oh-my-customcodex 0.4.17 → 0.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/README.md +7 -7
  2. package/dist/cli/index.js +1 -1
  3. package/dist/index.js +1 -1
  4. package/package.json +1 -1
  5. package/templates/.claude/agents/mgr-gitnerd.md +4 -0
  6. package/templates/.claude/agents/mgr-sauron.md +5 -4
  7. package/templates/.claude/hooks/hooks.json +10 -0
  8. package/templates/.claude/hooks/scripts/destructive-git-guard.sh +53 -0
  9. package/templates/.claude/rules/MUST-safety.md +15 -0
  10. package/templates/.claude/rules/SHOULD-memory-integration.md +21 -11
  11. package/templates/.claude/skills/adversarial-review/SKILL.md +10 -0
  12. package/templates/.claude/skills/dev-review/SKILL.md +15 -5
  13. package/templates/.claude/skills/gitlab/SKILL.md +346 -0
  14. package/templates/.claude/skills/harness-export/SKILL.md +46 -0
  15. package/templates/.claude/skills/instinct-extractor/SKILL.md +54 -0
  16. package/templates/.claude/skills/manifest-install/SKILL.md +53 -0
  17. package/templates/.claude/skills/memory-management/SKILL.md +71 -12
  18. package/templates/.claude/skills/memory-recall/SKILL.md +6 -4
  19. package/templates/.claude/skills/memory-save/SKILL.md +8 -5
  20. package/templates/.claude/skills/npm-version/SKILL.md +6 -0
  21. package/templates/.claude/skills/pipeline/labels.md +55 -0
  22. package/templates/.claude/skills/sec-agentshield-wrapper/SKILL.md +49 -0
  23. package/templates/AGENTS.md.en +6 -2
  24. package/templates/AGENTS.md.ko +6 -2
  25. package/templates/CLAUDE.md +6 -2
  26. package/templates/CLAUDE.md.en +6 -2
  27. package/templates/CLAUDE.md.ko +6 -2
  28. package/templates/README.md +110 -0
  29. package/templates/guides/claude-code/14-token-efficiency.md +6 -1
  30. package/templates/guides/claude-code/15-version-compatibility.md +35 -0
  31. package/templates/guides/git-safety/README.md +44 -0
  32. package/templates/guides/index.yaml +6 -0
  33. package/templates/manifest.json +4 -4
  34. package/templates/workflows/auto-dev.yaml +93 -6
@@ -1,6 +1,6 @@
1
1
  ---
2
2
  name: memory-save
3
- description: Save current session context to claude-mem
3
+ description: Save current session context to native memory plus omx-memory or AgentMemory-compatible backends
4
4
  scope: core
5
5
  argument-hint: "[--tags <tags>] [--include-code]"
6
6
  disable-model-invocation: true
@@ -9,7 +9,7 @@ user-invocable: true
9
9
 
10
10
  # Memory Save Skill
11
11
 
12
- Save current session context to claude-mem for persistence across context compaction.
12
+ Save current session context to native memory and the configured searchable MCP backend for persistence across context compaction. Prefer AgentMemory-compatible or `omx-memory` tools (`memory_add`, `observation_add`); fall back to legacy `claude-mem` only when that is the configured backend.
13
13
 
14
14
  ## Options
15
15
 
@@ -35,8 +35,10 @@ Save current session context to claude-mem for persistence across context compac
35
35
  ├── tags: [session, ...user_tags]
36
36
  └── created_at: {timestamp}
37
37
 
38
- 3. Store in claude-mem
39
- └── chroma_add_documents
38
+ 3. Store in configured backend
39
+ ├── Prefer memory_add for summaries
40
+ ├── Prefer observation_add for atomic learnings
41
+ └── Legacy fallback: chroma_add_documents
40
42
 
