@intentsolutionsio/tonone 0.9.7 → 0.9.18

package/skills/touch-feature/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "touch-feature",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Produce a mobile feature spec \u2014 user story, technical approach, component breakdown, platform-specific considerations, edge cases. Use when asked to \"add a screen\", \"spec this feature\", \"mobile feature\", \"new tab\", \"push notifications\", or \"deep link\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "touch",
-    "skill"
-  ]
+  "keywords": ["touch", "skill"]
 }

package/skills/touch-feature/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Mobile Feature Spec

package/skills/touch-recon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "touch-recon",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Mobile reconnaissance \u2014 understand the app's tech stack, architecture, dependencies, and health for takeover. Use when asked to \"understand this app\", \"mobile assessment\", or \"app health\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "touch",
-    "skill"
-  ]
+  "keywords": ["touch", "skill"]
 }

package/skills/touch-recon/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Mobile Reconnaissance

package/skills/touch-release/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "touch-release",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Set up mobile release pipeline \u2014 Fastlane, code signing, CI, beta distribution, versioning. Use when asked about \"app store setup\", \"release pipeline\", \"fastlane\", \"beta distribution\", or \"signing\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "touch",
-    "skill"
-  ]
+  "keywords": ["touch", "skill"]
 }

package/skills/touch-release/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Set Up Mobile Release Pipeline

package/skills/touch-ui/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "touch-ui",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "|",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "touch",
-    "skill"
-  ]
+  "keywords": ["touch", "skill"]
 }

package/skills/vigil/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.9.1
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Vigil — Observability & Reliability

package/skills/vigil-alert/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vigil-alert",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Write SLO-based alert rules with burn rate thresholds and paired runbooks. Outputs actual alert configs, not a strategy doc. Use when asked to \"set up alerts\", \"create runbooks\", \"define SLOs\", or \"alerting strategy\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "vigil",
-    "skill"
-  ]
+  "keywords": ["vigil", "skill"]
 }

package/skills/vigil-alert/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Build Alert Rules and Runbooks

package/skills/vigil-check/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vigil-check",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Verify observability posture \u2014 audit monitoring coverage, find blind spots, prioritize gaps. Use when asked \"is monitoring sufficient\", \"observability review\", \"are we covered\", or \"pre-launch monitoring check\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "vigil",
-    "skill"
-  ]
+  "keywords": ["vigil", "skill"]
 }

package/skills/vigil-incident/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vigil-incident",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Incident response \u2014 diagnose production issues, find root cause, propose fix with rollback. Use when asked about \"something is broken\", \"production issue\", \"why is this down\", \"incident\", or \"debug production\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "vigil",
-    "skill"
-  ]
+  "keywords": ["vigil", "skill"]
 }

package/skills/vigil-instrument/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vigil-instrument",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Instrument a service with OpenTelemetry \u2014 RED metrics, structured logs, distributed tracing, and health checks. Outputs actual code and config, not a plan. Use when asked to \"add monitoring\", \"instrument this\", \"add logging\", \"set up tracing\", or \"observability\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "vigil",
-    "skill"
-  ]
+  "keywords": ["vigil", "skill"]
 }

package/skills/vigil-instrument/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Instrument a Service

package/skills/vigil-recon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vigil-recon",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Observability reconnaissance \u2014 inventory what monitoring exists, map coverage, highlight blind spots. Use when asked \"what monitoring exists\", \"observability assessment\", or \"what can we see\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "vigil",
-    "skill"
-  ]
+  "keywords": ["vigil", "skill"]
 }

package/skills/vigil-recon/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Observability Reconnaissance

package/skills/volt/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.9.1
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Volt — Embedded & IoT Engineering

package/skills/volt-driver/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "volt-driver",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Build a device driver or protocol handler \u2014 I2C sensors, BLE services, MQTT clients, SPI peripherals with interrupt-driven I/O and clean HAL abstraction. Use when asked to \"write a driver\", \"I2C device\", \"BLE service\", \"MQTT client\", or \"sensor integration\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "volt",
-    "skill"
-  ]
+  "keywords": ["volt", "skill"]
 }

package/skills/volt-driver/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Build Device Driver or Protocol Handler

package/skills/volt-firmware/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "volt-firmware",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Produce a complete firmware architecture spec for a described device \u2014 layer diagram, module responsibilities, HAL interface definitions, key state machines, RTOS decision. Use when asked to \"design firmware architecture\", \"plan embedded firmware\", \"architect an IoT device\", \"how should I structure this firmware\", or given a device description and asked what the firmware should look like.",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "volt",
-    "skill"
-  ]
+  "keywords": ["volt", "skill"]
 }

package/skills/volt-firmware/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Firmware Architecture Spec

package/skills/volt-ota/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "volt-ota",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Produce a complete OTA update system design \u2014 partition layout, update flow, rollback conditions, validation checks, fleet management approach, failure modes and recovery. Use when asked about \"OTA updates\", \"firmware updates over the air\", \"how do I update devices in the field\", \"OTA strategy\", or \"remote firmware update design\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "volt",
-    "skill"
-  ]
+  "keywords": ["volt", "skill"]
 }

package/skills/volt-ota/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # OTA Update System Design

package/skills/volt-power/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "volt-power",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Power management audit \u2014 analyze sleep modes, wake sources, power state machines, radio duty cycles, and battery life estimates. Use when asked to \"audit power usage\", \"optimize battery life\", \"review power management\", \"why is my battery draining\", \"power budget analysis\", or \"sleep mode review\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "volt",
-    "skill"
-  ]
+  "keywords": ["volt", "skill"]
 }

