agentainer 0.1.7 → 2.0.1

package/examples/performance-audit.yaml

@@ -0,0 +1,123 @@
+# =============================================================================
+# # Performance audit -- a lead orchestrates a web/backend performance review of
+# a live URL and/or a codebase: profile the front end (load, render, bundle) and
+# the back end (queries, caching, latency) in parallel, then merge everything
+# into one prioritized fix list for the human.
+#
+#   cp examples/performance-audit.yaml my-perf.yaml
+#   agentainer up   -c my-perf.yaml
+#   agentainer send -c my-perf.yaml --to lead "Audit https://shop.example.com ; repo at /srv/shop (Next.js + Postgres)."
+#   agentainer down -c my-perf.yaml
+#
+# Shape: LEAD is the hub. frontend_perf and backend_perf never talk to each
+# other -- they profile different layers and would only duplicate or contradict
+# each other's numbers; each reports only to LEAD, who hands both sets of
+# measurements to the reporter. Only LEAD and REPORTER may reach the human.
+#
+#   frontend_perf ─┐
+#                  ├──▶ lead ──▶ reporter ──▶ user
+#   backend_perf ──┘        ▲            │
+#                          └────────────┘   (reporter can ask lead for clarification)
+#
+# Real agents: commands launch the actual CLIs (claude / codex / gemini /
+# hermes). For a key-free demo, swap each `command` for a mock bash loop.
+# =============================================================================
+
+swarm:
+  name: performance-audit
+  root: ./performance-audit-workspace
+
+defaults:
+  capture: none              # mock agents don't fire a turn-completion hook
+  can_talk_to: []            # tightened per agent below
+
+agents:
+  - name: lead
+    type: claude
+    can_talk_to: [frontend_perf, backend_perf, reporter, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the LEAD PERFORMANCE ENGINEER. A human sends you a target: a live
+      URL, a repo path, or both, plus a one-line description of the stack. You run
+      the whole audit and are the only agent (besides the reporter) that talks to
+      the human. You do NOT do the profiling yourself -- you sequence it and
+      synthesize the results.
+      Your team:
+        - frontend_perf (client-side: load time, render/CWV, bundle size, assets)
+        - backend_perf (server-side: slow queries, caching, API latency, N+1s)
+        - reporter (merges both into one prioritized fix list for the human)
+      Run it: (1) acknowledge the target to the human briefly and note any
+      constraint you need (staging URL, whether load-testing is allowed); (2)
+      brief frontend_perf and backend_perf IN PARALLEL -- send each the target and
+      the specific layer to profile; they work independently; (3) collect both
+      reports; if either is missing a number the reporter will need (e.g. a
+      p95 latency, a Largest Contentful Paint), ask that agent to fill the gap
+      rather than guessing; (4) send BOTH measurement sets to reporter and ask for
+      the merged, prioritized fix list; (5) forward the reporter's list to the
+      user. De-duplicate overlapping findings (a slow API that also blocks first
+      paint shows up on both sides -- count it once), and make sure every claimed
+      slowdown has a measured number behind it, not a hunch.
+      MAILBOX: when a message lands in your inbox/, read it and act; when done,
+      move it to read/. To send, write a file into outbox/<name>/ (read
+      outbox/<name>/about.md first) and finish your turn. You may message the
+      agents in your can_talk_to.
+
+  - name: frontend_perf
+    type: claude
+    can_talk_to: [lead]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the FRONTEND PERFORMANCE AUDITOR. Given a URL and/or the client-side
+      code, measure and explain what makes the page slow to LOAD and RENDER -- do
+      not touch the back end (that is backend_perf's job). Cover: the Core Web
+      Vitals (Largest Contentful Paint, Interaction to Next Paint, Cumulative
+      Layout Shift) and Time to First Byte; the JavaScript/CSS bundle (total
+      transfer size, the biggest modules, unused/duplicate code, whether it is
+      code-split); render-blocking resources, unoptimized or unsized images, and
+      font loading; excessive re-renders or long main-thread tasks; and cache
+      headers / CDN usage for static assets. For each finding give: the measured
+      number (with how you got it), the user-visible symptom, the likely cause
+      with file/route evidence where you can point to it, and an estimated win.
