cc-codeconductor 1.4.2 → 1.5.1

package/presets/opencode/commands/cc-tdd-cycle.md

@@ -21,11 +21,10 @@ Describe what behavior you want to implement. Include:
 
 Command: `tdd-cycle` (fixed for this workflow — do not infer from user text)
 
-1. Run: `npx cc-codeconductor ccep parse --command tdd-cycle "$ARGUMENTS" --output json`
-2. Run: `npx cc-codeconductor ccep resolve --command tdd-cycle "$ARGUMENTS" --output json`
-3. Run: `npx cc-codeconductor ccep profile tdd-cycle --output json`
-4. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command tdd-cycle --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
-5. Delegate to subagents using compiled CCEP prompts — never forward raw `$ARGUMENTS` to planners.
+1. Run: `npx cc-codeconductor ccep profile tdd-cycle --output json` to get the phases and their roles.
+2. For each delegated phase, run: `npx cc-codeconductor ccep compile --command tdd-cycle --phase <phase-id> "$ARGUMENTS" --view prompt --output json`
+3. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command tdd-cycle --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
+4. Pass each subagent only the compiled `prompt` for its phase — never forward raw `$ARGUMENTS` to planners.
    Canonical delivery order is test-before-implement whenever both phases apply.
 
 ---

package/presets/opencode/commands/cc-test-plan.md

@@ -24,11 +24,10 @@ If $ARGUMENTS is empty, describe the scope in your next message before invoking
 
 Command: `test-plan` (fixed for this workflow — do not infer from user text)
 
-1. Run: `npx cc-codeconductor ccep parse --command test-plan "$ARGUMENTS" --output json`
-2. Run: `npx cc-codeconductor ccep resolve --command test-plan "$ARGUMENTS" --output json`
-3. Run: `npx cc-codeconductor ccep profile test-plan --output json`
-4. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command test-plan --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
-5. Delegate to subagents using compiled CCEP prompts — never forward raw `$ARGUMENTS` to planners.
+1. Run: `npx cc-codeconductor ccep profile test-plan --output json` to get the phases and their roles.
+2. For each delegated phase, run: `npx cc-codeconductor ccep compile --command test-plan --phase <phase-id> "$ARGUMENTS" --view prompt --output json`
+3. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command test-plan --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
+4. Pass each subagent only the compiled `prompt` for its phase — never forward raw `$ARGUMENTS` to planners.
 
 ---
 

package/presets/opencode/commands/cc-triage.md

@@ -10,11 +10,10 @@ Triage request: $ARGUMENTS
 
 Command: `triage` (fixed for this workflow — do not infer from user text)
 
-1. Run: `npx cc-codeconductor ccep parse --command triage "$ARGUMENTS" --output json`
-2. Run: `npx cc-codeconductor ccep resolve --command triage "$ARGUMENTS" --output json`
-3. Run: `npx cc-codeconductor ccep profile triage --output json`
-4. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command triage --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
-5. Delegate to subagents using compiled CCEP prompts — never forward raw `$ARGUMENTS` to planners.
+1. Run: `npx cc-codeconductor ccep profile triage --output json` to get the phases and their roles.
+2. For each delegated phase, run: `npx cc-codeconductor ccep compile --command triage --phase <phase-id> "$ARGUMENTS" --view prompt --output json`
+3. After planner/intake JSON is available, run: `npx cc-codeconductor ccep evaluate --command triage --input <planner.json> --output json`. If `stop` is true, show questions or risks and wait for human input.
+4. Pass each subagent only the compiled `prompt` for its phase — never forward raw `$ARGUMENTS` to planners.
 
 ---
 

package/presets/opencode/opencode.jsonc

@@ -1,6 +1,6 @@
 {
   "$schema": "https://opencode.ai/config.json",
-  "model": "opencode-go/qwen3.7-plus",
+  "model": "opencode-go/deepseek-v4.1-flash",
   "permission": {
     "*": "ask",
     "read": {

package/presets/opencode/skills/android/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: android
-name: Android + Kotlin (Jetpack Compose & Media3)
+name: android
 description: >
   Provides expert knowledge for building modern native Android apps using Kotlin, Jetpack Compose, Material Design 3, MVI architecture, Hilt dependency injection, and Media3/ExoPlayer.
 