41
43
  4. Report result
42
44
  ```
@@ -112,7 +114,7 @@ Open Items:
112
114
  1. Refresh token implementation
113
115
  Status: In progress
114
116
 
115
- Saving to claude-mem...
117
+ Saving to configured memory backend...
116
118
 
117
119
  Document content:
118
120
  ## Session Summary
@@ -126,3 +128,4 @@ Memory ID: mem_abc123
126
128
  ## Related
127
129
 
128
130
  - memory-recall - Search and recall memories
131
+ - memory-management - Backend selection and migration safeguards
@@ -97,6 +97,12 @@ When working with `auto-tag.yml` (automatic tag creation on release PR merge):
97
97
 
98
98
  ### Troubleshooting
99
99
 
100
+ If `release/vX.Y.Z` cannot be created because `refs/heads/release` exists:
101
+ ```bash
102
+ git branch --list release --format='%(refname:short)'
103
+ git branch -m release releases-tracking # only after proving it is merged/backed up
104
+ ```
105
+
100
106
  If a tag already exists on remote (from a previous failed attempt):
101
107
  ```bash
102
108
  git push origin :refs/tags/vX.Y.Z # delete remote tag
@@ -0,0 +1,55 @@
1
+ # Pipeline Label Standards
2
+
3
+ Canonical reference for GitHub issue label semantics in the auto-dev pipeline.
4
+ Used by `scope-selection` to include or exclude issues and by `implement` for lifecycle management.
5
+
6
+ ## Label Definitions
7
+
8
+ | Label | Meaning | scope-selection handling |
9
+ |-------|---------|--------------------------|
10
+ | `verify-ready` | Triage complete, ready for verification or automation | INCLUDE (preferred) |
11
+ | `verify-done` | Triage complete but deferred, already handled, or excluded from this cycle | EXCLUDE |
12
+ | `in-progress` | Work is claimed by another session | EXCLUDE |
13
+ | `needs-review` | Human review is required before automation | EXCLUDE |
14
+ | `decision-needed` | Security, policy, or product decision required | EXCLUDE |
15
+ | `automated` | Auto-generated issue from release-monitor tooling | INCLUDE if other criteria match |
16
+ | `codex-release` | Codex release monitor trigger | INCLUDE (preferred) |
17
+ | `oh-my-codex-release` | oh-my-codex release monitor trigger | INCLUDE (preferred) |
18
+ | `claude-code-release` | Claude compatibility release trigger | INCLUDE (preferred) |
19
+ | `documentation` | Documentation-only scope | INCLUDE (preferred for docs-only release) |
20
+ | `enhancement-yaml-only` | YAML/config-only scope change | INCLUDE (eligible for docs-only compression) |
21
+
22
+ ## Selection Rule
23
+
24
+ ```text
25
+ EXCLUDE if:
26
+ - blocked_by_decision == true
27
+ - labels intersect {decision-needed, needs-review, verify-done, manual-action, in-progress}
28
+
29
+ INCLUDE (preferred tier):
30
+ - labels intersect {verify-ready, codex-release, oh-my-codex-release, claude-code-release, documentation}
31
+
32
+ INCLUDE (standard tier):
33
+ - P1/P2/P3 issues not in excluded set
34
+
35
+ Tie-break priority: P1 > P2 > P3 > unclassified
36
+ ```
37
+
38
+ ## Compression Eligibility
39
+
40
+ An issue is eligible for `docs-only` compression mode if its labels include at least one of:
41
+ `documentation`, `automated`, `codex-release`, `oh-my-codex-release`, `claude-code-release`, `enhancement-yaml-only`.
42
+
43
+ If all scoped issues are compression-eligible and scope size is 3 or fewer, the pipeline may use
44
+ `compression_mode=docs-only` and replace heavyweight triage, planning, and verification spawns with
45
+ direct manifest summaries plus a local self-review checklist.
46
+
47
+ ## Lifecycle Labels
48
+
49
+ | Transition | Action |
50
+ |------------|--------|
51
+ | Work started | Add `in-progress`, assign the current operator |
52
+ | Work succeeded | Remove `in-progress`, add `verify-ready` |
53
+ | Work failed | Remove `in-progress`, add `needs-review` |
54
+ | Released | Remove `verify-ready`, close with `Fixed in v{version}` |
55
+ | Deferred | Add `verify-done`, label `Deferred from v{version}` |
@@ -0,0 +1,49 @@
1
+ ---
2
+ name: sec-agentshield-wrapper
3
+ description: Pre-flight AgentShield-style security suite wrapper for agent harness changes
4
+ scope: harness
5
+ version: 1.0.0
6
+ user-invocable: true
7
+ argument-hint: "<path> [--strict] [--report <file>]"
8
+ ---
9
+
10
+ # AgentShield Wrapper
11
+
12
+ Run an AgentShield-style pre-flight review before risky agent, skill, hook, or MCP changes. This skill is a wrapper contract: use a connected AgentShield tool when available, otherwise run the local static checks that approximate the same boundary.
13
+
14
+ ## Checks
15
+
16
+ | Area | What to Inspect |
17
+ |------|-----------------|
18
+ | Tool authority | Agent frontmatter tools, disallowed tools, and permission mode |
19
+ | Prompt injection | Untrusted text flowing into tool instructions or shell commands |
20
+ | Secret exposure | Tokens, private keys, bearer headers, and credential-like literals |
21
+ | Path boundaries | Writes to `.git`, runtime state, templates, and compatibility mirrors |
22
+ | MCP risk | New servers, remote URLs, timeout behavior, and tool naming collisions |
23
+
24
+ ## Workflow
25
+
26
+ 1. Identify changed files with `git diff --name-only` unless a path is supplied.
27
+ 2. Prefer an installed AgentShield scanner if one is configured.
28
+ 3. Fall back to existing repo checks:
29
+ - `secret-filter`
30
+ - schema validator guidance
31
+ - `adversarial-review`
32
+ - `cve-triage` for dependency advisories
33
+ 4. Report findings as `blocker`, `warn`, or `info`.
34
+ 5. In `--strict` mode, halt on any blocker or unreviewed MCP/tool expansion.
35
+
36
+ ## Output
37
+
38
+ ```text
39
+ sec-agentshield-wrapper target=.codex/skills/new-skill
40
+ blocker: 0
41
+ warn: 1
42
+ info: 2
43
+ decision: proceed-with-review
44
+ ```
45
+
46
+ ## Notes
47
+
48
+ - This wrapper complements `sec-codeql-expert`; it does not replace CodeQL or dependency audit.
49
+ - Missing AgentShield tooling is not a failure if local fallback checks run and are reported.
@@ -134,8 +134,8 @@ project/
134
134
  | +-- hooks/ # Hook scripts (security, validation, HUD)
135
135
  | +-- contexts/ # Context files (ecomode)
136
136
  +-- .agents/
137
- | +-- skills/ # Installed skills (118 directories)
138
- +-- guides/ # Reference docs (26 topics)
137
+ | +-- skills/ # Installed skills (123 directories)
138
+ +-- guides/ # Reference docs (48 topics)
139
139
  ```
140
140
 
141
141
  ## Orchestration
@@ -226,6 +226,7 @@ Task tool + routing skills remain the fallback for simple/cost-sensitive tasks.
226
226
  | Server | Purpose |
227
227
  |--------|---------|
228
228
  | omx-memory | Session memory persistence (Chroma-based) |
229
+ | semble | Semantic code search MCP for high-recall repository exploration |
229
230
  | context7 | Library documentation lookup MCP server when a project needs it |
230
231
 
231
232
  ### Setup Commands
@@ -234,6 +235,9 @@ Task tool + routing skills remain the fallback for simple/cost-sensitive tasks.
234
235
  # MCP setup (omx-memory)
235
236
  npm install -g omx-memory
236
237
  omx-memory setup
238
+
239
+ # Optional semantic code search
240
+ uv tool install semble
237
241
  ```
238
242
 
