omniconductor 0.5.0 → 1.0.1

package/adapters/codex/transform.sh

@@ -30,7 +30,7 @@
 #   core/recipes/*.md (selected)   →  <target>/AGENTS.md  (each as "## Recipe — <name>")
 #   core/docs-templates/*.md       →  <target>/docs/*.md  (CURRENT_WORK, REMAINING_TASKS, etc.)
 #   core/hooks/*.sh.template       →  SKIPPED (Reflector hook emitted via --recipes=self-improvement, ADR-032; other guards Claude-only, ADR-034)
-#   core/roles/*.md                →  SKIPPED (Codex has no sub-agent dispatch)
+#   core/roles/*.md                →  SKIPPED (role emission is Claude-only today; Codex supports sub-agents natively — ADR-031)
 #   adapters/claude/hookify-...    →  SKIPPED (Claude-only plugin)
 #
 # Single-file model: Codex reads ONE always-loaded rules file. Everything that
@@ -42,6 +42,7 @@ set -eu
 
 TARGET=""
 RECIPES=""
+MODE="full"
 DRY_RUN="false"
 NO_PROMPT="false"
 UNINSTALL="false"
@@ -53,6 +54,7 @@ WIZARD_APPLY_RULES="true"
 while [ $# -gt 0 ]; do
   case "$1" in
     --recipes=*) RECIPES="${1#--recipes=}" ;;
+    --mode=*)    MODE="${1#--mode=}" ;;
     --dry-run)   DRY_RUN="true" ;;
     --no-prompt) NO_PROMPT="true" ;;
     --uninstall|--rollback) UNINSTALL="true" ;;
@@ -63,6 +65,10 @@ Usage: bash adapters/codex/transform.sh <target-project> [options]
 
 Options:
   --recipes=A,B,C       Comma-separated list of recipes to append into AGENTS.md
+  --mode=<m>            Install preset (ADR-044): full (default) | minimal (rules text +
+                        docs only) | strict (abort if AGENTS.md exists) | recipes-only
+                        (marked block appended to AGENTS.md; requires --recipes=) |
+                        reflector-only (self-improvement loop standalone as a marked block)
   --dry-run             Preview only — no files written
   --no-prompt           Skip all interactive prompts; apply sensible defaults (CI-safe)
   --uninstall           Revert a previous install using <target>/.conductor-manifest.json
@@ -75,11 +81,11 @@ Output (single-file Codex model):
   <target>/AGENTS.md    Bundled intro + 5 universal rules + compressed workflow + recipes
   <target>/docs/*.md    Universal doc templates (CURRENT_WORK, REMAINING_TASKS, ...)
 
-Recipes available: web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene
+Recipes available: web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene, loop-engineering
 
 What this adapter does NOT install (per ADR-004 honesty):
   - Hook guards (CONDUCTOR emits the Reflector hook when --recipes=self-improvement, ADR-032; other guards remain Claude-only, ADR-034)
-  - Sub-agent personas (Codex has no sub-agent dispatch — single session per task)
+  - Sub-agent personas (not yet emitted for Codex — the tool supports sub-agents natively, ADR-031; agent emission is Phase 2)
   - Per-pattern rule scoping (Codex loads AGENTS.md whole — all rules always-on)
   - Hookify rule templates (Claude-only plugin)
 EOF
@@ -103,11 +109,31 @@ if [ -z "$TARGET" ]; then
   exit 1
 fi
 
+case "$MODE" in
+  full|minimal|strict|recipes-only|reflector-only) : ;;
+  *) echo "Error: unknown --mode '$MODE' (one of: full, minimal, strict, recipes-only, reflector-only)" >&2; exit 1 ;;
+esac
+if [ "$MODE" = "reflector-only" ]; then
+  if [ -n "$RECIPES" ] && [ "$RECIPES" != "self-improvement" ]; then
+    echo "NOTE: --mode=reflector-only ignores --recipes (installs self-improvement only)" >&2
+  fi
+  RECIPES="self-improvement"
+fi
+if [ "$MODE" = "recipes-only" ] && [ -z "$RECIPES" ] && [ "$UNINSTALL" != "true" ]; then
+  echo "Error: --mode=recipes-only requires --recipes=A,B,..." >&2
+  exit 1
+fi
+
 # Resolve CONDUCTOR root (where this script lives: adapters/codex/).
 CONDUCTOR_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 CORE_ROOT="$CONDUCTOR_ROOT/core"
 [ -d "$CORE_ROOT" ] || { echo "Error: core/ not found at $CORE_ROOT" >&2; exit 1; }
 
