@atlashub/smartstack-cli 1.5.0 → 1.5.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.documentation/agents.html +920 -916
- package/.documentation/apex.html +1022 -1018
- package/.documentation/business-analyse.html +1505 -1501
- package/.documentation/commands.html +684 -680
- package/.documentation/css/styles.css +2168 -2168
- package/.documentation/efcore.html +2509 -2505
- package/.documentation/gitflow.html +2622 -2618
- package/.documentation/hooks.html +417 -413
- package/.documentation/index.html +327 -323
- package/.documentation/init.html +565 -0
- package/.documentation/installation.html +548 -462
- package/.documentation/js/app.js +794 -794
- package/.documentation/ralph-loop.html +534 -530
- package/.documentation/test-web.html +517 -513
- package/config/default-config.json +86 -86
- package/config/settings.json +53 -53
- package/config/settings.local.example.json +16 -16
- package/dist/index.js +18 -8
- package/dist/index.js.map +1 -1
- package/package.json +88 -88
- package/templates/agents/action.md +36 -36
- package/templates/agents/efcore/conflicts.md +84 -84
- package/templates/agents/efcore/db-deploy.md +51 -51
- package/templates/agents/efcore/db-reset.md +59 -59
- package/templates/agents/efcore/db-seed.md +56 -56
- package/templates/agents/efcore/db-status.md +64 -64
- package/templates/agents/efcore/migration.md +85 -85
- package/templates/agents/efcore/rebase-snapshot.md +62 -62
- package/templates/agents/efcore/scan.md +90 -90
- package/templates/agents/efcore/squash.md +67 -67
- package/templates/agents/explore-codebase.md +65 -65
- package/templates/agents/explore-docs.md +97 -97
- package/templates/agents/fix-grammar.md +49 -49
- package/templates/agents/gitflow/abort.md +45 -45
- package/templates/agents/gitflow/cleanup.md +85 -85
- package/templates/agents/gitflow/commit.md +40 -40
- package/templates/agents/gitflow/exec.md +48 -48
- package/templates/agents/gitflow/finish.md +92 -92
- package/templates/agents/gitflow/init.md +139 -139
- package/templates/agents/gitflow/merge.md +62 -62
- package/templates/agents/gitflow/plan.md +42 -42
- package/templates/agents/gitflow/pr.md +78 -78
- package/templates/agents/gitflow/review.md +49 -49
- package/templates/agents/gitflow/start.md +61 -61
- package/templates/agents/gitflow/status.md +32 -32
- package/templates/agents/snipper.md +36 -36
- package/templates/agents/websearch.md +46 -46
- package/templates/commands/_resources/formatting-guide.md +124 -124
- package/templates/commands/ai-prompt.md +315 -315
- package/templates/commands/apex/1-analyze.md +100 -100
- package/templates/commands/apex/2-plan.md +145 -145
- package/templates/commands/apex/3-execute.md +171 -171
- package/templates/commands/apex/4-examine.md +116 -116
- package/templates/commands/apex/5-tasks.md +209 -209
- package/templates/commands/apex.md +76 -76
- package/templates/commands/application/create.md +362 -362
- package/templates/commands/application/templates-backend.md +463 -463
- package/templates/commands/application/templates-frontend.md +517 -517
- package/templates/commands/application/templates-i18n.md +478 -478
- package/templates/commands/application/templates-seed.md +362 -362
- package/templates/commands/application.md +303 -303
- package/templates/commands/business-analyse/0-orchestrate.md +640 -640
- package/templates/commands/business-analyse/1-init.md +269 -269
- package/templates/commands/business-analyse/2-discover.md +520 -520
- package/templates/commands/business-analyse/3-analyse.md +408 -408
- package/templates/commands/business-analyse/4-specify.md +598 -598
- package/templates/commands/business-analyse/5-validate.md +326 -326
