@humanbased/crosscheck 1.2.0-beta.81 → 1.2.0

package/get-started.md

@@ -22,7 +22,6 @@
   - [Multi-PR syntax](#multi-pr-syntax)
   - [watch](#crosscheck-watch)
   - [status](#crosscheck-status)
-  - [skill install](#crosscheck-skill-install-source)
   - [diagnose](#crosscheck-diagnose)
   - [optimize](#crosscheck-optimize)
   - [impact](#crosscheck-impact)
@@ -157,52 +156,6 @@ export LINEAR_API_KEY=lin_api_...
 If it's unset while enrichment is on, crosscheck just skips enrichment and
 reviews the diff as usual — it never errors.
 
-### Linear identity — for writing back to Linear (optional)
-
-Separate from enrichment above, which only *reads*. When `linear.enabled: true`,
-crosscheck mirrors each review verdict onto the PR's Linear issue.
-
-`crosscheck onboard` asks which rung of the attribution ladder you want and writes
-the config for you.
-
-**Start with `api_key`.** It reuses `LINEAR_API_KEY`, works immediately, and posts
-the comment — the feature is fully functional. Comments attribute to your Linear
-account, led by a `🤖 crosscheck · <model>` signature line.
-
-Climb to `client_credentials` when more than one thing writes to your workspace and
-you need them told apart. It uses an OAuth app — one per workspace, not per user —
-so comments post as crosscheck itself with its own icon:
-
-```bash
-export LINEAR_CLIENT_ID=...
-export LINEAR_CLIENT_SECRET=...
-```
-
-A failed T1 token mint aborts the run rather than falling back to `api_key` —
-a silent downgrade would put agent writes back under a human's name.
-
-`crosscheck onboard` walks you through the choice:
-
-<p align="center">
-  <img src="./assets/linear-onboard.svg" alt="crosscheck onboard — choosing a Linear attribution rung" width="700" />
-</p>
-
-Before opening a PR, `crosscheck linear-test` exercises the whole path and posts nothing —
-identity, issue lookup, verdict filter, and the exact comment body:
-
-<p align="center">
-  <img src="./assets/linear-test.svg" alt="crosscheck linear-test — dry-run verification" width="700" />
-</p>
-
-`crosscheck status` shows which rung is active whenever `linear.enabled` is true:
-
-<p align="center">
-  <img src="./assets/linear-status.svg" alt="crosscheck status — the Linear identity section" width="620" />
-</p>
-
-Full walkthrough, including the two Linear UI gotchas that trip people up:
-[docs/linear-identity.md](docs/linear-identity.md).
-
 ---
 
 ## Step 1 — Check your setup
@@ -392,8 +345,6 @@ crosscheck onboard --reconfigure  # re-run setup even if config already exists
 
 **Step 6 — Review quality.** Choose the speed/thoroughness tier for review prompts and reviewer timeouts.
 
-**Step 6.5 — Agent skills.** Choose which preloaded or custom-installed skills are enabled for coding agents. New setups preselect `code-review-skill (by @awesome-skills, MIT)` and `diagnosing-bugs (by @mattpocock, MIT)`. Matt Pocock's `code-review` and `codebase-design` are available but off by default. Re-running onboard preserves your selection. Skills are made available across workflow operations, and each skill's description plus the coding agent decides when it applies.
-
 **Step 7 — Workflow pipeline.** Choose what happens after a review:
 
 ```
@@ -447,12 +398,6 @@ crosscheck onboard
   [1] fast  [2] balanced  [3] thorough
   Choice [2]: 2
 
-  Step 6.5 — agent skills
-  [ ] code-review       (by @mattpocock, MIT)
-  [x] code-review-skill (by @awesome-skills, MIT)
-  [x] codebase-design   (by @mattpocock, MIT)
-  [x] diagnosing-bugs   (by @mattpocock, MIT)
-
   Step 7 — workflow pipeline
   [1] review only  [2] review → fix  [3] review → fix → re-check
   Choice [2]: 3
@@ -776,8 +721,6 @@ crosscheck status
   Config
     mode                   cross-vendor
     quality tier           balanced
-    installed skills       code-review (by @mattpocock, MIT), code-review-skill (by @awesome-skills, MIT), codebase-design (by @mattpocock, MIT), diagnosing-bugs (by @mattpocock, MIT)
-    enabled skills         code-review-skill (by @awesome-skills, MIT), diagnosing-bugs (by @mattpocock, MIT)
     codex auth             subscription
     claude model           sonnet
     per-review budget      $2.00/review
@@ -801,41 +744,6 @@ crosscheck status
 
 ---
 
-### `crosscheck skill install <source>`
-
-Installs an Agent Skill from a Git URL or local directory into `~/.crosscheck/skills`. Crosscheck validates `SKILL.md`, rejects unsafe names and symbolic links, and records source, revision, author, license, and package integrity. Installation does not enable a skill automatically.
-
-Crosscheck itself ships with this preloaded catalog:
-
-| Skill | Onboarding default | Best fit |
-|---|---:|---|
-| [`code-review-skill`](https://github.com/awesome-skills/code-review-skill) (by `@awesome-skills`, MIT) | On | General default: broad language, correctness, security, performance, and architecture coverage |
-| [`codebase-design`](https://github.com/mattpocock/skills/tree/main/skills/engineering/codebase-design) (by `@mattpocock`, MIT) | On | Architecture-heavy changes: deep modules, small interfaces, clean seams, and testability |
-| [`diagnosing-bugs`](https://github.com/mattpocock/skills/tree/main/skills/engineering/diagnosing-bugs) (by `@mattpocock`, MIT) | On | Hard bugs and regressions: reproducible signals, ranked hypotheses, and regression evidence |
-| [`code-review`](https://github.com/mattpocock/skills/tree/main/skills/engineering/code-review) (by `@mattpocock`, MIT) | Off | Evidence-rich repositories: separately checks documented standards and issue/PRD fidelity |
-
-`code-review` and `code-review-skill` are competing review baselines. The onboarding picker highlights the conflict and will not enable one until the selected counterpart is deselected; the runtime broker also rejects activation of a second baseline. The other bundled skills are complementary.
-
-```bash
-crosscheck skill install https://github.com/owner/my-skill.git
-crosscheck skill install /path/to/my-skill
-crosscheck onboard  # enable installed skills
-```
-
-The Git repository or local directory must have `SKILL.md` at its root. For a skill nested in a monorepo, clone it and pass the nested local directory.