+# CONDUCTOR package version for the manifest — parsed at runtime from package.json
+# so releases never drift the manifest (falls back to "unknown" on any error).
+CONDUCTOR_VERSION="$(/usr/bin/sed -n -E 's/^[[:space:]]*"version"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/p' "$CONDUCTOR_ROOT/package.json" 2>/dev/null | /usr/bin/head -n 1)"
+[ -n "$CONDUCTOR_VERSION" ] || CONDUCTOR_VERSION="unknown"
+
 if [ "$DRY_RUN" = "true" ]; then
   mkdir -p "$TARGET"
 fi
@@ -154,20 +180,7 @@ derive_title() {
 # backup path in MANIFEST_LAST_BACKUP for the next record_emit. Honors DRY_RUN.
 # Origin: ADR-019 (Claude adapter pattern), mirrored per ADR-021.
 backup_and_remember() {
-  MANIFEST_LAST_BACKUP=""
-  if [ -f "$1" ]; then
-    if [ "$DRY_RUN" = "true" ]; then
-      log "would back up existing $1 -> $1.conductor-backup-<ts>"
-      MANIFEST_LAST_BACKUP=""
-    else
-      local ts
-      ts="$(/bin/date +%Y%m%d-%H%M%S)"
-      local backup="$1.conductor-backup-$ts"
-      /bin/cp "$1" "$backup"
-      log "  backed up existing $1 -> $backup"
-      MANIFEST_LAST_BACKUP="${backup#$TARGET_ABS/}"
-    fi
-  fi
+  conductor_manifest_backup_and_remember "$1"
 }
 
 # ----- manifest tracking (ADR-020, mirrored per ADR-021) ------------------
@@ -179,6 +192,9 @@ MANIFEST_STAGE_PATH=""
 MANIFEST_TS=""
 MANIFEST_LAST_BACKUP=""
 
+# shellcheck source=../../tools/manifest-safety.sh
+. "$CONDUCTOR_ROOT/tools/manifest-safety.sh"
+
 init_manifest() {
   if [ "$DRY_RUN" = "true" ]; then
     log "would init manifest staging at $MANIFEST_PATH.staging"
@@ -197,12 +213,13 @@ record_emit() {
   local relpath="$1" src="$2" backup="${3:-}"
   local had_backup="false"
   [ -n "$backup" ] && had_backup="true"
-  local esc_path esc_src esc_backup
+  local esc_path esc_src esc_backup emitted_sha
   esc_path="$(printf '%s' "$relpath" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
   esc_src="$(printf '%s' "$src" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
   esc_backup="$(printf '%s' "$backup" | /usr/bin/sed 's/\\/\\\\/g; s/"/\\"/g')"
-  printf '    {"path": "%s", "source": "%s", "had_backup": %s, "backup_path": "%s"},\n' \
-    "$esc_path" "$esc_src" "$had_backup" "$esc_backup" >> "$MANIFEST_STAGE_PATH"
+  emitted_sha="$(conductor_sha256_file "$TARGET_ABS/$relpath")"
+  printf '    {"path": "%s", "source": "%s", "had_backup": %s, "backup_path": "%s", "sha256": "%s"},\n' \
+    "$esc_path" "$esc_src" "$had_backup" "$esc_backup" "$emitted_sha" >> "$MANIFEST_STAGE_PATH"
 }
 
 finalize_manifest() {
@@ -249,8 +266,9 @@ finalize_manifest() {
 
   /bin/cat > "$MANIFEST_PATH" <<EOF
 {
-  "version": "v0.2.0",
+  "version": "v$CONDUCTOR_VERSION",
   "adapter": "codex",
+  "mode": "$MODE",
   "install_timestamp": "$MANIFEST_TS",
   "conductor_root": "$CONDUCTOR_ROOT",
   "recipes_enabled": $recipes_json,
@@ -263,6 +281,92 @@ EOF
   log "  wrote manifest $MANIFEST_PATH"
 }
 