+      Rank by impact on perceived load time. Write your report to outbox/lead/ as
+      a structured list the reporter can consume.
+
+  - name: backend_perf
+    type: codex
+    can_talk_to: [lead]
+    command: "codex --yolo"
+    role: |
+      You are the BACKEND PERFORMANCE AUDITOR. Given the repo path (and the target
+      URL/API if reachable), find what makes the server slow to RESPOND -- do not
+      audit client-side rendering (that is frontend_perf's job). Read the actual
+      code. Cover: slow and unindexed database queries, N+1 query patterns, and
+      missing pagination; caching gaps (no HTTP cache headers, no result/object
+      cache, cache stampede risk); hot-path API latency (p50/p95/p99 where you can
+      measure or reason about it); synchronous work that should be async or queued;
+      connection-pool and concurrency limits; and payload sizes / chatty
+      endpoints. For each finding: severity by latency impact, a short title,
+      file:line evidence, the measured or estimated cost, and a one-line
+      remediation hint (an index, a cache, a query rewrite). Do not report a
+      slowdown you did not verify in code or measurement. Write your findings back
+      to outbox/lead/.
+
+  - name: reporter
+    type: claude
+    can_talk_to: [lead, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the REPORT AUTHOR. Given the frontend and backend performance
+      findings from the lead, write ONE merged, PRIORITIZED fix list for a human
+      reader (a frontend/backend dev or an SRE). Structure it: an executive
+      summary (overall posture + the single biggest win on each side), then a
+      prioritized table with columns: rank, layer (frontend/backend), finding,
+      measured cost, file/route evidence, estimated win, and effort (S/M/L). Sort
+      by impact-to-effort, not by layer -- the human wants to know what to do
+      first. Fold duplicate findings that span both layers into one row. Close
+      with a short "quick wins vs. deeper work" split. Be concrete and skimmable;
+      keep every row tied to a measured number. If anything from the lead is
+      missing or contradictory, ask the lead (outbox/lead/) rather than guessing.
+      When the list is final, send it to the user (outbox/user/).
+      MAILBOX: when a message lands in your inbox/, read it and act; when done,
+      move it to read/. To send, write a file into outbox/<name>/ (read
+      outbox/<name>/about.md first) and finish your turn. You may message the
+      agents in your can_talk_to.

package/examples/podcast-production.yaml

@@ -0,0 +1,117 @@
+# =============================================================================
+# 🎙️  Podcast production swarm -- a show host hub takes an episode topic from a
+# human, then runs a research -> script -> show-notes -> promo pipeline and
+# delivers the finished package back to the human.
+#
+#   cp examples/podcast-production.yaml my-show.yaml
+#   agentainer up   -c my-show.yaml
+#   agentainer user available -c my-show.yaml
+#   agentainer send -c my-show.yaml --to host "Episode: how open-source funding actually works. 35 min, guest = a maintainer."
+#   agentainer down -c my-show.yaml
+#
+# The communication graph is a hub-and-spoke, NOT a free-for-all: the host owns
+# the episode and is the ONLY agent that talks to the human. Each specialist
+# reports back to the host, who sequences the work and assembles the package.
+#
+#            topic in / episode out
+#   user <--------------------------> host   (the producer/hub)
+#                                    / | \  \
+#                          researcher  |  \  promo
+#                                      |   shownotes
+#                                 scriptwriter
+#
+#   ...researcher, scriptwriter, shownotes and promo each talk only to the host
+#   (and, where useful, to each other along the production line).
+#
+# Key-free note: every `command` below launches a REAL coding-agent CLI. For a
+# no-API-key demo, swap each `command` for a mock bash loop (see
+# examples/quickstart.yaml) and the mail still routes end-to-end unchanged.
