@bradygaster/squad-sdk 0.8.25 → 0.9.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (228) hide show
  1. package/README.md +296 -296
  2. package/dist/adapter/client.d.ts +17 -0
  3. package/dist/adapter/client.d.ts.map +1 -1
  4. package/dist/adapter/client.js +101 -1
  5. package/dist/adapter/client.js.map +1 -1
  6. package/dist/agents/history-shadow.d.ts.map +1 -1
  7. package/dist/agents/history-shadow.js +129 -62
  8. package/dist/agents/history-shadow.js.map +1 -1
  9. package/dist/agents/index.d.ts +1 -0
  10. package/dist/agents/index.d.ts.map +1 -1
  11. package/dist/agents/index.js +2 -0
  12. package/dist/agents/index.js.map +1 -1
  13. package/dist/agents/model-selector.d.ts +2 -0
  14. package/dist/agents/model-selector.d.ts.map +1 -1
  15. package/dist/agents/model-selector.js +41 -35
  16. package/dist/agents/model-selector.js.map +1 -1
  17. package/dist/agents/personal.d.ts +35 -0
  18. package/dist/agents/personal.d.ts.map +1 -0
  19. package/dist/agents/personal.js +67 -0
  20. package/dist/agents/personal.js.map +1 -0
  21. package/dist/build/github-dist.js +42 -42
  22. package/dist/builders/index.d.ts +3 -2
  23. package/dist/builders/index.d.ts.map +1 -1
  24. package/dist/builders/index.js +28 -0
  25. package/dist/builders/index.js.map +1 -1
  26. package/dist/builders/types.d.ts +13 -0
  27. package/dist/builders/types.d.ts.map +1 -1
  28. package/dist/config/init.d.ts +8 -0
  29. package/dist/config/init.d.ts.map +1 -1
  30. package/dist/config/init.js +304 -193
  31. package/dist/config/init.js.map +1 -1
  32. package/dist/config/models.d.ts +112 -0
  33. package/dist/config/models.d.ts.map +1 -1
  34. package/dist/config/models.js +329 -18
  35. package/dist/config/models.js.map +1 -1
  36. package/dist/coordinator/index.js +2 -2
  37. package/dist/coordinator/index.js.map +1 -1
  38. package/dist/index.d.ts +8 -3
  39. package/dist/index.d.ts.map +1 -1
  40. package/dist/index.js +7 -2
  41. package/dist/index.js.map +1 -1
  42. package/dist/platform/azure-devops.d.ts +42 -0
  43. package/dist/platform/azure-devops.d.ts.map +1 -1
  44. package/dist/platform/azure-devops.js +75 -0
  45. package/dist/platform/azure-devops.js.map +1 -1
  46. package/dist/platform/comms-file-log.d.ts.map +1 -1
  47. package/dist/platform/comms-file-log.js +2 -1
  48. package/dist/platform/comms-file-log.js.map +1 -1
  49. package/dist/platform/index.d.ts +2 -1
  50. package/dist/platform/index.d.ts.map +1 -1
  51. package/dist/platform/index.js +1 -0
  52. package/dist/platform/index.js.map +1 -1
  53. package/dist/ralph/capabilities.d.ts +67 -0
  54. package/dist/ralph/capabilities.d.ts.map +1 -0
  55. package/dist/ralph/capabilities.js +111 -0
  56. package/dist/ralph/capabilities.js.map +1 -0
  57. package/dist/ralph/index.d.ts +2 -0
  58. package/dist/ralph/index.d.ts.map +1 -1
  59. package/dist/ralph/index.js +6 -5
  60. package/dist/ralph/index.js.map +1 -1
  61. package/dist/ralph/rate-limiting.d.ts +99 -0
  62. package/dist/ralph/rate-limiting.d.ts.map +1 -0
  63. package/dist/ralph/rate-limiting.js +170 -0
  64. package/dist/ralph/rate-limiting.js.map +1 -0
  65. package/dist/resolution.d.ts +24 -2
  66. package/dist/resolution.d.ts.map +1 -1
  67. package/dist/resolution.js +106 -6
  68. package/dist/resolution.js.map +1 -1
  69. package/dist/roles/catalog-categories.d.ts +146 -0
  70. package/dist/roles/catalog-categories.d.ts.map +1 -0
  71. package/dist/roles/catalog-categories.js +374 -0
  72. package/dist/roles/catalog-categories.js.map +1 -0
  73. package/dist/roles/catalog-engineering.d.ts +212 -0
  74. package/dist/roles/catalog-engineering.d.ts.map +1 -0
  75. package/dist/roles/catalog-engineering.js +549 -0
  76. package/dist/roles/catalog-engineering.js.map +1 -0
  77. package/dist/roles/catalog.d.ts +24 -0
  78. package/dist/roles/catalog.d.ts.map +1 -0
  79. package/dist/roles/catalog.js +28 -0
  80. package/dist/roles/catalog.js.map +1 -0
  81. package/dist/roles/index.d.ts +69 -0
  82. package/dist/roles/index.d.ts.map +1 -0
  83. package/dist/roles/index.js +197 -0
  84. package/dist/roles/index.js.map +1 -0
  85. package/dist/roles/types.d.ts +87 -0
  86. package/dist/roles/types.d.ts.map +1 -0
  87. package/dist/roles/types.js +14 -0
  88. package/dist/roles/types.js.map +1 -0
  89. package/dist/runtime/benchmarks.js +5 -5
  90. package/dist/runtime/benchmarks.js.map +1 -1
  91. package/dist/runtime/constants.d.ts +2 -2
  92. package/dist/runtime/constants.d.ts.map +1 -1