- package/templates/commands/business-analyse/6-handoff.md +746 -746
- package/templates/commands/business-analyse/7-doc-html.md +602 -602
- package/templates/commands/business-analyse/bug.md +325 -325
- package/templates/commands/business-analyse/change-request.md +368 -368
- package/templates/commands/business-analyse/hotfix.md +200 -200
- package/templates/commands/business-analyse.md +640 -640
- package/templates/commands/controller/create.md +216 -216
- package/templates/commands/controller/postman-templates.md +528 -528
- package/templates/commands/controller/templates.md +600 -600
- package/templates/commands/controller.md +337 -337
- package/templates/commands/create/agent.md +138 -138
- package/templates/commands/create/command.md +166 -166
- package/templates/commands/create/hook.md +234 -234
- package/templates/commands/create/plugin.md +329 -329
- package/templates/commands/create/project.md +507 -507
- package/templates/commands/create/skill.md +199 -199
- package/templates/commands/create.md +220 -220
- package/templates/commands/debug.md +95 -95
- package/templates/commands/documentation/module.md +202 -202
- package/templates/commands/documentation/templates.md +432 -432
- package/templates/commands/documentation.md +190 -190
- package/templates/commands/efcore/_env-check.md +153 -153
- package/templates/commands/efcore/conflicts.md +186 -186
- package/templates/commands/efcore/db-deploy.md +193 -193
- package/templates/commands/efcore/db-reset.md +426 -426
- package/templates/commands/efcore/db-seed.md +326 -326
- package/templates/commands/efcore/db-status.md +226 -226
- package/templates/commands/efcore/migration.md +400 -400
- package/templates/commands/efcore/rebase-snapshot.md +264 -264
- package/templates/commands/efcore/scan.md +198 -198
- package/templates/commands/efcore/squash.md +298 -298
- package/templates/commands/efcore.md +224 -224
- package/templates/commands/epct.md +69 -69
- package/templates/commands/explain.md +186 -186
- package/templates/commands/explore.md +45 -45
- package/templates/commands/feature-full.md +267 -267
- package/templates/commands/gitflow/1-init.md +1038 -1038
- package/templates/commands/gitflow/10-start.md +768 -768
- package/templates/commands/gitflow/11-finish.md +457 -457
- package/templates/commands/gitflow/12-cleanup.md +276 -276
- package/templates/commands/gitflow/13-sync.md +216 -216
- package/templates/commands/gitflow/14-rebase.md +251 -251
- package/templates/commands/gitflow/2-status.md +277 -277
- package/templates/commands/gitflow/3-commit.md +344 -344
- package/templates/commands/gitflow/4-plan.md +145 -145
- package/templates/commands/gitflow/5-exec.md +147 -147
- package/templates/commands/gitflow/6-abort.md +344 -344
- package/templates/commands/gitflow/7-pull-request.md +453 -355
- package/templates/commands/gitflow/8-review.md +240 -176
- package/templates/commands/gitflow/9-merge.md +451 -365
- package/templates/commands/gitflow.md +128 -128
- package/templates/commands/implement.md +663 -663
- package/templates/commands/init.md +567 -562
- package/templates/commands/mcp-integration.md +330 -330
- package/templates/commands/notification.md +129 -129
- package/templates/commands/oneshot.md +57 -57
- package/templates/commands/quick-search.md +72 -72
- package/templates/commands/ralph-loop/cancel-ralph.md +18 -18
- package/templates/commands/ralph-loop/help.md +126 -126
- package/templates/commands/ralph-loop/ralph-loop.md +18 -18
- package/templates/commands/review.md +106 -106
- package/templates/commands/utils/test-web-config.md +160 -160
- package/templates/commands/utils/test-web.md +151 -151
- package/templates/commands/validate.md +233 -233
- package/templates/commands/workflow.md +193 -193
