cc-codeconductor 1.4.2 → 1.5.0

package/presets/opencode/skills/drizzle-schema-architect/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: drizzle-schema-architect
-name: Drizzle Schema Architect
+name: drizzle-schema-architect
 description: >
   Generates strictly typed Drizzle ORM schemas for PostgreSQL with indexes, 
   foreign keys, and Zod schema deduction.

package/presets/opencode/skills/fastapi-pydantic-strict/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: fastapi-pydantic-strict
-name: FastAPI Pydantic Strict
+name: fastapi-pydantic-strict
 description: >
   Enforces Pydantic v2 strict models, asynchronous dependency generators, and uv environment setup.
 user-invokable: true

package/presets/opencode/skills/jpa-nplusone-detector/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: jpa-nplusone-detector
-name: JPA N+1 Query Detector
+name: jpa-nplusone-detector
 description: >
   Audits Hibernate database interactions to prevent N+1 query problems in JVM apps.
 user-invokable: true

package/presets/opencode/skills/jpa-postgres/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: jpa-postgres
-name: JPA + PostgreSQL
+name: jpa-postgres
 description: >
   Provides expert knowledge of JPA entity design, relationship mapping, Flyway
   migrations, and PostgreSQL-specific optimizations.
@@ -41,6 +41,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 # JPA + PostgreSQL
 
 ## Entity Design

package/presets/opencode/skills/livewire-alpine-bridge/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: livewire-alpine-bridge
-name: Livewire Alpine Bridge
+name: livewire-alpine-bridge
 description: >
   Schedules reactive frontend states cleanly using entangle directives in PHP and JS.
 user-invokable: true

package/presets/opencode/skills/nextjs-typescript/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: nextjs-typescript
-name: Next.js + TypeScript
+name: nextjs-typescript
 description: >
   Provides expert knowledge for building Next.js 15+ applications with the App Router, TypeScript, Server Components, Server Actions, and TanStack Query.
 

package/presets/opencode/skills/pagespeed-perf/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: pagespeed-perf
-name: PageSpeed Performance Audit
+name: pagespeed-perf
 description: >
   Web Performance Engineering — analyzes Core Web Vitals using the PageSpeed
   Insights API (PSI v5) and applies the 80/20 principle: identify the 20% of

package/presets/opencode/skills/python/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python
-name: Python
+name: python
 description: >
   Python development best practices: clean code, patterns,
   type hints, decorators, context managers, and architecture.
@@ -40,6 +40,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 ## When to Use
 
 - Writing any Python code in the project
@@ -604,7 +605,7 @@ items = items_to_keep
 
 ## Resources
 
-- **PEP 8** — Style Guide: <https://peps.python.org/pep-0008/>
-- **PEP 484** — Type Hints: <https://peps.python.org/pep-0484/>
-- **Real Python**: <https://realpython.com/>
-- **Python Docs**: <https://docs.python.org/3/>
+- **PEP 8** — Style Guide: https://peps.python.org/pep-0008/
+- **PEP 484** — Type Hints: https://peps.python.org/pep-0484/
+- **Real Python**: https://realpython.com/
+- **Python Docs**: https://docs.python.org/3/

package/presets/opencode/skills/python-django-stack/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python-django-stack
-name: Python Django Stack
+name: python-django-stack
 description: >
   Python and Django conventions for multi-tenant SaaS POS projects:
   views, services, naming, JSON APIs, PDFs, and cart patterns.

package/presets/opencode/skills/python-fastapi-stack/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python-fastapi-stack
-name: Python FastAPI Stack
+name: python-fastapi-stack
 description: >
   FastAPI conventions for REST APIs: routers, Pydantic v2 schemas, dependency
   injection, error handling, pagination, and project structure.

package/presets/opencode/skills/security/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: security
-name: Security
+name: security
 description: >
   Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.
 

package/presets/opencode/skills/seo-analytics-injector/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: seo-analytics-injector
-name: SEO Analytics Injector
+name: seo-analytics-injector
 description: >
   Verifies and injects Google Tag Manager (GTM), GA4 event triggers, and optimized meta tags.
 user-invokable: true

package/presets/opencode/skills/spring-auth-auditor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-auth-auditor
-name: Spring Auth Auditor
+name: spring-auth-auditor
 description: >
   Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.
 user-invokable: true

package/presets/opencode/skills/spring-boot-feature/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-feature
-name: Spring Boot Feature Creation
+name: spring-boot-feature
 description: >
   Guides the creation of complete Spring Boot features following a structured,
   layer-by-layer workflow: entity, repository, service, controller, and tests.
@@ -44,6 +44,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 # Spring Boot Feature Creation
 
