@zaip-ai/cli 2.0.0 → 2.6.0

package/templates/.agents/config/agents/catalog.yaml

@@ -96,6 +96,12 @@ agents:
     skills:
       - zaip-skill-change
       - zaip-skill-spec
+      - zaip-skill-architecture-design
+      - zaip-skill-dev-environment
+      - zaip-skill-module-scaffold
+      - zaip-skill-testing-strategy
+      - zaip-skill-test-data
+      - zaip-skill-dependency-upgrade
     write_scopes:
       - packages/*
       - .agents/records/specs/*
@@ -177,6 +183,12 @@ agents:
       - test-runner
     skills:
       - zaip-skill-change
+      - zaip-skill-architecture-design
+      - zaip-skill-dev-environment
+      - zaip-skill-module-scaffold
+      - zaip-skill-testing-strategy
+      - zaip-skill-test-data
+      - zaip-skill-systematic-debugging
     write_scopes:
       - declared-write-scope
     permissions:
@@ -689,7 +701,7 @@ agents:
     escalation:
       - agent-orchestrator
   - id: agent-data-analyst
-    version: 1
+    version: 2
     purpose: Analyze bounded datasets, explain methods and uncertainty, and return reproducible evidence-backed findings.
     use_when: ["Metrics, structured data, or quantitative diagnostics are available."]
     do_not_use: ["No data is available, or to implement product or edit the dashboard."]
@@ -706,6 +718,7 @@ agents:
       - metric-diagnostics
       - evidence-production
     execution_eligibility:
+      - interaction
       - delivery
     tools:
       - shell-read
@@ -739,7 +752,6 @@ agents:
     model:
       required_capabilities:
         - reasoning
-        - code
         - structured-output
       preferred:
         - gpt-5.6-terra
@@ -864,7 +876,7 @@ agents:
     capabilities: [frontend-delivery, accessibility, component-integration, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-frontend, zaip-skill-meta-devtools-api-integration]
+    skills: [zaip-skill-change, zaip-skill-frontend, zaip-skill-frontend-componentization, zaip-skill-frontend-data-flows, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration]
     write_scopes: [apps/frontend/*, .agents/dashboard/apps/frontend/*, .agents/dashboard/modules/*/src/react/*]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -897,7 +909,7 @@ agents:
     capabilities: [backend-delivery, api-delivery, persistence-integration, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-backend, zaip-skill-meta-devtools-api-integration]
+    skills: [zaip-skill-change, zaip-skill-backend, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration]
     write_scopes: [apps/backend/*, modules/*]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -930,7 +942,7 @@ agents:
     capabilities: [website-delivery, design-system, seo, geo, markdown-for-agents, agent-readiness, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-website-readiness, zaip-skill-meta-devtools-api-integration]
+    skills: [zaip-skill-change, zaip-skill-website-readiness, zaip-skill-frontend-componentization, zaip-skill-meta-devtools-api-integration]
     write_scopes: [apps/site/*]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -963,7 +975,7 @@ agents:
     capabilities: [design-system, design-tokens, central-components, page-design]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner]
-    skills: [zaip-skill-change, zaip-skill-design-system]
+    skills: [zaip-skill-change, zaip-skill-design-system, zaip-skill-frontend-componentization]
     write_scopes: [.agents/design/*, .agents/design/**]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -983,8 +995,8 @@ agents:
     escalation: [agent-orchestrator]
   - id: agent-cloud-engineer
     version: 1
-    purpose: Design and validate declared cloud infrastructure and run only contract-bound Cloudflare DNS, Hostinger VPS, SSH, and Terraform operations.
-    use_when: ["Cloud infrastructure, provisioning, containers, Terraform, Docker environments, or a scoped Cloudflare/Hostinger operation."]
+    purpose: Design and validate declared cloud infrastructure, including AWS preparation and future authorized provisioning with scoped AWS CLI and Terraform, and run only contract-bound Cloudflare DNS, Hostinger VPS, SSH, and Terraform operations.
