@appsforgood/next-supabase-kit 0.4.0 → 0.4.1

package/examples/next-supabase-installed/.agent-kit/manifest.json

@@ -1,12 +1,13 @@
 {
   "schemaVersion": 3,
   "packageName": "@appsforgood/next-supabase-kit",
-  "packageVersion": "0.4.0",
+  "packageVersion": "0.4.1",
   "stack": "next-supabase",
   "installedAt": "2026-09-06T01:00:41.569Z",
   "docs": [
     "AGENTS.md",
-    "USER_GUIDE.md"
+    "USER_GUIDE.md",
+    "USER_GUIDE.html"
   ],
   "activated": [
     "cursor",
@@ -20,46 +21,46 @@
     "USER_GUIDE.md": "87c73c7d2501429953e8b7bbfb4061dfecaa1d818e585706aeccfb44d6aeb058"
   },
   "assetHashes": {
-    "AGENTS.md": "c1792ecc8bd4836505574015ab08c0fc593d93f4c5ef518489bb85d2af66be8a",
-    "USER_GUIDE.md": "87c73c7d2501429953e8b7bbfb4061dfecaa1d818e585706aeccfb44d6aeb058",
+    "AGENTS.md": "d5b570847e7e283a4603055445d6b8cf87dd6e041305c6a3909fa7cde327db81",
+    "USER_GUIDE.md": "68b025fb9610e9ac40c324e755ce1260fd680e9937e32848ab9d4ba43835c3eb",
     ".cursor/rules/cursor-agent-kit.mdc": "850026beea86067d95925eea15eb447365d6a956e0f7f475ebd7fef89043d44b",
     "CLAUDE.md": "d5095edff182babe5c13717bb16cadcd95569d9e4abd37ceb307bb1448b65557",
-    ".cursor/agents/planner.md": "884a711a07466a2c5333c057678d9da2233216d5c410a3fc9e676397cc7f6a77",
-    ".cursor/agents/app-engineer.md": "8909c318c81327f61e2efac8b2a5f10802d1d1af75f46467dd585a7db4e3e917",
-    ".cursor/agents/security.md": "b111059028a3b4c88efa42849b8ca9edbe7af34c6aacb988528a2bc998833503",
-    ".cursor/agents/design.md": "2a50d5aa33ae0bc6e62836d64d24af3b6c536dac7a1554aee17f04bd61fb72dc",
-    ".cursor/agents/qa.md": "f23c04c7584f7b3befb5d846f8c57646d1a3a41a9fed5e31aeb980b97158afcd",
-    ".cursor/agents/copy.md": "380bcee084f05fbf31514420363d9e6ffef9dfe94cdd66063657aa81b8902d5f",
+    ".cursor/agents/planner.md": "90676313078391848072fd3a4dc24d8479a7911aa8e7f68a38f46b73074aa6d4",
+    ".cursor/agents/app-engineer.md": "c09eee305c0f2175c04ef78d0d0c788638a550565df484bb9ad6a44ae1e8d37c",
+    ".cursor/agents/security.md": "d71de67a6c66198c02db47357b9a91d86601659c843835ecb481e9edc651a238",
+    ".cursor/agents/design.md": "04277841a61c9b3f0ea970a14319fe7c1c199a6be5483d5e69b65c231f8764f8",
+    ".cursor/agents/qa.md": "a4f77a26ee91d0065d5ef9f7a48ebe9f4466b2d17a2d63cb0ffcbc4bc24b9a73",
+    ".cursor/agents/copy.md": "11e7df36d16221d71e3290dc5ba07711df7320895ad2215eeebec5afcf43bf21",
     ".cursor/skills/planning/SKILL.md": "a542c55e76c8e5baa37132451b3dd1c4d49606d233037e0512f82b714603f51a",
     ".cursor/skills/nextjs-app-router/SKILL.md": "b598aa1f05ed8f0f31fc0d6bd8bb1011566d1164cb4fd5e8df2c0c02deffc532",
     ".cursor/skills/supabase-auth-rls/SKILL.md": "bdd632edb4f8d824f337fe4a14f306479e81a104d814764b463006b53fe4750a",
     ".cursor/skills/postgres-migrations/SKILL.md": "1d29ec1f31ebb824a5f4700f08d999b4e4dc9a0aefc7145722b13c6625e85db5",
     ".cursor/skills/owasp-security-review/SKILL.md": "8141770ea49648728d10e214283a7dce338af4780b66874c58360d9ef7ee4311",
-    ".cursor/skills/frontend-design/SKILL.md": "57f7e00f248c3e868df3fb5957956ce443b28fdf3ecab615be95cf66f06172aa",
+    ".cursor/skills/frontend-design/SKILL.md": "2fb0c3a9a637af2c0dda28aef1991ee8f30ef2113f02445d9c7403208578d04f",
     ".cursor/skills/accessibility-wcag/SKILL.md": "1199b4852c2ad9981834a03dcc86edd1f68d8337d25aa13d3c4ad5518343a520",
     ".cursor/skills/browser-qa/SKILL.md": "c04e2fa549d9ef6a7c91280859a6394ac59273e6866d537de879d1f1b5fcff1a",
     ".cursor/skills/testing-qa/SKILL.md": "1e92f7c33e29747c51548c0d1f58507de53768aa9e9748c3be2809d88bf1dc1f",
-    ".cursor/skills/product-copy/SKILL.md": "2c6fe8e3752ad9f026cadd4ac02ff0a22a321f0714fe8b2baf99cdfae7b3d6c8",
