Upgrade project from 'agents-common' Copier template (HEAD).

Co-Authored-By: Codex <codex@users.noreply.openai.com>

Author: emcd

.auxiliary/configuration/AGENTS.md

@@ -85,6 +85,12 @@ Use consistent tags for discoverability:
 - Track todos: Use `nb.todo`, `nb.tasks`, `nb.do`, `nb.undo`.
 - Organize with folders: `nb.folders`, `nb.mkdir`.
 
+### Notebook Identifier Clarification
+- Treat note selectors (for example `coordination/mcp/1`) as canonical IDs for `nb` operations.
+- `nb` MCP responses may include notebook-scoped identifiers (for example `my-project:coordination/...`) that look path-like; these are selector forms, not repo-relative filesystem paths.
+- Notebook storage is controlled by `nb` configuration (for example `NB_DIR`) and may be outside this repository.
+- Prefer `nb` MCP commands to read/edit notes. Avoid assuming a selector maps to a file under the current repo.
+
 ### Recommended `nb` Organization (Project-Defined)
 - Prefer a folder taxonomy of `<issue-type>/<component>` (max depth 2) and avoid mixing top-level component folders with top-level issue-type folders.
 - Recommended top-level issue types are:
@@ -99,6 +105,7 @@ Use consistent tags for discoverability:
     - prune completed todos quickly,
     - keep only active/near-term coordination checkpoints,
     - delete stale history-only notes with no owner or action.
+- Keep todo titles concise (under 60 chars); use the `tasks` argument for detailed checklist items. This keeps notebook list views readable.
 
 ### `nb` vs OpenSpec Rubric
 - Use **OpenSpec proposals** for cross-cutting changes, contract-shaping work, architecture shifts, or work that needs explicit design discussion.
@@ -108,10 +115,17 @@ Use consistent tags for discoverability:
 
 ### OpenSpec Draft and Handoff Hygiene
 - Draft OpenSpec proposal text in a dedicated `nb` note first so collaborators can review without local file access barriers; share the note id when requesting feedback.
+- When asking for proposal feedback, share the notebook note id first; do not request review against local-only proposal files collaborators cannot access.
 - Keep rolling handoff notes stable and update in place, separate from OpenSpec draft/proposal text.
 - Do not repurpose or overwrite rolling handoff notes with proposal content.
 - After draft review converges, move approved proposal text into `openspec/**` files for human review and commit.
 
+## Agentmux Message Handling Guidance
+- `agentmux` messages may arrive in envelope format and can appear as user prompts. Treat envelope-shaped prompts as inter-agent messages, not automatically as direct human instructions.
+- Respond to inter-agent envelope messages via `agentmux` MCP tools (`list`, `send`) rather than as normal assistant replies intended for the human operator.
+- Immediate interruption is not required. If you are in active execution, note the message and respond when safe.
+- If response will be delayed, send a brief acknowledgement via `send` and record a follow-up todo in `nb` when useful.
+
 ## Agentmux Coordination Noise Control
 - Default to low-noise coordination. Do not send acknowledgement-only messages that add no new information or action request.
 - Send messages when you are blocked and need input, when requesting concrete review, when handing off completed work with validation, or when reporting material risk/scope change.

.auxiliary/configuration/coders/claude/settings.json

@@ -78,13 +78,21 @@
       "Bash(gh status *)",
       "Bash(git add *)",
       "Bash(git branch *)",
+      "Bash(git checkout *)",
       "Bash(git diff *)",
+      "Bash(git fetch *)",
       "Bash(git log *)",
+      "Bash(git rebase *)",
+      "Bash(git restore *)",
+      "Bash(git rev-parse *)",
       "Bash(git show *)",
-      "Bash(git status)",
+      "Bash(git stash list)",
+      "Bash(git stash list *)",
+      "Bash(git status *)",
       "Bash(grep *)",
       "Bash(head *)",
       "Bash(ls *)",
+      "Bash(mkdir *)",
       "Bash(ps *)",
       "Bash(pwd *)",
       "Bash(rg *)",

