@atlashub/smartstack-cli 1.5.1 → 1.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (147) hide show
  1. package/.documentation/css/styles.css +2168 -2168
  2. package/.documentation/js/app.js +794 -794
  3. package/config/default-config.json +86 -86
  4. package/config/settings.json +53 -53
  5. package/config/settings.local.example.json +16 -16
  6. package/dist/index.js +0 -0
  7. package/dist/index.js.map +1 -1
  8. package/package.json +88 -88
  9. package/templates/agents/action.md +36 -36
  10. package/templates/agents/efcore/conflicts.md +84 -84
  11. package/templates/agents/efcore/db-deploy.md +51 -51
  12. package/templates/agents/efcore/db-reset.md +59 -59
  13. package/templates/agents/efcore/db-seed.md +56 -56
  14. package/templates/agents/efcore/db-status.md +64 -64
  15. package/templates/agents/efcore/migration.md +85 -85
  16. package/templates/agents/efcore/rebase-snapshot.md +62 -62
  17. package/templates/agents/efcore/scan.md +90 -90
  18. package/templates/agents/efcore/squash.md +67 -67
  19. package/templates/agents/explore-codebase.md +65 -65
  20. package/templates/agents/explore-docs.md +97 -97
  21. package/templates/agents/fix-grammar.md +49 -49
  22. package/templates/agents/gitflow/abort.md +45 -45
  23. package/templates/agents/gitflow/cleanup.md +85 -85
  24. package/templates/agents/gitflow/commit.md +40 -40
  25. package/templates/agents/gitflow/exec.md +48 -48
  26. package/templates/agents/gitflow/finish.md +92 -92
  27. package/templates/agents/gitflow/init.md +139 -139
  28. package/templates/agents/gitflow/merge.md +62 -62
  29. package/templates/agents/gitflow/plan.md +42 -42
  30. package/templates/agents/gitflow/pr.md +78 -78
  31. package/templates/agents/gitflow/review.md +49 -49
  32. package/templates/agents/gitflow/start.md +61 -61
  33. package/templates/agents/gitflow/status.md +32 -32
  34. package/templates/agents/snipper.md +36 -36
  35. package/templates/agents/websearch.md +46 -46
  36. package/templates/commands/_resources/formatting-guide.md +124 -124
  37. package/templates/commands/ai-prompt.md +315 -315
  38. package/templates/commands/apex/1-analyze.md +100 -100
  39. package/templates/commands/apex/2-plan.md +145 -145
  40. package/templates/commands/apex/3-execute.md +171 -171
  41. package/templates/commands/apex/4-examine.md +116 -116
  42. package/templates/commands/apex/5-tasks.md +209 -209
  43. package/templates/commands/apex.md +76 -76
  44. package/templates/commands/application/create.md +362 -362
  45. package/templates/commands/application/templates-backend.md +463 -463
  46. package/templates/commands/application/templates-frontend.md +517 -517
  47. package/templates/commands/application/templates-i18n.md +478 -478
  48. package/templates/commands/application/templates-seed.md +362 -362
  49. package/templates/commands/application.md +303 -303
  50. package/templates/commands/business-analyse/0-orchestrate.md +640 -640
  51. package/templates/commands/business-analyse/1-init.md +269 -269
  52. package/templates/commands/business-analyse/2-discover.md +520 -520
  53. package/templates/commands/business-analyse/3-analyse.md +408 -408
  54. package/templates/commands/business-analyse/4-specify.md +598 -598
  55. package/templates/commands/business-analyse/5-validate.md +326 -326
  56. package/templates/commands/business-analyse/6-handoff.md +746 -746
  57. package/templates/commands/business-analyse/7-doc-html.md +602 -602
  58. package/templates/commands/business-analyse/bug.md +325 -325
  59. package/templates/commands/business-analyse/change-request.md +368 -368
