Set up the team in the user's target repository, not in the plugin cache. Resolve the package root two levels above this SKILL.md. Paths below named PACKAGE are placeholders for that resolved absolute path, not environment variables supplied by Codex.
- Read the target repository's AGENTS.md. Run
node "PACKAGE/scripts/install.mjs" --cwd "REPOSITORY" --check. Show any ownership conflict; never overwrite customized agents. Otherwise run the same command without--check. The helper installs project agents only; it does not alter global settings or install/trust the plugin itself. - Ensure this plugin is enabled and its hooks trusted. Use the client's hook review flow (
/hooksin CLI); never bypass hook trust for ordinary use. Run exactlyprintf DEV_TEAM_GUARD_PROBEin the main session. Expect a hook denial sayingdev-team: guard active for main. If it executes, stop setup with instructions to enable/trust the plugin. This is an intentional harmless denial, not an installation error. - Survey the repository with a fresh built-in explorer context; setup must not depend on newly installed agent discovery. Give it only a profile-survey request, requiring sources for test/lint/typecheck/build commands, conventions, protected paths, release/version locations, and commit-message conventions. No writes, installs, builds, or release actions from the survey agent.
- Fill
PACKAGE/templates/dev-team.mdfrom that evidence. Write unknown and what was searched when evidence is absent. Preserve all section/interface labels. New profiles useEngine: codexandPlan audit: auto. If.claude/dev-team.mdexists, offer a reviewed import of factual sections; retain the Claude file. An existing.codex/dev-team.mdis refreshed only through shown before/after changes accepted by the user. - Run each safe check command once, with a ten-minute limit. Skip commands requiring network services, credentials, live servers, or writes beyond build output. Record dates, exit codes, and skip reasons; preserve failures.
- Save
.codex/dev-team.md, then runnode "PACKAGE/scripts/doctor.mjs" --cwd "REPOSITORY". It validates settings and the advertised model catalog, not hook trust or actual inference. Keep model/effort choices in.codex/agents/dev_team_*.toml, beforedeveloper_instructions; avoid duplicating editable values in the Markdown profile. Never silently change an unavailable model. - Present the profile for review, especially release commands and protected paths. Tell the user to open a fresh CLI/desktop session so newly installed agents are discovered before dev-team:run. Do not commit or publish.
For removal, node "PACKAGE/scripts/install.mjs" --cwd "REPOSITORY" --uninstall removes only unchanged owned agents; customized files and the profile remain. Plugin removal is a separate client action.