[decebal]

Summary

• Replace hardcoded delivery selection with a versioned repository catalog and selectable delivery / bugfix methods, retaining the existing cross-host lifecycle and safety gates.
• Preserve legacy AllSource event bytes and initialized delivery files while adding catalog resources, indexed guidance, and both host skills.
• Reject conflicting Prime retry bindings and support narrowly scoped RTK-wrapped Git commands through Claude's normal permission controls.

Verified delivery

Authenticated Codex diagnosed the defect, Claude supplied the repair and compatibility tests, and Codex epoch 3 verified and published exact commit 604889847ff322637319b245a25255086c1bf37f through this PR. The frozen reproduction remained byte-identical. Explicit recovery retained progress from bounded host calls; the completed Claude call had zero permission denials.

Managed run f2c4e41f-7616-4b34-aa56-4347fd1617fc reopened at 37 validated AllSource events, stage shipped, with no pending operation. Independent remote and PR-head reads matched the verified SHA. Actual Chronis completion and a workflow-attributed Prime outcome linking this PR were read back through their engines.

Test plan

• Exact final commit: 47 toolkit tests passed, one explicitly ignored real-Chronis qualification; all four host-fixture tests passed.
• Formatting, Clippy, whitespace, and dependency policy passed.
• Final Linux/macOS CI executed 47 passing toolkit tests and four passing fixture tests on each platform: run 40145571886.
• Source-denied installed CLI initialization and additive legacy setup preserved existing bytes; actual Chronis readback succeeded.
• New binary reopened the earlier 22-event shipped delivery history without changing legacy serialization.
• Actual destination catalog, repaired code, and report bytes matched the local final commit.

Design and evidence

Catalog design · Verification report

Preview scope remains sequential hosts on one Unix machine, local embedded AllSource/Prime, and a verified feature commit with an open PR. Merge and deployment remain separate actions.