cc-codeconductor 0.2.1 → 0.2.4

package/README.md

@@ -130,10 +130,10 @@ bun run src/cli/main.ts --help
 #### `init` — initialize CodeConductor in a project
 
 ```bash
-codeconductor init              # detect stack, write .codeconductor/config.yml
-codeconductor init --force      # overwrite existing config
-codeconductor init --global     # write to ~/.codeconductor/
-codeconductor init --dry-run    # preview without writing
+cc-codeconductor init              # detect stack, write .codeconductor/config.yml
+cc-codeconductor init --force      # overwrite existing config
+cc-codeconductor init --global     # write to ~/.codeconductor/
+cc-codeconductor init --dry-run    # preview without writing
 ```
 
 On first run, `init` copies `council.yml` and `policy.yml` into
@@ -143,8 +143,8 @@ files. `install` reads from there first.
 #### `detect` — detect project stack
 
 ```bash
-codeconductor detect
-codeconductor detect --output json
+cc-codeconductor detect
+cc-codeconductor detect --output json
 ```
 
 Output:
@@ -159,17 +159,17 @@ Detected:
 #### `install` — install council preset
 
 ```bash
-codeconductor install council --target opencode     # project-level
-codeconductor install council --target claude
-codeconductor install council --target codex
-codeconductor install council --target all          # all three targets
+cc-codeconductor install council --target opencode     # project-level
+cc-codeconductor install council --target claude
+cc-codeconductor install council --target codex
+cc-codeconductor install council --target all          # all three targets
 
-codeconductor install council --target claude --global  # write to ~/.claude/
-codeconductor install council --target opencode --global
-codeconductor install council --target all --global
+cc-codeconductor install council --target claude --global  # write to ~/.claude/
+cc-codeconductor install council --target opencode --global
+cc-codeconductor install council --target all --global
 
-codeconductor install council --target opencode --dry-run   # preview
-codeconductor install council --target opencode --force     # overwrite
+cc-codeconductor install council --target opencode --dry-run   # preview
+cc-codeconductor install council --target opencode --force     # overwrite
 ```
 
 Files generated per target:
@@ -185,7 +185,7 @@ With `--global`, the same files are written under `~/` instead of `./`.
 #### `doctor` — validate configuration
 
 ```bash
-codeconductor doctor
+cc-codeconductor doctor
 ```
 
 Checks config exists and is valid, reports runner directory status.
@@ -193,9 +193,9 @@ Checks config exists and is valid, reports runner directory status.
 #### `update` — re-apply preset
 
 ```bash
-codeconductor update
-codeconductor update --force
-codeconductor update --dry-run
+cc-codeconductor update
+cc-codeconductor update --force
+cc-codeconductor update --dry-run
 ```
 
 Re-generates preset files for the `defaults.target` in your config.
@@ -238,9 +238,9 @@ src/presets/models/
 
 Agent template files contain placeholders that are replaced during `install`:
 
-| Placeholder        | Description                    |
-| ------------------ | ------------------------------ |
-| `{{MODEL_CLAUDE}}`  | Model for the Claude provider  |
+| Placeholder          | Description                     |
+| -------------------- | ------------------------------- |
+| `{{MODEL_CLAUDE}}`   | Model for the Claude provider   |
 | `{{MODEL_OPENCODE}}` | Model for the OpenCode provider |
 | `{{MODEL_CODEX}}`    | Model for the Codex provider    |
 
@@ -296,13 +296,13 @@ codeconductor/
 
 ## Roadmap
 
-| Version    | Focus                                                              |
-| ---------- | ------------------------------------------------------------------ |
-| **v0.2.0** | **CLI: init, detect, install, doctor, update — shipped** ✅        |
-| v0.3.0     | Next.js, FastAPI, generic presets, monorepo support                |
-| v0.4.0     | Provider compatibility matrix and target sync workflows            |
-| v0.5.0     | Scorecard CLI, task outcome tracking, prompt regression            |
-| v1.0.0     | Stable contracts, stable routing, documented evaluation            |
+| Version    | Focus                                                       |
+| ---------- | ----------------------------------------------------------- |
+| **v0.2.0** | **CLI: init, detect, install, doctor, update — shipped** ✅ |
+| v0.3.0     | Next.js, FastAPI, generic presets, monorepo support         |
+| v0.4.0     | Provider compatibility matrix and target sync workflows     |
+| v0.5.0     | Scorecard CLI, task outcome tracking, prompt regression     |
+| v1.0.0     | Stable contracts, stable routing, documented evaluation     |
 
 See [ROADMAP.md](ROADMAP.md) for details.
 

