cc-codeconductor 1.5.1 → 1.6.0

package/dist/library.js

@@ -25,13 +25,20 @@ var init_runner_target = __esm(() => {
     "cursor",
     "agy",
     "pi",
+    "muse",
     "all"
   ];
-  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"];
+  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"];
 });
 
 // src/validation/schemas.ts
+import { isAbsolute } from "node:path";
 import { z } from "zod";
+function isContainedRelativePath(value) {
+  if (value === "" || isAbsolute(value))
+    return false;
+  return !value.replace(/\\/g, "/").split("/").includes("..");
+}
 function validateCouncilSpec(data) {
   return CouncilSpecSchema.parse(data);
 }
@@ -149,7 +156,7 @@ function validateProductEvent(data) {
 function validateSkillsRegistry(data) {
   return SkillsRegistrySchema.parse(data);
 }
-var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, SkillFrontmatterSchema, CommandFrontmatterSchema, TargetCapabilitiesSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, FixIntakeOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, DeliveryRouteSchema, TokenUsageSchema, DeliveryTelemetrySchema, DeliveryLedgerTaskSchema, DeliveryLedgerSchema, HandoffEnvelopeSchema, RepoRelativePathSchema, DeliveryLedgerRequestSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema, SkillsRegistrySchema;
+var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ContainedRelativePathSchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, SkillFrontmatterSchema, CommandFrontmatterSchema, TargetCapabilitiesSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, FixIntakeOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, DeliveryRouteSchema, TokenUsageSchema, DeliveryTelemetrySchema, DeliveryLedgerTaskSchema, DeliveryLedgerSchema, HandoffEnvelopeSchema, RepoRelativePathSchema, DeliveryLedgerRequestSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema, SkillsRegistrySchema;
 var init_schemas = __esm(() => {
   init_runner_target();
   CouncilAgentSpecSchema = z.object({
@@ -229,9 +236,12 @@ var init_schemas = __esm(() => {
     "create-only",
     "skip"
   ]);
+  ContainedRelativePathSchema = z.string().refine(isContainedRelativePath, (value) => ({
+    message: `Path must be relative without ".." segments: ${value}`
+  }));
   ManifestEntrySchema = z.object({
-    src: z.string(),
-    dest: z.string(),
+    src: ContainedRelativePathSchema,
+    dest: ContainedRelativePathSchema,
     strategy: InstallStrategySchema,
     globalStrategy: InstallStrategySchema.optional(),
     template: z.boolean().optional()
@@ -252,7 +262,8 @@ var init_schemas = __esm(() => {
       cursor: z.string().optional(),
       agy: z.string().optional(),
       pi: z.string().optional(),
-      grok: z.string().optional()
+      grok: z.string().optional(),
+      muse: z.string().optional()
     })),
     tools: z.record(z.string(), ToolProviderNamesSchema).optional(),
     permissions: PermissionProviderNamesSchema.optional()

