devcouncil 0.1.0 → 0.2.0

package/src/devcouncil/cli/commands/integrate.py

@@ -1,23 +1,66 @@
+import json
+import shlex
 import shutil
 import subprocess
 import sys
+from contextlib import contextmanager
 from pathlib import Path
 
 import typer
-import yaml
+import yaml  # type: ignore[import-untyped]
 from rich.console import Console
 from rich.table import Table
 
+from devcouncil.executors.agent_registry import (
+    BUILTIN_CODING_EXECUTOR_NAMES,
+    CODING_CLI_INTEGRATION_INFO,
+    VALID_INPUT_MODES,
+    agent_config_entry,
+    detect_available_coding_cli,
+    integration_tier_label,
+    is_reserved_agent_name,
+    load_agent_profiles,
+    load_cli_agent_specs,
+    normalize_agent_name,
+    resolve_automated_executor,
+    resolve_coding_cli_executable,
+    resolve_coding_cli_probe_order,
+)
+from devcouncil.integrations.actions import apply_integration_target
+from devcouncil.utils.subprocess_env import clean_subprocess_env
+from devcouncil.integrations.check import (
+    build_integration_check_report,
+    integration_status_summary,
+)
+
 app = typer.Typer(help="Set up DevCouncil integrations with coding CLIs.")
 setup_app = typer.Typer(help="Set up optional external companion integrations.")
 app.add_typer(setup_app, name="setup")
 console = Console()
 
-SUPPORTED_TOOLS = ("codex", "gemini")
+SUPPORTED_TOOLS = ("codex", "gemini", "claude", "cursor", "opencode", "antigravity", "warp", "aider")
+SUPPORTED_HOOK_TOOLS = ("codex", "gemini", "claude", "cursor")
+OPENCODE_HOOK_PLUGIN_NAME = "opencode_devcouncil_plugin.mjs"
+PREFERRED_COMMAND = "dev integrate"
+LEGACY_COMMAND = "dev setup --integrate"
+
+
+def _project_root(path: str | Path | None) -> Path:
+    return Path(path or ".").expanduser().resolve()
 
 
-def _project_root(path: Path | None) -> Path:
-    return (path or Path(".")).expanduser().resolve()
+def _warn_if_verify_only(client: str) -> None:
+    """Print a prominent containment warning when wiring a verify-only client.
+
+    Verify-only clients have no native pre-tool-use hook, so DevCouncil cannot block a
+    forbidden write or command before it happens — it is only caught post-hoc at verify
+    time. Surface this loudly so users don't assume hard containment."""
+    info = CODING_CLI_INTEGRATION_INFO.get(normalize_agent_name(client))
+    if info is not None and not info.hooks:
+        console.print(
+            f"[bold yellow]Warning ({info.label}): No pre-action containment — "
+            "forbidden writes/commands are caught only at verify time.[/bold yellow]"
+        )
 
 
 def _server_args(project_root: Path) -> list[str]:
@@ -51,8 +94,359 @@ def _gemini_command(project_root: Path, scope: str) -> list[str]:
     ]
 