  60. package/templates/commands/business-analyse/hotfix.md +200 -200
  61. package/templates/commands/business-analyse.md +640 -640
  62. package/templates/commands/controller/create.md +216 -216
  63. package/templates/commands/controller/postman-templates.md +528 -528
  64. package/templates/commands/controller/templates.md +600 -600
  65. package/templates/commands/controller.md +337 -337
  66. package/templates/commands/create/agent.md +138 -138
  67. package/templates/commands/create/command.md +166 -166
  68. package/templates/commands/create/hook.md +234 -234
  69. package/templates/commands/create/plugin.md +329 -329
  70. package/templates/commands/create/project.md +507 -507
  71. package/templates/commands/create/skill.md +199 -199
  72. package/templates/commands/create.md +220 -220
  73. package/templates/commands/debug.md +95 -95
  74. package/templates/commands/documentation/module.md +202 -202
  75. package/templates/commands/documentation/templates.md +432 -432
  76. package/templates/commands/documentation.md +190 -190
  77. package/templates/commands/efcore/_env-check.md +153 -153
  78. package/templates/commands/efcore/conflicts.md +186 -186
  79. package/templates/commands/efcore/db-deploy.md +193 -193
  80. package/templates/commands/efcore/db-reset.md +426 -426
  81. package/templates/commands/efcore/db-seed.md +326 -326
  82. package/templates/commands/efcore/db-status.md +226 -226
  83. package/templates/commands/efcore/migration.md +400 -400
  84. package/templates/commands/efcore/rebase-snapshot.md +264 -264
  85. package/templates/commands/efcore/scan.md +198 -198
  86. package/templates/commands/efcore/squash.md +298 -298
  87. package/templates/commands/efcore.md +224 -224
  88. package/templates/commands/epct.md +69 -69
  89. package/templates/commands/explain.md +186 -186
  90. package/templates/commands/explore.md +45 -45
  91. package/templates/commands/feature-full.md +267 -267
  92. package/templates/commands/gitflow/1-init.md +1038 -1038
  93. package/templates/commands/gitflow/10-start.md +768 -768
  94. package/templates/commands/gitflow/11-finish.md +457 -457
  95. package/templates/commands/gitflow/12-cleanup.md +276 -276
  96. package/templates/commands/gitflow/13-sync.md +216 -216
  97. package/templates/commands/gitflow/14-rebase.md +251 -251
  98. package/templates/commands/gitflow/2-status.md +277 -277
  99. package/templates/commands/gitflow/3-commit.md +344 -344
  100. package/templates/commands/gitflow/4-plan.md +145 -145
  101. package/templates/commands/gitflow/5-exec.md +147 -147
  102. package/templates/commands/gitflow/6-abort.md +344 -344
  103. package/templates/commands/gitflow/7-pull-request.md +453 -355
  104. package/templates/commands/gitflow/8-review.md +240 -176
  105. package/templates/commands/gitflow/9-merge.md +451 -365
  106. package/templates/commands/gitflow.md +128 -128
  107. package/templates/commands/implement.md +663 -663
  108. package/templates/commands/init.md +567 -567
  109. package/templates/commands/mcp-integration.md +330 -330
  110. package/templates/commands/notification.md +129 -129
  111. package/templates/commands/oneshot.md +57 -57
  112. package/templates/commands/quick-search.md +72 -72
  113. package/templates/commands/ralph-loop/cancel-ralph.md +18 -18
  114. package/templates/commands/ralph-loop/help.md +126 -126
  115. package/templates/commands/ralph-loop/ralph-loop.md +18 -18
  116. package/templates/commands/review.md +106 -106
  117. package/templates/commands/utils/test-web-config.md +160 -160
