@appsforgood/next-supabase-kit 0.3.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/README.md +22 -555
- package/UPGRADE.md +11 -77
- package/USER_GUIDE.md +181 -0
- package/agents/app-engineer/agent.md +32 -0
- package/agents/copy/agent.md +27 -0
- package/agents/design/agent.md +27 -0
- package/agents/optional/deploy/agent.md +12 -0
- package/agents/optional/docs/agent.md +12 -0
- package/agents/optional/lead-architect/agent.md +12 -0
- package/agents/optional/research/agent.md +12 -0
- package/agents/planner/agent.md +29 -0
- package/agents/qa/agent.md +35 -0
- package/agents/security/agent.md +28 -0
- package/assistant-adapters/cursor-agent-kit.mdc +5 -26
- package/catalog.json +20 -0
- package/dist/index.js +892 -8251
- package/dist/index.js.map +1 -1
- package/examples/next-supabase-installed/.agent-kit/config.json +22 -26
- package/examples/next-supabase-installed/.agent-kit/manifest.json +78 -222
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/browser-qa.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/copy.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/frontend.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/plan.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/security.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/ship.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/commands/test.toml +6 -0
- package/examples/next-supabase-installed/.antigravity/agent-kit/plugin.json +12 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/accessibility-wcag/SKILL.md +26 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/browser-qa/SKILL.md +67 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/frontend-design/SKILL.md +26 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/nextjs-app-router/SKILL.md +23 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/owasp-security-review/SKILL.md +23 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/planning/SKILL.md +25 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/postgres-migrations/SKILL.md +21 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/product-copy/SKILL.md +22 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/ship/SKILL.md +22 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/supabase-auth-rls/SKILL.md +23 -0
- package/examples/next-supabase-installed/.antigravity/runtime-skills/testing-qa/SKILL.md +27 -0
- package/examples/next-supabase-installed/.claude/agents/app-engineer.md +32 -0
- package/examples/next-supabase-installed/.claude/agents/copy.md +27 -0
- package/examples/next-supabase-installed/.claude/agents/design.md +27 -0
- package/examples/next-supabase-installed/.claude/agents/planner.md +29 -0
- package/examples/next-supabase-installed/.claude/agents/qa.md +35 -0
- package/examples/next-supabase-installed/.claude/agents/security.md +28 -0
- package/examples/next-supabase-installed/.codex/agents/app-engineer.toml +39 -0
- package/examples/next-supabase-installed/.codex/agents/copy.toml +34 -0
- package/examples/next-supabase-installed/.codex/agents/design.toml +34 -0
- package/examples/next-supabase-installed/.codex/agents/planner.toml +36 -0
- package/examples/next-supabase-installed/.codex/agents/qa.toml +42 -0
- package/examples/next-supabase-installed/.codex/agents/security.toml +35 -0
- package/examples/next-supabase-installed/.cursor/agents/app-engineer.md +32 -0
- package/examples/next-supabase-installed/.cursor/agents/copy.md +27 -0
- package/examples/next-supabase-installed/.cursor/agents/design.md +27 -0
- package/examples/next-supabase-installed/.cursor/agents/planner.md +29 -0
- package/examples/next-supabase-installed/.cursor/agents/qa.md +35 -0
- package/examples/next-supabase-installed/.cursor/agents/security.md +28 -0
- package/examples/next-supabase-installed/.cursor/rules/cursor-agent-kit.mdc +12 -0
- package/examples/next-supabase-installed/.cursor/skills/accessibility-wcag/SKILL.md +26 -0
- package/examples/next-supabase-installed/.cursor/skills/browser-qa/SKILL.md +67 -0
- package/examples/next-supabase-installed/.cursor/skills/frontend-design/SKILL.md +26 -0
- package/examples/next-supabase-installed/.cursor/skills/nextjs-app-router/SKILL.md +23 -0
- package/examples/next-supabase-installed/.cursor/skills/owasp-security-review/SKILL.md +23 -0
- package/examples/next-supabase-installed/.cursor/skills/planning/SKILL.md +25 -0
- package/examples/next-supabase-installed/.cursor/skills/postgres-migrations/SKILL.md +21 -0
- package/examples/next-supabase-installed/.cursor/skills/product-copy/SKILL.md +22 -0
- package/examples/next-supabase-installed/.cursor/skills/ship/SKILL.md +22 -0
- package/examples/next-supabase-installed/.cursor/skills/supabase-auth-rls/SKILL.md +23 -0
- package/examples/next-supabase-installed/.cursor/skills/testing-qa/SKILL.md +27 -0
- package/examples/next-supabase-installed/.github/copilot-instructions.md +23 -0
- package/examples/next-supabase-installed/AGENTS.md +30 -0
- package/examples/next-supabase-installed/CLAUDE.md +7 -0
- package/examples/next-supabase-installed/README.md +2 -14
- package/examples/next-supabase-installed/USER_GUIDE.md +181 -0
- package/examples/next-supabase-installed/skills/accessibility-wcag/SKILL.md +26 -0
- package/examples/next-supabase-installed/skills/browser-qa/SKILL.md +67 -0
- package/examples/next-supabase-installed/skills/frontend-design/SKILL.md +26 -0
- package/examples/next-supabase-installed/skills/nextjs-app-router/SKILL.md +23 -0
- package/examples/next-supabase-installed/skills/owasp-security-review/SKILL.md +23 -0
- package/examples/next-supabase-installed/skills/planning/SKILL.md +25 -0
- package/examples/next-supabase-installed/skills/postgres-migrations/SKILL.md +21 -0
- package/examples/next-supabase-installed/skills/product-copy/SKILL.md +22 -0
- package/examples/next-supabase-installed/skills/ship/SKILL.md +22 -0
- package/examples/next-supabase-installed/skills/supabase-auth-rls/SKILL.md +23 -0
- package/examples/next-supabase-installed/skills/testing-qa/SKILL.md +27 -0
- package/examples/next-supabase-installed/tree.txt +57 -42
- package/package.json +15 -43
- package/research/agent-skill-gap-report.md +128 -0
- package/skills/accessibility-wcag/SKILL.md +26 -0
- package/skills/browser-qa/SKILL.md +67 -0
- package/skills/frontend-design/SKILL.md +26 -0
- package/skills/nextjs-app-router/SKILL.md +23 -0
- package/skills/optional/debug/SKILL.md +11 -0
- package/skills/optional/docs/SKILL.md +10 -0
- package/skills/optional/ui-polish/SKILL.md +10 -0
- package/skills/optional/upgrade/SKILL.md +10 -0
- package/skills/owasp-security-review/SKILL.md +23 -0
- package/skills/planning/SKILL.md +25 -0
- package/skills/postgres-migrations/SKILL.md +21 -0
- package/skills/product-copy/SKILL.md +22 -0
- package/skills/ship/SKILL.md +22 -0
- package/skills/supabase-auth-rls/SKILL.md +23 -0
- package/skills/testing-qa/SKILL.md +27 -0
- package/templates/next-supabase/AGENTS.md +19 -129
- package/templates/next-supabase/CLAUDE.md +4 -36
- package/BEST_PRACTICE_EVIDENCE.md +0 -45
- package/DOGFOOD.md +0 -201
- package/GOVERNANCE.md +0 -45
- package/LOOP_CODING.md +0 -107
- package/MAINTAINER_RELEASE.md +0 -100
- package/REPOSITORY_SETTINGS.md +0 -83