- package/templates/gitflow/config.json +138 -138
- package/templates/hooks/ef-migration-check.md +139 -139
- package/templates/hooks/hooks.json +25 -25
- package/templates/hooks/stop-hook.sh +177 -177
- package/templates/skills/ai-prompt/SKILL.md +778 -778
- package/templates/skills/application/SKILL.md +563 -563
- package/templates/skills/application/templates-backend.md +450 -450
- package/templates/skills/application/templates-frontend.md +531 -531
- package/templates/skills/application/templates-i18n.md +520 -520
- package/templates/skills/application/templates-seed.md +647 -647
- package/templates/skills/business-analyse/SKILL.md +191 -191
- package/templates/skills/business-analyse/questionnaire.md +283 -283
- package/templates/skills/business-analyse/templates-frd.md +477 -477
- package/templates/skills/business-analyse/templates-react.md +580 -580
- package/templates/skills/controller/SKILL.md +240 -240
- package/templates/skills/controller/postman-templates.md +614 -614
- package/templates/skills/controller/templates.md +1468 -1468
- package/templates/skills/documentation/SKILL.md +133 -133
- package/templates/skills/documentation/templates.md +476 -476
- package/templates/skills/feature-full/SKILL.md +838 -838
- package/templates/skills/notification/SKILL.md +555 -555
- package/templates/skills/ui-components/SKILL.md +870 -870
- package/templates/skills/workflow/SKILL.md +582 -582
- package/templates/test-web/api-health.json +38 -38
- package/templates/test-web/minimal.json +19 -19
- package/templates/test-web/npm-package.json +46 -46
- package/templates/test-web/seo-check.json +54 -54
|
@@ -1,126 +1,126 @@
|
|
|
1
|
-
---
|
|
2
|
-
description: "Explain Ralph Loop plugin and available commands"
|
|
3
|
-
---
|
|
4
|
-
|
|
5
|
-
# Ralph Loop Plugin Help
|
|
6
|
-
|
|
7
|
-
Please explain the following to the user:
|
|
8
|
-
|
|
9
|
-
## What is Ralph Loop?
|
|
10
|
-
|
|
11
|
-
Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
|
|
12
|
-
|
|
13
|
-
**Core concept:**
|
|
14
|
-
```bash
|
|
15
|
-
while :; do
|
|
16
|
-
cat PROMPT.md | claude-code --continue
|
|
17
|
-
done
|
|
18
|
-
```
|
|
19
|
-
|
|
20
|
-
The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
|
|
21
|
-
|
|
22
|
-
**Each iteration:**
|
|
23
|
-
1. Claude receives the SAME prompt
|
|
24
|
-
2. Works on the task, modifying files
|
|
25
|
-
3. Tries to exit
|
|
26
|
-
4. Stop hook intercepts and feeds the same prompt again
|
|
27
|
-
5. Claude sees its previous work in the files
|
|
28
|
-
6. Iteratively improves until completion
|
|
29
|
-
|
|
30
|
-
The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
|
|
31
|
-
|
|
32
|
-
## Available Commands
|
|
33
|
-
|
|
34
|
-
### /ralph-loop <PROMPT> [OPTIONS]
|
|
35
|
-
|
|
36
|
-
Start a Ralph loop in your current session.
|
|
37
|
-
|
|
38
|
-
**Usage:**
|
|
39
|
-
```
|
|
40
|
-
/ralph-loop "Refactor the cache layer" --max-iterations 20
|
|
41
|
-
/ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
|
|
42
|
-
```
|
|
43
|
-
|
|
44
|
-
**Options:**
|
|
45
|
-
- `--max-iterations <n>` - Max iterations before auto-stop
|
|
46
|
-
- `--completion-promise <text>` - Promise phrase to signal completion
|
|
47
|
-
|
|
48
|
-
**How it works:**
|
|
49
|
-
1. Creates `.claude/.ralph-loop.local.md` state file
|
|
50
|
-
2. You work on the task
|
|
51
|
-
3. When you try to exit, stop hook intercepts
|
|
52
|
-
4. Same prompt fed back
|
|
53
|
-
5. You see your previous work
|
|
54
|
-
6. Continues until promise detected or max iterations
|
|
55
|
-
|
|
56
|
-
---
|
|
57
|
-
|
|
58
|
-
### /cancel-ralph
|
|
59
|
-
|
|
60
|
-
Cancel an active Ralph loop (removes the loop state file).
