triad-plus 1.9.0 → 1.11.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 1.11.0 — 2026-09-17
+
+- Add an installation manifest that records Triad-owned assets, materialized
+  version, adapter scopes, hashes, and deterministic ownership fingerprint.
+- Add CLI/workspace version visibility, legacy manifest migration through
+  `upgrade --apply`, and conservative dry-run/apply uninstall for all adapters.
+- Preserve modified or unknown assets and all project-control state during
+  uninstall; report version skew and manifest integrity through `doctor`.
+- Preserve shared global assets by default, remove only exact managed
+  `AGENTS.md` blocks, and leave generic host directories untouched.
+
+## 1.10.0 — 2026-09-16
+
+- Improve TUI and doctor output with terminal-native summaries, sober color
+  handling, `NO_COLOR`, and non-TTY support.
+- Add the agent-first model-configuration skill with `.triad-plus/team.json`
+  as the role/model source of truth and explicit host-native bindings,
+  including OpenCode `variant` materialization.
+- Add shared-skill diagnostics and repair during managed upgrades, plus
+  deterministic repository/runtime context verification and nested-repository
+  hardening.
+- Fail closed on incorrect working directories, mixed Git roots, symlink
+  escapes, missing or mutated skills, and implicit fallback to unrelated skill
+  copies.
+
 ## 1.9.0 — 2026-09-16
 
 - Add native BMAD `epics.md` intake while preserving the boundary that BMAD

package/README.md

@@ -107,6 +107,38 @@ The Orchestrator first shows the feature cards, then delegates the bounded work.
 If a tutorial step is unclear, see the [OpenCode guide](docs/runtimes.md#opencode)
 and [troubleshooting](docs/troubleshooting.md).
 
+## Installation version and safe uninstall
+
+The CLI version and the version materialized in a control workspace are
+reported independently:
+
+```bash
+npx triad-plus --version
+npx triad-plus version --control /absolute/path/to/triad-control
+```
+
+Successful `init` and `upgrade --apply` operations record exact Triad-owned
+files in `.triad-plus/installation.json`. This manifest does not own
+`.triad-plus/team.json`, `.loop/`, product files, or evidence.
+`init` is the first-install path; `upgrade --apply` is also the managed
+update/repair/restore path for a registered workspace, including one left
+`uninstalled` or `partial` by safe uninstall.
+
+Uninstall is conservative and dry-run by default:
+
+```bash
+npx triad-plus uninstall --host opencode --control /absolute/path/to/triad-control
+npx triad-plus uninstall --host opencode --control /absolute/path/to/triad-control --apply
+```
+
+Only unchanged files recorded by the manifest are removed. Modified or
+unknown files are preserved and reported; user state remains available for a
+future installation or review. Generic host directories are never pruned. A
+managed `AGENTS.md` role-run block is removed only when its markers and hash
+are exact; surrounding user content is preserved. Global assets are shown but
+preserved by default with `--global` because another control workspace may
+share them.
+
 ## Optional immutable quality target
 
 An initialized project may bind an immutable JSON Quality Baseline through
@@ -184,6 +216,13 @@ workspace with that adapter. Triad+ does not dispatch different roles across
 different hosts in one run. Read [configuration](docs/configuration.md) and
 [runtime details](docs/runtimes.md).
 
+The installed `triad-model-configuration` Agent Skill lets the host agent
+inspect or change requested role models while preserving `team.json` as the
+source of truth and reporting host-specific binding limits.
+
+On OpenCode, `team.json`'s `reasoning_effort` is materialized as the native
+per-agent `variant`; the OpenCode session default is a separate host setting.
+
 `triad-verify` validates assignment/candidate binding, runs declared
 control-plane gates, detects mutation, and writes evidence. It supports the
 loop; it never replaces the Orchestrator. See [verification](docs/verification.md).

