thoth-agents 0.9.8 → 0.9.9

package/dist/cli/index.js

@@ -4,7 +4,7 @@ import {
   getOpenCodeVersion,
   isOpenCodeInstalled,
   opencodeAdapter
-} from "../chunk-V5GDCWFR.js";
+} from "../chunk-RN2ERZLZ.js";
 import {
   CODEX_PLUGIN_ID,
   CODEX_ROLE_NAMES,
@@ -76,11 +76,11 @@ import {
   safeAtomicWriteFileSync,
   scalarLocation,
   syncOpenCodeOwnedSkills
-} from "../chunk-EDGQVTV3.js";
+} from "../chunk-2ER6FKVC.js";
 import "../chunk-62L3ORXN.js";
 import {
   piAdapter
-} from "../chunk-QQV5S3TW.js";
+} from "../chunk-VHQMTZ5O.js";
 import {
   ALL_AGENT_NAMES,
   detectCurrentConfig,
@@ -91,7 +91,7 @@ import {
   resolveExecutingPackageVersion,
   updateOpenCodeMainConfig,
   writeLiteConfig
-} from "../chunk-ARUBELNT.js";
+} from "../chunk-RVQ6IIBR.js";
 
 // src/cli/index.ts
 import { pathToFileURL } from "url";

package/dist/cli/pi-tool-config.d.ts

@@ -24,7 +24,6 @@ export interface PiToolSaveResult {
 export interface PiSpecialistToolOverrides {
     tools?: string[];
     disallowedTools?: string[];
-    subagentMode?: 'task' | 'background';
 }
 export declare function validatePiSpecialistTools(tools: readonly string[]): void;
 export declare function readPiSpecialistToolOverrides(content: string): PiSpecialistToolOverrides;

package/dist/cli/tui/index.js

@@ -2,10 +2,10 @@ import {
   defaultTuiOperations,
   effortChoicesForModel,
   listOperationHarnesses
-} from "../../chunk-EDGQVTV3.js";
+} from "../../chunk-2ER6FKVC.js";
 import "../../chunk-62L3ORXN.js";
-import "../../chunk-QQV5S3TW.js";
-import "../../chunk-ARUBELNT.js";
+import "../../chunk-VHQMTZ5O.js";
+import "../../chunk-RVQ6IIBR.js";
 
 // src/cli/tui/index.tsx
 import { render } from "ink";

package/dist/harness/gate-hook-script.d.ts

@@ -0,0 +1,2 @@
+/** Standalone ESM runtime shared by the explicitly declared Claude and Codex hooks. */
+export declare function renderGateHookScript(): string;

package/dist/harness/writers/claude-code-plugin-package.d.ts

@@ -1,5 +1,5 @@
 import type { HarnessArtifact, HarnessDiagnostic } from '../types';
-export declare const CLAUDE_PLUGIN_MANIFEST_FIELDS: readonly ["name", "version", "description", "author"];
+export declare const CLAUDE_PLUGIN_MANIFEST_FIELDS: readonly ["name", "version", "description", "author", "hooks"];
 export interface ClaudeCodePluginAuthor {
     name?: string;
     email?: string;
@@ -10,13 +10,13 @@ export interface ClaudeCodePluginManifest {
     version: string;
     description: string;
     author?: ClaudeCodePluginAuthor | string;
+    hooks?: string;
 }
 export interface ClaudeCodePluginPackageInput {
     manifest: ClaudeCodePluginManifest;
     /**
-     * Already-rendered plugin component artifacts (subagents, `.mcp.json`,
-     * `hooks/`, skills). Auto-discovered by Claude Code, so the manifest does not
-     * reference them; the writer records their provenance.
+     * Already-rendered plugin components. Default paths are auto-discovered;
+     * custom hook paths are referenced by the manifest. The writer records provenance.
      */
     componentArtifacts: HarnessArtifact[];
 }

package/dist/harness/writers/pi-agent.d.ts

@@ -12,7 +12,6 @@ export interface PiAgentDefinitionInput {
     model?: string;
     effort?: string;
     skills?: readonly string[];
-    subagentMode: 'task' | 'background';
 }
 export declare function getPiSpecialistDefaultTools(role: PiSpecialistRole): string[];
 export declare function renderPiAgentDefinition(input: PiAgentDefinitionInput): string;