|
|
61
|
-
|
|
62
|
-
**Usage:**
|
|
63
|
-
```
|
|
64
|
-
/cancel-ralph
|
|
65
|
-
```
|
|
66
|
-
|
|
67
|
-
**How it works:**
|
|
68
|
-
- Checks for active loop state file
|
|
69
|
-
- Removes `.claude/.ralph-loop.local.md`
|
|
70
|
-
- Reports cancellation with iteration count
|
|
71
|
-
|
|
72
|
-
---
|
|
73
|
-
|
|
74
|
-
## Key Concepts
|
|
75
|
-
|
|
76
|
-
### Completion Promises
|
|
77
|
-
|
|
78
|
-
To signal completion, Claude must output a `<promise>` tag:
|
|
79
|
-
|
|
80
|
-
```
|
|
81
|
-
<promise>TASK COMPLETE</promise>
|
|
82
|
-
```
|
|
83
|
-
|
|
84
|
-
The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
|
|
85
|
-
|
|
86
|
-
### Self-Reference Mechanism
|
|
87
|
-
|
|
88
|
-
The "loop" doesn't mean Claude talks to itself. It means:
|
|
89
|
-
- Same prompt repeated
|
|
90
|
-
- Claude's work persists in files
|
|
91
|
-
- Each iteration sees previous attempts
|
|
92
|
-
- Builds incrementally toward goal
|
|
93
|
-
|
|
94
|
-
## Example
|
|
95
|
-
|
|
96
|
-
### Interactive Bug Fix
|
|
97
|
-
|
|
98
|
-
```
|
|
99
|
-
/ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
|
|
100
|
-
```
|
|
101
|
-
|
|
102
|
-
You'll see Ralph:
|
|
103
|
-
- Attempt fixes
|
|
104
|
-
- Run tests
|
|
105
|
-
- See failures
|
|
106
|
-
- Iterate on solution
|
|
107
|
-
- In your current session
|
|
108
|
-
|
|
109
|
-
## When to Use Ralph
|
|
110
|
-
|
|
111
|
-
**Good for:**
|
|
112
|
-
- Well-defined tasks with clear success criteria
|
|
113
|
-
- Tasks requiring iteration and refinement
|
|
114
|
-
- Iterative development with self-correction
|
|
115
|
-
- Greenfield projects
|
|
116
|
-
|
|
117
|
-
**Not good for:**
|
|
118
|
-
- Tasks requiring human judgment or design decisions
|
|
119
|
-
- One-shot operations
|
|
120
|
-
- Tasks with unclear success criteria
|
|
121
|
-
- Debugging production issues (use targeted debugging instead)
|
|
122
|
-
|
|
123
|
-
## Learn More
|
|
124
|
-
|
|
125
|
-
- Original technique: https://ghuntley.com/ralph/
|
|
126
|
-
- Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
|
|
1
|
+
---
|
|
2
|
+
description: "Explain Ralph Loop plugin and available commands"
|
|
3
|
+
---
|
|
4
|
+
|
|
5
|
+
# Ralph Loop Plugin Help
|
|
6
|
+
|
|
7
|
+
Please explain the following to the user:
|
|
8
|
+
|
|
9
|
+
## What is Ralph Loop?
|
|
10
|
+
|
|
11
|
+
Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
|
|
12
|
+
|
|
13
|
+
**Core concept:**
|
|
14
|
+
```bash
|
|
15
|
+
while :; do
|
|
16
|
+
cat PROMPT.md | claude-code --continue
|
|
17
|
+
done
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
|
|
21
|
+
|
|
22
|
+
**Each iteration:**
|
|
23
|
+
1. Claude receives the SAME prompt
|
|
24
|
+
2. Works on the task, modifying files
|
|
25
|
+
3. Tries to exit
|
|
26
|
+
4. Stop hook intercepts and feeds the same prompt again
|
|
27
|
+
5. Claude sees its previous work in the files
|
|
28
|
+
6. Iteratively improves until completion
|
|
29
|
+
|
|
30
|
+
The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
|
|
31
|
+
|
|
32
|
+
## Available Commands
|
|
33
|
+
|
|
34
|
+
### /ralph-loop <PROMPT> [OPTIONS]
|
|
35
|
+
|
|
36
|
+
Start a Ralph loop in your current session.
|
|
37
|
+
|
|
38
|
+
**Usage:**
|
|
39
|
+
```
|
|
40
|
+
/ralph-loop "Refactor the cache layer" --max-iterations 20
|
|
41
|
+
/ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
**Options:**
|
|
45
|
+
- `--max-iterations <n>` - Max iterations before auto-stop
|
|
46
|
+
- `--completion-promise <text>` - Promise phrase to signal completion
|
|
47
|
+
|
|
48
|
+
**How it works:**
|
|
49
|
+
1. Creates `.claude/.ralph-loop.local.md` state file
|
|
50
|
+
2. You work on the task
|
|
51
|
+
3. When you try to exit, stop hook intercepts
|
|
52
|
+
4. Same prompt fed back
|
|
53
|
+
5. You see your previous work
|
|
54
|
+
6. Continues until promise detected or max iterations
|
|
55
|
+
|
|
56
|
+
---
|
|
57
|
+
|
|
58
|
+
### /cancel-ralph
|
|
59
|
+
|
|
60
|
+
Cancel an active Ralph loop (removes the loop state file).
