ccg-workflow 3.0.3 → 3.0.5

package/README.md

@@ -42,6 +42,7 @@ v3.0 is a ground-up rewrite. One command replaces 29.
 - **Agent Teams** — Large tasks spawn parallel Builder teammates via TeamCreate. Each Builder gets isolated file ownership.
 - **Quality gates** — `verify-security`, `verify-quality`, `verify-change` run as Skill invocations inside strategy verification phases.
 - **Domain knowledge hooks** — When your message mentions security, caching, RAG, etc., the relevant knowledge file is auto-injected into context.
+- **Codex-Led Mode** — Use Codex CLI as the lead orchestrator. Codex writes code directly and dispatches analysis/review to Gemini + Claude via codeagent-wrapper. Install via menu option `X`.
 
 ## Quick Start
 
@@ -250,4 +251,4 @@ MIT
 
 ---
 
-v3.0.3 | [Issues](https://github.com/fengshao1227/ccg-workflow/issues) | [Contributing](./CONTRIBUTING.md)
+v3.0.4 | [Issues](https://github.com/fengshao1227/ccg-workflow/issues) | [Contributing](./CONTRIBUTING.md)

package/README.zh-CN.md

@@ -43,6 +43,7 @@ v3.0 从底层重写。一个命令替代 29 个。
 - **Agent Teams** — 大型任务通过 TeamCreate 并行 spawn 多个 Builder。每个 Builder 有独立文件所有权。
 - **质量关卡** — `verify-security`、`verify-quality`、`verify-change` 作为 Skill 在策略验证阶段强制调用。
 - **域知识 Hook** — 消息涉及安全、缓存、RAG 等关键词时，相关知识文件自动注入上下文。
+- **Codex 主导模式** — 用 Codex CLI 作为主编排器，Codex 自己写代码，同时调度 Gemini + Claude 做分析和审查。菜单 `X` 选项安装。
 
 ## 快速开始
 
@@ -245,4 +246,4 @@ MIT
 
 ---
 
-v3.0.3 | [Issues](https://github.com/fengshao1227/ccg-workflow/issues) | [Contributing](./CONTRIBUTING.md)
+v3.0.4 | [Issues](https://github.com/fengshao1227/ccg-workflow/issues) | [Contributing](./CONTRIBUTING.md)

package/dist/cli.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import cac from 'cac';
 import ansis from 'ansis';
-import { z as diagnoseMcpConfig, A as isWindows, B as readClaudeCodeConfig, C as fixWindowsMcpConfig, D as writeClaudeCodeConfig, r as readCcgConfig, b as initI18n, a as i18n, s as showMainMenu, i as init, E as configMcp, F as version } from './shared/ccg-workflow.DxKAcBrr.mjs';
+import { A as diagnoseMcpConfig, B as isWindows, C as readClaudeCodeConfig, D as fixWindowsMcpConfig, E as writeClaudeCodeConfig, r as readCcgConfig, b as initI18n, a as i18n, s as showMainMenu, i as init, F as configMcp, G as version } from './shared/ccg-workflow.B4dDUxv8.mjs';
 import 'inquirer';
 import 'ora';
 import 'node:child_process';

package/dist/index.d.mts

@@ -153,6 +153,15 @@ declare function installAceTool(config: AceToolConfig): Promise<McpInstallResult
  */
 declare function installAceToolRs(config: AceToolConfig): Promise<McpInstallResult>;
 
+/**
+ * Install Codex-mode files: AGENTS.md + .codex/config.toml + .codex/agents/*.toml
+ * These enable Codex CLI as an alternative lead orchestrator (Codex-led multi-model mode).
+ * Files are installed to ~/.codex/ (global) and user copies AGENTS.md to project root.
+ */
+declare function installCodexMode(): Promise<{
+    success: boolean;
+    message: string;
+}>;
 declare function installWorkflows(workflowIds: string[], installDir: string, force?: boolean, config?: {
     routing?: {
         mode?: string;
@@ -235,5 +244,5 @@ declare function checkForUpdates(): Promise<{
     latestVersion: string | null;
 }>;
 
-export { changeLanguage, checkForUpdates, compareVersions, createDefaultConfig, createDefaultRouting, getCcgDir, getConfigPath, getCurrentVersion, getLatestVersion, getWorkflowById, getWorkflowConfigs, i18n, init, initI18n, installAceTool, installAceToolRs, installWorkflows, migrateToV1_4_0, needsMigration, readCcgConfig, showMainMenu, uninstallAceTool, uninstallWorkflows, update, writeCcgConfig };
+export { changeLanguage, checkForUpdates, compareVersions, createDefaultConfig, createDefaultRouting, getCcgDir, getConfigPath, getCurrentVersion, getLatestVersion, getWorkflowById, getWorkflowConfigs, i18n, init, initI18n, installAceTool, installAceToolRs, installCodexMode, installWorkflows, migrateToV1_4_0, needsMigration, readCcgConfig, showMainMenu, uninstallAceTool, uninstallWorkflows, update, writeCcgConfig };
 export type { AceToolConfig, CcgConfig, CliOptions, CollaborationMode, FastContextConfig, InitOptions, InstallResult, ModelRouting, ModelType, RoutingStrategy, SupportedLang, WorkflowConfig };

package/dist/index.d.ts

@@ -153,6 +153,15 @@ declare function installAceTool(config: AceToolConfig): Promise<McpInstallResult
  */
 declare function installAceToolRs(config: AceToolConfig): Promise<McpInstallResult>;
 