-
-`crosscheck status` distinguishes the full installed catalog from the enabled selection and renders attributed identities as `skill-name (by @author, license)`.
-
-At runtime, Crosscheck distinguishes three states: **installed** skills are in the catalog, **enabled** skills are available to agents, and **activated** skills were actually loaded for one workflow step. A skill becomes activated only when the agent successfully calls the Crosscheck broker's `activate_skill` tool for an enabled skill and receives its `SKILL.md` instructions. Listing enabled skills, seeing a skill description, or merely enabling a skill does not count.
-
-Activation is scoped to one step session, such as review, fix, recheck, or conflict resolution. Repeated activation in that session is idempotent, and the receipt survives retries or a reviewer fallback within the same step. Every later step gets a separate empty session, and Crosscheck deletes all step sessions when the workflow run ends. The terminal, logs, and PR comment preserve the completed step's attribution as historical evidence; they do not pre-activate future sessions. For example: `code-review-skill (by @awesome-skills, MIT)`.
-
-Upgrading from an earlier Crosscheck release is opt-in: existing configs default to `skills.enabled: []`. Re-run `crosscheck onboard` to choose the recommended bundle or any additional installed skills.
-
-Review and recheck also honor repository practices in `AGENTS.md` and `CLAUDE.md`. These repository-defined practices take precedence over bundled skill advice. Crosscheck reads the root files plus any nested files whose directory contains a changed path, orders them from broadest to most specific, and lets nested guidance override root guidance. It reads these files from the PR's base branch and disables vendor-native discovery for the run, so guidance added or modified by the PR cannot influence its own review.
-
----
-
 ### `crosscheck diagnose`
 
 Reads `~/.crosscheck/logs/` and surfaces failure patterns, reviewer performance, and improvement suggestions.
@@ -1057,7 +965,7 @@ If no errors are found in recent logs, crosscheck prints `No errors found in rec
 
 On re-runs, `onboard` updates only the fields it collected answers for. Everything else survives unchanged.
 
-**Updated on every run:** `deployment`, `orgs`, `repos`, `mode`, `clone_protocol`, `vendors.*.enabled`, `vendors.*.effort`, `quality.tier`, `skills.enabled`, `tunnel.*`, `post_review.auto_fix.*`
+**Updated on every run:** `deployment`, `orgs`, `repos`, `mode`, `clone_protocol`, `vendors.*.enabled`, `vendors.*.effort`, `quality.tier`, `tunnel.*`, `post_review.auto_fix.*`
 
 **Never touched by onboard:** per-repo overrides in `~/.crosscheck/workflows/` (owned by `crosscheck alter`), and `~/.crosscheck/workflow.yml` after its first write
 
@@ -1107,8 +1015,7 @@ vendors:
   codex:
     enabled: true
     auth: subscription      # subscription | api-key
-    model: gpt-5.6-terra    # pins the review model; unset = tier model (api-key) / CLI default (subscription)
-    effort: medium          # low | medium | high | xhigh | max | ultra (ultra: terra/sol only)
+    model: gpt-5.6-terra    # only used when auth: api-key
     # timeout_sec: 1200     # max seconds per CLI call; unset = tier-based (300/600/1200)
 
   claude:
@@ -1119,8 +1026,7 @@ vendors:
 
 # ── Quality ───────────────────────────────────────────────────────────────────
 quality:
-  mode: smart               # smart (default) | fixed — see Review thoroughness
-  tier: balanced            # fast | balanced | thorough (fallback under smart)
+  tier: balanced            # fast | balanced | thorough
   focus:                    # narrows review scope (optional)
     - security
     - types
@@ -1128,16 +1034,6 @@ quality:
   custom_prompt: |          # appended to every review prompt
     Be concise. Flag only issues that would block a merge.
 
-# ── Agent skills ──────────────────────────────────────────────────────────────
-# Enabled means available to every coding-agent operation. The skill description
-# and agent decide whether to activate it for a particular step.
-skills:
-  enabled:
-    - code-review-skill     # recommended · @awesome-skills, MIT
-    - diagnosing-bugs       # recommended · @mattpocock, MIT
-    # - code-review         # preloaded, opt-in · @mattpocock, MIT
-    # - codebase-design     # preloaded, opt-in · @mattpocock, MIT
-
 # ── Budget ────────────────────────────────────────────────────────────────────
 budget:
   codex_monthly_usd: 20     # null = unlimited; only applies when auth: api-key
@@ -1248,93 +1144,15 @@ post_review:
 server:
   port: 7891
   webhook_path: /webhook
-
-linear:                       # write review verdicts back to a Linear issue (opt-in)
-  enabled: false
-  auth:
-    mode: api_key             # api_key | client_credentials
-    api_key_env: LINEAR_API_KEY
-    client_id_env: LINEAR_CLIENT_ID
-    client_secret_env: LINEAR_CLIENT_SECRET
-    scopes: "read,write"      # comma-separated; initiative:* are separate scopes
-  identity:
-    actor: crosscheck
-    signature: "🤖 {actor} · {model}"   # {actor} {product} {model} {reviewer} {icon}
-    icon_url: ""              # rendered where {icon} appears; app avatar is preferred
-    per_step_actor: true      # crosscheck/review vs crosscheck/fix in Linear
-  comment_on:                 # verdicts mirrored to the issue (default omits APPROVE)
-    - NEEDS_WORK
-    - BLOCK
-  team_keys: []               # e.g. [IN] — required to match bare refs like IN-42
-```
-
-### Review thoroughness
-
-**`quality.mode: smart` is the default.** Crosscheck classifies each PR from its
-changed-file list and adjusts model and effort to match, rather than applying one
-tier to everything. Classification runs on the already-cloned working copy, so it
-costs one `git diff` and no API call. Set `mode: fixed` to opt out.
-
-| # | PR class | Detected by | Tier | Steps |
-|---|---|---|---|---|
-| 1 | Generated / vendored | every file is a lockfile or build output | — | **PR skipped** |
-| 2 | Security / data-critical | auth, crypto, payment, migration paths; `risk:T3`; hotfix→default | `thorough` | full loop |
-| 3 | Deletion-only | ≤ 5 additions with ≥ 20 deletions | `fast` | review |
-| 4 | Docs / spec | ≥ 50% Markdown | `balanced` | review |
-| 5 | Test-only | every file is a test | `fast` | review, fix |
-| 6 | Config / infra | ≥ 50% config, no source | `balanced` | full loop |
-| 7 | Trivial | ≤ 3 files, ≤ 150 lines | `fast` | review, fix |
-| 8 | Standard | everything else | `balanced` | full loop |
-
-First match wins, and security sits second so it dominates every cheapening rule
-below it — a deletion that removes auth code, or a two-file migration, is never
-routed to `fast`.