239
243
  ### Claude Code Compatibility Note
@@ -134,8 +134,8 @@ project/
134
134
  | +-- hooks/ # 훅 스크립트 (보안, 검증, HUD)
135
135
  | +-- contexts/ # 컨텍스트 파일 (ecomode)
136
136
  +-- .agents/
137
- | +-- skills/ # 설치된 스킬 (118 디렉토리)
138
- +-- guides/ # 레퍼런스 문서 (26 토픽)
137
+ | +-- skills/ # 설치된 스킬 (123 디렉토리)
138
+ +-- guides/ # 레퍼런스 문서 (48 토픽)
139
139
  ```
140
140
 
141
141
  ## 오케스트레이션
@@ -226,6 +226,7 @@ Codex CLI의 Agent Teams 기능이 활성화되어 있으면 (`OMCODEX_AGENT_TEA
226
226
  | 서버 | 용도 |
227
227
  |------|------|
228
228
  | omx-memory | 세션 메모리 영속성 (Chroma 기반) |
229
+ | semble | 대규모 저장소 탐색용 semantic code search MCP |
229
230
  | context7 | 라이브러리 문서 조회용 MCP 서버 (프로젝트 필요 시 설정) |
230
231
 
231
232
  ### 설치 명령어
@@ -234,6 +235,9 @@ Codex CLI의 Agent Teams 기능이 활성화되어 있으면 (`OMCODEX_AGENT_TEA
234
235
  # MCP 설정 (omx-memory)
235
236
  npm install -g omx-memory
236
237
  omx-memory setup
238
+
239
+ # 선택: semantic code search
240
+ uv tool install semble
237
241
  ```
238
242
 