 
+def _claude_command(project_root: Path, scope: str) -> list[str]:
+    # The server name must come BEFORE --env: the current Claude CLI treats --env
+    # as variadic, so `--env KEY=VALUE devcouncil` swallows the name `devcouncil`
+    # as a second (invalid) env var. Putting the name first — matching the working
+    # codex form — and terminating options with `--` avoids that.
+    return [
+        "claude",
+        "mcp",
+        "add",
+        "--scope",
+        scope,
+        "devcouncil",
+        "--env",
+        f"DEVCOUNCIL_PROJECT_ROOT={project_root}",
+        "--",
+        *_server_args(project_root),
+    ]
+
+
+def _cursor_config_path(project_root: Path) -> Path:
+    return project_root / ".cursor" / "mcp.json"
+
+
+def _cursor_mcp_config(project_root: Path) -> dict:
+    return {
+        "mcpServers": {
+            "devcouncil": {
+                "type": "stdio",
+                "command": "devcouncil",
+                "args": ["mcp-server"],
+                "env": {"DEVCOUNCIL_PROJECT_ROOT": str(project_root)},
+            }
+        }
+    }
+
+
+def _warp_mcp_config(project_root: Path) -> dict:
+    return {
+        "devcouncil": {
+            "command": "devcouncil",
+            "args": ["mcp-server"],
+            "env": {"DEVCOUNCIL_PROJECT_ROOT": str(project_root)},
+        }
+    }
+
+
+def _warp_mcp_path(project_root: Path) -> Path:
+    return project_root / ".devcouncil" / "integrations" / "warp-mcp.json"
+
+
+def _opencode_config_path(project_root: Path) -> Path:
+    return project_root / "opencode.json"
+
+
+def _opencode_mcp_entry(project_root: Path) -> dict:
+    return {
+        "type": "local",
+        "command": ["devcouncil", "mcp-server"],
+        "environment": {"DEVCOUNCIL_PROJECT_ROOT": str(project_root)},
+        "enabled": True,
+        "timeout": 10000,
+    }
+
+
+def _antigravity_mcp_path(project_root: Path) -> Path:
+    return project_root / ".agents" / "mcp_config.json"
+
+
+def _antigravity_mcp_config(project_root: Path) -> dict:
+    return {
+        "mcpServers": {
+            "devcouncil": {
+                "command": "devcouncil",
+                "args": ["mcp-server"],
+                "env": {"DEVCOUNCIL_PROJECT_ROOT": str(project_root)},
+                "cwd": str(project_root),
+            }
+        }
+    }
+
+
+def _write_warp_mcp_config(project_root: Path) -> Path:
+    path = _warp_mcp_path(project_root)
+    _save_json(path, _warp_mcp_config(project_root))
+    return path
+
+
+def _write_cursor_config(project_root: Path) -> Path:
+    path = _cursor_config_path(project_root)
+    data = _load_json_strict(path, "Cursor")
+    mcp_servers = data.setdefault("mcpServers", {})
+    mcp_servers["devcouncil"] = _cursor_mcp_config(project_root)["mcpServers"]["devcouncil"]
+    _save_json(path, data)
+    return path
+
+
+# When set, _mutate_raw_config applies record mutations in memory and
+# _batched_raw_config saves config.yaml once at the end (used by
+# `dev integrate all --apply`, which otherwise re-parses YAML per tool).
+_PENDING_RAW_CONFIG: dict | None = None
+
+
+@contextmanager
+def _batched_raw_config(project_root: Path):
+    global _PENDING_RAW_CONFIG
+    _PENDING_RAW_CONFIG = _load_raw_config(project_root)
+    try:
+        yield
+        _save_raw_config(project_root, _PENDING_RAW_CONFIG)
+    finally:
+        _PENDING_RAW_CONFIG = None
+
+
+def _mutate_raw_config(project_root: Path, mutate) -> None:
+    if _PENDING_RAW_CONFIG is not None:
+        mutate(_PENDING_RAW_CONFIG)
+        return
+    config = _load_raw_config(project_root)
+    mutate(config)
+    _save_raw_config(project_root, config)
+
+
+def _record_cursor_config(project_root: Path) -> None:
+    def mutate(config: dict) -> None:
+        cursor = config.setdefault("integrations", {}).setdefault("cursor", {})
+        cursor.update({
+            "enabled": True,
+            "config_path": str(_cursor_config_path(project_root).relative_to(project_root)),
+        })
+
+    _mutate_raw_config(project_root, mutate)
+
+
+def _record_warp_config(project_root: Path) -> None:
+    def mutate(config: dict) -> None:
+        warp = config.setdefault("integrations", {}).setdefault("warp", {})
+        warp.update({
+            "enabled": True,
+            "command": warp.get("command", "oz"),
+            "run_mode": warp.get("run_mode", "local"),
+            "mcp_config_path": str(_warp_mcp_path(project_root).relative_to(project_root)),
+        })
+
+    _mutate_raw_config(project_root, mutate)
+
+
+def _record_opencode_config(project_root: Path) -> None:
+    def mutate(config: dict) -> None:
+        opencode = config.setdefault("integrations", {}).setdefault("opencode", {})
+        opencode.update({
+            "enabled": True,
+            "config_path": str(_opencode_config_path(project_root).relative_to(project_root)),
+        })
+
+    _mutate_raw_config(project_root, mutate)
+
+
+def _record_antigravity_config(project_root: Path) -> None:
+    def mutate(config: dict) -> None:
+        antigravity = config.setdefault("integrations", {}).setdefault("antigravity", {})
+        antigravity.update({
+            "enabled": True,
+            "mcp_config_path": str(_antigravity_mcp_path(project_root).relative_to(project_root)),
+        })
+
+    _mutate_raw_config(project_root, mutate)
+
+
+def _load_json_strict(path: Path, label: str = "JSON") -> dict:
+    if not path.exists():
+        return {}
+    try:
+        return json.loads(path.read_text(encoding="utf-8")) or {}
+    except json.JSONDecodeError as exc:
+        raise ValueError(f"{path} is not valid JSON. Fix the {label} config before rerunning integration setup.") from exc
+
+
+def _write_opencode_config(project_root: Path) -> Path:
+    path = _opencode_config_path(project_root)
+    data = _load_json_strict(path, "OpenCode")
+    data.setdefault("$schema", "https://opencode.ai/config.json")
+    mcp = data.setdefault("mcp", {})
+    mcp["devcouncil"] = _opencode_mcp_entry(project_root)
+    _save_json(path, data)
+    return path
+
+
+def _write_antigravity_mcp_config(project_root: Path) -> Path:
+    path = _antigravity_mcp_path(project_root)
+    data = _load_json_strict(path, "Antigravity")
+    mcp_servers = data.setdefault("mcpServers", {})
+    mcp_servers["devcouncil"] = _antigravity_mcp_config(project_root)["mcpServers"]["devcouncil"]
+    _save_json(path, data)
+    return path
+
+
+def _configure_cursor(project_root: Path, apply: bool) -> bool:
+    path = _cursor_config_path(project_root)
+    config = _cursor_mcp_config(project_root)
+    if not apply:
+        console.print("[bold]Cursor[/bold]")
+        console.print(f"Project MCP config file: [dim]{path}[/dim]")
+        console.print(json.dumps(config, separators=(",", ":")), soft_wrap=True)
+        console.print("Verify in Cursor CLI with: [dim]cursor-agent mcp list[/dim]")
+        return True
+
+    if not shutil.which("cursor") and not shutil.which("cursor-agent"):
+        console.print("[yellow]Cursor CLI not found on PATH. Project MCP config will still be available to Cursor.[/yellow]")
+    try:
+        written = _write_cursor_config(project_root)
+    except ValueError as exc:
+        console.print(f"[red]{exc}[/red]")
+        return False
+    _record_cursor_config(project_root)
+    console.print(f"[green]Cursor MCP config written:[/green] {written}")
+    return True
+
+
+def _configure_opencode(project_root: Path, apply: bool) -> bool:
+    path = _opencode_config_path(project_root)
+    config = {
+        "$schema": "https://opencode.ai/config.json",
+        "mcp": {"devcouncil": _opencode_mcp_entry(project_root)},
+    }
+    if not apply:
+        console.print("[bold]OpenCode[/bold]")
+        console.print(f"Project config file: [dim]{path}[/dim]")
+        console.print(json.dumps(config, separators=(",", ":")), soft_wrap=True)
+        console.print(
+            "Direct executor command: "
+            "[dim]opencode run --file .devcouncil/TASK-001-opencode-task.md "
+            '"Execute the DevCouncil task described in the attached prompt file."[/dim]'
+        )
+        return True
+
+    if not shutil.which("opencode"):
+        console.print("[yellow]OpenCode CLI not found on PATH. Install it before using `dev run --executor opencode`.[/yellow]")
+    try:
+        written = _write_opencode_config(project_root)
+    except ValueError as exc:
+        console.print(f"[red]{exc}[/red]")
+        return False
+    _record_opencode_config(project_root)
+    console.print(f"[green]OpenCode MCP config written:[/green] {written}")
+    return True
+
+
+def _configure_antigravity(project_root: Path, apply: bool) -> bool:
+    path = _antigravity_mcp_path(project_root)
+    config = _antigravity_mcp_config(project_root)
+    if not apply:
+        console.print("[bold]Google Antigravity CLI[/bold]")
+        console.print(f"Project MCP config file: [dim]{path}[/dim]")
+        console.print(json.dumps(config, separators=(",", ":")), soft_wrap=True)
+        console.print(
+            "Direct executor command: "
+            "[dim]agy --print --print-timeout 30m "
+            '"Read and execute the DevCouncil task prompt at .devcouncil/TASK-001-antigravity-task.md."[/dim]'
+        )
+        return True
+
+    if not shutil.which("agy"):
+        console.print("[yellow]Antigravity CLI (`agy`) not found on PATH. Install it before using `dev run --executor antigravity`.[/yellow]")
+    try:
+        written = _write_antigravity_mcp_config(project_root)
+    except ValueError as exc:
+        console.print(f"[red]{exc}[/red]")
+        return False
+    _record_antigravity_config(project_root)
+    console.print(f"[green]Antigravity MCP config written:[/green] {written}")
+    return True
+
+
+def _configure_warp(project_root: Path, apply: bool) -> bool:
+    path = _warp_mcp_path(project_root)
+    config = _warp_mcp_config(project_root)
+    if not apply:
+        console.print("[bold]Warp / Oz[/bold]")
+        console.print(f"MCP config file: [dim]{path}[/dim]")
+        console.print(json.dumps(config, separators=(",", ":")), soft_wrap=True)
+        console.print(f"Direct executor command: [dim]oz agent run --cwd {project_root} --mcp {path} --prompt <task prompt>[/dim]")
+        return True
+
+    written = _write_warp_mcp_config(project_root)
+    _record_warp_config(project_root)
+    console.print(f"[green]Warp MCP config written:[/green] {written}")
+    if not shutil.which("oz"):
+        console.print("[yellow]oz CLI not found on PATH. Install Warp/Oz before using `dev run --executor warp`.[/yellow]")
+    return True
+
+
 def _format_command(command: list[str]) -> str:
-    return subprocess.list2cmdline(command)
+    if sys.platform == "win32":
+        return " ".join(_quote_powershell_arg(arg) for arg in command)
+    return shlex.join(command)
+
+
+def _quote_powershell_arg(arg: str) -> str:
+    if arg == "":
+        return "''"
+    special_chars = set(" \t\r\n'\"{}[](),;|&<>")
+    if not any(char in special_chars for char in arg):
+        return arg
+    return "'" + arg.replace("'", "''") + "'"
+
+
+def _opencode_plugin_source() -> Path:
+    return Path(__file__).resolve().parents[2] / "integrations" / OPENCODE_HOOK_PLUGIN_NAME
+
+
+def _opencode_plugin_path(project_root: Path) -> Path:
+    return project_root / ".devcouncil" / "integrations" / OPENCODE_HOOK_PLUGIN_NAME
+
+
+def _hook_command(project_root: Path, client: str, event: str) -> str:
+    return _format_command([
+        "devcouncil",
+        "hook",
+        event,
+        "--client",
+        client,
+        "--project-root",
+        str(project_root),
+    ])
+
+
+def _probe_mcp_tools(root: Path, *, timeout_seconds: float = 30.0) -> list[str]:
+    from mcp import ClientSession, StdioServerParameters
+    from mcp.client.stdio import stdio_client
+    import asyncio
+    import os
+
+    async def _list_tools() -> list[str]:
+        env = os.environ.copy()
+        env["DEVCOUNCIL_PROJECT_ROOT"] = str(root)
+        params = StdioServerParameters(
+            command=sys.executable,
+            args=["-m", "devcouncil", "mcp-server"],
+            cwd=str(root),
+            env=env,
+        )
+        async with stdio_client(params) as (read, write):
+            async with ClientSession(read, write) as session:
+                await session.initialize()
+                tools = await session.list_tools()
+                return [tool.name for tool in tools.tools]
+
+    async def _list_tools_with_deadline() -> list[str]:
+        # A wedged server process would otherwise block `dev integrate check`
+        # indefinitely; the caller treats TimeoutError as a failed probe.
+        return await asyncio.wait_for(_list_tools(), timeout=timeout_seconds)
+
+    return asyncio.run(_list_tools_with_deadline())
 
