cc-codeconductor 1.5.1 → 1.6.1

package/dist/library.js

@@ -25,13 +25,20 @@ var init_runner_target = __esm(() => {
     "cursor",
     "agy",
     "pi",
+    "muse",
     "all"
   ];
-  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"];
+  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"];
 });
 
 // src/validation/schemas.ts
+import { isAbsolute } from "node:path";
 import { z } from "zod";
+function isContainedRelativePath(value) {
+  if (value === "" || isAbsolute(value))
+    return false;
+  return !value.replace(/\\/g, "/").split("/").includes("..");
+}
 function validateCouncilSpec(data) {
   return CouncilSpecSchema.parse(data);
 }
@@ -149,7 +156,7 @@ function validateProductEvent(data) {
 function validateSkillsRegistry(data) {
   return SkillsRegistrySchema.parse(data);
 }
-var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, SkillFrontmatterSchema, CommandFrontmatterSchema, TargetCapabilitiesSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, FixIntakeOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, DeliveryRouteSchema, TokenUsageSchema, DeliveryTelemetrySchema, DeliveryLedgerTaskSchema, DeliveryLedgerSchema, HandoffEnvelopeSchema, RepoRelativePathSchema, DeliveryLedgerRequestSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema, SkillsRegistrySchema;
+var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ContainedRelativePathSchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, SkillFrontmatterSchema, CommandFrontmatterSchema, TargetCapabilitiesSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, FixIntakeOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, DeliveryRouteSchema, TokenUsageSchema, DeliveryTelemetrySchema, DeliveryLedgerTaskSchema, DeliveryLedgerSchema, HandoffEnvelopeSchema, RepoRelativePathSchema, DeliveryLedgerRequestSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema, SkillsRegistrySchema;
 var init_schemas = __esm(() => {
   init_runner_target();
   CouncilAgentSpecSchema = z.object({
@@ -229,9 +236,12 @@ var init_schemas = __esm(() => {
     "create-only",
     "skip"
   ]);
+  ContainedRelativePathSchema = z.string().refine(isContainedRelativePath, (value) => ({
+    message: `Path must be relative without ".." segments: ${value}`
+  }));
   ManifestEntrySchema = z.object({
-    src: z.string(),
-    dest: z.string(),
+    src: ContainedRelativePathSchema,
+    dest: ContainedRelativePathSchema,
     strategy: InstallStrategySchema,
     globalStrategy: InstallStrategySchema.optional(),
     template: z.boolean().optional()
@@ -252,7 +262,8 @@ var init_schemas = __esm(() => {
       cursor: z.string().optional(),
       agy: z.string().optional(),
       pi: z.string().optional(),
-      grok: z.string().optional()
+      grok: z.string().optional(),
+      muse: z.string().optional()
     })),
     tools: z.record(z.string(), ToolProviderNamesSchema).optional(),
     permissions: PermissionProviderNamesSchema.optional()
@@ -1745,11 +1756,11 @@ async function runCompileCheck(options) {
   }
 }
 // src/core/verification/verification-runner.ts
-import { mkdir as mkdir5, readdir as readdir2, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir6, readdir as readdir2, writeFile as writeFile5 } from "node:fs/promises";
 
