{"id":"f4400caf-7955-48c5-bd79-9aa7443e381f","slug":"codex-engineering-workflow-pack","kind":"skill","name":"Codex-Engineering-Workflow-Pack","summary":"Local-first engineering workflow toolkit for Codex: skills, Coordinator Mode, worktree isolation, guarded dispatch, and parallel agent workflows.","owner":"SetraTheXX","repoUrl":"https://github.com/SetraTheXX/Codex-Engineering-Workflow-Pack","license":"MIT","licenseTier":"permissive","trust":"community","stars":1,"match":null,"fewStars":true,"format":"skill","createdAt":"2026-05-24T22:35:49.000Z","addedAt":"2026-10-21T12:32:57.078Z","logoUrl":"https://avatars.githubusercontent.com/u/211157294?u=8730dc14a9897fad1856b569286eecacf5abc550&v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["writing"],"tags":["ai-coding","codex","developer-tool","workflow","agentic-workflow","codex-cli","local-first","multi-agent"],"runtime":"node","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-26T04:01:25.143Z","sample":false,"url":"https://conduits.dev/tools/codex-engineering-workflow-pack","language":"JavaScript","transports":["stdio"],"install":{"npm":"@setrathex/codex-engineering-workflow-pack"},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# Codex Engineering Workflow Pack\n\n[![CI](https://github.com/SetraTheXX/Codex-Engineering-Workflow-Pack/actions/workflows/ci.yml/badge.svg)](https://github.com/SetraTheXX/Codex-Engineering-Workflow-Pack/actions/workflows/ci.yml)\n[![npm v0.14.0](https://img.shields.io/badge/npm-v0.14.0-CB3837?logo=npm)](https://www.npmjs.com/package/@setrathex/codex-engineering-workflow-pack?activeTab=versions)\n[![Node.js](https://img.shields.io/badge/Node.js-22%20%7C%2024%20%7C%2026-339933?logo=node.js&logoColor=white)](package.json)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)\n\n**Controlled Codex execution for work that is too important to run blind.**\n\nCEWP is an unofficial, local-first supervision and evidence layer for Codex. It\nadds explicit scope, isolated worktrees, bounded retries, deterministic\nverification, independent review, recovery controls, and portable receipts while\nleaving code generation to Codex.\n\n## 30-Second Flow\n\n1. **Plan** one bounded checkpoint with explicit files, checks, and stop conditions.\n2. **Approve** the proposal before any managed model operation.\n3. **Execute** in a CEWP-managed worktree through `codex-exec`.\n4. **Verify** scope and approved commands outside the model loop.\n5. **Review** independently, require `Decision: PASS`, create the receipt, and\n   **finalize** explicitly.\n\nThe result is a Codex change that cannot silently expand beyond its approved\nscope and carries evidence for what happened. The included demo is deterministic\nand credential-free: it proves the CEWP control path, not model quality.\n\nThis guarantee covers repository and managed-worktree changes under CEWP's\ngates. External operating-system or network side effects remain outside CEWP's\ncontrol boundary.\n\n![CEWP supervised flow](docs/assets/cewp-supervised-flow.gif)\n\nThe GIF is generated from the credential-free deterministic CLI demo. It shows\nthe evidence path, not a benchmark of provider or model quality.\n\n## Why CEWP\n\nNative Codex is the right choice for small, low-risk work. CEWP is designed for\nchanges where an undetected scope violation, failed verification, uncontrolled\nretry, or unverifiable result would be expensive.\n\n| Need | CEWP control |\n| --- | --- |\n| Prevent accidental broad edits | Approved file scope and isolated worktree |\n| Limit repeated model operations | Explicit operation, repair, and reviewer budgets |\n| Recover without losing evidence | Pause, resume, revise, retry, and retained checkpoints |\n| Verify outside the model loop | Deterministic local commands and scope inspection |\n| Require a second decision | Independent reviewer PASS before finalization |\n| Explain what happened | JSON and Markdown receipts with honest usage labels |\n\nCEWP does not attach to private ChatGPT sessions, scrape interfaces, infer missing\nusage, route automatically between models, or merge, push, publish, tag, or\nrelease code.