package/dist/hooks/index.d.ts

@@ -3,3 +3,4 @@ export { createAutoUpdateCheckerHook } from './auto-update-checker';
 export { createDelegateTaskRetryHook } from './delegate-task-retry';
 export { ForegroundFallbackManager, isRateLimitError, } from './foreground-fallback';
 export { createJsonErrorRecoveryHook } from './json-error-recovery';
+export { createOracleGateVerdictHook } from './oracle-gate-verdict';

package/dist/hooks/oracle-gate-verdict/hook.d.ts

@@ -0,0 +1,11 @@
+import type { PluginInput } from '@opencode-ai/plugin';
+export declare function createOracleGateVerdictHook(ctx: PluginInput): {
+    'tool.execute.after': (input: {
+        tool: string;
+        args?: {
+            subagent_type?: unknown;
+        };
+    }, output: {
+        output: unknown;
+    }) => Promise<void>;
+};

package/dist/hooks/oracle-gate-verdict/index.d.ts

@@ -0,0 +1 @@
+export { createOracleGateVerdictHook } from './hook';

package/dist/index.js

@@ -1,9 +1,13 @@
+import {
+  formatGateVerdict,
+  summarizeGateResult
+} from "./chunk-RWQPMWEM.js";
 import {
   createAgents,
   renderOpenCodeAgentConfigs,
   spawn,
   spawnSync
-} from "./chunk-V5GDCWFR.js";
+} from "./chunk-RN2ERZLZ.js";
 import {
   context7,
   exa,
@@ -11,10 +15,11 @@ import {
 } from "./chunk-62L3ORXN.js";
 import {
   POLL_INTERVAL_BACKGROUND_MS,
+  getAgentRole,
   getOpenCodeConfigPaths,
   loadPluginConfig,
   stripJsonComments
-} from "./chunk-ARUBELNT.js";
+} from "./chunk-RVQ6IIBR.js";
 
 // src/index.ts
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -757,6 +762,38 @@ ${JSON_ERROR_REMINDER}`;
   };
 }
 
+// src/hooks/oracle-gate-verdict/hook.ts
+var ORACLE_AGENT = getAgentRole("oracle").name;
+function createOracleGateVerdictHook(ctx) {
+  return {
+    "tool.execute.after": async (input, output) => {
+      if (input.tool.toLowerCase() !== "task") return;
+      if (input.args?.subagent_type !== ORACLE_AGENT) return;
+      if (typeof output.output !== "string") return;
+      const text = output.output;
+      if (!text.includes("```thoth-result")) return;
+      const opening = "<task_result>";
+      const closing = "</task_result>";
+      const start = text.indexOf(opening);
+      const end = text.lastIndexOf(closing);
+      const wrapped = start !== -1 && end >= start + opening.length;
+      const child = wrapped ? text.slice(start + opening.length, end) : text;
+      const summary = {
+        ...summarizeGateResult(child, { cwd: ctx.directory }),
+        agent: ORACLE_AGENT
+      };
+      const verdict = formatGateVerdict(summary);
+      if (wrapped && text.slice(end + closing.length).endsWith(`
+
+${verdict}`))
+        return;
+      output.output += `
+
+${verdict}`;
+    }
+  };
+}
+
 // src/mcp/index.ts
 function createAllBuiltinMcps() {
   return {
@@ -3494,6 +3531,7 @@ var ThothAgents = async (ctx, _options) => {
   });
   const delegateTaskRetryHook = createDelegateTaskRetryHook(ctx);
   const jsonErrorRecoveryHook = createJsonErrorRecoveryHook(ctx);
+  const oracleGateVerdictHook = createOracleGateVerdictHook(ctx);
   const foregroundFallback = new ForegroundFallbackManager(
     client,
     runtimeChains,
@@ -3599,7 +3637,7 @@ var ThothAgents = async (ctx, _options) => {
         input.event
       );
     },
-    // Post-tool hooks: retry guidance for delegation and JSON errors.
+    // Post-tool hooks: delegation retry, JSON recovery, then Oracle gate verdicts.
     "tool.execute.after": async (input, output) => {
       await delegateTaskRetryHook["tool.execute.after"](
         input,
@@ -3609,6 +3647,7 @@ var ThothAgents = async (ctx, _options) => {
         input,
         output
       );
+      await oracleGateVerdictHook["tool.execute.after"](input, output);
     }
   };
 };