+# ----- marked append-blocks (ADR-044, --mode=recipes-only / reflector-only) ----
+#
+# Single-file tools can't take recipes as separate files, so à-la-carte modes
+# APPEND a marked block to the existing baseline instead of overwriting it.
+# The manifest records {"type": "block", "sha256": <hash of content>, "created_file"}.
+# Uninstall strips the block only when its content hash still matches.
+
+sha256_of() {
+  if command -v sha256sum >/dev/null 2>&1; then sha256sum | /usr/bin/awk '{print $1}'
+  else /usr/bin/shasum -a 256 | /usr/bin/awk '{print $1}'; fi
+}
+
+# append_block <abs_file> <block_name> <content_file> — sets BLOCK_SHA + BLOCK_CREATED.
+append_block() {
+  local f="$1" name="$2" content="$3" rel entry expected_sha current_sha open_count close_count
+  local open="<!-- conductor:block $name -->" close="<!-- /conductor:block $name -->"
+  BLOCK_CREATED="false"; BLOCK_SHA=""
+  if [ "$DRY_RUN" = "true" ]; then
+    log "would append marked block '$name' to $f"
+    return
+  fi
+  # Content must never contain the marker syntax itself — a colliding line would
+  # truncate extraction AND stripping while the hash guard computes the same
+  # truncation on both sides (silent data loss). Refuse instead.
+  if /usr/bin/grep -qE '<!-- /?conductor:block ' "$content"; then
+    echo "Error: block content contains the conductor:block marker syntax — refusing to append." >&2
+    /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+    exit 1
+  fi
+  if [ ! -f "$f" ]; then
+    BLOCK_CREATED="true"
+    : > "$f"
+  else
+    rel="${f#$TARGET_ABS/}"
+    open_count="$(/usr/bin/grep -cF "$open" "$f" || true)"
+    close_count="$(/usr/bin/grep -cF "$close" "$f" || true)"
+    if [ "$open_count" -ne 0 ] || [ "$close_count" -ne 0 ]; then
+      if [ "$open_count" -ne 1 ] || [ "$close_count" -ne 1 ]; then
+        echo "Error: found an unpaired or duplicate '$name' CONDUCTOR marker in $f; refusing to change user content." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      entry="$(conductor_manifest_block_entry "$rel" "$name" 2>/dev/null || true)"
+      if [ -z "$entry" ]; then
+        echo "Error: '$name' marker in $f is not owned by this install manifest; refusing to replace user content." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      expected_sha="$(conductor_manifest_field "$entry" sha256 2>/dev/null || true)"
+      current_sha="$(/usr/bin/awk -v o="$open" -v c="$close" '$0==o{b=1;next} $0==c{b=0;next} b' "$f" | sha256_of)"
+      if [ -z "$expected_sha" ] || [ "$current_sha" != "$expected_sha" ]; then
+        echo "Error: managed '$name' block in $f was customized; refusing to overwrite it." >&2
+        /bin/rm -f "${MANIFEST_STAGE_PATH:-}"
+        exit 1
+      fi
+      # The manifest owns this one, unmodified block, so replacement is safe.
+      /usr/bin/awk -v o="$open" -v c="$close" '$0==o{inb=1; if (heldset && held ~ /^[[:space:]]*$/) heldset=0; next} $0==c{inb=0;next} inb{next} {if (heldset) print held; held=$0; heldset=1} END{if (heldset) print held}' "$f" > "$f.conductor-tmp"
+      /bin/mv "$f.conductor-tmp" "$f"
+      log "  replaced existing block '$name' in $f"
+    fi
+  fi
+  { echo ""; echo "$open"; /bin/cat "$content"; echo "$close"; } >> "$f"
+  BLOCK_SHA="$(/usr/bin/awk -v o="$open" -v c="$close" '$0==o{b=1;next} $0==c{b=0;next} b' "$f" | sha256_of)"
+  log "  appended block '$name' to $f (sha256 $(printf '%s' "$BLOCK_SHA" | /usr/bin/cut -c1-12)...)"
+}
+
+record_emit_block() {
+  if [ "$DRY_RUN" = "true" ] || [ "$UNINSTALL" = "true" ]; then return; fi
+  local relpath="$1" name="$2" sha="$3" created="$4"
+  printf '    {"path": "%s", "type": "block", "block": "%s", "sha256": "%s", "created_file": %s},\n' \
+    "$relpath" "$name" "$sha" "$created" >> "$MANIFEST_STAGE_PATH"
+}
+
+# ----- framework detection (ADR-044 — suggest, NEVER auto-switch) ----------
+
+detect_coexisting_frameworks() {
+  local found=""
+  [ -d "$TARGET_ABS/.specify" ] && found="$found Spec-Kit"
+  { [ -d "$TARGET_ABS/_bmad" ] || [ -d "$TARGET_ABS/.bmad-core" ]; } && found="$found BMAD"
+  if [ -n "$found" ] && [ "$MODE" = "full" ]; then
+    log "NOTE: detected coexisting framework(s):$found"
+    log "      Consider --mode=recipes-only or --mode=reflector-only to coexist without"
+    log "      overlapping workflow rules (suggestion only — nothing was changed)."
+  fi
+}
+
 # ----- uninstall flow (mirrored from Cursor/Claude adapter) ---------------
 
 do_uninstall() {
@@ -297,24 +401,72 @@ do_uninstall() {
   local restored=0
   local deleted=0
   local missing=0
+  local preserved=0
+  local blocks_removed=0
+  local blocks_kept=0
 