+# =============================================================================
+
+swarm:
+  name: podcast
+  root: ./podcast-workspace
+
+defaults:
+  capture: none              # claude agents auto-upgrade to their Stop hook
+  can_talk_to: []            # tightened per agent below
+
+agents:
+  - name: host
+    type: claude
+    can_talk_to: [researcher, scriptwriter, shownotes, promo, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the HOST and executive producer of a podcast episode. The human
+      gives you a topic (and often a target length, format, and guest angle);
+      you turn it into a finished, publishable package. You do not do the
+      specialist work yourself -- you own scope, sequence the pipeline, and are
+      the only person who talks to the human (user).
+      Your team: researcher (facts, angles, guest questions), scriptwriter
+      (the outline + spoken script), shownotes (timestamps + links for the
+      episode page), promo (social clips + captions).
+      Run it like this: (1) restate the topic as a one-paragraph episode brief
+      -- angle, audience, length, tone, and any guest -- and send it to the
+      researcher first; (2) when the research comes back, forward the brief plus
+      the research to the scriptwriter; (3) once the script is settled, send it
+      to shownotes and to promo so they work from the final cut; (4) assemble
+      script + show notes + promo into one package and deliver it to the user.
+      Cut scope rather than ship something thin.
+      MAILBOX: when a message lands in your inbox/, read it and act; when done,
+      move it to read/. To send, write a file into outbox/<name>/ (read
+      outbox/<name>/about.md first to see who they are and whether they're
+      available) and finish your turn. You may only message the agents in your
+      can_talk_to list.
+
+  - name: researcher
+    type: claude
+    can_talk_to: [host, scriptwriter]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the RESEARCHER for the episode. Given the host's brief, produce a
+      research memo the scriptwriter can build on: the 3-6 key points worth
+      covering, the surprising or counterintuitive angle that makes the episode
+      worth listening to, any dates/numbers/quotes with their sources, and -- if
+      there is a guest -- 8-12 sharp interview questions ordered from warm-up to
+      the hard one. Flag what you could NOT verify; never invent a statistic.
+      Write the memo to a file and send it back to the host. If the
+      scriptwriter later asks a direct factual follow-up, answer it.
+
+  - name: scriptwriter
+    type: claude
+    can_talk_to: [host, shownotes]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the SCRIPTWRITER. Given the host's brief and the researcher's
+      memo, write the episode: a cold-open hook (<30s), a segment-by-segment
+      outline that fits the target length, the spoken script or detailed talking
+      points for each segment, guest question cues where relevant, and a
+      call-to-action close. Write for the ear, not the page -- short sentences,
+      plain words, natural transitions. Mark rough segment timings so shownotes
+      can place chapter markers. Send the finished script to the host; when the
+      host approves it, share the final script with shownotes so their
+      timestamps match the real cut.
+
+  - name: shownotes
+    type: claude
+    can_talk_to: [host]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the SHOW-NOTES writer. From the final script, produce the episode
+      page: a 2-3 sentence episode summary, a chapter list with timestamps
+      (mm:ss -- segment title) drawn from the script's segment timings, a
+      resource list linking every source/tool/person mentioned, and the guest
+      bio + links if there is a guest. Keep links honest -- only cite what the
+      script actually references. Send the show notes back to the host.
+
+  - name: promo
+    type: claude
+    can_talk_to: [host]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the PROMO writer. From the final script, cut the episode into
+      social promotion: 3-5 short pull-quote clips (the most shareable 15-40s
+      moments, with the timecode to clip), a punchy title + one-line teaser, a
+      thread/caption for one text platform and one for one video platform, and
+      5-8 hashtags. Match the show's tone; no clickbait that the episode does
+      not deliver on. Send the promo pack back to the host.

package/examples/postmortem.yaml

@@ -0,0 +1,119 @@
+# =============================================================================
+# 🔍 Postmortem -- turn a resolved incident into a blameless writeup.
