codex-sdlc 0.5.0

codex-sdlc 0.5.0

Choose a model for each SDLC role and add an advisory AI Product Owner review while keeping final acceptance with the user.

Changes

• Configure PM, BA, backend, frontend, QC, and AI Product Owner models during init or later with configure-agents. Optionally set reasoning effort and an explicit fallback.
• Snapshot role settings into each new run. Existing runs keep their settings; frontend settings cover both web and mobile, including applications in separate repositories.
• Resolve dispatch plans against the current host's model, reasoning, and inheritance capabilities. A configured role requires a recorded agent dispatch before it starts. Unavailable selections stop dispatch unless an explicitly configured fallback matches.
• Record requested and selected models, real returned agent IDs, and fallback use. Actual model/effort stays unknown unless the host reports it.
• Run configured PM work in task-only PM agents. The current conversation dispatches tasks and handles user communication without claiming to change its own model.
• Add the optional sdlc-po skill and PO-001 review after QC. Its artifact must cover every authoritative acceptance criterion and cite existing run artifacts. It offers a recommendation; only a human Product Owner decision accepts delivery.
• Generate permissions without YAML aliases so the strict command-line authority publisher can load both new and upgraded installations.
• Include setup guidance and examples for configuring, resetting, and inspecting role models.

Upgrade

Install the 0.5.0 plugin, then upgrade the coordinator's repository runtime separately:

npx --yes codex-sdlc@0.5.0 upgrade --root /absolute/path/to/coordinator --dry-run

Apply the same command without --dry-run, then run node .sdlc/runtime.cjs restore, doctor, and validate-config from the coordinator. Configure role models before starting a new run. Existing runs and single-/multi-repository schema families remain supported.

See role model guidance for examples. Model names, availability, and supported reasoning depend on the Codex host; this release does not grant model access or use separate API credentials.

Validation

TypeScript checks, the automated test suite, plugin/skill validation, and a local PM dispatch smoke test cover this release. The live test requests Sol and exercises spawn, dispatch recording, activation, and PM intake handoff; host-unreported actual model metadata remains unknown. It is not a complete multi-model delivery test. Native Linux and Windows qualification remains deferred.

codex-sdlc 0.4.3

codex-sdlc 0.4.3 release evidence

Date: 2026-09-11

This hotfix makes the public plugin prompts compatible with both Plugins Directory constraints: no more than three default prompts and no more than 128 characters per prompt. It retains the Getting Started guide, pinned npx setup fallback, and single- and multi-repository onboarding. Runtime schemas and delivery commands are unchanged.

Prepared release artifacts:

Artifact	SHA-256
build/public-submission/0.4.3/codex-sdlc-0.4.3.tgz	f4652606a10e6c5e36f602162a2d910919e2688572f93e3596787ee6228c4dbb
build/public-submission/0.4.3/codex-sdlc-plugin-0.4.3.zip	aaeab134a62255439a1010c760c7f2d813a5dcfd27bbc432e24b01d1addab889
build/public-submission/0.4.3/codex-sdlc-skills-0.4.3.zip	1f934c064154757b1e59bf07985a7423830bd64cec8c16de45f58852ed983ee8
build/public-submission/0.4.3/codex-sdlc-logo-0.4.3.png	678361975afc99f1c5bcb5b95a0883922b025d2aab3d2ce88f911a5972ff1825

Check	Result
TypeScript typecheck	Passed
Vitest suite	Passed: 7 files, 28 tests, including prompt count and length limits in both manifests
Runtime build	Passed
Exact npm tarball	Passed for codex-sdlc@0.4.3; 161 packaged files
Production and complete dependency audits	Passed: zero vulnerabilities
Local marketplace build	Passed
Source, staged, and exact archived plugin packages	Passed the plugin-creator validator
All six skills in source and the exact upload archive	Passed the skill-creator validator

Native Linux and Windows qualification remains deferred by release decision. The OpenAI Plugins Directory update is packaged separately in the skills-only upload archive.

codex-sdlc 0.4.2

codex-sdlc 0.4.2 release evidence

Date: 2026-09-11

This hotfix makes the public plugin manifest compatible with the Plugins Directory limit of three default prompts. It retains the 0.4.1 Getting Started guide, pinned npx setup fallback, and single- and multi-repository onboarding. Runtime schemas and delivery commands are unchanged.