+/**
+ * Install Codex-mode files: AGENTS.md + .codex/config.toml + .codex/agents/*.toml
+ * These enable Codex CLI as an alternative lead orchestrator (Codex-led multi-model mode).
+ * Files are installed to ~/.codex/ (global) and user copies AGENTS.md to project root.
+ */
+declare function installCodexMode(): Promise<{
+    success: boolean;
+    message: string;
+}>;
 declare function installWorkflows(workflowIds: string[], installDir: string, force?: boolean, config?: {
     routing?: {
         mode?: string;
@@ -235,5 +244,5 @@ declare function checkForUpdates(): Promise<{
     latestVersion: string | null;
 }>;
 
-export { changeLanguage, checkForUpdates, compareVersions, createDefaultConfig, createDefaultRouting, getCcgDir, getConfigPath, getCurrentVersion, getLatestVersion, getWorkflowById, getWorkflowConfigs, i18n, init, initI18n, installAceTool, installAceToolRs, installWorkflows, migrateToV1_4_0, needsMigration, readCcgConfig, showMainMenu, uninstallAceTool, uninstallWorkflows, update, writeCcgConfig };
+export { changeLanguage, checkForUpdates, compareVersions, createDefaultConfig, createDefaultRouting, getCcgDir, getConfigPath, getCurrentVersion, getLatestVersion, getWorkflowById, getWorkflowConfigs, i18n, init, initI18n, installAceTool, installAceToolRs, installCodexMode, installWorkflows, migrateToV1_4_0, needsMigration, readCcgConfig, showMainMenu, uninstallAceTool, uninstallWorkflows, update, writeCcgConfig };
 export type { AceToolConfig, CcgConfig, CliOptions, CollaborationMode, FastContextConfig, InitOptions, InstallResult, ModelRouting, ModelType, RoutingStrategy, SupportedLang, WorkflowConfig };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as changeLanguage, x as checkForUpdates, y as compareVersions, d as createDefaultConfig, e as createDefaultRouting, g as getCcgDir, f as getConfigPath, t as getCurrentVersion, v as getLatestVersion, j as getWorkflowById, h as getWorkflowConfigs, a as i18n, i as init, b as initI18n, l as installAceTool, m as installAceToolRs, k as installWorkflows, p as migrateToV1_4_0, q as needsMigration, r as readCcgConfig, s as showMainMenu, o as uninstallAceTool, n as uninstallWorkflows, u as update, w as writeCcgConfig } from './shared/ccg-workflow.DxKAcBrr.mjs';
+export { c as changeLanguage, y as checkForUpdates, z as compareVersions, d as createDefaultConfig, e as createDefaultRouting, g as getCcgDir, f as getConfigPath, v as getCurrentVersion, x as getLatestVersion, j as getWorkflowById, h as getWorkflowConfigs, a as i18n, i as init, b as initI18n, l as installAceTool, m as installAceToolRs, n as installCodexMode, k as installWorkflows, q as migrateToV1_4_0, t as needsMigration, r as readCcgConfig, s as showMainMenu, p as uninstallAceTool, o as uninstallWorkflows, u as update, w as writeCcgConfig } from './shared/ccg-workflow.B4dDUxv8.mjs';
 import 'ansis';
 import 'inquirer';
 import 'ora';

package/dist/shared/{ccg-workflow.DxKAcBrr.mjs → ccg-workflow.B4dDUxv8.mjs}

@@ -10,7 +10,7 @@ import fs from 'fs-extra';
 import { parse, stringify } from 'smol-toml';
 import i18next from 'i18next';
 
-const version = "3.0.3";
+const version = "3.0.5";
 