  93. package/dist/runtime/constants.js +5 -3
  94. package/dist/runtime/constants.js.map +1 -1
  95. package/dist/runtime/cross-squad.d.ts +118 -0
  96. package/dist/runtime/cross-squad.d.ts.map +1 -0
  97. package/dist/runtime/cross-squad.js +234 -0
  98. package/dist/runtime/cross-squad.js.map +1 -0
  99. package/dist/runtime/otel-init.d.ts +24 -17
  100. package/dist/runtime/otel-init.d.ts.map +1 -1
  101. package/dist/runtime/otel-init.js +29 -20
  102. package/dist/runtime/otel-init.js.map +1 -1
  103. package/dist/runtime/otel-metrics.d.ts +5 -0
  104. package/dist/runtime/otel-metrics.d.ts.map +1 -1
  105. package/dist/runtime/otel-metrics.js +54 -0
  106. package/dist/runtime/otel-metrics.js.map +1 -1
  107. package/dist/runtime/rework.d.ts +71 -0
  108. package/dist/runtime/rework.d.ts.map +1 -0
  109. package/dist/runtime/rework.js +107 -0
  110. package/dist/runtime/rework.js.map +1 -0
  111. package/dist/runtime/scheduler.d.ts +128 -0
  112. package/dist/runtime/scheduler.d.ts.map +1 -0
  113. package/dist/runtime/scheduler.js +427 -0
  114. package/dist/runtime/scheduler.js.map +1 -0
  115. package/dist/runtime/squad-observer.d.ts.map +1 -1
  116. package/dist/runtime/squad-observer.js +4 -0
  117. package/dist/runtime/squad-observer.js.map +1 -1
  118. package/dist/runtime/streaming.d.ts +2 -0
  119. package/dist/runtime/streaming.d.ts.map +1 -1
  120. package/dist/runtime/streaming.js +6 -0
  121. package/dist/runtime/streaming.js.map +1 -1
  122. package/dist/runtime/telemetry.d.ts +2 -0
  123. package/dist/runtime/telemetry.d.ts.map +1 -1
  124. package/dist/runtime/telemetry.js +6 -0
  125. package/dist/runtime/telemetry.js.map +1 -1
  126. package/dist/sharing/consult.d.ts +2 -2
  127. package/dist/sharing/consult.js +83 -83
  128. package/dist/sharing/consult.js.map +1 -1
  129. package/dist/sharing/export.d.ts.map +1 -1
  130. package/dist/sharing/export.js +17 -4
  131. package/dist/sharing/export.js.map +1 -1
  132. package/dist/skills/handler-types.d.ts +271 -0
  133. package/dist/skills/handler-types.d.ts.map +1 -0
  134. package/dist/skills/handler-types.js +31 -0
  135. package/dist/skills/handler-types.js.map +1 -0
  136. package/dist/skills/index.d.ts +3 -0
  137. package/dist/skills/index.d.ts.map +1 -1
  138. package/dist/skills/index.js +3 -0
  139. package/dist/skills/index.js.map +1 -1
  140. package/dist/skills/skill-script-loader.d.ts +65 -0
  141. package/dist/skills/skill-script-loader.d.ts.map +1 -0
  142. package/dist/skills/skill-script-loader.js +227 -0
  143. package/dist/skills/skill-script-loader.js.map +1 -0
  144. package/dist/skills/skill-source.d.ts.map +1 -1
  145. package/dist/skills/skill-source.js +5 -1
  146. package/dist/skills/skill-source.js.map +1 -1
  147. package/dist/tools/index.d.ts +10 -1
  148. package/dist/tools/index.d.ts.map +1 -1
  149. package/dist/tools/index.js +49 -8
  150. package/dist/tools/index.js.map +1 -1
  151. package/dist/upstream/resolver.d.ts.map +1 -1
  152. package/dist/upstream/resolver.js +14 -5
  153. package/dist/upstream/resolver.js.map +1 -1
  154. package/package.json +34 -3
  155. package/templates/casting/Futurama.json +10 -0
  156. package/templates/casting-history.json +4 -4
  157. package/templates/casting-policy.json +37 -35
  158. package/templates/casting-reference.md +104 -0
  159. package/templates/casting-registry.json +3 -3
  160. package/templates/ceremonies.md +41 -41
  161. package/templates/charter.md +53 -53
  162. package/templates/constraint-tracking.md +38 -38
  163. package/templates/cooperative-rate-limiting.md +229 -0
  164. package/templates/copilot-instructions.md +46 -46
  165. package/templates/history.md +10 -10
  166. package/templates/identity/now.md +9 -9
  167. package/templates/identity/wisdom.md +15 -15
  168. package/templates/issue-lifecycle.md +412 -0
  169. package/templates/keda-scaler.md +164 -0
  170. package/templates/machine-capabilities.md +75 -0
  171. package/templates/mcp-config.md +90 -98
  172. package/templates/multi-agent-format.md +28 -28
  173. package/templates/orchestration-log.md +27 -27
  174. package/templates/package.json +3 -0
  175. package/templates/plugin-marketplace.md +49 -49
  176. package/templates/ralph-circuit-breaker.md +313 -0
  177. package/templates/ralph-triage.js +543 -0
  178. package/templates/raw-agent-output.md +37 -37
  179. package/templates/roster.md +60 -60
  180. package/templates/routing.md +39 -54
  181. package/templates/run-output.md +50 -50
  182. package/templates/schedule.json +19 -0