\n\n## Quick Start\n\nRequirements:\n\n- Node.js 22 or newer\n- Git 2.39 or newer\n- Codex CLI for managed execution\n\nCheck the live npm tags, then install the current stable CLI:\n\n```bash\nnpm view @setrathex/codex-engineering-workflow-pack dist-tags --json\nnpm install -g @setrathex/codex-engineering-workflow-pack\ncewp init\ncewp doctor\n```\n\nThe npm install provides the `cewp` and `cewp-mcp` commands. It does not\nautomatically register the CEWP Codex plugin.\n\n## Install The Codex Plugin\n\nThe full local plugin bundles four CEWP skills, the local `cewp-mcp` bridge,\nreview-required subagent evidence hooks, and plugin metadata. After installing\nthe npm package globally, register its marketplace with Codex.\n\nPowerShell:\n\n```powershell\n$cewpPackage = Join-Path (npm root -g) \"@setrathex\\codex-engineering-workflow-pack\"\ncodex plugin marketplace add \"$cewpPackage\"\ncodex plugin add cewp@cewp-local\ncodex plugin list\n```\n\nmacOS or Linux:\n\n```bash\ncodex plugin marketplace add \"$(npm root -g)/@setrathex/codex-engineering-workflow-pack\"\ncodex plugin add cewp@cewp-local\ncodex plugin list\n```\n\nRefresh Codex or open a new conversation, then enable CEWP from the Plugins\nDirectory. Existing conversations can remain open; if an already-open task\nstill has an older skill snapshot, restart Codex later. This installs the\ncomplete plugin on the current machine from a local marketplace source; it does\nnot list CEWP in the universal public plugin directory.\n\nTo evaluate the exact GitHub source independently of the registry publication,\nrun it from a source checkout:\n\n```bash\ngit clone https://github.com/SetraTheXX/Codex-Engineering-Workflow-Pack.git\ncd Codex-Engineering-Workflow-Pack\nnode ./bin/cewp.js doctor\n```\n\nThe source checkout can also be registered directly:\n\n```bash\ncodex plugin marketplace add /path/to/Codex-Engineering-Workflow-Pack\ncodex plugin add cewp@cewp-local\n```\n\nRun the credential-free walkthrough:\n\n```bash\nnode ./bin/cewp.js demo supervised\n```\n\nCreate a bounded checkpoint in a disposable or reviewed repository:\n\n```bash\ncewp supervise plan \\\n  --goal \"Update the installation example\" \\\n  --scope README.md \\\n  --verify \"git diff --check\" \\\n  --stop \"The example is accurate and the approved check passes\"\n```\n\nInspect the proposal before enabling managed operations:\n\n```bash\ncewp policy set full-authority\ncewp supervise approve <run-id> --yes\ncewp supervise execute <run-id> --yes\ncewp supervise verify <run-id>\ncewp supervise review <run-id> --yes\ncewp supervise receipt <run-id>\ncewp supervise finalize <run-id> --yes\ncewp policy reset\n```\n\nThe advanced policy permits requested local operations; it does not disable\nscope, budget, verification, ownership, or reviewer gates.\n\n## Use CEWP From Codex\n\nThe intended product interaction is a normal Codex request that explicitly\nselects CEWP:\n\n```text\nUse CEWP to complete @roadmap.md. Turn it into bounded checkpoints, use\nindependent workers only where scopes do not overlap, verify every checkpoint,\nrequire reviewer PASS, preserve receipts, and stop on a closed gate.\n```\n\nNative Codex `/goal` keeps a persistent objective attached to the active task.\nCEWP does not replace or control that private host goal. The plugin adds an\nengineering control plane around the work: source-bound planning, explicit\nscope, isolated worktrees, budgets, deterministic verification, recovery,\nindependent review, and final evidence.\n\nToday CEWP provides three related execution levels:\n\n1. **Supervised checkpoint:** the plugin plans and runs one bounded managed\n   checkpoint at a time through CEWP Core.\n2. **Coordinator Mode:** CEWP can run two non-overlapping `codex-exec` workers\n   sequentially or in parallel, then run an independent reviewer.