   while IFS= read -r line; do
     case "$line" in
+      *'"type": "block"'*)
+        entries_count=$((entries_count + 1))
+        local b_rel b_name b_sha b_created b_abs b_open b_close b_cur_sha
+        b_rel="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"path": *"([^"]*)".*/\1/')"
+        b_name="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"block": *"([^"]*)".*/\1/')"
+        b_sha="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"sha256": *"([^"]*)".*/\1/')"
+        b_created="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"created_file": *(true|false).*/\1/')"
+        b_abs="$TARGET_ABS/$b_rel"
+        b_open="<!-- conductor:block $b_name -->"
+        b_close="<!-- /conductor:block $b_name -->"
+        if [ ! -f "$b_abs" ] || ! /usr/bin/grep -qF "$b_open" "$b_abs"; then
+          log "  skip block '$b_name' ($b_rel absent or markers removed)"
+          continue
+        fi
+        b_cur_sha="$(/usr/bin/awk -v o="$b_open" -v c="$b_close" '$0==o{b=1;next} $0==c{b=0;next} b' "$b_abs" | sha256_of)"
+        if [ "$b_cur_sha" = "$b_sha" ]; then
+          if [ "$DRY_RUN" = "true" ]; then
+            log "  would strip block '$b_name' from $b_rel"
+          else
+            /usr/bin/awk -v o="$b_open" -v c="$b_close" '$0==o{inb=1; if (heldset && held ~ /^[[:space:]]*$/) heldset=0; next} $0==c{inb=0;next} inb{next} {if (heldset) print held; held=$0; heldset=1} END{if (heldset) print held}' "$b_abs" > "$b_abs.conductor-tmp"
+            /bin/mv "$b_abs.conductor-tmp" "$b_abs"
+            log "  stripped block '$b_name' from $b_rel"
+            if [ "$b_created" = "true" ] && ! /usr/bin/grep -q '[^[:space:]]' "$b_abs"; then
+              /bin/rm -f "$b_abs"
+              log "  deleted $b_rel (created by CONDUCTOR, now empty)"
+            fi
+          fi
+          blocks_removed=$((blocks_removed + 1))
+        else
+          log "  WARNING: block '$b_name' in $b_rel was customized (hash mismatch) — left in place"
+          blocks_kept=$((blocks_kept + 1))
+        fi
+        continue
+        ;;
       *'"path":'*'"source":'*'"had_backup":'*)
         ;;
       *) continue ;;
     esac
     entries_count=$((entries_count + 1))
-    local rel_path src had_backup backup_path
+    local rel_path src had_backup backup_path expected_sha
     rel_path="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"path": *"([^"]*)".*/\1/')"
     src="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"source": *"([^"]*)".*/\1/')"
     had_backup="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"had_backup": *(true|false).*/\1/')"
     backup_path="$(printf '%s' "$line" | /usr/bin/sed -E 's/.*"backup_path": *"([^"]*)".*/\1/')"
+    expected_sha="$(conductor_manifest_field "$line" sha256 2>/dev/null || true)"
 
     local abs_dest="$TARGET_ABS/$rel_path"
     local abs_backup=""
     [ -n "$backup_path" ] && abs_backup="$TARGET_ABS/$backup_path"
 
+    if [ -f "$abs_dest" ] && ! conductor_manifest_file_matches "$abs_dest" "$expected_sha"; then
+      if [ -z "$expected_sha" ]; then
+        log "  WARNING: preserving $rel_path (legacy manifest has no checksum)"
+      else
+        log "  WARNING: preserving user-modified $rel_path"
+      fi
+      preserved=$((preserved + 1))
+      continue
+    fi
+
     if [ "$had_backup" = "true" ] && [ -n "$abs_backup" ]; then
       if [ -f "$abs_backup" ]; then
         if [ "$DRY_RUN" = "true" ]; then
@@ -387,6 +539,10 @@ do_uninstall() {
   echo "  Backups restored: $restored"
   echo "  Files deleted: $deleted"
   echo "  Backup-missing deletes: $missing"
+  [ "$preserved" -gt 0 ] && echo "  User-modified files preserved: $preserved"
+  if [ "$blocks_removed" -gt 0 ] || [ "$blocks_kept" -gt 0 ]; then
+    echo "  Blocks stripped: $blocks_removed (customized blocks left: $blocks_kept)"
+  fi
   echo "========================================================"
 }
 
@@ -421,6 +577,20 @@ if [ -f "$TARGET_ABS/AGENTS.md" ] || [ -d "$TARGET_ABS/.codex" ]; then
   IS_ADOPTER_CASE="true"
 fi
 