+    use_when: ["Cloud infrastructure, provisioning, containers, Terraform, Docker environments, a scoped Cloudflare/Hostinger operation, or AWS CLI/Terraform environment preparation."]
     do_not_use: ["Application implementation, deployment, or unmanaged infrastructure changes."]
     codex_name: zaip-agent-cloud-engineer
     codex_task_name: dan_cloud_engineer_zaip_agent
@@ -993,15 +1005,15 @@ agents:
     role: builder
     priority: 10
     inherits: null
-    capabilities: [cloud-infrastructure, terraform, docker, environment-provisioning, contract-bound-cloud-operations]
+    capabilities: [cloud-infrastructure, terraform, aws-cli, aws-environment-preparation, aws-authorized-provisioning, docker, environment-provisioning, contract-bound-cloud-operations]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner]
-    skills: [zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-hostinger-cloudflare-terraform]
+    skills: [zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-hostinger-cloudflare-terraform, zaip-skill-container-runtime, zaip-skill-deployment-pipeline, zaip-skill-performance-engineering, zaip-skill-application-observability, zaip-skill-disaster-recovery, zaip-skill-application-readiness]
     write_scopes: [declared-write-scope]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
-      network: { allow: [contract-bound-cloud-runner], deny: [external] }
-      shell: { allow: [tests, typecheck, build, contract-bound-cloud-runner], deny: [destructive, deploy] }
+      network: { allow: [contract-bound-cloud-runner, contract-bound-aws-cli], deny: [external] }
+      shell: { allow: [tests, typecheck, build, contract-bound-cloud-runner, contract-bound-aws-cli], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
       required_capabilities: [code, tool-use]
@@ -1048,7 +1060,7 @@ agents:
     review: { can_approve: true, cannot_review_roles: [auditor] }
     escalation: [agent-orchestrator]
   - id: agent-marketing-analyst
-    version: 1
+    version: 2
     purpose: Create evidence-grounded marketing strategy, copy, campaigns, content, and assets inside declared scopes.
     use_when: ["Marketing, campaign, content, landing-page copy, brand application, or approved Brandbook consumption is the primary output."]
     do_not_use: ["Brand platform decisions, Brandbook authoring, sales-facing scripts, business strategy, product implementation, backend changes, or central design governance."]
@@ -1070,18 +1082,18 @@ agents:
       shell: { allow: [tests, validation], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
-      required_capabilities: [code, tool-use]
+      required_capabilities: [tool-use]
       preferred: [gpt-5.6-terra]
       reasoning_effort: medium
     budget: { soft_cycles: 20 }
     contract:
-      inputs: [task, requirements, marketing-context, approved-brandbook]
+      inputs: [request-or-task, requirements, marketing-context, approved-brandbook]
       outputs: [marketing-strategy, marketing-copy, campaign-plan, content-assets, structured-outcome]
       evidence: [acceptance-evidence]
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-brand-strategist
-    version: 1
+    version: 2
     purpose: Create, edit, audit, and advise on brand platforms, Brandbooks, identity governance, and unresolved brand decisions inside declared scopes.
     use_when: ["Brand platform, positioning, Brandbook, archetypes, semantic differential, brand architecture, governance, or unresolved brand consistency is the primary decision or output."]
     do_not_use: ["Ordinary approved-brand application, campaign or content production, sales scripts, raw quantitative analysis, or general document production without a brand decision."]
