ultra-builder-pro-cli 0.10.0 → 0.11.0

package/adapters/kimi.js

@@ -76,154 +76,31 @@ function kimiTextTransform(input, assetName = '') {
   text = text.replaceAll('CLAUDE.md', 'AGENTS.md');
   text = text.replace(/@skills\/([a-z0-9-]+)\/SKILL\.md/g, '$KIMI_PLUGIN_ROOT/skills/$1/SKILL.md');
 
-  text = text.replaceAll('`TaskCreate/TaskUpdate (session-local)`', 'Kimi `TodoList` (session-local)');
-  text = text.replaceAll('TaskCreate/TaskUpdate (session-local)', 'Kimi `TodoList` (session-local)');
-  text = text.replaceAll('`TaskCreate/TaskUpdate`', 'Kimi `TodoList`');
-  text = text.replaceAll('TaskCreate/TaskUpdate', 'Kimi `TodoList`');
-  text = text.replaceAll('`TaskCreate`', 'Kimi `TodoList`');
-  text = text.replaceAll('`TaskUpdate`', 'Kimi `TodoList`');
-  text = text.replaceAll('`TaskList`', 'the current Kimi `TodoList`');
-  text = text.replaceAll('TaskCreate', 'Kimi TodoList item creation');
-  text = text.replaceAll('TaskUpdate', 'Kimi TodoList updates');
-  text = text.replaceAll('TaskList', 'the current Kimi TodoList');
-  text = text.replaceAll('TaskOutput', 'subagent transcript output');
-  text = text.replaceAll('Claude Task tool', 'Kimi `AgentSwarm`');
-  text = text.replaceAll('Task tool', 'Kimi `AgentSwarm`');
-  text = text.replaceAll('multiple Task calls', 'one Kimi `AgentSwarm` call with multiple independent tasks');
-  text = text.replaceAll('Task calls', 'Kimi `AgentSwarm` items');
-  text = text.replaceAll('Task call', 'Kimi `AgentSwarm` item');
-  text = text.replaceAll('`run_in_background: true`', 'Kimi `AgentSwarm` parallel execution');
-  text = text.replaceAll('run_in_background: true', 'Kimi `AgentSwarm` parallel execution');
-  text = text.replaceAll('AskUserQuestion', 'a direct question to the user');
-  text = text.replaceAll('Bash tool', 'Kimi `Bash` tool');
-  text = text.replaceAll('Use Bash', 'Use Kimi `Bash`');
-  text = text.replaceAll('Read tool', 'Kimi `Read` tool');
-  text = text.replaceAll('Write tool', 'Kimi `Write` tool');
-  text = text.replaceAll('MCP `review.run`', 'Kimi `AgentSwarm` review workers');
-  text = text.replaceAll('`review.run`', 'Kimi `AgentSwarm` review workers');
-  text = text.replaceAll('review.run', 'Kimi `AgentSwarm` review workers');
-  text = text.replaceAll('MCP `ask.question`', 'a direct question to the user');
-  text = text.replaceAll('`ask.question`', 'a direct question to the user');
-  text = text.replaceAll('ask.question', 'a direct question to the user');
-  text = text.replaceAll('Claude runtime', 'Kimi runtime');
-  text = text.replaceAll('Claude-only', 'Kimi-only');
-  text = text.replaceAll('Claude Code、OpenCode、Codex 三个 runtime', 'Claude Code、OpenCode、Codex、Kimi Code 四个 runtime');
-  text = text.replaceAll('Claude Code, OpenCode, and Codex', 'Claude Code, OpenCode, Codex, and Kimi Code');
-
   if (assetName === 'codex-collab') {
+    text = text.replaceAll('the current host', 'Kimi Code');
+    text = text.replaceAll('current host', 'Kimi Code');
     text = text.replaceAll('Claude Code remains primary', 'Kimi Code remains primary');
     text = text.replaceAll('one Claude Code-owned conclusion', 'one Kimi Code-owned conclusion');
   }
   if (assetName === 'ultra-verify') {
-    text = text.replaceAll('Claude Code remains primary', 'Kimi Code remains primary');
-    text = text.replaceAll("Claude Code's evidence-backed analysis", "Kimi Code's evidence-backed analysis");
