@cubis/foundry 0.3.63 → 0.3.64

package/src/cli/core.ts

@@ -158,7 +158,8 @@ const WORKFLOW_PROFILES = {
     },
     detectorPaths: [
       ".github/agents",
-      ".github/skills",
+      ".github/prompts",
+      ".vscode/mcp.json",
       ".github/copilot-instructions.md",
       ".github/instructions",
       "AGENTS.md",
@@ -3470,12 +3471,12 @@ function buildCodexWorkflowWrapperSkillMarkdown(wrapperSkillId, workflow) {
     `  workflow-command: ${yamlSingleQuoted(workflow.command)}`,
     "---",
     "",
-    `# Workflow Wrapper: ${workflow.command}`,
+    `# Workflow Compatibility Alias: ${workflow.command}`,
     "",
-    `Use this skill as a callable replacement for \`${workflow.command}\` workflow instructions in Codex.`,
+    `Compatibility alias for \`${workflow.command}\` in Codex. Prefer the direct workflow route first and use this wrapper only when older installs or prompts mention $${wrapperSkillId}.`,
     "",
     "## Invocation Contract",
-    "1. Match the current task against this workflow intent before execution.",
+    "1. Resolve the workflow route first; do not use this alias as a substitute for skill discovery.",
     "2. Follow the sequence and guardrails in the source instructions below.",
     "3. Produce actionable output and call out assumptions before edits.",
     "",
@@ -3505,14 +3506,15 @@ function buildCodexAgentWrapperSkillMarkdown(wrapperSkillId, agent) {
     `  agent-id: ${yamlSingleQuoted(agent.id)}`,
     "---",
     "",
-    `# Agent Wrapper: @${agent.id}`,
+    `# Agent Compatibility Alias: @${agent.id}`,
     "",
-    "Use this skill as a callable replacement for custom @agent files in Codex.",
+    `Compatibility alias for @${agent.id} in Codex. Prefer the direct @agent route first and use this wrapper only when older installs or prompts mention $${wrapperSkillId}.`,
     "",
     "## Invocation Contract",
-    "1. Adopt the role and constraints defined in the source agent content.",
-    "2. Apply domain heuristics and escalation rules before coding.",
-    "3. Ask clarifying questions when requirements are ambiguous.",
+    "1. Resolve the agent route first; do not use this alias as a substitute for skill discovery.",
+    "2. Adopt the role and constraints defined in the source agent content.",
+    "3. Apply domain heuristics and escalation rules before coding.",
+    "4. Ask clarifying questions when requirements are ambiguous.",
     "",
     `- Source agent name: ${agent.name}`,
     `- Source agent description: ${agent.description}`,
@@ -3714,13 +3716,35 @@ function buildManagedWorkflowBlock(platformId, workflows) {
     `<!-- cbx:workflows:auto:start platform=${platformId} version=1 -->`,
   );
   lines.push("## CBX Workflow Routing (auto-managed)");
+  lines.push("");
+  lines.push("<!-- cbx:managed:skill-routing start -->");
+  lines.push("Classify intent before any MCP call.");
+  lines.push("- TIER 1 DIRECT: `skill_get <exact-skill-id>` when domain and skill are obvious.");
+  lines.push("- TIER 2 TARGETED SEARCH: one `skill_search <1-3 word noun>` max, then `skill_validate` -> `skill_get`.");
+  lines.push("- TIER 3 SKIP: no MCP call for conversational, same-session, or native-tool-sufficient work.");
+  lines.push("- Never pre-load skills or agents speculatively.");
+  lines.push("- Keep one primary agent and one primary skill by default.");
+  lines.push("- Add supporting skills only when the active task explicitly crosses domains.");
+  lines.push("- Direct skill-package creation or repair work to `skill-authoring` instead of starting with `skill_search`.");
+  lines.push("# Full reference: foundry-detail.md#tiered-routing");
+  lines.push("<!-- cbx:managed:skill-routing end -->");
+  lines.push("");
+  lines.push("<!-- cbx:managed:long-plan-execution start -->");
+  lines.push("When `PLAN_HANDOFF` is present, continue task 1→N without confirmation pauses.");
+  lines.push("- Pre-load deduped `skill_hint` values once, then run `skill_budget_report`.");
+  lines.push("- Execute in order, respecting `depends_on` and `stop_if_failed`.");
+  lines.push("- Emit `CHECKPOINT` every ~3 tasks in runs of 5+.");
+  lines.push("- Finish with `EXECUTION_SUMMARY {completed, skipped, stopped_at, artifacts, skills_used, dropped}`.");
+  lines.push("- Stop only for blocking artifact failure, unplanned destructive action, missing required skill after one search, or explicit user halt.");
+  lines.push("- Codex: compact before context exhaustion. Antigravity: native long context. Copilot: write `.copilot-tracking/handoff.md`.");
+  lines.push("# Full reference: foundry-detail.md#plan-handoff-and-execution");
+  lines.push("<!-- cbx:managed:long-plan-execution end -->");
+  lines.push("");
   if (platformId === "codex") {
-    lines.push("Use Codex callable wrappers:");
-    lines.push("- Workflows: $workflow-<name>");
-    lines.push("- Agents: $agent-<name>");
-    lines.push(
-      "- Use raw $workflow-* / $agent-* tokens (no backticks) so Codex can render icons.",
-    );
+    lines.push("Prefer direct route identifiers first:");
+    lines.push("- Workflows: `/workflow-name`");
+    lines.push("- Agents: `@agent-name`");
+    lines.push("- Compatibility aliases remain available: `$workflow-*`, `$agent-*`");
     lines.push("");
 
