@champpaba/claude-agent-kit 2.1.2 → 2.1.4

package/.claude/CLAUDE.md

@@ -408,6 +408,10 @@ Prompt "Update PROJECT_STATUS.yml?" when detecting these patterns:
 | Infrastructure change (deploy, tunnel, DB migration) | Update `infrastructure` |
 | User discusses priority shift | Update `next_priorities` |
 | `/csetup {change-id}` started | Update `current_focus.active_change` |
+| **Future features/ideas:** "อยากให้มี...", "want to add...", "later we should...", "in the future..." | Add to `future_ideas` |
+| **Technical debt:** "ต้องแก้...", "should refactor...", "tech debt...", "needs cleanup..." | Add to `technical_debt` |
+| **Decisions made:** "ตัดสินใจว่า...", "we decided...", "going with...", "chose X over Y" | Add to `decisions` |
+| **Learnings/notes:** "พบว่า...", "discovered...", "note:...", "important:..." | Add to `notes` |
 
 ### Update Protocol
 
@@ -423,7 +427,7 @@ Prompt "Update PROJECT_STATUS.yml?" when detecting these patterns:
 Claude: *reads PROJECT_STATUS.yml*
 Claude: "I see auth-system is active, tunnel running but waiting for domain."
 
-# During work
+# During work - blocker resolved
 User: "Domain is now configured"
 Claude: "Update PROJECT_STATUS.yml?
          - Remove 'domain' from blockers
@@ -431,6 +435,24 @@ Claude: "Update PROJECT_STATUS.yml?
 
 # After archiving
 Claude: "Auth-system archived. Add to completed_changes?"
+
+# Casual conversation - future idea
+User: "อยากให้มี dark mode ด้วยนะ ไว้ทำทีหลัง"
+Claude: "Add to PROJECT_STATUS.yml future_ideas?
+         - idea: Dark mode support
+         - context: User requested, low priority"
+
+# Discussion - technical debt
+User: "ตรงนี้ code มันซ้ำๆ ต้องแก้ทีหลัง"
+Claude: "Add to PROJECT_STATUS.yml technical_debt?
+         - item: Refactor duplicated code in auth middleware
+         - priority: medium"
+
+# Decision made
+User: "ตัดสินใจใช้ Drizzle แทน Prisma แล้ว เพราะ type-safe กว่า"
+Claude: "Add to PROJECT_STATUS.yml decisions?
+         - decision: Use Drizzle over Prisma
+         - reason: Better type safety"
 ```
 
 ---

package/.claude/agents/_shared/pre-work-checklist.md

@@ -1,6 +1,6 @@
 # Pre-Work Checklist (Shared by All Agents)
 
-> **Version:** 2.1.2 (Instruction-based Library Detection)
+> **Version:** 2.1.3 (Design Spec Injection)
 > **Purpose:** Single source of truth for pre-work validation
 
 ---
@@ -29,14 +29,22 @@ Complete these steps before implementation to ensure alignment with project stan
    - WHY: The team chose these libraries for specific reasons (compatibility, features, constraints)
    - Custom implementations waste effort and may miss edge cases the library handles
 
+5. **Implement according to Design Spec (not library defaults)**
+   - If design.md specifies configurations → Use those values (not library defaults)
+   - If design.md specifies custom endpoints → Implement those endpoints
+   - WHY: Design decisions were made for specific project requirements
+
 **Example:**
 ```
 tasks.md says: "Install better-auth and dependencies"
-→ Use better-auth library
-→ Follow better-auth documentation patterns
+design.md says: "JWT 15min + Redis refresh token 30d"
+
+→ Use better-auth library (from tasks.md)
+→ Configure JWT with 15min expiry (from design.md)
+→ Configure Redis refresh with 30d (from design.md)
+→ Implement /api/auth/refresh endpoint (from design.md)
 
