| name | devcodex-workspace |
| description | Use when cwd belongs to a DevCodex workspace, the user asks for DevCodex behavior, OR the user message may match a workspace custom skill under .devcodex/workspace/skills (short triggers like skill name/id, quoted phrases in skill description, e.g. test/测试). Prefer workspace skill fixed behavior over connectivity/chat defaults.
|
DevCodex Workspace Resolver
Grok UserPromptSubmit cannot inject model context (stdout ignored). Workspace custom skills are not native-scanned; DevCodex uses the same staged skill_route contract as the other hosts: build a bounded W + managed G catalog, commit at most one route, and load only the committed stage body. On Grok, Stop decision:block may continue only a committed pending route when lastAssistantMessage is available. The plugin is user-global and does not own a workspace. Resolve the nearest workspace-namespace marker from cwd, keep task state under that workspace's .devcodex, and load shared instructions/Skills from user-global DevCodex surfaces plus the committed workspace skill. Full-evidence route: devcodex grok.
Unified Workspace Skill Route（用户可见闭环）
- Before treating a short user message as connectivity ping / Ready, use the bounded catalog supplied by the unified route; do not independently scan skill trees.
- If a route is committed, load only that one SKILL.md through
skill_route and obey it for the turn. Do not invent Ready/闲聊.
- Privacy / process UI: 禁止列出或扫描用户主目录下的宿主 skill 树，例如
C:\Users\…\.grok\skills、~\.grok\bundled\skills、~\.claude\skills、~\.agents\skills（L1）。
这些 List 会把 C 盘用户路径暴露在过程时间线里。全局 skill 只读
~/.agents/devcodex/skills/<id>/SKILL.md 单文件；工作区 skill 只读
.devcodex/workspace/skills/<id>/SKILL.md。
- 过程文案用「正在加载 技能」，不要写「命中…正在读取并按该技能执行」。
- CLI inventory verify:
devcodex skill resolve <id>; route regression: npm run test:skill-route.
- Do not claim UPS inject on Grok; Stop may continue only an already committed pending route.
HostParity (vs Codex) — honesty contract
| Tier | Route | Guarantees | Must not claim |
|---|
| Full | devcodex grok (official --rules kernel bind) | Controlling AGENTS.md in context; PreToolUse hard deny uses Grok decision:deny; context acquisition is path-observable; unified staged skill route; conditional Stop hard-continue (decision:block when lastAssistantMessage is available and a committed route/completion gate remains pending) | UserPromptSubmit context inject; unconditional Stop without body / after softCap fail-open; verified PC0 from Hook payload alone |
| Partial | plain grok in a child Git project | Best-effort Skill discovery + plugin bridge when trusted; PreToolUse deny adapter still applies when lifecycle is reachable | Full host parity with Codex; kernelInjected=true from passive Hook stdout |
Platform facts (Grok Build hooks docs): PreToolUse and Stop/SubagentStop can hard-control; UserPromptSubmit is passive (no inject). PC5 must report Partial unless Full launcher evidence is present. Do not equate Grok with Codex UPS inject bootstrap.
- Preserve the semantic intent seed before reading project context.
- Bind the nearest valid
workspace-namespace root from cwd. Do not require or create workspace AGENTS.md, .agents, .grok, .codex, .claude, .gemini, or .github.
- Resolve the project namespace relative to that workspace and bind runtime state under
.devcodex/<project>/.
- Follow the kernel's intent-first route and read only selected files from the managed global runtime plus the resulting workspace Profile/context plan, and the single workspace skill committed by
skill_route.
- Use
~/.agents/devcodex/instructions.full.md only for an explicit fallback; workspace .devcodex remains the sole workspace-owned DevCodex surface.
- Before substantive output, satisfy UserVisibleReplyLayoutV1 + UserVisibleNoisePolicyV1 (six-host shared): always emit plain-language PC0~PC7; do not paste completion-check/FC tables/FVS unless work is claimed done (short FVS when all-green) or something failed. Runtime cannot inject on Grok; models still own S07.
- Optional assist: call MCP
profile_compose_entry_check to obtain a portable PC0~PC7 block, or rely on PreToolUse deny reasons that embed the same template when context acquisition is incomplete.
- Run
devcodex doctor / devcodex status and read hostParity (HostParityScorecardV1): full-capable means hard path is ready; still use devcodex grok for Full session kernel evidence. partial lists failedChecks and executable repairSteps (commands); re-run doctor after each fix.
- Execute GrokTurnChecklist every non-trivial turn (PF-165 + C16/PI-20260724-01): PC0~PC7 → Intent→Skill mandatory bundle → ContextReadPlan → scan-hygiene → TTFV first delivery → work/gates → report+memory → honest platform ceiling. Never skip S05/S07/C17 because inject is missing.
- Workspace skill trigger: if user message matches a W skill, obey that skill before checklist bulk for chat-like turns.
GrokTurnChecklist + Intent→Skill bundle (PF-165)
| Step | Must do |
|---|
| entry-pc0-pc7 | Full PC0~PC7 first; re-emit after compact/resume |
| intent-route | Final route before loading workflow Skills |
| skill-bundle | Non-chat mandatory: intent + compliance + user-visible-output-contract + workflow Skill + report + memory (minimal-sufficient; no full Skill encyclopedia preload) |
| context-plan | Bounded plan/receipts only |
| scan-hygiene | WorkspaceRootScanHygiene: prefer a bound project path and exclude node_modules/dist; Hook telemetry is advisory and the host owns permission |
| ttfv-first-delivery | TimeToFirstValueGate: same user-visible turn delivers scope card OR first findings/conclusion OR hard block (non-chat) |
| work-and-gates | CP/ECR as applicable |
| report-memory | Non-chat write report + memory |
| honest-ceiling | No inject / unconditional Stop hard-block / Grok===Codex claims; Stop is conditional (body + softCap) |
Machine source: scripts/lib/host-parity-scorecard.js (GROK_TURN_EXECUTION_CHECKLIST, classifyWorkspaceRootScanSample, classifyTtfvOmissionSample, repairSteps). Site doc: website/docs/intro/host-parity-grok.md.
The plugin is a discovery adapter, not a second rules source. Its passive Hook output must never be presented as kernel-injection evidence. Do not copy AGENTS.md, CLAUDE.md, GEMINI.md, .agents, .github, .grok, .codex, .claude, or .gemini into a workspace.
