@atlashub/smartstack-cli 1.5.0 → 1.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (159) hide show
  1. package/.documentation/agents.html +920 -916
  2. package/.documentation/apex.html +1022 -1018
  3. package/.documentation/business-analyse.html +1505 -1501
  4. package/.documentation/commands.html +684 -680
  5. package/.documentation/css/styles.css +2168 -2168
  6. package/.documentation/efcore.html +2509 -2505
  7. package/.documentation/gitflow.html +2622 -2618
  8. package/.documentation/hooks.html +417 -413
  9. package/.documentation/index.html +327 -323
  10. package/.documentation/init.html +565 -0
  11. package/.documentation/installation.html +548 -462
  12. package/.documentation/js/app.js +794 -794
  13. package/.documentation/ralph-loop.html +534 -530
  14. package/.documentation/test-web.html +517 -513
  15. package/config/default-config.json +86 -86
  16. package/config/settings.json +53 -53
  17. package/config/settings.local.example.json +16 -16
  18. package/dist/index.js +18 -8
  19. package/dist/index.js.map +1 -1
  20. package/package.json +88 -88
  21. package/templates/agents/action.md +36 -36
  22. package/templates/agents/efcore/conflicts.md +84 -84
  23. package/templates/agents/efcore/db-deploy.md +51 -51
  24. package/templates/agents/efcore/db-reset.md +59 -59
  25. package/templates/agents/efcore/db-seed.md +56 -56
  26. package/templates/agents/efcore/db-status.md +64 -64
  27. package/templates/agents/efcore/migration.md +85 -85
  28. package/templates/agents/efcore/rebase-snapshot.md +62 -62
  29. package/templates/agents/efcore/scan.md +90 -90
  30. package/templates/agents/efcore/squash.md +67 -67
  31. package/templates/agents/explore-codebase.md +65 -65
  32. package/templates/agents/explore-docs.md +97 -97
  33. package/templates/agents/fix-grammar.md +49 -49
  34. package/templates/agents/gitflow/abort.md +45 -45
  35. package/templates/agents/gitflow/cleanup.md +85 -85
  36. package/templates/agents/gitflow/commit.md +40 -40
  37. package/templates/agents/gitflow/exec.md +48 -48
  38. package/templates/agents/gitflow/finish.md +92 -92
  39. package/templates/agents/gitflow/init.md +139 -139
  40. package/templates/agents/gitflow/merge.md +62 -62
  41. package/templates/agents/gitflow/plan.md +42 -42
  42. package/templates/agents/gitflow/pr.md +78 -78
  43. package/templates/agents/gitflow/review.md +49 -49
  44. package/templates/agents/gitflow/start.md +61 -61
  45. package/templates/agents/gitflow/status.md +32 -32
  46. package/templates/agents/snipper.md +36 -36
  47. package/templates/agents/websearch.md +46 -46
  48. package/templates/commands/_resources/formatting-guide.md +124 -124
  49. package/templates/commands/ai-prompt.md +315 -315
  50. package/templates/commands/apex/1-analyze.md +100 -100
  51. package/templates/commands/apex/2-plan.md +145 -145
  52. package/templates/commands/apex/3-execute.md +171 -171
  53. package/templates/commands/apex/4-examine.md +116 -116
  54. package/templates/commands/apex/5-tasks.md +209 -209
  55. package/templates/commands/apex.md +76 -76
  56. package/templates/commands/application/create.md +362 -362
  57. package/templates/commands/application/templates-backend.md +463 -463
  58. package/templates/commands/application/templates-frontend.md +517 -517
  59. package/templates/commands/application/templates-i18n.md +478 -478
  60. package/templates/commands/application/templates-seed.md +362 -362
  61. package/templates/commands/application.md +303 -303
  62. package/templates/commands/business-analyse/0-orchestrate.md +640 -640
  63. package/templates/commands/business-analyse/1-init.md +269 -269
  64. package/templates/commands/business-analyse/2-discover.md +520 -520
  65. package/templates/commands/business-analyse/3-analyse.md +408 -408
