thoth-agents 0.3.10 → 0.3.12

package/dist/cli/codex-plugin-install.d.ts

@@ -1,4 +1,12 @@
 export type CodexPluginSetupAction = 'register-marketplace' | 'install-plugin';
+export type CodexPluginCleanupAction = 'remove-legacy-plugin' | 'remove-legacy-marketplace' | 'remove-legacy-root';
+export interface CodexLegacyCleanupRoot {
+    kind: 'cache' | 'snapshot';
+    marketplaceName: string;
+    path: string;
+    realPath: string;
+    relativePath: string;
+}
 export interface CodexCommandResult {
     exitCode: number;
     stdout: string;
@@ -17,22 +25,28 @@ export interface CodexCommandInvocation {
 }
 export type CodexCommandExecutor = (command: string, args: readonly string[], options: CodexCommandOptions) => CodexCommandResult;
 export interface CodexPluginInstallConfig {
+    codexHome?: string;
     dryRun?: boolean;
+    expectedVersion: string;
+    homeDir?: string;
     projectRoot: string;
     commandExecutor?: CodexCommandExecutor;
 }
 export interface CodexPluginSetupPlanItem {
-    action: CodexPluginSetupAction;
+    action: CodexPluginSetupAction | CodexPluginCleanupAction;
     targetPath: string;
     description: string;
-    command: {
+    command?: {
         executable: 'codex';
         args: string[];
         cwd: string;
     };
+    cleanupRoot?: CodexLegacyCleanupRoot;
 }
 export interface CodexPluginSetupPlan {
+    codexHome: string;
     dryRun: boolean;
+    expectedVersion: string;
     items: CodexPluginSetupPlanItem[];
     diagnostics: string[];
     ready: boolean;

package/dist/cli/index.js

@@ -4,7 +4,7 @@ import {
   getOpenCodeVersion,
   isOpenCodeInstalled,
   opencodeAdapter
-} from "../chunk-TKIDBRM3.js";
+} from "../chunk-5UBJB5QO.js";
 import {
   CODEX_ROLE_NAMES,
   REQUIRED_SKILLS,
@@ -47,7 +47,7 @@ import {
   listOperationHarnesses,
   normalizeEffortSelection,
   syncOpenCodeOwnedSkills
-} from "../chunk-JBG7XMIG.js";
+} from "../chunk-VPVBYBPU.js";
 import {
   ALL_AGENT_NAMES,
   detectCurrentConfig,
@@ -58,7 +58,7 @@ import {
   resolveExecutingPackageVersion,
   updateOpenCodeMainConfig,
   writeLiteConfig
-} from "../chunk-M2WF46BP.js";
+} from "../chunk-DX4U3AD3.js";
 
 // src/cli/index.ts
 import { pathToFileURL } from "url";
@@ -378,6 +378,8 @@ async function install(args, dependencies = {}) {
     const projectRoot = cwd();
     const pluginPlan = buildCodexPluginSetupPlan({
       dryRun: config.dryRun,
+      expectedVersion: packageVersion.version,
+      homeDir: dependencies.homeDir,
       projectRoot
     });
     console.log(formatCodexPluginSetupPlan(pluginPlan));
@@ -416,7 +418,7 @@ async function install(args, dependencies = {}) {
       return 1;
     }
     printSuccess(
-      config.dryRun ? "Codex dry-run complete; no files written" : "Codex plugin installed as thoth-agents@thoth-agents and agent-pack setup complete (restart Codex to activate)"
+      config.dryRun ? "Codex dry-run complete; no files written" : "Codex plugin installed as thoth-agents@thoth-plugins and agent-pack setup complete (restart Codex to activate)"
     );
     return 0;
   }
@@ -449,7 +451,7 @@ async function install(args, dependencies = {}) {
       return 1;
     }
     printSuccess(
-      config.dryRun ? "Claude Code dry-run complete; no files written" : "Claude Code plugin installed as thoth-agents@thoth-agents through the native manager (restart Claude Code or run /reload-plugins to activate)"
+      config.dryRun ? "Claude Code dry-run complete; no files written" : "Claude Code plugin installed as thoth-agents@thoth-plugins through the native manager (restart Claude Code or run /reload-plugins to activate)"
     );
     return 0;
   }

package/dist/cli/tui/index.js

@@ -2,8 +2,8 @@ import {
   defaultTuiOperations,
   effortChoicesForModel,
   listOperationHarnesses
-} from "../../chunk-JBG7XMIG.js";
-import "../../chunk-M2WF46BP.js";
+} from "../../chunk-VPVBYBPU.js";
+import "../../chunk-DX4U3AD3.js";
 
