@appsforgood/next-supabase-kit 0.1.6 → 0.1.7

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.7
+
+- Added **Workflow Commands** section to README and docs site: lifecycle diagram, 12 core + 8 UI slash commands, council table, skills-by-phase grouping, and explicit separation from package CLI commands.
+- Added `prompts/lifecycle-command-index.md` as the canonical delivery lifecycle command index (parallel to `prompts/ui-command-index.md`).
+- Added Antigravity native commands `/spec`, `/test`, and `/review` (20 total runtime commands) with roster `testing` and `code-review` workflows.
+- Added "How skills work" guidance to `SKILLS.md` and updated assistant adapter docs for lifecycle command discoverability.
+
 ## 0.1.6
 
 - Added a repo-native UI improvement harness with command-style prompts, deterministic detector checklist, acceptance rubric, portable runtime skill, and focused Antigravity UI commands.

package/DOGFOOD.md

@@ -34,6 +34,23 @@ Mode: read-only audit; no downstream files were modified.
 - Assistant adapters and upgrade lifecycle still need real activation/dogfood evidence after publication.
 - Reference-led design critique still needs a real UI change dogfood pass with screenshots or equivalent visual evidence.
 
+## 2026-07-04 Publish @0.1.7 Snapshot
+
+Date: 2026-07-04
+CLI source: public npm registry `@appsforgood/next-supabase-kit@0.1.7`
+
+- Published `@appsforgood/next-supabase-kit@0.1.7` with lifecycle README commands, `/spec`/`/test`/`/review` Antigravity adapters, and `prompts/lifecycle-command-index.md`.
+- Post-publish: `npm run publish:verify` against live registry.
+
+## 2026-07-04 Publish @0.1.6 Snapshot
+
+Date: 2026-07-04
+CLI source: public npm registry `@appsforgood/next-supabase-kit@0.1.6`
+Mode: local maintainer publish (token) after `npm run release:check`, then `npm run publish:verify`.
+
+- Published `@appsforgood/next-supabase-kit@0.1.6` to public npm (local token publish with `--provenance=false`; CI releases continue to use OIDC + provenance).
+- `npm run publish:verify` passed: registry visibility confirmed, `npx` doctor ok, clean temp `init` installed current baseline assets, and `audit --json --min-readiness baseline-setup` returned 0 failures (67 pass / 4 warn / readiness `baseline-setup`).
+
 ## 2026-07-02 Publish Verification And Self-Install Snapshot
 
 Date: 2026-07-02
@@ -143,3 +160,17 @@ Policy: **gitignored local overlay + bootstrap script** (not committed to kit so
 | Rationale | Kit source stays in `templates/` and tracked maintainer docs; overlay proves Tier B activation without polluting commit history |
 
 This policy closes the gap where the kit shipped Level 5 IDE surfaces but BaseRepo maintainers operated at Level 4 day-to-day.
+
+## 2026-07-04 - Lifecycle Commands README Parity
+
+Date: 2026-07-04
+Scope: README/docs discoverability + three new Antigravity adapters
+
+| Item | Detail |
+| --- | --- |
+| README | Added **Workflow Commands** section: lifecycle diagram, 12 core + 8 UI slash commands, council table, skills-by-phase, skill activation narrative |
+| Canonical index | `prompts/lifecycle-command-index.md` for delivery commands (parallel to `prompts/ui-command-index.md`) |
+| New adapters | `/spec`, `/test`, `/review` in `antigravity/commands/` (20 total native commands) |
+| Roster | `testing` and `code-review` workflows; planning triggers for spec keywords |
+| Out of scope | `/build`, `/webperf`, `/code-simplify`, `/build auto` — documented as future orchestration |
+| Verification | `npm test`, `agent-kit adapter validate antigravity` after build |

package/README.md

@@ -20,10 +20,10 @@ It also includes a local Agent Studio workflow: project context, durable human c
 
 ## Quick Start
 
-Use this in a Next.js + Supabase project:
+Use this in a Next.js + Supabase project (latest: **v0.1.7** on npm):
 
 ```bash
-npx @appsforgood/next-supabase-kit init --stack next-supabase --setup --open
+npx @appsforgood/next-supabase-kit@0.1.7 init --stack next-supabase --setup --open
 npx @appsforgood/next-supabase-kit audit
 npx @appsforgood/next-supabase-kit audit --min-readiness baseline-setup
 ```
@@ -33,8 +33,13 @@ After install, the **Agent Office** setup view teaches agents about your project
 ```bash
 npx @appsforgood/next-supabase-kit setup --open
 npx @appsforgood/next-supabase-kit setup --status
-npx @appsforgood/next-supabase-kit init --activate antigravity
-npx @appsforgood/next-supabase-kit adapter validate antigravity
+```
+
+Promote IDE/runtime adapters after install:
+
+```bash
+npx @appsforgood/next-supabase-kit init --activate cursor --activate antigravity
+npx @appsforgood/next-supabase-kit adapter validate all
 ```
 
