@devran-ai/kit 4.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (231) hide show
  1. package/.agent/CheatSheet.md +350 -0
  2. package/.agent/README.md +76 -0
  3. package/.agent/agents/README.md +155 -0
  4. package/.agent/agents/architect.md +185 -0
  5. package/.agent/agents/backend-specialist.md +276 -0
  6. package/.agent/agents/build-error-resolver.md +207 -0
  7. package/.agent/agents/code-reviewer.md +162 -0
  8. package/.agent/agents/database-architect.md +138 -0
  9. package/.agent/agents/devops-engineer.md +144 -0
  10. package/.agent/agents/doc-updater.md +229 -0
  11. package/.agent/agents/e2e-runner.md +145 -0
  12. package/.agent/agents/explorer-agent.md +143 -0
  13. package/.agent/agents/frontend-specialist.md +144 -0
  14. package/.agent/agents/go-reviewer.md +128 -0
  15. package/.agent/agents/knowledge-agent.md +197 -0
  16. package/.agent/agents/mobile-developer.md +150 -0
  17. package/.agent/agents/performance-optimizer.md +175 -0
  18. package/.agent/agents/planner.md +133 -0
  19. package/.agent/agents/pr-reviewer.md +148 -0
  20. package/.agent/agents/python-reviewer.md +123 -0
  21. package/.agent/agents/refactor-cleaner.md +201 -0
  22. package/.agent/agents/reliability-engineer.md +156 -0
  23. package/.agent/agents/security-reviewer.md +141 -0
  24. package/.agent/agents/sprint-orchestrator.md +124 -0
  25. package/.agent/agents/tdd-guide.md +179 -0
  26. package/.agent/agents/typescript-reviewer.md +110 -0
  27. package/.agent/checklists/README.md +102 -0
  28. package/.agent/checklists/pre-commit.md +93 -0
  29. package/.agent/checklists/session-end.md +99 -0
  30. package/.agent/checklists/session-start.md +102 -0
  31. package/.agent/checklists/task-complete.md +81 -0
  32. package/.agent/commands/README.md +130 -0
  33. package/.agent/commands/adr.md +29 -0
  34. package/.agent/commands/ask.md +28 -0
  35. package/.agent/commands/build.md +30 -0
  36. package/.agent/commands/changelog.md +40 -0
  37. package/.agent/commands/checkpoint.md +28 -0
  38. package/.agent/commands/code-review.md +65 -0
  39. package/.agent/commands/compact.md +28 -0
  40. package/.agent/commands/cook.md +30 -0
  41. package/.agent/commands/db.md +30 -0
  42. package/.agent/commands/debug.md +31 -0
  43. package/.agent/commands/deploy.md +37 -0
  44. package/.agent/commands/design.md +29 -0
  45. package/.agent/commands/doc.md +30 -0
  46. package/.agent/commands/eval.md +30 -0
  47. package/.agent/commands/fix.md +32 -0
  48. package/.agent/commands/git.md +32 -0
  49. package/.agent/commands/help.md +273 -0
  50. package/.agent/commands/implement.md +30 -0
  51. package/.agent/commands/integrate.md +32 -0
  52. package/.agent/commands/learn.md +29 -0
  53. package/.agent/commands/perf.md +31 -0
  54. package/.agent/commands/plan.md +56 -0
  55. package/.agent/commands/pr-describe.md +65 -0
  56. package/.agent/commands/pr-fix.md +45 -0
  57. package/.agent/commands/pr-merge.md +45 -0
  58. package/.agent/commands/pr-review.md +50 -0
  59. package/.agent/commands/pr-split.md +54 -0
  60. package/.agent/commands/pr-status.md +56 -0
  61. package/.agent/commands/pr.md +58 -0
  62. package/.agent/commands/refactor.md +32 -0
  63. package/.agent/commands/research.md +28 -0
  64. package/.agent/commands/scout.md +30 -0
  65. package/.agent/commands/security-scan.md +33 -0
  66. package/.agent/commands/setup.md +31 -0
  67. package/.agent/commands/status.md +59 -0
  68. package/.agent/commands/tdd.md +73 -0
  69. package/.agent/commands/verify.md +58 -0
  70. package/.agent/contexts/brainstorm.md +26 -0
  71. package/.agent/contexts/debug.md +28 -0
  72. package/.agent/contexts/implement.md +29 -0
  73. package/.agent/contexts/plan-quality-log.md +30 -0
  74. package/.agent/contexts/review.md +27 -0
  75. package/.agent/contexts/ship.md +28 -0
  76. package/.agent/decisions/001-trust-grade-governance.md +46 -0
  77. package/.agent/decisions/002-cross-ide-generation.md +15 -0
  78. package/.agent/engine/identity.json +4 -0
  79. package/.agent/engine/loading-rules.json +193 -0
  80. package/.agent/engine/marketplace-index.json +29 -0
  81. package/.agent/engine/mcp-servers/filesystem.json +9 -0
  82. package/.agent/engine/mcp-servers/github.json +11 -0