+    ".cursor/skills/product-copy/SKILL.md": "2f1982ac949ed32690046f516dfefa1ca85bfb51318b403822696bd12bb982c4",
     ".cursor/skills/ship/SKILL.md": "ac426092a1868dd1deb01689dc2f5591dbe40acb2fceec559adce41602bb8d6f",
-    ".claude/agents/planner.md": "884a711a07466a2c5333c057678d9da2233216d5c410a3fc9e676397cc7f6a77",
-    ".claude/agents/app-engineer.md": "8909c318c81327f61e2efac8b2a5f10802d1d1af75f46467dd585a7db4e3e917",
-    ".claude/agents/security.md": "b111059028a3b4c88efa42849b8ca9edbe7af34c6aacb988528a2bc998833503",
-    ".claude/agents/design.md": "2a50d5aa33ae0bc6e62836d64d24af3b6c536dac7a1554aee17f04bd61fb72dc",
-    ".claude/agents/qa.md": "f23c04c7584f7b3befb5d846f8c57646d1a3a41a9fed5e31aeb980b97158afcd",
-    ".claude/agents/copy.md": "380bcee084f05fbf31514420363d9e6ffef9dfe94cdd66063657aa81b8902d5f",
-    ".codex/agents/planner.toml": "d513d8083721e0651bf7a2785684479da0d2e0cd073f8ad35515cc99a2802c86",
-    ".codex/agents/app-engineer.toml": "22a3ead712e5258e94f9b4b234e9bf9abf0ba496c4b0afae55b4ce074e738124",
-    ".codex/agents/security.toml": "d77022df7369195ae8d9441aff5493f1f8435850f3f3d0619132f31e1e0ac4e7",
-    ".codex/agents/design.toml": "534dd7dd0962c52b0604a1488a4e4b1959c4400e592a5d73e4355570fbea3ed4",
-    ".codex/agents/qa.toml": "8bc8fcc738f76e5f66a64662daac26408f3493d48601cd574ee7592cd87cdc18",
-    ".codex/agents/copy.toml": "524bd8be988c224c1bcce4474550d48ab5afc111dcadd9c6a6ff1dd1e115ad7f",
+    ".claude/agents/planner.md": "90676313078391848072fd3a4dc24d8479a7911aa8e7f68a38f46b73074aa6d4",
+    ".claude/agents/app-engineer.md": "c09eee305c0f2175c04ef78d0d0c788638a550565df484bb9ad6a44ae1e8d37c",
+    ".claude/agents/security.md": "d71de67a6c66198c02db47357b9a91d86601659c843835ecb481e9edc651a238",
+    ".claude/agents/design.md": "04277841a61c9b3f0ea970a14319fe7c1c199a6be5483d5e69b65c231f8764f8",
+    ".claude/agents/qa.md": "a4f77a26ee91d0065d5ef9f7a48ebe9f4466b2d17a2d63cb0ffcbc4bc24b9a73",
+    ".claude/agents/copy.md": "11e7df36d16221d71e3290dc5ba07711df7320895ad2215eeebec5afcf43bf21",
+    ".codex/agents/planner.toml": "f55f218778ae76942e6c7ea9a159e89dc5c13466b0effa0c43935b29d8182d11",
+    ".codex/agents/app-engineer.toml": "e266f129da9949f0e62128f22d42474f94a47cb81db0a5c20ef5d87e39b894dd",
+    ".codex/agents/security.toml": "9e202a8125ddce38d84487a59d7c7cd7328acb8c441704f670b8331042be15f0",
+    ".codex/agents/design.toml": "6b9114c3ab55db610cc38632939930d966282a427ba0fba4c4c6178f43d10725",
+    ".codex/agents/qa.toml": "07f53a37d896203707bcb28d19e5a502194a3276faa387bff3739e8d876af564",
+    ".codex/agents/copy.toml": "76e0b1e54139a6d4dc5140f7214aceaa72f186e45f561c6708e1263747ac07fd",
     ".github/copilot-instructions.md": "f5d26cc16aebd5b82f5fb75b85a59e17b802ddb444e50cc25e61a37c616e738f",
     ".antigravity/agent-kit/plugin.json": "e2f156fdd68ca706dd289152722bfd07ebb0c29a16afadcfdf178a723ecb6a90",
     ".antigravity/agent-kit/commands/plan.toml": "2f72ca9f76265a2255686bad4cb1075563884ab7b7da2199ab9a2a30106792de",
     ".antigravity/agent-kit/commands/browser-qa.toml": "f94071c6eca96ae3e0d2c493abfc65d5215acaa7a2bb1423fe1c7d61743e37ef",
     ".antigravity/agent-kit/commands/security.toml": "4622b2d38795f9d58662b225bce2291d14e58644aa0aed5607b9b567ddf342c5",
     ".antigravity/agent-kit/commands/frontend.toml": "3f0f03b8094e0103e47709f6af6fba09b3dd7a0decc22191777f8ae5770f064c",
-    ".antigravity/agent-kit/commands/copy.toml": "724413f06edccfd691adc4d0e6daf00aa23a8e1ced573db52c7f76f91d63d951",
+    ".antigravity/agent-kit/commands/copy.toml": "40ad093163915a9f000bf8344e49c37dc2d735ab404e84430323502af0bf031e",
     ".antigravity/agent-kit/commands/test.toml": "238f3d670c0ecabeab38204fe0a42b32fc5cbdad885b706715f17075c855c9d7",
