voidmachine 4.0.0 → 5.0.1

package/core-assets/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness",
-  "version": "4.0.0",
+  "version": "5.0.1",
   "description": "VoidCorp universal craftsman skills (void-tdd, void-typescript-strict, void-hexagonal-architecture, void-domain-driven-design, void-functional, void-code-review, void-api-and-interface-design, void-source-driven-development, void-context, void-learn, void-decide, void-claude-md, void-observability, void-security-guidance, ...) plus 12 PreToolUse enforcement hooks (tdd-guard, no-any, protect-sensitive-files, block-dangerous-bash, no-ai-design-slop, ...) and PostToolUse/SessionStart lifecycle hooks (incl. trim-large-output token frugality), five read-only critics including doctrine-critic, native architecture/security/QA specialists, and the void-graph, void-doctor and void-audit gestures, which are skills like everything else.",
   "author": {
     "name": "VoidCorp",
@@ -201,6 +201,14 @@
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle context-continuity claude"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle herdr-metadata claude"
+          }
+        ]
       }
     ],
     "UserPromptSubmit": [
@@ -229,6 +237,14 @@
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle checkpoint-audit claude"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle herdr-metadata claude"
+          }
+        ]
       }
     ],
     "Stop": [
@@ -247,6 +263,22 @@
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle typecheck claude"
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle delegation-result claude"
+          }
+        ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/_void-hook.mjs\" lifecycle herdr-metadata claude"
+          }
+        ]
       }
     ]
   }

package/core-assets/agents/independent-code-reviewer.md

@@ -25,6 +25,7 @@ Own the one independent general review of the exact committed HEAD, base, and ac
 
 Run when any condition matches:
 - code-change
+- profile-base
 
 ## Invocation stages
 

package/core-assets/codex/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "Codex CLI hooks manifest — the Codex-side mirror of the Claude Code hooks wired in ../.claude-plugin/plugin.json. Both runtimes invoke the same portable Node rules; the runner normalizes Claude single-file Edit/Write and Codex multi-file apply_patch. `void-machine init` stages the runner and compiles absolute paths so sessions started in subdirectories still work. NOT mirrored, deliberately: trim-large-output, whose PostToolUse output rewriting is unconfirmed on Codex. See ../../../docs/CODEX.md.",
+  "description": "Codex CLI hooks manifest — the Codex-side mirror of the Claude Code hooks wired in ../.claude-plugin/plugin.json. Both runtimes invoke the same portable Node rules; the runner normalizes Claude single-file Edit/Write and Codex multi-file apply_patch. `void-machine init` stages the runner and compiles each command into a Node bootstrap that finds it from the session directory, so the versioned manifest holds no machine path. NOT mirrored, deliberately: trim-large-output, whose PostToolUse output rewriting is unconfirmed on Codex. See ../../../docs/CODEX.md.",
   "hooks": {
     "PreToolUse": [
       {
@@ -120,6 +120,11 @@
         "hooks": [
           { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle context-continuity codex" }
         ]
+      },
+      {
+        "hooks": [
+          { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle herdr-metadata codex" }
+        ]
       }
     ],
     "UserPromptSubmit": [
@@ -139,6 +144,11 @@
         "hooks": [
           { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle checkpoint-audit codex" }
         ]
+      },
+      {
+        "hooks": [
+          { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle herdr-metadata codex" }
+        ]
       }
     ],
     "Stop": [
@@ -151,6 +161,11 @@
         "hooks": [
           { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle typecheck codex" }
         ]
+      },
+      {
+        "hooks": [
+          { "type": "command", "command": "node \"${VOID_HOOKS_DIR}/_void-hook.mjs\" lifecycle herdr-metadata codex" }
+        ]
       }
     ]
   }