  183. package/templates/scribe-charter.md +119 -119
  184. package/templates/skill.md +24 -24
  185. package/templates/skills/agent-collaboration/SKILL.md +42 -0
  186. package/templates/skills/agent-conduct/SKILL.md +24 -0
  187. package/templates/skills/architectural-proposals/SKILL.md +151 -0
  188. package/templates/skills/ci-validation-gates/SKILL.md +84 -0
  189. package/templates/skills/cli-wiring/SKILL.md +47 -0
  190. package/templates/skills/client-compatibility/SKILL.md +89 -0
  191. package/templates/skills/cross-squad/SKILL.md +114 -0
  192. package/templates/skills/distributed-mesh/SKILL.md +287 -0
  193. package/templates/skills/distributed-mesh/mesh.json.example +30 -0
  194. package/templates/skills/distributed-mesh/sync-mesh.ps1 +111 -0
  195. package/templates/skills/distributed-mesh/sync-mesh.sh +104 -0
  196. package/templates/skills/docs-standards/SKILL.md +71 -0
  197. package/templates/skills/economy-mode/SKILL.md +114 -0
  198. package/templates/skills/external-comms/SKILL.md +329 -0
  199. package/templates/skills/gh-auth-isolation/SKILL.md +183 -0
  200. package/templates/skills/git-workflow/SKILL.md +204 -0
  201. package/templates/skills/github-multi-account/SKILL.md +95 -0
  202. package/templates/skills/history-hygiene/SKILL.md +36 -0
  203. package/templates/skills/humanizer/SKILL.md +105 -0
  204. package/templates/skills/init-mode/SKILL.md +102 -0
  205. package/templates/skills/model-selection/SKILL.md +117 -0
  206. package/templates/skills/nap/SKILL.md +24 -0
  207. package/templates/skills/personal-squad/SKILL.md +57 -0
  208. package/templates/skills/project-conventions/SKILL.md +56 -56
  209. package/templates/skills/release-process/SKILL.md +423 -0
  210. package/templates/skills/reskill/SKILL.md +92 -0
  211. package/templates/skills/reviewer-protocol/SKILL.md +79 -0
  212. package/templates/skills/secret-handling/SKILL.md +200 -0
  213. package/templates/skills/session-recovery/SKILL.md +155 -0
  214. package/templates/skills/squad-conventions/SKILL.md +69 -0
  215. package/templates/skills/test-discipline/SKILL.md +37 -0
  216. package/templates/skills/windows-compatibility/SKILL.md +74 -0
  217. package/templates/squad.agent.md +1287 -1146
  218. package/templates/workflows/squad-ci.yml +24 -24
  219. package/templates/workflows/squad-docs.yml +54 -50
  220. package/templates/workflows/squad-heartbeat.yml +171 -316
  221. package/templates/workflows/squad-insider-release.yml +61 -61
  222. package/templates/workflows/squad-issue-assign.yml +161 -161
  223. package/templates/workflows/squad-label-enforce.yml +181 -181
  224. package/templates/workflows/squad-preview.yml +55 -55
  225. package/templates/workflows/squad-promote.yml +120 -120
  226. package/templates/workflows/squad-release.yml +77 -77
  227. package/templates/workflows/squad-triage.yml +260 -260
  228. package/templates/workflows/sync-squad-labels.yml +169 -169
@@ -0,0 +1,114 @@
1
+ ---
2
+ name: "economy-mode"
3
+ description: "Shifts Layer 3 model selection to cost-optimized alternatives when economy mode is active."
4
+ domain: "model-selection"
5
+ confidence: "low"
6
+ source: "manual"
7
+ ---
8
+
9
+ ## SCOPE
10
+
11
+ ✅ THIS SKILL PRODUCES:
12
+ - A modified Layer 3 model selection table applied when economy mode is active
13
+ - `economyMode: true` written to `.squad/config.json` when activated persistently
14
+ - Spawn acknowledgments with `💰` indicator when economy mode is active
15
+
16
+ ❌ THIS SKILL DOES NOT PRODUCE:
17
+ - Code, tests, or documentation
18
+ - Cost reports or billing artifacts
19
+ - Changes to Layer 0, Layer 1, or Layer 2 resolution (user intent always wins)
20
+
21
+ ## Context
22
+
23
+ Economy mode shifts Layer 3 (Task-Aware Auto-Selection) to lower-cost alternatives. It does NOT override persistent config (`defaultModel`, `agentModelOverrides`) or per-agent charter preferences — those represent explicit user intent and always take priority.
24
+
25
+ Use this skill when the user wants to reduce costs across an entire session or permanently, without manually specifying models for each agent.
26
+
27
+ ## Activation Methods
28
+
29
+ | Method | How |
30
+ |--------|-----|
31
+ | Session phrase | "use economy mode", "save costs", "go cheap", "reduce costs" |
32
+ | Persistent config | `"economyMode": true` in `.squad/config.json` |
33
+ | CLI flag | `squad --economy` |
34
+
35
+ **Deactivation:** "turn off economy mode", "disable economy mode", or remove `economyMode` from `config.json`.
