cc-codeconductor 1.4.2 → 1.5.0

package/dist/index.js

@@ -72,7 +72,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "cc-codeconductor",
-    version: "1.4.2",
+    version: "1.5.0",
     description: "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
     keywords: [
       "ai",
@@ -12989,18 +12989,19 @@ var init_path_containment = __esm(() => {
 });
 
 // src/core/presets/complementary-detector.ts
-import { execFileSync } from "node:child_process";
+import { execFile } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { join as join3 } from "node:path";
 import { homedir } from "node:os";
-function detectComplementaryTools() {
+import { promisify } from "node:util";
+async function detectComplementaryTools() {
   if (cachedStatus) {
     return cachedStatus;
   }
-  const isCmdAvailable = (cmd) => {
+  const isCmdAvailable = async (cmd) => {
     try {
       const binary = process.platform === "win32" ? "where" : "which";
-      execFileSync(binary, [cmd], { stdio: "ignore", timeout: 1000 });
+      await execFileAsync(binary, [cmd], { timeout: 1000 });
       return true;
     } catch {
       return false;
@@ -13029,18 +13030,28 @@ function detectComplementaryTools() {
     } catch {}
     return false;
   };
+  const [rtk, codeReviewGraph, tokenSavior, tokenSaviorRecall, engram, gentleAi] = await Promise.all([
+    isCmdAvailable("rtk"),
+    isCmdAvailable("code-review-graph"),
+    isCmdAvailable("token-savior"),
+    isCmdAvailable("token-savior-recall"),
+    isCmdAvailable("engram"),
+    isCmdAvailable("gentle-ai")
+  ]);
   cachedStatus = {
-    rtk: isCmdAvailable("rtk"),
-    codeReviewGraph: isCmdAvailable("code-review-graph"),
-    tokenSavior: isCmdAvailable("token-savior") || isCmdAvailable("token-savior-recall"),
+    rtk,
+    codeReviewGraph,
+    tokenSavior: tokenSavior || tokenSaviorRecall,
     caveman: hasCaveman(),
-    engram: isCmdAvailable("engram"),
-    gentleAi: isCmdAvailable("gentle-ai")
+    engram,
+    gentleAi
   };
   return cachedStatus;
 }
-var cachedStatus = null;
-var init_complementary_detector = () => {};
+var execFileAsync, cachedStatus = null;
+var init_complementary_detector = __esm(() => {
+  execFileAsync = promisify(execFile);
+});
 
 // src/core/presets/file-copier.ts
 import { lstat as lstat2, readdir, readFile as readFile4, stat } from "node:fs/promises";
@@ -13133,9 +13144,9 @@ function extractAgentRole(filePath) {
   ];
   return knownRoles.includes(name) ? name : null;
 }
-function renderTemplate(content, modelConfig, filePath, locale = "en") {
+async function renderTemplate(content, modelConfig, filePath, locale = "en") {
   const cleanLocale = locale === "es" || locale === "en" ? locale : "en";
-  const tools = detectComplementaryTools();
+  const tools = await detectComplementaryTools();
   let complementaryRules = "";
   if (cleanLocale === "es") {
     if (tools.rtk) {
@@ -13258,7 +13269,7 @@ function substituteToolNames(content, modelConfig) {
   const eol = fmMatch[1];
   const frontmatter = fmMatch[2];
   if (target === "opencode" && modelConfig.permissions) {
-    const updatedFrontmatter2 = frontmatter.replace(/^tools:\s*(.+)\r?\n?/m, "");
+    const updatedFrontmatter2 = frontmatter.replace(/^tools:\s*(.+)\r?\n?/m, "").replace(/^(?:temperature|effort):[^\r\n]*\r?\n?/gm, "");
     return content.replace(fmMatch[0], `---${eol}${updatedFrontmatter2}${eol}---`);
   }
   if (!modelConfig.tools)
@@ -13276,7 +13287,7 @@ function substituteToolNames(content, modelConfig) {
   });
   return content.replace(fmMatch[0], `---${eol}${updatedFrontmatter}${eol}---`);
 }
-function injectMcpServers(jsonString, filePath) {
+async function injectMcpServers(jsonString, filePath) {
   const isAgyMcpConfig = filePath.endsWith("mcp_config.json");
   const isClaudeSettings = filePath.endsWith("settings.json");
   const isOpencodeJsonc = filePath.endsWith("opencode.jsonc") || filePath.endsWith("opencode.json");
@@ -13289,7 +13300,7 @@ function injectMcpServers(jsonString, filePath) {
       cleanJson = jsonString.replace(/\/\*[\s\S]*?\*\/|([^\\:]|^)\/\/.*$/gm, "$1");
     }
     const obj = JSON.parse(cleanJson);
-    const tools = detectComplementaryTools();
+    const tools = await detectComplementaryTools();
     const mcpServers = {};
     if (tools.tokenSavior) {
       mcpServers["token-savior-recall"] = {
@@ -13361,8 +13372,8 @@ async function applySingleFile(srcPath, destPath, strategy, force, dryRun, isTem
   } catch (e) {
     return { src: srcPath, dest: destPath, action: "error", error: `Cannot read source: ${e}` };
   }
-  let incomingContent = isTemplate && modelConfig ? renderTemplate(content, modelConfig, srcPath, locale) : content;
-  incomingContent = injectMcpServers(incomingContent, destPath);
+  let incomingContent = isTemplate && modelConfig ? await renderTemplate(content, modelConfig, srcPath, locale) : content;
+  incomingContent = await injectMcpServers(incomingContent, destPath);
   let finalContent = incomingContent;
   let action = "written";
   if (strategy === "append") {
@@ -14629,7 +14640,7 @@ async function checkUpdates(basePath, isGlobal, includeConflicts = false) {
         let expectedContent;
         try {
           const srcContent = await readFile7(src, "utf-8");
-          expectedContent = isTemplate && modelConfig ? renderTemplate(srcContent, modelConfig, src, locale) : srcContent;
+          expectedContent = isTemplate && modelConfig ? await renderTemplate(srcContent, modelConfig, src, locale) : srcContent;
         } catch {
           continue;
         }
@@ -15091,7 +15102,7 @@ async function doctorCommand(options) {
         message: "No product graph yet. Run `codeconductor ingest` to build product memory."
       });
     }
-    const compTools = detectComplementaryTools();
+    const compTools = await detectComplementaryTools();
     const toolDetails = [
       { name: "rtk", key: "rtk", label: "RTK", desc: "Run `brew install rtk` to compress command outputs" },
       { name: "code-review-graph", key: "codeReviewGraph", label: "code-review-graph", desc: "Run `pipx install code-review-graph` to navigate symbol graph" },
@@ -18373,13 +18384,13 @@ var init_binary_downloader = __esm(() => {
 });
 