package/dist/pi-gate-verdict.d.ts

@@ -0,0 +1,4 @@
+export declare function withPiContextGateVerdicts(event: Record<string, unknown>, cwd: string): {
+    messages: unknown[];
+} | undefined;
+export declare function withPiToolGateVerdicts(event: Record<string, unknown>, cwd: string): Record<string, unknown> | undefined;

package/dist/pi.d.ts

@@ -1,11 +1,12 @@
 type PiHandler = (event: Record<string, unknown>, context?: {
+    cwd?: string;
     isIdle?(): boolean;
     ui?: {
         notify(message: string, type?: 'info' | 'warning' | 'error'): void;
     };
 }) => unknown;
 export interface PiExtensionApi {
-    on(event: 'input' | 'before_agent_start' | 'session_start', handler: PiHandler): void;
+    on(event: 'input' | 'before_agent_start' | 'session_start' | 'tool_result' | 'context', handler: PiHandler): void;
     registerCommand?(name: string, command: {
         description: string;
         handler(args: string | undefined, context: unknown): unknown;

package/dist/pi.js

@@ -1,18 +1,109 @@
+import {
+  formatGateVerdict,
+  summarizeGateResult
+} from "./chunk-RWQPMWEM.js";
 import {
   PI_ROOT_END,
   PI_ROOT_START,
   createPiToolsPanelAdapter,
   renderPiRootInstructions,
   syncPiSpecialists
-} from "./chunk-QQV5S3TW.js";
+} from "./chunk-VHQMTZ5O.js";
 import {
   findPackageRoot
-} from "./chunk-ARUBELNT.js";
+} from "./chunk-RVQ6IIBR.js";
 