 The installer preserves existing docs. If a file already exists and differs from the template, the new version is written to `.agent-kit/conflicts/` for review.
@@ -78,6 +83,83 @@ npm run release:check
 
 `npm run release:check` is the main pre-release proof command. It typechecks, tests, builds, install-smokes the package, checks examples, runs dependency audit, validates SBOM generation, and dry-runs packaging.
 
+## Workflow Commands
+
+Twenty slash commands map to the delivery lifecycle. Each one activates the right council agents and skills automatically. Use them in Antigravity after `init --activate antigravity`, or as prompt prefixes in any IDE. Canonical workflow steps live in `.agent-kit/prompts/lifecycle-command-index.md` (delivery) and `.agent-kit/prompts/ui-command-index.md` (UI polish).
+
+```text
+SETUP → SPEC/PLAN → BUILD → VERIFY → REVIEW → SHIP
+```
+
+**Workflow commands** (`/setup`, `/spec`, …) are runtime adapters. **Package CLI** commands (`agent-kit init`, `audit`, `session`, …) are documented under [CLI Reference](#cli-reference) below. Cursor loads rules and skills from `init`; Antigravity gets native slash commands from `init --activate antigravity`. See `ASSISTANT_ADAPTERS.md` for per-IDE setup.
+
+### Core lifecycle commands
+
+| What you're doing | Command | Key principle | Skills / council |
+| --- | --- | --- | --- |
+| Onboard project context | `/setup` | Context before code | Agent Office, project-context |
+| Define what to build | `/spec` | Spec before code | Planner, docs-maintainer |
+| Plan how to build it | `/plan` | Council before implementation | planning-council, lead-architect |
+| Route between agents | `/handoff` | Explicit handoffs | agent-handoff-tracing |
+| Build frontend/UI | `/frontend` | Content-first design | frontend-design-lead skills |
+| Check kit readiness | `/audit` | Evidence before claims | best-practice-maturity-review |
+| Prove behavior | `/test` | Tests are proof | testing-qa, qa-engineer |
+| Review before merge | `/review` | Improve code health | qa-engineer + security-reviewer |
+| Security signoff | `/security` | RLS at the boundary | owasp-security-review, supabase-auth-rls |
+| Public copy | `/copy` | Proof before publish | marketing-copy-lead |
+| Ship release | `/ship` | Faster is safer | deployment-observability, release gates |
+| Upgrade kit/deps | `/upgrade` | Diff before overwrite | upgrade-maintenance |
+
+### UI harness commands
+
+Focused UI improvement commands. Full steps: `.agent-kit/prompts/ui-command-index.md`.
+
+| What you're doing | Command | Key principle |
+| --- | --- | --- |
+| Audit UI before release | `/ui-audit` | Detect before ship |
+| Improve visual quality | `/ui-polish` | Scope-safe polish |
+| Repair layout structure | `/layout-cleanup` | Hierarchy over decoration |
+| Fix responsive behavior | `/responsive-cleanup` | Mobile is not an afterthought |
+| WCAG 2.1 AA pass | `/accessibility-pass` | Keyboard and contrast matter |
+| Prove product distinctiveness | `/distinctiveness-pass` | Not interchangeable SaaS |
+| Critique screenshots | `/screenshot-critique` | Evidence over opinion |
+| Live browser QA loop | `/browser-qa` | Measure in the real UI |
+
+Skills activate from task keywords and roster `defaultFor` tags—for example, schema/RLS work routes to **Supabase/Postgres Engineer** with `supabase-auth-rls` and `postgres-migrations`; App Router work routes to **Next.js Engineer** with `nextjs-app-router`. See `SKILLS.md` and `.agent-kit/agent-roster.json`.
+
+### Council
+
+| Agent | Owns | Key skills |
+| --- | --- | --- |
+| Planner | Scope, roadmap, ambiguous requests | planning-council, agent-handoff-tracing |
+| Lead Architect | Core and cross-layer changes | nextjs-app-router, supabase-auth-rls, owasp-security-review |
+| Supabase/Postgres Engineer | Schema, migrations, RLS, auth | supabase-auth-rls, postgres-migrations |
+| Next.js Engineer | App Router, Server Actions, UI state | nextjs-app-router, frontend-design-system |
+| Frontend Design Lead | Design gates, visual QA, anti-generic UI | content-first-design, ui-improvement-harness |
+| Marketing Copy Lead | Positioning, conversion copy, CTAs | positioning-messaging, conversion-copywriting |
+| Security Reviewer | OWASP, auth boundaries, secrets | owasp-security-review, supabase-auth-rls |
+| QA Engineer | Tests, regression, acceptance evidence | testing-qa, visual-regression-qa |
+| Documentation Maintainer | Living docs, spec, decisions | docs-maintainer, planning-council |
+| Deployment/Observability Engineer | Release, rollback, monitoring | deployment-observability |
+
+### Skills by lifecycle phase
+
+Full skill list: `SKILLS.md`.
+
+**Define:** planning-council, agent-handoff-tracing, best-practice-maturity-review, docs-maintainer
+
+**Build:** nextjs-app-router, supabase-auth-rls, postgres-migrations, content-first-design, frontend-design-system, ui-improvement-harness, positioning-messaging
+
+**Verify:** testing-qa, visual-regression-qa, owasp-security-review, accessibility-wcag, reference-led-design-critique, frontend-product-quality-rubric
+
+**Ship:** deployment-observability, upgrade-maintenance
+
+### How skills work
+
+- **Canonical skills** live in `.agent-kit/skills/` as markdown checklists agents load for a task type.
+- **Runtime wrappers** in `runtime-skills/*/SKILL.md` expose the same content to Antigravity and other skill-directory runtimes.
+- **Roster routing** in `.agent-kit/agent-roster.json` maps `defaultFor` keywords and workflows to agents and their default skill sets—slash commands and natural-language requests both use the same contract.
+
 ## How Agentic Coders Should Use It
 