-    text = text.replaceAll('Claude writes its analysis first', 'Kimi writes its analysis first');
-    text = text.replaceAll('Claude writes its own analysis', 'Kimi writes its own analysis');
+    text = text.replaceAll('the current host', 'Kimi Code');
+    text = text.replaceAll('current host', 'Kimi Code');
+    text = text.replaceAll('Claude Code', 'Kimi Code');
+    text = text.replaceAll('Claude', 'Kimi');
     text = text.replaceAll('claude-analysis.md', 'kimi-analysis.md');
-    text = text.replaceAll('one Claude Code-owned conclusion', 'one Kimi Code-owned conclusion');
   }
-  if (assetName === 'learn') {
-    text = text.replaceAll(
-      '~/.kimi-code/skills/learned/<name>_unverified.md',
-      '~/.kimi-code/skills/learned-<name>-unverified/SKILL.md',
-    );
-    text = text.replaceAll(
-      '~/.kimi-code/skills/learned/<pattern-slug>_unverified.md',
-      '~/.kimi-code/skills/learned-<pattern-slug>-unverified/SKILL.md',
-    );
-    text = text.replaceAll(
-      '~/.kimi-code/skills/learned/<slug>_unverified.md',
-      '~/.kimi-code/skills/learned-<slug>-unverified/SKILL.md',
-    );
-    text = text.replaceAll('append the `_unverified` suffix to the filename', 'append `-unverified` to the skill directory name');
-    text = text.replaceAll('Never overwrite an existing unverified file', 'Never overwrite an existing learned skill directory');
-    text = text.replaceAll('remove the `_unverified` suffix', 'rename the directory to remove `-unverified` and update its frontmatter name');
-    text = text.replaceAll('(`pattern-slug-2_unverified.md`)', '(`learned-pattern-slug-2-unverified/`)');
-  }
-  if (assetName === 'ultra-init') {
-    text = text.replaceAll('调用方（Claude / CLI / SDK）', '调用方（Kimi / CLI / SDK）');
-    text = text.replace(
-      /- 如果调用方是 Claude，可在此用 Kimi `TodoList` 跟踪 Step 0–4 的 session 内进度\n  （这是 runtime 的 session-local 跟踪，不走 MCP）/,
-      '- 在 Kimi 中，用原生 `TodoList` 跟踪 Step 0–4 的 session 内进度；这是 session-local 协调，不走 MCP',
-    );
-    text = text.replace(
-      /## 调用方式（按 runtime）[\s\S]*?## 输出锚点/,
-      [
-        '## Kimi 调用方式',
-        '',
-        '| Runtime | 调用形态 |',
-        '|---------|----------|',
-        '| Kimi | `/ultra-builder-pro:ultra-init [name] [type] [stack] [git]` — 原生命令拉起此 skill |',
-        '',
-        '## 输出锚点',
-      ].join('\n'),
-    );
+  if (assetName === 'cc-collab') {
+    text = text.replaceAll('the current host', 'Kimi Code');
+    text = text.replaceAll('current host', 'Kimi Code');
   }
   if (assetName === 'ultra-review') {
-    text = text.replace(
-      '# /ultra-review - Ultra Review System',
-      `# /ultra-review - Ultra Review System
-
-## Kimi native worker contract
-
-Use one Kimi \`AgentSwarm\` call when two or more independent reviewers are selected; use one
-foreground Kimi \`Agent\` call when only one reviewer is selected. Each reviewer first reads its
-matching prompt template (for example \`$KIMI_PLUGIN_ROOT/agents/review-code.md\`) and writes only
-its JSON artifact under \`SESSION_PATH\`. Run the coordinator as a final foreground Kimi \`Agent\`
-after the reviewer artifacts are complete. Kimi has no custom-agent plugin manifest field; these
-bundled files are bounded prompt templates, not separately registered host agents.`,
-    );
-    const executionContract = [
-      '### Phase 3: Kimi Reviewer Execution (File-Based)',
