@cleocode/cleo 2026.3.4 → 2026.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/cleo",
-  "version": "2026.3.4",
+  "version": "2026.3.7",
   "description": "CLEO V2 - TypeScript task management CLI for AI coding agents",
   "mcpName": "io.github.kryptobaseddev/cleo-mcp-server",
   "type": "module",

package/packages/ct-skills/index.js

@@ -6,7 +6,7 @@ const fs = require('fs');
 const LIBRARY_ROOT = __dirname;
 const SKILLS_ROOT = path.join(LIBRARY_ROOT, 'skills');
 const PROFILES_ROOT = path.join(LIBRARY_ROOT, 'profiles');
-const PROTOCOLS_ROOT = path.join(LIBRARY_ROOT, 'protocols');
+const PROTOCOLS_ROOT = path.join(LIBRARY_ROOT, '..', '..', 'src', 'protocols');
 const SHARED_ROOT = path.join(SKILLS_ROOT, '_shared');
 
 // --- Package metadata ---

package/packages/ct-skills/package.json

@@ -6,9 +6,7 @@
   "types": "index.d.ts",
   "files": [
     "skills",
-    "protocols",
     "profiles",
-    "_shared",
     "*.json",
     "*.js",
     "*.d.ts"

package/packages/ct-skills/profiles/core.json

@@ -1,6 +1,6 @@
 {
   "name": "core",
-  "description": "Minimum viable CLEO skill set",
+  "description": "Orchestration and pipeline awareness",
   "extends": "minimal",
   "skills": ["ct-orchestrator"],
   "includeProtocols": ["agent-protocol"]

package/packages/ct-skills/profiles/full.json

@@ -1,11 +1,10 @@
 {
   "name": "full",
-  "description": "All CT-SKILLS",
+  "description": "All skills including execution, documentation, quality, and meta",
   "extends": "recommended",
   "skills": [
-    "ct-dev-workflow", "ct-test-writer-bats", "ct-library-implementer-bash",
-    "ct-documentor", "ct-docs-lookup", "ct-docs-write", "ct-docs-review",
-    "ct-skill-creator", "ct-skill-lookup", "ct-contribution", "ct-gitbook"
+    "ct-dev-workflow", "ct-documentor", "ct-docs-lookup", "ct-docs-write", "ct-docs-review",
+    "ct-contribution", "ct-grade", "ct-skill-creator"
   ],
-  "includeProtocols": ["contribution", "release", "testing", "artifact-publish", "provenance"]
+  "includeProtocols": ["implementation", "contribution", "release", "testing", "artifact-publish", "provenance"]
 }

package/packages/ct-skills/profiles/minimal.json

@@ -1,7 +1,7 @@
 {
   "name": "minimal",
-  "description": "Bare minimum — just the default fallback skill",
-  "skills": ["ct-task-executor"],
+  "description": "Solo task execution with core CLEO protocol — no orchestration needed",
+  "skills": ["ct-cleo", "ct-task-executor"],
   "includeShared": true,
-  "includeProtocols": ["implementation"]
+  "includeProtocols": []
 }

package/packages/ct-skills/profiles/recommended.json

@@ -1,7 +1,7 @@
 {
   "name": "recommended",
-  "description": "Core + RCSD pipeline skills",
+  "description": "Full RCASD pipeline skills for epic-driven development",
   "extends": "core",
   "skills": ["ct-epic-architect", "ct-research-agent", "ct-spec-writer", "ct-validator"],
-  "includeProtocols": ["research", "specification", "decomposition", "consensus", "validation"]
+  "includeProtocols": ["research", "consensus", "specification", "decomposition", "validation", "adr"]
 }