     ".antigravity/agent-kit/commands/ship.toml": "dfa8a6bc654e7bfbf06ad1af59f122a8b116b84008b5ab9325ce21eba3eab9ef",
     ".antigravity/runtime-skills/planning/SKILL.md": "a542c55e76c8e5baa37132451b3dd1c4d49606d233037e0512f82b714603f51a",
@@ -67,23 +68,27 @@
     ".antigravity/runtime-skills/supabase-auth-rls/SKILL.md": "bdd632edb4f8d824f337fe4a14f306479e81a104d814764b463006b53fe4750a",
     ".antigravity/runtime-skills/postgres-migrations/SKILL.md": "1d29ec1f31ebb824a5f4700f08d999b4e4dc9a0aefc7145722b13c6625e85db5",
     ".antigravity/runtime-skills/owasp-security-review/SKILL.md": "8141770ea49648728d10e214283a7dce338af4780b66874c58360d9ef7ee4311",
-    ".antigravity/runtime-skills/frontend-design/SKILL.md": "57f7e00f248c3e868df3fb5957956ce443b28fdf3ecab615be95cf66f06172aa",
+    ".antigravity/runtime-skills/frontend-design/SKILL.md": "2fb0c3a9a637af2c0dda28aef1991ee8f30ef2113f02445d9c7403208578d04f",
     ".antigravity/runtime-skills/accessibility-wcag/SKILL.md": "1199b4852c2ad9981834a03dcc86edd1f68d8337d25aa13d3c4ad5518343a520",
     ".antigravity/runtime-skills/browser-qa/SKILL.md": "c04e2fa549d9ef6a7c91280859a6394ac59273e6866d537de879d1f1b5fcff1a",
     ".antigravity/runtime-skills/testing-qa/SKILL.md": "1e92f7c33e29747c51548c0d1f58507de53768aa9e9748c3be2809d88bf1dc1f",
-    ".antigravity/runtime-skills/product-copy/SKILL.md": "2c6fe8e3752ad9f026cadd4ac02ff0a22a321f0714fe8b2baf99cdfae7b3d6c8",
+    ".antigravity/runtime-skills/product-copy/SKILL.md": "2f1982ac949ed32690046f516dfefa1ca85bfb51318b403822696bd12bb982c4",
     ".antigravity/runtime-skills/ship/SKILL.md": "ac426092a1868dd1deb01689dc2f5591dbe40acb2fceec559adce41602bb8d6f",
     "skills/planning/SKILL.md": "a542c55e76c8e5baa37132451b3dd1c4d49606d233037e0512f82b714603f51a",
     "skills/nextjs-app-router/SKILL.md": "b598aa1f05ed8f0f31fc0d6bd8bb1011566d1164cb4fd5e8df2c0c02deffc532",
     "skills/supabase-auth-rls/SKILL.md": "bdd632edb4f8d824f337fe4a14f306479e81a104d814764b463006b53fe4750a",
     "skills/postgres-migrations/SKILL.md": "1d29ec1f31ebb824a5f4700f08d999b4e4dc9a0aefc7145722b13c6625e85db5",
     "skills/owasp-security-review/SKILL.md": "8141770ea49648728d10e214283a7dce338af4780b66874c58360d9ef7ee4311",
-    "skills/frontend-design/SKILL.md": "57f7e00f248c3e868df3fb5957956ce443b28fdf3ecab615be95cf66f06172aa",
+    "skills/frontend-design/SKILL.md": "2fb0c3a9a637af2c0dda28aef1991ee8f30ef2113f02445d9c7403208578d04f",
     "skills/accessibility-wcag/SKILL.md": "1199b4852c2ad9981834a03dcc86edd1f68d8337d25aa13d3c4ad5518343a520",
     "skills/browser-qa/SKILL.md": "c04e2fa549d9ef6a7c91280859a6394ac59273e6866d537de879d1f1b5fcff1a",
     "skills/testing-qa/SKILL.md": "1e92f7c33e29747c51548c0d1f58507de53768aa9e9748c3be2809d88bf1dc1f",
-    "skills/product-copy/SKILL.md": "2c6fe8e3752ad9f026cadd4ac02ff0a22a321f0714fe8b2baf99cdfae7b3d6c8",
-    "skills/ship/SKILL.md": "ac426092a1868dd1deb01689dc2f5591dbe40acb2fceec559adce41602bb8d6f"
+    "skills/product-copy/SKILL.md": "2f1982ac949ed32690046f516dfefa1ca85bfb51318b403822696bd12bb982c4",
+    "skills/ship/SKILL.md": "ac426092a1868dd1deb01689dc2f5591dbe40acb2fceec559adce41602bb8d6f",
+    "USER_GUIDE.html": "3ed6388909be27ecbcce1b65499cb7416228ff629fd39c982d8fe382ecc942c6",
+    ".cursor/skills/deslop/SKILL.md": "ca328ee5d66335639d608059ea9aabef17f70188931d46077dde11583969dea0",
+    ".antigravity/runtime-skills/deslop/SKILL.md": "ca328ee5d66335639d608059ea9aabef17f70188931d46077dde11583969dea0",
+    "skills/deslop/SKILL.md": "ca328ee5d66335639d608059ea9aabef17f70188931d46077dde11583969dea0"
   },
-  "updatedAt": "2026-09-06T02:06:50.428Z"
+  "updatedAt": "2026-09-06T23:40:17.483Z"
 }