 // src/pi.ts
 import { homedir } from "os";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
+
+// src/pi-gate-verdict.ts
+var VERDICT_PREFIX = "thoth-gate-verdict ";
+function asRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function hasAppendedVerdict(content, verdict, blockSeparator = "") {
+  if (typeof content === "string") return content.endsWith(`
+
+${verdict}`);
+  if (!Array.isArray(content)) return false;
+  for (let index = content.length - 1; index >= 0; index--) {
+    const block = asRecord(content[index]);
+    if (block?.type !== "text" || typeof block.text !== "string" || !block.text.startsWith(`${blockSeparator}${VERDICT_PREFIX}`) || block.text.slice(blockSeparator.length).includes("\n"))
+      break;
+    if (block.text === `${blockSeparator}${verdict}`) return true;
+  }
+  return false;
+}
+function oracleGateVerdict(taskValue, result, cwd) {
+  const task = asRecord(taskValue);
+  if (task?.agent !== "thoth-oracle" || typeof result !== "string" || !result.includes("```thoth-result"))
+    return void 0;
+  const taskId = typeof task.id === "string" ? task.id : null;
+  const summary = {
+    ...summarizeGateResult(result, { cwd }),
+    agent: "thoth-oracle",
+    taskId
+  };
+  return formatGateVerdict(summary);
+}
+function withPiContextGateVerdicts(event, cwd) {
+  if (!Array.isArray(event.messages)) return void 0;
+  let changed = false;
+  const messages = event.messages.map((value) => {
+    const message = asRecord(value);
+    if (message?.role !== "custom" || message.customType !== "subagent-completion" || typeof message.content !== "string" && !Array.isArray(message.content))
+      return value;
+    const details = asRecord(message.details);
+    const task = asRecord(details?.task);
+    const verdict = oracleGateVerdict(
+      task,
+      details?.full_result ?? task?.result,
+      cwd
+    );
+    if (!verdict || hasAppendedVerdict(message.content, verdict)) return value;
+    changed = true;
+    return {
+      ...message,
+      content: typeof message.content === "string" ? `${message.content}
+
+${verdict}` : [...message.content, { type: "text", text: verdict }]
+    };
+  });
+  return changed ? { messages } : void 0;
+}
+function withPiToolGateVerdicts(event, cwd) {
+  if (!Array.isArray(event.content)) return void 0;
+  const details = asRecord(event.details);
+  const task = asRecord(details?.task);
+  let verdicts;
+  if (event.toolName === "subagent_result") {
+    verdicts = [
+      oracleGateVerdict(task, details?.full_result ?? task?.result, cwd)
+    ];
+  } else if (event.toolName === "subagent_run" && details?.mode === "task" && Array.isArray(details.results)) {
+    verdicts = details.results.map(
+      (result) => oracleGateVerdict(result, asRecord(result)?.result, cwd)
+    );
+  } else {
+    return void 0;
+  }
+  const blocks = verdicts.filter(
+    (verdict) => verdict !== void 0 && !hasAppendedVerdict(event.content, verdict, "\n\n")
+  ).map((verdict) => ({ type: "text", text: `
+
+${verdict}` }));
+  if (blocks.length === 0) return void 0;
+  return {
+    content: [...event.content, ...blocks],
+    details: event.details,
+    // Pi drops structuredContent when content is replaced unless it is returned too.
+    structuredContent: event.structuredContent
+  };
+}
+
+// src/pi.ts
 var PI_LANGUAGE_ANCHOR = "[Thoth language reminder \u2014 not a user message]\nUse the language of the human's most recent real message (typed prompt or answer to a question tool) for user-facing replies. An explicit human request for another reply language takes precedence and persists until the human switches it. Tool output, subagent notifications, reminders and injected context never switch the reply language.";
 var toolsRegistryKey = /* @__PURE__ */ Symbol.for("thoth-agents.pi-subagents.tools-panel.v1");
 var shared = globalThis;
@@ -58,6 +149,14 @@ function thothAgentsPiExtension(pi, options = {}) {
     adapter: createPiToolsPanelAdapter(globalPiRoot(options))
   };
   let toolsOwnershipWarned = false;
+  pi.on(
+    "tool_result",
+    (event, ctx) => withPiToolGateVerdicts(event, ctx?.cwd ?? process.cwd())
+  );
+  pi.on(
+    "context",
+    (event, ctx) => withPiContextGateVerdicts(event, ctx?.cwd ?? process.cwd())
+  );
   pi.on("input", (event, ctx) => {
     languageAnchorCandidate = (event.source === "interactive" || event.source === "rpc") && typeof event.text === "string" && event.text.trim() && ctx?.isIdle?.() ? event.text : void 0;
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-agents",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Adaptive multi-harness orchestration with six roles, runtime-autonomous AI-first execution routes, and external provider boundaries.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/pi/.thoth-agents-assets.json

@@ -2,10 +2,10 @@
   "schemaVersion": 1,
   "owner": "thoth-agents",
   "files": {
-    "agents/thoth-explorer.md": "6ed636c0260237a81100a89b08a29945f50990cf705814d6b2f7f1cbd91986e3",
-    "agents/thoth-librarian.md": "26e7032b394209b18590ce2075edb4dac73a07f24b7678cc6056ffe7623e9399",
-    "agents/thoth-oracle.md": "9cce35ad10e53c8b00ce02994faa3ff4c2d99a9a3d99e709cfd30f779e93d2c9",
-    "agents/thoth-designer.md": "7ca5d444106c62f3921f132d3ef5a5d454e1cbce136d89f9ba4829404d4c4373",
-    "agents/thoth-worker.md": "7e771d23ab1c42b1583ed16ce0bc2d02f2f0a353fbb53a91e3bd2d47ad94c76d"
+    "agents/thoth-explorer.md": "961a1be9c1a387a582374e4ed23302a1eec228c80c9e8f8f70b48b822781eb8b",
+    "agents/thoth-librarian.md": "26eb9468c5fbf07ea8231c44831ba5aa8cba96081d0e432673ba6e42d3005544",
+    "agents/thoth-oracle.md": "49584f245a2ae1ba0fff56541215c4736393fa8cec3bcf58a4b3d737dc2b6c09",
+    "agents/thoth-designer.md": "78e26b5c7c8b0fdea00e1824e2ffaa193e304c6d7b58c534ecaa4378e13b590d",
+    "agents/thoth-worker.md": "1aa1f7b5fd29eda4a81d175a3286047cdf8369022a517be4e39c513933418f2a"
   }
 }