@@ -1103,18 +1115,18 @@ agents:
       shell: { allow: [tests, validation], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
-      required_capabilities: [code, tool-use]
+      required_capabilities: [tool-use]
       preferred: [gpt-5.6-terra]
       reasoning_effort: medium
     budget: { soft_cycles: 24 }
     contract:
-      inputs: [task, requirements, brand-context]
+      inputs: [request-or-task, requirements, brand-context]
       outputs: [brand-platform, brandbook, governance-plan, structured-outcome]
       evidence: [acceptance-evidence, decision-provenance]
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-growth-strategist
-    version: 1
+    version: 2
     purpose: Advise on business strategy, Growth, RevOps, portfolio priorities, business models, and revenue-or-cost decisions inside declared scopes.
     use_when: ["Business strategy, strategic planning, executive advisory, Growth/RevOps, business-model analysis, portfolio prioritization, or financial impact is the primary decision or output."]
     do_not_use: ["Campaign or content production, Brandbook work, sales playbooks or scripts, raw quantitative analysis, or external commercial action."]
@@ -1136,18 +1148,18 @@ agents:
       shell: { allow: [tests, validation], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
-      required_capabilities: [code, tool-use]
+      required_capabilities: [tool-use]
       preferred: [gpt-5.6-terra]
       reasoning_effort: medium
     budget: { soft_cycles: 24 }
     contract:
-      inputs: [task, requirements, growth-context, business-metrics]
+      inputs: [request-or-task, requirements, growth-context, business-metrics]
       outputs: [business-recommendation, growth-recommendation, strategic-plan, revops-plan, structured-outcome]
       evidence: [acceptance-evidence, decision-provenance]
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-sales-specialist
-    version: 1
+    version: 2
     purpose: Create, edit, and advise on internal sales methodology, processes, sales-facing scripts, qualification, enablement, and handoffs inside declared scopes.
     use_when: ["Sales methodology, process, sales-facing script, qualification, negotiation preparation, SDR/closer process, enablement, or pipeline handoff is the primary output."]
     do_not_use: ["Growth or RevOps strategy, campaign or marketing copy, brand governance, raw data validation, legal policy, generic document production, or external commercial acts."]
@@ -1169,18 +1181,18 @@ agents:
       shell: { allow: [tests, validation], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
-      required_capabilities: [code, tool-use]
+      required_capabilities: [tool-use]
       preferred: [gpt-5.6-terra]
       reasoning_effort: medium
     budget: { soft_cycles: 20 }
     contract:
-      inputs: [task, requirements, sales-context]
+      inputs: [request-or-task, requirements, sales-context]
       outputs: [sales-process, sales-playbook, sales-script, structured-outcome]
       evidence: [acceptance-evidence, decision-provenance]
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-general-operations
-    version: 1
+    version: 2
     purpose: Deliver bounded general-operations work outside mandatory specialist scopes, including documents, presentations, spreadsheets, process artifacts, and evidence-grounded comparative research.
     use_when: ["A bounded document, presentation, spreadsheet, process, or comparative-research task has no mandatory specialist scope."]
     do_not_use: ["Specialist product, design-system, marketing, frontend, backend, data, security, cloud, legal, or governance work; independent approval; or external acts requiring authority."]
@@ -1192,7 +1204,7 @@ agents:
     priority: 30
     inherits: null
     capabilities: [general-operations, task-delivery, document-delivery, presentation-delivery, spreadsheet-delivery, process-artifacts, comparative-research]
-    execution_eligibility: [delivery]
+    execution_eligibility: [interaction, delivery]
     tools: [apply-patch, shell-read, test-runner]
     skills: [zaip-skill-change, zaip-skill-general-operations]
     write_scopes: [declared-write-scope]
@@ -1202,12 +1214,12 @@ agents:
       shell: { allow: [tests, validation], deny: [destructive, deploy] }
       deployment: { allow: [], deny: [all] }
     model:
-      required_capabilities: [code, tool-use]
+      required_capabilities: [tool-use]
       preferred: [gpt-5.6-terra]
       reasoning_effort: medium
     budget: { soft_cycles: 20 }
     contract:
-      inputs: [task, requirements, operations-context]
+      inputs: [request-or-task, requirements, operations-context]
       outputs: [artifacts, verification, structured-outcome]
       evidence: [acceptance-evidence]
     review: { can_approve: false, cannot_review_roles: [builder] }

package/templates/.agents/config/agents/discovery.json

@@ -0,0 +1,319 @@
+{
+  "_zaip_managed": "zaip-managed generated-do-not-edit source=agent-discovery version=2.6.0 sha256=40be3aeb752ad44bd335529659f4235344b6285d67fee2c53230fc44152140cf",
+  "schema_version": 1,
+  "source": {
+    "path": ".agents/config/agents/catalog.yaml",
+    "kind": "canonical-catalog",
+    "revision": "catalog-schema-1",
+    "sha256": "c4c95cc324cd7103b45e3270bd12713b19f7f5880342c1b509866c0c9cf02adf"
+  },
+  "excluded_path_prefixes": [".local/", ".agents/config/clients/", ".codex/", ".claude/"],
+  "agents": [
+    {
+      "id": "agent-analyst",
+      "codex_name": "zaip-agent-analyst",
+      "role": "analyst",
+      "capabilities": [
+        "conversation-analysis",
+        "question-answering",
+        "repository-analysis",
+        "prd-creation",
+        "prd-refinement"
+      ],
+      "execution_eligibility": ["interaction"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-analyst"
+    },
+    {
+      "id": "agent-auditor",
+      "codex_name": "zaip-agent-auditor",
+      "role": "auditor",
+      "capabilities": ["independent-review", "release-audit", "score-reproduction"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-auditor"
+    },
+    {
+      "id": "agent-backend",
+      "codex_name": "zaip-agent-backend",
+      "role": "builder",
+      "capabilities": [
+        "backend-delivery",
+        "api-delivery",
+        "persistence-integration",
+        "meta-devtools-access"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-backend"
+    },
+    {
+      "id": "agent-brand-strategist",
+      "codex_name": "zaip-agent-brand-strategist",
+      "role": "builder",
+      "capabilities": [
+        "brand-strategy",
+        "brand-governance",
+        "brandbook-authoring",
+        "brand-architecture",
+        "brand-identity-framework",
+        "semantic-differential",
+        "brand-archetypes",
+        "brand-touchpoint-audit",
+        "brand-equity-strategy"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-brand-strategist"
+    },
+    {
+      "id": "agent-builder",
+      "codex_name": "zaip-agent-builder",
+      "role": "builder",
+      "capabilities": [
+        "project-stack-delivery",
+        "test-authoring",
+        "spec-creation",
+        "spec-refinement",
+        "technical-decomposition"
+      ],
+      "execution_eligibility": ["delivery", "interaction"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-builder"
+    },
+    {
+      "id": "agent-cloud-engineer",
+      "codex_name": "zaip-agent-cloud-engineer",
+      "role": "builder",
+      "capabilities": [
+        "cloud-infrastructure",
+        "terraform",
+        "aws-cli",
+        "aws-environment-preparation",
+        "aws-authorized-provisioning",
+        "docker",
+        "environment-provisioning",
+        "contract-bound-cloud-operations"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-cloud-engineer"
+    },
+    {
+      "id": "agent-data-analyst",
+      "codex_name": "zaip-agent-data-analyst",
+      "role": "task-executor",
+      "capabilities": ["data-analysis", "metric-diagnostics", "evidence-production"],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-data-analyst"
+    },
+    {
+      "id": "agent-designer",
+      "codex_name": "zaip-agent-designer",
+      "role": "builder",
+      "capabilities": ["design-system", "design-tokens", "central-components", "page-design"],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-designer"
+    },
+    {
+      "id": "agent-finalizer",
+      "codex_name": "zaip-agent-finalizer",
+      "role": "execution-finalizer",
+      "capabilities": ["lifecycle-finalization", "gate-evaluation", "structured-output"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-finalizer"
+    },
+    {
+      "id": "agent-frontend",
+      "codex_name": "zaip-agent-frontend",
+      "role": "builder",
+      "capabilities": [
+        "frontend-delivery",
+        "accessibility",
+        "component-integration",
+        "meta-devtools-access"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-frontend"
+    },
+    {
+      "id": "agent-general-operations",
+      "codex_name": "zaip-agent-general-operations",
+      "role": "builder",