package/presets/opencode/skills/api-versioning/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: api-versioning
-name: API Versioning
+name: api-versioning
 description: >
   Provides expert knowledge for designing, implementing, and managing REST API
   versioning strategies with deprecation workflows.
@@ -39,6 +39,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 # API Versioning
 
 ## Versioning Strategies

package/presets/opencode/skills/astro/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: astro
-name: Astro
+name: astro
 description: >
   Provides expert knowledge for building Astro 5+ sites with Islands Architecture, Content Collections, TypeScript, and performance-first rendering strategies.
 

package/presets/opencode/skills/auth-token-inspector/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: auth-token-inspector
-name: Auth Token Inspector
+name: auth-token-inspector
 description: >
   Audits token storage mechanisms to prevent XSS-based JWT theft.
 user-invokable: true

package/presets/opencode/skills/code-review/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: code-review
-name: Code Review
+name: code-review
 description: >
   Provides a structured framework for conducting thorough code reviews covering correctness, security, architecture alignment, performance, and technical debt.
 

package/presets/opencode/skills/django-orm/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: django-orm
-name: Django ORM
+name: django-orm
 description: >
   Django ORM patterns for multi-tenant POS projects: efficient queries,
   bulk operations, transactions, and multi-schema upload paths.
@@ -41,6 +41,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 ## When to Use
 
 - Writing or reviewing queryset code in any `apps/*/`
@@ -456,5 +457,4 @@ def on_order_save(sender, instance, created, **kwargs):
 - **Annotation examples**: `apps/pos/views.py` lines 59-75
 - **Exists usage**: `apps/catalog/views.py` line 112
 - **Upload paths**: `apps/catalog/models.py`
-- **Django ORM docs**:
-  <https://docs.djangoproject.com/en/5.2/topics/db/queries/>
+- **Django ORM docs**: https://docs.djangoproject.com/en/5.2/topics/db/queries/

package/presets/opencode/skills/django-testing/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: django-testing
-name: Django Testing
+name: django-testing
 description: >
   Testing patterns for multi-tenant Django POS projects using pytest-django,
   RequestFactory, and mocks. No factories, no complex conftest.

package/presets/opencode/skills/django-uv/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: django-uv
-name: Django + UV
+name: django-uv
 description: >
   Provides expert knowledge for building Django 5+ projects with UV as the package manager, domain-driven app structure, ruff for linting, and pytest-django for testing.
 

package/presets/opencode/skills/drizzle-schema-architect/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: drizzle-schema-architect
-name: Drizzle Schema Architect
+name: drizzle-schema-architect
 description: >
   Generates strictly typed Drizzle ORM schemas for PostgreSQL with indexes, 
   foreign keys, and Zod schema deduction.

package/presets/opencode/skills/fastapi-pydantic-strict/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: fastapi-pydantic-strict
-name: FastAPI Pydantic Strict
+name: fastapi-pydantic-strict
 description: >
   Enforces Pydantic v2 strict models, asynchronous dependency generators, and uv environment setup.
 user-invokable: true

package/presets/opencode/skills/jpa-nplusone-detector/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: jpa-nplusone-detector
-name: JPA N+1 Query Detector
+name: jpa-nplusone-detector
 description: >
   Audits Hibernate database interactions to prevent N+1 query problems in JVM apps.
 user-invokable: true

package/presets/opencode/skills/jpa-postgres/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: jpa-postgres
-name: JPA + PostgreSQL
+name: jpa-postgres
 description: >
   Provides expert knowledge of JPA entity design, relationship mapping, Flyway
   migrations, and PostgreSQL-specific optimizations.
@@ -41,6 +41,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 # JPA + PostgreSQL
 
 ## Entity Design

package/presets/opencode/skills/livewire-alpine-bridge/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: livewire-alpine-bridge
-name: Livewire Alpine Bridge
+name: livewire-alpine-bridge
 description: >
   Schedules reactive frontend states cleanly using entangle directives in PHP and JS.
 user-invokable: true

package/presets/opencode/skills/nextjs-typescript/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: nextjs-typescript
-name: Next.js + TypeScript
+name: nextjs-typescript
 description: >
   Provides expert knowledge for building Next.js 15+ applications with the App Router, TypeScript, Server Components, Server Actions, and TanStack Query.
 