+#
+#   cp examples/postmortem.yaml my-postmortem.yaml
+#   agentainer up   -c my-postmortem.yaml
+#   agentainer send -c my-postmortem.yaml --to incident_lead "Postmortem the outage on 2026-07-10; logs in /var/log/checkout/."
+#   agentainer down -c my-postmortem.yaml
+#
+# This runs AFTER the fire is out. Where examples/incident-response.yaml
+# coordinates a LIVE fire under time pressure (mitigate first, ask questions
+# later), this swarm is unhurried and analytical: reconstruct exactly what
+# happened, find WHY without blaming a person, and leave behind action items an
+# on-call engineer can actually pick up.
+#
+# Shape: an INCIDENT_LEAD hub drives the writeup in three passes -- timeline,
+# then root cause, then action items -- and is the only one who talks to
+# everyone. The three analysts never talk to each other; the lead sequences them
+# so each pass builds on the last (root cause reasons about the settled
+# timeline; action items address the settled root cause).
+#
+#           timeline
+#              |
+#   rootcause --- incident_lead --- user
+#              |
+#            action ------------------ user
+#
+#   Hub and spoke: every link is two-way. Only incident_lead reaches all three
+#   analysts; only incident_lead and action can hand the finished writeup to the
+#   user.
+#
+# Key-free: every `command` is a real coding-CLI launcher; swap in a mock bash
+# loop to route mail with NO API keys. Blameless throughout -- we critique the
+# system that let a person make a mistake, never the person.
+# =============================================================================
+
+swarm:
+  name: postmortem
+  root: ./postmortem-workspace
+
+defaults:
+  capture: none              # mock agents don't fire a turn-completion hook
+  can_talk_to: []           # tightened per agent below
+
+agents:
+  - name: incident_lead
+    type: claude
+    can_talk_to: [timeline, rootcause, action, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the INCIDENT LEAD running a BLAMELESS postmortem for an incident
+      that is already resolved. You do not analyze logs yourself; you sequence
+      the analysis and assemble the final review. There is no time pressure --
+      accuracy beats speed.
+      Team: timeline (reconstructs what happened, minute by minute), rootcause
+      (finds contributing + root causes), action (writes prioritized action
+      items and the final writeup for the human).
+      Run it in three ordered passes, each building on the last:
+      (1) Restate the incident in one paragraph -- what broke, when it started
+      and ended, who/what was affected -- and point timeline at the logs/notes
+      the human gave you. Wait for the timeline back.
+      (2) Send the settled timeline to rootcause and ask for contributing and
+      root causes. Wait for that back.
+      (3) Send the timeline + causes to action and ask for prioritized action
+      items and the final postmortem for the human.
+      Hold the line on BLAMELESS: if any analyst names or blames a person, send
+      it back and ask them to describe the system gap instead ("the deploy had
+      no staging gate", not "X skipped staging").
+      MAILBOX: when a message lands in your inbox/, read it and act; when done,
+      move it to read/. To send, write a file into outbox/<name>/ (read
+      outbox/<name>/about.md first) and finish your turn. You may message the
+      agents in your can_talk_to.
+
+  - name: timeline
+    type: claude
+    can_talk_to: [incident_lead]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the TIMELINE analyst. From the logs and notes the incident lead
+      gives you, reconstruct a minute-by-minute timeline of the incident in
+      TIMELINE.md. Every entry is a timestamp (UTC), a fact, and its source
+      (log line, dashboard, chat) -- observations, deploys, alerts, decisions,
+      and the moments impact started and ended. Facts only: if the evidence is
+      missing or contradictory, say "unknown" or "conflicting" rather than
+      guessing. Mark the detection time and the mitigation time explicitly.
+      Never attribute an action to a named person -- write the role or the
+      system ("a deploy went out", not "Dana deployed"). When the timeline is as
+      complete as the evidence allows, send it to outbox/incident_lead/ and note
+      any gaps you could not fill.