package/skills/volt-recon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "volt-recon",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Firmware reconnaissance for takeover \u2014 inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to \"understand this firmware\", \"device inventory\", or \"embedded assessment\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "volt",
-    "skill"
-  ]
+  "keywords": ["volt", "skill"]
 }

package/skills/warden/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.9.1
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Warden — Security Engineering

package/skills/warden-audit/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "warden-audit",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Full security audit \u2014 secrets, dependencies, IAM, auth, injection, XSS, HTTPS, rate limiting, public storage. Use when asked for \"security audit\", \"check for vulnerabilities\", \"security review\", or \"are we secure\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "warden",
-    "skill"
-  ]
+  "keywords": ["warden", "skill"]
 }

package/skills/warden-harden/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "warden-harden",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Produce a hardening spec and implement it \u2014 auth patterns, security headers, rate limiting, input validation, secrets management, dependency hygiene. Use when asked to \"harden this\", \"add security to this service\", \"what security do I need\", or \"secure this before launch\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "warden",
-    "skill"
-  ]
+  "keywords": ["warden", "skill"]
 }

package/skills/warden-harden/SKILL.md

@@ -5,8 +5,6 @@ allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, T
 version: 0.6.4
 author: tonone-ai <hello@tonone.ai>
 license: MIT
-tags: ["ai-agency", "tonone"]
-compatibility: "Designed for Claude Code"
 ---
 
 # Harden a Service

package/skills/warden-iam/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "warden-iam",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Build IAM from scratch \u2014 roles, policies, service accounts with least privilege. Use when asked to \"set up IAM\", \"create roles\", \"service accounts\", or \"access control\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "warden",
-    "skill"
-  ]
+  "keywords": ["warden", "skill"]
 }

package/skills/warden-recon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "warden-recon",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Security reconnaissance \u2014 full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps. Use when asked about \"security posture\", \"how secure is this\", or \"security assessment\".",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "warden",
-    "skill"
-  ]
+  "keywords": ["warden", "skill"]
 }

package/skills/warden-scan/SKILL.md

@@ -0,0 +1,92 @@
+---
+name: warden-scan
+description: Automated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report. Use when asked to "scan for vulnerabilities", "run a security scan", "check for CVEs", or "audit dependencies".
+allowed-tools: Bash, Read, Glob
+version: 0.9.7
+author: tonone-ai <hello@tonone.ai>
+license: MIT
+---
+
+# Warden Scan — Automated SAST + Dependency Audit
+
+You are Warden. Run a real security scan using Semgrep and pip-audit, then display the findings.
+
+## Step 1: Locate the scanner
+
+Find the scan.py entry point:
+
+```bash
+find . -path "*/warden_agent/scan.py" -not -path "*/__pycache__/*" 2>/dev/null | head -3
+```
+
+If not found, tell the user:
+
+> `scan.py` not found. Run `pip install semgrep pip-audit` and ensure the tonone plugin is installed.
+
+## Step 2: Determine target
+
+If the user specified a path, use it. Otherwise use `.` (current directory).
+
+## Step 3: Run the scan
+
+```bash
+python <path-to-scan.py> <target> --out .reports/warden-latest.json
+```
+
+The script:
+
+- Runs Semgrep SAST (`semgrep --config auto`)
+- Runs pip-audit on `requirements*.txt` files (falls back to current env)
+- Writes a JSON report and prints a summary line
+
+Capture stdout + stderr. If the script exits with code 2, that means critical/high findings were found (expected, not an error).
+
+## Step 4: Display results
+
+Parse and render the report using the tonone output kit format (40-line CLI budget, box-drawing skeleton):
+
+```
+┌─────────────────────────────────────────────┐
+│ warden-scan  <target>                       │
+└─────────────────────────────────────────────┘
+
+CRITICAL  <N>   HIGH  <N>   MEDIUM  <N>   LOW  <N>
+
+── SAST Findings ───────────────────────────────
+[C] <title>  <location>
+    <detail — 1 line>
+    Fix: <recommendation>
+
+[H] <title>  <location>
+    <detail — 1 line>
+    Fix: <recommendation>
+
+── Dependency Findings ─────────────────────────
+[H] <CVE-ID> in <pkg>==<ver>  <requirements-file>
+    Fix: <recommendation>
+
+── Summary ─────────────────────────────────────
+Report: .reports/warden-latest.json
+```
+
+Severity indicators: `[C]` critical, `[H]` high, `[M]` medium, `[L]` low.
+
+Show all CRITICAL and HIGH findings. Collapse MEDIUM/LOW into a count if there are more than 5.
+
+If 0 findings: show a clean pass banner.
+
+## Step 5: Exit guidance
+
+If critical or high findings exist, end with:
+
+> **Action required.** Review findings above. Run `/warden-harden` for remediation steps or `/warden-threat` for a full threat model.
+
+If only medium/low:
+
+> **Passed with warnings.** No critical issues found. Consider `/warden-audit` for a broader manual review.
+
+If clean:
+
+> **Clean scan.** No issues found by Semgrep or pip-audit.
+
+Follow the output format defined in docs/output-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose. If findings exceed 40 lines, emit a summary table and invoke `/atlas-report` to write the full report.

package/skills/warden-threat/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "warden-threat",
-  "version": "0.9.7",
+  "version": "1.9.1",
   "description": "Produce a threat model \u2014 assets, ranked threats, mitigations, accepted risks. Use when asked to \"threat model this\", \"what could go wrong security-wise\", \"map our attack surface\", or before designing any security-sensitive feature.",
   "author": {
     "name": "tonone-ai",
@@ -9,8 +9,5 @@
   "repository": "https://github.com/tonone-ai/tonone",
   "license": "MIT",
   "type": "skill",
-  "keywords": [
-    "warden",
-    "skill"
-  ]
+  "keywords": ["warden", "skill"]
 }