 // src/core/lsp/lsp-installer.ts
-import { execFile } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 import { access as access6, mkdir as mkdir6, mkdtemp, rename as rename2, rm, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir8, tmpdir } from "node:os";
 import { join as join9 } from "node:path";
-import { promisify } from "node:util";
+import { promisify as promisify2 } from "node:util";
 async function assertTarArchiveSafe(archivePath, destRoot) {
-  const { stdout } = await execFileAsync("tar", ["-tzf", archivePath], {
+  const { stdout } = await execFileAsync2("tar", ["-tzf", archivePath], {
     timeout: 60000,
     maxBuffer: 10 * 1024 * 1024
   });
@@ -18391,7 +18402,7 @@ async function assertTarArchiveSafe(archivePath, destRoot) {
 }
 async function extractHardenedTar(archivePath, destRoot) {
   await assertTarArchiveSafe(archivePath, destRoot);
-  await execFileAsync("tar", ["-xzf", archivePath, "-C", destRoot, ...TAR_EXTRACT_HARDENING_FLAGS], { timeout: 120000 });
+  await execFileAsync2("tar", ["-xzf", archivePath, "-C", destRoot, ...TAR_EXTRACT_HARDENING_FLAGS], { timeout: 120000 });
 }
 
 class LspInstaller {
@@ -18401,7 +18412,7 @@ class LspInstaller {
   }
   async checkInstalled(def) {
     try {
-      const { stdout } = await execFileAsync("which", [def.binaryName], { timeout: 5000 });
+      const { stdout } = await execFileAsync2("which", [def.binaryName], { timeout: 5000 });
       const path = stdout.trim();
       if (path) {
         const version = await this.getVersion(def);
@@ -18410,7 +18421,7 @@ class LspInstaller {
     } catch {}
     if (def.packageManager === "npm" && def.npmDetect) {
       try {
-        const { stdout } = await execFileAsync("npm", ["list", "-g", def.npmDetect, "--depth=0"], { timeout: 1e4 });
+        const { stdout } = await execFileAsync2("npm", ["list", "-g", def.npmDetect, "--depth=0"], { timeout: 1e4 });
         if (stdout.includes(def.npmDetect)) {
           const version = this.parseVersionFromNpmList(stdout, def.npmDetect);
           return { installed: true, version };
@@ -18419,7 +18430,7 @@ class LspInstaller {
     }
     if (def.packageManager === "pip" && def.pipDetect) {
       try {
-        const { stdout } = await execFileAsync("pip", ["show", def.pipDetect], { timeout: 1e4 });
+        const { stdout } = await execFileAsync2("pip", ["show", def.pipDetect], { timeout: 1e4 });
         if (stdout.includes("Version:")) {
           const version = this.parseVersionFromPipShow(stdout);
           return { installed: true, version };
@@ -18483,7 +18494,7 @@ class LspInstaller {
   }
   async getVersion(def) {
     try {
-      const { stdout } = await execFileAsync(def.binaryName, [def.versionFlag], { timeout: 5000 });
+      const { stdout } = await execFileAsync2(def.binaryName, [def.versionFlag], { timeout: 5000 });
       return stdout.trim().split(`
 `)[0];
     } catch {
@@ -18501,7 +18512,7 @@ class LspInstaller {
   async installNpm(def) {
     assertPinnedPackage(def);
     try {
-      await execFileAsync("npm", ["install", "-g", def.package], { timeout: 120000 });
+      await execFileAsync2("npm", ["install", "-g", def.package], { timeout: 120000 });
     } catch (error) {
       throw new Error(`Failed to install ${def.serverName}: ${error instanceof Error ? error.message : String(error)}`);
     }
@@ -18509,7 +18520,7 @@ class LspInstaller {
   async installPip(def) {
     assertPinnedPackage(def);
     try {
-      await execFileAsync("pip", ["install", "--user", def.package], { timeout: 120000 });
+      await execFileAsync2("pip", ["install", "--user", def.package], { timeout: 120000 });
     } catch (error) {
       throw new Error(`Failed to install ${def.serverName}: ${error instanceof Error ? error.message : String(error)}`);
     }
@@ -18551,7 +18562,7 @@ class LspInstaller {
         await access6(candidate);
         await rename2(candidate, destPath);
       } catch {
-        const { stdout: found } = await execFileAsync("find", [workDir, "-type", "f", "-name", def.binaryName], { timeout: 30000 });
+        const { stdout: found } = await execFileAsync2("find", [workDir, "-type", "f", "-name", def.binaryName], { timeout: 30000 });
         const first = found.split(`
 `).map((l) => l.trim()).find((l) => l.length > 0);
         if (!first) {
@@ -18561,7 +18572,7 @@ class LspInstaller {
         await rename2(first, destPath);
       }
       if (process.platform !== "win32") {
-        await execFileAsync("chmod", ["+x", destPath], { timeout: 5000 });
+        await execFileAsync2("chmod", ["+x", destPath], { timeout: 5000 });
       }
     } finally {
       await rm(workDir, { recursive: true, force: true });
@@ -18571,11 +18582,11 @@ class LspInstaller {
 function createLspInstaller() {
   return new LspInstaller;
 }
-var execFileAsync, TAR_EXTRACT_HARDENING_FLAGS;
+var execFileAsync2, TAR_EXTRACT_HARDENING_FLAGS;
 var init_lsp_installer = __esm(() => {
   init_binary_integrity();
   init_binary_downloader();
-  execFileAsync = promisify(execFile);
+  execFileAsync2 = promisify2(execFile2);
   TAR_EXTRACT_HARDENING_FLAGS = [
     "--no-same-owner",
     "--no-same-permissions"
@@ -20840,13 +20851,13 @@ function slugify(text) {
 
