@hanzlaa/rcode 4.8.0 → 4.9.1

package/AGENTS.md

@@ -24,7 +24,7 @@ If a user says "just keep going" or "don't stop until done", that authorization
 
 - Follow [Conventional Commits](https://www.conventionalcommits.org/) format: `type(scope): subject`
 - Types allowed: `feat`, `fix`, `docs`, `style`, `refactor`, `test`, `chore`, `perf`, `revert`
-- Scopes allowed: `agents`, `skills`, `workflows`, `templates`, `dashboard`, `docs`, `config`, `github`, `github-sync`, `commands`, `memory`, `brand`, `cli`, `ci`, `release`, `meta`, `tasks`, `migrations`, `refs`, `state`, `hooks`, `init`, `install`, `parity`, `triggers`, `dogfood`, `namespace`, `planning`, `insights`, `help`, `roadmap`, `session`, `audits`, `execute`, `executor`, `plan`, `planner`, `readme`, `rcode`, `review`, `sync`, `sprint`, `agent-exp`, `extensibility`, `lens-audit`, `tiers`, `build`, `council`, `doctor`, `postinstall`, `progress`, `security`, `tools`, `uninstall`, `update`, `test`, `changelog`, `scopes`, `phases`, `references`, `kanban`, `orchestrator`, `orchpanel`, `status`, `bin`, `brain`, `dogfeed`, `new-project`, `package`, `rcode-tools`, `rihal-tools`, `team`, `usp`, `v4`, `observability`, `audit`, `agent-rules`, `cursor`, `i18n`, `phase`, `scaffold`, `campaign`, `ship`, `getting-started`, `do-router`, `milestone-health`, `modules`, `project-types`, `roadmapper`, `token`, plus numeric phase/sprint scopes (e.g. `docs(15)`, `feat(8.3)`)
+- Scopes allowed: `agents`, `skills`, `workflows`, `templates`, `dashboard`, `docs`, `config`, `github`, `github-sync`, `commands`, `memory`, `brand`, `cli`, `ci`, `release`, `meta`, `tasks`, `migrations`, `refs`, `state`, `hooks`, `init`, `install`, `parity`, `triggers`, `dogfood`, `namespace`, `planning`, `insights`, `help`, `roadmap`, `session`, `audits`, `execute`, `executor`, `plan`, `planner`, `readme`, `rcode`, `review`, `sync`, `sprint`, `agent-exp`, `extensibility`, `lens-audit`, `tiers`, `build`, `council`, `doctor`, `postinstall`, `progress`, `security`, `tools`, `uninstall`, `update`, `test`, `changelog`, `scopes`, `phases`, `references`, `kanban`, `orchestrator`, `orchpanel`, `status`, `bin`, `brain`, `dogfeed`, `new-project`, `package`, `rcode-tools`, `rihal-tools`, `team`, `usp`, `v4`, `observability`, `audit`, `agent-rules`, `cursor`, `i18n`, `phase`, `scaffold`, `campaign`, `ship`, `getting-started`, `do-router`, `milestone-health`, `modules`, `project-types`, `roadmapper`, `token`, `benchmarks`, `eval`, `scan`, plus numeric phase/sprint scopes (e.g. `docs(15)`, `feat(8.3)`)
 - Subject: lowercase first letter, imperative mood, no trailing period, under 72 chars
 - **NEVER add Claude/AI attribution to commit messages.** No "Generated with Claude Code", no "Co-Authored-By: Claude", no "🤖 Generated". The user does not want this.
 - **NEVER use `--no-verify`** to bypass hooks. If hooks fail, fix the underlying issue.

