@jetrabbits/agentic 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (440) hide show
  1. package/AGENTS.md +143 -0
  2. package/README.md +154 -0
  3. package/agentic +1615 -0
  4. package/areas/devops/ci-cd/AGENTS.md +48 -0
  5. package/areas/devops/ci-cd/PROMPTS.md +7 -0
  6. package/areas/devops/ci-cd/prompts/onboard-repo.md +97 -0
  7. package/areas/devops/ci-cd/prompts/pipeline-debug.md +103 -0
  8. package/areas/devops/ci-cd/prompts/release-pipeline.md +115 -0
  9. package/areas/devops/ci-cd/rules/pipeline-standards.md +33 -0
  10. package/areas/devops/ci-cd/rules/quality-gates.md +24 -0
  11. package/areas/devops/ci-cd/rules/supply-chain-security.md +34 -0
  12. package/areas/devops/ci-cd/skills/artifact-management/SKILL.md +157 -0
  13. package/areas/devops/ci-cd/skills/build-optimization/SKILL.md +168 -0
  14. package/areas/devops/ci-cd/skills/github-actions-patterns/SKILL.md +190 -0
  15. package/areas/devops/ci-cd/skills/gitlab-ci-patterns/SKILL.md +169 -0
  16. package/areas/devops/ci-cd/skills/pipeline-security/SKILL.md +161 -0
  17. package/areas/devops/ci-cd/workflows/onboard-repo.md +73 -0
  18. package/areas/devops/ci-cd/workflows/pipeline-debug.md +66 -0
  19. package/areas/devops/ci-cd/workflows/release-pipeline.md +115 -0
  20. package/areas/devops/database-ops/AGENTS.md +47 -0
  21. package/areas/devops/database-ops/prompts/backup-verify.md +83 -0
  22. package/areas/devops/database-ops/prompts/db-incident.md +127 -0
  23. package/areas/devops/database-ops/rules/access-control.md +20 -0
  24. package/areas/devops/database-ops/rules/backup-policy.md +33 -0
  25. package/areas/devops/database-ops/rules/migration-runbook.md +32 -0
  26. package/areas/devops/database-ops/skills/backup-restore/SKILL.md +226 -0
  27. package/areas/devops/database-ops/skills/db-performance/SKILL.md +205 -0
  28. package/areas/devops/database-ops/skills/migration-safety/SKILL.md +155 -0
  29. package/areas/devops/database-ops/skills/postgres-operations/SKILL.md +156 -0
  30. package/areas/devops/database-ops/skills/redis-operations/SKILL.md +174 -0
  31. package/areas/devops/database-ops/workflows/backup-verify.md +107 -0
  32. package/areas/devops/database-ops/workflows/db-incident.md +86 -0
  33. package/areas/devops/devsecops/AGENTS.md +47 -0
  34. package/areas/devops/devsecops/prompts/policy-onboard.md +79 -0
  35. package/areas/devops/devsecops/prompts/security-scan-pipeline.md +131 -0
  36. package/areas/devops/devsecops/rules/container-security.md +22 -0
  37. package/areas/devops/devsecops/rules/policy-as-code.md +37 -0
  38. package/areas/devops/devsecops/rules/shift-left-policy.md +26 -0
  39. package/areas/devops/devsecops/skills/container-hardening/SKILL.md +146 -0
  40. package/areas/devops/devsecops/skills/opa-policies/SKILL.md +188 -0
  41. package/areas/devops/devsecops/skills/sbom-supply-chain/SKILL.md +165 -0
  42. package/areas/devops/devsecops/skills/secret-detection/SKILL.md +190 -0
  43. package/areas/devops/devsecops/skills/sigstore-signing/SKILL.md +184 -0
  44. package/areas/devops/devsecops/workflows/policy-onboard.md +104 -0
  45. package/areas/devops/devsecops/workflows/security-scan-pipeline.md +155 -0
  46. package/areas/devops/infrastructure/AGENTS.md +50 -0
  47. package/areas/devops/infrastructure/prompts/destroy-environment.md +81 -0
  48. package/areas/devops/infrastructure/prompts/drift-remediation.md +71 -0
  49. package/areas/devops/infrastructure/prompts/module-development.md +69 -0
  50. package/areas/devops/infrastructure/prompts/provision-environment.md +121 -0
  51. package/areas/devops/infrastructure/rules/iac-standards.md +80 -0
  52. package/areas/devops/infrastructure/rules/immutability.md +28 -0
  53. package/areas/devops/infrastructure/rules/secret-hygiene.md +53 -0
  54. package/areas/devops/infrastructure/rules/state-management.md +47 -0
  55. package/areas/devops/infrastructure/skills/ansible-playbooks/SKILL.md +174 -0
  56. package/areas/devops/infrastructure/skills/cost-optimization/SKILL.md +177 -0
  57. package/areas/devops/infrastructure/skills/drift-detection/SKILL.md +178 -0
  58. package/areas/devops/infrastructure/skills/state-management/SKILL.md +159 -0
  59. package/areas/devops/infrastructure/skills/terraform-modules/SKILL.md +169 -0
  60. package/areas/devops/infrastructure/workflows/destroy-environment.md +96 -0
  61. package/areas/devops/infrastructure/workflows/drift-remediation.md +66 -0
  62. package/areas/devops/infrastructure/workflows/module-development.md +101 -0
  63. package/areas/devops/infrastructure/workflows/provision-environment.md +96 -0
  64. package/areas/devops/kubernetes/AGENTS.md +57 -0
  65. package/areas/devops/kubernetes/PROMPTS.md +9 -0
  66. package/areas/devops/kubernetes/prompts/cluster-bootstrap.md +67 -0
  67. package/areas/devops/kubernetes/prompts/debug-workload.md +91 -0
  68. package/areas/devops/kubernetes/prompts/onboard-service.md +101 -0
  69. package/areas/devops/kubernetes/prompts/upgrade-cluster.md +63 -0
  70. package/areas/devops/kubernetes/rules/cluster-standards.md +51 -0
  71. package/areas/devops/kubernetes/rules/resource-governance.md +80 -0
  72. package/areas/devops/kubernetes/rules/upgrade-policy.md +52 -0
  73. package/areas/devops/kubernetes/rules/workload-security.md +64 -0
  74. package/areas/devops/kubernetes/skills/cluster-operations/SKILL.md +136 -0
  75. package/areas/devops/kubernetes/skills/helm-charts/SKILL.md +152 -0
  76. package/areas/devops/kubernetes/skills/network-policies/SKILL.md +169 -0
  77. package/areas/devops/kubernetes/skills/pod-troubleshooting/SKILL.md +129 -0
  78. package/areas/devops/kubernetes/skills/rbac-design/SKILL.md +148 -0
  79. package/areas/devops/kubernetes/skills/resource-tuning/SKILL.md +156 -0
  80. package/areas/devops/kubernetes/workflows/cluster-bootstrap.md +194 -0
  81. package/areas/devops/kubernetes/workflows/debug-workload.md +108 -0
  82. package/areas/devops/kubernetes/workflows/onboard-service.md +124 -0
  83. package/areas/devops/kubernetes/workflows/upgrade-cluster.md +165 -0
  84. package/areas/devops/networking/AGENTS.md +47 -0
  85. package/areas/devops/networking/prompts/onboard-ingress.md +119 -0
  86. package/areas/devops/networking/prompts/service-mesh-onboard.md +77 -0
  87. package/areas/devops/networking/rules/ingress-standards.md +17 -0
  88. package/areas/devops/networking/rules/network-segmentation.md +24 -0
  89. package/areas/devops/networking/rules/tls-policy.md +32 -0
  90. package/areas/devops/networking/skills/dns-management/SKILL.md +169 -0
  91. package/areas/devops/networking/skills/ingress-patterns/SKILL.md +165 -0
  92. package/areas/devops/networking/skills/service-mesh/SKILL.md +206 -0
  93. package/areas/devops/networking/skills/tls-termination/SKILL.md +198 -0
  94. package/areas/devops/networking/skills/vpc-design/SKILL.md +132 -0
  95. package/areas/devops/networking/workflows/onboard-ingress.md +64 -0
  96. package/areas/devops/networking/workflows/service-mesh-onboard.md +122 -0
  97. package/areas/devops/observability/AGENTS.md +48 -0
  98. package/areas/devops/observability/prompts/alert-investigation.md +117 -0
  99. package/areas/devops/observability/prompts/observability-stack-setup.md +99 -0
  100. package/areas/devops/observability/prompts/onboard-service-monitoring.md +79 -0
  101. package/areas/devops/observability/rules/alerting-standards.md +36 -0
  102. package/areas/devops/observability/rules/data-retention.md +19 -0
  103. package/areas/devops/observability/rules/golden-signals.md +28 -0
  104. package/areas/devops/observability/skills/distributed-tracing/SKILL.md +149 -0
  105. package/areas/devops/observability/skills/grafana-dashboards/SKILL.md +201 -0
  106. package/areas/devops/observability/skills/log-aggregation/SKILL.md +159 -0
  107. package/areas/devops/observability/skills/prometheus-alertmanager/SKILL.md +188 -0
  108. package/areas/devops/observability/skills/slo-implementation/SKILL.md +189 -0
  109. package/areas/devops/observability/workflows/alert-investigation.md +98 -0
  110. package/areas/devops/observability/workflows/observability-stack-setup.md +156 -0
  111. package/areas/devops/observability/workflows/onboard-service-monitoring.md +83 -0