  118. package/templates/commands/utils/test-web.md +151 -151
  119. package/templates/commands/validate.md +233 -233
  120. package/templates/commands/workflow.md +193 -193
  121. package/templates/gitflow/config.json +138 -138
  122. package/templates/hooks/ef-migration-check.md +139 -139
  123. package/templates/hooks/hooks.json +25 -25
  124. package/templates/hooks/stop-hook.sh +177 -177
  125. package/templates/skills/ai-prompt/SKILL.md +778 -778
  126. package/templates/skills/application/SKILL.md +563 -563
  127. package/templates/skills/application/templates-backend.md +450 -450
  128. package/templates/skills/application/templates-frontend.md +531 -531
  129. package/templates/skills/application/templates-i18n.md +520 -520
  130. package/templates/skills/application/templates-seed.md +647 -647
  131. package/templates/skills/business-analyse/SKILL.md +191 -191
  132. package/templates/skills/business-analyse/questionnaire.md +283 -283
  133. package/templates/skills/business-analyse/templates-frd.md +477 -477
  134. package/templates/skills/business-analyse/templates-react.md +580 -580
  135. package/templates/skills/controller/SKILL.md +240 -240
  136. package/templates/skills/controller/postman-templates.md +614 -614
  137. package/templates/skills/controller/templates.md +1468 -1468
  138. package/templates/skills/documentation/SKILL.md +133 -133
  139. package/templates/skills/documentation/templates.md +476 -476
  140. package/templates/skills/feature-full/SKILL.md +838 -838
  141. package/templates/skills/notification/SKILL.md +555 -555
  142. package/templates/skills/ui-components/SKILL.md +870 -870
  143. package/templates/skills/workflow/SKILL.md +582 -582
  144. package/templates/test-web/api-health.json +38 -38
  145. package/templates/test-web/minimal.json +19 -19
  146. package/templates/test-web/npm-package.json +46 -46
  147. package/templates/test-web/seo-check.json +54 -54
@@ -1,126 +1,126 @@
1
- ---
2
- description: "Explain Ralph Loop plugin and available commands"
3
- ---
4
-
5
- # Ralph Loop Plugin Help
6
-
7
- Please explain the following to the user:
8
-
9
- ## What is Ralph Loop?
10
-
11
- Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
12
-
13
- **Core concept:**
14
- ```bash
15
- while :; do
16
- cat PROMPT.md | claude-code --continue
17
- done
18
- ```
19
-
20
- The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
21
-
22
- **Each iteration:**
23
- 1. Claude receives the SAME prompt
24
- 2. Works on the task, modifying files
25
- 3. Tries to exit
26
- 4. Stop hook intercepts and feeds the same prompt again
27
- 5. Claude sees its previous work in the files
28
- 6. Iteratively improves until completion
29
-
30
- The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
31
-
32
- ## Available Commands
33
-
34
- ### /ralph-loop <PROMPT> [OPTIONS]
35
-
36
- Start a Ralph loop in your current session.
37
-
38
- **Usage:**
39
- ```
40
- /ralph-loop "Refactor the cache layer" --max-iterations 20
41
- /ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
42
- ```
43
-
44
- **Options:**
45
- - `--max-iterations <n>` - Max iterations before auto-stop
46
- - `--completion-promise <text>` - Promise phrase to signal completion
47
-
48
- **How it works:**
49
- 1. Creates `.claude/.ralph-loop.local.md` state file
50
- 2. You work on the task
51
- 3. When you try to exit, stop hook intercepts
52
- 4. Same prompt fed back
53
- 5. You see your previous work
54
- 6. Continues until promise detected or max iterations
55
-
56
- ---
57
-
58
- ### /cancel-ralph
59
-
60
- Cancel an active Ralph loop (removes the loop state file).