- package/RESEARCH_CITATION_POLICY.md +0 -26
- package/SUPPLY_CHAIN.md +0 -57
- package/agents/deployment-observability-engineer.md +0 -13
- package/agents/docs-maintainer.md +0 -17
- package/agents/frontend-design-lead.md +0 -22
- package/agents/lead-architect.md +0 -25
- package/agents/marketing-copy-lead.md +0 -20
- package/agents/nextjs-engineer.md +0 -20
- package/agents/planner.md +0 -20
- package/agents/qa-engineer.md +0 -19
- package/agents/research-analyst.md +0 -13
- package/agents/security-reviewer.md +0 -16
- package/agents/supabase-postgres-engineer.md +0 -19
- package/antigravity/commands/accessibility-pass.toml +0 -16
- package/antigravity/commands/audit.toml +0 -16
- package/antigravity/commands/browser-qa.toml +0 -18
- package/antigravity/commands/copy.toml +0 -16
- package/antigravity/commands/distinctiveness-pass.toml +0 -16
- package/antigravity/commands/frontend.toml +0 -18
- package/antigravity/commands/handoff.toml +0 -16
- package/antigravity/commands/layout-cleanup.toml +0 -16
- package/antigravity/commands/plan.toml +0 -18
- package/antigravity/commands/responsive-cleanup.toml +0 -16
- package/antigravity/commands/review.toml +0 -16
- package/antigravity/commands/screenshot-critique.toml +0 -16
- package/antigravity/commands/security.toml +0 -16
- package/antigravity/commands/setup.toml +0 -16
- package/antigravity/commands/ship.toml +0 -17
- package/antigravity/commands/spec.toml +0 -17
- package/antigravity/commands/test.toml +0 -17
- package/antigravity/commands/ui-audit.toml +0 -17
- package/antigravity/commands/ui-polish.toml +0 -17
- package/antigravity/commands/upgrade.toml +0 -17
- package/antigravity/plugin.json +0 -70
- package/assistant-adapters/antigravity.md +0 -65
- package/assistant-adapters/claude-code-subagents.md +0 -38
- package/assistant-adapters/codex-agents.md +0 -53
- package/assistant-adapters/cursor-frontend.mdc +0 -16
- package/assistant-adapters/cursor-planner.mdc +0 -14
- package/assistant-adapters/cursor-security.mdc +0 -18
- package/assistant-adapters/github-copilot-instructions.md +0 -35
- package/assistant-adapters/github-next-supabase.instructions.md +0 -28
- package/assistant-adapters/model-selection/claude-code-subagents-with-models.md +0 -32
- package/assistant-adapters/model-selection/codex-config.example.toml +0 -32
- package/assistant-adapters/model-selection/cursor-model-selection.mdc +0 -24
- package/assistant-adapters/model-selection/github-copilot-model-selection.md +0 -20
- package/assistant-adapters/orchestrator-runtime.md +0 -39
- package/checklists/accessibility.md +0 -12
- package/checklists/agent-council.md +0 -13
- package/checklists/brand-content.md +0 -15
- package/checklists/deployment.md +0 -10
- package/checklists/design-critique.md +0 -13
- package/checklists/frontend-distinctiveness.md +0 -12
- package/checklists/frontend-product-quality.md +0 -13
- package/checklists/frontend-quality.md +0 -21
- package/checklists/marketing-copy.md +0 -11
- package/checklists/owasp.md +0 -12
- package/checklists/rls.md +0 -10
- package/checklists/testing.md +0 -12
- package/checklists/ui-acceptance-rubric.md +0 -58
- package/checklists/ui-detectors.md +0 -81
- package/checklists/upgrade.md +0 -13
- package/checklists/visual-regression.md +0 -11
- package/design-adapters/claude-design.prompt.md +0 -27
- package/design-adapters/figma.prompt.md +0 -18
- package/design-adapters/google-stitch.prompt.md +0 -36
- package/design-adapters/human-designer-brief.prompt.md +0 -36
- package/design-briefs/admin-dashboard.md +0 -21
- package/design-briefs/ai-workflow-product.md +0 -25
- package/design-briefs/community-social.md +0 -26
- package/design-briefs/content-app.md +0 -21
- package/design-briefs/ecommerce.md +0 -25
- package/design-briefs/education-course.md +0 -25
- package/design-briefs/marketplace.md +0 -21
- package/design-briefs/portfolio-venue.md +0 -25
- package/design-briefs/saas.md +0 -21
- package/design-briefs/tool.md +0 -21
- package/examples/next-supabase-installed/.agent-kit/agent-roster.json +0 -267
- package/examples/next-supabase-installed/.agent-kit/model-routing.json +0 -171
- package/examples/next-supabase-installed/.agent-kit/overrides.json +0 -3
- package/examples/next-supabase-installed/audit-output.json +0 -405
- package/model-routing/default-model-routing.json +0 -171
- package/profiles/admin-app.md +0 -17
- package/profiles/content-app.md +0 -17
- package/profiles/marketplace.md +0 -17
- package/profiles/saas.md +0 -17
- package/profiles/stack-next-firebase.md +0 -25
- package/profiles/stack-next-postgres.md +0 -24
- package/profiles/stack-remix-supabase.md +0 -24
- package/prompts/audit-project-setup.md +0 -28
- package/prompts/brand-content-intake.md +0 -17
- package/prompts/copy-review.md +0 -15
- package/prompts/council-session-review.md +0 -17
- package/prompts/creative-direction-matrix.md +0 -22
- package/prompts/design-critique-gate.md +0 -28
- package/prompts/docs-update.md +0 -16
- package/prompts/frontend-design-review.md +0 -35
- package/prompts/frontend-distinctiveness-benchmark.md +0 -32
- package/prompts/frontend-product-quality-scorecard.md +0 -35
- package/prompts/implement-feature.md +0 -14
- package/prompts/lifecycle-command-index.md +0 -180
- package/prompts/migration-review.md +0 -14
- package/prompts/screenshot-review.md +0 -28
- package/prompts/security-review.md +0 -17
- package/prompts/ui-command-index.md +0 -124
- package/prompts/upgrade-review.md +0 -18
- package/prompts/visual-qa-plan.md +0 -16
- package/research/proposed-updates.md +0 -70
- package/research/scan-config.json +0 -261
- package/research/scan-plan.md +0 -24
- package/research/summaries/.gitkeep +0 -1
- package/research/summaries/agent-workflow-patterns.md +0 -37
- package/research/summaries/agentic-engineering-maturity-levels.md +0 -54
- package/research/summaries/creative-design-patterns.md +0 -38
- package/research/summaries/design-critique-patterns.md +0 -34
- package/research/summaries/docs-and-agent-patterns.md +0 -64
- package/research/summaries/dogfood-adoption-patterns.md +0 -33
- package/research/summaries/frontend-design-patterns.md +0 -64
- package/research/summaries/frontend-distinctiveness-benchmark-patterns.md +0 -38
- package/research/summaries/frontend-product-quality-rubric-patterns.md +0 -37
- package/research/summaries/maturity-model-patterns.md +0 -29
- package/research/summaries/nextjs-patterns.md +0 -65
- package/research/summaries/repo-health-patterns.md +0 -41
- package/research/summaries/scan-overview.md +0 -46
- package/research/summaries/security-patterns.md +0 -64
- package/research/summaries/supabase-rls-patterns.md +0 -54
- package/research/summaries/supply-chain-patterns.md +0 -38
- package/research/summaries/testing-patterns.md +0 -63
- package/research/summaries/upgrade-lifecycle-patterns.md +0 -26
- package/research/summaries/visual-qa-patterns.md +0 -39
- package/rosters/next-supabase-default-council.json +0 -267
- package/runtime-skills/README.md +0 -7
- package/runtime-skills/accessibility-wcag/SKILL.md +0 -8
- package/runtime-skills/agent-handoff-tracing/SKILL.md +0 -8
- package/runtime-skills/best-practice-maturity-review/SKILL.md +0 -8