  112. package/areas/devops/sre/AGENTS.md +48 -0
  113. package/areas/devops/sre/prompts/incident-response.md +129 -0
  114. package/areas/devops/sre/prompts/postmortem.md +101 -0
  115. package/areas/devops/sre/prompts/slo-review.md +125 -0
  116. package/areas/devops/sre/rules/error-budget-policy.md +25 -0
  117. package/areas/devops/sre/rules/on-call-standards.md +25 -0
  118. package/areas/devops/sre/rules/slo-policy.md +31 -0
  119. package/areas/devops/sre/skills/capacity-planning/SKILL.md +162 -0
  120. package/areas/devops/sre/skills/chaos-engineering/SKILL.md +186 -0
  121. package/areas/devops/sre/skills/incident-command/SKILL.md +119 -0
  122. package/areas/devops/sre/skills/postmortem-analysis/SKILL.md +104 -0
  123. package/areas/devops/sre/skills/slo-sli-design/SKILL.md +145 -0
  124. package/areas/devops/sre/workflows/incident-response.md +66 -0
  125. package/areas/devops/sre/workflows/postmortem.md +90 -0
  126. package/areas/devops/sre/workflows/slo-review.md +95 -0
  127. package/areas/software/backend/AGENTS.md +59 -0
  128. package/areas/software/backend/PROMPTS.md +50 -0
  129. package/areas/software/backend/README.md +48 -0
  130. package/areas/software/backend/prompts/add-migration.md +93 -0
  131. package/areas/software/backend/prompts/create-endpoint.md +97 -0
  132. package/areas/software/backend/prompts/debug-issue.md +87 -0
  133. package/areas/software/backend/prompts/develop-epic.md +83 -0
  134. package/areas/software/backend/prompts/develop-feature.md +91 -0
  135. package/areas/software/backend/prompts/refactor-module.md +79 -0
  136. package/areas/software/backend/prompts/test-feature.md +89 -0
  137. package/areas/software/backend/rules/architecture.md +20 -0
  138. package/areas/software/backend/rules/data_access.md +20 -0
  139. package/areas/software/backend/rules/security.md +20 -0
  140. package/areas/software/backend/rules/testing.md +19 -0
  141. package/areas/software/backend/skills/api-design/SKILL.md +170 -0
  142. package/areas/software/backend/skills/async-processing/SKILL.md +152 -0
  143. package/areas/software/backend/skills/database-modeling/SKILL.md +173 -0
  144. package/areas/software/backend/skills/observability/SKILL.md +162 -0
  145. package/areas/software/backend/skills/troubleshooting/SKILL.md +139 -0
  146. package/areas/software/backend/workflows/add-migration.md +79 -0
  147. package/areas/software/backend/workflows/create-endpoint.md +89 -0
  148. package/areas/software/backend/workflows/debug-issue.md +77 -0
  149. package/areas/software/backend/workflows/develop-epic.md +78 -0
  150. package/areas/software/backend/workflows/develop-feature.md +98 -0
  151. package/areas/software/backend/workflows/refactor-module.md +73 -0
  152. package/areas/software/backend/workflows/test-feature.md +67 -0
  153. package/areas/software/data-engineering/AGENTS.md +59 -0
  154. package/areas/software/data-engineering/PROMPTS.md +32 -0
  155. package/areas/software/data-engineering/prompts/backfill-data.md +107 -0
  156. package/areas/software/data-engineering/prompts/data-quality-incident.md +109 -0
  157. package/areas/software/data-engineering/prompts/lineage-trace.md +121 -0
  158. package/areas/software/data-engineering/prompts/new-model.md +117 -0
  159. package/areas/software/data-engineering/prompts/schema-migration.md +111 -0
  160. package/areas/software/data-engineering/rules/data-governance.md +11 -0
  161. package/areas/software/data-engineering/rules/pii-handling.md +19 -0
  162. package/areas/software/data-engineering/rules/pipeline-integrity.md +11 -0
  163. package/areas/software/data-engineering/rules/schema-management.md +21 -0
  164. package/areas/software/data-engineering/skills/data-modeling/SKILL.md +49 -0
  165. package/areas/software/data-engineering/skills/dbt-patterns/SKILL.md +43 -0
  166. package/areas/software/data-engineering/skills/lineage-governance/SKILL.md +38 -0
  167. package/areas/software/data-engineering/skills/orchestration/SKILL.md +35 -0
  168. package/areas/software/data-engineering/skills/quality-checks/SKILL.md +50 -0
  169. package/areas/software/data-engineering/skills/sql-optimization/SKILL.md +47 -0
  170. package/areas/software/data-engineering/skills/streaming-patterns/SKILL.md +48 -0
  171. package/areas/software/data-engineering/workflows/backfill-data.md +59 -0
  172. package/areas/software/data-engineering/workflows/data-quality-incident.md +64 -0
  173. package/areas/software/data-engineering/workflows/lineage-trace.md +56 -0
  174. package/areas/software/data-engineering/workflows/new-model.md +71 -0
  175. package/areas/software/data-engineering/workflows/schema-migration.md +67 -0
  176. package/areas/software/frontend/AGENTS.md +60 -0
  177. package/areas/software/frontend/PROMPTS.md +32 -0
  178. package/areas/software/frontend/prompts/a11y-fix.md +75 -0
  179. package/areas/software/frontend/prompts/bundle-analyze.md +75 -0
  180. package/areas/software/frontend/prompts/release-prep.md +83 -0
  181. package/areas/software/frontend/prompts/scaffold-component.md +69 -0
  182. package/areas/software/frontend/prompts/visual-regression.md +73 -0
  183. package/areas/software/frontend/rules/accessibility.md +16 -0
  184. package/areas/software/frontend/rules/architecture.md +29 -0
  185. package/areas/software/frontend/rules/performance.md +23 -0
  186. package/areas/software/frontend/rules/quality.md +12 -0
  187. package/areas/software/frontend/skills/a11y-audit/SKILL.md +61 -0
  188. package/areas/software/frontend/skills/api-integration/SKILL.md +58 -0
  189. package/areas/software/frontend/skills/component-design/SKILL.md +171 -0
  190. package/areas/software/frontend/skills/css-architecture/SKILL.md +146 -0
  191. package/areas/software/frontend/skills/error-handling/SKILL.md +55 -0
  192. package/areas/software/frontend/skills/performance-tuning/SKILL.md +58 -0
  193. package/areas/software/frontend/skills/state-management/SKILL.md +54 -0
  194. package/areas/software/frontend/skills/testing-patterns/SKILL.md +69 -0
  195. package/areas/software/frontend/workflows/a11y-fix.md +63 -0
  196. package/areas/software/frontend/workflows/bundle-analyze.md +56 -0
  197. package/areas/software/frontend/workflows/release-prep.md +66 -0
  198. package/areas/software/frontend/workflows/scaffold-component.md +67 -0
  199. package/areas/software/frontend/workflows/visual-regression.md +65 -0
  200. package/areas/software/full-stack/AGENTS.md +72 -0
  201. package/areas/software/full-stack/PROMPTS.md +66 -0
  202. package/areas/software/full-stack/prompts/backend-project-full-cycle.md +141 -0
  203. package/areas/software/full-stack/prompts/debug-issue.md +115 -0
  204. package/areas/software/full-stack/prompts/develop-feature.md +119 -0
  205. package/areas/software/full-stack/prompts/feature-implementation-flow.md +137 -0
  206. package/areas/software/full-stack/prompts/testing-ci-pipeline.md +119 -0
  207. package/areas/software/full-stack/rules/api-design-guide.md +24 -0
  208. package/areas/software/full-stack/rules/async-concurrency-guide.md +21 -0
  209. package/areas/software/full-stack/rules/backend-architecture-rule.md +41 -0
  210. package/areas/software/full-stack/rules/background-jobs-guide.md +20 -0
  211. package/areas/software/full-stack/rules/code-quality-guide.md +22 -0
  212. package/areas/software/full-stack/rules/database-access-guide.md +24 -0
  213. package/areas/software/full-stack/rules/database-migrations-guide.md +24 -0
  214. package/areas/software/full-stack/rules/domain-models-guide.md +28 -0
  215. package/areas/software/full-stack/rules/e2e-test-guide.md +18 -0
  216. package/areas/software/full-stack/rules/env-settings-guide.md +34 -0
  217. package/areas/software/full-stack/rules/error-handling-guide.md +20 -0
  218. package/areas/software/full-stack/rules/logging-observability-guide.md +22 -0
  219. package/areas/software/full-stack/rules/project-guide.md +34 -0
  220. package/areas/software/full-stack/rules/python-venv-guide.md +23 -0
  221. package/areas/software/full-stack/rules/security-guide.md +22 -0
  222. package/areas/software/full-stack/rules/svt-test-guide.md +17 -0
  223. package/areas/software/full-stack/rules/testing-ci-guide.md +25 -0
