cc-codeconductor 0.2.1

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "cc-codeconductor",
+  "version": "0.2.1",
+  "description": "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
+  "keywords": [
+    "ai",
+    "agents",
+    "orchestration",
+    "workflow",
+    "opencode",
+    "claude",
+    "codex"
+  ],
+  "license": "MIT",
+  "files": [
+    "dist/index.js",
+    "policy.yml",
+    "presets/",
+    "src/presets/"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lgzarturo/codeconductor"
+  },
+  "engines": {
+    "node": ">=20.11"
+  },
+  "type": "module",
+  "bin": {
+    "codeconductor": "./dist/index.js"
+  },
+  "scripts": {
+    "dev": "bun run src/cli/main.ts",
+    "build": "bun build src/cli/main.ts --target=node --outfile=dist/index.js",
+    "test": "bun test",
+    "typecheck": "tsc --noEmit",
+    "release:patch": "bash release.sh patch",
+    "release:minor": "bash release.sh minor",
+    "release:major": "bash release.sh major",
+    "release:notes": "git-cliff --config .cliff.toml --output CHANGELOG.md",
+    "release": "bash release.sh"
+  },
+  "dependencies": {
+    "zod": "^3.23.8",
+    "yaml": "^2.4.5"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.1.8",
+    "typescript": "^5.5.3"
+  }
+}

package/policy.yml

@@ -0,0 +1,124 @@
+version: 1
+
+# NOTE:
+# This policy is declarative. Until the CodeConductor policy compiler exists,
+# enforcement depends on the target tool.
+
+runtime:
+  user: cc-agent
+  mode: native
+  cleanEnv: true
+  network:
+    default: deny
+    allowDomains:
+      - google.com
+      - github.com
+      - openai.com
+      - repo.maven.apache.org
+      - registry.npmjs.org
+
+filesystem:
+  workspace: rw
+
+denyRead:
+  - "~/*"
+  - "/Users/*/**"
+  - "/home/*/**"
+  - "**/.env"
+  - "**/.env.*"
+  - "**/secrets/**"
+  - "**/.aws/**"
+  - "**/.kube/**"
+  - "**/.ssh/**"
+  - "**/config/**"
+  - "**/kubeconfig/**"
+  - "**/ssh/**"
+  - "**/.gnupg/**"
+  - "**/.npm/**"
+  - "**/.npmrc"
+  - "**/.pypirc"
+
+denyWrite:
+  - ".git/**"
+  - ".claude/**"
+  - ".opencode/**"
+  - ".codeconductor/**"
+  - ".code-conductor/policy.yml"
+  - "/etc/**"
+  - "/var/**"
+  - "~/**"
+
+targets:
+  opencode:
+    unsupportedRules: []
+    warnings:
+      - "Enforcement depends on OpenCode permission support."
+      - "Command patterns are string-based until the policy compiler exists."
+  claude:
+    unsupportedRules:
+      - "denyRead"
+      - "denyWrite"
+      - "runtime.network.allowDomains"
+    warnings:
+      - "Claude settings primarily represent shell permissions; filesystem and network boundaries depend on Claude Code capabilities and manual isolation."
+  codex:
+    unsupportedRules:
+      - "denyRead"
+      - "denyWrite"
+      - "runtime.network"
+      - "commands"
+    warnings:
+      - "Codex preset currently represents policy intent through AGENTS.md contracts; runtime enforcement depends on Codex capabilities."
+
+commands:
+  allow:
+    - "git status"
+    - "git log"
+    - "git diff"
+    - "./gradlew clean"
+    - "./gradlew build"
+    - "./gradlew test"
+
+  ask:
+    - "git add"
+    - "git commit"
+    - "git push"
+    - "git pull"
+    - "git switch*"
+    - "git checkout*"
+    - "docker compose*"
+
+  deny:
+    - "git push --force"
+    - "git push -f"
+    - "git rebase *"
+    - "git reset --hard *"
+    - "git rm --cached *"
+    - "rm -rf *"
+    - "sudo *"
+    - "chmod 777 *"
+    - "chown *"
+    - "dd *"
+    - "mkfs *"
+    - "mount *"
+    - "umount *"
+    - "launchctl *"
+    - "systemctl *"
+    - "ln -s *"
+    - "symlink *"
+    - "curl * | sh"
+    - "curl * | bash"
+    - "wget * | sh"
+    - "wget * | bash"
+
+git:
+  protectedBranches:
+    - "master"
+    - "main"
+    - "develop"
+
+  deny:
+    - forcePush
+    - pushProtectedBranch
+    - rebaseProtectedBranch
+    - resetProtectedBranch