Point Codex verify-specs at the simulator-broker slug

Why:
The verify-specs Codex action still wrote session artifacts under
agent-harness/simulator-broker-app after the harness product slug
became simulator-broker.

Changed:
- .codex/environments/environment.toml: verify-specs session-dir uses
  agent-harness/simulator-broker/manual-verify.
- spec/agents.md and spec/build-and-test.md: Codex harness actions must
  use the same product slug, not package.json name simulator-broker-app.

Verification:
- npm run agent:verify -- --profile spec-only --paths .codex/environments/environment.toml spec/agents.md spec/build-and-test.md --session-dir task-sessions/verify-specs-slug-20260819: pass.

Affected:
- .codex/environments/environment.toml
- spec/agents.md
- spec/build-and-test.md

Refs:
- 34d3755 (Point agent session dirs at the simulator-broker slug)
- adfc9a8 (Hardcode the harness product slug as simulator-broker)

Session:
- task-sessions/verify-specs-slug-20260819

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: VladimirBrejcha

.codex/environments/environment.toml

@@ -29,6 +29,6 @@ icon = "test"
 command = '''
 #!/usr/bin/env bash
 set -euo pipefail
-npm run agent:verify -- --profile spec-only --paths spec/README.md --session-dir "${AGENT_HOME:-$HOME/.agents}/agent-harness/simulator-broker-app/manual-verify"
+npm run agent:verify -- --profile spec-only --paths spec/README.md --session-dir "${AGENT_HOME:-$HOME/.agents}/agent-harness/simulator-broker/manual-verify"
 '''
 platform = "darwin"

spec/agents.md

@@ -40,6 +40,7 @@ Maintainers and agent runs still use `agent:context` / `agent:verify` /
 
 - `script/build_and_run.sh` is the canonical macOS app kill/build/run entrypoint for local work.
 - `.codex/environments/environment.toml` must expose a `Run` action that points at `./script/build_and_run.sh`.
+- Codex harness actions in `.codex/environments/environment.toml`, including `verify-specs`, must pass `--session-dir` under `${AGENT_HOME:-$HOME/.agents}/agent-harness/simulator-broker/`. The product slug is `simulator-broker`; it is not derived from `package.json` name `simulator-broker-app`.
 - App workflow changes should route through the repo-shipped skills above instead of ad hoc shell chains or undocumented local commands.
 - When the app needs desktop-only behavior that SwiftUI cannot express cleanly, document the exact gap first and keep the implementation covered by `swiftui-pro` and `xcode-build`.
 

spec/build-and-test.md

@@ -242,7 +242,7 @@ npm run agent:complete -- --session-dir "${AGENT_HOME:-$HOME/.agents}/agent-harn
 ## Verification obligations
 
 - `npm run agent:context -- --paths <files> --session-dir <dir>` is the routing and obligation source of truth for a task.
-- Task session dirs live under `${AGENT_HOME:-$HOME/.agents}/agent-harness/simulator-broker/`. The product slug is `simulator-broker`; it is not derived from `package.json` name `simulator-broker-app` or from the checkout directory. `CODEX_HOME` remains a compatibility parent for legacy session roots.
+- Task session dirs live under `${AGENT_HOME:-$HOME/.agents}/agent-harness/simulator-broker/`. The product slug is `simulator-broker`; it is not derived from `package.json` name `simulator-broker-app` or from the checkout directory. Codex harness actions in `.codex/environments/environment.toml`, including `verify-specs`, must use this same product slug. `CODEX_HOME` remains a compatibility parent for legacy session roots.
 - Implementation-owned paths require the `implementation` profile, which runs
   the complete `npm test` suite plus the `agent-harness` TypeScript build and
   Vitest suite. Specs, manifests, and harness contract paths require