- package/runtime-skills/content-first-design/SKILL.md +0 -8
- package/runtime-skills/conversion-copywriting/SKILL.md +0 -8
- package/runtime-skills/deployment-observability/SKILL.md +0 -8
- package/runtime-skills/docs-maintainer/SKILL.md +0 -8
- package/runtime-skills/frontend-design-system/SKILL.md +0 -8
- package/runtime-skills/frontend-distinctiveness-benchmark/SKILL.md +0 -8
- package/runtime-skills/frontend-product-quality-rubric/SKILL.md +0 -8
- package/runtime-skills/landing-page-copy/SKILL.md +0 -8
- package/runtime-skills/nextjs-app-router/SKILL.md +0 -8
- package/runtime-skills/onboarding-empty-state-copy/SKILL.md +0 -8
- package/runtime-skills/owasp-security-review/SKILL.md +0 -8
- package/runtime-skills/planning-council/SKILL.md +0 -8
- package/runtime-skills/positioning-messaging/SKILL.md +0 -8
- package/runtime-skills/postgres-migrations/SKILL.md +0 -8
- package/runtime-skills/product-voice-tone/SKILL.md +0 -8
- package/runtime-skills/reference-led-design-critique/SKILL.md +0 -8
- package/runtime-skills/supabase-auth-rls/SKILL.md +0 -8
- package/runtime-skills/testing-qa/SKILL.md +0 -8
- package/runtime-skills/ui-improvement-harness/SKILL.md +0 -12
- package/runtime-skills/upgrade-maintenance/SKILL.md +0 -8
- package/runtime-skills/visual-regression-qa/SKILL.md +0 -8
- package/schemas/agent-roster.schema.json +0 -54
- package/schemas/agentic-level.schema.json +0 -47
- package/schemas/audit-report-v2.schema.json +0 -71
- package/schemas/audit-report.schema.json +0 -50
- package/schemas/correction-rules.schema.json +0 -32
- package/schemas/council-session.schema.json +0 -65
- package/schemas/model-routing.schema.json +0 -72
- package/schemas/onboarding-state.schema.json +0 -36
- package/schemas/orchestrator.schema.json +0 -167
- package/schemas/project-context.schema.json +0 -94
- package/schemas/runtime-event.schema.json +0 -66
- package/schemas/runtime-run.schema.json +0 -58
- package/schemas/session-event.schema.json +0 -48
- package/schemas/studio-session.schema.json +0 -48
- package/skills/accessibility-wcag.md +0 -15
- package/skills/agent-handoff-tracing.md +0 -44
- package/skills/best-practice-maturity-review.md +0 -26
- package/skills/content-first-design.md +0 -50
- package/skills/conversion-copywriting.md +0 -38
- package/skills/deployment-observability.md +0 -14
- package/skills/docs-maintainer.md +0 -19
- package/skills/frontend-design-system.md +0 -68
- package/skills/frontend-distinctiveness-benchmark.md +0 -40
- package/skills/frontend-product-quality-rubric.md +0 -59
- package/skills/landing-page-copy.md +0 -29
- package/skills/nextjs-app-router.md +0 -18
- package/skills/onboarding-empty-state-copy.md +0 -37
- package/skills/owasp-security-review.md +0 -19
- package/skills/planning-council.md +0 -21
- package/skills/positioning-messaging.md +0 -42
- package/skills/postgres-migrations.md +0 -14
- package/skills/product-voice-tone.md +0 -35
- package/skills/reference-led-design-critique.md +0 -48
- package/skills/supabase-auth-rls.md +0 -20
- package/skills/testing-qa.md +0 -15
- package/skills/ui-improvement-harness.md +0 -96
- package/skills/upgrade-maintenance.md +0 -32
- package/skills/visual-regression-qa.md +0 -42
- package/templates/next-supabase/.agent-kit/orchestrator.json +0 -48
- package/templates/next-supabase/.agent-kit/runtime/gitignore.template +0 -2
- package/templates/next-supabase/.github/workflows/agent-kit-audit.yml +0 -34
- package/templates/next-supabase/AGENT_ROSTER.md +0 -101
- package/templates/next-supabase/ASSISTANT_ADAPTERS.md +0 -146
- package/templates/next-supabase/COUNCIL.md +0 -54
- package/templates/next-supabase/DECISIONS.md +0 -87
- package/templates/next-supabase/DEPLOYMENT.md +0 -51
- package/templates/next-supabase/DESIGN.md +0 -180
- package/templates/next-supabase/DOCS.md +0 -80
- package/templates/next-supabase/LOOP_CODING.md +0 -98
- package/templates/next-supabase/MESSAGING.md +0 -81
- package/templates/next-supabase/MODEL_ROUTING.md +0 -130
- package/templates/next-supabase/QUALITY_GATES.md +0 -98
- package/templates/next-supabase/SKILLS.md +0 -235
- package/templates/next-supabase/SPEC.md +0 -122
- package/templates/next-supabase/STYLE_GUIDE.md +0 -121
- package/templates/next-supabase/TESTING.md +0 -107
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
description: Agent Kit model-selection reminder for Cursor.
|
|
3
|
-
globs:
|
|
4
|
-
- "**/*"
|
|
5
|
-
alwaysApply: true
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# Agent Kit Model Selection
|
|
9
|
-
|
|
10
|
-
Use `MODEL_ROUTING.md` and `.agent-kit/model-routing.json` when choosing a model for the active task.
|
|
11
|
-
|
|
12
|
-
## June 2026 Recommendations
|
|
13
|
-
|
|
14
|
-
<!--
|
|
15
|
-
Cursor model selection is controlled by the user, workspace, model picker, or team policy.
|
|
16
|
-
This rule advises routing; it should not be treated as hard enforcement.
|
|
17
|
-
-->
|
|
18
|
-
|
|
19
|
-
- Use a deep reasoning model for Lead Architect, Security Reviewer, Supabase/Postgres Engineer, migrations, RLS, auth, dependencies, release risk, and cross-layer decisions.
|
|
20
|
-
- Use a strong coding model with large context for Next.js Engineer work across App Router, Server Actions, Route Handlers, forms, caching, and UI state.
|
|
21
|
-
- Use a creative/vision-capable model for Frontend Design Lead work, especially screenshot critique, references, and distinctiveness benchmarking.
|
|
22
|
-
- Use a fast or balanced model for low-risk docs, deployment notes, and repeated QA summaries.
|
|
23
|
-
|
|
24
|
-
Record the selected Cursor model, rule evidence, date, owner, and limitations in `ASSISTANT_ADAPTERS.md`.
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
# GitHub Copilot Model Selection
|
|
2
|
-
|
|
3
|
-
Repository instructions can advise model choice, but model selection remains controlled by the Copilot surface, organization policy, and the user's active model picker.
|
|
4
|
-
|
|
5
|
-
Use `MODEL_ROUTING.md` and `.agent-kit/model-routing.json` before starting agentic work.
|
|
6
|
-
|
|
7
|
-
## June 2026 Recommendations
|
|
8
|
-
|
|
9
|
-
<!--
|
|
10
|
-
Select the strongest available Copilot model for architecture, security, Supabase RLS, migrations, release risk, and ambiguous planning.
|
|
11
|
-
Select a faster available model for docs-only cleanup, narrow test triage, or low-risk repeated checks.
|
|
12
|
-
These comments are dated setup guidance, not a guarantee that Copilot will enforce model choice from repository files.
|
|
13
|
-
-->
|
|
14
|
-
|
|
15
|
-
## Evidence To Record
|
|
16
|
-
|
|
17
|
-
- Copilot surface used: chat, edit, coding agent, PR review, or other.
|
|
18
|
-
- Active model or organization policy, if visible.
|
|
19
|
-
- Instruction file loaded: `.github/copilot-instructions.md` or `.github/instructions/*.instructions.md`.
|
|
20
|
-
- Date, owner, and known limitations.
|
|
@@ -1,39 +0,0 @@
|
|
|
1
|
-
# Orchestrator Runtime Adapter
|
|
2
|
-
|
|
3
|
-
`@appsforgood/agent-kit-runtime` is the optional executable layer for the Agent Kit council. IDE rules, subagents, slash commands, and model-routing documents remain instruction adapters; they do not imply that a checkpointed graph ran.
