cowork-flow 0.0.30 → 0.0.32

package/src/lib/copy-template.js

@@ -3,7 +3,7 @@ import { access, chmod, copyFile, mkdir, readFile, readdir, rm, stat, writeFile
 import { dirname, join, relative } from 'node:path';
 
 import { templateRoot } from './paths.js';
-import { shouldIncludeForPlatforms } from './platforms.js';
+import { shouldIncludeForPlatforms, skillDestinationForPlatform } from './platforms.js';
 
 async function pathExists(path) {
   try {
@@ -41,6 +41,7 @@ export async function buildInitPlan(targetDir, options = {}) {
   const files = await listFiles(templateRoot);
   const actions = [];
   const platforms = options.platforms ?? [];
+  const seen = new Set();
 
   for (const file of files) {
     if (!shouldIncludeForPlatforms(file, platforms)) {
@@ -54,6 +55,7 @@ export async function buildInitPlan(targetDir, options = {}) {
 
     const source = join(templateRoot, file);
     const destination = join(targetDir, file);
+    seen.add(destination);
     const exists = await pathExists(destination);
     const action = exists
       ? (options.force && templatePath !== '.cowork-flow/.developer' ? 'update' : 'skip')
@@ -61,6 +63,29 @@ export async function buildInitPlan(targetDir, options = {}) {
     actions.push({ action, source, destination, relativePath: file });
   }
 
+  // Inject per-platform skills directories from the canonical template/skills/.
+  const skillsSrc = join(templateRoot, 'skills');
+  if (await pathExists(skillsSrc)) {
+    const skillEntries = await readdir(skillsSrc, { withFileTypes: true });
+    for (const entry of skillEntries) {
+      if (!entry.isDirectory()) continue;
+      const skillName = entry.name;
+      for (const platform of platforms) {
+        const destBase = skillDestinationForPlatform(platform);
+        if (!destBase) continue;
+        const dest = join(targetDir, destBase, skillName, 'SKILL.md');
+        if (seen.has(dest)) continue;
+        seen.add(dest);
+        actions.push({
+          action: (await pathExists(dest)) ? 'skip' : 'create',
+          source: join(skillsSrc, skillName, 'SKILL.md'),
+          destination: dest,
+          relativePath: join(destBase, skillName, 'SKILL.md')
+        });
+      }
+    }
+  }
+
   const versionDestination = join(targetDir, '.cowork-flow', '.version');
   const versionExists = await pathExists(versionDestination);
   actions.push({
@@ -206,18 +231,21 @@ export async function buildSyncPlan(targetDir, options = {}) {
   const files = await listFiles(templateRoot);
   const actions = [];
   const platforms = options.platforms ?? await detectInstalledPlatforms(targetDir);
+  const seen = new Set();
 
   for (const file of files) {
     if (!shouldIncludeForPlatforms(file, platforms)) {
       continue;
     }
 
+    const destination = join(targetDir, file);
+    seen.add(destination);
+
     if (toTemplatePath(file) === '.cowork-flow/.version') {
       continue;
     }
 
     const source = join(templateRoot, file);
-    const destination = join(targetDir, file);
     const exists = await pathExists(destination);
     if (file === 'AGENTS.md' || file === 'CLAUDE.md') {
       actions.push(await buildManagedBlockSyncAction({ source, destination, exists, options, relativePath: file }));
@@ -238,6 +266,30 @@ export async function buildSyncPlan(targetDir, options = {}) {
     }
   }
 
+  // Inject per-platform skills directories from the canonical template/skills/.
+  const skillsSrc = join(templateRoot, 'skills');
+  if (await pathExists(skillsSrc)) {
+    const skillEntries = await readdir(skillsSrc, { withFileTypes: true });
+    for (const entry of skillEntries) {
+      if (!entry.isDirectory()) continue;
+      const skillName = entry.name;
+      for (const platform of platforms) {
+        const destBase = skillDestinationForPlatform(platform);
+        if (!destBase) continue;
+        const dest = join(targetDir, destBase, skillName, 'SKILL.md');
+        if (seen.has(dest)) continue;
+        seen.add(dest);
+        const destExists = await pathExists(dest);
+        const safe = ['.agents/skills', '.claude/skills'].some((p) => dest.startsWith(join(targetDir, p)));
+        if (destExists && (safe || options.force)) {
+          actions.push({ action: 'update', source: join(skillsSrc, skillName, 'SKILL.md'), destination: dest, relativePath: join(destBase, skillName, 'SKILL.md') });
+        } else if (!destExists) {
+          actions.push({ action: 'create', source: join(skillsSrc, skillName, 'SKILL.md'), destination: dest, relativePath: join(destBase, skillName, 'SKILL.md') });
+        }
+      }
+    }
+  }
+
   for (const file of OBSOLETE_SYNC_FILES) {
     const destination = join(targetDir, file);
     if (await pathExists(destination)) {

