ultra-builder-pro-cli 5.0.0 → 5.0.1

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [5.0.1] — 2026-08-26
+
+### Fixed
+
+- Corrected Codex Doctor's Hook-trust observation. Codex owns persisted Hook trust but
+  does not expose the live decision through its plugin CLI, so Doctor now reports
+  `hook_activation: host_managed` with `observable: false` instead of permanently
+  claiming `user_review_required` and instructing already-trusted users to review again.
+  This changes no Hook registration, ACP transport, installation, or permission behavior.
+
 ## [5.0.0] — 2026-08-26
 
 ### Added

package/README.md

@@ -21,7 +21,7 @@ writing authority to a different Agent requires an explicit verified transfer
 
 ## Ultra Builder Pro 5.0
 
-Version `5.0.0` is the current implementation of Ultra as a cognitive-alignment harness
+Version `5.0.1` is the current implementation of Ultra as a cognitive-alignment harness
 for real software engineering. It preserves the accepted 3.0 file-first and model-agency
 constitution, then makes workflow position, recovery, and cross-Agent execution directly
 observable. It is not a decentralized multi-agent platform and it does not prescribe one
@@ -123,7 +123,7 @@ map, evidence convergence, owner checkpoints, and baseline promotion.
 
 ### What happened to the original Agents
 
-Version 5.0.0 does not install a custom `agents/` projection. The old review workers became the
+Version 5.0.1 does not install a custom `agents/` projection. The old review workers became the
 six focused files under `ultra-review/references/`; review coordination and synthesis
 belong to the parent `ultra-review` Skill. The old debugger procedure lives under
 `ultra-dev/references/debugging.md`, and test execution lives under
@@ -204,17 +204,17 @@ Node.js 22 or newer is required.
 
 ```bash
 # Current project, one host
-npx ultra-builder-pro-cli@5.0.0 --claude --local
-npx ultra-builder-pro-cli@5.0.0 --codex --local
+npx ultra-builder-pro-cli@5.0.1 --claude --local
+npx ultra-builder-pro-cli@5.0.1 --codex --local
 
 # Global installation
-npx ultra-builder-pro-cli@5.0.0 --opencode --global
-npx ultra-builder-pro-cli@5.0.0 --kimi --global
-npx ultra-builder-pro-cli@5.0.0 --grok --global
-npx ultra-builder-pro-cli@5.0.0 --zcode --global
+npx ultra-builder-pro-cli@5.0.1 --opencode --global
+npx ultra-builder-pro-cli@5.0.1 --kimi --global
+npx ultra-builder-pro-cli@5.0.1 --grok --global
+npx ultra-builder-pro-cli@5.0.1 --zcode --global
 
 # All supported hosts
-npx ultra-builder-pro-cli@5.0.0 --all --global
+npx ultra-builder-pro-cli@5.0.1 --all --global
 ```
 
 ZCode ACP delegation additionally requires the independently built bridge and an
@@ -261,13 +261,13 @@ Installation is managed, atomic, and provenance-checked.
 
 ```bash
 # Re-running install updates the managed artifact
-npx ultra-builder-pro-cli@5.0.0 --codex --global
+npx ultra-builder-pro-cli@5.0.1 --codex --global
 
 # Read-only diagnosis
-npx ultra-builder-pro-cli@5.0.0 --all --global --doctor --json
+npx ultra-builder-pro-cli@5.0.1 --all --global --doctor --json
 
 # Remove only managed Ultra assets
-npx ultra-builder-pro-cli@5.0.0 --all --global --uninstall
+npx ultra-builder-pro-cli@5.0.1 --all --global --uninstall
 ```
 
 `--config-dir <path>` isolates both the primary config and host-owned sidecars. It is
@@ -458,7 +458,7 @@ conformance rather than semantic acceptance.
 
 - [5.0 design and acceptance contract](docs/ULTRA-BUILDER-PRO-5.0.zh-CN.md) —
   Route, Skill ownership, continuation, ACP/CLI execution, migration, and journey
-  boundaries implemented by 5.0.0.
+  boundaries implemented by 5.0.1.
 - [5.0 journey results](docs/evals/ultra-5-0-journey-results.md) — observable source,
   isolated-runtime, real-provider, real-HOME, and cross-platform outcomes plus the
   deliberately excluded service-deployment boundary.

package/README.zh-CN.md

@@ -17,7 +17,7 @@ Host 模型仍然是工程师。Ultra 提供可复用的方法和可检查的产
 
 ## Ultra Builder Pro 5.0
 
-`5.0.0` 是 Ultra 作为真实软件工程认知对齐 Harness 的当前实现。它保留已接受的
+`5.0.1` 是 Ultra 作为真实软件工程认知对齐 Harness 的当前实现。它保留已接受的
 3.0 file-first 与 model-agency 宪法，再让工作流位置、恢复和跨 Agent 执行变得可直接
 观察。它不是去中心化多 Agent 平台，也不规定唯一的 Agent 拓扑。它只承诺五件事：
 