 // src/core/verification/rdd-receipt.ts
-import { createHash } from "node:crypto";
-import { readdir, readFile as readFile6 } from "node:fs/promises";
+import { createHash, randomBytes } from "node:crypto";
+import { mkdir as mkdir5, readdir, readFile as readFile6, writeFile as writeFile4 } from "node:fs/promises";
 import { join as join2, relative, resolve as resolve5, sep } from "node:path";
 var EXCLUDED_DIRECTORIES = new Set([
   ".git",
@@ -1790,6 +1801,23 @@ function manifestHash(paths) {
   return sha256(paths.map((entry) => `${entry.path}\x00${entry.hash}`).join(`
 `));
 }
+function receiptRegistryDir(projectRoot) {
+  return join2(resolve5(projectRoot), ".codeconductor", "rdd-receipts");
+}
+function isWellFormedNonce(nonce) {
+  return typeof nonce === "string" && /^[0-9a-f]{32}$/.test(nonce);
+}
+async function isRegisteredReceipt(projectRoot, receipt) {
+  if (!isWellFormedNonce(receipt.nonce))
+    return false;
+  try {
+    const raw = await readFile6(join2(receiptRegistryDir(projectRoot), `${receipt.nonce}.json`), "utf-8");
+    const entry = JSON.parse(raw);
+    return entry.manifestHash === receipt.manifestHash;
+  } catch {
+    return false;
+  }
+}
 function isRddReceipt(value) {
   if (!value || typeof value !== "object")
     return false;
@@ -1803,17 +1831,26 @@ async function captureReceipt(projectRoot, input) {
     throw new Error("RDD receipts require at least one protected path");
   }
   const paths = await fingerprint(projectRoot, input.paths);
-  return {
+  const hashed = manifestHash(paths);
+  const nonce = randomBytes(16).toString("hex");
+  const capturedAt = new Date().toISOString();
+  const receipt = {
     version: 1,
     taskId: input.taskId,
     phase: input.phase,
     paths,
     coverage: input.coverage ?? "paths",
-    manifestHash: manifestHash(paths),
+    manifestHash: hashed,
     command: input.command,
     outcome: input.outcome,
-    capturedAt: new Date().toISOString()
+    capturedAt,
+    nonce
   };
+  const directory = receiptRegistryDir(projectRoot);
+  await mkdir5(directory, { recursive: true });
+  const entry = { manifestHash: hashed, taskId: input.taskId, capturedAt };
+  await writeFile4(join2(directory, `${nonce}.json`), JSON.stringify(entry, null, 2), "utf-8");
+  return receipt;
 }
 async function collectReceiptPaths(projectRoot) {
   const root = resolve5(projectRoot);
@@ -1834,6 +1871,7 @@ async function collectReceiptPaths(projectRoot) {
   return paths.sort();
 }
 async function verifyReceipt(projectRoot, receipt) {
+  const registered = await isRegisteredReceipt(projectRoot, receipt);
   const expected = new Map(receipt.paths.map((entry) => [entry.path, entry.hash]));
   const changedPaths = [];
   const current = [];
@@ -1859,7 +1897,7 @@ async function verifyReceipt(projectRoot, receipt) {
   changedPaths.sort();
   const actualHash = manifestHash(current.sort((left, right) => left.path.localeCompare(right.path)));
   return {
-    valid: changedPaths.length === 0 && actualHash === receipt.manifestHash,
+    valid: registered && changedPaths.length === 0 && actualHash === receipt.manifestHash,
     expectedHash: receipt.manifestHash,
     actualHash,
     changedPaths
@@ -1904,8 +1942,8 @@ async function persistEvidence(projectRoot, evidence) {
   if (!evidencePath.success)
     return evidencePath;
   try {
-    await mkdir5(evDir, { recursive: true });
-    await writeFile4(evidencePath.data, JSON.stringify(evidence, null, 2), "utf-8");
+    await mkdir6(evDir, { recursive: true });
+    await writeFile5(evidencePath.data, JSON.stringify(evidence, null, 2), "utf-8");
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
   }