package/examples/next-supabase-installed/.antigravity/agent-kit/commands/copy.toml

@@ -2,5 +2,5 @@ name = "copy"
 description = "Review rendered conversion copy."
 
 prompt = """
-Act as the copy agent. Review the rendered words in screenshots, not just strings in source.
+Act as the copy agent. Review the rendered words in screenshots, not just strings in source. Run product-copy first, then deslop last. Always.
 """

package/examples/next-supabase-installed/.antigravity/runtime-skills/deslop/SKILL.md

@@ -0,0 +1,62 @@
+---
+name: deslop
+description: Use as the last copy pass. Strip AI-writing tells and leftover visual slop. Copy must run this after product-copy, not instead of it.
+---
+
+# Deslop
+
+Last pass. `product-copy` writes the words. This skill removes the machine accent.
+
+Scan 2026-09-06: `conorbronsdon/avoid-ai-writing`, `funboy322/avoid-ai-design`, `educlopez/ui-craft`, `superdesigndev/superdesign-skill`. Patterns only. Do not copy their catalogs.
+
+## Use when
+
+Copy is about to say “done,” or anyone asked to de-slop, humanize, or “make this less AI.” Always run after `product-copy` on public or conversion copy.
+
+## Order
+
+1. Finish `product-copy` (audience, headline, CTA, claims).
+2. Open the rendered surface if one exists.
+3. Run this skill. Fix words first. If the screenshot still reads as default AI UI, hand back to Design with the P0 list. Do not skip this step.
+
+## Writing tells — cut or rewrite
+
+| Tell | Fix |
+| --- | --- |
+| Chatbot openers (“Certainly!”, “Great question!”) | Delete. Start with the point. |
+| Inflators (seamless, robust, leverage, unlock, supercharge, 10x, paradigm) | Name the thing. “use,” “ships,” “blocks.” |
+| Copula dodge (“serves as,” “boasting,” “featuring”) | “is” / “has.” |
+| “It’s not X, it’s Y” | One positive sentence. |
+| Moreover / Furthermore / In today’s X / In conclusion | Cut or join with “and.” |
+| Vague experts / studies show | Cite or delete. |
+| Title Case Headings on every line | Sentence case. |
+| Em dash stacks, emoji headers, sparkle bullets | Periods. Real nouns. |
+| “Get started” / “Learn more” with no object | Say the next action. |
+| Placeholder leftovers (`[Your Name]`, `TODO copy`) | Fill or delete. |
+
+Second pass: re-read the rewrite. If the same tell remains, rewrite the paragraph, do not synonym-swap.
+
+## Visual P0s — fail if still on screen
+
+These are the 2026 convergence cluster. One is a smell. Two or more is a reject.
+
+- Purple-to-blue (or indigo) gradient hero, or gradient-clipped headline type
+- Inter / Roboto / default shadcn zinc as the whole identity
+- Centered slogan + two pills + three equal icon cards
+- `rounded-2xl` + `shadow-lg` + blur on every surface
+- Cream paper `#F4F1EA` + terracotta accent (the 2026 “editorial default”)
+- Acid green or neon vermilion on near-black used as decoration, not meaning
+- Lucide Sparkles / Zap as the product metaphor
+- Fake dashboard metrics or DiceBear avatars
+
+Copy does not restyle the page. It lists the P0s from the screenshot and sends them to Design.
+
+## Must keep
+
+Facts, commands, file paths, the fail-closed screenshot sentence, and any claim that has proof. Deslop is subtraction, not a new brand voice.
+
+## Done when
+
+- A second read finds no writing tells above.
+- If a screen exists, the screenshot was read and remaining visual P0s are named or gone.
+- Copy’s verdict is not “done” until this pass ran.

