yaaw-se 0.1.2 → 0.2.0

package/dist/integrations/codex.js

@@ -1,13 +1,135 @@
-import { makeAdapter } from "./helpers.js";
-export const codexAdapter = makeAdapter({
+import { join } from "node:path";
+import { readFile } from "node:fs/promises";
+import { makeAdapter, pathExists } from "./helpers.js";
+import { normalizeCodexRuntimeSettings } from "./codex-runtime.js";
+import { readTomlManagedValue, validateManagedToml } from "../installer/toml-managed.js";
+const baseAdapter = makeAdapter({
     id: "codex",
     displayName: "Codex",
     executable: "codex",
-    detectionPaths: [".agents", "AGENTS.md"],
+    detectionPaths: [".agents", ".codex", "AGENTS.md"],
     skillsRel: ".agents/skills",
     bootstrapRel: "AGENTS.md",
     bootstrapTemplate: "codex.md",
     managedSection: true,
     hint: skill => `$${skill}`
 });
+const roleDefinitions = {
+    prd: { agent: "yaaw_prd", file: "yaaw-prd.toml", description: "YAAW PRD authority worker. Use only for a YAAW handoff whose role is prd." },
+    planner: { agent: "yaaw_planner", file: "yaaw-planner.toml", description: "YAAW Planner authority worker. Use only for a YAAW handoff whose role is planner." },
+    implementer: { agent: "yaaw_implementer", file: "yaaw-implementer.toml", description: "YAAW Implementer authority worker. Use only for a YAAW handoff whose role is implementer." },
+    reviewer: { agent: "yaaw_reviewer", file: "yaaw-reviewer.toml", description: "YAAW Reviewer authority worker. Use only for a YAAW handoff whose role is reviewer." }
+};
+function roleConfig(settings) {
+    const lines = [
+        "# YAAW-SE Codex authority-worker runtime configuration.",
+        "# Canonical role/workflow semantics live under .yaaw-core/system/."
+    ];
+    if (settings.model)
+        lines.push(`model = ${JSON.stringify(settings.model)}`);
+    if (settings.reasoning)
+        lines.push(`model_reasoning_effort = ${JSON.stringify(settings.reasoning)}`);
+    if (!settings.model && !settings.reasoning)
+        lines.push("# Inherit Codex project/user defaults.");
+    return lines.join("\n") + "\n";
+}
+function configEntries(settings) {
+    const entries = [];
+    for (const def of Object.values(roleDefinitions)) {
+        entries.push({ key: `agents.${def.agent}.description`, value: def.description }, { key: `agents.${def.agent}.config_file`, value: `agents/${def.file}` });
+    }
+    if (settings.orchestrator.model)
+        entries.push({ key: "model", value: settings.orchestrator.model });
+    if (settings.orchestrator.reasoning)
+        entries.push({ key: "model_reasoning_effort", value: settings.orchestrator.reasoning });
+    if (settings.defaultWorker.model)
+        entries.push({ key: "agents.default_subagent_model", value: settings.defaultWorker.model });
+    if (settings.defaultWorker.reasoning)
+        entries.push({ key: "agents.default_subagent_reasoning_effort", value: settings.defaultWorker.reasoning });
+    if (settings.maxConcurrentThreads !== null)
+        entries.push({ key: "agents.max_concurrent_threads_per_session", value: settings.maxConcurrentThreads });
+    if (settings.sandboxMode)
+        entries.push({ key: "sandbox_mode", value: settings.sandboxMode });
+    if (settings.approvalPolicy)
+        entries.push({ key: "approval_policy", value: settings.approvalPolicy });
+    if (settings.webSearch)
+        entries.push({ key: "web_search", value: settings.webSearch });
+    return entries;
+}
+async function planRuntime(ctx) {
+    const settings = normalizeCodexRuntimeSettings(ctx.settings);
+    const source = join(ctx.payloadRoot, "integrations", "codex", "yaaw-runtime.md");
+    const runtimeTemplate = await readFile(source, "utf8");
+    const operations = [
+        {
+            type: "write-managed-file",
+            path: join(ctx.projectRoot, ".codex", "yaaw-runtime.md"),
+            content: runtimeTemplate.replaceAll("{{RUNTIME_MODE}}", settings.mode),
+            owner: "integration:codex"
+        }
+    ];
+    for (const [role, def] of Object.entries(roleDefinitions)) {
+        operations.push({
+            type: "write-managed-file",
+            path: join(ctx.projectRoot, ".codex", "agents", def.file),
+            content: roleConfig(settings.roles[role]),
+            owner: "integration:codex"
+        });
+    }
+    operations.push({
+        type: "update-managed-config-keys",
+        path: join(ctx.projectRoot, ".codex", "config.toml"),
+        format: "toml",
+        entries: configEntries(settings),
+        owner: "integration:codex"
+    });
+    return operations;
+}
+async function verifyRuntime(ctx) {
+    const issues = [];
+    const configPath = join(ctx.projectRoot, ".codex", "config.toml");
+    if (!(await pathExists(join(ctx.projectRoot, ".codex", "yaaw-runtime.md"))))
+        issues.push("missing .codex/yaaw-runtime.md");
+    for (const def of Object.values(roleDefinitions)) {
+        if (!(await pathExists(join(ctx.projectRoot, ".codex", "agents", def.file))))
+            issues.push(`missing .codex/agents/${def.file}`);
+    }
+    if (!(await pathExists(configPath)))
+        issues.push("missing .codex/config.toml");
+    else {
+        try {
+            const text = await readFile(configPath, "utf8");
+            validateManagedToml(text);
+            for (const def of Object.values(roleDefinitions)) {
+                if (readTomlManagedValue(text, `agents.${def.agent}.config_file`) !== `agents/${def.file}`) {
+                    issues.push(`missing/mismatched Codex role declaration: ${def.agent}`);
+                }
+            }
+        }
+        catch (error) {
+            issues.push(`invalid Codex config: ${error.message}`);
+        }
+    }
+    return { healthy: issues.length === 0, issues };
+}
+export const codexAdapter = {
+    ...baseAdapter,
+    adapterVersion: 2,
+    planRuntime,
+    verifyRuntime,
+    async verify(ctx, selectedSkillIds) {
+        const base = await baseAdapter.verify(ctx, selectedSkillIds);
+        const runtime = await verifyRuntime(ctx);
+        return { healthy: base.healthy && runtime.healthy, issues: [...base.issues, ...runtime.issues] };
+    },
+    describeRuntime(settings) {
+        const runtime = normalizeCodexRuntimeSettings(settings);
+        return [
+            `mode: ${runtime.mode}`,
+            `orchestrator model: ${runtime.orchestrator.model ?? "inherit"}`,
+            `default worker model: ${runtime.defaultWorker.model ?? "inherit"}`,
+            `max concurrent threads: ${runtime.maxConcurrentThreads ?? "inherit"}`
+        ];
+    }
+};
 //# sourceMappingURL=codex.js.map