package/core-assets/data/catalog.v3.json

@@ -5,7 +5,7 @@
   "source": {
     "kind": "adapter",
     "version": "3.0.0-alpha.1",
-    "rootHash": "sha256:607962ba58706b1ab0eb4af417d2ba7e5cd0698cf7a4871f91d98d540aa98ece"
+    "rootHash": "sha256:69ada8c7a668574252b442c0bb1cde65d4d878973c9c59cc86871a147393bba9"
   },
   "nodes": [
     {
@@ -268,11 +268,11 @@
         "legacy": {
           "description": "Performs an independent diff review for correctness, maintainability, boundary compliance, and evidence-backed release blockers.",
           "id": "agent:independent-code-reviewer",
-          "lines": 61,
+          "lines": 62,
           "name": "independent-code-reviewer",
           "pack": null,
           "source": "packages/core/agents/independent-code-reviewer.md",
-          "staticTokens": 1361,
+          "staticTokens": 1365,
           "type": "agent"
         }
       },
@@ -3534,7 +3534,7 @@
       "label": "void-autopilot",
       "data": {
         "legacy": {
-          "description": "Use to run the continuous delivery loop, where a curator ranks the backlog, up to four workers each run void-implement to a PR, and a bounded review gates the GitHub merge queue until drained or stopped.",
+          "description": "Use to run the continuous delivery loop, where a curator ranks the backlog, up to four workers each run void-implement to a PR, and a local review verdict gates each merge until drained or stopped.",
           "enforcement": {
             "floor": "ci",
             "inline": {
@@ -3551,7 +3551,7 @@
             }
           ],
           "id": "skill:void-autopilot",
-          "lines": 358,
+          "lines": 394,
           "name": "void-autopilot",
           "owner": "folpe",
           "pack": null,
@@ -3560,7 +3560,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-autopilot/SKILL.md",
-          "staticTokens": 6056,
+          "staticTokens": 6967,
           "type": "skill"
         }
       },
@@ -3599,7 +3599,7 @@
             }
           ],
           "id": "skill:void-brainstorm",
-          "lines": 271,
+          "lines": 278,
           "name": "void-brainstorm",
           "owner": "folpe",
           "pack": null,
@@ -3608,7 +3608,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-brainstorm/SKILL.md",
-          "staticTokens": 4143,
+          "staticTokens": 4226,
           "type": "skill"
         }
       },
@@ -3841,7 +3841,7 @@
             }
           ],
           "id": "skill:void-context",
-          "lines": 167,
+          "lines": 166,
           "name": "void-context",
           "owner": "folpe",
           "pack": null,
@@ -3850,7 +3850,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-context/SKILL.md",
-          "staticTokens": 2874,
+          "staticTokens": 2865,
           "type": "skill"
         }
       },
@@ -4331,7 +4331,7 @@
             }
           ],
           "id": "skill:void-implement",
-          "lines": 183,
+          "lines": 192,
           "name": "void-implement",
           "owner": "folpe",
           "pack": null,
@@ -4340,7 +4340,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-implement/SKILL.md",
-          "staticTokens": 5527,
+          "staticTokens": 5664,
           "type": "skill"
         }
       },
@@ -4654,6 +4654,54 @@
         ]
       }
     },
+    {
+      "id": "catalog:skill:skill:void-orchestrate",
+      "kind": "skill",
+      "label": "void-orchestrate",
+      "data": {
+        "legacy": {
+          "description": "Delegate independent research and substantial implementation through native agents; choose context, isolation and bounded concurrency, collect results and preserve review evidence. Use the supported session host.",
+          "enforcement": {
+            "floor": "ci",
+            "inline": {
+              "claude": "pretooluse",
+              "codex": "pretooluse",
+              "hermes": "ci-only"
+            }
+          },
+          "evalTargets": [
+            {
+              "provider": "anthropic",
+              "runtime": "claude",
+              "tier": "opus"
+            }
+          ],
+          "id": "skill:void-orchestrate",
+          "lines": 311,
+          "name": "void-orchestrate",
+          "owner": "folpe",
+          "pack": null,
+          "runtimes": [
+            "claude",
+            "codex"
+          ],
+          "source": "packages/core/skills/void-orchestrate/SKILL.md",
+          "staticTokens": 4402,
+          "type": "skill"
+        }
+      },
+      "provenance": {
+        "origin": "extracted",
+        "confidence": 1,
+        "sources": [
+          {
+            "kind": "path",
+            "ref": "packages/core/skills/void-orchestrate/SKILL.md",
+            "hashOrVersion": "catalog-v1"
+          }
+        ]
+      }
+    },
     {
       "id": "catalog:skill:skill:void-plan",
       "kind": "skill",
@@ -4677,7 +4725,7 @@
             }
           ],
           "id": "skill:void-plan",
-          "lines": 239,
+          "lines": 246,
           "name": "void-plan",
           "owner": "folpe",
           "pack": null,
@@ -4686,7 +4734,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-plan/SKILL.md",
-          "staticTokens": 2623,
+          "staticTokens": 2706,
           "type": "skill"
         }
       },
@@ -4954,7 +5002,7 @@
       "data": {
         "legacy": {
           "activation": "always",
-          "description": "Default-secure at trust boundaries. Zod at every input, secrets via env, SQL parameterized, Better-Auth, LLM I/O untrusted. Escalate to security-audit for deep audits. Use on trust-boundary code.",
+          "description": "Secure defaults at trust boundaries and scoped credential operations. Zod input, app secrets via env, confidential external provisioning, SQL parameterized, Better-Auth, untrusted LLM I/O. Deep audits use void-security-audit.",
           "enforcement": {
             "floor": "ci",
             "inline": {
@@ -4971,7 +5019,7 @@
             }
           ],
           "id": "skill:void-security-guidance",
-          "lines": 255,
+          "lines": 294,
           "name": "void-security-guidance",
           "owner": "folpe",
           "pack": null,
@@ -4980,7 +5028,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-security-guidance/SKILL.md",
-          "staticTokens": 2479,
+          "staticTokens": 3199,
           "type": "skill"
         }
       },
@@ -5172,7 +5220,7 @@
             }
           ],
           "id": "skill:void-ticket",
-          "lines": 239,
+          "lines": 238,
           "name": "void-ticket",
           "owner": "folpe",
           "pack": null,
@@ -5181,7 +5229,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-ticket/SKILL.md",
-          "staticTokens": 3276,
+          "staticTokens": 3317,
           "type": "skill"
         }
       },