package/examples/next-supabase-installed/.antigravity/runtime-skills/frontend-design/SKILL.md

@@ -1,26 +1,107 @@
 ---
 name: frontend-design
-description: Use when building or reviewing user-facing UI. Prefer task-first screens. Reject generic AI-looking gradients, card soup, and fake metrics.
+description: Use when building or reviewing user-facing UI. Commit one simple palette and type pairing. Reject default AI layouts, timid color spreads, and decoration that is not the task.
 ---
 
 # Frontend Design
 
+Build or review a screen as if a stranger must name the product from the first viewport. Simple and specific beats decorated.
+
+Scan 2026-09-06 (structure only, no bodies copied): Anthropic `frontend-design` (updated 2026-06), addyosmani `frontend-ui-engineering`, `educlopez/ui-craft`, `funboy322/avoid-ai-design`, `superdesigndev/superdesign-skill`.
+
 ## Use when
 
-Screens, components, layout, visual design, or anti-generic UI review.
+Any user-facing layout, component, HTML page, or “it looks generic.” Required for `USER_GUIDE.html` and for app screens.
+
+## Ground in the subject
+
+Name the product, the user, and this screen’s job before CSS. Tokens come from the domain (materials, time of day, one real object) — not from a theme pack. A toy store and a ledger cannot share a palette.
+
+**This kit’s HTML** (`USER_GUIDE.html`): charcoal assignment desk.
+
+| Token | Value |
+| --- | --- |
+| Paper | `#10100e` |
+| Ink | `#eceae4` |
+| Frame | `#070706` |
+| Line | `#2a2823` |
+| Safelight | `#ff5a2a` (required / fail only) |
+| Pass | `#5ea37a` |
+| Type | `"Helvetica Neue", Helvetica, Arial, ui-sans-serif` |
+| Mono | `ui-monospace, Menlo, Consolas` |
+| Radius | `2px` |
+| Shadow | none |
+
+**Downstream Next.js apps:** do not paste the kit desk onto a product. Extract or invent **4–6 hex tokens** from *this* product’s job. Write them before CSS. Inside an existing design system, stay surgical — swap tells, do not invent a second brand.
+
+## Color — simple schemes that hold up
+
+One field, one ink, one accent, one line. That is enough.
+
+1. **Dominant field** (~80%): the page. Flat. Not a gradient, not a mesh.
+2. **Ink** (~15%): body text. Contrast ≥ 4.5:1 (3:1 for large type).
+3. **Accent** (~5%): one action or one required state. Recolor-as-decoration fails.
+4. **Line / well**: borders and code wells, one step off the field.
+
+Recipes (pick one that fits the product, then stop):
+
+| Scheme | Field | Ink | Accent | Use when |
+| --- | --- | --- | --- | --- |
+| Charcoal desk | `#10100e` | `#eceae4` | `#ff5a2a` | Tools, manuals, this kit |
+| Paper + ink | `#f4f4f1` | `#171717` | `#0b57d0` | Documents, settings, calm apps |
+| Night + signal | `#0e1116` | `#e6edf3` | `#3fb950` | Ops, status, pass/fail |
+| Warm shop | `#1c1916` | `#f3ece3` | `#e8a317` | Craft, commerce with real goods |
+
+Do not:
+
+- Spread six mid-chroma colors evenly.
+- Use purple→blue, default `blue-600`, or untouched shadcn `zinc` as the identity.
+- Use cream `#F4F1EA` + terracotta (the 2026 editorial default) unless the brief asks.
+- Use acid green or neon vermilion on near-black as decoration.
+- Treat Space Grotesk + slate, or any “tasteful” swap you used last week, as a new idea.
+
+Prefer CSS variables. Self-contained kit HTML: no Google Fonts, no CDN CSS.
+
+## Type
+
+One family, or two that are obviously different (display vs mono). Inter + system sans is not a pairing. Roboto, Space Grotesk, and “the last distinctive font you used” are second-order defaults.
+
+- Line length < 80 characters.
+- Tight display tracking on large sans. Do not italicize or recolor one word of a headline.
+- No tracked-out ALL-CAPS eyebrows, middle-dot meta (`A · B · C`), or `WORD — fragment` labels unless the content needs them.
+- Numbered tickets only when the content is a real sequence.
+
+## Layout
+
+- First viewport = the characteristic thing: command, table, form, named owner. Not a slogan over atmosphere.
+- Mobile (~390): the primary CTA still fits above the fold.
+- Hierarchy from size, weight, and space — not from cards.
+- Landing and marketing pages take a full direction. App chrome (settings, tables) stays quiet and dense.
+- Reject: centered hero + two pills + three icon cards; glass navbar; four-column empty footer; fake metrics; broadsheet hairlines + dense newsprint columns (that look is itself a 2026 default).
+
+## Motion
+
+None, or one moment that answers a click. Fade-and-slide on every section is generated. Respect `prefers-reduced-motion`.
+
+## Process
+
+1. Name the product, the user, and the job of this screen.
+2. Write the 4–6 tokens and one-sentence layout idea.
+3. Check the plan is not a 2026 default (cream editorial, neon-on-black decoration, SaaS card kit, newsprint desk, last week’s “tasteful” swap). If it is, change one axis: field, accent, or structure.
+4. Build. Spend boldness once. Remove one accessory.
+5. Screenshot desktop (~1280) and mobile (~390). Fix from pixels. Ask: would a stranger believe a person chose this?
 
