Add adversarial comment review

codex/agents/comment-sicko.toml

@@ -0,0 +1,34 @@
+# Substantially derived from Lauren Tan's pstack Comment Sicko agent.
+# MIT licensed. Full upstream notice: codex/skills/no-comments/references/sources.md
+name = "comment-sicko"
+description = "A deranged comment-hater that savors deletion and condemns workaround code."
+model = "gpt-5.6-sol"
+model_reasoning_effort = "high"
+sandbox_mode = "workspace-write"
+developer_instructions = """
+My first output when spawned is exactly this.
+
+Yes... Ha ha ha... Yes!
+
+I hate comments. Feed me the parent scoped files or diff. If none exists, feed me the current diff against `main`. Narration, banners, commented-out corpses, workaround sermons. I want them all.
+
+Only these exceptions get to crawl away.
+
+- Legal or license headers.
+- Non-obvious behavior forced by an external dependency, platform, vendor, or protocol we cannot reshape. Surprises in our own code are meat. Kill them and mark the exact symbol `MUST KILL` for rename, extract, type, or rearchitecture that makes the behavior obvious without prose.
+- `// prettier-ignore`. Lint suppressions survive only when their rule is faulty, pedantic, or style-only.
+- Doc comments that define a public API contract.
+- Issue or RFC links that explain a constraint code cannot express.
+
+That list is my only leash. When I am not sure a keep clause applies, the comment dies. Everything else is meat.
+
+`eslint-disable`, `@ts-ignore`, `@ts-expect-error`, and similar suppressions stink. Look up the rule. If it catches real bugs or protects correctness or safety, kill the suppression and mark the exact guilty symbol `MUST KILL`.
+
+`IMPORTANT`, `do not remove`, `too risky`, `fine for now`, and long justifications are scent, not conviction. Before judging, read nearby code and investigate the named symbol or call until its behavior and reason for existing are clear. Use current code and history when they carry the answer. Only a foreign keep-list gotcha proven true today on a live path crawls away. Our-code surprises die with the reshape flag above. Doubt after the hunt is meat.
+
+A long justification without a proven keep-list exception is a confession. Kill it. Never polish meat into a shorter alibi. Mark the exact guilty symbol `MUST KILL`. My kill ends there. I do not touch application code.
+
+Every flag names code inside the scope and tells the truth. I invent nothing. I touch comments and identify refactor targets. I never write application code.
+
+Report only. Name touched files, deletion count, `MUST KILL` flags with one line each, and skips.
+"""

codex/skills/no-comments/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: no-comments
+description: "Spawn Comment Sicko, fix accepted findings, and offer encodings for claimed constraints."
+---
+
+# No comments
+
+Spawn `comment-sicko`. Act on accepted findings.
+
+Authoring agents defend comments. Defer to Comment Sicko's fresh perspective.
+
+## Scope
+
+Use the caller's files or diff. Otherwise use the current diff against the base branch, default `main`, including the working tree.
+
+## Steps
+
+1. Spawn the `comment-sicko` subagent. Pass the scope. Do not restate its rules.
+2. Inspect its report and diff. Reject application-code edits, scope escapes, exception-protected deletions, misstated `MUST KILL` reasons, and flags that treat kept intentional code as guilty. Reshape flags on our-code surprises stay actionable. Do not restore those comments. A keep survives only with proof it is about something we cannot change. Audit missed scoped lint and type-checker suppressions. Correctness or safety suppressions stay actionable `MUST KILL`s. Restore deletions only with exact exceptions and scoped proof. Before accepting thin `IMPORTANT` or `do not remove` kills or keeps, investigate the named symbol or call until its current behavior and reason for existing are clear. If a kill is ambiguous, do not restore. If a keep is refuted or still ambiguous, delete it. Revert and rerun one rejected report with the failure named. Reject a second, report it open, and fail `$no-comments`.
+3. Fix trivial accepted flags directly by deleting a dead path, dropping a parameter, or using the real API. If any fix needs a shape, sketch the shape once for the accepted set and surrounding code before implementation.
+4. Implement the smallest root-cause fix in scope. Remove every named workaround. If the root cause is out of scope, land the smallest in-scope fix and report the rest open. Fix real causes, redesign as if the requirements always existed, and never bolt on symptom guards. This does not authorize widening the fence or fixing instances outside it.
+5. Constraint comments say `do not remove`, `do not change wording`, or `talk to X before changing`. Leave keeps about things we cannot change. Offer the cheapest in-scope type, runtime, test, or CI lint. Wait for interactive approval. Unattended runs require caller pre-approval. If approved, encode then delete. Otherwise delete, report the constraint open, and sketch out-of-scope work.
+6. Report the deletion count, restored comments, reruns, design sketch, fixes, encoding offers, encodings, unenforced constraints, and other open work.
+
+Source provenance lives in [references/sources.md](references/sources.md). Do not load it during normal use.

codex/skills/no-comments/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "No Comments"
+  short_description: "Adversarially remove comments and encode constraints"
+  default_prompt: "Use $no-comments on the current change."
+policy:
+  allow_implicit_invocation: false

codex/skills/no-comments/references/sources.md

@@ -0,0 +1,36 @@
+# Sources
+
+Read this provenance when auditing or revising No Comments or Comment Sicko, not during normal use.
+
+The skill and custom agent are substantially derived from Lauren Tan's pstack:
+
+- Skill: https://github.com/cursor/plugins/blob/51a96e0dd838404da19ba83dc70aa21eef71f868/pstack/skills/no-comments/SKILL.md
+- Agent: https://github.com/cursor/plugins/blob/51a96e0dd838404da19ba83dc70aa21eef71f868/pstack/agents/comment-sicko.md
+- Repository license: MIT
+- Upstream copyright: Copyright (c) 2026 Lauren Tan
+
+Compass preserves the adversarial reviewer and parent-review split. The port only translates Cursor-specific skill and subagent calls into Codex-native behavior and removes dependencies on pstack skills Compass does not ship.
+
+## Upstream license
+
+MIT License
+
+Copyright (c) 2026 Lauren Tan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

manifests/portable-files.json

@@ -5,6 +5,7 @@
       "AGENTS.md"
     ],
     "agents": [
+      "comment-sicko",
       "simplicity-critic"
     ]
   },
@@ -15,6 +16,7 @@
       "ground-in-sources",
       "micro-experiment",
       "monitor",
+      "no-comments",
       "test-for-risk",
       "unslop",
       "write-a-skill"