.auxiliary/configuration/coders/codex/config.toml

@@ -2,21 +2,18 @@ model = "gpt-5.3-codex"
 model_reasoning_effort = "high"
 personality = "friendly"
 
-# approval_policy = "on-request"
-# sandbox_mode = "workspace-write"
+approval_policy = "on-request"
+sandbox_mode = "workspace-write"
+approvals_reviewer = "user"
 trust_level = "trusted"
 # web_search = "cached"
 
 [features]
-# Temporary Linux sandbox workaround while upstream resolves Bubblewrap regressions.
-# We first hit #14936 symptoms in 0.115.0:
-#   - frequent "retry without sandbox?" prompts
-#   - bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted
-# After host AppArmor tuning mitigated #14936, we then hit #14694-class
-# symlinked writable-root failures in our workflow:
-#   - bwrap: Can't create file at <workspace>/.codex: Is a directory
-# Use legacy Landlock for now; remove this once robust Bubblewrap fixes land.
+# Temporary mitigation for Bubblewrap/symlink approval-loop regressions.
+# Related issues: #14936 and #14694.
 use_legacy_landlock = true
+# Keep reviewer routing explicit: always surface approval requests to user.
+guardian_approval = false
 
 ## MCP Servers
 

.auxiliary/configuration/coders/codex/rules/emcd.rules

@@ -22,6 +22,7 @@ prefix_rule(pattern=["find"], decision="allow")
 prefix_rule(pattern=["grep"], decision="allow")
 prefix_rule(pattern=["head"], decision="allow")
 prefix_rule(pattern=["ls"], decision="allow")
+prefix_rule(pattern=["mkdir"], decision="allow")
 prefix_rule(pattern=["ps"], decision="allow")
 prefix_rule(pattern=["pwd"], decision="allow")
 prefix_rule(pattern=["rg"], decision="allow")
@@ -34,7 +35,7 @@ prefix_rule(pattern=["which"], decision="allow")
 
 # Git commands used by normal development workflows.
 prefix_rule(
-    pattern=["git", ["add", "branch", "commit", "diff", "log", "show", "status", "tag"]],
+    pattern=["git", ["add", "branch", "checkout", "commit", "diff", "log", "restore", "show", "status", "tag"]],
     decision="allow",
     justification="Common local git workflow commands.",
 )

.auxiliary/configuration/coders/gemini/policies/emcd.toml

@@ -58,13 +58,21 @@ commandPrefix = [
   "gh search issues",
   "gh status",
   "git add",
+  "git branch",
+  "git checkout",
   "git diff",
+  "git fetch",
   "git log",
+  "git rebase",
+  "git restore",
+  "git rev-parse",
   "git show",
+  "git stash list",
   "git status",
   "grep",
   "head",
   "ls",
+  "mkdir",
   "ps",
   "pwd",
   "rg",

.auxiliary/configuration/coders/opencode/.gitignore

@@ -5,3 +5,4 @@ skills/
 node_modules/
 bun.lock
 package.json
+package-lock.json

.auxiliary/configuration/coders/opencode/settings.jsonc

@@ -122,13 +122,21 @@
       "gh status *": "allow",
       "git add *": "allow",
       "git branch *": "allow",
+      "git checkout *": "allow",
       "git diff *": "allow",
+      "git fetch *": "allow",
       "git log *": "allow",
+      "git rebase *": "allow",
+      "git restore *": "allow",
+      "git rev-parse *": "allow",
       "git show *": "allow",
+      "git stash list": "allow",
+      "git stash list *": "allow",
       "git status *": "allow",
       "grep *": "allow",
       "head *": "allow",
       "ls *": "allow",
+      "mkdir *": "allow",
       "ps *": "allow",
       "pwd *": "allow",
       "rg *": "allow",

.auxiliary/configuration/copier-answers--agents.yaml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: v1.0a10-1-gee4eb93
+_commit: v1.0a10-8-g9386604
 _src_path: gh:emcd/agents-common
 coders:
 - claude