package/core-assets/data/certification.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "harnessVersion": "4.0.0",
+  "harnessVersion": "5.0.1",
   "capabilities": [
     {
       "id": "skill:pack-mobile/void-eas-build-profile",
@@ -1432,6 +1432,32 @@
         "verified": true
       }
     },
+    {
+      "id": "skill:void-orchestrate",
+      "owner": "folpe",
+      "runtimes": [
+        "claude",
+        "codex"
+      ],
+      "enforcement": {
+        "floor": "ci",
+        "inline": {
+          "claude": "pretooluse",
+          "codex": "pretooluse",
+          "hermes": "ci-only"
+        }
+      },
+      "evalTargets": [
+        {
+          "provider": "anthropic",
+          "runtime": "claude",
+          "tier": "opus"
+        }
+      ],
+      "proof": {
+        "verified": true
+      }
+    },
     {
       "id": "skill:void-plan",
       "owner": "folpe",

package/core-assets/data/model.json

@@ -94,11 +94,11 @@
     {
       "description": "Performs an independent diff review for correctness, maintainability, boundary compliance, and evidence-backed release blockers.",
       "id": "agent:independent-code-reviewer",
-      "lines": 61,
+      "lines": 62,
       "name": "independent-code-reviewer",
       "pack": null,
       "source": "packages/core/agents/independent-code-reviewer.md",
-      "staticTokens": 1361,
+      "staticTokens": 1365,
       "type": "agent"
     },
     {
@@ -1686,7 +1686,7 @@
       "type": "skill"
     },
     {
-      "description": "Use to run the continuous delivery loop, where a curator ranks the backlog, up to four workers each run void-implement to a PR, and a bounded review gates the GitHub merge queue until drained or stopped.",
+      "description": "Use to run the continuous delivery loop, where a curator ranks the backlog, up to four workers each run void-implement to a PR, and a local review verdict gates each merge until drained or stopped.",
       "enforcement": {
         "floor": "ci",
         "inline": {
@@ -1703,7 +1703,7 @@
         }
       ],
       "id": "skill:void-autopilot",
-      "lines": 358,
+      "lines": 394,
       "name": "void-autopilot",
       "owner": "folpe",
       "pack": null,
@@ -1712,7 +1712,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-autopilot/SKILL.md",
-      "staticTokens": 6056,
+      "staticTokens": 6967,
       "type": "skill"
     },
     {
@@ -1733,7 +1733,7 @@
         }
       ],
       "id": "skill:void-brainstorm",
-      "lines": 271,
+      "lines": 278,
       "name": "void-brainstorm",
       "owner": "folpe",
       "pack": null,
@@ -1742,7 +1742,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-brainstorm/SKILL.md",
-      "staticTokens": 4143,
+      "staticTokens": 4226,
       "type": "skill"
     },
     {
@@ -1885,7 +1885,7 @@
         }
       ],
       "id": "skill:void-context",
-      "lines": 167,
+      "lines": 166,
       "name": "void-context",
       "owner": "folpe",
       "pack": null,
@@ -1894,7 +1894,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-context/SKILL.md",
-      "staticTokens": 2874,
+      "staticTokens": 2865,
       "type": "skill"
     },
     {
@@ -2195,7 +2195,7 @@
         }
       ],
       "id": "skill:void-implement",
-      "lines": 183,
