Prepare Switchloom v0.3.1 Codex 0.145 candidate (#21)

Reviewed candidate commit 2f8ba00. All required CI, security, and four-target release-candidate provenance checks passed.

Author: regenrek

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to Switchloom are recorded here.
 
+## [0.3.1] - 2026-07-22
+
+- Added repository-local Codex Multi-Agent V2 activation and ownership-safe
+  lifecycle handling for the official Codex CLI 0.145 contract.
+- Certified Terra and Sol native V2 routing with exact-version persisted
+  runtime evidence while keeping Luna explicit and experimental/unverified.
+- Regenerated the public catalog, bundles, fixtures, website recipes, and
+  guidance for the v0.3.1 compatibility release.
+
 ## [0.3.0] - 2026-07-21
 
 - Hard-cut maintainer-only live verification, catalog, registry, probe, and

Cargo.lock

@@ -4,7 +4,7 @@ default-members = ["."]
 resolver = "3"
 
 [workspace.package]
-version = "0.3.0"
+version = "0.3.1"
 edition = "2024"
 rust-version = "1.85"
 license = "MIT"

Cargo.toml

@@ -17,7 +17,7 @@ brew install instructa/tap/switchloom
 ### npm
 
 ```sh
-npm install --global switchloom@0.3.0
+npm install --global switchloom@0.3.1
 ```
 
 Both channels install the branded `switchloom` command and the compatibility
@@ -41,8 +41,8 @@ The generator at [switchloom.ai](https://switchloom.ai) produces only the versio
 action copies a shell-safe command like:
 
 ```sh
-npx switchloom@0.3.0 preview --recipe 'sw1_...'
-npx switchloom@0.3.0 apply --recipe 'sw1_...'
+npx switchloom@0.3.1 preview --recipe 'sw1_...'
+npx switchloom@0.3.1 apply --recipe 'sw1_...'
 ```
 
 The secondary action downloads the same setup as a readable `.switchloom/config.toml`:
@@ -72,12 +72,14 @@ switchloom doctor codex
 ```
 
 `switchloom doctor <host>` is the install/version check for `codex`, `cursor`,
-`claude-code`, `opencode`, `pi`, or a concrete binding id. Run it before preview
-and apply when setup depends on a locally installed host CLI.
+`claude-code`, `opencode`, `pi`, or a concrete binding id. For Codex it also
+reports exact 0.145.0 support, repository-local V2 activation conflicts, and
+trust/reload guidance without mutating host state. Run it before preview and
+apply when setup depends on a locally installed host CLI.
 
 ## Current Status
 
-The v0.3.0 public CLI compiles independently, preserves the frozen
+The v0.3.1 public CLI compiles independently, preserves the frozen
 Planr v1.5.0 routing inventory in [docs/migration-baseline.md](docs/migration-baseline.md),
 and hard-cuts maintainer-only evaluation, catalog, registry, and live-verification
 operations from the public command surface.
@@ -101,7 +103,7 @@ cargo run -- policy list
 
 The static Astro website is an above-the-fold team generator built with React and shadcn. Users first choose standalone or optional Planr integration, then choose Codex, Cursor, Claude Code, OpenCode, or Pi, select up to four explicit roles, start from a Light, Balanced, or High team preset, and optionally override each role's model and reasoning effort. The primary result is a CLI recipe; the secondary result is a readable setup config. Only the Rust CLI compiles and applies project-native files. Codex is shown as an internal V2 thread-tree path; Cursor, Claude Code, and OpenCode are native subagent paths; Pi is an external runner path; separate app tasks are not treated as Codex V2 child threads. The host remains authoritative for model availability, execution, and billing.
 
-Claude Code model and effort options are derived at build time from the canonical catalog produced by the Rust compiler. Codex mirrors its current desktop picker: `low`, `medium`, `high`, and `xhigh`, while Terra and Sol additionally expose `ultra` as a manual-only mode. Pure `max` is intentionally omitted because the desktop picker does not expose it separately; Ultra sends Max reasoning plus automatic multi-agent delegation. Light, Balanced, and High never select Ultra. Cursor uses a deliberately small, researched frontier allowlist because its full picker changes frequently; the website presents those models in a searchable selector. Generated custom setups are local and unverified until the user reviews them.
+Claude Code model and effort options are derived at build time from the canonical catalog produced by the Rust compiler. Codex mirrors its current desktop picker: `low`, `medium`, `high`, and `xhigh`, while Terra and Sol additionally expose `ultra` as a manual-only mode. Pure `max` is intentionally omitted because the desktop picker does not expose it separately; Ultra sends Max reasoning plus automatic multi-agent delegation. Light, Balanced, and High never select Ultra, and Codex defaults keep mechanical work on certified Terra rather than Luna. Luna remains selectable only as an explicit experimental/unverified choice until authentic Codex 0.145.0 V2 evidence is independently reviewed. Cursor uses a deliberately small, researched frontier allowlist because its full picker changes frequently; the website presents those models in a searchable selector. Generated custom setups are local and unverified until the user reviews them.
 