-      '',
-      'When two or more reviewers are selected, call Kimi `AgentSwarm` exactly once and make it the',
-      'only tool call in that response. Use `subagent_type: "coder"`, a `prompt_template` containing',
-      '`{{item}}`, and the selected reviewer names as the `items` array. The filled prompt must tell',
-      'each reviewer to:',
-      '',
-      '1. Read `$KIMI_PLUGIN_ROOT/agents/{{item}}.md` and follow that bounded worker contract.',
-      '2. Review only `DIFF_FILES` / `DIFF_RANGE` and write',
-      '   `{SESSION_PATH}/{{item}}.json` using the schema at',
-      '   `$KIMI_PLUGIN_ROOT/skills/ultra-review/references/unified-schema.md`.',
-      '3. Report at most 12 findings with confidence >= 75, ordered by severity then confidence.',
-      '4. Return only `Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>` after the file exists.',
-      '',
-      'Kimi `AgentSwarm` is foreground and accepts at least two items; it has no',
-      '`run_in_background` field. When exactly one reviewer is selected, launch one foreground Kimi',
-      '`Agent` with `subagent_type: "coder"`, `run_in_background: false`, and the same file contract.',
-      'The short final lines may appear in the parent context; the JSON files remain the only findings',
-      'input to the coordinator.',
-      '',
-      '### Phase 4: Validate & Coordinate',
-      '',
-      '**Step 4a: validate reviewer artifacts** — after the foreground call returns, run:',
-      '',
-      '```bash',
-      'python3 "$KIMI_PLUGIN_ROOT/skills/ultra-review/scripts/review_wait.py" {SESSION_PATH} agents {AGENT_COUNT}',
-      '```',
-      '',
-      'Use only the valid `review-*.json` files reported by the waiter. A partial result is explicit;',
-      'zero valid reviewer files skips coordination and reports the failure.',
-      '',
-      '**Step 4b: coordinate** — Launch the coordinator with one foreground Kimi `Agent` call using',
-      '`subagent_type: "coder"` and `run_in_background: false`. Its prompt must first read',
-      '`$KIMI_PLUGIN_ROOT/agents/review-coordinator.md`, then read the valid reviewer JSON files,',
-      'deduplicate findings, and write `SUMMARY.md` plus `SUMMARY.json` under `SESSION_PATH`.',
-      '',
-      '**Step 4c: validate the summary** — after the coordinator returns, run:',
-      '',
-      '```bash',
-      'python3 "$KIMI_PLUGIN_ROOT/skills/ultra-review/scripts/review_wait.py" {SESSION_PATH} summary',
-      '```',
-      '',
-      'Read `SUMMARY.json` only after this validation succeeds.',
-    ].join('\n');
-    text = text.replace(
-      /#{2,3} Phase 3:[\s\S]*?#{2,3} Phase 5: Report to User/,
-      `${executionContract}\n\n## Phase 5: Report to User`,
+    text = text.replaceAll(
+      "the current host's native bounded-worker mechanism",
+      'Kimi `AgentSwarm` for parallel reviewers or one foreground Kimi `Agent` for a single reviewer, using the worker prompt files under `$KIMI_PLUGIN_ROOT/agents/`',
     );
-    text = text.replaceAll('Background Execution', 'Reviewer Execution');
-    text = text.replaceAll('Wait & Coordinate', 'Validate & Coordinate');
+  }
+  if (assetName === 'learn') {
+    text = text.replaceAll("current host's user skill directory", '`~/.kimi-code/skills`');
   }
   text = text.replace(
     /(^|[\s`("'])\/ultra-(?!builder-pro:)([a-z][a-z0-9-]*)/gm,