61
-
62
- **Usage:**
63
- ```
64
- /cancel-ralph
65
- ```
66
-
67
- **How it works:**
68
- - Checks for active loop state file
69
- - Removes `.claude/.ralph-loop.local.md`
70
- - Reports cancellation with iteration count
71
-
72
- ---
73
-
74
- ## Key Concepts
75
-
76
- ### Completion Promises
77
-
78
- To signal completion, Claude must output a `<promise>` tag:
79
-
80
- ```
81
- <promise>TASK COMPLETE</promise>
82
- ```
83
-
84
- The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
85
-
86
- ### Self-Reference Mechanism
87
-
88
- The "loop" doesn't mean Claude talks to itself. It means:
89
- - Same prompt repeated
90
- - Claude's work persists in files
91
- - Each iteration sees previous attempts
92
- - Builds incrementally toward goal
93
-
94
- ## Example
95
-
96
- ### Interactive Bug Fix
97
-
98
- ```
99
- /ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
100
- ```
101
-
102
- You'll see Ralph:
103
- - Attempt fixes
104
- - Run tests
105
- - See failures
106
- - Iterate on solution
107
- - In your current session
108
-
109
- ## When to Use Ralph
110
-
111
- **Good for:**
112
- - Well-defined tasks with clear success criteria
113
- - Tasks requiring iteration and refinement
114
- - Iterative development with self-correction
115
- - Greenfield projects
116
-
117
- **Not good for:**
118
- - Tasks requiring human judgment or design decisions
119
- - One-shot operations
120
- - Tasks with unclear success criteria
121
- - Debugging production issues (use targeted debugging instead)
122
-
123
- ## Learn More
124
-
125
- - Original technique: https://ghuntley.com/ralph/
126
- - Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
1
+ ---
2
+ description: "Explain Ralph Loop plugin and available commands"
3
+ ---
4
+
5
+ # Ralph Loop Plugin Help
6
+
7
+ Please explain the following to the user:
8
+
9
+ ## What is Ralph Loop?
10
+
11
+ Ralph Loop implements the Ralph Wiggum technique - an iterative development methodology based on continuous AI loops, pioneered by Geoffrey Huntley.
12
+
13
+ **Core concept:**
14
+ ```bash
15
+ while :; do
16
+ cat PROMPT.md | claude-code --continue
17
+ done
18
+ ```
19
+
20
+ The same prompt is fed to Claude repeatedly. The "self-referential" aspect comes from Claude seeing its own previous work in the files and git history, not from feeding output back as input.
21
+
22
+ **Each iteration:**
23
+ 1. Claude receives the SAME prompt
24
+ 2. Works on the task, modifying files
25
+ 3. Tries to exit
26
+ 4. Stop hook intercepts and feeds the same prompt again
27
+ 5. Claude sees its previous work in the files
28
+ 6. Iteratively improves until completion
29
+
30
+ The technique is described as "deterministically bad in an undeterministic world" - failures are predictable, enabling systematic improvement through prompt tuning.
31
+
32
+ ## Available Commands
33
+
34
+ ### /ralph-loop <PROMPT> [OPTIONS]
35
+
36
+ Start a Ralph loop in your current session.
37
+
38
+ **Usage:**
39
+ ```
40
+ /ralph-loop "Refactor the cache layer" --max-iterations 20
41
+ /ralph-loop "Add tests" --completion-promise "TESTS COMPLETE"
42
+ ```
43
+
44
+ **Options:**
45
+ - `--max-iterations <n>` - Max iterations before auto-stop
46
+ - `--completion-promise <text>` - Promise phrase to signal completion
47
+
48
+ **How it works:**
49
+ 1. Creates `.claude/.ralph-loop.local.md` state file
50
+ 2. You work on the task
51
+ 3. When you try to exit, stop hook intercepts
52
+ 4. Same prompt fed back
53
+ 5. You see your previous work
54
+ 6. Continues until promise detected or max iterations
55
+
56
+ ---
57
+
58
+ ### /cancel-ralph
59
+
60
+ Cancel an active Ralph loop (removes the loop state file).
61
+
62
+ **Usage:**
63
+ ```
64
+ /cancel-ralph
65
+ ```
66
+
67
+ **How it works:**
68
+ - Checks for active loop state file
69
+ - Removes `.claude/.ralph-loop.local.md`
70
+ - Reports cancellation with iteration count
71
+
72
+ ---
73
+
74
+ ## Key Concepts
75
+
76
+ ### Completion Promises
77
+
78
+ To signal completion, Claude must output a `<promise>` tag:
79
+
80
+ ```
81
+ <promise>TASK COMPLETE</promise>
82
+ ```
83
+
84
+ The stop hook looks for this specific tag. Without it (or `--max-iterations`), Ralph runs infinitely.