|
|
4
|
-
|
|
5
|
-
## Activation
|
|
6
|
-
|
|
7
|
-
```bash
|
|
8
|
-
npm install --save-dev @appsforgood/agent-kit-runtime
|
|
9
|
-
agent-kit orchestrate validate
|
|
10
|
-
agent-kit orchestrate plan "Describe the goal"
|
|
11
|
-
```
|
|
12
|
-
|
|
13
|
-
Edit `.agent-kit/orchestrator.json`, add provider credential references such as `env:OPENAI_API_KEY` or `keychain:team-openai`, configure at least one deterministic model alias, and set `enabled` to `true` only after validation passes.
|
|
14
|
-
|
|
15
|
-
## Execution Contract
|
|
16
|
-
|
|
17
|
-
- Roster workflows compile to explicit, bounded LangGraph nodes.
|
|
18
|
-
- Runs pause at plan, network, worktree-write, host-execution, and final-commit gates when applicable.
|
|
19
|
-
- Mutations occur in an isolated Git worktree. Agent Kit may create one scoped commit after approval; it never merges, pushes, or opens a pull request.
|
|
20
|
-
- Docker is the default mutation command boundary. Network access is off unless configured and approved.
|
|
21
|
-
- Provider and remote MCP requests reject redirects, embedded credentials, non-allowlisted hosts, and private or special-use addresses unless private access is explicitly configured.
|
|
22
|
-
- Stdio MCP servers execute on the host only when both `allowHostExecution` and `sandbox.allowHostMutations` are enabled and the host gate is approved.
|
|
23
|
-
- Run checkpoints live in `.agent-kit/runtime/runtime.sqlite`; redacted run records and JSONL evidence live under `.agent-kit/runtime/runs/` and are ignored by Git.
|
|
24
|
-
|
|
25
|
-
## Cursor Executor
|
|
26
|
-
|
|
27
|
-
Set an agent route to `cursor` only when Cursor CLI execution is intentionally required. The runtime invokes argv directly inside the isolated worktree, with no shell, a bounded timeout, minimal inherited environment, and an explicit host-mutation approval. Provider-backed model agents remain the default.
|
|
28
|
-
|
|
29
|
-
## Verification
|
|
30
|
-
|
|
31
|
-
Record:
|
|
32
|
-
|
|
33
|
-
- `agent-kit orchestrate validate --json`
|
|
34
|
-
- the offline `orchestrate plan` output
|
|
35
|
-
- provider and MCP probe results, without credentials
|
|
36
|
-
- run ID, approval decisions, scoped commit, and exported evidence
|
|
37
|
-
- Docker image ID and any private-network or host-execution exception rationale
|
|
38
|
-
|
|
39
|
-
Use `agent-kit studio serve` to inspect and decide paused runs in the local Studio UI.
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
# Accessibility Checklist
|
|
2
|
-
|
|
3
|
-
- Semantic HTML used first.
|
|
4
|
-
- ARIA used only when needed.
|
|
5
|
-
- Keyboard navigation works.
|
|
6
|
-
- Focus states are visible.
|
|
7
|
-
- Color contrast meets WCAG 2.1 AA.
|
|
8
|
-
- Forms have labels and error messages.
|
|
9
|
-
- Custom controls expose state.
|
|
10
|
-
- Content does not rely only on color or motion.
|
|
11
|
-
- Critical flows have keyboard-only smoke coverage.
|
|
12
|
-
- Accessibility tooling or manual checks are documented in `TESTING.md`.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Agent Council Checklist
|
|
2
|
-
|
|
3
|
-
- `.agent-kit/agent-roster.json` exists and matches the expected default council contract.
|
|
4
|
-
- `.agent-kit/schemas/agent-roster.schema.json` exists for roster validation.
|
|
5
|
-
- `.agent-kit/schemas/council-session.schema.json` exists for structured session evidence.
|
|
6
|
-
- Planner starts planning, roadmap, ambiguous, and cross-layer requests.
|
|
7
|
-
- Lead Architect reviews core changes before implementation.
|
|
8
|
-
- Security Reviewer joins auth, data mutation, dependency, external-call, secret, and release-risk work.
|
|
9
|
-
- Frontend Design Lead joins user-facing frontend work with creative direction and visual QA evidence.
|
|
10
|
-
- QA Engineer verifies behavior changes before completion.
|
|
11
|
-
- Documentation Maintainer updates living docs when behavior, architecture, release, or standards change.
|
|
12
|
-
- Every handoff records decision, risk, next handoff, and evidence.
|
|
13
|
-
- Missing required outputs are marked missing or partial rather than hidden.
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
# Brand And Content Checklist
|
|
2
|
-
|
|
3
|
-
- Product category is named.
|
|
4
|
-
- Primary audience and user needs are written in user language.
|
|
5
|
-
- Real content inventory exists: nouns, labels, records, data fields, examples, and assets.
|
|
6
|
-
- First screen is tied to a real task, object, or workflow.
|
|
7
|
-
- Brand personality has 3-5 visible traits.
|
|
8
|
-
- Existing logo, colors, fonts, platform conventions, and accessibility constraints are captured.
|
|
9
|
-
- Category references are used for learning only; no source is copied.
|
|
10
|
-
- Non-goals name visual tropes, copy patterns, palettes, or layouts to avoid.
|
|
11
|
-
- Anti-references are explicit enough to prevent generic AI-site defaults.
|
|
12
|
-
- Source-safety notes name brand marks, layouts, copy, or assets that must not be copied.
|
|
13
|
-
- At least two creative directions were considered before implementation.
|
|
14
|
-
- Chosen direction affects tokens, layout, copy, imagery, and interaction tone.
|
|
15
|
-
- Missing content or assets are documented instead of hidden behind generic placeholders.
|
package/checklists/deployment.md
DELETED
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
# Deployment Checklist
|
|
2
|
-
|
|
3
|
-
- Required env vars are present.
|
|
4
|
-
- Server-only secrets are not exposed.
|
|
5
|
-
- Migrations are applied in the right order.
|
|
6
|
-
- RLS and Storage policies are verified.
|
|
7
|
-
- Build passes.
|
|
8
|
-
- Smoke tests pass.
|
|
9
|
-
- Logs and monitoring are checked.
|
|
10
|
-
- Rollback steps are documented.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Design Critique Checklist
|
|
2
|
-
|
|
3
|
-
- `DESIGN.md` includes a reference set and anti-references.
|
|
4
|
-
- References are used for learning, not copying.
|
|
5
|
-
- Source-safety notes identify brand marks, layouts, copy, or assets that must not be copied.
|
|
6
|
-
- The first screen shows the product's real task, object, content, or workflow.
|
|
7
|
-
- The chosen creative direction is visible in typography, layout, density, color, imagery, copy, and interaction tone.
|
|
8
|
-
- Distinctiveness verdict is recorded as weak, adequate, or strong.
|
|
9
|
-
- Frontend product-quality scorecard records user/task fit, content specificity, visual identity, information architecture, component states, accessibility and interaction, and source safety.
|
|
10
|
-
- Generic AI-site risks are explicitly accepted, changed, or rejected.
|
|
11
|
-
- Desktop and mobile screenshots or previews were reviewed.
|
|
12
|
-
- Important empty, loading, error, disabled, success, and permission states were reviewed.
|
|
13
|
-
- Accessibility and visual QA evidence match the risk of the UI change.