package/presets/opencode/skills/pagespeed-perf/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: pagespeed-perf
-name: PageSpeed Performance Audit
+name: pagespeed-perf
 description: >
   Web Performance Engineering — analyzes Core Web Vitals using the PageSpeed
   Insights API (PSI v5) and applies the 80/20 principle: identify the 20% of

package/presets/opencode/skills/python/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python
-name: Python
+name: python
 description: >
   Python development best practices: clean code, patterns,
   type hints, decorators, context managers, and architecture.
@@ -40,6 +40,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 ## When to Use
 
 - Writing any Python code in the project
@@ -604,7 +605,7 @@ items = items_to_keep
 
 ## Resources
 
-- **PEP 8** — Style Guide: <https://peps.python.org/pep-0008/>
-- **PEP 484** — Type Hints: <https://peps.python.org/pep-0484/>
-- **Real Python**: <https://realpython.com/>
-- **Python Docs**: <https://docs.python.org/3/>
+- **PEP 8** — Style Guide: https://peps.python.org/pep-0008/
+- **PEP 484** — Type Hints: https://peps.python.org/pep-0484/
+- **Real Python**: https://realpython.com/
+- **Python Docs**: https://docs.python.org/3/

package/presets/opencode/skills/python-django-stack/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python-django-stack
-name: Python Django Stack
+name: python-django-stack
 description: >
   Python and Django conventions for multi-tenant SaaS POS projects:
   views, services, naming, JSON APIs, PDFs, and cart patterns.

package/presets/opencode/skills/python-fastapi-stack/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: python-fastapi-stack
-name: Python FastAPI Stack
+name: python-fastapi-stack
 description: >
   FastAPI conventions for REST APIs: routers, Pydantic v2 schemas, dependency
   injection, error handling, pagination, and project structure.

package/presets/opencode/skills/security/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: security
-name: Security
+name: security
 description: >
   Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.
 

package/presets/opencode/skills/seo-analytics-injector/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: seo-analytics-injector
-name: SEO Analytics Injector
+name: seo-analytics-injector
 description: >
   Verifies and injects Google Tag Manager (GTM), GA4 event triggers, and optimized meta tags.
 user-invokable: true

package/presets/opencode/skills/spring-auth-auditor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-auth-auditor
-name: Spring Auth Auditor
+name: spring-auth-auditor
 description: >
   Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.
 user-invokable: true

package/presets/opencode/skills/spring-boot-feature/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-feature
-name: Spring Boot Feature Creation
+name: spring-boot-feature
 description: >
   Guides the creation of complete Spring Boot features following a structured,
   layer-by-layer workflow: entity, repository, service, controller, and tests.
@@ -44,6 +44,7 @@ quality:
   reviewed_by: codeconductor-core
   version: 0.1.0
 ---
+
 # Spring Boot Feature Creation
 
 When asked to create a feature, follow these steps **in order**. Do not skip

package/presets/opencode/skills/spring-boot-kotlin/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-kotlin
-name: Spring Boot + Kotlin
+name: spring-boot-kotlin
 description: >
   Provides expert knowledge of Spring Boot conventions, Kotlin idioms, and MVC
   patterns for backend API development.

package/presets/opencode/skills/spring-boot-testing-strategy/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: spring-boot-testing-strategy
-name: Spring Boot Testing Strategy
+name: spring-boot-testing-strategy
 description: >
   Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.
 

package/presets/opencode/skills/sqlalchemy/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: sqlalchemy
-name: SQLAlchemy
+name: sqlalchemy
 description: >
   SQLAlchemy 2.x patterns for async FastAPI projects: models, sessions, queries,
   bulk operations, transactions, and Alembic migrations.

package/presets/opencode/skills/tailwind-responsive-auditor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: tailwind-responsive-auditor
-name: Tailwind Responsive Auditor
+name: tailwind-responsive-auditor
 description: >
   Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.
 user-invokable: true

package/presets/opencode/skills/tdd-mutation-tester/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: tdd-mutation-tester
-name: TDD Mutation Tester
+name: tdd-mutation-tester
 description: >
   Performs simple mutation testing to verify test coverage and assertions.
 user-invokable: true

package/presets/seo-hotel/skills/astro-seo/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: astro-seo
-name: Astro SEO Validator
+name: astro-seo
 description: >
   SEO validation specific to Astro framework projects. Checks static generation,
   meta tag rendering, Content Collections usage, Island Architecture implications