85
+
86
+ ### Self-Reference Mechanism
87
+
88
+ The "loop" doesn't mean Claude talks to itself. It means:
89
+ - Same prompt repeated
90
+ - Claude's work persists in files
91
+ - Each iteration sees previous attempts
92
+ - Builds incrementally toward goal
93
+
94
+ ## Example
95
+
96
+ ### Interactive Bug Fix
97
+
98
+ ```
99
+ /ralph-loop "Fix the token refresh logic in auth.ts. Output <promise>FIXED</promise> when all tests pass." --completion-promise "FIXED" --max-iterations 10
100
+ ```
101
+
102
+ You'll see Ralph:
103
+ - Attempt fixes
104
+ - Run tests
105
+ - See failures
106
+ - Iterate on solution
107
+ - In your current session
108
+
109
+ ## When to Use Ralph
110
+
111
+ **Good for:**
112
+ - Well-defined tasks with clear success criteria
113
+ - Tasks requiring iteration and refinement
114
+ - Iterative development with self-correction
115
+ - Greenfield projects
116
+
117
+ **Not good for:**
118
+ - Tasks requiring human judgment or design decisions
119
+ - One-shot operations
120
+ - Tasks with unclear success criteria
121
+ - Debugging production issues (use targeted debugging instead)
122
+
123
+ ## Learn More
124
+
125
+ - Original technique: https://ghuntley.com/ralph/
126
+ - Ralph Orchestrator: https://github.com/mikeyobrien/ralph-orchestrator
@@ -1,18 +1,18 @@
1
- ---
2
- description: "Start Ralph Loop in current session"
3
- argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
4
- allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
5
- hide-from-slash-command-tool: "true"
6
- ---
7
-
8
- # Ralph Loop Command
9
-
10
- Execute the setup script to initialize the Ralph loop:
11
-
12
- ```!
13
- "${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
14
- ```
15
-
16
- Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
17
-
18
- CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
1
+ ---
2
+ description: "Start Ralph Loop in current session"
3
+ argument-hint: "PROMPT [--max-iterations N] [--completion-promise TEXT]"
4
+ allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh:*)"]
5
+ hide-from-slash-command-tool: "true"
6
+ ---
7
+
8
+ # Ralph Loop Command
9
+
10
+ Execute the setup script to initialize the Ralph loop:
11
+
12
+ ```!
13
+ "${CLAUDE_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTS
14
+ ```
15
+
16
+ Please work on the task. When you try to exit, the Ralph loop will feed the SAME PROMPT back to you for the next iteration. You'll see your previous work in files and git history, allowing you to iterate and improve.
17
+
18
+ CRITICAL RULE: If a completion promise is set, you may ONLY output it when the statement is completely and unequivocally TRUE. Do not output false promises to escape the loop, even if you think you're stuck or should exit for other reasons. The loop is designed to continue until genuine completion.
@@ -1,106 +1,106 @@
1
- ---
2
- description: Quick code review - review current PR changes and output directly
3
- allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
4
- ---
5
-
6
- You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
7
-
8
- **You need to ULTRA THINK at every step.**
9
-
10
- ## Workflow
11
-
12
- 1. **GET PR CONTEXT**: Understand what changed
13
- - Use `gh pr view` to get PR info (title, description, number)
14
- - Use `gh pr diff` to see all changes
15
- - Use `git log origin/main..HEAD` to see commits
16
- - Identify all modified files
17
- - **CRITICAL**: Review actual changes, not entire codebase
18
-
19
- 2. **FEATURE REVIEW**: Verify implementation correctness
20
- - **Read changed files**: Review implementation in context
21