  224. package/areas/software/full-stack/skills/api-design-principles/SKILL.md +125 -0
  225. package/areas/software/full-stack/skills/api-design-principles/assets/api-design-checklist.md +155 -0
  226. package/areas/software/full-stack/skills/api-design-principles/assets/rest-api-template.py +182 -0
  227. package/areas/software/full-stack/skills/api-design-principles/references/graphql-schema-design.md +583 -0
  228. package/areas/software/full-stack/skills/api-design-principles/references/rest-best-practices.md +408 -0
  229. package/areas/software/full-stack/skills/api-design-principles/resources/implementation-playbook.md +513 -0
  230. package/areas/software/full-stack/skills/api-patterns/SKILL.md +81 -0
  231. package/areas/software/full-stack/skills/api-patterns/api-style.md +42 -0
  232. package/areas/software/full-stack/skills/api-patterns/auth.md +24 -0
  233. package/areas/software/full-stack/skills/api-patterns/documentation.md +26 -0
  234. package/areas/software/full-stack/skills/api-patterns/graphql.md +41 -0
  235. package/areas/software/full-stack/skills/api-patterns/rate-limiting.md +31 -0
  236. package/areas/software/full-stack/skills/api-patterns/response.md +37 -0
  237. package/areas/software/full-stack/skills/api-patterns/rest.md +40 -0
  238. package/areas/software/full-stack/skills/api-patterns/scripts/api_validator.py +211 -0
  239. package/areas/software/full-stack/skills/api-patterns/security-testing.md +122 -0
  240. package/areas/software/full-stack/skills/api-patterns/trpc.md +41 -0
  241. package/areas/software/full-stack/skills/api-patterns/versioning.md +22 -0
  242. package/areas/software/full-stack/skills/app-builder/SKILL.md +135 -0
  243. package/areas/software/full-stack/skills/app-builder/agent-coordination.md +71 -0
  244. package/areas/software/full-stack/skills/app-builder/feature-building.md +53 -0
  245. package/areas/software/full-stack/skills/app-builder/project-detection.md +34 -0
  246. package/areas/software/full-stack/skills/app-builder/scaffolding.md +118 -0
  247. package/areas/software/full-stack/skills/app-builder/tech-stack.md +40 -0
  248. package/areas/software/full-stack/skills/app-builder/templates/SKILL.md +39 -0
  249. package/areas/software/full-stack/skills/app-builder/templates/astro-static/TEMPLATE.md +76 -0
  250. package/areas/software/full-stack/skills/app-builder/templates/chrome-extension/TEMPLATE.md +92 -0
  251. package/areas/software/full-stack/skills/app-builder/templates/cli-tool/TEMPLATE.md +88 -0
  252. package/areas/software/full-stack/skills/app-builder/templates/electron-desktop/TEMPLATE.md +88 -0
  253. package/areas/software/full-stack/skills/app-builder/templates/express-api/TEMPLATE.md +83 -0
  254. package/areas/software/full-stack/skills/app-builder/templates/flutter-app/TEMPLATE.md +90 -0
  255. package/areas/software/full-stack/skills/app-builder/templates/monorepo-turborepo/TEMPLATE.md +90 -0
  256. package/areas/software/full-stack/skills/app-builder/templates/nextjs-fullstack/TEMPLATE.md +82 -0
  257. package/areas/software/full-stack/skills/app-builder/templates/nextjs-saas/TEMPLATE.md +100 -0
  258. package/areas/software/full-stack/skills/app-builder/templates/nextjs-static/TEMPLATE.md +106 -0
  259. package/areas/software/full-stack/skills/app-builder/templates/nuxt-app/TEMPLATE.md +101 -0
  260. package/areas/software/full-stack/skills/app-builder/templates/python-fastapi/TEMPLATE.md +83 -0
  261. package/areas/software/full-stack/skills/app-builder/templates/react-native-app/TEMPLATE.md +93 -0
  262. package/areas/software/full-stack/skills/backend-developer/SKILL.md +58 -0
  263. package/areas/software/full-stack/skills/bash-pro/SKILL.md +310 -0
  264. package/areas/software/full-stack/skills/blackbox-test/SKILL.md +84 -0
  265. package/areas/software/full-stack/skills/prompt-project-planner/SKILL.md +130 -0
  266. package/areas/software/full-stack/skills/prompt-project-planner/output.schema.md +68 -0
  267. package/areas/software/full-stack/skills/prompt-project-planner/questions.md +80 -0
  268. package/areas/software/full-stack/skills/python-pro/SKILL.md +158 -0
  269. package/areas/software/full-stack/skills/skill-creator/LICENSE.txt +202 -0
  270. package/areas/software/full-stack/skills/skill-creator/SKILL.md +356 -0
  271. package/areas/software/full-stack/skills/skill-creator/references/output-patterns.md +82 -0
  272. package/areas/software/full-stack/skills/skill-creator/references/workflows.md +28 -0
  273. package/areas/software/full-stack/skills/skill-creator/scripts/init_skill.py +303 -0
  274. package/areas/software/full-stack/skills/skill-creator/scripts/package_skill.py +110 -0
  275. package/areas/software/full-stack/skills/skill-creator/scripts/quick_validate.py +95 -0
  276. package/areas/software/full-stack/workflows/backend-project-full-cycle.md +132 -0
  277. package/areas/software/full-stack/workflows/debug-issue.md +70 -0
  278. package/areas/software/full-stack/workflows/develop-feature.md +85 -0
  279. package/areas/software/full-stack/workflows/feature-implementation-flow.md +78 -0
  280. package/areas/software/full-stack/workflows/testing-ci-pipeline.md +65 -0
  281. package/areas/software/general/AGENTS.md +68 -0
  282. package/areas/software/general/prompts/code-review-workflow.md +87 -0
  283. package/areas/software/general/prompts/development-cycle-workflow.md +83 -0
  284. package/areas/software/general/prompts/project-setup-workflow.md +93 -0
  285. package/areas/software/general/rules/code-style-guide.md +31 -0
  286. package/areas/software/general/rules/docker-compose-guide.md +27 -0
  287. package/areas/software/general/rules/git-workflow-guide.md +27 -0
  288. package/areas/software/general/rules/github-workflow-guide.md +27 -0
  289. package/areas/software/general/rules/gitlab-ci-guide.md +27 -0
  290. package/areas/software/general/rules/lint-format-guide.md +29 -0
  291. package/areas/software/general/rules/makefile-guide.md +34 -0
  292. package/areas/software/general/rules/readme-sync-guide.md +40 -0
  293. package/areas/software/general/rules/sdlc-methodology-guide.md +27 -0
  294. package/areas/software/general/rules/sdlc-role-responsibilities.md +108 -0
  295. package/areas/software/general/skills/general-dev-tools/SKILL.md +324 -0
  296. package/areas/software/general/workflows/code-review-workflow.md +84 -0
  297. package/areas/software/general/workflows/development-cycle-workflow.md +85 -0
  298. package/areas/software/general/workflows/project-setup-workflow.md +94 -0
  299. package/areas/software/mlops/AGENTS.md +57 -0
  300. package/areas/software/mlops/PROMPTS.md +32 -0
  301. package/areas/software/mlops/prompts/champion-challenger.md +87 -0
  302. package/areas/software/mlops/prompts/deploy-endpoint.md +91 -0
  303. package/areas/software/mlops/prompts/evaluate-model.md +87 -0
  304. package/areas/software/mlops/prompts/model-incident.md +87 -0
  305. package/areas/software/mlops/prompts/train-experiment.md +83 -0
  306. package/areas/software/mlops/rules/data-integrity.md +9 -0
  307. package/areas/software/mlops/rules/model-governance.md +9 -0
  308. package/areas/software/mlops/rules/production-safety.md +9 -0
  309. package/areas/software/mlops/rules/reproducibility.md +9 -0
  310. package/areas/software/mlops/skills/experiment-tracking/SKILL.md +29 -0
  311. package/areas/software/mlops/skills/feature-engineering/SKILL.md +44 -0
  312. package/areas/software/mlops/skills/inference-serving/SKILL.md +35 -0
  313. package/areas/software/mlops/skills/model-evaluation/SKILL.md +40 -0
  314. package/areas/software/mlops/skills/model-monitoring/SKILL.md +32 -0
  315. package/areas/software/mlops/workflows/champion-challenger.md +65 -0
  316. package/areas/software/mlops/workflows/deploy-endpoint.md +70 -0
  317. package/areas/software/mlops/workflows/evaluate-model.md +63 -0
  318. package/areas/software/mlops/workflows/model-incident.md +64 -0
  319. package/areas/software/mlops/workflows/train-experiment.md +56 -0
  320. package/areas/software/mobile/AGENTS.md +58 -0
  321. package/areas/software/mobile/PROMPTS.md +32 -0
  322. package/areas/software/mobile/prompts/crash-triage.md +63 -0