 function cmd(id, order, category, name, nameEn, description, descriptionEn, cmdOverride) {
   return {
@@ -1092,6 +1092,51 @@ async function installSkillGeneratedCommands(ctx) {
     ctx.result.errors.push(`Skill Registry command generation warning: ${error}`);
   }
 }
+async function installCodexMode() {
+  const codexTemplateDir = join(PACKAGE_ROOT$1, "templates", "codex");
+  if (!await fs.pathExists(codexTemplateDir)) {
+    return { success: false, message: "Codex template directory not found" };
+  }
+  try {
+    const codexHome = join(homedir(), ".codex");
+    await fs.ensureDir(join(codexHome, "agents"));
+    const configSrc = join(codexTemplateDir, "config.toml");
+    const configDest = join(codexHome, "config.toml");
+    if (await fs.pathExists(configSrc) && !await fs.pathExists(configDest)) {
+      await fs.copy(configSrc, configDest);
+    }
+    const agentsSrc = join(codexTemplateDir, "agents");
+    if (await fs.pathExists(agentsSrc)) {
+      await fs.copy(agentsSrc, join(codexHome, "agents"), { overwrite: true });
+    }
+    const agentsMdSrc = join(codexTemplateDir, "AGENTS.md");
+    if (await fs.pathExists(agentsMdSrc)) {
+      await fs.copy(agentsMdSrc, join(codexHome, "AGENTS.md"), { overwrite: true });
+    }
+    const hooksSrc = join(codexTemplateDir, "hooks");
+    if (await fs.pathExists(hooksSrc)) {
+      await fs.ensureDir(join(codexHome, "hooks"));
+      await fs.copy(hooksSrc, join(codexHome, "hooks"), { overwrite: true });
+    }
+    const hooksJsonSrc = join(codexTemplateDir, "hooks.json");
+    if (await fs.pathExists(hooksJsonSrc)) {
+      await fs.copy(hooksJsonSrc, join(codexHome, "hooks.json"), { overwrite: true });
+    }
+    return {
+      success: true,
+      message: `Codex mode installed:
+  ~/.codex/AGENTS.md
+  ~/.codex/config.toml
+  ~/.codex/hooks.json
+  ~/.codex/hooks/ccg-workflow.py
+  ~/.codex/agents/ccg-implement.toml
+  ~/.codex/agents/ccg-review.toml
+  ~/.codex/agents/ccg-research.toml`
+    };
+  } catch (error) {
+    return { success: false, message: `Failed to install Codex mode: ${error}` };
+  }
+}
 async function installRuleFiles(ctx) {
   try {
     const installed = await copyMdTemplates(
@@ -1436,6 +1481,7 @@ const installer = {
   injectConfigVariables: injectConfigVariables,
   installAceTool: installAceTool,
   installAceToolRs: installAceToolRs,
+  installCodexMode: installCodexMode,
   installContextWeaver: installContextWeaver,
   installFastContext: installFastContext,
   installMcpServer: installMcpServer,
@@ -4385,6 +4431,7 @@ async function showMainMenu() {
         item("5", i18n.t("menu:options.configStyle"), isZh ? "\u9009\u62E9\u8F93\u51FA\u4EBA\u683C" : "Choose output personality"),
         item("6", i18n.t("menu:options.configModel"), isZh ? "\u524D\u7AEF/\u540E\u7AEF\u6A21\u578B\u5207\u6362" : "Switch frontend/backend models"),
         groupSep(isZh ? "\u5176\u4ED6\u5DE5\u5177" : "Tools"),
+        item("X", isZh ? "Codex \u6A21\u5F0F" : "Codex Mode", isZh ? "\u5B89\u88C5 Codex \u4E3B\u5BFC\u7684\u591A\u6A21\u578B\u7F16\u6392" : "Install Codex-led multi-model orchestration"),
         item("T", i18n.t("menu:options.tools"), "ccusage, CCometixLine"),
         item("C", i18n.t("menu:options.installClaude"), isZh ? "\u5B89\u88C5/\u91CD\u88C5 CLI" : "Install/reinstall CLI"),
         groupSep("CCG"),
@@ -4413,6 +4460,9 @@ async function showMainMenu() {
       case "6":
         await configModelRouting();
         break;
+      case "X":
+        await handleCodexMode();
+        break;
       case "T":
         await handleTools();
         break;
@@ -4756,6 +4806,43 @@ async function configOutputStyle() {
   console.log(ansis.green(`  \u2713 ${i18n.t("menu:style.set", { style })}`));
   console.log(ansis.gray(`    ${i18n.t("common:restartToApply")}`));
 }
+async function handleCodexMode() {
+  const isZh = i18n.language === "zh-CN";
+  console.log();
+  console.log(ansis.cyan.bold(isZh ? "  Codex \u591A\u6A21\u578B\u7F16\u6392\u6A21\u5F0F" : "  Codex Multi-Model Orchestration Mode"));
+  console.log();
+  console.log(
+    isZh ? "  \u5B89\u88C5 CCG Codex \u6A21\u5F0F\u5230 ~/.codex/\uFF0C\u8BA9 Codex CLI \u4F5C\u4E3A\u4E3B\u5BFC\u8005\u7F16\u6392 Gemini + Claude\u3002" : "  Install CCG Codex mode to ~/.codex/, enabling Codex CLI as lead orchestrator for Gemini + Claude."
+  );
+  console.log();
+  console.log(isZh ? "  \u5C06\u5B89\u88C5:" : "  Will install:");
+  console.log("    ~/.codex/AGENTS.md              \u2014 Codex auto-read instructions");
+  console.log("    ~/.codex/config.toml             \u2014 multi-agent + timeout config");
+  console.log("    ~/.codex/agents/ccg-implement.toml");
+  console.log("    ~/.codex/agents/ccg-review.toml");
+  console.log("    ~/.codex/agents/ccg-research.toml");
+  console.log();
+  const { confirm } = await inquirer.prompt([{
+    type: "confirm",
+    name: "confirm",
+    message: isZh ? "\u786E\u8BA4\u5B89\u88C5\uFF1F" : "Confirm install?",
+    default: true
+  }]);
+  if (!confirm) return;
+  const spinner = ora(isZh ? "\u5B89\u88C5 Codex \u6A21\u5F0F..." : "Installing Codex mode...").start();
+  const result = await installCodexMode();
+  if (result.success) {
+    spinner.succeed(isZh ? "Codex \u6A21\u5F0F\u5B89\u88C5\u5B8C\u6210" : "Codex mode installed");
+    console.log();
+    console.log(ansis.green(result.message));
+    console.log();
+    console.log(ansis.yellow(
+      isZh ? "  \u4F7F\u7528\u65B9\u6CD5: \u5728\u9879\u76EE\u76EE\u5F55\u8FD0\u884C codex\uFF0CAGENTS.md \u4F1A\u81EA\u52A8\u751F\u6548" : "  Usage: run codex in your project directory, AGENTS.md takes effect automatically"
+    ));
+  } else {
+    spinner.fail(result.message);
+  }
+}
 async function handleInstallClaude() {
   console.log();
   console.log(ansis.cyan.bold(`  ${i18n.t("menu:claude.title")}`));
@@ -5010,4 +5097,4 @@ async function uninstallCCometixLine() {
   }
 }
 