     if (workflows.length === 0) {
@@ -3729,24 +3753,42 @@ function buildManagedWorkflowBlock(platformId, workflows) {
       for (const workflow of workflows) {
         const triggerPreview = workflow.triggers.slice(0, 2).join(", ");
         const hint = triggerPreview ? ` (${triggerPreview})` : "";
-        lines.push(
-          `- ${workflow.command} -> $${CODEX_WORKFLOW_SKILL_PREFIX}${workflow.id}${hint}`,
-        );
+        lines.push(`- ${workflow.command} -> primary route (${workflow.id})${hint}`);
       }
     }
 
     lines.push("");
     lines.push("Selection policy:");
-    lines.push("1. If user names a $workflow-*, use it directly.");
+    lines.push("1. If the user names `/workflow` or `@agent`, use that route directly.");
     lines.push("2. Else map intent to one primary workflow.");
-    lines.push(
-      "3. Use $agent-* wrappers only when role specialization is needed.",
-    );
+    lines.push("3. Treat `$workflow-*` / `$agent-*` as compatibility aliases only.");
     lines.push("");
     lines.push("<!-- cbx:workflows:auto:end -->");
     return lines.join("\n");
   }
 
+  if (platformId === "copilot") {
+    lines.push("Prefer native Copilot route surfaces first:");
+    lines.push("- Workflow prompts: `.github/prompts/workflow-*.prompt.md`");
+    lines.push("- Workflow files: `.github/copilot/workflows/*.md`");
+    lines.push("- Agents: `@agent-name`");
+    lines.push("- Workspace-first MCP: `.vscode/mcp.json`");
+    lines.push(
+      "- Do not use `$workflow-*` / `$agent-*` as the primary route surface here; those are Codex compatibility aliases.",
+    );
+    lines.push("- `.github/skills` is installed by default, but route through workflows and agents before loading skills.");
+    lines.push("");
+  } else if (platformId === "antigravity") {
+    lines.push("Prefer native Antigravity route surfaces first:");
+    lines.push("- Commands: `.gemini/commands/*.toml`");
+    lines.push("- Workflow files: `.agent/workflows/*.md`");
+    lines.push("- Agents: `@agent-name`");
+    lines.push(
+      "- Do not use `$workflow-*` / `$agent-*` as the primary route surface here; those are Codex compatibility aliases.",
+    );
+    lines.push("");
+  }
+
   lines.push(
     "Use the following workflows proactively when task intent matches:",
   );
@@ -3769,11 +3811,29 @@ function buildManagedWorkflowBlock(platformId, workflows) {
 