  323. package/areas/software/mobile/prompts/device-testing.md +83 -0
  324. package/areas/software/mobile/prompts/ota-update.md +75 -0
  325. package/areas/software/mobile/prompts/release-build.md +67 -0
  326. package/areas/software/mobile/prompts/store-submission.md +79 -0
  327. package/areas/software/mobile/rules/offline-first.md +10 -0
  328. package/areas/software/mobile/rules/performance-budget.md +20 -0
  329. package/areas/software/mobile/rules/platform-compliance.md +17 -0
  330. package/areas/software/mobile/rules/security-mobile.md +9 -0
  331. package/areas/software/mobile/skills/app-store-prep/SKILL.md +27 -0
  332. package/areas/software/mobile/skills/mobile-testing/SKILL.md +36 -0
  333. package/areas/software/mobile/skills/native-modules/SKILL.md +38 -0
  334. package/areas/software/mobile/skills/navigation-patterns/SKILL.md +49 -0
  335. package/areas/software/mobile/skills/push-notifications/SKILL.md +40 -0
  336. package/areas/software/mobile/skills/state-sync/SKILL.md +48 -0
  337. package/areas/software/mobile/workflows/crash-triage.md +63 -0
  338. package/areas/software/mobile/workflows/device-testing.md +54 -0
  339. package/areas/software/mobile/workflows/ota-update.md +54 -0
  340. package/areas/software/mobile/workflows/release-build.md +67 -0
  341. package/areas/software/mobile/workflows/store-submission.md +63 -0
  342. package/areas/software/platform/AGENTS.md +67 -0
  343. package/areas/software/platform/PROMPTS.md +32 -0
  344. package/areas/software/platform/prompts/cost-audit.md +117 -0
  345. package/areas/software/platform/prompts/deploy-production.md +109 -0
  346. package/areas/software/platform/prompts/drift-check.md +107 -0
  347. package/areas/software/platform/prompts/incident-response.md +121 -0
  348. package/areas/software/platform/prompts/provision-env.md +113 -0
  349. package/areas/software/platform/rules/cost-governance.md +11 -0
  350. package/areas/software/platform/rules/immutability.md +17 -0
  351. package/areas/software/platform/rules/reliability.md +19 -0
  352. package/areas/software/platform/rules/security-posture.md +12 -0
  353. package/areas/software/platform/skills/ci-cd-pipelines/SKILL.md +58 -0
  354. package/areas/software/platform/skills/incident-response/SKILL.md +41 -0
  355. package/areas/software/platform/skills/k8s-manifests/SKILL.md +56 -0
  356. package/areas/software/platform/skills/networking/SKILL.md +44 -0
  357. package/areas/software/platform/skills/observability-setup/SKILL.md +49 -0
  358. package/areas/software/platform/skills/secrets-management/SKILL.md +43 -0
  359. package/areas/software/platform/skills/terraform-patterns/SKILL.md +75 -0
  360. package/areas/software/platform/workflows/cost-audit.md +61 -0
  361. package/areas/software/platform/workflows/deploy-production.md +67 -0
  362. package/areas/software/platform/workflows/drift-check.md +61 -0
  363. package/areas/software/platform/workflows/incident-response.md +69 -0
  364. package/areas/software/platform/workflows/provision-env.md +77 -0
  365. package/areas/software/qa/AGENTS.md +58 -0
  366. package/areas/software/qa/PROMPTS.md +32 -0
  367. package/areas/software/qa/prompts/flakiness-investigation.md +61 -0
  368. package/areas/software/qa/prompts/performance-audit.md +65 -0
  369. package/areas/software/qa/prompts/regression-suite.md +61 -0
  370. package/areas/software/qa/prompts/smoke-test.md +65 -0
  371. package/areas/software/qa/prompts/test-coverage-report.md +61 -0
  372. package/areas/software/qa/rules/flakiness-policy.md +12 -0
  373. package/areas/software/qa/rules/quality-gates.md +28 -0
  374. package/areas/software/qa/rules/test-data.md +9 -0
  375. package/areas/software/qa/rules/test-strategy.md +11 -0
  376. package/areas/software/qa/skills/accessibility-testing/SKILL.md +139 -0
  377. package/areas/software/qa/skills/api-testing/SKILL.md +140 -0
  378. package/areas/software/qa/skills/e2e-patterns/SKILL.md +152 -0
  379. package/areas/software/qa/skills/performance-testing/SKILL.md +177 -0
  380. package/areas/software/qa/skills/test-data-management/SKILL.md +161 -0
  381. package/areas/software/qa/skills/test-pyramid/SKILL.md +127 -0
  382. package/areas/software/qa/workflows/flakiness-investigation.md +63 -0
  383. package/areas/software/qa/workflows/performance-audit.md +59 -0
  384. package/areas/software/qa/workflows/regression-suite.md +59 -0
  385. package/areas/software/qa/workflows/smoke-test.md +64 -0
  386. package/areas/software/qa/workflows/test-coverage-report.md +57 -0
  387. package/areas/software/security/AGENTS.md +58 -0
  388. package/areas/software/security/PROMPTS.md +32 -0
  389. package/areas/software/security/prompts/compliance-report.md +113 -0
  390. package/areas/software/security/prompts/pen-test-sim.md +113 -0
  391. package/areas/software/security/prompts/secret-rotation.md +115 -0
  392. package/areas/software/security/prompts/security-scan.md +91 -0
  393. package/areas/software/security/prompts/threat-model-review.md +105 -0
  394. package/areas/software/security/rules/compliance-baseline.md +23 -0
  395. package/areas/software/security/rules/dependency-policy.md +12 -0
  396. package/areas/software/security/rules/secrets-policy.md +22 -0
  397. package/areas/software/security/rules/secure-coding.md +22 -0
  398. package/areas/software/security/skills/auth-patterns/SKILL.md +42 -0
  399. package/areas/software/security/skills/crypto-standards/SKILL.md +42 -0
  400. package/areas/software/security/skills/dependency-audit/SKILL.md +29 -0
  401. package/areas/software/security/skills/sast-dast-interpretation/SKILL.md +33 -0
  402. package/areas/software/security/skills/security-headers/SKILL.md +29 -0
  403. package/areas/software/security/skills/threat-modeling/SKILL.md +36 -0
  404. package/areas/software/security/workflows/compliance-report.md +57 -0
  405. package/areas/software/security/workflows/pen-test-sim.md +63 -0
  406. package/areas/software/security/workflows/secret-rotation.md +67 -0
  407. package/areas/software/security/workflows/security-scan.md +64 -0
  408. package/areas/software/security/workflows/threat-model-review.md +62 -0
  409. package/areas/template/AGENTS-area.tmpl.md +61 -0
  410. package/areas/template/AGENTS.tmpl.md +67 -0
  411. package/areas/template/GUIDE.md +102 -0
  412. package/areas/template/PROMPTS.tmpl.md +29 -0
  413. package/areas/template/README.md +57 -0
  414. package/areas/template/README.tmpl.md +51 -0
  415. package/areas/template/prompt.tmpl.md +101 -0
  416. package/areas/template/rule.tmpl.md +71 -0
  417. package/areas/template/skill.tmpl.md +108 -0
  418. package/areas/template/workflow.tmpl.md +104 -0
  419. package/bin/agentic.js +24 -0
  420. package/extensions/antigravity/GEMINI.md +10 -0
  421. package/extensions/claude/CLAUDE.md +10 -0
  422. package/extensions/codex/AGENTS.override.md +93 -0
  423. package/extensions/gemini/GEMINI.md +10 -0
  424. package/extensions/opencode/agents/designer.md +65 -0
  425. package/extensions/opencode/agents/developer.md +63 -0
  426. package/extensions/opencode/agents/devops-engineer.md +69 -0
  427. package/extensions/opencode/agents/pm.md +61 -0
  428. package/extensions/opencode/agents/product-owner.md +76 -0
  429. package/extensions/opencode/agents/qa.md +66 -0
  430. package/extensions/opencode/agents/team-lead.md +67 -0
  431. package/extensions/opencode/commands/feature.md +75 -0
  432. package/extensions/opencode/opencode.json +93 -0
  433. package/extensions/opencode/plugins/model-checker.json +14 -0
  434. package/extensions/opencode/plugins/model-checker.ts +279 -0
  435. package/extensions/opencode/plugins/sound-notification.ts +13 -0
  436. package/extensions/opencode/plugins/telegram-notification.ts +86 -0
  437. package/extensions/opencode/skills/code_review_expert/SKILL.md +144 -0
  438. package/extensions/opencode/skills/design_expert/SKILL.md +42 -0
  439. package/extensions/opencode/skills/qa_expert/SKILL.md +116 -0
  440. package/package.json +19 -0
@@ -0,0 +1,70 @@
1
+ ---
2
+ name: debug-issue
3
+ type: workflow
4
+ trigger: /debug-issue
5
+ description: Systematically diagnose and fix a bug in a full-stack Python/FastAPI + Next.js application.