package/pi/agents/thoth-designer.md

@@ -4,7 +4,6 @@ description: "Own user-facing implementation choices and visual quality for UI w
 tools: "read, bash, edit, write, grep, find, ls, mem_recall, mem_get"
 model: "openai-codex/gpt-6-luna"
 effort: "max"
-subagent_mode: "background"
 managed-by: thoth-agents
 ---
 

package/pi/agents/thoth-explorer.md

@@ -4,7 +4,6 @@ description: "Resolve broad or uncertain repository questions and return distill
 tools: "read, bash, grep, find, ls, mem_recall, mem_get, codemode"
 model: "openai-codex/gpt-6-luna"
 effort: "max"
-subagent_mode: "background"
 managed-by: thoth-agents
 ---
 

package/pi/agents/thoth-librarian.md

@@ -4,7 +4,6 @@ description: "Gather current authoritative evidence and separate documented fact
 tools: "read, bash, grep, find, ls, mem_recall, mem_get, codemode, resolve-library-id, query-docs, mcp, web_search, fetch_content, get_search_content, source_check"
 model: "openai-codex/gpt-6-luna"
 effort: "max"
-subagent_mode: "background"
 managed-by: thoth-agents
 ---
 

package/pi/agents/thoth-oracle.md

@@ -5,7 +5,6 @@ tools: "read, bash, grep, find, ls, mem_recall, mem_get"
 disallowed_tools: "ask_orchestrator"
 model: "openai-codex/gpt-6.1-sol"
 effort: "xhigh"
-subagent_mode: "background"
 managed-by: thoth-agents
 ---
 

package/pi/agents/thoth-worker.md

@@ -4,7 +4,6 @@ description: "Handle bounded nonvisual implementation with full local context, i
 tools: "read, bash, edit, write, grep, find, ls, mem_recall, mem_get"
 model: "openai-codex/gpt-6-luna"
 effort: "max"
-subagent_mode: "background"
 managed-by: thoth-agents
 ---
 

package/plugin/.claude-plugin/.thoth-agents-plugin-assets.json

@@ -29,13 +29,18 @@
     {
       "path": "agents/orchestrator.md",
       "kind": "agent-config",
-      "sha256": "sha256:d556386592670e605d2bd748104092571241fc68f0cd19cd7ef01eef11ff1a88"
+      "sha256": "sha256:3416fa6da73974241b6c40d1d6d15a6f09fa5b20cdb1e9e00cf90b0eab9b9f47"
     },
     {
       "path": "agents/worker.md",
       "kind": "agent-config",
       "sha256": "sha256:4a569341d43cb4d10d317aee009429a6baf71e7ec248259e93847b59187f3764"
     },
+    {
+      "path": "claude-hooks/hooks.json",
+      "kind": "hook-config",
+      "sha256": "sha256:6293aeb237f98e0827f6eed9209554a8ea8a3074643075ee75ef7b71f9c6fcd1"
+    },
     {
       "path": "settings.json",
       "kind": "harness-config",

package/plugin/.claude-plugin/plugin.json

@@ -1,8 +1,9 @@
 {
   "name": "thoth-agents",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Adaptive multi-harness agent pack with six roles and proportional SDD governance for Claude Code.",
   "author": {
     "name": "thoth-agents"
-  }
+  },
+  "hooks": "./claude-hooks/hooks.json"
 }

package/plugin/.codex-plugin/.thoth-agents-plugin-assets.json

@@ -11,7 +11,7 @@
       "field": "hooks",
       "path": ".codex-plugin/codex-hooks/hooks.json",
       "reference": "./codex-hooks/hooks.json",
-      "sha256": "sha256:b2949fe8110fdc7552bc09788d4b0b0543c9276f8fb90f155b5e974da91b8ece"
+      "sha256": "sha256:4f739213d552b50e9b64a6e17bdce2b2628f848f33f736c24798145751475392"
     },
     {
       "field": "hooks",
@@ -41,7 +41,7 @@
       "field": "hooks",
       "path": ".codex-plugin/codex-hooks/payloads/root.md",
       "reference": "./codex-hooks/payloads/root.md",
-      "sha256": "sha256:62577f0e72e779ef78710fd64f482058f323275c1287cbc848242fa0afc82f90"
+      "sha256": "sha256:4ed528c221bbd5d52dd7082447987645b6847db9a24bf1a3f9d74eb214c38d28"
     },
     {
       "field": "hooks",