 // src/core/knowledge/source-parsers.ts
 import { readFile as readFile19 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { basename as basename6, join as join15, relative as relative7, sep as sep5 } from "node:path";
 async function parseAdrFile(filePath) {
   try {
     const content = await readFile19(filePath, "utf-8");
-    const basename6 = filePath.split("/").pop() ?? "";
-    const idMatch = basename6.match(/adr-(\d+)/i);
-    const id = idMatch ? `adr-${idMatch[1]}` : slugify(basename6);
+    const base = basename6(filePath);
+    const idMatch = base.match(/adr-(\d+)/i);
+    const id = idMatch ? `adr-${idMatch[1]}` : slugify(base);
     const titleMatch = content.match(/^#\s+ADR-\d+:\s*(.+)$/m);
     const statusMatch = content.match(/\*\*Status:\*\*\s*(\w+)/i);
     const contextSection = extractSection(content, "Context");
@@ -20856,7 +20867,7 @@ async function parseAdrFile(filePath) {
 `).filter((l) => l.trim().startsWith("-") || l.trim().startsWith("*")).map((l) => l.replace(/^[\s*-]+/, "").trim()).filter(Boolean);
     return {
       id,
-      title: titleMatch?.[1]?.trim() ?? basename6,
+      title: titleMatch?.[1]?.trim() ?? base,
       status: statusMatch?.[1]?.toLowerCase() ?? "unknown",
       context: contextSection.trim(),
       decision: decisionSection.trim(),
@@ -20956,7 +20967,7 @@ async function scanSrcComponents(projectRoot) {
             source: "src/",
             confidence: "medium",
             relations: [],
-            data: { path: full.replace(projectRoot + "/", "") }
+            data: { path: relative7(projectRoot, full).split(sep5).join("/") }
           });
           await walk(full, prefix ? `${prefix}-${domainSlug}` : domainSlug);
         }
@@ -21017,7 +21028,7 @@ var init_episodic_store = __esm(() => {
 // src/core/knowledge/ingest-pipeline.ts
 import { createHash as createHash3 } from "node:crypto";
 import { readFile as readFile21 } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { join as join16, relative as relative8, sep as sep6 } from "node:path";
 import { mkdir as mkdir13, writeFile as writeFile12 } from "node:fs/promises";
 async function mapLimit(items, limit, fn) {
   if (items.length === 0)
@@ -21066,7 +21077,7 @@ async function collectDeferRisks(projectRoot) {
   const perFile = await mapLimit(files, WALK_READ_CONCURRENCY, async (full) => {
     const entities = [];
     const content = await readFile21(full, "utf-8");
-    const rel = full.replace(projectRoot + "/", "");
+    const rel = relative8(projectRoot, full).split(sep6).join("/");
     const deferRe = new RegExp(DEFER_REGEX_SOURCE, "gm");
     let match;
     while ((match = deferRe.exec(content)) !== null) {
@@ -22265,21 +22276,21 @@ __export(exports_rdd_receipt, {
 });
 import { createHash as createHash4 } from "node:crypto";
 import { readdir as readdir7, readFile as readFile27 } from "node:fs/promises";
-import { join as join18, relative as relative7, resolve as resolve26, sep as sep5 } from "node:path";
+import { join as join18, relative as relative9, resolve as resolve26, sep as sep7 } from "node:path";
 function sha2562(content) {
   return createHash4("sha256").update(content).digest("hex");
 }
 function canonicalPath(projectRoot, input) {
   const root = resolve26(projectRoot);
   const absolute = resolve26(root, input);
-  if (absolute !== root && !absolute.startsWith(`${root}${sep5}`)) {
+  if (absolute !== root && !absolute.startsWith(`${root}${sep7}`)) {
     throw new Error(`RDD receipt path "${input}" is outside the project root`);
   }
-  const normalized = relative7(root, absolute);
+  const normalized = relative9(root, absolute);
   if (!normalized || normalized === ".") {
     throw new Error("RDD receipts require file paths, not the project root");
   }
-  return { absolute, relative: normalized.split(sep5).join("/") };
+  return { absolute, relative: normalized.split(sep7).join("/") };
 }
 async function fingerprint(projectRoot, paths) {
   const deduplicated = new Map;
@@ -22334,7 +22345,7 @@ async function collectReceiptPaths(projectRoot) {
         continue;
       }
       if (entry.isFile())
-        paths.push(relative7(root, join18(current, entry.name)).split(sep5).join("/"));
+        paths.push(relative9(root, join18(current, entry.name)).split(sep7).join("/"));
     }
   }
   await visit2(root);
@@ -23037,8 +23048,8 @@ var init_loop_state = __esm(() => {
 });
 