-
-The class's step set narrows the configured pipeline and never widens it, so a
-repo pinned to review-only with `crosscheck alter` stays review-only. Rounds past
-the first escalate on measured non-convergence: effort rises where the model
-supports it, the tier is promoted where it does not.
-
-Note that classes 3 and 4 narrow to `review` alone, which also drops
-`conflict-resolve` — review-only never touches code, and auto-conflict-resolve
-is code modification. That rule normally follows an operator's explicit
-`crosscheck alter --review-only`; under smart mode the *classifier* can reach it
-too, so a docs-only or deletion-only PR with a merge conflict is reviewed but not
-auto-resolved. Set `mode: fixed` if you want auto-conflict-resolve on every PR.
-
-Every comment cites the policy that produced it:
-
-```
-<!-- crosscheck: … verdict=BLOCK strategy=1.1.0 class=risky tier=thorough … -->
-```
-
-> **Leave `vendors.*.model` unset under smart mode.** An explicit model outranks
-> the strategy, so pinning one makes per-PR selection a no-op. When that happens
-> crosscheck **withholds** the tier from the comment rather than citing one that
-> did not run. `crosscheck onboard` clears the pin — and prints what it cleared —
-> when you choose smart.
-
-Verify the policy is current with `npm run verify:strategy`. Full rationale:
-[docs/dynamic-thoroughness.md](./docs/dynamic-thoroughness.md).
+```
 
 ### Quality tiers
 
-Under `fixed`, the tier applies to every call. Under `smart`, it is the fallback
-when a PR's file list cannot be read.
-
-| Tier | Claude | Codex | Cost per review | Best for |
-|---|---|---|---|---|
-| `fast` | Haiku 4.5 | GPT-5.6 Luna | $0.24 · $0.06 | High-volume repos, draft PRs |
-| `balanced` | Sonnet 5 | GPT-5.6 Terra | $0.72 · $0.58 | Default for most teams |
-| `thorough` | Opus 5 | GPT-5.6 Sol | $1.20 · $1.44 | Before merging to main |
-
-Cost is output-token cost at 48k output tokens, the measured median for one
-review. A review is an agentic session, not a single call — expect 10–16 minutes
-of wall clock (median 643s, p90 984s across 43 logged runs). Tier changes depth
-and the subprocess timeout, not seconds-scale latency.
-
-`claude-fable-5` is banned from review: 2× Opus 5's price for a lower coding
-benchmark score.
+| Tier | Speed | Depth | Best for |
+|---|---|---|---|
+| `fast` | ~10s | Top issues only | High-volume repos, draft PRs |
+| `balanced` | ~30s | Full review, all issues explained | Default for most teams |
+| `thorough` | ~60–90s | Deep multi-pass, architecture + security | Before merging to main |
 
 ### Issue enrichment
 
@@ -1456,9 +1274,7 @@ If none match, origin is `human` and the PR is skipped in cross-vendor mode.
 codex review --base <base-branch> --title "<pr-title>"
 ```
 
-The `--base` flag diffs current HEAD against the base branch — exactly the PR diff. An explicit `vendors.codex.model` (or matching `model_tiers` entry) is passed as `-c model=...` under either auth mode. When unset: `auth: subscription` passes no model flag (the Codex CLI picks its default), while `auth: api-key` selects the model by quality tier (`fast` → `gpt-5.6-luna`, `balanced` → `gpt-5.6-terra`, `thorough` → `gpt-5.6-sol`).
-
-Reasoning effort comes from `vendors.codex.effort` and is always passed through as `-c model_reasoning_effort=...` — for the review step and for the auto-fix step (`codex exec`) alike. The values match the codex CLI tiers 1:1 — `low` (Light), `medium`, `high`, `xhigh` (Extra High), `max`, `ultra`. Not every model supports every tier: `ultra` is terra/sol only, and pre-5.6 models stop at `xhigh` — the CLI rejects unsupported combinations. Higher tiers can multiply review wall-clock time; pair them with `timeout_sec`.
+The `--base` flag diffs current HEAD against the base branch — exactly the PR diff. With `auth: subscription`, no model flag is passed. With `auth: api-key`, the model is selected by quality tier (`fast` → `gpt-5.6-luna`, `balanced` → `gpt-5.6-terra`, `thorough` → `gpt-5.6-sol`).
 
 ### How Claude reviews run
 
@@ -1473,16 +1289,7 @@ claude \
   "<prompt>"
 ```
 
-`--bare` makes execution fast and deterministic. `--allowedTools` limits Claude to read-only git operations on the cloned repo. `vendors.claude.effort` drives `--effort` for every Claude step — review, recheck, auto-fix and conflict-resolve.
-
-Every comment crosscheck posts closes with the model and effort the step actually ran with, plus any skills the agent activated:
-
-```
----
-_Reviewed with Claude Code via Crosscheck_ _(Opus 5 · high effort)_
-
-_Skills: code-review-skill (by @awesome-skills, MIT)_
-```
+`--bare` makes execution fast and deterministic. `--allowedTools` limits Claude to read-only git operations on the cloned repo.