+detect_coexisting_frameworks
+
+# --mode=strict: never overwrite an existing baseline, even with a backup (ADR-044).
+if [ "$MODE" = "strict" ] && [ -f "$TARGET_ABS/AGENTS.md" ]; then
+  echo "Error (--mode=strict): $TARGET_ABS/AGENTS.md already exists — strict mode aborts instead of overwriting a baseline." >&2
+  echo "  Use --mode=full (timestamped backup + manifest-based restore), or move the file first." >&2
+  exit 3
+fi
+
+# À-la-carte modes are non-interactive by design.
+if [ "$MODE" != "full" ] && [ "$MODE" != "strict" ]; then
+  NO_PROMPT="true"
+fi
+
 if [ "$IS_ADOPTER_CASE" = "true" ] && [ "$NO_PROMPT" = "false" ] && [ "$DRY_RUN" = "false" ]; then
   echo ""
   echo "========================================================"
@@ -448,7 +618,7 @@ if [ "$IS_ADOPTER_CASE" = "true" ] && [ "$NO_PROMPT" = "false" ] && [ "$DRY_RUN"
 
   echo ""
   echo "Available recipes:"
-  echo "  web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene"
+  echo "  web-mobile-parity, i18n, monorepo, branch-strategy, auto-mock-data, coding-conventions, tdd, debugging, database-discipline, design-system, self-improvement, git-hygiene, loop-engineering"
   printf "Select recipes (comma-separated, or leave blank for none): "
   read -r _recipe_answer
   if [ -n "$_recipe_answer" ]; then
@@ -471,6 +641,10 @@ UNIVERSAL_RULES="workflow spec-as-you-go quality-gates operations meta-disciplin
 
 AGENTS_DEST="$TARGET_ABS/AGENTS.md"
 
+INSTALLED_RECIPES=""
+
+if [ "$MODE" != "recipes-only" ] && [ "$MODE" != "reflector-only" ]; then
+
 log "Step 1/2: AGENTS.md → $AGENTS_DEST"
 backup_and_remember "$AGENTS_DEST"
 
@@ -504,20 +678,24 @@ build_agents_md() {
 ## How to use this with Codex (한/영)
 
 **한국어** — Codex 는 *한 방(one-shot) 셸 작업* 에 강합니다. 스크립트 작성, 파일 일괄 변환, git 작업,
-"이 명령 실행하고 결과 보고" 류 작업이 최적입니다. 멀티 스텝 오케스트레이션(서브에이전트/훅)은
-Codex 의 강점이 아니므로, 그런 작업은 사람이 순차 프롬프트로 분해하거나 Claude/Cursor 를 쓰세요.
+"이 명령 실행하고 결과 보고" 류 작업이 최적입니다. Codex 는 서브에이전트/훅을 네이티브로 지원하지만
+(ADR-031), CONDUCTOR 의 Codex adapter 는 아직 이를 자동 생성하지 않으므로 (Phase 2), 멀티 스텝
+오케스트레이션은 순차 프롬프트로 분해하거나 CONDUCTOR 의 full-emission 인 Claude adapter 를 쓰세요.
 이 번들은 Codex 가 *인라인으로 생성하는 코드* 가 프로젝트 컨벤션을 따르도록 충분한 맥락을 줍니다.
 
 **English** — Codex shines at *one-shot shell tasks*: writing scripts, batch file transforms, git
-operations, and "run this command and report the output" work. Multi-step orchestration
-(sub-agents / hooks) is not Codex's strength — decompose such work into sequential prompts, or
-reach for Claude/Cursor. This bundle gives Codex enough context that the code it generates inline
+operations, and "run this command and report the output" work. Codex supports sub-agents and hooks
+natively (ADR-031), but CONDUCTOR's Codex adapter does not emit them yet (Phase 2) — decompose
+multi-step orchestration into sequential prompts, or use CONDUCTOR's full-emission Claude adapter.
+This bundle gives Codex enough context that the code it generates inline
 follows your project conventions.
 
-> **Enforcement note (Codex)**: Codex has **no sub-agents, no hooks, and no per-pattern rule
-> scoping**. Every rule below is loaded *always* and is **self-policed** — there is no automated
-> gate. Claude-only enforcement mechanisms cited in the rule text (Stop hooks, agent routing) do
-> NOT run on Codex; treat them as reminders. Pair this with a git pre-commit hook if you want a hard gate.
+> **Enforcement note (Codex)**: Codex supports sub-agents, hooks, and per-task model routing
+> natively (ADR-031), but CONDUCTOR's Codex adapter currently emits rule text (plus the Reflector
+> loop) only — full hook/agent emission is Phase 2. Every rule below is loaded *always* and is
+> **self-policed** — CONDUCTOR installs no automated gate here. Enforcement mechanisms cited in
+> the rule text (Stop hooks, agent routing) are emitted for Claude only today; treat them as
+> reminders. Pair this with a git pre-commit hook if you want a hard gate.
 