 // src/core/loop/git-stats.ts
-import { execFile as execFile2 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
 function countPorcelain(output) {
   return output.split(`
 `).filter((line) => line.trim().length > 0).length;
@@ -23062,12 +23073,12 @@ function countNumstat(output) {
 async function fetchGitChangeStats(cwd) {
   try {
     const [status, diff] = await Promise.all([
-      execFileAsync2("git", ["status", "--porcelain"], {
+      execFileAsync3("git", ["status", "--porcelain"], {
         cwd,
         encoding: "utf-8",
         timeout: 15000
       }),
-      execFileAsync2("git", ["diff", "--numstat"], {
+      execFileAsync3("git", ["diff", "--numstat"], {
         cwd,
         encoding: "utf-8",
         timeout: 15000
@@ -23091,9 +23102,9 @@ async function readGitChangeStats(cwd, options) {
   cache = { cwd, at: now, stats };
   return stats;
 }
-var execFileAsync2, GIT_STATS_CACHE_TTL_MS = 3000, cache;
+var execFileAsync3, GIT_STATS_CACHE_TTL_MS = 3000, cache;
 var init_git_stats = __esm(() => {
-  execFileAsync2 = promisify2(execFile2);
+  execFileAsync3 = promisify3(execFile3);
 });
 
 // src/core/loop/loop-engine.ts
@@ -23826,11 +23837,11 @@ __export(exports_rdd_command, {
   rddCommand: () => rddCommand,
   rddStatus: () => rddStatus
 });
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { existsSync as existsSync4 } from "node:fs";
 import { mkdir as mkdir19, readFile as readFile29, readdir as readdir9, rename as rename3, writeFile as writeFile19, chmod } from "node:fs/promises";
 import { dirname as dirname11, resolve as resolve28 } from "node:path";
-import { promisify as promisify3 } from "node:util";
+import { promisify as promisify4 } from "node:util";
 function receiptPath(projectRoot, id) {
   const directory = resolve28(evidenceDir(projectRoot));
   const path = resolve28(directory, `${id.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
@@ -23877,7 +23888,7 @@ async function rddStatus(projectRoot, taskId) {
   return receipts.sort((left, right) => right.timestamp.localeCompare(left.timestamp));
 }
 async function installHooks(projectRoot) {
-  const { stdout } = await execFileAsync3("git", ["rev-parse", "--git-path", "hooks"], {
+  const { stdout } = await execFileAsync4("git", ["rev-parse", "--git-path", "hooks"], {
     cwd: projectRoot,
     encoding: "utf8"
   });
@@ -23969,12 +23980,12 @@ async function rddCommand(options) {
     return { code: 1, data: { success: false, errors: [error instanceof Error ? error.message : String(error)] } };
   }
 }
-var execFileAsync3;
+var execFileAsync4;
 var init_rdd_command = __esm(() => {
   init_schemas();
   init_paths();
   init_rdd_receipt();
-  execFileAsync3 = promisify3(execFile3);
+  execFileAsync4 = promisify4(execFile4);
 });
 
 // src/core/ccep/confirmation-gate.ts
@@ -24283,7 +24294,7 @@ var init_output_validator = __esm(() => {
 
 // src/core/ccep/command-parser.ts
 import { existsSync as existsSync5, readFileSync as readFileSync3 } from "node:fs";
-import { join as join20 } from "node:path";
+import { basename as basename7, join as join20 } from "node:path";
 function readProjectId(projectRoot) {
   const packageJsonPath = join20(projectRoot, "package.json");
   if (existsSync5(packageJsonPath)) {
@@ -24294,7 +24305,7 @@ function readProjectId(projectRoot) {
       }
     } catch {}
   }
-  return projectRoot.split("/").pop() ?? "unknown";
+  return basename7(projectRoot) || "unknown";
 }
 function parseCommand(command, userRequest, projectRoot) {
   const validatedCommand = WorkflowCommandSchema.parse(command);
@@ -25969,7 +25980,7 @@ var init_backlog_validator = __esm(() => {
 });
 
 // src/core/openspec/backlog-scanner.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync } from "node:child_process";
 import { readFile as readFile33 } from "node:fs/promises";
 import { resolve as resolve31 } from "node:path";
 function itemSnapshot(items) {
@@ -25986,7 +25997,7 @@ async function scanBacklog(projectRoot, previousSnapshot = {}) {
     const hash = hashContent(content);
     let fileChanged = true;
     try {
-      const diff = execFileSync2("git", ["diff", "--name-only", "--", BACKLOG_FILENAME], {
+      const diff = execFileSync("git", ["diff", "--name-only", "--", BACKLOG_FILENAME], {
         cwd: projectRoot,
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -26220,7 +26231,7 @@ var init_backlog_planner = __esm(() => {
 
 // src/core/openspec/openspec-generator.ts
 import { mkdir as mkdir22, rename as rename5, writeFile as writeFile22 } from "node:fs/promises";
-import { basename as basename6, resolve as resolve32 } from "node:path";
+import { basename as basename8, resolve as resolve32 } from "node:path";
 function pad3(n) {
   return String(n).padStart(3, "0");
 }
@@ -26367,7 +26378,7 @@ capabilities:
 }
 async function archiveChangeFolder(projectRoot, changePath) {
   const src = resolve32(projectRoot, changePath);
-  const slug = basename6(changePath);
+  const slug = basename8(changePath);
   const destDir = resolve32(projectRoot, "openspec", "changes", "archive");
   await mkdir22(destDir, { recursive: true });
   const dest = resolve32(destDir, slug);
@@ -26393,7 +26404,7 @@ var init_openspec_generator = __esm(() => {
 
 // src/core/openspec/spec-quality.ts
 import { readdir as readdir11, readFile as readFile34 } from "node:fs/promises";
-import { join as join23, relative as relative8, resolve as resolve33 } from "node:path";
+import { join as join23, relative as relative10, resolve as resolve33 } from "node:path";
 function uniqueIds(matches) {
   return [...new Set(matches ?? [])];
 }
@@ -26550,7 +26561,7 @@ async function assessChangeFolder(projectRoot, changePath) {
   const reports = [];
   for (const file of specFiles) {
     const content = await readFile34(file, "utf-8");
-    reports.push(assessSpecMarkdown(content, relative8(root, file).replace(/\\/g, "/")));
+    reports.push(assessSpecMarkdown(content, relative10(root, file).replace(/\\/g, "/")));
   }
   for (const file of extra) {
     let content;
@@ -26559,7 +26570,7 @@ async function assessChangeFolder(projectRoot, changePath) {
     } catch {
       continue;
     }
-    const rel = relative8(root, file).replace(/\\/g, "/");
+    const rel = relative10(root, file).replace(/\\/g, "/");
     if (PLACEHOLDER.test(content)) {
       reports.push({
         valid: false,
@@ -26756,7 +26767,7 @@ var init_spec_analyzer = __esm(() => {
 