 
 def _run(command: list[str]) -> int:
@@ -62,7 +456,10 @@ def _run(command: list[str]) -> int:
     resolved = [executable, *command[1:]]
     use_shell = sys.platform == "win32" and Path(executable).suffix.lower() in {".bat", ".cmd", ".ps1"}
     invocation = subprocess.list2cmdline(resolved) if use_shell else resolved
-    result = subprocess.run(invocation, text=True, shell=use_shell)
+    try:
+        result = subprocess.run(invocation, text=True, shell=use_shell)
+    except (FileNotFoundError, OSError):
+        return 127
     return result.returncode
 
 
@@ -83,9 +480,12 @@ def _run_capture(command: list[str], timeout: int = 10) -> tuple[int, str]:
             errors="replace",
             shell=use_shell,
             timeout=timeout,
+            env=clean_subprocess_env(),
         )
     except subprocess.TimeoutExpired:
         return 124, "timed out"
+    except (FileNotFoundError, OSError) as exc:
+        return 127, f"{command[0]} could not be executed: {exc}"
     return result.returncode, (result.stdout + result.stderr).strip()
 
 
@@ -106,6 +506,267 @@ def _save_raw_config(project_root: Path, config: dict) -> None:
     path.write_text(yaml.safe_dump(config, sort_keys=False), encoding="utf-8")
 