+      "capabilities": [
+        "general-operations",
+        "task-delivery",
+        "document-delivery",
+        "presentation-delivery",
+        "spreadsheet-delivery",
+        "process-artifacts",
+        "comparative-research"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-general-operations"
+    },
+    {
+      "id": "agent-governance-compliance",
+      "codex_name": "zaip-agent-governance-compliance",
+      "role": "builder",
+      "capabilities": [
+        "governance-compliance",
+        "task-delivery",
+        "hr-artifacts",
+        "legal-operations",
+        "policy-authoring",
+        "privacy-artifacts",
+        "vendor-governance",
+        "risk-artifacts"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-governance-compliance"
+    },
+    {
+      "id": "agent-growth-strategist",
+      "codex_name": "zaip-agent-growth-strategist",
+      "role": "builder",
+      "capabilities": [
+        "growth-strategy",
+        "revops-strategy",
+        "experimentation-strategy",
+        "revenue-cost-analysis",
+        "revenue-operations",
+        "funnel-strategy",
+        "unit-economics",
+        "financial-impact-analysis",
+        "cost-optimization-strategy",
+        "experiment-portfolio",
+        "growth-learning-loop",
+        "business-strategy",
+        "strategic-planning",
+        "executive-advisory",
+        "growth-advisory",
+        "business-model-analysis",
+        "portfolio-prioritization"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-growth-strategist"
+    },
+    {
+      "id": "agent-integrator",
+      "codex_name": "zaip-agent-integrator",
+      "role": "integrator",
+      "capabilities": ["git-integration", "full-verification"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-integrator"
+    },
+    {
+      "id": "agent-marketing-analyst",
+      "codex_name": "zaip-agent-marketing-analyst",
+      "role": "builder",
+      "capabilities": [
+        "marketing-strategy",
+        "copywriting",
+        "campaign-planning",
+        "marketing-assets",
+        "image-briefing",
+        "brand-application",
+        "brandbook-consumption",
+        "marketing-copy",
+        "content-production",
+        "meta-ads-reporting"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-marketing-analyst"
+    },
+    {
+      "id": "agent-orchestrator",
+      "codex_name": "zaip-agent-orchestrator",
+      "role": "orchestrator",
+      "capabilities": ["dag-orchestration", "lifecycle-governance"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-orchestrator"
+    },
+    {
+      "id": "agent-refactoring-specialist",
+      "codex_name": "zaip-agent-refactoring-specialist",
+      "role": "builder",
+      "capabilities": [
+        "refactor-existing-code",
+        "migration",
+        "modularization",
+        "architecture",
+        "source-inventory",
+        "refactor-map",
+        "verification"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-refactoring-specialist"
+    },
+    {
+      "id": "agent-reviewer",
+      "codex_name": "zaip-agent-reviewer",
+      "role": "reviewer",
+      "capabilities": ["independent-review", "architecture-review", "security-review"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-reviewer"
+    },
+    {
+      "id": "agent-sales-specialist",
+      "codex_name": "zaip-agent-sales-specialist",
+      "role": "builder",
+      "capabilities": [
+        "sales-strategy",
+        "sales-methodology",
+        "sales-process",
+        "sales-playbook",
+        "sales-script",
+        "sales-qualification",
+        "spin-selling",
+        "bant-qualification",
+        "sales-negotiation",
+        "sdr-process",
+        "closer-process",
+        "pipeline-handoff",
+        "sales-consulting",
+        "sales-enablement"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-sales-specialist"
+    },
+    {
+      "id": "agent-security-auditor",
+      "codex_name": "zaip-agent-security-auditor",
+      "role": "auditor",
+      "capabilities": ["security-audit", "security-review", "risk-assessment"],
+      "execution_eligibility": [],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-security-auditor"
+    },
+    {
+      "id": "agent-task-executor",
+      "codex_name": "zaip-agent-task-executor",
+      "role": "task-executor",
+      "capabilities": ["task-delivery", "verification", "evidence-production"],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-task-executor"
+    },
+    {
+      "id": "agent-text-summarizer",