 // src/cli/tui/index.tsx
 import { render } from "ink";

package/dist/config/constants.d.ts

@@ -11,11 +11,11 @@ export declare const CONFIRMED_OPENAI_SUBAGENT_PRESET: {
     };
     readonly librarian: {
         readonly model: "gpt-5.6-luna";
-        readonly effort: "xhigh";
+        readonly effort: "high";
     };
     readonly oracle: {
         readonly model: "gpt-5.6-sol";
-        readonly effort: "xhigh";
+        readonly effort: "high";
     };
     readonly designer: {
         readonly model: "gpt-5.6-sol";
@@ -23,7 +23,7 @@ export declare const CONFIRMED_OPENAI_SUBAGENT_PRESET: {
     };
     readonly quick: {
         readonly model: "gpt-5.6-luna";
-        readonly effort: "xhigh";
+        readonly effort: "low";
     };
     readonly deep: {
         readonly model: "gpt-5.6-sol";

package/dist/harness/adapters/claude-code.d.ts

@@ -13,6 +13,14 @@ export declare const CLAUDE_CODE_SUBAGENT_DEFAULT_MODELS: {
     readonly quick: "haiku";
     readonly deep: "sonnet";
 };
+export declare const CLAUDE_CODE_SUBAGENT_DEFAULT_EFFORTS: {
+    readonly explorer: "low";
+    readonly quick: "low";
+    readonly designer: "medium";
+    readonly deep: "medium";
+    readonly librarian: "high";
+    readonly oracle: "high";
+};
 /**
  * The orchestrator system prompt body. This is the system prompt of the
  * `orchestrator` plugin agent, which the plugin `settings.json` activates as the

package/dist/harness/adapters/codex-surfaces.d.ts

@@ -170,9 +170,9 @@ export declare const CODEX_SURFACES: readonly [{
     readonly id: "per-agent-runtime-permissions";
     readonly target: "permission-control";
     readonly status: "unsupported";
-    readonly fields: ["named installed-role selection", "per-role permission enforcement", "per-agent tool allow/deny equivalent to OpenCode permissions"];
+    readonly fields: ["conditional agent_type selection", "role-prefixed fallback", "per-role permission enforcement", "per-agent tool allow/deny equivalent to OpenCode permissions"];
     readonly diagnosticCode: "codex.permission.memory.enforcement_gap";
-    readonly summary: "Named installed-role selection and per-role permission enforcement are instruction-only because collaboration.spawn_agent has no role selector; OpenCode-style per-agent MCP/tool deny maps are not validated.";
+    readonly summary: "Static packages cannot guarantee active-runtime named-role selection: use collaboration.spawn_agent agent_type when exposed, otherwise the bounded role-prefixed fallback is instruction-only; per-role permission enforcement and OpenCode-style MCP/tool deny maps are not validated.";
     readonly evidence: "Codex approvals/security docs cover sandbox and approval policies, not exact OpenCode per-agent permission maps.";
     readonly fallback: "instruction-only";
 }, {

