Delegate bounded coding tasks to Command Code CLI and review diffs

Lets an orchestrating agent hand a bounded coding task to the Command Code CLI (cmd, or cmdc on Windows) as a separate implementer, then review what it produced and land it itself. The defining fact about Command Code's headless mode is that it has exactly two states with nothing in between: the default (-p with no --yolo) allows read/grep/glob but the CLI's permission layer refuses every write, edit, and shell call outright, with no mid-run prompt to grant them - this is the relay's --read-only; --yolo (alias --dangerously-skip-permissions) allows every tool anywhere the process can reach, with no filesystem sandbox and no path restriction at all. --permission-mode auto-accept and --tools-all do NOT lift the headless write gate - direct CLI probes confirmed both still refuse write, edit, and shell. Because an implementation run is therefore full-trust rather than sandboxed, the skill requires explaining this unsandboxed mode and obtaining explicit human acceptance before the first write-capable dispatch - a request to delegate to Command Code is not by itself consent to host-wide access - and recommends scoping the run with a tight brief and a clean working tree rather than relying on any sandbox; if writes outside the target tree are unacceptable, it points to an OS-enforced alternative such as codex-delegate or running inside a container instead.

Dispatch wraps cmd -p and writes a structured result.json, defaulting to the write-capable --yolo run since that is what implementation needs; the relay itself never commits, but - unlike sandboxed delegate skills - it explicitly cannot stop Command Code from writing .git under --yolo, so the brief forbids implementer commits and the reviewer is told to compare HEAD against the recorded pre-dispatch baseline before landing anything. Because a full-trust run can edit anywhere the process can reach, review must check for edits outside the paths the brief named, not only inside them. Rework resumes the exact session via --session <sessionId> from the prior result.json (--continue-last only as a fallback when no session id is available). The relay also supports read-only adversarial second opinions - dispatch --read-only with a brief listing contested points from both sides and ask Command Code to defend or concede each - checked after the fact with a Git-visible-change detector (readOnlyViolation: false means no change seen, true means one was seen, null means git couldn't tell), since the read-only guarantee here rests on the CLI's own permission layer, not an OS sandbox.

Use it to delegate a bounded coding task to a separate cmd implementer and then review its diff yourself, when the user explicitly asked for delegation to this implementer. Do NOT use it when: the task is small enough to just do inline and delegation overhead isn't worth it; the cmd CLI is not installed or not authenticated (cmd login); you want to write the code yourself, or only need a review - Command Code has its own /review; or you are on native Windows and cmdc --version doesn't work, since upstream recommends WSL for stable Windows use instead.

The brief is the entire task as Command Code will see it - no chat history, no shared context beyond a repo's own auto-loaded AGENTS.md and any skills it discovers there - so it must state the goal, current state, what to change, what to leave untouched, the project's real gate commands, and an explicit report contract. Dispatch:

node "<skill-dir>/scripts/relay.mjs" --brief brief.txt --cd /path/to/repo

Output is result.json with status (including commandcode_unavailable when the binary is missing), the exact binary version that ran (so a wrong cmd/cmdc on PATH is visible after the fact), finalMessage, touchedFiles (the review starting point), and, on a --read-only dispatch, readOnlyViolation.

Wraps the Command Code CLI from commandcode.ai (cmd on macOS/Linux, cmdc on native Windows, launched through its npm .cmd shim via cmd.exe), requiring Node 22+ and git, authenticated via cmd login. COMMANDCODE_BIN is an absolute-path override for locating the binary and must never be pointed at the system command interpreter. Can apply a fleet lane's dials from a companion delegate-setup configuration.

Orchestrating agents - designed for and run on Claude Code, with other orchestrators treated as designed-for but not yet proven - that need to delegate a scoped coding task to Command Code and are prepared to accept, and disclose to the human, that the only write-capable mode is full-trust with no sandbox. Adapted from the community amElnagdy/delegate-skills repository under the MIT license; this catalog entry is a docs-only import, since the executable scripts/relay.mjs is not bundled here.