 ```sh
 cargo run -p xtask -- release prepare --allow-dirty
@@ -111,7 +113,7 @@ pnpm site:dev
 ```
 
 The website setup contract is equivalent to the CLI lifecycle: the copied
-`npx switchloom@0.3.0 apply --recipe 'sw1_...' --repository .` command and the
+`npx switchloom@0.3.1 apply --recipe 'sw1_...' --repository .` command and the
 downloadable `.switchloom/config.toml` both replay through CLI preview/apply
 before any repository-local artifact is written.
 
@@ -138,11 +140,11 @@ pnpm security:check
 ## Releases
 
 Releases are created only through the repository-owned script. Prepare and
-commit a bracketed changelog section such as `## [0.3.0]`, then run:
+commit a bracketed changelog section such as `## [0.3.1]`, then run:
 
 ```sh
-RELEASE_DRY_RUN=1 scripts/release.sh 0.3.0 "Public CLI hard cut and deterministic setup lifecycle"
-scripts/release.sh 0.3.0 "Public CLI hard cut and deterministic setup lifecycle"
+RELEASE_DRY_RUN=1 scripts/release.sh 0.3.1 "Codex 0.145 native V2 compatibility"
+scripts/release.sh 0.3.1 "Codex 0.145 native V2 compatibility"
 ```
 
 The script requires a clean, synchronized `main`, runs the complete local

README.md

@@ -0,0 +1,2 @@
+npx -y @openai/codex@0.145.0 --version
+codex-cli 0.145.0

docs/codex-0.145-exact-version-capture.txt

@@ -1,11 +1,11 @@
 {
   "schema_version": 1,
-  "evidence_id": "codex-cli-0.144.5-native-v2",
-  "observed_at": "2026-07-20T00:00:00Z",
+  "evidence_id": "codex-0.145.0-native-v2",
+  "observed_at": "2026-07-21T21:12:00+02:00",
   "installed_version": {
-    "command": "codex --version",
-    "stdout": "codex-cli 0.144.5",
-    "stdout_sha256": "7dad51bb7d583ef2fa4162db23022b589b630f7187b091ba6f4015a5958994ab"
+    "command": "npx -y @openai/codex@0.145.0 --version",
+    "stdout": "codex-cli 0.145.0",
+    "stdout_sha256": "f9eb0c462cdded1fb971b33c647ff1b8b491dfe962a1506026e07a06f634f651"
   },
   "runtime_class": "native-subagent",
   "backend_selection_owner": "installed Codex backend selected by the authenticated host account and workspace; Switchloom only declares repository-local project agent model and effort requests",
@@ -49,24 +49,24 @@
     "installed_version": [
       {
         "kind": "host-command",
-        "source": "codex --version",
+        "source": "npx -y @openai/codex@0.145.0 --version",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
-        "observed_value": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
+        "observed_value": "codex-cli 0.145.0",
         "required_raw_fragments": [
-          "codex-cli 0.144.5"
+          "codex-cli 0.145.0"
         ],
-        "source_path": "local-shell:codex --version",
-        "raw_output": "codex-cli 0.144.5\n",
-        "raw_output_sha256": "7dad51bb7d583ef2fa4162db23022b589b630f7187b091ba6f4015a5958994ab"
+        "source_path": "docs/codex-0.145-exact-version-capture.txt",
+        "raw_output": "codex-cli 0.145.0\n",
+        "raw_output_sha256": "f9eb0c462cdded1fb971b33c647ff1b8b491dfe962a1506026e07a06f634f651"
       }
     ],
     "backend_selection_owner": [
       {
         "kind": "source-document",
         "source": "OpenAI Codex configuration reference: project-scoped config cannot override machine-local provider, auth, host-owned app request metadata, configuration profile selection, or telemetry routing keys.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": "installed Codex backend selected by the authenticated host account and workspace; Switchloom only declares repository-local project agent model and effort requests",
         "required_raw_fragments": [
           "Project-scoped config cannot override machine-local provider, auth",
@@ -82,7 +82,7 @@
         "kind": "source-document",
