexMissionSession {
     private readonly options;
+    private readonly shell;
     private hooks;
     private readonly sessions;
     private closed;

package/dist/codex/mission-session.js

@@ -8,10 +8,12 @@ import { V010_RUNTIME_PROFILE as profile } from "../core/runtime-profile.js";
 import { runtimeAssets } from "../runtime-assets-v010.js";
 import { OperatorRuntime } from "../core/operator-runtime.js";
 import { OperatorMissionRuntime, codexProcessOwner, codexOwnerGone } from "../core/operator-mission.js";
+import { resolveCodexMissionShell } from "./mission-shell.js";
 const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 /** Native Codex transport for the existing Mission tools, roles and acceptance state. */
 export class CodexMissionSession {
     options;
+    shell;
     hooks;
     sessions = new Map();
     closed = false;
@@ -23,12 +25,13 @@ export class CodexMissionSession {
     ownedRoots = new Set();
     toolQueues = new Map();
     directory;
-    constructor(options) {
+    constructor(options, shell) {
         this.options = options;
+        this.shell = shell;
         this.directory = resolve(options.projectRoot);
     }
     static async create(options) {
-        const adapter = new CodexMissionSession(options);
+        const adapter = new CodexMissionSession(options, await resolveCodexMissionShell(options.trustedPowerShellExecutable));
         adapter.owner = await codexProcessOwner();
         const id = (request) => request.path.id;
         const info = (session) => ({ id: session.id, agent: session.agent, parentID: session.parentID,
@@ -284,7 +287,13 @@ export class CodexMissionSession {
             throw new Error(`Codex Mission requires an OpenAI model for ${agent}. Set model or roleModels explicitly.`);
         const effort = this.options.roleModels?.[agent]?.effort || this.options.effort || selection?.variant || embeddedEffort ||
             stored?.variant || /^variant: (.+)$/m.exec(header)?.[1];
-        return { providerID: "openai", modelID: model, ...(effort ? { variant: effort } : {}) };
+        // The shared OpenCode alias is not a native Codex model. Keep its speed
+        // selection separate, including after shared Task routing and cold resume.
+        const fast = model === "gpt-6-luna-fast";
+        // A model/effort override does not silently change the independent native speed setting.
+        const serviceTier = fast ? "priority" : stored?.serviceTier;
+        return { providerID: "openai", modelID: fast ? "gpt-6-luna" : model,
+            ...(effort ? { variant: effort } : {}), ...(serviceTier ? { serviceTier } : {}) };
     }
     async reportPermissions(host, threadId) {
         await this.options.onEvent?.({ method: "sortie/permissions", threadId,
@@ -298,25 +307,29 @@ export class CodexMissionSession {
         if (!content)
             throw new Error(`Codex Mission role not supported: ${agent}`);
         const route = this.modelRoute(agent, undefined, selection);
-        const model = route.modelID, effort = route.variant;
+        const model = route.modelID;
         const host = this.createHost();
         try {
             const auth = await host.authenticationState();
             if (auth.type !== "chatgpt")
                 throw new Error("Codex Mission requires existing ChatGPT authentication.");
-            const thread = await host.startThread({ cwd: this.directory, model, ephemeral: false, permissions: this.options.permissions,
+            const thread = await host.startThread({ cwd: this.directory, model, serviceTier: route.serviceTier, ephemeral: false, permissions: this.options.permissions,
                 developerInstructions: content.replace(/^---\n[\s\S]*?\n---\n/, "") +
                     "\nHost transport: use the supplied bash/read/write/task functions and sortie tools. They invoke the existing Mission hooks. " +
                     "Use task to run or resume the returned native Task with its exact prompt and subagent_type. Tool failures are feedback for the same Mission. " +
                     "Native shell and file operations outside these functions do not provide Mission validation evidence. " +
+                    (this.options.executeCommand ? "Native apply_patch still uses the native sandbox, not the configured host executor; use the supplied write function for Mission edits. " : "") +