  83. package/.agent/engine/mcp-servers/postgres.json +11 -0
  84. package/.agent/engine/mcp-servers/supabase.json +11 -0
  85. package/.agent/engine/mcp-servers/vercel.json +11 -0
  86. package/.agent/engine/reliability-config.json +14 -0
  87. package/.agent/engine/sdlc-map.json +50 -0
  88. package/.agent/engine/workflow-state.json +167 -0
  89. package/.agent/hooks/README.md +101 -0
  90. package/.agent/hooks/hooks.json +104 -0
  91. package/.agent/hooks/templates/session-end.md +110 -0
  92. package/.agent/hooks/templates/session-start.md +95 -0
  93. package/.agent/manifest.json +466 -0
  94. package/.agent/rules/agent-upgrade-policy.md +56 -0
  95. package/.agent/rules/architecture.md +111 -0
  96. package/.agent/rules/coding-style.md +75 -0
  97. package/.agent/rules/documentation.md +74 -0
  98. package/.agent/rules/git-workflow.md +140 -0
  99. package/.agent/rules/quality-gate.md +117 -0
  100. package/.agent/rules/security.md +67 -0
  101. package/.agent/rules/sprint-tracking.md +103 -0
  102. package/.agent/rules/testing.md +80 -0
  103. package/.agent/rules/workflow-standards.md +30 -0
  104. package/.agent/rules.md +293 -0
  105. package/.agent/session-context.md +69 -0
  106. package/.agent/session-state.json +27 -0
  107. package/.agent/skills/README.md +135 -0
  108. package/.agent/skills/api-patterns/SKILL.md +117 -0
  109. package/.agent/skills/app-builder/SKILL.md +202 -0
  110. package/.agent/skills/architecture/SKILL.md +101 -0
  111. package/.agent/skills/behavioral-modes/SKILL.md +295 -0
  112. package/.agent/skills/brainstorming/SKILL.md +156 -0
  113. package/.agent/skills/clean-code/SKILL.md +142 -0
  114. package/.agent/skills/context-budget/SKILL.md +78 -0
  115. package/.agent/skills/continuous-learning/SKILL.md +145 -0
  116. package/.agent/skills/database-design/SKILL.md +303 -0
  117. package/.agent/skills/debugging-strategies/SKILL.md +158 -0
  118. package/.agent/skills/deployment-procedures/SKILL.md +191 -0
  119. package/.agent/skills/docker-patterns/SKILL.md +161 -0
  120. package/.agent/skills/eval-harness/SKILL.md +89 -0
  121. package/.agent/skills/frontend-patterns/SKILL.md +141 -0
  122. package/.agent/skills/git-workflow/SKILL.md +159 -0
  123. package/.agent/skills/i18n-localization/SKILL.md +191 -0
  124. package/.agent/skills/intelligent-routing/SKILL.md +180 -0
  125. package/.agent/skills/mcp-integration/SKILL.md +240 -0
  126. package/.agent/skills/mobile-design/SKILL.md +191 -0
  127. package/.agent/skills/nodejs-patterns/SKILL.md +164 -0
  128. package/.agent/skills/parallel-agents/SKILL.md +200 -0
  129. package/.agent/skills/performance-profiling/SKILL.md +134 -0
  130. package/.agent/skills/plan-validation/SKILL.md +192 -0
  131. package/.agent/skills/plan-writing/SKILL.md +183 -0
  132. package/.agent/skills/plan-writing/domain-enhancers.md +184 -0
  133. package/.agent/skills/plan-writing/plan-retrospective.md +116 -0
  134. package/.agent/skills/plan-writing/plan-schema.md +119 -0
  135. package/.agent/skills/pr-toolkit/SKILL.md +174 -0
  136. package/.agent/skills/production-readiness/SKILL.md +126 -0
  137. package/.agent/skills/security-practices/SKILL.md +109 -0
  138. package/.agent/skills/shell-conventions/SKILL.md +92 -0
  139. package/.agent/skills/strategic-compact/SKILL.md +62 -0
  140. package/.agent/skills/testing-patterns/SKILL.md +141 -0
  141. package/.agent/skills/typescript-expert/SKILL.md +160 -0
  142. package/.agent/skills/ui-ux-pro-max/SKILL.md +137 -0
  143. package/.agent/skills/ui-ux-pro-max/data/charts.csv +26 -0
  144. package/.agent/skills/ui-ux-pro-max/data/colors.csv +97 -0
  145. package/.agent/skills/ui-ux-pro-max/data/icons.csv +101 -0
  146. package/.agent/skills/ui-ux-pro-max/data/landing.csv +31 -0
  147. package/.agent/skills/ui-ux-pro-max/data/products.csv +97 -0
  148. package/.agent/skills/ui-ux-pro-max/data/react-performance.csv +45 -0
  149. package/.agent/skills/ui-ux-pro-max/data/stacks/astro.csv +54 -0
  150. package/.agent/skills/ui-ux-pro-max/data/stacks/flutter.csv +53 -0
  151. package/.agent/skills/ui-ux-pro-max/data/stacks/html-tailwind.csv +56 -0
  152. package/.agent/skills/ui-ux-pro-max/data/stacks/jetpack-compose.csv +53 -0
  153. package/.agent/skills/ui-ux-pro-max/data/stacks/nextjs.csv +53 -0
