@jenga-ai/agent 1.0.0

package/skills/init/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: init
+description: Initialize a new project with the standard directory structure, PROJECT_SUMMARY.md, workflow.json, git repo, and gitignore. Follows a defined ordered onboarding sequence. Use when setting up a new or empty project.
+keywords:
+  - init
+  - initialize
+  - setup
+  - new project
+  - scaffold
+examples:
+  - "initialize a new project"
+  - "set up a new workspace"
+---
+
+# Init — Project Setup
+
+## Instructions
+
+Follow these steps in order. Do not skip steps — the sequence matters.
+
+### 1–9. Run the scaffold script
+
+Execute the init script from the project root:
+
+```bash
+chmod +x ./scripts/init.sh && ./scripts/init.sh
+```
+
+This script handles all scaffolding in one step:
+1. Initializes the git repository
+2. Creates `.gitignore`
+3. Creates the full directory structure under `project/`
+4. Creates `project/PROJECT_SUMMARY.md` with placeholder content
+5. Creates `project/configs/workflow.json` with shared constants
+6. Creates `project/configs/test-config.json` stub
+7. Creates `project/data/baselines.json`
+8. Creates `project/logs/events.json`
+9. Stages and commits all files with the message `init: scaffold project structure and workflow config`
+
+If the script fails, check that you are in the project root and that git is available.
+
+### 10. Prompt next step
+
+Inform the user that setup is complete and suggest running `/pi-plan` to define project goals and epics.

package/skills/init/assets/.gitignore_template

@@ -0,0 +1,15 @@
+# macOS & Windows system files
+.DS_Store
+Thumbs.db
+Desktop.ini
+
+# Environment files
+.env
+.env.*
+*.local
+
+# Dependency directories
+node_modules/
+vendor/
+.venv/
+EOF

package/skills/init/assets/PROJECT_SUMMARY_template.md

@@ -0,0 +1,13 @@
+# Project Summary
+
+## Overview
+_To be completed._
+
+## Architecture & Structure
+_To be completed._
+
+## Epics
+_To be completed via /pi-plan._
+
+## Conventions
+_To be completed._

package/skills/init/assets/directory_structure.txt

@@ -0,0 +1,13 @@
+project/board/epics
+project/board/stories
+project/board/tasks
+project/configs
+project/data
+project/queue
+project/rapports/problems
+project/rapports/analysis
+project/logs
+project/documentation
+project/documentation/plans
+project/documentation/summaries
+project/documentation/examples

package/skills/init/assets/test-config_template.json

@@ -0,0 +1,4 @@
+{
+  "_note": "Run the tester agent to configure tools for this project.",
+  "tools": []
+}

package/skills/init/assets/workflow_template.json

@@ -0,0 +1,30 @@
+{
+  "statuses": ["Pending", "In Progress", "Passed", "Passed with remarks", "Failed", "Rejected", "Blocked"],
+  "rapport_types": ["conflict", "implementation_blocker", "security_concern", "test_failure", "analysis"],
+  "paths": {
+    "board": "project/board",
+    "epics": "project/board/epics",
+    "stories": "project/board/stories",
+    "tasks": "project/board/tasks",
+    "rapports_problems": "project/rapports/problems",
+    "rapports_analysis": "project/rapports/analysis",
+    "queue": "project/queue",
+    "scrum_triggers": "project/queue/scrum_triggers.jsonl",
+    "developer_triggers": "project/queue/developer_triggers.jsonl",
+    "tester_triggers": "project/queue/tester_triggers.jsonl",
+    "session_handoff": "project/queue/.session_handoff.json",
+    "logs": "project/logs",
+    "data": "project/data",
+    "configs": "project/configs",
+    "documentation": "project/documentation",
+    "documentation_plans": "project/documentation/plans",
+    "documentation_summaries": "project/documentation/summaries"
+  },
+  "agents": ["developer", "tester", "scrum-master"],
+  "pipeline": [
+    {"step": 1, "agent": "scrum-master", "phase": "planning",        "on_complete": "write planning_complete handoff → developer_triggers.jsonl"},
+    {"step": 2, "agent": "developer",    "phase": "implementation",  "on_complete": "write implementation_complete handoff → tester_triggers.jsonl"},
+    {"step": 3, "agent": "tester",       "phase": "verification",    "on_complete": "write test status handoff → scrum_triggers.jsonl (+ developer_triggers.jsonl if failed)"},
+    {"step": 4, "agent": "scrum-master", "phase": "rollup_review",   "on_complete": "update board statuses, close epic/story if all done"}
+  ]
+}

