@danmoisan/drm-copilot-mcp 1.0.13 → 1.0.15

package/resources/codex-and-agents-customizations/.codex/hooks/validate-bash.ps1

@@ -1,72 +1,185 @@
-# Converted hook
-# Review the generated hook behavior before enabling it.
 
 <#
 .SYNOPSIS
-    Pre-tool-use hook for Claude Code that blocks dangerous Bash commands.
+    Codex PreToolUse hook that blocks dangerous shell commands.
 
 .DESCRIPTION
-    This script is invoked by the Claude Code PreToolUse hook before any Bash
-    command is executed. It reads the proposed command string from the
-    CLAUDE_TOOL_INPUT environment variable (JSON with a 'command' field) or
-    falls back to the first positional argument. If the command matches any
-    blocked pattern (destructive operations such as forced deletions, forced
-    pushes, or hard resets), the script exits with code 1 to prevent execution.
-    Safe commands exit with code 0.
+    Reads one Codex hook payload from stdin, validates tool_input.command, and emits the current
+    PreToolUse deny envelope for destructive operations. Malformed hook input fails closed with
+    exit code 2 and the reason on stderr. Safe commands emit no output and exit 0.
 
 .NOTES
-    Compatible with PowerShell 7+.
-    This script must not modify any state; it is a read-only validation gate.
+    Compatible with PowerShell 7+. This hook is read-only.
 #>
 [CmdletBinding()]
-param(
-    [Parameter(Position = 0, Mandatory = $false)]
-    [string]$CommandInput
-)
-
-# Blocked patterns that represent destructive or irreversible operations.
-$blockedPatterns = @(
-    'rm -rf',
-    'git push --force',
-    'git push origin --force',
-    'Remove-Item -Recurse -Force',
-    'git reset --hard',
-    'git push -f'
-)
-
-# Resolve the command string from CLAUDE_TOOL_INPUT JSON or positional argument.
-$commandToCheck = ''
-
-if ($env:CLAUDE_TOOL_INPUT) {
-    try {
-        $parsed = $env:CLAUDE_TOOL_INPUT | ConvertFrom-Json
-        if ($parsed.command) {
-            $commandToCheck = $parsed.command
+param()
+
+function Get-BlockedBashPattern {
+    [CmdletBinding()]
+    [OutputType([string[]])]
+    param()
+
+    return [string[]]@(
+        'rm -rf',
+        'git push --force',
+        'git push origin --force',
+        'Remove-Item -Recurse -Force',
+        'git reset --hard',
+        'git push -f'
+    )
+}
+
+function Get-BlockedPatternMatch {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $Command
+    )
+
+    if (-not $Command) {
+        return $null
+    }
+
+    foreach ($pattern in (Get-BlockedBashPattern)) {
+        if ($Command.Contains($pattern)) {
+            return $pattern
         }
     }
-    catch {
-        # If JSON parsing fails, treat the raw environment variable as the command.
-        $commandToCheck = $env:CLAUDE_TOOL_INPUT
+
+    return $null
+}
+
+function Get-BashBlockReason {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $Command
+    )
+
+    $pattern = Get-BlockedPatternMatch -Command $Command
+    if (-not $pattern) {
+        return $null
     }
+
+    return "Blocked dangerous command pattern detected: '$pattern'"
 }
 
-# Fall back to positional argument when the environment variable is absent or empty.
-if (-not $commandToCheck -and $CommandInput) {
-    $commandToCheck = $CommandInput
+function Get-BashDenyDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)]
+        [string] $Reason
+    )
+
+    [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
+    }
 }
 
-# When no command is provided, allow execution (nothing to validate).
-if (-not $commandToCheck) {
-    exit 0
+function Get-BashCommandToCheck {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $ToolInputRaw,
+
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $PositionalInput
+    )
+
+    if ($ToolInputRaw) {
+        try {
+            $parsed = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
+            if ($parsed.command) {
+                return [string]$parsed.command
+            }
+        } catch {
+            # If JSON parsing fails, treat the raw input as the command.
+            return $ToolInputRaw
+        }
+    }
+
+    if ($PositionalInput) {
+        return $PositionalInput
+    }
+
+    return ''
+}
+
+function Invoke-ValidateBashDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $ToolInputRaw,
+
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $PositionalInput
+    )
+
+    $commandToCheck = Get-BashCommandToCheck -ToolInputRaw $ToolInputRaw -PositionalInput $PositionalInput
+
+    $reason = Get-BashBlockReason -Command $commandToCheck
+    if ($reason) {
+        return Get-BashDenyDecision -Reason $reason
+    }
+
+    return $null
 }
 