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
# Frontend Distinctiveness Checklist
|
|
2
|
-
|
|
3
|
-
- First viewport shows the real product object, task, workflow, content, or decision.
|
|
4
|
-
- Product nouns, labels, data shapes, records, actions, and edge cases are visible or documented.
|
|
5
|
-
- Reference benchmark includes 3-5 references with lessons to learn.
|
|
6
|
-
- Anti-references include 2-3 category tropes, palettes, layouts, copy patterns, or interaction habits to avoid.
|
|
7
|
-
- Source-safety notes explain what must not be copied from references.
|
|
8
|
-
- At least two creative directions were compared before implementation.
|
|
9
|
-
- Asset provenance is recorded for real, generated, licensed, and placeholder visuals.
|
|
10
|
-
- Loading, empty, error, disabled, success, permission, and focus states are covered where relevant.
|
|
11
|
-
- Desktop and mobile evidence exists, plus visual QA for high-risk screens.
|
|
12
|
-
- A design cannot pass if it would still work unchanged for another product in the same category.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Frontend Product Quality Checklist
|
|
2
|
-
|
|
3
|
-
- User/task fit score is at least `1`, and preferably `2`.
|
|
4
|
-
- Content specificity score is at least `1`, and preferably `2`.
|
|
5
|
-
- Visual identity score explains why the result fits this product rather than a generic category.
|
|
6
|
-
- Information architecture score covers primary and secondary workflows.
|
|
7
|
-
- Component state score covers important loading, empty, error, disabled, success, permission, and focus states.
|
|
8
|
-
- Accessibility and interaction score covers keyboard path, focus, contrast, labels, reduced motion, and error feedback.
|
|
9
|
-
- Source-safety score confirms references were learned from, not copied.
|
|
10
|
-
- Total score is at least `10/14` before acceptance.
|
|
11
|
-
- Best-practice claim requires at least `12/14`, no critical zeroes, desktop/mobile screenshot review, and visual QA evidence.
|
|
12
|
-
- Best-practice claim also requires frontend distinctiveness benchmark evidence: first-screen proof, content fingerprint, reference benchmark, asset provenance, state proof, and visual QA proof.
|
|
13
|
-
- `DESIGN.md` records the scorecard verdict and required changes.
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
# Frontend Quality Checklist
|
|
2
|
-
|
|
3
|
-
- First screen shows the actual product or task.
|
|
4
|
-
- `DESIGN.md` includes product category, audience, user needs, content inventory, brand constraints, and creative direction.
|
|
5
|
-
- Brand/content intake was completed before visual implementation.
|
|
6
|
-
- At least two creative directions were considered.
|
|
7
|
-
- Reference set, anti-references, and source-safety notes are recorded.
|
|
8
|
-
- Design critique verdict is adequate or strong before release.
|
|
9
|
-
- Frontend product-quality scorecard is at least adequate before release.
|
|
10
|
-
- Visual direction fits the domain.
|
|
11
|
-
- No generic AI-site gradient/card defaults.
|
|
12
|
-
- No accent-border cards, glow rails, neon strokes, gradient borders, oversized glass panels, ornamental icon walls, fake dashboard proof, decorative credibility badges, vague SaaS sayings, or layout filler sections unless documented as a brand-system exception.
|
|
13
|
-
- Navigation is clear and predictable.
|
|
14
|
-
- Loading, empty, error, disabled, and success states exist.
|
|
15
|
-
- Mobile layout is designed, not incidental.
|
|
16
|
-
- Component spacing, type, and density are consistent.
|
|
17
|
-
- Forms are accessible and provide useful feedback.
|
|
18
|
-
- Design tokens cover color, typography, spacing, radius, motion, depth, state color, and focus treatment.
|
|
19
|
-
- A product-specific design brief has been used for SaaS, admin, marketplace, content, tool, ecommerce, portfolio/venue, education, community/social, or AI workflow surfaces.
|
|
20
|
-
- Desktop and mobile screenshots have been reviewed with `prompts/screenshot-review.md`.
|
|
21
|
-
- Visual QA tier is documented for high-risk UI changes.
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
# Marketing And Copy Checklist
|
|
2
|
-
|
|
3
|
-
- `MESSAGING.md` identifies audience, pain, desired outcome, alternatives, differentiator, proof, objections, voice, and conversion goal.
|
|
4
|
-
- Missing positioning inputs are asked as explicit questions before final copy is written.
|
|
5
|
-
- Claims are supported by named proof or marked as assumptions.
|
|
6
|
-
- Headline, subhead, CTA, proof, and objection handling match the same value proposition.
|
|
7
|
-
- Copy uses real product nouns, workflows, constraints, and customer language.
|
|
8
|
-
- CTAs have one primary action and clear secondary actions.
|
|
9
|
-
- Onboarding, empty, error, upgrade, and permission copy provide a useful next step.
|
|
10
|
-
- Risky claims around pricing, privacy, security, compliance, performance, medical, financial, or legal topics are reviewed before release.
|
|
11
|
-
- Marketing Copy Lead hands off to Frontend Design Lead for public-facing layout and visual hierarchy.
|
package/checklists/owasp.md
DELETED
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
# OWASP Checklist
|
|
2
|
-
|
|
3
|
-
- Broken access control: RLS, ownership, tenant boundary, admin checks.
|
|
4
|
-
- Cryptographic failures: secrets, tokens, PII, transport security.
|
|
5
|
-
- Injection: SQL, command, template, prompt, and header injection.
|
|
6
|
-
- Insecure design: abuse cases and missing security controls.
|
|
7
|
-
- Misconfiguration: env vars, CORS, headers, storage, public buckets.
|
|
8
|
-
- Vulnerable components: dependency additions and audit status.
|
|
9
|
-
- Auth failures: login, logout, refresh, session expiry, protected routes.
|
|
10
|
-
- Integrity failures: CI, package installs, migrations, webhooks.
|
|
11
|
-
- Logging failures: errors visible without leaking secrets.
|
|
12
|
-
- SSRF: external URL validation and egress restrictions.
|
package/checklists/rls.md
DELETED
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
# Supabase RLS Checklist
|
|
2
|
-
|
|
3
|
-
- RLS enabled on every user-owned or tenant-owned table.
|
|
4
|
-
- Policies exist for each required operation.
|
|
5
|
-
- Policies enforce `auth.uid()` or tenant membership.
|
|
6
|
-
- Admin policies are explicit and least-privilege.
|
|
7
|
-
- Storage buckets have policies.
|
|
8
|
-
- Service-role use is isolated to server-only code.
|
|
9
|
-
- IDOR attempts are tested.
|
|
10
|
-
- Policy assumptions are documented.
|
package/checklists/testing.md
DELETED
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
# Testing Checklist
|
|
2
|
-
|
|
3
|
-
- Unit tests cover core logic.
|
|
4
|
-
- Regression tests preserve existing behavior.
|
|
5
|
-
- Playwright smoke tests cover critical paths.
|
|
6
|
-
- Visual QA evidence exists for high-risk UI changes.
|
|
7
|
-
- Auth, admin, and data mutations are prioritized.
|
|
8
|
-
- Empty/error/loading states are covered where practical.
|
|
9
|
-
- Test gaps and residual risks are documented.
|
|
10
|
-
- CI gates are documented and match the commands used by the project.
|
|
11
|
-
- Playwright smoke coverage exists for the primary workflow before release.
|
|
12
|
-
- Visual baseline updates require human review and rationale when visual-regression tooling exists.
|
|
@@ -1,58 +0,0 @@
|
|
|
1
|
-
# UI Acceptance Rubric
|
|
2
|
-
|
|
3
|
-
Use this rubric after the UI detector checklist, screenshot critique, accessibility pass, and browser QA loop.
|
|
4
|
-
|
|
5
|
-
## Pass/Fail
|
|
6
|
-
|
|
7
|
-
| Verdict | Criteria |
|
|
8
|
-
| --- | --- |
|
|
9
|
-
| fail | Any blocker remains, required screenshot evidence is missing, or authenticated screens were not reviewed when auth is required |
|
|
10
|
-
| conditional | No blockers remain, but major findings need documented owner, rationale, or follow-up before high-risk release |
|
|
11
|
-
| pass | No blockers remain, major findings are fixed or explicitly accepted, and evidence covers viewports, states, and auth needs |
|
|
12
|
-
| strong | Pass criteria plus clear product specificity, accessible keyboard flow, responsive resilience, and state coverage for the workflow |
|
|
13
|
-
|
|
14
|
-
## Required Evidence
|
|
15
|
-
|
|
16
|
-
- Target surface: route, component, flow, or screenshot set.