package/dist/harness/core/agent-pack.d.ts

@@ -8,6 +8,9 @@ export interface AgentRoleContract {
     canMutateWorkspace: boolean;
     scope: string;
     responsibility: string;
+    useWhen: string[];
+    doNotUseWhen: string[];
+    escalateWhen: string[];
     writeScope?: string[];
     toolGovernance: string[];
     verification: string[];
@@ -15,8 +18,38 @@ export interface AgentRoleContract {
 export interface OrchestrationPolicy {
     maxDelegationDepth: number;
     singleWriter: boolean;
+    implementationOwnership: ImplementationOwnershipPolicy;
+    taskShaping: TaskShapingPolicy;
+    specialistDirectory: SpecialistDecision[];
     rules: string[];
 }
+export type TaskShapingStep = 'bound-work' | 'map-dependencies' | 'assign-ownership' | 'select-specialists' | 'mark-ready-and-blocked' | 'dispatch-ready-wave' | 'wait-for-terminal-evidence' | 'reconcile-and-verify';
+export interface TaskShapingPolicy {
+    steps: TaskShapingStep[];
+    nativeAuthority: boolean;
+    boundedWidth: boolean;
+    decisions: {
+        dependency: string;
+        ownershipConflict: string;
+        readyWave: string;
+        terminalEvidence: string;
+        degradation: string;
+    };
+}
+export interface SpecialistDecision {
+    role: Exclude<AgentRoleName, 'orchestrator'>;
+    selectWhen: string;
+    rejectWhen: string;
+}
+export type ImplementationOwner = 'orchestrator' | 'designer' | 'quick' | 'deep';
+export interface ImplementationOwnershipPolicy {
+    eligibleOwners: ImplementationOwner[];
+    routeIndependent: boolean;
+    delegationBenefits: string[];
+    rootContinuityBenefits: string[];
+    userDirection: string;
+    insufficientSignals: string[];
+}
 export interface AgentPackContract {
     roles: AgentRoleContract[];
     orchestrationPolicy: OrchestrationPolicy;
@@ -29,10 +62,13 @@ export declare const AGENT_ROLES: readonly [{
     readonly mode: "adaptive-root";
     readonly dispatch: "root-coordinator";
     readonly canMutateWorkspace: true;
-    readonly scope: "requirements, SDD coordination, routing, bounded direct work, decisions, and synthesis";
-    readonly responsibility: "Keep the task coherent, own sequential specification, planning, task, convergence, and archive coordination, act directly when work is clear and bounded, and delegate only for net gain.";
-    readonly toolGovernance: ["may inspect and edit bounded direct work, but every verification is delegated to oracle", "loads the matching thoth-sdd phase contract on demand instead of carrying every phase protocol in its prompt", "owns governed coordination writes under openspec/ and uses append-only tasks.md updates during convergence", "delegates independent or specialist work only when it produces a net gain", "keeps requirements, decisions, and final synthesis in the root thread"];
-    readonly verification: ["delegates selected plan-review and every verify phase to oracle; plan review stays optional and final verification stays mandatory", "consolidates summarized evidence returned by child agents"];
+    readonly scope: "requirements, SDD coordination, routing, bounded implementation, decisions, and synthesis";
+    readonly responsibility: "Keep requirements, decisions, sequential SDD coordination, and final synthesis in the root thread; evaluate implementation ownership independently in every route, implement directly or delegate by demonstrated net gain, and run focused verification for trivial deterministic Direct work.";
+    readonly useWhen: ["Coordinate requirements, governed artifacts, routing, and synthesis.", "Implement an accepted mutable surface in any route when accumulated context and continuity outweigh delegation overhead."];
+    readonly doNotUseWhen: ["Not for independent plan review or Oracle-required final verification."];
+    readonly escalateWhen: ["Delegate implementation when specialization, context isolation, or independent bounded work creates a demonstrated net gain; then select designer, quick, or deep by task shape."];
+    readonly toolGovernance: ["may inspect and edit the accepted bounded implementation surface in every route and may verify trivial deterministic Direct work without self-approval", "loads the matching thoth-sdd phase contract on demand instead of carrying every phase protocol in its prompt", "owns governed coordination writes under openspec/ and uses append-only tasks.md updates during convergence", "delegates independent or specialist work only when it produces a net gain", "keeps requirements, decisions, and final synthesis in the root thread"];
+    readonly verification: ["runs focused checks for trivial deterministic Direct work while final verification remains mandatory", "delegates selected plan review plus Accelerated, Full, and material-risk Direct final verification to a fresh oracle", "consolidates summarized evidence returned by child agents"];
 }, {
     readonly name: "explorer";
     readonly mode: "read-only";
@@ -40,6 +76,9 @@ export declare const AGENT_ROLES: readonly [{
     readonly canMutateWorkspace: false;
     readonly scope: "local repository discovery";
     readonly responsibility: "Resolve broad or uncertain repository questions and return distilled evidence.";
+    readonly useWhen: ["Repository ownership or behavior is broad or uncertain."];
+    readonly doNotUseWhen: ["Not for implementation, edits, or known narrow questions."];
+    readonly escalateWhen: ["Send external evidence to librarian and mutation scope to root."];