 
 ### Deduplication
 
@@ -1502,9 +1309,6 @@ The fix (file lock for same-machine + GitHub commit status for cross-machine) is
 - **Temp isolation** — each PR cloned into a fresh temp dir, deleted after review
 - **Read-only tools** — Claude restricted to `git diff` and `git log` only
 - **Temp credential isolation** — with `clone_protocol: ssh` (default) no tokens touch disk; with `clone_protocol: https` a short-lived token is embedded in the temp clone's remote URL and removed when the temp dir is deleted after review
-- **Skill package validation** — installs reject unsafe names, attribution injection, symbolic links, packages over 1,000 files or 10 MiB, and collisions; Git sources record their checked-out commit
-- **Skill integrity** — Crosscheck verifies every installed package against its SHA-256 receipt before exposing it to agents; modified or malformed packages fail closed and appear as unavailable in `crosscheck status`
-- **Skill execution boundary** — the activation broker exposes instructions and referenced files but never executes bundled scripts itself. Skills are third-party instructions: inspect their source and license before enabling them; the selected coding agent still operates under its normal sandbox and permissions
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humanbased/crosscheck",
-  "version": "1.2.0-beta.81",
+  "version": "1.2.0",
   "description": "AI code review pipeline that turns agent-written PRs into merge-ready patches",
   "bin": {
     "crosscheck": "dist/cli.js",
@@ -23,13 +23,12 @@
     "node": ">=18"
   },
   "scripts": {
-    "build": "tsc && rm -rf dist/harness && cp -r src/harness dist/harness && cp src/config/review-model-tiers.json dist/config/review-model-tiers.json && cp src/config/review-strategy.json dist/config/review-strategy.json && chmod +x dist/cli.js dist/ck.js",
+    "build": "tsc && rm -rf dist/harness && cp -r src/harness dist/harness && cp src/config/review-model-tiers.json dist/config/review-model-tiers.json && chmod +x dist/cli.js dist/ck.js",
     "dev": "tsx src/cli.ts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "lint": "eslint src --ext .ts",
-    "prepublishOnly": "npm run typecheck && npm run build",
-    "verify:strategy": "node scripts/verify-review-strategy.mjs"
+    "prepublishOnly": "npm run typecheck && npm run build"
   },
   "dependencies": {
     "chalk": "^5.3.0",

package/assets/linear-comment.svg

@@ -1,18 +0,0 @@
-<svg xmlns='http://www.w3.org/2000/svg' width='760' height='270' viewBox='0 0 760 270' font-family='-apple-system, BlinkMacSystemFont, Inter, Segoe UI, sans-serif'>
-<rect width='760' height='270' rx='10' fill='#191b22'/>
-<rect x='0.5' y='0.5' width='759' height='269' rx='10' fill='none' stroke='#2b2f3a'/>
-<clipPath id='c'><circle cx='38' cy='42' r='16'/></clipPath>
-<image href='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAARGVYSWZNTQAqAAAACAABh2kABAAAAAEAAAAaAAAAAAADoAEAAwAAAAEAAQAAoAIABAAAAAEAAABAoAMABAAAAAEAAABAAAAAAEZRQrAAAAHNaVRYdFhNTDpjb20uYWRvYmUueG1wAAAAAAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA2LjAuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAgICAgICAgPGV4aWY6Q29sb3JTcGFjZT4xPC9leGlmOkNvbG9yU3BhY2U+CiAgICAgICAgIDxleGlmOlBpeGVsWERpbWVuc2lvbj4xMjU0PC9leGlmOlBpeGVsWERpbWVuc2lvbj4KICAgICAgICAgPGV4aWY6UGl4ZWxZRGltZW5zaW9uPjEyNTQ8L2V4aWY6UGl4ZWxZRGltZW5zaW9uPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgPC9yZGY6UkRGPgo8L3g6eG1wbWV0YT4KdDO1SAAADTdJREFUeAHtWnuMXUUdnjmPe+/utraYWlyWSpu2tMKGhxFKALUYiOAfSkyoGF41GokQgzVIUZBsBBUkmhhREgWB1QQoVg1IFYUUUijVgCBPTSEFlFK6hXa73bv33nPOjN83j3PPbrvtvWVbid5pz5nXb2Z+3ze/+c3M2StEJ3QY6DDQYaDDQIeBDgMdBv5PGZAHC/f6VbprhxKHjSXJjEjFulQS20fCFzYvW3Z042DpsKdxDjgBq3/VOEmn4UVKi49rpeZAiYoQWkgRjJbK4SYh06+dfV784J6UOxhlB4yA1b8c7VWq8j2difOiKIjSVAilldAa4DGqxCssBaLvzbtfP3zo7o1alkUQSJHqYHvPjL6L3rfy+yMHg4DoQAxy16DubyTqnjgKFidgIGkknHSixmP+I9IiSQIRpyN9ZSn7siAQIQjIMvX2gdBpsj6nnIC7bq/NTxN1bxQG88YamHYfAJ74GcgFXxmiFGujnilYRyYCBRkhs6T+9pEvX718pxANUcI/UVHVOVcPvs5mUx2mlIA1a3R52+b0ljgm+IRgoK81eaO4Qc6UTWSozotQqrA8sEZm1UdHHgtpIsiGUV006qWHUX0WnikPU0rA0JbsgjCOlo4lmHlMN9c7gyWiqLs1BWUrDU2FWomVUPb5AAn0NKV6+r4ZT1nHACtvvSW9DBaNmfRDOJtHVrKsmTUClHMcjTMFTxyFkoxC6cJXv3XBDQJslEKo3D3tjt7Lf/yC6eQdvqaEgMHBev9td6hzYOxHN7IsX+u5bp4QH5MIpJtLwFfkLYzVcA1k2DlCLY6oSHkF28TwFbt2Da+D5H+fgJ/fpj+ilV45WlOnR3FQTlUqNMCZ2W5icVsfFgLqDFSHl5NrrIV5V0duvO/wXWQQqtatQ41DJVIhR33dO433ywJWrdKlt3am1zZSvQJ7d5wCQOo9vgNHIN7kYRk26eqM0mwDIeP4QAurTBtTyRfb2HLS5ptmPEeUuy7813e+fGIl0NhwwrWHXfWTv+XN2ky0TcDgoO7Zsj0djOLoM0kDbkxxM0NwGhaB+7JivUm7F3Y9g9oQRGeAvO2mYAMszsuxbGAN5bS2PMzqoqsUi2qmV6KXg0PAwIAO3hrLbo4BfqxGT2/+FzGxyKIwiXFVebl3fMa/Yc14UV9OQcfnbv6Eso2EpJM2jB+VcMra/9CWBczoU1+UMrxgrA4FnNZu4saRwaq8nGmnn2nCjBGw69/XOREXOSH6FGdhxkpiHIoQPD2U0pkunLZMdVsvB2PfbW4e1LN3VrOnpQx6vVJsZQDgZZTBisAebgDiZGsSfktzmFmIWbW5TEZiybafiSN3rMGOUHbAnEoAXll8vIh6jzBMqeqIGHv60ZwQ9hNhkFTK50IpXxZhuLPRd9hX5l98wzDrWg0tW8CuWnp+GEW9jQa3OeeePHDEPV1SnH4yTq1lLR56TIi3oEYQkBYERg6XySLPLKfOmD1eesLWobNUVI49VXR/+GNsIpKhN8TYM+vhBLAHGAJ5jFYkob8cyP6xNNvVo7LLjXAbr5YIgNcPN25Ll8kQk8HOAcAo7gbiwe+4eUL0L3IFQHfX/ZCFsNPVkuCrUU+TNj7AlyFP0yYx3sRFhuWNPjSWAm5URpL1xZDiHoFrNs/MNZ3EpLqtYAx1Xy3eqIm+VIn+FBpTaT4kQkFdPkT5Ju5w5soL9zD/A0IctUCKGvY5L29j5CHPNLdO2w+cIFky/wkPFQxMmuDyTBeStm7Swmb1PlItETBWTeeqIOxJcSqzwD14gOAAsIyXcVd7+p8we6QZPnqCFt1dGmbqQZMsS5wHb305CnOwBYwAW7Qy9snAsvE8FBpbkbbeLRFQVbJHY5bMLKJ7Ku4fnuT48AT40F+FGB5BAvlZhwhxynFC1IHWyLANtDezbtrYtNEWeRMMliYgiXM/b0YyQswdwFuKk58gruWiD1ZdTy1HLfkAnG2VV9yrZ9dpM0flhuD41j4hxNmngRRM95JjYBUbhdg8xCVKnQDGKc+ZNBZRmGbPgzEJmBKdXjrEzwAgaxc+D2Bn8A6wiJD9gOVp9fVrf/jqNReO2Tp8YAlDoUvlm+Z846cvFeWL6ZYIwFa2Dc6Gp1a/ubk+qDJJoAMDSNxaNjwvRT/W//zDNXYEIU5fIsXgGgDgxw7PF6Qpb5ZAjpqVyDgZzn7tH0+K2vMwKwY0phXkXeQpNxVadVXS2pcMQY7UEGtzx1h6H1pPSkBLS6BnVvwS0G/BvczMLME0n6JZS1xahHj8WYuDVrBgjhYzeiSutQCMPJypiRX6YH0zmKMOsp4B+pNIBCV8K8RjwbOuSUHeFryRBmyFoootqWpipPFRBl+ZyPOkoSUCrlwmh2G6azmDuO3aBzuTTYMMpvFwF4jhBE84yswlzgFCbNosxbZhqAdHQBke7HJ5pP0KYGzm0iZsB07t3EhoIb4MckY+L0CC1f5BsmlxXmj3uCUC2CwS+ta0oXk+MSA4ezkZAEJgdWzVJ/ULsXguAQtRgzXc+wjimgMOR2LA40MA23J7pxy1NvPq8TlWPBcwfvOPkgahkcOrCNZWjn+DAfjPvYaWCShtjx7RaXYf7gKWAM6eeeDl4ekbAD9rhhBnLEEeoLgdPvyEFBtfQxoqkCBDEkipu4cEZVgbOkmESpDBYUfzSdEZOucMGmIIgQkzpb7QxW6aPXcUzZkZX2irJrz3wU9TemBAqit/oAdG6tlZ2PNiO4itx9cwM6NnnSzEzOmowcCbt0rxx0cJHoQAPJUvYbSjFgpRtnca4wQPTxaI7sZSpGNIUmM4VJwA65teFKq6C9nA4p4IJmcGFYYL9u8OIaYfWC12gVF2sJfQMgHsI0nS2UqFkYI3s37f9pzAAvoXSnEizJ/OjeE3D/JMgG94oIpWTplPnxmIT5ySa45SojrDPYgKYfTZv4ihwRud+pCjqGnq2jPvCnkBU0EwkpS7vopjMfZLGzIQUA674JInD20RUE+D47WSMgMYBqrCFM1/Ng4+GM+EDX8X4snnkcdliGuegQ5yerdNt/IOZ7wX4DF5GICHLBOQlv4gkXfidw9Rqyz+0KrZyy6F2bQe2iKgUVeHaijlQflhOAPrn9Kid5YUMWb813+iJTiCqDQFEd/zgBZbcWeouCWgYJ1HimfF+8UmbI00dYuUS2D0KV59FXwJWUW5rbId2RJDPpImgBeZbfl3FzIHjoAk0TheWe8PPE2dkB6G4f1sFXXRxhKoNz299fIsF2LrNi3u/D1asjFCAgI+F6wTJ6v7REM7VgwJQBPgDBD7+XEN/Ihml+DBKmfFdrgfbz9CS01x+HmbgGgB+dBMwEbpwAJjnkhD39QtEzoAqu/lo4JLYnkAxxXgz1+BxrHRCJkOrT7FhqaEBQyQ8WKmjS3dn3dbBEgtn+PdX2Ef51o0E2FGhWK5IvmatPqgyqvNAjtpVnveL/gJCXbl2o9HZXYF17XtA/V+HDc4dGqWcYA2Q1sETO8JH39zKNsB+5wJOzDIPDivlx3flbLQJZ3VQv9mIXfHOAxENxxHAisg4DoYNp++KQm2KrAQxuymjjOD/YxOIlkH9dEdPomJ0Ux0yzgZr4ZVZq/vtgi4aUBu/uyljfuVDs/L+GcdqkXNkCTAfHRXVRyZYgxFLw7sYmO68M6Tpq97tK7snwO1qq6IsmSBuULLoFbvmn4tWu2gK1TZyNdDlc0lUZmUI/Vy17dhQlX2g58gjB1amZZvgWawFl65zi3IGpELL6sfM1KNNkDBLovaQUOUg9xbZ4URI8xgNRFf+MOt8he+yWtXnb82VunSBAOoQA7PnDN33sxLrt/O+ldWnrsOv6k4lX8bAAFb9KLF8+Z9fgAH7f0PXH1thcEflZ8Jg/S7XLgpPtnx4ac77vOM6SBNmnmXLuZZZspd25JIsHE2AyyJkw1Lse+0Vm+eHnjkNMFQLaPtw806W9H2u20COEJ/7/rr8TMGzFoI0PhZC4HjMOTB8ZJTTPt8kSRfxvPC7oHmRGc6SQA7lqBJ6tso3i8CBgZOS4+bG19cCtIb4YWVyiKQYIlQJAMPAfIO4GebsQftLcXEkJ0Y6E84x2YXGFdpZt6VTErPuBb7yuwXAewUl6P0t7fHV3RXkk/CDh7GrogvphFAuye1Mcu0IYjEYO2axy4dWg4JmxiaB5zxIPl90DpcUlMkY2IPrefb2gX21O3q2yoP6IGBP5/7yjdPHK3q0/HF51iY+iE45GlsYFvhL55spOEZWkdn4gdQ6MJecw0AZidOQSArXTgFxjCD0VR116K4wEJQ6cIXlwyf3kZS3S1rjULdnrTbd9k7JoBDyIEBQBnYgCSf3cKKFfrmF19rXKPS6BJ823qPWfduAhGNo0BG8XXVtNHL+6YMS42orswOwE5lFF43lolDWRdIOdY3LWjr3L+bYuxzT4UHquxT59QWNbL43KShl2Ir6wuCUMZRcuUDvyuvPlBjvmv7Xb5cV/jwt0XvWiU7inUY6DDQYaDDQIeBDgMdBjoMdBj432XgP6c8OQYWMsokAAAAAElFTkSuQmCC' x='22' y='26' width='32' height='32' clip-path='url(#c)'/>
-<text x='68' y='40' fill='#e6e8ee' font-size='14.5' font-weight='600'>crosscheck/review</text>
-<rect x='200' y='28' width='34' height='17' rx='4' fill='#2f3550'/>
-<text x='217' y='40.5' fill='#93a4ff' font-size='10.5' font-weight='600' text-anchor='middle'>APP</text>
-<text x='246' y='40' fill='#767c8b' font-size='12.5'>commented just now</text>
-<line x1='22' y1='62' x2='738' y2='62' stroke='#252932'/>
-<text x='22' y='90' fill='#8b93a3' font-size='13'>🤖 crosscheck/review · crosscheck · <tspan fill='#b6bdcc'>gpt-5.6-terra</tspan></text>
-<text x='22' y='126' font-size='14.5'><tspan fill='#e5c07b' font-weight='700'>NEEDS_WORK</tspan><tspan fill='#c3c9d6'> — codex (gpt-5.6-terra) review of </tspan><tspan fill='#6ea8fe' text-decoration='underline'>feat: add rate limiting to the public API</tspan></text>
-<text x='22' y='162' fill='#c3c9d6' font-size='13.5'>2 blocking findings — unbounded retry loop in <tspan font-family='ui-monospace,Menlo,monospace' fill='#e06c75' font-size='12.5'>limiter.ts:88</tspan>, and the 429</text>
-<text x='22' y='183' fill='#c3c9d6' font-size='13.5'>response omits <tspan font-family='ui-monospace,Menlo,monospace' fill='#e06c75' font-size='12.5'>Retry-After</tspan>.</text>
-<line x1='22' y1='210' x2='738' y2='210' stroke='#252932'/>
-<text x='22' y='232' fill='#5c6373' font-size='11.5' font-family='ui-monospace,Menlo,monospace'>&lt;!-- crosscheck: origin=claude reviewer=codex model=gpt-5.6-terra type=review …  --&gt;</text>
-<text x='738' y='232' fill='#4a505e' font-size='11' text-anchor='end'>hidden in rendered view</text>
-</svg>

package/assets/linear-onboard.svg

@@ -1,30 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="776" height="490" viewBox="0 0 776 490" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
-  <rect width="776" height="490" rx="8" fill="#21252b"/>
-  <rect width="776" height="34" rx="8" fill="#2c313a"/>
-  <rect y="26" width="776" height="8" fill="#2c313a"/>
-  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
-  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
-  <circle cx="60" cy="17" r="6" fill="#18c132"/>
-  <text x="388" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck onboard</text>
-<text x="18.0" y="52" fill="#c8ccd4" textLength="335.4" lengthAdjust="spacing" font-weight="600" xml:space="preserve">Step 9.5 — Linear write-back (optional)</text>