  66. package/templates/commands/business-analyse/4-specify.md +598 -598
  67. package/templates/commands/business-analyse/5-validate.md +326 -326
  68. package/templates/commands/business-analyse/6-handoff.md +746 -746
  69. package/templates/commands/business-analyse/7-doc-html.md +602 -602
  70. package/templates/commands/business-analyse/bug.md +325 -325
  71. package/templates/commands/business-analyse/change-request.md +368 -368
  72. package/templates/commands/business-analyse/hotfix.md +200 -200
  73. package/templates/commands/business-analyse.md +640 -640
  74. package/templates/commands/controller/create.md +216 -216
  75. package/templates/commands/controller/postman-templates.md +528 -528
  76. package/templates/commands/controller/templates.md +600 -600
  77. package/templates/commands/controller.md +337 -337
  78. package/templates/commands/create/agent.md +138 -138
  79. package/templates/commands/create/command.md +166 -166
  80. package/templates/commands/create/hook.md +234 -234
  81. package/templates/commands/create/plugin.md +329 -329
  82. package/templates/commands/create/project.md +507 -507
  83. package/templates/commands/create/skill.md +199 -199
  84. package/templates/commands/create.md +220 -220
  85. package/templates/commands/debug.md +95 -95
  86. package/templates/commands/documentation/module.md +202 -202
  87. package/templates/commands/documentation/templates.md +432 -432
  88. package/templates/commands/documentation.md +190 -190
  89. package/templates/commands/efcore/_env-check.md +153 -153
  90. package/templates/commands/efcore/conflicts.md +186 -186
  91. package/templates/commands/efcore/db-deploy.md +193 -193
  92. package/templates/commands/efcore/db-reset.md +426 -426
  93. package/templates/commands/efcore/db-seed.md +326 -326
  94. package/templates/commands/efcore/db-status.md +226 -226
  95. package/templates/commands/efcore/migration.md +400 -400
  96. package/templates/commands/efcore/rebase-snapshot.md +264 -264
  97. package/templates/commands/efcore/scan.md +198 -198
  98. package/templates/commands/efcore/squash.md +298 -298
  99. package/templates/commands/efcore.md +224 -224
  100. package/templates/commands/epct.md +69 -69
  101. package/templates/commands/explain.md +186 -186
  102. package/templates/commands/explore.md +45 -45
  103. package/templates/commands/feature-full.md +267 -267
  104. package/templates/commands/gitflow/1-init.md +1038 -1038
  105. package/templates/commands/gitflow/10-start.md +768 -768
  106. package/templates/commands/gitflow/11-finish.md +457 -457
  107. package/templates/commands/gitflow/12-cleanup.md +276 -276
  108. package/templates/commands/gitflow/13-sync.md +216 -216
  109. package/templates/commands/gitflow/14-rebase.md +251 -251
  110. package/templates/commands/gitflow/2-status.md +277 -277
  111. package/templates/commands/gitflow/3-commit.md +344 -344
  112. package/templates/commands/gitflow/4-plan.md +145 -145
  113. package/templates/commands/gitflow/5-exec.md +147 -147
  114. package/templates/commands/gitflow/6-abort.md +344 -344
  115. package/templates/commands/gitflow/7-pull-request.md +453 -355
  116. package/templates/commands/gitflow/8-review.md +240 -176
  117. package/templates/commands/gitflow/9-merge.md +451 -365
  118. package/templates/commands/gitflow.md +128 -128
  119. package/templates/commands/implement.md +663 -663
  120. package/templates/commands/init.md +567 -562
  121. package/templates/commands/mcp-integration.md +330 -330
  122. package/templates/commands/notification.md +129 -129
  123. package/templates/commands/oneshot.md +57 -57
  124. package/templates/commands/quick-search.md +72 -72
  125. package/templates/commands/ralph-loop/cancel-ralph.md +18 -18
  126. package/templates/commands/ralph-loop/help.md +126 -126