|
|
17
|
-
- Product context source: `DESIGN.md`, `STYLE_GUIDE.md`, design brief, or documented override.
|
|
18
|
-
- Viewports: desktop and mobile dimensions.
|
|
19
|
-
- Auth state: public, signed-in, role, tenant, permission, or explicit not-applicable.
|
|
20
|
-
- Data state: realistic, empty, loading, error, or fixture notes.
|
|
21
|
-
- Screenshots: first viewport, primary workflow, mobile, and highest-risk state.
|
|
22
|
-
- Checks: detector checklist, accessibility pass, screenshot critique, and visual QA tier.
|
|
23
|
-
|
|
24
|
-
## Release Blocking Rules
|
|
25
|
-
|
|
26
|
-
- Block release for any blocker detector.
|
|
27
|
-
- Block high-risk UI release when desktop or mobile screenshot evidence is missing.
|
|
28
|
-
- Block authenticated workflow release when no signed-in or permission-state evidence exists.
|
|
29
|
-
- Block acceptance when loading, empty, error, disabled, success, permission, or focus states are relevant but omitted without rationale.
|
|
30
|
-
- Block best-practice claims when product specificity, accessibility, or source safety is weak.
|
|
31
|
-
|
|
32
|
-
## Risk Tiers
|
|
33
|
-
|
|
34
|
-
| Tier | Use When | Minimum Evidence |
|
|
35
|
-
| --- | --- | --- |
|
|
36
|
-
| low | Copy-only or isolated cosmetic change to a stable component | Targeted screenshot or component evidence plus detector review |
|
|
37
|
-
| medium | Layout, responsive, or state changes on a user-facing surface | Desktop and mobile screenshots plus relevant state evidence |
|
|
38
|
-
| high | Authenticated workflow, checkout, data mutation, admin, onboarding, or shared component system | Desktop, mobile, auth/permission, error/empty/loading, keyboard/focus, and smoke evidence |
|
|
39
|
-
|
|
40
|
-
## Exception Rules
|
|
41
|
-
|
|
42
|
-
Exceptions are allowed only when:
|
|
43
|
-
|
|
44
|
-
- The finding is not a blocker.
|
|
45
|
-
- The rationale names product or technical constraints.
|
|
46
|
-
- The owner and follow-up path are documented.
|
|
47
|
-
- The exception does not weaken auth, accessibility, data integrity, or source safety.
|
|
48
|
-
|
|
49
|
-
## Output Format
|
|
50
|
-
|
|
51
|
-
Return:
|
|
52
|
-
|
|
53
|
-
1. Verdict: fail, conditional, pass, or strong.
|
|
54
|
-
2. Risk tier and target surface.
|
|
55
|
-
3. Evidence reviewed.
|
|
56
|
-
4. Blockers, majors, minors, and accepted exceptions.
|
|
57
|
-
5. Required fixes before release.
|
|
58
|
-
6. Follow-up work after release.
|
|
@@ -1,81 +0,0 @@
|
|
|
1
|
-
# UI Detector Checklist
|
|
2
|
-
|
|
3
|
-
Use this deterministic checklist for UI audit, polish, layout cleanup, responsive cleanup, screenshot critique, and browser QA. Mark each item as `blocker`, `major`, `minor`, `pass`, or `not-applicable`.
|
|
4
|
-
|
|
5
|
-
## Severity
|
|
6
|
-
|
|
7
|
-
| Severity | Meaning |
|
|
8
|
-
| --- | --- |
|
|
9
|
-
| blocker | Prevents release because a user cannot complete the workflow, the UI is inaccessible, or required evidence is missing |
|
|
10
|
-
| major | Degrades comprehension, trust, responsiveness, or state handling enough that high-risk UI should not ship without a fix or accepted exception |
|
|
11
|
-
| minor | Polish issue that should be fixed when nearby but does not block normal release |
|
|
12
|
-
| pass | Checked and acceptable for the target surface |
|
|
13
|
-
| not-applicable | The detector does not apply to this surface or state |
|
|
14
|
-
|
|
15
|
-
## Layout And Hierarchy
|
|
16
|
-
|
|
17
|
-
| Detector | Blocker Signal | Major Signal |
|
|
18
|
-
| --- | --- | --- |
|
|
19
|
-
| Crowded layout | Primary workflow cannot be identified or completed | Too many competing sections, controls, badges, or panels |
|
|
20
|
-
| Weak hierarchy | Primary action or current state is hidden | Headings, labels, and actions do not establish clear priority |
|
|
21
|
-
| Inconsistent spacing | Spacing causes overlap or unusable controls | Density, gaps, padding, or alignment shift without system logic |
|
|
22
|
-
| Card-within-card | Nested containers obscure the workflow or trap scroll | Decorative nested panels add visual noise without information value |
|
|
23
|
-
| Poor grouping | Related controls are separated or unrelated items are grouped | Scan path is unclear or section boundaries are arbitrary |
|
|
24
|
-
|
|
25
|
-
## Responsive And Mobile
|
|
26
|
-
|
|
27
|
-
| Detector | Blocker Signal | Major Signal |
|
|
28
|
-
| --- | --- | --- |
|
|
29
|
-
| Poor tap targets | Critical control is too small, overlapped, or unreachable | Repeated controls feel cramped or hard to tap |
|
|
30
|
-
| Truncation or overflow | Text, inputs, tables, or controls clip essential content | Labels wrap badly, overflow horizontally, or push layout off-screen |
|
|
31
|
-
| Mobile hierarchy | Mobile first screen hides the primary task or action | Desktop order collapses into a confusing mobile sequence |
|
|
32
|
-
| Sticky or fixed UI | Fixed header/footer covers content or controls | Sticky UI consumes too much viewport or causes awkward scrolling |
|
|
33
|
-
| Orientation and narrow widths | Page breaks at common mobile widths | Responsive behavior is untested below tablet width |
|
|
34
|
-
|
|
35
|
-
## States And Feedback
|
|
36
|
-
|
|
37
|
-
| Detector | Blocker Signal | Major Signal |
|
|
38
|
-
| --- | --- | --- |
|
|
39
|
-
| Missing loading state | User can trigger duplicate or unsafe action while waiting | Loading state exists but does not preserve layout or context |
|
|
40
|
-
| Missing empty state | Empty data leaves a dead end | Empty state lacks next action or domain-specific guidance |
|
|
41
|
-
| Missing error state | Failure is silent or blocks recovery | Error is vague, unactionable, or visually disconnected |
|
|
42
|
-
| Missing disabled state | Disabled action looks enabled or loses explanation | Disabled state lacks affordance, label, or contrast |
|
|
43
|
-
| Missing success feedback | User cannot tell whether action completed | Success message is too subtle, transient, or ambiguous |
|
|
44
|
-
| Missing permission state | Protected UI leaks actions or fails without explanation | Permission limitation is not clear to the affected role |
|
|
45
|
-
| Weak interaction feedback | Focus, selected, hover, pressed, or active state is absent on critical controls | State feedback is inconsistent across similar controls |
|
|
46
|
-
|
|
47
|
-
## Accessibility
|
|
48
|
-
|
|
49
|
-
| Detector | Blocker Signal | Major Signal |
|
|
50
|
-
| --- | --- | --- |
|
|
51
|
-
| Keyboard path | Critical workflow cannot be completed by keyboard | Tab order is confusing or focus moves unexpectedly |
|
|
52
|
-
| Focus visibility | Focus indicator is absent on interactive controls | Focus is low contrast or inconsistent |
|
|
53
|
-
| Semantic structure | Heading, landmark, form, table, or button semantics block assistive tech use | Semantics are mostly present but incomplete |