-<text x="35.2" y="72" fill="#c8ccd4" textLength="533.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Post the review verdict onto the Linear issue a PR belongs to.</text>
-
-<text x="35.2" y="112" fill="#c8ccd4" textLength="326.8" lengthAdjust="spacing" xml:space="preserve">[1] off           — leave Linear alone</text>
-<text x="35.2" y="132" fill="#c8ccd4" textLength="507.4" lengthAdjust="spacing" xml:space="preserve">[2] api key       — works immediately. Comments post under </text><text x="542.6" y="132" fill="#c8ccd4" textLength="197.8" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">your own Linear account</text>
-<text x="35.2" y="152" fill="#c8ccd4" textLength="318.2" lengthAdjust="spacing" xml:space="preserve">[3] workspace app — comments post as </text><text x="353.4" y="152" fill="#56b6c2" textLength="86.0" lengthAdjust="spacing" xml:space="preserve">crosscheck</text><text x="448.0" y="152" fill="#c8ccd4" textLength="215.0" lengthAdjust="spacing" xml:space="preserve">itself, with its own icon</text>
-<text x="207.2" y="172" fill="#c8ccd4" textLength="507.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">one app per workspace, ~5 min, needs Linear settings access</text>
-
-<text x="35.2" y="212" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Current: off</text>
-
-<text x="35.2" y="252" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">Choice [1]: 3</text>
-<text x="35.2" y="272" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Your Linear team key prefixes, so refs like ENG-42 in a branch name resolve.</text>
-<text x="35.2" y="292" fill="#c8ccd4" textLength="567.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Comma-separated. Leave blank to only follow full linear.app links.</text>
-<text x="35.2" y="312" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">team keys: IN</text>
-
-<text x="35.2" y="352" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Create the app, then set LINEAR_CLIENT_ID and LINEAR_CLIENT_SECRET.</text>
-<text x="35.2" y="372" fill="#c8ccd4" textLength="309.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Walkthrough: docs/linear-identity.md</text>
-
-<text x="18.0" y="412" fill="#c8ccd4" textLength="283.8" lengthAdjust="spacing" font-weight="600" xml:space="preserve">Step 10 — review and write config</text>
-
-<text x="35.2" y="452" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">linear       </text><text x="147.0" y="452" fill="#56b6c2" textLength="154.8" lengthAdjust="spacing" xml:space="preserve">client_credentials</text><text x="310.4" y="452" fill="#c8ccd4" textLength="34.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(IN)</text>
-</svg>

package/assets/linear-status.svg

@@ -1,23 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="578" height="350" viewBox="0 0 578 350" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
-  <rect width="578" height="350" rx="8" fill="#21252b"/>
-  <rect width="578" height="34" rx="8" fill="#2c313a"/>
-  <rect y="26" width="578" height="8" fill="#2c313a"/>
-  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
-  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
-  <circle cx="60" cy="17" r="6" fill="#18c132"/>
-  <text x="289" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck status</text>
-<text x="35.2" y="52" fill="#c8ccd4" textLength="51.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Config</text>
-<text x="52.4" y="72" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">config path           </text><text x="250.2" y="72" fill="#c8ccd4" textLength="206.4" lengthAdjust="spacing" xml:space="preserve">~/.crosscheck/config.yml</text>
-<text x="52.4" y="92" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">mode                  </text><text x="250.2" y="92" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" xml:space="preserve">cross-vendor</text>
-<text x="52.4" y="112" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">quality tier          </text><text x="250.2" y="112" fill="#c8ccd4" textLength="68.8" lengthAdjust="spacing" xml:space="preserve">balanced</text>
-<text x="52.4" y="132" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">codex auth            </text><text x="250.2" y="132" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" xml:space="preserve">subscription</text>
-<text x="52.4" y="152" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">codex model           </text><text x="250.2" y="152" fill="#c8ccd4" textLength="120.4" lengthAdjust="spacing" xml:space="preserve">auto (by tier)</text>
-<text x="52.4" y="172" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">claude model          </text><text x="250.2" y="172" fill="#c8ccd4" textLength="60.2" lengthAdjust="spacing" xml:space="preserve">default</text>
-<text x="52.4" y="192" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">per-review budget     </text><text x="250.2" y="192" fill="#c8ccd4" textLength="206.4" lengthAdjust="spacing" xml:space="preserve">subscription (unlimited)</text>
-
-<text x="35.2" y="232" fill="#c8ccd4" textLength="51.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Linear</text>
-<text x="35.2" y="252" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="61.0" y="252" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">auth mode             </text><text x="258.8" y="252" fill="#c8ccd4" textLength="60.2" lengthAdjust="spacing" xml:space="preserve">api_key</text>