 Start with the installed files:
@@ -104,22 +186,135 @@ Default routing:
 
 For meaningful multi-agent work, record the decision, risk, next handoff, required outputs, and verification evidence in `COUNCIL.md` or `.agent-kit/council-sessions/*.json`.
 
-For local Agent Studio sessions, use:
+## CLI Reference
+
+Every command accepts `--json` for machine-readable output. Mutating commands (`init`, `update`, `add skill`, `correction apply`) also accept `--dry-run`.
+
+### Install and upgrade
+
+| Command | Purpose |
+| --- | --- |
+| `init` | Install docs, roster, skills, schemas, Cursor rules, and project context |
+| `diff` | Compare local docs against bundled templates |
+| `update` | Hash-aware upgrade: pristine docs refresh, local edits kept, conflicts for review |
+| `add skill <name>` | Copy one skill into `.agent-kit/skills/` |
+| `onboard` | Print the recommended first-run checklist |
+
+```bash
+agent-kit init --stack next-supabase --guided --dry-run
+agent-kit init --activate cursor --activate codex --no-setup
+agent-kit diff
+agent-kit update --dry-run
+agent-kit add skill ui-improvement-harness
+```
+
+`init` flags: `--stack`, `--guided`, `--dry-run`, `--activate <targets...>`, `--setup`, `--no-setup`, `--open`, `--force`, `--json`.  
+`update` flags: `--dry-run`, `--force`, `--json`.
+
+### Setup and Agent Office
+
+| Command | Purpose |
+| --- | --- |
+| `setup` | Serve local Agent Office (default) and form wizard at `http://127.0.0.1:9321` |
+| `setup --status` | Print onboarding progress as JSON |
+
+Routes: `/` or `/office` (pixel office, default), `/wizard` (form fallback).
+
+```bash
+agent-kit setup --open
+agent-kit setup --status
+```
+
+### Audit and validation
+
+| Command | Purpose |
+| --- | --- |
+| `audit` | Readiness report with pass/warn/fail findings |
+| `doctor` | Validate CLI runtime prerequisites |
+| `adapter validate [target]` | Validate IDE/runtime adapter assets (`cursor`, `claude`, `codex`, `copilot`, `antigravity`, `all`) |
+| `package validate` | Source-repo release asset validation (maintainers) |
+
+```bash
+agent-kit audit --json --min-readiness baseline-setup
+agent-kit adapter validate cursor
+agent-kit doctor --json
+```
+
+Readiness levels: `needs-setup`, `baseline-setup`, `needs-improvement`, `best-practice-candidate`. Use `--min-readiness <level>` in CI.
+
+### Project context
+
+| Command | Purpose |
+| --- | --- |
+| `context init` | Create or refresh `.agent-kit/project-context.json` |
+| `context scan` | Print inferred context without writing |
+| `context ask` | List unanswered high-value context questions |
+| `context render` | Render `.agent-kit/project-context.md` |
+| `context validate` | Validate context against schema |
+| `context show` | Print current context JSON |
 
 ```bash
-agent-kit setup
-agent-kit init --guided
+agent-kit context init
 agent-kit context validate
+```
+
+### Council sessions
+
+| Command | Purpose |
+| --- | --- |
+| `session start` | Open a council session with workflow routing |
+| `session list` / `session active` | Inspect sessions |
+| `session note` / `decision` / `handoff` | Record collaboration events |
+| `session correct` / `artifact` / `verify` / `output` | Record corrections, files, checks, required outputs |
+| `session checkpoint` | Batch-apply events from a JSON file |