|
|
61
|
+
|
|
62
|
+
**Usage:**
|
|
63
|
+
```
|
|
64
|
+
/cancel-ralph
|
|
65
|
+
```
|
|
66
|
+
|
|
67
|
+
**How it works:**
|
|
68
|
+
- Checks for active loop state file
|
|
69
|
+
- Removes `.claude/.ralph-loop.local.md`
|
|
70
|
+
- Reports cancellation with iteration count
|
|
71
|
+
|
|
72
|
+
---
|
|
73
|
+
|
|
74
|
+
## Key Concepts
|
|
75
|
+
|
|
76
|
+
### Completion Promises
|
|
77
|
+
|
|
78
|
+
To signal completion, Claude must output a `<promise>` tag:
|
|
79
|
+
|
|
80
|
+
```
|
|
81
|
+
<promise>TASK COMPLETE</promise>
|
|
82
|
+
```
|
|
83
|
+
|
|
84
|
+
The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
|
|
85
|
+
|
|
86
|
+
### Self-Reference Mechanism
|
|
87
|
+
|
|
88
|
+
The "loop" doesn't mean Claude talks to itself. It means:
|
|
89
|
+
- Same prompt repeated
|
|
90
|
+
- Claude's work persists in files
|
|
91
|
+
- Each iteration sees previous attempts
|
|
92
|
+
- Builds incrementally toward goal
|
|
93
|
+
|
|
94
|
+
## Example
|
|
95
|
+
|
|
96
|
+
### Interactive Bug Fix
|
|
97
|
+
|
|
98
|
+
```
|
|
99
|
+
/ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
|
|
100
|
+
```
|
|
101
|
+
|
|
102
|
+
You'll see Ralph:
|
|
103
|
+
- Attempt fixes
|
|
104
|
+
- Run tests
|
|
105
|
+
- See failures
|
|
106
|
+
- Iterate on solution
|
|
107
|
+
- In your current session
|
|
108
|
+
|
|
109
|
+
## When to Use Ralph
|
|
110
|
+
|
|
111
|
+
**Good for:**
|
|
112
|
+
- Well-defined tasks with clear success criteria
|
|
113
|
+
- Tasks requiring iteration and refinement
|
|
114
|
+
- Iterative development with self-correction
|
|
115
|
+
- Greenfield projects
|
|
116
|
+
|
|
117
|
+
**Not good for:**
|
|
118
|
+
- Tasks requiring human judgment or design decisions
|
|
119
|
+
- One-shot operations
|
|
120
|
+
- Tasks with unclear success criteria
|
|
121
|
+
- Debugging production issues (use targeted debugging instead)
|
|
122
|
+
|
|
123
|
+
## Learn More
|
|
124
|
+
|
|
125
|
+
- Original technique: https://ghuntley.com/ralph/
|
|
126
|
+
- Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
|
|
@@ -1,18 +1,18 @@
|
|
|
1
|
-
---
|
|
2
|
-
description: "Start Ralph Loop in current session"
|
|
3
|
-
argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
|
|
4
|
-
allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
|
|
5
|
-
hide-from-slash-command-tool: "true"
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# Ralph Loop Command
|
|
9
|
-
|
|
10
|
-
Execute the setup script to initialize the Ralph loop:
|
|
11
|
-
|
|
12
|
-
```!
|
|
13
|
-
"${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
|
|
14
|
-
```
|
|
15
|
-
|
|
16
|
-
Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
|
|
17
|
-
|
|
18
|
-
CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
|
|
1
|
+
---
|
|
2
|
+
description: "Start Ralph Loop in current session"
|
|
3
|
+
argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
|
|
4
|
+
allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
|
|
5
|
+
hide-from-slash-command-tool: "true"
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# Ralph Loop Command
|
|
9
|
+
|
|
10
|
+
Execute the setup script to initialize the Ralph loop:
|
|
11
|
+
|
|
12
|
+
```!