  127. package/templates/commands/ralph-loop/ralph-loop.md +18 -18
  128. package/templates/commands/review.md +106 -106
  129. package/templates/commands/utils/test-web-config.md +160 -160
  130. package/templates/commands/utils/test-web.md +151 -151
  131. package/templates/commands/validate.md +233 -233
  132. package/templates/commands/workflow.md +193 -193
  133. package/templates/gitflow/config.json +138 -138
  134. package/templates/hooks/ef-migration-check.md +139 -139
  135. package/templates/hooks/hooks.json +25 -25
  136. package/templates/hooks/stop-hook.sh +177 -177
  137. package/templates/skills/ai-prompt/SKILL.md +778 -778
  138. package/templates/skills/application/SKILL.md +563 -563
  139. package/templates/skills/application/templates-backend.md +450 -450
  140. package/templates/skills/application/templates-frontend.md +531 -531
  141. package/templates/skills/application/templates-i18n.md +520 -520
  142. package/templates/skills/application/templates-seed.md +647 -647
  143. package/templates/skills/business-analyse/SKILL.md +191 -191
  144. package/templates/skills/business-analyse/questionnaire.md +283 -283
  145. package/templates/skills/business-analyse/templates-frd.md +477 -477
  146. package/templates/skills/business-analyse/templates-react.md +580 -580
  147. package/templates/skills/controller/SKILL.md +240 -240
  148. package/templates/skills/controller/postman-templates.md +614 -614
  149. package/templates/skills/controller/templates.md +1468 -1468
  150. package/templates/skills/documentation/SKILL.md +133 -133
  151. package/templates/skills/documentation/templates.md +476 -476
  152. package/templates/skills/feature-full/SKILL.md +838 -838
  153. package/templates/skills/notification/SKILL.md +555 -555
  154. package/templates/skills/ui-components/SKILL.md +870 -870
  155. package/templates/skills/workflow/SKILL.md +582 -582
  156. package/templates/test-web/api-health.json +38 -38
  157. package/templates/test-web/minimal.json +19 -19
  158. package/templates/test-web/npm-package.json +46 -46
  159. package/templates/test-web/seo-check.json +54 -54
@@ -1,126 +1,126 @@
1
- ---
2
- description: "Explain Ralph Loop plugin and available commands"
3
- ---
4
-
5
- # Ralph Loop Plugin Help
6
-
7
- Please explain the following to the user:
8
-
9
- ## What is Ralph Loop?
10
-
11
- Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
12
-
13
- **Core concept:**
14
- ```bash
15
- while :; do
16
- cat PROMPT.md | claude-code --continue
17
- done
18
- ```
19
-
20
- The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
21
-
22
- **Each iteration:**
23
- 1. Claude receives the SAME prompt
24
- 2. Works on the task, modifying files
25
- 3. Tries to exit
26
- 4. Stop hook intercepts and feeds the same prompt again
27
- 5. Claude sees its previous work in the files
28
- 6. Iteratively improves until completion
29
-
30
- The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
31
-
32
- ## Available Commands
33
-
34
- ### /ralph-loop <PROMPT> [OPTIONS]
35
-
36
- Start a Ralph loop in your current session.
37
-
38
- **Usage:**
39
- ```
40
- /ralph-loop "Refactor the cache layer" --max-iterations 20
41
- /ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
42
- ```
43
-
44
- **Options:**
45
- - `--max-iterations <n>` - Max iterations before auto-stop
46
- - `--completion-promise <text>` - Promise phrase to signal completion
47
-
48
- **How it works:**
49
- 1. Creates `.claude/.ralph-loop.local.md` state file
50
- 2. You work on the task
51
- 3. When you try to exit, stop hook intercepts
52
- 4. Same prompt fed back
53
- 5. You see your previous work
54
- 6. Continues until promise detected or max iterations
55
-
56
- ---
57
-
58
- ### /cancel-ralph
59
-
60
- Cancel an active Ralph loop (removes the loop state file).