  154. package/.agent/skills/ui-ux-pro-max/data/stacks/nuxt-ui.csv +51 -0
  155. package/.agent/skills/ui-ux-pro-max/data/stacks/nuxtjs.csv +59 -0
  156. package/.agent/skills/ui-ux-pro-max/data/stacks/react-native.csv +52 -0
  157. package/.agent/skills/ui-ux-pro-max/data/stacks/react.csv +54 -0
  158. package/.agent/skills/ui-ux-pro-max/data/stacks/shadcn.csv +61 -0
  159. package/.agent/skills/ui-ux-pro-max/data/stacks/svelte.csv +54 -0
  160. package/.agent/skills/ui-ux-pro-max/data/stacks/swiftui.csv +51 -0
  161. package/.agent/skills/ui-ux-pro-max/data/stacks/vue.csv +50 -0
  162. package/.agent/skills/ui-ux-pro-max/data/styles.csv +68 -0
  163. package/.agent/skills/ui-ux-pro-max/data/typography.csv +58 -0
  164. package/.agent/skills/ui-ux-pro-max/data/ui-reasoning.csv +101 -0
  165. package/.agent/skills/ui-ux-pro-max/data/ux-guidelines.csv +100 -0
  166. package/.agent/skills/ui-ux-pro-max/data/web-interface.csv +31 -0
  167. package/.agent/skills/ui-ux-pro-max/scripts/core.py +253 -0
  168. package/.agent/skills/ui-ux-pro-max/scripts/design_system.py +1067 -0
  169. package/.agent/skills/ui-ux-pro-max/scripts/search.py +114 -0
  170. package/.agent/skills/verification-loop/SKILL.md +89 -0
  171. package/.agent/skills/webapp-testing/SKILL.md +175 -0
  172. package/.agent/templates/adr-template.md +32 -0
  173. package/.agent/templates/bug-report.md +37 -0
  174. package/.agent/templates/feature-request.md +32 -0
  175. package/.agent/workflows/README.md +101 -0
  176. package/.agent/workflows/brainstorm.md +86 -0
  177. package/.agent/workflows/create.md +85 -0
  178. package/.agent/workflows/debug.md +83 -0
  179. package/.agent/workflows/deploy.md +114 -0
  180. package/.agent/workflows/enhance.md +85 -0
  181. package/.agent/workflows/orchestrate.md +106 -0
  182. package/.agent/workflows/plan.md +105 -0
  183. package/.agent/workflows/pr-fix.md +163 -0
  184. package/.agent/workflows/pr-merge.md +117 -0
  185. package/.agent/workflows/pr-review.md +178 -0
  186. package/.agent/workflows/pr-split.md +118 -0
  187. package/.agent/workflows/pr.md +184 -0
  188. package/.agent/workflows/preflight.md +107 -0
  189. package/.agent/workflows/preview.md +95 -0
  190. package/.agent/workflows/quality-gate.md +103 -0
  191. package/.agent/workflows/retrospective.md +100 -0
  192. package/.agent/workflows/review.md +104 -0
  193. package/.agent/workflows/status.md +89 -0
  194. package/.agent/workflows/test.md +98 -0
  195. package/.agent/workflows/ui-ux-pro-max.md +93 -0
  196. package/.agent/workflows/upgrade.md +97 -0
  197. package/LICENSE +21 -0
  198. package/README.md +218 -0
  199. package/bin/kit.js +773 -0
  200. package/lib/agent-registry.js +228 -0
  201. package/lib/agent-reputation.js +343 -0
  202. package/lib/circuit-breaker.js +195 -0
  203. package/lib/cli-commands.js +322 -0
  204. package/lib/config-validator.js +274 -0
  205. package/lib/conflict-detector.js +252 -0
  206. package/lib/constants.js +47 -0
  207. package/lib/engineering-manager.js +336 -0
  208. package/lib/error-budget.js +370 -0
  209. package/lib/hook-system.js +256 -0
  210. package/lib/ide-generator.js +434 -0
  211. package/lib/identity.js +240 -0
  212. package/lib/io.js +146 -0
  213. package/lib/learning-engine.js +163 -0
  214. package/lib/loading-engine.js +421 -0
  215. package/lib/logger.js +118 -0
  216. package/lib/marketplace.js +321 -0
  217. package/lib/plugin-system.js +604 -0
  218. package/lib/plugin-verifier.js +197 -0
  219. package/lib/rate-limiter.js +113 -0
  220. package/lib/security-scanner.js +312 -0
  221. package/lib/self-healing.js +468 -0
  222. package/lib/session-manager.js +264 -0
  223. package/lib/skill-sandbox.js +244 -0
  224. package/lib/task-governance.js +522 -0
  225. package/lib/task-model.js +332 -0
  226. package/lib/updater.js +240 -0
  227. package/lib/verify.js +279 -0
  228. package/lib/workflow-engine.js +373 -0
  229. package/lib/workflow-events.js +166 -0
  230. package/lib/workflow-persistence.js +160 -0
  231. package/package.json +57 -0
package/.agent/workflows/pr.md ADDED
@@ -0,0 +1,184 @@
1
+ ---
2
+ description: Production-grade PR creation with branch strategy validation, size/scope guards, pre-flight checks, and CI verification.