 When asked to create a feature, follow these steps **in order**. Do not skip

package/presets/opencode/skills/spring-boot-kotlin/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-kotlin
-name: Spring Boot + Kotlin
+name: spring-boot-kotlin
 description: >
   Provides expert knowledge of Spring Boot conventions, Kotlin idioms, and MVC
   patterns for backend API development.

package/presets/opencode/skills/spring-boot-testing-strategy/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-testing-strategy
-name: Spring Boot Testing Strategy
+name: spring-boot-testing-strategy
 description: >
   Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.
 

package/presets/opencode/skills/sqlalchemy/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: sqlalchemy
-name: SQLAlchemy
+name: sqlalchemy
 description: >
   SQLAlchemy 2.x patterns for async FastAPI projects: models, sessions, queries,
   bulk operations, transactions, and Alembic migrations.

package/presets/opencode/skills/tailwind-responsive-auditor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: tailwind-responsive-auditor
-name: Tailwind Responsive Auditor
+name: tailwind-responsive-auditor
 description: >
   Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.
 user-invokable: true

package/presets/opencode/skills/tdd-mutation-tester/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: tdd-mutation-tester
-name: TDD Mutation Tester
+name: tdd-mutation-tester
 description: >
   Performs simple mutation testing to verify test coverage and assertions.
 user-invokable: true

package/presets/seo-hotel/skills/astro-seo/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: astro-seo
-name: Astro SEO Validator
+name: astro-seo
 description: >
   SEO validation specific to Astro framework projects. Checks static generation,
   meta tag rendering, Content Collections usage, Island Architecture implications

package/presets/seo-hotel/skills/geo-readiness/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: geo-readiness
-name: GEO Readiness Checker
+name: geo-readiness
 description: >
   Validates AI-search readiness (Generative Engine Optimization) for hotel websites.
   Checks for citable content, factual cards, llms.txt, structured data completeness,

package/presets/seo-hotel/skills/off-page/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: off-page
-name: SEO Off-Page & Marketing
+name: off-page
 description: >
   Guidance for off-page SEO strategy specific to hotel and hospitality websites.
   Covers backlink strategy, local citations, review management, social signals,

package/presets/seo-hotel/skills/schema-validator/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: schema-validator
-name: Schema.org Validator
+name: schema-validator
 description: >
   Validates Schema.org structured data (JSON-LD, Microdata, RDFa) on hotel and hospitality websites.
   Supports single URL validation via --url and sitemap-scoped batch validation via --sitemap.

package/presets/seo-hotel/skills/seo-audit/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: seo-audit
-name: SEO Technical Audit
+name: seo-audit
 description: >
   Comprehensive technical SEO audit for hotel websites. Checks meta tags, headings,
   internal linking, page speed signals, mobile readiness, crawl directives, and Core Web Vitals

package/presets/shared/invoke-hook.cjs

@@ -2,8 +2,8 @@
 'use strict';
 
 const { spawnSync } = require('node:child_process');
-const { existsSync } = require('node:fs');
-const { join, resolve } = require('node:path');
+const { existsSync, readFileSync, realpathSync } = require('node:fs');
+const { delimiter, join, resolve } = require('node:path');
 
 const VALID_EVENTS = ['pre-tool', 'post-tool', 'session-start'];
 const SPAWN_TIMEOUT = 10000;
@@ -21,9 +21,10 @@ const isAgy = process.argv.some((a) => a === '--format=agy') || extra.includes('
 function findProjectRoot() {
   const candidates = [
     process.env.PROJECT_ROOT,
+    process.env.CLAUDE_PROJECT_DIR,
     process.env.WORKSPACE_DIR,
-    resolve(__dirname, '..', '..'),
     process.cwd(),
+    resolve(__dirname, '..', '..'),
   ].filter(Boolean);
 
   for (const dir of candidates) {
@@ -40,6 +41,8 @@ function findProjectRoot() {
 }
 
 const projectRoot = findProjectRoot();
+// Buffer once: each fallback attempt must receive the same host payload.
+const input = process.stdin.isTTY ? '' : readFileSync(0, 'utf8');
 
 /**
  * Run one candidate runner. Stdout/stderr are captured (not inherited) so a
@@ -54,7 +57,8 @@ function tryRun(bin, runArgs) {
   try {
     const result = spawnSync(bin, runArgs, {
       cwd: projectRoot,
-      stdio: ['inherit', 'pipe', 'pipe'],
+      stdio: ['pipe', 'pipe', 'pipe'],
+      input,
       windowsHide: true,
       env: process.env,
       encoding: 'utf8',
@@ -111,7 +115,18 @@ try {
     tryRun(process.execPath, [localDist, 'hook', event, ...extra]);
   }
 