package/presets/seo-hotel/skills/geo-readiness/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: geo-readiness
-name: GEO Readiness Checker
+name: geo-readiness
 description: >
   Validates AI-search readiness (Generative Engine Optimization) for hotel websites.
   Checks for citable content, factual cards, llms.txt, structured data completeness,

package/presets/seo-hotel/skills/off-page/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: off-page
-name: SEO Off-Page & Marketing
+name: off-page
 description: >
   Guidance for off-page SEO strategy specific to hotel and hospitality websites.
   Covers backlink strategy, local citations, review management, social signals,

package/presets/seo-hotel/skills/schema-validator/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: schema-validator
-name: Schema.org Validator
+name: schema-validator
 description: >
   Validates Schema.org structured data (JSON-LD, Microdata, RDFa) on hotel and hospitality websites.
   Supports single URL validation via --url and sitemap-scoped batch validation via --sitemap.

package/presets/seo-hotel/skills/seo-audit/SKILL.md

@@ -1,6 +1,6 @@
 ---
 id: seo-audit
-name: SEO Technical Audit
+name: seo-audit
 description: >
   Comprehensive technical SEO audit for hotel websites. Checks meta tags, headings,
   internal linking, page speed signals, mobile readiness, crawl directives, and Core Web Vitals

package/presets/shared/invoke-hook.cjs

@@ -2,8 +2,8 @@
 'use strict';
 
 const { spawnSync } = require('node:child_process');
-const { existsSync } = require('node:fs');
-const { join, resolve } = require('node:path');
+const { existsSync, readFileSync, realpathSync } = require('node:fs');
+const { delimiter, join, resolve } = require('node:path');
 
 const VALID_EVENTS = ['pre-tool', 'post-tool', 'session-start'];
 const SPAWN_TIMEOUT = 10000;
@@ -21,9 +21,10 @@ const isAgy = process.argv.some((a) => a === '--format=agy') || extra.includes('
 function findProjectRoot() {
   const candidates = [
     process.env.PROJECT_ROOT,
+    process.env.CLAUDE_PROJECT_DIR,
     process.env.WORKSPACE_DIR,
-    resolve(__dirname, '..', '..'),
     process.cwd(),
+    resolve(__dirname, '..', '..'),
   ].filter(Boolean);
 
   for (const dir of candidates) {
@@ -40,6 +41,8 @@ function findProjectRoot() {
 }
 
 const projectRoot = findProjectRoot();
+// Buffer once: each fallback attempt must receive the same host payload.
+const input = process.stdin.isTTY ? '' : readFileSync(0, 'utf8');
 
 /**
  * Run one candidate runner. Stdout/stderr are captured (not inherited) so a
@@ -54,7 +57,8 @@ function tryRun(bin, runArgs) {
   try {
     const result = spawnSync(bin, runArgs, {
       cwd: projectRoot,
-      stdio: ['inherit', 'pipe', 'pipe'],
+      stdio: ['pipe', 'pipe', 'pipe'],
+      input,
       windowsHide: true,
       env: process.env,
       encoding: 'utf8',
@@ -111,7 +115,18 @@ try {
     tryRun(process.execPath, [localDist, 'hook', event, ...extra]);
   }
 
-  tryRun('npx', ['--no-install', 'cc-codeconductor', 'hook', event, ...extra]);
+  // Locate global npm installs without invoking npx or Windows .cmd shims.
+  for (const binDir of (process.env.PATH || '').split(delimiter).filter(Boolean)) {
+    const candidates = [
+      join(binDir, 'node_modules', 'cc-codeconductor', 'dist', 'index.js'),
+      join(binDir, '..', 'lib', 'node_modules', 'cc-codeconductor', 'dist', 'index.js'),
+    ];
+    const executable = join(binDir, 'cc-codeconductor');
+    if (existsSync(executable)) candidates.push(realpathSync(executable));
+    for (const candidate of candidates) {
+      if (existsSync(candidate)) tryRun(process.execPath, [candidate, 'hook', event, ...extra]);
+    }
+  }
 } catch {
   // Ignore errors in runner attempts
 }

package/src/presets/manifests/codex.yml

@@ -1,5 +1,8 @@
 target: codex
 entries:
+  - src: codex/config.toml
+    dest: .codex/config.toml
+    strategy: create-only
   - src: codex/AGENTS.md
     dest: .codex/AGENTS.md
     strategy: merge-managed