 ## ABSOLUTE rules (always-on summary)
 
@@ -574,7 +752,7 @@ more often than other tools** — but the gates that remain (Implementation →
 - **Review** — Stage A on the diff (correctness), Stage B before merge (block on HIGH-confidence issues).
 - **Spec** — update `docs/specs/<area>.md` to reflect actually-shipped behavior (spec-as-you-go).
 
-> On Codex, phase enforcement is **self-policed** (no Stop hooks). The rule text above is the reminder.
+> On Codex, phase enforcement is **self-policed** (CONDUCTOR emits no Stop hooks here yet). The rule text above is the reminder.
 
 WORKFLOW
 
@@ -628,9 +806,71 @@ else
   log "  wrote $AGENTS_DEST"
 fi
 
+else
+  # ----- à-la-carte modes: marked block appended to AGENTS.md (ADR-044) ------
+  BLOCK_NAME="recipes"; [ "$MODE" = "reflector-only" ] && BLOCK_NAME="reflector"
+  log "Step 1/2: --mode=$MODE — '$BLOCK_NAME' marked block → $AGENTS_DEST (no full bundle)"
+  if [ "$DRY_RUN" = "true" ]; then
+    log "would append marked block '$BLOCK_NAME' (selected recipes: $RECIPES) to $AGENTS_DEST"
+  else
+    _blk="$(/usr/bin/mktemp "${TMPDIR:-/tmp}/conductor-block.XXXXXX")"
+    {
+      echo "# CONDUCTOR — à la carte (--mode=$MODE)"
+      echo ""
+      echo "> Installed by CONDUCTOR WITHOUT the universal-rule bundle. This is a managed"
+      echo "> block: --uninstall strips it when unmodified. Full workflow: --mode=full."
+      echo ""
+      IFS=',' read -ra _RECIPE_LIST <<< "$RECIPES"
+      for r in "${_RECIPE_LIST[@]}"; do
+        r="$(printf '%s' "$r" | /usr/bin/sed 's/^ *//; s/ *$//')"
+        [ -z "$r" ] && continue
+        src="$CORE_ROOT/recipes/$r.md"
+        if [ ! -f "$src" ]; then
+          echo "Warning: recipe '$r' not found at $src; skipping" >&2
+          continue
+        fi
+        echo "## Recipe — $r"
+        echo ""
+        strip_frontmatter "$src"
+        echo ""
+        INSTALLED_RECIPES="$INSTALLED_RECIPES $r"
+      done
+    } > "$_blk"
+    if [ -z "${INSTALLED_RECIPES// /}" ]; then
+      /bin/rm -f "$_blk"
+      echo "Error: --mode=$MODE resolved ZERO valid recipes from '--recipes=$RECIPES' — nothing to install (check the names)." >&2
+      /bin/rm -f "$MANIFEST_STAGE_PATH"
+      exit 1
+    fi
+    append_block "$AGENTS_DEST" "$BLOCK_NAME" "$_blk"
+    /bin/rm -f "$_blk"
+    record_emit_block "AGENTS.md" "$BLOCK_NAME" "$BLOCK_SHA" "$BLOCK_CREATED"
+    # Preserve OTHER à-la-carte blocks from a previous install (e.g. recipes-only
+    # then reflector-only): carry their manifest entries forward so uninstall can
+    # still strip them (ADR-044 review fix — cross-mode orphaned block).
+    if [ -f "$MANIFEST_PATH" ]; then
+      while IFS= read -r _prev; do
+        case "$_prev" in *'"type": "block"'*) : ;; *) continue ;; esac
+        _pname="$(printf '%s' "$_prev" | /usr/bin/sed -E 's/.*"block": *"([^"]*)".*/\1/')"
+        [ "$_pname" = "$BLOCK_NAME" ] && continue
+        if /usr/bin/grep -qF "<!-- conductor:block $_pname -->" "$AGENTS_DEST" 2>/dev/null; then
+          printf '%s\n' "$_prev" | /usr/bin/sed 's/,*$/,/' >> "$MANIFEST_STAGE_PATH"
+          log "  preserved previous block '$_pname' in manifest"
+        fi
+      done < "$MANIFEST_PATH"
+    fi
+  fi
+fi
+
 # ----- opt-in: self-improvement (Reflector) --------------------------------
 
-case ",$RECIPES," in
+if [ "$MODE" = "minimal" ]; then
+  RECIPES_FOR_RUNTIME=""
+  log "Step: self-improvement runtime — skipped (--mode=minimal ships text only)"
+else
+  RECIPES_FOR_RUNTIME="$RECIPES"
+fi
+case ",$RECIPES_FOR_RUNTIME," in
   *",self-improvement,"*)
     log "Step: self-improvement (Reflector) → .codex hook/skill/agent"
     if [ "$DRY_RUN" != "true" ]; then
@@ -678,6 +918,9 @@ esac
 
