@crafts69guy/orchestra 0.0.0-stage → 0.3.0

package/.claude-plugin/marketplace.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
+  "name": "orchestra",
+  "description": "Cross-harness orchestration workflow for Claude Code and Codex.",
+  "owner": {
+    "name": "crafts69guy",
+    "url": "https://github.com/crafts69guy"
+  },
+  "plugins": [
+    {
+      "name": "orch",
+      "description": "Orchestrator workflow: scope, implement, review, ship via specialised subagents and worktrees.",
+      "source": "./",
+      "category": "productivity"
+    }
+  ],
+  "allowCrossMarketplaceDependenciesOn": ["ponytail"]
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,19 @@
+{
+  "name": "orch",
+  "version": "0.3.0",
+  "description": "Orchestrator workflow: scope, implement, review, ship via specialised subagents and worktrees.",
+  "author": {
+    "name": "crafts69guy"
+  },
+  "homepage": "https://github.com/crafts69guy/orchestra",
+  "repository": "https://github.com/crafts69guy/orchestra",
+  "license": "MIT",
+  "keywords": ["orchestration", "subagents", "worktrees", "workflow"],
+  "hooks": "./hooks/hooks.json",
+  "dependencies": [
+    {
+      "name": "ponytail",
+      "marketplace": "ponytail"
+    }
+  ]
+}

package/.codex-plugin/plugin.json

@@ -0,0 +1,29 @@
+{
+  "name": "orch",
+  "version": "0.3.0",
+  "description": "Orchestrator workflow: scope, implement, review, ship via specialised subagents and worktrees.",
+  "author": {
+    "name": "crafts69guy",
+    "url": "https://github.com/crafts69guy"
+  },
+  "homepage": "https://github.com/crafts69guy/orchestra",
+  "repository": "https://github.com/crafts69guy/orchestra",
+  "license": "MIT",
+  "keywords": ["orchestration", "subagents", "worktrees", "workflow"],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks.json",
+  "interface": {
+    "displayName": "Orchestra",
+    "shortDescription": "Orchestrator workflow for subagents and worktrees",
+    "longDescription": "Always-on orchestration rules: scope, implement, review and ship through specialised subagents, with parallel work in git worktrees.",
+    "developerName": "crafts69guy",
+    "category": "Productivity",
+    "capabilities": ["Instructions", "Lifecycle hooks"],
+    "websiteURL": "https://github.com/crafts69guy/orchestra",
+    "defaultPrompt": [
+      "Orchestrate this task: scope, implement, review, ship.",
+      "Split this work into parallel worktree tasks."
+    ],
+    "brandColor": "#111111"
+  }
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 crafts69guy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,83 @@
-# Temporary Holding Version
+# Orchestra
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Orchestra (plugin name `orch`) is a cross-harness orchestration workflow for Claude Code and
+Codex. A main agent scopes, delegates, reviews and ships work through four specialised subagents
+(`scoper`, `implementer`, `reviewer`, `shipper`), running independent tasks in parallel git
+worktrees.
+
+The rules are always-on but opt-in: they are injected at session start only when `ORCH=1`.
+
+## Requirements
+
+- Node.js 22.8 or newer (hooks and the CLI are plain Node scripts, zero runtime dependencies).
+- [worktrunk](https://worktrunk.dev) (`brew install worktrunk`) for parallel dispatch. The
+  session hook warns when `wt` is missing.
+- Claude Code and/or Codex.
+- Claude Code: the `ponytail` plugin is declared as a dependency. Add its marketplace first:
+  `/plugin marketplace add DietrichGebert/ponytail`.
+
+## Install
+
+Install the `orch` CLI, then let it check everything else:
+
+```sh
+npm i -g @crafts69guy/orchestra
+orch doctor
+```
+
+`orch doctor` prints one line per check with a fix hint for each failure, and exits 1 if a
+required check fails. Install the plugin for your harness as it suggests:
+
+Claude Code:
+
+```text
+/plugin marketplace add crafts69guy/orchestra
+/plugin install orch@orchestra
+```
+
+Codex:
+
+```sh
+codex plugin marketplace add crafts69guy/orchestra
+```
+
+## Usage
+
+| Command | Does |
+|---|---|
+| `orch doctor` | checks Node, git, `wt`, the harness CLIs and the installed plugins |
+| `orch claude [--yolo] [args...]` | starts `claude` with `ORCH=1` and `--model opus` (unless you pass `--model`) |
+| `orch codex [--yolo] [args...]` | starts `codex` with `ORCH=1` and the orchestration context (below) |
+| `orch wt new\|merge\|list ...` | worktree helper used by the `dispatch` skill; prints JSON |
+| `orch eval [args...]` | behaviour evals; only from a git checkout (see [AGENTS.md](AGENTS.md)) |
+| `orch --help`, `orch --version` | usage and version |
+
+`--yolo` turns off permission prompts for that run (`--dangerously-skip-permissions` on Claude,
+`--dangerously-bypass-approvals-and-sandbox` on Codex). Without it the harness keeps its normal
+permission model. Other arguments pass through to the harness, and so does its exit code.
+
+`orch claude` only sets `ORCH=1`; `ORCH=1 claude` works too. Without `ORCH=1` the hooks exit
+silently and the session is untouched.
+
+## Codex
+
+Codex does not trust project agents or plugin hooks by default, so `orch codex` runs `codex`
+with `ORCH=1` and prepends, per run and without touching `~/.codex`:
+
+- `-c developer_instructions=...`: the same context the SessionStart hook injects (rules, the
+  absolute path of `orch`, `wt` warning).
+- `-c agents.<name>.config_file=...` and `.description=...` for each `codex/agents/*.toml`.
+- `--add-dir <git common dir>` inside a git repo, because `workspace-write` blocks `.git` and
+  worktrees and commits need it.
+
+It exits 1 if the rules file is missing and 127 if `codex` is not on `PATH`.
+
+## Docs
+
+- [Architecture](docs/ARCHITECTURE.md)
+- [Research notes](docs/research/)
+- [Contributing and dev commands](AGENTS.md)
+
+## License
+
+MIT