package/packages/ct-skills/provider-skills-map.json

@@ -0,0 +1,97 @@
+{
+  "$schema": "https://lafs.dev/schemas/v1/provider-skills-map.schema.json",
+  "version": "1.0.0",
+  "description": "Provider skill path discovery and precedence rules for CLEO skill deployment",
+  "providers": {
+    "claude-code": {
+      "globalSkills": "$HOME/.claude/skills",
+      "projectSkills": ".claude/skills",
+      "agentsGlobal": null,
+      "agentsProject": null,
+      "readsFromDotAgents": false,
+      "precedence": "vendor-only",
+      "symlinkSupported": true,
+      "notes": "Created Agent Skills standard but uses vendor path exclusively"
+    },
+    "codex-cli": {
+      "globalSkills": "$HOME/.agents/skills",
+      "projectSkills": ".agents/skills",
+      "agentsGlobal": "$HOME/.agents/skills",
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": true,
+      "precedence": "agents-canonical",
+      "symlinkSupported": true,
+      "notes": "Uses .agents/skills as canonical location"
+    },
+    "gemini-cli": {
+      "globalSkills": "$HOME/.gemini/skills",
+      "projectSkills": ".gemini/skills",
+      "agentsGlobal": "$HOME/.agents/skills",
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": true,
+      "precedence": "agents-first",
+      "symlinkSupported": true,
+      "notes": ".agents/skills takes precedence over .gemini/skills within same tier"
+    },
+    "cursor": {
+      "globalSkills": "$HOME/.cursor/skills",
+      "projectSkills": ".cursor/skills",
+      "agentsGlobal": null,
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": "project-only",
+      "precedence": "vendor-global-agents-project",
+      "symlinkSupported": true,
+      "notes": "Global uses vendor path; project supports .agents/skills"
+    },
+    "github-copilot": {
+      "globalSkills": "$HOME/.copilot/skills",
+      "projectSkills": ".github/skills",
+      "agentsGlobal": "$HOME/.agents/skills",
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": true,
+      "precedence": "agents-supported",
+      "symlinkSupported": true,
+      "notes": "Supports both vendor and .agents paths at all levels"
+    },
+    "windsurf": {
+      "globalSkills": "$HOME/.codeium/windsurf/skills",
+      "projectSkills": ".windsurf/skills",
+      "agentsGlobal": null,
+      "agentsProject": null,
+      "readsFromDotAgents": false,
+      "precedence": "vendor-only",
+      "symlinkSupported": false,
+      "notes": "Vendor-specific paths only, no .agents support"
+    },
+    "opencode": {
+      "globalSkills": "$HOME/.config/opencode/skills",
+      "projectSkills": ".opencode/skills",
+      "agentsGlobal": "$HOME/.agents/skills",
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": true,
+      "precedence": "agents-supported",
+      "symlinkSupported": true,
+      "notes": "User confirms .agents/ support; verify via opencode docs"
+    },
+    "kimi-coding": {
+      "globalSkills": "$HOME/.kimi/skills",
+      "projectSkills": ".kimi/skills",
+      "agentsGlobal": null,
+      "agentsProject": null,
+      "readsFromDotAgents": false,
+      "precedence": "vendor-only",
+      "symlinkSupported": false,
+      "notes": "Model-based provider; skill path support uncertain"
+    },
+    "antigravity": {
+      "globalSkills": "$HOME/.antigravity/skills",
+      "projectSkills": ".agent/skills",
+      "agentsGlobal": null,
+      "agentsProject": ".agents/skills",
+      "readsFromDotAgents": "project-only",
+      "precedence": "vendor-global-agents-project",
+      "symlinkSupported": true,
+      "notes": "Project-level .agents/skills confirmed in Google codelabs"
+    }
+  }
+}

package/packages/ct-skills/skills/_shared/skill-chaining-patterns.md

@@ -16,7 +16,7 @@ This reference defines patterns for multi-level skill invocation and context pro
 
 ## Pattern 1: Single-Level Spawning
 
-The orchestrator delegates work to a subagent via Task tool with skill injection.
+The orchestrator delegates work to a subagent via `orchestrate.spawn` with skill injection.
 
 ### Flow
 
@@ -25,7 +25,7 @@ The orchestrator delegates work to a subagent via Task tool with skill injection
 │   ORCHESTRATOR  │
 │  (ct-orchestrator)
 └────────┬────────┘
-         │ Task tool + skill template
+         │ orchestrate.spawn → provider adapter
          ▼
 ┌─────────────────┐
 │    SUBAGENT     │
@@ -35,18 +35,15 @@ The orchestrator delegates work to a subagent via Task tool with skill injection
 