- - **Check requirements**: Compare changes against PR description
22
- - **Verify completeness**: Ensure requested features are implemented
23
- - **Test coverage**: Check if tests were added for new functionality
24
- - **CRITICAL**: Flag incomplete implementations
25
-
26
- 3. **SECURITY REVIEW**: Deep security analysis
27
- - Search for security vulnerabilities in changed code:
28
- - **Credentials exposure**: Hardcoded keys, tokens, passwords
29
- - **Environment variables**: Check `.env` files are gitignored
30
- - **Sensitive data**: Exposed API keys, secrets, private keys
31
- - **Input validation**: SQL injection, XSS vulnerabilities
32
- - **Authentication**: Auth checks are correct
33
- - **Authorization**: Proper permission checks
34
- - **Data sanitization**: User input is escaped
35
- - Use Grep on changed files:
36
- - `password.*=.*['"]` (hardcoded passwords)
37
- - `api[_-]?key.*=.*['"]` (hardcoded API keys)
38
- - `secret.*=.*['"]` (hardcoded secrets)
39
- - `token.*=.*['"]` (hardcoded tokens)
40
- - **CRITICAL**: Block if critical security issues found
41
-
42
- 4. **CODE QUALITY REVIEW**: Style and maintainability
43
- - Check code quality in changed files:
44
- - **Naming conventions**: Clear, consistent names
45
- - **Code duplication**: Repeated logic
46
- - **Complexity**: Overly complex functions
47
- - **Comments**: Minimal, useful comments only
48
- - **Patterns**: Follows existing codebase patterns
49
- - **Dependencies**: No unnecessary new dependencies
50
- - Note quality issues
51
-
52
- 5. **AUTOMATED CHECKS**: Linting and build verification
53
- - **Check `package.json`** for available scripts
54
- - Run checks systematically:
55
- - `npm run lint` - Code linting
56
- - `npm run typecheck` - TypeScript type checking
57
- - `npm run test` - Run relevant tests only
58
- - `npm run build` - Build verification
59
- - **CRITICAL**: All checks must pass before approval
60
- - If failures: Document and request fixes
61
-
62
- 6. **FINAL VERDICT**: Output review summary
63
- - Compile all findings into summary
64
- - Rate implementation quality (1-10)
65
- - **Decision options**:
66
- - **✅ APPROVED**: All checks pass, ready to merge
67
- - **🔧 NEEDS FIXES**: Minor issues, list required changes
68
- - **🚫 BLOCKED**: Critical issues, cannot proceed
69
- - **NO FILE CREATION**: Output everything directly to chat
70
-
71
- ## Security Search Patterns
72
-
73
- ```bash
74
- # Hardcoded secrets
75
- gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
76
-
77
- # Check .env is gitignored
78
- cat .gitignore | grep -E "^\.env"
79
-
80
- # Look for .env in PR
81
- gh pr diff | grep -E "\.env"
82
- ```
83
-
84
- ## Code Quality Anti-patterns
85
-
86
- - Large functions (>50 lines)
87
- - Deep nesting (>3 levels)
88
- - Magic numbers/strings
89
- - Commented-out code
90
-
91
- ## Execution Rules
92
-
93
- - **ULTRA THINK** at each review phase
94
- - **NEVER skip security checks** - they are mandatory
95
- - **Focus on changed code** - don't review entire codebase
96
- - **Block on critical issues** - don't proceed if unsafe
97
- - **Stay objective** - report facts, not opinions
98
- - **NO FILE CREATION**: Output all results directly to chat
99
-
100
- ## Priority
101
-
102
- Security > Correctness > Quality > Speed. Never compromise on security.
103
-
104
- ---
105
-
106
- User: $ARGUMENTS
1
+ ---
2
+ description: Quick code review - review current PR changes and output directly
3
+ allowed-tools: Bash(npm :*), Bash(git :*), Bash(gh :*), Read, Grep, Glob
4
+ ---
5
+
6
+ You are a code review specialist. Conduct thorough reviews of current PR changes WITHOUT creating review files.