package/dist/index.js

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 import { createRequire } from "node:module";
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -7214,15 +7215,35 @@ async function detectProject(rootDir) {
     signals.push(...astroSignals);
     frameworks.push("astro");
   }
+  const uniqueSignals = [...new Set(signals)];
   return {
     rootDir,
     languages: [...new Set(languages)],
     runtimes: [...new Set(runtimes)],
     packageManagers: [...new Set(packageManagers)],
     frameworks: [...new Set(frameworks)],
-    signals: [...new Set(signals)]
+    signals: uniqueSignals,
+    confidence: calculateConfidence({
+      signals: uniqueSignals,
+      runtimes: [...new Set(runtimes)],
+      frameworks: [...new Set(frameworks)]
+    })
   };
 }
+function calculateConfidence(profile) {
+  if (profile.signals.length === 0) {
+    return "low";
+  }
+  const hasFramework = profile.frameworks.length > 0;
+  const hasRuntime = profile.runtimes.length > 0;
+  if (hasFramework && profile.signals.length >= 2 || hasRuntime && profile.signals.length >= 3) {
+    return "high";
+  }
+  if (hasFramework || profile.signals.length >= 2 || hasRuntime) {
+    return "medium";
+  }
+  return "low";
+}
 async function detectNode(rootDir) {
   const { fileExists: fileExists2 } = await Promise.resolve().then(() => (init_safety(), exports_safety));
   const signals = [];
@@ -7285,6 +7306,57 @@ var SRC_PRESETS_DIR = resolve2(PACKAGE_ROOT, "src", "presets");
 var ROOT_PRESETS_DIR = resolve2(PACKAGE_ROOT, "presets");
 var POLICY_PATH = resolve2(PACKAGE_ROOT, "policy.yml");
 
+// src/core/presets/preset-resolver.ts
+var CURRENT_PRESET_VERSION = "v0.2.0";
+function resolvePreset(target, profile) {
+  const stack = resolveStack(profile);
+  const architecture = profile.signals.length > 0 ? "single-project" : "unknown";
+  const warnings = [];
+  if (profile.confidence === "low") {
+    warnings.push("Detection confidence is low; review the selected preset before applying it.");
+  }
+  if (stack === "unknown") {
+    warnings.push("No supported stack was detected; using the generic CodeConductor workflow preset.");
+  } else {
+    warnings.push(`${stack} projects currently receive the generic ${target} workflow plus matching skills; stack-specific asset pruning is not implemented yet.`);
+  }
+  if (architecture === "unknown") {
+    warnings.push("Project architecture could not be inferred from available signals.");
+  }
+  return {
+    target,
+    stack,
+    architecture,
+    confidence: profile.confidence,
+    presetVersion: CURRENT_PRESET_VERSION,
+    assets: resolveAssets(target),
+    warnings
+  };
+}
+function resolveStack(profile) {
+  if (profile.frameworks.includes("spring"))
+    return "spring";
+  if (profile.frameworks.includes("django"))
+    return "django";
+  if (profile.frameworks.includes("astro"))
+    return "astro";
+  if (profile.runtimes.includes("bun"))
+    return "bun";
+  if (profile.runtimes.includes("node"))
+    return "node";
+  return "unknown";
+}
+function resolveAssets(target) {
+  switch (target) {
+    case "opencode":
+      return ["opencode.jsonc", "agents", "commands", "prompts/v0.2.0", "skills"];
+    case "claude":
+      return ["CLAUDE.md", "settings.json", "commands", "skills", "agents", "prompts/v0.2.0"];
+    case "codex":
+      return ["AGENTS.md", "skills", "prompts/v0.2.0"];
+  }
+}
+
 // src/commands/init.command.ts
 async function initCommand(options) {
   const { projectRoot, dryRun, force, global: isGlobal, output } = options;
@@ -7323,6 +7395,7 @@ async function initCommand(options) {
         overwrite: force
       }
     };
+    const presetResolution = profile ? resolvePreset("opencode", profile) : null;
     const wouldCreate = [".codeconductor/config.yml"];
     const presetsToCopy = await resolvePresetsToCopy();
     for (const p of presetsToCopy) {
@@ -7340,8 +7413,11 @@ async function initCommand(options) {
             detected: {
               languages: profile.languages,
               runtimes: profile.runtimes,
-              frameworks: profile.frameworks
-            }
+              frameworks: profile.frameworks,
+              signals: profile.signals,
+              confidence: profile.confidence
+            },
+            presetResolution
           } : { global: true }
         }
       };
@@ -7368,8 +7444,11 @@ async function initCommand(options) {
           detected: {
             languages: profile.languages,
             runtimes: profile.runtimes,
-            frameworks: profile.frameworks
-          }
+            frameworks: profile.frameworks,
+            signals: profile.signals,
+            confidence: profile.confidence
+          },
+          presetResolution
         } : { global: true }
       }
     };
@@ -7453,7 +7532,8 @@ async function detectCommand(options) {
           runtimes: profile.runtimes,
           packageManagers: profile.packageManagers,
           frameworks: profile.frameworks,
-          signals: profile.signals
+          signals: profile.signals,
+          confidence: profile.confidence
         },
         recommendedPresets: getRecommendedPresets(profile)
       }
@@ -11485,7 +11565,8 @@ var ProjectProfileSchema = exports_external.object({
   runtimes: exports_external.array(exports_external.string()),
   packageManagers: exports_external.array(exports_external.string()),
   frameworks: exports_external.array(exports_external.string()),
-  signals: exports_external.array(exports_external.string())
+  signals: exports_external.array(exports_external.string()),
+  confidence: exports_external.enum(["low", "medium", "high"])
 });
 var CodeConductorConfigSchema = exports_external.object({
   version: exports_external.string(),
@@ -11509,7 +11590,7 @@ var CodeConductorConfigSchema = exports_external.object({
   })
 });
 var RunnerTargetSchema = exports_external.enum(["opencode", "claude", "codex", "all"]);
-var InstallStrategySchema = exports_external.enum(["overwrite", "append", "merge-json", "skip"]);
+var InstallStrategySchema = exports_external.enum(["overwrite", "append", "merge-json", "merge-managed", "skip"]);
 var ManifestEntrySchema = exports_external.object({
   src: exports_external.string(),
   dest: exports_external.string(),
@@ -11588,6 +11669,43 @@ async function loadModelConfig(target) {
 // src/core/presets/file-copier.ts
 import { readFile as readFile4, writeFile as writeFile3, mkdir as mkdir3, readdir, stat } from "node:fs/promises";
 import { resolve as resolve5, join as join2, relative, dirname as dirname2 } from "node:path";
+
+// src/core/filesystem/safe-merger.ts
+var MANAGED_BEGIN_MARKER = "<!-- CODECONDUCTOR:BEGIN managed -->";
+var MANAGED_END_MARKER = "<!-- CODECONDUCTOR:END managed -->";
+function mergeManagedBlock(existing, incoming) {
+  validateMarkers(incoming, "incoming content");
+  if (!existing) {
+    return { content: incoming, action: "written" };
+  }
+  validateMarkers(existing, "existing content");
+  const existingBlock = getManagedBlockRange(existing);
+  const incomingBlock = getManagedBlockRange(incoming);
+  return {
+    content: existing.slice(0, existingBlock.start) + incoming.slice(incomingBlock.start, incomingBlock.end) + existing.slice(existingBlock.end),
+    action: "merged"
+  };
+}
+function validateMarkers(content, label) {
+  const beginCount = countOccurrences(content, MANAGED_BEGIN_MARKER);
+  const endCount = countOccurrences(content, MANAGED_END_MARKER);
+  if (beginCount !== 1 || endCount !== 1) {
+    throw new Error(`${label} must contain exactly one managed begin marker and one managed end marker`);
+  }
+  if (content.indexOf(MANAGED_BEGIN_MARKER) > content.indexOf(MANAGED_END_MARKER)) {
+    throw new Error(`${label} has managed markers in the wrong order`);
+  }
+}
+function getManagedBlockRange(content) {
+  const start = content.indexOf(MANAGED_BEGIN_MARKER);
+  const end = content.indexOf(MANAGED_END_MARKER) + MANAGED_END_MARKER.length;
+  return { start, end };
+}
+function countOccurrences(content, needle) {
+  return content.split(needle).length - 1;
+}
+
+// src/core/presets/file-copier.ts
 async function listFilesRecursive(dir, base = dir) {
   const entries = await readdir(dir, { withFileTypes: true });
   const files = [];
@@ -11673,7 +11791,8 @@ async function applySingleFile(srcPath, destPath, strategy, force, dryRun, isTem
   } catch (e) {
     return { src: srcPath, dest: destPath, action: "error", error: `Cannot read source: ${e}` };
   }
-  let finalContent = content;
+  const incomingContent = isTemplate && modelConfig ? renderTemplate(content, modelConfig, srcPath) : content;
+  let finalContent = incomingContent;
   let action = "written";
   if (strategy === "append" && !force) {
     let existing = "";
@@ -11685,7 +11804,7 @@ async function applySingleFile(srcPath, destPath, strategy, force, dryRun, isTem
 