package/dist/validation/schemas.d.ts

@@ -182,15 +182,15 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     }>;
     defaults: z.ZodObject<{
-        target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+        target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
         overwrite: z.ZodBoolean;
         locale: z.ZodDefault<z.ZodOptional<z.ZodEnum<["en", "es"]>>>;
     }, "strip", z.ZodTypeAny, {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale: "en" | "es";
     }, {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale?: "en" | "es" | undefined;
     }>;
@@ -287,7 +287,7 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     };
     defaults: {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale: "en" | "es";
     };
@@ -322,7 +322,7 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
         profile?: string | undefined;
     };
     defaults: {
-        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+        target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
         overwrite: boolean;
         locale?: "en" | "es" | undefined;
     };
@@ -354,14 +354,14 @@ export declare const CodeConductorConfigSchema: z.ZodObject<{
 /**
  * Runner target schema
  */
-export declare const RunnerTargetSchema: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "all"]>;
+export declare const RunnerTargetSchema: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse", "all"]>;
 /**
  * Install manifest schemas
  */
 export declare const InstallStrategySchema: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
 export declare const ManifestEntrySchema: z.ZodObject<{
-    src: z.ZodString;
-    dest: z.ZodString;
+    src: z.ZodEffects<z.ZodString, string, string>;
+    dest: z.ZodEffects<z.ZodString, string, string>;
     strategy: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
     globalStrategy: z.ZodOptional<z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>>;
     template: z.ZodOptional<z.ZodBoolean>;
@@ -379,10 +379,10 @@ export declare const ManifestEntrySchema: z.ZodObject<{
     template?: boolean | undefined;
 }>;
 export declare const InstallManifestSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     entries: z.ZodArray<z.ZodObject<{
-        src: z.ZodString;
-        dest: z.ZodString;
+        src: z.ZodEffects<z.ZodString, string, string>;
+        dest: z.ZodEffects<z.ZodString, string, string>;
         strategy: z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>;
         globalStrategy: z.ZodOptional<z.ZodEnum<["overwrite", "append", "merge-json", "merge-managed", "create-only", "skip"]>>;
         template: z.ZodOptional<z.ZodBoolean>;
@@ -407,7 +407,7 @@ export declare const InstallManifestSchema: z.ZodObject<{
         globalStrategy?: "overwrite" | "append" | "merge-json" | "merge-managed" | "create-only" | "skip" | undefined;
         template?: boolean | undefined;
     }[];
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
 }, {
     entries: {
         src: string;
@@ -416,7 +416,7 @@ export declare const InstallManifestSchema: z.ZodObject<{
         globalStrategy?: "overwrite" | "append" | "merge-json" | "merge-managed" | "create-only" | "skip" | undefined;
         template?: boolean | undefined;
     }[];
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
 }>;
 /**
  * Tool provider names schema — maps base tool names to provider-specific names
@@ -427,7 +427,7 @@ export declare const PermissionProviderNamesSchema: z.ZodRecord<z.ZodString, z.Z
  * Model config schema — defines model names per provider per agent role
  */
 export declare const ModelConfigSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     agents: z.ZodRecord<z.ZodString, z.ZodObject<{
         claude: z.ZodOptional<z.ZodString>;
         opencode: z.ZodOptional<z.ZodString>;
@@ -437,6 +437,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         agy: z.ZodOptional<z.ZodString>;
         pi: z.ZodOptional<z.ZodString>;
         grok: z.ZodOptional<z.ZodString>;
+        muse: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         opencode?: string | undefined;
         claude?: string | undefined;
@@ -445,6 +446,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }, {
         opencode?: string | undefined;