package/dist/integrations/codex.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/integrations/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;IACtC,EAAE,EAAE,OAAO;IACX,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,OAAO;IACnB,cAAc,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;IACxC,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,WAAW;IACzB,iBAAiB,EAAE,UAAU;IAC7B,cAAc,EAAE,IAAI;IACpB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE;CAC3B,CAAC,CAAC"}
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/integrations/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,6BAA6B,EAAsD,MAAM,oBAAoB,CAAC;AACvH,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEzF,MAAM,WAAW,GAAG,WAAW,CAAC;IAC9B,EAAE,EAAE,OAAO;IACX,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,OAAO;IACnB,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC;IAClD,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,WAAW;IACzB,iBAAiB,EAAE,UAAU;IAC7B,cAAc,EAAE,IAAI;IACpB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG;IACtB,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,2EAA2E,EAAE;IAC3I,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,mFAAmF,EAAE;IAC/J,WAAW,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,2FAA2F,EAAE;IACnL,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,qFAAqF,EAAE;CAC5J,CAAC;AAEX,SAAS,UAAU,CAAC,QAA4B;IAC9C,MAAM,KAAK,GAAG;QACZ,yDAAyD;QACzD,oEAAoE;KACrE,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,QAA8B;IACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CACV,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,KAAK,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,EAClE,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,KAAK,cAAc,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,IAAI,EAAE,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IACpG,IAAI,QAAQ,CAAC,YAAY,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7H,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9H,IAAI,QAAQ,CAAC,aAAa,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,0CAA0C,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IACjJ,IAAI,QAAQ,CAAC,oBAAoB,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,2CAA2C,EAAE,KAAK,EAAE,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrJ,IAAI,QAAQ,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAuB;IAChD,MAAM,QAAQ,GAAG,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAuB;QACrC;YACE,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,CAAC;YACxD,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC;YACtE,KAAK,EAAE,mBAAmB;SAC3B;KACF,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAA6F,EAAE,CAAC;QACtJ,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC;YACzD,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC;QAChC,KAAK,EAAE,mBAAmB;KAC3B,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAuB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC3H,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;SAC1E,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAChD,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjD,IAAI,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,KAAK,cAAc,CAAC,KAAK,UAAU,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC3F,MAAM,CAAC,IAAI,CAAC,8CAA8C,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAuB;IAC9C,GAAG,WAAW;IACd,cAAc,EAAE,CAAC;IACjB,WAAW;IACX,aAAa;IACb,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB;QAChC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACnG,CAAC;IACD,eAAe,CAAC,QAAQ;QACtB,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO;YACL,SAAS,OAAO,CAAC,IAAI,EAAE;YACvB,uBAAuB,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,SAAS,EAAE;YAChE,yBAAyB,OAAO,CAAC,aAAa,CAAC,KAAK,IAAI,SAAS,EAAE;YACnE,2BAA2B,OAAO,CAAC,oBAAoB,IAAI,SAAS,EAAE;SACvE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/integrations/types.d.ts