 ---
 
-` + content;
+` + incomingContent;
     }
     action = "appended";
   } else if (strategy === "merge-json" && !force) {
@@ -11694,15 +11813,24 @@ async function applySingleFile(srcPath, destPath, strategy, force, dryRun, isTem
       existing = JSON.parse(await readFile4(destPath, "utf-8"));
     } catch {}
     try {
-      const incoming = JSON.parse(content);
+      const incoming = JSON.parse(incomingContent);
       finalContent = JSON.stringify(mergeDeep(existing, incoming), null, 2);
     } catch (e) {
       return { src: srcPath, dest: destPath, action: "error", error: `JSON merge failed: ${e}` };
     }
     action = "merged";
-  }
-  if (isTemplate && modelConfig) {
-    finalContent = renderTemplate(finalContent, modelConfig, srcPath);
+  } else if (strategy === "merge-managed") {
+    let existing = null;
+    try {
+      existing = await readFile4(destPath, "utf-8");
+    } catch {}
+    try {
+      const merged = mergeManagedBlock(existing, incomingContent);
+      finalContent = merged.content;
+      action = merged.action;
+    } catch (e) {
+      return { src: srcPath, dest: destPath, action: "error", error: `Managed merge failed: ${e}` };
+    }
   }
   if (dryRun) {
     return { src: srcPath, dest: destPath, action, dryRun: true };
@@ -12185,6 +12313,8 @@ async function installPresetCommand(options) {
   try {
     const runnerTarget = parseRunnerTarget(target);
     const targets = getIndividualTargets(runnerTarget);
+    const profile = await detectProject(projectRoot);
+    const presetResolution = targets.map((t) => resolvePreset(t, profile));
     const allFileResults = [];
     for (const t of targets) {
       const manifest = await loadManifest(t);
@@ -12204,6 +12334,7 @@ async function installPresetCommand(options) {
         targets,
         global: isGlobal,
         dryRun,
+        presetResolution,
         fileResults: allFileResults
       }
     };
@@ -12256,6 +12387,32 @@ async function configExists(projectRoot) {
   }
 }
 