 ### Implementation
 
-```bash
-# Orchestrator prepares context
-source lib/token-inject.sh
-export TI_TASK_ID="T1234"
-export TI_DATE="$(date +%Y-%m-%d)"
-export TI_TOPIC_SLUG="auth-research"
-ti_set_defaults
-
-# Load skill template with tokens
-template=$(ti_load_template "skills/ct-research-agent/SKILL.md")
-
-# Spawn via Task tool (includes subagent protocol block)
+```
+# 1. Generate fully-resolved spawn prompt via MCP
+cleo_mutate({ domain: "orchestrate", operation: "spawn", params: { taskId: "T1234" }})
+
+# 2. Provider adapter executes the prompt using its native mechanism
+#    - Claude Code: Task tool with cleo-subagent type
+#    - OpenCode: config-driven agent spawn
+#    - Codex: SDK agent creation
+#    - Others: file-based prompt handoff
 ```
 
 ### Context Propagation
@@ -127,13 +124,13 @@ A subagent can itself become an orchestrator, spawning further subagents for com
 │    ORCHESTRATOR     │  Level 0: Main workflow
 │   (ct-orchestrator) │
 └─────────┬───────────┘
-          │ Task tool
+          │ orchestrate.spawn
           ▼
 ┌─────────────────────┐
 │ SUB-ORCHESTRATOR    │  Level 1: Epic decomposition
 │ (ct-epic-architect) │
 └─────────┬───────────┘
-          │ Task tool
+          │ orchestrate.spawn
           ▼
 ┌─────────────────────┐
 │    WORKER AGENT     │  Level 2: Task execution
@@ -184,13 +181,13 @@ Detailed findings go to output files, not manifest or response:
 
 ### Rule 4: Token Injection (SHOULD)
 
-Use `lib/token-inject.sh` for dynamic token replacement:
+All tokens are resolved before prompt injection via `orchestrate.spawn`:
 
-```bash
+```
 # Required tokens for all subagents
-TI_TASK_ID    # Current task identifier
-TI_DATE       # Execution date (YYYY-MM-DD)
-TI_TOPIC_SLUG # URL-safe topic name
+TASK_ID       # Current task identifier
+DATE          # Execution date (YYYY-MM-DD)
+TOPIC_SLUG    # URL-safe topic name
 ```
 
 ---
@@ -211,14 +208,14 @@ TI_TOPIC_SLUG # URL-safe topic name
 
 Before spawning subagent:
 - [ ] Identify appropriate skill for task type
-- [ ] Prepare token context (TI_TASK_ID, TI_DATE, TI_TOPIC_SLUG)
-- [ ] Load skill template with `ti_load_template()`
-- [ ] Include subagent protocol block in prompt
+- [ ] Prepare token context (TASK_ID, DATE, TOPIC_SLUG)
+- [ ] Use `orchestrate.spawn` to generate fully-resolved prompt
+- [ ] Verify token resolution is complete (`tokenResolution.fullyResolved`)
 
 Before chaining to another skill:
 - [ ] Determine if skill shares context (same agent) or needs delegation
 - [ ] For same-agent: Use `Skill(skill="name")` or `/skill-name`
-- [ ] For new agent: Use Task tool with full protocol injection
+- [ ] For new agent: Use `orchestrate.spawn` with full protocol injection
 
 Before completion:
 - [ ] Verify manifest entry appended
@@ -231,7 +228,7 @@ Before completion:
 
 | Skill | Demonstrates |
 |-------|--------------|
-| `ct-orchestrator` | Single-level spawning via Task tool |
+| `ct-orchestrator` | Single-level spawning via orchestrate.spawn |
 | `ct-documentor` | Skill chaining (lookup → write → review) |
 | `ct-epic-architect` | Potential multi-level orchestration |
 

package/packages/ct-skills/skills/_shared/testing-framework-config.md

@@ -71,15 +71,15 @@ CLEO supports 16 testing frameworks. Configure your project's testing setup in `
 
 ## Supported Frameworks
 
-| Framework | Extension | Ecosystem |
-|-----------|-----------|-----------|
-| bats | .bats | Bash |
-| jest, vitest, playwright, cypress, mocha, ava, uvu, tap | .test.js/.ts | Node.js |
-| node:test, deno, bun | .test.ts | Runtime built-ins |
-| pytest | _test.py | Python |
-| go | _test.go | Go |
-| cargo | .rs | Rust |
-| custom | varies | Any |
+| Framework | Extension | Ecosystem | Notes |
+|-----------|-----------|-----------|-------|
+| vitest | .test.ts | Node.js | **Default for CLEO projects** |
+| jest, playwright, cypress, mocha, ava, uvu, tap | .test.js/.ts | Node.js | |
+| node:test, deno, bun | .test.ts | Runtime built-ins | |
+| pytest | _test.py | Python | |
+| go | _test.go | Go | |
+| cargo | .rs | Rust | |
+| custom | varies | Any | |
 