|
|
54
|
-
| Labels and errors | Inputs or controls lack accessible names or error association | Labels exist but are vague, duplicate, or visually disconnected |
|
|
55
|
-
| Contrast | Text or critical controls fail WCAG 2.1 AA contrast | Secondary text or state colors are borderline |
|
|
56
|
-
| Motion | Motion prevents comprehension or ignores reduced-motion need | Motion distracts from workflow or feels inconsistent |
|
|
57
|
-
|
|
58
|
-
## Distinctiveness And Source Safety
|
|
59
|
-
|
|
60
|
-
| Detector | Blocker Signal | Major Signal |
|
|
61
|
-
| --- | --- | --- |
|
|
62
|
-
| Generic SaaS styling | First screen could fit another product by changing logo and headline | Visual direction relies on common cards, gradients, fake dashboards, or vague claims |
|
|
63
|
-
| Accent-border card styling | Cards, callouts, alerts, panels, or status messages rely on thick, high-contrast, one-sided colored borders, glow rails, neon strokes, or gradient borders as the main state cue | Accent borders add decoration where restrained 1px full-border surfaces, subtle background tint, clear labels, icons, and semantic state text would communicate better |
|
|
64
|
-
| Gradient-as-design | Gradient hero, gradient text, abstract blobs, or glow backgrounds substitute for a product-specific first screen | Gradients are present without a tokenized role, brand rationale, or product-specific content support |
|
|
65
|
-
| Card soup | The screen is mostly decorative cards and the primary workflow is unclear | Repeated cards could become a table, list, timeline, form, split pane, or workflow-specific grouped section |
|
|
66
|
-
| Missing content fingerprint | UI hides missing product decisions behind placeholders | Real nouns, records, actions, or edge cases are too sparse |
|
|
67
|
-
| Weak visual identity | No product-specific density, typography, imagery, or interaction point of view | Direction is coherent but category-generic |
|
|
68
|
-
| Unsafe reference use | Copy, assets, layout signature, or brand identity appear copied | References are cited without lessons and anti-copy notes |
|
|
69
|
-
| Fake or unsupported proof | Fake metrics or claims imply unavailable capability | Proof exists but is not tied to actual product behavior |
|
|
70
|
-
| Vague SaaS sayings | Copy could apply to any product and hides what the user can actually do | Phrases like "supercharge your workflow", "unlock insights", "seamless collaboration", or "AI-powered productivity" are not grounded in concrete actions, nouns, constraints, or outcomes |
|
|
71
|
-
| Decorative credibility | Badges, pills, stars, awards, or "trusted by" placeholders imply proof that does not exist | Credibility elements are decorative and should be replaced with real proof, integration names, security posture, support details, or removed |
|
|
72
|
-
| Filler sections | Marketing sections replace the requested app or tool workflow on the first screen | "Features", "benefits", or "how it works" sections are generic and should be replaced with the actual usable workflow or domain-specific hierarchy |
|
|
73
|
-
|
|
74
|
-
## Evidence Requirements
|
|
75
|
-
|
|
76
|
-
- Desktop screenshot reviewed.
|
|
77
|
-
- Mobile screenshot reviewed.
|
|
78
|
-
- Highest-risk state screenshot reviewed.
|
|
79
|
-
- Authenticated or permission-state screenshot reviewed when applicable.
|
|
80
|
-
- Browser route, viewport, data fixture, and user role named.
|
|
81
|
-
- Detector exceptions documented with rationale and owner.
|
package/checklists/upgrade.md
DELETED
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Upgrade Checklist
|
|
2
|
-
|
|
3
|
-
- [ ] Branch created before upgrade work.
|
|
4
|
-
- [ ] Release notes, changelog, or migration guide reviewed.
|
|
5
|
-
- [ ] `agent-kit diff` reviewed before template updates.
|
|
6
|
-
- [ ] `agent-kit update` run only after preserving local work.
|
|
7
|
-
- [ ] `.agent-kit/conflicts/` reviewed.
|
|
8
|
-
- [ ] `.agent-kit/overrides.json` updated for accepted local deviations.
|
|
9
|
-
- [ ] Next.js codemods or manual upgrade steps reviewed when framework behavior changes.
|
|
10
|
-
- [ ] Supabase migration history, RLS impact, generated types, and rollback risk reviewed when data/auth changes.
|
|
11
|
-
- [ ] Tests, smoke checks, visual QA, or release checks run for affected areas.
|
|
12
|
-
- [ ] `agent-kit audit --min-readiness baseline-setup` passes.
|
|
13
|
-
- [ ] Upgrade evidence, rollback notes, owner, and date recorded in `UPGRADE.md`.
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
# Visual Regression Checklist
|
|
2
|
-
|
|
3
|
-
- Visual QA tier is documented: baseline screenshots, Playwright screenshots, Storybook visual tests, or visual-regression service.
|
|
4
|
-
- Desktop and mobile screenshots exist for primary screens.
|
|
5
|
-
- Reusable components have state stories or screenshot cases for default, loading, empty, error, disabled, success, permission-denied, and mobile states.
|
|
6
|
-
- Dynamic or volatile regions are mocked, masked, frozen, or excluded with rationale.
|
|
7
|
-
- Baseline updates require human review and a short rationale.
|
|
8
|
-
- CI or review notes link to screenshot artifacts, Storybook, Chromatic, Argos, Playwright report, or equivalent evidence.
|
|
9
|
-
- Visual checks cover at least one narrow/mobile viewport and one desktop viewport.
|
|
10
|
-
- Visual checks do not replace accessibility, keyboard, semantic, auth, or data-boundary tests.
|
|
11
|
-
- Known visual QA gaps are recorded in `TESTING.md` before release.
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
# Claude Design Review Brief
|
|
2
|
-
|
|
3
|
-
Review or generate UI direction for this product.
|
|
4
|
-
|
|
5
|
-
Context:
|
|
6
|
-
|
|
7
|
-
- DESIGN.md: `{{design_md}}`
|
|
8
|
-
- Product: `{{product}}`
|
|
9
|
-
- Users: `{{users}}`
|
|
10
|
-
- Primary task: `{{primary_task}}`
|
|
11
|
-
- Current risk: `{{design_risk}}`
|
|
12
|
-
|
|
13
|
-
Output:
|
|
14
|
-
|
|
15
|
-
- Design critique.
|
|
16
|
-
- Brand/content gaps.
|
|
17
|
-
- Creative-direction options or selected-direction critique.
|
|
18
|
-
- Reference-set, anti-reference, and source-safety critique.
|
|
19
|
-
- Frontend product-quality scorecard across user/task fit, content specificity, visual identity, information architecture, component states, accessibility and interaction, and source safety.
|
|
20
|
-
- Improved information architecture.
|
|
21
|
-
- Component inventory.
|
|
22
|
-
- Mobile and desktop layout guidance.
|
|
23
|
-
- Accessibility notes.
|
|
24
|
-
- Copy improvements.
|
|
25
|
-
- States for loading, empty, error, disabled, and success.
|
|
26
|
-
|
|
27
|
-
Reject generic AI-site patterns and prefer product-specific workflow clarity.