6
+ inputs:
7
+ - issue_description
8
+ - error_logs
9
+ - reproduction_steps
10
+ outputs:
11
+ - root_cause_identified
12
+ - fix_implemented
13
+ - regression_test_added
14
+ roles:
15
+ - "@backend-dev"
16
+ - "@qa-engineer"
17
+ - "@team-lead"
18
+ execution:
19
+ initiator: developer
20
+ related-rules:
21
+ - backend-architecture-rule.md
22
+ - testing-ci-guide.md
23
+ - logging-observability-guide.md
24
+ uses-skills:
25
+ - troubleshooting
26
+ - observability
27
+ quality-gates:
28
+ - bug reproducible before fix
29
+ - regression test fails before fix, passes after
30
+ - no mypy/ruff errors introduced
31
+ - root cause documented
32
+ ---
33
+
34
+ ## Steps
35
+
36
+ ### 1. Triage — `@backend-dev`
37
+ - **Input:** issue description, error logs, environment context
38
+ - **Actions:** classify severity (P1 data loss/outage, P2 functional break, P3 cosmetic); identify affected component from stack trace; check if reproducible in staging; check recent deploys and migrations that could have caused this
39
+ - **Output:** triage note — severity, affected layer, reproduction status
40
+ - **Done when:** severity assigned; reproduction path identified or deemed flaky
41
+
42
+ ### 2. Reproduce — `@backend-dev`
43
+ - **Input:** triage note, reproduction steps
44
+ - **Actions:** write a failing test that demonstrates the bug (unit or integration); if E2E: write Playwright test; run test — **must fail** before any fix; if test cannot be written, document why
45
+ - **Output:** failing test committed to branch `fix/<issue-id>`
46
+ - **Done when:** test reproduces issue deterministically; committed
47
+
48
+ ### 3. Root Cause Analysis — `@backend-dev`
49
+ - **Input:** failing test, code
50
+ - **Actions:** use `EXPLAIN ANALYZE` for slow/incorrect queries; check log correlation (`request_id`); trace data through layers (API → Service → Repository → DB); identify exact line/condition causing the bug
51
+ - **Output:** root cause comment in ticket + code location identified
52
+ - **Done when:** root cause statement: "Bug is caused by [specific condition] in [file:line]"
53
+
54
+ ### 4. Fix — `@backend-dev`
55
+ - **Input:** root cause, failing test
56
+ - **Actions:** implement minimal fix; run regression test — **must now pass**; run full test suite to check for regressions; fix must be in the correct architectural layer (don't fix a service bug in the API layer)
57
+ - **Output:** fix committed; tests passing
58
+ - **Done when:** regression test green; full suite green; `make lint` clean
59
+
60
+ ### 5. Review & Document — `@team-lead`
61
+ - **Input:** fix + tests
62
+ - **Actions:** review that fix addresses root cause not symptoms; verify regression test quality; update incident log if P1/P2; PR includes: root cause, fix rationale, test evidence
63
+ - **Output:** approved PR; root cause documented
64
+ - **Done when:** PR merged; postmortem note added for P1/P2 issues
65
+
66
+ ## Iteration Loop
67
+ If fix reveals deeper root cause → return to Step 3 with updated understanding.
68
+
69
+ ## Exit
70
+ Merged fix + regression test + root cause documented in ticket.
@@ -0,0 +1,85 @@
1
+ ---
2
+ name: develop-feature
3
+ type: workflow
4
+ trigger: /develop-feature
5
+ description: Implement a feature end-to-end in a full-stack Python/FastAPI project following the layered architecture.
6
+ inputs:
7
+ - feature_description
8
+ - acceptance_criteria
9
+ - tech_stack
10
+ outputs:
11
+ - working_feature_branch
12
+ - tests_passing
13
+ - pr_ready
14
+ roles:
15
+ - "@team-lead"
16
+ - "@backend-dev"
17
+ - "@frontend-dev"
18
+ - "@qa-engineer"
19
+ execution:
20
+ initiator: team-lead
21
+ related-rules:
22
+ - backend-architecture-rule.md
23
+ - api-design-guide.md
24
+ - domain-models-guide.md
25
+ - database-migrations-guide.md
26
+ - testing-ci-guide.md
27
+ uses-skills:
28
+ - backend-developer
29
+ - api-design-principles
30
+ quality-gates:
31
+ - all tests pass (unit + integration + e2e)
32
+ - no mypy/ruff errors
33
+ - architecture layer boundaries respected (no cross-layer imports)
34
+ - PR description includes test evidence
35
+ ---
36
+
37
+ ## Steps
38
+
39
+ ### 1. Design — `@team-lead`
40
+ - **Input:** feature description, acceptance criteria
41
+ - **Actions:** clarify domain model changes; draft API contract (endpoint, request/response schema, error codes); identify DB schema changes needed; flag breaking changes
42
+ - **Output:** `design/feature-<name>.md` — API contract + data model
43
+ - **Done when:** API contract approved (user or tech lead sign-off)
44
+
45
+ ### 2. DB Model & Migration — `@backend-dev`
46
+ - **Input:** `design/feature-<name>.md`
47
+ - **Actions:** define/update SQLAlchemy models; generate Alembic migration (`alembic revision --autogenerate`); review migration file — check for unsafe operations (column rename, NOT NULL without default); run `alembic upgrade head`
48
+ - **Output:** migration file in `alembic/versions/`; updated `models/`
49
+ - **Done when:** `alembic upgrade head` succeeds; existing tests still pass
50
+
51
+ ### 3. Repository Layer — `@backend-dev`
52
+ - **Input:** updated models
53
+ - **Actions:** implement CRUD operations in `repositories/`; use `AsyncSession`; apply cursor-based pagination for list queries; write repository unit tests with transaction rollback isolation
54
+ - **Output:** `repositories/<entity>_repo.py` + tests
55
+ - **Done when:** repository tests pass; no business logic in repo layer
56
+
57
+ ### 4. Service Layer — `@backend-dev`
58
+ - **Input:** repository layer
59
+ - **Actions:** implement business logic in `services/`; enforce invariants; manage transactions (`async with session.begin()`); emit domain events if needed; write service unit tests with fake repository
60
+ - **Output:** `services/<entity>_service.py` + tests
61
+ - **Done when:** service tests pass; service imports only repository, not DB directly
62
+
63
+ ### 5. API Endpoint — `@backend-dev`
64
+ - **Input:** service layer, API contract from Step 1
65
+ - **Actions:** implement FastAPI endpoint in `api/v1/endpoints/`; validate inputs via Pydantic schemas; use FastAPI `Depends()` for auth + DB; apply correct HTTP status codes; write API integration tests
66
+ - **Output:** endpoint file + `schemas/<entity>.py` + integration tests
67
+ - **Done when:** endpoint matches contract from Step 1; auth + validation tested; `make lint` clean
68
+
69
+ ### 6. Frontend / UI — `@frontend-dev`
70
+ - **Input:** API contract, acceptance criteria
71
+ - **Actions:** implement UI changes (component, page, server action); connect to API; handle loading/error/empty states; add `data-testid` for E2E selectors
72
+ - **Output:** updated `features/<name>/` directory
73
+ - **Done when:** feature visible and functional in dev; all states handled
74
+
75
+ ### 7. QA & PR — `@qa-engineer` + `@team-lead`
76
+ - **Input:** complete implementation
77
+ - **Actions:** write/run E2E test covering acceptance criteria; run full test suite (`make test`); verify no ruff/mypy errors; create PR with: description, test evidence (output), design doc link
78
+ - **Output:** passing CI + PR ready for review
79
+ - **Done when:** `make test` green; `make lint` clean; PR submitted
80
+
81
+ ## Iteration Loop
82
+ If review finds issues → return to relevant step (Step 2 for schema issues, Step 4 for logic issues, Step 5 for API issues).