 
+def _load_json(path: Path) -> dict:
+    if not path.exists():
+        return {}
+    try:
+        return json.loads(path.read_text(encoding="utf-8")) or {}
+    except json.JSONDecodeError:
+        return {}
+
+
+def _save_json(path: Path, data: dict) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
+
+
+def _upsert_hook(settings: dict, event: str, matcher: str, command: str, name: str) -> None:
+    hooks = settings.setdefault("hooks", {})
+    groups = hooks.setdefault(event, [])
+    for group in groups:
+        if group.get("matcher") == matcher:
+            group_hooks = group.setdefault("hooks", [])
+            if not any(hook.get("command") == command for hook in group_hooks):
+                group_hooks.append({
+                    "type": "command",
+                    "name": name,
+                    "command": command,
+                    "timeout": 10000,
+                })
+            return
+    groups.append({
+        "matcher": matcher,
+        "hooks": [{
+            "type": "command",
+            "name": name,
+            "command": command,
+            "timeout": 10000,
+        }],
+    })
+
+
+def _ensure_codex_hooks_enabled(project_root: Path) -> Path:
+    config_path = project_root / ".codex" / "config.toml"
+    config_path.parent.mkdir(parents=True, exist_ok=True)
+    existing = config_path.read_text(encoding="utf-8") if config_path.exists() else ""
+    if "codex_hooks" not in existing:
+        if "[features]" in existing:
+            lines = existing.splitlines()
+            updated: list[str] = []
+            in_features = False
+            inserted = False
+            for line in lines:
+                stripped = line.strip()
+                if stripped == "[features]":
+                    in_features = True
+                    updated.append(line)
+                    continue
+                if in_features and stripped.startswith("[") and stripped.endswith("]"):
+                    updated.append("codex_hooks = true")
+                    inserted = True
+                    in_features = False
+                updated.append(line)
+            if in_features and not inserted:
+                updated.append("codex_hooks = true")
+            config_path.write_text("\n".join(updated) + "\n", encoding="utf-8")
+        else:
+            separator = "\n" if existing and not existing.endswith("\n") else ""
+            config_path.write_text(f"{existing}{separator}\n[features]\ncodex_hooks = true\n", encoding="utf-8")
+    return config_path
+
+
+def _install_codex_hooks(project_root: Path) -> list[Path]:
+    path = project_root / ".codex" / "hooks.json"
+    settings = _load_json(path)
+    matcher = "Bash|shell_command|exec_command|local_shell|Write|Edit|MultiEdit|write_file|edit_file|apply_patch"
+    _upsert_hook(
+        settings,
+        "PreToolUse",
+        matcher,
+        _hook_command(project_root, "codex", "pre-tool-use"),
+        "devcouncil-pre-tool-use",
+    )
+    _upsert_hook(
+        settings,
+        "PostToolUse",
+        matcher,
+        _hook_command(project_root, "codex", "post-tool-use"),
+        "devcouncil-post-tool-use",
+    )
+    _save_json(path, settings)
+    return [path, _ensure_codex_hooks_enabled(project_root)]
+
+
+def _install_gemini_hooks(project_root: Path) -> list[Path]:
+    path = project_root / ".gemini" / "settings.json"
+    settings = _load_json(path)
+    matcher = "run_shell_command|shell_command|write_file|edit_file|replace|apply_patch"
+    _upsert_hook(
+        settings,
+        "BeforeTool",
+        matcher,
+        _hook_command(project_root, "gemini", "pre-tool-use"),
+        "devcouncil-pre-tool-use",
+    )
+    _upsert_hook(
+        settings,
+        "AfterTool",
+        matcher,
+        _hook_command(project_root, "gemini", "post-tool-use"),
+        "devcouncil-post-tool-use",
+    )
+    _save_json(path, settings)
+    return [path]
+
+
+def _upsert_cursor_hook(settings: dict, event: str, matcher: str, command: str) -> None:
+    hooks = settings.setdefault("hooks", {})
+    entries = hooks.setdefault(event, [])
+    for entry in entries:
+        if entry.get("command") == command:
+            return
+    payload: dict = {"command": command}
+    if matcher:
+        payload["matcher"] = matcher
+    entries.append(payload)
+
+
+def _install_cursor_hooks(project_root: Path) -> list[Path]:
+    path = project_root / ".cursor" / "hooks.json"
+    settings = _load_json(path)
+    settings.setdefault("version", 1)
+    matcher = "Shell|Write|Edit|MultiEdit|Read|Task"
+    _upsert_cursor_hook(
+        settings,
+        "preToolUse",
+        matcher,
+        _hook_command(project_root, "cursor", "pre-tool-use"),
+    )
+    _upsert_cursor_hook(
+        settings,
+        "postToolUse",
+        matcher,
+        _hook_command(project_root, "cursor", "post-tool-use"),
+    )
+    _save_json(path, settings)
+    config = _load_raw_config(project_root)
+    integrations = config.setdefault("integrations", {})
+    cursor = integrations.setdefault("cursor", {})
+    cursor.update({
+        "hooks_path": str(path.relative_to(project_root)),
+    })
+    _save_raw_config(project_root, config)
+    return [path]
+
+
+def _install_opencode_hooks(project_root: Path) -> list[Path]:
+    source = _opencode_plugin_source()
+    if not source.exists():
+        raise FileNotFoundError(f"Missing bundled OpenCode hook plugin: {source}")
+    destination = _opencode_plugin_path(project_root)
+    destination.parent.mkdir(parents=True, exist_ok=True)
+    destination.write_text(source.read_text(encoding="utf-8"), encoding="utf-8")
+
+    path = _opencode_config_path(project_root)
+    data = _load_json_strict(path, "OpenCode") if path.exists() else {"$schema": "https://opencode.ai/config.json"}
+    data.setdefault("$schema", "https://opencode.ai/config.json")
+    plugins_raw = data.setdefault("plugin", [])
+    if not isinstance(plugins_raw, list):
+        plugins_raw = []
+        data["plugin"] = plugins_raw
+    plugins: list[str] = [str(item) for item in plugins_raw]
+    data["plugin"] = plugins
+    plugin_ref = f"./.devcouncil/integrations/{OPENCODE_HOOK_PLUGIN_NAME}"
+    if plugin_ref not in plugins:
+        plugins.append(plugin_ref)
+    _save_json(path, data)
+    _record_opencode_config(project_root)
+    return [destination, path]
+
+
+def _install_claude_hooks(project_root: Path) -> list[Path]:
+    path = project_root / ".claude" / "settings.local.json"
+    settings = _load_json(path)
+    matcher = "Bash|Write|Edit|MultiEdit"
+    _upsert_hook(
+        settings,
+        "PreToolUse",
+        matcher,
+        _hook_command(project_root, "claude", "pre-tool-use"),
+        "devcouncil-pre-tool-use",
+    )
+    _upsert_hook(
+        settings,
+        "PostToolUse",
+        matcher,
+        _hook_command(project_root, "claude", "post-tool-use"),
+        "devcouncil-post-tool-use",
+    )
+    _upsert_hook(
+        settings,
+        "Stop",
+        "",
+        _hook_command(project_root, "claude", "agent-response"),
+        "devcouncil-agent-response-ready",
+    )
+    _save_json(path, settings)
+    return [path]
+
+
+def _preview_hook_paths(project_root: Path, tool: str) -> list[tuple[str, Path]]:
+    paths = {
+        "codex": [project_root / ".codex" / "hooks.json", project_root / ".codex" / "config.toml"],
+        "gemini": [project_root / ".gemini" / "settings.json"],
+        "claude": [project_root / ".claude" / "settings.local.json"],
+        "cursor": [project_root / ".cursor" / "hooks.json"],
+        "opencode": [_opencode_plugin_path(project_root), _opencode_config_path(project_root)],
+    }
+    selected: tuple[str, ...]
+    if tool == "all":
+        selected = (*SUPPORTED_HOOK_TOOLS, "opencode")
+    elif tool == "opencode":
+        selected = ("opencode",)
+    else:
+        selected = (tool,)
+    return [(client, path) for client in selected for path in paths.get(client, [])]
+
+
+def _configure_native_hooks(project_root: Path, tool: str = "all", apply: bool = False) -> None:
+    allowed = {"all", *SUPPORTED_HOOK_TOOLS, "opencode"}
+    if tool not in allowed:
+        console.print("[red]--tool must be one of: all, codex, gemini, claude, cursor, opencode.[/red]")
+        raise typer.Exit(code=2)
+
+    if not apply:
+        console.print("[bold]Native hook config preview[/bold]")
+        for client, path in _preview_hook_paths(project_root, tool):
+            console.print(f"{client}: {path}", soft_wrap=True)
+        console.print("[yellow]Preview only. Rerun with --apply to write hook config files.[/yellow]")
+        return
+
+    selected: tuple[str, ...]
+    if tool == "all":
+        selected = (*SUPPORTED_HOOK_TOOLS, "opencode")
+    elif tool == "opencode":
+        selected = ("opencode",)
+    else:
+        selected = (tool,)
+    installers = {
+        "codex": _install_codex_hooks,
+        "gemini": _install_gemini_hooks,
+        "claude": _install_claude_hooks,
+        "cursor": _install_cursor_hooks,
+        "opencode": _install_opencode_hooks,
+    }
+    for client in selected:
+        try:
+            written = installers[client](project_root)
+        except (ValueError, FileNotFoundError) as exc:
+            console.print(f"[red]{client} hook setup failed: {exc}[/red]")
+            raise typer.Exit(code=1) from exc
+        console.print(f"[green]{client} native hooks configured:[/green] {', '.join(str(path) for path in written)}")
+
+
 def _print_command(tool: str, command: list[str], apply: bool):
     if apply:
         console.print(f"[cyan]Configuring {tool} MCP integration...[/cyan]")
@@ -148,33 +809,71 @@ def overview(ctx: typer.Context):
     table.add_column("Tool", style="cyan")
     table.add_column("Setup command", style="green")
     table.add_column("Notes")
-    table.add_row("Codex CLI", "dev integrate codex --apply", "Adds DevCouncil as a stdio MCP server.")
-    table.add_row("Gemini CLI", "dev integrate gemini --apply", "Adds DevCouncil as a project-scoped stdio MCP server.")
-    table.add_row("Both", "dev integrate all --apply", "Runs both setup commands.")
+    table.add_row("Codex CLI", f"{PREFERRED_COMMAND} codex --apply", "Adds DevCouncil as a stdio MCP server.")
+    table.add_row("Gemini CLI", f"{PREFERRED_COMMAND} gemini --apply", "Adds DevCouncil as a project-scoped stdio MCP server.")
+    table.add_row("Claude Code", f"{PREFERRED_COMMAND} claude --apply", "Adds DevCouncil as a Claude Code MCP server.")
+    table.add_row("Cursor", f"{PREFERRED_COMMAND} cursor --apply", "Writes project .cursor/mcp.json for Cursor editor and cursor-agent.")
+    table.add_row("OpenCode", f"{PREFERRED_COMMAND} opencode --apply", "Adds DevCouncil as a project-scoped OpenCode MCP server and executor.")
+    table.add_row("Google Antigravity CLI", f"{PREFERRED_COMMAND} antigravity --apply", "Writes project .agents/mcp_config.json and enables the agy executor.")
+    table.add_row("Warp / Oz", f"{PREFERRED_COMMAND} warp --apply", "Writes a Warp-compatible MCP JSON file for local agents and Oz CLI.")
+    table.add_row("Aider", f"{PREFERRED_COMMAND} aider --apply", "Enables the built-in Aider headless executor (no MCP).")
+    table.add_row("Bring your own CLI", f"{PREFERRED_COMMAND} cli-agent NAME --command TOOL --apply", "Registers any prompt-taking CLI as a DevCouncil executor.")
+    table.add_row("All", f"{PREFERRED_COMMAND} all --apply", "Runs MCP setup and installs native hooks.")
+    table.add_row("Native hooks", f"{PREFERRED_COMMAND} hooks --apply", "Installs Codex, Gemini, Claude, Cursor, and OpenCode hook files.")
+    table.add_row("Recommend", f"{PREFERRED_COMMAND} recommend", "Show the best executor for this machine and project.")
+    table.add_row("Status", f"{PREFERRED_COMMAND} status", "Compact PATH + config summary (no MCP probe).")
+    table.add_row("Matrix", f"{PREFERRED_COMMAND} matrix", "Print built-in coding CLI integration tiers.")
+    table.add_row("Check", f"{PREFERRED_COMMAND} check", "Verify MCP, hooks, and optional CLIs (--strict, --json for CI).")
     console.print(table)
+    console.print(f"\nIf your install exposes only the setup flow, use: {LEGACY_COMMAND} --apply")
     console.print("\nRun without [bold]--apply[/bold] to preview the exact commands first.")
 