+                    `The bash function runs ${this.shell.description}; supply commands in that shell's syntax. ` +
                     "Declare formal validation as exact executable shell commands from the project root, without prose annotations such as (workdir: ...). " +
                     "Use a root-relative command or an explicit shell cd for a subdirectory formal check. bash workdir changes that invocation only; " +
                     "a command run in another directory does not validate a root-directory entry.",
                 dynamicTools: this.tools(content), config: { "features.shell_tool": false, "features.unified_exec": false } });
             if (this.closed)
                 throw new Error("Codex Mission adapter is closed.");
+            const serviceTier = host.threadServiceTier(thread) ?? route.serviceTier;
             const session = { id: thread, agent, parentID, outcome: "idle", host, history: [], usageBaseline: emptyCodexUsage(), createdAt: Date.now(),
-                model: { providerID: "openai", modelID: host.threadModel(thread) ?? model, ...(effort ? { variant: effort } : {}) } };
+                model: { ...route, modelID: host.threadModel(thread) ?? model,
+                    ...(serviceTier ? { serviceTier } : {}) } };
             this.sessions.set(thread, session);
             await this.reportPermissions(host, thread);
             return session;
@@ -366,9 +379,16 @@ export class CodexMissionSession {
             }
             await host.resumeThread(id, this.options.permissions);
             await this.reportPermissions(host, id);
+            const nativeModel = host.threadModel(id) ?? (typeof thread.model === "string" ? thread.model : undefined);
+            const observedTier = host.threadServiceTier(id), observedEffort = host.threadEffort(id);
+            // An observed native default is authoritative, not a missing value to fill
+            // from an older thread/read snapshot. Older hosts may omit these fields.
+            const nativeTier = observedTier === undefined ? (typeof thread.serviceTier === "string" ? thread.serviceTier : undefined) : observedTier;
+            const nativeEffort = observedEffort === undefined ? (typeof thread.reasoningEffort === "string" ? thread.reasoningEffort : undefined) : observedEffort;
             const session = { id, agent, parentID, outcome: turns.at(-1)?.status === "completed" ? "succeeded" : "interrupted", host, history: [], createdAt: codexNativeTime(thread.createdAt),
-                model: this.modelRoute(agent, { providerID: String(thread.modelProvider), modelID: typeof thread.model === "string" ? thread.model : "unknown",
-                    ...(typeof thread.reasoningEffort === "string" ? { variant: thread.reasoningEffort } : {}) }) };
+                model: this.modelRoute(agent, nativeModel ? { providerID: String(thread.modelProvider), modelID: nativeModel,
+                    ...(nativeTier ? { serviceTier: nativeTier } : {}),
+                    ...(nativeEffort ? { variant: nativeEffort } : {}) } : undefined) };
             const lastUsage = this.observations.find(item => item.threadID === id && item.turnID === turns.at(-1)?.id && item.terminal);
             session.usageBaseline = codexUsageTotal(lastUsage?.total);
             if (lastUsage?.total)
@@ -421,9 +441,9 @@ export class CodexMissionSession {
             description: tool.description, inputSchema: toolSchema(tool.args) }));
         const define = (name, description, properties, required = Object.keys(properties)) => ({ type: "function", name, description, inputSchema: { type: "object", properties, required, additionalProperties: false } });
         const string = { type: "string" };
-        tools.push(define("bash", "Run a foreground command through the native Codex sandbox. Preserve formal validation commands exactly.", { command: string, workdir: string, timeout: { type: "integer", minimum: 1, maximum: 1200000 } }, ["command"]));
-        tools.push(define("read", "Read a UTF-8 file through the native Codex sandbox.", { filePath: string }));
-        tools.push(define("write", "Write a UTF-8 file through the native Codex sandbox.", { filePath: string, content: string }));