+// src/core/security/target-compatibility.ts
+import { readFile as readFile6 } from "node:fs/promises";
+async function loadTargetSecurityCompatibility() {
+  const policy = $parse(await readFile6(POLICY_PATH, "utf-8"));
+  const targets = ["opencode", "claude", "codex"];
+  return targets.map((target) => {
+    const policyTarget = policy.targets?.[target];
+    if (!policyTarget) {
+      return {
+        target,
+        status: "fail",
+        unsupportedRules: [],
+        warnings: [`No security compatibility policy found for ${target}.`]
+      };
+    }
+    const unsupportedRules = policyTarget.unsupportedRules ?? [];
+    const warnings = policyTarget.warnings ?? [];
+    return {
+      target,
+      status: unsupportedRules.length > 0 || warnings.length > 0 ? "warn" : "pass",
+      unsupportedRules,
+      warnings
+    };
+  });
+}
+
 // src/commands/doctor.command.ts
 async function doctorCommand(options) {
   const { projectRoot, output } = options;
@@ -12331,6 +12488,14 @@ async function doctorCommand(options) {
         message: `Council preset enabled (v${config.presets.council.version})`
       });
     }
+    const securityCompatibility = await loadTargetSecurityCompatibility();
+    for (const compatibility of securityCompatibility) {
+      checks.push({
+        name: `security-${compatibility.target}`,
+        status: compatibility.status,
+        message: compatibility.status === "pass" ? `${compatibility.target} can represent the canonical policy model` : `${compatibility.target} cannot enforce: ${compatibility.unsupportedRules.join(", ") || "see warnings"}`
+      });
+    }
     const failedCount = checks.filter((c) => c.status === "fail").length;
     if (failedCount > 0) {
       return {
@@ -12347,7 +12512,8 @@ async function doctorCommand(options) {
       data: {
         success: true,
         command: "doctor",
-        checks
+        checks,
+        securityCompatibility
       }
     };
   } catch (error) {
@@ -12486,11 +12652,65 @@ async function updateCommand(options) {
     };
   }
 }
+// package.json
+var package_default = {
+  name: "cc-codeconductor",
+  version: "0.2.3",
+  description: "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
+  keywords: [
+    "ai",
+    "agents",
+    "orchestration",
+    "workflow",
+    "opencode",
+    "claude",
+    "codex"
+  ],
+  license: "MIT",
+  files: [
+    "dist/index.js",
+    "policy.yml",
+    "presets/",
+    "src/presets/"
+  ],
+  repository: {
+    type: "git",
+    url: "https://github.com/lgzarturo/codeconductor"
+  },
+  engines: {
+    node: ">=20.11"
+  },
+  type: "module",
+  bin: {
+    codeconductor: "./dist/index.js"
+  },
+  scripts: {
+    dev: "bun run src/cli/main.ts",
+    build: "bun build src/cli/main.ts --target=node --outfile=dist/index.js",
+    test: "bun test",
+    typecheck: "tsc --noEmit",
+    "check:prompt-changelog": "bun run scripts/check-prompt-changelog.ts",
+    "release:patch": "bash release.sh patch",
+    "release:minor": "bash release.sh minor",
+    "release:major": "bash release.sh major",
+    "release:notes": "git-cliff --config .cliff.toml --output CHANGELOG.md",
+    release: "bash release.sh"
+  },
+  dependencies: {
+    zod: "^3.23.8",
+    yaml: "^2.4.5"
+  },
+  devDependencies: {
+    "@types/bun": "^1.1.8",
+    typescript: "^5.5.3"
+  }
+};
 
 // src/cli/router.ts
 function parseArgs(args) {
   const flags = {
     help: false,
+    version: false,
     dryRun: false,
     force: false,
     output: "human"
@@ -12500,6 +12720,8 @@ function parseArgs(args) {
   for (const arg of args) {
     if (arg === "--help" || arg === "-h") {
       flags.help = true;
+    } else if (arg === "--version" || arg === "-v") {
+      flags.version = true;
     } else if (arg === "--dry-run") {
       flags.dryRun = true;
     } else if (arg === "--force") {
@@ -12542,8 +12764,11 @@ function parseArgs(args) {
   }
   return { command, subcommand, options, flags };
 }
+function getVersion() {
+  return `${package_default.name} v${package_default.version}`;
+}
 function getHelp() {
-  return `CodeConductor CLI v0.2.0
+  return `CodeConductor CLI v${package_default.version}
 
 Usage: codeconductor <command> [options]
 
@@ -12557,6 +12782,7 @@ Commands:
 