-export { isWindows as A, readClaudeCodeConfig as B, fixWindowsMcpConfig as C, writeClaudeCodeConfig as D, configMcp as E, version as F, i18n as a, initI18n as b, changeLanguage as c, createDefaultConfig as d, createDefaultRouting as e, getConfigPath as f, getCcgDir as g, getWorkflowConfigs as h, init as i, getWorkflowById as j, installWorkflows as k, installAceTool as l, installAceToolRs as m, uninstallWorkflows as n, uninstallAceTool as o, migrateToV1_4_0 as p, needsMigration as q, readCcgConfig as r, showMainMenu as s, getCurrentVersion as t, update as u, getLatestVersion as v, writeCcgConfig as w, checkForUpdates as x, compareVersions as y, diagnoseMcpConfig as z };
+export { diagnoseMcpConfig as A, isWindows as B, readClaudeCodeConfig as C, fixWindowsMcpConfig as D, writeClaudeCodeConfig as E, configMcp as F, version as G, i18n as a, initI18n as b, changeLanguage as c, createDefaultConfig as d, createDefaultRouting as e, getConfigPath as f, getCcgDir as g, getWorkflowConfigs as h, init as i, getWorkflowById as j, installWorkflows as k, installAceTool as l, installAceToolRs as m, installCodexMode as n, uninstallWorkflows as o, uninstallAceTool as p, migrateToV1_4_0 as q, readCcgConfig as r, showMainMenu as s, needsMigration as t, update as u, getCurrentVersion as v, writeCcgConfig as w, getLatestVersion as x, checkForUpdates as y, compareVersions as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccg-workflow",
-  "version": "3.0.3",
+  "version": "3.0.5",
   "description": "Claude + Codex + Gemini multi-model collaboration system - smart routing development workflow",
   "type": "module",
   "packageManager": "pnpm@10.17.1",
@@ -32,6 +32,7 @@
     "templates/engine/",
     "templates/hooks/",
     "templates/spec/",
+    "templates/codex/",
     "templates/prompts/codex/",
     "templates/prompts/gemini/analyzer.md",
     "templates/prompts/gemini/architect.md",

