@aslomon/effectum 0.3.3 → 0.4.0

package/system/teams/profiles.md

@@ -0,0 +1,76 @@
+# Agent Team Profiles
+
+Predefined team compositions for `/orchestrate` in Agent Teams mode.
+Each profile maps workflow types to specialized teammates.
+
+## web-feature (3 Teammates)
+
+Standard web feature with frontend, backend, and tests.
+
+| Teammate | Role                                      | Agent Specialization |
+| -------- | ----------------------------------------- | -------------------- |
+| frontend | UI components, pages, styling, responsive | frontend-developer   |
+| backend  | API routes, services, data layer          | backend-developer    |
+| testing  | Unit + integration + E2E tests            | test-automator       |
+
+**Use when:** Adding a feature that spans UI and API layers.
+**File ownership:** frontend owns `src/components/`, `src/app/` pages. Backend owns `src/lib/`, `src/app/api/`. Testing owns `tests/`, `*.test.*` files.
+
+## fullstack (5 Teammates)
+
+Full-stack feature with DB, API, UI, tests, and review.
+
+| Teammate | Role                                      | Agent Specialization             |
+| -------- | ----------------------------------------- | -------------------------------- |
+| frontend | UI components, pages                      | frontend-developer               |
+| backend  | API routes, services                      | backend-developer                |
+| database | Migrations, RLS policies, type generation | postgres-pro                     |
+| testing  | All test layers                           | test-automator                   |
+| reviewer | Code review + security audit              | code-reviewer, security-engineer |
+
+**Use when:** New feature requiring schema changes, API, and UI.
+**File ownership:** Database owns `supabase/migrations/`. Reviewer works read-only until implementation phase complete.
+
+## frontend-only (3 Teammates)
+
+Frontend-focused work — layout, components, content.
+
+| Teammate   | Role                                               | Agent Specialization |
+| ---------- | -------------------------------------------------- | -------------------- |
+| layout     | Page structure, routing, layouts, navigation       | nextjs-developer     |
+| components | UI components, forms, modals, interactive elements | react-specialist     |
+| content    | i18n translations, content, assets, accessibility  | frontend-developer   |
+
+**Use when:** Building pages/UI without backend changes (e.g., landing page, static site).
+**File ownership:** Layout owns `src/app/` layouts and pages. Components owns `src/components/`. Content owns `messages/`, `public/`.
+
+## review (2 Teammates)
+
+Parallel code review and security audit.
+
+| Teammate | Role                                       | Agent Specialization |
+| -------- | ------------------------------------------ | -------------------- |
+| quality  | Code quality, best practices, performance  | code-reviewer        |
+| security | Security vulnerabilities, auth, RLS, OWASP | security-engineer    |
+
+**Use when:** Pre-merge review of a large feature branch.
+**File ownership:** Both read-only — produce reports, not code changes.
+
+## custom
+
+User-defined team composition.
+
+```
+/orchestrate custom "frontend-developer,backend-developer,postgres-pro" "Feature description"
+```
+
+**Use when:** No predefined profile fits the task.
+
+## Best Practices
+
+- **3-5 Teammates** for most workflows — more creates coordination overhead
+- **5-6 Tasks per Teammate** for optimal throughput
+- **Clear file ownership** — avoid two Teammates editing the same file
+- **Database first** — if schema changes needed, database Teammate completes before others start
+- **Reviewer last** — reviewer Teammate starts after implementation Teammates finish
+- **Use dependencies** — `blocked by:` in tasks.md prevents premature work

package/system/templates/CLAUDE.md.tmpl

@@ -72,6 +72,10 @@
 | `/ralph-loop`     | Full Auto      | Iterative autonomous implementation      |
 
 
+## Available CLI Tools
+
+{{AVAILABLE_TOOLS}}
+
 ## Context7 — Always Use for Research
 