     readonly toolGovernance: ["uses read, search, and code-navigation tools only", "does not mutate files or delegate further"];
     readonly verification: ["reports inspected paths, confidence, and remaining gaps"];
 }, {
@@ -49,6 +88,9 @@ export declare const AGENT_ROLES: readonly [{
     readonly canMutateWorkspace: false;
     readonly scope: "authoritative external research with local confirmation when needed";
     readonly responsibility: "Gather current authoritative evidence and separate documented facts from inference.";
+    readonly useWhen: ["Current authoritative external evidence is required."];
+    readonly doNotUseWhen: ["Not for implementation, edits, or purely local discovery."];
+    readonly escalateWhen: ["Report contradictory or insufficient sources to root."];
     readonly toolGovernance: ["uses research and read-only local tools", "does not mutate files or delegate further"];
     readonly verification: ["provides direct sources for substantive external claims"];
 }, {
@@ -57,7 +99,10 @@ export declare const AGENT_ROLES: readonly [{
     readonly dispatch: "synchronous-task-only";
     readonly canMutateWorkspace: false;
     readonly scope: "diagnosis, architecture, optional plan review, and independent verification";
-    readonly responsibility: "Independently review plans when the user requests it and perform every implementation verification, exposing correctness risks and judging whether results satisfy their contracts.";
+    readonly responsibility: "Independently review plans when the user requests it and provide independent judgment for artifact-backed or material-risk final verification, exposing correctness risks and judging whether results satisfy their contracts.";
+    readonly useWhen: ["Selected plan review, persistent diagnosis, material architecture or security risk, contradictory evidence, high failure cost, or artifact-backed final verification needs independent judgment."];
+    readonly doNotUseWhen: ["Not for implementation, mutation, persistence, or self-review."];
+    readonly escalateWhen: ["Return blockers and remediation anchors to root."];
     readonly toolGovernance: ["performs read-only analysis and independent review and is never the implementer of the work it judges", "does not implement, persist artifacts, or delegate further"];
     readonly verification: ["separates observations, risks, and recommendations"];
 }, {
@@ -67,6 +112,9 @@ export declare const AGENT_ROLES: readonly [{
     readonly canMutateWorkspace: true;
     readonly scope: "UI/UX decisions, implementation, and visual verification";
     readonly responsibility: "Own user-facing implementation choices and visual quality for UI work.";
+    readonly useWhen: ["User-facing UI/UX, interaction, accessibility, or visual quality is material."];
+    readonly doNotUseWhen: ["Not for backend-only, non-visual, or correctness-heavy cross-cutting work."];
+    readonly escalateWhen: ["Escalate coupled contracts, migrations, or high risk to deep."];
     readonly toolGovernance: ["may edit focused UI/UX files", "owns screenshots and visual QA", "does not delegate further"];
     readonly verification: ["includes visual verification when applicable"];
 }, {
@@ -76,6 +124,9 @@ export declare const AGENT_ROLES: readonly [{
     readonly canMutateWorkspace: true;
     readonly scope: "fast bounded implementation";
     readonly responsibility: "Implement narrow, clear, low-risk changes within an explicitly bounded surface.";
+    readonly useWhen: ["Known narrow mechanical low-risk work has exact targets."];
+    readonly doNotUseWhen: ["Not for coupled contracts, migrations, broad discovery, concurrency, edge cases, or high risk."];
+    readonly escalateWhen: ["Escalate discovery, coupling, edge cases, or higher risk to deep."];
     readonly toolGovernance: ["edits only bounded targets", "escalates when discovery or correctness risk exceeds the assignment", "does not delegate further"];
     readonly verification: ["runs the smallest sufficient focused check"];
 }, {
@@ -85,6 +136,9 @@ export declare const AGENT_ROLES: readonly [{
     readonly canMutateWorkspace: true;
     readonly scope: "correctness-critical implementation and verification";
     readonly responsibility: "Handle multi-file, edge-case-heavy, or high-risk implementation with full local context.";
+    readonly useWhen: ["Implementation is multi-file, edge-case-heavy, migration, concurrency, shared-contract, or high-risk."];
+    readonly doNotUseWhen: ["Not for visual-only work or narrow known low-risk edits."];
+    readonly escalateWhen: ["Return product or architecture choices to root."];
     readonly toolGovernance: ["may edit implementation and tests within the assigned surface", "validates shared behavior against related code and call sites", "does not delegate further"];
     readonly verification: ["reports focused checks and relevant edge-case evidence"];
 }];
@@ -93,4 +147,5 @@ export declare const AGENT_RETURN_CONTRACT: readonly ["conclusion", "evidence",
 export declare const VERIFICATION_PROTOCOL: readonly ["Completion reports identify changed files and verification evidence.", "Behavior changes receive the smallest sufficient automated check or a declared manual check.", "Visual changes receive designer-owned visual QA when applicable."];
 export declare const AGENT_PACK_CONTRACT: AgentPackContract;
 export declare function getAgentRole(name: AgentRoleName): AgentRoleContract;
+export declare function renderAgentRoutingDescription(role: AgentRoleContract): string;
 export declare function getAgentPackContract(): AgentPackContract;