61
-
62
- **Usage:**
63
- ```
64
- /cancel-ralph
65
- ```
66
-
67
- **How it works:**
68
- - Checks for active loop state file
69
- - Removes `.claude/.ralph-loop.local.md`
70
- - Reports cancellation with iteration count
71
-
72
- ---
73
-
74
- ## Key Concepts
75
-
76
- ### Completion Promises
77
-
78
- To signal completion, Claude must output a `<promise>` tag:
79
-
80
- ```
81
- <promise>TASK COMPLETE</promise>
82
- ```
83
-
84
- The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
85
-
86
- ### Self-Reference Mechanism
87
-
88
- The "loop" doesn't mean Claude talks to itself. It means:
89
- - Same prompt repeated
90
- - Claude's work persists in files
91
- - Each iteration sees previous attempts
92
- - Builds incrementally toward goal
93
-
94
- ## Example
95
-
96
- ### Interactive Bug Fix
97
-
98
- ```
99
- /ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
100
- ```
101
-
102
- You'll see Ralph:
103
- - Attempt fixes
104
- - Run tests
105
- - See failures
106
- - Iterate on solution
107
- - In your current session
108
-
109
- ## When to Use Ralph
110
-
111
- **Good for:**
112
- - Well-defined tasks with clear success criteria
113
- - Tasks requiring iteration and refinement
114
- - Iterative development with self-correction
115
- - Greenfield projects
116
-
117
- **Not good for:**
118
- - Tasks requiring human judgment or design decisions
119
- - One-shot operations
120
- - Tasks with unclear success criteria
121
- - Debugging production issues (use targeted debugging instead)
122
-
123
- ## Learn More
124
-
125
- - Original technique: https://ghuntley.com/ralph/
126
- - Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
1
+ ---
2
+ description: "Explain Ralph Loop plugin and available commands"
3
+ ---
4
+
5
+ # Ralph Loop Plugin Help
6
+
7
+ Please explain the following to the user:
8
+
9
+ ## What is Ralph Loop?
10
+
11
+ Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
12
+
13
+ **Core concept:**
14
+ ```bash
15
+ while :; do
16
+ cat PROMPT.md | claude-code --continue
17
+ done
18
+ ```
19
+
20
+ The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
21
+
22
+ **Each iteration:**
23
+ 1. Claude receives the SAME prompt
24
+ 2. Works on the task, modifying files
25
+ 3. Tries to exit
26
+ 4. Stop hook intercepts and feeds the same prompt again
27
+ 5. Claude sees its previous work in the files
28
+ 6. Iteratively improves until completion
29
+
30
+ The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
31
+
32
+ ## Available Commands
33
+
34
+ ### /ralph-loop <PROMPT> [OPTIONS]
35
+
36
+ Start a Ralph loop in your current session.
37
+
38
+ **Usage:**
39
+ ```
40
+ /ralph-loop "Refactor the cache layer" --max-iterations 20
41
+ /ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
42
+ ```
43
+
44
+ **Options:**
45
+ - `--max-iterations <n>` - Max iterations before auto-stop
46
+ - `--completion-promise <text>` - Promise phrase to signal completion
47
+
48
+ **How it works:**
49
+ 1. Creates `.claude/.ralph-loop.local.md` state file
50
+ 2. You work on the task
51
+ 3. When you try to exit, stop hook intercepts
52
+ 4. Same prompt fed back
53
+ 5. You see your previous work
54
+ 6. Continues until promise detected or max iterations
55
+
56
+ ---
57
+
58
+ ### /cancel-ralph
59
+
60
+ Cancel an active Ralph loop (removes the loop state file).