-  tryRun('npx', ['--no-install', 'cc-codeconductor', 'hook', event, ...extra]);
+  // Locate global npm installs without invoking npx or Windows .cmd shims.
+  for (const binDir of (process.env.PATH || '').split(delimiter).filter(Boolean)) {
+    const candidates = [
+      join(binDir, 'node_modules', 'cc-codeconductor', 'dist', 'index.js'),
+      join(binDir, '..', 'lib', 'node_modules', 'cc-codeconductor', 'dist', 'index.js'),
+    ];
+    const executable = join(binDir, 'cc-codeconductor');
+    if (existsSync(executable)) candidates.push(realpathSync(executable));
+    for (const candidate of candidates) {
+      if (existsSync(candidate)) tryRun(process.execPath, [candidate, 'hook', event, ...extra]);
+    }
+  }
 } catch {
   // Ignore errors in runner attempts
 }

package/src/presets/models/roles.yml

@@ -18,129 +18,129 @@ agents:
   architect:
     claude: claude-opus-5
     pi: claude-opus-5
-    opencode: opencode-go/deepseek-v4-pro
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-sol
     gemini: gemini-3.1-pro-preview
     cursor: claude-opus-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.1-pro
+    agy: gemini-3.1-pro-high
   implementer:
     claude: claude-sonnet-5
     pi: claude-sonnet-5
-    opencode: opencode-go/mimo-v2.5
+    opencode: opencode-go/mimo-v2.6-flash
     codex: gpt-5.6-terra
     gemini: gemini-3.7-flash
     cursor: composer-2.5-fast
     grok: cursor-grok-4.6-high-fast
-    agy: claude-sonnet-4.6-thinking
+    agy: claude-sonnet-4-6
   tester:
     claude: claude-sonnet-5
     pi: claude-sonnet-5
-    opencode: opencode-go/minimax-m3
+    opencode: opencode-go/mimo-v2.6-flash
     codex: gpt-5.6-terra
     gemini: gemini-3.7-flash
     cursor: composer-2.5-fast
     grok: cursor-grok-4.6-high-fast
-    agy: claude-sonnet-4.6-thinking
+    agy: claude-sonnet-4-6
   orchestrator:
     claude: claude-sonnet-5
     pi: claude-sonnet-5
-    opencode: opencode-go/qwen3.7-plus
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-terra
     gemini: gemini-3.7-flash
     cursor: composer-2.5
     grok: cursor-grok-4.6-high-fast
-    agy: claude-sonnet-4.6-thinking
+    agy: claude-sonnet-4-6
   reviewer:
     claude: claude-opus-5
     pi: claude-opus-5
-    opencode: opencode-go/qwen3.8-max
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-sol
     gemini: gemini-3.1-pro-preview
     cursor: claude-sonnet-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.1-pro
+    agy: gemini-3.1-pro-high
   docs:
     claude: claude-haiku-4-5-20251001
     pi: claude-haiku-4-5-20251001
-    opencode: opencode-go/hy3
+    opencode: opencode-go/muse-spark-1.3-contributor
     codex: gpt-5.6-luna
     gemini: gemini-3.7-flash
     cursor: claude-4.5-haiku-thinking
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.8-flash
+    agy: gemini-3.8-flash-medium
   task-coach:
     claude: claude-haiku-4-5-20251001
     pi: claude-haiku-4-5-20251001
-    opencode: opencode-go/gpt-5.6-luna
+    opencode: opencode-go/glm-5.3-flash
     codex: gpt-5.6-luna
     gemini: gemini-3.7-flash
     cursor: claude-4.5-haiku-thinking
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.8-flash
+    agy: gemini-3.8-flash-medium
   repo-explorer:
     claude: claude-haiku-4-5-20251001
     pi: claude-haiku-4-5-20251001
-    opencode: opencode-go/longcat-2.0
+    opencode: opencode-go/glm-5.3-flash
     codex: gpt-5.6-luna
     gemini: gemini-3.7-flash
     cursor: composer-2.5-fast
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.8-flash
+    agy: gemini-3.8-flash-medium
   goal-planner:
     claude: claude-haiku-4-5-20251001
     pi: claude-haiku-4-5-20251001
-    opencode: opencode-go/deepseek-v4-flash
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-luna
     gemini: gemini-3.7-flash
     cursor: claude-4.5-haiku-thinking
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.8-flash
+    agy: gemini-3.8-flash-medium
   complexity-auditor:
     claude: claude-sonnet-5
     pi: claude-sonnet-5
-    opencode: opencode-go/glm-5.3
+    opencode: opencode-go/glm-5.3-flash
     codex: gpt-5.6-terra
     gemini: gemini-3.7-flash
     cursor: claude-sonnet-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: claude-sonnet-4.6-thinking
+    agy: claude-sonnet-4-6
   security-reviewer:
     claude: claude-opus-5
     pi: claude-opus-5
-    opencode: opencode-go/kimi-k3
+    opencode: opencode-go/glm-5.3-flash
     codex: gpt-5.6-sol
     gemini: gemini-3.1-pro-preview
     cursor: claude-opus-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.1-pro
+    agy: gemini-3.1-pro-high
   contract-builder:
     claude: claude-opus-5
     pi: claude-opus-5
-    opencode: opencode-go/qwen3.8-max
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-sol
     gemini: gemini-3.1-pro-preview
     cursor: claude-sonnet-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.1-pro
+    agy: gemini-3.1-pro-high
   planner:
     claude: claude-haiku-4-5-20251001
     pi: claude-haiku-4-5-20251001
-    opencode: opencode-go/gpt-5.6-luna
+    opencode: opencode-go/deepseek-v4.1-flash
     codex: gpt-5.6-luna
     gemini: gemini-3.7-flash
     cursor: claude-4.5-haiku-thinking
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.8-flash
+    agy: gemini-3.8-flash-medium
   devil:
     claude: claude-opus-5
     pi: claude-opus-5
-    opencode: opencode-go/glm-5.3
+    opencode: opencode-go/glm-5.3-flash
     codex: gpt-5.6-sol
     gemini: gemini-3.1-pro-preview
     cursor: claude-opus-5-thinking-high
     grok: cursor-grok-4.6-high-fast
-    agy: gemini-3.1-pro
+    agy: gemini-3.1-pro-high
 tools:
   Read:
     claude: ViewCodeItem / ReadFile