package/dist/harness/core/sdd.d.ts

@@ -5,6 +5,14 @@ export type SddIntent = 'documentation' | 'mechanical' | 'behavior' | 'architect
 export type SddScope = 'local' | 'multi-file' | 'cross-cutting';
 export type SddClarity = 'clear' | 'partial' | 'uncertain';
 export type SddRisk = 'low' | 'medium' | 'high';
+export type SddFinalVerificationRisk = 'trivial-deterministic' | 'architecture' | 'security' | 'cross-cutting-regression' | 'persistent-diagnosis' | 'contradictory-evidence' | 'high-failure-cost' | 'material-uncertainty';
+export type SddFinalVerificationOwner = 'orchestrator' | 'oracle';
+export interface SddFinalVerificationDecision {
+    verificationRequired: true;
+    owner: SddFinalVerificationOwner;
+    oracleRequired: boolean;
+    freshOracleRequired: boolean;
+}
 export type SddPlanningMode = 'none' | 'fast-forward' | 'gated';
 export type SddValidationGate = 'specify' | 'plan' | 'tasks' | 'checklist' | 'ready' | 'closeout';
 export type SddArtifactRevisionPolicy = 'none' | 'revalidate-affected-downstream';
@@ -24,6 +32,7 @@ export interface SddRoutingDecision {
 }
 export type SddPhaseId = 'explore' | 'specify' | 'clarify' | 'plan' | 'checklist' | 'tasks' | 'plan-review' | 'implement' | 'verify' | 'converge' | 'archive';
 export type SddPhaseActivation = 'required' | 'conditional';
+export type SddPhaseOwner = AgentRoleName | 'adaptive-implementation' | 'adaptive-verification';
 export interface SddPhaseContract {
     id: SddPhaseId;
     order: number;
@@ -32,7 +41,7 @@ export interface SddPhaseContract {
     activation: SddPhaseActivation;
     prerequisites: SddPhaseId[];
     producesArtifact: boolean;
-    defaultAgentRole: AgentRoleName;
+    defaultAgentRole: SddPhaseOwner;
     eligibleAgentRoles: AgentRoleName[];
     reason: string;
     condition?: string;
@@ -160,8 +169,8 @@ export declare const SDD_PHASES: readonly [{
     readonly producesArtifact: true;
     readonly defaultAgentRole: "oracle";
     readonly eligibleAgentRoles: ["oracle"];
-    readonly reason: "Offer independent blocker-only plan review when the user selects it after planning passes ready.";
-    readonly condition: "Activate only after ready when the user chooses Review plan with Oracle (Recommended).";
+    readonly reason: "Offer independent blocker-only plan review after explicit or bounded recommended-default selection once planning passes ready.";
+    readonly condition: "Activate after ready when review is selected explicitly or by the bounded recommended default after three answerless attempts.";
 }, {
     readonly id: "implement";
     readonly order: 7;
@@ -170,9 +179,9 @@ export declare const SDD_PHASES: readonly [{
     readonly activation: "required";
     readonly prerequisites: ["tasks"];
     readonly producesArtifact: false;
-    readonly defaultAgentRole: "orchestrator";
+    readonly defaultAgentRole: "adaptive-implementation";
     readonly eligibleAgentRoles: ["orchestrator", "designer", "quick", "deep"];
-    readonly reason: "Let the adaptive root act directly or route the settled work to one writer.";
+    readonly reason: "Choose root, designer, quick, or deep from task-shaped net gain independently from the SDD route.";
 }, {
     readonly id: "verify";
     readonly order: 8;
@@ -181,9 +190,9 @@ export declare const SDD_PHASES: readonly [{
     readonly activation: "required";
     readonly prerequisites: ["implement"];
     readonly producesArtifact: true;
-    readonly defaultAgentRole: "oracle";
-    readonly eligibleAgentRoles: ["oracle"];
-    readonly reason: "Independently judge the result against requirements, contracts, and focused checks.";
+    readonly defaultAgentRole: "adaptive-verification";
+    readonly eligibleAgentRoles: ["orchestrator", "oracle"];
+    readonly reason: "Keep verification mandatory while selecting root for trivial deterministic Direct checks and a fresh Oracle for material-risk Direct or artifact-backed judgment.";
 }, {
     readonly id: "converge";
     readonly order: 9;
@@ -356,32 +365,32 @@ export declare const SDD_PHASE_PROTOCOLS: readonly [{
     readonly outputSchema: ["tasks.md path", "requirement coverage", "dependency order"];
     readonly doneWhen: ["Every FR and buildable SC has executable task coverage and every task has a verification step."];
     readonly blockingConditions: ["A task requires an unresolved requirement, architecture choice, or hidden prerequisite."];
-    readonly handoff: ["After ready, pass spec.md, plan.md, tasks.md, dependencies, and verification commands to the user-selected plan-review path or implement."];
+    readonly handoff: ["After ready, pass spec.md, plan.md, tasks.md, dependencies, and verification commands to the explicitly or bounded-default selected plan-review path, or implement when the user explicitly proceeds without review."];
 }, {
     readonly id: "plan-review";
-    readonly objective: "Perform the user-selected read-only blocker review before Accelerated or Full implementation.";
-    readonly requiredInputs: ["spec.md", "plan.md", "tasks.md", "Optional active requirements checklist", "Project constitution", "Explicit user choice to review after the ready gate"];
-    readonly instructions: ["Load the bundled plan-reviewer skill and review executability, completeness, correctness, and coherence without redesigning the plan.", "Require task coverage for every FR and buildable SC; assess outcome SC as measurable verification targets without manufacturing implementation tasks.", "Return exact [OKAY] or [REJECT] semantics, default to [OKAY], and report at most three true blockers with the smallest fixes.", "Provide the reviewed artifact set so root can persist plan-review.md with SHA-256 freshness evidence; Oracle never writes it.", "Keep plan-review approval separate from implementation confirmation and mandatory final verify."];