-# Check the command against each blocked pattern.
-foreach ($pattern in $blockedPatterns) {
-    if ($commandToCheck.Contains($pattern)) {
-        Write-Error "Blocked dangerous command pattern detected: '$pattern'"
-        exit 1
+function ConvertFrom-CodexBashHookPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
+
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'validate-bash hook input is empty.'
+    }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "validate-bash hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'validate-bash hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'Bash') {
+        throw 'validate-bash requires a PreToolUse Bash payload.'
     }
+    return $payload
 }
 
-# Command passed all checks.
-exit 0
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+try {
+    $payload = ConvertFrom-CodexBashHookPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    $toolInputRaw = $payload.tool_input | ConvertTo-Json -Compress -Depth 20
+    $decision = Invoke-ValidateBashDecision -ToolInputRaw $toolInputRaw
+    if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+        $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+    }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
+}

package/resources/codex-and-agents-customizations/.codex/hooks/validate-codex-subagent-routing.ps1

@@ -0,0 +1,154 @@
+<#
+.SYNOPSIS
+    Requests continuation when a routed subagent stops without valid model or epic provenance.
+
+.DESCRIPTION
+    SubagentStop is a continuation mechanism, not a hard output rejection. This hook supplies the
+    in-process backstop; the MCP checkpoint validator remains the authoritative completion gate.
+#>
+[CmdletBinding()]
+param()
+
+. (Join-Path $PSScriptRoot 'codex-authority-store.ps1')
+
+function ConvertFrom-CodexStopJson {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $Raw, [Parameter(Mandatory)][string] $Name)
+
+    if ([string]::IsNullOrWhiteSpace($Raw)) {
+        throw "MODEL_ROUTING_ATTESTATION_BLOCKED: $Name is empty."
+    }
+    try {
+        return $Raw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "MODEL_ROUTING_ATTESTATION_BLOCKED: $Name is malformed JSON: $_"
+    }
+}
+
+function Test-CodexStopGatedAgent {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param([Parameter(Mandatory)][string] $AgentType)
+
+    if ($AgentType -match '-c(?:1|2|3|4|3-elevated)$') {
+        return $true
+    }
+    return @(
+        'epic-planner', 'epic-orchestrator', 'orchestrator', 'atomic-planner',
+        'atomic-executor', 'feature-review', 'feature-reviewer', 'task-researcher',
+        'prd-feature', 'pr-author', 'python-typed-engineer', 'powershell-typed-engineer',
+        'csharp-typed-engineer', 'typescript-engineer'
+    ) -contains $AgentType
+}
+
+function Get-CodexStopContinuation {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)][string] $Reason,
+        [Parameter(Mandatory)][bool] $AlreadyContinued
+    )
+
+    if ($AlreadyContinued) {
+        return [ordered]@{
+            continue      = $false
+            stopReason    = $Reason
+            systemMessage = $Reason
+        }
+    }
+    return [ordered]@{
+        decision = 'block'
+        reason   = $Reason
+    }
+}
+
+function Invoke-CodexSubagentStopDecision {
+    [CmdletBinding()]
+    param(
+        [Parameter(Mandatory)][string] $PayloadRaw,
+        [AllowNull()][AllowEmptyString()][string] $AttestationRaw
+    )
+
+    $payload = ConvertFrom-CodexStopJson -Raw $PayloadRaw -Name 'SubagentStop input'
+    $agentType = [string]$payload.agent_type
+    if (-not $agentType -or -not (Test-CodexStopGatedAgent -AgentType $agentType)) {
+        return $null
+    }
+    $alreadyContinued = $payload.stop_hook_active -is [bool] -and [bool]$payload.stop_hook_active
+    if ([string]::IsNullOrWhiteSpace($AttestationRaw)) {
+        $marker = if (@('epic-planner', 'epic-orchestrator') -contains $agentType) {