@@ -454,6 +456,7 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>>;
     tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>>;
@@ -467,9 +470,10 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>;
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     tools?: Record<string, Record<string, string>> | undefined;
     permissions?: Record<string, string> | undefined;
 }, {
@@ -481,9 +485,10 @@ export declare const ModelConfigSchema: z.ZodObject<{
         cursor?: string | undefined;
         agy?: string | undefined;
         pi?: string | undefined;
+        muse?: string | undefined;
         grok?: string | undefined;
     }>;
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     tools?: Record<string, Record<string, string>> | undefined;
     permissions?: Record<string, string> | undefined;
 }>;
@@ -550,7 +555,7 @@ export type CommandFrontmatter = z.infer<typeof CommandFrontmatterSchema>;
  * preset doesn't ship an MCP config, so `mcp: false` here).
  */
 export declare const TargetCapabilitiesSchema: z.ZodObject<{
-    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>;
+    target: z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>;
     invocation: z.ZodEnum<["colon", "hyphen", "dollar"]>;
     commandFormat: z.ZodEnum<["markdown", "toml", "skill"]>;
     contextFile: z.ZodString;
@@ -580,7 +585,7 @@ export declare const TargetCapabilitiesSchema: z.ZodObject<{
         mcp: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     invocation: "colon" | "hyphen" | "dollar";
     commandFormat: "markdown" | "toml" | "skill";
     contextFile: string;
@@ -592,7 +597,7 @@ export declare const TargetCapabilitiesSchema: z.ZodObject<{
     };
     subagentInvocationStyle?: "task-tool" | "adopt-role" | "invoke-with-context" | undefined;
 }, {
-    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi";
+    target: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse";
     invocation: "colon" | "hyphen" | "dollar";
     commandFormat: "markdown" | "toml" | "skill";
     contextFile: string;
@@ -4714,7 +4719,7 @@ export declare const EvaluationIndexSchema: z.ZodObject<{
 export declare const ExecutionProfileNameSchema: z.ZodEnum<["balanced", "quality", "economical"]>;
 export declare const ExecutionProfileSchema: z.ZodObject<{
     profile: z.ZodDefault<z.ZodEnum<["balanced", "quality", "economical"]>>;
-    target: z.ZodOptional<z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"]>>;
+    target: z.ZodOptional<z.ZodEnum<["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi", "muse"]>>;
     overrides: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
     subagentPolicy: z.ZodOptional<z.ZodObject<{
         orchestrator: z.ZodOptional<z.ZodEnum<["primary", "delegate"]>>;
@@ -4729,14 +4734,14 @@ export declare const ExecutionProfileSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     profile: "balanced" | "quality" | "economical";
     overrides: Record<string, string>;
-    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | undefined;
+    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse" | undefined;
     subagentPolicy?: {
         orchestrator?: "primary" | "delegate" | undefined;
         testerReviewer?: "primary" | "delegate" | undefined;
     } | undefined;
 }, {
     profile?: "balanced" | "quality" | "economical" | undefined;
-    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | undefined;
+    target?: "opencode" | "claude" | "codex" | "gemini" | "cursor" | "agy" | "pi" | "muse" | undefined;
     overrides?: Record<string, string> | undefined;
     subagentPolicy?: {
         orchestrator?: "primary" | "delegate" | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-codeconductor",
-  "version": "1.5.1",
+  "version": "1.6.1",
   "description": "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
   "keywords": [
     "ai",
@@ -54,6 +54,7 @@
     "test:fast": "bun run scripts/test-fast.ts",
     "typecheck": "tsc --noEmit",
     "lint": "bun run scripts/lint.ts",
+    "check:council-redirect": "bun run scripts/check-council-redirect.ts",
     "check:coverage": "bun run scripts/check-coverage.ts",
     "check:prompt-changelog": "bun run scripts/check-prompt-changelog.ts",
     "check:drift": "bun run scripts/check-drift.ts",