package/src/lib/platforms.js

@@ -50,9 +50,19 @@ export function formatPlatformList(platforms) {
 
 export function shouldIncludeForPlatforms(relativePath, platforms) {
   const normalized = relativePath.replaceAll('\\', '/');
-  if (normalized.startsWith('.agents/skills/')) {
-    return platforms.includes('codex') || platforms.includes('opencode');
+
+  // Canonical skills directory at template root — never copied directly;
+  // init logic injects per-platform copies separately.
+  if (normalized.startsWith('skills/')) {
+    return false;
+  }
+
+  // ZCode plugin bundle (.zcode/) is installed via a dedicated
+  // command, not by init/sync; keep it out of project directories.
+  if (normalized.startsWith(".zcode")) {
+    return false;
   }
+
   if (normalized.startsWith('.codex/') || normalized.startsWith('.cowork-flow/adapters/codex/')) {
     return platforms.includes('codex');
   }
@@ -68,3 +78,18 @@ export function shouldIncludeForPlatforms(relativePath, platforms) {
   }
   return true;
 }
+
+// Destination directory for copied skills, per host platform.
+// ZCode is absent because it ships the plugin bundle via install-zcode-plugin,
+// not by stashing files next to the project.
+export function skillDestinationForPlatform(platform) {
+  switch (platform) {
+    case 'codex':
+    case 'opencode':
+      return '.agents/skills';
+    case 'claude-code':
+      return '.claude/skills';
+    default:
+      return null;
+  }
+}

package/template/.claude/agents/cowork-check.md

@@ -36,9 +36,10 @@ the task.
 Load context before checking:
 1. Read the task directory from the bound runtime context.
 2. Read `<task>/prd.md`.
-3. Read `<task>/check.jsonl`.
-4. Read `git diff`.
-5. Include `test_intent_review` in the review output for meaningful behavior
+3. Read the plan file linked from this task (check `<task>/task.json` `relatedFiles` for a plan path, or search `.cowork-flow/plans/` for a plan file referencing this task directory). Use the plan's Verify commands and Expected results as the checklist for each step.
+4. Read `<task>/check.jsonl`.
+5. Read `git diff`.
+6. Include `test_intent_review` in the review output for meaningful behavior
    breaks coverage and shallow tests rejection.
 
 Rules:

package/template/.claude/agents/cowork-implement.md

@@ -39,7 +39,8 @@ Load context before editing:
 3. Read `<task>/info.md` if present.
 4. Read `<task>/implement.jsonl`.
 5. Read each JSONL `file` entry.
-6. For behavior-change tasks, create or verify `<task>/tdd.jsonl` before
+6. Read the plan file linked from this task (check `<task>/task.json` `relatedFiles` for a plan path, or search `.cowork-flow/plans/` for a plan file referencing this task directory). Follow the plan steps in order — each step has Files, Action, Verify, and Expected fields.
+7. For behavior-change tasks, create or verify `<task>/tdd.jsonl` before
    implementation or record a documented exemption.
 
 Rules:

package/template/.codex/agents/cowork-check.toml

@@ -27,9 +27,10 @@ the task.
 Load context before checking:
 1. Read the task directory from the bound runtime context.
 2. Read `<task>/prd.md`.
-3. Read `<task>/check.jsonl`.
-4. Read `git diff`.
-5. Include `test_intent_review` in the review output for meaningful behavior breaks coverage and shallow tests rejection.
+3. Read the plan file linked from this task (check `<task>/task.json` `relatedFiles` for a plan path, or search `.cowork-flow/plans/` for a plan file referencing this task directory). Use the plan's Verify commands and Expected results as the checklist for each step.
+4. Read `<task>/check.jsonl`.
+5. Read `git diff`.
+6. Include `test_intent_review` in the review output for meaningful behavior breaks coverage and shallow tests rejection.
 