 ## Validation Gates
 

package/packages/ct-skills/skills/ct-cleo/SKILL.md

@@ -40,6 +40,8 @@ MCP is the **primary** entry point. Use `cleo_query` for reads and `cleo_mutate`
 | `system` | `context` | Context window usage |
 | `skills` | `list` | Available skills |
 | `skills` | `show` | Skill details (`params: { name }`) |
+| `pipeline` | `stage.status` | Pipeline stage for epic (`params: { epicId }`) |
+| `pipeline` | `stage.validate` | Validate gate before advancing (`params: { epicId, stage }`) |
 
 ### Key Write Operations (`cleo_mutate`)
 
@@ -54,6 +56,8 @@ MCP is the **primary** entry point. Use `cleo_query` for reads and `cleo_mutate`
 | `tasks` | `start` | Start working on a task (`params: { taskId }`) |
 | `research` | `link` | Link research to task (`params: { taskId, entryId }`) |
 | `orchestrate` | `spawn` | Generate spawn prompt for subagent (`params: { taskId }`) |
+| `pipeline` | `stage.record` | Record pipeline stage progress (`params: { epicId, stage, status }`) |
+| `pipeline` | `stage.gate.pass` | Advance pipeline to next stage (`params: { epicId, stage }`) |
 
 ## CLI Fallback
 
@@ -180,6 +184,23 @@ After EVERY command:
 
 **Lifecycle**: See CLEO-INJECTION.md standard tier for full RCASD-IVTR+C pipeline details, or `references/rcsd-lifecycle.md` for gate enforcement and subagent architecture.
 
+## Pipeline Awareness
+
+Epics follow the RCASD-IVTR+C lifecycle managed through pipeline stages. Use `pipeline.stage.status` to check where an epic is in its lifecycle:
+
+| Stage | Purpose |
+|-------|---------|
+| `research` | Information gathering and analysis |
+| `consensus` | Validate claims and decisions |
+| `architecture_decision` | ADR and specification |
+| `specification` | Formal requirements |
+| `decomposition` | Task breakdown |
+| `implementation` | Build functionality |
+| `validation` | Verify against criteria |
+| `testing` | Test coverage |
+| `release` | Version and publish |
+| `contribution` | Multi-agent consensus tracking |
+
 ## Time Estimates Prohibited
 
 - **MUST NOT** estimate hours, days, weeks, or temporal duration
@@ -192,5 +213,4 @@ For detailed guidance on specific topics, see:
 
 - **Session Protocol**: `references/session-protocol.md`
 - **RCSD Lifecycle**: `references/rcsd-lifecycle.md`
-- **Orchestrator Constraints**: `references/orchestrator-constraints.md`
 - **Anti-Patterns**: `references/anti-patterns.md`

package/packages/ct-skills/skills/ct-dev-workflow/SKILL.md

@@ -20,7 +20,7 @@ license: MIT
 
 # Development Workflow Context Injection
 
-**Protocol**: @protocols/contribution.md
+**Protocol**: @src/protocols/contribution.md
 **Type**: Context Injection (cleo-subagent)
 **Version**: 3.0.0
 

package/packages/ct-skills/skills/ct-documentor/SKILL.md

@@ -23,7 +23,7 @@ license: MIT
 
 # Documentation Specialist Context Injection
 
-**Protocol**: @protocols/implementation.md
+**Protocol**: @src/protocols/implementation.md
 **Type**: Context Injection (cleo-subagent)
 **Version**: 3.0.0
 

package/packages/ct-skills/skills/ct-epic-architect/SKILL.md

@@ -20,7 +20,7 @@ license: MIT
 
 # Epic Architect Context Injection
 
-**Protocol**: @protocols/decomposition.md
+**Protocol**: @src/protocols/decomposition.md
 **Type**: Context Injection (cleo-subagent)
 **Version**: 3.0.0