-<text x="52.4" y="272" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">organization          </text><text x="250.2" y="272" fill="#c8ccd4" textLength="146.2" lengthAdjust="spacing" xml:space="preserve">Inductive Network</text>
-<text x="52.4" y="292" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">writes as             </text><text x="250.2" y="292" fill="#c8ccd4" textLength="180.6" lengthAdjust="spacing" xml:space="preserve">yi@inductive.network </text><text x="430.8" y="292" fill="#c8ccd4" textLength="77.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(api key)</text>
-<text x="52.4" y="312" fill="#c8ccd4" textLength="490.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">to post as crosscheck itself, see docs/linear-identity.md</text>
-</svg>

package/assets/linear-test.svg

@@ -1,34 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="733" height="570" viewBox="0 0 733 570" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
-  <rect width="733" height="570" rx="8" fill="#21252b"/>
-  <rect width="733" height="34" rx="8" fill="#2c313a"/>
-  <rect y="26" width="733" height="8" fill="#2c313a"/>
-  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
-  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
-  <circle cx="60" cy="17" r="6" fill="#18c132"/>
-  <text x="366.5" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck linear-test</text>
-
-<text x="18.0" y="72" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">crosscheck linear-test</text>
-
-<text x="18.0" y="112" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="112" fill="#c8ccd4" textLength="404.2" lengthAdjust="spacing" xml:space="preserve">identity      api_key — writes as you@acme.com </text><text x="448.0" y="112" fill="#c8ccd4" textLength="77.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(api key)</text>
-<text x="18.0" y="132" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="132" fill="#c8ccd4" textLength="154.8" lengthAdjust="spacing" xml:space="preserve">workspace     Acme</text>
-<text x="18.0" y="152" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="152" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" xml:space="preserve">reference     IN-2269 </text><text x="233.0" y="152" fill="#c8ccd4" textLength="120.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(via argument)</text>
-<text x="18.0" y="172" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="172" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" xml:space="preserve">lookup        https://linear.app/acme/issue/IN-2269/tiered-identity</text>
-<text x="18.0" y="192" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="192" fill="#c8ccd4" textLength="352.6" lengthAdjust="spacing" xml:space="preserve">filter        NEEDS_WORK is in comment_on</text>
-
-<text x="35.2" y="232" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">── comment that would be posted ────────────────────────────────────────────</text>
-
-<text x="35.2" y="272" fill="#c8ccd4" textLength="309.6" lengthAdjust="spacing" xml:space="preserve">🤖 crosscheck/review · gpt-5.6-terra</text>
-
-<text x="35.2" y="312" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" xml:space="preserve">**NEEDS_WORK** — codex (gpt-5.6-terra) review of [example: a sample</text>
-<text x="35.2" y="332" fill="#c8ccd4" textLength="344.0" lengthAdjust="spacing" xml:space="preserve">PR](https://github.com/acme/app/pull/42)</text>
-
-<text x="35.2" y="372" fill="#c8ccd4" textLength="473.0" lengthAdjust="spacing" xml:space="preserve">Example summary — a real run puts the review text here.</text>
-
-<text x="35.2" y="412" fill="#c8ccd4" textLength="662.2" lengthAdjust="spacing" xml:space="preserve">&lt;!-- crosscheck: origin=claude reviewer=codex model=gpt-5.6-terra type=review</text>
-<text x="35.2" y="432" fill="#c8ccd4" textLength="524.6" lengthAdjust="spacing" xml:space="preserve">round=1 verdict=NEEDS_WORK service=crosscheck sha=abc1234 --&gt;</text>
-
-<text x="35.2" y="472" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">────────────────────────────────────────────────────────────────────────────</text>
-
-<text x="18.0" y="512" fill="#98c379" textLength="369.8" lengthAdjust="spacing" xml:space="preserve">✓ Nothing was posted — this was a dry run.</text>
-
-</svg>

package/assets/skills/code-review/.crosscheck-skill.json

@@ -1,9 +0,0 @@
-{
-  "schemaVersion": 1,
-  "name": "code-review",
-  "author": "mattpocock",
-  "license": "MIT",
-  "source": "https://github.com/mattpocock/skills",
-  "revision": "2ab958093e83e0ec752e6c1c5932da465bf23e0c",
-  "integrity": "sha256:59eecd403b82ae0823cad21aa585efa62ac6d00f800137dee4d673b6092c20c6"
-}

package/assets/skills/code-review/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Matt Pocock
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/assets/skills/code-review/SKILL.md

@@ -1,89 +0,0 @@
----
-name: code-review
-description: Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes — Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/PRD asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to "review since X".