-WHY not custom? better-auth handles OAuth flows, session management, 
-and security edge cases that custom code would need to re-implement.
+WHY not defaults? Design spec has project-specific security requirements.
 ```
 
 ---
@@ -62,6 +70,13 @@ Library Requirements: (Step 0)
 - [ ] Scanned design.md for design decisions
 - Required libraries: {list from tasks.md/design.md}
 
+Design Spec Implementation: (Step 5)
+- [ ] Read design.md specifications
+- [ ] Identified custom configurations (not library defaults)
+- Design requirements:
+  - {requirement 1 from design.md}
+  - {requirement 2 from design.md}
+
 Project Context:
 - Project: {name}
 - Stack: {tech-stack}
@@ -90,6 +105,7 @@ Ready to Implement:
 
 Pre-work validation prevents:
 - **Wrong library choices** - Using custom code when a library was already chosen by the team
+- **Library defaults instead of spec** - Using default configs when design.md specifies custom values
 - Misaligned implementations (wrong patterns, wrong style)
 - Duplicate components (not searching existing code first)
 - Wrong package manager usage (CI/CD breaks)

package/.claude/commands/cdev.md

@@ -105,6 +105,9 @@ ${changeContext.proposal}
 ## Tasks
 ${changeContext.tasks}
 
+## Design Decisions (from design.md)
+${changeContext.design || '(no design.md found)'}
+
 ${phase.instructions}
 
 ---
@@ -118,32 +121,43 @@ ${phase.instructions}
    - "Configure X with Y adapter" → Use X with adapter Y
    - Backtick packages like \`better-auth\` → Required dependency
 
-2. **Review design.md** (in change context) for:
+2. **Review "Design Decisions" section above** for:
    - "### D1: Use X Library" → Decision to use X
    - "**Decision:** Use X" → Chosen library
-   - Alternatives table shows why this library was chosen
+   - Specific configurations (e.g., "JWT 15min", "Redis refresh token 30d")
+   - Architecture decisions (e.g., "Hybrid Session Strategy")
 
 3. **Use the specified libraries**
    - WHY: The team chose these for compatibility, features, or constraints
    - Custom implementations duplicate effort and miss edge cases the library handles
-   - Follow library documentation patterns for consistency
+
+4. **Implement according to Design Spec (not library defaults)**
+   - If design.md specifies "JWT 15min + Redis refresh 30d" → Configure library with these values
+   - If design.md specifies custom endpoints → Implement those endpoints
+   - Library defaults are starting points, not final implementation
+   - WHY: Design decisions were made for specific project requirements
 
 **Example:**
 \`\`\`
-tasks.md: "Install better-auth and dependencies"
-→ Use better-auth library
-→ Follow better-auth docs for setup
+design.md says:
+  "Hybrid Session Strategy: JWT 15min + Redis refresh 30d"
+
+→ Use better-auth library (from tasks.md)
+→ Configure JWT plugin with 15min expiry
+→ Configure refresh token with 30d in Redis
+→ Implement /api/auth/refresh endpoint
 
-WHY not custom? better-auth handles OAuth, sessions, security
-edge cases that custom code would need to re-implement.
+WHY not defaults? Design spec has project-specific security requirements
+that differ from library defaults.
 \`\`\`
 
-**Report required libraries in your validation:**
+**Report in validation:**
 \`\`\`
-Required Libraries Found:
-- better-auth (tasks.md line 6)
-- @better-auth/drizzle (tasks.md line 6)
-- ioredis (design.md D2)
+Libraries: better-auth, @better-auth/drizzle, ioredis
+Design Spec Implementation:
+- [x] JWT access token: 15min (design.md D1)
+- [x] Redis refresh token: 30d (design.md D2)
+- [x] /api/auth/refresh endpoint (design.md D3)
 \`\`\`
 
 ---

package/.claude/templates/PROJECT_STATUS.template.yml

@@ -84,6 +84,51 @@ next_priorities: []
   # - id: user-profile
   #   reason: "Dependency for RIASEC save feature"
 
+# -------------------------------------------------------------------
+# FUTURE IDEAS
+# Features/enhancements discussed but not yet planned
+# Captured from: "อยากให้มี...", "want to add...", "later...", "in the future..."
+# -------------------------------------------------------------------
+future_ideas: []
+  # Example:
+  # - idea: "Dark mode support"
+  #   context: "User requested during review"
+  #   date: "2025-12-01"
+  #
+  # - idea: "Export to PDF"
+  #   context: "Nice to have for reports"
+  #   date: "2025-11-28"
+
+# -------------------------------------------------------------------
+# TECHNICAL DEBT
+# Known issues to fix later
+# Captured from: "ต้องแก้...", "should refactor...", "tech debt...", "needs cleanup..."
+# -------------------------------------------------------------------
+technical_debt: []
+  # Example:
+  # - item: "Refactor auth middleware"
+  #   reason: "Duplicated logic in 3 places"
+  #   priority: medium  # low, medium, high
+  #
+  # - item: "Add proper error boundaries"
+  #   reason: "Currently crashes on API errors"
+  #   priority: high
+
+# -------------------------------------------------------------------
+# DECISIONS
+# Important technical/product decisions made
+# Captured from: "ตัดสินใจว่า...", "we decided...", "going with...", "chose X over Y"
+# -------------------------------------------------------------------
+decisions: []
+  # Example:
+  # - decision: "Use better-auth over NextAuth"
+  #   reason: "Better TypeScript support, simpler API"
+  #   date: "2025-12-01"
+  #
+  # - decision: "PostgreSQL over MongoDB"
+  #   reason: "Relational data, ACID compliance needed"
+  #   date: "2025-11-30"
+
 # -------------------------------------------------------------------
 # NOTES
 # Free-form context that doesn't fit above

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@champpaba/claude-agent-kit",
-  "version": "2.1.2",
+  "version": "2.1.4",
   "description": "Universal multi-agent template for Claude Code - AI-assisted development with specialized agents",
   "main": "bin/cli.js",
   "bin": {