package/CONTRIBUTING.md

@@ -363,6 +363,9 @@ We use [Conventional Commits](https://www.conventionalcommits.org/) format. The
 - `project-types` — project-type templates and detection
 - `roadmapper` — roadmap generation agent/workflow
 - `token` — token-budget and cost-tracking logic
+- `benchmarks` — `benchmarks/` scripts and benchmark reports
+- `eval` — `test/eval/` behavioral drift baselines and eval harness
+- `scan` — `/rcode-scan` workflow and existing-codebase analysis
 - `<phase-id>` — numeric phase scope when committing inside a phase (e.g. `docs(15)`, `feat(8.3)`)
 - `<sprint-id>` — numeric sprint scope inside a phase (e.g. `feat(15.1)`)
 

package/README.md

@@ -23,7 +23,7 @@ pnpm dlx @hanzlaa/rcode install
 [![CI](https://github.com/hanzlahabib/rcode/actions/workflows/test.yml/badge.svg)](https://github.com/hanzlahabib/rcode/actions/workflows/test.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
-Status: `@hanzlaa/rcode` v4.7.0 on npm. 45 agents · 117 commands · 129 workflows · **1 runtime dependency**. Test status tracked by CI badge above. Actively dogfooded on real projects every week.
+Status: `@hanzlaa/rcode` v4.9.0 on npm. 45 agents · 117 commands · 130 workflows · **1 runtime dependency**. Test status tracked by CI badge above. Actively dogfooded on real projects every week.
 
 ---
 
@@ -154,10 +154,10 @@ The point isn't "I beat LangChain." The point is **you don't need LangChain for
 | Metric | Value | Why it's not a vanity number |
 |---|---|---|
 | **Portable methodology corpus** | **~105,000 lines** of markdown | A 10-person eng org's playbooks (agents + commands + workflows + skills + references) — as files you own and grep, not a SaaS you rent. |
-| **Automated tests** | **495** across 62 files | The methodology is *guarded*, not vibes. Live pass/fail status is on the CI badge above; `node --test` (or `node benchmarks/facts.cjs`) reproduces locally in seconds. |
+| **Automated tests** | **598** across 74 files | The methodology is *guarded*, not vibes. Live pass/fail status is on the CI badge above; `node --test` (or `node benchmarks/facts.cjs`) reproduces locally in seconds. |
 | **Tested CLI engine** | **~9,700 lines** (`rcode-tools.cjs` + `lib/`) | The deterministic brain — routing, state, planning math — is real code under test, not prompt soup. |
 | **Runtime dependencies** | **1** (`ws`, for the dashboard socket) | The dashboard is otherwise pure Node stdlib. Almost nothing to audit, nothing to CVE-scan, nothing to break on `npm install`. |
-| **Specialist agents / commands / workflows / skills** | **45 / 117 / 129 / 96** | An entire engineering org, phrase-activated, that travels with you across Claude Code, Cursor, Codex, VS Code, Antigravity, Windsurf. |
+| **Specialist agents / commands / workflows / skills** | **45 / 117 / 130 / 96** | An entire engineering org, phrase-activated, that travels with you across Claude Code, Cursor, Codex, VS Code, Antigravity, Windsurf. |
 | **Core-op latency** | **~60 ms**, **0 LLM tokens** (best-of-7) | Intent routing, state reads, and milestone-health are deterministic *local* compute — a few ms over Node's own cold-start floor. The orchestration layer doesn't burn API tokens on bookkeeping the way pure-LLM agent frameworks do. |
 
 > Counts above are produced by `node benchmarks/facts.cjs` and may drift slightly between releases — run it for the exact current figures.
@@ -181,6 +181,8 @@ pnpm dlx @hanzlaa/rcode install
 
 `/rcode-init` detects your project state (fresh / existing / returning) and routes to the right first action. For a greenfield project it auto-routes to `/rcode-new-project`.
 
+> **Want a status primer at the start of every session?** Run `/rcode-enable-hooks` to turn on a one-line project status readout (phase, plan progress, blockers) each time Claude Code starts in this project, plus 9 other opt-in guardrails (read-before-edit checks, dangerous-command blocking, auto-formatting). All off by default — a fresh install never surprises you.
+
 ### The full loop
 
 Four commands cover most of a real week of work — decide, plan, build, check in:
@@ -227,9 +229,9 @@ The non-goal: building yet another agent framework. There are enough. rcode stay
 