package/presets/agy/skills/cc-feature/SKILL.md

@@ -66,31 +66,32 @@ not invoke implementer until the plan is approved.**
 
 ---
 
-## Step 3 — Implementation (implementer)
+## Step 3 — Test coverage (tester)
 
-Invoke `implementer` with the approved Technical Plan and the Task Card.
-Implementer creates a Git Worktree before touching any file; all edits happen inside it.
+Invoke `tester` with the approved Technical Plan and the Task Card.
 
-implementer must:
+tester must:
 
-1. Read the Technical Plan before touching any file
-2. Apply the minimal diff — only what the plan specifies
-3. Run the project test suite after implementation
-4. Produce an Implementation Summary: what changed, which files, how to verify
-   locally
+1. Write failing tests to cover the new behavior (RED)
+2. Ensure all acceptance criteria from the Task Card have at least one test
+3. Confirm the new tests fail for the right reason before implementation
+4. Produce a Coverage Summary: test files added or modified, cases covered
 
 ---
 
-## Step 4 — Test coverage (tester)
+## Step 4 — Implementation (implementer)
 
-Invoke `tester` with the Implementation Summary and the Task Card.
+Invoke `implementer` with the approved Technical Plan, the Task Card, and the
+failing tests from Step 3.
+Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
-tester must:
+implementer must:
 
-1. Write or extend tests to cover the new behavior
-2. Ensure all acceptance criteria from the Task Card have at least one test
-3. Run the full test suite and confirm it passes
-4. Produce a Coverage Summary: test files added or modified, cases covered
+1. Read the Technical Plan before touching any file
+2. Apply the minimal diff to make the failing tests pass — only what the plan specifies
+3. Run the project test suite after implementation
+4. Produce an Implementation Summary: what changed, which files, how to verify
+   locally
 
 ---
 

package/presets/agy/skills/cc-fix/SKILL.md

@@ -21,24 +21,17 @@ Provide the following information in $ARGUMENTS:
 
 ## Web interface scope
 
-When the task concerns web layout, component states, feedback, motion, or a
-requested UI audit, apply skill `web-design-engineering` from the installed skill
-library. Use it during intake/discovery, design, test/implement, and review as
-applicable; keep this workflow’s gates and TDD order. Framework presence alone
-does not activate it; backend-only and native mobile work are excluded. Record
-required visual checks as pending when unavailable. Keep findings in the existing
-Review Report: contract failures in Spec Axis, technical issues in existing
-subchecks, and aesthetic preferences as suggestions; do not add an axis.
+Same web scope as `cc-feature`: when the fix concerns web layout, component
+states, feedback, motion, or a requested UI audit, apply skill
+`web-design-engineering` during test/implementation and review; keep this
+workflow's gates and TDD order. See `cc-feature` for the full scope rule.
 
 ## Android phone interface scope
 
-When the task concerns concrete Jetpack Compose phone layout, component states,
-interaction, accessibility, visual behavior, or a requested UI audit, apply skill
-`android-ui-design`. Use it during design, test/implementation, and review as
-applicable while keeping this workflow's gates and TDD order. Kotlin, Compose,
-framework, or dependency presence alone does not activate it; non-UI Android work
-stays with the general `android` skill. Audit-only requests remain read-only, and
-unavailable visual or emulator checks remain pending rather than claimed complete.
+Same Android scope as `cc-feature`: when the fix concerns concrete Jetpack
+Compose phone UI or a requested UI audit, apply skill `android-ui-design`
+during test/implementation and review; keep this workflow's gates and TDD
+order. See `cc-feature` for the full scope rule.
 
 
 ## Step 1 — Task Card validation (task-coach)
@@ -71,7 +64,7 @@ the affected code, and no public API or shared state is involved.
 
 Route: `task-coach` → `tester` → `implementer`
 
-Proceed directly to Step 3a.
+Proceed directly to Step 3.
 
 ### Medium or high-risk route
 
@@ -92,23 +85,37 @@ before continuing.**
 
 ---
 
-## Step 3a — Implementation, low-risk (implementer)
+## Step 3 — Regression tests (tester)
 
-Invoke `implementer` with the Task Card.
+Invoke `tester` for all risk levels.
+
+tester must:
+
+1. Write a regression test that reproduces the original bug (fails before the
+   fix, passes after)
+2. Verify that existing tests still pass
+3. Produce a Coverage Summary: test added, case covered
+
+---
+
+## Step 4a — Implementation, low-risk (implementer)
+
+Invoke `implementer` with the Task Card and the failing regression test from Step 3.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
 implementer must:
 