239
243
  ### Claude Code 호환 참고
@@ -119,8 +119,8 @@ project/
119
119
  | +-- hooks/ # 훅 스크립트 (보안, 검증, HUD)
120
120
  | +-- contexts/ # 컨텍스트 파일 (ecomode)
121
121
  +-- .agents/
122
- | +-- skills/ # 스킬 (118 디렉토리)
123
- +-- guides/ # 레퍼런스 문서 (39 토픽)
122
+ | +-- skills/ # 스킬 (123 디렉토리)
123
+ +-- guides/ # 레퍼런스 문서 (48 토픽)
124
124
  ```
125
125
 
126
126
  ## 오케스트레이션
@@ -244,6 +244,7 @@ Codex CLI의 Agent Teams 기능이 활성화되어 있으면 (`OMCODEX_AGENT_TEA
244
244
  | 서버 | 용도 |
245
245
  |------|------|
246
246
  | omx-memory | 세션 메모리 영속성 |
247
+ | semble | 대규모 저장소 탐색용 semantic code search MCP |
247
248
 
248
249
  ### 설치 명령어
249
250
 
@@ -267,6 +268,9 @@ claude agents
267
268
 
268
269
  # MCP 설정 (omx-memory)
269
270
  omx memory doctor
271
+
272
+ # 선택: semantic code search
273
+ uv tool install semble
270
274
  ```
271
275
 
272
276
  <!-- omcodex:git-workflow -->
@@ -133,11 +133,11 @@ project/
133
133
  +-- AGENTS.md # Entry point
134
134
  +-- .codex/
135
135
  | +-- agents/ # Subagent definitions (49 files)
136
- | +-- skills/ # Skills (118 directories)
136
+ | +-- skills/ # Skills (123 directories)
137
137
  | +-- rules/ # Global rules (22 files)
138
138
  | +-- hooks/ # Hook scripts (security, validation, HUD)
139
139
  | +-- contexts/ # Context files (4 files)
140
- +-- guides/ # Reference docs (39 topics)
140
+ +-- guides/ # Reference docs (48 topics)
141
141
  ```
142
142
 
143
143
  ## Orchestration
@@ -240,6 +240,7 @@ Install in Claude Code via `/plugin install <name>`:
240
240
  | Server | Purpose |
241
241
  |--------|---------|
242
242
  | omx-memory | Session memory persistence |
243
+ | semble | Semantic code search MCP for high-recall repository exploration |
243
244
 
244
245
  ### Claude Code Setup Commands
245
246
 
@@ -263,6 +264,9 @@ claude agents
263
264
 
264
265
  # MCP setup (omx-memory)
265
266
  omx memory doctor
267
+
268
+ # Optional semantic code search
269
+ uv tool install semble
266
270
  ```
267
271
 