 // src/core/openspec/spec-sync.ts
 import { mkdir as mkdir23, readFile as readFile36, readdir as readdir13 } from "node:fs/promises";
-import { join as join25, relative as relative9, resolve as resolve35 } from "node:path";
+import { join as join25, relative as relative11, resolve as resolve35 } from "node:path";
 async function markdownFiles(dir) {
   let entries;
   try {
@@ -26860,17 +26871,17 @@ async function syncChangeSpecs(projectRoot, changePath) {
       return {
         success: false,
         syncedPaths: [],
-        errors: [`${relative9(root, file)}: no delta requirements found`]
+        errors: [`${relative11(root, file)}: no delta requirements found`]
       };
     }
-    const relativeSpec = relative9(changeSpecs, file);
+    const relativeSpec = relative11(changeSpecs, file);
     const target = join25(root, "openspec", "specs", relativeSpec);
     let existing = `# ${relativeSpec.replace(/\\/g, "/")}
 `;
     try {
       existing = await readFile36(target, "utf-8");
     } catch {}
-    const merged = upsertRequirements(existing, requirements, relative9(root, file));
+    const merged = upsertRequirements(existing, requirements, relative11(root, file));
     if (!merged.ok)
       return { success: false, syncedPaths: [], errors: [merged.error] };
     writes.push({ path: target, content: merged.content });
@@ -26881,7 +26892,7 @@ async function syncChangeSpecs(projectRoot, changePath) {
   }
   return {
     success: true,
-    syncedPaths: writes.map((write) => relative9(root, write.path).replace(/\\/g, "/")),
+    syncedPaths: writes.map((write) => relative11(root, write.path).replace(/\\/g, "/")),
     errors: []
   };
 }
@@ -27587,7 +27598,7 @@ var init_context_assembly = () => {};
 // src/core/delivery/delivery-ledger.ts
 import { createHash as createHash7 } from "node:crypto";
 import { mkdir as mkdir24, readFile as readFile38, writeFile as writeFile23 } from "node:fs/promises";
-import { resolve as resolve37, sep as sep6 } from "node:path";
+import { resolve as resolve37, sep as sep8 } from "node:path";
 function ledgerPath(projectRoot, id) {
   if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(id))
     throw new Error("Invalid delivery ledger id");
@@ -27598,7 +27609,7 @@ async function fingerprintWorkspace(projectRoot, paths) {
   const fingerprints = {};
   for (const path of paths) {
     const candidate = resolve37(root, path);
-    if (candidate !== root && !candidate.startsWith(`${root}${sep6}`)) {
+    if (candidate !== root && !candidate.startsWith(`${root}${sep8}`)) {
       fingerprints[path] = "outside-root";
       continue;
     }
@@ -27755,7 +27766,11 @@ function normalizeCommand(raw) {
   return raw.replace(/\s+/g, " ").trim();
 }
 function stripGitBinary(command) {
-  return command.replace(/(?:^|[\\/])git(?:\.exe)?\b/i, "git");
+  const match = command.match(/^(?:&\s*)?("[^"]+"|'[^']+'|[^\s]+)([\s\S]*)$/);
+  if (!match)
+    return command;
+  const binary = match[1].replace(/^["']|["']$/g, "").replace(/\\/g, "/").split("/").pop();
+  return /^git(?:\.exe)?$/i.test(binary ?? "") ? `git${match[2]}` : command;
 }
 function evaluatePath(filePath) {
   if (SENSITIVE_PATH.test(filePath.replace(/\//g, "\\")) || SENSITIVE_PATH.test(filePath)) {
@@ -27764,9 +27779,44 @@ function evaluatePath(filePath) {
   return allow();
 }
 function evaluateCommand(rawCommand) {
-  const command = stripGitBinary(normalizeCommand(rawCommand));
+  if (/(?:curl|wget)\b.+\|\s*(sh|bash|zsh|cmd)\b/i.test(normalizeCommand(rawCommand)))
+    return deny(MSG_POLICY);
+  const tokens = rawCommand.match(/"[^"]*"|'[^']*'|[^"';&|\r\n]+|[;&|\r\n]+/g) ?? [];
+  const commands = [];
+  let current = "";
+  for (const token of tokens) {
+    if (/^[;&|\r\n]+$/.test(token) && !(token === "&" && !current.trim())) {
+      commands.push(current);
+      current = "";
+    } else {
+      current += token;
+    }
+  }
+  commands.push(current);
+  let verdict = allow();
+  for (const part of commands) {
+    const result = evaluateSingleCommand(part);
+    if (result.action === "deny")
+      return result;
+    if (result.action === "ask")
+      verdict = result;
+  }
+  return verdict;
+}
+function evaluateSingleCommand(rawCommand) {
+  let command = stripGitBinary(normalizeCommand(rawCommand));
   if (!command)
     return allow();
+  if (/^git\s/i.test(command)) {
+    const words = command.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
+    let index = 1;
+    while (words[index]?.startsWith("-")) {
+      const option = words[index++];
+      if (/^(?:-C|-c|--git-dir|--work-tree|--namespace)$/.test(option))
+        index++;
+    }
+    command = ["git", ...words.slice(index)].join(" ");
+  }
   if (SENSITIVE_PATH.test(command) && READ_LIKE.test(command)) {
     return deny(MSG_SECRET);
   }
@@ -27789,9 +27839,12 @@ function evaluateCommand(rawCommand) {
   }
   if (/^rm\s+-rf\s+(\*|[\\/])/i.test(command))
     return deny(MSG_POLICY);
-  if (/^sudo\s+/i.test(command))
+  const windowsTarget = /(?:^|\s)["']?(?:[a-z]:[\\/]|\\|\*)/i.test(command);
+  if (windowsTarget && /^Remove-Item\b/i.test(command) && /\s-(?:Recurse|r)\b/i.test(command) && /\s-(?:Force|f)\b/i.test(command))
+    return deny(MSG_POLICY);
+  if (windowsTarget && /^(?:rd|rmdir|del|erase)\b/i.test(command) && /\s\/s\b/i.test(command))
     return deny(MSG_POLICY);
-  if (/(?:curl|wget)\b.+\|\s*(sh|bash|zsh|cmd)\b/i.test(command))
+  if (/^sudo\s+/i.test(command))
     return deny(MSG_POLICY);
   if (/^chmod\s+777\b/i.test(command))
     return deny(MSG_POLICY);
@@ -27818,13 +27871,16 @@ function evaluatePreTool(input) {
 function formatHookOutput(verdict, format) {
   if (format === "agy") {
     if (verdict.action === "deny") {
-      return JSON.stringify({ decision: "deny", error: verdict.message });
+      return JSON.stringify({ decision: "deny", reason: verdict.message });
     }
     if (verdict.action === "ask") {
       return JSON.stringify({ decision: "ask" });
     }
     return JSON.stringify({ decision: "allow" });
   }
+  if (verdict.action === "ask") {
+    return JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "ask" } });
+  }
   return "";
 }
 function claudeExitCode(verdict) {
@@ -27835,11 +27891,24 @@ function parseAgyPayload(raw) {
     return {};
   try {
     const parsed = JSON.parse(raw);
-    const args = parsed.arguments ?? {};
+    const args = parsed.toolCall?.args ?? parsed.arguments ?? {};
     return {
-      toolName: parsed.toolName,
-      command: args.CommandLine,
-      filePath: args.TargetFile ?? args.AbsolutePath
+      toolName: typeof (parsed.toolCall?.name ?? parsed.toolName) === "string" ? parsed.toolCall?.name ?? parsed.toolName : undefined,
+      command: typeof args.CommandLine === "string" ? args.CommandLine : undefined,
+      filePath: typeof args.TargetFile === "string" ? args.TargetFile : typeof args.AbsolutePath === "string" ? args.AbsolutePath : undefined
+    };
+  } catch {
+    return {};
+  }
+}
+function parseClaudePayload(raw) {
+  try {
+    const parsed = JSON.parse(raw);
+    const input = parsed.tool_input ?? {};
+    return {
+      toolName: typeof parsed.tool_name === "string" ? parsed.tool_name : undefined,
+      command: typeof input.command === "string" ? input.command : undefined,
+      filePath: typeof input.file_path === "string" ? input.file_path : undefined
     };
   } catch {
     return {};
@@ -27901,14 +27970,17 @@ __export(exports_hook_command, {
   readStdinText: () => readStdinText
 });
 import { spawnSync } from "node:child_process";
-import { existsSync as existsSync8 } from "node:fs";
-import { resolve as resolve38 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync5 } from "node:fs";
+import { createRequire as createRequire2 } from "node:module";
+import { dirname as dirname13, resolve as resolve38 } from "node:path";
 function detectFormat(explicit, stdinText) {
   if (explicit)
     return explicit;
-  const trimmed = stdinText.trim();
-  if (trimmed.startsWith("{"))
-    return "agy";
+  try {
+    const payload = JSON.parse(stdinText);
+    if (payload && (("toolCall" in payload) || ("toolName" in payload) || ("workspacePaths" in payload)))
+      return "agy";
+  } catch {}
   return "claude";
 }
 async function readStdinText() {
@@ -27920,11 +27992,11 @@ async function readStdinText() {
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-function resolvePreToolInput(options, stdinText) {
-  const fromStdin = parseAgyPayload(stdinText);
+function resolvePreToolInput(options, stdinText, format) {
+  const fromStdin = format === "agy" ? parseAgyPayload(stdinText) : parseClaudePayload(stdinText);
   return {
-    command: options.command ?? process.env.CLAUDE_TOOL_INPUT_COMMAND ?? fromStdin.command,
-    filePath: options.filePath ?? process.env.CLAUDE_TOOL_INPUT_FILE_PATH ?? fromStdin.filePath,
+    command: options.command ?? (process.env.CLAUDE_TOOL_INPUT_COMMAND || undefined) ?? fromStdin.command,
+    filePath: options.filePath ?? (process.env.CLAUDE_TOOL_INPUT_FILE_PATH || undefined) ?? fromStdin.filePath,
     toolName: fromStdin.toolName
   };
 }
@@ -27951,15 +28023,15 @@ async function hookCommand(options) {
     return { code: 0, data: { success: true, command: "hook session-start" } };
   }
   if (event === "post-tool") {
-    const filePath = options.filePath ?? process.env.CLAUDE_TOOL_INPUT_FILE_PATH ?? parseAgyPayload(stdinText).filePath;
-    formatWrittenFile(filePath);
+    const filePath = resolvePreToolInput(options, stdinText, format).filePath;
+    formatWrittenFile(filePath, options.projectRoot);
     if (format === "agy") {
       process.stdout.write(`{}
 `);
     }
     return { code: 0, data: { success: true, command: "hook post-tool" } };
   }
-  const input = resolvePreToolInput(options, stdinText);
+  const input = resolvePreToolInput(options, stdinText, format);
   const verdict = evaluatePreTool(input);
   if (format === "agy") {
     process.stdout.write(`${formatHookOutput(verdict, "agy")}
@@ -27973,23 +28045,40 @@ async function hookCommand(options) {
     process.stderr.write(`${verdict.message}
 `);
   }
+  const output = formatHookOutput(verdict, "claude");
+  if (output)
+    process.stdout.write(`${output}
+`);
   return {
     code: claudeExitCode(verdict),
     data: { success: verdict.action !== "deny", command: "hook pre-tool", verdict }
   };
 }
-function formatWrittenFile(filePath) {
-  if (!filePath || !existsSync8(filePath))
+function formatWrittenFile(filePath, projectRoot) {
+  if (!filePath)
+    return;
+  filePath = resolve38(projectRoot, filePath);
+  if (!existsSync8(filePath))
     return;
   const prettier = /\.(ts|tsx|js|jsx|mjs|cjs|json|jsonc|md|mdx|css|scss|html|astro|ya?ml)$/i;
   const eslint = /\.(ts|tsx|js|jsx|mjs|cjs)$/i;
   const python = /\.py$/i;
-  const opts = { stdio: "ignore", windowsHide: true };
+  const opts = { cwd: projectRoot, stdio: "ignore", windowsHide: true, timeout: 5000 };
+  const require2 = createRequire2(resolve38(projectRoot, "package.json"));
+  function runNodeTool(name, args) {
+    try {
+      const manifestPath = require2.resolve(`${name}/package.json`);
+      const manifest = JSON.parse(readFileSync5(manifestPath, "utf8"));
+      const bin = typeof manifest.bin === "string" ? manifest.bin : manifest.bin?.[name];
+      if (typeof bin === "string")
+        spawnSync(process.execPath, [resolve38(dirname13(manifestPath), bin), ...args], opts);
+    } catch {}
+  }
   if (prettier.test(filePath)) {
-    spawnSync("npx", ["--no-install", "prettier", "--write", filePath], opts);
+    runNodeTool("prettier", ["--write", filePath]);
   }
   if (eslint.test(filePath)) {
-    spawnSync("npx", ["--no-install", "eslint", "--fix", filePath], opts);
+    runNodeTool("eslint", ["--fix", filePath]);
   }
   if (python.test(filePath)) {
     spawnSync("ruff", ["format", filePath], opts);
@@ -28396,7 +28485,7 @@ function ccGainToScorecardImpact(result) {
 }
 