 Rules:
 - Fix issues directly when they are clearly in scope.
@@ -37,6 +38,13 @@ Rules:
 - MUST NOT commit, archive, or mutate cowork-flow task state.
 - Report findings, changed files, and exact verification commands.
 - Include test intent findings that map tests back to PRD acceptance or regression behavior.
+- BEFORE declaring PRD acceptance passed, run the spec-driven coding gate and
+  treat a nonzero exit as a hard blocker:
+  ./.cowork-flow/run python .cowork-flow/scripts/common/gates/validate_coding_standaries.py --validate --repo-root .
+  This naturally enforces every rule the user added to
+  .cowork-flow/spec/backend/*.md and spec/frontend/*.md — they are not just
+  documentation but active validators. On violation, either fix the code or
+  explicitly discard the rule from the spec; do not skip the gate.
 """
 
 [features]

package/template/.codex/agents/cowork-implement.toml

@@ -30,7 +30,8 @@ Load context before editing:
 3. Read `<task>/info.md` if present.
 4. Read `<task>/implement.jsonl`.
 5. Read each JSONL `file` entry.
-6. For behavior-change tasks, create or verify `<task>/tdd.jsonl` before implementation or record a documented exemption.
+6. Read the plan file linked from this task (check `<task>/task.json` `relatedFiles` for a plan path, or search `.cowork-flow/plans/` for a plan file referencing this task directory). Follow the plan steps in order — each step has Files, Action, Verify, and Expected fields.
+7. For behavior-change tasks, create or verify `<task>/tdd.jsonl` before implementation or record a documented exemption.
 
 Rules:
 - MUST NOT spawn, wait for, list, or close other agents.
@@ -39,6 +40,12 @@ Rules:
 - Keep edits inside requested scope.
 - Do not treat shallow tests as TDD evidence; red-green-refactor proof must include redCommand, redExitCode, greenCommand, greenExitCode, and PRD acceptance ID mapping.
 - Report changed files and exact verification commands.
+- BEFORE editing any source file, run the spec-driven coding gate and treat a
+  nonzero exit as a hard blocker:
+  ./.cowork-flow/run python .cowork-flow/scripts/common/gates/validate_coding_standaries.py --validate --repo-root .
+  Parse every *.md under .cowork-flow/spec/backend and spec/frontend; rules
+  declared there activate validators dynamically. On violation, fix the code
+  (do not disable the rule) and re-run until exit code 0.
 """
 
 [features]

package/template/.codex/hooks.json

@@ -5,7 +5,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": ".cowork-flow/run python .codex/hooks/inject-workflow-state.py",
+            "command": ".codex/hooks/inject-workflow-state.py",
             "timeout": 5
           }
         ]

package/template/.cowork-flow/.version

@@ -1 +1 @@
-0.0.30
+0.0.32

package/template/.cowork-flow/run

@@ -1,8 +1,8 @@
 #!/bin/sh
 set -u
 
-MIN_PYTHON_LABEL="Python 3.8+"
-VERSION_CHECK='import sys; raise SystemExit(0 if sys.version_info >= (3, 8) else 1)'
+MIN_PYTHON_LABEL="Python 3.9+"
+VERSION_CHECK='import sys; raise SystemExit(0 if sys.version_info >= (3, 9) else 1)'
 WORKFLOW_DIR=$(CDPATH= cd "$(dirname "$0")" && pwd) || exit 1
 RUNNER_SCRIPT="$WORKFLOW_DIR/scripts/run.py"
 
@@ -30,7 +30,7 @@ select_explicit_python() {
   fi
 
   echo "Error: $env_name does not point to a usable ${MIN_PYTHON_LABEL} interpreter: $env_value" >&2
-  echo "Set $env_name to an executable Python 3.8+ interpreter path." >&2
+  echo "Set $env_name to an executable ${MIN_PYTHON_LABEL} interpreter path." >&2
   exit 127
 }
 