36
+
37
+ ## Economy Model Selection Table
38
+
39
+ When economy mode is **active**, Layer 3 auto-selection uses this table instead of the normal defaults:
40
+
41
+ | Task Output | Normal Mode | Economy Mode |
42
+ |-------------|-------------|--------------|
43
+ | Writing code (implementation, refactoring, bug fixes) | `claude-sonnet-4.5` | `gpt-4.1` or `gpt-5-mini` |
44
+ | Writing prompts or agent designs | `claude-sonnet-4.5` | `gpt-4.1` or `gpt-5-mini` |
45
+ | Docs, planning, triage, changelogs, mechanical ops | `claude-haiku-4.5` | `gpt-4.1` or `gpt-5-mini` |
46
+ | Architecture, code review, security audits | `claude-opus-4.5` | `claude-sonnet-4.5` |
47
+ | Scribe / logger / mechanical file ops | `claude-haiku-4.5` | `gpt-4.1` |
48
+
49
+ **Prefer `gpt-4.1` over `gpt-5-mini`** when the task involves structured output or agentic tool use. Prefer `gpt-5-mini` for pure text generation tasks where latency matters.
50
+
51
+ ## AGENT WORKFLOW
52
+
53
+ ### On Session Start
54
+
55
+ 1. READ `.squad/config.json`
56
+ 2. CHECK for `economyMode: true` — if present, activate economy mode for the session
57
+ 3. STORE economy mode state in session context
58
+
59
+ ### On User Phrase Trigger
60
+
61
+ **Session-only (no config change):** "use economy mode", "save costs", "go cheap"
62
+
63
+ 1. SET economy mode active for this session
64
+ 2. ACKNOWLEDGE: `✅ Economy mode active — using cost-optimized models this session. (Layer 0 and Layer 2 preferences still apply)`
65
+
66
+ **Persistent:** "always use economy mode", "save economy mode"
67
+
68
+ 1. WRITE `economyMode: true` to `.squad/config.json` (merge, don't overwrite other fields)
69
+ 2. ACKNOWLEDGE: `✅ Economy mode saved — cost-optimized models will be used until disabled.`
70
+
71
+ ### On Every Agent Spawn (Economy Mode Active)
72
+
73
+ 1. CHECK Layer 0a/0b first (agentModelOverrides, defaultModel) — if set, use that. Economy mode does NOT override Layer 0.
74
+ 2. CHECK Layer 1 (session directive for a specific model) — if set, use that. Economy mode does NOT override explicit session directives.
75
+ 3. CHECK Layer 2 (charter preference) — if set, use that. Economy mode does NOT override charter preferences.
76
+ 4. APPLY economy table at Layer 3 instead of normal table.
77
+ 5. INCLUDE `💰` in spawn acknowledgment: `🔧 {Name} ({model} · 💰 economy) — {task}`
78
+
79
+ ### On Deactivation
80
+
81
+ **Trigger phrases:** "turn off economy mode", "disable economy mode", "use normal models"
82
+
83
+ 1. REMOVE `economyMode` from `.squad/config.json` (if it was persisted)
84
+ 2. CLEAR session economy mode state
85
+ 3. ACKNOWLEDGE: `✅ Economy mode disabled — returning to standard model selection.`
86
+
87
+ ### STOP
88
+
89
+ After updating economy mode state and including the `💰` indicator in spawn acknowledgments, this skill is done. Do NOT:
90
+ - Change Layer 0, Layer 1, or Layer 2 model choices
91
+ - Override charter-specified models
92
+ - Generate cost reports or comparisons
93
+ - Fall back to premium models via economy mode (economy mode never bumps UP)
94
+
95
+ ## Config Schema
96
+
97
+ `.squad/config.json` economy-related fields:
98
+
99
+ ```json
100
+ {
101
+ "version": 1,
102
+ "economyMode": true
103
+ }
104
+ ```
105
+
106
+ - `economyMode` — when `true`, Layer 3 uses the economy table. Optional; absent = economy mode off.
107
+ - Combines with `defaultModel` and `agentModelOverrides` — Layer 0 always wins.
108
+
109
+ ## Anti-Patterns
110
+
111
+ - **Don't override Layer 0 in economy mode.** If the user set `defaultModel: "claude-opus-4.6"`, they want quality. Economy mode only affects Layer 3 auto-selection.
112
+ - **Don't silently apply economy mode.** Always acknowledge when activated or deactivated.
113
+ - **Don't treat economy mode as permanent by default.** Session phrases activate session-only; only "always" or `config.json` persist it.
114
+ - **Don't bump premium tasks down too far.** Architecture and security reviews shift from opus to sonnet in economy mode — they do NOT go to fast/cheap models.
@@ -0,0 +1,329 @@
1
+ ---
2
+ name: "external-comms"
3
+ description: "PAO workflow for scanning, drafting, and presenting community responses with human review gate"
4
+ domain: "community, communication, workflow"
5
+ confidence: "low"
6
+ source: "manual (RFC #426 — PAO External Communications)"
7
+ tools:
8
+ - name: "github-mcp-server-list_issues"
9
+ description: "List open issues for scan candidates and lightweight triage"
10
+ when: "Use for recent open issue scans before thread-level review"
11
+ - name: "github-mcp-server-issue_read"
12
+ description: "Read the full issue, comments, and labels before drafting"
13
+ when: "Use after selecting a candidate so PAO has complete thread context"
14
+ - name: "github-mcp-server-search_issues"
15
+ description: "Search for candidate issues or prior squad responses"
16
+ when: "Use when filtering by keywords, labels, or duplicate response checks"
17
+ - name: "gh CLI"
18
+ description: "Fallback for GitHub issue comments and discussions workflows"
19
+ when: "Use gh issue list/comment and gh api or gh api graphql when MCP coverage is incomplete"
20
+ ---
21
+
22
+ ## Context
23
+
24
+ Phase 1 is **draft-only mode**.
25
+
26
+ - PAO scans issues and discussions, drafts responses with the humanizer skill, and presents a review table for human approval.