+      "lines": 192,
       "name": "void-implement",
       "owner": "folpe",
       "pack": null,
@@ -2204,7 +2204,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-implement/SKILL.md",
-      "staticTokens": 5527,
+      "staticTokens": 5664,
       "type": "skill"
     },
     {
@@ -2397,6 +2397,36 @@
       "staticTokens": 2210,
       "type": "skill"
     },
+    {
+      "description": "Delegate independent research and substantial implementation through native agents; choose context, isolation and bounded concurrency, collect results and preserve review evidence. Use the supported session host.",
+      "enforcement": {
+        "floor": "ci",
+        "inline": {
+          "claude": "pretooluse",
+          "codex": "pretooluse",
+          "hermes": "ci-only"
+        }
+      },
+      "evalTargets": [
+        {
+          "provider": "anthropic",
+          "runtime": "claude",
+          "tier": "opus"
+        }
+      ],
+      "id": "skill:void-orchestrate",
+      "lines": 311,
+      "name": "void-orchestrate",
+      "owner": "folpe",
+      "pack": null,
+      "runtimes": [
+        "claude",
+        "codex"
+      ],
+      "source": "packages/core/skills/void-orchestrate/SKILL.md",
+      "staticTokens": 4402,
+      "type": "skill"
+    },
     {
       "description": "Turn an approved spec into vertical slices with dependencies, TDD mode, verification gates, checkpoints, and a tracker handoff. Use after brainstorm approves a spec.",
       "enforcement": {
@@ -2415,7 +2445,7 @@
         }
       ],
       "id": "skill:void-plan",
-      "lines": 239,
+      "lines": 246,
       "name": "void-plan",
       "owner": "folpe",
       "pack": null,
@@ -2424,7 +2454,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-plan/SKILL.md",
-      "staticTokens": 2623,
+      "staticTokens": 2706,
       "type": "skill"
     },
     {
@@ -2584,7 +2614,7 @@
     },
     {
       "activation": "always",
-      "description": "Default-secure at trust boundaries. Zod at every input, secrets via env, SQL parameterized, Better-Auth, LLM I/O untrusted. Escalate to security-audit for deep audits. Use on trust-boundary code.",
+      "description": "Secure defaults at trust boundaries and scoped credential operations. Zod input, app secrets via env, confidential external provisioning, SQL parameterized, Better-Auth, untrusted LLM I/O. Deep audits use void-security-audit.",
       "enforcement": {
         "floor": "ci",
         "inline": {
@@ -2601,7 +2631,7 @@
         }
       ],
       "id": "skill:void-security-guidance",
-      "lines": 255,
+      "lines": 294,
       "name": "void-security-guidance",
       "owner": "folpe",
       "pack": null,
@@ -2610,7 +2640,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-security-guidance/SKILL.md",
-      "staticTokens": 2479,
+      "staticTokens": 3199,
       "type": "skill"
     },
     {
@@ -2730,7 +2760,7 @@
         }
       ],
       "id": "skill:void-ticket",
-      "lines": 239,
+      "lines": 238,
       "name": "void-ticket",
       "owner": "folpe",
       "pack": null,
@@ -2739,7 +2769,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-ticket/SKILL.md",
-      "staticTokens": 3276,
+      "staticTokens": 3317,
       "type": "skill"
     },
     {