package/template/.cowork-flow/run.cmd

@@ -1,88 +1,88 @@
-@echo off
-setlocal EnableExtensions
-
-set "MIN_PYTHON_LABEL=Python 3.8+"
-set "VERSION_CHECK=import sys; raise SystemExit(0 if sys.version_info >= (3, 8) else 1)"
-set "WORKFLOW_DIR=%~dp0"
-set "RUNNER_SCRIPT=%WORKFLOW_DIR%scripts\run.py"
-set "SELECTED_PYTHON="
-set "SELECTED_PYTHON_ARG="
-
-call :select_python
-if errorlevel 1 exit /b %ERRORLEVEL%
-
-if not "%SELECTED_PYTHON_ARG%"=="" (
-  "%SELECTED_PYTHON%" "%SELECTED_PYTHON_ARG%" "%RUNNER_SCRIPT%" %*
-) else (
-  "%SELECTED_PYTHON%" "%RUNNER_SCRIPT%" %*
-)
-exit /b %ERRORLEVEL%
-
-:candidate_is_valid
-set "CANDIDATE_CMD=%~1"
-set "CANDIDATE_ARG=%~2"
-
-where "%CANDIDATE_CMD%" >nul 2>nul
-if errorlevel 1 (
-  if not exist "%CANDIDATE_CMD%" exit /b 1
-)
-
-if not "%CANDIDATE_ARG%"=="" (
-  "%CANDIDATE_CMD%" "%CANDIDATE_ARG%" -c "%VERSION_CHECK%" >nul 2>nul
-) else (
-  "%CANDIDATE_CMD%" -c "%VERSION_CHECK%" >nul 2>nul
-)
-exit /b %ERRORLEVEL%
-
-:select_explicit_python
-set "ENV_NAME=%~1"
-set "ENV_VALUE=%~2"
-
-call :candidate_is_valid "%ENV_VALUE%" ""
-if not errorlevel 1 (
-  set "SELECTED_PYTHON=%ENV_VALUE%"
-  set "SELECTED_PYTHON_ARG="
-  exit /b 0
-)
-
-echo Error: %ENV_NAME% does not point to a usable %MIN_PYTHON_LABEL% interpreter: %ENV_VALUE% 1>&2
-echo Set %ENV_NAME% to an executable Python 3.8+ interpreter path. 1>&2
-exit /b 127
-
-:select_python
-set "SELECTED_PYTHON="
-set "SELECTED_PYTHON_ARG="
-
-if not "%COWORK_FLOW_PYTHON%"=="" (
-  call :select_explicit_python "COWORK_FLOW_PYTHON" "%COWORK_FLOW_PYTHON%"
-  exit /b %ERRORLEVEL%
-)
-
-if not "%PYTHON%"=="" (
-  call :select_explicit_python "PYTHON" "%PYTHON%"
-  exit /b %ERRORLEVEL%
-)
-
-call :candidate_is_valid "python3" ""
-if not errorlevel 1 (
-  set "SELECTED_PYTHON=python3"
-  exit /b 0
-)
-
-call :candidate_is_valid "python" ""
-if not errorlevel 1 (
-  set "SELECTED_PYTHON=python"
-  exit /b 0
-)
-
-call :candidate_is_valid "py" "-3"
-if not errorlevel 1 (
-  set "SELECTED_PYTHON=py"
-  set "SELECTED_PYTHON_ARG=-3"
-  exit /b 0
-)
-
-echo Error: %MIN_PYTHON_LABEL% is required, but no usable interpreter was found. 1>&2
-echo Tried: COWORK_FLOW_PYTHON, PYTHON, python3, python, py -3. 1>&2
-echo Set COWORK_FLOW_PYTHON=C:\Path\To\python.exe and retry. 1>&2