3
+ version: 3.0.0
4
+ sdlc-phase: ship
5
+ skills: [git-workflow, pr-toolkit, verification-loop]
6
+ commit-types: [feat, fix, refactor, perf, chore, docs, test]
7
+ ---
8
+
9
+ # /pr — Production-Grade Pull Request Workflow
10
+
11
+ > **Trigger**: `/pr [target]` (default: `main`) · `/pr --draft [target]`
12
+ > **Lifecycle**: Ship — after `/preflight` readiness passes, before `/deploy`
13
+
14
+ > Standards: See `rules/workflow-standards.md` (artifact discipline, conventional commits, branch strategy, governance)
15
+
16
+ > [!CAUTION]
17
+ > PR creation pushes code to remote and triggers CI pipelines. Run `/review` locally first. Never create PRs with unresolved conflicts or failing tests.
18
+
19
+ ---
20
+
21
+ ## Scope Filter
22
+
23
+ | Commit Type | PR Mode | Gates Skipped |
24
+ | :--- | :--- | :--- |
25
+ | `feat`, `fix`, `refactor`, `perf` | Full (8 steps) | None |
26
+ | `chore` | Lightweight | Step 3 (pre-flight) |
27
+ | `docs` | Lightweight | Steps 3, 7 (pre-flight, CI) |
28
+ | `test` | Lightweight | Step 3 runs test gate only |
29
+
30
+ ---
31
+
32
+ ## Critical Rules
33
+
34
+ 1. Detect branch strategy before validating target
35
+ 2. Sync with target branch before creating PR
36
+ 3. Run pre-flight `/review` locally before pushing
37
+ 4. Never create PR from `main`/`production` branches
38
+ 5. Never create PR with known conflicts — resolve first
39
+ 6. Atomic PRs — one logical unit of work per PR
40
+ 7. Size guard — XL (50+ files/1500+ LOC) must be split
41
+
42
+ ---
43
+
44
+ ## Steps
45
+
46
+ ### Step 1: Verify Branch State & Detect Strategy
47
+
48
+ // turbo
49
+
50
+ - If on `main`/`production` → **STOP**
51
+ - If dirty working tree → prompt to commit or stash
52
+ - Detect GitFlow vs Trunk-Based (check for `dev`/`develop` remote)
53
+ - Validate target branch per strategy rules
54
+
55
+ ### Step 2: Sync with Target Branch
56
+
57
+ // turbo
58
+
59
+ ```bash
60
+ git fetch origin <target> && git merge origin/<target> --no-edit
61
+ ```
62
+
63
+ If conflicts → resolve, commit as `merge: resolve conflicts with <target>`, re-run Step 3.
64
+
65
+ ### Step 2.5: Size & Scope Guard
66
+
67
+ // turbo
68
+
69
+ - Classify PR size (XS-M proceed, L warn, XL block)
70
+ - Check scope coherence — detect mixed concerns and recommend splitting
71
+
72
+ ### Step 3: Run Pre-Flight Checks
73
+
74
+ // turbo
75
+
76
+ - Check `/preflight` scorecard (for feat/fix/refactor/perf)
77
+ - Run `/review` pipeline (scope-filtered by commit type)
78
+ - Fix any failures before proceeding
79
+
80
+ ### Step 4: Push to Remote
81
+
82
+ ```bash
83
+ git push origin HEAD
84
+ ```
85
+
86
+ ### Step 5: Generate & Validate PR Title & Body
87
+
88
+ // turbo
89
+
90
+ **Title**: Parse from branch name → `type(scope): description`. Validate conventional format, imperative mood, <72 chars.
91
+
92
+ **Body**: Populate from `git log` and `git diff --stat`. Include Summary, Changes, Test Plan, Breaking Changes, Related Issues sections.
93
+
94
+ ### Step 6: Create PR
95
+
96
+ Pre-check for existing open PR on current branch.
97
+
98
+ **2-tier fallback**:
99
+ 1. `gh pr create --title "<title>" --body "<body>" --base <target> [--draft]`
100
+ 2. If fails → provide pre-formatted title + body for manual browser paste
101
+
102
+ ### Step 7: Verify CI Pipeline
103
+
104
+ Poll CI status via `gh pr checks`. Report each check. Note draft PRs may not trigger CI.
105
+
106
+ ### Step 8: Handle Results
107
+
108
+ - All green → offer to assign reviewers, link issues
109
+ - Any fail → read logs, suggest fix, re-run from Step 3
110
+
111
+ ---
112
+
113
+ ## PR Body Template
114
+
115
+ ```markdown
116
+ ## Summary
117
+ [One-line from branch name and commits]
118
+
119
+ ## Changes
120
+ ### [Category from commit types]
121
+ - [Change descriptions]
122
+
123
+ ## Test Plan
124
+ - [x] Pre-flight `/review` passed locally
125
+ - [x] Branch synced with `{target}` — no conflicts
126
+ - [x] No secrets or PII in diff
127
+
128
+ ## Breaking Changes
129
+ [None / list]
130
+
131
+ ## Related Issues
132
+ [Closes #N]
133
+ ```
134
+
135
+ ---
136
+
137
+ ## Output Template
138
+
139
+ ```markdown
140
+ ## PR Created Successfully
141
+
142
+ | Field | Value |
143
+ | :--- | :--- |
144
+ | PR | #[N] |
145
+ | Title | [type(scope): description] |
146
+ | Branch | [source] → [target] |
147
+ | Status | [draft / ready] |
148
+ | URL | [link] |
149
+
150
+ ### CI Status
151
+ | Check | Status |
152
+ | :--- | :--- |
153
+ | [name] | Pass / Pending / Fail |
154
+
155
+ **Next**: Wait for CI → `/deploy` when ready.