27
+ - **Human review gate is mandatory** — PAO never posts autonomously.
28
+ - Every action is logged to `.squad/comms/audit/`.
29
+ - This workflow is triggered manually only ("PAO, check community") — no automated or Ralph-triggered activation in Phase 1.
30
+
31
+ ## Patterns
32
+
33
+ ### 1. Scan
34
+
35
+ Find unanswered community items with GitHub MCP tools first, or `gh issue list` / `gh api` as fallback for issues and discussions.
36
+
37
+ - Include **open** issues and discussions only.
38
+ - Filter for items with **no squad team response**.
39
+ - Limit to items created in the last 7 days.
40
+ - Exclude items labeled `squad:internal` or `wontfix`.
41
+ - Include discussions **and** issues in the same sweep.
42
+ - Phase 1 scope is **issues and discussions only** — do not draft PR replies.
43
+
44
+ ### Discussion Handling (Phase 1)
45
+
46
+ Discussions use the GitHub Discussions API, which differs from issues:
47
+
48
+ - **Scan:** `gh api /repos/{owner}/{repo}/discussions --jq '.[] | select(.answer_chosen_at == null)'` to find unanswered discussions
49
+ - **Categories:** Filter by Q&A and General categories only (skip Announcements, Show and Tell)
50
+ - **Answers vs comments:** In Q&A discussions, PAO drafts an "answer" (not a comment). The human marks it as accepted answer after posting.
51
+ - **Phase 1 scope:** Issues and Discussions ONLY. No PR comments.
52
+
53
+ ### 2. Classify
54
+
55
+ Determine the response type before drafting.
56
+
57
+ - Welcome (new contributor)
58
+ - Troubleshooting (bug/help)
59
+ - Feature guidance (feature request/how-to)
60
+ - Redirect (wrong repo/scope)
61
+ - Acknowledgment (confirmed, no fix)
62
+ - Closing (resolved)
63
+ - Technical uncertainty (unknown cause)
64
+ - Empathetic disagreement (pushback on a decision or design)
65
+ - Information request (need more reproduction details or context)
66
+
67
+ ### Template Selection Guide
68
+
69
+ | Signal in Issue/Discussion | → Response Type | Template |
70
+ |---------------------------|-----------------|----------|
71
+ | New contributor (0 prior issues) | Welcome | T1 |
72
+ | Error message, stack trace, "doesn't work" | Troubleshooting | T2 |
73
+ | "How do I...?", "Can Squad...?", "Is there a way to...?" | Feature Guidance | T3 |
74
+ | Wrong repo, out of scope for Squad | Redirect | T4 |
75
+ | Confirmed bug, no fix available yet | Acknowledgment | T5 |
76
+ | Fix shipped, PR merged that resolves issue | Closing | T6 |
77
+ | Unclear cause, needs investigation | Technical Uncertainty | T7 |
78
+ | Author disagrees with a decision or design | Empathetic Disagreement | T8 |
79
+ | Need more reproduction info or context | Information Request | T9 |
80
+
81
+ Use exactly one template as the base draft. Replace placeholders with issue-specific details, then apply the humanizer patterns. If the thread spans multiple signals, choose the highest-risk template and capture the nuance in the thread summary.
82
+
83
+ ### Confidence Classification
84
+
85
+ | Confidence | Criteria | Example |
86
+ |-----------|----------|---------|
87
+ | 🟢 High | Answer exists in Squad docs or FAQ, similar question answered before, no technical ambiguity | "How do I install Squad?" |
88
+ | 🟡 Medium | Technical answer is sound but involves judgment calls, OR docs exist but don't perfectly match the question, OR tone is tricky | "Can Squad work with Azure DevOps?" (yes, but setup is nuanced) |
89
+ | 🔴 Needs Review | Technical uncertainty, policy/roadmap question, potential reputational risk, author is frustrated/angry, question about unreleased features | "When will Squad support Claude?" |
90
+
91
+ **Auto-escalation rules:**
92
+ - Any mention of competitors → 🔴
93
+ - Any mention of pricing/licensing → 🔴
94
+ - Author has >3 follow-up comments without resolution → 🔴
95
+ - Question references a closed-wontfix issue → 🔴
96
+
97
+ ### 3. Draft
98
+
99
+ Use the humanizer skill for every draft.
100
+
101
+ - Complete **Thread-Read Verification** before writing.
102
+ - Read the **full thread**, including all comments, before writing.
103
+ - Select the matching template from the **Template Selection Guide** and record the template ID in the review notes.
104
+ - Treat templates as reusable drafting assets: keep the structure, replace placeholders, and only improvise when the thread truly requires it.
105
+ - Validate the draft against the humanizer anti-patterns.
106
+ - Flag long threads (`>10` comments) with `⚠️`.
107
+
108
+ ### Thread-Read Verification
109
+
110
+ Before drafting, PAO MUST verify complete thread coverage:
111
+
112
+ 1. **Count verification:** Compare API comment count with actually-read comments. If mismatch, abort draft.
113
+ 2. **Deleted comment check:** Use `gh api` timeline to detect deleted comments. If found, flag as ⚠️ in review table.
