Controlled Codex host

Use the version-pinned npm entrypoint below. A Codex plugin install loads skills and MCP configuration, but it does not add the great-cto npm binary to PATH. Do not imitate Claude Code hooks or manually chain roles: the controller reads shared/pipeline.toml, persists the cursor and owns every write and gate transition.

Preflight

npx --yes great-cto@3.63.4 codex-host doctor
npx --yes great-cto@3.63.4 codex-host list --dir /absolute/project

doctor.state=blocked means do not start. Docker may be unavailable when no checks/release policy is requested; GitHub CLI may be unavailable when the local adapter is used. The run store must not be group/world accessible. For mixed-host runs, also require doctor.checks.claude.state=available.