156
+ ```
157
+
158
+ ---
159
+
160
+ ## Governance
161
+
162
+ **PROHIBITED:** PRs from `main`/`production` · wrong target per strategy · unresolved conflicts · XL PRs without splitting · pushing without `/review` · non-conventional titles
163
+
164
+ **REQUIRED:** Branch strategy detection · target validation · size/scope check · branch sync · local pre-flight · conventional title · structured body · CI verification
165
+
166
+ ---
167
+
168
+ ## Completion Criteria
169
+
170
+ - [ ] Branch strategy detected and target validated
171
+ - [ ] Working tree clean, target synced
172
+ - [ ] Size classified, scope verified
173
+ - [ ] Pre-flight passed (scope-filtered)
174
+ - [ ] Pushed, PR created with structured body
175
+ - [ ] CI monitored
176
+
177
+ ---
178
+
179
+ ## Related Resources
180
+
181
+ - **Previous**: `/preflight` · `/review`
182
+ - **Next**: `/deploy`
183
+ - **Skills**: `.agent/skills/pr-toolkit/SKILL.md` · `.agent/skills/git-workflow/SKILL.md`
184
+ - **Related**: `/pr-review` · `/pr-fix` · `/status`
package/.agent/workflows/preflight.md ADDED
@@ -0,0 +1,107 @@
1
+ ---
2
+ description: Production readiness assessment with weighted scoring across 10 audit domains.
3
+ version: 1.0.0
4
+ sdlc-phase: verify
5
+ skills: [production-readiness, verification-loop, security-practices]
6
+ commit-types: [feat, fix, refactor, perf]
7
+ ---
8
+
9
+ # /preflight — Production Readiness Assessment
10
+
11
+ > **Trigger**: `/preflight [domain|flag]`
12
+ > **Lifecycle**: Verify — after `/review`, before `/pr`
13
+
14
+ > Standards: See `rules/workflow-standards.md`
15
+
16
+ > [!CAUTION]
17
+ > Production readiness gate. All critical domains must pass before `/pr` → `/deploy`.
18
+
19
+ ---
20
+
21
+ ## Critical Rules
22
+
23
+ 1. **Evidence-backed scoring** — every domain score must cite observable proof
24
+ 2. **Never bypass blockers** — blocker rule violations override total score
25
+ 3. **Human approval required** — Go/No-Go requires explicit user decision
26
+ 4. **Non-destructive** — checks do not modify source code
27
+ 5. **Fail-safe defaults** — unverifiable checks score 0, not assumed pass
28
+
29
+ ---
30
+
31
+ ## Argument Parsing
32
+
33
+ | Command | Action |
34
+ | :--- | :--- |
35
+ | `/preflight` | Full scan — all 10 domains |
36
+ | `/preflight [domain]` | Single domain focus |
37
+ | `/preflight --quick` | Quick scan — D4 + D5 + D6 + D9 |
38
+ | `/preflight --rescan` | Re-scan with delta comparison |
39
+
40
+ **Domain aliases**: D1 tasks/roadmap, D2 journeys/ux, D3 implementation/tests, D4 code/quality/lint, D5 security/privacy, D6 config/env, D7 performance/perf, D8 docs, D9 infra/ci/pipeline, D10 observability/monitoring
41
+
42
+ ---
43
+
44
+ ## Steps
45
+
46
+ // turbo
47
+ 1. **Project Detection** — detect type, stack, key files, deployment target, applicable domains
48
+
49
+ // turbo
50
+ 2. **Domain Scanning** — for each domain: load skill, execute sub-checks, record evidence, calculate score, classify findings (Critical/High/Medium/Low)
51
+
52
+ // turbo
53
+ 3. **Scoring** — apply blocker rules (any domain=0 → Not Ready, D5<50% → Not Ready, D4<50% → minimum), calculate total, determine verdict (>=85 Ready, 70-84 Conditional, <70 Not Ready)
54
+
55
+ 4. **Go/No-Go** — present scorecard, highlight critical findings, wait for user decision
56
+
57
+ ---
58
+
59
+ ## Output Template
60
+
61
+ ```markdown
62
+ # Production Readiness Scorecard
63
+
64
+ > Project: [name] · Date: [date] · Mode: [mode]
65
+
66
+ | Score | Status | Decision |
67
+ | :--- | :--- | :--- |
68
+ | [XX/100] | [status] | [recommendation] |
69
+
70
+ ## Domain Scores
71
+ | Domain | Score | Status | Key Finding |
72
+ | :--- | :--- | :--- | :--- |
73
+ | D1-D10 | X/max | [emoji] | [summary] |
74
+
75
+ ## Blocker Check
76
+ | Rule | Result |
77
+ | :--- | :--- |
78
+ | Zero Domain / Security Floor / Quality Floor | PASS/FAIL |
79
+
80
+ ## Findings (Critical → High → Medium)
81
+ - [finding with evidence and remediation]
82
+
83
+ Verdict: [score]/100 — [status]. Run `/preflight --rescan` after fixes.