7
+
8
+ **You need to ULTRA THINK at every step.**
9
+
10
+ ## Workflow
11
+
12
+ 1. **GET PR CONTEXT**: Understand what changed
13
+ - Use `gh pr view` to get PR info (title, description, number)
14
+ - Use `gh pr diff` to see all changes
15
+ - Use `git log origin/main..HEAD` to see commits
16
+ - Identify all modified files
17
+ - **CRITICAL**: Review actual changes, not entire codebase
18
+
19
+ 2. **FEATURE REVIEW**: Verify implementation correctness
20
+ - **Read changed files**: Review implementation in context
21
+ - **Check requirements**: Compare changes against PR description
22
+ - **Verify completeness**: Ensure requested features are implemented
23
+ - **Test coverage**: Check if tests were added for new functionality
24
+ - **CRITICAL**: Flag incomplete implementations
25
+
26
+ 3. **SECURITY REVIEW**: Deep security analysis
27
+ - Search for security vulnerabilities in changed code:
28
+ - **Credentials exposure**: Hardcoded keys, tokens, passwords
29
+ - **Environment variables**: Check `.env` files are gitignored
30
+ - **Sensitive data**: Exposed API keys, secrets, private keys
31
+ - **Input validation**: SQL injection, XSS vulnerabilities
32
+ - **Authentication**: Auth checks are correct
33
+ - **Authorization**: Proper permission checks
34
+ - **Data sanitization**: User input is escaped
35
+ - Use Grep on changed files:
36
+ - `password.*=.*['"]` (hardcoded passwords)
37
+ - `api[_-]?key.*=.*['"]` (hardcoded API keys)
38
+ - `secret.*=.*['"]` (hardcoded secrets)
39
+ - `token.*=.*['"]` (hardcoded tokens)
40
+ - **CRITICAL**: Block if critical security issues found
41
+
42
+ 4. **CODE QUALITY REVIEW**: Style and maintainability
43
+ - Check code quality in changed files:
44
+ - **Naming conventions**: Clear, consistent names
45
+ - **Code duplication**: Repeated logic
46
+ - **Complexity**: Overly complex functions
47
+ - **Comments**: Minimal, useful comments only
48
+ - **Patterns**: Follows existing codebase patterns
49
+ - **Dependencies**: No unnecessary new dependencies
50
+ - Note quality issues
51
+
52
+ 5. **AUTOMATED CHECKS**: Linting and build verification
53
+ - **Check `package.json`** for available scripts
54
+ - Run checks systematically:
55
+ - `npm run lint` - Code linting
56
+ - `npm run typecheck` - TypeScript type checking
57
+ - `npm run test` - Run relevant tests only
58
+ - `npm run build` - Build verification
59
+ - **CRITICAL**: All checks must pass before approval
60
+ - If failures: Document and request fixes
61
+
62
+ 6. **FINAL VERDICT**: Output review summary
63
+ - Compile all findings into summary
64
+ - Rate implementation quality (1-10)
65
+ - **Decision options**:
66
+ - **✅ APPROVED**: All checks pass, ready to merge
67
+ - **🔧 NEEDS FIXES**: Minor issues, list required changes
68
+ - **🚫 BLOCKED**: Critical issues, cannot proceed
69
+ - **NO FILE CREATION**: Output everything directly to chat
70
+
71
+ ## Security Search Patterns
72
+
73
+ ```bash
74
+ # Hardcoded secrets
75
+ gh pr diff | grep -iE "(password|api[_-]?key|secret|token)\s*=\s*['\"]"
76
+
77
+ # Check .env is gitignored
78
+ cat .gitignore | grep -E "^\.env"
79
+
80
+ # Look for .env in PR
81
+ gh pr diff | grep -E "\.env"
82
+ ```
83
+
84
+ ## Code Quality Anti-patterns
85
+
86
+ - Large functions (>50 lines)
87
+ - Deep nesting (>3 levels)
88
+ - Magic numbers/strings
89
+ - Commented-out code
90
+
91
+ ## Execution Rules
92
+
93
+ - **ULTRA THINK** at each review phase
94
+ - **NEVER skip security checks** - they are mandatory
95
+ - **Focus on changed code** - don't review entire codebase
96
+ - **Block on critical issues** - don't proceed if unsafe
97
+ - **Stay objective** - report facts, not opinions
98
+ - **NO FILE CREATION**: Output all results directly to chat
99
+
100
+ ## Priority
101
+
102
+ Security > Correctness > Quality > Speed. Never compromise on security.
103
+
104
+ ---
105
+
106
+ User: $ARGUMENTS