+    readonly objective: "Perform the explicitly or recommended-default selected read-only blocker review before Accelerated or Full implementation.";
+    readonly requiredInputs: ["spec.md", "plan.md", "tasks.md", "Optional active requirements checklist", "Project constitution", "Review selection after the ready gate, from an explicit answer or the bounded recommended fallback"];
+    readonly instructions: ["At the ready gate, make at most three total attempts when the native review question returns answerless; after the third answerless result, treat Review plan with Oracle (Recommended) as selected, while any explicit Proceed without review answer wins.", "Load the bundled plan-reviewer skill and review executability, completeness, correctness, and coherence without redesigning the plan.", "Require task coverage for every FR and buildable SC; assess outcome SC as measurable verification targets without manufacturing implementation tasks.", "For every declared parallel group, independently assess semantic independence, each lane path union and owner, real cross-lane data flow, prerequisites and barrier, and whether native capacity supports dispatch-before-wait waves with refill; require a truthful sequential fallback when concurrency is unavailable or unproven.", "Return exact [OKAY] or [REJECT] semantics, default to [OKAY], and report at most three true blockers with the smallest fixes.", "After [REJECT], root must repair actionable same-intent planning artifacts, revalidate affected gates, and start a fresh Oracle approval round until [OKAY]; stop instead on a material human-owned blocker.", "Provide the reviewed artifact set so root can persist plan-review.md with SHA-256 freshness evidence; Oracle never writes it.", "Keep plan-review approval separate from implementation confirmation and mandatory final verify."];
     readonly allowedWrites: ["None; Oracle is read-only. Root persists plan-review.md when review runs."];
-    readonly outputSchema: ["status: [OKAY] or [REJECT]", "zero to three blocker findings with smallest fixes", "non-blocking cautions", "requirement coverage percentage", "constitution alignment", "reviewed artifact freshness manifest input"];
+    readonly outputSchema: ["status: [OKAY] or [REJECT]", "zero to three blocker findings with smallest fixes", "non-blocking cautions", "requirement coverage percentage", "parallel executability disposition when tasks declare groups or an evidence-backed None reason", "constitution alignment", "reviewed artifact freshness manifest input"];
     readonly doneWhen: ["Oracle has returned an exact status and every true blocker has a concrete remediation anchor."];
     readonly blockingConditions: ["[REJECT] blocks the review path until root repairs planning blockers, the user explicitly proceeds without review, or an explicit override is recorded."];
-    readonly handoff: ["On [OKAY], root persists review evidence, presents the approved-plan overview, and asks whether to implement or stop.", "A plan-review result never satisfies mandatory final verify."];
+    readonly handoff: ["On [OKAY], root persists review evidence and summarizes the approved scope, approach, ownership, verification, and material risks before asking Implement (Recommended) or Stop.", "For an answerless implementation question, root makes at most three total attempts; after the third answerless result, implementation counts as selected, while any explicit Stop answer wins.", "[OKAY] alone does not authorize implementation before that explicit choice or bounded fallback resolves.", "A plan-review result never satisfies mandatory final verify."];
 }, {
     readonly id: "implement";
     readonly objective: "Execute the accepted task slice with one writer and focused verification.";
-    readonly requiredInputs: ["User request or assigned tasks.md slice", "Accepted spec.md and plan.md when present", "Exact implementation boundaries and verification commands"];
-    readonly instructions: ["The root marks selected artifact-backed tasks [~] before dispatch and marks them [x] only after task-specific evidence is verified.", "Use test-first or TDD execution for behavior changes and preserve one writer per mutable surface.", "Edit only the assigned implementation surface and report justified deviations from the accepted plan.", "When evidence refines the same intent, return it to root so canonical artifacts are updated and only affected downstream artifacts and gates are revalidated.", "Start a new change instead of expanding the active one when the intent changes."];
+    readonly requiredInputs: ["User request or assigned tasks.md slice", "Accepted spec.md and plan.md when present", "Exact implementation boundaries and verification commands", "Implementation owner decision (orchestrator, designer, quick, or deep), exact mutable surface, requirement anchors, and task-shape/net-gain rationale"];