+            'EPIC_INVOCATION_ORIGIN_BLOCKED'
+        } else {
+            'MODEL_ROUTING_ATTESTATION_BLOCKED'
+        }
+        $reason = '{0}: no SubagentStart attestation exists for ''{1}''.' -f $marker, $agentType
+        return Get-CodexStopContinuation -Reason $reason -AlreadyContinued $alreadyContinued
+    }
+
+    $attestation = ConvertFrom-CodexStopJson -Raw $AttestationRaw -Name 'routing attestation'
+    if ([string]$attestation.agent_id -ne [string]$payload.agent_id -or
+        [string]$attestation.agent_type -ne $agentType) {
+        return Get-CodexStopContinuation -Reason "MODEL_ROUTING_ATTESTATION_BLOCKED: attestation identity does not match '$agentType'." -AlreadyContinued $alreadyContinued
+    }
+    if (@('epic-planner', 'epic-orchestrator') -contains $agentType) {
+        if ($attestation.provenance_valid -isnot [bool] -or -not [bool]$attestation.provenance_valid) {
+            return Get-CodexStopContinuation -Reason "EPIC_INVOCATION_ORIGIN_BLOCKED: '$agentType' lacks valid root provenance." -AlreadyContinued $alreadyContinued
+        }
+    }
+    if ($attestation.routing_valid -isnot [bool] -or -not [bool]$attestation.routing_valid) {
+        return Get-CodexStopContinuation -Reason "MODEL_ROUTING_ATTESTATION_BLOCKED: '$agentType' did not run under its recorded deployment model." -AlreadyContinued $alreadyContinued
+    }
+    if (-not [string]::IsNullOrWhiteSpace([string]$payload.model) -and
+        [string]$attestation.actual_model -ne [string]$payload.model) {
+        return Get-CodexStopContinuation -Reason "MODEL_ROUTING_ATTESTATION_BLOCKED: stop model differs from the start attestation for '$agentType'." -AlreadyContinued $alreadyContinued
+    }
+    return $null
+}
+
+function Find-CodexStopAttestationRaw {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param([Parameter(Mandatory)][string] $StateRoot, [Parameter(Mandatory)][string] $AgentId)
+
+    if (-not (Test-Path -LiteralPath $StateRoot -PathType Container)) {
+        return ''
+    }
+    foreach ($path in Get-ChildItem -LiteralPath $StateRoot -Filter 'codex-routing-attestation.*.json' -File) {
+        try {
+            $raw = Get-Content -Raw -LiteralPath $path.FullName
+            $value = $raw | ConvertFrom-Json -ErrorAction Stop
+            if ([string]$value.agent_id -eq $AgentId) {
+                return $raw
+            }
+        } catch {
+            continue
+        }
+    }
+    return ''
+}
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+try {
+    $payloadRaw = [Console]::In.ReadToEnd()
+    $payload = ConvertFrom-CodexStopJson -Raw $payloadRaw -Name 'SubagentStop input'
+    $repositoryRoot = Split-Path (Split-Path $PSScriptRoot -Parent) -Parent
+    $sessionId = [string]$payload.session_id
+    if ([string]::IsNullOrWhiteSpace($sessionId)) {
+        throw 'MODEL_ROUTING_ATTESTATION_BLOCKED: SubagentStop session_id is empty.'
+    }
+    $stateRoot = Get-CodexAuthorityStateRoot `
+        -RepositoryRoot $repositoryRoot `
+        -SessionId $sessionId
+    $attestationRaw = Find-CodexStopAttestationRaw -StateRoot $stateRoot -AgentId ([string]$payload.agent_id)
+    $decision = Invoke-CodexSubagentStopDecision -PayloadRaw $payloadRaw -AttestationRaw $attestationRaw
+    if ($null -ne $decision) {
+        $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+    }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
+}

package/resources/codex-and-agents-customizations/.codex/hooks/validate-feature-review-coverage.ps1

@@ -1,6 +1,3 @@
-# Converted hook
-# Review the generated hook behavior before enabling it.
-
 <#
 .SYNOPSIS
     SubagentStop hook that validates feature-review coverage verdicts against the branch diff.
@@ -33,8 +30,10 @@
         PowerShell  artifacts/pester/powershell-coverage.xml    (JaCoCo XML)
         CSharp      artifacts/csharp/coverage.xml               (JaCoCo XML)
 