@@ -108,7 +108,7 @@ subagent 的 Host 可以并行运行 Review lens；其他 Host 则顺序运行
 
 ### 原来的 Agents 去哪里了
 
-`5.0.0` 不安装自定义 `agents/` 投影。原来的 Review workers 变成
+`5.0.1` 不安装自定义 `agents/` 投影。原来的 Review workers 变成
 `ultra-review/references/` 下六个聚焦文件；Review 协调和综合归属于父级
 `ultra-review` Skill。原来的 debugger 流程位于
 `ultra-dev/references/debugging.md`，测试执行流程位于
@@ -185,17 +185,17 @@ receipts 都是派生证据，不是额外语义文档。
 
 ```bash
 # 当前项目，单个 Host
-npx ultra-builder-pro-cli@5.0.0 --claude --local
-npx ultra-builder-pro-cli@5.0.0 --codex --local
+npx ultra-builder-pro-cli@5.0.1 --claude --local
+npx ultra-builder-pro-cli@5.0.1 --codex --local
 
 # 全局安装
-npx ultra-builder-pro-cli@5.0.0 --opencode --global
-npx ultra-builder-pro-cli@5.0.0 --kimi --global
-npx ultra-builder-pro-cli@5.0.0 --grok --global
-npx ultra-builder-pro-cli@5.0.0 --zcode --global
+npx ultra-builder-pro-cli@5.0.1 --opencode --global
+npx ultra-builder-pro-cli@5.0.1 --kimi --global
+npx ultra-builder-pro-cli@5.0.1 --grok --global
+npx ultra-builder-pro-cli@5.0.1 --zcode --global
 
 # 所有受支持 Host
-npx ultra-builder-pro-cli@5.0.0 --all --global
+npx ultra-builder-pro-cli@5.0.1 --all --global
 ```
 
 把任务通过 ACP 派给 ZCode 还需要独立构建的 bridge 和已安装的 ZCode Desktop。
@@ -239,13 +239,13 @@ ZCode uninstall 与 reinstall。
 
 ```bash
 # 重新执行安装会更新受管理产物
-npx ultra-builder-pro-cli@5.0.0 --codex --global
+npx ultra-builder-pro-cli@5.0.1 --codex --global
 
 # 只读诊断
-npx ultra-builder-pro-cli@5.0.0 --all --global --doctor --json
+npx ultra-builder-pro-cli@5.0.1 --all --global --doctor --json
 
 # 只移除受管理的 Ultra 资产
-npx ultra-builder-pro-cli@5.0.0 --all --global --uninstall
+npx ultra-builder-pro-cli@5.0.1 --all --global --uninstall
 ```
 
 `--config-dir <path>` 会同时隔离主配置和 Host 自有 sidecar。它是测试时的安全选择，
@@ -413,7 +413,7 @@ effect；validator 成功只证明结构符合要求，不代表语义已被接
 
 ## 文档
 
-- [5.0 设计与验收合同](docs/ULTRA-BUILDER-PRO-5.0.zh-CN.md) — 5.0.0 已实现的
+- [5.0 设计与验收合同](docs/ULTRA-BUILDER-PRO-5.0.zh-CN.md) — 5.0.1 已实现的
   Route、Skill 职责、continuation、ACP/CLI execution、migration 与 journey 边界。
 - [5.0 journey 结果](docs/evals/ultra-5-0-journey-results.md) — 可观察的 source、
   isolated-runtime、real-provider、real-HOME 与跨平台结果，以及明确排除的服务部署边界。

package/adapters/codex.js

@@ -370,13 +370,10 @@ function doctor(ctx = {}) {
     if (!discovered) report.issues.push({ code: 'HOST_PLUGIN_NOT_DISCOVERED' });
   }
   report.checks.hook_activation = {
-    status: 'user_review_required',
-    reason: 'Codex does not trust non-managed plugin hooks merely because the plugin is installed or enabled.',
+    status: 'host_managed',
+    observable: false,
+    reason: 'Codex owns persisted Hook trust, and its CLI does not expose the live trust decision to plugins.',
   };
-  report.actions = [{
-    code: 'REVIEW_CODEX_HOOK_TRUST',
-    message: 'Open a new Codex session, review the current Ultra hook definition, and trust it before relying on hook acceleration.',
-  }];
   report.status = report.issues.length === 0 ? 'healthy' : 'degraded';
   return report;
 }

package/docs/RUNTIME-COMPAT-MATRIX.md

@@ -81,9 +81,10 @@ descriptions and runtime guard rather than a fabricated routing flag.
 
 All hooks share the same `.ultra/` idle guard. Wire adapters normalize payload and
 output fields only; they do not change semantic policy. Codex installation health and
-hook activation are distinct: Codex skips newly installed non-managed plugin hooks
-until the user reviews and trusts the current definition, so Doctor reports
-`hook_activation: user_review_required` without pretending the hook already ran.
+Hook trust are distinct. Codex owns the persisted trust decision, while its plugin CLI
+does not expose that live decision to Ultra. Doctor therefore reports
+`hook_activation: host_managed` with `observable: false`; it claims neither trusted nor
+untrusted and emits no remediation action without an authoritative Host observation.
 
 ## Agent execution driver selection
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra-builder-pro-cli",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "File-first Ultra Builder Pro workflows for Claude Code, OpenCode, Codex CLI, Kimi Code, Grok Build, and ZCode.",
   "bin": {
     "ultra-builder-pro-cli": "bin/install.js",