Agent Workflow 0.1.0

Agent Workflow 0.1.0 is a regular Codex plugin for durable scripted work with parallel workers, item-local pipelines, bounded loops, one-level composition, saved workflows and ordered replay. It includes recovery/control tools, native Codex app-server and exec adapters, retained writer worktrees, six recipes and an authenticated local dashboard.

Install from the tagged repository or attached source package, add its local marketplace, and run the workflow-setup skill. Node 24+ with npm and an authenticated Codex account are required for actual model workers. Managed setup installs pinned dependencies outside the plugin cache. Hook trust is a separate explicit host action; manual workflow tools work without it.

All three skills received a Yoda audit, independent inspection and matched actual-Codex planning comparisons. Recovery guidance, upgrade ordering, exact installed data paths and PowerShell quoting were corrected. All 11 routing cases matched the expected boundaries. See docs/skill-audit.md for evidence and limits.

Verified with 123 offline tests, package/schema checks, real process smoke, isolated native cold/warm setup and license copying, official skill validation, zero npm audit vulnerabilities, authenticated worker execution/edited replay and independent reviews. GitHub's pinned Windows CI runs the offline/release checks without a model turn.

This release owns a local runtime/dashboard. Native composer/task-panel UI, shared hard token pools and live parent grants/history remain host gaps. Windows is verified; Linux/Darwin recovery and native hook trust activation were not exercised. Unknown effects require explicit review and verified drain before reconciliation. This is a GitHub/manual-install release, not a public Plugins Directory submission.

Original code is MIT. The vendored Agent Plugins schemas retain Apache 2.0 licensing and attribution.

Agent-tests audit and strategy are complete: owner-approved production risk map, exact control forwarding assertions, isolated Windows fixtures, five dashboard regressions and mutation rejection, explicit subprocess subjects and merge lanes. Required Windows PR verification uses job-internal documentation filtering, superseded-run cancellation, nightly and tag gates. See docs/testing.md for retained warnings and measurement limits.