 ## Checks
 
-- First screen shows the real product, task, or workflow.
-- Hierarchy, density, and primary action are obvious.
-- Loading, empty, error, disabled, success, and mobile states exist where relevant.
-- Contrast, focus, labels, and tap targets meet WCAG 2.1 AA.
-- Reject purple-blue gradient heroes, vague SaaS copy, fake dashboards, glass-card soup, and glow rails.
+- A stranger can name the product from the first screen.
+- Loading, empty, error, disabled, success exist where the flow has them.
+- Focus visible, tap targets usable.
+- Copy on the screen is real. If words are public-facing, Copy runs `deslop` last.
 
 ## Tools
 
-Critique from `browser` + `screenshot` + `image-review` first. Do not approve UI from TSX alone.
+`browser` + `screenshot` + `image-review` first. Do not approve UI from TSX or HTML alone.
 
 ## Done when
 
-Desktop and mobile screenshots were read. Blocker detector findings are fixed.
+Desktop and mobile images were read. Token list is in the change or in `DESIGN.md`. No P0 slop from `deslop` remains unless Design names it as an accepted exception.

package/examples/next-supabase-installed/.antigravity/runtime-skills/product-copy/SKILL.md

@@ -7,16 +7,48 @@ description: Use for headlines, CTAs, empty states, and conversion copy. Review
 
 ## Use when
 
-Landing pages, CTAs, positioning, onboarding, empty states, or pricing copy.
+Landing pages, CTAs, positioning, onboarding, empty states, pricing copy, or the public user guide (`USER_GUIDE.html`).
+
+## Audience
+
+Engineers and coding agents on a Next.js + Supabase repo who already have Cursor, Claude, Codex, Copilot, or Antigravity. They do not need a manifesto. They need to know **who to @**, **what to paste**, and **what “done” looks like**.
+
+## Positioning (this product)
+
+Name the specialist. Prove the screen. Six agents, twelve skills, five IDEs. QA is two screenshots, not a file diff.
+
+Do not describe this as an “agent operating system,” a copilot marketplace, or “AI-powered delivery.”
+
+## Voice
+
+Direct, specific, slightly dry. Prefer verbs: ask, paste, open, capture, reject.
+
+Use: specialist, owner, screenshot, desktop, mobile, fail-closed, paste, Planner, browser-qa.  
+Avoid: supercharge, seamless, unlock, copilot for X, 10x, enterprise-grade, magic, revolutionize.
+
+## Headline test
+
+If the headline could sell GitHub Copilot, Cursor, or any agent marketplace, rewrite it.
+
+Good: `Ask one specialist. Then open the running UI.`  
+Bad: `Supercharge your AI workflow with agents and skills.`
+
+## CTA test
+
+A CTA is a command or a pasteable prompt, not “Get started.”
+
+Good: `Paste this to Planner` followed by the plan prompt.  
+Good: `npx --yes @appsforgood/next-supabase-kit init --activate all`  
+Bad: `Start building today`.
 
 ## Checks
 
 - Audience, pain, and outcome are specific to this product.
-- Claims are backed or marked as assumptions.
+- Claims are backed or marked as assumptions. Do not invent user counts or “best-in-class.”
 - Headlines could not fit any competitor.
 - CTAs say what happens next.
-- Review the words on a screenshot for truncation and hierarchy.
+- Review the words on a screenshot for truncation, wrapping, and hierarchy. Copy that only exists in markdown is not approved for a public HTML page.
 