package/adapters/opencode.js

@@ -70,62 +70,29 @@ function openCodeTextTransform(input, assetName = '') {
   text = text.replaceAll('CLAUDE.md', 'AGENTS.md');
   text = text.replace(/@skills\/([a-z0-9-]+)\/SKILL\.md/g, '~/.config/opencode/skills/$1/SKILL.md');
 
-  text = text.replaceAll('TaskCreate/TaskUpdate (session-local)', 'the OpenCode plan (session-local)');
-  text = text.replaceAll('TaskCreate', 'an OpenCode plan item');
-  text = text.replaceAll('TaskUpdate', 'an OpenCode plan update');
-  text = text.replaceAll('TaskList', 'the current OpenCode plan');
-  text = text.replaceAll('`run_in_background: true`', 'concurrent OpenCode task execution');
-  text = text.replaceAll('run_in_background: true', 'concurrent OpenCode task execution');
-  text = text.replaceAll('Claude Task tool', 'OpenCode `task` tool');
-  text = text.replaceAll('Task tool', 'OpenCode `task` tool');
-  text = text.replaceAll('multiple Task calls', 'multiple OpenCode `task` calls');
-  text = text.replaceAll('Bash tool', 'OpenCode `bash` tool');
-  text = text.replaceAll('Read tool', 'OpenCode `read` tool');
-  text = text.replaceAll('Write tool', 'OpenCode `edit` tool');
-
-  text = text.replaceAll('MCP `review.run`', 'OpenCode native review subagents');
-  text = text.replaceAll('`review.run`', 'OpenCode native review subagents');
-  text = text.replaceAll('review.run', 'OpenCode native review subagents');
-  text = text.replaceAll('MCP `ask.question`', 'OpenCode `question` tool');
-  text = text.replaceAll('`ask.question`', 'OpenCode `question` tool');
-  text = text.replaceAll('ask.question', 'OpenCode question tool');
-  text = text.replaceAll('AskUserQuestion', 'OpenCode `question` tool');
-  text = text.replaceAll('ultra-tools ask --question … --options …', 'OpenCode `question` tool');
-  text = text.replaceAll('ultra-tools ask --question …', 'OpenCode `question` tool');
-  text = text.replaceAll('ultra-tools ask …', 'OpenCode `question` tool');
-  text = text.replaceAll('Claude runtime', 'OpenCode runtime');
-  text = text.replaceAll('Claude-only', 'OpenCode-only');
-
   if (assetName === 'codex-collab') {
-    text = text.replaceAll('within Claude Code', 'from OpenCode');
-    text = text.replaceAll('Claude Code remains primary', 'OpenCode remains primary');
-    text = text.replaceAll('Claude orchestrates', 'OpenCode remains primary and orchestrates');
-    text = text.replaceAll('Claude synthesizes', 'OpenCode verifies and synthesizes');
-    text = text.replaceAll("Claude's", "OpenCode's");
-    text = text.replaceAll('proceed with Claude-only analysis', 'proceed with OpenCode-only analysis');
+    text = text.replaceAll('the current host', 'OpenCode');
+    text = text.replaceAll('current host', 'OpenCode');
   }
   if (assetName === 'ultra-verify') {
+    text = text.replaceAll('the current host', 'OpenCode');
+    text = text.replaceAll('current host', 'OpenCode');
     text = text.replaceAll('claude-analysis.md', 'opencode-analysis.md');
     text = text.replaceAll('Claude Code', 'OpenCode');
     text = text.replaceAll('Claude', 'OpenCode');
   }
-  if (assetName === 'learn') {
-    text = text.replaceAll(
-      '~/.config/opencode/skills/learned/<name>_unverified.md',
-      '~/.config/opencode/skills/learned-<name>-unverified/SKILL.md',
-    );
-    text = text.replaceAll(
-      '~/.config/opencode/skills/learned/<pattern-slug>_unverified.md',
-      '~/.config/opencode/skills/learned-<pattern-slug>-unverified/SKILL.md',
-    );
+  if (assetName === 'cc-collab') {
+    text = text.replaceAll('the current host', 'OpenCode');
+    text = text.replaceAll('current host', 'OpenCode');
+  }
+  if (assetName === 'ultra-review') {
     text = text.replaceAll(
-      '~/.config/opencode/skills/learned/<slug>_unverified.md',
-      '~/.config/opencode/skills/learned-<slug>-unverified/SKILL.md',
+      "the current host's native bounded-worker mechanism",
+      'the OpenCode `task` tool using the installed bounded review agents',
     );
-    text = text.replaceAll('append the `_unverified` suffix to the filename', 'append `-unverified` to the skill directory name');
-    text = text.replaceAll('Never overwrite an existing unverified file', 'Never overwrite an existing learned skill directory');
-    text = text.replaceAll('remove the `_unverified` suffix', 'rename the directory to remove `-unverified` and update the frontmatter name');
-    text = text.replaceAll('(`pattern-slug-2_unverified.md`)', '(`learned-pattern-slug-2-unverified/`)');
+  }
+  if (assetName === 'learn') {
+    text = text.replaceAll("current host's user skill directory", '`~/.config/opencode/skills`');
   }
   return text;
 }

package/adapters/tests/claude.test.cjs

@@ -7,7 +7,12 @@ const os = require('node:os');
 const path = require('node:path');
 
 const claude = require('../claude.js');
-const { skillsForRuntime, WORKFLOW_HOOK_FILES } = require('../_shared/runtime-assets.cjs');
+const { parse: parseFrontmatter } = require('../_shared/frontmatter.cjs');
+const {
+  INTERNAL_AGENT_SKILLS,
+  skillsForRuntime,
+  WORKFLOW_HOOK_FILES,
+} = require('../_shared/runtime-assets.cjs');
 
 const REPO_ROOT = path.resolve(__dirname, '..', '..');
 
@@ -60,17 +65,26 @@ test('Claude plugin collaboration and learn workflows are safe native plugin ass
     const plan = read('ultra-plan');
     const status = read('ultra-status');
 