 1. Locate the defect using the reproduction steps
-2. Apply the minimal fix — no unrelated changes
+2. Apply the minimal fix to make the regression test pass — no unrelated changes
 3. Run the test suite
 4. Produce an Implementation Summary: root cause, fix applied, files changed
 
 ---
 
-## Step 3b — Implementation, medium/high-risk (implementer)
+## Step 4b — Implementation, medium/high-risk (implementer)
 
-Invoke `implementer` with the approved Technical Plan and the Task Card.
+Invoke `implementer` with the approved Technical Plan, the Task Card, and the
+failing regression test from Step 3.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
 implementer must follow the plan exactly. Any deviation requires a new Technical
@@ -116,19 +123,6 @@ Plan approval. After implementation, run the full test suite.
 
 ---
 
-## Step 4 — Regression tests (tester)
-
-Invoke `tester` for all risk levels.
-
-tester must:
-
-1. Write a regression test that reproduces the original bug (fails before the
-   fix, passes after)
-2. Verify that existing tests still pass
-3. Produce a Coverage Summary: test added, case covered
-
----
-
 ## Step 5 — Review (reviewer) — medium/high-risk only
 
 Invoke `reviewer` with the diff and Task Card.

package/presets/agy/skills/openspec/SKILL.md

@@ -16,7 +16,7 @@ gates, not a reference doc. Specs describe WHAT; `design.md` describes HOW.
 
 ## When to Use
 
-- `/cc-openspec` or `openspec next` / `plan` / `done` / `archive`
+- `/cc-openspec` or `openspec plan` / `next` / `done` / `sync` / `verify` / `archive`
 - An item is `READY` or later and must move through the state machine
 
 **NOT** for creating `BACKLOG.md` (use skill `backlog`) or for stack-specific
@@ -26,22 +26,43 @@ coding rules.
 
 Local CLI is `bun run dev`. Published package is `npx cc-codeconductor`.
 
-1. `openspec validate` — must pass before delivery.
-2. `openspec plan BC-xxx` if the item is not yet `PLANNED`.
-3. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
-4. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
+1. `openspec validate` — must pass before delivery. If you reached this
+   workflow on your own (the user did not ask for OpenSpec) and there is no
+   `BACKLOG.md` / `openspec/` root, answer normally instead — never scaffold
+   one as a side effect.
+2. `openspec plan BC-xxx` if the item is not yet `PLANNED`. Planning only: it
+   writes TaskCards plus proposal/design/tasks/specs under
+   `openspec/changes/<slug>/` and stops. Never implement in this step.
+3. Review the plan before `start`: read proposal → delta specs → tasks, in that
+   order, and confirm intent, scope, testable FR/SC, and edge-case scenarios.
+   Fix the Markdown directly or ask for revisions — code comes later.
+4. `openspec analyze --output json` — CRITICAL findings exit 1. Do not implement.
+5. Phases: discover (`repo-explorer`) → design (`architect`) → test (`tester`) →
    implement (`implementer`) → review (`reviewer`). If Global `TDD required: yes`,
-   test runs before implement.
-5. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
-   evidence JSON is rejected.
-6. `scorecard create --task BC-xxx --from-diff` then record a verdict.
-7. `openspec archive` only after human review when `Review required: yes` and
-   the scorecard is PASS.
+   test runs before implement. Discover is read-only: it never writes code.
+6. `openspec done` on test/implement requires `captureTddSuiteEvidence`. Handmade
+   evidence JSON is rejected. The implementer ticks `tasks.md` boxes
+   (`- [ ]` → `- [x]`) as each FR lands; only `x`/`X` counts as done.
+7. When implementation reveals a design problem, pause and reconcile the planning
+   artifacts first — in any direction (a later artifact may force revising an
+   earlier one). Planning artifacts only in that step, never code; confirm each
+   edit. If the item's intent changed rather than its details, open a fresh item
+   with `/cc-backlog` (`/cc:backlog`) instead of warping this one.
+8. `openspec verify --output json` — advisory pre-archive checklist
+   (`archiveReady` plus Completeness/Correctness/Coherence issues). Optional:
+   `openspec sync` merges delta specs into `openspec/specs/` without closing.
+9. `scorecard create --task BC-xxx --from-diff` then record a verdict.
+10. `openspec archive` only after human review when `Review required: yes` and
+    the scorecard is PASS. Archive re-checks planning artifacts and analyze
+    CRITICALs, and warns on unchecked `tasks.md` boxes.
 