package/src/presets/shared-skills.yml

@@ -11,43 +11,43 @@ skills:
   - name: openspec
     targets: [claude, codex, cursor, opencode, agy]
   - name: security-ai-llm
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-blue-team
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-cloud
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-crypto
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-exploit-dev
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-grc
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-incident-response
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-log-analysis
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-malware-analysis
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-mobile
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-network
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-ot-ics
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-recon
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-red-team
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-reverse-engineering
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-soc-automation
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-threat-hunting
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-vuln-assessment
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: security-web
-    targets: [claude, cursor, opencode, agy]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: testing-strategy
     targets: [claude, codex]
   - name: testing-tdd
@@ -59,10 +59,46 @@ skills:
   - name: android-ui-design
     targets: [claude, codex, cursor, opencode, agy]
   - name: code-review
-    targets: [cursor, opencode]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: seo-analytics-injector
-    targets: [cursor, opencode]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: tdd-mutation-tester
-    targets: [cursor, opencode]
+    targets: [claude, codex, cursor, opencode, agy]
   - name: web-design-engineering
     targets: [claude, codex, cursor, opencode, agy]
+  # Cursor keeps a `paths:` auto-attach block in its frontmatter (not
+  # supported by other targets) — intentional, not drift. Canonical source
+  # below is the opencode variant (no `paths:`); cursor and opencode keep
+  # their existing hand-maintained copies untouched.
+  - name: astro
+    targets: [claude, codex, agy]
+  - name: auth-token-inspector
+    targets: [claude, codex, agy]
+  - name: django-uv
+    targets: [claude, codex, agy]
+  - name: drizzle-schema-architect
+    targets: [claude, codex, agy]
+  - name: fastapi-pydantic-strict
+    targets: [claude, codex, agy]
+  - name: jpa-nplusone-detector
+    targets: [claude, codex, agy]
+  - name: livewire-alpine-bridge
+    targets: [claude, codex, agy]
+  - name: nextjs-typescript
+    targets: [claude, codex, agy]
+  - name: spring-auth-auditor
+    targets: [claude, codex, agy]
+  - name: spring-boot-testing-strategy
+    targets: [claude, codex, agy]
+  - name: tailwind-responsive-auditor
+    targets: [claude, codex, agy]
+  - name: python
+    targets: [claude, codex, cursor, opencode, agy]
+  - name: django-orm
+    targets: [claude, codex, cursor, opencode, agy]
+  - name: spring-boot-feature
+    targets: [claude, codex, cursor, opencode, agy]
+  - name: jpa-postgres
+    targets: [claude, codex, cursor, opencode, agy]
+  - name: api-versioning
+    targets: [claude, codex, cursor, opencode, agy]