   lines.push("");
   lines.push("Selection policy:");
-  lines.push("1. Match explicit slash command first.");
-  lines.push("2. Else match user intent to workflow description and triggers.");
-  lines.push(
-    "3. Prefer one primary workflow; reference others only when needed.",
-  );
+  if (platformId === "copilot") {
+    lines.push("1. Match explicit workflow prompt, workflow, or `@agent` first.");
+    lines.push(
+      "2. Else match user intent to one primary workflow and reuse the matching prompt file when available.",
+    );
+    lines.push(
+      "3. Treat `$workflow-*` / `$agent-*` as Codex compatibility aliases, not as the primary route surface here.",
+    );
+  } else if (platformId === "antigravity") {
+    lines.push("1. Match explicit Gemini command, workflow, or `@agent` first.");
+    lines.push(
+      "2. Else match user intent to one primary workflow and use the matching command file when available.",
+    );
+    lines.push(
+      "3. Treat `$workflow-*` / `$agent-*` as Codex compatibility aliases, not as the primary route surface here.",
+    );
+  } else {
+    lines.push("1. Match explicit slash command first.");
+    lines.push("2. Else match user intent to workflow description and triggers.");
+    lines.push(
+      "3. Prefer one primary workflow; reference others only when needed.",
+    );
+  }
   lines.push("");
   lines.push("<!-- cbx:workflows:auto:end -->");
 
@@ -5074,7 +5134,15 @@ async function applyPostmanMcpForPlatform({
       scope: mcpScope,
       path: configPath,
       action: result.action,
-      warnings: [...warnings, ...result.warnings],
+      warnings: [
+        ...(mcpScope === "global"
+          ? [
+              "Copilot global MCP config is legacy compatibility. Prefer workspace .vscode/mcp.json as the primary supported path.",
+            ]
+          : []),
+        ...warnings,
+        ...result.warnings,
+      ],
     };
   }
 
@@ -6022,23 +6090,41 @@ async function sanitizeInstalledSkillsForPlatform({
   skillDirs,
   dryRun = false,
 }) {
-  if (dryRun || platform !== "copilot") return [];
-
   const sanitized = [];
 
   for (const skillDir of skillDirs) {
+    if (!(await pathExists(skillDir))) continue;
+    const entries = await readdir(skillDir, { withFileTypes: true });
+    const removedFiles = [];
+    for (const entry of entries) {
+      if (!entry.isFile()) continue;
+      if (!entry.name.endsWith(".md")) continue;
+      if (entry.name === "SKILL.md") continue;
+      const targetPath = path.join(skillDir, entry.name);
+      if (!dryRun) {
+        await rm(targetPath, { force: true });
+      }
+      removedFiles.push(entry.name);
+    }
+
     const skillFile = path.join(skillDir, "SKILL.md");
     if (!(await pathExists(skillFile))) continue;
 
-    const raw = await readFile(skillFile, "utf8");
-    const { changed, content, removedKeys } =
-      sanitizeSkillMarkdownForCopilot(raw);
-    if (!changed) continue;
+    let removedKeys = [];
+    if (!dryRun && platform === "copilot") {
+      const raw = await readFile(skillFile, "utf8");
+      const sanitizedSkill = sanitizeSkillMarkdownForCopilot(raw);
+      removedKeys = sanitizedSkill.removedKeys;
+      if (sanitizedSkill.changed) {
+        await writeFile(skillFile, sanitizedSkill.content, "utf8");
+      }
+    }
 
