cc-codeconductor - npm Package Compare versions

Comparing version 0.3.2 to 0.3.3

presets/agy/workflows/cc-council.md

+---
+name: cc-council
+description: Run the full Council-Driven Development workflow — SDD spec creation, TDD enforcement, surgical implementation, and multi-perspective review.
+---
+
+# Council-Driven Workflow
+
+Task request: $ARGUMENTS
+
+## Step 1 — Deliberation & Specification (SDD)
+
+Invoke the `council` skill to analyze the request before writing any code. The council must act as a steering committee involving `task-coach` (Product), `architect`, and `devil`.
+
+The council must:
+1. Clarify the prompt and define the absolute minimum scope (Simplicity Gate).
+2. Explicitly document all assumptions and resolve ambiguities (Think Before Coding).
+3. Draft a Task Card & Technical Plan (The Specification).
+
+**STOP here. Show the agreed Task Card & Technical Plan and wait for human confirmation before continuing.**
+
+---
+
+## Step 2 — Test Definition (TDD)
+
+Invoke `tester` with the approved Task Card & Technical Plan.
+
+tester must:
+1. Write failing tests based on the Acceptance Criteria defined in the Task Card.
+2. Confirm the tests fail as expected (Red state).
+
+**Goal-Driven Execution (Karpathy)**: Do not proceed until verifiable tests are written and fail for the correct reasons.
+
+---
+
+## Step 3 — Surgical Implementation
+
+Invoke `implementer` with the failing tests and the Technical Plan.
+
+implementer must:
+1. Write the minimal code required to pass the tests.
+2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
+3. NOT refactor adjacent code, change existing styles, or build speculative features.
+4. Run the tests. Loop `implementer` -> `tester` until all tests pass (Green state).
+
+---
+
+## Step 4 — Multi-Perspective Council Review
+
+Invoke the `council` skill on the generated diff to perform the final review phase.
+
+The council will evaluate the diff against the 6 axes (Architecture, Security, Product, Delivery, DataOps, Devil).
+
+If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
+- The Review Report status is **BLOCKED**.
+- Return to Step 3 with the feedback.
+
+If APPROVED (no CRITICAL findings):
+- Deliver the final Council Verdict and the diff summary.
+
+---
+
+## Completion
+
+Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.

package.json

 {
   "name": "cc-codeconductor",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
@@ -5,0 +5,0 @@ "keywords": [

presets/agy/AGENTS.md

@@ -54,2 +54,3 @@ <!-- CODECONDUCTOR:BEGIN managed -->
 | `/cc-feature`    | Runs the full feature design, implementation, and review workflow |
+| `/cc-council`    | Runs Council-Driven Development workflow (SDD, TDD, surgical changes) |
 | `/cc-fix`        | Runs the bug fix verification and repair workflow                  |
@@ -56,0 +57,0 @@ | `/cc-refactor`   | Runs the code refactoring and test safety workflow                 |

presets/agy/skills/commit/SKILL.md

@@ -1,5 +0,1 @@
----
-name: commit
-description: Genera un commit en inglés siguiendo Conventional Commits basado en los cambios staged
----
 {{COMMIT_WORKFLOW}}

README.md

@@ -21,5 +21,5 @@ # CodeConductor
 >   `.codeconductor/presets/`
-> - `npx cc-codeconductor install council --target <opencode|claude|codex|all>` —
+> - `npx cc-codeconductor install council --target <opencode|claude|codex|agy|all>` —
 >   generates and writes preset files; supports `--global` to install to
->   `~/.opencode/`, `~/.claude/`, `~/.codex/`
+>   `~/.opencode/`, `~/.claude/`, `~/.codex/`, `~/.agents/`
 > - `npx cc-codeconductor install lsp --target <opencode|claude|codex|gemini|cursor|agy|all>` —
@@ -45,3 +45,3 @@ >   installs LSP servers and configures AI coding tools; auto-detects project
 >   recommended)
-> - `npx cc-codeconductor install preset --target <opencode|claude|codex|all>` —
+> - `npx cc-codeconductor install preset --target <opencode|claude|codex|agy|all>` —
 >   installs the full preset (agents, prompts, skills, commands, settings) for the
@@ -194,2 +194,3 @@ >   chosen runner; use `--locale=es` to inject Spanish-aware instructions into
 npx cc-codeconductor install preset --target codex
+npx cc-codeconductor install preset --target agy          # antigravity cli
 npx cc-codeconductor install preset --target all          # all targets
@@ -227,3 +228,4 @@
 npx cc-codeconductor install council --target codex
-npx cc-codeconductor install council --target all          # all three targets
+npx cc-codeconductor install council --target agy          # antigravity cli
+npx cc-codeconductor install council --target all          # all targets
 
@@ -230,0 +232,0 @@ npx cc-codeconductor install council --target claude --global  # write to ~/.claude/

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

2291327

1.52%

Number of package files

237

0.42%

Lines of code

21535

3.01%

Number of lines in readme file

427

0.47%

Worsened metrics

Number of low supply chain risk alerts

22

22.22%

Number of medium supply chain risk alerts

4

33.33%

No dependency changes