|
|
13
|
+
"${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
|
|
14
|
+
```
|
|
15
|
+
|
|
16
|
+
Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
|
|
17
|
+
|
|
18
|
+
CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
|
|
@@ -1,106 +1,106 @@
|
|
|
1
|
-
---
|
|
2
|
-
description: Quick code review - review current PR changes and output directly
|
|
3
|
-
allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
|
|
4
|
-
---
|
|
5
|
-
|
|
6
|
-
You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
|
|
7
|
-
|
|
8
|
-
**You need to ULTRA THINK at every step.**
|
|
9
|
-
|
|
10
|
-
## Workflow
|
|
11
|
-
|
|
12
|
-
1. **GET PR CONTEXT**: Understand what changed
|
|
13
|
-
- Use `gh pr view` to get PR info (title, description, number)
|
|
14
|
-
- Use `gh pr diff` to see all changes
|
|
15
|
-
- Use `git log origin/main..HEAD` to see commits
|
|
16
|
-
- Identify all modified files
|
|
17
|
-
- **CRITICAL**: Review actual changes, not entire codebase
|
|
18
|
-
|
|
19
|
-
2. **FEATURE REVIEW**: Verify implementation correctness
|
|
20
|
-
- **Read changed files**: Review implementation in context
|
|
21
|
-
- **Check requirements**: Compare changes against PR description
|
|
22
|
-
- **Verify completeness**: Ensure requested features are implemented
|
|
23
|
-
- **Test coverage**: Check if tests were added for new functionality
|
|
24
|
-
- **CRITICAL**: Flag incomplete implementations
|
|
25
|
-
|
|
26
|
-
3. **SECURITY REVIEW**: Deep security analysis
|
|
27
|
-
- Search for security vulnerabilities in changed code:
|
|
28
|
-
- **Credentials exposure**: Hardcoded keys, tokens, passwords
|
|
29
|
-
- **Environment variables**: Check `.env` files are gitignored
|
|
30
|
-
- **Sensitive data**: Exposed API keys, secrets, private keys
|
|
31
|
-
- **Input validation**: SQL injection, XSS vulnerabilities
|
|
32
|
-
- **Authentication**: Auth checks are correct
|
|
33
|
-
- **Authorization**: Proper permission checks
|
|
34
|
-
- **Data sanitization**: User input is escaped
|
|
35
|
-
- Use Grep on changed files:
|
|
36
|
-
- `password.*=.*['"]` (hardcoded passwords)
|
|
37
|
-
- `api[_-]?key.*=.*['"]` (hardcoded API keys)
|
|
38
|
-
- `secret.*=.*['"]` (hardcoded secrets)
|
|
39
|
-
- `token.*=.*['"]` (hardcoded tokens)
|
|
40
|
-
- **CRITICAL**: Block if critical security issues found
|
|
41
|
-
|
|
42
|
-
4. **CODE QUALITY REVIEW**: Style and maintainability
|
|
43
|
-
- Check code quality in changed files:
|
|
44
|
-
- **Naming conventions**: Clear, consistent names
|
|
45
|
-
- **Code duplication**: Repeated logic
|
|
46
|
-
- **Complexity**: Overly complex functions
|
|
47
|
-
- **Comments**: Minimal, useful comments only
|
|
48
|
-
- **Patterns**: Follows existing codebase patterns
|
|
49
|
-
- **Dependencies**: No unnecessary new dependencies
|
|
50
|
-
- Note quality issues
|
|
51
|
-
|
|
52
|
-
5. **AUTOMATED CHECKS**: Linting and build verification
|
|
53
|
-
- **Check `package.json`** for available scripts
|
|
54
|
-
- Run checks systematically:
|
|
55
|
-
- `npm run lint` - Code linting
|
|
56
|
-
- `npm run typecheck` - TypeScript type checking
|
|
57
|
-
- `npm run test` - Run relevant tests only
|
|
58
|
-
- `npm run build` - Build verification