114
+ 3. **Thread summary:** Include in every draft: "Thread: {N} comments, last activity {date}, {summary of key points}"
115
+ 4. **Long thread flag:** If >10 comments, add ⚠️ to review table and include condensed thread summary
116
+ 5. **Evidence line in review table:** Each draft row includes "Read: {N}/{total} comments" column
117
+
118
+ ### 4. Present
119
+
120
+ Show drafts for review in this exact format:
121
+
122
+ ```text
123
+ 📝 PAO — Community Response Drafts
124
+ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
125
+
126
+ | # | Item | Author | Type | Confidence | Read | Preview |
127
+ |---|------|--------|------|------------|------|---------|
128
+ | 1 | Issue #N | @user | Type | 🟢/🟡/🔴 | N/N | "First words..." |
129
+
130
+ Confidence: 🟢 High | 🟡 Medium | 🔴 Needs review
131
+
132
+ Full drafts below ▼
133
+ ```
134
+
135
+ Each full draft must begin with the thread summary line:
136
+ `Thread: {N} comments, last activity {date}, {summary of key points}`
137
+
138
+ ### 5. Human Action
139
+
140
+ Wait for explicit human direction before anything is posted.
141
+
142
+ - `pao approve 1 3` — approve drafts 1 and 3
143
+ - `pao edit 2` — edit draft 2
144
+ - `pao skip` — skip all
145
+ - `banana` — freeze all pending (safe word)
146
+
147
+ ### Rollback — Bad Post Recovery
148
+
149
+ If a posted response turns out to be wrong, inappropriate, or needs correction:
150
+
151
+ 1. **Delete the comment:**
152
+ - Issues: `gh api -X DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}`
153
+ - Discussions: `gh api graphql -f query='mutation { deleteDiscussionComment(input: {id: "{node_id}"}) { comment { id } } }'`
154
+ 2. **Log the deletion:** Write audit entry with action `delete`, include reason and original content
155
+ 3. **Draft replacement** (if needed): PAO drafts a corrected response, goes through normal review cycle
156
+ 4. **Postmortem:** If the error reveals a pattern gap, update humanizer anti-patterns or add a new test case
157
+
158
+ **Safe word — `banana`:**
159
+ - Immediately freezes all pending drafts in the review queue
160
+ - No new scans or drafts until `pao resume` is issued
161
+ - Audit entry logged with halter identity and reason
162
+
163
+ ### 6. Post
164
+
165
+ After approval:
166
+
167
+ - Human posts via `gh issue comment` for issues or `gh api` for discussion answers/comments.
168
+ - PAO helps by preparing the CLI command.
169
+ - Write the audit entry after the posting action.
170
+
171
+ ### 7. Audit
172
+
173
+ Log every action.
174
+
175
+ - Location: `.squad/comms/audit/{timestamp}.md`
176
+ - Required fields vary by action — see `.squad/comms/templates/audit-entry.md` Conditional Fields table
177
+ - Universal required fields: `timestamp`, `action`
178
+ - All other fields are conditional on the action type
179
+
180
+ ## Examples
181
+
182
+ These are reusable templates. Keep the structure, replace placeholders, and adjust only where the thread requires it.
183
+
184
+ ### Example scan command
185
+
186
+ ```bash
187
+ gh issue list --state open --json number,title,author,labels,comments --limit 20
188
+ ```
189
+
190
+ ### Example review table
191
+
192
+ ```text
193
+ 📝 PAO — Community Response Drafts
194
+ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
195
+
196
+ | # | Item | Author | Type | Confidence | Read | Preview |
197
+ |---|------|--------|------|------------|------|---------|
198
+ | 1 | Issue #426 | @newdev | Welcome | 🟢 | 1/1 | "Hey @newdev! Welcome to Squad..." |
199
+ | 2 | Discussion #18 | @builder | Feature guidance | 🟡 | 4/4 | "Great question! Today the CLI..." |
200
+ | 3 | Issue #431 ⚠️ | @debugger | Technical uncertainty | 🔴 | 12/12 | "Interesting find, @debugger..." |
201
+
202
+ Confidence: 🟢 High | 🟡 Medium | 🔴 Needs review
203
+
204
+ Full drafts below ▼
205
+ ```
206
+
207
+ ### Example audit entry (post action)
208
+
209
+ ```markdown
210
+ ---
211
+ timestamp: "2026-03-16T21:30:00Z"
212
+ action: "post"
213
+ item_number: 426
214
+ draft_id: 1
215
+ reviewer: "@bradygaster"
216
+ ---
217
+
218
+ ## Context (draft, approve, edit, skip, post, delete actions)
219
+ - Thread depth: 3
220
+ - Response type: welcome
221
+ - Confidence: 🟢
222
+ - Long thread flag: false
223
+
224
+ ## Draft Content (draft, edit, post actions)
225
+ Thread: 3 comments, last activity 2026-03-16, reporter hit a preview-build regression after install.
226
+
227
+ Hey @newdev! Welcome to Squad 👋 Thanks for opening this.
228
+ We reproduced the issue in preview builds and we're checking the regression point now.
229
+ Let us know if you can share the command you ran right before the failure.
230
+
231
+ ## Post Result (post, delete actions)
232
+ https://github.com/bradygaster/squad/issues/426#issuecomment-123456
233
+ ```
234
+
235
+ ### T1 — Welcome
236
+
237
+ ```text
238
+ Hey {author}! Welcome to Squad 👋 Thanks for opening this.
239
+ {specific acknowledgment or first answer}
240
+ Let us know if you have questions — happy to help!
241
+ ```
242
+
243
+ ### T2 — Troubleshooting
244
+
245
+ ```text
246
+ Thanks for the detailed report, {author}!
247
+ Here's what we think is happening: {explanation}
248
+ {steps or workaround}
249
+ Let us know if that helps, or if you're seeing something different.