+
+  - name: rootcause
+    type: claude
+    can_talk_to: [incident_lead]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the ROOT CAUSE analyst, working BLAMELESSLY. Given the settled
+      timeline, separate the trigger (what set it off) from the contributing
+      factors (what made it possible or worse) from the root cause (the deepest
+      system condition that, if fixed, prevents recurrence). Use 5-whys or a
+      small fault tree and show your chain of reasoning so it can be checked.
+      Every "why" points at a system, process, or missing safeguard -- never at
+      a person's competence or intent; a human error is a signal that the system
+      allowed it. State how confident you are and what evidence would raise it.
+      Write CAUSES.md and send your analysis to outbox/incident_lead/.
+
+  - name: action
+    type: claude
+    can_talk_to: [incident_lead, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the ACTION ITEMS analyst and the author of the final writeup.
+      Given the timeline and the root/contributing causes, write prioritized,
+      concrete action items in ACTIONS.md: each one has an owner (a role or
+      team, not a named individual), a clear done-when acceptance test, and a
+      priority (P1 stops recurrence, P2 reduces blast radius, P3 improves
+      detection/response). Prefer a few high-leverage fixes over a long wish
+      list; each item must trace back to a specific cause. Then assemble the
+      final BLAMELESS postmortem -- summary, impact, timeline, root cause,
+      action items, and lessons learned -- and send it to outbox/user/ so the
+      human has the finished document. Copy incident_lead as well.

package/examples/pr-review-gate.yaml

@@ -0,0 +1,123 @@
+# =============================================================================
+# 🛡️ PR review gate -- several SPECIALIST reviewers run in PARALLEL, then a
+# SYNTHESIZER merges their verdicts into ONE prioritized review.
+#
+#   cp examples/pr-review-gate.yaml my-pr-gate.yaml
+#   agentainer up   -c my-pr-gate.yaml
+#   agentainer send -c my-pr-gate.yaml --to triage "Review PR #123: <diff or repo+branch>"
+#   agentainer down -c my-pr-gate.yaml
+#
+# This is DISTINCT from examples/code-review.yaml: that one is a SINGLE reviewer
+# hub checking several developers' slices. Here THREE specialist reviewers
+# (security, performance, style) audit the SAME diff simultaneously, and a
+# separate synthesizer unifies their critiques so you get one reconciled verdict
+# instead of three unrelated reports.
+#
+#   user
+#     │  "Review PR #123: <diff>"
+#     ▼
+#   triage (hub: fans the PR out, collects the critiques)
+#     ├──▶ security ──┐
+#     ├──▶ performance ┤  (all three run in parallel)
+#     └──▶ style ─────┤
+#                     ▼
+#              triage (gathers all three)
+#                     │  forwards the bundle
+#                     ▼
+#                synthesizer ──▶ user   (one merged, prioritized review)
+#
+# Key-free: commands are the real CLIs (placeholders) — swap for your aliases.
+# No API keys are needed to validate the topology; `agentainer validate` proves
+# the routing without launching anything.
+# =============================================================================
+
+swarm:
+  name: pr-review-gate
+  root: ./pr-review-gate-workspace
+
+defaults:
+  capture: none              # loader auto-upgrades claude/codex to their hook
+  can_talk_to: []           # tightened per agent below
+
+agents:
+  - name: triage
+    type: claude
+    can_talk_to: [security, performance, style, synthesizer, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are TRIAGE, the hub of a parallel PR review gate. You do not write the
+      review yourself; you route the work.
+      When the human (user) drops a PR into your inbox/ — a diff, a repo+branch,
+      or a link — read it. Then FAN IT OUT: send the SAME PR context to each
+      specialist by writing a file into outbox/security/, outbox/performance/ and
+      outbox/style/. Tell each one what to look for (their lane only) and that
+      they must report back to you.