-exit /b 127
+@echo off
+setlocal EnableExtensions
+
+set "MIN_PYTHON_LABEL=Python 3.9+"
+set "VERSION_CHECK=import sys; raise SystemExit(0 if sys.version_info >= (3, 9) else 1)"
+set "WORKFLOW_DIR=%~dp0"
+set "RUNNER_SCRIPT=%WORKFLOW_DIR%scripts\run.py"
+set "SELECTED_PYTHON="
+set "SELECTED_PYTHON_ARG="
+
+call :select_python
+if errorlevel 1 exit /b %ERRORLEVEL%
+
+if not "%SELECTED_PYTHON_ARG%"=="" (
+  "%SELECTED_PYTHON%" "%SELECTED_PYTHON_ARG%" "%RUNNER_SCRIPT%" %*
+) else (
+  "%SELECTED_PYTHON%" "%RUNNER_SCRIPT%" %*
+)
+exit /b %ERRORLEVEL%
+
+:candidate_is_valid
+set "CANDIDATE_CMD=%~1"
+set "CANDIDATE_ARG=%~2"
+
+where "%CANDIDATE_CMD%" >nul 2>nul
+if errorlevel 1 (
+  if not exist "%CANDIDATE_CMD%" exit /b 1
+)
+
+if not "%CANDIDATE_ARG%"=="" (
+  "%CANDIDATE_CMD%" "%CANDIDATE_ARG%" -c "%VERSION_CHECK%" >nul 2>nul
+) else (
+  "%CANDIDATE_CMD%" -c "%VERSION_CHECK%" >nul 2>nul
+)
+exit /b %ERRORLEVEL%
+
+:select_explicit_python
+set "ENV_NAME=%~1"
+set "ENV_VALUE=%~2"
+
+call :candidate_is_valid "%ENV_VALUE%" ""
+if not errorlevel 1 (
+  set "SELECTED_PYTHON=%ENV_VALUE%"
+  set "SELECTED_PYTHON_ARG="
+  exit /b 0
+)
+
+echo Error: %ENV_NAME% does not point to a usable %MIN_PYTHON_LABEL% interpreter: %ENV_VALUE% 1>&2
+echo Set %ENV_NAME% to an executable Python 3.9+ interpreter path. 1>&2
+exit /b 127
+
+:select_python
+set "SELECTED_PYTHON="
+set "SELECTED_PYTHON_ARG="
+
+if not "%COWORK_FLOW_PYTHON%"=="" (
+  call :select_explicit_python "COWORK_FLOW_PYTHON" "%COWORK_FLOW_PYTHON%"
+  exit /b %ERRORLEVEL%
+)
+
+if not "%PYTHON%"=="" (
+  call :select_explicit_python "PYTHON" "%PYTHON%"
+  exit /b %ERRORLEVEL%
+)
+
+call :candidate_is_valid "python3" ""
+if not errorlevel 1 (
+  set "SELECTED_PYTHON=python3"
+  exit /b 0
+)
+
+call :candidate_is_valid "python" ""
+if not errorlevel 1 (
+  set "SELECTED_PYTHON=python"
+  exit /b 0
+)
+
+call :candidate_is_valid "py" "-3"
+if not errorlevel 1 (
+  set "SELECTED_PYTHON=py"
+  set "SELECTED_PYTHON_ARG=-3"
+  exit /b 0
+)
+
+echo Error: %MIN_PYTHON_LABEL% is required, but no usable interpreter was found. 1>&2
+echo Tried: COWORK_FLOW_PYTHON, PYTHON, python3, python, py -3. 1>&2
+echo Set COWORK_FLOW_PYTHON=C:\Path\To\python.exe and retry. 1>&2
+exit /b 127