 # ----- step 2: docs templates --------------------------------------------
 
+if [ "$MODE" = "recipes-only" ] || [ "$MODE" = "reflector-only" ]; then
+  log "Step 2/2: docs templates — skipped (--mode=$MODE is à la carte; docs ship with full/minimal)"
+else
 log "Step 2/2: docs templates → docs/"
 mkdir_if_real "$TARGET_ABS/docs"
 mkdir_if_real "$TARGET_ABS/docs/specs"
@@ -712,6 +955,8 @@ if [ -f "$CORE_ROOT/docs-templates/specs/_example.md" ]; then
 fi
 
 # Finalize manifest after all emits.
+fi
+
 finalize_manifest
 
 # ----- completion summary -------------------------------------------------
@@ -725,7 +970,9 @@ else
 fi
 echo "  Target: $TARGET_ABS"
 echo "  Adapter: codex"
-if [ "$WIZARD_APPLY_RULES" = "true" ]; then
+if [ "$MODE" = "recipes-only" ] || [ "$MODE" = "reflector-only" ]; then
+  echo "  AGENTS.md: marked à-la-carte block appended (no universal-rule bundle)"
+elif [ "$WIZARD_APPLY_RULES" = "true" ]; then
   echo "  AGENTS.md: intro + 5 universal rules + compressed workflow + memory note"
 else
   echo "  AGENTS.md: intro + compressed workflow + memory note (universal rules skipped)"
@@ -734,7 +981,7 @@ echo "  Recipes appended:${INSTALLED_RECIPES:- (none)}"
 echo ""
 echo " Skipped (per ADR-004 honesty):"
 echo "  - Hooks: CONDUCTOR emits the Reflector hook when --recipes=self-improvement (ADR-032); other guards remain Claude-only (ADR-034)."
-echo "  - Sub-agent personas: Codex has no sub-agent dispatch — single session per task."
+echo "  - Sub-agent personas: not yet emitted for Codex (tool supports sub-agents natively — ADR-031; Phase 2)."
 echo "  - Per-pattern scoping: Codex loads AGENTS.md whole — all rules are always-on."
 echo "  - Hookify rule templates: Claude-only plugin."
 echo ""
@@ -743,6 +990,6 @@ echo "========================================================"
 echo ""
 echo "Next steps for the project:"
 echo "  1. Open $TARGET_ABS with Codex."
-echo "  2. Edit docs/CURRENT_WORK.md with your project's current state."
+[ -d "$TARGET_ABS/docs" ] && echo "  2. Edit docs/CURRENT_WORK.md with your project's current state."
 echo "  3. (optional) Create .memory/ and add it to .gitignore — see the Memory section in AGENTS.md."
 echo "  4. Verify Codex cites project conventions when generating code (confirms AGENTS.md loaded)."

package/adapters/copilot/README.md

@@ -6,24 +6,21 @@ GitHub Copilot is a T2 target because:
 - Instructions live IN the repo, so all collaborators automatically share them.
 - Copilot's PR review feature provides a partial Stage B code-review analog tied to GitHub.
 
-It is **T2 (not T1)** because:
+**Tool capability vs CONDUCTOR emission (ADR-031):** as of 2026 Copilot ships hooks (CLI + cloud + VS Code), sub-agent dispatch, custom agents, per-task model routing, commands, and built-in managed memory. What is limited today is what CONDUCTOR **emits** for it — rule text + docs + the opt-in Reflector loop; the enforcement guard hooks, role agents, and model-routing config are Phase-2 emission (ADR-034). That is a CONDUCTOR gap, not a Copilot limitation.
 
-- ❌ No sub-agent dispatch.
-- ❌ No hooks for ABSOLUTE enforcement.
-- ❌ No per-call model routing (model picker in UI).
-- ❌ No built-in memory directory.
-- ⚠️ Slash commands limited.
+**Tier**: T2 (see `docs/COMPATIBILITY-MATRIX.md` — hooks + sub-agents + per-task model + commands all present; caveats: `applyTo:` glob scoping works, but the coding agent has no transcript API).
+
+> Enumerable facts about this adapter (output paths / tier / capabilities / live verification / headless CLI) are machine-readable in [`metadata.json`](./metadata.json) and CI-checked against `transform.sh` + the validator (ADR-040).
 
-**Tier**: T2 — Good support; rule scoping works well, enforcement is limited.
 