@@ -7,6 +7,7 @@ export interface DetectionResult {
 export interface IntegrationContext {
     projectRoot: string;
     payloadRoot: string;
+    settings?: unknown;
 }
 export interface IntegrationVerification {
     healthy: boolean;
@@ -26,6 +27,9 @@ export interface IntegrationAdapter {
     bootstrapRelativePath: string;
     planBootstrap(ctx: IntegrationContext): Promise<InstallOperation[]>;
     planSkills(ctx: IntegrationContext, skills: CanonicalSkill[]): Promise<InstallOperation[]>;
+    planRuntime?(ctx: IntegrationContext): Promise<InstallOperation[]>;
     verify(ctx: IntegrationContext, selectedSkillIds: string[]): Promise<IntegrationVerification>;
+    verifyRuntime?(ctx: IntegrationContext): Promise<IntegrationVerification>;
+    describeRuntime?(settings: unknown): string[];
     invocationHint(skillName: string): string;
 }

package/dist/payload/bootstrap/codex.md

@@ -5,8 +5,10 @@ This project uses YAAW-SE.
 - Canonical YAAW implementation: `.yaaw-core/system/`
 - Durable project memory: `.yaaw-core/project/`
 - Public Codex skills: `.agents/skills/yaaw-*/`
+- Codex execution adapter: `.codex/yaaw-runtime.md`
 - Treat `.yaaw-core/project/` as durable project state.
-- Do not duplicate YAAW workflow logic into `AGENTS.md`.
+- Do not duplicate YAAW workflow logic into `AGENTS.md` or `.codex/`.
 - Resolve the YAAW workspace root before shell/repository work; follow `.yaaw-core/system/core/execution-context.md`.
 - Load workflows progressively; follow `.yaaw-core/system/core/context-loading.md`.
 - When a YAAW skill is invoked, follow its canonical role/workflow references.
+- When autonomous orchestration reaches `orchestration.dispatch`, follow `.codex/yaaw-runtime.md` for host-specific isolated-worker execution.