package/skills/init/scripts/init.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ASSETS_DIR="$SCRIPT_DIR/../assets"
+
+# ─── 1. Initialize git repository ────────────────────────────────────────────
+echo "→ Initializing git repository..."
+git init
+
+# ─── 2. Create .gitignore ─────────────────────────────────────────────────────
+echo "→ Copying .gitignore from template..."
+cp "$ASSETS_DIR/.gitignore_template" .gitignore
+
+# ─── 3. Scaffold directory structure ──────────────────────────────────────────
+echo "→ Scaffolding directory structure..."
+while IFS= read -r dir || [[ -n "$dir" ]]; do
+  [[ -z "$dir" || "$dir" == \#* ]] && continue
+  mkdir -p "$dir"
+done < "$ASSETS_DIR/directory_structure.txt"
+
+# ─── 4. Create project/PROJECT_SUMMARY.md ────────────────────────────────────
+echo "→ Copying PROJECT_SUMMARY.md from template..."
+cp "$ASSETS_DIR/PROJECT_SUMMARY_template.md" project/PROJECT_SUMMARY.md
+
+# ─── 5. Create project/configs/workflow.json ─────────────────────────────────
+echo "→ Copying workflow.json from template..."
+cp "$ASSETS_DIR/workflow_template.json" project/configs/workflow.json
+
+# ─── 6. Create project/configs/test-config.json stub ─────────────────────────
+echo "→ Copying test-config.json from template..."
+cp "$ASSETS_DIR/test-config_template.json" project/configs/test-config.json
+
+# ─── 7. Create project/data/baselines.json ───────────────────────────────────
+echo "→ Creating baselines.json..."
+echo '{}' > project/data/baselines.json
+
+# ─── 8. Create project/logs/events.json ──────────────────────────────────────
+echo "→ Creating events.json..."
+echo '[]' > project/logs/events.json
+
+# ─── 9. Initial commit ───────────────────────────────────────────────────────
+echo "→ Staging and committing scaffolded files..."
+git add -A
+git commit -m "init: scaffold project structure and workflow config"
+
+echo ""
+echo "✓ Project scaffold complete."

package/skills/jbp/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: jbp
+description: Scaffold the project using the JengaBasePlate boilerplate repo template from https://github.com/samwelmunga/JengaBasePlate.git
+keywords:
+  - jbp
+  - boilerplate
+  - scaffold
+  - template
+  - jenga base
+examples:
+  - "scaffold with JengaBasePlate"
+  - "set up the base template"
+---
+
+# JBP — JengaBasePlate Scaffold
+
+## Instructions
+
+Use the following repo as the boilerplate framework for this project:
+
+```
+https://github.com/samwelmunga/JengaBasePlate.git
+```
+
+Clone or pull the template and apply its structure to the current project.

