@forwardimpact/pathway 0.24.0 → 0.25.1

package/src/slide-main.js

@@ -53,6 +53,20 @@ function showLoading() {
   }
 }
 
+/**
+ * Escape HTML special characters to prevent XSS
+ * @param {string} text
+ * @returns {string}
+ */
+function escapeHtml(text) {
+  return text
+    .replace(/&/g, "&")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#039;");
+}
+
 /**
  * Render error slide
  * @param {string} title
@@ -62,8 +76,8 @@ function renderError(title, message) {
   const container = getSlideContent();
   container.innerHTML = `
     <div class="slide-error">
-      <h1>${title}</h1>
-      <p>${message}</p>
+      <h1>${escapeHtml(title)}</h1>
+      <p>${escapeHtml(message)}</p>
       <a href="#/">← Back to Index</a>
     </div>
   `;

package/src/slides.html

@@ -8,7 +8,7 @@
     <script type="importmap">
       {
         "imports": {
-          "mustache": "https://esm.sh/mustache@4.2.0",
+          "mustache": "/vendor/mustache.mjs",
           "@forwardimpact/map": "/map/lib/index.js",
           "@forwardimpact/map/levels": "/map/lib/levels.js",
           "@forwardimpact/map/loader": "/map/lib/loader.js",

package/templates/agent.template.md

@@ -3,22 +3,13 @@
 name: {{name}}
 {{/name}}
 description: {{{description}}}
-{{#infer}}
-infer: {{infer}}
-{{/infer}}
-{{#handoffs.length}}
-handoffs:
-{{#handoffs}}
-  - label: {{label}}
-{{#agent}}
-    agent: {{agent}}
-{{/agent}}
-    prompt: "{{{prompt}}}"
-{{#send}}
-    send: {{send}}
-{{/send}}
-{{/handoffs}}
-{{/handoffs.length}}
+model: sonnet
+{{#skills.length}}
+skills:
+{{#skills}}
+  - {{.}}
+{{/skills}}
+{{/skills.length}}
 ---
 
 # {{title}}
@@ -41,89 +32,77 @@ handoffs:
 {{#hasWorkingStyles}}
 
 ## Working style
-{{#workingStyles}}
 
-### {{title}}
+{{#workingStyles}}
+**{{title}}**
 
 {{{content}}}
+
 {{/workingStyles}}
 {{/hasWorkingStyles}}
 {{#hasSkills}}
 
 ## Required skills
 
-**MANDATORY:** Before starting work, you MUST read ALL listed skill files below,
-not just the most relevant one. Every skill contributes project-specific
-guidance, required tools, and technology standards. Pre-training knowledge alone
-is insufficient—skills contain organizational standards that override general
-knowledge.
-
-**FIRST ACTION:** Read every skill file listed below. For each skill, note
-its `<read_then_do_{{stageId}}>` and `<do_then_confirm_{{stageId}}>` checklist
-items. List all checklist items from all skills before beginning any work. Do
-not start implementation until every skill has been read and its checklists
-acknowledged.
-
-Each skill contains marked-up sections and references for precise navigation:
-
-- `<read_then_do_{{stageId}}>` — Read-Then-Do checklist for the
-  {{stageName}} stage. Read and understand these items BEFORE starting work.
-  These are prerequisites and context you must absorb first.
-- `<do_then_confirm_{{stageId}}>` — Do-Then-Confirm checklist for the
-  {{stageName}} stage. Complete your work, then verify each item. These are
-  quality gates to check AFTER implementation.
-- `<required_tools>` — Mandatory tools for this skill. You MUST use these
-  organizational standards that override general knowledge or personal
-  preferences.
-{{#isOnboard}}
-- `scripts/install.sh` — Self-contained install script for environment setup.
-  **Step 1 of onboarding — run FIRST:** Execute
-  `bash .claude/skills/<skill-name>/scripts/install.sh` for each skill before
-  doing any manual setup. Only install manually if the script is missing or
-  fails. Do not skip this step even if you can install the same tools manually.
-- `references/REFERENCE.md` — Detailed code examples and reference material.
-  Consult this for implementation patterns, common pitfalls, and verification
-  steps.
-{{/isOnboard}}
-
-| Skill | Location | Use when |
-| ----- | -------- | -------- |
+| Skill | Use when |
+| ----- | -------- |
 {{#skillIndex}}
-| {{{name}}} | `.claude/skills/{{dirname}}/SKILL.md` | {{{useWhen}}} |
+| {{{name}}} | {{{useWhen}}} |
 {{/skillIndex}}
+{{#isOnboard}}
+
+For each skill, run `bash .claude/skills/<skill-name>/scripts/install.sh`
+BEFORE any manual setup. Consult `references/REFERENCE.md` for implementation
+patterns.
+{{/isOnboard}}
 {{/hasSkills}}
-{{#hasAgentIndex}}
+{{#hasStageTransitions}}
+
+## Stage transitions
+{{#stageTransitions}}
+
+When your work is complete, the next stage is **{{targetStageName}}**.
 
-## Required subagent delegations
+{{{summaryInstruction}}}
+{{#hasEntryCriteria}}
 
-**MANDATORY:** You MUST delegate work outside your speciality using the
-`runSubagent` tool. Do not attempt work that another agent is better suited for.
+The {{targetStageName}} stage requires the following entry criteria:
+{{#entryCriteria}}
+- [ ] {{{.}}}
+{{/entryCriteria}}
 
-You are part of an agentic team with specialized roles. Attempting work outside
-your speciality produces inferior results and violates team structure. If you
-cannot delegate due to a blocking constraint, document in your output: (1) the
-specialized work required, (2) the specific constraint preventing delegation,
-and (3) the compromised approach with acknowledged limitations.
+If critical items are missing, continue working in the current stage.
+{{/hasEntryCriteria}}
+{{/stageTransitions}}
+{{/hasStageTransitions}}
 
-| Agent name | Speciality | Description |
-| ---------- | ---------- | ----------- |
-{{#agentIndex}}
-| `{{id}}` | {{{name}}} | {{{description}}} |
-{{/agentIndex}}
-{{/hasAgentIndex}}
+{{#hasReturnFormat}}
 
 ## Return format
 
-When completing work (for handoff or as a subagent), provide:
+When completing work, provide:
 
-1. **Work completed**: What was accomplished
-2. **Checklist status**: Items verified from skill Do-Then-Confirm checklists
-3. **Recommendation**: Ready for next stage, or needs more work
+{{#returnFormat}}
+1. {{{.}}}
+{{/returnFormat}}
+{{/hasReturnFormat}}
 
 {{#hasConstraints}}
 ## Constraints
 
-{{#constraints}}
+{{#hasStageConstraints}}
+{{#stageConstraints}}
+- {{{.}}}
+{{/stageConstraints}}
+{{/hasStageConstraints}}
+{{#hasDisciplineOrTrackConstraints}}
+
+**General:**
+{{#disciplineConstraints}}
+- {{{.}}}
+{{/disciplineConstraints}}
+{{#trackConstraints}}
 - {{{.}}}
-{{/constraints}}
+{{/trackConstraints}}
+{{/hasDisciplineOrTrackConstraints}}
 {{/hasConstraints}}