 ## Honest state of things
 
-- **v4.3.2** is the current release — Memory Bank now ships populated by default, brain-pull is live, and 50+ bug fixes landed from the most recent 3-project dogfeed run.
+- **v4.9.0** is the current release — Memory Bank now ships populated by default, brain-pull is live, and 50+ bug fixes landed from the most recent 3-project dogfeed run.
 - **Open issues**: ~50 — half are feature requests, the rest are backlog bugs ranked by severity.
-- **Test suite**: 497 automated tests across 61 files, 100% pass on every release (run `node --test`). Coverage is structural (compliance + artifact schema + workflow behavioral), not line-coverage.
+- **Test suite**: 598 automated tests across 74 files (run `node --test`). Live pass/fail status is on the CI badge above. Coverage is structural (compliance + artifact schema + workflow behavioral), not line-coverage.
 - **Real users**: I run it on 4 projects daily. A handful of others run it on theirs. If you find a bug, file it — most P1s ship within 48 hours.
 - **Funding**: none. This is solo work. If your company wants commercial support, [email me](mailto:hanzla.dev@gmail.com).
 

package/cli/doctor.js

@@ -229,8 +229,10 @@ function runPreflight(cwd, packageRoot) {
         status: 'warn',
         message:
           `${nsDup.totalCount} duplicate registration(s) — legacy skills: ${nsDup.legacySkillCount}, ` +
-          `legacy commands: ${nsDup.legacyCommandCount}, unprefixed: ${nsDup.unprefixedCount}, ` +
-          `cross-scope: ${nsDup.crossScopeCount} (run \`rcode migrate-namespace --yes\` or \`rcode update\`)`,
+          `legacy commands: ${nsDup.legacyCommandCount}, legacy agents: ${nsDup.legacyAgentCount}, ` +
+          `unprefixed: ${nsDup.unprefixedCount}, cross-scope: ${nsDup.crossScopeCount}, ` +
+          `legacy Codex commands: ${nsDup.legacyCodexCommandCount} ` +
+          `(run \`rcode migrate-namespace --yes\` or \`rcode update\`)`,
       });
     } else {
       checks.push({

package/cli/github-sync.js

@@ -174,6 +174,15 @@ function saveSyncMap(cwd, map) {
   writeJsonAtomic(mapPath, map);
 }
 
+// Namespace syncMap.epics/stories keys by phase/track. Sprint-track task ids
+// (from `<task id="">`, no format enforcement) and epic-track story ids
+// (`{epicNum}.{storyNum}`) can collapse to the same bare id across tracks —
+// without a phase prefix they'd silently clobber each other's issue mapping.
+// See #1002.
+function syncKey(phaseId, id) {
+  return `${phaseId}:${id}`;
+}
+
 // ---------- Main sync flow ----------
 
 /**
@@ -369,33 +378,33 @@ async function main(args) {
     ] : [],
     milestones: phases.filter((p) => !p.noMilestone && !syncMap.phases[p.id]),
     epics: phases.flatMap((p) =>
-      p.epics.filter((e) => !syncMap.epics[e.id]).map((e) => ({ ...e, phase: p.id })),
+      p.epics.filter((e) => !syncMap.epics[syncKey(p.id, e.id)]).map((e) => ({ ...e, phase: p.id })),
     ),
     stories: phases.flatMap((p) =>
-      p.stories.filter((s) => !syncMap.stories[s.id]).map((s) => ({ ...s, phase: p.id })),
+      p.stories.filter((s) => !syncMap.stories[syncKey(p.id, s.id)]).map((s) => ({ ...s, phase: p.id })),
     ),
 