 Options:
   --help, -h             Show this help message
+  --version, -v          Show package version
   --dry-run              Show what would happen without writing files
   --force                Allow overwriting existing files
   --global               Install to home directory (~/.claude, ~/.opencode, etc.)
@@ -12653,6 +12879,10 @@ async function routeCommand(args, projectRoot) {
 // src/cli/main.ts
 async function runCli(args) {
   const parsed = parseArgs(args.slice(2));
+  if (parsed.flags.version) {
+    console.log(getVersion());
+    process.exit(0);
+  }
   if (parsed.flags.help || !parsed.command || parsed.command === "help") {
     console.log(getHelp());
     process.exit(0);
@@ -12713,8 +12943,10 @@ ${count} files processed${errCount > 0 ? `, ${errCount} errors` : ""}${note}`);
             console.log("Detected:");
             const detected = data.detected;
             Object.entries(detected).forEach(([key, value]) => {
-              if (value.length > 0) {
+              if (Array.isArray(value) && value.length > 0) {
                 console.log(`  - ${key}: ${value.join(", ")}`);
+              } else if (typeof value === "string" && value.length > 0) {
+                console.log(`  - ${key}: ${value}`);
               }
             });
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-codeconductor",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "description": "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
   "keywords": [
     "ai",
@@ -34,6 +34,7 @@
     "build": "bun build src/cli/main.ts --target=node --outfile=dist/index.js",
     "test": "bun test",
     "typecheck": "tsc --noEmit",
+    "check:prompt-changelog": "bun run scripts/check-prompt-changelog.ts",
     "release:patch": "bash release.sh patch",
     "release:minor": "bash release.sh minor",
     "release:major": "bash release.sh major",

package/presets/claude/commands/cc/api-contract.md

@@ -0,0 +1,58 @@
+---
+description: >-
+  [cc: alias] Run the API contract workflow for public interface changes,
+  compatibility constraints, contract tests, documentation, and review.
+---
+
+# API Contract Workflow
+
+API contract request: $ARGUMENTS
+
+## Step 1 — Task Card validation (Task Coach role)
+
+Adopt the **Task Coach** role as defined in `CLAUDE.md`.
+
+The Task Card must classify the task as high risk by default and include the
+affected public interface, request/response examples, compatibility notes,
+versioning impact, consumer impact, contract tests, and docs acceptance
+criteria.
+
+**STOP here. Show the completed Task Card and wait for human confirmation.**
+
+---
+
+## Step 2 — Technical Plan (Architect role)
+
+Adopt the **Architect** role as defined in `CLAUDE.md`.
+
+Define the API contract, validation strategy, compatibility behavior, docs or
+OpenAPI changes, and reviewer blocking conditions.
+
+**STOP here. Show the Technical Plan and wait for explicit human approval.**
+
+---
+
+## Step 3 — Implementation (Implementer role)
+
+Adopt the **Implementer** role as defined in `CLAUDE.md`.
+
+Apply the minimal diff, preserve compatible behavior unless explicitly approved
+as breaking, and update only the planned files.
+
+---
+
+## Step 4 — Contract Tests (Tester role)
+
+Adopt the **Tester** role as defined in `CLAUDE.md`.
+
+Add or update tests for request shape, response shape, status/error behavior,
+and backward compatibility.
+
+---
+
+## Step 5 — Review (Reviewer role)
+
+Adopt the **Reviewer** role as defined in `CLAUDE.md`.
+
+Block on missing contract tests, undocumented breaking changes, or docs/OpenAPI
+drift.

package/presets/claude/commands/cc/db-migration.md

@@ -0,0 +1,58 @@
+---
+description: >-
+  [cc: alias] Run the database migration workflow for schema/data changes,
+  operational sequencing, tests, and review.
+---
+
+# Database Migration Workflow
+
+Migration request: $ARGUMENTS
+
+## Step 1 — Task Card validation (Task Coach role)
+
+Adopt the **Task Coach** role as defined in `CLAUDE.md`.
+
+The Task Card must classify the task as high risk and include affected schema,
+model, and migration files; data backfill needs; deployment ordering;
+rollback/forward-fix strategy; lock risk; data risk; and verification commands.
+
+**STOP here. Show the completed Task Card and wait for human confirmation.**
+
+---
+
+## Step 2 — Migration Plan (Architect role)
+
+Adopt the **Architect** role as defined in `CLAUDE.md`.
+
+Define the schema/data plan, operational sequencing, compatibility strategy,
+rollback/forward-fix notes, and test approach.
+
+**STOP here. Show the Technical Plan and wait for explicit human approval.**
+
+---
+
+## Step 3 — Implementation (Implementer role)
+
+Adopt the **Implementer** role as defined in `CLAUDE.md`.
+
+Keep model and migration changes together, avoid unrelated refactors, and
+preserve the deployment order specified by architect.
+
+---
+
+## Step 4 — Migration Tests (Tester role)
+
+Adopt the **Tester** role as defined in `CLAUDE.md`.
+
+Cover migration-sensitive behavior where the stack supports it, including
+existing-data edge cases and rollback/forward-fix notes when automated rollback
+tests are not practical.
+
+---
+
+## Step 5 — Review (Reviewer role)
+
+Adopt the **Reviewer** role as defined in `CLAUDE.md`.
+
+Block on missing migration tests, missing data-risk notes, undocumented
+deployment sequencing, or model/migration drift.

package/presets/codex/AGENTS.md

@@ -1,3 +1,5 @@
+<!-- CODECONDUCTOR:BEGIN managed -->
+
 # CodeConductor — Codex Preset
 