+| `session render` / `session close` | Render Markdown and close the session |
+
+```bash
 agent-kit session start "Build checkout flow" --workflow frontend-change
-agent-kit session decision --agent planner --risk "Generic UI risk" "Use frontend-change workflow."
 agent-kit session handoff --from planner --to frontend-design-lead --decision "Start design intake." --risk "Generic UI risk."
-agent-kit session correct --agent frontend-design-lead --scope project "Keep UI dense and operational."
 agent-kit session verify --command "npm test" --result pass --notes "Tests passed."
 agent-kit session output "visual QA evidence" --status not-applicable --evidence "No UI change."
+agent-kit session checkpoint --file .agent-kit/checkpoint.json
 agent-kit session render
-agent-kit correction list
+agent-kit session close --status complete
+```
+
+### Corrections
+
+| Command | Purpose |
+| --- | --- |
+| `correction list` | List durable project and agent correction rules |
+| `correction add` | Add a correction (`--scope project\|agent\|session`) |
+| `correction apply` | Promote a correction into active rules |
+| `correction retire` | Retire a correction with reason |
+| `correction propose-upstream` | Flag a correction for kit promotion |
+
+```bash
+agent-kit correction add --scope project "Prefer operational density over hero-style marketing layout."
+agent-kit correction apply --id project-ui-density
+```
+
+### Studio views
+
+| Command | Purpose |
+| --- | --- |
+| `studio export` | Generate self-contained static HTML at `.agent-kit/studio/index.html` |
+| `studio serve` | Live localhost Agent Office with SSE session events (default port `9331`) |
+
+```bash
 agent-kit studio export
-agent-kit audit --json
+agent-kit studio serve --open
+```
+
+### Research (maintainers)
+
+Requires `GITHUB_TOKEN` in the environment.
+
+```bash
+agent-kit research discover --limit 100
+agent-kit research scan
+agent-kit research summarize
+agent-kit research propose-updates
 ```
 
 ## What Gets Installed
@@ -158,35 +353,6 @@ The `.agent-kit/` folder includes:
 - `design-briefs/` for SaaS, admin, marketplace, content, tool, ecommerce, portfolio/venue, education, community/social, and AI workflow surfaces.
 - `profiles/` for product-type and adjacent-stack adaptation.
 
-## Everyday Commands
-
-```bash
-agent-kit audit
-agent-kit audit --json
-agent-kit audit --min-readiness baseline-setup
-agent-kit adapter validate antigravity
-agent-kit package validate
-agent-kit context init
-agent-kit session start "Short task name"
-agent-kit session output "verification evidence" --status complete --evidence "npm test"
-agent-kit session render
-agent-kit correction list
-agent-kit studio export
-agent-kit diff
-agent-kit update
-agent-kit add skill frontend-design-system
-agent-kit doctor
-```
-
-Readiness levels from `agent-kit audit --json`:
-
-- `needs-setup`: required install or council contracts are failing.
-- `baseline-setup`: setup is valid, but starter evidence placeholders remain.
-- `needs-improvement`: no failures, but warnings remain.
-- `best-practice-candidate`: static audit found no failures or warnings.
-
-Use `agent-kit audit --min-readiness <level>` in CI when a project wants a merge or release threshold.
-
 ## AI Mechanisms
 