package/adapters/antigravity/README.md

@@ -1,7 +1,7 @@
 # Triad+ for Antigravity
 
 The Antigravity adapter uses native workspace paths: `.agents/skills/` for the
-five shared Triad+ skills and `/triad` workflow, plus `.agents/agents/` for the
+six shared Triad+ skills and `/triad` workflow, plus `.agents/agents/` for the
 four technical agents. Start Antigravity from the project-control workspace and
 invoke:
 

package/adapters/antigravity/install.sh

@@ -30,7 +30,7 @@ fi
 adapter_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 repository_root="$(cd -- "$adapter_root/../.." && pwd)"
 agent_names=(triad-orchestrator triad-developer triad-evaluator triad-reviewer)
-skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer)
+skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer triad-model-configuration)
 collisions=()
 
 for agent_name in "${agent_names[@]}"; do

package/adapters/claude-code/README.md

@@ -1,6 +1,6 @@
 # Triad+ Engineering Loop for Claude Code
 
-This adapter installs the shared five Triad skills, three isolated Claude Code
+This adapter installs the shared six Triad skills, three isolated Claude Code
 subagents, the `/triad` command, and—on a project installation—the Node control
 plane. It does not modify global Claude settings or automatically activate a
 hook.

package/adapters/claude-code/install.sh

@@ -30,7 +30,7 @@ fi
 adapter_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 repository_root="$(cd -- "$adapter_root/../.." && pwd)"
 agent_names=(triad-developer triad-evaluator triad-reviewer)
-skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer)
+skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer triad-model-configuration)
 collisions=()
 