+    readonly instructions: ["The root marks selected artifact-backed tasks [~] before implementation and marks them [x] only after task-specific evidence is verified; Direct or no-artifact work has no task state.", "The SDD route governs artifacts and gates, not implementation ownership; choose root or a specialist from explicit safe user direction and demonstrated task-shaped net gain.", "When root owns implementation, retain the accepted mutable surface with no child dispatch; when a specialist owns implementation, send one bounded dispatch with the exact surface, requirements, and verification.", "Use test-first or TDD execution for behavior changes and preserve one writer per mutable surface.", "Balance specialization, context isolation, independent work, quality, latency, and total cost against sequential dependency, shared mutable state, accumulated context, rediscovery, and coordination overhead.", "Only after deciding delegation creates net gain, select designer for user-facing UI/UX, quick for known narrow low-risk work, and deep for coupled multi-file, edge-case-heavy, migration, concurrency, shared-contract, or high-risk work.", "Record the owner decision, rationale, exact mutable surface, requirement anchors, and verification before implementation or dispatch.", "Proven independent surfaces may use separate writers with non-overlapping files; overlapping or compatibility-coupled surfaces use one deep writer and ordered handoffs.", "Quick and designer must escalate before expanding into deep-risk or compatibility-coupled scope.", "Edit only the assigned implementation surface and report justified deviations from the accepted plan.", "When evidence refines the same intent, return it to root so canonical artifacts are updated and only affected downstream artifacts and gates are revalidated.", "Start a new change instead of expanding the active one when the intent changes."];
     readonly allowedWrites: ["Assigned product and test files", "Root only: task checkbox transitions in openspec/changes/<feature>/tasks.md; child writers must not edit task state."];
     readonly outputSchema: ["status: completed | partial | failed", "per-task outcome", "files changed", "executed verification and results", "deviations, issues, and remaining work"];
     readonly doneWhen: ["The assigned task slice is complete and its focused checks pass with concrete evidence."];
     readonly blockingConditions: ["A task needs scope expansion, a material unresolved decision, or fails repeatedly without a safe bounded recovery."];
-    readonly handoff: ["Pass changed files, per-task evidence, deviations, and verification results to verify."];
+    readonly handoff: ["Pass changed files, per-task evidence, deviations, and verification results into the route- and risk-aware final-verification decision."];
 }, {
     readonly id: "verify";
     readonly objective: "Judge the implementation against accepted requirements using executed evidence.";
     readonly requiredInputs: ["Implemented change or task results", "spec.md, plan.md, and tasks.md for artifact-backed routes", "Changed files and project verification commands"];
-    readonly instructions: ["Oracle must be independent from the implementation writer; self-review never satisfies this phase.", "Run or inspect the smallest sufficient executed checks; static confidence alone is not evidence.", "Judge completeness, correctness, and coherence independently so a passing test cannot hide missing or contradictory scope.", "Build a compliance matrix from every accepted requirement to code and executed checks.", "Record every outcome SC as PASS with concrete observed evidence or RISK with an explicit residual-risk entry.", "For accelerated and full routes, the root persists the read-only oracle result as verify-report.md."];
+    readonly instructions: ["Trivial deterministic Direct work may use root-owned focused verification; materially risky Direct plus Accelerated and Full final verification use a fresh independent Oracle, and no implementation writer self-approves.", "Run or inspect the smallest sufficient executed checks; static confidence alone is not evidence.", "Judge completeness, correctness, and coherence independently so a passing test cannot hide missing or contradictory scope.", "Build a compliance matrix from every accepted requirement to code and executed checks.", "Record every outcome SC as PASS with concrete observed evidence or RISK with an explicit residual-risk entry.", "For accelerated and full routes, the root persists the read-only oracle result as verify-report.md."];
     readonly allowedWrites: ["Root persistence only: openspec/changes/<feature>/verify-report.md for accelerated and full routes"];
     readonly outputSchema: ["verdict: pass | fail", "compliance matrix", "executed checks and results", "critical issues with remediation anchors", "warnings and residual risks"];
     readonly doneWhen: ["Every accepted requirement is represented in the compliance matrix and the verdict matches the evidence."];
@@ -418,7 +427,11 @@ export declare function getSddPhaseProtocol(id: SddPhaseId): SddPhaseProtocol;
 export declare function getSddPhaseProtocolsForRole(role: AgentRoleName): SddPhaseProtocol[];
 export declare function renderSddPhaseDispatchEnvelope(input: SddPhaseDispatchInput): string;
 export declare function renderSddPhaseDispatchTemplate(): string;
-export declare function getSddPhaseOwner(_route: SddRoute, phaseId: SddPhaseId): AgentRoleName;
+export declare function getSddFinalVerificationDecision({ route, risk, }: {
+    route: SddRoute;
+    risk: SddFinalVerificationRisk;
+}): SddFinalVerificationDecision;
+export declare function getSddPhaseOwner(route: SddRoute, phaseId: SddPhaseId, verificationRisk?: SddFinalVerificationRisk): SddPhaseOwner;
 export declare function getRequiredSddPhaseOrder(route: SddRoute): SddPhaseId[];
 export declare function canEnterSddPhase({ route, completed, target, }: {
     route: SddRoute;