package/skills/jenga/SKILL.md

@@ -0,0 +1,68 @@
+---
+name: jenga
+description: Fully automated board orchestrator. Decomposes any unbroken Epics into Stories, any unbroken Stories into Tasks, queues all unqueued Tasks into todo.md, then executes every eligible item — no user prompts — until the board is fully started.
+keywords:
+  - jenga
+  - orchestrate
+  - auto implement
+  - full board
+  - automated
+examples:
+  - "run jenga to implement everything"
+  - "start the full automation"
+metadata:
+  prefered_agent: scrum-master
+---
+
+# Jenga — Auto-Implementation Orchestrator
+
+## Purpose
+
+`/jenga` is a hands-free "commit to everything on the board" pipeline. It ensures the entire board is fully decomposed, fully queued, and fully executing — without any user interaction. It runs in four phases: **decompose → queue → execute → loop**.
+
+## Instructions
+
+### Phase 1 — Decompose Epics into Stories
+
+Read all files in `project/board/epics/`. For each Epic that has no corresponding story files in `project/board/stories/` (i.e. no files whose name starts with that Epic's ID), invoke `/do` via a **scrum-master sub-agent** to break it down into Stories.
+
+Repeat until every Epic has at least one Story on the board.
+
+### Phase 2 — Decompose Stories into Tasks
+
+Read all files in `project/board/stories/`. For each Story that has no corresponding task files in `project/board/tasks/` (i.e. no files whose name starts with that Story's ID), invoke `/do` via a **scrum-master sub-agent** to break it down into Tasks.
+
+Repeat until every Story has at least one Task on the board.
+
+### Phase 3 — Queue all Tasks into `todo.md`
+
+Read all files in `project/board/tasks/`. For every Task not already listed in `project/todo.md`, append its ID (and title as a comment) to `project/todo.md`.
+
+After this phase, `todo.md` reflects the full set of work on the board.
+
+### Phase 4 — Execute
+
+Loop through `todo.md` and execute all eligible items, running independent ones in parallel:
+
+1. **Collect eligible items** — from `todo.md`, find all items whose board file has `status: Pending` and no unresolved dependencies. A dependency is resolved if the blocking item's status is at least `Running` or `Passed`.
+2. **Group by parallelism** — items with no shared dependencies and no overlapping output files can run concurrently. Items that depend on each other must be sequenced.
+3. **Invoke `/do` in parallel** — launch each independent item as a **background sub-agent** simultaneously. Do not wait for one to finish before starting another if they are independent.
+4. **Mark Running** — update `status: Running` in each launched item's board file (YAML front-matter) immediately after launch.
+5. **Wait and loop** — once all active background agents have completed, return to step 1 of this phase to pick up any newly unblocked items.
+
+### Exit condition
+
+When no eligible candidates remain in Phase 4, exit and output:
+
+```
+✅ Jenga complete. All eligible tasks have been started.
+```
+
+## Edge Cases
+
+- **Epic with no stories after breakdown** — log a warning and continue to the next Epic; do not block the pipeline.
+- **Story with no tasks after breakdown** — log a warning and continue to the next Story.
+- **Task already in `todo.md`** — skip; do not duplicate.
+- **All tasks in `todo.md` already Running/Passed** — exits cleanly with the completion message.
+- **Unresolved dependencies** — item is skipped in Phase 4 until its blockers are at least `Running`.
+- **`/do` failure (background agent)** — treated as a skip; mark the item's status back to `Pending` and continue the loop with remaining candidates.

package/skills/lgtm/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: lgtm
+description: Approve and commit the current work, then continue to the next task. Shortcut that chains /commit followed by /continue.
+keywords:
+  - lgtm
+  - approve
+  - looks good
+  - done
+  - commit and continue
+examples:
+  - "lgtm, commit this"
+  - "looks good, move on"
+---
+
+# LGTM — Approve, Commit, and Continue
+
+## Instructions
+
+1. Invoke the `/commit` skill and wait for it to finish.
+
+2. If the current workflow is part of a `/do` execution, return to that workflow. Otherwise, invoke the `/continue` skill.