package/dist/validation/schemas.d.ts

@@ -182,15 +182,15 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     }>;
     defaults: z.ZodObject<{
-        target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+        target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
         overwrite: z.ZodBoolean;
         locale: z.ZodDefault<z.ZodOptional<z.ZodEnum<["en", "es"]>>>;
     }, "strip", z.ZodTypeAny, {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale: "en" | "es";
     }, {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale?: "en" | "es" | undefined;
     }>;
@@ -287,7 +287,7 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     };
     defaults: {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale: "en" | "es";
     };
@@ -322,7 +322,7 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     };
     defaults: {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale?: "en" | "es" | undefined;
     };
@@ -354,14 +354,14 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
 /**
  * Runner target schema
  */
-export declare const RunnerTargetSchema: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "all"]>;
+export declare const RunnerTargetSchema: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse", "all"]>;
 /**
  * Install manifest schemas
  */
 export declare const InstallStrategySchema: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
 export declare const ManifestEntrySchema: z.ZodObject<{
-    src: z.ZodString;
-    dest: z.ZodString;
+    src: z.ZodEffects<z.ZodString, string, string>;
+    dest: z.ZodEffects<z.ZodString, string, string>;
     strategy: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
     globalStrategy: z.ZodOptional<z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>>;
     template: z.ZodOptional<z.ZodBoolean>;
@@ -379,10 +379,10 @@ export declare const ManifestEntrySchema: z.ZodObject<{
     template?: boolean | undefined;
 }>;
 export declare const InstallManifestSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     entries: z.ZodArray<z.ZodObject<{
-        src: z.ZodString;
-        dest: z.ZodString;
+        src: z.ZodEffects<z.ZodString, string, string>;
+        dest: z.ZodEffects<z.ZodString, string, string>;
         strategy: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
         globalStrategy: z.ZodOptional<z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>>;
         template: z.ZodOptional<z.ZodBoolean>;
@@ -407,7 +407,7 @@ export declare const InstallManifestSchema: z.ZodObject<{
         globalStrategy?: "overwrite" | "append" | "merge-json" | "merge-managed" | "create-only" | "skip" | undefined;
         template?: boolean | undefined;
     }[];
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
 }, {
     entries: {
         src: string;
@@ -416,7 +416,7 @@ export declare const InstallManifestSchema: z.ZodObject<{
         globalStrategy?: "overwrite" | "append" | "merge-json" | "merge-managed" | "create-only" | "skip" | undefined;
         template?: boolean | undefined;
     }[];
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
 }>;
 /**
  * Tool provider names schema — maps base tool names to provider-specific names
@@ -427,7 +427,7 @@ export declare const PermissionProviderNamesSchema: z.ZodRecord<z.ZodString, z.Z
  * Model config schema — defines model names per provider per agent role
  */
 export declare const ModelConfigSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     agents: z.ZodRecord<z.ZodString, z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
@@ -437,6 +437,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         agy: z.ZodOptional<z.ZodString>;
         pi: z.ZodOptional<z.ZodString>;
         grok: z.ZodOptional<z.ZodString>;
+        muse: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         opencode?: string | undefined;
         claude?: string | undefined;
@@ -445,6 +446,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }, {
         opencode?: string | undefined;
@@ -454,6 +456,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>>;
     tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>>;
@@ -467,9 +470,10 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>;
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     tools?: Record<string, Record<string, string>> | undefined;
     permissions?: Record<string, string> | undefined;
 }, {
@@ -481,9 +485,10 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>;
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     tools?: Record<string, Record<string, string>> | undefined;
     permissions?: Record<string, string> | undefined;
 }>;
@@ -550,7 +555,7 @@ export type CommandFrontmatter = z.infer<typeof CommandFrontmatterSchema>;
  * preset doesn't ship an MCP config, so `mcp: false` here).
  */
 export declare const TargetCapabilitiesSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     invocation: z.ZodEnum<["colon", "hyphen", "dollar"]>;
     commandFormat: z.ZodEnum<["markdown", "toml", "skill"]>;
     contextFile: z.ZodString;
@@ -580,7 +585,7 @@ export declare const TargetCapabilitiesSchema: z.ZodObject<{
         mcp: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     invocation: "colon" | "hyphen" | "dollar";
     commandFormat: "markdown" | "toml" | "skill";
     contextFile: string;
@@ -592,7 +597,7 @@ export declare const TargetCapabilitiesSchema: z.ZodObject<{
     };
     subagentInvocationStyle?: "task-tool" | "adopt-role" | "invoke-with-context" | undefined;
 }, {
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     invocation: "colon" | "hyphen" | "dollar";
     commandFormat: "markdown" | "toml" | "skill";
     contextFile: string;
@@ -4714,7 +4719,7 @@ export declare const EvaluationIndexSchema: z.ZodObject<{
 export declare const ExecutionProfileNameSchema: z.ZodEnum<["balanced", "quality", "economical"]>;
 export declare const ExecutionProfileSchema: z.ZodObject<{
     profile: z.ZodDefault<z.ZodEnum<["balanced", "quality", "economical"]>>;
-    target: z.ZodOptional<z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>>;
+    target: z.ZodOptional<z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>>;
     overrides: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
     subagentPolicy: z.ZodOptional<z.ZodObject<{
         orchestrator: z.ZodOptional<z.ZodEnum<["primary", "delegate"]>>;
@@ -4729,14 +4734,14 @@ export declare const ExecutionProfileSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     profile: "balanced" | "quality" | "economical";
     overrides: Record<string, string>;
-    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | undefined;
+    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse" | undefined;
     subagentPolicy?: {
         orchestrator?: "primary" | "delegate" | undefined;
         testerReviewer?: "primary" | "delegate" | undefined;
     } | undefined;
 }, {
     profile?: "balanced" | "quality" | "economical" | undefined;
-    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | undefined;
+    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse" | undefined;
     overrides?: Record<string, string> | undefined;
     subagentPolicy?: {
         orchestrator?: "primary" | "delegate" | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-codeconductor",
-  "version": "1.5.1",
+  "version": "1.6.0",
   "description": "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
   "keywords": [
     "ai",