-    assert.match(learn, /~\/.claude\/skills\/learned-<pattern-slug>-unverified\/SKILL\.md/);
-    assert.doesNotMatch(learn, /_unverified\.md/);
+    assert.match(learn, /`~\/.claude\/skills`/);
+    assert.doesNotMatch(learn, /_unverified|learned-[^\s/]*-unverified/i);
     assert.match(codexCollab, /-s read-only/);
+    assert.match(codexCollab, /--ephemeral/);
+    assert.match(codexCollab, /--ignore-user-config/);
     assert.match(verify, /-s read-only/);
-    assert.match(verify, /\$CLAUDE_PLUGIN_ROOT\/skills\/ultra-verify\/scripts\/verify_wait\.py/);
-    assert.match(review, /\$CLAUDE_PLUGIN_ROOT\/skills\/ultra-review\/scripts\/review_wait\.py/);
-    assert.match(plan, /LEGACY_STATE_MIGRATION_REQUIRED/);
-    assert.match(plan, /never read or write .*tasks\.json/i);
-    assert.match(status, /never fall back .*tasks\.json/i);
+    assert.match(verify, /--ephemeral/);
+    assert.match(verify, /scripts\/verify_wait\.py/);
+    assert.match(review, /Claude Code Task workers/);
+    assert.match(review, /scripts\/review_wait\.py/);
+    assert.doesNotMatch(plan, /LEGACY_STATE_MIGRATION_REQUIRED|v4\.4|v4\.5/);
+    assert.match(plan, /Never read or\s+write .*tasks\.json/i);
+    assert.match(status, /Never fall\s+back to generated task JSON/i);
     assert.doesNotMatch(plan, /ultra-tools task create/);
 
+    for (const name of skillsForRuntime('claude')) {
+      const { fm } = parseFrontmatter(read(name));
+      assert.equal(fm['user-invocable'], !INTERNAL_AGENT_SKILLS.includes(name), name);
+    }
+
     for (const [name, contents] of Object.entries({ codexCollab, verify })) {
       assert.doesNotMatch(contents, /--yolo|--full-auto|\/codex:/, name);
     }

package/adapters/tests/codex.test.cjs

@@ -14,6 +14,7 @@ const codex = require('../codex.js');
 const { parse: parseFrontmatter } = require('../_shared/frontmatter.cjs');
 const PACKAGE_VERSION = require('../../package.json').version;
 const {
+  MCP_DEPENDENT_SKILLS,
   skillsForRuntime,
   WORKFLOW_HOOK_FILES,
 } = require('../_shared/runtime-assets.cjs');
@@ -40,6 +41,7 @@ const AGENTS = [
   'review-coordinator',
   'review-design',
   'review-errors',
+  'review-spec',
   'review-tests',
   'tdd-runner',
 ];
@@ -122,12 +124,22 @@ test('every generated skill is Codex-valid, UI-visible, and free of Claude host
         /~\/\.claude|CLAUDE\.md|AskUserQuestion|(^|[\s`(>])\/(?:ultra-[a-z-]+|recall|learn|codex-collab)(?=$|[\s`,.;):])/m,
       );
       assert.doesNotMatch(text, /TaskCreate|TaskUpdate|TaskList|TaskOutput|run_in_background|~\/\.codex\/skills|mcp__claude/);
+      assert.doesNotMatch(text, /[\u3400-\u9fff]|ultra-review-findings-v1|Context7|Exa MCP|confidence\s*>=?\s*\d+/iu);
 
       const openai = yaml.load(fs.readFileSync(path.join(skillDir, 'agents', 'openai.yaml'), 'utf8'));
       assert.ok(openai.interface.display_name);
       assert.ok(openai.interface.short_description);
       assert.match(openai.interface.default_prompt, new RegExp(`\\$ultra-builder-pro:${name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`));
-      assert.equal(typeof openai.policy.allow_implicit_invocation, 'boolean');
+      assert.equal(openai.policy.allow_implicit_invocation, false);
+      if (MCP_DEPENDENT_SKILLS.includes(name)) {
+        assert.deepEqual(openai.dependencies.tools, [{
+          type: 'mcp',
+          value: 'ultra-builder-pro',
+          description: 'Ultra Builder Pro authoritative task and change runtime',
+        }]);
+      } else {
+        assert.equal(openai.dependencies, undefined);
+      }
     }
 
     const cc = fs.readFileSync(path.join(layout.pluginRoot, 'skills', 'cc-collab', 'SKILL.md'), 'utf8');
@@ -146,13 +158,14 @@ test('every generated skill is Codex-valid, UI-visible, and free of Claude host
 