61
+
62
+ **Usage:**
63
+ ```
64
+ /cancel-ralph
65
+ ```
66
+
67
+ **How it works:**
68
+ - Checks for active loop state file
69
+ - Removes `.claude/.ralph-loop.local.md`
70
+ - Reports cancellation with iteration count
71
+
72
+ ---
73
+
74
+ ## Key Concepts
75
+
76
+ ### Completion Promises
77
+
78
+ To signal completion, Claude must output a `<promise>` tag:
79
+
80
+ ```
81
+ <promise>TASK COMPLETE</promise>
82
+ ```
83
+
84
+ The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
85
+
86
+ ### Self-Reference Mechanism
87
+
88
+ The "loop" doesn't mean Claude talks to itself. It means:
89
+ - Same prompt repeated
90
+ - Claude's work persists in files
91
+ - Each iteration sees previous attempts
92
+ - Builds incrementally toward goal
93
+
94
+ ## Example
95
+
96
+ ### Interactive Bug Fix
97
+
98
+ ```
99
+ /ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
100
+ ```
101
+
102
+ You'll see Ralph:
103
+ - Attempt fixes
104
+ - Run tests
105
+ - See failures
106
+ - Iterate on solution
107
+ - In your current session
108
+
109
+ ## When to Use Ralph
110
+
111
+ **Good for:**
112
+ - Well-defined tasks with clear success criteria
113
+ - Tasks requiring iteration and refinement
114
+ - Iterative development with self-correction
115
+ - Greenfield projects
116
+
117
+ **Not good for:**
118
+ - Tasks requiring human judgment or design decisions
119
+ - One-shot operations
120
+ - Tasks with unclear success criteria
121
+ - Debugging production issues (use targeted debugging instead)
122
+
123
+ ## Learn More
124
+
125
+ - Original technique: https://ghuntley.com/ralph/
126
+ - Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
@@ -1,18 +1,18 @@
1
- ---
2
- description: "Start Ralph Loop in current session"
3
- argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
4
- allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
5
- hide-from-slash-command-tool: "true"
6
- ---
7
-
8
- # Ralph Loop Command
9
-
10
- Execute the setup script to initialize the Ralph loop:
11
-
12
- ```!
13
- "${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
14
- ```
15
-
16
- Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
17
-
18
- CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
1
+ ---
2
+ description: "Start Ralph Loop in current session"
3
+ argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
4
+ allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
5
+ hide-from-slash-command-tool: "true"
6
+ ---
7
+
8
+ # Ralph Loop Command
9
+
10
+ Execute the setup script to initialize the Ralph loop:
11
+
12
+ ```!
13
+ "${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
14
+ ```
15
+
16
+ Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
17
+
18
+ CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
@@ -1,106 +1,106 @@
1
- ---
2
- description: Quick code review - review current PR changes and output directly
3
- allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
4
- ---
5
-
6
- You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
7
-
8
- **You need to ULTRA THINK at every step.**
9
-
10
- ## Workflow
11
-
12
- 1. **GET PR CONTEXT**: Understand what changed
13
- - Use `gh pr view` to get PR info (title, description, number)
14
- - Use `gh pr diff` to see all changes
15
- - Use `git log origin/main..HEAD` to see commits
16
- - Identify all modified files
17
- - **CRITICAL**: Review actual changes, not entire codebase
18
-
19