268
272
  <!-- omcodex:git-workflow -->
@@ -133,11 +133,11 @@ project/
133
133
  +-- AGENTS.md # 진입점
134
134
  +-- .codex/
135
135
  | +-- agents/ # 서브에이전트 정의 (49 파일)
136
- | +-- skills/ # 스킬 (118 디렉토리)
136
+ | +-- skills/ # 스킬 (123 디렉토리)
137
137
  | +-- rules/ # 전역 규칙 (22 파일)
138
138
  | +-- hooks/ # 훅 스크립트 (보안, 검증, HUD)
139
139
  | +-- contexts/ # 컨텍스트 파일 (4 파일)
140
- +-- guides/ # 레퍼런스 문서 (39 토픽)
140
+ +-- guides/ # 레퍼런스 문서 (48 토픽)
141
141
  ```
142
142
 
143
143
  ## 오케스트레이션
@@ -240,6 +240,7 @@ Claude Code 환경에서 `/plugin install <이름>`으로 설치:
240
240
  | 서버 | 용도 |
241
241
  |------|------|
242
242
  | omx-memory | 세션 메모리 영속성 |
243
+ | semble | 대규모 저장소 탐색용 semantic code search MCP |
243
244
 
244
245
  ### Claude Code 설치 명령어
245
246
 
@@ -263,6 +264,9 @@ claude agents
263
264
 
264
265
  # MCP 설정 (omx-memory)
265
266
  omx memory doctor
267
+
268
+ # 선택: semantic code search
269
+ uv tool install semble
266
270
  ```
267
271
 