 This file configures CodeConductor for **OpenAI Codex CLI**. Place it at your
@@ -37,6 +39,8 @@ language patterns to activate each workflow:
 | Full feature | "Run the feature workflow for: [description]"     |
 | Bug fix      | "Run the fix workflow for: [description]"         |
 | Refactor     | "Run the refactor workflow for: [scope]"          |
+| API contract | "Run the API contract workflow for: [change]"     |
+| DB migration | "Run the database migration workflow for: [scope]" |
 | Code review  | "Run a structured review of: [target]"            |
 | Test plan    | "Create a test plan for: [scope]"                 |
 | Task intake  | "Help me define a Task Card for: [vague request]" |
@@ -881,3 +885,5 @@ Contract version:** v0.1.0 **Date:** [YYYY-MM-DD] **Evaluator:** [human name or
 - If the task type differs from the previous one, execute "/clear" before
   starting.
 - Delegate verbose operations to sub-agents.
+
+<!-- CODECONDUCTOR:END managed -->

package/presets/codex/README.md

@@ -70,6 +70,8 @@ language trigger phrases:
 | Full feature | `Run the feature workflow for: [description]`     |
 | Bug fix      | `Run the fix workflow for: [description]`         |
 | Refactor     | `Run the refactor workflow for: [scope]`          |
+| API contract | `Run the API contract workflow for: [change]`     |
+| DB migration | `Run the database migration workflow for: [scope]` |
 | Code review  | `Run a structured review of: [target]`            |
 | Test plan    | `Create a test plan for: [scope]`                 |
 | Task intake  | `Help me define a Task Card for: [vague request]` |

package/presets/opencode/commands/cc-api-contract.md

@@ -0,0 +1,70 @@
+---
+description:
+  Run the API contract workflow for request/response shape changes,
+  compatibility constraints, contract tests, documentation, and review.
+---
+
+# API Contract Workflow
+
+API contract request: $ARGUMENTS
+
+## Step 1 — Task Card validation (task-coach)
+
+Invoke `task-coach` with the request above.
+
+The Task Card must classify the task as `feature` or `refactor` with `high`
+risk unless the human provides a narrower validated risk. It must include:
+
+- affected endpoint, command, or public interface
+- request and response examples
+- backward compatibility and versioning impact
+- consumers that must remain compatible
+- contract tests and documentation acceptance criteria
+
+**STOP here. Show the Task Card and wait for human confirmation.**
+
+---
+
+## Step 2 — Technical Plan (architect)
+
+Invoke `architect` with the approved Task Card.
+
+architect must define the API contract, compatibility strategy, validation
+rules, docs/OpenAPI impact, and migration path for consumers.
+
+**STOP here. Show the Technical Plan and wait for explicit human approval.**
+
+---
+
+## Step 3 — Implementation (implementer)
+
+Invoke `implementer` with the approved plan.
+
+implementer must apply the minimal diff, preserve compatible behavior unless a
+breaking change was explicitly approved, and update only the files named in the
+plan.
+
+---
+
+## Step 4 — Contract tests (tester)
+
+Invoke `tester`.
+
+tester must add or update contract tests covering request shape, response shape,
+status/error behavior, and backward compatibility constraints.
+
+---
+
+## Step 5 — Review (reviewer)
+
+Invoke `reviewer`.
+
+reviewer must block on missing contract tests, undocumented breaking changes,
+or docs/OpenAPI drift.
+
+---
+
+## Completion
+
+Report the final Task Card, Technical Plan, implementation summary, test report,
+review report, docs updated, compatibility impact, and residual risks.

package/presets/opencode/commands/cc-db-migration.md

@@ -0,0 +1,69 @@
+---
+description:
+  Run the database migration workflow for schema/data changes, operational
+  sequencing, tests, and review.
+---
+
+# Database Migration Workflow
+
+Migration request: $ARGUMENTS
+
+## Step 1 — Task Card validation (task-coach)
+
+Invoke `task-coach` with the request above.
+
+The Task Card must classify the task as `high` risk and include:
+
+- tables, collections, models, or migration files in scope
+- data backfill or data cleanup requirements
+- deployment ordering and compatibility window
+- rollback or forward-fix strategy
+- lock risk, data risk, and verification commands
+
+**STOP here. Show the Task Card and wait for human confirmation.**
+
+---
+
+## Step 2 — Migration Plan (architect)
+
+Invoke `architect` with the approved Task Card.
+
+architect must define the schema/data plan, operational sequencing,
+compatibility strategy, rollback/forward-fix notes, and test approach.
+
+**STOP here. Show the Technical Plan and wait for explicit human approval.**
+
+---
+
+## Step 3 — Implementation (implementer)
+
+Invoke `implementer` with the approved plan.
+
+implementer must keep model and migration changes together, avoid unrelated
+refactors, and preserve the deployment order specified by architect.
+
+---
+
+## Step 4 — Migration tests (tester)
+
+Invoke `tester`.
+
+tester must cover migration-sensitive behavior where the stack supports it,
+including happy path, existing-data edge cases, and rollback/forward-fix notes
+when automated rollback tests are not practical.
+
+---
+
+## Step 5 — Review (reviewer)
+
+Invoke `reviewer`.
+
+reviewer must block on missing migration tests, missing data-risk notes,
+undocumented deployment sequencing, or model/migration drift.
+
+---
+
+## Completion
+
+Report migration files changed, model files changed, tests run, lock risk, data
+risk, operational sequencing, rollback/forward-fix notes, and residual risk.