 for agent_name in "${agent_names[@]}"; do

package/adapters/codex/README.md

@@ -18,7 +18,7 @@ Then install the global entry point and the skills once for the Codex user:
 ```
 
 The installer refuses any overwrite. It installs the project runtime under
-`.triad-runtime` and the five shared skills under `.agents/skills`; the global
+`.triad-runtime` and the six shared skills under `.agents/skills`; the global
 installation also makes the skills available to Codex and writes
 `$CODEX_HOME/prompts/triad.md` (`$HOME/.codex` by default).
 

package/adapters/codex/install.sh

@@ -8,10 +8,10 @@ Usage:
   ./adapters/codex/install.sh --global
 
 Install the Triad Codex adapter without overwriting existing skills, prompt, or
-project runtime. --project installs the five skills under
+project runtime. --project installs the six skills under
 <control-repository-path>/.agents/skills and installs .triad-runtime. It does
 not install the user-level Codex prompt. --global installs the /prompts:triad
-entry point and the five skills under $CODEX_HOME (default: $HOME/.codex).
+entry point and the six skills under $CODEX_HOME (default: $HOME/.codex).
 
 For normal use run both commands once: --project for each control repository,
 then --global for the Codex entry point. Existing paths are never overwritten.
@@ -19,7 +19,7 @@ EOF
 }
 
 codex_home="${CODEX_HOME:-$HOME/.codex}"
-skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer)
+skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer triad-model-configuration)
 
 if [[ $# -eq 2 && "$1" == "--project" ]]; then
   project_root="$2"

package/adapters/hermes/install.sh

@@ -18,7 +18,7 @@ fi
 
 adapter_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 repository_root="$(cd -- "$adapter_root/../.." && pwd)"
-skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer)
+skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer triad-model-configuration)
 
 if [[ "$global_install" == true ]]; then
   hermes_root="${HERMES_HOME:-$HOME/.hermes}"

package/adapters/opencode/.opencode/agents/triad-developer.md

@@ -28,6 +28,20 @@ At activation, read `.triad-plus/team.json`. Your first report to the
 Orchestrator identifies the configured `roles.developer.displayName` as the
 Triad+ Developer and names the assigned card.
 
+Before editing, run the exact runtime-context proof from this activation's
+actual cwd:
+
+```bash
+node /absolute/path/to/control-workspace/.triad-runtime/triad-runtime-context.mjs \
+  --project /absolute/path/to/control-workspace \
+  --assignment /absolute/path/to/control-workspace/.loop/runtime/assignments/<assignment-file>.json
+```
+
+Record packet cwd, process cwd, shell `pwd`, Git top-level, and every resolved
+repository-skill path/hash. A non-zero result or any mismatch is invalid
+runtime context: stop and report it, and never substitute a control-workspace
+or global skill copy.
+
 Verify the worktree and branch. Do not expand scope, silently change project
 policy, add dependencies without authorization, or make delivery decisions. Run
 the required gates, measure the declared metrics, and report exact commands and

package/adapters/opencode/.opencode/agents/triad-orchestrator.md

@@ -17,6 +17,7 @@ permission:
     triad-reviewer: allow
   skill:
     "triad-loop-*": allow
+    "triad-model-configuration": allow
 ---
 
 You are the Triad+ Engineering Loop orchestrator. Govern the workflow and the

package/adapters/opencode/.opencode/agents/triad-reviewer.md

@@ -30,6 +30,21 @@ At activation, read `.triad-plus/team.json`. Your first report to the
 Orchestrator identifies the configured `roles.reviewer.displayName` as the
 Triad+ Reviewer and names the feature and attempt under review.
 
+Before inspecting the candidate, run this exact runtime-context proof from the
+actual Reviewer cwd:
+
+```bash
+node /absolute/path/to/control-workspace/.triad-runtime/triad-runtime-context.mjs \
+  --project /absolute/path/to/control-workspace \
+  --assignment /absolute/path/to/control-workspace/.loop/runtime/assignments/<assignment-file>.json
+```
+
+Record packet cwd, process cwd, shell `pwd`, Git top-level, and each resolved
+repository-skill path/hash. On non-zero status, `NotFound`, hash mismatch,
+mixed repository roots, or cwd inconsistency, return `blocked` / invalid
+runtime context. Do not use a same-named skill from the control workspace or
+global skills as a fallback.
+
 Return one evidence-based recommendation: `approved`, `rework`, or `blocked`.
 List severity-ranked findings before gate and metric evidence, residual risks,
 and the recommendation. A blocked recommendation must identify the exact owner

package/adapters/opencode/README.md

@@ -1,6 +1,6 @@
 # Triad+ Engineering Loop for OpenCode
 
-This adapter makes the repository's existing five standard Agent Skills
+This adapter makes the repository's existing six standard Agent Skills
 operational in OpenCode. It installs four specialized agents and the `/triad`
 command; it does not duplicate the method or alter `opencode.json`.
 
@@ -26,6 +26,7 @@ skills/triad-loop-orchestrator/
 skills/triad-loop-developer/
 skills/triad-loop-evaluator/
 skills/triad-loop-reviewer/
+skills/triad-model-configuration/
 .triad-runtime/
   triad-verify.mjs
   triad-runtime-capabilities.mjs
@@ -55,12 +56,12 @@ remain in a declared project workspace.
 
 `.triad-plus/team.json` is the source of truth for role-level model
 configuration. When a team file supplies values, Triad+ materializes the
-OpenCode-native `model` and `reasoningEffort` frontmatter fields in each
-project agent definition during `init` and `upgrade --apply`:
+OpenCode-native `model` and `variant` frontmatter fields in each project agent
+definition during `init` and `upgrade --apply`:
 