 Status machine: `TODO` → `READY` → `PLANNED` → `IN_PROGRESS` → `REVIEW` → `DONE`
 → Archive. `BLOCKED` returns to `READY`. Reviewer rejection: `REVIEW` →
 `IN_PROGRESS`.
 
+`openspec status --output json` also reports artifact presence, `tasks.md`
+checkbox progress, and `nextSteps` for the next CLI call.
+
 ## Web interface scope
 
 When the task concerns web layout, component states, feedback, motion, or a
@@ -70,17 +91,24 @@ delivery read-only and record unavailable visual or emulator evidence as pending
 | I'll add tests after green | Global TDD required means tester before implementer. |
 | I'll write the evidence JSON myself | Handmade TDD JSON is rejected. Use the verification runner. |
 | The item is small; skip analyze | `openspec analyze` CRITICAL still stops implement. |
+| The plan is generated; skip reading it | Read proposal → specs → tasks before `start`. Generated is not reviewed. |
+| I'll fix the spec after shipping | Reconcile planning artifacts before continuing to implement. |
 
 ## Red Flags
 
 - Implementing while analyze reports CRITICAL
+- Starting cards before reading the generated plan
 - Archive without a PASS scorecard when review is required
+- Archive while `openspec verify` reports CRITICAL
 - Acceptance like "improve UX" with no measurable check
 
 ## Verification
 
 - [ ] `openspec validate` exit 0
+- [ ] Plan reviewed (proposal → specs → tasks) before `start`
 - [ ] `openspec analyze --output json` has no CRITICAL
 - [ ] TDD evidence from the runner when TDD is required
+- [ ] `tasks.md` boxes ticked as FRs land
+- [ ] `openspec verify --output json` checked before archive
 - [ ] `scorecard create --from-diff` recorded
 - [ ] Suite check (optional): `bun run dev scorecard suite-run --suite workflow-gates`

package/presets/agy/workflows/cc-council.md

@@ -3,6 +3,8 @@ name: cc-council
 description: Run the full Council-Driven Development workflow — SDD spec creation, TDD enforcement, surgical implementation, and multi-perspective review.
 ---
 
+<!-- Source of truth for the council workflow command. The cursor, claude and opencode copies are generated from this template by scripts/inject-ccep-bootstrap.ts; gemini and codex derive from the cursor copy via scripts/render-agent-commands.ts. Edit here, then regenerate. -->
+
 # Council-Driven Workflow
 
 Task request: $ARGUMENTS
@@ -63,7 +65,7 @@ implementer must:
 1. Write the minimal code required to pass the tests.
 2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
 3. NOT refactor adjacent code, change existing styles, or build speculative features.
-4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state).
+4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state), at most 3 iterations -- then stop and report the failing tests instead of looping.
 
 ---
 
@@ -75,7 +77,7 @@ The council will evaluate the diff against the 6 axes (Architecture, Security, P
 
 If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
 - The Review Report status is **BLOCKED**.
-- Return to Step 4 with the feedback.
+- Return to Step 4 with the feedback (at most 3 review rounds in total -- then deliver the BLOCKED verdict with the unresolved findings instead of looping).
 
 If APPROVED (no CRITICAL findings):
 - Deliver the final Council Verdict and the diff summary.