 
 @app.command("doctor")
-def integrations_doctor():
+def integrations_doctor(
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
     """Check optional integration tools and local client wiring prerequisites."""
+    root = _project_root(project_root)
     table = Table(title="DevCouncil Integration Doctor")
-    table.add_column("Integration", style="cyan")
+    table.add_column("Integration", style="cyan", no_wrap=True)
     table.add_column("Status")
-    table.add_column("Notes")
+    table.add_column("Notes", overflow="fold")
 
     checks = [
         ("Agent Flow", "agent-flow-app", "Optional live/replay visualizer for trace JSONL."),
         ("code-review-graph", "code-review-graph", "Optional structural graph context adapter."),
-        ("Claude Code", "claude", "Optional hook runtime for pre-tool-use enforcement."),
-        ("Codex CLI", "codex", "Optional MCP client and headless executor companion."),
-        ("Gemini CLI", "gemini", "Optional MCP client companion."),
+        ("Claude Code", "claude", "Optional MCP client and native hook runtime for pre-tool-use enforcement."),
+        ("Codex CLI", "codex", "Optional MCP client, headless executor companion, and native hook runtime."),
+        ("Gemini CLI", "gemini", "Optional MCP client companion and native hook runtime."),
+        ("Cursor", "cursor-agent", "Optional MCP client, cursor-agent executor, and native hooks."),
+        ("OpenCode", "opencode", "Optional MCP client and headless coding-agent executor."),
+        ("Google Antigravity CLI", "agy", "Optional Antigravity CLI companion and headless coding-agent executor."),
+        ("Warp / Oz", "oz", "Optional Warp/Oz CLI companion and agent executor."),
+        ("Aider", "aider", "Optional headless executor via `dev run --executor aider` (no MCP)."),
     ]
     for label, executable, notes in checks:
         found = shutil.which(executable)
         table.add_row(label, "[green]OK[/green]" if found else "[yellow]Missing[/yellow]", found or notes)
 
-    config = _config_path(Path("."))
+    profiles = load_agent_profiles(root)
+    for name, spec in load_cli_agent_specs(root).items():
+        if spec.built_in:
+            continue
+        found = shutil.which(spec.executable)
+        mode_ok = spec.input_mode in VALID_INPUT_MODES
+        profile_ok = spec.default_profile in profiles
+        status = "[green]OK[/green]" if found and mode_ok and profile_ok else "[red]Invalid[/red]"
+        if not found:
+            status = "[yellow]Missing[/yellow]"
+        details = found or f"{spec.executable} not found on PATH"
+        if not mode_ok:
+            details = f"invalid input_mode={spec.input_mode}"
+        if not profile_ok:
+            details = f"{details}; missing profile={spec.default_profile}"
+        table.add_row(f"CLI agent: {name}", status, details)
+
+    config = _config_path(root)
     table.add_row(
         "DevCouncil config",
         "[green]OK[/green]" if config.exists() else "[red]Missing[/red]",
@@ -218,98 +917,494 @@ def gemini(
         raise typer.Exit(code=1)
 