     // Items that already exist on GitHub — candidates for update.
     // Only populated when updateEnabled is true.
     updateEpics: opts.updateEnabled
       ? phases.flatMap((p) =>
-          p.epics.filter((e) => syncMap.epics[e.id]).map((e) => ({
+          p.epics.filter((e) => syncMap.epics[syncKey(p.id, e.id)]).map((e) => ({
             ...e,
             phase: p.id,
-            issueNumber: syncMap.epics[e.id].issue_number,
-            lastSyncedAt: syncMap.epics[e.id].synced_at,
-            lastSyncedContentHash: syncMap.epics[e.id].content_hash,
+            issueNumber: syncMap.epics[syncKey(p.id, e.id)].issue_number,
+            lastSyncedAt: syncMap.epics[syncKey(p.id, e.id)].synced_at,
+            lastSyncedContentHash: syncMap.epics[syncKey(p.id, e.id)].content_hash,
           })),
         )
       : [],
     updateStories: opts.updateEnabled
       ? phases.flatMap((p) =>
-          p.stories.filter((s) => syncMap.stories[s.id]).map((s) => ({
+          p.stories.filter((s) => syncMap.stories[syncKey(p.id, s.id)]).map((s) => ({
             ...s,
             phase: p.id,
-            issueNumber: syncMap.stories[s.id].issue_number,
-            lastSyncedAt: syncMap.stories[s.id].synced_at,
-            lastSyncedContentHash: syncMap.stories[s.id].content_hash,
+            issueNumber: syncMap.stories[syncKey(p.id, s.id)].issue_number,
+            lastSyncedAt: syncMap.stories[syncKey(p.id, s.id)].synced_at,
+            lastSyncedContentHash: syncMap.stories[syncKey(p.id, s.id)].content_hash,
           })),
         )
       : [],
@@ -544,7 +553,7 @@ async function main(args) {
       if (result.error) {
         results.errors.push(`epic ${epic.id}: ${result.error}`);
       } else if (!result.dryRun) {
-        syncMap.epics[epic.id] = {
+        syncMap.epics[syncKey(epic.phase, epic.id)] = {
           issue_number: result.number,
           url: result.url,
           phase: epic.phase,
@@ -568,7 +577,7 @@ async function main(args) {
       // convention), not "any epic in this phase" — that bug led to all
       // stories pointing at the same epic previously.
       const parentEpicEntry = story.parentEpic
-        ? syncMap.epics[story.parentEpic]
+        ? syncMap.epics[syncKey(story.phase, story.parentEpic)]
         : null;
       const parentRefLine = parentEpicEntry
         ? `- **Parent Epic:** #${parentEpicEntry.issue_number} (Part of this epic)`
@@ -624,7 +633,7 @@ async function main(args) {
       if (result.error) {
         results.errors.push(`story ${story.id}: ${result.error}`);
       } else if (!result.dryRun) {
-        syncMap.stories[story.id] = {
+        syncMap.stories[syncKey(story.phase, story.id)] = {
           issue_number: result.number,
           url: result.url,
           phase: story.phase,
@@ -734,8 +743,8 @@ async function main(args) {
       if (result.error) {
         results.errors.push(`update epic #${epic.issueNumber}: ${result.error}`);
       } else if (!result.dryRun) {
-        syncMap.epics[epic.id].content_hash = newHash;
-        syncMap.epics[epic.id].updated_at = new Date().toISOString();
+        syncMap.epics[syncKey(epic.phase, epic.id)].content_hash = newHash;
+        syncMap.epics[syncKey(epic.phase, epic.id)].updated_at = new Date().toISOString();
         console.log(`   ✓ updated: #${epic.issueNumber} (${epic.id})`);
       }
     }
@@ -779,8 +788,8 @@ async function main(args) {
       if (result.error) {
         results.errors.push(`update story #${story.issueNumber}: ${result.error}`);
       } else if (!result.dryRun) {
-        syncMap.stories[story.id].content_hash = newHash;
-        syncMap.stories[story.id].updated_at = new Date().toISOString();
+        syncMap.stories[syncKey(story.phase, story.id)].content_hash = newHash;
+        syncMap.stories[syncKey(story.phase, story.id)].updated_at = new Date().toISOString();
         console.log(`   ✓ updated: #${story.issueNumber} (${story.id})`);
       }
     }