 // src/core/evaluation/scorecard-signals.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 function parseScopeFiles(scope) {
   return scope.split(/[,;]/).map((entry) => entry.trim().replace(/[.;:]$/, "").replace(/^`|`$/g, "")).filter(Boolean);
 }
@@ -28426,7 +28515,7 @@ function collectScorecardSignals(projectRoot, scopeFiles, extra) {
   }
   let diff = "";
   try {
-    diff = execFileSync3("git", ["diff", "HEAD"], {
+    diff = execFileSync2("git", ["diff", "HEAD"], {
       cwd: projectRoot,
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -28522,7 +28611,7 @@ var init_scorecard_signals = __esm(() => {
 // src/core/evaluation/harness-experiment.ts
 import { existsSync as existsSync9 } from "node:fs";
 import { cp, mkdir as mkdir25, readFile as readFile39, readdir as readdir14, writeFile as writeFile24 } from "node:fs/promises";
-import { dirname as dirname13, join as join26, resolve as resolve39 } from "node:path";
+import { dirname as dirname14, join as join26, resolve as resolve39 } from "node:path";
 function experimentDir(projectRoot, experimentId) {
   return resolve39(projectRoot, EVAL_DIR2, EXPERIMENTS_DIR, experimentId);
 }
@@ -28637,7 +28726,7 @@ function generateExperimentId(suiteId, now = new Date) {
   return `abl-${date}-${suiteId}-${rand}`;
 }
 async function copyFixture(suitePath, fixtureDir, dest) {
-  const source = fixtureDir ? resolve39(dirname13(suitePath), fixtureDir) : join26(dirname13(suitePath), "fixture");
+  const source = fixtureDir ? resolve39(dirname14(suitePath), fixtureDir) : join26(dirname14(suitePath), "fixture");
   await mkdir25(dest, { recursive: true });
   if (existsSync9(source)) {
     await cp(source, dest, { recursive: true });
@@ -29042,9 +29131,9 @@ var init_prompt_diff = __esm(() => {
 });
 