-    On a validation failure the script writes a block decision to stdout and exits 1.
-    Read-only: inspects artifacts on disk and never modifies state.
+    Reads one Codex SubagentStop payload from stdin. On validation failure, the hook
+    requests one continuation with decision=block and exit 0. If stop_hook_active is
+    already true, it emits continue=false to avoid a continuation loop. Malformed input
+    fails closed with exit 2 and the reason on stderr.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -45,15 +44,7 @@ param()
 $ErrorActionPreference = 'Stop'
 
 function Get-RepoRoot {
-    $start = (Get-Location).Path
-    $current = $start
-    while ($true) {
-        if (Test-Path (Join-Path $current '.claude')) { return $current }
-        $parent = Split-Path $current -Parent
-        if (-not $parent -or $parent -eq $current) { break }
-        $current = $parent
-    }
-    return $start
+    return Split-Path (Split-Path $PSScriptRoot -Parent) -Parent
 }
 
 function Get-LatestPolicyAudit {
@@ -214,17 +205,51 @@ function Test-LanguageCoverageRow {
     return @{ Ok = $true; Reason = $null }
 }
 
-function Write-BlockDecision {
-    param([string]$Reason)
+function Get-FeatureReviewCoverageContinuation {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)][string] $Reason,
+        [Parameter(Mandatory)][bool] $StopHookActive
+    )
 
-    $payload = [ordered]@{
+    if ($StopHookActive) {
+        return [ordered]@{
+            continue      = $false
+            stopReason    = $Reason
+            systemMessage = $Reason
+        }
+    }
+    return [ordered]@{
         decision = 'block'
         reason   = $Reason
-    } | ConvertTo-Json -Compress
-    Write-Output $payload
+    }
+}
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
 }
 
 try {
+    $payloadRaw = [Console]::In.ReadToEnd()
+    if ([string]::IsNullOrWhiteSpace($payloadRaw)) {
+        throw 'validate-feature-review-coverage hook input is empty.'
+    }
+    try {
+        $payload = $payloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "validate-feature-review-coverage hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'stop_hook_active' -or
+        $payload.stop_hook_active -isnot [bool]) {
+        throw 'validate-feature-review-coverage hook input requires boolean stop_hook_active.'
+    }
+    if ([string]$payload.hook_event_name -ne 'SubagentStop' -or
+        @('feature-review', 'feature-reviewer') -notcontains [string]$payload.agent_type) {
+        throw 'validate-feature-review-coverage requires a feature-review SubagentStop payload.'
+    }
+    $stopHookActive = [bool]$payload.stop_hook_active
+
     $repoRoot = Get-RepoRoot
     $audit = Get-LatestPolicyAudit -RepoRoot $repoRoot
     if (-not $audit) {
@@ -253,13 +278,23 @@ try {
         $header = "Feature-review coverage validation failed against branch diff."
         $body   = "  - " + ($failures -join "`n  - ")
         $footer = "Audit file: $($audit.FullName)`nFix the policy-audit to carry an explicit PASS or FAIL verdict per language with changed files, and reflect repo-wide coverage below 80% as FAIL."
-        Write-BlockDecision -Reason ("{0}`n{1}`n{2}" -f $header, $body, $footer)
-        exit 1
+        $reason = "{0}`n{1}`n{2}" -f $header, $body, $footer
+        Get-FeatureReviewCoverageContinuation -Reason $reason -StopHookActive $stopHookActive |
+            ConvertTo-Json -Compress -Depth 5 |
+                Write-Output
+        exit 0
     }
 
     exit 0
 }
 catch {
-    Write-BlockDecision -Reason ("Feature-review coverage validator error: {0}" -f $_.Exception.Message)
-    exit 1
+    $reason = "Feature-review coverage validator error: $($_.Exception.Message)"
+    if ($null -ne $stopHookActive -and $stopHookActive) {
+        Get-FeatureReviewCoverageContinuation -Reason $reason -StopHookActive $true |
+            ConvertTo-Json -Compress -Depth 5 |
+                Write-Output
+        exit 0
+    }
+    [Console]::Error.WriteLine($reason)
+    exit 2
 }

package/resources/codex-and-agents-customizations/AGENTS.md

@@ -315,3 +315,30 @@ This repository uses a four-layer Claude Code runtime architecture that maps the
 The `.claude/` directory is the standalone runtime surface for Claude Code. Skills, agents, and rules under `.claude/` are self-contained and do not require reading from `.github/` at runtime. The `.github/` directory contains the parallel Copilot-native customization surface.
 