268
272
  <!-- omcodex:git-workflow -->
@@ -0,0 +1,110 @@
1
+ # templates/
2
+
3
+ > **oh-my-customcodex distribution directory**
4
+ >
5
+ > Source files copied or transformed when `omcustomcodex init` installs the harness into a project.
6
+
7
+ ## Purpose
8
+
9
+ `templates/` is the packaged distribution snapshot for oh-my-customcodex.
10
+
11
+ The installer maps the Claude-compatible template tree into the Codex-native runtime layout:
12
+
13
+ ```text
14
+ oh-my-customcodex source repo
15
+ templates/
16
+ .claude/ # compatibility template source
17
+ guides/ # reference documentation
18
+ AGENTS.md.en # Codex entry template
19
+ AGENTS.md.ko
20
+
21
+ installed project
22
+ .codex/ # Codex-native agents, rules, hooks, contexts, ontology
23
+ .agents/skills/ # installed runtime skills
24
+ guides/ # reference documentation
25
+ AGENTS.md # project entrypoint
26
+ ```
27
+
28
+ The repository keeps `.codex/**` as the authoring surface. `templates/.claude/**` remains a compatibility source that the installer maps into the target Codex layout.
29
+
30
+ ## Main README Relationship
31
+
32
+ | Document | Audience | Purpose |
33
+ |----------|----------|---------|
34
+ | [`/README.md`](../README.md) | Users of the npm package | Project overview, install command, philosophy |
35
+ | `templates/README.md` | Maintainers | Distribution layout, component counts, sync checks |
36
+
37
+ ## Directory Structure
38
+
39
+ ```text
40
+ templates/
41
+ +-- README.md # this file
42
+ +-- AGENTS.md.en # Codex entry template, English
43
+ +-- AGENTS.md.ko # Codex entry template, Korean
44
+ +-- CLAUDE.md* # Claude compatibility entry templates
45
+ +-- manifest.json # packaged component metadata
46
+ +-- workflows/ # project-level pipeline definitions
47
+ +-- .claude/
48
+ | +-- agents/ # agent definitions (49 files)
49
+ | +-- skills/ # skill modules (123 SKILL.md files)
50
+ | +-- rules/ # global rules (22 files)
51
+ | +-- hooks/ # hook registry and scripts (38 scripts)
52
+ | +-- contexts/ # context files
53
+ | +-- ontology/ # ontology and routing metadata
54
+ | +-- schemas/ # tool input schemas
55
+ +-- guides/ # reference docs (48 topics)
56
+ ```
57
+
58
+ ## Components
59
+
60
+ The counts below should stay aligned with `templates/manifest.json`, README component headings, and CI template validation.
61
+
62
+ ### Agents (49)
63
+
64
+ `templates/.claude/agents/*.md`
65
+
66
+ Flat agent definition files. During Codex installation these land under `.codex/agents/`.
67
+
68
+ ### Skills (123)
69
+
70
+ `templates/.claude/skills/*/SKILL.md`
71
+
72
+ Reusable workflow and reference skill modules. During Codex installation these land under `.agents/skills/`.
73
+
74
+ ### Rules (22)
75
+
76
+ `templates/.claude/rules/*.md`
77
+
78
+ Global agent behavior rules. During Codex installation these land under `.codex/rules/`.
79
+
80
+ ### Guides (48)
81
+
82
+ `templates/guides/*/`
83
+
84
+ Reference documentation directories copied to installed projects as `guides/`.
85
+
86
+ ### Hooks (38)
87
+
88
+ `templates/.claude/hooks/scripts/*.sh`
89
+
90
+ Lifecycle hook scripts copied into `.codex/hooks/scripts/`.
91
+
92
+ ## Local Verification
93
+
94
+ Run the checks below before publishing a template-affecting change:
95
+
96
+ ```bash
97
+ bash .github/scripts/verify-version-sync.sh
98
+ bun test tests/unit/core/template-validation.test.ts
99
+ ```
100
+
101
+ The CI template-sync job also verifies source/template counts for agents, skills, rules, guides, hook scripts, hook matchers, schemas, and skill scripts.
102
+
103
+ ## Maintainer Notes
104
+
105
+ When adding or removing an agent, skill, rule, guide, hook, or workflow:
106
+
107
+ 1. Update the source surface under `.codex/**`, `.agents/skills/**`, `guides/**`, or `workflows/**`.
108
+ 2. Mirror packaged content under `templates/**` according to the provider mapping.
109
+ 3. Update `templates/manifest.json` and visible documentation counts.
110
+ 4. Add or update a regression test when the drift could recur.
@@ -22,12 +22,16 @@ Use R013 ecomode and existing runtime guards when you want to compress active-se
22
22
 
23
23
  This layer changes how the session behaves while work is running.
24
24
 
25
- ## Layer 3: Tool-Specific Compression
25
+ ## Layer 3: Retrieval and Tool-Specific Compression
26
+
27
+ Use semantic code search or graph retrieval before broad file reads when the problem is repository exploration. Prefer Semble when an indexed semantic MCP is connected, and prefer CRG/code-review-graph when the task needs impact radius or dependency context. Fall back to `rg` and targeted reads when those tools are unavailable.
26
28
 
27
29
  Use `playwright-compress` when the problem is not the whole session, but one extremely verbose browser tool result.
28
30
 
29
31
  This layer is intentionally narrow:
30
32
 
33
+ - use Semble for high-recall code search over large repositories
34
+ - use CRG for `get_minimal_context`, `get_impact_radius`, and trust-boundary graph queries
31
35
  - compress verbose Playwright MCP output after the tool succeeds
32
36
  - preserve `ref=` tokens and URLs for follow-up interaction
33
37
  - keep browser evidence actionable without keeping the full raw payload in context
@@ -64,6 +68,7 @@ Typical settings-level levers:
64
68
  |------|------------|
65
69
  | Protect cache value across pauses | Layer 1 |
66
70
  | Compress runtime behavior in large sessions | Layer 2 |
71
+ | Reduce broad code-search reads | Layer 3 |
67
72
  | Compress one noisy browser interaction | Layer 3 |
68
73
  | Reduce baseline token spend from configuration | Layer 4 |
69
74
 
@@ -2,6 +2,24 @@
2
2
 
3
3
  This guide records Claude Code release-note impact that affects the Claude compatibility template. The Codex-native runtime still uses `.codex/**` and OMX as the primary surface.
4
4
 