     const review = fs.readFileSync(path.join(layout.pluginRoot, 'skills', 'ultra-review', 'SKILL.md'), 'utf8');
     assert.match(review, /native Codex custom agents/);
-    assert.match(review, /~\/plugins\/ultra-builder-pro\/skills\/ultra-review/);
+    assert.match(review, /review-spec/);
+    assert.match(review, /scripts\/review_wait\.py/);
 
     const plan = fs.readFileSync(path.join(layout.pluginRoot, 'skills', 'ultra-plan', 'SKILL.md'), 'utf8');
     const status = fs.readFileSync(path.join(layout.pluginRoot, 'skills', 'ultra-status', 'SKILL.md'), 'utf8');
-    assert.match(plan, /LEGACY_STATE_MIGRATION_REQUIRED/);
-    assert.match(plan, /Never read or write .*tasks\.json/i);
-    assert.match(status, /Never fall back to .*tasks\.json/i);
+    assert.doesNotMatch(plan, /LEGACY_STATE_MIGRATION_REQUIRED|v4\.4|v4\.5/);
+    assert.match(plan, /Never read or\s+write .*tasks\.json/i);
+    assert.match(status, /Never fall\s+back to generated task JSON/i);
 
     const coreWorkflowText = [
       ...COMMANDS,
@@ -168,7 +181,7 @@ test('every generated skill is Codex-valid, UI-visible, and free of Claude host
   }
 });
 
-test('install converts all nine Claude agents into native Codex agent TOML', () => {
+test('install converts all bundled agent prompts into native Codex agent TOML', () => {
   const layout = mkLayout();
   try {
     const report = install(layout);

package/adapters/tests/kimi.test.cjs

@@ -121,20 +121,19 @@ test('Kimi assets are allowlisted and adapted to native tools and paths', () =>
       path.join(pluginRoot, 'skills', 'using-ultra-builder-pro', 'SKILL.md'),
       'utf8',
     );
-    assert.match(learn, /~\/.kimi-code\/skills\/learned-<pattern-slug>-unverified\/SKILL\.md/);
+    assert.match(learn, /`~\/.kimi-code\/skills`/);
+    assert.doesNotMatch(learn, /_unverified|learned-[^\s/]*-unverified/i);
     assert.match(review, /Kimi `AgentSwarm`/);
-    assert.match(review, /Five engineering specialists/);
-    assert.match(review, /axes\.spec_fidelity/);
-    assert.doesNotMatch(review, /6 specialized|ALL 6/);
-    assert.match(review, /\$KIMI_PLUGIN_ROOT\/agents\/review-code\.md/);
-    assert.match(review, /`prompt_template` containing\s+`\{\{item\}\}`/);
-    assert.match(review, /selected reviewer names as the `items` array/);
-    assert.match(review, /Launch the coordinator with one foreground Kimi `Agent` call/);
-    assert.doesNotMatch(review, /background mode|Set Kimi `AgentSwarm` parallel execution|Launch review-coordinator with Kimi `AgentSwarm`/);
-    assert.match(init, /\| Kimi \| `\/ultra-builder-pro:ultra-init/);
-    assert.doesNotMatch(init, /codex exec "run \/ultra-init/);
+    assert.match(review, /\$KIMI_PLUGIN_ROOT\/agents\//);
+    assert.match(review, /scripts\/review_wait\.py/);
+    assert.match(review, /spec_fidelity/);
+    assert.match(review, /engineering_standards/);
+    assert.doesNotMatch(review, /background mode|run_in_background/);
+    assert.match(init, /task\.init_project/);
+    assert.doesNotMatch(init, /Claude Code|OpenCode|Codex/);
     assert.match(bootstrap, /\.ultra\/state\.db/);
     assert.match(bootstrap, /external providers/);
+    assert.match(fs.readFileSync(path.join(pluginRoot, 'skills', 'codex-collab', 'SKILL.md'), 'utf8'), /--ephemeral/);
 
     const allPromptAssets = [];
     for (const root of ['commands', 'skills', 'agents']) {
@@ -153,6 +152,7 @@ test('Kimi assets are allowlisted and adapted to native tools and paths', () =>
       const text = fs.readFileSync(file, 'utf8');
       assert.doesNotMatch(text, foreign, file);
       assert.doesNotMatch(text, /(^|[\s`("'])\/ultra-(?!builder-pro:)[a-z]/m, file);
+      assert.doesNotMatch(text, /[\u3400-\u9fff]|ultra-review-findings-v1|Context7|Exa MCP|confidence\s*>=?\s*\d+/iu, file);
     }
   } finally {
     fs.rmSync(home, { recursive: true, force: true });