 
+@app.command("claude")
+def claude(
+    apply: bool = typer.Option(False, "--apply", help="Run the setup command instead of printing it."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+    scope: str = typer.Option("local", "--scope", help="Claude MCP config scope: local, project, or user."),
+):
+    """
+    Set up DevCouncil MCP tools for Claude Code.
+    """
+    if scope not in {"local", "project", "user"}:
+        console.print("[red]--scope must be 'local', 'project', or 'user'.[/red]")
+        raise typer.Exit(code=2)
+
+    root = _project_root(project_root)
+    command = _claude_command(root, scope)
+    ok = _configure("Claude Code", command, apply)
+    if not ok and apply:
+        raise typer.Exit(code=1)
+
+
+@app.command("cursor")
+def cursor(
+    apply: bool = typer.Option(False, "--apply", help="Write project Cursor MCP config instead of printing it."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Set up DevCouncil MCP tools for Cursor.
+    """
+    root = _project_root(project_root)
+    if apply:
+        report = apply_integration_target(root, "cursor")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Cursor integration configured.[/green]")
+        return
+    ok = _configure_cursor(root, apply)
+    if not ok and apply:
+        raise typer.Exit(code=1)
+
+
+@app.command("opencode")
+def opencode(
+    apply: bool = typer.Option(False, "--apply", help="Write project OpenCode config instead of printing it."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Set up DevCouncil MCP tools for OpenCode.
+    """
+    root = _project_root(project_root)
+    if apply:
+        report = apply_integration_target(root, "opencode")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]OpenCode integration configured.[/green]")
+        return
+    ok = _configure_opencode(root, apply)
+    if not ok and apply:
+        raise typer.Exit(code=1)
+
+
+@app.command("agy")
+@app.command("antigravity")
+def antigravity(
+    apply: bool = typer.Option(False, "--apply", help="Write project Antigravity MCP config instead of printing it."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Set up DevCouncil MCP tools for Google Antigravity CLI.
+    """
+    root = _project_root(project_root)
+    if apply:
+        report = apply_integration_target(root, "antigravity")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Antigravity integration configured.[/green]")
+        _warn_if_verify_only("antigravity")
+        return
+    ok = _configure_antigravity(root, apply)
+    if not ok and apply:
+        raise typer.Exit(code=1)
+
+
+@app.command("warp")
+def warp(
+    apply: bool = typer.Option(False, "--apply", help="Write Warp MCP config instead of printing it."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Set up DevCouncil MCP tools for Warp local agents and the Oz CLI.
+    """
+    root = _project_root(project_root)
+    if apply:
+        report = apply_integration_target(root, "warp")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Warp integration configured.[/green]")
+        _warn_if_verify_only("warp")
+        return
+    _configure_warp(root, apply)
+
+
+def _record_aider_config(project_root: Path) -> None:
+    def mutate(config: dict) -> None:
+        config.setdefault("integrations", {}).setdefault("aider", {}).update({"enabled": True})
+
+    _mutate_raw_config(project_root, mutate)
+
+
+def _configure_aider(project_root: Path, apply: bool) -> bool:
+    command = ["aider", "--yes", "--no-show-model-warnings", "--message", "<task prompt>"]
+    if not apply:
+        console.print("[bold]Aider[/bold]")
+        console.print("Built-in executor: [dim]dev run TASK-001 --executor aider[/dim]")
+        console.print("Launch command: [dim]" + _format_command(command) + "[/dim]")
+        console.print("Aider does not expose a first-party DevCouncil MCP server.")
+        return True
+
+    if not shutil.which("aider"):
+        console.print("[yellow]Aider CLI not found on PATH. Install it before using `dev run --executor aider`.[/yellow]")
+    _record_aider_config(project_root)
+    console.print("[green]Aider executor enabled in .devcouncil/config.yaml.[/green]")
+    return True
+
+
+@app.command("aider")
+def aider(
+    apply: bool = typer.Option(False, "--apply", help="Record the built-in Aider executor in DevCouncil config."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Enable the built-in Aider headless executor (no MCP integration).
+    """
+    root = _project_root(project_root)
+    if apply:
+        report = apply_integration_target(root, "aider")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Aider integration configured.[/green]")
+        _warn_if_verify_only("aider")
+        return
+    ok = _configure_aider(root, apply)
+    if not ok and apply:
+        raise typer.Exit(code=1)
+
+
+@app.command("cli-agent")
+def cli_agent(
+    name: str = typer.Argument(..., help="Executor name to register, for example opencode or aider."),
+    command: str = typer.Option(..., "--command", help="Executable to launch."),
+    arg: list[str] | None = typer.Option(None, "--arg", help="Argument to pass to the CLI. Repeat for multiple args."),
+    input_mode: str = typer.Option("stdin", "--input-mode", help="Prompt input mode: stdin, argument, or prompt-file."),
+    prompt_arg: str | None = typer.Option(None, "--prompt-arg", help="Flag used before the prompt or prompt file, for example --prompt."),
+    timeout_seconds: int | None = typer.Option(None, "--timeout-seconds", help="Agent-specific timeout override."),
+    display_name: str | None = typer.Option(None, "--display-name", help="Human-readable agent name."),
+    kind: str = typer.Option("custom", "--kind", help="Agent kind, for example coding-cli or review-cli."),
+    supports_mcp: bool = typer.Option(False, "--supports-mcp", help="Mark this agent as MCP-capable."),
+    supports_diff_review: bool = typer.Option(False, "--supports-diff-review", help="Mark this agent as able to review diffs."),
+    default_profile: str = typer.Option("default", "--default-profile", help="Default execution profile for this agent."),
+    help_arg: list[str] | None = typer.Option(None, "--help-arg", help="Argument for the agent help command. Repeat for multiple args."),
+    apply: bool = typer.Option(False, "--apply", help="Write .devcouncil/config.yaml instead of previewing."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """
+    Register an arbitrary prompt-taking CLI as a DevCouncil executor.
+    """
+    if input_mode not in VALID_INPUT_MODES:
+        console.print("[red]--input-mode must be one of: stdin, argument, prompt-file.[/red]")
+        raise typer.Exit(code=2)
+    if not name.strip():
+        console.print("[red]Agent name cannot be empty.[/red]")
+        raise typer.Exit(code=2)
+    if not command.strip():
+        console.print("[red]--command cannot be empty.[/red]")
+        raise typer.Exit(code=2)
+
+    root = _project_root(project_root)
+    if is_reserved_agent_name(name):
+        console.print(f"[red]'{name}' is reserved for a built-in DevCouncil agent.[/red]")
+        raise typer.Exit(code=2)
+    if default_profile not in load_agent_profiles(root):
+        console.print(f"[red]Unknown --default-profile '{default_profile}'.[/red]")
+        raise typer.Exit(code=2)
+
+    normalized = normalize_agent_name(name)
+    entry = agent_config_entry(
+        command=command,
+        args=arg or [],
+        input_mode=input_mode,
+        prompt_arg=prompt_arg,
+        timeout_seconds=timeout_seconds,
+        display_name=display_name,
+        kind=kind,
+        supports_mcp=supports_mcp,
+        supports_diff_review=supports_diff_review,
+        default_profile=default_profile,
+        help_command=[command, *(help_arg or [])] if help_arg else [],
+    )
+
+    if not apply:
+        console.print("[bold]Bring your own CLI executor preview[/bold]")
+        console.print(f"Executor: [cyan]{normalized}[/cyan]")
+        console.print(json.dumps(entry, indent=2), soft_wrap=True)
+        console.print(f"Run with: [dim]dev run TASK-001 --executor {normalized}[/dim]")
+        console.print("[yellow]Preview only. Rerun with --apply to update .devcouncil/config.yaml.[/yellow]")
+        return
+
+    config = _load_raw_config(root)
+    agents = config.setdefault("integrations", {}).setdefault("cli_agents", {}).setdefault("agents", {})
+    agents[normalized] = entry
+    _save_raw_config(root, config)
+    console.print(f"[green]Registered CLI executor '{normalized}' in .devcouncil/config.yaml.[/green]")
+
+
 @app.command("all")
 def all_tools(
     apply: bool = typer.Option(False, "--apply", help="Run setup commands instead of printing them."),
     project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
     gemini_scope: str = typer.Option("project", "--gemini-scope", help="Gemini MCP config scope: project or user."),
+    claude_scope: str = typer.Option("local", "--claude-scope", help="Claude MCP config scope: local, project, or user."),
+    hooks: bool = typer.Option(True, "--hooks/--no-hooks", help="Include native Codex, Gemini, and Claude hook setup."),
+    strict: bool = typer.Option(
+        False,
+        "--strict",
+        help="After --apply, run dev integrate check --strict and fail on missing optional CLIs.",
+    ),
 ):
     """
-    Set up DevCouncil MCP tools for every supported coding CLI found on PATH.
+    Set up DevCouncil MCP tools and native hooks for every supported coding CLI found on PATH.
     """
     if gemini_scope not in {"project", "user"}:
         console.print("[red]--gemini-scope must be 'project' or 'user'.[/red]")
         raise typer.Exit(code=2)
+    if claude_scope not in {"local", "project", "user"}:
+        console.print("[red]--claude-scope must be 'local', 'project', or 'user'.[/red]")
+        raise typer.Exit(code=2)
 