package/presets/opencode/opencode.jsonc

@@ -2,7 +2,7 @@
   // CodeConductor policies are declarative until the policy compiler exists.
   // Enforcement depends on OpenCode permission support.
   "$schema": "https://opencode.ai/config.json",
-  "model": "anthropic/claude-sonnet-4-6",
+  "model": "opencode-go/qwen3.7-max",
   "permission": {
     "*": "ask",
     "read": {
@@ -15,7 +15,7 @@
       "~/.kube/**": "deny",
       "~/.gnupg/**": "deny",
       "~/.npmrc": "deny",
-      "~/.pypirc": "deny",
+      "~/.pypirc": "deny"
     },
     "edit": {
       "*": "ask",
@@ -24,12 +24,12 @@
       ".opencode/**": "deny",
       ".claude/**": "deny",
       "*.env": "deny",
-      "*.env.*": "deny",
+      "*.env.*": "deny"
     },
     "glob": "allow",
     "grep": "allow",
     "external_directory": {
-      "*": "deny",
+      "*": "deny"
     },
     "bash": {
       "*": "ask",
@@ -75,15 +75,15 @@
       "git push --force*": "deny",
       "git push -f*": "deny",
       "git rebase *": "deny",
-      "git reset --hard *": "deny",
+      "git reset --hard *": "deny"
     },
     "webfetch": "ask",
     "websearch": "ask",
     "task": {
-      "*": "ask",
+      "*": "ask"
     },
     "skill": {
-      "*": "ask",
-    },
-  },
+      "*": "ask"
+    }
+  }
 }

package/presets/opencode/prompts/v0.2.0/architect.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-opus-4-7 | Complex architecture, design |
-| OpenCode Go | deepseek-v4-pro | Best — reasoning, technical design |
-| OpenCode Go | mimo-v2.5-pro | Alternative |
+| OpenCode Go | opencode-go/deepseek-v4-pro | Best — reasoning, technical design |
+| OpenCode Go | opencode-go/mimo-v2.5-pro | Alternative |
 ---
 
 # Agent Contract — architect v0.1.0

package/presets/opencode/prompts/v0.2.0/docs.md

@@ -8,8 +8,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-haiku-4-5-20251001 | Fast — documentation |
-| OpenCode Go | qwen-3.6-plus | Best — efficient docs |
-| OpenCode Go | kimi-k2.6 | Alternative |
+| OpenCode Go | opencode-go/qwen-3.6-plus | Best — efficient docs |
+| OpenCode Go | opencode-go/kimi-k2.6 | Alternative |
 ---
 
 # Agent Contract — docs v0.1.0

package/presets/opencode/prompts/v0.2.0/implementer.md

@@ -8,8 +8,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-sonnet-4-6 | Default — code implementation |
-| OpenCode Go | mimo-v2.5-pro | Best — reasoning for code |
-| OpenCode Go | minimax-m2.7 | Alternative |
+| OpenCode Go | opencode-go/mimo-v2.5-pro | Best — reasoning for code |
+| OpenCode Go | opencode-go/minimax-m2.7 | Alternative |
 ---
 
 # Agent Contract — implementer v0.1.0
@@ -41,8 +41,8 @@ If either is missing, escalate to the orchestrator. Do not begin without both.
 Complete this checklist before opening any file for editing:
 
 0. Create a Git Worktree for this session before opening any file for editing:
-   `git worktree add ../<branch>-session <branch>`
-   All changes happen inside this worktree. Never modify the main working tree directly.
+   `git worktree add ../<branch>-session <branch>` All changes happen inside
+   this worktree. Never modify the main working tree directly.
 1. Read the Technical Plan completely.
 2. Read every file listed under "Affected Files and Modules."
 3. Understand the existing patterns in those files: naming, error handling,

package/presets/opencode/prompts/v0.2.0/orchestrator.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-sonnet-4-6 | Default — coordination, routing |
-| OpenCode Go | deepseek-v4-pro | Complex routing, delegation |
-| OpenCode Go | minimax-m2.7 | Alternative |
+| OpenCode Go | opencode-go/deepseek-v4-pro | Complex routing, delegation |
+| OpenCode Go | opencode-go/minimax-m2.7 | Alternative |
 ---
 
 # Agent Contract — orchestrator v0.1.0

package/presets/opencode/prompts/v0.2.0/repo-explorer.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-haiku-4-5-20251001 | Fast — exploration |
-| OpenCode Go | qwen-3.6-plus | Best — quick mapping |
-| OpenCode Go | kimi-k2.6 | Alternative |
+| OpenCode Go | opencode-go/qwen-3.6-plus | Best — quick mapping |
+| OpenCode Go | opencode-go/kimi-k2.6 | Alternative |
 ---
 
 You are the Repo Explorer — the codebase mapping agent in the CodeConductor

package/presets/opencode/prompts/v0.2.0/reviewer.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-sonnet-4-6 | Default — code review |
-| OpenCode Go | qwen-3.6-plus | Best — efficient reviews |
-| OpenCode Go | minimax-m2.7 | Detailed reviews |
+| OpenCode Go | opencode-go/qwen-3.6-plus | Best — efficient reviews |
+| OpenCode Go | opencode-go/minimax-m2.7 | Detailed reviews |
 ---
 