 The orchestration checkpoint path for this runtime is `artifacts/orchestration/orchestrator-state.json`. The main session reads `artifacts/orchestration/orchestrator-state.json` before worker delegation and updates the same file across phase transitions.
+
+## Codex Epic Planning and Model Routing
+
+The Codex main session has no default orchestrator agent. Use the native skills
+as explicit entry points:
+
+- `epic-plan` delegates master scoping and complete preparation through preflight
+  to the `epic-planner` agent.
+- `epic-run` executes a prepared epic from the committed
+  `docs/features/epics/<slug>/epic-kickoff.md` artifact.
+- `epic-orchestrate` executes a valid manually authored epic manifest.
+
+The ordinary `orchestrator` must not invoke either epic persona. Both epic
+personas delegate to child orchestrators, so epic entry requires main-session
+provenance and is enforced by Codex hooks and completion validators.
+
+Production-file count selects the engineer/orchestrator topology. C1-C4
+complexity, execution context, and the monotonic orchestration ceiling select an
+exact generated Codex agent profile through `codex-model-routing`. The canonical
+policy is `config/orchestration-routing.json`; deterministic topology receipts,
+exact model slugs, and model-routing receipts must be persisted before
+delegation. Silent model fallback is prohibited.
+
+Planning and execution use separate durable checkpoints:
+
+- `artifacts/orchestration/epic-planner-state.json`
+- `artifacts/orchestration/epic-orchestrator-state.json`

package/resources/codex-and-agents-customizations/pack-manifests/core.json

@@ -8,6 +8,11 @@
     ".agents/skills/atomic-executor/SKILL.md",
     ".agents/skills/atomic-plan-contract/SKILL.md",
     ".agents/skills/atomic-planner/SKILL.md",
+    ".agents/skills/codex-model-routing/SKILL.md",
+    ".agents/skills/codex-model-routing/agents/openai.yaml",
+    ".agents/skills/epic-orchestrate/SKILL.md",
+    ".agents/skills/epic-plan/SKILL.md",
+    ".agents/skills/epic-run/SKILL.md",
     ".agents/skills/evidence-and-timestamp-conventions/SKILL.md",
     ".agents/skills/orchestrate/SKILL.md",
     ".agents/skills/orchestrator-workflow/SKILL.md",
@@ -17,8 +22,68 @@
     ".codex/config.toml",
     ".codex/agents/atomic-executor.toml",
     ".codex/agents/atomic-planner.toml",
+    ".codex/agents/epic-orchestrator.toml",
+    ".codex/agents/epic-planner.toml",
     ".codex/agents/orchestrator.toml",
+    ".codex/hooks/authorize-root-epic-invocation.ps1",
+    ".codex/hooks/codex-agent-profile-attestation.ps1",
+    ".codex/hooks/codex-authority-store.ps1",
+    ".codex/hooks/codex-epic-child-launch-attestation.ps1",
+    ".codex/hooks/enforce-codex-model-routing.ps1",
+    ".codex/hooks/enforce-epic-child-worktree-binding.ps1",
+    ".codex/hooks/enforce-epic-merge-gate.ps1",
+    ".codex/hooks/enforce-epic-planning-only.ps1",
+    ".codex/hooks/enforce-epic-root-invocation.ps1",
+    ".codex/hooks/enforce-epic-wave-barrier.ps1",
+    ".codex/hooks/enforce-epic-worktree-removal-gate.ps1",
+    ".codex/hooks/record-subagent-routing-attestation.ps1",
+    ".codex/hooks/validate-codex-subagent-routing.ps1",
+    ".codex/scripts/epic-child-launch-contract.ps1",
+    ".codex/scripts/epic-child-launch-runtime.ps1",
+    ".codex/scripts/epic-child-persistence-runtime.ps1",
+    ".codex/scripts/epic-child-sandbox-preflight.ps1",
+    ".codex/scripts/launch-epic-child-wave.ps1",
+    ".codex/scripts/resume-epic-child.ps1",
     ".codex/prompts/generate-pr.md",
-    ".codex/prompts/orchestrate-work.md"
+    ".codex/prompts/orchestrate-work.md",
+    ".codex/agents/feature-reviewer.toml",
+    ".codex/agents/task-researcher.toml",
+    ".codex/agents/prd-feature.toml",
+    ".codex/agents/pr-author.toml",
+    ".codex/agents/orchestrator-c1.toml",
+    ".codex/agents/orchestrator-c2.toml",
+    ".codex/agents/orchestrator-c3.toml",
+    ".codex/agents/orchestrator-c3-elevated.toml",
+    ".codex/agents/orchestrator-c4.toml",
+    ".codex/agents/atomic-planner-c1.toml",
+    ".codex/agents/atomic-planner-c2.toml",
+    ".codex/agents/atomic-planner-c3.toml",
+    ".codex/agents/atomic-planner-c3-elevated.toml",
+    ".codex/agents/atomic-planner-c4.toml",
+    ".codex/agents/atomic-executor-c1.toml",
+    ".codex/agents/atomic-executor-c2.toml",
+    ".codex/agents/atomic-executor-c3.toml",
+    ".codex/agents/atomic-executor-c3-elevated.toml",
+    ".codex/agents/atomic-executor-c4.toml",
+    ".codex/agents/feature-reviewer-c1.toml",
+    ".codex/agents/feature-reviewer-c2.toml",
+    ".codex/agents/feature-reviewer-c3.toml",
+    ".codex/agents/feature-reviewer-c3-elevated.toml",
+    ".codex/agents/feature-reviewer-c4.toml",
+    ".codex/agents/task-researcher-c1.toml",
+    ".codex/agents/task-researcher-c2.toml",
+    ".codex/agents/task-researcher-c3.toml",
+    ".codex/agents/task-researcher-c3-elevated.toml",
+    ".codex/agents/task-researcher-c4.toml",
+    ".codex/agents/prd-feature-c1.toml",
+    ".codex/agents/prd-feature-c2.toml",
+    ".codex/agents/prd-feature-c3.toml",
+    ".codex/agents/prd-feature-c3-elevated.toml",
+    ".codex/agents/prd-feature-c4.toml",
+    ".codex/agents/pr-author-c1.toml",
+    ".codex/agents/pr-author-c2.toml",
+    ".codex/agents/pr-author-c3.toml",
+    ".codex/agents/pr-author-c3-elevated.toml",
+    ".codex/agents/pr-author-c4.toml"
   ]
 }