 Agent Kit separates the mechanisms that make AI coding repeatable:
@@ -194,7 +360,7 @@ Agent Kit separates the mechanisms that make AI coding repeatable:
 - Instructions: `AGENTS.md`, assistant adapters, and IDE-specific rule files.
 - Roster: `.agent-kit/agent-roster.json` chooses agents, workflows, and handoffs.
 - Skills: `.agent-kit/skills/` keeps specialist workflows reusable.
-- Runtime commands: Antigravity `commands/*.toml` expose `/setup`, `/audit`, `/plan`, `/handoff`, `/frontend`, focused UI improvement commands, `/security`, `/copy`, `/ship`, and `/upgrade` as native adapter entrypoints.
+- Runtime commands: Antigravity `commands/*.toml` expose `/setup`, `/spec`, `/audit`, `/plan`, `/handoff`, `/frontend`, `/test`, `/review`, focused UI improvement commands, `/security`, `/copy`, `/ship`, and `/upgrade` as native adapter entrypoints.
 - Portable skills: `runtime-skills/*/SKILL.md` wraps canonical `skills/*.md` files for runtimes that discover skill directories.
 - Model routing: `MODEL_ROUTING.md` and `.agent-kit/model-routing.json` map agents to model profiles.
 - Messaging: `MESSAGING.md` records audience, pain, outcome, proof, objections, voice, and conversion evidence for public-facing copy.
@@ -242,6 +408,7 @@ Use the upgrade flow instead of overwriting project-owned docs:
 
 ```bash
 agent-kit diff
+agent-kit update --dry-run
 agent-kit update
 agent-kit audit --min-readiness baseline-setup
 ```
@@ -291,7 +458,7 @@ Release expectations:
 - Dependency Review, CodeQL, OpenSSF Scorecard, Dependabot, SBOM validation, and SBOM attestation.
 - Post-publish verification with `npm run publish:verify`.
 
-The package is published to public npm under `@appsforgood/next-supabase-kit`. Every release must pass `npm run release:check` before publish and `npm run publish:verify` after (registry visibility, clean `npx` doctor/init/audit). Post-publish verification was last run 2026-07-02 against the live registry: doctor, init, and `audit --min-readiness baseline-setup` all passed with zero failures.
+The package is published to public npm under `@appsforgood/next-supabase-kit@0.1.7`. Every release must pass `npm run release:check` before publish and `npm run publish:verify` after (registry visibility, clean `npx` doctor/init/audit). Post-publish verification last passed **2026-07-04** against the live registry: `@0.1.7` doctor, clean init, and `audit --min-readiness baseline-setup` with zero failures.
 
 ## Repository Health
 

package/antigravity/commands/review.toml

@@ -0,0 +1,16 @@
+name = "review"
+description = "Run pre-merge code health review with QA and conditional Security Reviewer routing."
+
+prompt = """
+Run the code-review workflow.
+
+Canonical sources: TESTING.md, SECURITY.md, QUALITY_GATES.md, AGENTS.md, .agent-kit/agent-roster.json, .agent-kit/skills/testing-qa.md, .agent-kit/skills/owasp-security-review.md, and .agent-kit/prompts/lifecycle-command-index.md.
+
+Workflow:
+1. Route through QA Engineer for behavior, regression, and test evidence.
+2. Include Security Reviewer when auth, RLS, data mutation, dependency, secret, or external-call boundaries changed.
+3. Return findings by severity with concrete remediation.
+4. Distinguish this from release GO/NO-GO, which belongs to `/ship`.
+
+Required outputs: reviewed scope, findings by severity, required fixes, security notes when applicable, merge recommendation.
+"""

package/antigravity/commands/spec.toml

@@ -0,0 +1,17 @@
+name = "spec"
+description = "Define or update SPEC.md with acceptance criteria before implementation."
+
+prompt = """
+Run the spec workflow.
+
+Canonical sources: SPEC.md, AGENTS.md, AGENT_ROSTER.md, .agent-kit/agent-roster.json, .agent-kit/project-context.md, .agent-kit/corrections/project-rules.json, QUALITY_GATES.md, and .agent-kit/prompts/lifecycle-command-index.md.
+
+Workflow:
+1. Route through Planner and Documentation Maintainer.
+2. Read project context and active correction rules before drafting or updating the spec.
+3. Capture goal, user/workflow, acceptance criteria, preserved behavior, non-goals, and docs impact.
+4. Map affected layers: data, business logic, presentation, auth, deployment, and tests.
+5. Record decision, risk, and next handoff with `agent-kit session ...` when a session is active.
+
+Required outputs: spec delta or draft, acceptance criteria, preserved capabilities, non-goals, verification plan, next handoff.
+"""

