[mlaccetti]

Codex advertised symlinked muster-worker definitions but rejected actual spawning, and the legacy Claude compatibility mapping directed delegated work back into the main thread. Install the custom agent as a regular file, repair that mapping, and configure Luna Medium defaults while preserving the root model, unrelated TOML, permissions, and config symlinks. Restore prior defaults on unlink and explicitly describe the built-in worker fallback.

Add opt-in muster doctor --live with executable selection and a bounded timeout. It verifies recorded Sol parent and Luna Medium child identities, matching turns, ordered delegation/completion events, and a nonce in the child's final answer. Each output stream is capped at 4 MiB during execution; overflow cancels the process group. Normal doctor stays a static check.

Validation:

• mise exec -- just check: formatting, lint, no-sleep guard, and all race-enabled tests passed.
• muster doctor --live --codex-bin /opt/homebrew/bin/codex: passed on Codex 0.163.0.
• The same live check using the desktop app's embedded binary: passed on Codex 0.162.0-alpha.17.2.

Both live runs recorded gpt-6.1-sol/high parents and completed muster-worker children using gpt-6-luna/medium. Regression tests cover output overflow on stdout/stderr, io.Copy bypass prevention, timeout, invalid or incomplete evidence, unsupported roles, and safe configuration updates/restoration.