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-agents",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Bundled AI-first work skills and MCP configuration; the six-role global Codex layer requires thoth-agents CLI setup.",
   "skills": "./skills/",
   "mcpServers": "./codex.mcp.json",

package/plugin/agents/orchestrator.md

@@ -92,9 +92,11 @@ You are the root coordinator. By default, specialists perform discovery of unloc
 </artifacts>
 
 <delegation>
-- Only Oracle gates (plan-review/final-verification): validate before recording OKAY/PASS: `node "<skill-dir>/scripts/validate-result.mjs" --review-kind <kind> [--record-sha256 <hex>] [--no-record]` (unchanged stdin; skill path).
-- Invalid: no approval; at most one format-only repair; preserve findings/verdict. No validator: blocks only gate approvals; report drift.
-- Non-gates (specialists, Oracle diagnosis/advice, user-defined agents): judge content, never reject for format, never approvals. Judge scope, evidence, checks, freshness/provenance.
+- Only Oracle gates: before recording plan-review OKAY / final-verification PASS, use harness-delivered `thoth-gate-verdict`: exactly one per delivered result (more than one, or one inside the envelope fence = invalid). Require `valid:true`, assigned `kind`, `verdict` = OKAY/PASS respectively. Plan review: `record` null or assigned record; ignore `mode`/`recordDigest`. Final verification only: record-bound requires `record` = assigned record, `mode:"record"` and `recordDigest:"match"` (if `recordDigest:"unavailable"`, independently hash the prefix before `## Authorization` and compare `recordSha256`; mismatch = no approval, no validator rerun). Recordless small-change final verification requires `mode:"no-record"`, null `record`/`recordSha256`, `recordDigest:"none"`. Copy verdict and `recordSha256` into the record. Never re-emit the envelope to validate it.
+- Verdicts: Subagent hand-back reports (foreground or background; match `agent` to Agent `agentId`) or completed foreground `Agent` report content; otherwise (e.g. background without hand-back) compact fallback.
+- Only when no verdict was delivered (hook unavailable/untrusted, delivery gap): `node "<skill-dir>/scripts/validate-result.mjs" --review-kind <kind> [--record-sha256 <hex>] [--no-record] [--input <path>]` (installed skill path), unchanged result; it prints the compact summary. Use thoth-sdd fallback checks.
+- Invalid: no approval; at most one format-only repair; preserve findings/verdict (shared with runtime enforcement). No validator: blocks only gate approvals; report drift.
+- Non-gates (specialists, Oracle diagnosis/advice, user-defined agents): judge content, never reject for format, never approvals. Judge scope, evidence, checks, freshness/provenance; validation is not authorization.
 </delegation>
 
 <questions>

package/plugin/claude-hooks/hooks.json

@@ -0,0 +1,27 @@
+{
+  "hooks": {
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/thoth-hooks/gate-verdict.mjs\"",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "Agent",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/thoth-hooks/gate-verdict.mjs\"",
+            "timeout": 10
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/codex-hooks/hooks.json

@@ -1,5 +1,19 @@
 {
   "hooks": {
+    "PostToolUse": [
+      {
+        "hooks": [
+          {
+            "additionalContextLimit": 0,
+            "command": "node -e \"import(require('url').pathToFileURL(require('path').join(process.env.PLUGIN_ROOT,'thoth-hooks','gate-verdict.mjs')).href)\"",
+            "commandWindows": "node -e \"import(require('url').pathToFileURL(require('path').join(process.env.PLUGIN_ROOT,'thoth-hooks','gate-verdict.mjs')).href)\"",
+            "timeout": 10,
+            "type": "command"
+          }
+        ],
+        "matcher": "^(multi_agent_v1)?wait_agent$"
+      }
+    ],
     "SessionStart": [
       {
         "hooks": [

package/plugin/codex-hooks/payloads/root.md

@@ -86,9 +86,11 @@ You are the root coordinator. By default, specialists perform discovery of unloc
 </artifacts>
 