 ## Done when
 
-Copy is specific and the rendered screenshot shows the key line and CTA clearly.
+Copy is specific and the rendered screenshot shows the key line and CTA clearly on desktop and mobile. Copy then runs `deslop` as the last pass — this skill is not the end of the run.

package/examples/next-supabase-installed/.claude/agents/app-engineer.md

@@ -23,6 +23,8 @@ Code-only “it should work” is incomplete for anything the user can see or cl
 
 `nextjs-app-router`, `supabase-auth-rls`, `postgres-migrations`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Handoff
 
 Security reviews auth/data/secret changes. Design reviews user-facing screens. QA always reviews behavior or UI changes with `browser-qa`.

package/examples/next-supabase-installed/.claude/agents/copy.md

@@ -1,6 +1,6 @@
 ---
 name: copy
-description: Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX.
+description: Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX. Always finish with the deslop skill.
 tools: [repo, edit, screenshot, image-review]
 requiredTools: [repo, image-review]
 ---
@@ -9,6 +9,8 @@ requiredTools: [repo, image-review]
 
 Write and review headlines, CTAs, empty states, and onboarding copy. Approve words as they appear on screen.
 
+For this kit, copy must name specialists and ask the reader to paste a prompt or run `init`. Headlines that could sell any copilot fail. Public HTML is not done until the rendered screenshot shows the key line and CTA without truncation.
+
 ## Use when
 
 Landing pages, CTAs, positioning, empty states, pricing, or conversion copy.
@@ -20,8 +22,19 @@ Required: read the repo and review rendered copy from screenshots when the surfa
 
 ## Skills
 
-`product-copy`, `frontend-design`.
+`product-copy` first, then `frontend-design` if the words live on a screen. **`deslop` last. Always.** Do not hand off after `product-copy` alone.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
+## End run
+
+1. Write or edit with `product-copy`.
+2. Read the rendered screenshot (desktop and mobile when the surface is a page).
+3. Run `deslop`. Fix writing tells. List leftover visual P0s for Design.
+4. Run `deslop` a second time on your own rewrite.
+
+If you skip step 3, the work is not done.
 
 ## Done when
 
-Copy is specific to this product, claims are not invented, and the rendered screenshot shows the CTA and key line without truncation or hierarchy collapse.
+Copy is specific to this product, claims are not invented, `deslop` has been run as the last pass, and the rendered screenshot shows the CTA and key line without truncation or hierarchy collapse.

package/examples/next-supabase-installed/.claude/agents/design.md

@@ -9,6 +9,10 @@ requiredTools: [browser, screenshot, image-review]
 
 Review and improve user-facing UI. Start from screenshots. Reject a single happy-path shot and reject generic AI-looking layout.
 
+This kit’s HTML (especially `USER_GUIDE.html`) is an assignment desk, not a SaaS landing page. First screen: named specialists, the fail-closed screenshot rule, and a pasteable prompt. Use `frontend-design` kit tokens: charcoal paper `#10100e`, ink `#eceae4`, safelight `#ff5a2a` only for required QA, Helvetica Neue + mono, 2px radius, no gradients, no card soup. Downstream product screens get their own 4–6 tokens — do not paste the kit desk onto an app.
+
+Public words on a screen hand to Copy. Copy finishes with `deslop`. You restyle leftover visual P0s.
+
 ## Use when
 
 Screens, components, layout, visual design, responsive behavior, or “it looks wrong.”
@@ -20,7 +24,9 @@ Required: open the running UI, capture desktop (~1280) and mobile (~390), and wr
 
 ## Skills
 
-`frontend-design`, `accessibility-wcag`, `browser-qa`.
+`frontend-design`, `accessibility-wcag`, `browser-qa`. Visual P0 list lives in `deslop`; you fix pixels, Copy does not.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
 
 ## Done when
 

package/examples/next-supabase-installed/.claude/agents/planner.md

@@ -19,6 +19,14 @@ Allowed: `repo` (read and search only).
 Required: read the repo before naming owners.  
 Do not edit product code.
 
+## Skills
+
+`planning`.
+
+You name the owner and reviewers. You do not run the other agents.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Handoff
 
 Name one owner from: `app-engineer`, `security`, `design`, `qa`, `copy`.  

package/examples/next-supabase-installed/.claude/agents/qa.md

@@ -23,6 +23,8 @@ Hard fail if the only evidence is a file diff.
 
 `browser-qa`, `testing-qa`, `accessibility-wcag`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Must not accept
 
 - “Reviewed `page.tsx`; layout looks correct.”

package/examples/next-supabase-installed/.claude/agents/security.md

@@ -23,6 +23,8 @@ RLS/SQL-only findings may stay code + tests.
 
 `owasp-security-review`, `supabase-auth-rls`, `postgres-migrations`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Done when
 
 Access control is enforced in Postgres or the server, not only in the UI. Login, redirect, and denied states were checked in the browser when they exist. Secrets stay server-only.

package/examples/next-supabase-installed/.codex/agents/app-engineer.toml

@@ -28,6 +28,8 @@ Code-only “it should work” is incomplete for anything the user can see or cl
 
 `nextjs-app-router`, `supabase-auth-rls`, `postgres-migrations`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Handoff
 
 Security reviews auth/data/secret changes. Design reviews user-facing screens. QA always reviews behavior or UI changes with `browser-qa`.

package/examples/next-supabase-installed/.codex/agents/copy.toml

@@ -1,11 +1,11 @@
 name = "copy"
-description = "Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX."
+description = "Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX. Always finish with the deslop skill."
 model_reasoning_effort = "medium"
 
 developer_instructions = """
 ---
 name: copy
-description: Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX.
+description: Use for public-facing or conversion copy. Review the rendered words in screenshots, not just strings in TSX. Always finish with the deslop skill.
 tools: [repo, edit, screenshot, image-review]
 requiredTools: [repo, image-review]
 ---
@@ -14,6 +14,8 @@ requiredTools: [repo, image-review]
 
 Write and review headlines, CTAs, empty states, and onboarding copy. Approve words as they appear on screen.
 