|
|
59
|
-
- **CRITICAL**: All checks must pass before approval
|
|
60
|
-
- If failures: Document and request fixes
|
|
61
|
-
|
|
62
|
-
6. **FINAL VERDICT**: Output review summary
|
|
63
|
-
- Compile all findings into summary
|
|
64
|
-
- Rate implementation quality (1-10)
|
|
65
|
-
- **Decision options**:
|
|
66
|
-
- **✅ APPROVED**: All checks pass, ready to merge
|
|
67
|
-
- **🔧 NEEDS FIXES**: Minor issues, list required changes
|
|
68
|
-
- **🚫 BLOCKED**: Critical issues, cannot proceed
|
|
69
|
-
- **NO FILE CREATION**: Output everything directly to chat
|
|
70
|
-
|
|
71
|
-
## Security Search Patterns
|
|
72
|
-
|
|
73
|
-
```bash
|
|
74
|
-
# Hardcoded secrets
|
|
75
|
-
gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
|
|
76
|
-
|
|
77
|
-
# Check .env is gitignored
|
|
78
|
-
cat .gitignore | grep -E "^\.env"
|
|
79
|
-
|
|
80
|
-
# Look for .env in PR
|
|
81
|
-
gh pr diff | grep -E "\.env"
|
|
82
|
-
```
|
|
83
|
-
|
|
84
|
-
## Code Quality Anti-patterns
|
|
85
|
-
|
|
86
|
-
- Large functions (>50 lines)
|
|
87
|
-
- Deep nesting (>3 levels)
|
|
88
|
-
- Magic numbers/strings
|
|
89
|
-
- Commented-out code
|
|
90
|
-
|
|
91
|
-
## Execution Rules
|
|
92
|
-
|
|
93
|
-
- **ULTRA THINK** at each review phase
|
|
94
|
-
- **NEVER skip security checks** - they are mandatory
|
|
95
|
-
- **Focus on changed code** - don't review entire codebase
|
|
96
|
-
- **Block on critical issues** - don't proceed if unsafe
|
|
97
|
-
- **Stay objective** - report facts, not opinions
|
|
98
|
-
- **NO FILE CREATION**: Output all results directly to chat
|
|
99
|
-
|
|
100
|
-
## Priority
|
|
101
|
-
|
|
102
|
-
Security > Correctness > Quality > Speed. Never compromise on security.
|
|
103
|
-
|
|
104
|
-
---
|
|
105
|
-
|
|
106
|
-
User: $ARGUMENTS
|
|
1
|
+
---
|
|
2
|
+
description: Quick code review - review current PR changes and output directly
|
|
3
|
+
allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
|
|
7
|
+
|
|
8
|
+
**You need to ULTRA THINK at every step.**
|
|
9
|
+
|
|
10
|
+
## Workflow
|
|
11
|
+
|
|
12
|
+
1. **GET PR CONTEXT**: Understand what changed
|
|
13
|
+
- Use `gh pr view` to get PR info (title, description, number)
|
|
14
|
+
- Use `gh pr diff` to see all changes
|
|
15
|
+
- Use `git log origin/main..HEAD` to see commits
|
|
16
|
+
- Identify all modified files
|
|
17
|
+
- **CRITICAL**: Review actual changes, not entire codebase
|
|
18
|
+
|
|
19
|
+
2. **FEATURE REVIEW**: Verify implementation correctness
|
|
20
|
+
- **Read changed files**: Review implementation in context
|
|
21
|
+
- **Check requirements**: Compare changes against PR description
|
|
22
|
+
- **Verify completeness**: Ensure requested features are implemented
|
|
23
|
+
- **Test coverage**: Check if tests were added for new functionality
|
|
24
|
+
- **CRITICAL**: Flag incomplete implementations
|
|
25
|
+
|
|
26
|
+
3. **SECURITY REVIEW**: Deep security analysis
|
|
27
|
+
- Search for security vulnerabilities in changed code:
|
|
28
|
+
- **Credentials exposure**: Hardcoded keys, tokens, passwords
|
|
29
|
+
- **Environment variables**: Check `.env` files are gitignored
|
|
30
|
+
- **Sensitive data**: Exposed API keys, secrets, private keys
|
|
31
|
+