83
+
84
+ ## Exit
85
+ Merged PR with passing CI. Feature accessible in target environment.
@@ -0,0 +1,78 @@
1
+ ---
2
+ name: feature-implementation-flow
3
+ type: workflow
4
+ trigger: /feature-implementation-flow
5
+ description: Implement a single feature into an existing full-stack service with strict layered architecture.
6
+ inputs:
7
+ - feature_request
8
+ - existing_codebase
9
+ outputs:
10
+ - implemented_feature
11
+ - passing_tests
12
+ roles:
13
+ - pm
14
+ - team-lead
15
+ - designer
16
+ - developer
17
+ - qa
18
+ execution:
19
+ initiator: pm
20
+ related-rules:
21
+ - backend-architecture-rule.md
22
+ - code-quality-guide.md
23
+ - testing-ci-guide.md
24
+ uses-skills:
25
+ - backend-developer
26
+ quality-gates:
27
+ - layered architecture rules respected (no business logic in API layer)
28
+ - unit and integration tests pass
29
+ - lint and type checks pass
30
+ ---
31
+
32
+ ## Steps
33
+
34
+ ### 1. Requirement Analysis & Models — `@pm` + `@team-lead`
35
+ - **Input:** feature request
36
+ - **Actions:** `@pm` captures requirements; `@team-lead` identifies impacted domain entities and determines if schema changes are needed; `@designer` provides UX/interaction specs if UI is involved
37
+ - **Output:** confirmed feature spec with data model notes
38
+ - **Done when:** impacted layers identified; `@developer` briefed
39
+
40
+ ### 2. Design & Planning — `@team-lead` + `@designer`
41
+ - **Input:** confirmed feature spec
42
+ - **Actions:** design layer changes (models → repository → service → API); specify Pydantic/DTO schemas for input/output; plan Alembic migration if schema changes needed; define UX states (loading / empty / error / success) if frontend involved
43
+ - **Output:** brief implementation plan presented to `@pm` for user confirmation
44
+ - **Done when:** user/stakeholder confirms plan; approach is approved
45
+
46
+ ### 3. Implementation — Inner to Outer — `@developer`
47
+ - **Input:** approved implementation plan
48
+ - **Actions:**
49
+ - **Models/Schemas:** update `src/models/` (SQLAlchemy) if schema changes; create Alembic migration; define Pydantic input/output schemas in `src/schemas/`
50
+ - **Repository Layer:** implement data access methods in `src/repositories/`; ensure IO-bound operations are async
51
+ - **Service Layer:** implement business logic in `src/services/`; inject repository dependencies; handle exceptions, convert to business errors; do not import FastAPI/Flask objects here
52
+ - **API Layer:** add/update endpoints in `src/api/`; validate input via schemas; call service methods only; no direct DB access
53
+ - **Output:** feature implemented on branch; no cross-layer violations
54
+ - **Done when:** all layers implemented; local checks pass
55
+
56
+ ### 4. Verification — `@developer` + `@qa`
57
+ - **Input:** implemented feature branch
58
+ - **Actions:**
59
+ - unit tests: test service logic (mock repositories); test repository logic (test DB or mocks)
60
+ - integration tests: test API endpoints end-to-end with test client
61
+ - `make lint` — zero errors; `make fmt` — no diffs; strict typing verified
62
+ - `@qa` runs acceptance checks against feature spec
63
+ - **Output:** passing test suite; lint/type checks clean
64
+ - **Done when:** all checks pass; acceptance criteria verified
65
+
66
+ ### 5. Review — `@team-lead`
67
+ - **Input:** feature branch + test results
68
+ - **Actions:** verify layer boundaries respected; check schema definitions and error handling; review test quality; provide blocking / non-blocking feedback
69
+ - **Output:** review feedback
70
+ - **Done when:** all blocking feedback resolved; `@team-lead` approves
71
+
72
+ ### 6. Fix / Retest Loop — `@developer` + `@qa`
73
+ - **Input:** blocking feedback
74
+ - **Actions:** fix; re-run checks; re-request review
75
+ - **Done when:** zero blocking issues; all checks green
76
+
77
+ ## Exit
78
+ `@team-lead` approval + passing checks = feature ready to merge.
@@ -0,0 +1,65 @@
1
+ ---
2
+ name: testing-ci-pipeline
3
+ type: workflow
4
+ trigger: /testing-ci-pipeline
5
+ description: Run the full CI and testing pipeline for backend or frontend projects and produce a verified quality signal.
6
+ inputs:
7
+ - project_type
8
+ - test_scope
9
+ outputs:
10
+ - test_report
11
+ - pipeline_status
12
+ roles:
13
+ - developer
14
+ - qa
15
+ - team-lead
16
+ execution:
17
+ initiator: developer
18
+ related-rules:
19
+ - testing-ci-guide.md
20
+ - code-quality-guide.md
21
+ uses-skills:
22
+ - blackbox-test
23
+ quality-gates:
24
+ - lint and format clean
25
+ - all tests in selected scope pass
26
+ - build artifact produced successfully
27
+ ---
28
+
29
+ ## Steps
30
+
31
+ ### 1. Code Quality Check — `@developer`
32
+ - **Input:** current branch
33
+ - **Actions:** run linters and formatters using project-standard tools (e.g. `ruff` for Python, `eslint` + `prettier` for JS/TS); fix all errors — do not suppress
34
+ - **Output:** lint/format clean
35
+ - **Done when:** `make lint` exits 0; `make fmt` produces no diffs
36
+
37
+ ### 2. Unit Tests — `@developer`
38
+ - **Input:** lint-clean branch
39
+ - **Actions:** run unit test suite: `make test`; confirm coverage meets project threshold (default ≥ 70%)
40
+ - **Output:** unit tests passing; coverage report
41
+ - **Done when:** `make test` exits 0; coverage threshold met
42
+
43
+ ### 3. Build / Prepare — `@developer`
44
+ - **Input:** green unit tests
45
+ - **Actions:** build production artifact or Docker image (`make build` or `docker build`); confirm build succeeds with no warnings treated as errors
46
+ - **Output:** build artifact or image produced
47
+ - **Done when:** build exits 0; artifact is usable
48
+
49
+ ### 4. E2E / Integration Tests — `@qa`
50
+ - **Input:** built artifact; condition: `test_scope` is `e2e` or `all`
51
+ - **Actions:** start services via Docker Compose; run blackbox/E2E suite: `make e2e-test`; capture logs and screenshots on failure
52
+ - **Output:** E2E test results; pass/fail per scenario
53
+ - **Done when:** all scenarios pass; or failures are classified (blocker vs. known flake)
54
+
55
+ ### 5. Results Review & Report — `@team-lead` + `@qa`
56
+ - **Input:** all step outputs
57
+ - **Actions:** `@qa` produces `test_report.md` — step results, coverage delta, failure details; `@team-lead` reviews and makes pipeline pass/fail decision; blocker failures must be fixed before merge
58
+ - **Output:** `test_report.md`; pipeline status: PASS / FAIL / CONDITIONAL
59
+ - **Done when:** report complete; status communicated to `@developer`
60
+
61
+ ## Failure Policy
62
+ If any step fails: pipeline halts. Fix the violation before proceeding. Do not skip or suppress failures.
