v0.2.564 — shared runtime compatibility

Codex 0.2.564 shares the four generic TRIAD commands with verified existing consumers. A supported AGY installation keeps its original unqualified default; Codex resolves an authenticated consumer binding and executes from a retained toolkit.

• Adopt published triad-dispatch-lib 0.1.0.dev6, source 1872227abd42553635c733e0aa228548a577a732, wheel SHA256 5baf86483fe04935b2e21654508678eb21f7003a0038fb3875355a2e2967bfdc.
• Authenticate the complete hardened launcher group, context and supported runtime inventory before migration. Refuse partial, mixed, altered or unknown groups.
• Pin the retained toolkit, Python/provider paths and classifier location throughout public-v2 preparation, allocation, retry and collection. Native spawning and source-SOT behavior remain host-owned.
• Preserve prior consumers and active retained rounds through Codex updates/removal. Removal unregisters the selected receipt and conservatively keeps shared commands and assets.
• The shared bootstrap preserves global shell/Codex settings, including existing legacy fragments. Refresh all four skills and English/Korean installation and compatibility guidance.

Pre-migration direct rounds still require their original cache. Legacy AGY calls still require their original installation. All generic commands first use the most recently published Codex dispatcher's selected Python and library dependencies; keep that environment and retained binding metadata/launchers available. Only the selected consumer's complete toolkit inventory is checked at dispatch. Missing or incompatible dependencies can prevent every generic command, including the AGY default, from starting. Revalidate the installation after changing its interpreter. Independent older AGY installers/removers and removal of external Python/provider dependencies are outside this release's lifecycle guarantee. Claude and AGY maintainers own adoption in their hosts.

Final source review: independent Astra comparison and correction review approved; the complete Opus/Argon/Flash/Sol round 20261023-shared-host-r2-d7b9796 returned four SAFE verdicts, ADMITTED_SAFE and ROUND_INTEGRITY_OK on d7b97964add8f03165b29265d062b6f89a7e823f. Five non-blocking suggestions were adjudicated: persistent positive-selector regression coverage, actual AGY deployment evidence, clearer common-dispatcher prerequisites, bounded duplicate-validation refactoring, and malformed-input diagnostic formatting. No current supported-behavior defect remained. Actual AGY execution and source-level regression coverage remain separate claims.

Merged through PR #48 as 2eec0bb62e0de027332b45c12e59fab94cf2bbc8, with the exact reviewed tree 1fdd5301ffa19207648f2ef85a353c0111ebbad6. Final CI passed on macOS 15 and Ubuntu 24.04. Source and committed archive each passed 2,657 tests (5 skipped) on macOS and 2,655 (7 skipped) on Ubuntu; the two additional Ubuntu skips require a case-insensitive filesystem. Vendoring and isolated bundled-runtime checks passed on both. The CI checkout 8b8a5d44c613c1f4c7fdba39017db160e143caee has the same tree as the reviewed and merged source.

Publication and installed-runtime evidence are recorded separately. Library Issue #9 roster diagnostics is not implemented by this release. Published library host C81-C83 NOT RUN records remain immutable; later host deployment evidence does not certify all hosts or installation orders.

Post-publication local adoption: the installed release's 390 tracked files/modes and 27 adopted library files matched the merged source. The actual supported AGY 80-file baseline authenticated, original launcher payloads/target and bare AGY default were preserved, 12 bare/explicit/immutable help calls passed, and eight malformed/unknown-selector calls refused. Four copied-original tamper/partial-group checks refused without mutation. A fresh neutral CLI exposed all four installed skills with zero tool calls. These are identity, dispatch/help and context-exposure checks; installed live-provider inference and existing Desktop-session reload were not tested.

The Codex plugin manager can prune a previous version cache during update. Preserve any pre-migration direct-call target before that update; the retained-runtime guarantee covers rounds started with retained bindings. Plugin-manager configuration writes are separate from bootstrap preservation. The shared bootstrap and fresh probe left the seven post-plugin-update global-file hashes unchanged. Independent older AGY/Claude updaters remain host-owned follow-up work.

Local recovery after explicit owner approval: all 379 tracked 0.2.563 release files were restored to the original cache path and independently verified by hash and mode, including 26 adopted files. The 617 fingerprints covering the current 0.2.564 release, AGY baseline, shared runtime/launchers, receipts and global files were identical before/after recovery; plugin registration/version/enabled states were also unchanged. Untracked old cache metadata/logs were not recovered. This recovery is not a guarantee that later plugin-manager updates will retain old caches.