 // src/core/evaluation/regression-checklist.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { mkdir as mkdir26, readFile as readFile42, writeFile as writeFile25 } from "node:fs/promises";
-import { dirname as dirname14, resolve as resolve43 } from "node:path";
+import { dirname as dirname15, resolve as resolve43 } from "node:path";
 async function loadRegressionChecklist() {
   try {
     const path = resolve43(ROOT_PRESETS_DIR, "templates", "regression-checklist.yml");
@@ -29062,7 +29151,7 @@ function runCheckCommand(cmd, cwd) {
   if (!file)
     return { passed: false, message: "Empty command" };
   try {
-    execFileSync4(file, args, {
+    execFileSync3(file, args, {
       cwd,
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"],
@@ -29104,7 +29193,7 @@ async function runRegressionChecklist(projectRoot, options = {}) {
       timestamp: new Date().toISOString()
     };
     const outPath = resolve43(projectRoot, ".codeconductor/evaluation/regression-last.json");
-    await mkdir26(dirname14(outPath), { recursive: true });
+    await mkdir26(dirname15(outPath), { recursive: true });
     await writeFile25(outPath, JSON.stringify(report, null, 2), "utf-8");
     return ok(report);
   } catch (e) {
@@ -31516,6 +31605,7 @@ var COMMANDS = [
   { name: "setup", group: "getting-started", summary: "Configure and install CodeConductor.", usage: ["cc-codeconductor setup [--target <target>] [--locale en|es] [--yes] [--dry-run]"] },
   { name: "detect", group: "getting-started", summary: "Inspect the project stack and recommended presets.", usage: ["cc-codeconductor detect"] },
   { name: "init", group: "getting-started", summary: "Initialize low-level CodeConductor configuration.", usage: ["cc-codeconductor init [--locale en|es]"] },
+  { name: "usage", group: "getting-started", summary: "Show installation examples for presets, council, and LSP.", usage: ["cc-codeconductor usage"] },
   { name: "install", group: "getting-started", summary: "Install harness components.", usage: ["cc-codeconductor install preset --target <target>"], options: ["--target opencode|claude|codex|gemini|cursor|agy|pi|all"], subcommands: [
     { name: "preset", group: "getting-started", summary: "Install agents, prompts, skills, and commands.", usage: ["cc-codeconductor install preset --target <target> [--locale en|es]"] },
     { name: "council", group: "getting-started", summary: "Install generated council files.", usage: ["cc-codeconductor install council --target <target>"] },
@@ -31629,6 +31719,96 @@ _arguments '1:command:(${names})' '--target[target]:target:(${targets})'`;
   return null;
 }
 