package/skills/mirror-public/SKILL.md

@@ -0,0 +1,237 @@
+---
+name: mirror-public
+description: Mirror this private repo one-way to its public counterpart (`https://github.com/samwelmunga/jenga-npm`), applying a `.publicignore` blocklist and producing a single squash commit per run so private board, queue, log, and rapport artefacts never leak downstream.
+keywords:
+  - mirror public
+  - public mirror
+  - jenga-npm
+  - one-way sync
+  - publicignore
+  - squash mirror
+examples:
+  - "/mirror-public --dry-run"
+  - "/mirror-public"
+  - "/mirror-public --force"
+  - "preview what would ship to the public repo"
+  - "sync the public mirror"
+---
+
+# Mirror-Public
+
+Push a curated subset of this private repo to the public counterpart at `https://github.com/samwelmunga/jenga-npm` as a **one-way**, **squash-committed** mirror. Private is always the source of truth; the public repo is a downstream shadow that this skill can rebuild at any time.
+
+Distinct from `/publish` (which ships the `jenga-agent` npm package to npmjs.com) and from `/self-sync` (which mirrors root → in-repo `.claude/.agents/`). This skill is the third distribution surface: the public GitHub repo.
+
+## Direction & Contract
+
+- **Direction:** private → public, one-way. Public never merges back. If a public commit exists that this skill did not create, the run aborts by default (see [Safety](#safety-model)).
+- **Trigger:** manual only. There is no CI hook, no git hook, no on-commit automation. The risk of leaking WIP outweighs the convenience.
+- **Commit model:** each real run produces exactly **one squash commit** on the public side. Private commit messages, authors, and history never appear on the public repo.
+- **Scope model:** ships everything **except** what `.publicignore` blocks. Additive-by-default; the blocklist is the single source of truth for what stays private.
+
+## Invocation
+
+| Command | Effect |
+|---------|--------|
+| `/mirror-public --dry-run` | Read-only preview. Prints the exact "would ship" and "would be blocked" file lists plus totals. No fetch-write, no commit, no push. |
+| `/mirror-public` | Real run. Fetches the public tip, runs the safety check, rsyncs, squash-commits, pushes. Aborts if the public repo is ahead of the last mirror marker. |
+| `/mirror-public --force` | Same as the real run, but overrides the safety abort — the public branch is force-updated to match private (blocklist applied). Use only for recovery; see [Recovery flow](#recovery-when-the-public-repo-is-ahead). |
+
+All three delegate to `skills/mirror-public/scripts/mirror.sh`. This SKILL body never inlines mirror logic — everything lives in the script.
+
+### How it is actually run
+
+```bash
+# preview
+bash skills/mirror-public/scripts/mirror.sh --dry-run
+
+# real run
+bash skills/mirror-public/scripts/mirror.sh
+
+# force overwrite when the public repo is ahead
+bash skills/mirror-public/scripts/mirror.sh --force
+```
+
+## Blocklist — `.publicignore`
+
+`.publicignore` lives at the **repo root** (discoverable like `.gitignore`). It is a `.gitignore`-style pattern file consumed by `rsync --exclude-from=<repo-root>/.publicignore`. Every line is a path relative to the repo root that MUST NEVER ship to the public mirror.
+
+Current baseline (see the file for the authoritative list) blocks:
+
+- `project/board/`, `project/queue/`, `project/logs/`, `project/rapports/`, `project/todo.md`
+- `project/documentation/plans/`, `project/documentation/summaries/`, `project/instructions/`
+- `.env`, `.env.*`, `*.local`, `*.pid`, `.claude/settings.local.json`
+- `.claude/worktrees/`, `.agents/worktrees/`, `.mirror-worktrees/`
+- `node_modules/`, `**/__pycache__/`, `*.pyc`, `.DS_Store`, `.git/`
+
+### Adding new entries
+
+Edit `.publicignore` and add the path(s). Rules:
+
+- **Over-block, don't under-block.** Anything missed is a private leak; anything extra is merely an unshipped file.