Prepared release artifacts:

Artifact	SHA-256
build/public-submission/0.4.2/codex-sdlc-0.4.2.tgz	a2ae15fafa5cbeae7ff8b84cc21f53afbcea659f1c4a0a64e93a248e8c6c228b
build/public-submission/0.4.2/codex-sdlc-plugin-0.4.2.zip	516b263cc4823584858c781cb83fe18f0d13124e1c2429b56c3fea7d783f21a6
build/public-submission/0.4.2/codex-sdlc-skills-0.4.2.zip	5e86c5ab6e35e6c565ad22f505596fd46fe5ec35e3901fab31f8bae7a8d15166
build/public-submission/0.4.2/codex-sdlc-logo-0.4.2.png	678361975afc99f1c5bcb5b95a0883922b025d2aab3d2ce88f911a5972ff1825

Check	Result
TypeScript typecheck	Passed
Vitest suite	Passed: 7 files, 28 tests, including the three-prompt maximum
Runtime build	Passed
Exact npm tarball	Passed for codex-sdlc@0.4.2; 161 packaged files
Production and complete dependency audits	Passed: zero vulnerabilities
Local marketplace build	Passed
Source, staged, and exact archived plugin packages	Passed the plugin-creator validator
All six skills in source and the exact upload archive	Passed the skill-creator validator

Native Linux and Windows qualification remains deferred by release decision. The OpenAI Plugins Directory update is packaged separately in the skills-only upload archive.

codex-sdlc 0.4.0

codex-sdlc 0.4.0 release evidence

Date: 2026-09-11

This source revision implements schema-family 2 multi-repository workspaces while retaining schema-family 1 single-repository compatibility.

Prepared release artifacts:

Artifact	SHA-256
build/public-submission/0.4.0/codex-sdlc-0.4.0.tgz	1f9180d2d2335da1c6c386b3c17e93960bc6632541131a51ee906b46e1e2e914
build/public-submission/0.4.0/codex-sdlc-plugin-0.4.0.zip	7d4bab30aebb9baf0317b17aa1c9c71988b746b87f81b53bb8f49afa08cb7580
build/public-submission/0.4.0/codex-sdlc-skills-0.4.0.zip	cf16b1ca50c900c260db177485006e6709322c3bed74dfc1dcebb8f4d4ee4bd3
build/public-submission/0.4.0/codex-sdlc-logo-0.4.0.png	678361975afc99f1c5bcb5b95a0883922b025d2aab3d2ce88f911a5972ff1825

Check	Result
TypeScript typecheck	Passed
Vitest suite	Passed: 7 files, 28 tests
Runtime build	Passed
Exact npm tarball	Passed for codex-sdlc@0.4.0; 160 packaged files, 126,263 bytes compressed, including the local configuration schema and workspace runtime
Exact tarball install	Passed in an isolated temporary prefix; CLI reported 0.4.0 and exposed init, configure, lifecycle, delivery, evidence, and finalization commands
Production and complete dependency audits	Passed: zero vulnerabilities
Local marketplace build	Passed
Portable Agent Plugins manifest	Passed against the referenced public 1.0.0 schema
Source, staged, and archived plugin packages	Passed the plugin-creator validator
Archived skill bundle	Passed the skill-creator validator for all six skills
Independent multi-repository delivery fixture	Passed: coordinator, backend, web, and docs Git repositories; repository-routed command evidence; checkout rebinding; remote mismatch rejection; duplicate mapping rejection
Repository-aware authority contract	Passed: assignment/task repository binding and scoped changed-file identity

Native Linux and Windows qualification remains deferred by release decision. codex-sdlc@0.4.0 is published on npm with provenance, the v0.4.0 GitHub tag and release are public, and codex-sdlc 0.4.0 is published in the OpenAI Plugins Directory.