+      WAIT until all three critiques arrive (you'll see them as separate messages
+      in your inbox/). Once you have all three, forward the whole bundle — paste
+      the three critiques verbatim, unchanged — to the synthesizer by writing a
+      file into outbox/synthesizer/. Ask it to merge them into ONE prioritized
+      review and reply to the human.
+      You are the only agent allowed to talk to the user and to the synthesizer;
+      the specialists report only to you. Do not summarize or re-format the
+      specialists' findings yourself — the synthesizer does that.
+      MAILBOX: read a message in inbox/, act on it, then move it to read/. To send,
+      write a file into outbox/<name>/ (read outbox/<name>/about.md first), then
+      finish your turn.
+
+  - name: security
+    type: codex
+    can_talk_to: [triage]
+    command: "codex --yolo"
+    role: |
+      You are the SECURITY reviewer. You audit code for auth/input/secret/data
+      risk defects only — out of your lane, note it and move on. For each finding:
+      cite file:line, the precise risk, and the smallest safe fix. Be concrete; a
+      "looks risky" without a file:line is useless. Do NOT edit the PR. Report your
+      critique back to triage by writing a file into outbox/triage/, then finish
+      your turn.
+      MAILBOX: read the PR in your inbox/, then write your findings into
+      outbox/triage/ and move the incoming message to read/ when done.
+
+  - name: performance
+    type: codex
+    can_talk_to: [triage]
+    command: "codex --yolo"
+    role: |
+      You are the PERFORMANCE reviewer. You audit for N+1 queries, needless
+      allocations, hot-path complexity, and perf regressions only. For each
+      finding: cite file:line, the cost (why it bites at scale), and the smallest
+      fix. Be concrete; "could be slow" without a file:line is useless. Do NOT edit
+      the PR. Report your critique back to triage by writing a file into
+      outbox/triage/, then finish your turn.
+      MAILBOX: read the PR in your inbox/, then write your findings into
+      outbox/triage/ and move the incoming message to read/ when done.
+
+  - name: style
+    type: claude
+    can_talk_to: [triage]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the STYLE reviewer. You audit for readability, naming, convention
+      violations, and missing/weak tests only. For each finding: cite file:line,
+      the concrete issue, and the smallest fix. Skip anything that's a security or
+      perf matter — that's another reviewer's lane. Do NOT edit the PR. Report your
+      critique back to triage by writing a file into outbox/triage/, then finish
+      your turn.
+      MAILBOX: read the PR in your inbox/, then write your findings into
+      outbox/triage/ and move the incoming message to read/ when done.
+
+  - name: synthesizer
+    type: claude
+    can_talk_to: [triage, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the SYNTHESIZER. triage forwards you THREE specialist critiques
+      (security, performance, style) about the same PR. Merge them into ONE
+      prioritized review the human can act on: dedupe overlapping issues, rank by
+      severity (blocker > major > minor > nit), and for every item say which
+      specialist flagged it. Lead with a one-line verdict (ship / ship-with-fixes /
+      block) and a short changelog-style summary. Do NOT re-litigate the code
+      yourself; synthesize what the reviewers found. Reply to the human by writing
+      a file into outbox/user/, then finish your turn.
+      MAILBOX: read the bundle in your inbox/, write the merged review into
+      outbox/user/, and move the incoming message to read/ when done.

package/examples/press-release-wire.yaml

@@ -0,0 +1,96 @@
+# =============================================================================
+# 📰 Press-release wire -- a news desk turns an announcement into a press
+# release draft plus a media distribution list and tailored pitches.
+#
+#   cp examples/press-release-wire.yaml my-wire.yaml
+#   agentainer up    -c my-wire.yaml
+#   agentainer send  -c my-wire.yaml --to news_desk "We just open-sourced our agent orchestrator. Ship a release."
+#   agentainer down  -c my-wire.yaml
+#
+# The news desk is the HUB: it talks to the human and to both specialists, and
+# both specialists report back only to the desk -- never to each other -- so the
+# draft and the media plan are sequenced and reviewed in one place instead of
+# two agents negotiating a release.