package/agents/.markdownlint-cli2.jsonc

@@ -0,0 +1 @@
+{ "config": { "MD041": false } }

package/agents/implementer.md

@@ -0,0 +1,22 @@
+---
+name: implementer
+description: "orch workflow: writes, modifies or refactors code and adds or fixes tests for a well-defined plan. For changes spanning 2+ files or needing more than one edit-and-test cycle."
+model: sonnet
+effort: medium
+tools: Read, Write, Edit, Grep, Glob, Bash
+---
+
+You are a senior engineer implementing a well-defined plan with minimal changes.
+
+- Follow existing conventions; reuse existing helpers.
+- Add or update tests, run the project's checks, and review your own diff.
+- Do not broaden scope, redesign working code, or weaken tests.
+- Do not commit or push.
+- If the plan conflicts with the code in a way that needs a significant decision, stop and report back.
+
+Report with these sections:
+
+- Status: done, partial, or blocked.
+- Changes: files touched and what changed.
+- Validation: each command you ran and its result, as evidence.
+- Notes: deviations, open questions, anything unverified.

package/agents/reviewer.md

@@ -0,0 +1,18 @@
+---
+name: reviewer
+description: "orch workflow: independent, read-only code review. For explicit requests or risky changes (security, concurrency, migrations, public APIs). Never modifies files."
+model: opus
+effort: high
+tools: Read, Grep, Glob, Bash
+---
+
+You are an independent reviewer. Do not modify files.
+
+Pass 1, correctness: check correctness, regressions, edge cases, and test quality.
+
+Pass 2, over-engineering: look for unneeded abstractions, speculative options and dead code,
+using the ponytail-review lens if that skill is available.
+
+Rank findings BLOCKER, MAJOR, or MINOR with file:line. Do not invent problems.
+
+If nothing is wrong, say exactly: PASS — no blocking or major issues found.