package/templates/codex/AGENTS.md

@@ -0,0 +1,253 @@
+<!-- CCG:START — Managed by CCG Workflow. Do not edit this block manually. -->
+# CCG Multi-Model Orchestration (Codex-Led)
+
+You are the **lead orchestrator** of a multi-model development team. You think, you code, and you know when to call for backup.
+
+## 1. Decision Framework — 怎么思考
+
+收到任何任务时，先用 5 秒评估，不要立即动手：
+
+### 评估三维度
+
+**复杂度**：
+- **S** — 单文件，改几行，范围清晰 → 直接做
+- **M** — 2-5 文件，单模块 → 分析后再做
+- **L+** — 5+ 文件，跨模块，架构级 → 必须多模型分析 + 规划后再做
+
+**风险**：
+- **低** — 无生产影响，可逆 → 跳过审查也可以
+- **中** — 修改现有行为 → 完成后必须审查
+- **高** — auth/数据库/API 契约/加密 → 无论大小都必须审查
+
+### 决策矩阵
+
+```
+S + 低风险 → 直接写，跑测试，完事
+S + 高风险 → 直接写，但必须调双模型审查（Gemini + Claude）
+M + 任意   → 双模型并行分析（Gemini + Claude 都调），再写，完成后双模型审查
+L+ + 任意  → 双模型并行分析，制定 plan.md，spawn 子 Agent 并行写，双模型审查
+```
+
+**⛔ M 以上复杂度，分析和审查都必须是双模型（Gemini + Claude 都调）。**
+这是 CCG 的核心价值——两个模型从不同角度分析同一个问题，交叉验证，弥补单模型盲区。只调一个模型 = 浪费了多模型协作的意义。
+
+**不确定时，选高一级。** 宁可多做一步分析，不可写完才发现方向错了。
+
+## 2. Task System — 任务持久化
+
+### 何时创建 Task
+
+**所有任务都必须创建 Task。** 即使是 S 复杂度的小改动。
+
+### 创建步骤
+
+```bash
+# 1. 生成任务名（用户需求 → kebab-case）
+TASK_NAME="add-jwt-auth"  # 示例
+
+# 2. 创建目录
+mkdir -p .ccg/tasks/$TASK_NAME
+
+# 3. 写 task.json
+cat > .ccg/tasks/$TASK_NAME/task.json << 'TASKJSON'
+{
+  "id": "add-jwt-auth",
+  "title": "用户请求摘要",
+  "status": "in_progress",
+  "complexity": "M",
+  "risk": "medium",
+  "domain": "backend",
+  "currentPhase": "analysis",
+  "nextAction": "分析需求",
+  "createdAt": "2026-05-17T10:00:00Z",
+  "branch": "main"
+}
+TASKJSON
+```
+
+### 阶段推进
+
+每完成一个阶段，更新 task.json 中的 `currentPhase` 和 `nextAction`：
+- `"analysis"` → 分析中
+- `"planning"` → 规划中（L+ 复杂度才有）
+- `"implementation"` → 实施中
+- `"review"` → 审查中
+- `"completed"` → 已完成，待归档
+
+### 持久化文件
+
+按需创建：
+- `requirements.md` — 增强后的需求描述（M+ 复杂度）
+- `plan.md` — 实施计划（L+ 复杂度）
+- `review.md` — 审查结果
+- `context.jsonl` — 相关文件引用（一行一个 JSON）
+
+### ⛔ 归档（每个任务完成后必须执行）
+
+```bash
+# 移动到归档目录
+mkdir -p .ccg/tasks/archive/$(date +%Y-%m)
+mv .ccg/tasks/$TASK_NAME .ccg/tasks/archive/$(date +%Y-%m)/
+
+# 提交归档
+git add .ccg/tasks/
+git commit -m "chore: archive ccg task $TASK_NAME"
+```
+
+**绝不可以跳过归档。** 任务完成后必须归档，不管大小。
+
+## 3. Spec System — 编码规范
+
+### 读取时机
+
+**写代码前必须检查**：
+```bash
+ls .ccg/spec/ 2>/dev/null
+```
+
+如果存在：
+- `.ccg/spec/backend/index.md` — 后端约定
+- `.ccg/spec/frontend/index.md` — 前端约定
+- `.ccg/spec/guides/index.md` — 通用指南
+
+**读了就要遵守。** Spec 是项目的编码法律。
+
+### Spec Evolution — 任务完成时回馈
+
+归档前，检查本次开发是否有值得沉淀的经验：
+- 踩过的坑（非显而易见的）
+- 发现的代码模式
+- 新引入的库/API 的使用约定
+
+如果有 → 追加到对应的 `.ccg/spec/{domain}/index.md`。
+如果没有 → 跳过，不要强行凑。
+
+## 4. Calling External Models — 调用模板
+
+### ⛔ 默认调用方式：双模型并行（M+ 复杂度必须用这个）
+
+```bash
+~/.claude/bin/codeagent-wrapper --progress --backend gemini - "$(pwd)" <<'GEMINI_EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/gemini/$ROLE.md
+<TASK>
+{任务描述 + 上下文}
+</TASK>
+OUTPUT: {期望输出格式}
+GEMINI_EOF
+&
+~/.claude/bin/codeagent-wrapper --progress --backend claude - "$(pwd)" <<'CLAUDE_EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/claude/$ROLE.md
+<TASK>
+{任务描述 + 上下文}
+</TASK>
+OUTPUT: {期望输出格式}
+CLAUDE_EOF
+&
+wait
+```
+
+**M+ 复杂度时，分析和审查都用上面这个双模型并行模板。不要只调一个。**
+
+### 单模型调用（仅 S 复杂度可用）
+
+#### Gemini（前端/UI 分析）
+```bash
+~/.claude/bin/codeagent-wrapper --progress --backend gemini - "$(pwd)" <<'EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/gemini/$ROLE.md
+<TASK>
+{任务描述 + 上下文}
+</TASK>
+OUTPUT: {期望输出格式}
+EOF
+```
+
+#### Claude（架构/安全/复杂推理）
+```bash
+~/.claude/bin/codeagent-wrapper --progress --backend claude - "$(pwd)" <<'EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/claude/$ROLE.md
+<TASK>
+{任务描述 + 上下文}
+</TASK>
+OUTPUT: {期望输出格式}
+EOF
+```
+
+### 可用角色（$ROLE）
+`analyzer` / `architect` / `reviewer` / `debugger` / `tester` / `optimizer` / `builder`
+
+### 并行调用提醒
+M+ 复杂度的分析和审查，使用上方的"双模型并行"模板。不要分开调用，用 `&` + `wait` 并行执行。
+
+## 5. Implementation — 你自己写代码
+
+### 执行模式：Inline（你自己按 plan 顺序逐文件写）
+
+**不要 spawn 子代理。** 你自己按 plan.md 的步骤顺序逐个文件写代码。这比子代理更稳定、更快、更可控。
+
+### 执行流程
+
+```
+1. 读 plan.md（如有）或回顾分析阶段的结论
+2. 按依赖顺序逐文件写：先写底层（store/model/util），再写上层（route/middleware）
+3. 每写完一个文件，跑一次测试/类型检查，确保不破坏现有功能
+4. 全部写完后，跑完整测试套件
+5. git diff 确认所有变更在 plan 范围内
+```
+
+### 写代码原则
+
+- **先读再写** — 修改文件前先读取完整内容，理解现有模式
+- **遵守 Spec** — .ccg/spec/ 里的约定是法律
+- **一个文件一个 commit 思路** — 每个文件的变更应该是自包含的
+- **不扩大范围** — plan 没说改的文件不要动
+- **测试驱动** — 新功能先写测试骨架，再写实现
+
+## 6. Quality — 交付前检查
+
+### 必须通过
+- [ ] 测试通过（`npm test` / `pnpm test` / `go test` / `pytest`）
+- [ ] 类型检查通过（如适用）
+- [ ] 变更在请求范围内
+- [ ] 无硬编码密钥
+- [ ] git diff 只有预期变更
+
+### 何时调外部模型审查
+- 变更 >30 行 → **必须**调双模型审查（Gemini + Claude 都调）
+- 变更 ≤30 行但涉及 auth/数据库/加密 → **必须**调双模型审查
+- 变更 ≤30 行且低风险 → 可以只调一个
+
+### ⛔ 审查流程（双模型交叉验证）
+
+```bash
+# 必须并行调用两个模型审查 git diff
+~/.claude/bin/codeagent-wrapper --progress --backend gemini - "$(pwd)" <<'EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/gemini/reviewer.md
+<TASK>审查以下代码变更：$(git diff)</TASK>
+OUTPUT: Critical/Warning/Info 分级审查报告
+EOF
+&
+~/.claude/bin/codeagent-wrapper --progress --backend claude - "$(pwd)" <<'EOF'
+ROLE_FILE: ~/.claude/.ccg/prompts/claude/reviewer.md
+<TASK>审查以下代码变更：$(git diff)</TASK>
+OUTPUT: Critical/Warning/Info 分级审查报告
+EOF
+&
+wait
+```
+
+1. **两个模型都要调** — 这是多模型协作的核心，不是二选一
+2. 综合双方意见，合并去重，分 Critical / Warning / Info
+3. Critical → 修复后重新双模型审查
+4. Warning → 建议修复
+5. 审查结果写入 `.ccg/tasks/$TASK_NAME/review.md`
+
+## 7. Iron Rules — 铁律
+
+1. **评估先于行动** — 5 秒评估复杂度/风险/领域，再决定力度
+2. **所有任务创建 Task** — 写 task.json，完成后归档，无例外
+3. **Spec 是法律** — 存在就遵守，完成就回馈
+4. **不确定就升级** — 不确定复杂度时选高一级，不确定风险时调审查
+5. **scope 是边界** — 只做用户要求的，不自作主张扩大范围
+6. **测试是底线** — 不跑测试不报告完成
+7. **归档是闭环** — 每个任务必须归档，让下次会话知道发生过什么
+<!-- CCG:END -->