package/adapters/tests/opencode.test.cjs

@@ -64,15 +64,17 @@ test('install performs content-level OpenCode adaptation for commands, skills, r
     const verify = fs.readFileSync(path.join(target, 'skills', 'ultra-verify', 'SKILL.md'), 'utf8');
 
     assert.deepEqual(Object.keys(parseFm(plan).fm), ['name', 'description']);
-    assert.match(learn, /~\/.config\/opencode\/skills\/learned-<pattern-slug>-unverified\/SKILL\.md/);
-    assert.doesNotMatch(learn, /_unverified\.md/);
-    assert.match(review, /~\/.config\/opencode\/skills\/ultra-review\/scripts\/review_wait\.py/);
+    assert.match(learn, /`~\/.config\/opencode\/skills`/);
+    assert.doesNotMatch(learn, /_unverified|learned-[^\s/]*-unverified/i);
+    assert.match(review, /OpenCode `task` tool/);
+    assert.match(review, /scripts\/review_wait\.py/);
     assert.match(codexCollab, /OpenCode remains primary/);
-    assert.match(verify, /OpenCode remains primary/);
+    assert.match(verify, /OpenCode writes the first analysis/);
     assert.match(verify, /opencode-analysis\.md/);
     assert.match(verify, /codex exec -s read-only/);
-    assert.match(plan, /LEGACY_STATE_MIGRATION_REQUIRED/);
-    assert.match(plan, /never read or write .*tasks\.json/i);
+    assert.match(verify, /--ignore-user-config/);
+    assert.doesNotMatch(plan, /LEGACY_STATE_MIGRATION_REQUIRED|v4\.4|v4\.5/);
+    assert.match(plan, /never read or\s+write .*tasks\.json/i);
     assert.doesNotMatch(plan, /ultra-tools task create/);
 
     const markdown = [];
@@ -89,7 +91,9 @@ test('install performs content-level OpenCode adaptation for commands, skills, r
     }
     const incompatible = /~\/.claude|CLAUDE\.md|AskUserQuestion|TaskCreate|TaskUpdate|TaskList|run_in_background:\s*true|--yolo|--full-auto|\/codex:|ask\.question|review\.run/;
     for (const file of markdown) {
-      assert.doesNotMatch(fs.readFileSync(file, 'utf8'), incompatible, file);
+      const text = fs.readFileSync(file, 'utf8');
+      assert.doesNotMatch(text, incompatible, file);
+      assert.doesNotMatch(text, /[\u3400-\u9fff]|ultra-review-findings-v1|Context7|Exa MCP|confidence\s*>=?\s*\d+/iu, file);
     }
   } finally {
     fs.rmSync(target, { recursive: true, force: true });

package/agents/code-reviewer.md

@@ -1,27 +1,6 @@
 ---
 name: code-reviewer
-description: |
-  Code review specialist for quality, security, and maintainability analysis.
-  Use proactively after writing or modifying code, before commits, or for PR review.
-  Isolates review context from main conversation.
-
-  <example>
-  Context: User has finished implementing a feature
-  user: "I've added the new authentication feature. Can you check if everything looks good?"
-  assistant: "I'll use the code-reviewer agent to review your recent changes."
-  <commentary>
-  Code review after feature completion - isolate verbose review output.
-  </commentary>
-  </example>
-
-  <example>
-  Context: Before creating a PR
-  user: "I think I'm ready to create a PR for this feature"
-  assistant: "Before creating the PR, let me run the code-reviewer agent to ensure all code meets standards."
-  <commentary>
-  Pre-PR review gate - catch issues before they reach reviewers.
-  </commentary>
-  </example>
+description: Review an explicit diff or file set for consequential correctness, security, integration, test, and maintainability defects. Use for a bounded read-only review before commit, merge, or release.
 tools: Read, Grep, Glob, Bash, Write, Edit
 model: opus
 maxTurns: 30
@@ -31,72 +10,32 @@ skills:
   - integration-rules
 ---
 