package/agents/scoper.md

@@ -0,0 +1,18 @@
+---
+name: scoper
+description: "orch workflow: read-only scoping of a non-trivial task in unfamiliar code. Gathers facts and returns a brief."
+model: haiku
+effort: low
+maxTurns: 30
+tools: Read, Grep, Glob, Bash, mcp__cocoindex-code__search, ToolSearch
+disallowedTools: Write, Edit
+---
+
+You are a scoping specialist. Make no changes and no architecture decisions.
+
+Report: Goal, Acceptance criteria, Relevant code, Scope, Validation, Risks, Possible split.
+
+Every claim about code must cite a file path.
+
+Flag the task as complex if it touches several subsystems, changes a public format, involves
+concurrency or migrations, lacks clear criteria, or has behavior you cannot locate.

package/agents/shipper.md

@@ -0,0 +1,17 @@
+---
+name: shipper
+description: "orch workflow: commits, pushes and opens PRs after review is done. Handles only git and GitHub."
+model: haiku
+effort: low
+maxTurns: 15
+tools: Read, Bash
+codex-sandbox: inherit
+---
+
+You handle only git and GitHub.
+
+- Pre-flight: check status, branch, diffs, and unrelated files; stop and report on any problem.
+- Stage files by name, never `git add -A`.
+- Never force-push, amend, merge, or bypass hooks.
+- Follow the repo's existing commit message style and any attribution lines given in your instructions.
+- Write PR descriptions from the repo template if present.

package/bin/orch

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { main } from '../scripts/orch.mjs';
+
+main();

package/codex/agents/implementer.toml

@@ -0,0 +1,21 @@
+# GENERATED by scripts/gen-codex-agents.mjs from agents/implementer.md. Do not edit; run `npm run gen:codex`.
+
+name = "implementer"
+description = "orch workflow: writes, modifies or refactors code and adds or fixes tests for a well-defined plan. For changes spanning 2+ files or needing more than one edit-and-test cycle."
+model_reasoning_effort = "medium"
+developer_instructions = '''
+You are a senior engineer implementing a well-defined plan with minimal changes.
+
+- Follow existing conventions; reuse existing helpers.
+- Add or update tests, run the project's checks, and review your own diff.
+- Do not broaden scope, redesign working code, or weaken tests.
+- Do not commit or push.
+- If the plan conflicts with the code in a way that needs a significant decision, stop and report back.
+
+Report with these sections:
+
+- Status: done, partial, or blocked.
+- Changes: files touched and what changed.
+- Validation: each command you ran and its result, as evidence.
+- Notes: deviations, open questions, anything unverified.
+'''

package/codex/agents/reviewer.toml

@@ -0,0 +1,18 @@
+# GENERATED by scripts/gen-codex-agents.mjs from agents/reviewer.md. Do not edit; run `npm run gen:codex`.
+
+name = "reviewer"
+description = "orch workflow: independent, read-only code review. For explicit requests or risky changes (security, concurrency, migrations, public APIs). Never modifies files."
+model_reasoning_effort = "high"
+sandbox_mode = "read-only"
+developer_instructions = '''
+You are an independent reviewer. Do not modify files.
+
+Pass 1, correctness: check correctness, regressions, edge cases, and test quality.
+
+Pass 2, over-engineering: look for unneeded abstractions, speculative options and dead code,
+using the ponytail-review lens if that skill is available.
+
+Rank findings BLOCKER, MAJOR, or MINOR with file:line. Do not invent problems.
+
+If nothing is wrong, say exactly: PASS — no blocking or major issues found.
+'''