         "source": "OpenAI Codex configuration and subagents references: trusted project-scoped config plus project-scoped .codex/agents custom agent files.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": {
           "trust_boundary": "trusted project repository plus generated .codex/config.toml [agents.*] registrations; global Codex configuration is outside Switchloom ownership",
           "discovery_behavior": "Codex discovers repository-local agent files through .codex/config.toml registration entries after project trust and host reload/restart"
@@ -102,7 +102,7 @@
         "kind": "session-runtime-contract",
         "source": "Codex session developer runtime contract for this workspace declares the active collaboration slot budget.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": {
           "max_parallel_children": 3,
           "source": "Codex V2 collaboration host exposes four active agent slots including the root, leaving three parallel child slots in the current runtime"
@@ -122,7 +122,7 @@
         "kind": "source-document",
         "source": "OpenAI Codex subagents reference: parent live sandbox and approval overrides are reapplied to children; omitted custom-agent model and model_reasoning_effort inherit from the parent session.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": [
           "spawn_agent agent_type selects the registered project agent file",
           "the selected project agent file declares requested child model and model_reasoning_effort fields when present",
@@ -145,7 +145,7 @@
         "kind": "session-runtime-contract",
         "source": "Codex session developer runtime contract for this workspace declares shared filesystem behavior for team agents.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": true,
         "required_raw_fragments": [
           "All agents share the same container and filesystem",
@@ -161,7 +161,7 @@
         "kind": "source-document",
         "source": "OpenAI Codex subagents and models references: Ultra can proactively delegate; most intelligence levels require explicit delegation.",
         "observed_at": "2026-07-20T00:00:00Z",
-        "codex_version": "codex-cli 0.144.5",
+        "codex_version": "codex-cli 0.145.0",
         "observed_value": {
           "explicit_agent_type_dispatch": true,
           "ultra_auto_delegation": true,

docs/codex-v2-runtime-evidence.json

@@ -47,8 +47,9 @@ agent discovery after reload/restart, backend availability, execution timing,
 parallel child scheduling, billing, and any account/workspace precedence that
 affects the effective backend.
 
-For Codex, the runtime behavior contract freezes `codex-cli 0.144.5` as both
-the minimum and maximum supported capability version for this contract slice.
+For Codex, the runtime behavior contract freezes official Codex CLI `0.145.0`
+as both the minimum and maximum supported capability version for this contract
+slice.
 The digest-bound source artifact is
 `docs/codex-v2-runtime-evidence.json#sha256:<digest>`. That artifact records
 the `codex --version` observation, Codex account/workspace state as the actual
@@ -65,14 +66,18 @@ dispatch, Ultra behavior, and role precedence:
   before the effective model/effort claim is certified.
 
 Native Codex setup is repository-local only: it writes managed `.codex`
-project config and role files, preserves unrelated project and global Codex
-configuration, and does not generate or instruct nested `codex exec` dispatch.
-After apply/update/rollback, Codex may require trusting the project and
-reloading or restarting the host session before the generated role
-registrations are discoverable.
+project config and role files, including `[features.multi_agent_v2]` with
+`enabled = true` and `hide_spawn_agent_metadata = false`. It preserves unrelated
+project and global Codex configuration, and does not generate or instruct