+        tools.push(define("bash", `Run a foreground ${this.shell.description} command through the configured executor. Preserve formal validation commands exactly.`, { command: string, workdir: string, timeout: { type: "integer", minimum: 1, maximum: 1200000 } }, ["command"]));
+        tools.push(define("read", "Read a UTF-8 file or list a directory's direct entries through the configured executor. Read directories to discover filenames instead of guessing them.", { filePath: string }));
+        tools.push(define("write", "Write a UTF-8 file through the configured executor and existing Mission hooks.", { filePath: string, content: string }));
         tools.push(define("task", "Run a returned Mission Task, or resume its existing task_id. Preserve the host's prompt and subagent_type.", { description: string, prompt: string, subagent_type: string, task_id: string, model: string, variant: string }, ["description", "prompt", "subagent_type"]));
         return tools;
     }
@@ -434,10 +454,10 @@ export class CodexMissionSession {
         const parts = [{ type: "text", text: prompt }];
         await this.hooks["chat.message"]?.({ sessionID: session.id, messageID, agent: session.agent }, { message, parts });
         // Shared Task routing may select a model; explicit adapter overrides still govern every native turn.
-        if (this.options.model || this.options.effort || this.options.roleModels?.[session.agent])
-            message.model = this.modelRoute(session.agent, message.model);
         if (message.model.providerID !== "openai")
             throw new Error("Codex Mission cannot use a non-OpenAI model route.");
+        message.model = this.modelRoute(session.agent, { ...message.model,
+            serviceTier: message.model.serviceTier ?? session.model.serviceTier });
         session.model = message.model;
         session.history.push({ info: { ...message, role: "user", sessionID: session.id }, parts });
         session.outcome = "running";
@@ -446,9 +466,13 @@ export class CodexMissionSession {
         const accounting = { info: { ...codexUsageInfo(observation), time: { created: startedAt } }, parts: [] };
         session.history.push(accounting);
         try {
+            await this.options.onEvent?.({ method: "sortie/modelRoute", threadId: session.id,
+                params: { agent: session.agent, model: session.model.modelID, effort: session.model.variant ?? null,
+                    serviceTier: session.model.serviceTier ?? null } });
             await onDispatch?.(messageID);
             const result = await session.host.runTurn(session.id, parts.map(part => part.text).join("\n"), { cwd: this.directory, clientUserMessageId: messageID,
                 model: message.model.modelID === "unknown" ? undefined : message.model.modelID, effort: message.model.variant ?? this.options.effort,
+                serviceTier: message.model.serviceTier,
                 onEvent: event => {
                     if (event.method === "thread/tokenUsage/updated" && object(event.params.tokenUsage)) {
                         observation.turnID = typeof event.params.turnId === "string" ? event.params.turnId : observation.turnID;
@@ -523,8 +547,8 @@ export class CodexMissionSession {
                 metadata = { sessionId: child.id, status: result.status };
             }
             else {
-                const command = call.tool === "bash" ? ["/bin/bash", "-c", String(args.command)]
-                    : call.tool === "read" ? [process.execPath, "-e", "process.stdout.write(require('node:fs').readFileSync(process.argv[1],'utf8'))", resolve(this.directory, String(args.filePath))]
+                const command = call.tool === "bash" ? this.shell.command(String(args.command))
+                    : call.tool === "read" ? [process.execPath, "-e", "const fs=require('node:fs'),p=process.argv[1];process.stdout.write(fs.statSync(p).isDirectory()?fs.readdirSync(p,{withFileTypes:true}).map(e=>e.name+(e.isDirectory()?'/':'')).sort().join('\\n')+'\\n':fs.readFileSync(p,'utf8'))", resolve(this.directory, String(args.filePath))]
                         : [process.execPath, "-e", "require('node:fs').writeFileSync(process.argv[1],process.argv[2])", resolve(this.directory, String(args.filePath)), String(args.content)];
                 const executor = this.options.executeCommand ? "host" : "native";
                 await this.options.onEvent?.({ method: "sortie/commandExecution", threadId: session.id,

package/dist/codex/mission-settlement.js

@@ -12,10 +12,11 @@ const commandText = (item) => {
 const powershellEnvelopePayload = (raw, trustedExecutable) => {
     if (!trustedExecutable)
         return undefined;
-    // Windows Codex 0.160 reports a quoted absolute pwsh.exe plus one single-quoted
+    // Windows Codex 0.160/0.162 reports a quoted absolute pwsh.exe plus one single-quoted
     // -Command payload. It may protocol-escape the boundary quotes/backslashes.
-    // Reject every other shell shape, nested quote, option, and trailing token.
-    const match = /^(?:"|\\")([A-Za-z]:[\\/](?:[^"'\r\n]|\\\\)+[\\/]pwsh\.exe)(?:"|\\") -Command '([^'`\r\n]*)'$/iu.exec(raw);
+    // Only the observed optional -NoProfile flag is admitted. Other options,
+    // nested quotes and trailing tokens remain rejected.
+    const match = /^(?:"|\\")([A-Za-z]:[\\/](?:[^"'\r\n]|\\\\)+[\\/]pwsh\.exe)(?:"|\\") (?:-NoProfile )?-Command '([^'`\r\n]*)'$/iu.exec(raw);
     if (!match)
         return undefined;
     const identity = (value) => value.replaceAll("\\\\", "\\").replaceAll("/", "\\").toLowerCase();

package/dist/codex/mission-shell.d.ts

@@ -0,0 +1,8 @@
+export interface CodexMissionShell {
+    readonly description: string;
+    command(source: string): readonly string[];
+}
+/** Keep the source literal; only the host-owned exit trailer is appended. */
+export declare function codexPowerShellCommand(executable: string, source: string): readonly string[];
+/** Resolve the existing host shell, without installation or permission changes. */
+export declare function resolveCodexMissionShell(trustedPowerShellExecutable?: string): Promise<CodexMissionShell>;

package/dist/codex/mission-shell.js

@@ -0,0 +1,22 @@
+import { basename, isAbsolute } from "node:path";
+import { stat } from "node:fs/promises";
+import { resolveValidationExecutable } from "../core/worktree-commit-artifact.js";
+/** Keep the source literal; only the host-owned exit trailer is appended. */
+export function codexPowerShellCommand(executable, source) {
+    return [executable, "-NoProfile", "-NonInteractive", "-Command", source +
+            "\nif (-not $?) { if ($LASTEXITCODE) { exit $LASTEXITCODE }; exit 1 }"];
+}
+/** Resolve the existing host shell, without installation or permission changes. */
+export async function resolveCodexMissionShell(trustedPowerShellExecutable) {
+    if (process.platform !== "win32") {
+        if (trustedPowerShellExecutable)
+            throw new Error("--trusted-pwsh is only supported on Windows.");
+        return { description: "POSIX bash", command: source => ["/bin/bash", "-c", source] };
+    }
+    if (trustedPowerShellExecutable && (!isAbsolute(trustedPowerShellExecutable) || basename(trustedPowerShellExecutable).toLowerCase() !== "pwsh.exe"))
+        throw new Error("Codex Mission requires an absolute existing pwsh.exe path.");
+    const executable = await resolveValidationExecutable(trustedPowerShellExecutable ?? "pwsh.exe");
+    if (!executable || !(await stat(executable)).isFile())
+        throw new Error("Codex Mission requires existing PowerShell 7 (pwsh.exe). Select it with --trusted-pwsh; no shell is installed automatically.");
+    return { description: "Windows PowerShell 7 (not POSIX bash)", command: source => codexPowerShellCommand(executable, source) };
+}