5
+ ## v2.1.142
6
+
7
+ Published: 2026-05-14.
8
+
9
+ Source: upstream oh-my-customcode #1158, Codex port #1329.
10
+
11
+ | Change | Impact on oh-my-customcodex | Action |
12
+ |--------|------------------------------|--------|
13
+ | `claude agents` added `--add-dir`, `--settings`, `--mcp-config`, `--plugin-dir`, `--permission-mode`, `--model`, `--effort`, and `--dangerously-skip-permissions` | Useful for Claude compatibility sessions that need CLI-level overrides for background agents. Codex-native child agents still use the Codex tool surface and repo model contract. | No Codex runtime change. Keep unattended Claude-template prompts explicit about permission mode. |
14
+ | Fast Mode now defaults to Opus 4.7 | Only affects Claude compatibility users running Fast Mode with `model: opus` agents. | Pin with `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE=1` only when a compatibility session needs old behavior. |
15
+ | Root-level plugin `SKILL.md` is surfaced as a skill | Does not change this repo's packaged `.claude/skills/<name>/SKILL.md` layout. | No template migration. |
16
+ | `/plugin details` shows plugin LSP servers | Improves plugin inventory visibility for compatibility users. | No package change. |
17
+ | `/web-setup` warns before replacing an existing GitHub App connection | UX safety improvement outside this harness. | No action. |
18
+ | `MCP_TOOL_TIMEOUT` now raises remote HTTP/SSE MCP request timeout as intended | Helpful for slow remote memory or ontology MCP servers. | Set `MCP_TOOL_TIMEOUT` in affected environments only. |
19
+ | Background sessions can edit existing git worktrees | Stabilizes Claude compatibility workflows that use git worktrees for parallel branches. | No Codex-side change. |
20
+ | Background sessions survive macOS sleep/wake more reliably | Improves long-running Claude compatibility sessions. | No action. |
21
+ | `--dangerously-skip-permissions` persists across retire/wake cycles | Reduces unattended permission-mode drops for Claude compatibility sessions. | Keep explicit permission guidance in workflow prompts. |
22
+
5
23
  ## v2.1.141
6
24
 
7
25
  Published: 2026-05-13.
@@ -50,6 +68,23 @@ Published: 2026-05-11.
50
68
  | Native `/goal` | The packaged workflow uses `/omcustomcodex:goal`; native `/goal` stays available for Claude Code completion tracking. |
51
69
  | `claude agents`, `/scroll-speed`, `claude plugin details <name>`, `/mcp` reconnect | Documented in the CLI, MCP, AGENTS, and CLAUDE template guidance. |
52
70
 
71
+ ## Known Limitations
72
+
73
+ ### Parent `.gitignore` nested plan pattern
74
+
75
+ Source: upstream oh-my-customcode #1147, Codex port #1326.
76
+
77
+ The parent package documented a future-proofing limitation for this pattern:
78
+
79
+ ```gitignore
80
+ docs/superpowers/plans/*
81
+ !docs/superpowers/plans/*.md
82
+ ```
83
+
84
+ That pattern only tracks direct-child Markdown files. Git cannot re-include a file inside a directory that was already excluded by a broader parent pattern unless the directory path is also re-included.
85
+
86
+ Current Codex-port status: not applicable. This repository does not ignore `docs/superpowers/plans/`, and existing nested plan documents are trackable. If a future ignore rule reintroduces that parent pattern, add explicit subdirectory re-includes before relying on nested plan files.
87
+
53
88
  ## Compatibility Rules
54
89
 