package/presets/agy/skills/openspec/SKILL.md

@@ -16,7 +16,7 @@ gates, not a reference doc. Specs describe WHAT; `design.md` describes HOW.
 
 ## When to Use
 
-- `/cc-openspec` or `openspec next` / `plan` / `done` / `archive`
+- `/cc-openspec` or `openspec plan` / `next` / `done` / `sync` / `verify` / `archive`
 - An item is `READY` or later and must move through the state machine
 
 **NOT** for creating `BACKLOG.md` (use skill `backlog`) or for stack-specific
@@ -26,22 +26,43 @@ coding rules.
 
 Local CLI is `bun run dev`. Published package is `npx cc-codeconductor`.
 
-1. `openspec validate` — must pass before delivery.
-2. `openspec plan BC-xxx` if the item is not yet `PLANNED`.
-3. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
-4. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
+1. `openspec validate` — must pass before delivery. If you reached this
+   workflow on your own (the user did not ask for OpenSpec) and there is no
+   `BACKLOG.md` / `openspec/` root, answer normally instead — never scaffold
+   one as a side effect.
+2. `openspec plan BC-xxx` if the item is not yet `PLANNED`. Planning only: it
+   writes TaskCards plus proposal/design/tasks/specs under
+   `openspec/changes/<slug>/` and stops. Never implement in this step.
+3. Review the plan before `start`: read proposal → delta specs → tasks, in that
+   order, and confirm intent, scope, testable FR/SC, and edge-case scenarios.
+   Fix the Markdown directly or ask for revisions — code comes later.
+4. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
+5. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
    implement (`implementer`) → review (`reviewer`). If Global `TDD required: yes`,
-   test runs before implement.
-5. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
-   evidence JSON is rejected.
-6. `scorecard create --task BC-xxx --from-diff` then record a verdict.
-7. `openspec archive` only after human review when `Review required: yes` and
-   the scorecard is PASS.
+   test runs before implement. Discover is read-only: it never writes code.
+6. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
+   evidence JSON is rejected. The implementer ticks `tasks.md` boxes
+   (`- [ ]` → `- [x]`) as each FR lands; only `x`/`X` counts as done.
+7. When implementation reveals a design problem, pause and reconcile the planning
+   artifacts first — in any direction (a later artifact may force revising an
+   earlier one). Planning artifacts only in that step, never code; confirm each
+   edit. If the item's intent changed rather than its details, open a fresh item
+   with `/cc-backlog` (`/cc:backlog`) instead of warping this one.
+8. `openspec verify --output json` — advisory pre-archive checklist
+   (`archiveReady` plus Completeness/Correctness/Coherence issues). Optional:
+   `openspec sync` merges delta specs into `openspec/specs/` without closing.
+9. `scorecard create --task BC-xxx --from-diff` then record a verdict.
+10. `openspec archive` only after human review when `Review required: yes` and
+    the scorecard is PASS. Archive re-checks planning artifacts and analyze
+    CRITICALs, and warns on unchecked `tasks.md` boxes.
 