+- **Verify with `--dry-run` before pushing.** The dry-run "Files that would ship" section is the honest answer to "did my new pattern match?".
+- Directory-globs must end in `/` (e.g. `project/scratch/`), otherwise rsync only matches a file of that exact name.
+
+## Config — `skills/mirror-public/assets/config.json`
+
+```json
+{
+  "publicRepoUrl": "https://github.com/samwelmunga/jenga-npm.git",
+  "defaultBranch": "main",
+  "worktreePath": ".mirror-worktrees/public"
+}
+```
+
+| Field | Purpose |
+|-------|---------|
+| `publicRepoUrl` | URL of the public downstream repo. Can be overridden at runtime by `MIRROR_PUBLIC_URL_OVERRIDE` (used by tests and by anyone rehearsing against a local bare remote). |
+| `defaultBranch` | Branch mirrored on the public side. `main` in production. |
+| `worktreePath` | Relative path (from the private repo root) where the script keeps its scratch clone of the public repo. Blocked from itself via `.publicignore` (`.mirror-worktrees/`). |
+
+## Safety model
+
+The script maintains a **local `last-mirror-sync` tag** inside its scratch clone that records the public SHA it last produced. Before every real run it compares that tag to the current tip of `origin/<defaultBranch>`:
+
+- **Tag missing** (first ever run, or scratch clone was wiped): proceed.
+- **Tag matches remote tip:** proceed — the public repo has not moved since our last mirror.
+- **Tag lags remote tip:** the public repo has commits the mirror did not create. **Abort with a non-zero exit** unless `--force` is passed.
+
+`--force` skips the abort and overwrites the public branch with the private state (post-blocklist). It is a **destructive-by-default** flag: any commit that landed on the public repo outside this skill will disappear from the public branch. Rescue that work first (see [Recovery flow](#recovery-when-the-public-repo-is-ahead)) before using `--force`.
+
+## Squash-commit model
+
+Every real run creates exactly one commit on the public branch:
+
+```
+chore(mirror): sync from private at <short-sha> <UTC-timestamp>
+
+Source-Commit: <full-private-sha>
+```
+
+- **Subject** identifies the private HEAD at the time of the mirror.
+- **`Source-Commit:` trailer** carries the full private SHA so anyone reading the public commit can cross-reference (against a private clone they have access to) which private state produced this snapshot.
+- **No private log leaks.** Individual private commits, author names, and messages are never replayed on the public side.
+- **Idempotent.** If the working tree matches the public tip post-blocklist, the script exits without creating a commit and prints `nothing to mirror — public tree already matches private (post-blocklist)`.
+
+## Examples
+
+All example outputs below were captured against a local bare remote (`/tmp/mirror-t04-test.git`) using `MIRROR_PUBLIC_URL_OVERRIDE`, so the same shape reproduces without touching the real `jenga-npm.git`.
+
+### Dry-run
+
+```bash
+bash skills/mirror-public/scripts/mirror.sh --dry-run
+```
+
+Tail of the output:
+
+```
+=== Files that would ship (607) ===
+...
+=== Files that would be blocked (599) ===
+project/board/...
+project/queue/...
+project/logs/...
+project/rapports/...
+project/todo.md
+...
+
+================ mirror-public dry-run summary ================
+would ship    : 607 files
+would block   : 599 files
+public URL    : https://github.com/samwelmunga/jenga-npm.git
+remote branch : main
+dry run — no push, no commit, no remote mutation
+===============================================================
+```
+
+Zero remote mutation. Use this before every real run when the mirror state is uncertain, and after every `.publicignore` edit to confirm the pattern matched.
+
+### Real run
+
+```bash
+bash skills/mirror-public/scripts/mirror.sh
+```
+
+Tail of the output (first mirror against a fresh remote):
+
+```
+mirror.sh: no last-mirror-sync tag found (first mirror or wiped scratch) — proceeding
+mirror.sh: rsync <repo>/ -> <repo>/.mirror-worktrees/public/ (excludes: .publicignore + .git)