-# Code Review Specialist
-
-Systematic code review with senior engineer lens. Focus on correctness, security, architecture, and maintainability.
-
-## Mode Detection
-
-Determine mode from the task prompt:
-
-| Mode | Trigger | Behavior |
-|------|---------|----------|
-| **report** | Default, or prompt says "report" / "review only" | Report findings only. Do NOT modify source code. |
-| **fix** | Prompt says "fix" / "fix-first" / "review and fix" | Auto-fix mechanical issues, ask about judgment calls. |
-
-## Process
-
-Follow the 7-step workflow defined in the `code-review-expert` skill:
-
-1. **Preflight context** - Scope changes via git diff, handle edge cases (empty diff, large diff >500 lines, mixed concerns)
-2. **SOLID + architecture** - Load `references/solid-checklist.md`, check SRP/OCP/LSP/ISP/DIP violations and code smells
-3. **Removal candidates** - Load `references/removal-plan.md`, identify dead code with safe-now vs defer-with-plan distinction
-4. **Security and reliability** - Load `references/security-checklist.md`, check injection, auth, race conditions, crypto, supply chain
-5. **Code quality** - Load `references/code-quality-checklist.md`, check error handling, performance/caching, boundary conditions
-6. **Output** - Structured findings by severity (P0-P3)
-7. **Action** (mode-dependent):
-   - **report mode**: Present findings, ask user how to proceed
-   - **fix mode**: Execute Fix-First flow (see below)
-
-## Fix-First Flow (fix mode only)
-
-After collecting all findings, classify each as AUTO-FIX or ASK:
-
-**AUTO-FIX** (apply directly, report one-liner):
-- Unused imports, dead variables
-- Missing return types (when unambiguous)
-- Formatting / whitespace issues
-- Obvious bug fixes (null check, off-by-one, missing await)
-- Forbidden pattern removal (console.log in prod, TODO comments)
-
-**ASK** (batch into one question to user):
-- Architecture changes, logic refactors
-- Security-related changes
-- Trade-off decisions (performance vs readability)
-- Any P0 finding (always confirm before touching)
+# Code review specialist
 
-**Execution**:
-1. Apply all AUTO-FIX items. For each: `[AUTO-FIXED] file:line — Problem → Fix`
-2. Batch all ASK items into ONE summary. For each: number, severity, problem, recommended fix, options A) Fix / B) Skip
-3. Apply user-approved fixes
-4. Output final summary: `Review: N total (X auto-fixed, Y user-fixed, Z skipped)`
+Review the assigned scope against the current checkout and supplied acceptance
+evidence. Default to read-only analysis.
 
-## Severity Levels
+## Workflow
 
-| Level | Name | Action |
-|-------|------|--------|
-| **P0** | Critical | Security vulnerability, data loss, correctness bug - must block merge |
-| **P1** | High | Logic error, SOLID violation, performance regression - should fix before merge |
-| **P2** | Medium | Code smell, maintainability concern - fix or create follow-up |
-| **P3** | Low | Style, naming, minor suggestion - optional |
+1. Resolve the exact diff, file set, HEAD, intended outcome, and repository guidance.
+   Report an empty or ambiguous scope instead of expanding it silently.
+2. Trace changed behavior from its entry point to state, side effects, errors, and a
+   real consumer.
+3. Follow `code-review-expert`. Load its security, integration, design, or removal
+   references only when the diff contains that risk.
+4. Confirm each candidate finding against the current source and a plausible trigger.
+   Discard generic advice, speculative future concerns, and style preferences that do
+   not affect the accepted outcome.
+5. Report findings in severity order with a tight file and line range, trigger, impact,
+   evidence, and smallest complete remediation.
+6. If no defect is supported, say so and name any remaining verification gap.
 
-## Additional Checks (from CLAUDE.md rules)
+## Mutation boundary
 
-- Pattern violations: mock usage, TODO/FIXME, console.log in prod
-- Architecture: business state kept only in volatile process state, missing persistence
-- Forbidden patterns: InMemoryRepository, jest.mock for domain/service, hardcoded config
-- Integration: orphan code (no entry point), missing contract tests, horizontal-only changes
+Do not edit during an ordinary review. If the parent explicitly assigns review and
+fix, modify only findings within the accepted scope, preserve unrelated changes, and
+rerun the checks invalidated by each edit. Judgment-heavy or scope-expanding fixes
+return to the primary agent for a decision.
 
-Use only the current checkout, the task context supplied by the parent agent, and
-verifiable runtime evidence. Persistent memory is owned by the host's separately
-installed memory provider, not by this agent.
+Use the current checkout and parent-supplied context only. Return a concise review,
+not raw tool output.