 Status machine: `TODO` → `READY` → `PLANNED` → `IN_PROGRESS` → `REVIEW` → `DONE`
 → Archive. `BLOCKED` returns to `READY`. Reviewer rejection: `REVIEW` →
 `IN_PROGRESS`.
 
+`openspec status --output json` also reports artifact presence, `tasks.md`
+checkbox progress, and `nextSteps` for the next CLI call.
+
 ## Web interface scope
 
 When the task concerns web layout, component states, feedback, motion, or a
@@ -70,17 +91,24 @@ delivery read-only and record unavailable visual or emulator evidence as pending
 | I'll add tests after green | Global TDD required means tester before implementer. |
 | I'll write the evidence JSON myself | Handmade TDD JSON is rejected. Use the verification runner. |
 | The item is small; skip analyze | `openspec analyze` CRITICAL still stops implement. |
+| The plan is generated; skip reading it | Read proposal → specs → tasks before `start`. Generated is not reviewed. |
+| I'll fix the spec after shipping | Reconcile planning artifacts before continuing to implement. |
 
 ## Red Flags
 
 - Implementing while analyze reports CRITICAL
+- Starting cards before reading the generated plan
 - Archive without a PASS scorecard when review is required
+- Archive while `openspec verify` reports CRITICAL
 - Acceptance like "improve UX" with no measurable check
 
 ## Verification
 
 - [ ] `openspec validate` exit 0
+- [ ] Plan reviewed (proposal → specs → tasks) before `start`
 - [ ] `openspec analyze --output json` has no CRITICAL
 - [ ] TDD evidence from the runner when TDD is required
+- [ ] `tasks.md` boxes ticked as FRs land
+- [ ] `openspec verify --output json` checked before archive
 - [ ] `scorecard create --from-diff` recorded
 - [ ] Suite check (optional): `bun run dev scorecard suite-run --suite workflow-gates`

package/presets/agy/workflows/cc-council.md

@@ -63,7 +63,7 @@ implementer must:
 1. Write the minimal code required to pass the tests.
 2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
 3. NOT refactor adjacent code, change existing styles, or build speculative features.
-4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state).
+4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state), at most 3 iterations -- then stop and report the failing tests instead of looping.
 
 ---
 
@@ -75,7 +75,7 @@ The council will evaluate the diff against the 6 axes (Architecture, Security, P
 
 If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
 - The Review Report status is **BLOCKED**.
-- Return to Step 4 with the feedback.
+- Return to Step 4 with the feedback (at most 3 review rounds in total -- then deliver the BLOCKED verdict with the unresolved findings instead of looping).
 
 If APPROVED (no CRITICAL findings):
 - Deliver the final Council Verdict and the diff summary.

package/presets/claude/commands/cc/council.md

@@ -62,7 +62,7 @@ implementer must:
 1. Write the minimal code required to pass the tests.
 2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
 3. NOT refactor adjacent code, change existing styles, or build speculative features.
-4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state).
+4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state), at most 3 iterations -- then stop and report the failing tests instead of looping.
 
 ---
 
@@ -74,7 +74,7 @@ The council will evaluate the diff against the 6 axes (Architecture, Security, P
 
 If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
 - The Review Report status is **BLOCKED**.
-- Return to Step 4 with the feedback.
+- Return to Step 4 with the feedback (at most 3 review rounds in total -- then deliver the BLOCKED verdict with the unresolved findings instead of looping).
 
 If APPROVED (no CRITICAL findings):
 - Deliver the final Council Verdict and the diff summary.

package/presets/claude/commands/cc/openspec.md

@@ -146,6 +146,13 @@ Show:
 
 Update BACKLOG item status to `PLANNED` (CLI does this automatically).
 