 ```text
 team.json model             → OpenCode model
-team.json reasoning_effort → OpenCode reasoningEffort
+team.json reasoning_effort → OpenCode variant
 ```
 
 Do not treat generated `.opencode/agents/*.md` files as an independent
@@ -70,8 +71,9 @@ absent so OpenCode uses its host/session default.
 
 The adapter only writes fields supported by this OpenCode materialization. Host
 and provider capabilities may still limit which model or reasoning levels are
-available. Inspect identifiers with `opencode models` and keep role-specific
-routing explicit in the team file:
+available. Inspect identifiers and variants with `opencode models` and keep
+role-specific routing explicit in the team file. OpenCode's role `variant` is
+not the same thing as the default model/session selected by the TUI:
 
 | Agent | Recommended profile |
 | --- | --- |
@@ -84,6 +86,13 @@ Use `opencode models` to inspect the provider/model identifiers available in
 the local installation. Keep the developer, evaluator, and reviewer separately
 configured when independent model routing is required.
 
+The adapter targets the installed OpenCode agent contract: `variant` is the
+host-native per-agent option, while `team.json` remains the canonical desired
+configuration. A null or blank model/effort removes the managed field and lets
+OpenCode use its host or session default. `upgrade --apply` refreshes managed
+agents and then reapplies this same binding; it does not rewrite `team.json`.
+OpenCode 1.18.x exposes this contract through the `AgentConfig.variant` field.
+
 ## Start the loop
 
 Launch OpenCode from the project-control repository, then enter:

package/adapters/opencode/install.sh

@@ -31,7 +31,7 @@ adapter_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 repository_root="$(cd -- "$adapter_root/../.." && pwd)"
 
 agent_names=(triad-orchestrator triad-developer triad-evaluator triad-reviewer)
-skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer)
+skill_names=(triad-loop-bootstrap triad-loop-orchestrator triad-loop-developer triad-loop-evaluator triad-loop-reviewer triad-model-configuration)
 command_name="triad"
 collisions=()
 

package/adapters/registry.mjs

@@ -7,7 +7,8 @@ export const sharedSkillNames = [
   'triad-loop-orchestrator',
   'triad-loop-developer',
   'triad-loop-evaluator',
-  'triad-loop-reviewer'
+  'triad-loop-reviewer',
+  'triad-model-configuration'
 ];
 
 export const roleDefinitions = [
@@ -87,7 +88,13 @@ const definitions = [
     entry: '/triad',
     lifecycle: null,
     modelBinding: 'project-frontmatter',
-    modelFields: ['model', 'reasoningEffort'],
+    // OpenCode's agent frontmatter has a first-class `variant` field.  Keep
+    // Triad's canonical `reasoning_effort` name in team.json and map it to
+    // that host-native field rather than emitting provider options such as
+    // `reasoningEffort` into the agent profile.
+    modelFields: ['model', 'variant'],
+    modelFieldSources: { model: 'model', variant: 'reasoning_effort' },
+    modelCleanupFields: ['reasoningEffort'],
     modelRoles: roleDefinitions.map((role) => role.id),
     projectAssets: [
       { source: 'adapters/opencode/.opencode/agents', destination: '.opencode/agents' },
@@ -114,6 +121,10 @@ const definitions = [
     },
     roleModelPaths(controlRoot) {
       return roleDefinitions.map((role) => join(controlRoot, '.opencode', 'agents', `triad-${role.id}.md`));
+    },
+    globalRoleModelPaths() {
+      const root = hostHome('.config', 'opencode');
+      return rolePaths(root, roleDefinitions.map((role) => `triad-${role.id}`));
     }
   },
   {
@@ -157,6 +168,10 @@ const definitions = [
     },
     roleModelPaths(controlRoot) {
       return ['developer', 'reviewer', 'evaluator'].map((role) => join(controlRoot, '.claude', 'agents', `triad-${role}.md`));
+    },
+    globalRoleModelPaths() {
+      const root = hostHome('.claude');
+      return ['developer', 'reviewer', 'evaluator'].map((role) => join(root, 'agents', `triad-${role}.md`));
     }
   },
   {
@@ -222,6 +237,7 @@ const definitions = [
     lifecycle: null,
     modelBinding: 'project-frontmatter',
     modelFields: ['model', 'reasoningEffort'],
+    modelFieldSources: { model: 'model', reasoningEffort: 'reasoning_effort' },
     modelRoles: roleDefinitions.map((role) => role.id),
     projectAssets: [
       { source: 'adapters/copilot/.github/agents', destination: '.github/agents' },
@@ -253,6 +269,10 @@ const definitions = [
     },
     roleModelPaths(controlRoot) {
       return roleDefinitions.map((role) => join(controlRoot, '.github', 'agents', `triad-${role.id}.agent.md`));
+    },
+    globalRoleModelPaths() {
+      const root = hostHome('.copilot');
+      return roleDefinitions.map((role) => join(root, 'agents', `triad-${role.id}.agent.md`));
     }
   }
 ];