package/templates/codex/agents/ccg-implement.toml

@@ -0,0 +1,26 @@
+# CCG Implementation Sub-Agent
+# Spawned by the lead Codex agent for parallel file implementation
+
+name = "ccg-implement"
+description = "Implementation worker — writes code for assigned files following the plan"
+
+[sandbox]
+mode = "workspace-write"
+
+[features]
+multi_agent = false  # Prevent recursion — workers don't spawn workers
+
+[developer_instructions]
+text = """
+You are a CCG implementation worker. You have been dispatched by the lead agent.
+
+## Rules
+1. You ONLY modify files assigned to you in the dispatch message
+2. Read .ccg/spec/ conventions before writing (if exists)
+3. Follow the plan exactly — no scope expansion
+4. Run validation commands after changes if specified
+5. Report: files changed, tests status, any blockers
+
+## You are NOT the lead agent
+Do NOT spawn subagents. Do NOT call codeagent-wrapper. Just write the code assigned to you.
+"""

package/templates/codex/agents/ccg-research.toml

@@ -0,0 +1,31 @@
+# CCG Research Sub-Agent
+# Spawned by the lead Codex agent for codebase exploration
+
+name = "ccg-research"
+description = "Research worker — explores codebase, maps dependencies, gathers context"
+
+[sandbox]
+mode = "read-only"  # Research never writes
+
+[features]
+multi_agent = false
+
+[developer_instructions]
+text = """
+You are a CCG research worker. You have been dispatched to gather information.
+
+## Steps
+1. Search the codebase for files/patterns specified in the dispatch message
+2. Map dependencies and call chains
+3. Read relevant spec files (.ccg/spec/) for conventions
+4. Summarize findings in a structured report
+
+## Output Format
+FILES_FOUND: [list of relevant files]
+DEPENDENCIES: [dependency map]
+PATTERNS: [existing code patterns to follow]
+RISKS: [potential conflicts or breaking changes]
+
+## You are NOT the lead agent
+Do NOT spawn subagents. Do NOT modify any files. Read only.
+"""

package/templates/codex/agents/ccg-review.toml

@@ -0,0 +1,33 @@
+# CCG Review Sub-Agent
+# Spawned by the lead Codex agent for code quality checking
+
+name = "ccg-review"
+description = "Review worker — runs lint, typecheck, tests and reports findings"
+
+[sandbox]
+mode = "workspace-write"  # Needs write to auto-fix lint issues
+
+[features]
+multi_agent = false
+
+[developer_instructions]
+text = """
+You are a CCG review worker. You have been dispatched to verify code quality.
+
+## Steps
+1. Run lint/typecheck for the project (detect from package.json / go.mod / pyproject.toml)
+2. Run tests
+3. Review git diff for: security issues, logic errors, scope violations
+4. Auto-fix trivial lint issues (max 3 attempts)
+5. Report findings as: Critical / Warning / Info
+
+## Output Format
+REVIEW_RESULT: [PASS|FAIL]
+Critical: [count]
+Warning: [count]
+Info: [count]
+Details: [list of findings with file:line]
+
+## You are NOT the lead agent
+Do NOT spawn subagents. Do NOT call codeagent-wrapper.
+"""

package/templates/codex/config.toml

@@ -0,0 +1,9 @@
+# CCG Codex Project Configuration
+# Installed by: npx ccg-workflow
+
+project_doc_fallback_filenames = ["AGENTS.md", "CLAUDE.md"]
+
+[features.multi_agent_v2]
+enabled = true
+max_concurrent_threads_per_session = 6
+min_wait_timeout_ms = 480000   # 8 min — external model calls need time