package/resources/codex-and-agents-customizations/pack-manifests/csharp-legacy.json

@@ -6,6 +6,11 @@
     ".agents/skills/csharp/SKILL.md",
     ".agents/skills/csharp-qa-gate/SKILL.md",
     ".agents/skills/invoke-csharp-engineer/SKILL.md",
-    ".codex/agents/csharp-typed-engineer.toml"
+    ".codex/agents/csharp-typed-engineer.toml",
+    ".codex/agents/csharp-typed-engineer-c1.toml",
+    ".codex/agents/csharp-typed-engineer-c2.toml",
+    ".codex/agents/csharp-typed-engineer-c3.toml",
+    ".codex/agents/csharp-typed-engineer-c3-elevated.toml",
+    ".codex/agents/csharp-typed-engineer-c4.toml"
   ]
 }

package/resources/codex-and-agents-customizations/pack-manifests/csharp-modern.json

@@ -5,6 +5,11 @@
     ".agents/skills/csharp/SKILL.md",
     ".agents/skills/csharp-qa-gate/SKILL.md",
     ".agents/skills/invoke-csharp-engineer/SKILL.md",
-    ".codex/agents/csharp-typed-engineer.toml"
+    ".codex/agents/csharp-typed-engineer.toml",
+    ".codex/agents/csharp-typed-engineer-c1.toml",
+    ".codex/agents/csharp-typed-engineer-c2.toml",
+    ".codex/agents/csharp-typed-engineer-c3.toml",
+    ".codex/agents/csharp-typed-engineer-c3-elevated.toml",
+    ".codex/agents/csharp-typed-engineer-c4.toml"
   ]
 }

package/resources/codex-and-agents-customizations/pack-manifests/powershell.json

@@ -10,6 +10,11 @@
     ".codex/agents/powershell-typed-engineer.toml",
     ".codex/agents/powershell-orchestrator.toml",
     ".codex/agents/powershell-atomic-executor.toml",
-    ".codex/agents/powershell-atomic-planning.toml"
+    ".codex/agents/powershell-atomic-planning.toml",
+    ".codex/agents/powershell-typed-engineer-c1.toml",
+    ".codex/agents/powershell-typed-engineer-c2.toml",
+    ".codex/agents/powershell-typed-engineer-c3.toml",
+    ".codex/agents/powershell-typed-engineer-c3-elevated.toml",
+    ".codex/agents/powershell-typed-engineer-c4.toml"
   ]
 }