- 2. **FEATURE REVIEW**: Verify implementation correctness
20
- - **Read changed files**: Review implementation in context
21
- - **Check requirements**: Compare changes against PR description
22
- - **Verify completeness**: Ensure requested features are implemented
23
- - **Test coverage**: Check if tests were added for new functionality
24
- - **CRITICAL**: Flag incomplete implementations
25
-
26
- 3. **SECURITY REVIEW**: Deep security analysis
27
- - Search for security vulnerabilities in changed code:
28
- - **Credentials exposure**: Hardcoded keys, tokens, passwords
29
- - **Environment variables**: Check `.env` files are gitignored
30
- - **Sensitive data**: Exposed API keys, secrets, private keys
31
- - **Input validation**: SQL injection, XSS vulnerabilities
32
- - **Authentication**: Auth checks are correct
33
- - **Authorization**: Proper permission checks
34
- - **Data sanitization**: User input is escaped
35
- - Use Grep on changed files:
36
- - `password.*=.*['"]` (hardcoded passwords)
37
- - `api[_-]?key.*=.*['"]` (hardcoded API keys)
38
- - `secret.*=.*['"]` (hardcoded secrets)
39
- - `token.*=.*['"]` (hardcoded tokens)
40
- - **CRITICAL**: Block if critical security issues found
41
-
42
- 4. **CODE QUALITY REVIEW**: Style and maintainability
43
- - Check code quality in changed files:
44
- - **Naming conventions**: Clear, consistent names
45
- - **Code duplication**: Repeated logic
46
- - **Complexity**: Overly complex functions
47
- - **Comments**: Minimal, useful comments only
48
- - **Patterns**: Follows existing codebase patterns
49
- - **Dependencies**: No unnecessary new dependencies
50
- - Note quality issues
51
-
52
- 5. **AUTOMATED CHECKS**: Linting and build verification
53
- - **Check `package.json`** for available scripts
54
- - Run checks systematically:
55
- - `npm run lint` - Code linting
56
- - `npm run typecheck` - TypeScript type checking
57
- - `npm run test` - Run relevant tests only
58
- - `npm run build` - Build verification
59
- - **CRITICAL**: All checks must pass before approval
60
- - If failures: Document and request fixes
61
-
62
- 6. **FINAL VERDICT**: Output review summary
63
- - Compile all findings into summary
64
- - Rate implementation quality (1-10)
65
- - **Decision options**:
66
- - **✅ APPROVED**: All checks pass, ready to merge
67
- - **🔧 NEEDS FIXES**: Minor issues, list required changes
68
- - **🚫 BLOCKED**: Critical issues, cannot proceed
69
- - **NO FILE CREATION**: Output everything directly to chat
70
-
71
- ## Security Search Patterns
72
-
73
- ```bash
74
- # Hardcoded secrets
75
- gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
76
-
77
- # Check .env is gitignored
78
- cat .gitignore | grep -E "^\.env"
79
-
80
- # Look for .env in PR
81
- gh pr diff | grep -E "\.env"
82
- ```
83
-
84
- ## Code Quality Anti-patterns
85
-
86
- - Large functions (>50 lines)
87
- - Deep nesting (>3 levels)
88
- - Magic numbers/strings
89
- - Commented-out code
90
-
91
- ## Execution Rules
92
-
93
- - **ULTRA THINK** at each review phase
94
- - **NEVER skip security checks** - they are mandatory
95
- - **Focus on changed code** - don't review entire codebase
96
- - **Block on critical issues** - don't proceed if unsafe
97
- - **Stay objective** - report facts, not opinions
98
- - **NO FILE CREATION**: Output all results directly to chat
99
-
100
- ## Priority
101
-
102
- Security > Correctness > Quality > Speed. Never compromise on security.