package/templates/codex/hooks/ccg-workflow.py

@@ -0,0 +1,217 @@
+#!/usr/bin/env python3
+"""
+CCG Workflow Hook for Codex CLI — Adaptive Guardrail
+Injects per-turn guidance based on what Codex has/hasn't done.
+Not a rigid state machine — adapts to task complexity and progress.
+
+Hook type: UserPromptSubmit
+"""
+
+import json
+import os
+import sys
+import glob
+import subprocess
+from pathlib import Path
+from datetime import datetime
+
+
+def find_project_root():
+    """Walk up to find .ccg/ or .git/"""
+    d = os.environ.get("CODEX_PROJECT_DIR", os.getcwd())
+    for _ in range(20):
+        if os.path.isdir(os.path.join(d, ".ccg")) or os.path.isdir(os.path.join(d, ".git")):
+            return d
+        parent = os.path.dirname(d)
+        if parent == d:
+            break
+        d = parent
+    return None
+
+
+def get_active_task(root):
+    """Find the most recent in_progress task."""
+    tasks_dir = os.path.join(root, ".ccg", "tasks")
+    if not os.path.isdir(tasks_dir):
+        return None
+    for name in sorted(os.listdir(tasks_dir), reverse=True):
+        if name == "archive":
+            continue
+        task_file = os.path.join(tasks_dir, name, "task.json")
+        if not os.path.isfile(task_file):
+            continue
+        try:
+            with open(task_file) as f:
+                task = json.load(f)
+            if task.get("status") not in ("completed", "archived"):
+                task["_dir"] = os.path.join(tasks_dir, name)
+                task["_name"] = name
+                return task
+        except Exception:
+            continue
+    return None
+
+
+def detect_progress(root):
+    """Detect what Codex has done so far in this session."""
+    signals = {
+        "has_dirty_files": False,
+        "dirty_count": 0,
+        "changed_lines": 0,
+        "has_test_output": False,
+        "high_risk_files": False,
+    }
+    try:
+        status = subprocess.run(
+            ["git", "status", "--porcelain"],
+            cwd=root, capture_output=True, text=True, timeout=5
+        )
+        lines = [l for l in status.stdout.strip().split("\n") if l.strip()]
+        signals["dirty_count"] = len(lines)
+        signals["has_dirty_files"] = len(lines) > 0
+
+        risk_patterns = ["auth", "login", "password", "token", "secret", "crypto",
+                         "encrypt", "migration", "schema", "permission", "admin"]
+        for line in lines:
+            fname = line[3:].strip().lower()
+            if any(p in fname for p in risk_patterns):
+                signals["high_risk_files"] = True
+                break
+
+        if signals["has_dirty_files"]:
+            diff = subprocess.run(
+                ["git", "diff", "--stat"],
+                cwd=root, capture_output=True, text=True, timeout=5
+            )
+            for dline in diff.stdout.strip().split("\n"):
+                if "insertion" in dline or "deletion" in dline:
+                    parts = dline.split(",")
+                    for p in parts:
+                        p = p.strip()
+                        if "insertion" in p:
+                            signals["changed_lines"] += int(p.split()[0])
+                        elif "deletion" in p:
+                            signals["changed_lines"] += int(p.split()[0])
+    except Exception:
+        pass
+    return signals
+
+
+def assess_complexity(task):
+    """Get complexity from task.json or default to M."""
+    if not task:
+        return "M"
+    return task.get("complexity", "M")
+
+
+def build_guidance(task, progress, root):
+    """Build adaptive guidance based on task state + progress."""
+    parts = []
+    complexity = assess_complexity(task)
+    phase = task.get("currentPhase", "unknown") if task else "no_task"
+
+    # --- Task state breadcrumb ---
+    if task:
+        parts.append(f"Task: {task.get('title', task.get('id', '?'))} ({task.get('status', '?')})")
+        parts.append(f"Complexity: {complexity} | Risk: {task.get('risk', '?')} | Phase: {phase}")
+        if task.get("nextAction"):
+            parts.append(f"Next: {task['nextAction']}")
+    else:
+        parts.append("No active task. Create one in .ccg/tasks/ before starting work.")
+        parts.append("Even small fixes need a task.json for tracking.")
+        return parts
+
+    # --- Adaptive guidance based on phase × progress ---
+
+    # Phase: analysis — haven't started coding yet
+    if phase == "analysis":
+        if complexity in ("M", "L", "XL"):
+            parts.append("")
+            parts.append(f"⛔ {complexity} complexity: you MUST call BOTH Gemini AND Claude for parallel analysis before coding.")
+            parts.append("Use the dual-model parallel template in AGENTS.md: --backend gemini & --backend claude with & + wait.")
+
+    # Phase: implementation — coding in progress
+    elif phase == "implementation":
+        if progress["dirty_count"] == 0:
+            parts.append("")
+            parts.append("Implementation phase started but no files changed yet. Start coding.")
+
+    # Phase: review — code is written, need review
+    elif phase == "review":
+        parts.append("")
+        parts.append("Review phase. Call external models for review, write results to review.md.")
+
+    # --- Cross-phase guardrails ---
+
+    # Big changes without review
+    if progress["changed_lines"] > 30 and phase != "review":
+        parts.append("")
+        parts.append(f"⚠️ {progress['changed_lines']} lines changed. When done coding, you MUST call BOTH Gemini AND Claude for dual-model review. Not just one — both.")
+
+    # Review phase: enforce dual model
+    if phase == "review":
+        parts.append("")
+        parts.append("⛔ Review phase: call BOTH Gemini (--backend gemini) AND Claude (--backend claude) with reviewer role. Two models, not one.")
+
+    # High-risk files detected
+    if progress["high_risk_files"] and phase not in ("review", "completed"):
+        parts.append("")
+        parts.append("⚠️ High-risk files detected (auth/db/crypto). External model security review is REQUIRED before delivery.")
+
+    # Has dirty files but hasn't run tests
+    if progress["has_dirty_files"] and not progress["has_test_output"]:
+        if phase == "implementation" and progress["changed_lines"] > 10:
+            parts.append("")
+            parts.append("Reminder: run tests after significant changes. Don't wait until the end.")
+
+    # --- Spec reminder ---
+    spec_dir = os.path.join(root, ".ccg", "spec")
+    if os.path.isdir(spec_dir) and phase in ("analysis", "implementation"):
+        specs = []
+        for sub in ("backend", "frontend", "guides"):
+            idx = os.path.join(spec_dir, sub, "index.md")
+            if os.path.isfile(idx):
+                specs.append(f".ccg/spec/{sub}/index.md")
+        if specs:
+            parts.append("")
+            parts.append(f"Spec files available: {', '.join(specs)} — read before writing code.")
+
+    # --- Archive reminder ---
+    if phase == "completed" or (task.get("status") == "completed"):
+        parts.append("")
+        parts.append("⛔ Task completed. You MUST archive it now:")
+        parts.append(f"  mkdir -p .ccg/tasks/archive/$(date +%Y-%m) && mv .ccg/tasks/{task['_name']} .ccg/tasks/archive/$(date +%Y-%m)/")
+        parts.append("  git add .ccg/tasks/ && git commit -m \"chore: archive ccg task\"")
+
+    return parts
+
+
+def main():
+    try:
+        root = find_project_root()
+        if not root:
+            return
+        if not os.path.isdir(os.path.join(root, ".ccg")):
+            return
+
+        task = get_active_task(root)
+        progress = detect_progress(root)
+        lines = build_guidance(task, progress, root)
+
+        if not lines:
+            return
+
+        context = "<ccg-state>\n" + "\n".join(lines) + "\n</ccg-state>"
+
+        print(json.dumps({
+            "hookSpecificOutput": {
+                "hookEventName": "UserPromptSubmit",
+                "additionalContext": context
+            }
+        }))
+    except Exception:
+        pass
+
+
+if __name__ == "__main__":
+    main()