package/dist/payload/integrations/codex/yaaw-runtime.md

@@ -0,0 +1,66 @@
+# YAAW Codex Runtime Adapter
+
+This file defines **Codex execution mechanics only**. Canonical YAAW role/workflow semantics live under `.yaaw-core/system/`.
+
+Configured YAAW runtime mode: **{{RUNTIME_MODE}}**.
+
+## Root ownership
+During autonomous `@yaaw-orchestrator` operation, the active/root Codex session is the YAAW Orchestrator. Never spawn a child `yaaw_orchestrator`.
+
+## Authority worker mapping
+When `orchestration.dispatch` selects a non-Orchestrator role, map it only after YAAW has already selected the handoff:
+
+- `prd` -> `yaaw_prd`
+- `planner` -> `yaaw_planner`
+- `implementer` -> `yaaw_implementer`
+- `reviewer` -> `yaaw_reviewer`
+
+Codex role selection is an execution mechanism, never a second router.
+
+## Runtime modes
+
+### auto
+1. Prefer a fresh named YAAW worker when the active spawn schema exposes named role / agent-type selection.
+2. If named selection is unavailable or is explicitly rejected **before a child starts**, spawn one fresh generic worker for the same handoff.
+3. If no isolated worker capability is available, execute the selected role/workflow inline.
+4. If a child was created and then failed/interrupted, do not blindly retry. Return to YAAW reality inspection first.
+
+### isolated-required
+Use the named -> generic isolation ladder above. If no isolated worker can be created, return:
+
+`BLOCKED:HOST_ISOLATION_UNAVAILABLE`
+
+Do not fall back inline.
+
+### inline
+Do not spawn YAAW authority workers. Execute the selected handoff in the current context using canonical YAAW role/workflow contracts.
+
+## Fresh worker bootstrap
+Prefer no inherited parent conversation history. If the active host exposes a no-history control such as `fork_turns`, use its no-history value; if an older compatible host exposes a boolean fork-context control, disable inherited context.
+
+Give a worker only:
+- resolved workspace root;
+- semantic role;
+- `.yaaw-core/runtime/handoff.json`;
+- instruction to read the handoff first;
+- instruction to load the canonical role and resolve the workflow through registries;
+- instruction to load only admitted artifacts, expertise, and repository context;
+- instruction not to route/spawn another YAAW authority role;
+- instruction to persist durable output before returning;
+- instruction to return one legal typed result.
+
+Do not paste product/engineering/spec/ticket/review history or the parent planning chat into the worker prompt when those facts already exist durably.
+
+## Completion and recovery
+One dispatch creates one fresh authority worker. Do not reuse a Planner across separate canonical planning dispatches. Never reuse an Implementer context as Reviewer.
+
+After worker success, failure, interruption, no response, or lost response:
+1. treat worker text as an execution signal only;
+2. return to `orchestration.inspect-state`;
+3. verify expected artifacts, revisions, repository state, evidence, and review state;
+4. route again from observed reality.
+
+Workers never perform YAAW lifecycle routing to peer authority roles.
+
+## Capability note
+YAAW does not force an experimental multi-agent backend. Use the capabilities the active Codex runtime actually exposes and follow the configured fallback mode.