package/template/.cowork-flow/scripts/commands/doctor.py

@@ -240,16 +240,12 @@ def _check_host_adapters(repo_root: Path, errors: list[str]) -> None:
             errors,
         )
     for rel in (
-        ".cowork-flow/adapters/codex/adapter.yaml",
-        ".cowork-flow/adapters/opencode/adapter.yaml",
-        ".cowork-flow/adapters/claude-code/adapter.yaml",
         "template/.cowork-flow/adapters/codex/adapter.yaml",
         "template/.cowork-flow/adapters/opencode/adapter.yaml",
         "template/.cowork-flow/adapters/claude-code/adapter.yaml",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_ADAPTER_SNIPPETS, errors)
     for rel in (
-        ".cowork-flow/adapters/claude-code/adapter.yaml",
         "template/.cowork-flow/adapters/claude-code/adapter.yaml",
     ):
         _check_file_contains(
@@ -268,30 +264,18 @@ def cmd_host_adapters(_: argparse.Namespace) -> int:
     errors: list[str] = []
     _check_host_adapters(repo_root, errors)
     for rel in (
-        ".opencode/agents/cowork-research.md",
-        ".opencode/agents/cowork-implement.md",
-        ".opencode/agents/cowork-check.md",
         "template/.opencode/agents/cowork-research.md",
         "template/.opencode/agents/cowork-implement.md",
         "template/.opencode/agents/cowork-check.md",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_OPENCODE_AGENT_SNIPPETS, errors)
     for rel in (
-        ".claude/agents/cowork-research.md",
-        ".claude/agents/cowork-implement.md",
-        ".claude/agents/cowork-check.md",
         "template/.claude/agents/cowork-research.md",
         "template/.claude/agents/cowork-implement.md",
         "template/.claude/agents/cowork-check.md",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_CLAUDE_AGENT_SNIPPETS, errors)
     for rel in (
-        ".claude/commands/cowork-research.md",
-        ".claude/commands/cowork-implement.md",
-        ".claude/commands/cowork-check.md",
-        ".opencode/commands/cowork-research.md",
-        ".opencode/commands/cowork-implement.md",
-        ".opencode/commands/cowork-check.md",
         "template/.claude/commands/cowork-research.md",
         "template/.claude/commands/cowork-implement.md",
         "template/.claude/commands/cowork-check.md",
@@ -301,26 +285,20 @@ def cmd_host_adapters(_: argparse.Namespace) -> int:
     ):
         _check_file_contains(repo_root / rel, REQUIRED_RUNTIME_COMMAND_SNIPPETS, errors)
     for rel in (
-        ".claude/skills/start/SKILL.md",
-        ".claude/skills/check/SKILL.md",
-        "template/.claude/skills/start/SKILL.md",
-        "template/.claude/skills/check/SKILL.md",
+        "template/skills/start/SKILL.md",
+        "template/skills/check/SKILL.md",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_CLAUDE_SKILL_SNIPPETS, errors)
     for rel in (
-        f".claude/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
-        f"template/.claude/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
+        f"template/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
     ):
         _check_file_absent(repo_root / rel, errors)
     for rel in (
-        ".claude/settings.json",
         "template/.claude/settings.json",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_CLAUDE_HOOK_SETTINGS_SNIPPETS, errors)
     for rel in (
-        ".claude/hooks/inject-workflow-state.py",
         "template/.claude/hooks/inject-workflow-state.py",
-        ".codex/hooks/inject-workflow-state.py",
         "template/.codex/hooks/inject-workflow-state.py",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_RUNTIME_HOOK_SNIPPETS, errors)
@@ -337,7 +315,6 @@ def cmd_host_adapters(_: argparse.Namespace) -> int:
             errors,
         )
     for rel in (
-        ".opencode/plugins/cowork-flow.js",
         "template/.opencode/plugins/cowork-flow.js",
     ):
         _check_file_contains(
@@ -366,19 +343,14 @@ def cmd_subagent_safety(_: argparse.Namespace) -> int:
     repo_root = get_repo_root()
     errors: list[str] = []
     for rel in (
-        ".agents/skills/start/SKILL.md",
-        "template/.agents/skills/start/SKILL.md",
+        "template/skills/start/SKILL.md",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_START_SNIPPETS, errors)
     for rel in (
-        f".agents/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
-        f"template/.agents/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
+        f"template/skills/{ENTRY_BOUNDARY_DIR}/SKILL.md",
     ):
         _check_file_absent(repo_root / rel, errors)
     for rel in (
-        ".codex/agents/cowork-research.toml",
-        ".codex/agents/cowork-implement.toml",
-        ".codex/agents/cowork-check.toml",
         "template/.codex/agents/cowork-research.toml",
         "template/.codex/agents/cowork-implement.toml",
         "template/.codex/agents/cowork-check.toml",
@@ -401,9 +373,6 @@ def cmd_subagent_safety(_: argparse.Namespace) -> int:
     if (repo_root / "README.md").is_file():
         _check_file_omits(repo_root / "README.md", FORBIDDEN_README_DISPATCH_SNIPPETS, errors)
     for rel in (
-        ".codex/agents/worker.toml",
-        ".codex/agents/default.toml",
-        ".codex/agents/explorer.toml",
         "template/.codex/agents/worker.toml",
         "template/.codex/agents/default.toml",
         "template/.codex/agents/explorer.toml",
@@ -420,23 +389,17 @@ def cmd_subagent_safety(_: argparse.Namespace) -> int:
     _check_common_contracts(repo_root, errors)
     _check_host_adapters(repo_root, errors)
     for rel in (
-        ".codex/hooks.json",
         "template/.codex/hooks.json",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_HOOK_SNIPPETS, errors)
     for rel in (
-        ".codex/hooks/inject-workflow-state.py",
         "template/.codex/hooks/inject-workflow-state.py",
-        ".claude/hooks/inject-workflow-state.py",
         "template/.claude/hooks/inject-workflow-state.py",
     ):
         _check_file_contains(repo_root / rel, REQUIRED_RUNTIME_HOOK_SNIPPETS, errors)
     for rel in (
-        ".cowork-flow/scripts/commands/subagent.py",
         "template/.cowork-flow/scripts/commands/subagent.py",
-        ".cowork-flow/scripts/common/core/execution_context.py",
         "template/.cowork-flow/scripts/common/core/execution_context.py",
-        ".cowork-flow/scripts/common/task/active_task.py",
         "template/.cowork-flow/scripts/common/task/active_task.py",
     ):
         if not (repo_root / rel).is_file():