250
+ ```
251
+
252
+ ### T3 — Feature Guidance
253
+
254
+ ```text
255
+ Great question! {context on current state}
256
+ {guidance or workaround}
257
+ We've noted this as a potential improvement — {tracking info if applicable}.
258
+ ```
259
+
260
+ ### T4 — Redirect
261
+
262
+ ```text
263
+ Thanks for reaching out! This one is actually better suited for {correct location}.
264
+ {brief explanation of why}
265
+ Feel free to open it there — they'll be able to help!
266
+ ```
267
+
268
+ ### T5 — Acknowledgment
269
+
270
+ ```text
271
+ Good catch, {author}. We've confirmed this is a real issue.
272
+ {what we know so far}
273
+ We'll update this thread when we have a fix. Thanks for flagging it!
274
+ ```
275
+
276
+ ### T6 — Closing
277
+
278
+ ```text
279
+ This should be resolved in {version/PR}! 🎉
280
+ {brief summary of what changed}
281
+ Thanks for reporting this, {author} — it made Squad better.
282
+ ```
283
+
284
+ ### T7 — Technical Uncertainty
285
+
286
+ ```text
287
+ Interesting find, {author}. We're not 100% sure what's causing this yet.
288
+ Here's what we've ruled out: {list}
289
+ We'd love more context if you have it — {specific ask}.
290
+ We'll dig deeper and update this thread.
291
+ ```
292
+
293
+ ### T8 — Empathetic Disagreement
294
+
295
+ ```text
296
+ We hear you, {author}. That's a fair concern.
297
+
298
+ The current design choice was driven by {reason}. We know it's not ideal for every use case.
299
+
300
+ {what alternatives exist or what trade-off was made}
301
+
302
+ If you have ideas for how to make this work better for your scenario, we'd love to hear them — open a discussion or drop your thoughts here!
303
+ ```
304
+
305
+ ### T9 — Information Request
306
+
307
+ ```text
308
+ Thanks for reporting this, {author}!
309
+
310
+ To help us dig into this, could you share:
311
+ - {specific ask 1}
312
+ - {specific ask 2}
313
+ - {specific ask 3, if applicable}
314
+
315
+ That context will help us narrow down what's happening. Appreciate it!
316
+ ```
317
+
318
+ ## Anti-Patterns
319
+
320
+ - ❌ Posting without human review (NEVER — this is the cardinal rule)
321
+ - ❌ Drafting without reading full thread (context is everything)
322
+ - ❌ Ignoring confidence flags (🔴 items need Flight/human review)
323
+ - ❌ Scanning closed issues (only open items)
324
+ - ❌ Responding to issues labeled `squad:internal` or `wontfix`
325
+ - ❌ Skipping audit logging (every action must be recorded)
326
+ - ❌ Drafting for issues where a squad member already responded (avoid duplicates)
327
+ - ❌ Drafting pull request responses in Phase 1 (issues/discussions only)
328
+ - ❌ Treating templates like loose examples instead of reusable drafting assets
329
+ - ❌ Asking for more info without specific requests
@@ -0,0 +1,183 @@
1
+ ---
2
+ name: "gh-auth-isolation"
3
+ description: "Safely manage multiple GitHub identities (EMU + personal) in agent workflows"
4
+ domain: "security, github-integration, authentication, multi-account"
5
+ confidence: "high"
6
+ source: "earned (production usage across 50+ sessions with EMU corp + personal GitHub accounts)"
7
+ tools:
8
+ - name: "gh"
9
+ description: "GitHub CLI for authenticated operations"
10
+ when: "When accessing GitHub resources requiring authentication"
11
+ ---
12
+
13
+ ## Context
14
+
15
+ Many developers use GitHub through an Enterprise Managed User (EMU) account at work while maintaining a personal GitHub account for open-source contributions. AI agents spawned by Squad inherit the shell's default `gh` authentication — which is usually the EMU account. This causes failures when agents try to push to personal repos, create PRs on forks, or interact with resources outside the enterprise org.
16
+
17
+ This skill teaches agents how to detect the active identity, switch contexts safely, and avoid mixing credentials across operations.
18
+
19
+ ## Patterns
20
+
21
+ ### Detect Current Identity
22
+
23
+ Before any GitHub operation, check which account is active:
24
+
25
+ ```bash
26
+ gh auth status
27
+ ```
28
+
29
+ Look for:
30
+ - `Logged in to github.com as USERNAME` — the active account
31
+ - `Token scopes: ...` — what permissions are available
32
+ - Multiple accounts will show separate entries
33
+
34
+ ### Extract a Specific Account's Token
35
+
36
+ When you need to operate as a specific user (not the default):
37
+
38
+ ```bash
39
+ # Get the personal account token (by username)
40
+ gh auth token --user personaluser
41
+
42
+ # Get the EMU account token
43
+ gh auth token --user corpalias_enterprise
44
+ ```
45
+
46
+ **Use case:** Push to a personal fork while the default `gh` auth is the EMU account.
47
+
48
+ ### Push to Personal Repos from EMU Shell
49
+
50
+ The most common scenario: your shell defaults to the EMU account, but you need to push to a personal GitHub repo.
51
+
52
+ ```bash
53
+ # 1. Extract the personal token
54
+ $token = gh auth token --user personaluser
55
+
56
+ # 2. Push using token-authenticated HTTPS
57
+ git push https://personaluser:$token@github.com/personaluser/repo.git branch-name
58
+ ```
59
+
60
+ **Why this works:** `gh auth token --user` reads from `gh`'s credential store without switching the active account. The token is used inline for a single operation and never persisted.