63
+
64
+ ## Exit
65
+ All steps green + `test_report.md` produced = pipeline passed.
@@ -0,0 +1,68 @@
1
+ # Software — general guidance index
2
+
3
+ This area contains the shared SDLC baseline inherited by all software specialization areas. Load this before any domain-specific guidance.
4
+
5
+ ## What this area covers
6
+
7
+ Cross-cutting engineering practices that apply regardless of stack: Git workflow, CI/CD standards, linting, code style, SDLC methodology, role responsibilities, and project setup conventions. Every software specialization area inherits from here and adds only domain-specific overrides.
8
+
9
+ ## Inheritance contract
10
+
11
+ All specialization areas follow this load order:
12
+
13
+ ```
14
+ AGENTS.md (scope) → rules (constraints) → skills (execution patterns) → workflows (orchestration)
15
+ ```
16
+
17
+ Specializations reference general guidance and keep only domain-specific overrides. Do not duplicate general rules in domain-level files.
18
+
19
+ ## Spec selection
20
+
21
+ | Task type | Area to load |
22
+ |:---|:---|
23
+ | API / service development | `software/backend/` |
24
+ | UI / component development | `software/frontend/` |
25
+ | Full product feature (API + UI) | `software/full-stack/` |
26
+ | Data pipelines, dbt, warehouses | `software/data-engineering/` |
27
+ | ML training, evaluation, deployment | `software/mlops/` |
28
+ | iOS / Android / React Native | `software/mobile/` |
29
+ | Infrastructure, K8s, CI/CD, incidents | `software/platform/` |
30
+ | Test strategy, coverage, QA tooling | `software/qa/` |
31
+ | Security scans, threat modeling | `software/security/` |
32
+ | Cross-cutting / unclear domain | `software/general/` |
33
+
34
+ ## Cross-cutting constraints
35
+
36
+ - **Git discipline** — every change lives in a branch; no direct commits to main.
37
+ - **Lint and format** — all files pass configured linters before any handoff.
38
+ - **SDLC role separation** — no role consolidation when subagent execution is required.
39
+ - **README sync** — public-facing READMEs updated whenever behavior or setup changes.
40
+
41
+ ## Guidance tree
42
+
43
+ ```text
44
+ general/
45
+ ├── rules/
46
+ │ ├── git-workflow-guide.md ← branching, commit messages, PR conventions
47
+ │ ├── github-workflow-guide.md ← GitHub-specific CI triggers and branch protection
48
+ │ ├── gitlab-ci-guide.md ← GitLab CI pipeline conventions
49
+ │ ├── makefile-guide.md ← standard Makefile targets and conventions
50
+ │ ├── docker-compose-guide.md ← local multi-service development setup
51
+ │ ├── lint-format-guide.md ← linter config and pre-commit hooks
52
+ │ ├── sdlc-methodology-guide.md ← phase definitions, entry/exit criteria
53
+ │ ├── sdlc-role-responsibilities.md ← role matrix, handoff contracts, DoD
54
+ │ ├── readme-sync-guide.md ← what READMEs must contain and when to update
55
+ │ └── code-style-guide.md ← naming, structure, DRY, single responsibility
56
+ ├── skills/
57
+ │ └── general-dev-tools/SKILL.md ← cross-stack dev tooling patterns
58
+ └── workflows/
59
+ ├── project-setup-workflow.md ← /project-setup
60
+ ├── code-review-workflow.md ← /code-review
61
+ └── development-cycle-workflow.md ← /dev-cycle
62
+ ```
63
+
64
+ ## Discovery patterns
65
+
66
+ - `rules/*.md`
67
+ - `skills/*/SKILL.md`
68
+ - `workflows/*.md`
@@ -0,0 +1,87 @@
1
+ ---
2
+ workflow: code-review-workflow
3
+ ---
4
+
5
+ # Prompt: `/code-review-workflow`
6
+
7
+ Use when: reviewing an open pull/merge request or a specific code change.
8
+
9
+ ---
10
+
11
+ ## Example 1 — Feature PR review
12
+
13
+ **EN:**
14
+ ```
15
+ /code-review-workflow PR #87 "Add rate limiting to public API"
16
+
17
+ PR scope: adds Redis-backed sliding window rate limiter to all /api/v1/* endpoints.
18
+ Focus areas:
19
+ - Correctness of sliding window algorithm
20
+ - Redis failure handling (should degrade gracefully, not block requests)
21
+ - Test coverage for rate limit breach (429) and header presence
22
+ - No hardcoded config values (limits must be env-configurable)
23
+ Files changed: src/middleware/rate_limit.py, tests/test_rate_limit.py, src/config.py
24
+ ```
25
+
26
+ **RU:**
27
+ ```
28
+ /code-review-workflow PR #87 "Добавить rate limiting на публичный API"
29
+
30
+ Скоуп PR: Redis-backed sliding window rate limiter для всех /api/v1/* эндпоинтов.
31
+ Фокус:
32
+ - Корректность алгоритма sliding window
33
+ - Обработка сбоя Redis (должен деградировать gracefully, не блокировать запросы)
34
+ - Покрытие тестами для 429 ответа и наличия заголовков
35
+ - Нет hardcoded значений (лимиты настраиваются через env)
36
+ Изменённые файлы: src/middleware/rate_limit.py, tests/test_rate_limit.py, src/config.py
37
+ ```
38
+
39
+ ---
40
+
41
+ ## Example 2 — Architecture-focused review
42
+
43
+ **EN:**
44
+ ```
45
+ /code-review-workflow PR #104 "Migrate order processing to event-driven"
46
+
47
+ This is a large architectural PR. Key review concerns:
48
+ - Does OrderService still have any direct calls to PaymentService? (should emit event only)
49
+ - Is the dual-write period (sync + async) clearly temporary and documented?
50
+ - Are events idempotent? If consumer replays an event, is it safe?
51
+ - Are all new message schemas versioned?
52
+ Diff size: ~800 lines across 12 files
53
+ ```
54
+
55
+ **RU:**
56
+ ```
57
+ /code-review-workflow PR #104 "Миграция обработки заказов на event-driven"
58
+
59
+ Это большой архитектурный PR. Ключевые вопросы:
60
+ - Нет ли прямых вызовов OrderService → PaymentService? (должен только emit event)
61
+ - Чётко ли обозначен dual-write период как временный и задокументирован?
62
+ - Идемпотентны ли события? Безопасен ли повторный replay у консьюмера?
63
+ - Версионированы ли все новые message schemas?
64
+ Размер diff: ~800 строк в 12 файлах
65
+ ```
66
+
67
+ ---
68
+
69
+ ## Example 3 — Quick / Security-focused
70
+
71
+ **EN:**
72
+ ```
73
+ /code-review-workflow PR #91 "Add admin user deletion endpoint"
74
+
75
+ Security-focused review: DELETE /admin/users/{id}
76
+ Check: auth middleware applied (admin scope required); audit log written on deletion;
77
+ soft-delete or hard-delete with confirmation; no IDOR possible via id parameter.
78
+ ```
79
+
80
+ **RU:**
81
+ ```
82
+ /code-review-workflow PR #91 "Добавить эндпоинт удаления пользователей для администратора"
83
+
84
+ Ревью с фокусом на безопасность: DELETE /admin/users/{id}
85
+ Проверить: применён auth middleware (требуется admin scope); запись в audit log при удалении;
86
+ soft-delete или hard-delete с подтверждением; нет возможности IDOR через параметр id.
87
+ ```
@@ -0,0 +1,83 @@
1
+ ---
2
+ workflow: development-cycle-workflow
3
+ ---
4
+
5
+ # Prompt: `/development-cycle-workflow`
6
+
7
+ Use when: starting any development task from a ticket, issue, or verbal request.
8
+
9
+ ---
10
+
11
+ ## Example 1 — Feature ticket
12
+
13
+ **EN:**
14
+ ```
15
+ /development-cycle-workflow PROJ-142 "Add pagination to GET /products"
16
+
17
+ Task: the endpoint currently returns all products with no limit. Add cursor-based pagination.
18
+ Acceptance criteria:
19
+ - Query params: limit (default 20, max 100), cursor (opaque string)
20
+ - Response: { items: Product[], next_cursor?: string }
21
+ - Existing clients with no query params get first 20 results (no breaking change)
22
+ Constraints: no new dependencies; reuse existing DB query helpers
23
+ ```
24
+
25
+ **RU:**
26
+ ```
27
+ /development-cycle-workflow PROJ-142 "Добавить пагинацию в GET /products"
28
+
29
+ Задача: эндпоинт возвращает все продукты без ограничений. Добавить cursor-based пагинацию.