package/cli/install.js

@@ -2151,11 +2151,15 @@ async function installInner(opts) {
 
   // Antigravity install is experimental — best-effort path, user may need to adjust
   if (opts.ides.includes('antigravity')) {
-    console.log('  ' + warn('Antigravity install is experimental. Files land at .antigravity/rcode/{agents,commands}/.'));
-    console.log('  ' + dim('If Antigravity expects a different path, adjust .rcode/config.yaml and re-run.'));
-    // #908: same as Codex — the UserPrompt hook is only wired on a global install.
+    // #908/#1028: the UserPrompt hook that makes .antigravity/ files functional
+    // is only wired on a global install. A project-local install would write
+    // guaranteed-inert files, so skip them entirely instead of installing dead
+    // weight — see planIdes filtering below.
     if (!opts.global) {
-      console.log('  ' + warn('Antigravity /rcode-* slash commands need a GLOBAL install — re-run with `--global`. This project-local install does NOT wire the hook.'));
+      console.log('  ' + warn('Antigravity /rcode-* slash commands need a GLOBAL install — re-run with `--global`. Skipping .antigravity/ files on this project-local install (they would be inert).'));
+    } else {
+      console.log('  ' + warn('Antigravity install is experimental. Files land at .antigravity/rcode/{agents,commands}/.'));
+      console.log('  ' + dim('If Antigravity expects a different path, adjust .rcode/config.yaml and re-run.'));
     }
   }
 
@@ -2179,9 +2183,23 @@ async function installInner(opts) {
     }
   }
 
-  const fullPlan = buildInstallPlan(opts.ides, opts.target);
+  // #1028: .antigravity/ is only wired up on a GLOBAL install (the hook that
+  // makes /rcode-* slash commands work lives in ~/.gemini/antigravity/, written
+  // by installAntigravitySlashRouterHook() only when opts.global is set — see
+  // the warning above). A project-local install writes guaranteed-inert files;
+  // skip them entirely unless --global was actually passed.
+  const planIdes = (!opts.global && Array.isArray(opts.ides))
+    ? opts.ides.filter(i => i !== 'antigravity')
+    : opts.ides;
+
+  const fullPlan = buildInstallPlan(planIdes, opts.target);
   const plan = filterPlanByModules(fullPlan, opts.modules);
   if (plan.length === 0) {
+    if (Array.isArray(opts.ides) && opts.ides.includes('antigravity') && !opts.global) {
+      console.error('✖ Nothing to install — Antigravity was the only target IDE, and its files need a GLOBAL install.');
+      console.error('  Re-run with --global, or pick another --ide.');
+      return 1;
+    }
     console.error('✖ Nothing to install — install plan is empty.');
     if (opts.modules.length > 0) console.error(`  Modules requested: ${opts.modules.join(', ')}`);
     return 1;
@@ -2502,21 +2520,32 @@ async function installInner(opts) {
         fs.existsSync(path.join(projectClaudeCommands, 'rcode'))
       );
       if (globalHasrcode && !projectHasrcode) {
-        // Global commands exist, project has none yet — filter them out of the plan
-        // so we don't create duplicates. Project gets .rcode/ state only.
+        // Global commands exist, project has none yet — filter commands out of the
+        // plan so we don't create duplicates. Project gets .rcode/ state only.
+        //
+        // Issue #1022: agents are NOT deferrable to global the way commands/skills
+        // are — they are first-class, project-local files by design (see the
+        // createInstallBackup comment above: "closes #381 — without this,
+        // customized .claude/agents/rcode-*.md ... were silently lost"). Lumping
+        // `.claude/agents/` into this commands-dedup filter meant a project with
+        // global rcode commands installed but no project-level commands yet would
+        // never get its .claude/agents/*.md files written at all, leaving only
+        // whatever pre-existing subdirectories (e.g. rules/) survived untouched.
         const before = plan.length;
         const filtered = plan.filter(e => {
           const rel = e.rel.split(path.sep).join('/');
-          return !rel.startsWith('.claude/commands/') && !rel.startsWith('.claude/agents/');
+          return !rel.startsWith('.claude/commands/');
         });
         if (filtered.length < before) {
           plan.length = 0;
           filtered.forEach(e => plan.push(e));
-          console.log('  ' + dim('Global rcode commands detected in ~/.claude/ — skipping project-level agent/command install to avoid duplicates.'));
+          console.log('  ' + dim('Global rcode commands detected in ~/.claude/ — skipping project-level command install to avoid duplicates.'));
           console.log('  ' + dim('Use --force-overwrite to install locally anyway.'));
         }
       } else if (globalHasrcode && projectHasrcode) {
         // Both exist — project commands are duplicates. Remove project-level ones.
+        // Agents are left untouched (#1022) — they are project-local by design,
+        // never deduped against the global commands install.
         try {
           // Remove root-level rcode-*.md files
           const projectCommandFiles = fs.readdirSync(projectClaudeCommands)
@@ -2530,19 +2559,11 @@ async function installInner(opts) {
           if (fs.existsSync(rcodeSubdir)) {
             safeRmSync(rcodeSubdir, opts.target);
           }
-          const projectAgentsDir = path.join(opts.target, '.claude', 'agents');
-          if (fs.existsSync(projectAgentsDir)) {
-            const agentFiles = fs.readdirSync(projectAgentsDir)
-              .filter(f => f.startsWith('rcode-') && f.endsWith('.md'));
-            for (const f of agentFiles) {
-              fs.unlinkSync(path.join(projectAgentsDir, f));
-            }
-          }
           console.log('  ' + dim('Removed duplicate project-level rcode commands (global ones in ~/.claude/ take precedence).'));
         } catch { /* non-fatal */ }
         const filtered = plan.filter(e => {
           const rel = e.rel.split(path.sep).join('/');
-          return !rel.startsWith('.claude/commands/') && !rel.startsWith('.claude/agents/');
+          return !rel.startsWith('.claude/commands/');
         });
         plan.length = 0;
         filtered.forEach(e => plan.push(e));
@@ -2751,23 +2772,30 @@ async function installInner(opts) {
   const hookReport = ensureRcodePreCommitHook(opts.target, { gitHooks: opts.gitHooks });
 