-    await writeFile(skillFile, content, "utf8");
+    if (removedKeys.length === 0 && removedFiles.length === 0) continue;
     sanitized.push({
       skillId: path.basename(skillDir),
       removedKeys,
+      removedFiles,
     });
   }
 
@@ -6221,9 +6307,13 @@ async function installBundleArtifacts({
     );
   }
 
+  const shouldInstallPlatformSkills = true;
+
   if (!dryRun) {
     await mkdir(profilePaths.workflowsDir, { recursive: true });
-    await mkdir(profilePaths.skillsDir, { recursive: true });
+    if (shouldInstallPlatformSkills) {
+      await mkdir(profilePaths.skillsDir, { recursive: true });
+    }
     if (platformInstallsCustomAgents(platform)) {
       await mkdir(profilePaths.agentsDir, { recursive: true });
     }
@@ -6366,56 +6456,57 @@ async function installBundleArtifacts({
       skipped.push(destination);
     else installed.push(destination);
   }
-  const agentSkillDependencies = await resolvePlatformAgentSkillDependencies({
-    platformRoot,
-    platformSpec,
-  });
-  const skillIds = await resolveInstallSkillIds({
-    platformSpec,
-    extraSkillIds: [...extraSkillIds, ...agentSkillDependencies],
-    skillProfile,
-  });
-  for (const skillId of skillIds) {
-    const source = await resolveSkillSourceDirectory(skillId);
-    const destination = path.join(profilePaths.skillsDir, skillId);
+  if (shouldInstallPlatformSkills) {
+    const agentSkillDependencies = await resolvePlatformAgentSkillDependencies({
+      platformRoot,
+      platformSpec,
+    });
+    const skillIds = await resolveInstallSkillIds({
+      platformSpec,
+      extraSkillIds: [...extraSkillIds, ...agentSkillDependencies],
+      skillProfile,
+    });
+    for (const skillId of skillIds) {
+      const source = await resolveSkillSourceDirectory(skillId);
+      const destination = path.join(profilePaths.skillsDir, skillId);
 
-    if (!source) {
-      throw new Error(
-        `Missing skill source directory for '${skillId}' (checked ${workflowSkillsRoot()}).`,
-      );
-    }
+      if (!source) {
+        throw new Error(
+          `Missing skill source directory for '${skillId}' (checked ${workflowSkillsRoot()}).`,
+        );
+      }
 
-    const result = await copyArt({
-      source,
-      destination,
-      overwrite,
-      dryRun,
-    });
-    artifacts.skills.push(destination);
-    if (result.action === "skipped" || result.action === "would-skip")
-      skipped.push(destination);
-    else installed.push(destination);
-  }
+      const result = await copyArt({
+        source,
+        destination,
+        overwrite,
+        dryRun,
+      });
+      artifacts.skills.push(destination);
+      if (result.action === "skipped" || result.action === "would-skip")
+        skipped.push(destination);
+      else installed.push(destination);
+    }
 
-  // Copy skills_index.json if it exists in the package skills root
-  const skillsIndexSource = path.join(
-    workflowSkillsRoot(),
-    "skills_index.json",
-  );
-  if (await pathExists(skillsIndexSource)) {
-    const skillsIndexDest = path.join(
-      profilePaths.skillsDir,
+    const skillsIndexSource = path.join(
+      workflowSkillsRoot(),
       "skills_index.json",
     );
-    const indexResult = await copyArt({
-      source: skillsIndexSource,
-      destination: skillsIndexDest,
-      overwrite,
-      dryRun,
-    });
-    if (indexResult.action === "skipped" || indexResult.action === "would-skip")
-      skipped.push(skillsIndexDest);
-    else installed.push(skillsIndexDest);
+    if (await pathExists(skillsIndexSource)) {
+      const skillsIndexDest = path.join(
+        profilePaths.skillsDir,
+        "skills_index.json",
+      );
+      const indexResult = await copyArt({
+        source: skillsIndexSource,
+        destination: skillsIndexDest,
+        overwrite,
+        dryRun,
+      });
+      if (indexResult.action === "skipped" || indexResult.action === "would-skip")
+        skipped.push(skillsIndexDest);
+      else installed.push(skillsIndexDest);
+    }
   }
 
   let generatedWrapperSkills = [];
@@ -6807,7 +6898,9 @@ function printInstallSummary({
     console.log(
       `\nCodex callable wrapper skills: ${generatedWrapperSkills.length} (workflow=${workflowCount}, agent=${agentCount})`,
     );
-    console.log("Invoke these with $workflow-... or $agent-... in Codex.");
+    console.log(
+      "These remain compatibility aliases. Prefer direct /workflow and @agent routing in Codex when available.",
+    );
   }
 
   if (terminalIntegration) {

package/workflows/skills/accessibility/SKILL.md

@@ -91,13 +91,15 @@ SizedBox(
 4. **Color Contrast**: Text must have 4.5:1 contrast ratio (3:1 for large text)
 5. **Screen Reader**: Test with TalkBack (Android) and VoiceOver (iOS)
 
-## Steering Files
+## References
 
-Load detailed guidance:
-- `a11y_checklist.md` - Complete accessibility checklist for reviews
+Load detailed guidance only when needed.
+
+| File | Load when |
+| --- | --- |
+| `references/a11y_checklist.md` | Running an accessibility review or validating a widget/screen against the full checklist |
 
 ## Templates
 
 - `focus_form` - Form with proper focus management
 - `semantics_icon_button` - Icon button with semantic labels
-

package/workflows/skills/api-designer/SKILL.md

@@ -1,11 +1,15 @@
 ---
 name: "api-designer"
-description: "Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture. Invoke for resource modeling, versioning strategies, pagination patterns, error handling standards."
+description: "Use when defining or reviewing external API contracts, OpenAPI specifications, resource models, pagination, versioning, or error response standards. Do not use for pure database design, implementation-only handler work, or framework-specific backend setup."
 ---
 
 
 # API Designer
 
+# CHANGED: description — added a sharper trigger boundary and explicit non-goals — reduces false-positive invocation.
+# CHANGED: references section — normalized to explicit Load When guidance with platform-safe relative paths — prevents speculative sidecar loading.
+# CHANGED: related powers cleanup — removed power-era section — keeps this skill canonical and platform-safe.
+
 ## Overview
 
 Senior API architect with expertise in designing scalable, developer-friendly REST and GraphQL APIs with comprehensive OpenAPI specifications.
@@ -25,6 +29,12 @@ You are a senior API designer with 10+ years of experience creating intuitive, s
 - Planning authentication flows
 - Documenting API contracts
 
+## When Not to Use This Skill
+
+- Pure database schema, indexing, or migration work without an API contract change
+- Framework-only implementation tasks such as wiring handlers, middleware, or DI containers
+- Internal refactors that do not change request/response contracts
+
 ## Core Workflow
 
 1. **Analyze domain** - Understand business requirements, data models, client needs
@@ -33,7 +43,7 @@ You are a senior API designer with 10+ years of experience creating intuitive, s
 4. **Specify contract** - Create OpenAPI 3.1 spec with complete documentation
 5. **Plan evolution** - Design versioning, deprecation, backward compatibility
 
-## Available Steering Files
+## References
 
 Load detailed guidance on-demand:
 
@@ -84,11 +94,3 @@ When designing APIs, provide:
 ## Knowledge Reference
 
 REST architecture, OpenAPI 3.1, GraphQL, HTTP semantics, JSON:API, HATEOAS, OAuth 2.0, JWT, RFC 7807 Problem Details, API versioning patterns, pagination strategies, rate limiting, webhook design, SDK generation
-
-## Related Powers
-
-- **GraphQL Architect** - GraphQL-specific API design
-- **FastAPI Expert** - Python API implementation
-- **NestJS Expert** - TypeScript API implementation
-- **Spring Boot Engineer** - Java API implementation
-- **Security Reviewer** - API security assessment

package/workflows/skills/api-patterns/SKILL.md

@@ -19,16 +19,16 @@ allowed-tools: Read, Write, Edit, Glob, Grep
 
 | File | Description | When to Read |
 |------|-------------|--------------|
-| `api-style.md` | REST vs GraphQL vs tRPC decision tree | Choosing API type |
-| `rest.md` | Resource naming, HTTP methods, status codes | Designing REST API |
-| `response.md` | Envelope pattern, error format, pagination | Response structure |
-| `graphql.md` | Schema design, when to use, security | Considering GraphQL |
-| `trpc.md` | TypeScript monorepo, type safety | TS fullstack projects |
-| `versioning.md` | URI/Header/Query versioning | API evolution planning |
-| `auth.md` | JWT, OAuth, Passkey, API Keys | Auth pattern selection |
-| `rate-limiting.md` | Token bucket, sliding window | API protection |
-| `documentation.md` | OpenAPI/Swagger best practices | Documentation |
-| `security-testing.md` | OWASP API Top 10, auth/authz testing | Security audits |
+| `references/api-style.md` | REST vs GraphQL vs tRPC decision tree | Choosing API type |
+| `references/rest.md` | Resource naming, HTTP methods, status codes | Designing REST API |
+| `references/response.md` | Envelope pattern, error format, pagination | Response structure |
+| `references/graphql.md` | Schema design, when to use, security | Considering GraphQL |
+| `references/trpc.md` | TypeScript monorepo, type safety | TS fullstack projects |
+| `references/versioning.md` | URI/Header/Query versioning | API evolution planning |
+| `references/auth.md` | JWT, OAuth, Passkey, API Keys | Auth pattern selection |
+| `references/rate-limiting.md` | Token bucket, sliding window | API protection |
+| `references/documentation.md` | OpenAPI/Swagger best practices | Documentation |
+| `references/security-testing.md` | OWASP API Top 10, auth/authz testing | Security audits |
 
 ---
 
@@ -78,4 +78,3 @@ Before designing an API:
 | Script | Purpose | Command |
 |--------|---------|---------|
 | `scripts/api_validator.py` | API endpoint validation | `python scripts/api_validator.py <project_path>` |
-

package/workflows/skills/app-builder/SKILL.md

@@ -14,11 +14,11 @@ allowed-tools: Read, Write, Edit, Glob, Grep, Bash, Agent
 
 | File | Description | When to Read |
 |------|-------------|--------------|
-| `project-detection.md` | Keyword matrix, project type detection | Starting new project |
-| `tech-stack.md` | 2026 default stack, alternatives | Choosing technologies |
-| `agent-coordination.md` | Agent pipeline, execution order | Coordinating multi-agent work |
-| `scaffolding.md` | Directory structure, core files | Creating project structure |
-| `feature-building.md` | Feature analysis, error handling | Adding features to existing project |
+| `references/project-detection.md` | Keyword matrix, project type detection | Starting new project |
+| `references/tech-stack.md` | 2026 default stack, alternatives | Choosing technologies |
+| `references/agent-coordination.md` | Agent pipeline, execution order | Coordinating multi-agent work |
+| `references/scaffolding.md` | Directory structure, core files | Creating project structure |
+| `references/feature-building.md` | Feature analysis, error handling | Adding features to existing project |
 | `templates/SKILL.md` | **Project templates** | Scaffolding new project |
 
 ---

package/workflows/skills/architecture-designer/SKILL.md

@@ -75,9 +75,3 @@ When designing architecture, provide:
 ## Knowledge Reference
 
 Distributed systems, microservices, event-driven architecture, CQRS, DDD, CAP theorem, cloud platforms (AWS, GCP, Azure), containers, Kubernetes, message queues, caching, database design
-
-## Related Powers
-
-- **Fullstack Guardian** - Implementing designs
-- **DevOps Engineer** - Infrastructure implementation
-- **Secure Code Guardian** - Security architecture

package/workflows/skills/behavioral-modes/SKILL.md

@@ -217,7 +217,7 @@ Modern architectures optimized for agent-to-agent collaboration:
 
 ### 2. 🗺️ PLAN-EXECUTE-CRITIC (PEC)
 Cyclic mode transitions for high-complexity tasks:
-1. **Planner:** Decomposes the task into atomic steps (`task.md`).
+1. **Planner:** Decomposes the task into atomic steps (task handoff or planning artifact).
 2. **Executor:** Performs the actual coding (`IMPLEMENT`).
 3. **Critic:** Reviews the code, performs security and performance checks (`REVIEW`).
 

package/workflows/skills/brainstorming/SKILL.md

@@ -34,7 +34,7 @@ allowed-tools: Read, Glob, Grep
 
 ## 🧠 Dynamic Question Generation
 
-**⛔ NEVER use static templates.** Read `dynamic-questioning.md` for principles.
+**⛔ NEVER use static templates.** Read `references/dynamic-questioning.md` for principles.
 
 ### Core Principles
 
@@ -73,7 +73,7 @@ allowed-tools: Read, Glob, Grep
 **If Not Specified:** [Default + rationale]
 ```
 
-**For detailed domain-specific question banks and algorithms**, see: `dynamic-questioning.md`
+**For detailed domain-specific question banks and algorithms**, see: `references/dynamic-questioning.md`
 
 ---
 

package/workflows/skills/cli-developer/SKILL.md

@@ -109,8 +109,8 @@ mycli                           # Root command
 
 | File                 | Load When                                                    |
 | -------------------- | ------------------------------------------------------------ |
-| `design-patterns.md` | Command hierarchy, flags, config layers, plugin architecture |
-| `node-cli.md`        | Commander, Yargs, Inquirer, Chalk, Ora                       |
-| `python-cli.md`      | Typer, Click, argparse, Rich, questionary                    |
-| `go-cli.md`          | Cobra, Viper, Bubble Tea, progress bars                      |
-| `ux-patterns.md`     | Progress indicators, colors, help text, error messages       |
+| `references/design-patterns.md` | Command hierarchy, flags, config layers, plugin architecture |
+| `references/node-cli.md`        | Commander, Yargs, Inquirer, Chalk, Ora                       |
+| `references/python-cli.md`      | Typer, Click, argparse, Rich, questionary                    |
+| `references/go-cli.md`          | Cobra, Viper, Bubble Tea, progress bars                      |
+| `references/ux-patterns.md`     | Progress indicators, colors, help text, error messages       |

package/workflows/skills/code-documenter/SKILL.md

@@ -81,7 +81,3 @@ Depending on the task, provide:
 ## Knowledge Reference
 
 Google/NumPy/Sphinx docstrings, JSDoc, OpenAPI 3.0/3.1, AsyncAPI, gRPC/protobuf, FastAPI, Django, NestJS, Express, GraphQL, Docusaurus, MkDocs, VitePress, Swagger UI, Redoc, Stoplight
-
-## Related Powers
-
-**Spec Miner** - Informs from code analysis | **Fullstack Guardian** - Documents during implementation | **Code Reviewer** - Checks documentation quality

package/workflows/skills/code-reviewer/SKILL.md

@@ -82,9 +82,3 @@ Code review report should include:
 ## Knowledge Reference
 
 SOLID, DRY, KISS, YAGNI, design patterns, OWASP Top 10, language idioms, testing patterns
-
-## Related Powers
-
-- **Security Reviewer** - Deep security analysis
-- **Test Master** - Test quality assessment
-- **Architecture Designer** - Design review

package/workflows/skills/csharp-pro/SKILL.md

@@ -18,6 +18,12 @@ metadata:
 - Refactoring legacy C# into modern, testable architecture.
 - Improving async correctness and operational resilience.
 
+## When not to use
+
+- Frontend-only browser work with no .NET runtime.
+- Database-only tuning where query/schema evidence is the primary task.
+- Tiny scripting tasks better served by existing shell or project tooling.
+
 ## Core workflow
 
 1. Confirm target framework/runtime constraints.
@@ -33,6 +39,24 @@ metadata:
 - Use dependency injection with explicit lifetimes.
 - Keep API contracts versioned and backward-compatible.
 
+## Debugging and observability
+
+- Use structured logs with correlation/request IDs on service boundaries.
+- Keep exception-to-response mapping explicit and non-leaky.
+- Prefer `dotnet test`, analyzers, and targeted traces before speculative rewrites.
+
+## Performance and reliability
+
+- Measure allocation hotspots before changing data structures.
+- Propagate `CancellationToken` through request and worker paths.
+- Bound retries/timeouts explicitly for network and queue work.
+
+## References
+
+| File | Load when |
+| --- | --- |
+| `references/operational-baseline.md` | You need current async, logging, testing, and deployment guardrails for C#/.NET services. |
+
 ## Avoid
 
 - Sync-over-async (`.Result`, `.Wait()`) in request paths.

package/workflows/skills/csharp-pro/references/operational-baseline.md

@@ -0,0 +1,9 @@
+## Operational baseline
+
+Load when: service-level logging, async boundaries, dependency injection, or production verification need explicit guardrails.
+
+- Keep nullable reference types enabled and treat warnings as design feedback.
+- Use `CancellationToken` in public async APIs and propagate it through external I/O.
+- Prefer structured logging with request/job correlation IDs.
+- Keep transport contracts separate from domain and persistence models.
+- Validate with `dotnet test`, analyzers, and targeted profiling before shipping.

package/workflows/skills/database-design/SKILL.md

@@ -14,12 +14,12 @@ allowed-tools: Read, Write, Edit, Glob, Grep
 
 | File | Description | When to Read |
 |------|-------------|--------------|
-| `database-selection.md` | PostgreSQL vs Neon vs Turso vs SQLite | Choosing database |
-| `orm-selection.md` | Drizzle vs Prisma vs Kysely | Choosing ORM |
-| `schema-design.md` | Normalization, PKs, relationships | Designing schema |
-| `indexing.md` | Index types, composite indexes | Performance tuning |
-| `optimization.md` | N+1, EXPLAIN ANALYZE | Query optimization |
-| `migrations.md` | Safe migrations, serverless DBs | Schema changes |
+| `references/database-selection.md` | PostgreSQL vs Neon vs Turso vs SQLite | Choosing database |
+| `references/orm-selection.md` | Drizzle vs Prisma vs Kysely | Choosing ORM |
+| `references/schema-design.md` | Normalization, PKs, relationships | Designing schema |
+| `references/indexing.md` | Index types, composite indexes | Performance tuning |
+| `references/optimization.md` | N+1, EXPLAIN ANALYZE | Query optimization |
+| `references/migrations.md` | Safe migrations, serverless DBs | Schema changes |
 
 ---
 

package/workflows/skills/database-optimizer/SKILL.md

@@ -79,9 +79,3 @@ When optimizing database performance, provide:
 ## Knowledge Reference
 
 PostgreSQL (pg_stat_statements, EXPLAIN ANALYZE, indexes, VACUUM, partitioning), MySQL (slow query log, EXPLAIN, InnoDB, query cache), query optimization, index design, execution plans, configuration tuning, replication, sharding, caching strategies
-
-## Related Powers
-
-- **Backend Developer** - Query pattern optimization
-- **DevOps Engineer** - Infrastructure and resource tuning
-- **Data Engineer** - ETL and analytical query optimization