+`plan` is planning-only: it writes TaskCards plus proposal/design/tasks/specs
+and stops. Before Step 4, review the plan in this order — proposal → delta
+specs → tasks — and confirm: intent is right, no scope creep, every FR is
+testable with a scenario that exercises it, edge/error cases are covered, and
+each task traces to an FR/SC. Fix the Markdown directly or ask for revisions.
+Do not `start` any card until the plan reads correctly.
+
 ---
 
 ## Drive card status (CLI)
@@ -156,10 +163,12 @@ Do not edit `.codeconductor/openspec-state.json` by hand.
 npx cc-codeconductor openspec start <cardId>
 npx cc-codeconductor openspec done <cardId>
 npx cc-codeconductor openspec block <cardId> --reason "waiting on design"
+npx cc-codeconductor openspec sync <itemId>
+npx cc-codeconductor openspec verify <itemId>
 npx cc-codeconductor openspec archive <itemId>
 ```
 
-`start` moves the card `pending → doing` and the item `PLANNED → IN_PROGRESS`. `done` marks the card complete, updates Progress, and moves the item to `REVIEW` when every card is done and review is required. `archive` requires all cards done (and review evidence when Global review is required) and moves `openspec/changes/<slug>` to `archive/`.
+`start` moves the card `pending → doing` and the item `PLANNED → IN_PROGRESS`. `done` marks the card complete, updates Progress, and moves the item to `REVIEW` when every card is done and review is required. `sync` merges delta specs into `openspec/specs/` without closing the item (optional before archive). `verify` is the advisory pre-archive checklist: exit 0 with `archiveReady` plus Completeness/Correctness/Coherence issues. `archive` requires all cards done (and review evidence when Global review is required), re-checks planning artifacts and analyze CRITICALs, warns on unchecked `tasks.md` boxes, then moves `openspec/changes/<slug>` to `archive/`.
 
 ---
 
@@ -196,6 +205,14 @@ After each phase:
 
 Implementer: create a Git worktree before editing (`git worktree add ../<branch>-session <branch>`).
 
+Discover is read-only: `repo-explorer` never writes code. The implementer ticks
+`tasks.md` boxes (`- [ ]` → `- [x]`) as each FR lands — only `x`/`X` counts as
+done. If implementation reveals a design problem, pause and reconcile the
+planning artifacts first (any direction: a later artifact may force revising an
+earlier one). Planning artifacts only in that step — never code — and confirm
+each edit. If the item's intent changed rather than its details, open a fresh
+item with `/cc:backlog` instead of warping this one.
+
 ---
 
 ## Step 5 — Review gate
@@ -221,6 +238,8 @@ If **approved**: proceed to Step 6.
 
 ## Step 6 — Scorecard and update backlog
 
+First run the advisory pre-archive check (`npx cc-codeconductor openspec verify <BC-id> --output json`): confirm `archiveReady` and clear any Completeness/Correctness/Coherence issues. Optionally run `openspec sync <BC-id>` to merge delta specs into `openspec/specs/` without closing the item. Then:
+
 1. `npx cc-codeconductor scorecard create --task <BC-id> --from-diff`
 2. Complete criteria; `scorecard record` with verdict and optional cost/tokens
 3. Set item `Progress: 100%`, `Status: DONE` if PASS

package/presets/claude/skills/openspec/SKILL.md

@@ -16,7 +16,7 @@ gates, not a reference doc. Specs describe WHAT; `design.md` describes HOW.
 
 ## When to Use
 
-- `/cc-openspec` or `openspec next` / `plan` / `done` / `archive`
+- `/cc-openspec` or `openspec plan` / `next` / `done` / `sync` / `verify` / `archive`
 - An item is `READY` or later and must move through the state machine
 
 **NOT** for creating `BACKLOG.md` (use skill `backlog`) or for stack-specific
@@ -26,22 +26,43 @@ coding rules.
 
 Local CLI is `bun run dev`. Published package is `npx cc-codeconductor`.
 
-1. `openspec validate` — must pass before delivery.
-2. `openspec plan BC-xxx` if the item is not yet `PLANNED`.
-3. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
-4. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
+1. `openspec validate` — must pass before delivery. If you reached this
+   workflow on your own (the user did not ask for OpenSpec) and there is no
+   `BACKLOG.md` / `openspec/` root, answer normally instead — never scaffold
+   one as a side effect.
+2. `openspec plan BC-xxx` if the item is not yet `PLANNED`. Planning only: it
+   writes TaskCards plus proposal/design/tasks/specs under
+   `openspec/changes/<slug>/` and stops. Never implement in this step.
+3. Review the plan before `start`: read proposal → delta specs → tasks, in that
+   order, and confirm intent, scope, testable FR/SC, and edge-case scenarios.
+   Fix the Markdown directly or ask for revisions — code comes later.
+4. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
+5. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
    implement (`implementer`) → review (`reviewer`). If Global `TDD required: yes`,
-   test runs before implement.
-5. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
-   evidence JSON is rejected.
-6. `scorecard create --task BC-xxx --from-diff` then record a verdict.