84
+ ```
85
+
86
+ ---
87
+
88
+ ## Governance
89
+
90
+ **PROHIBITED:** Auto-deploying on pass · skipping blocker evaluation · fabricating evidence · modifying project files
91
+
92
+ **REQUIRED:** Evidence per sub-check · blocker evaluation before score · human approval · severity classification
93
+
94
+ ---
95
+
96
+ ## Completion Criteria
97
+
98
+ - [ ] Project detected, domains scanned with evidence
99
+ - [ ] Blocker rules evaluated, scores calculated
100
+ - [ ] Scorecard presented, user made Go/No-Go decision
101
+
102
+ ---
103
+
104
+ ## Related Resources
105
+
106
+ - **Previous**: `/review` · **Next**: `/pr`
107
+ - **Skills**: `.agent/skills/production-readiness/SKILL.md` · `.agent/skills/verification-loop/SKILL.md`
package/.agent/workflows/preview.md ADDED
@@ -0,0 +1,95 @@
1
+ ---
2
+ description: Preview server management. Start, stop, and check local development server.
3
+ version: 2.1.0
4
+ sdlc-phase: build
5
+ skills: [shell-conventions]
6
+ commit-types: [chore]
7
+ ---
8
+
9
+ # /preview — Preview Server Management
10
+
11
+ > **Trigger**: `/preview [sub-command]`
12
+ > **Lifecycle**: Build — during development
13
+
14
+ > Standards: See `rules/workflow-standards.md`
15
+
16
+ ---
17
+
18
+ ## Critical Rules
19
+
20
+ 1. Auto-detect project type from config files
21
+ 2. Handle port conflicts gracefully
22
+ 3. No background orphans — track and provide stop commands
23
+ 4. Platform-aware (web, mobile, API)
24
+
25
+ ---
26
+
27
+ ## Argument Parsing
28
+
29
+ | Command | Action |
30
+ | :--- | :--- |
31
+ | `/preview` | Show status |
32
+ | `/preview start` | Start dev server |
33
+ | `/preview stop` | Stop server |
34
+ | `/preview restart` | Restart server |
35
+
36
+ ---
37
+
38
+ ## Steps
39
+
40
+ // turbo
41
+ 1. **Detect Type** — scan config files, determine command and port
42
+
43
+ // turbo
44
+ 2. **Check State** — server running? Port available? Dependencies installed?
45
+
46
+ 3. **Execute** — start/stop/restart/status
47
+
48
+ 4. **Port Conflicts** — offer alternate port, close conflict, or custom port
49
+
50
+ ---
51
+
52
+ ## Project Detection
53
+
54
+ | Type | Config | Command | Port |
55
+ | :--- | :--- | :--- | :--- |
56
+ | Next.js | `next.config.*` | `npm run dev` | 3000 |
57
+ | Vite | `vite.config.*` | `npm run dev` | 5173 |
58
+ | Expo | `app.json` | `npx expo start` | 8081 |
59
+ | NestJS | `nest-cli.json` | `npm run start:dev` | 3000 |
60
+ | Django | `manage.py` | `python manage.py runserver` | 8000 |
61
+ | FastAPI | `main.py` | `uvicorn main:app --reload` | 8000 |
62
+
63
+ ---
64
+
65
+ ## Output Template
66
+
67
+ ```markdown
68
+ ## Preview Server
69
+
70
+ - **Type**: [framework]
71
+ - **URL**: http://localhost:[port]
72
+ - **Status**: Running / Stopped
73
+
74
+ Stop: `/preview stop` · Restart: `/preview restart`
75
+ ```
76
+
77
+ ---
78
+
79
+ ## Governance
80
+
81
+ **PROHIBITED:** Starting without detection · orphaned processes · auto-running without awareness
82
+
83
+ **REQUIRED:** Project detection · port conflict resolution · clean process management
84
+
85
+ ---
86
+
87
+ ## Completion Criteria
88
+
89
+ - [ ] Project detected, server managed correctly
90
+
91
+ ---
92
+
93
+ ## Related Resources
94
+
95
+ - **Cross-cutting**: Available during any Build phase
package/.agent/workflows/quality-gate.md ADDED
@@ -0,0 +1,103 @@
1
+ ---
2
+ description: Pre-task research and validation protocol. Market research, gap analysis, and ethics review before implementation.