55
90
  1. Keep `.codex/**` as the source of truth for the Codex package.
@@ -0,0 +1,44 @@
1
+ # Git Safety Guide
2
+
3
+ Use this guide when an agent or workflow needs to clean, reset, delete, or rewrite git state. The goal is to preserve user work first, then make the smallest safe git change with clear recovery evidence.
4
+
5
+ ## Destructive Command Reference
6
+
7
+ | Command | Primary risk | Safer first step |
8
+ |---------|--------------|------------------|
9
+ | `git reset --hard` | Drops tracked worktree changes | Save `git diff` output or commit/stash intentionally |
10
+ | `git clean -fd` / `git clean -fdx` | Deletes untracked files and generated artifacts | Run `git clean -ndx` and inspect the target list |
11
+ | `git restore .` | Reverts tracked files broadly | Limit to explicit files after reviewing `git diff` |
12
+ | `git checkout -- .` | Legacy broad revert of tracked files | Prefer explicit `git restore -- <file>` with approval |
13
+ | `git branch -D <branch>` | Deletes an unmerged branch ref | Check merge state and remote backup first |
14
+ | `git push --force` / `git push -f` | Rewrites remote history | Use only with explicit approval and protected-branch checks |
15
+
16
+ ## Preflight Checklist
17
+
18
+ 1. Run `git status --short` and identify tracked, untracked, and ignored files separately.
19
+ 2. Preserve useful changes with a commit, patch, stash, or copied artifact before cleanup.
20
+ 3. For branch deletion, run `git branch --merged` and check whether the branch exists on a remote.
21
+ 4. For release branches, check that a local `release` branch does not block the `release/v*` namespace.
22
+ 5. State the exact target and recovery path before running the command.
23
+
24
+ ## Recovery Checklist
25
+
26
+ 1. Stop further destructive git commands.
27
+ 2. Inspect `git reflog` for the prior `HEAD`.
28
+ 3. Use `git status --short` and `git diff` to identify current loss scope.
29
+ 4. Recover tracked changes from the reflog or saved patch.
30
+ 5. Recover untracked files only from backups, editor history, or generated artifacts.
31
+
32
+ ## Agent Workflow Rules
33
+
34
+ - Verification agents must not clean the worktree to create a baseline.
35
+ - Git specialists should commit or otherwise preserve implemented changes before deep verification.
36
+ - Release workflows must prefer branch rename over forced deletion when a local `release` branch blocks `release/v*`.
37
+ - Advisory hooks are evidence, not permission. A warning still requires the R001 approval path before continuing.
38
+
39
+ ## See Also
40
+
41
+ - `.codex/rules/MUST-safety.md`
42
+ - `.codex/hooks/scripts/destructive-git-guard.sh`
43
+ - `.codex/agents/mgr-gitnerd.md`
44
+ - `guides/git-worktree-workflow/README.md`
@@ -278,6 +278,12 @@ guides:
278
278
  source:
279
279
  type: internal
280
280
 
281
+ - name: git-safety
282
+ description: Destructive git command preflight, recovery, and release branch namespace guardrails
283
+ path: ./git-safety/
284
+ source:
285
+ type: internal
286
+
281
287
  # Architecture
282
288
  - name: skill-bundle-design
283
289
  description: Domain skill bundle design patterns for Author/Test/Troubleshoot tri-pattern
@@ -1,11 +1,11 @@
1
1
  {
2
- "version": "0.4.17",
2
+ "version": "0.5.1",
3
3
  "requiresCC": ">=2.1.121",
4
4
  "claudeCode": {
5
5
  "minimumVersion": "2.1.121",
6
6
  "protectedPathBypassVersion": "2.1.126"
7
7
  },
8
- "lastUpdated": "2026-04-28T00:01:33.302Z",
8
+ "lastUpdated": "2026-05-19T00:00:00.000Z",
9
9
  "components": [
10
10
  {
11
11
  "name": "rules",
@@ -23,13 +23,13 @@
23
23
  "name": "skills",
24
24
  "path": ".agents/skills",
25
25
  "description": "Reusable skill modules (project-scoped repo skills)",
26
- "files": 118
26
+ "files": 123
27
27
  },
28
28
  {
29
29
  "name": "guides",
30
30
  "path": "guides",
31
31
  "description": "Reference documentation",
32
- "files": 47
32
+ "files": 48
33
33
  },
34
34
  {
35
35
  "name": "hooks",