- **Input validation**: SQL injection, XSS vulnerabilities
|
|
32
|
+
- **Authentication**: Auth checks are correct
|
|
33
|
+
- **Authorization**: Proper permission checks
|
|
34
|
+
- **Data sanitization**: User input is escaped
|
|
35
|
+
- Use Grep on changed files:
|
|
36
|
+
- `password.*=.*['"]` (hardcoded passwords)
|
|
37
|
+
- `api[_-]?key.*=.*['"]` (hardcoded API keys)
|
|
38
|
+
- `secret.*=.*['"]` (hardcoded secrets)
|
|
39
|
+
- `token.*=.*['"]` (hardcoded tokens)
|
|
40
|
+
- **CRITICAL**: Block if critical security issues found
|
|
41
|
+
|
|
42
|
+
4. **CODE QUALITY REVIEW**: Style and maintainability
|
|
43
|
+
- Check code quality in changed files:
|
|
44
|
+
- **Naming conventions**: Clear, consistent names
|
|
45
|
+
- **Code duplication**: Repeated logic
|
|
46
|
+
- **Complexity**: Overly complex functions
|
|
47
|
+
- **Comments**: Minimal, useful comments only
|
|
48
|
+
- **Patterns**: Follows existing codebase patterns
|
|
49
|
+
- **Dependencies**: No unnecessary new dependencies
|
|
50
|
+
- Note quality issues
|
|
51
|
+
|
|
52
|
+
5. **AUTOMATED CHECKS**: Linting and build verification
|
|
53
|
+
- **Check `package.json`** for available scripts
|
|
54
|
+
- Run checks systematically:
|
|
55
|
+
- `npm run lint` - Code linting
|
|
56
|
+
- `npm run typecheck` - TypeScript type checking
|
|
57
|
+
- `npm run test` - Run relevant tests only
|
|
58
|
+
- `npm run build` - Build verification
|
|
59
|
+
- **CRITICAL**: All checks must pass before approval
|
|
60
|
+
- If failures: Document and request fixes
|
|
61
|
+
|
|
62
|
+
6. **FINAL VERDICT**: Output review summary
|
|
63
|
+
- Compile all findings into summary
|
|
64
|
+
- Rate implementation quality (1-10)
|
|
65
|
+
- **Decision options**:
|
|
66
|
+
- **✅ APPROVED**: All checks pass, ready to merge
|
|
67
|
+
- **🔧 NEEDS FIXES**: Minor issues, list required changes
|
|
68
|
+
- **🚫 BLOCKED**: Critical issues, cannot proceed
|
|
69
|
+
- **NO FILE CREATION**: Output everything directly to chat
|
|
70
|
+
|
|
71
|
+
## Security Search Patterns
|
|
72
|
+
|
|
73
|
+
```bash
|
|
74
|
+
# Hardcoded secrets
|
|
75
|
+
gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
|
|
76
|
+
|
|
77
|
+
# Check .env is gitignored
|
|
78
|
+
cat .gitignore | grep -E "^\.env"
|
|
79
|
+
|
|
80
|
+
# Look for .env in PR
|
|
81
|
+
gh pr diff | grep -E "\.env"
|
|
82
|
+
```
|
|
83
|
+
|
|
84
|
+
## Code Quality Anti-patterns
|
|
85
|
+
|
|
86
|
+
- Large functions (>50 lines)
|
|
87
|
+
- Deep nesting (>3 levels)
|
|
88
|
+
- Magic numbers/strings
|
|
89
|
+
- Commented-out code
|
|
90
|
+
|
|
91
|
+
## Execution Rules
|
|
92
|
+
|
|
93
|
+
- **ULTRA THINK** at each review phase
|
|
94
|
+
- **NEVER skip security checks** - they are mandatory
|
|
95
|
+
- **Focus on changed code** - don't review entire codebase
|
|
96
|
+
- **Block on critical issues** - don't proceed if unsafe
|
|
97
|
+
- **Stay objective** - report facts, not opinions
|
|
98
|
+
- **NO FILE CREATION**: Output all results directly to chat
|
|
99
|
+
|
|
100
|
+
## Priority
|
|
101
|
+
|
|
102
|
+
Security > Correctness > Quality > Speed. Never compromise on security.
|
|
103
|
+
|
|
104
|
+
---
|
|
105
|
+
|
|
106
|
+
User: $ARGUMENTS
|