3
+ version: 2.1.0
4
+ sdlc-phase: discover
5
+ skills: [brainstorming]
6
+ commit-types: [docs, chore]
7
+ ---
8
+
9
+ # /quality-gate — Pre-Task Research & Validation
10
+
11
+ > **Trigger**: `/quality-gate` — before implementation of new features or refactors
12
+ > **Lifecycle**: Before `/plan` — research informs planning
13
+
14
+ > Standards: See `rules/workflow-standards.md`
15
+
16
+ ---
17
+
18
+ ## Critical Rules
19
+
20
+ 1. No implementation without validated research
21
+ 2. All claims backed by market data or competitor analysis
22
+ 3. Ethics gate — privacy, bias, automation risks evaluated
23
+ 4. Approval required before proceeding
24
+
25
+ ---
26
+
27
+ ## Scope Filter
28
+
29
+ Required for `feat()` and `refactor()`. Skip for fix, chore, docs, test.
30
+
31
+ ---
32
+
33
+ ## Steps
34
+
35
+ // turbo
36
+ 1. **Market Research** — survey 5+ market leaders for the feature domain
37
+
38
+ // turbo
39
+ 2. **Comparative Analysis** — produce comparison table (approach, AI/ML, UX, automation, privacy)
40
+
41
+ // turbo
42
+ 3. **Gap Detection** — where product meets/exceeds/falls-below market. Reject harmful/deceptive patterns.
43
+
44
+ // turbo
45
+ 4. **Enhancement Strategy** — how product improves on baseline (transparency, ethics, user-centric, data sovereignty, accuracy)
46
+
47
+ // turbo
48
+ 5. **Ethics & Safety** — GDPR, AI bias, automation safety, user autonomy, mitigations
49
+
50
+ // turbo
51
+ 6. **Research Summary** — compile key insights, risks, proposed solution, dependencies
52
+
53
+ 7. **Present for Approval** — implementation blocked until explicit approval. Then proceed to `/plan`.
54
+
55
+ ---
56
+
57
+ ## Rejection Triggers
58
+
59
+ Reject if: no market research, harmful patterns, below market standard, unmitigated risks, no research justification.
60
+
61
+ ---
62
+
63
+ ## Output Template
64
+
65
+ ```markdown
66
+ # Quality Gate Report: [Feature]
67
+
68
+ ## Market Research (5+ competitors)
69
+ | Competitor | Approach | AI/ML | UX | Automation | Privacy |
70
+
71
+ ## Gap Analysis
72
+ | Area | Current | Market Standard | Gap? |
73
+
74
+ ## Enhancement Strategy
75
+ ## Ethics & Safety Review
76
+ ## Verdict: Approved / Rejected — [reasoning]
77
+
78
+ After approval: proceed to `/plan`.
79
+ ```
80
+
81
+ ---
82
+
83
+ ## Governance
84
+
85
+ **PROHIBITED:** Implementing without research · skipping competitors · ignoring ethics · proceeding without approval
86
+
87
+ **REQUIRED:** 5+ competitors analyzed · enhancement documented · risks mitigated · approval received
88
+
89
+ ---
90
+
91
+ ## Completion Criteria
92
+
93
+ - [ ] Market research completed (5+ competitors)
94
+ - [ ] Gap analysis and enhancement strategy defined
95
+ - [ ] Ethics review completed
96
+ - [ ] Approved by Product Owner
97
+
98
+ ---
99
+
100
+ ## Related Resources
101
+
102
+ - **Previous**: `/brainstorm` · **Next**: `/plan`
103
+ - **Skill**: `.agent/skills/brainstorming/SKILL.md`
package/.agent/workflows/retrospective.md ADDED
@@ -0,0 +1,100 @@
1
+ ---
2
+ description: Tier-1 Retrospective Quality Audit — full product, architecture, and pipeline review against market standards
3
+ version: 2.1.0
4
+ sdlc-phase: evaluate
5
+ skills: [verification-loop]
6
+ commit-types: [docs, chore]
7
+ ---
8
+
9
+ # /retrospective — Tier-1 Retrospective Quality Audit
10
+
11
+ > **Trigger**: `/retrospective` or `/tier1-audit`
12
+ > **Lifecycle**: After sprint/milestone completion — feeds next sprint's `/plan`
13
+
14
+ > Standards: See `rules/workflow-standards.md`
15
+
16
+ > [!CAUTION]
17
+ > Do NOT defend previous decisions by default, minimize issues, or optimize for speed over correctness.
18
+
19
+ ---
20
+
21
+ ## Critical Rules
22
+
23
+ 1. No defense bias — evaluate with fresh eyes
24
+ 2. No minimization — report all issues at true severity
25
+ 3. Evidence required — every classification must be backed by data
26
+ 4. Structural over cosmetic — prefer foundational improvements
27
+ 5. Market-grade bar — compare against Google/Meta/Apple standards
28
+
29
+ ---
30
+
31
+ ## Audit Scope
32
+
33
+ Cover all applicable domains (skip unimplemented):
34
+ Architecture, Code Quality, Security & Privacy, Performance, Testing, Documentation, CI/CD, UX/Accessibility
35
+
36
+ ---
37
+
38
+ ## Steps
39
+
40
+ // turbo
41
+ 1. **Inventory** — catalog project docs, task tracking, git log, ADRs, feature specs
42
+
43
+ // turbo
44
+ 2. **Market Benchmark** — evaluate each feature against market leaders
45
+
46
+ // turbo
47
+ 3. **Outdated Pattern Detection** — legacy assumptions, deprecated libraries, anti-patterns
48
+
49
+ // turbo
50
+ 4. **Tier-1 Validation** — would it pass Google/Meta/Apple review? Shortcuts? Missing edge cases?
