TRIAD Codex Dispatch 0.2.565

Codex now adopts triad-dispatch-lib 0.1.0.dev7 and reports canonical locations for invalid review-roster schema fields. The host preserves code, path, missing, document, and instance_path in a ValueError-compatible exception; CLI output includes the document and JSON path for located schema failures. Sensitive input values, unknown-key names and raw validator explanations are not included.

Exact authenticated dev5 and dev6 direct installations and existing shared generations remain supported after the pin upgrade. Existing shared generations are authenticated without executing their old modules; newly created Codex bindings still require the current dev7 pin. Frozen dev6 producer regressions cover both legacy defaults, old receipt present/absent, retained bindings and tamper refusal. Shared launcher selection, provider model/effort routing, refusal exit status and resource bundle identities are preserved. English/Korean upgrade and installation guidance is synchronized, including the distinction between a marketplace source directory and an installed plugin cache.

Library source: 62c3a741b729c6359cc5079a0306fad1fdd1fac8.

Malformed prior adoption records are refused with a controlled error before any managed runtime replacement. The previous 0.2.564 upgrade records remain intact in both README languages. Library issue #9 is closed after the requester's concrete location need was addressed; this host release adds Codex's rendering and adoption without reopening it.

This release includes the source archive, SHA256SUMS and a release-artifact manifest. The release source and reviewed tree are recorded below. Local installation and fresh-process exposure are separate checks; this release does not claim that an already running Desktop session has reloaded.

Verified source and review

• PR: #49
• Reviewed commit: e919d11bcc15a10107729ea25f7942a073db559c.
• Actual merged/release commit: 660abcb518d2246aeac33b6d3ec619ce2a564051.
• Identical source tree: 71c4756542ad06ef9457c6bc9999561f05fd67cd.
• Final local suite: 2685 passed, 5 route-specific skipped (macOS/Python3.12.13).
• Native PR CI40036329343: source and archive each 2685 passed/5 skipped on macOS; each 2683 passed/7 skipped on Ubuntu. Vendor verification, 4 isolated runtime checks and CodeQL passed.
• Fresh formal review 20261024-codex-dev7-r4-e919d11: Opus, Argon High, Flash High and fresh Sol6.1/xhigh all SAFE; canonical ADMITTED_SAFE with matching final source integrity. Digest b97f7bbde1525cebd5eedc666c01eb58ee8c397c2d85dd9350530c8bd4c2dc41.
• Post-merge CodeQL40057435656 passed. Post-merge host CI40057435631 passed: macOS source/archive each 2685 passed, 5 skipped; Ubuntu source/archive each 2683 passed, 7 skipped; all four isolated runtime and vendor checks passed on the exact merged commit.

Upgrade and follow-up notes

Follow the already-shared installation update procedure in docs/installation.md. Preserve retained bindings and old direct cache consumers. Codex CLI can remove old version cache paths during replacement; verified backups/restoration may be necessary for direct consumers. This does not guarantee uninterrupted old cache-path availability.

For custom Codex subagents with explicit skills.config absolute paths, repoint those entries to the newly installed canonical plugin root after each update, then start a new Codex session. The marketplace source path is not the installed plugin root. This release does not change custom-agent or global model/permission settings for you.

Two nonblocking formal-review suggestions were recorded: consistent internal exception type for malformed adoption version containers (the shipped CLI already refuses safely before mutation), and adding the custom-path upgrade reminder above to the future EN/KO README guidance. No blocking findings or open review questions remain.

Library issue #9 remains closed/completed. Additional diagnostic extensions and other hosts' code changes are outside this Codex port.

Release archive SHA-256: eba70a402f689ea121e003c4d34e6264591f31f690796909ff60b64712715242. The attached manifest authenticates all 394 tracked members and their Git modes.

Observed local installation verification

The installed 0.2.565 cache matched all 394 tracked release files/modes. Runtime registration preserved the old Codex receipt/binding and AGY legacy default while adding the new Codex binding. Verified backups restored the prior 0.2.563/0.2.564 cache paths; all seven checked configuration files remained unchanged.

Twenty launcher/help paths, three invalid selectors and two located schema refusals passed. A fresh ephemeral Codex session exposed all four installed skills with marker TRIAD_DEV7_0_2_565_ALL_FOUR_EXPOSED and no tool calls. This does not establish an existing Desktop-session reload or post-install vendor inference. Two inherited defaultPrompt strings exceed the observed CLI's 128-character metadata limit; explicit skill exposure succeeded, and that UI metadata follow-up is separate from this dev7 port.