103
-
104
- ---
105
-
106
- User: $ARGUMENTS
1
+ ---
2
+ description: Quick code review - review current PR changes and output directly
3
+ allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
4
+ ---
5
+
6
+ You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
7
+
8
+ **You need to ULTRA THINK at every step.**
9
+
10
+ ## Workflow
11
+
12
+ 1. **GET PR CONTEXT**: Understand what changed
13
+ - Use `gh pr view` to get PR info (title, description, number)
14
+ - Use `gh pr diff` to see all changes
15
+ - Use `git log origin/main..HEAD` to see commits
16
+ - Identify all modified files
17
+ - **CRITICAL**: Review actual changes, not entire codebase
18
+
19
+ 2. **FEATURE REVIEW**: Verify implementation correctness
20
+ - **Read changed files**: Review implementation in context
21
+ - **Check requirements**: Compare changes against PR description
22
+ - **Verify completeness**: Ensure requested features are implemented
23
+ - **Test coverage**: Check if tests were added for new functionality
24
+ - **CRITICAL**: Flag incomplete implementations
25
+
26
+ 3. **SECURITY REVIEW**: Deep security analysis
27
+ - Search for security vulnerabilities in changed code:
28
+ - **Credentials exposure**: Hardcoded keys, tokens, passwords
29
+ - **Environment variables**: Check `.env` files are gitignored
30
+ - **Sensitive data**: Exposed API keys, secrets, private keys
31
+ - **Input validation**: SQL injection, XSS vulnerabilities
32
+ - **Authentication**: Auth checks are correct
33
+ - **Authorization**: Proper permission checks
34
+ - **Data sanitization**: User input is escaped
35
+ - Use Grep on changed files:
36
+ - `password.*=.*['"]` (hardcoded passwords)
37
+ - `api[_-]?key.*=.*['"]` (hardcoded API keys)
38
+ - `secret.*=.*['"]` (hardcoded secrets)
39
+ - `token.*=.*['"]` (hardcoded tokens)
40
+ - **CRITICAL**: Block if critical security issues found
41
+
42
+ 4. **CODE QUALITY REVIEW**: Style and maintainability
43
+ - Check code quality in changed files:
44
+ - **Naming conventions**: Clear, consistent names
45
+ - **Code duplication**: Repeated logic
46
+ - **Complexity**: Overly complex functions
47
+ - **Comments**: Minimal, useful comments only
48
+ - **Patterns**: Follows existing codebase patterns
49
+ - **Dependencies**: No unnecessary new dependencies
50
+ - Note quality issues
51
+
52
+ 5. **AUTOMATED CHECKS**: Linting and build verification
53
+ - **Check `package.json`** for available scripts
54
+ - Run checks systematically:
55
+ - `npm run lint` - Code linting
56
+ - `npm run typecheck` - TypeScript type checking
57
+ - `npm run test` - Run relevant tests only
58
+ - `npm run build` - Build verification
59
+ - **CRITICAL**: All checks must pass before approval
60
+ - If failures: Document and request fixes
61
+
62
+ 6. **FINAL VERDICT**: Output review summary
63
+ - Compile all findings into summary
64
+ - Rate implementation quality (1-10)
65
+ - **Decision options**:
66
+ - **✅ APPROVED**: All checks pass, ready to merge
67
+ - **🔧 NEEDS FIXES**: Minor issues, list required changes
68
+ - **🚫 BLOCKED**: Critical issues, cannot proceed
69
+ - **NO FILE CREATION**: Output everything directly to chat
70
+
71
+ ## Security Search Patterns
72
+
73
+ ```bash
74
+ # Hardcoded secrets
75
+ gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
76
+
77
+ # Check .env is gitignored
78
+ cat .gitignore | grep -E "^\.env"
79
+
80
+ # Look for .env in PR
81
+ gh pr diff | grep -E "\.env"
82
+ ```
83
+
84
+ ## Code Quality Anti-patterns
85
+
86
+ - Large functions (>50 lines)
87
+ - Deep nesting (>3 levels)
88
+ - Magic numbers/strings
89
+ - Commented-out code
90
+
91
+ ## Execution Rules
92
+
93
+ - **ULTRA THINK** at each review phase
94
+ - **NEVER skip security checks** - they are mandatory
95
+ - **Focus on changed code** - don't review entire codebase
96
+ - **Block on critical issues** - don't proceed if unsafe
97
+ - **Stay objective** - report facts, not opinions
98
+ - **NO FILE CREATION**: Output all results directly to chat
99
+
100
+ ## Priority
101
+
102
+ Security > Correctness > Quality > Speed. Never compromise on security.
103
+
104
+ ---
105
+
106
+ User: $ARGUMENTS