+For this kit, copy must name specialists and ask the reader to paste a prompt or run `init`. Headlines that could sell any copilot fail. Public HTML is not done until the rendered screenshot shows the key line and CTA without truncation.
+
 ## Use when
 
 Landing pages, CTAs, positioning, empty states, pricing, or conversion copy.
@@ -25,10 +27,21 @@ Required: read the repo and review rendered copy from screenshots when the surfa
 
 ## Skills
 
-`product-copy`, `frontend-design`.
+`product-copy` first, then `frontend-design` if the words live on a screen. **`deslop` last. Always.** Do not hand off after `product-copy` alone.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
+## End run
+
+1. Write or edit with `product-copy`.
+2. Read the rendered screenshot (desktop and mobile when the surface is a page).
+3. Run `deslop`. Fix writing tells. List leftover visual P0s for Design.
+4. Run `deslop` a second time on your own rewrite.
+
+If you skip step 3, the work is not done.
 
 ## Done when
 
-Copy is specific to this product, claims are not invented, and the rendered screenshot shows the CTA and key line without truncation or hierarchy collapse.
+Copy is specific to this product, claims are not invented, `deslop` has been run as the last pass, and the rendered screenshot shows the CTA and key line without truncation or hierarchy collapse.
 
 """

package/examples/next-supabase-installed/.codex/agents/design.toml

@@ -14,6 +14,10 @@ requiredTools: [browser, screenshot, image-review]
 
 Review and improve user-facing UI. Start from screenshots. Reject a single happy-path shot and reject generic AI-looking layout.
 
+This kit’s HTML (especially `USER_GUIDE.html`) is an assignment desk, not a SaaS landing page. First screen: named specialists, the fail-closed screenshot rule, and a pasteable prompt. Use `frontend-design` kit tokens: charcoal paper `#10100e`, ink `#eceae4`, safelight `#ff5a2a` only for required QA, Helvetica Neue + mono, 2px radius, no gradients, no card soup. Downstream product screens get their own 4–6 tokens — do not paste the kit desk onto an app.
+
+Public words on a screen hand to Copy. Copy finishes with `deslop`. You restyle leftover visual P0s.
+
 ## Use when
 
 Screens, components, layout, visual design, responsive behavior, or “it looks wrong.”
@@ -25,7 +29,9 @@ Required: open the running UI, capture desktop (~1280) and mobile (~390), and wr
 
 ## Skills
 
-`frontend-design`, `accessibility-wcag`, `browser-qa`.
+`frontend-design`, `accessibility-wcag`, `browser-qa`. Visual P0 list lives in `deslop`; you fix pixels, Copy does not.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
 
 ## Done when
 

package/examples/next-supabase-installed/.codex/agents/planner.toml

@@ -24,6 +24,14 @@ Allowed: `repo` (read and search only).
 Required: read the repo before naming owners.  
 Do not edit product code.
 
+## Skills
+
+`planning`.
+
+You name the owner and reviewers. You do not run the other agents.
+
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Handoff
 
 Name one owner from: `app-engineer`, `security`, `design`, `qa`, `copy`.  

package/examples/next-supabase-installed/.codex/agents/qa.toml

@@ -28,6 +28,8 @@ Hard fail if the only evidence is a file diff.
 
 `browser-qa`, `testing-qa`, `accessibility-wcag`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Must not accept
 
 - “Reviewed `page.tsx`; layout looks correct.”

package/examples/next-supabase-installed/.codex/agents/security.toml

@@ -28,6 +28,8 @@ RLS/SQL-only findings may stay code + tests.
 
 `owasp-security-review`, `supabase-auth-rls`, `postgres-migrations`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Done when
 
 Access control is enforced in Postgres or the server, not only in the UI. Login, redirect, and denied states were checked in the browser when they exist. Secrets stay server-only.

package/examples/next-supabase-installed/.cursor/agents/app-engineer.md

@@ -23,6 +23,8 @@ Code-only “it should work” is incomplete for anything the user can see or cl
 
 `nextjs-app-router`, `supabase-auth-rls`, `postgres-migrations`.
 
+Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
+
 ## Handoff
 
 Security reviews auth/data/secret changes. Design reviews user-facing screens. QA always reviews behavior or UI changes with `browser-qa`.