package/dist/payload/payload-files.json

@@ -13,17 +13,22 @@
     },
     {
       "path": "bootstrap/codex.md",
-      "sha256": "012dc9e3b840c430312b338af788eec19ca30d122cffb58ed1fbd0a534eb3540",
-      "bytes": 584
+      "sha256": "c772f208677960cb8719516701d9512703575a63f338e8e255b29f549d662304",
+      "bytes": 792
     },
     {
       "path": "bootstrap/gemini-cli.md",
       "sha256": "d859c0a32ab024860f935d4466eaa2db9b13736f490b62b2a0dc651435a67b47",
       "bytes": 589
     },
+    {
+      "path": "integrations/codex/yaaw-runtime.md",
+      "sha256": "dc8efda3fe6a841478fdc5c1ae8d34baf76dc3f6d30f756a6343aeffff8aa99d",
+      "bytes": 3179
+    },
     {
       "path": "payload.json",
-      "sha256": "30d9588702c90a986ca21e6e54741f256613a5bc2248490f6195a31d0896f950",
+      "sha256": "2e65f6ca956afc76ee0e1380d032ea6bb166a8f1bfadf2fc092353480e796508",
       "bytes": 56
     },
     {
@@ -98,8 +103,13 @@
     },
     {
       "path": "yaaw-core/system/core/context-loading.md",
-      "sha256": "b82df8f462b9ddde28c4aba4dc82c73bc6b0691247fe47059307cf6226b063d5",
-      "bytes": 2132
+      "sha256": "ac44a03b41e4403baf2cf3ef19c40b2d82fa6b7232766912b0e6285a2a321694",
+      "bytes": 2884
+    },
+    {
+      "path": "yaaw-core/system/core/dispatch-execution.md",
+      "sha256": "3adf4cf3440e3cc0361ad5ea659660f4688824900b3dcd68b8882877c2fae7b9",
+      "bytes": 2814
     },
     {
       "path": "yaaw-core/system/core/execution-context.md",
@@ -113,8 +123,8 @@
     },
     {
       "path": "yaaw-core/system/core/io-contract.md",
-      "sha256": "8697f8a4e5858ed6af62cb70cfee41ec2e0c9d1c6ce0a8d816fbc12431472103",
-      "bytes": 2485
+      "sha256": "509270f9f3490ddc5ca071938f66167b6db4b171b88b13a8d3497be8a0ef0adb",
+      "bytes": 2945
     },
     {
       "path": "yaaw-core/system/core/lifecycle.md",
@@ -123,8 +133,8 @@
     },
     {
       "path": "yaaw-core/system/core/recovery.md",
-      "sha256": "a8849b075aa0ec567d90d5b83cb18b9722c9e988c3b5fd16ea0ea22ae8e83a6b",
-      "bytes": 1562
+      "sha256": "f197bdb188b31decdd183fbd7a611f1fd454dd530400fbfa33453db60e8ee3cb",
+      "bytes": 2068
     },
     {
       "path": "yaaw-core/system/core/routing.md",
@@ -173,8 +183,8 @@
     },
     {
       "path": "yaaw-core/system/registries/execution-policy.json",
-      "sha256": "a61cf1e7d1a8d1ab4a435edcb7b8a98d63c6be0b137187499c2d9f387a8c79c8",
-      "bytes": 3438
+      "sha256": "d67626880e4cf5adf5e4ba6adb30e45e5a3e3a17cbf51d961bbfd74bb5c6f880",
+      "bytes": 5540
     },
     {
       "path": "yaaw-core/system/registries/expertise.json",
@@ -218,8 +228,8 @@
     },
     {
       "path": "yaaw-core/system/roles/orchestrator.md",
-      "sha256": "d19c56833fa32f114028af716a9c84a83494b422796edff44d3df820659a616d",
-      "bytes": 1262
+      "sha256": "6d6b433c65fd0f09f4479e6bc2ed944fe630a532923acfbd3e57c575ac4d6d64",
+      "bytes": 1696
     },
     {
       "path": "yaaw-core/system/roles/planner.md",
@@ -278,8 +288,8 @@
     },
     {
       "path": "yaaw-core/system/rules/review-independence.md",
-      "sha256": "9f5363671e5d7e99a65e445eb8f0eb369f40b87edbdee7c85012245734e98d4b",
-      "bytes": 536
+      "sha256": "e6a5cc02aac19edd251dc558e98a3a9009b0123a0bd6e055f12764e553cfbf49",
+      "bytes": 870
     },
     {
       "path": "yaaw-core/system/rules/ticket-sizing.md",
@@ -423,8 +433,8 @@
     },
     {
       "path": "yaaw-core/system/workflows/orchestration/dispatch.md",
-      "sha256": "cf36d2881415ac215d7a5b784d2cb18180d6ba1e8babce3a778aa80ec664239a",
-      "bytes": 1223
+      "sha256": "a12046d781265e425208b708bb1ea7c65d1305121ae36e14387e289914a57467",
+      "bytes": 2141
     },
     {
       "path": "yaaw-core/system/workflows/orchestration/inspect-state.md",
@@ -443,8 +453,8 @@
     },
     {
       "path": "yaaw-core/system/workflows/orchestration/route.md",
-      "sha256": "00554d63311486abf5d5a727a0bae20097bd1e17df30347721766484ad7561fa",
-      "bytes": 1349
+      "sha256": "e01c5a537d579e04c01bb3d55f429ff88b6d40c9c38ac919327cd0ed5437e0ce",
+      "bytes": 1649
     },
     {
       "path": "yaaw-core/system/workflows/planning/create-spec.md",