 <delegation>
-- Only Oracle gates (plan-review/final-verification): validate before recording OKAY/PASS: `node "<skill-dir>/scripts/validate-result.mjs" --review-kind <kind> [--record-sha256 <hex>] [--no-record]` (unchanged stdin; skill path).
-- Invalid: no approval; at most one format-only repair; preserve findings/verdict. No validator: blocks only gate approvals; report drift.
-- Non-gates (specialists, Oracle diagnosis/advice, user-defined agents): judge content, never reject for format, never approvals. Judge scope, evidence, checks, freshness/provenance.
+- Only Oracle gates: before recording plan-review OKAY / final-verification PASS, use harness-delivered `thoth-gate-verdict`: exactly one per delivered result (more than one, or one inside the envelope fence = invalid). Require `valid:true`, assigned `kind`, `verdict` = OKAY/PASS respectively. Plan review: `record` null or assigned record; ignore `mode`/`recordDigest`. Final verification only: record-bound requires `record` = assigned record, `mode:"record"` and `recordDigest:"match"` (if `recordDigest:"unavailable"`, independently hash the prefix before `## Authorization` and compare `recordSha256`; mismatch = no approval, no validator rerun). Recordless small-change final verification requires `mode:"no-record"`, null `record`/`recordSha256`, `recordDigest:"none"`. Copy verdict and `recordSha256` into the record. Never re-emit the envelope to validate it.
+- Verdicts: multi-agent v1 `wait_agent` + enabled/trusted plugin hooks only; `agent` = status-map key, not provenance. V2 `FINAL_ANSWER` inter-agent messages: no hook/verdict; use compact fallback.
+- Only when no verdict was delivered (hook unavailable/untrusted, delivery gap): `node "<skill-dir>/scripts/validate-result.mjs" --review-kind <kind> [--record-sha256 <hex>] [--no-record] [--input <path>]` (installed skill path), unchanged result; it prints the compact summary. Use thoth-sdd fallback checks.
+- Invalid: no approval; at most one format-only repair; preserve findings/verdict (shared with runtime enforcement). No validator: blocks only gate approvals; report drift.
+- Non-gates (specialists, Oracle diagnosis/advice, user-defined agents): judge content, never reject for format, never approvals. Judge scope, evidence, checks, freshness/provenance; validation is not authorization.
 </delegation>
 
 <questions>

package/plugin/skills/plan-reviewer/SKILL.md

@@ -38,11 +38,22 @@ message, following the Oracle gate contract: `role: "oracle"`,
 `review.kind: "plan-review"`, and `review.verdict: "OKAY" | "REJECT"`.
 Include concise evidence and at most three blocking risks for actual execution
 blockers with smallest repairs; mark cautions nonblocking. An OKAY requires
-`status: "complete"` and no blocking risks. Root validates the unchanged native
-terminal result with `--review-kind plan-review` using the sibling
-thoth-sdd skill's **Specialist result validation** procedure, including its shared
-one-request format-only repair budget. Root records plan-review `OKAY` only from a validated envelope
-and after judging the content; a malformed or missing envelope is not approval.
+`status: "complete"` and no blocking risks. Root uses the harness-delivered
+`thoth-gate-verdict` under the sibling thoth-sdd skill's **Specialist result
+validation** procedure: exactly one outside the envelope fence, `valid:true`,
+assigned `kind:"plan-review"`, `verdict:"OKAY"`, and `record` null or the assigned
+record; ignore `mode` and `recordDigest` (final-verification checks only).
+Never re-emit the envelope to validate it. Use the explicit
+compact CLI fallback with `--review-kind plan-review` only when no verdict was delivered;
+keep the native result unchanged. Claude Code verdicts arrive with Subagent hand-back
+reports (foreground or background; `agent` is the agent id, match it to the Agent
+result's `agentId`) and completed foreground `Agent` results whose content carries
+the report. Other deliveries (e.g. background runs without hand-back) carry none;
+use the explicit compact CLI fallback.
+Copy the verdict and `recordSha256` into the record (accepted summary/digest
+in fallback). Keep the shared one-request format-only repair budget. Root records
+plan-review `OKAY` only after these checks and judging content and provenance;
+a malformed or missing envelope is not approval.
 Root repairs same-intent blockers in the same record, revalidates affected gates,
 and uses a fresh Oracle for each round. A human-owned material blocker stops the
 round. Root records both review disposition and selection provenance without