package/codex/agents/scoper.toml

@@ -0,0 +1,16 @@
+# GENERATED by scripts/gen-codex-agents.mjs from agents/scoper.md. Do not edit; run `npm run gen:codex`.
+
+name = "scoper"
+description = "orch workflow: read-only scoping of a non-trivial task in unfamiliar code. Gathers facts and returns a brief."
+model_reasoning_effort = "low"
+sandbox_mode = "read-only"
+developer_instructions = '''
+You are a scoping specialist. Make no changes and no architecture decisions.
+
+Report: Goal, Acceptance criteria, Relevant code, Scope, Validation, Risks, Possible split.
+
+Every claim about code must cite a file path.
+
+Flag the task as complex if it touches several subsystems, changes a public format, involves
+concurrency or migrations, lacks clear criteria, or has behavior you cannot locate.
+'''

package/codex/agents/shipper.toml

@@ -0,0 +1,14 @@
+# GENERATED by scripts/gen-codex-agents.mjs from agents/shipper.md. Do not edit; run `npm run gen:codex`.
+
+name = "shipper"
+description = "orch workflow: commits, pushes and opens PRs after review is done. Handles only git and GitHub."
+model_reasoning_effort = "low"
+developer_instructions = '''
+You handle only git and GitHub.
+
+- Pre-flight: check status, branch, diffs, and unrelated files; stop and report on any problem.
+- Stage files by name, never `git add -A`.
+- Never force-push, amend, merge, or bypass hooks.
+- Follow the repo's existing commit message style and any attribution lines given in your instructions.
+- Write PR descriptions from the repo template if present.
+'''

package/hooks/guard.mjs

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+import { isEntry } from './session-start.mjs';
+
+const NO_COMMIT = new Set(['implementer', 'scoper', 'reviewer']);
+const GIT_VALUE_OPTS = new Set(['-C', '-c', '--git-dir', '--work-tree', '--namespace']);
+const GH_VALUE_OPTS = new Set(['-R', '--repo']);
+const GH_PR_WRITE = new Set(['create', 'merge', 'edit']);
+
+/** `orch:implementer` (Claude) and `implementer` (Codex) both give `implementer`; no agent_type is the main thread. */
+export function roleOf(agentType) {
+  if (typeof agentType !== 'string' || agentType === '') return 'main';
+  return agentType.replace(/^[^:]+:/, '');
+}
+
+// ponytail: whitespace tokenizer, quotes are not parsed, so a chain operator inside a quoted
+// string splits early (can only over-deny); `bash -c '...'` wrappers are not unwrapped.
+function segments(command) {
+  return command.split(/&&|\|\||[;|&\n]/).map((s) => s.trim().split(/\s+/));
+}
+
+function skipEnv(tokens) {
+  let i = 0;
+  while (i < tokens.length && (/^[A-Za-z_]\w*=/.test(tokens[i]) || tokens[i] === 'env')) i++;
+  return tokens.slice(i);
+}
+
+/** Tokens after the global options of `git`/`gh`, so `git -C x push` yields ['push']. */
+function afterOptions(tokens, valueOpts) {
+  for (let i = 0; i < tokens.length; i++) {
+    if (valueOpts.has(tokens[i])) i++;
+    else if (!tokens[i].startsWith('-')) return tokens.slice(i);
+  }
+  return [];
+}
+
+/** Classifies one command segment as 'push', 'pr', 'commit' or null. */
+export function classify(tokens) {
+  const [bin, ...args] = skipEnv(tokens);
+  if (bin === undefined) return null;
+  const name = basename(bin);
+  if (name === 'git') {
+    const [sub] = afterOptions(args, GIT_VALUE_OPTS);
+    return sub === 'push' || sub === 'commit' ? sub : null;
+  }
+  if (name === 'gh') {
+    const [group, action] = afterOptions(args, GH_VALUE_OPTS);
+    return group === 'pr' && GH_PR_WRITE.has(action) ? 'pr' : null;
+  }
+  return null;
+}
+
+/** Returns a deny reason, or null to allow. */
+export function decide(role, command) {
+  if (typeof command !== 'string') return null;
+  for (const seg of segments(command)) {
+    const kind = classify(seg);
+    if ((kind === 'push' || kind === 'pr') && role !== 'shipper') {
+      return `orch: only the shipper role may push or manage pull requests (role: ${role}).`;
+    }
+    if (kind === 'commit' && NO_COMMIT.has(role)) {
+      return `orch: the ${role} role must not commit; leave changes in the working tree for the orchestrator.`;
+    }
+  }
+  return null;
+}
+
+export function formatDeny(reason) {
+  return JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: 'PreToolUse',
+      permissionDecision: 'deny',
+      permissionDecisionReason: reason,
+    },
+  });
+}
+
+/** Returns the exit code; never throws, bad stdin JSON is a silent allow. */
+export function run({ env, input, stdout }) {
+  if (env.ORCH !== '1') return 0;
+  let payload;
+  try {
+    payload = JSON.parse(input);
+  } catch {
+    return 0;
+  }
+  const reason = decide(roleOf(payload?.agent_type), payload?.tool_input?.command);
+  if (reason !== null) stdout(formatDeny(reason));
+  return 0;
+}
+
+export function readStdin() {
+  try {
+    return readFileSync(0, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+export function main(proc = process, read = readStdin) {
+  proc.exitCode = run({
+    env: proc.env,
+    input: proc.env.ORCH === '1' ? read() : '',
+    stdout: (s) => proc.stdout.write(s),
+  });
+}
+
+if (isEntry(process.argv[1], import.meta.url)) main();