-7. `openspec archive` only after human review when `Review required: yes` and
-   the scorecard is PASS.
+   test runs before implement. Discover is read-only: it never writes code.
+6. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
+   evidence JSON is rejected. The implementer ticks `tasks.md` boxes
+   (`- [ ]` → `- [x]`) as each FR lands; only `x`/`X` counts as done.
+7. When implementation reveals a design problem, pause and reconcile the planning
+   artifacts first — in any direction (a later artifact may force revising an
+   earlier one). Planning artifacts only in that step, never code; confirm each
+   edit. If the item's intent changed rather than its details, open a fresh item
+   with `/cc-backlog` (`/cc:backlog`) instead of warping this one.
+8. `openspec verify --output json` — advisory pre-archive checklist
+   (`archiveReady` plus Completeness/Correctness/Coherence issues). Optional:
+   `openspec sync` merges delta specs into `openspec/specs/` without closing.
+9. `scorecard create --task BC-xxx --from-diff` then record a verdict.
+10. `openspec archive` only after human review when `Review required: yes` and
+    the scorecard is PASS. Archive re-checks planning artifacts and analyze
+    CRITICALs, and warns on unchecked `tasks.md` boxes.
 
 Status machine: `TODO` → `READY` → `PLANNED` → `IN_PROGRESS` → `REVIEW` → `DONE`
 → Archive. `BLOCKED` returns to `READY`. Reviewer rejection: `REVIEW` →
 `IN_PROGRESS`.
 
+`openspec status --output json` also reports artifact presence, `tasks.md`
+checkbox progress, and `nextSteps` for the next CLI call.
+
 ## Web interface scope
 
 When the task concerns web layout, component states, feedback, motion, or a
@@ -70,17 +91,24 @@ delivery read-only and record unavailable visual or emulator evidence as pending
 | I'll add tests after green | Global TDD required means tester before implementer. |
 | I'll write the evidence JSON myself | Handmade TDD JSON is rejected. Use the verification runner. |
 | The item is small; skip analyze | `openspec analyze` CRITICAL still stops implement. |
+| The plan is generated; skip reading it | Read proposal → specs → tasks before `start`. Generated is not reviewed. |
+| I'll fix the spec after shipping | Reconcile planning artifacts before continuing to implement. |
 
 ## Red Flags
 
 - Implementing while analyze reports CRITICAL
+- Starting cards before reading the generated plan
 - Archive without a PASS scorecard when review is required
+- Archive while `openspec verify` reports CRITICAL
 - Acceptance like "improve UX" with no measurable check
 
 ## Verification
 
 - [ ] `openspec validate` exit 0
+- [ ] Plan reviewed (proposal → specs → tasks) before `start`
 - [ ] `openspec analyze --output json` has no CRITICAL
 - [ ] TDD evidence from the runner when TDD is required
+- [ ] `tasks.md` boxes ticked as FRs land
+- [ ] `openspec verify --output json` checked before archive
 - [ ] `scorecard create --from-diff` recorded
 - [ ] Suite check (optional): `bun run dev scorecard suite-run --suite workflow-gates`

package/presets/codex/skills/cc-council/SKILL.md

@@ -73,7 +73,7 @@ implementer must:
 1. Write the minimal code required to pass the tests.
 2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
 3. NOT refactor adjacent code, change existing styles, or build speculative features.
-4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state).
+4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state), at most 3 iterations -- then stop and report the failing tests instead of looping.
 
 ---
 
@@ -85,7 +85,7 @@ The council will evaluate the diff against the 6 axes (Architecture, Security, P
 
 If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
 - The Review Report status is **BLOCKED**.
-- Return to Step 4 with the feedback.
+- Return to Step 4 with the feedback (at most 3 review rounds in total -- then deliver the BLOCKED verdict with the unresolved findings instead of looping).
 
 If APPROVED (no CRITICAL findings):
 - Deliver the final Council Verdict and the diff summary.

package/presets/codex/skills/cc-openspec/SKILL.md

@@ -128,6 +128,13 @@ Show:
 
 Update BACKLOG item status to `PLANNED` (CLI does this automatically).
 
+`plan` is planning-only: it writes TaskCards plus proposal/design/tasks/specs
+and stops. Before Step 5, review the plan in this order — proposal → delta
+specs → tasks — and confirm: intent is right, no scope creep, every FR is
+testable with a scenario that exercises it, edge/error cases are covered, and
+each task traces to an FR/SC. Fix the Markdown directly or ask for revisions.
+Do not `start` any card until the plan reads correctly.
+
 ---
 
 ## Drive card status (CLI)
@@ -138,10 +145,12 @@ Do not edit `.codeconductor/openspec-state.json` by hand.
 npx cc-codeconductor openspec start <cardId>
 npx cc-codeconductor openspec done <cardId>
 npx cc-codeconductor openspec block <cardId> --reason "waiting on design"
+npx cc-codeconductor openspec sync <itemId>
+npx cc-codeconductor openspec verify <itemId>
 npx cc-codeconductor openspec archive <itemId>
 ```
 
