@cubis/foundry 0.3.82 → 0.3.84

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cubis/foundry",
-  "version": "0.3.82",
+  "version": "0.3.84",
   "description": "Cubis Foundry CLI for workflow-first AI agent environments",
   "type": "module",
   "bin": {
@@ -11,26 +11,27 @@
   "files": [
     "bin",
     "workflows",
+    "!workflows/workflows/agent-environment-setup/platforms/*/skills/**/evals",
+    "!workflows/workflows/agent-environment-setup/platforms/*/skills/**/evals/**",
     "mcp/dist",
+    "mcp/runtime",
+    "mcp/generated",
     "mcp/config.json",
     "mcp/package.json",
     "mcp/package-lock.json",
     "mcp/README.md",
     "mcp/Dockerfile",
     "mcp/.dockerignore",
-    "mcp/tsconfig.json",
-    "mcp/src",
     "README.md",
     "CHANGELOG.md",
-    "dist/cli",
-    "src/cli",
-    "tsconfig.cli.json"
+    "dist/cli"
   ],
   "scripts": {
     "start": "npm run build:cli && node bin/cubis.js",
     "check": "npm run build:cli && node bin/cubis.js --help",
-    "test:attributes": "node scripts/validate-platform-attributes.mjs && node scripts/validate-shared-routing.mjs && node scripts/validate-skill-packaging.mjs && node scripts/validate-runtime-wiring.mjs && node scripts/generate-skills-index.mjs --check && node scripts/generate-skill-catalog.mjs --check",
-    "test:attributes:strict": "node scripts/validate-platform-attributes.mjs --strict && node scripts/validate-shared-routing.mjs && node scripts/validate-skill-packaging.mjs && node scripts/validate-runtime-wiring.mjs && node scripts/generate-skills-index.mjs --check && node scripts/generate-skill-catalog.mjs --check",
+    "build:mcp": "node scripts/ensure-mcp-deps.mjs && npm --prefix mcp run build",
+    "test:attributes": "node scripts/validate-platform-attributes.mjs && node scripts/validate-shared-routing.mjs && node scripts/validate-skill-packaging.mjs && node scripts/validate-runtime-wiring.mjs && node scripts/validate-cleanup-invariants.mjs && node scripts/generate-skills-index.mjs --check && node scripts/generate-skill-catalog.mjs --check",
+    "test:attributes:strict": "node scripts/validate-platform-attributes.mjs --strict && node scripts/validate-shared-routing.mjs && node scripts/validate-skill-packaging.mjs && node scripts/validate-runtime-wiring.mjs && node scripts/validate-cleanup-invariants.mjs && node scripts/generate-skills-index.mjs --check && node scripts/generate-skill-catalog.mjs --check",
     "test:cli-help": "npm run build:cli && node scripts/validate-cli-help.mjs",
     "test:tech-md": "node scripts/test-tech-md-scanner.mjs",
     "test:build-architecture": "npm run build:cli && node scripts/test-build-architecture.mjs",
@@ -72,8 +73,9 @@
     "generate:powers:force": "node \"workflows/scripts/generate-powers.mjs\" --force",
     "generate:powers:from-skills": "node \"workflows/scripts/generate-powers.mjs\" --from-skills",
     "generate:powers:sync": "node \"workflows/scripts/generate-powers.mjs\" --sync-skills --force",
-    "build:cli": "tsc -p tsconfig.cli.json",
-    "clean:cli": "rm -rf dist/cli",
+    "build:cli": "node scripts/clean-cli.mjs && tsc -p tsconfig.cli.json && npm run build:mcp",
+    "clean:cli": "node scripts/clean-cli.mjs",
+    "check:mcp-build-freshness": "node scripts/validate-mcp-build-freshness.mjs",
     "prepack": "npm run build:cli && npm run check:skills-index && npm run check:skill-catalog"
   },
   "engines": {

package/workflows/design-datasets/README.md

@@ -0,0 +1,17 @@
+# Foundry Design Datasets
+
+This directory stores Foundry-owned normalized design datasets.
+
+- Inputs may come from external design research such as Impeccable, Anthropic-aligned skill lineage, and selected public UX references.
+- Agents should consume these normalized datasets rather than scraping or copying external pages directly.
+- Every entry preserves source and license metadata so design guidance does not become anonymous prompt residue.
+
+Current datasets:
+
+- `style-directions.json`
+- `layout-patterns.json`
+- `mobile-patterns.json`
+- `component-motifs.json`
+- `token-language.json`
+- `motion-patterns.json`
+

package/workflows/design-datasets/component-motifs.json

@@ -0,0 +1,41 @@
+{
+  "dataset": "component-motifs",
+  "version": 1,
+  "entries": [
+    {
+      "id": "soft-elevated-cards",
+      "source": [
+        "https://impeccable.style/",
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "mobile", "stitch"],
+      "applicability": ["wellness", "consumer products", "dashboards"],
+      "qualityTier": "high",
+      "notes": "Round, calm cards with layered elevation and restrained borders instead of harsh separators."
+    },
+    {
+      "id": "metric-ring-hero",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["mobile", "web"],
+      "applicability": ["fitness", "habits", "goal tracking"],
+      "qualityTier": "medium",
+      "notes": "Progress rings should be compact, legible, and paired with a concrete recommendation rather than floating alone."
+    },
+    {
+      "id": "editorial-quote-panel",
+      "source": [
+        "https://impeccable.style/"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["mobile", "web", "stitch"],
+      "applicability": ["motivation", "reflection", "content-led products"],
+      "qualityTier": "medium",
+      "notes": "Use a distinct accent block for motivational or educational content to break list fatigue."
+    }
+  ]
+}
+

package/workflows/design-datasets/layout-patterns.json

@@ -0,0 +1,40 @@
+{
+  "dataset": "layout-patterns",
+  "version": 1,
+  "entries": [
+    {
+      "id": "hero-anchor-stack",
+      "source": [
+        "https://impeccable.style/"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "stitch", "mobile"],
+      "applicability": ["landing", "onboarding", "single-focus screens"],
+      "qualityTier": "high",
+      "notes": "Lead with one dominant message block, one hero artifact, and one decisive action."
+    },
+    {
+      "id": "dashboard-card-rail",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["dashboards", "analytics", "tracking apps"],
+      "qualityTier": "high",
+      "notes": "Use a clear hero metric, a stable card rhythm, and a secondary rail for drills and actions."
+    },
+    {
+      "id": "sectioned-mobile-scroll",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["mobile"],
+      "applicability": ["consumer mobile apps", "Flutter", "habit trackers"],
+      "qualityTier": "high",
+      "notes": "Compose mobile surfaces as vertically staged zones with section headers, high-signal cards, and safe thumb reach."
+    }
+  ]
+}
+

package/workflows/design-datasets/mobile-patterns.json

@@ -0,0 +1,40 @@
+{
+  "dataset": "mobile-patterns",
+  "version": 1,
+  "entries": [
+    {
+      "id": "thumb-zone-primary-actions",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["mobile"],
+      "applicability": ["flutter", "android", "ios"],
+      "qualityTier": "high",
+      "notes": "Primary actions should sit in the lower third or be reachable via bottom sheets and pinned footers."
+    },
+    {
+      "id": "glanceable-progress-clusters",
+      "source": [
+        "https://impeccable.style/"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["mobile", "stitch"],
+      "applicability": ["habit", "wellness", "fitness", "progress apps"],
+      "qualityTier": "high",
+      "notes": "Group metrics into small clusters that answer streak, momentum, and next action at a glance."
+    },
+    {
+      "id": "guided-onboarding-steps",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["mobile", "stitch"],
+      "applicability": ["onboarding", "setup", "habit coaching"],
+      "qualityTier": "medium",
+      "notes": "Use one decision per screen, progress framing, and short explanatory copy tied to immediate action."
+    }
+  ]
+}
+

package/workflows/design-datasets/motion-patterns.json

@@ -0,0 +1,40 @@
+{
+  "dataset": "motion-patterns",
+  "version": 1,
+  "entries": [
+    {
+      "id": "soft-enter-stagger",
+      "source": [
+        "https://impeccable.style/"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["dashboard loads", "section reveals", "marketing surfaces"],
+      "qualityTier": "medium",
+      "notes": "Use short upward fades and restrained stagger to stage content without feeling gimmicky."
+    },
+    {
+      "id": "feedback-over-decoration",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["web", "mobile", "stitch"],
+      "applicability": ["all"],
+      "qualityTier": "high",
+      "notes": "Prioritize motion for confirmation, focus changes, and continuity. Avoid decorative loops."
+    },
+    {
+      "id": "reduce-motion-safe-mode",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["all"],
+      "qualityTier": "high",
+      "notes": "Every animated pattern should have a reduced-motion equivalent with zero hidden content dependencies."
+    }
+  ]
+}
+

package/workflows/design-datasets/style-directions.json

@@ -0,0 +1,42 @@
+{
+  "dataset": "style-directions",
+  "version": 1,
+  "entries": [
+    {
+      "id": "editorial-serene",
+      "source": [
+        "https://impeccable.style/",
+        "https://agentskills.so/skills/pbakaus-impeccable-frontend-design"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "stitch", "mobile"],
+      "applicability": ["wellness", "habits", "journaling", "creator products"],
+      "qualityTier": "high",
+      "notes": "Soft editorial UI with calm whitespace, restrained accents, and a premium reading rhythm."
+    },
+    {
+      "id": "structured-athletic",
+      "source": [
+        "https://impeccable.style/",
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["fitness", "progress tracking", "stats-heavy products"],
+      "qualityTier": "high",
+      "notes": "Sharper geometry, tighter density, stronger data contrast, and clearer section framing."
+    },
+    {
+      "id": "playful-guided",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["mobile", "stitch"],
+      "applicability": ["onboarding", "consumer apps", "education", "habit flows"],
+      "qualityTier": "medium",
+      "notes": "Friendly motion, approachable illustrations, and guided progress framing without looking toy-like."
+    }
+  ]
+}
+

package/workflows/design-datasets/token-language.json

@@ -0,0 +1,40 @@
+{
+  "dataset": "token-language",
+  "version": 1,
+  "entries": [
+    {
+      "id": "semantic-role-first",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["web", "mobile", "stitch"],
+      "applicability": ["all"],
+      "qualityTier": "high",
+      "notes": "Name tokens by semantic role first: surface, ink, accent, positive, warning, danger, quiet, border, ring."
+    },
+    {
+      "id": "tiered-surface-system",
+      "source": [
+        "https://impeccable.style/"
+      ],
+      "licenseStatus": "research-reference-only",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["apps with cards, sheets, or dashboards"],
+      "qualityTier": "high",
+      "notes": "Keep 3-5 distinct surface elevations with clear border and shadow relationships instead of many arbitrary neutrals."
+    },
+    {
+      "id": "motion-token-pairs",
+      "source": [
+        "anthropic-front-end-lineage"
+      ],
+      "licenseStatus": "derived-foundry",
+      "platformScope": ["web", "mobile"],
+      "applicability": ["interactive apps"],
+      "qualityTier": "medium",
+      "notes": "Pair duration and easing tokens for tap, reveal, sheet, and page transitions so motion stays coherent."
+    }
+  ]
+}
+

package/workflows/skills/_schema/platform-notes/antigravity.md

@@ -1,7 +1,10 @@
 ## Antigravity Platform Notes
 
-- Use Agent Manager for parallel agent coordination and task delegation.
-- Skill and agent files are stored under `.agent/skills/` and `.agent/agents/` respectively.
-- TOML command files in `.agent/commands/` provide slash-command entry points for workflows.
-- Replace direct `@agent-name` delegation with Agent Manager dispatch calls.
-- Reference files are loaded relative to the skill directory under `.agent/skills/<skill-id>/`.
+- Skills are stored under `.agents/skills/<skill-id>/SKILL.md` (shared Agent Skills standard path).
+- TOML command files in `.gemini/commands/` provide slash-command entry points for workflows and agent routes.
+- Rules file relative to the mirrored skill directory: `../../rules/GEMINI.md`.
+- Use Agent Manager for parallel agent coordination and multi-specialist delegation (equivalent to `@orchestrator`).
+- Specialist routes are compiled into `.gemini/commands/agent-*.toml` command files — not project-local agent markdown.
+- Reference files are loaded relative to the skill directory under `.agents/skills/<skill-id>/`.
+- MCP skill tools (`skill_search`, `skill_get`, `skill_validate`, `skill_get_reference`) are available when Cubis Foundry MCP is configured.
+- User arguments are passed as natural language via `{{args}}` in TOML command prompts.

package/workflows/skills/_schema/platform-notes/claude.md

@@ -3,5 +3,12 @@
 - Use `$ARGUMENTS` to access user-provided arguments passed when the skill is invoked.
 - Reference skill-local files with `${CLAUDE_SKILL_DIR}/references/<file>` for portable paths.
 - When `context: fork` is set, the skill runs in an isolated subagent context; the `agent` field names the fork target.
+- Custom subagents live under `../../agents/` relative to the mirrored skill directory and support YAML frontmatter: `name`, `description`, `tools`, `model`, `maxTurns`, `memory`, `handoffs`.
+- Use `model` field in agent frontmatter to select model per subagent (e.g., `model: opus` for complex analysis).
+- Set `maxTurns` to prevent runaway iterations (default: 25, orchestrator: 30).
+- Current project-memory agents are `orchestrator` and `planner`; use them for durable project context.
+- Hook templates in `.claude/hooks/` provide lifecycle event integration at `UserPromptSubmit` and other events.
+- Path-scoped rules live under `../../rules/` with `paths:` frontmatter for targeted guidance.
 - MCP skill tools (`skill_search`, `skill_get`, `skill_validate`, `skill_get_reference`) are available for dynamic skill discovery and loading.
 - Use `allowed-tools` in frontmatter to restrict tool access for security-sensitive skills.
+- Workflow skills can be compiled to `.claude/skills/<workflow-id>/SKILL.md` as `generatedSkills`.

package/workflows/skills/_schema/platform-notes/codex.md

@@ -1,7 +1,14 @@
 ## Codex Platform Notes
 
-- Specialists are internal reasoning postures, not spawned subagent processes.
-- Reference the repo-root AGENTS instructions for posture definitions and switching contracts.
+- Codex supports native subagents via `.codex/agents/*.toml` files with `name`, `description`, and `developer_instructions`.
+- Each subagent TOML can specify `model` and `model_reasoning_effort` to optimize cost per task difficulty:
+  - Light tasks (exploration, docs): `model = "gpt-5.3-codex-spark"`, `model_reasoning_effort = "medium"`
+  - Heavy tasks (security audit, orchestration): `model = "gpt-5.4"`, `model_reasoning_effort = "high"`
+  - Standard tasks (implementation): inherit parent model (omit `model` field).
+- Built-in agents: `default`, `worker`, `explorer`. Custom agents extend these via TOML definitions.
 - Codex operates under network restrictions — skills should not assume outbound HTTP access.
 - Use `$ARGUMENTS` to access user-provided arguments when the skill is invoked.
 - All skill guidance executes within the sandbox; file I/O is confined to the workspace.
+- Skills are installed at `.agents/skills/<skill-id>/SKILL.md`. Workflow skills can also be compiled to `.agents/skills/<workflow-id>/SKILL.md` as `generatedSkills`.
+- Codex supports three autonomy levels: `suggest`, `auto-edit`, `full-auto`.
+- MCP skill tools are available when the Cubis Foundry MCP server is connected.

package/workflows/skills/_schema/platform-notes/copilot.md

@@ -1,7 +1,11 @@
 ## Copilot Platform Notes
 
-- Skill files are stored under `.github/prompts/` (prompt files) and `.github/instructions/` (instruction files).
-- Copilot does not support subagent spawning — all skill guidance executes within the current conversation context.
+- Custom agents live under `../../agents/` relative to the mirrored skill directory and use YAML frontmatter such as `name`, `description`, `tools`, `model`, and `handoffs`.
+- Agent `handoffs` can guide workflow transitions (for example, `@planner` → `@implementer`).
+- Skill files are stored under `.github/skills/` (skill markdown) and `.github/prompts/` (prompt files).
+- Path-scoped instructions live under `../../instructions/` and provide file-pattern-targeted guidance via `applyTo` frontmatter.
 - User arguments are provided as natural language input in the prompt, not through a `$ARGUMENTS` variable.
-- Frontmatter keys `context`, `agent`, and `allowed-tools` are not supported; guidance is advisory only.
+- Frontmatter keys `context: fork` and `allowed-tools` are not natively supported; guidance is advisory.
 - Reference files can be included via `#file:references/<name>.md` syntax in Copilot Chat.
+- MCP configuration lives in `.vscode/mcp.json`. MCP skill tools are available when configured.
+- Rules file relative to the mirrored skill directory: `../../rules/copilot-instructions.md` — broad and stable, not task-specific.

package/workflows/skills/_schema/platform-notes/gemini.md

@@ -1,7 +1,11 @@
 ## Gemini Platform Notes
 
-- Use `activate_skill` to invoke skills by name from Gemini CLI or Gemini Code Assist.
-- Skill files are stored under `.gemini/skills/` in the project root.
-- Gemini does not support `context: fork` — all skill execution is inline.
+- Workflow and agent routes are compiled into `.gemini/commands/*.toml` TOML command files.
+- Commands use `{{args}}` for user input, `!{shell command}` for shell output, `@{file}` for file content.
+- Specialists are internal postures (modes of reasoning), not spawned subagent processes.
+- Gemini does not support `context: fork` — all skill execution is inline within the current session.
+- Skills are loaded via MCP when the Cubis Foundry MCP server is configured. Local `.agents/skills/` paths serve as hints.
 - User arguments are passed as natural language in the activation prompt.
-- Reference files are loaded relative to the skill directory under `.gemini/skills/<skill-id>/`.
+- Rules file relative to the mirrored skill directory: `../../rules/GEMINI.md`.
+- Reference files are loaded relative to the skill directory under `.agents/skills/<skill-id>/`.
+- MCP skill tools (`skill_search`, `skill_get`, `skill_validate`, `skill_get_reference`) are available when MCP is connected.

package/workflows/skills/_schema/skill-platform-attributes.json

@@ -14,7 +14,7 @@
   "ci-cd-pipeline": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "devops-engineer",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Pipeline file or CI/CD concern to address"
   },
@@ -34,14 +34,14 @@
   "database-design": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "database-architect",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Schema, query, or data model to design"
   },
   "deep-research": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash"],
     "contextFork": true,
-    "forkAgent": "researcher",
+    "forkAgent": "explorer",
     "userInvocable": true,
     "argumentHint": "Topic, vendor capability, or public comparison to research"
   },
@@ -54,7 +54,7 @@
   "docker-compose-dev": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "devops-engineer",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Docker Compose file or service to configure"
   },
@@ -91,7 +91,7 @@
   "frontend-design": {
     "allowedTools": ["Read", "Grep", "Glob"],
     "contextFork": true,
-    "forkAgent": "frontend-specialist",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Component, design system, or UI pattern to design"
   },
@@ -134,7 +134,7 @@
   "integration-testing": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "test-engineer",
+    "forkAgent": "tester",
     "userInvocable": true,
     "argumentHint": "Component boundary or integration to test"
   },
@@ -165,7 +165,7 @@
   "kubernetes-deploy": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "devops-engineer",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Kubernetes manifest, Helm chart, or deployment concern"
   },
@@ -184,7 +184,7 @@
   "mcp-server-builder": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "backend-specialist",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "MCP server, tool, or transport to build"
   },
@@ -215,14 +215,14 @@
   "owasp-security-review": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash"],
     "contextFork": true,
-    "forkAgent": "security-auditor",
+    "forkAgent": "reviewer",
     "userInvocable": true,
     "argumentHint": "Application, endpoint, or codebase to audit"
   },
   "pentest-skill": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash"],
     "contextFork": true,
-    "forkAgent": "penetration-tester",
+    "forkAgent": "reviewer",
     "userInvocable": true,
     "argumentHint": "Target application or scope for penetration test"
   },
@@ -356,7 +356,7 @@
   "stitch": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "frontend-specialist",
+    "forkAgent": "implementer",
     "userInvocable": true,
     "argumentHint": "Stitch screen, design artifact, or UI diff to implement"
   },
@@ -412,7 +412,7 @@
   "unit-testing": {
     "allowedTools": ["Read", "Grep", "Glob", "Bash", "Edit", "Write"],
     "contextFork": true,
-    "forkAgent": "test-engineer",
+    "forkAgent": "tester",
     "userInvocable": true,
     "argumentHint": "Module, function, or component to unit test"
   },