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
# Figma Design Brief
|
|
2
|
-
|
|
3
|
-
Create a Figma-ready design direction.
|
|
4
|
-
|
|
5
|
-
Include:
|
|
6
|
-
|
|
7
|
-
- DESIGN.md brand/content inputs and creative-direction matrix.
|
|
8
|
-
- Reference set, anti-references, and source-safety notes.
|
|
9
|
-
- Product-quality scorecard requirements and acceptance threshold.
|
|
10
|
-
- Page structure.
|
|
11
|
-
- Component list.
|
|
12
|
-
- Design tokens.
|
|
13
|
-
- Responsive behavior.
|
|
14
|
-
- Form and control states.
|
|
15
|
-
- Accessibility requirements.
|
|
16
|
-
- Notes for handoff to implementation.
|
|
17
|
-
|
|
18
|
-
Avoid generic AI-site visual defaults and prioritize the real product workflow.
|
|
@@ -1,36 +0,0 @@
|
|
|
1
|
-
# Google Stitch Design Brief
|
|
2
|
-
|
|
3
|
-
Use this brief to generate distinct interface directions from real product content and brand constraints.
|
|
4
|
-
|
|
5
|
-
DESIGN.md context:
|
|
6
|
-
`{{design_md}}`
|
|
7
|
-
|
|
8
|
-
Project type:
|
|
9
|
-
`{{project_type}}`
|
|
10
|
-
|
|
11
|
-
Audience:
|
|
12
|
-
`{{audience}}`
|
|
13
|
-
|
|
14
|
-
Primary workflow:
|
|
15
|
-
`{{primary_workflow}}`
|
|
16
|
-
|
|
17
|
-
Design requirements:
|
|
18
|
-
|
|
19
|
-
- Create three distinct directions unless `DESIGN.md` already selects one.
|
|
20
|
-
- Create mobile and desktop screens.
|
|
21
|
-
- Show real workflow states.
|
|
22
|
-
- Use domain-specific hierarchy.
|
|
23
|
-
- Tie tokens, layout, copy, imagery, density, and interaction tone to the selected content and audience.
|
|
24
|
-
- Use the reference set for learning only and respect all anti-references and source-safety notes.
|
|
25
|
-
- Return a product-quality scorecard covering user/task fit, content specificity, visual identity, information architecture, component states, accessibility and interaction, and source safety.
|
|
26
|
-
- Include design tokens.
|
|
27
|
-
- Include empty, loading, error, disabled, and success states.
|
|
28
|
-
- Meet WCAG 2.1 AA.
|
|
29
|
-
|
|
30
|
-
Avoid:
|
|
31
|
-
|
|
32
|
-
- Generic purple-blue gradients.
|
|
33
|
-
- Abstract card dashboards.
|
|
34
|
-
- Fake metrics.
|
|
35
|
-
- Vague SaaS copy.
|
|
36
|
-
- Placeholder landing pages.
|
|
@@ -1,36 +0,0 @@
|
|
|
1
|
-
# Human Designer Brief
|
|
2
|
-
|
|
3
|
-
## Product
|
|
4
|
-
|
|
5
|
-
`{{product}}`
|
|
6
|
-
|
|
7
|
-
## Audience
|
|
8
|
-
|
|
9
|
-
`{{audience}}`
|
|
10
|
-
|
|
11
|
-
## Primary Workflow
|
|
12
|
-
|
|
13
|
-
`{{primary_workflow}}`
|
|
14
|
-
|
|
15
|
-
## Design Context
|
|
16
|
-
|
|
17
|
-
`{{design_md}}`
|
|
18
|
-
|
|
19
|
-
## What We Need
|
|
20
|
-
|
|
21
|
-
- Domain-specific visual direction.
|
|
22
|
-
- Brand/content gaps and creative-direction recommendation.
|
|
23
|
-
- Reference-set critique, anti-references, and source-safety concerns.
|
|
24
|
-
- Product-quality scorecard with acceptance verdict.
|
|
25
|
-
- Mobile and desktop screens.
|
|
26
|
-
- Design tokens.
|
|
27
|
-
- Component states.
|
|
28
|
-
- Accessibility review.
|
|
29
|
-
- Notes for implementation.
|
|
30
|
-
|
|
31
|
-
## Avoid
|
|
32
|
-
|
|
33
|
-
- Generic AI-generated SaaS visuals.
|
|
34
|
-
- Placeholder copy.
|
|
35
|
-
- Fake data.
|
|
36
|
-
- Unclear primary action.
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
# Admin Dashboard Design Brief
|
|
2
|
-
|
|
3
|
-
Use this brief for internal tools, ops consoles, moderation queues, analytics, and support workflows.
|
|
4
|
-
|
|
5
|
-
## Product Signals
|
|
6
|
-
|
|
7
|
-
- First screen should prioritize active work, exceptions, stale items, and operational health.
|
|
8
|
-
- Avoid oversized hero copy, decorative gradients, and promotional layout patterns.
|
|
9
|
-
- Show filters, saved views, bulk actions, and audit trails where relevant.
|
|
10
|
-
|
|
11
|
-
## Required States
|
|
12
|
-
|
|
13
|
-
- Loading, empty, filtered-empty, error, partial-data, disabled, success, and permission-denied states.
|
|
14
|
-
- Dense desktop workflow and usable mobile read/review mode.
|
|
15
|
-
- Confirmation and undo patterns for destructive actions.
|
|
16
|
-
|
|
17
|
-
## Design Direction
|
|
18
|
-
|
|
19
|
-
- Favor calm information density, sticky table affordances, visible status language, and predictable controls.
|
|
20
|
-
- Use color sparingly for severity, freshness, ownership, and action state.
|
|
21
|
-
- Every chart or metric needs a label, source, timestamp, and empty/error fallback.
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
# AI Workflow Product Design Brief
|
|
2
|
-
|
|
3
|
-
Use when designing AI assistants, automation tools, generation workflows, review queues, prompt tools, eval dashboards, agent consoles, or human-in-the-loop products.
|
|
4
|
-
|
|
5
|
-
## First Screen
|
|
6
|
-
|
|
7
|
-
Show the real work loop: input, context, model/agent state, output, review, approval, correction, or history. Do not hide the product behind a generic "AI-powered" hero.
|
|
8
|
-
|
|
9
|
-
## Required Inputs
|
|
10
|
-
|
|
11
|
-
- User role: operator, reviewer, creator, analyst, developer, admin, or end customer.
|
|
12
|
-
- AI workflow: input sources, context, tools, model calls, outputs, approvals, retries, and audit trail.
|
|
13
|
-
- Trust needs: citations, uncertainty, permissions, rate limits, cost, privacy, and rollback.
|
|
14
|
-
- Human control points: edit, approve, reject, compare, regenerate, escalate, or export.
|
|
15
|
-
|
|
16
|
-
## Avoid
|
|
17
|
-
|
|
18
|
-
- Chat box as the only interface when the workflow needs structure.
|
|
19
|
-
- Fake model confidence or fake analytics.
|
|
20
|
-
- Magical language that hides limitations, costs, or review responsibility.
|
|
21
|
-
- Outputs without provenance, status, or recovery path.
|
|
22
|
-
|
|
23
|
-
## Required States
|
|
24
|
-
|
|
25
|
-
Queued, streaming, partial output, failed tool call, hallucination report, needs review, approved, rejected, regenerated, rate limited, permission denied, audit trail, mobile review.
|
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
# Community Or Social Design Brief
|
|
2
|
-
|
|
3
|
-
Use when designing communities, forums, social feeds, member directories, messaging, comments, creator tools, clubs, or collaborative spaces.
|
|
4
|
-
|
|
5
|
-
## First Screen
|
|
6
|
-
|
|
7
|
-
Show the community's real activity, topics, people, norms, or contribution path. Avoid generic feed layouts that could belong to any network.
|
|
8
|
-
|
|
9
|
-
## Required Inputs
|
|
10
|
-
|
|
11
|
-
- Member types and participation goals.
|
|
12
|
-
- Content types: posts, comments, events, projects, resources, profiles, messages, reactions.
|
|
13
|
-
- Moderation and safety model.
|
|
14
|
-
- Trust, reputation, privacy, consent, and notification rules.
|
|
15
|
-
- Community tone: expert, casual, local, professional, creator-led, support-focused.
|
|
16
|
-
|
|
17
|
-
## Avoid
|
|
18
|
-
|
|
19
|
-
- Fake engagement metrics.
|
|
20
|
-
- Infinite feeds without prioritization or safety states.
|
|
21
|
-
- Profile cards with no real identity or contribution signals.
|
|
22
|
-
- Missing empty states for new or quiet communities.
|
|
23
|
-
|
|
24
|
-
## Required States
|
|
25
|
-
|
|
26
|
-
New community empty state, muted/blocked/report states, moderation pending, deleted content, private content, notification overload, mobile composer, slow/offline posting.
|