package/hooks/hooks.json

@@ -0,0 +1,39 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume|clear|compact",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/session-start.mjs\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/guard.mjs\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/subagent-stop.mjs\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ]
+  }
+}

package/hooks/session-start.mjs

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import { accessSync, constants, readFileSync, realpathSync } from 'node:fs';
+import { delimiter, dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export const WT_WARNING =
+  'orch: `wt` (worktrunk) not found on PATH; parallel dispatch needs it (`brew install worktrunk`).';
+
+export function pluginRoot(metaUrl) {
+  return join(dirname(fileURLToPath(metaUrl)), '..');
+}
+
+export function readRules(root, read = readFileSync) {
+  try {
+    return read(join(root, 'rules', 'orchestrator.md'), 'utf8');
+  } catch {
+    return null;
+  }
+}
+
+// ponytail: POSIX-only executable lookup; add PATHEXT handling if Windows matters.
+export function which(name, pathEnv = '') {
+  return pathEnv.split(delimiter).some((dir) => {
+    try {
+      accessSync(join(dir, name), constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+}
+
+/** `orchPath` is the absolute `bin/orch`; plugin bin/ is not on PATH under Codex, so name it. */
+export function buildContext(rules, hasWt, orchPath) {
+  const withCli = `${rules.trimEnd()}\n\norch CLI: ${orchPath} (use \`${orchPath} wt new|merge|list\`)\n`;
+  return hasWt ? withCli : `${withCli}\n${WT_WARNING}\n`;
+}
+
+export function formatOutput(additionalContext) {
+  return JSON.stringify({
+    hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext },
+  });
+}
+
+/** Returns the process exit code; never throws for a missing rules file. */
+export function run({ env, root, read, hasCommand, stdout, stderr }) {
+  if (env.ORCH !== '1') return 0;
+  const rules = readRules(root, read);
+  if (rules === null) {
+    stderr(`orch: rules/orchestrator.md not found under ${root}; skipping injection\n`);
+    return 0;
+  }
+  stdout(formatOutput(buildContext(rules, hasCommand('wt', env.PATH), join(root, 'bin', 'orch'))));
+  return 0;
+}
+
+export function main(proc = process, metaUrl = import.meta.url) {
+  proc.exitCode = run({
+    env: proc.env,
+    root: pluginRoot(metaUrl),
+    read: readFileSync,
+    hasCommand: which,
+    stdout: (s) => proc.stdout.write(s),
+    stderr: (s) => proc.stderr.write(s),
+  });
+}
+
+// realpath both sides: a symlinked plugin dir (stow, --plugin-dir) must still run main.
+export function isEntry(argv1, metaUrl, real = realpathSync) {
+  try {
+    return real(argv1) === real(fileURLToPath(metaUrl));
+  } catch {
+    return false;
+  }
+}
+
+if (isEntry(process.argv[1], import.meta.url)) main();