     root = _project_root(project_root)
-    results = [
-        _configure("Codex CLI", _codex_command(root), apply),
-        _configure("Gemini CLI", _gemini_command(root, gemini_scope), apply),
+    if apply:
+        report = apply_integration_target(
+            root,
+            "all",
+            include_hooks=hooks,
+            strict=strict,
+            gemini_scope=gemini_scope,
+            claude_scope=claude_scope,
+        )
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Coding CLI integrations configured.[/green]")
+        return
+
+    commands = [
+        ("Codex CLI", _codex_command(root)),
+        ("Gemini CLI", _gemini_command(root, gemini_scope)),
+        ("Claude Code", _claude_command(root, claude_scope)),
     ]
-    if apply and not all(results):
-        raise typer.Exit(code=1)
+    for tool, command in commands:
+        _configure(tool, command, apply)
+    _configure_cursor(root, apply)
+    _configure_opencode(root, apply)
+    _configure_antigravity(root, apply)
+    _configure_warp(root, apply)
+    _configure_aider(root, apply)
+    if hooks:
+        _configure_native_hooks(root, "all", apply)
+
+
+@app.command("recommend")
+def recommend(
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """Recommend a coding CLI executor for this machine and project."""
+    root = _project_root(project_root)
+    probe_order = resolve_coding_cli_probe_order(root)
+    detected = detect_available_coding_cli(root, probe_order=probe_order)
+    resolved = resolve_automated_executor(root, None)
+
+    table = Table(title="DevCouncil Integration Recommendations")
+    table.add_column("Client", style="cyan")
+    table.add_column("PATH")
+    table.add_column("Tier")
+    table.add_column("MCP")
+    table.add_column("Hooks")
+
+    for client in probe_order:
+        info = CODING_CLI_INTEGRATION_INFO.get(client)
+        on_path = resolve_coding_cli_executable(root, client)
+        table.add_row(
+            client,
+            "[green]yes[/green]" if on_path else "[dim]no[/dim]",
+            integration_tier_label(client),
+            "yes" if info and info.mcp else "no",
+            "yes" if info and info.hooks else "no",
+        )
 
+    console.print(table)
+    if summary := integration_status_summary(root):
+        if summary.get("custom_probe_order"):
+            console.print(
+                f"\n[dim]Probe order:[/dim] {', '.join(summary['probe_order'])} "
+                f"(from execution.coding_cli_probe_order)"
+            )
+        else:
+            console.print(f"\n[dim]Probe order:[/dim] {', '.join(summary['probe_order'])} (default)")
+    if detected:
+        console.print(f"\n[bold]Recommended executor:[/bold] [cyan]{resolved}[/cyan]")
+        console.print(f"Run: [dim]dev run TASK-001 --executor {resolved}[/dim]")
+        console.print(f"Or:  [dim]dev go \"Your goal\" --executor {resolved}[/dim]")
+        console.print(f"Setup: [dim]{PREFERRED_COMMAND} {resolved} --apply[/dim]")
+    else:
+        console.print("\n[yellow]No built-in coding CLI was found on PATH.[/yellow]")
+        console.print("Install Codex, Gemini, Claude Code, Cursor Agent, OpenCode, or register a custom CLI:")
+        console.print(f"[dim]{PREFERRED_COMMAND} cli-agent NAME --command TOOL --apply[/dim]")
 
-@app.command("check")
-def check(
+
+@app.command("status")
+def status(
     project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+    as_json: bool = typer.Option(False, "--json", help="Emit machine-readable JSON."),
 ):
-    """
-    Check whether DevCouncil is ready to integrate with coding CLIs.
-    """
+    """Show a compact integration summary without running the MCP server probe."""
     root = _project_root(project_root)
-    table = Table(title="DevCouncil Integration Check")
-    table.add_column("Check", style="cyan")
-    table.add_column("Status", style="magenta")
-    table.add_column("Details")
+    summary = integration_status_summary(root)
+    raw_config = _load_raw_config(root) if (root / ".devcouncil").exists() else {}
+    integrations = raw_config.get("integrations", {})
+
+    if as_json:
+        payload = {
+            **summary,
+            "integrations_enabled": {
+                name: bool(integrations.get(name, {}).get("enabled"))
+                for name in ("cursor", "opencode", "antigravity", "warp", "aider")
+            },
+        }
+        typer.echo(json.dumps(payload, indent=2))
+        return
 
-    failures = 0
+    table = Table(title="DevCouncil Integration Status")
+    table.add_column("Setting", style="cyan")
+    table.add_column("Value")
 
-    def add(ok: bool, name: str, details: str):
-        nonlocal failures
-        table.add_row(name, "[green]OK[/green]" if ok else "[red]FAIL[/red]", details)
-        if not ok:
-            failures += 1
+    table.add_row("Project", "[green]initialized[/green]" if summary["project_initialized"] else "[yellow]not initialized[/yellow]")
+    table.add_row("Default executor", summary["default_executor"])
+    table.add_row("Resolved executor", summary["resolved_executor"])
+    table.add_row("CLIs on PATH", ", ".join(summary["coding_clis_on_path"]) or "[dim]none[/dim]")
+    table.add_row("Probe order", ", ".join(summary["probe_order"]))
+    table.add_row("Stream CLI output", "yes" if summary["stream_cli_output"] else "no")
+    table.add_row("Cursor resume mode", summary["cursor_resume_mode"])
 
-    add((root / ".devcouncil").exists(), "Project state", str(root / ".devcouncil"))
+    for name in ("cursor", "opencode", "antigravity", "warp", "aider"):
+        enabled = bool(integrations.get(name, {}).get("enabled"))
+        table.add_row(f"{name} integration", "[green]enabled[/green]" if enabled else "[dim]off[/dim]")
 