61
+
62
+ ### Create PRs on Personal Forks
63
+
64
+ When the default `gh` context is EMU but you need to create a PR from a personal fork:
65
+
66
+ ```bash
67
+ # Option 1: Use --repo flag (works if token has access)
68
+ gh pr create --repo upstream/repo --head personaluser:branch --title "..." --body "..."
69
+
70
+ # Option 2: Temporarily set GH_TOKEN for one command
71
+ $env:GH_TOKEN = $(gh auth token --user personaluser)
72
+ gh pr create --repo upstream/repo --head personaluser:branch --title "..."
73
+ Remove-Item Env:\GH_TOKEN
74
+ ```
75
+
76
+ ### Config Directory Isolation (Advanced)
77
+
78
+ For complete isolation between accounts, use separate `gh` config directories:
79
+
80
+ ```bash
81
+ # Personal account operations
82
+ $env:GH_CONFIG_DIR = "$HOME/.config/gh-public"
83
+ gh auth login # Login with personal account (one-time setup)
84
+ gh repo clone personaluser/repo
85
+
86
+ # EMU account operations (default)
87
+ Remove-Item Env:\GH_CONFIG_DIR
88
+ gh auth status # Back to EMU account
89
+ ```
90
+
91
+ **Setup (one-time):**
92
+ ```bash
93
+ # Create isolated config for personal account
94
+ mkdir ~/.config/gh-public
95
+ $env:GH_CONFIG_DIR = "$HOME/.config/gh-public"
96
+ gh auth login --web --git-protocol https
97
+ ```
98
+
99
+ ### Shell Aliases for Quick Switching
100
+
101
+ Add to your shell profile for convenience:
102
+
103
+ ```powershell
104
+ # PowerShell profile
105
+ function ghp { $env:GH_CONFIG_DIR = "$HOME/.config/gh-public"; gh @args; Remove-Item Env:\GH_CONFIG_DIR }
106
+ function ghe { gh @args } # Default EMU
107
+
108
+ # Usage:
109
+ # ghp repo clone personaluser/repo # Uses personal account
110
+ # ghe issue list # Uses EMU account
111
+ ```
112
+
113
+ ```bash
114
+ # Bash/Zsh profile
115
+ alias ghp='GH_CONFIG_DIR=~/.config/gh-public gh'
116
+ alias ghe='gh'
117
+
118
+ # Usage:
119
+ # ghp repo clone personaluser/repo
120
+ # ghe issue list
121
+ ```
122
+
123
+ ## Examples
124
+
125
+ ### ✓ Correct: Agent pushes blog post to personal GitHub Pages
126
+
127
+ ```powershell
128
+ # Agent needs to push to personaluser.github.io (personal repo)
129
+ # Default gh auth is corpalias_enterprise (EMU)
130
+
131
+ $token = gh auth token --user personaluser
132
+ git remote set-url origin https://personaluser:$token@github.com/personaluser/personaluser.github.io.git
133
+ git push origin main
134
+
135
+ # Clean up — don't leave token in remote URL
136
+ git remote set-url origin https://github.com/personaluser/personaluser.github.io.git
137
+ ```
138
+
139
+ ### ✓ Correct: Agent creates a PR from personal fork to upstream
140
+
141
+ ```powershell
142
+ # Fork: personaluser/squad, Upstream: bradygaster/squad
143
+ # Agent is on branch contrib/fix-docs in the fork clone
144
+
145
+ git push origin contrib/fix-docs # Pushes to fork (may need token auth)
146
+
147
+ # Create PR targeting upstream
148
+ gh pr create --repo bradygaster/squad --head personaluser:contrib/fix-docs `
149
+ --title "docs: fix installation guide" `
150
+ --body "Fixes #123"
151
+ ```
152
+
153
+ ### ✗ Incorrect: Blindly pushing with wrong account
154
+
155
+ ```bash
156
+ # BAD: Agent assumes default gh auth works for personal repos
157
+ git push origin main
158
+ # ERROR: Permission denied — EMU account has no access to personal repo
159
+
160
+ # BAD: Hardcoding tokens in scripts
161
+ git push https://personaluser:ghp_xxxxxxxxxxxx@github.com/personaluser/repo.git main
162
+ # SECURITY RISK: Token exposed in command history and process list
163
+ ```
164
+
165
+ ### ✓ Correct: Check before you push
166
+
167
+ ```bash
168
+ # Always verify which account has access before operations
169
+ gh auth status
170
+ # If wrong account, use token extraction:
171
+ $token = gh auth token --user personaluser
172
+ git push https://personaluser:$token@github.com/personaluser/repo.git main
173
+ ```
174
+
175
+ ## Anti-Patterns
176
+
177
+ - ❌ **Hardcoding tokens** in scripts, environment variables, or committed files. Use `gh auth token --user` to extract at runtime.
178
+ - ❌ **Assuming the default `gh` auth works** for all repos. EMU accounts can't access personal repos and vice versa.
179
+ - ❌ **Switching `gh auth login`** globally mid-session. This changes the default for ALL processes and can break parallel agents.
180
+ - ❌ **Storing personal tokens in `.env`** or `.squad/` files. These get committed by Scribe. Use `gh`'s credential store.
181
+ - ❌ **Ignoring token cleanup** after inline HTTPS pushes. Always reset the remote URL to avoid persisting tokens.
182
+ - ❌ **Using `gh auth switch`** in multi-agent sessions. One agent switching affects all others sharing the shell.
183
+ - ❌ **Mixing EMU and personal operations** in the same git clone. Use separate clones or explicit remote URLs per operation.