package/dist/payload/payload.json

@@ -1,4 +1,4 @@
 {
   "schema": "yaaw.payload/v1",
-  "version": "0.1.2"
+  "version": "0.2.0"
 }

package/dist/payload/yaaw-core/system/core/context-loading.md

@@ -16,6 +16,17 @@ After exactly one workflow is selected:
 
 After durable output, return to routing before opening another workflow contract.
 
+## Fresh worker bootstrap
+When an Orchestrator dispatch runs in a fresh host worker, the worker should receive only enough parent context to locate and execute the handoff:
+- resolved workspace root;
+- target semantic role;
+- `.yaaw-core/runtime/handoff.json`;
+- instruction to load the canonical role contract and resolve the workflow through registries;
+- instruction to load only handoff-admitted artifacts/expertise/repository context;
+- instruction not to route another YAAW authority role.
+
+Do not copy the parent planning conversation, all project documents, all expertise, all workflows, review history, or a repository dump into a worker prompt. Those are either durable artifacts or discoverable only when admitted by the selected workflow.
+
 ## Normal semantic context
 ```text
 role contract

package/dist/payload/yaaw-core/system/core/dispatch-execution.md

@@ -0,0 +1,37 @@
+# Dispatch execution contract
+
+Dispatch is a semantic request to execute exactly one already-selected YAAW handoff using the strongest context-isolation mechanism the active host can safely provide.
+
+## Canonical rules
+1. Orchestrator selects exactly one canonical workflow.
+2. Orchestrator persists one valid `.yaaw-core/runtime/handoff.json`.
+3. Under orchestrated operation, a non-Orchestrator semantic role should execute in a fresh isolated worker when the host provides that capability.
+4. The worker receives minimal bootstrap context: workspace root, semantic role, handoff path, and instructions to resolve the canonical role/workflow from YAAW registries.
+5. The worker reads durable YAAW state instead of depending on inherited planning conversation.
+6. One dispatch executes exactly one handoff.
+7. A worker may not route, spawn, or command another YAAW authority role.
+8. The worker persists the required durable artifact/state/evidence before returning.
+9. The worker returns only a legal typed result from the handoff/workflow contract.
+10. A worker message is an execution signal, not project truth.
+11. After worker completion, failure, interruption, or lost response, Orchestrator re-enters `orchestration.inspect-state` before selecting another semantic workflow.
+12. If isolated execution is unavailable, the active host adapter applies its configured fallback policy.
+
+## Direct invocation
+A user who directly invokes PRD, Planner, Implementer, or Reviewer has intentionally selected that role/workflow and may execute it in the current context. Isolation policy here governs **Orchestrator dispatch**, not the existence of direct public entrypoints.
+
+## Execution-context policy
+`.yaaw-core/system/registries/execution-policy.json` declares one of:
+- `ROOT_ONLY`: run in the active root Orchestrator context.
+- `ISOLATED_PREFERRED`: prefer a fresh worker; host fallback may run inline.
+- `INLINE_ALLOWED`: current-context execution is explicitly acceptable.
+
+A future `ISOLATED_REQUIRED` value may be introduced only with a schema/version update. Host adapters may still expose a stricter local runtime mode that blocks instead of falling back.
+
+## Fresh-context invariant
+An orchestrated Implementer execution context must never become the Reviewer execution context for the same work. Reviewer acceptance is an independent dispatch.
+
+## Failure and retry invariant
+If a worker started and later failed or disappeared, do not blindly start the same authority worker again. Inspect durable reality first because the worker may already have mutated the repository or written evidence.