----
-
-Two-axis review of the diff between `HEAD` and a fixed point the user supplies:
-
-- **Standards** — does the code conform to this repo's documented coding standards?
-- **Spec** — does the code faithfully implement the originating issue / PRD / spec?
-
-Both axes run as **parallel sub-agents** so they don't pollute each other's context, then this skill aggregates their findings.
-
-The issue tracker should have been provided to you — run `/setup-matt-pocock-skills` if `docs/agents/issue-tracker.md` is missing.
-
-## Process
-
-### 1. Pin the fixed point
-
-Whatever the user said is the fixed point — a commit SHA, branch name, tag, `main`, `HEAD~5`, etc. If they didn't specify one, ask for it.
-
-Capture the diff command once: `git diff <fixed-point>...HEAD` (three-dot, so the comparison is against the merge-base). Also note the list of commits via `git log <fixed-point>..HEAD --oneline`.
-
-Before going further, confirm the fixed point resolves (`git rev-parse <fixed-point>`) and the diff is non-empty. A bad ref or empty diff should fail here — not inside two parallel sub-agents.
-
-### 2. Identify the spec source
-
-Look for the originating spec, in this order:
-
-1. Issue references in the commit messages (`#123`, `Closes #45`, GitLab `!67`, etc.) — fetch via the workflow in `docs/agents/issue-tracker.md`.
-2. A path the user passed as an argument.
-3. A PRD/spec file under `docs/`, `specs/`, or `.scratch/` matching the branch name or feature.
-4. If nothing is found, ask the user where the spec is. If they say there isn't one, the **Spec** sub-agent will skip and report "no spec available".
-
-### 3. Identify the standards sources
-
-Anything in the repo that documents how code should be written, such as `CODING_STANDARDS.md` or `CONTRIBUTING.md`.
-
-On top of whatever the repo documents, the Standards axis always carries the **smell baseline** below — a fixed set of Fowler code smells (_Refactoring_, ch.3) that applies even when a repo documents nothing. Two rules bind it:
-
-- **The repo overrides.** A documented repo standard always wins; where it endorses something the baseline would flag, suppress the smell.
-- **Always a judgement call.** Each smell is a labelled heuristic ("possible Feature Envy"), never a hard violation — and, like any standard here, skip anything tooling already enforces.
-
-Each smell reads *what it is* → *how to fix*; match it against the diff:
-
-- **Mysterious Name** — a function, variable, or type whose name doesn't reveal what it does or holds. → rename it; if no honest name comes, the design's murky.
-- **Duplicated Code** — the same logic shape appears in more than one hunk or file in the change. → extract the shared shape, call it from both.
-- **Feature Envy** — a method that reaches into another object's data more than its own. → move the method onto the data it envies.
-- **Data Clumps** — the same few fields or params keep travelling together (a type wanting to be born). → bundle them into one type, pass that.
-- **Primitive Obsession** — a primitive or string standing in for a domain concept that deserves its own type. → give the concept its own small type.
-- **Repeated Switches** — the same `switch`/`if`-cascade on the same type recurs across the change. → replace with polymorphism, or one map both sites share.
-- **Shotgun Surgery** — one logical change forces scattered edits across many files in the diff. → gather what changes together into one module.
-- **Divergent Change** — one file or module is edited for several unrelated reasons. → split so each module changes for one reason.
-- **Speculative Generality** — abstraction, parameters, or hooks added for needs the spec doesn't have. → delete it; inline back until a real need shows.
-- **Message Chains** — long `a.b().c().d()` navigation the caller shouldn't depend on. → hide the walk behind one method on the first object.
-- **Middle Man** — a class or function that mostly just delegates onward. → cut it, call the real target direct.
-- **Refused Bequest** — a subclass or implementer that ignores or overrides most of what it inherits. → drop the inheritance, use composition.
-
-### 4. Spawn both sub-agents in parallel
-
-Send a single message with two `Agent` tool calls. Use the `general-purpose` subagent for both.
-
-**Standards sub-agent prompt** — include:
-
-- The full diff command and commit list.
-- The list of standards-source files you found in step 3, **plus the smell baseline from step 3** pasted in full — the sub-agent has no other access to it.
-- The brief: "Report — per file/hunk where relevant — (a) every place the diff violates a documented standard: cite the standard (file + the rule); and (b) any baseline smell you spot: name it and quote the hunk. Distinguish hard violations from judgement calls — documented-standard breaches can be hard, but baseline smells are always judgement calls, and a documented repo standard overrides the baseline. Skip anything tooling enforces. Under 400 words."
-
-**Spec sub-agent prompt** — include:
-
-- The diff command and commit list.
-- The path or fetched contents of the spec.
-- The brief: "Report: (a) requirements the spec asked for that are missing or partial; (b) behaviour in the diff that wasn't asked for (scope creep); (c) requirements that look implemented but where the implementation looks wrong. Quote the spec line for each finding. Under 400 words."
-
-If the spec is missing, skip the Spec sub-agent and note this in the final report.
-
-### 5. Aggregate
-
-Present the two reports under `## Standards` and `## Spec` headings, verbatim or lightly cleaned. Do **not** merge or rerank findings — the two axes are deliberately separate (see _Why two axes_).
-
-End with a one-line summary: total findings per axis, and the worst issue _within each axis_ (if any). Don't pick a single winner across axes — that's the reranking the separation exists to prevent.
-
-## Why two axes
-
-A change can pass one axis and fail the other:
-
-- Code that follows every standard but implements the wrong thing → **Standards pass, Spec fail.**
-- Code that does exactly what the issue asked but breaks the project's conventions → **Spec pass, Standards fail.**
-
-Reporting them separately stops one axis from masking the other.

package/assets/skills/code-review/agents/openai.yaml

@@ -1,3 +0,0 @@
-interface:
-  display_name: "Code Review"
-  short_description: "Review a diff on standards and spec"

package/assets/skills/code-review-skill/.crosscheck-skill.json

@@ -1,9 +0,0 @@
-{
-  "schemaVersion": 1,
-  "name": "code-review-skill",
-  "author": "awesome-skills",
-  "license": "MIT",
-  "source": "https://github.com/awesome-skills/code-review-skill",
-  "revision": "95c707b999295f6c8ee2d0d3d1c61cc0c2e1a52c",
-  "integrity": "sha256:27a9e6b964e270ded1bb11c7bab31fccc7ed76c7a9a86fd80e330553c8677d75"
-}