package/dist/core/operator-mission.d.ts

@@ -165,6 +165,7 @@ export interface CodexMissionOwner {
     startTicks?: string;
     generation: string;
     closed?: boolean;
+    platform?: NodeJS.Platform;
 }
 export declare function codexProcessOwner(): Promise<CodexMissionOwner>;
 export declare function codexOwnerGone(owner: CodexMissionOwner | undefined): Promise<boolean>;

package/dist/core/operator-mission.js

@@ -27,7 +27,7 @@ async function codexProcessStart(pid) {
     return ticks;
 }
 export async function codexProcessOwner() {
-    const owner = { pid: process.pid, generation: randomUUID() };
+    const owner = { pid: process.pid, generation: randomUUID(), platform: process.platform };
     if (process.platform === "linux") {
         owner.bootID = (await readFile("/proc/sys/kernel/random/boot_id", "utf8")).trim();
         owner.startTicks = await codexProcessStart(process.pid);
@@ -39,7 +39,20 @@ export async function codexOwnerGone(owner) {
         return false;
     if (owner.closed)
         return true;
-    if (process.platform !== "linux" || !owner.bootID || !owner.startTicks || !Number.isSafeInteger(owner.pid) || owner.pid < 1)
+    if (!Number.isSafeInteger(owner.pid) || owner.pid < 1 || owner.platform && owner.platform !== process.platform)
+        return false;
+    if (process.platform === "win32" && owner.platform === "win32") {
+        // Windows has no /proc identity. Only an absent PID proves this owner gone;
+        // PID reuse, access denial and legacy/unidentified owners stay unresolved.
+        try {
+            process.kill(owner.pid, 0);
+            return false;
+        }
+        catch (error) {
+            return error.code === "ESRCH";
+        }
+    }
+    if (process.platform !== "linux" || !owner.bootID || !owner.startTicks)
         return false;
     try {
         if ((await readFile("/proc/sys/kernel/random/boot_id", "utf8")).trim() !== owner.bootID)
@@ -267,7 +280,7 @@ export class OperatorMissionRuntime {
     async codexRecovery(root, action) {
         const lock = `${this.file(root)}.codex-recovery.lock`;
         const owner = await codexProcessOwner();
-        const marker = `owner.${owner.pid}.${owner.bootID ?? "unknown"}.${owner.startTicks ?? "unknown"}.${owner.generation}`;
+        const marker = `owner.${owner.pid}.${owner.platform === "win32" ? "win32." : ""}${owner.bootID ?? "unknown"}.${owner.startTicks ?? "unknown"}.${owner.generation}`;
         for (let attempt = 0; attempt < 200; attempt++) {
             let acquired = false;
             const staging = `${lock}.${owner.generation}.tmp`;
@@ -294,8 +307,10 @@ export class OperatorMissionRuntime {
             await unlink(join(lock, marker)).catch(() => undefined);
             const names = await readdir(lock).catch(() => []);
             if (names.length === 1) {
-                const match = /^owner\.(\d+)\.([a-f0-9-]+)\.(\d+)\.([a-f0-9-]+)$/.exec(names[0]);
-                if (match && await codexOwnerGone({ pid: Number(match[1]), bootID: match[2], startTicks: match[3], generation: match[4] })) {
+                // Retain legacy Linux markers; old Windows "unknown" owners are not proof.
+                const match = /^owner\.(\d+)\.(?:(linux|win32)\.)?([a-f0-9-]+|unknown)\.(\d+|unknown)\.([a-f0-9-]+)$/.exec(names[0]);
+                if (match && await codexOwnerGone({ pid: Number(match[1]), platform: match[2],
+                    bootID: match[3] === "unknown" ? undefined : match[3], startTicks: match[4] === "unknown" ? undefined : match[4], generation: match[5] })) {
                     // Remove only the dead owner's unique marker; never unlink a replacement owner's file.
                     await unlink(join(lock, names[0])).catch(() => undefined);
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.13.9",
+  "version": "0.13.10",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",