+mirror.sh: pushing b955ae3380a5d562799b0e8a75bbb758f8773104 -> origin/main
+
+================ mirror-public summary ================
+files changed : 607
+new commit    : b955ae3380a5d562799b0e8a75bbb758f8773104
+remote branch : main
+public URL    : https://github.com/samwelmunga/jenga-npm.git
+=======================================================
+```
+
+A second consecutive run reports `nothing to mirror — public tree already matches private (post-blocklist)` and exits `0`.
+
+### `--force`
+
+Use only when the safety abort fires and you have already rescued any external work off the public branch.
+
+```bash
+bash skills/mirror-public/scripts/mirror.sh --force
+```
+
+Look for the WARNING line — it names the divergent SHAs so you can verify you meant to overwrite them:
+
+```
+mirror.sh: WARNING: origin/main (7524425...) has moved past last-mirror-sync (b955ae3...); proceeding due to --force
+mirror.sh: rsync ...
+mirror.sh: pushing 154f7b7... -> origin/main
+```
+
+### Recovery when the public repo is ahead
+
+If the safety abort fires:
+
+```
+mirror.sh: error: origin/main (<remote-sha>) has moved past last-mirror-sync (<marker-sha>).
+The public repo has commits the mirror did not create. Re-run with --force to overwrite.
+```
+
+Do this before you reach for `--force`:
+
+1. **Inspect the divergent commits.** In a separate clone of the public repo:
+   ```bash
+   git clone https://github.com/samwelmunga/jenga-npm.git /tmp/jenga-npm-rescue
+   git -C /tmp/jenga-npm-rescue log <marker-sha>..origin/main
+   ```
+2. **Decide what to keep.** For each divergent commit that has value:
+   - If the change belongs in the private repo, port it into this repo (as a regular commit under normal review) so the next mirror carries it forward.
+   - If the change should live only on the public repo, save the patches somewhere durable (`git format-patch <marker-sha>..origin/main -o /tmp/rescue-patches`) — they will not survive `--force`.
+3. **Re-run with `--force`** once you are confident the public branch can be overwritten:
+   ```bash
+   bash skills/mirror-public/scripts/mirror.sh --force
+   ```
+
+The marker tag advances on success, and subsequent normal runs resume the abort-by-default behaviour.
+
+## Environment overrides
+
+| Variable | Purpose |
+|----------|---------|
+| `MIRROR_PUBLIC_URL_OVERRIDE` | Replaces `publicRepoUrl` from `config.json` at runtime. Used to rehearse against a local bare remote (e.g. `git init --bare /tmp/test-mirror.git`) without touching the real public repo. |
+
+## Out of Scope
+
+Per epic **E28 — Public Mirror**, these are explicitly not part of this skill:
+
+- **Two-way sync** (PR back-flow from public → private)
+- **Content-level scrubbing** (regex redactions inside file bodies)
+- **Automated triggers** (git hooks, CI, watch-mode)
+- **Cross-linking issues/PRs** between the two repos
+
+See `project/board/epics/E28_public-mirror.md` → *Out of Scope* for the authoritative list.
+
+## Guard rails
+
+- **Never inline mirror logic in this SKILL body.** All filesystem, git, rsync, and push work goes through `skills/mirror-public/scripts/mirror.sh`.
+- **Never push to `jenga-npm.git` from an ad-hoc script.** Only this skill should push. Ad-hoc pushes bypass the blocklist and the safety marker.
+- **Never commit `.mirror-worktrees/`.** It is already in `.publicignore` and should also stay untracked in the private repo. If you see it in `git status`, the scratch clone was accidentally seeded outside the configured path — investigate before mirroring.
+- **Never `git add` `.publicignore` matches on the private side to "hide" them from the mirror.** The private repo tracks whatever it needs to; the blocklist is the single filter and must remain the single filter.

package/skills/mirror-public/assets/config.json

@@ -0,0 +1,5 @@
+{
+  "publicRepoUrl": "https://github.com/samwelmunga/jenga-npm.git",
+  "defaultBranch": "main",
+  "worktreePath": ".mirror-worktrees/public"
+}