+// src/cli/usage-guide.ts
+init_cli_bin();
+var RECOMMENDED_FLOW = [
+  "cc-codeconductor setup --target claude",
+  "cc-codeconductor setup --target claude --locale es --yes",
+  "cc-codeconductor setup --target claude --dry-run"
+];
+var PRIMITIVES = [
+  "cc-codeconductor detect",
+  "cc-codeconductor init --locale es",
+  "cc-codeconductor install preset --target claude",
+  "cc-codeconductor install council --target claude",
+  "cc-codeconductor install lsp --target claude"
+];
+var PRESET_EXAMPLES = [
+  "cc-codeconductor install preset --target claude",
+  "cc-codeconductor install preset --target claude --global",
+  "cc-codeconductor install preset --target claude --force",
+  "cc-codeconductor install preset --target claude --dry-run",
+  "cc-codeconductor install preset --target all",
+  "cc-codeconductor install preset --target claude --locale es",
+  "cc-codeconductor install preset --target claude --global --force"
+];
+var COUNCIL_EXAMPLES = [
+  "cc-codeconductor install council --target claude",
+  "cc-codeconductor install council --target claude --global",
+  "cc-codeconductor install council --target claude --force",
+  "cc-codeconductor install council --target claude --dry-run",
+  "cc-codeconductor install council --target all",
+  "cc-codeconductor install council --target claude --global --force"
+];
+var LSP_EXAMPLES = [
+  "cc-codeconductor install lsp --target claude --lang typescript,python",
+  "cc-codeconductor install lsp --target all --lang typescript,python",
+  "cc-codeconductor install lsp --target claude --global",
+  "cc-codeconductor install lsp --target claude --dry-run"
+];
+var AFTER_INSTALL_EXAMPLES = [
+  ["cc-codeconductor doctor", "validates the installation"],
+  ["cc-codeconductor status", "shows what is installed"],
+  ["cc-codeconductor update --dry-run", "previews reconciliation of managed files after upgrading"],
+  ["cc-codeconductor update --force", "applies reconciliation of managed files after upgrading"],
+  ["cc-codeconductor migrate --dry-run", "previews repair of orphaned artifacts a reinstall cannot fix"]
+];
+function renderExamples(lines, bin) {
+  return lines.map((line) => `  ${formatUsage(line, bin)}`);
+}
+function renderAnnotatedExamples(entries, bin) {
+  return entries.map(([line, description]) => `  ${formatUsage(line, bin)} — ${description}`);
+}
+function renderUsageGuide(bin = resolveCliBin()) {
+  return [
+    "CodeConductor — installation usage guide",
+    "",
+    "Recommended flow (one command, installs and configures everything):",
+    ...renderExamples(RECOMMENDED_FLOW, bin),
+    "",
+    "Fine-grained primitives (for scripting or partial installs):",
+    ...renderExamples(PRIMITIVES, bin),
+    "",
+    "Shared flags:",
+    "  --target    opencode|claude|codex|gemini|cursor|agy|pi|all (default: opencode)",
+    "  --global    Install to the home directory (~/.claude, ~/.opencode, etc.) instead of the project",
+    "  --force     Allow overwriting existing files",
+    "  --dry-run   Show what would happen without writing files",
+    "  --locale    Instruction language for agent files: en (default) | es — install preset only",
+    "  --lang      Comma-separated languages to install LSP servers for — install lsp only",
+    "  --output    Output mode: human (default) | json",
+    "",
+    "install preset — agents, prompts, skills, and commands:",
+    ...renderExamples(PRESET_EXAMPLES, bin),
+    "",
+    "install council — generated council spec files:",
+    ...renderExamples(COUNCIL_EXAMPLES, bin),
+    "",
+    "install lsp — language servers:",
+    ...renderExamples(LSP_EXAMPLES, bin),
+    "  Dedicated integration config is generated for: opencode, claude, codex, gemini, cursor, agy.",
+    "  pi installs the language servers but does not get a dedicated integration config file.",
+    "",
+    "After installing, verify and keep in sync:",
+    ...renderAnnotatedExamples(AFTER_INSTALL_EXAMPLES, bin),
+    "",
+    "More detail (GitHub only, not bundled in the npm package):",
+    "  docs/usage-cli.md         Detailed CLI reference, incl. per-target generated files",
+    "  docs/getting-started/     Installation, first project, and update walkthroughs"
+  ].join(`
+`);
+}
+
 // src/cli/router.ts
 var OutputModeSchema = exports_external.enum(["json", "human"]);
 var SeoFormatSchema = exports_external.enum(["cli", "json", "markdown"]);
@@ -31909,6 +32089,8 @@ async function routeCommand(args, projectRoot) {
     case "docs":
     case "man":
       return { code: 0, data: { success: true, command, output: renderDocs(subcommand) } };
+    case "usage":
+      return { code: 0, data: { success: true, command: "usage", output: renderUsageGuide() } };
     case "completion": {
       const output = renderCompletion(subcommand ?? "");
       return output ? { code: 0, data: { success: true, command: "completion", output } } : cliContractError("completion", ["Expected shell: bash, zsh, fish, or powershell."]);