   // Pull rcode brain content (v2.0 — issue #158).
-  // Runs rcode-tools brain pull as a child process. Placeholder URLs
-  // are skipped gracefully so this does not fail a fresh install.
+  // Runs rcode-tools brain pull as a detached background process. Placeholder
+  // URLs are skipped gracefully so this does not fail a fresh install.
+  //
+  // Issue #1030: a cold pull (cache miss) clones + sparse-checks-out a real
+  // upstream repo and live-measured ~58s for just 2 small files — dangerously
+  // close to the previous 60s execFileSync timeout (#706) and ~6x over the
+  // 10s kill criterion issue #162 itself specified. Since brain pull is
+  // already best-effort and never fails install (see catch below, historically
+  // a timeout was just treated as a pull failure), there is no reason to block
+  // install on it at all. Spawn it detached and let install finish immediately;
+  // the child keeps running and warms the cache/writes content on its own.
   let brainReport = null;
+  let brainBackgrounded = false;
   try {
-    const { execFileSync } = require('child_process');
+    const { spawn } = require('child_process');
     const toolsPath = path.join(opts.target, '.rcode', 'bin', 'rcode-tools.cjs');
     if (fs.existsSync(toolsPath)) {
-      // Issue #706: 60s timeout — without it, a slow upstream URL hangs the
-      // entire install indefinitely. Brain pull is best-effort, so a timeout
-      // failure is treated identically to any other pull failure (caught below).
-      const out = execFileSync('node', [toolsPath, 'brain', 'pull'], {
+      const child = spawn('node', [toolsPath, 'brain', 'pull'], {
         cwd: opts.target,
-        encoding: 'utf8',
-        stdio: ['ignore', 'pipe', 'pipe'],
-        timeout: 60_000,
+        stdio: 'ignore',
+        detached: true,
       });
-      try { brainReport = JSON.parse(out); } catch {}
+      child.unref();
+      brainBackgrounded = true;
     }
   } catch (e) {
     // brain pull is best-effort on install — do not fail the whole install
@@ -2780,11 +2808,8 @@ async function installInner(opts) {
   if (opts.force && existedBefore) {
     console.log('  ' + warn('config.yaml and state.json preserved (pass --reset to wipe)'));
   }
-  if (brainReport && brainReport.ok) {
-    const pulledCount = (brainReport.pulled || []).length;
-    const skippedCount = (brainReport.skipped || []).length;
-    console.log('  ' + ok(`Brain: ${pulledCount} source${pulledCount === 1 ? '' : 's'} pulled` +
-      (skippedCount ? `, ${skippedCount} skipped (placeholder URLs)` : '')));
+  if (brainBackgrounded) {
+    console.log('  ' + dim('Brain: pulling in background (may take up to a minute on a cold cache; run `rcode brain status` to check)'));
   } else if (brainReport && brainReport.error) {
     console.log('  ' + dim(`Brain: skipped (${brainReport.error})`));
   }

package/cli/lib/namespace-migrate.cjs

@@ -132,6 +132,40 @@ function findCrossScopeDupes(projectClaudeDir, globalClaudeDir) {
   return dupes;
 }
 
+/**
+ * Legacy rihal-* flat command files under ~/.rcode/slash-commands/, whose
+ * rcode-* twin already exists in the SAME dir. Read-only.
+ *
+ * This is the ONLY per-file location that's actually Codex-specific (#1024):
+ * `cli/install.js`'s `--global` install writes every command body here (a
+ * single flat dir shared by the Codex + Antigravity prompt-submit hook
+ * router — see `installSlashRouterCommands()`), and this is where a stale
+ * rihal-* copy from before the rename would still live. The comment in
+ * install.js claiming Codex reads `~/.codex/prompts/*.md` is inaccurate —
+ * that path is never written by this codebase; verified by reading
+ * install.js's actual writer functions rather than trusting the comment.
+ * Project-level Codex installs (agentsDir/commandsDir under `.claude/`) are
+ * already covered by findLegacyRihalArtifacts() since Codex shares that
+ * layout with claude/grok.
+ */
+function findLegacyCodexSlashCommands(homeDir) {
+  const dupes = [];
+  const dir = path.join(homeDir, '.rcode', 'slash-commands');
+  for (const entry of listDirSafe(dir)) {
+    if (!entry.isFile() || !entry.name.startsWith('rihal-') || !entry.name.endsWith('.md')) continue;
+    const twinName = 'rcode-' + entry.name.slice('rihal-'.length);
+    if (fs.existsSync(path.join(dir, twinName))) {
+      dupes.push({
+        name: entry.name,
+        twin: twinName,
+        srcPath: path.join(dir, entry.name),
+        kind: 'command',
+      });
+    }
+  }
+  return dupes;
+}
+
 /**
  * Full duplication report across project + global scopes. Pure read — safe
  * to call from `rcode doctor` on every run.
@@ -145,19 +179,30 @@ function scanNamespaceDuplication(projectDir, homeDir) {
   const projectUnprefixed = findUnprefixedTwinDupes(projectClaudeDir);
   const globalUnprefixed = findUnprefixedTwinDupes(globalClaudeDir);
   const crossScope = findCrossScopeDupes(projectClaudeDir, globalClaudeDir);
+  const codexSlashCommands = findLegacyCodexSlashCommands(homeDir);
 
   const legacySkillCount = projectLegacy.skills.length + globalLegacy.skills.length;
   const legacyCommandCount = projectLegacy.commands.length + globalLegacy.commands.length;
+  const legacyAgentCount = projectLegacy.agents.length + globalLegacy.agents.length;
   const unprefixedCount = projectUnprefixed.length + globalUnprefixed.length;
   const crossScopeCount = crossScope.length;
+  const legacyCodexCommandCount = codexSlashCommands.length;
 
   return {
     legacySkillCount,
     legacyCommandCount,
+    legacyAgentCount,
     unprefixedCount,
     crossScopeCount,
-    totalCount: legacySkillCount + legacyCommandCount + unprefixedCount + crossScopeCount,
-    detail: { projectLegacy, globalLegacy, projectUnprefixed, globalUnprefixed, crossScope },
+    legacyCodexCommandCount,
+    totalCount:
+      legacySkillCount +
+      legacyCommandCount +
+      legacyAgentCount +
+      unprefixedCount +
+      crossScopeCount +
+      legacyCodexCommandCount,
+    detail: { projectLegacy, globalLegacy, projectUnprefixed, globalUnprefixed, crossScope, codexSlashCommands },
   };
 }
 