package/dist/harness/writers/codex-plugin-package.d.ts

@@ -11,6 +11,7 @@ export interface CodexPluginPackageAsset {
     sourcePath?: string;
 }
 export interface CodexPluginHookDefinition extends CodexHookValidationInput {
+    matcher?: string;
     handler: CodexHookValidationInput['handler'] & {
         command?: unknown;
     };

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   renderOpenCodeAgentConfigs,
   spawn,
   spawnSync
-} from "./chunk-TKIDBRM3.js";
+} from "./chunk-5UBJB5QO.js";
 import {
   POLL_INTERVAL_BACKGROUND_MS,
   context7,
@@ -12,7 +12,7 @@ import {
   grep_app,
   loadPluginConfig,
   stripJsonComments
-} from "./chunk-M2WF46BP.js";
+} from "./chunk-DX4U3AD3.js";
 
 // src/index.ts
 import { fileURLToPath as fileURLToPath3 } from "url";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-agents",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "description": "Adaptive multi-harness orchestration with seven roles, runtime-autonomous Spec Kit-compatible SDD routes, and external provider boundaries.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -36,8 +36,6 @@
     "dist",
     "skills",
     "plugin",
-    ".agents/plugins/marketplace.json",
-    ".claude-plugin/marketplace.json",
     "thoth-agents.schema.json",
     "README.md",
     "LICENSE"
@@ -47,6 +45,7 @@
     "generate-schema": "tsx scripts/generate-schema.ts",
     "integration:sync": "tsx src/harness/generate-integration-packages.ts",
     "integration:verify": "vitest run src/harness/generate-integration-packages.test.ts src/harness/integration-lifecycle.test.ts",
+    "setup:codex:local": "pnpm run build && tsx scripts/setup-codex-local.ts",
     "release:notes": "tsx scripts/generate-release-notes.ts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
@@ -56,7 +55,8 @@
     "check:ci": "biome check .",
     "dev": "pnpm run build && opencode",
     "prepublishOnly": "pnpm run build && pnpm run integration:verify",
-    "version": "pnpm run integration:sync && pnpm run integration:verify && git add -- plugin .agents/plugins/marketplace.json .claude-plugin/marketplace.json",
+    "version": "pnpm run integration:sync && pnpm run integration:verify && git add -- plugin",
+    "release:marketplace": "node scripts/publish-marketplace.mjs",
     "release:patch": "npm version patch --ignore-scripts=false && git push --follow-tags",
     "release:minor": "npm version minor --ignore-scripts=false && git push --follow-tags",
     "release:major": "npm version major --ignore-scripts=false && git push --follow-tags"

package/plugin/.claude-plugin/.thoth-agents-plugin-assets.json

@@ -9,37 +9,37 @@
     {
       "path": "agents/deep.md",
       "kind": "agent-config",
-      "sha256": "sha256:207ea18daee8dadbf5b201a44c7c9822ec1c1b57b780d0a11ae96147f9d68b35"
+      "sha256": "sha256:f00254f54d1e4226247c3acc1f97d718d200939031ee846cdcad5178f82e2311"
     },
     {
       "path": "agents/designer.md",
       "kind": "agent-config",
-      "sha256": "sha256:b465f25c864e7321c82780fda624652a603a26b8f4f76f089c48557deff82aaa"
+      "sha256": "sha256:506bddde48c14e39ec40fd940ca0993bd468d484f8d461a14c39acf85e878a20"
     },
     {
       "path": "agents/explorer.md",
       "kind": "agent-config",
-      "sha256": "sha256:59b091ec3102a6fe8ae0832b38f7a68031e8fba7b99a920fce61248e591e47d1"
+      "sha256": "sha256:3e622eee39d16224fdb22dd29a06da154e9b21273b1da61590b675f77433e1f3"
     },
     {
       "path": "agents/librarian.md",
       "kind": "agent-config",
-      "sha256": "sha256:accac9b10ff16cafaf389c2ceda65138d2d0222aaa451780ff3c4fdbf0362e75"
+      "sha256": "sha256:0d95292215a64535e8eabca729f9c4778cdaa8542b2467efe5895d9f082d56cb"
     },
     {
       "path": "agents/oracle.md",
       "kind": "agent-config",
-      "sha256": "sha256:b5a2334cc0b52fb95281cb46fb9c2a6fc1df9f87faefe0e47838df270992bfe0"
+      "sha256": "sha256:212c8598b510200386c133e37fdc5a6caf9156d89f70dbf4e4a2cb68653cf93f"
     },
     {
       "path": "agents/orchestrator.md",
       "kind": "agent-config",
-      "sha256": "sha256:9a1a9de425e7499110e457b58481d953391d07841dc319f0f8c7b09d64fa8998"
+      "sha256": "sha256:fe44e6849122ceb54a4e31962ce9e48db1b3f36ff5302b4a317695e12a2099ba"
     },
     {
       "path": "agents/quick.md",
       "kind": "agent-config",
-      "sha256": "sha256:b22837c17f020d4b8c6faa7fc88de0d1d801909f988d0f90c8571b3d9c5d491c"
+      "sha256": "sha256:f82b9658bd19576c2ec611f28ea37115f316200cc6d7ffee10d873db8707cc80"
     },
     {
       "path": "settings.json",

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-agents",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "description": "Adaptive multi-harness agent pack with seven roles and a runtime-autonomous Spec Kit-compatible SDD bundle for Claude Code.",
   "author": {
     "name": "thoth-agents"

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-agents",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "description": "Bundled Spec Kit-compatible SDD skills and MCP configuration; the seven-role global Codex layer requires thoth-agents CLI setup.",
   "skills": "./skills/",
   "mcpServers": "./codex.mcp.json"