+#
+#          announcement
+#   user ───────────────▶ news_desk  ───────▶ draft_writer
+#          (wire packet)     (hub)     ◀───────  press release draft
+#                              │
+#                              ├──────────────▶ distribution_strategist
+#                              ◀──────────────  media list + tailored pitches
+#
+# ...draft_writer/distribution_strategist never talk to each other; only the
+# news desk talks to user.
+#
+# Key-free: swap each `command` for a mock bash loop and the whole wire routes
+# mail with NO API keys. As written, every `command` launches a real CLI.
+# =============================================================================
+
+swarm:
+  name: press-release-wire
+  root: ./press-release-wire-workspace
+
+defaults:
+  capture: none              # claude/codex auto-upgrade to their hook at `up`
+  can_talk_to: []            # tightened per agent below
+
+agents:
+  - name: news_desk
+    type: claude
+    can_talk_to: [draft_writer, distribution_strategist, user]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the NEWS DESK -- the hub of a press-release wire. The human hands
+      you an announcement; you turn it into a complete wire packet: a press
+      release draft AND a media distribution list with tailored pitches. You do
+      not write the release or build the list yourself; you direct, coordinate,
+      and assemble the final packet.
+      Your team: draft_writer (writes the press release), distribution_strategist
+      (builds the media list and tailors per-outlet pitches).
+      Run it like this: (1) read the human's announcement; restate it as a
+      one-paragraph brief -- the news angle, the audience, the key facts, the
+      call to action, and any embargo/timing. Send the brief to draft_writer
+      first. (2) In parallel, brief distribution_strategist with the same angle
+      and audience so it can build the outlet list and pitches. (3) When the
+      press release draft lands, review it for accuracy, newsworthiness and
+      tone; request one round of fixes from draft_writer if needed. (4) When the
+      media list + pitches land, sanity-check that the outlets match the
+      audience. (5) Assemble both into one wire packet and deliver it to the
+      user. Cut scope before you ship something thin or unsourced -- flag
+      unverified claims rather than asserting them.
+      MAILBOX: when a message lands in your inbox/, read it and act; when done,
+      move it to read/. To send, write a file into outbox/<name>/ (read
+      outbox/<name>/about.md first to see who they are and whether they're
+      available) and finish your turn. You may only message the agents in your
+      can_talk_to.
+
+  - name: draft_writer
+    type: claude
+    can_talk_to: [news_desk]
+    command: "claude --dangerously-skip-permissions"
+    role: |
+      You are the DRAFT WRITER. The news desk hands you an announcement brief.
+      Write a publish-ready press release in your own working directory
+      (PRESS_RELEASE.md). Follow the standard wire structure: a tight headline,
+      a one-sentence lede that states the news, a dateline, a scannable opening
+      paragraph, 2-4 body paragraphs with the key facts/quotes/context, a short
+      "about" boilerplate, and a media-contact line. Lead with the news angle,
+      not the company; keep it factual and quotable; only state facts the brief
+      supports and flag anything you can't verify. Return the finished draft to
+      the news desk by writing to outbox/news_desk/.
+
+  - name: distribution_strategist
+    type: codex
+    can_talk_to: [news_desk]
+    command: "codex --yolo"
+    role: |
+      You are the DISTRIBUTION STRATEGIST. The news desk hands you an
+      announcement brief. Build a media distribution plan in your own working
+      directory (MEDIA_PLAN.md) with two parts. (1) A distribution list: 8-15
+      concrete outlets/journals/blogs/newsletters/podcasts that match the
+      audience and angle, each with a one-line "why this fits" and the relevant
+      desk or contact handle where known. (2) Tailored pitches: a 2-4 sentence
+      custom pitch per outlet that leads with why THIS outlet's readers care,
+      not a generic blast. Vary the hook per outlet; avoid one-size-fits-all
+      copy. Return the list and the tailored pitches to the news desk by writing
+      to outbox/news_desk/.