@@ -169,7 +214,8 @@ function scanNamespaceDuplication(projectDir, homeDir) {
  */
 function backupAndRemove(srcPath, backupRoot, scope, kind) {
   if (!fs.existsSync(srcPath)) return false;
-  const destDir = path.join(backupRoot, scope, kind === 'skill' ? 'skills' : 'commands');
+  const destDirName = kind === 'skill' ? 'skills' : kind === 'agent' ? 'agents' : 'commands';
+  const destDir = path.join(backupRoot, scope, destDirName);
   fs.mkdirSync(destDir, { recursive: true });
   const dest = path.join(destDir, path.basename(srcPath));
   fs.cpSync(srcPath, dest, { recursive: true });
@@ -194,7 +240,14 @@ function migrateNamespace(projectDir, homeDir) {
 
   const summary = {
     backupDir: null,
-    removed: { legacySkills: 0, legacyCommands: 0, unprefixedDupes: 0, crossScopeDupes: 0 },
+    removed: {
+      legacySkills: 0,
+      legacyCommands: 0,
+      legacyAgents: 0,
+      unprefixedDupes: 0,
+      crossScopeDupes: 0,
+      legacyCodexCommands: 0,
+    },
   };
 
   const removeAll = (items, scope, kind) => {
@@ -211,10 +264,14 @@ function migrateNamespace(projectDir, homeDir) {
   summary.removed.legacyCommands =
     removeAll(scan.detail.projectLegacy.commands, 'project', 'command') +
     removeAll(scan.detail.globalLegacy.commands, 'global', 'command');
+  summary.removed.legacyAgents =
+    removeAll(scan.detail.projectLegacy.agents, 'project', 'agent') +
+    removeAll(scan.detail.globalLegacy.agents, 'global', 'agent');
   summary.removed.unprefixedDupes =
     removeAll(scan.detail.projectUnprefixed, 'project', 'command') +
     removeAll(scan.detail.globalUnprefixed, 'global', 'command');
   summary.removed.crossScopeDupes = removeAll(scan.detail.crossScope, 'global', 'command');
+  summary.removed.legacyCodexCommands = removeAll(scan.detail.codexSlashCommands, 'global', 'command');
 
   const totalRemoved = Object.values(summary.removed).reduce((a, b) => a + b, 0);
   if (totalRemoved > 0) summary.backupDir = backupRoot;
@@ -226,6 +283,7 @@ module.exports = {
   findLegacyRihalArtifacts,
   findUnprefixedTwinDupes,
   findCrossScopeDupes,
+  findLegacyCodexSlashCommands,
   scanNamespaceDuplication,
   migrateNamespace,
 };

package/cli/migrate-namespace.js

@@ -26,8 +26,10 @@ function printScanSummary(scan) {
   console.log(`   Found ${scan.totalCount} artifact(s) to migrate:`);
   console.log(`     legacy rihal-* skills:   ${scan.legacySkillCount}`);
   console.log(`     legacy rihal-* commands: ${scan.legacyCommandCount}`);
+  console.log(`     legacy rihal-* agents:   ${scan.legacyAgentCount}`);
   console.log(`     unprefixed dupes:        ${scan.unprefixedCount}`);
   console.log(`     cross-scope dupes:       ${scan.crossScopeCount}  (global copy shadowed by project)`);
+  console.log(`     legacy Codex commands:   ${scan.legacyCodexCommandCount}  (~/.rcode/slash-commands/)`);
   console.log();
 }
 
@@ -50,8 +52,10 @@ module.exports = function migrateNamespaceCommand(args = []) {
   console.log(`   ✓ Removed ${total} artifact(s):`);
   console.log(`     legacy skills:   ${summary.removed.legacySkills}`);
   console.log(`     legacy commands: ${summary.removed.legacyCommands}`);
+  console.log(`     legacy agents:   ${summary.removed.legacyAgents}`);
   console.log(`     unprefixed:      ${summary.removed.unprefixedDupes}`);
   console.log(`     cross-scope:     ${summary.removed.crossScopeDupes}`);
+  console.log(`     codex commands:  ${summary.removed.legacyCodexCommands}`);
   if (summary.backupDir) {
     console.log(`   💾 backup: ${path.relative(home, summary.backupDir)} (under ~/.claude/.rcode-backup/)`);
   }