-`start` moves the card `pending → doing` and the item `PLANNED → IN_PROGRESS`. `done` marks the card complete, updates Progress, and moves the item to `REVIEW` when every card is done and review is required. `archive` requires all cards done (and review evidence when Global review is required) and moves `openspec/changes/<slug>` to `archive/`.
+`start` moves the card `pending → doing` and the item `PLANNED → IN_PROGRESS`. `done` marks the card complete, updates Progress, and moves the item to `REVIEW` when every card is done and review is required. `sync` merges delta specs into `openspec/specs/` without closing the item (optional before archive). `verify` is the advisory pre-archive checklist: exit 0 with `archiveReady` plus Completeness/Correctness/Coherence issues. `archive` requires all cards done (and review evidence when Global review is required), re-checks planning artifacts and analyze CRITICALs, warns on unchecked `tasks.md` boxes, then moves `openspec/changes/<slug>` to `archive/`.
 
 For test and implementation cards, `done` also requires a current RDD-backed
 RED or GREEN receipt respectively. Do not reuse evidence after candidate files
@@ -182,6 +191,14 @@ After each phase:
 
 Implementer: create a Git worktree before editing (`git worktree add ../<branch>-session <branch>`).
 
+Discover is read-only: `repo-explorer` never writes code. The implementer ticks
+`tasks.md` boxes (`- [ ]` → `- [x]`) as each FR lands — only `x`/`X` counts as
+done. If implementation reveals a design problem, pause and reconcile the
+planning artifacts first (any direction: a later artifact may force revising an
+earlier one). Planning artifacts only in that step — never code — and confirm
+each edit. If the item's intent changed rather than its details, open a fresh
+item with `$cc-backlog` instead of warping this one.
+
 ---
 
 ## Step 6 — Review gate
@@ -207,6 +224,8 @@ If **approved**: proceed to Step 6.
 
 ## Step 7 — Scorecard and update backlog
 
+First run the advisory pre-archive check (`npx cc-codeconductor openspec verify <BC-id> --output json`): confirm `archiveReady` and clear any Completeness/Correctness/Coherence issues. Optionally run `openspec sync <BC-id>` to merge delta specs into `openspec/specs/` without closing the item. Then:
+
 1. `npx cc-codeconductor scorecard create --task <BC-id> --from-diff`
 2. Complete criteria; `scorecard record` with verdict and optional cost/tokens
 3. Set item `Progress: 100%`, `Status: DONE` if PASS