 ## Installation path
 
 ```bash
-# Install (the copilot adapter is implemented):
-bash /path/to/conductor/adapters/copilot/transform.sh /path/to/target [--dry-run]
+# Recommended (npm, no clone):
+npx omniconductor init --target=copilot <target-dir>
 
-# (planned / roadmap — not yet available):
-# npx omniconductor init --target=copilot [target-dir]
+# Or from a local clone:
+bash /path/to/conductor/adapters/copilot/transform.sh /path/to/target [--dry-run] [--per-rule]
 ```
 
 ## What gets installed
@@ -31,13 +28,9 @@ bash /path/to/conductor/adapters/copilot/transform.sh /path/to/target [--dry-run
 ```
 <target>/
 ├── .github/
+│   ├── copilot-instructions.md                 # 5 universal rules merged (repo-wide, default mode)
 │   └── instructions/
-│       ├── all.instructions.md                 # applyTo: '**' (always-loaded)
-│       ├── operations.instructions.md          # applyTo: '**'
-│       ├── coding-conventions.instructions.md  # applyTo: '**/*.{ts,tsx,js,jsx}'
-│       ├── token-economy.instructions.md       # applyTo: '**'
-│       ├── spec-as-you-go.instructions.md      # applyTo: 'docs/specs/**,**/*.md'
-│       └── model-routing.instructions.md       # applyTo: '**'
+│       └── <recipe>.instructions.md            # per --recipes=, applyTo: from source paths
 └── docs/
     ├── CURRENT_WORK.md                         # Universal templates
     ├── REMAINING_TASKS.md
@@ -47,30 +40,34 @@ bash /path/to/conductor/adapters/copilot/transform.sh /path/to/target [--dry-run
     └── specs/_example.md
 ```
 
-## Native features supported
+- `--per-rule` splits the 5 universal rules into per-file `.github/instructions/<rule>.instructions.md` (`applyTo: '**'`) instead of the single merged file.
+- `--recipes=self-improvement` additionally emits the Reflector loop: session-end trajectory hook config, `/reflect` command, reflector agent, prune script, and the `.conductor/reflect/` weekly runner (ADR-032/033).
+
+## Native features supported (emitted today)
 
-- ✅ Always-loaded baseline (`applyTo: '**'`).
-- ✅ Per-pattern rule scoping (`applyTo:` front-matter).
-- ✅ Instructions IN the repo (collaborator-shared).
+- ✅ Always-loaded baseline (`.github/copilot-instructions.md`).
+- ✅ Per-pattern rule scoping (`applyTo:` front-matter on recipe files).
+- ✅ Instructions IN the repo (collaborator-shared) — one install covers VS Code, Cursor (Copilot ext), Windsurf (Copilot adapter), JetBrains, Neovim.
 - ✅ All universal rule TEXT.
 - ✅ All doc templates.
+- ✅ Reflector loop (opt-in recipe).
 - ⚠️ Copilot PR review feature for Stage B (partial).
 
-## Features NOT supported
+## Not emitted yet (Phase 2 — Copilot supports these natively, ADR-031/034)
 
-| Feature | Workaround |
+| Feature | Interim workaround |
 |---|---|
-| Sub-agent dispatch | Human plays orchestrator role. |
-| Hooks | Pair with project-level pre-commit git hooks for enforcement. |
-| Per-call model routing | Pick model in Copilot Chat UI. |
-| Built-in memory directory | DIY at `.memory/` (gitignored). |
+| Enforcement guard hooks | Self-police, or pair with project-level pre-commit git hooks. Only the Reflector session-end hook is emitted today. |
+| The 6 role agents (sub-agent dispatch) | Copilot has native agents; CONDUCTOR doesn't emit its role definitions for Copilot yet. Human plays orchestrator. |
+| Per-call model-routing config | Pick the model in Copilot Chat UI per task (Copilot supports per-task model selection). |
+| 4-type memory pattern | Self-managed at `.memory/` (gitignored); Copilot's built-in managed memory is separate. |
 | Specialized review agents (Stage A) | Run review prompts manually in Copilot Chat. Use Copilot PR review for Stage B (best-effort). |
 
 ## After install — first steps
 
-1. Commit `.github/instructions/` to your repo. All collaborators automatically pick up the rules.
+1. Commit `.github/copilot-instructions.md` (and `.github/instructions/` if you used recipes or `--per-rule`) to your repo. All collaborators automatically pick up the rules.
 2. Configure Copilot PR review for Stage B (in repo settings).
-3. Customize the always-loaded section of `all.instructions.md` — replace `{{PROJECT_NAME}}`.
+3. Skim `.github/copilot-instructions.md` and adjust recipe `applyTo:` globs to your repo layout if needed.
 4. Rename `docs/specs/_example.md` → `docs/specs/<your-area>.md`.
 5. Add `.memory/` to `.gitignore`. Create your first memory entry.