30
+ Критерии приёмки:
31
+ - Query params: limit (по умолчанию 20, макс 100), cursor (непрозрачная строка)
32
+ - Ответ: { items: Product[], next_cursor?: string }
33
+ - Существующие клиенты без параметров получают первые 20 результатов (без breaking change)
34
+ Ограничения: без новых зависимостей; переиспользовать существующие DB helpers
35
+ ```
36
+
37
+ ---
38
+
39
+ ## Example 2 — Bug fix
40
+
41
+ **EN:**
42
+ ```
43
+ /development-cycle-workflow PROJ-198 "Fix: user session expires immediately after login on Safari"
44
+
45
+ Bug: users on Safari 17 are logged out immediately after successful login.
46
+ Observed: redirect to /login happens 2 seconds after landing on /dashboard
47
+ Suspected cause: SameSite=Strict cookie attribute blocks cross-origin redirect
48
+ Environment: only Safari 17+; Chrome and Firefox unaffected
49
+ Expected: reproduce, fix, add regression test, document root cause
50
+ ```
51
+
52
+ **RU:**
53
+ ```
54
+ /development-cycle-workflow PROJ-198 "Фикс: сессия пользователя немедленно истекает после логина в Safari"
55
+
56
+ Баг: пользователи в Safari 17 выходят из системы сразу после успешного входа.
57
+ Наблюдение: редирект на /login происходит через 2 секунды после перехода на /dashboard
58
+ Предполагаемая причина: атрибут SameSite=Strict блокирует cross-origin редирект
59
+ Среда: только Safari 17+; Chrome и Firefox не затронуты
60
+ Ожидание: воспроизвести, исправить, добавить regression test, задокументировать причину
61
+ ```
62
+
63
+ ---
64
+
65
+ ## Example 3 — Chore / Quick task
66
+
67
+ **EN:**
68
+ ```
69
+ /development-cycle-workflow PROJ-201 "Upgrade pydantic from 1.x to 2.x"
70
+
71
+ Scope: migrate all Pydantic models in src/ to v2 syntax.
72
+ Key changes: BaseModel.dict() → .model_dump(); validators use @field_validator; orm_mode → from_attributes.
73
+ Constraints: no behavior changes; all existing tests must pass after migration.
74
+ ```
75
+
76
+ **RU:**
77
+ ```
78
+ /development-cycle-workflow PROJ-201 "Обновить pydantic с 1.x до 2.x"
79
+
80
+ Скоуп: мигрировать все Pydantic модели в src/ на синтаксис v2.
81
+ Ключевые изменения: BaseModel.dict() → .model_dump(); валидаторы через @field_validator; orm_mode → from_attributes.
82
+ Ограничения: без изменений поведения; все существующие тесты должны пройти после миграции.
83
+ ```
@@ -0,0 +1,93 @@
1
+ ---
2
+ workflow: project-setup-workflow
3
+ ---
4
+
5
+ # Prompt: `/project-setup-workflow`
6
+
7
+ Use when: bootstrapping a new project from scratch with proper tooling, CI, and conventions.
8
+
9
+ ---
10
+
11
+ ## Example 1 — Python API service
12
+
13
+ **EN:**
14
+ ```
15
+ /project-setup-workflow "Notifications Service"
16
+
17
+ Language/framework: Python 3.12 + FastAPI
18
+ Database: PostgreSQL (via SQLAlchemy async)
19
+ Message queue: Redis (for background job queue)
20
+ Team: 3 developers, mono-repo style, GitHub
21
+ CI: GitHub Actions
22
+ Conventions: conventional commits, squash merge, main branch protected
23
+ First milestone: REST API for creating and delivering email/push notifications
24
+ ```
25
+
26
+ **RU:**
27
+ ```
28
+ /project-setup-workflow "Сервис уведомлений"
29
+
30
+ Язык/фреймворк: Python 3.12 + FastAPI
31
+ База данных: PostgreSQL (через SQLAlchemy async)
32
+ Очередь сообщений: Redis (для очереди фоновых задач)
33
+ Команда: 3 разработчика, mono-repo стиль, GitHub
34
+ CI: GitHub Actions
35
+ Соглашения: conventional commits, squash merge, защита ветки main
36
+ Первый milestone: REST API для создания и доставки email/push уведомлений
37
+ ```
38
+
39
+ ---
40
+
41
+ ## Example 2 — TypeScript monorepo
42
+
43
+ **EN:**
44
+ ```
45
+ /project-setup-workflow "E-commerce Monorepo"
46
+
47
+ Language: TypeScript (strict mode)
48
+ Structure: Turborepo monorepo — apps/web (Next.js), apps/api (Fastify), packages/shared-types
49
+ Database: PostgreSQL + Prisma
50
+ CI: GitHub Actions with parallel jobs per workspace
51
+ Code quality: ESLint + Prettier + Husky pre-commit hooks
52
+ Testing: Vitest for unit, Playwright for E2E
53
+ Branch strategy: feature branches → main, no develop branch
54
+ ```
55
+
56
+ **RU:**
57
+ ```
58
+ /project-setup-workflow "E-commerce Monorepo"
59
+
60
+ Язык: TypeScript (strict mode)
61
+ Структура: Turborepo monorepo — apps/web (Next.js), apps/api (Fastify), packages/shared-types
62
+ База данных: PostgreSQL + Prisma
63
+ CI: GitHub Actions с параллельными jobs для каждого workspace
64
+ Качество кода: ESLint + Prettier + Husky pre-commit hooks
65
+ Тестирование: Vitest для unit, Playwright для E2E
66
+ Стратегия веток: feature branches → main, без develop ветки
67
+ ```
68
+
69
+ ---
70
+
71
+ ## Example 3 — Minimal / Quick start
72
+
73
+ **EN:**
74
+ ```
75
+ /project-setup-workflow "Internal Admin Tool"
76
+
77
+ Stack: Python + Flask (simple, no async needed)
78
+ No Docker required — runs locally with sqlite for now
79
+ CI: GitLab CI, basic lint + test pipeline
80
+ Pre-commit: trailing whitespace, end-of-file, ruff
81
+ Just needs: Makefile, README, .gitignore, basic CI
82
+ ```
83
+
84
+ **RU:**
85
+ ```
86
+ /project-setup-workflow "Внутренний административный инструмент"
87
+
88
+ Стек: Python + Flask (простой, async не нужен)
89
+ Docker не требуется — локально с sqlite на данный момент
90
+ CI: GitLab CI, базовый pipeline lint + test
91
+ Pre-commit: trailing whitespace, end-of-file, ruff
92
+ Нужно только: Makefile, README, .gitignore, базовый CI
93
+ ```
@@ -0,0 +1,31 @@
1
+ ---
2
+ trigger: always_on
3
+ glob: code-style-guide
4
+ description: language-agnostic code style principles for readable and maintainable code
5
+ ---
6
+
7
+ # Code Style Rule
8
+
9
+ **Rules:**
10
+
11
+ - **Naming:** Use meaningful, intention-revealing names. Avoid abbreviations except well-known ones (`id`, `url`, `http`).
12
+ - **Functions:** Single responsibility — one function does one thing. Maximum ~30 lines; extract if longer.
13
+ - **DRY:** Do not Repeat Yourself — extract duplicated logic into shared utilities.
14
+ - **Comments:** Code should be self-documenting. Comments explain *why*, not *what*. Remove commented-out code.
15
+ - **Magic values:** No magic numbers or strings — use named constants or enums.
16
+ - **Error handling:** Handle errors explicitly; never silently swallow exceptions.
17
+ - **Immutability:** Prefer immutable data structures where possible.
18
+ - **Depth:** Avoid deeply nested code (>3 levels); use early returns/guard clauses.
19
+ - **File size:** No file over ~400 lines; split into modules if larger.
20
+ - **Consistency:** Follow the existing style of the codebase for the language in use.
21
+ - Follow language-specific style guides:
22
+ - Python: PEP 8
23
+ - JavaScript/TypeScript: Airbnb or Standard JS
24
+ - Go: Effective Go
25
+
26
+ **Violations:**
27
+
28
+ - Single-letter variable names outside of loop indexes.
29
+ - Functions with more than one level of abstraction mixing.
30
+ - Hardcoded configuration values in source code.
31
+ - TODO comments left in production code for more than one sprint.