+nested `codex exec` dispatch. After apply/update/rollback, Codex may require
+trusting the project and reloading or restarting the host session before the
+generated role registrations are discoverable.
 
 Explicit semantic-role dispatch and Ultra are separate modes. Light, Balanced,
-and High presets use explicit `agent_type` dispatch with `fork_turns = none`;
+and High presets use explicit `agent_type` dispatch with `fork_turns = none`.
+Terra is the certified implementation and mechanical default for Codex routing.
+Luna remains available only as an explicit experimental/unverified role until
+authentic official-build Codex 0.145.0 V2 evidence passes independent review.
 Ultra is recorded as the automatic delegation mode and must remain separately
 selected rather than becoming a default preset.
 
@@ -90,8 +95,8 @@ model-routing compile balanced --host codex-openai --output routing-bundle.json
 model-routing preview routing-bundle.json --repository .
 model-routing apply routing-bundle.json --repository .
 
-npx switchloom@0.3.0 preview --recipe 'sw1_...' --repository .
-npx switchloom@0.3.0 apply --recipe 'sw1_...' --repository .
+npx switchloom@0.3.1 preview --recipe 'sw1_...' --repository .
+npx switchloom@0.3.1 apply --recipe 'sw1_...' --repository .
 switchloom status --repository .
 switchloom update --repository .
 switchloom rollback --repository .
@@ -107,9 +112,12 @@ must not emit `.planr` files.
 
 Live host checks, receipt validation, catalog generation, and catalog verification
 are unpublished maintainer operations owned by `xtask`. They are exercised by the
-repository release workflow and are not part of the v0.3.0 public CLI contract.
-Public users should run `switchloom doctor <host>` to check host availability and
-version, then review `preview` output before `apply`.
+repository release workflow and are not part of the v0.3.1 public CLI contract.
+Public users should run `switchloom doctor <host>` to check host availability,
+version, and host-specific readiness diagnostics, then review `preview` output
+before `apply`. For Codex, doctor reports exact 0.145.0 support, repository-local
+V2 activation conflicts, and trust/reload guidance without mutating global
+Codex state.
 
 ## Planr Consumer Handoff
 

docs/model-routing-policy.md

@@ -15,7 +15,7 @@ The policy is enforced by `.gitignore`, `Cargo.toml` `exclude`, and the CI packa
 
 Only source, fixtures, docs, CI metadata, and deterministic generator inputs should enter the package. Live verification receipts and authenticated-host evidence belong in release notes or reviewed handoff docs after secret scrubbing, not in the crate payload.
 
-## v0.3.0 Public Boundary
+## v0.3.1 Public Boundary
 
 The published CLI owns `policy`, `compile`, `inspect`, `preview`, `apply`,
 `update`, `status`, `rollback`, `uninstall`, and `doctor`. Maintainer verification,

docs/package-policy.md

@@ -1,7 +1,7 @@
 # Preset Evaluation
 
 Evaluation is a deterministic, offline library API owned by the `model-routing`
-crate. It is exercised by Rust tests and maintainer release verification; v0.3.0
+crate. It is exercised by Rust tests and maintainer release verification; v0.3.1
 does not expose a standalone evaluation command.
 
 The report records the evaluation suite id, suite hash, bundle hash, scenario count, status, and recommendation state. Offline evaluation cannot claim live verification or recommendation status.

docs/preset-evaluation.md

@@ -9,7 +9,7 @@ cargo run -p xtask -- release verify --inventory-only
 ```
 
 Detached Ed25519 signing and verification are owned by the `model-routing`
-library API. They are not standalone public CLI operations in v0.3.0.
+library API. They are not standalone public CLI operations in v0.3.1.
 
 Unsigned catalog entries remain experimental.