package/templates/codex/hooks.json

@@ -0,0 +1,7 @@
+[
+  {
+    "event": "user_prompt_submit",
+    "script": "hooks/ccg-workflow.py",
+    "timeout_ms": 10000
+  }
+]

package/templates/engine/strategies/guided-develop.md

@@ -71,18 +71,17 @@ Gate: 实施已完成 ✓
 
 **Gate check**: 需求已增强 ✓ 上下文已收集 ✓
 
-**M 复杂度必须调用外部模型进行分析。** 不可跳过。
+**⛔ M 复杂度必须调用双模型（Gemini + Codex）并行分析。不可只调一个，不可跳过。**
+
+这是多模型协作的核心价值——两个模型从不同角度分析同一个问题，交叉验证，弥补单模型盲区。
 
 执行步骤：
 
 1. 确定工作目录：`WORKDIR=$(pwd)`
-2. 根据领域选择模型：
-   - 后端任务 → backend 模型（codex）+ analyzer 角色
-   - 前端任务 → frontend 模型（gemini）+ analyzer 角色
-   - 全栈任务 → 双模型并行
 
-3. **调用 codeagent-wrapper**（必须实际执行，不是读文件）：
+2. **并行调用双模型**（`run_in_background: true`，两个同时启动）：
 
+Backend 模型：
 ```
 Bash({
   command: "~/.claude/bin/codeagent-wrapper {{LITE_MODE_FLAG}}--progress --backend codex {{GEMINI_MODEL_FLAG}}- \"$WORKDIR\" <<'CODEAGENT_EOF'\nROLE_FILE: ~/.claude/.ccg/prompts/codex/analyzer.md\n<TASK>\n需求：{增强后的需求}\n上下文：{Phase 2 收集的项目上下文、相关代码摘要}\n</TASK>\nOUTPUT: 技术分析报告（可行性、架构建议、风险评估、实施方案对比）\nCODEAGENT_EOF",
@@ -92,10 +91,10 @@ Bash({
 })
 ```
 
-如果是全栈任务，同时启动 frontend 模型：
+Frontend 模型（**必须同时启动，不是"如果是全栈才调"**）：
 ```
 Bash({
-  command: "~/.claude/bin/codeagent-wrapper {{LITE_MODE_FLAG}}--progress --backend gemini {{GEMINI_MODEL_FLAG}}- \"$WORKDIR\" <<'CODEAGENT_EOF'\nROLE_FILE: ~/.claude/.ccg/prompts/gemini/analyzer.md\n<TASK>\n需求：{增强后的需求}\n上下文：{Phase 2 收集的项目上下文}\n</TASK>\nOUTPUT: 前端/UX 视角分析报告\nCODEAGENT_EOF",
+  command: "~/.claude/bin/codeagent-wrapper {{LITE_MODE_FLAG}}--progress --backend gemini {{GEMINI_MODEL_FLAG}}- \"$WORKDIR\" <<'CODEAGENT_EOF'\nROLE_FILE: ~/.claude/.ccg/prompts/gemini/analyzer.md\n<TASK>\n需求：{增强后的需求}\n上下文：{Phase 2 收集的项目上下文}\n</TASK>\nOUTPUT: 从不同视角的分析报告（可行性、设计建议、风险评估）\nCODEAGENT_EOF",
   run_in_background: true,
   timeout: 3600000,
   description: "Frontend 模型分析"