51
+
52
+ // turbo
53
+ 5. **Ethics & Safety** — AI bias, automation transparency, GDPR, human-in-the-loop
54
+
55
+ // turbo
56
+ 6. **Differentiation Alignment** — quality>volume, measurable outcomes, ethical automation
57
+
58
+ // turbo
59
+ 7. **Classification** — Tier-1 Compliant / Partially Compliant / Non-Compliant with action plans
60
+
61
+ ---
62
+
63
+ ## Output Template
64
+
65
+ ```markdown
66
+ # Tier-1 Retrospective Audit Report
67
+
68
+ > Date: [date] · Sprint: [N]
69
+
70
+ ## Executive Summary
71
+ ## Compliance Classification (per area)
72
+ ## Gaps & Risks
73
+ ## Revision Recommendations
74
+ ## Priority Matrix
75
+ | Priority | Issue | Impact | Effort |
76
+ ```
77
+
78
+ ---
79
+
80
+ ## Governance
81
+
82
+ **PROHIBITED:** Defending past decisions by default · minimizing issues · marking compliant without evidence · skipping domains
83
+
84
+ **REQUIRED:** Rigorous analysis · market-grade bar · revisions for non-compliant areas · actionable recommendations
85
+
86
+ ---
87
+
88
+ ## Completion Criteria
89
+
90
+ - [ ] All domains analyzed and classified
91
+ - [ ] Gaps documented with evidence
92
+ - [ ] Priority matrix populated
93
+ - [ ] Audit report delivered
94
+
95
+ ---
96
+
97
+ ## Related Resources
98
+
99
+ - **Next**: `/plan` (findings feed next sprint)
100
+ - **Related**: `/quality-gate` · `/review`
package/.agent/workflows/review.md ADDED
@@ -0,0 +1,104 @@
1
+ ---
2
+ description: Code review workflow. Sequential quality gate pipeline — lint, type-check, test, security scan, and build verification.
3
+ version: 2.1.0
4
+ sdlc-phase: verify
5
+ skills: [verification-loop]
6
+ commit-types: [fix, refactor]
7
+ ---
8
+
9
+ # /review — Code Review Quality Gate
10
+
11
+ > **Trigger**: `/review` (full) · `/review lint` · `/review tests` · `/review security` · `/review build`
12
+ > **Lifecycle**: After implementation, before `/pr`
13
+
14
+ > Standards: See `rules/workflow-standards.md`
15
+
16
+ > [!CAUTION]
17
+ > Sequential gate pipeline — each step must pass before proceeding. No overrides.
18
+
19
+ ---
20
+
21
+ ## Scope Filter
22
+
23
+ Full review for feat, fix, refactor. Gate 3 only for test. Skip docs, chore.
24
+
25
+ ---
26
+
27
+ ## Critical Rules
28
+
29
+ 1. Sequential — each gate must pass before next
30
+ 2. Stop on failure — show error + fix suggestion
31
+ 3. No overrides — failed gates block merge
32
+ 4. Full-stack scanning
33
+
34
+ ---
35
+
36
+ ## Pipeline Gates
37
+
38
+ Execute IN ORDER. Stop at first failure.
39
+
40
+ ### Gate 1: Lint
41
+ // turbo
42
+ ```bash
43
+ npm run lint # or ruff check . / cargo clippy
44
+ ```
45
+
46
+ ### Gate 2: Type Check
47
+ // turbo
48
+ ```bash
49
+ npx tsc --noEmit # or mypy .
50
+ ```
51
+
52
+ ### Gate 3: Tests
53
+ // turbo
54
+ ```bash
55
+ npm test # or pytest / cargo test
56
+ ```
57
+
58
+ ### Gate 4: Security Scan
59
+ // turbo
60
+ ```bash
61
+ npm audit --audit-level=moderate # or pip-audit / cargo audit
62
+ ```
63
+
64
+ ### Gate 5: Build
65
+ // turbo
66
+ ```bash
67
+ npm run build # or python -m build / cargo build --release
68
+ ```
69
+
70
+ ---
71
+
72
+ ## Output Template
73
+
74
+ ```markdown
75
+ ## Review Complete
76
+
77
+ | Gate | Status | Duration |
78
+ | :--- | :--- | :--- |
79
+ | Lint / Type Check / Tests / Security / Build | Pass/Fail | {time} |
80
+
81
+ **Verdict**: Ready for commit / Failed at Gate {N}
82
+ ```
83
+
84
+ ---
85
+
86
+ ## Governance
87
+
88
+ **PROHIBITED:** Skipping gates · overriding failures · merging without all passing
89
+
90
+ **REQUIRED:** All gates for merge-ready code · document results · fix before re-run
91
+
92
+ ---
93
+
94
+ ## Completion Criteria
95
+
96
+ - [ ] All gates executed, zero failures
97
+ - [ ] Results documented
98
+
99
+ ---
100
+
101
+ ## Related Resources
102
+
103
+ - **Previous**: `/test` · **Next**: `/preflight` · `/pr`
104
+ - **Skill**: `.agent/skills/verification-loop/SKILL.md`