package/antigravity/commands/test.toml

@@ -0,0 +1,17 @@
+name = "test"
+description = "Add or run tests and produce acceptance evidence per TESTING.md and QUALITY_GATES.md."
+
+prompt = """
+Run the test workflow.
+
+Canonical sources: TESTING.md, QUALITY_GATES.md, AGENTS.md, .agent-kit/agent-roster.json, .agent-kit/skills/testing-qa.md, and .agent-kit/prompts/lifecycle-command-index.md.
+
+Workflow:
+1. Route through QA Engineer.
+2. Name unit, regression, smoke, and visual QA gaps for the change scope.
+3. Prioritize auth and data mutation paths.
+4. Run project test commands and capture results.
+5. Record verification with `agent-kit session verify` when a session is active.
+
+Required outputs: test plan, commands run, pass/fail summary, coverage gaps, skipped-test rationale.
+"""

package/antigravity/plugin.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "name": "agent-kit-next-supabase",
   "displayName": "Agent Kit Next/Supabase",
-  "version": "0.1.3",
+  "version": "0.1.7",
   "description": "Runtime commands and portable skills for the Agent Kit Next/Supabase council workflow.",
   "homepage": "https://github.com/lukey662/agentsandskills",
   "sourceOfTruth": [
@@ -17,6 +17,7 @@
   ],
   "commands": [
     { "name": "setup", "path": "commands/setup.toml" },
+    { "name": "spec", "path": "commands/spec.toml" },
     { "name": "audit", "path": "commands/audit.toml" },
     { "name": "plan", "path": "commands/plan.toml" },
     { "name": "handoff", "path": "commands/handoff.toml" },
@@ -29,6 +30,8 @@
     { "name": "distinctiveness-pass", "path": "commands/distinctiveness-pass.toml" },
     { "name": "screenshot-critique", "path": "commands/screenshot-critique.toml" },
     { "name": "browser-qa", "path": "commands/browser-qa.toml" },
+    { "name": "test", "path": "commands/test.toml" },
+    { "name": "review", "path": "commands/review.toml" },
     { "name": "security", "path": "commands/security.toml" },
     { "name": "copy", "path": "commands/copy.toml" },
     { "name": "ship", "path": "commands/ship.toml" },

package/assistant-adapters/antigravity.md

@@ -40,15 +40,22 @@ If the `agy` CLI is available, teams may additionally run its native plugin vali
 Commands expose short runtime entrypoints:
 
 - `/setup`
+- `/spec`
 - `/audit`
 - `/plan`
 - `/handoff`
 - `/frontend`
+- `/test`
+- `/review`
 - `/security`
 - `/copy`
 - `/ship`
 - `/upgrade`
 
+UI harness commands (`/ui-audit`, `/ui-polish`, `/layout-cleanup`, `/responsive-cleanup`, `/accessibility-pass`, `/distinctiveness-pass`, `/screenshot-critique`, `/browser-qa`) are documented in `.agent-kit/prompts/ui-command-index.md`.
+
+Delivery lifecycle commands are documented in `.agent-kit/prompts/lifecycle-command-index.md`.
+
 Each command must load project context and correction rules when present, select the appropriate roster workflow, record required outputs with `agent-kit session output`, and render sessions when evidence changes.
 
 ## Security

package/dist/index.js

@@ -150,7 +150,7 @@ import { join as join12, normalize } from "path";
 
 // src/config/defaults.ts
 var PACKAGE_NAME = "@appsforgood/next-supabase-kit";
-var PACKAGE_VERSION = "0.1.6";
+var PACKAGE_VERSION = "0.1.7";
 var DEFAULT_CONFIG = {
   stack: "next-supabase",
   projectType: "saas",
@@ -3070,6 +3070,7 @@ function createAuditReport(cwd) {
 // src/install/adapter-validate.ts
 var REQUIRED_COMMANDS = [
   "setup",
+  "spec",
   "audit",
   "plan",
   "handoff",
@@ -3082,6 +3083,8 @@ var REQUIRED_COMMANDS = [
   "distinctiveness-pass",
   "screenshot-critique",
   "browser-qa",
+  "test",
+  "review",
   "security",
   "copy",
   "ship",