package/hooks/subagent-stop.mjs

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+import { readStdin, roleOf } from './guard.mjs';
+import { isEntry } from './session-start.mjs';
+
+const STATUS = /^[\s>*#-]*Status\W*(done|partial|blocked)\b/im;
+const VALIDATION = /^[\s>*#-]*Validation\b/im;
+
+export const BLOCK_REASON =
+  'orch: your report is incomplete. Reply again with a `Status: done|partial|blocked` line and a `Validation` section listing each command you ran and its result.';
+
+/** True when the implementer report carries both a Status line and a Validation section. */
+export function hasEvidence(message) {
+  return typeof message === 'string' && STATUS.test(message) && VALIDATION.test(message);
+}
+
+/** Returns the exit code; never throws, bad stdin JSON is a silent allow. */
+export function run({ env, input, stdout }) {
+  if (env.ORCH !== '1') return 0;
+  let payload;
+  try {
+    payload = JSON.parse(input);
+  } catch {
+    return 0;
+  }
+  if (roleOf(payload?.agent_type) !== 'implementer' || payload?.stop_hook_active === true) return 0;
+  if (!hasEvidence(payload?.last_assistant_message)) {
+    stdout(JSON.stringify({ decision: 'block', reason: BLOCK_REASON }));
+  }
+  return 0;
+}
+
+export function main(proc = process, read = readStdin) {
+  proc.exitCode = run({
+    env: proc.env,
+    input: proc.env.ORCH === '1' ? read() : '',
+    stdout: (s) => proc.stdout.write(s),
+  });
+}
+
+if (isEntry(process.argv[1], import.meta.url)) main();

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@crafts69guy/orchestra",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.0",
+  "type": "module",
+  "description": "Cross-harness (Claude Code + Codex) orchestration workflow plugin",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/crafts69guy/orchestra.git"
+  },
+  "homepage": "https://github.com/crafts69guy/orchestra",
+  "keywords": [
+    "claude-code",
+    "codex",
+    "orchestration",
+    "subagents",
+    "worktrees",
+    "cli"
+  ],
+  "bin": {
+    "orch": "bin/orch"
+  },
+  "files": [
+    "bin",
+    "scripts",
+    "hooks",
+    "rules",
+    "agents",
+    "skills",
+    "codex",
+    ".claude-plugin",
+    ".codex-plugin",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.8"
+  },
+  "scripts": {
+    "test": "node --test --experimental-test-coverage --test-coverage-lines=98 --test-coverage-branches=98 --test-coverage-functions=98 --test-coverage-exclude='test/**'",
+    "lint": "biome check . && markdownlint-cli2 \"**/*.md\" \"#node_modules\"",
+    "fmt": "biome format --write .",
+    "gen:codex": "node scripts/gen-codex-agents.mjs",
+    "check": "npm run lint && npm run gen:codex -- --check && npm test",
+    "validate": "claude plugin validate .",
+    "eval": "sh evals/_support/run.sh"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.5.15",
+    "markdownlint-cli2": "0.23.3"
+  }
+}

package/rules/.markdownlint-cli2.jsonc

@@ -0,0 +1 @@
+{ "config": { "MD013": false } }