+
+## Provider boundary
+This contract is provider-neutral. Names of host tools, agent types, provider directories, model identifiers, and provider-specific spawning schemas belong only to integration adapters.

package/dist/payload/yaaw-core/system/core/io-contract.md

@@ -6,7 +6,7 @@ YAAW roles communicate through durable artifacts, exact Orchestrator handoffs, a
 - `.yaaw-core/system/registries/artifacts.json` defines canonical artifact classes, locations, durability, and semantic ownership.
 - `.yaaw-core/system/registries/role-io.json` defines each role's default read/write authority.
 - `.yaaw-core/system/registries/workflows.json` maps canonical workflow IDs to one role/workflow contract.
-- `.yaaw-core/system/registries/execution-policy.json` defines repository requirements and context/research admission for every workflow.
+- `.yaaw-core/system/registries/execution-policy.json` defines repository requirements, execution-context policy, and context/research admission for every workflow.
 - `.yaaw-core/runtime/handoff.json` resolves those contracts to one exact dispatch.
 - `.yaaw-core/runtime/intent.json` may preserve the public entrypoint's desired destination while prerequisites are resolved.
 
@@ -17,16 +17,21 @@ The role reads the handoff, then its role contract, resolves `handoff.workflow`
 
 A role must not search the repository for alternate YAAW artifact locations when a canonical input is missing. Missing or stale canonical prerequisites produce a typed result to Orchestrator.
 
+Host execution transport is separate from semantic communication. A semantic role may run in another fresh host context, but authority still flows only through durable YAAW artifacts and typed results.
+
 ## Communication topology
 ```text
 PRD / Planner / Implementer / Reviewer
         ↓ durable output + typed result
      Orchestrator
+        ↓ inspect reality
         ↓ exactly one next dispatch
 ```
 
 Roles never spawn or command peer roles. **Roles report reality; Orchestrator decides routing.**
 
+A worker's textual success message is not semantic truth. Orchestrator verifies the expected artifact, revision, repository/evidence basis, and legal state transition after every dispatched execution.
+
 ## Typed results
 Common results include `SUCCESS`, `READY`, `HUMAN_INPUT_REQUIRED`, `PRECONDITION_UNSATISFIED`, `REVIEW_REQUIRED`, `REPLAN_REQUIRED`, `BLOCKED`, `PASS`, `REPAIR`, `REPLAN`, and `COMPLETE`.
 

package/dist/payload/yaaw-core/system/core/recovery.md

@@ -16,6 +16,9 @@ Recovery compares claimed state with observed reality and returns to the last tr
 - `PASS` + missing/stale review, source revision mismatch, or repository identity mismatch -> invalidate current PASS and route to review/replan as appropriate.
 - A stale `.yaaw-core/runtime/handoff.json` is discarded, not executed.
 - If repository identity is required but status is not `READY`, return `PRECONDITION_UNSATISFIED:REPOSITORY_IDENTITY_UNAVAILABLE` or `BLOCKED` with exact missing proof.
+- If a dispatched worker ends unexpectedly, returns no response, loses its context, or its response is lost, treat that as an ordinary context interruption: inspect durable artifacts/repository/evidence and route from reality.
+- Never blindly retry a worker that was successfully created; first determine whether it already produced durable effects.
+- Do not persist host worker/session IDs into durable project memory. Replaceable coordination data, if ever required, belongs under `.yaaw-core/runtime/`.
 - If the last trustworthy boundary cannot be proven, return `BLOCKED` with exact missing proof.
 
 Every reconciliation uses a legal transition and records its reason/evidence in state provenance.