 # Agent Contract — reviewer v0.1.0

package/presets/opencode/prompts/v0.2.0/task-coach.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-haiku-4-5-20251001 | Fast — intake, Q&A |
-| OpenCode Go | qwen-3.6-plus | Best — efficient Q&A |
-| OpenCode Go | kimi-k2.6 | Alternative |
+| OpenCode Go | opencode-go/qwen-3.6-plus | Best — efficient Q&A |
+| OpenCode Go | opencode-go/kimi-k2.6 | Alternative |
 ---
 
 # Agent Contract — task-coach v0.1.0

package/presets/opencode/prompts/v0.2.0/tester.md

@@ -9,8 +9,8 @@ description:
 | Provider | Model | Use Case |
 |----------|-------|----------|
 | Claude | claude-sonnet-4-6 | Default — test generation |
-| OpenCode Go | minimax-m2.7 | Best — balanced reasoning |
-| OpenCode Go | deepseek-v4-pro | Complex test scenarios |
+| OpenCode Go | opencode-go/minimax-m2.7 | Best — balanced reasoning |
+| OpenCode Go | opencode-go/deepseek-v4-pro | Complex test scenarios |
 ---
 
 # Agent Contract — tester v0.1.0

package/src/presets/manifests/claude.yml

@@ -20,4 +20,4 @@ entries:
     template: true
   - src: opencode/prompts/v0.2.0
     dest: .claude/prompts/v0.2.0
-    strategy: overwrite
+    strategy: overwrite

package/src/presets/manifests/codex.yml

@@ -2,11 +2,11 @@ target: codex
 entries:
   - src: codex/AGENTS.md
     dest: .codex/AGENTS.md
-    strategy: overwrite
+    strategy: merge-managed
     template: true
   - src: codex/skills
     dest: .codex/skills
     strategy: overwrite
   - src: opencode/prompts/v0.2.0
     dest: .codex/prompts/v0.2.0
-    strategy: overwrite
+    strategy: overwrite

package/src/presets/models/claude.yml

@@ -5,33 +5,33 @@ target: claude
 agents:
   architect:
     claude: claude-opus-4-7
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.5
   implementer:
     claude: claude-sonnet-4-6
-    opencode: mimo-v2.5-pro
+    opencode: opencode-go/mimo-v2.5-pro
     codex: gpt-5.3-codex
   tester:
     claude: claude-sonnet-4-6
-    opencode: minimax-m2.7
+    opencode: opencode-go/minimax-m2.7
     codex: gpt-5.3-codex
   orchestrator:
     claude: claude-sonnet-4-6
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.2
   reviewer:
     claude: claude-sonnet-4-6
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4
   docs:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4-mini
   task-coach:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/kimi-k2.6
     codex: gpt-5.4-mini
   repo-explorer:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
-    codex: gpt-5.4-mini
+    opencode: opencode-go/qwen3.5-plus
+    codex: gpt-5.4-mini

package/src/presets/models/codex.yml

@@ -6,33 +6,33 @@ target: codex
 agents:
   architect:
     claude: claude-opus-4-7
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.5
   implementer:
     claude: claude-sonnet-4-6
-    opencode: mimo-v2.5-pro
+    opencode: opencode-go/mimo-v2.5-pro
     codex: gpt-5.3-codex
   tester:
     claude: claude-sonnet-4-6
-    opencode: minimax-m2.7
+    opencode: opencode-go/minimax-m2.7
     codex: gpt-5.3-codex
   orchestrator:
     claude: claude-sonnet-4-6
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.2
   reviewer:
     claude: claude-sonnet-4-6
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4
   docs:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4-mini
   task-coach:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/kimi-k2.6
     codex: gpt-5.4-mini
   repo-explorer:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
-    codex: gpt-5.4-mini
+    opencode: opencode-go/qwen3.5-plus
+    codex: gpt-5.4-mini

package/src/presets/models/opencode.yml

@@ -5,33 +5,33 @@ target: opencode
 agents:
   architect:
     claude: claude-opus-4-7
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.5
   implementer:
     claude: claude-sonnet-4-6
-    opencode: mimo-v2.5-pro
+    opencode: opencode-go/mimo-v2.5-pro
     codex: gpt-5.3-codex
   tester:
     claude: claude-sonnet-4-6
-    opencode: minimax-m2.7
+    opencode: opencode-go/minimax-m2.7
     codex: gpt-5.3-codex
   orchestrator:
     claude: claude-sonnet-4-6
-    opencode: deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4-pro
     codex: gpt-5.2
   reviewer:
     claude: claude-sonnet-4-6
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4
   docs:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/qwen-3.6-plus
     codex: gpt-5.4-mini
   task-coach:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
+    opencode: opencode-go/kimi-k2.6
     codex: gpt-5.4-mini
   repo-explorer:
     claude: claude-haiku-4-5-20251001
-    opencode: qwen-3.6-plus
-    codex: gpt-5.4-mini
+    opencode: opencode-go/qwen3.5-plus
+    codex: gpt-5.4-mini