+      "codex_name": "zaip-agent-writer",
+      "role": "task-executor",
+      "capabilities": [
+        "faithful-summarization",
+        "timestamped-transcript-analysis",
+        "source-grounded-documentation"
+      ],
+      "execution_eligibility": ["interaction", "delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-text-summarizer"
+    },
+    {
+      "id": "agent-website-developer",
+      "codex_name": "zaip-agent-website-developer",
+      "role": "builder",
+      "capabilities": [
+        "website-delivery",
+        "design-system",
+        "seo",
+        "geo",
+        "markdown-for-agents",
+        "agent-readiness",
+        "meta-devtools-access"
+      ],
+      "execution_eligibility": ["delivery"],
+      "reference": ".agents/config/agents/catalog.yaml#/agents/agent-website-developer"
+    }
+  ]
+}

package/templates/.agents/config/clients/codex/agents/zaip-agent-analyst.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-analyst (ZAIP catalog id agent-analyst) with r
 Manage product definition and interaction analysis, creating or refining PRDs through attributed ZAIP lifecycle commands without manufacturing delivery Tasks before readiness.
 Capabilities: conversation-analysis, question-answering, repository-analysis, prd-creation, prd-refinement.
 Allowed tools: shell-read, zaip-cli.
-Required skills: zaip-skill-context, zaip-skill-prd.
-Model policy: gpt-5.6-sol; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-context, zaip-skill-prd; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: .agents/records/prds/*, .agents/records/specs/*, .agents/records/lifecycle/*, .local/*.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: interaction, context-pack.
@@ -21,11 +21,8 @@ Use when: Product problem, PRD, discovery, scope, or refinement..
 Do not use when: SPEC, implementation, technical approval, or deployment..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-analyst and task_name must be exactly bia_product_manager_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-auditor.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-auditor (ZAIP catalog id agent-auditor) with r
 Reproduce evidence and issue the final independent audit.
 Capabilities: independent-review, release-audit, score-reproduction.
 Allowed tools: shell-read, test-runner, package-inspector.
-Required skills: zaip-skill-review.
-Model policy: gpt-5.6-sol; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-review; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: read-only.
 This role is read-only. Do not create, modify, move, or delete workspace files.
 Inputs: rubric, evidence-manifest, release-candidate.
@@ -21,11 +21,8 @@ Use when: High risk, release, or a claim requires final reproduction..
 Do not use when: Implementation, correction, or authorship of the evidence..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-auditor and task_name must be exactly ana_quality_auditor_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You may approve only roles outside: auditor.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-backend.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=fe4ec7a2a355f321470450af430bfa792fb289ab3d9a1656941113b7ea28b4f8
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=e760427ccf01bdb1b2750675a53284a280a395c1dcaa08293911b71d4037ca3c
 name = "zaip-agent-backend"
 description = "Implement and verify backend, API, persistence, and integration boundaries inside declared scopes."
 nickname_candidates = ["will_backend_specialist_zaip_agent"]
@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-backend (ZAIP catalog id agent-backend) with r
 Implement and verify backend, API, persistence, and integration boundaries inside declared scopes.
 Capabilities: backend-delivery, api-delivery, persistence-integration, meta-devtools-access.
 Allowed tools: apply-patch, shell-read, test-runner, meta-devtools-mcp.
-Required skills: zaip-skill-change, zaip-skill-backend, zaip-skill-meta-devtools-api-integration.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-change, zaip-skill-backend, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: apps/backend/*, modules/*.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.
@@ -21,11 +21,8 @@ Use when: apps/backend/**, modules/**, or backend capability..
 Do not use when: Frontend, website, or central visual design..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-backend and task_name must be exactly will_backend_specialist_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """