@devran-ai/kit 4.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (231) hide show
  1. package/.agent/CheatSheet.md +350 -0
  2. package/.agent/README.md +76 -0
  3. package/.agent/agents/README.md +155 -0
  4. package/.agent/agents/architect.md +185 -0
  5. package/.agent/agents/backend-specialist.md +276 -0
  6. package/.agent/agents/build-error-resolver.md +207 -0
  7. package/.agent/agents/code-reviewer.md +162 -0
  8. package/.agent/agents/database-architect.md +138 -0
  9. package/.agent/agents/devops-engineer.md +144 -0
  10. package/.agent/agents/doc-updater.md +229 -0
  11. package/.agent/agents/e2e-runner.md +145 -0
  12. package/.agent/agents/explorer-agent.md +143 -0
  13. package/.agent/agents/frontend-specialist.md +144 -0
  14. package/.agent/agents/go-reviewer.md +128 -0
  15. package/.agent/agents/knowledge-agent.md +197 -0
  16. package/.agent/agents/mobile-developer.md +150 -0
  17. package/.agent/agents/performance-optimizer.md +175 -0
  18. package/.agent/agents/planner.md +133 -0
  19. package/.agent/agents/pr-reviewer.md +148 -0
  20. package/.agent/agents/python-reviewer.md +123 -0
  21. package/.agent/agents/refactor-cleaner.md +201 -0
  22. package/.agent/agents/reliability-engineer.md +156 -0
  23. package/.agent/agents/security-reviewer.md +141 -0
  24. package/.agent/agents/sprint-orchestrator.md +124 -0
  25. package/.agent/agents/tdd-guide.md +179 -0
  26. package/.agent/agents/typescript-reviewer.md +110 -0
  27. package/.agent/checklists/README.md +102 -0
  28. package/.agent/checklists/pre-commit.md +93 -0
  29. package/.agent/checklists/session-end.md +99 -0
  30. package/.agent/checklists/session-start.md +102 -0
  31. package/.agent/checklists/task-complete.md +81 -0
  32. package/.agent/commands/README.md +130 -0
  33. package/.agent/commands/adr.md +29 -0
  34. package/.agent/commands/ask.md +28 -0
  35. package/.agent/commands/build.md +30 -0
  36. package/.agent/commands/changelog.md +40 -0
  37. package/.agent/commands/checkpoint.md +28 -0
  38. package/.agent/commands/code-review.md +65 -0
  39. package/.agent/commands/compact.md +28 -0
  40. package/.agent/commands/cook.md +30 -0
  41. package/.agent/commands/db.md +30 -0
  42. package/.agent/commands/debug.md +31 -0
  43. package/.agent/commands/deploy.md +37 -0
  44. package/.agent/commands/design.md +29 -0
  45. package/.agent/commands/doc.md +30 -0
  46. package/.agent/commands/eval.md +30 -0
  47. package/.agent/commands/fix.md +32 -0
  48. package/.agent/commands/git.md +32 -0
  49. package/.agent/commands/help.md +273 -0
  50. package/.agent/commands/implement.md +30 -0
  51. package/.agent/commands/integrate.md +32 -0
  52. package/.agent/commands/learn.md +29 -0
  53. package/.agent/commands/perf.md +31 -0
  54. package/.agent/commands/plan.md +56 -0
  55. package/.agent/commands/pr-describe.md +65 -0
  56. package/.agent/commands/pr-fix.md +45 -0
  57. package/.agent/commands/pr-merge.md +45 -0
  58. package/.agent/commands/pr-review.md +50 -0
  59. package/.agent/commands/pr-split.md +54 -0
  60. package/.agent/commands/pr-status.md +56 -0
  61. package/.agent/commands/pr.md +58 -0
  62. package/.agent/commands/refactor.md +32 -0
  63. package/.agent/commands/research.md +28 -0
  64. package/.agent/commands/scout.md +30 -0
  65. package/.agent/commands/security-scan.md +33 -0
  66. package/.agent/commands/setup.md +31 -0
  67. package/.agent/commands/status.md +59 -0
  68. package/.agent/commands/tdd.md +73 -0
  69. package/.agent/commands/verify.md +58 -0
  70. package/.agent/contexts/brainstorm.md +26 -0
  71. package/.agent/contexts/debug.md +28 -0
  72. package/.agent/contexts/implement.md +29 -0
  73. package/.agent/contexts/plan-quality-log.md +30 -0
  74. package/.agent/contexts/review.md +27 -0
  75. package/.agent/contexts/ship.md +28 -0
  76. package/.agent/decisions/001-trust-grade-governance.md +46 -0
  77. package/.agent/decisions/002-cross-ide-generation.md +15 -0
  78. package/.agent/engine/identity.json +4 -0
  79. package/.agent/engine/loading-rules.json +193 -0
  80. package/.agent/engine/marketplace-index.json +29 -0
  81. package/.agent/engine/mcp-servers/filesystem.json +9 -0
  82. package/.agent/engine/mcp-servers/github.json +11 -0
  83. package/.agent/engine/mcp-servers/postgres.json +11 -0
  84. package/.agent/engine/mcp-servers/supabase.json +11 -0
  85. package/.agent/engine/mcp-servers/vercel.json +11 -0
  86. package/.agent/engine/reliability-config.json +14 -0
  87. package/.agent/engine/sdlc-map.json +50 -0
  88. package/.agent/engine/workflow-state.json +167 -0
  89. package/.agent/hooks/README.md +101 -0
  90. package/.agent/hooks/hooks.json +104 -0
  91. package/.agent/hooks/templates/session-end.md +110 -0
  92. package/.agent/hooks/templates/session-start.md +95 -0
  93. package/.agent/manifest.json +466 -0
  94. package/.agent/rules/agent-upgrade-policy.md +56 -0
  95. package/.agent/rules/architecture.md +111 -0
  96. package/.agent/rules/coding-style.md +75 -0
  97. package/.agent/rules/documentation.md +74 -0
  98. package/.agent/rules/git-workflow.md +140 -0
  99. package/.agent/rules/quality-gate.md +117 -0
  100. package/.agent/rules/security.md +67 -0
  101. package/.agent/rules/sprint-tracking.md +103 -0
  102. package/.agent/rules/testing.md +80 -0
  103. package/.agent/rules/workflow-standards.md +30 -0
  104. package/.agent/rules.md +293 -0
  105. package/.agent/session-context.md +69 -0
  106. package/.agent/session-state.json +27 -0
  107. package/.agent/skills/README.md +135 -0
  108. package/.agent/skills/api-patterns/SKILL.md +117 -0
  109. package/.agent/skills/app-builder/SKILL.md +202 -0
  110. package/.agent/skills/architecture/SKILL.md +101 -0
  111. package/.agent/skills/behavioral-modes/SKILL.md +295 -0
  112. package/.agent/skills/brainstorming/SKILL.md +156 -0
  113. package/.agent/skills/clean-code/SKILL.md +142 -0
  114. package/.agent/skills/context-budget/SKILL.md +78 -0
  115. package/.agent/skills/continuous-learning/SKILL.md +145 -0
  116. package/.agent/skills/database-design/SKILL.md +303 -0
  117. package/.agent/skills/debugging-strategies/SKILL.md +158 -0
  118. package/.agent/skills/deployment-procedures/SKILL.md +191 -0
  119. package/.agent/skills/docker-patterns/SKILL.md +161 -0
  120. package/.agent/skills/eval-harness/SKILL.md +89 -0
  121. package/.agent/skills/frontend-patterns/SKILL.md +141 -0
  122. package/.agent/skills/git-workflow/SKILL.md +159 -0
  123. package/.agent/skills/i18n-localization/SKILL.md +191 -0
  124. package/.agent/skills/intelligent-routing/SKILL.md +180 -0
  125. package/.agent/skills/mcp-integration/SKILL.md +240 -0
  126. package/.agent/skills/mobile-design/SKILL.md +191 -0
  127. package/.agent/skills/nodejs-patterns/SKILL.md +164 -0
  128. package/.agent/skills/parallel-agents/SKILL.md +200 -0
  129. package/.agent/skills/performance-profiling/SKILL.md +134 -0
  130. package/.agent/skills/plan-validation/SKILL.md +192 -0
  131. package/.agent/skills/plan-writing/SKILL.md +183 -0
  132. package/.agent/skills/plan-writing/domain-enhancers.md +184 -0
  133. package/.agent/skills/plan-writing/plan-retrospective.md +116 -0
  134. package/.agent/skills/plan-writing/plan-schema.md +119 -0
  135. package/.agent/skills/pr-toolkit/SKILL.md +174 -0
  136. package/.agent/skills/production-readiness/SKILL.md +126 -0
  137. package/.agent/skills/security-practices/SKILL.md +109 -0
  138. package/.agent/skills/shell-conventions/SKILL.md +92 -0
  139. package/.agent/skills/strategic-compact/SKILL.md +62 -0
  140. package/.agent/skills/testing-patterns/SKILL.md +141 -0
  141. package/.agent/skills/typescript-expert/SKILL.md +160 -0
  142. package/.agent/skills/ui-ux-pro-max/SKILL.md +137 -0
  143. package/.agent/skills/ui-ux-pro-max/data/charts.csv +26 -0
  144. package/.agent/skills/ui-ux-pro-max/data/colors.csv +97 -0
  145. package/.agent/skills/ui-ux-pro-max/data/icons.csv +101 -0
  146. package/.agent/skills/ui-ux-pro-max/data/landing.csv +31 -0
  147. package/.agent/skills/ui-ux-pro-max/data/products.csv +97 -0
  148. package/.agent/skills/ui-ux-pro-max/data/react-performance.csv +45 -0
  149. package/.agent/skills/ui-ux-pro-max/data/stacks/astro.csv +54 -0
  150. package/.agent/skills/ui-ux-pro-max/data/stacks/flutter.csv +53 -0
  151. package/.agent/skills/ui-ux-pro-max/data/stacks/html-tailwind.csv +56 -0
  152. package/.agent/skills/ui-ux-pro-max/data/stacks/jetpack-compose.csv +53 -0
  153. package/.agent/skills/ui-ux-pro-max/data/stacks/nextjs.csv +53 -0
  154. package/.agent/skills/ui-ux-pro-max/data/stacks/nuxt-ui.csv +51 -0
  155. package/.agent/skills/ui-ux-pro-max/data/stacks/nuxtjs.csv +59 -0
  156. package/.agent/skills/ui-ux-pro-max/data/stacks/react-native.csv +52 -0
  157. package/.agent/skills/ui-ux-pro-max/data/stacks/react.csv +54 -0
  158. package/.agent/skills/ui-ux-pro-max/data/stacks/shadcn.csv +61 -0
  159. package/.agent/skills/ui-ux-pro-max/data/stacks/svelte.csv +54 -0
  160. package/.agent/skills/ui-ux-pro-max/data/stacks/swiftui.csv +51 -0
  161. package/.agent/skills/ui-ux-pro-max/data/stacks/vue.csv +50 -0
  162. package/.agent/skills/ui-ux-pro-max/data/styles.csv +68 -0
  163. package/.agent/skills/ui-ux-pro-max/data/typography.csv +58 -0
  164. package/.agent/skills/ui-ux-pro-max/data/ui-reasoning.csv +101 -0
  165. package/.agent/skills/ui-ux-pro-max/data/ux-guidelines.csv +100 -0
  166. package/.agent/skills/ui-ux-pro-max/data/web-interface.csv +31 -0
  167. package/.agent/skills/ui-ux-pro-max/scripts/core.py +253 -0
  168. package/.agent/skills/ui-ux-pro-max/scripts/design_system.py +1067 -0
  169. package/.agent/skills/ui-ux-pro-max/scripts/search.py +114 -0
  170. package/.agent/skills/verification-loop/SKILL.md +89 -0
  171. package/.agent/skills/webapp-testing/SKILL.md +175 -0
  172. package/.agent/templates/adr-template.md +32 -0
  173. package/.agent/templates/bug-report.md +37 -0
  174. package/.agent/templates/feature-request.md +32 -0
  175. package/.agent/workflows/README.md +101 -0
  176. package/.agent/workflows/brainstorm.md +86 -0
  177. package/.agent/workflows/create.md +85 -0
  178. package/.agent/workflows/debug.md +83 -0
  179. package/.agent/workflows/deploy.md +114 -0
  180. package/.agent/workflows/enhance.md +85 -0
  181. package/.agent/workflows/orchestrate.md +106 -0
  182. package/.agent/workflows/plan.md +105 -0
  183. package/.agent/workflows/pr-fix.md +163 -0
  184. package/.agent/workflows/pr-merge.md +117 -0
  185. package/.agent/workflows/pr-review.md +178 -0
  186. package/.agent/workflows/pr-split.md +118 -0
  187. package/.agent/workflows/pr.md +184 -0
  188. package/.agent/workflows/preflight.md +107 -0
  189. package/.agent/workflows/preview.md +95 -0
  190. package/.agent/workflows/quality-gate.md +103 -0
  191. package/.agent/workflows/retrospective.md +100 -0
  192. package/.agent/workflows/review.md +104 -0
  193. package/.agent/workflows/status.md +89 -0
  194. package/.agent/workflows/test.md +98 -0
  195. package/.agent/workflows/ui-ux-pro-max.md +93 -0
  196. package/.agent/workflows/upgrade.md +97 -0
  197. package/LICENSE +21 -0
  198. package/README.md +218 -0
  199. package/bin/kit.js +773 -0
  200. package/lib/agent-registry.js +228 -0
  201. package/lib/agent-reputation.js +343 -0
  202. package/lib/circuit-breaker.js +195 -0
  203. package/lib/cli-commands.js +322 -0
  204. package/lib/config-validator.js +274 -0
  205. package/lib/conflict-detector.js +252 -0
  206. package/lib/constants.js +47 -0
  207. package/lib/engineering-manager.js +336 -0
  208. package/lib/error-budget.js +370 -0
  209. package/lib/hook-system.js +256 -0
  210. package/lib/ide-generator.js +434 -0
  211. package/lib/identity.js +240 -0
  212. package/lib/io.js +146 -0
  213. package/lib/learning-engine.js +163 -0
  214. package/lib/loading-engine.js +421 -0
  215. package/lib/logger.js +118 -0
  216. package/lib/marketplace.js +321 -0
  217. package/lib/plugin-system.js +604 -0
  218. package/lib/plugin-verifier.js +197 -0
  219. package/lib/rate-limiter.js +113 -0
  220. package/lib/security-scanner.js +312 -0
  221. package/lib/self-healing.js +468 -0
  222. package/lib/session-manager.js +264 -0
  223. package/lib/skill-sandbox.js +244 -0
  224. package/lib/task-governance.js +522 -0
  225. package/lib/task-model.js +332 -0
  226. package/lib/updater.js +240 -0
  227. package/lib/verify.js +279 -0
  228. package/lib/workflow-engine.js +373 -0
  229. package/lib/workflow-events.js +166 -0
  230. package/lib/workflow-persistence.js +160 -0
  231. package/package.json +57 -0
@@ -0,0 +1,59 @@
1
+ ---
2
+ name: status
3
+ description: Display current session status and context
4
+ workflow: status
5
+ ---
6
+
7
+ # /status
8
+
9
+ > **Purpose**: Quick overview of current session state
10
+
11
+ ---
12
+
13
+ ## Usage
14
+
15
+ ```
16
+ /status
17
+ ```
18
+
19
+ ---
20
+
21
+ ## Behavior
22
+
23
+ 1. **Load Session State** from `session-state.json`
24
+ 2. **Check Git Status** - Current branch, uncommitted changes
25
+ 3. **Check Build Status** - Last build result
26
+ 4. **Display Context** - Current task, open items
27
+
28
+ ---
29
+
30
+ ## Output
31
+
32
+ ```markdown
33
+ ## Session Status
34
+
35
+ **Branch**: feature/auth
36
+ **Last Commit**: abc1234 - feat: add login form
37
+ **Uncommitted Changes**: 3 files
38
+
39
+ ## Current Task
40
+
41
+ [Current task description or "No active task"]
42
+
43
+ ## Open Items
44
+
45
+ - [x] Item 1
46
+ - [ ] Item 2
47
+
48
+ ## Quick Actions
49
+
50
+ - `/plan` - Create new plan
51
+ - `/verify` - Run verification
52
+ ```
53
+
54
+ ---
55
+
56
+ ## Related Commands
57
+
58
+ - `/checkpoint` - Save current state
59
+ - `/compact` - Manage context
@@ -0,0 +1,73 @@
1
+ ---
2
+ name: tdd
3
+ description: Start test-driven development workflow for a component
4
+ invokes: tdd-guide
5
+ workflow: test
6
+ ---
7
+
8
+ # /tdd
9
+
10
+ > **Purpose**: Enforce test-first development with RED-GREEN-REFACTOR cycle
11
+
12
+ ---
13
+
14
+ ## Usage
15
+
16
+ ```
17
+ /tdd [component/feature name]
18
+ ```
19
+
20
+ ## Examples
21
+
22
+ ```
23
+ /tdd UserService
24
+ /tdd AuthController login endpoint
25
+ /tdd calculateTotal utility function
26
+ ```
27
+
28
+ ---
29
+
30
+ ## Behavior
31
+
32
+ 1. **Invoke TDD Guide Agent**
33
+ 2. **Analyze Component** - Understand what to test
34
+ 3. **Write Failing Test** (RED) - Create test that fails
35
+ 4. **Verify Failure** - Run test, confirm it fails
36
+ 5. **Write Implementation** (GREEN) - Minimal code to pass
37
+ 6. **Verify Pass** - Run test, confirm it passes
38
+ 7. **Refactor** (IMPROVE) - Clean up while keeping tests green
39
+ 8. **Check Coverage** - Verify 80%+ achieved
40
+
41
+ ---
42
+
43
+ ## Output
44
+
45
+ ```markdown
46
+ ## TDD Session: UserService
47
+
48
+ ### RED Phase 🔴
49
+
50
+ Created test: `user.service.spec.ts`
51
+ Test status: FAILING ✓
52
+
53
+ ### GREEN Phase 🟢
54
+
55
+ Implementation: `user.service.ts`
56
+ Test status: PASSING ✓
57
+
58
+ ### Coverage
59
+
60
+ - Statements: 92%
61
+ - Branches: 85%
62
+ - Functions: 90%
63
+ - Lines: 92%
64
+
65
+ Status: ✅ TDD Complete
66
+ ```
67
+
68
+ ---
69
+
70
+ ## Related Commands
71
+
72
+ - `/verify` - Full verification loop
73
+ - `/code-review` - Review the implementation
@@ -0,0 +1,58 @@
1
+ ---
2
+ name: verify
3
+ description: Run full verification loop (build, lint, test, coverage)
4
+ invokes: verification-loop skill
5
+ ---
6
+
7
+ # /verify
8
+
9
+ > **Purpose**: Comprehensive quality verification before commit/deploy
10
+
11
+ ---
12
+
13
+ ## Usage
14
+
15
+ ```
16
+ /verify
17
+ /verify --fix # Auto-fix lint issues
18
+ ```
19
+
20
+ ---
21
+
22
+ ## Behavior
23
+
24
+ 1. **Build Check** - Compile TypeScript
25
+ 2. **Lint Check** - ESLint/Prettier
26
+ 3. **Type Check** - Strict TypeScript
27
+ 4. **Unit Tests** - All unit tests
28
+ 5. **Integration Tests** - API tests
29
+ 6. **Coverage Check** - 80%+ required
30
+ 7. **Security Scan** - Basic vulnerability check
31
+
32
+ ---
33
+
34
+ ## Output
35
+
36
+ ```markdown
37
+ ## Verification Report
38
+
39
+ | Check | Status | Time |
40
+ | :--------- | :----- | :--- |
41
+ | Build | ✅ | 2.3s |
42
+ | Lint | ✅ | 1.2s |
43
+ | Types | ✅ | 3.1s |
44
+ | Unit Tests | ✅ | 8.5s |
45
+ | Coverage | ✅ 92% | - |
46
+ | Security | ✅ | 1.0s |
47
+
48
+ **Overall**: ✅ PASS
49
+
50
+ Ready to commit!
51
+ ```
52
+
53
+ ---
54
+
55
+ ## Related Commands
56
+
57
+ - `/security-scan` - Deep security audit
58
+ - `/code-review` - Manual code review
@@ -0,0 +1,26 @@
1
+ ---
2
+ mode: brainstorm
3
+ description: "Ideas-only exploration mode — Socratic discovery without implementation"
4
+ constraints: [no-code, no-modifications, socratic-only]
5
+ agent-focus: [planner, explorer-agent]
6
+ ---
7
+
8
+ # Brainstorm Mode Context
9
+
10
+ ## Behavioral Rules
11
+
12
+ - Generate ideas and alternatives only — never write code
13
+ - Ask Socratic questions to clarify requirements
14
+ - Present minimum 3 options for every decision point
15
+ - Support each option with evidence or industry precedent
16
+ - Never commit to a single approach without user confirmation
17
+
18
+ ## Loaded Skills
19
+
20
+ - `brainstorming` — Socratic discovery protocol
21
+
22
+ ## Exit Criteria
23
+
24
+ - Requirements are clarified with concrete acceptance criteria
25
+ - At least 3 viable approaches documented with trade-offs
26
+ - User selects preferred approach for planning phase
@@ -0,0 +1,28 @@
1
+ ---
2
+ mode: debug
3
+ description: "Systematic investigation mode — minimal changes, preserve evidence"
4
+ constraints: [evidence-first, minimal-changes, root-cause-required]
5
+ agent-focus: [build-error-resolver, tdd-guide]
6
+ ---
7
+
8
+ # Debug Mode Context
9
+
10
+ ## Behavioral Rules
11
+
12
+ - Identify root cause before applying any fix
13
+ - Preserve all evidence (logs, stack traces, reproduction steps)
14
+ - Make minimal, surgical changes — one fix per iteration
15
+ - Always verify the fix resolves the original issue
16
+ - Add regression tests to prevent recurrence
17
+
18
+ ## Loaded Skills
19
+
20
+ - `debugging-strategies` — Systematic hypothesis testing
21
+ - `testing-patterns` — Regression test creation
22
+
23
+ ## Exit Criteria
24
+
25
+ - Root cause identified and documented
26
+ - Fix applied with minimal code changes
27
+ - Regression test added and passing
28
+ - No new issues introduced (full test suite passes)
@@ -0,0 +1,29 @@
1
+ ---
2
+ mode: implement
3
+ description: "Code-focused execution mode — follow approved plan, build incrementally"
4
+ constraints: [plan-required, incremental-commits, tests-mandatory]
5
+ agent-focus: [architect, tdd-guide, code-reviewer]
6
+ ---
7
+
8
+ # Implement Mode Context
9
+
10
+ ## Behavioral Rules
11
+
12
+ - Follow the approved implementation plan step-by-step
13
+ - Write code that passes existing tests and adds new ones
14
+ - Commit incrementally — one logical change per commit
15
+ - Do not deviate from the plan without explicit user approval
16
+ - Apply project conventions and coding standards strictly
17
+
18
+ ## Loaded Skills
19
+
20
+ - `clean-code` — Code quality principles
21
+ - `testing-patterns` — TDD and test structure
22
+ - `architecture` — System design patterns
23
+
24
+ ## Exit Criteria
25
+
26
+ - All plan steps completed
27
+ - All tests pass (existing + new)
28
+ - Build succeeds without errors
29
+ - Code reviewed for quality standards
@@ -0,0 +1,30 @@
1
+ # Plan Quality Log
2
+
3
+ > Persistent record of plan accuracy and learnings.
4
+ > Read by the planner agent at planning time to improve future plans.
5
+ > Updated by the plan-retrospective after each planned task completes.
6
+
7
+ ---
8
+
9
+ ## Log
10
+
11
+ | Date | Plan | Quality Score | Files Predicted | Files Actual | Surprises | Estimate Drift | Key Learning |
12
+ |------|------|--------------|-----------------|--------------|-----------|----------------|--------------|
13
+
14
+ ---
15
+
16
+ ## Aggregate Insights
17
+
18
+ > This section is updated periodically to summarize patterns across multiple retrospectives.
19
+
20
+ ### Common Surprise File Patterns
21
+
22
+ *No data yet — will populate after first retrospective.*
23
+
24
+ ### Estimate Drift Trends
25
+
26
+ *No data yet — will populate after first retrospective.*
27
+
28
+ ### Risk Prediction Accuracy
29
+
30
+ *No data yet — will populate after first retrospective.*
@@ -0,0 +1,27 @@
1
+ ---
2
+ mode: review
3
+ description: "Quality-focused critical analysis mode — verify standards compliance"
4
+ constraints: [critical-lens, no-bias, evidence-based]
5
+ agent-focus: [code-reviewer, security-reviewer]
6
+ ---
7
+
8
+ # Review Mode Context
9
+
10
+ ## Behavioral Rules
11
+
12
+ - Apply critical lens — assume nothing is correct until verified
13
+ - Check against all quality gates (lint, types, tests, security)
14
+ - No defense bias — report issues objectively regardless of author
15
+ - Classify findings by severity (CRITICAL / HIGH / MEDIUM / LOW)
16
+ - Block deployment for any CRITICAL or HIGH severity issue
17
+
18
+ ## Loaded Skills
19
+
20
+ - `verification-loop` — Sequential quality gate pipeline
21
+ - `security-practices` — OWASP vulnerability checks
22
+
23
+ ## Exit Criteria
24
+
25
+ - All quality gates pass (lint, type-check, tests, security)
26
+ - All CRITICAL and HIGH issues resolved
27
+ - Review report generated with verdict (APPROVE / BLOCK / WARNING)
@@ -0,0 +1,28 @@
1
+ ---
2
+ mode: ship
3
+ description: "Deployment-focused risk-aware mode — pre-flight checks, monitoring, rollback readiness"
4
+ constraints: [rollback-plan-required, health-check-mandatory, no-friday-deploys]
5
+ agent-focus: [devops-engineer, reliability-engineer]
6
+ ---
7
+
8
+ # Ship Mode Context
9
+
10
+ ## Behavioral Rules
11
+
12
+ - Verify all pre-flight checks pass before any deployment
13
+ - Require a documented rollback plan for every deploy
14
+ - Monitor health checks for minimum 15 minutes post-deploy
15
+ - No deployments on Fridays unless critical hotfix
16
+ - Follow the Production Merge Discipline from global rules
17
+
18
+ ## Loaded Skills
19
+
20
+ - `deployment-procedures` — CI/CD workflows and rollback strategies
21
+
22
+ ## Exit Criteria
23
+
24
+ - All pre-flight checks pass (tests, build, security, env vars)
25
+ - Rollback plan documented and verified
26
+ - Deployment executed successfully
27
+ - Health checks pass for observation period
28
+ - No error spikes in monitoring
@@ -0,0 +1,46 @@
1
+ # ADR-001: Trust-Grade Governance Model
2
+
3
+ ## Status
4
+
5
+ **Accepted** — 2025-12-01
6
+
7
+ ## Context
8
+
9
+ Devran AI Kit needed a governance philosophy that would ensure AI-assisted development remains safe, predictable, and aligned with engineering best practices. Without formal constraints, AI agents may produce technically correct but architecturally misaligned solutions, bypass security practices, or make decisions that optimize for speed over stability.
10
+
11
+ ## Decision
12
+
13
+ We adopted the **Trust-Grade Governance Model** with the following immutable constraints:
14
+
15
+ | Priority | Principle | Meaning |
16
+ |:---------|:----------|:--------|
17
+ | 1 | Trust > Speed | Never sacrifice user trust for faster delivery |
18
+ | 2 | Completion > Suggestion | Finish current work before proposing new work |
19
+ | 3 | Consistency > Speed | Update all affected files, not just the target |
20
+ | 4 | Explainability > Performance | Understandable decisions beat clever shortcuts |
21
+ | 5 | Safety > Growth | Never compromise security, data privacy, or stability |
22
+
23
+ These principles are enforced through:
24
+ - **rules.md**: The binding identity contract loaded at every session
25
+ - **Session management**: State tracked across sessions via `session-context.md` and `session-state.json`
26
+ - **Checklists**: Pre/post session quality gates
27
+ - **Hooks**: Event-driven automation for enforcement
28
+
29
+ ## Consequences
30
+
31
+ ### Positive
32
+ - Consistent AI behavior across sessions and projects
33
+ - Security-by-default through principle ordering
34
+ - Predictable decision-making under ambiguity
35
+ - Maintainable codebase through Consistency > Speed
36
+
37
+ ### Negative
38
+ - Slower initial response time (context loading)
39
+ - Higher token usage per session (governance overhead)
40
+ - May feel restrictive for rapid prototyping scenarios
41
+
42
+ ## Alternatives Considered
43
+
44
+ 1. **No governance** — Pure LLM default behavior. Rejected due to inconsistency and safety risks.
45
+ 2. **Permission-based** — Ask user for every decision. Rejected due to excessive friction.
46
+ 3. **Role-based** — Different governance per agent. Rejected due to complexity of maintaining cross-agent consistency.
@@ -0,0 +1,15 @@
1
+ # ADR-002: Cross-IDE Configuration Generation
2
+
3
+ ## Status: Accepted
4
+
5
+ ## Context
6
+ Kit v4.0.0 only supported Claude Code via `.agent/`. Users of Cursor, OpenCode, and Codex had no native integration.
7
+
8
+ ## Decision
9
+ Generate IDE-specific configs at `kit init` time from `manifest.json` (single source of truth). Configs live outside `.agent/` in native IDE directories.
10
+
11
+ ## Consequences
12
+ - One command configures all IDEs
13
+ - Configs stay in sync with manifest
14
+ - Non-destructive: existing IDE dirs are preserved unless --force
15
+ - IDE configs are gitignored by default (generated, not source)
@@ -0,0 +1,4 @@
1
+ {
2
+ "developers": [],
3
+ "activeId": null
4
+ }
@@ -0,0 +1,193 @@
1
+ {
2
+ "schemaVersion": "1.0.0",
3
+ "defaultLoad": [
4
+ "rules.md",
5
+ "manifest.json",
6
+ "engine/workflow-state.json"
7
+ ],
8
+ "sessionLoad": [
9
+ "session-context.md",
10
+ "session-state.json"
11
+ ],
12
+ "domainRules": [
13
+ {
14
+ "domain": "security",
15
+ "keywords": ["auth", "security", "vulnerability", "password", "jwt", "oauth", "cors", "xss", "csrf", "injection"],
16
+ "implicitTriggers": [
17
+ "login", "signup", "register", "form", "payment", "checkout",
18
+ "user data", "profile", "upload", "download", "admin", "dashboard",
19
+ "permission", "role", "token", "session", "cookie"
20
+ ],
21
+ "loadAgents": ["security-reviewer"],
22
+ "loadSkills": ["security-practices"]
23
+ },
24
+ {
25
+ "domain": "testing",
26
+ "keywords": ["test", "coverage", "e2e", "playwright", "jest", "vitest", "tdd", "unit test", "integration test"],
27
+ "loadAgents": ["tdd-guide", "e2e-runner"],
28
+ "loadSkills": ["testing-patterns", "webapp-testing"]
29
+ },
30
+ {
31
+ "domain": "architecture",
32
+ "keywords": ["design", "structure", "pattern", "ddd", "hexagonal", "layer", "module", "monolith", "microservice"],
33
+ "loadAgents": ["architect"],
34
+ "loadSkills": ["architecture", "clean-code"]
35
+ },
36
+ {
37
+ "domain": "frontend",
38
+ "keywords": ["react", "next.js", "vue", "component", "css", "styling", "responsive", "a11y", "accessibility", "ui", "ux"],
39
+ "implicitTriggers": ["button", "modal", "form field", "dropdown", "navigation bar", "sidebar", "theme", "dark mode", "animation", "transition", "layout", "grid", "flexbox", "tailwind", "styled"],
40
+ "loadAgents": ["frontend-specialist"],
41
+ "loadSkills": ["frontend-patterns", "mobile-design"]
42
+ },
43
+ {
44
+ "domain": "backend",
45
+ "keywords": ["api", "server", "node", "nestjs", "express", "middleware", "rest", "graphql", "endpoint"],
46
+ "implicitTriggers": ["route", "controller", "service layer", "webhook", "queue", "worker", "cron", "batch", "rate limit", "pagination", "validation"],
47
+ "loadAgents": ["backend-specialist"],
48
+ "loadSkills": ["api-patterns", "nodejs-patterns"]
49
+ },
50
+ {
51
+ "domain": "database",
52
+ "keywords": ["database", "sql", "postgresql", "prisma", "migration", "schema", "query", "orm", "redis"],
53
+ "implicitTriggers": ["table", "column", "index", "foreign key", "transaction", "connection pool", "backup", "replica", "sharding", "partition"],
54
+ "loadAgents": ["database-architect"],
55
+ "loadSkills": ["database-design"]
56
+ },
57
+ {
58
+ "domain": "devops",
59
+ "keywords": ["deploy", "ci", "cd", "docker", "kubernetes", "railway", "vercel", "github actions", "pipeline", "terraform", "gitops", "canary", "helm"],
60
+ "implicitTriggers": ["environment variable", "container", "image", "registry", "rollback", "blue-green", "feature flag", "infrastructure"],
61
+ "loadAgents": ["devops-engineer"],
62
+ "loadSkills": ["docker-patterns", "deployment-procedures"]
63
+ },
64
+ {
65
+ "domain": "performance",
66
+ "keywords": ["slow", "optimize", "speed", "bundle", "lighthouse", "web vitals", "lcp", "cls", "fid", "cache", "cdn", "latency", "p99", "tracing"],
67
+ "loadAgents": ["performance-optimizer"],
68
+ "loadSkills": ["performance-profiling"]
69
+ },
70
+ {
71
+ "domain": "reliability",
72
+ "keywords": ["reliability", "uptime", "monitoring", "sre", "sla", "slo", "sli", "incident", "chaos", "resilience", "error-budget", "golden-signals", "on-call", "capacity"],
73
+ "loadAgents": ["reliability-engineer"],
74
+ "loadSkills": []
75
+ },
76
+ {
77
+ "domain": "observability",
78
+ "keywords": ["logging", "tracing", "metrics", "monitoring", "alerting", "opentelemetry", "grafana", "prometheus", "datadog", "observability", "dashboard"],
79
+ "loadAgents": ["reliability-engineer", "devops-engineer"],
80
+ "loadSkills": []
81
+ },
82
+ {
83
+ "domain": "mobile",
84
+ "keywords": ["mobile", "react native", "expo", "ios", "android", "app store", "native"],
85
+ "loadAgents": ["mobile-developer"],
86
+ "loadSkills": ["mobile-design"]
87
+ },
88
+ {
89
+ "domain": "documentation",
90
+ "keywords": ["docs", "readme", "document", "api docs", "jsdoc", "changelog", "adr", "decision record", "knowledge"],
91
+ "loadAgents": ["doc-updater", "knowledge-agent"],
92
+ "loadSkills": []
93
+ },
94
+ {
95
+ "domain": "planning",
96
+ "keywords": ["plan", "roadmap", "sprint", "milestone", "task", "breakdown", "estimate"],
97
+ "loadAgents": ["planner", "sprint-orchestrator"],
98
+ "loadSkills": ["plan-writing", "brainstorming"]
99
+ },
100
+ {
101
+ "domain": "debugging",
102
+ "keywords": ["bug", "error", "fix", "crash", "exception", "stack trace", "not working"],
103
+ "loadAgents": ["build-error-resolver"],
104
+ "loadSkills": ["debugging-strategies"]
105
+ },
106
+ {
107
+ "domain": "refactoring",
108
+ "keywords": ["refactor", "clean", "improve", "dead code", "technical debt", "simplify"],
109
+ "loadAgents": ["refactor-cleaner"],
110
+ "loadSkills": ["clean-code"]
111
+ },
112
+ {
113
+ "domain": "typescript",
114
+ "keywords": ["typescript", "ts", "type safety", "tsconfig", "tsc", "generics", "type guard", "discriminated union"],
115
+ "loadAgents": ["typescript-reviewer"],
116
+ "loadSkills": ["typescript-expert"]
117
+ },
118
+ {
119
+ "domain": "python",
120
+ "keywords": ["python", "django", "flask", "fastapi", "pep8", "mypy", "pytest", "asyncio", "pydantic"],
121
+ "loadAgents": ["python-reviewer"],
122
+ "loadSkills": []
123
+ },
124
+ {
125
+ "domain": "golang",
126
+ "keywords": ["go", "golang", "goroutine", "channel", "context", "errgroup", "go mod", "staticcheck"],
127
+ "loadAgents": ["go-reviewer"],
128
+ "loadSkills": []
129
+ }
130
+ ],
131
+ "contextBudget": {
132
+ "maxAgentsPerSession": 4,
133
+ "maxSkillsPerSession": 8,
134
+ "warningThresholdPercent": 80,
135
+ "description": "Limits prevent context overflow. The kit selects only domain-relevant agents and skills for each task, keeping within the LLM context window."
136
+ },
137
+ "workflowBindings": [
138
+ { "workflow": "brainstorm", "loadAgents": [], "loadSkills": ["brainstorming"], "bindingType": "inferred" },
139
+ { "workflow": "quality-gate", "loadAgents": [], "loadSkills": ["brainstorming"], "loadRules": ["quality-gate"], "bindingType": "inferred" },
140
+ { "workflow": "plan", "loadAgents": ["planner"], "loadSkills": ["plan-writing", "brainstorming", "plan-validation"], "bindingType": "explicit" },
141
+ { "workflow": "create", "loadAgents": [], "loadSkills": ["app-builder", "clean-code"], "bindingType": "inferred" },
142
+ { "workflow": "enhance", "loadAgents": [], "loadSkills": ["clean-code", "testing-patterns"], "bindingType": "inferred" },
143
+ { "workflow": "preview", "loadAgents": [], "loadSkills": ["shell-conventions"], "bindingType": "inferred" },
144
+ { "workflow": "ui-ux-pro-max", "loadAgents": [], "loadSkills": ["ui-ux-pro-max", "frontend-patterns", "mobile-design"], "bindingType": "inferred" },
145
+ { "workflow": "test", "loadAgents": [], "loadSkills": ["testing-patterns", "webapp-testing"], "bindingType": "inferred" },
146
+ { "workflow": "review", "loadAgents": [], "loadSkills": ["verification-loop"], "bindingType": "inferred" },
147
+ { "workflow": "pr", "loadAgents": ["pr-reviewer"], "loadSkills": ["git-workflow", "pr-toolkit", "verification-loop"], "bindingType": "explicit" },
148
+ { "workflow": "pr-review", "loadAgents": ["pr-reviewer"], "loadSkills": ["pr-toolkit", "verification-loop"], "bindingType": "explicit" },
149
+ { "workflow": "pr-fix", "loadAgents": ["pr-reviewer"], "loadSkills": ["pr-toolkit", "verification-loop"], "bindingType": "explicit" },
150
+ { "workflow": "pr-merge", "loadAgents": ["pr-reviewer"], "loadSkills": ["pr-toolkit", "verification-loop"], "bindingType": "explicit" },
151
+ { "workflow": "pr-split", "loadAgents": ["pr-reviewer"], "loadSkills": ["pr-toolkit"], "bindingType": "explicit" },
152
+ { "workflow": "deploy", "loadAgents": [], "loadSkills": ["deployment-procedures"], "bindingType": "inferred" },
153
+ { "workflow": "debug", "loadAgents": [], "loadSkills": ["debugging-strategies"], "bindingType": "inferred" },
154
+ {
155
+ "workflow": "orchestrate",
156
+ "loadAgents": ["planner", "explorer-agent"],
157
+ "loadSkills": ["parallel-agents", "intelligent-routing"],
158
+ "bindingType": "explicit",
159
+ "dynamicAgentPool": ["architect", "backend-specialist", "frontend-specialist", "mobile-developer", "database-architect", "security-reviewer", "tdd-guide", "e2e-runner", "devops-engineer", "performance-optimizer", "reliability-engineer", "refactor-cleaner", "code-reviewer", "typescript-reviewer", "python-reviewer", "go-reviewer"]
160
+ },
161
+ { "workflow": "retrospective", "loadAgents": [], "loadSkills": ["verification-loop"], "bindingType": "inferred" },
162
+ { "workflow": "status", "loadAgents": [], "loadSkills": ["verification-loop"], "bindingType": "inferred" }
163
+ ],
164
+ "planningMandates": {
165
+ "description": "Mandatory resources loaded for every /plan invocation regardless of keyword matching. Ensures cross-cutting concerns are never omitted.",
166
+ "alwaysLoadRules": ["security", "testing", "coding-style", "documentation", "architecture"],
167
+ "alwaysLoadSkills": ["security-practices", "testing-patterns"],
168
+ "crossCuttingSections": [
169
+ "security-considerations",
170
+ "testing-strategy",
171
+ "rollback-strategy",
172
+ "documentation-updates"
173
+ ],
174
+ "specialistContributors": {
175
+ "architect": {
176
+ "contributes": "architecture-impact",
177
+ "triggerWhen": "medium-or-large-task"
178
+ },
179
+ "security-reviewer": {
180
+ "contributes": "threat-assessment",
181
+ "triggerWhen": "medium-or-large-task",
182
+ "crossCuttingAlways": true,
183
+ "note": "Cross-cutting security section (Tier 1) is always required via rule consultation. Full specialist invocation with STRIDE model is for Medium+ tasks."
184
+ },
185
+ "tdd-guide": {
186
+ "contributes": "test-strategy",
187
+ "triggerWhen": "medium-or-large-task",
188
+ "crossCuttingAlways": true,
189
+ "note": "Cross-cutting testing section (Tier 1) is always required via rule consultation. Full specialist invocation with test matrix is for Medium+ tasks."
190
+ }
191
+ }
192
+ }
193
+ }
@@ -0,0 +1,29 @@
1
+ {
2
+ "entries": [
3
+ {
4
+ "name": "ag-skill-docker-compose",
5
+ "description": "Docker Compose orchestration skill for multi-container deployments",
6
+ "repository": "https://github.com/devran-ai/ag-skill-docker-compose",
7
+ "version": "1.0.0",
8
+ "tags": ["docker", "compose", "containers", "deployment", "devops"],
9
+ "author": "devran-ai"
10
+ },
11
+ {
12
+ "name": "ag-skill-graphql-designer",
13
+ "description": "GraphQL schema design and query generation skill",
14
+ "repository": "https://github.com/devran-ai/ag-skill-graphql-designer",
15
+ "version": "0.9.0",
16
+ "tags": ["graphql", "api", "schema", "design", "queries"],
17
+ "author": "devran-ai"
18
+ },
19
+ {
20
+ "name": "ag-skill-accessibility-audit",
21
+ "description": "WCAG compliance auditing and remediation suggestions",
22
+ "repository": "https://github.com/devran-ai/ag-skill-accessibility-audit",
23
+ "version": "1.1.0",
24
+ "tags": ["accessibility", "wcag", "a11y", "audit", "compliance"],
25
+ "author": "devran-ai"
26
+ }
27
+ ],
28
+ "lastUpdated": null
29
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "name": "filesystem",
3
+ "description": "Local filesystem — read, write, search, directory listing",
4
+ "transport": "stdio",
5
+ "command": "npx",
6
+ "args": ["-y", "@modelcontextprotocol/server-filesystem", "${PROJECT_ROOT}"],
7
+ "env": {},
8
+ "capabilities": ["read", "write", "search", "directory-listing"]
9
+ }