\n3. **Workflow runtime:** CEWP validates versioned DAGs, dependencies, worker\n   capacity, budgets, revisions, results, reviewer gates, and can dispatch a\n   bounded batch of explicitly approved ready tasks through managed `codex-exec`.\n   Economy, Balanced, and Maximum resource envelopes are inspectable before\n   approval; they bound operations without routing models automatically.\n\nThe complete one-sentence-to-finished-roadmap experience remains a product\ndirection, not a current completion claim. The workflow compiler emits a\nsource-bound agent request; the host agent must produce the structured workflow\nproposal, and approval, task selection, model/effort selection, review, and\nfinalization remain explicit. Codex can spawn native subagents when directly\nrequested or when plugin/project instructions request them, but CEWP currently\ntreats native subagent hooks as optional evidence rather than canonical\nexecution control.\n\n## Safety Model\n\nCEWP Core is the authority for every completion claim:\n\n1. The operator approves bounded scope and stopping conditions.\n2. Managed execution uses the selected `codex-exec` backend in an isolated\n   worktree.\n3. CEWP checks changed paths and test-authoring policy.\n4. Approved verification runs outside the model loop.\n5. An independent reviewer must return PASS.\n6. Receipt generation and explicit finalization close the run.\n\nUnknown host usage remains `unknown`; it is never converted to zero or a\nfabricated currency value. Budget or host exhaustion produces a resumable state,\nnot a false PASS.\n\n## Operating Surfaces\n\n- **CLI:** planning, execution, verification, recovery, review, receipts, and\n  workflow operations.\n- **Codex plugin:** four focused conversational skills, including bounded roadmap proposals.\n- **Local MCP:** the same Core operations and gates exposed over stdio.\n- **Evidence hooks:** optional, reviewable observations that never replace Core\n  enforcement.\n\nThe stable managed path is `managed` + `codex-exec`. App Server remains\nexperimental and OpenCode remains optional and outside the golden path.\n\n## Documentation\n\nStart here:\n\n- [Product requirements](docs/product-requirements.md)\n- [Public product direction](docs/product-direction.md)\n- [Changelog](CHANGELOG.md)\n- [Installation](docs/install.md)\n- [Supervised workflow](docs/supervised-workflow.md)\n- [Native Codex or CEWP?](docs/native-goal-or-cewp.md)\n- [Architecture](docs/architecture.md)\n- [Security model](docs/security-model.md)\n- [Recovery guide](docs/recovery-guide.md)\n- [Evidence receipts](docs/evidence-receipts.md)\n- [Compatibility contract](docs/stable-compatibility.md)\n- [Validation status](docs/validation-status.md)\n- [Plugin submission readiness](docs/plugin-submission.md)\n- [Known limitations](docs/known-limitations.md)\n\nReference:\n\n- [Workflow runtime](docs/workflow-runtime.md)\n- [Contract index](docs/contracts.md)\n- [Contract extension example](docs/contract-extension-example.md)\n- [Adapter contract](docs/adapter-contract.md)\n- [Operator policy](docs/operator-policy.md)\n- [Migration policy](docs/migration-policy.md)\n- [Contributing](CONTRIBUTING.md)\n- [Security policy](SECURITY.md)\n\n## Development\n\nThe runtime has no package dependencies. From a source checkout:\n\n```bash\nnode ./bin/cewp.js --help\nnode ./bin/cewp.js doctor\nnpm test\nnpm run check\nnpm run pack:dry-run\n```\n\nCI runs on Windows and Ubuntu with Node.js 22, 24, and 26.\n\n## Project Status\n\nCEWP is stable software in the `0.14.0` release. Stable-core compatibility,\nmigration, recovery, security, and package lifecycle contracts are implemented.\nThis is a stable `0.x` release; it does not make a `1.0.0` claim. Independent\nexternal-user validation and adoption are not claimed.\n\nSee [Validation Status](docs/validation-status.md) and\n[Release Notes](docs/release-notes.md) for the current evidence boundary.\n\n## License\n\n[MIT](LICENSE)\n"}