 - Always use Context7 MCP (`resolve_library_id` -> `get_library_docs`) when:
@@ -96,6 +100,8 @@ The following hooks run automatically. Do NOT duplicate their behavior:
 - **Guardrails Injection**: At session start and after compaction, `~/.claude/guardrails.md` (global) and `$PROJECT/.claude/guardrails.md` (project) are loaded. Follow them strictly.
 - **Transcript Backup**: Transcripts are backed up before context compaction to `.claude/backups/`.
 - **Protected Files**: `.env`, `.env.local`, `.env.production`, `secrets/`, `.git/`, lock files cannot be written to. Use Bash for env file operations if absolutely needed.
+- **Secret Detection**: Before `git commit` and `git push`, staged changes are scanned for API keys, tokens, and passwords. Blocked if secrets found.
+- **TDD Enforcement**: Before stopping, checks that test files were modified alongside source files. Blocks if source changed without tests.
 - **Destructive Command Blocker**: `rm -rf /`, `DROP TABLE`, `--force push`, `reset --hard` are blocked.
 - **Desktop Notifications**: User gets OS notifications on permission prompts and task completion.
 

package/system/templates/settings.json.tmpl

@@ -71,6 +71,11 @@
             "type": "command",
             "command": "bash -c 'CMD=$(jq -r \".tool_input.command\" <<< \"$(cat)\"); if echo \"$CMD\" | grep -qE \"^git commit\"; then MSG=$(echo \"$CMD\" | grep -oP \"(?<=-m \\\")[^\\\"]+|(?<=-m \\x27)[^\\x27]+\" || echo \"\"); if [ -n \"$MSG\" ] && [ ${#MSG} -lt 10 ]; then echo \"Commit message too short (min 10 chars). Be descriptive.\" >&2; exit 2; fi; fi; exit 0'",
             "statusMessage": "Checking commit message..."
+          },
+          {
+            "type": "command",
+            "command": "bash -c 'CMD=$(jq -r \".tool_input.command\" <<< \"$(cat)\"); if echo \"$CMD\" | grep -qE \"^git (commit|push)\"; then DIFF=$(git diff --cached --diff-filter=ACM 2>/dev/null || git diff HEAD 2>/dev/null); if echo \"$DIFF\" | grep -qEi \"(sk-[a-zA-Z0-9]{20,}|sk_live_|sk_test_|AKIA[A-Z0-9]{16}|ghp_[a-zA-Z0-9]{36}|gho_[a-zA-Z0-9]{36}|glpat-[a-zA-Z0-9-]{20}|xox[bpras]-[a-zA-Z0-9-]+|password\\s*[:=]\\s*[\\x27\\\"][^\\x27\\\"]{8,})\"; then echo \"Potential secret detected in staged changes! Review before committing.\" >&2; exit 2; fi; fi; exit 0'",
+            "statusMessage": "Scanning for secrets..."
           }
         ]
       }
@@ -130,6 +135,12 @@
             "timeout": 30,
             "statusMessage": "Verifying work completion..."
           },
+          {
+            "type": "prompt",
+            "prompt": "Check if tests were written for code changes. Run: git diff --name-only HEAD 2>/dev/null\n\nAnalyze the changed files:\n1. Identify source code files (not config, not docs, not tests)\n2. Check if corresponding test files were also changed or created\n3. If source files changed but NO test files changed, respond {\"ok\": false, \"reason\": \"Source files were modified but no tests were written. Write tests before stopping.\"}\n4. If tests exist for the changes, or only config/docs changed, respond {\"ok\": true}\n5. If stop_hook_active is true in input, be lenient — only block for completely untested new features.\n\nContext: $ARGUMENTS",
+            "timeout": 30,
+            "statusMessage": "Checking test coverage..."
+          },
           {
             "type": "agent",
             "prompt": "Check if meaningful code changes were made in this session by running: git diff --stat HEAD 2>/dev/null\n\nIf there are staged or unstaged changes to source code files (not just config/formatting):\n1. Read the current CHANGELOG.md if it exists\n2. Add entries under [Unreleased] following Keep a Changelog format (Added/Changed/Fixed/Removed)\n3. If CHANGELOG.md doesn't exist, create it with a proper header and the current changes\n\nIf changes are trivial (only formatting, only comments, only config), skip and respond {\"ok\": true}.\nIf stop_hook_active is true, respond {\"ok\": true} immediately — do not update CHANGELOG on second pass.\n\nContext: $ARGUMENTS",