-    devcouncil_path = shutil.which("devcouncil")
-    add(devcouncil_path is not None, "devcouncil CLI", devcouncil_path or "Install DevCouncil first.")
+    console.print(table)
+    if summary["resolved_executor"] not in {"", "manual"}:
+        console.print(
+            f"\n[dim]Next:[/dim] dev run TASK-001 --executor {summary['resolved_executor']} "
+            f"| {PREFERRED_COMMAND} check for full readiness"
+        )
+    else:
+        console.print(f"\n[dim]Next:[/dim] {PREFERRED_COMMAND} recommend | {PREFERRED_COMMAND} check")
 
-    code, output = _run_capture(["devcouncil", "--help"])
-    add(code == 0, "devcouncil command", output.splitlines()[0] if output else "No output")
 
-    code, output = _run_capture(["codex", "--version"])
-    add(code == 0, "Codex CLI", output.splitlines()[0] if output else "Optional; install Codex to use this integration.")
+@app.command("matrix")
+def matrix(
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+):
+    """Print built-in coding CLI integration tiers and capabilities."""
+    root = _project_root(project_root)
+    _ = root
+    table = Table(title="DevCouncil Coding CLI Integration Matrix")
+    table.add_column("Client", style="cyan")
+    table.add_column("Tier")
+    table.add_column("Headless")
+    table.add_column("MCP setup")
+    table.add_column("Native hooks")
+    table.add_column("Enforcement")
+    table.add_column("Notes")
 
-    code, output = _run_capture(["gemini", "--version"])
-    add(code == 0, "Gemini CLI", output.splitlines()[0] if output else "Optional; install Gemini CLI to use this integration.")
+    for client in sorted(BUILTIN_CODING_EXECUTOR_NAMES):
+        info = CODING_CLI_INTEGRATION_INFO.get(client)
+        posture = info.enforcement if info else "verify-only"
+        posture_render = "[green]pre-action[/green]" if posture == "pre-action" else "[yellow]verify-only[/yellow]"
+        table.add_row(
+            client,
+            integration_tier_label(client),
+            "yes" if info and info.tier == 1 else "no",
+            "yes" if info and info.mcp else "no",
+            "yes" if info and info.hooks else "verify only",
+            posture_render,
+            info.notes if info else "",
+        )
+    console.print(table)
+    console.print(
+        "\n[dim]Enforcement:[/dim] [green]pre-action[/green] blocks forbidden writes/commands "
+        "before they happen; [yellow]verify-only[/yellow] catches them only at verify time."
+    )
+    console.print("\nSee [dim]docs/integration-tiers.md[/dim] for workflow guidance.")
 
-    try:
-        from mcp import ClientSession, StdioServerParameters
-        from mcp.client.stdio import stdio_client
-
-        async def _list_tools() -> list[str]:
-            import os
-
-            env = os.environ.copy()
-            env["DEVCOUNCIL_PROJECT_ROOT"] = str(root)
-            params = StdioServerParameters(
-                command=sys.executable,
-                args=["-m", "devcouncil", "mcp-server"],
-                cwd=str(root),
-                env=env,
-            )
-            async with stdio_client(params) as (read, write):
-                async with ClientSession(read, write) as session:
-                    await session.initialize()
-                    tools = await session.list_tools()
-                    return [tool.name for tool in tools.tools]
 
-        import asyncio
+@app.command("hooks")
+def hooks(
+    apply: bool = typer.Option(False, "--apply", help="Write native hook config files instead of previewing paths."),
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+    tool: str = typer.Option("all", "--tool", help="Hook target: all, codex, gemini, claude, cursor, or opencode."),
+):
+    """
+    Install DevCouncil hook configuration for Codex, Gemini, Claude, Cursor, and OpenCode.
+    """
+    root = _project_root(project_root)
+    if apply and tool == "all":
+        report = apply_integration_target(root, "hooks")
+        if not report.ok:
+            console.print(report.to_json())
+            raise typer.Exit(code=1)
+        console.print("[green]Native hooks configured.[/green]")
+        return
+    _configure_native_hooks(root, tool, apply)
 
-        tools = asyncio.run(_list_tools())
-        expected = {"devcouncil_status", "devcouncil_report", "devcouncil_get_task"}
-        add(expected.issubset(set(tools)), "MCP server", ", ".join(tools))
-    except Exception as exc:
-        add(False, "MCP server", str(exc))
 
-    console.print(table)
-    if failures:
-        console.print("\n[yellow]Fix failed checks, then run:[/yellow] dev integrate all --apply")
+@app.command("check")
+def check(
+    project_root: Path | None = typer.Option(None, "--project-root", help="Repository root containing .devcouncil/."),
+    strict: bool = typer.Option(
+        False,
+        "--strict",
+        help="Treat missing optional coding CLIs as failures instead of warnings.",
+    ),
+    as_json: bool = typer.Option(False, "--json", help="Emit machine-readable JSON for CI."),
+    report_file: Path | None = typer.Option(
+        None,
+        "--report-file",
+        "--output",
+        "-o",
+        help="Write the JSON integration report to this file (implies structured output).",
+    ),
+):
+    """
+    Check whether DevCouncil is ready to integrate with coding CLIs.
+    """
+    root = _project_root(project_root)
+    report = build_integration_check_report(root, strict=strict)
+    table = Table(title="DevCouncil Integration Check")
+    table.add_column("Check", style="cyan")
+    table.add_column("Status", style="magenta")
+    table.add_column("Details")
+
+    for row in report.checks:
+        if row.status == "ok":
+            rendered = "[green]OK[/green]"
+        elif row.status == "skip":
+            rendered = "[dim]SKIP[/dim]"
+        elif row.status == "missing":
+            rendered = "[yellow]Missing[/yellow]"
+        else:
+            rendered = "[red]FAIL[/red]"
+        table.add_row(row.name, rendered, row.details)
+
+    write_json = as_json or report_file is not None
+    if write_json:
+        json_text = report.to_json()
+        if report_file is not None:
+            report_path = Path(report_file).expanduser().resolve()
+            report_path.parent.mkdir(parents=True, exist_ok=True)
+            report_path.write_text(json_text + "\n", encoding="utf-8")
+            if not as_json:
+                console.print(f"[dim]Wrote integration report to[/dim] {report_path}")
+        if as_json:
+            typer.echo(json_text)
+    if not write_json or not as_json:
+        console.print(table)
+
+    if report.failures:
+        if not as_json:
+            console.print(
+                f"\n[yellow]Fix failed checks, then run:[/yellow] {PREFERRED_COMMAND} all --apply "
+                f"(or {LEGACY_COMMAND} --apply)."
+            )
         raise typer.Exit(code=1)
 
-    console.print("\n[green]Ready.[/green] Run: dev integrate all --apply")
+    if not as_json:
+        console.print(f"\n[green]Ready.[/green] Run: {PREFERRED_COMMAND} all --apply (or {LEGACY_COMMAND} --apply).")
 
 
 @setup_app.command("agent-flow")