@jetrabbits/agentic 0.3.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -4,13 +4,6 @@
4
4
 
5
5
  Continuous integration and delivery pipelines: GitHub Actions, GitLab CI, quality gates, artifact management, build optimization, supply-chain security, and pipeline security hardening.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `ci-cd/rules/*` — load all
11
- 3. `ci-cd/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `ci-cd/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **No secrets in pipeline YAML** — all credentials via vault / environment secrets, never inline.
@@ -21,7 +14,7 @@ Continuous integration and delivery pipelines: GitHub Actions, GitLab CI, qualit
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- ci-cd/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── pipeline-standards.md ← stage order, naming, timeout policies
27
20
  │ ├── quality-gates.md ← required checks, merge block conditions
@@ -39,10 +32,3 @@ ci-cd/
39
32
  └── prompts/
40
33
  └── *.md
41
34
  ```
42
-
43
- ## Discovery patterns
44
-
45
- - `rules/*.md`
46
- - `skills/*/SKILL.md`
47
- - `workflows/*.md`
48
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Operational database management: backup verification, performance tuning, migration safety, incident response, PostgreSQL and Redis operations. Focus is on production database reliability, not application-level ORM usage.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `database-ops/rules/*` — load all
11
- 3. `database-ops/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `database-ops/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **Backups are not optional** — every production database has a verified backup and a tested restore procedure.
@@ -21,7 +14,7 @@ Operational database management: backup verification, performance tuning, migrat
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- database-ops/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── backup-policy.md ← frequency, retention, offsite requirements
27
20
  │ ├── access-control.md ← least-privilege roles, audit logging, break-glass
@@ -38,10 +31,3 @@ database-ops/
38
31
  └── prompts/
39
32
  └── *.md
40
33
  ```
41
-
42
- ## Discovery patterns
43
-
44
- - `rules/*.md`
45
- - `skills/*/SKILL.md`
46
- - `workflows/*.md`
47
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Shift-left security integration: container hardening, SBOM and supply-chain attestation, OPA / Kyverno policy enforcement, secret detection, and Sigstore artifact signing. Security controls are embedded in the delivery pipeline, not applied after the fact.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `devsecops/rules/*` — load all
11
- 3. `devsecops/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `devsecops/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **Shift left** — security checks run in CI, not in a post-deploy audit.
@@ -21,7 +14,7 @@ Shift-left security integration: container hardening, SBOM and supply-chain atte
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- devsecops/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── shift-left-policy.md ← required CI checks, fail-fast thresholds
27
20
  │ ├── container-security.md ← base image standards, rootless, read-only FS
@@ -38,10 +31,3 @@ devsecops/
38
31
  └── prompts/
39
32
  └── *.md
40
33
  ```
41
-
42
- ## Discovery patterns
43
-
44
- - `rules/*.md`
45
- - `skills/*/SKILL.md`
46
- - `workflows/*.md`
47
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Infrastructure-as-Code lifecycle: Terraform module authoring, environment provisioning and destruction, drift detection and remediation, state management, Ansible playbooks, cost optimization, and secret hygiene.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `infrastructure/rules/*` — load all
11
- 3. `infrastructure/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `infrastructure/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **IaC-only changes** — zero manual console or CLI changes in non-development environments; document exceptions.
@@ -21,7 +14,7 @@ Infrastructure-as-Code lifecycle: Terraform module authoring, environment provis
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- infrastructure/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── iac-standards.md ← module structure, naming, provider pinning
27
20
  │ ├── immutability.md ← replace-before-destroy, no in-place secret mutations
@@ -41,10 +34,3 @@ infrastructure/
41
34
  └── prompts/
42
35
  └── *.md
43
36
  ```
44
-
45
- ## Discovery patterns
46
-
47
- - `rules/*.md`
48
- - `skills/*/SKILL.md`
49
- - `workflows/*.md`
50
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Self-hosted and managed Kubernetes cluster operations: cluster bootstrap, workload onboarding, RBAC design, network policies, resource governance, upgrade management, and pod-level debugging.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `kubernetes/rules/*` — load all
11
- 3. `kubernetes/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `kubernetes/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Inherited from devops area
15
8
 
16
9
  - Infrastructure-as-Code immutability principle — no manual kubectl edits in production.
@@ -27,7 +20,7 @@ Self-hosted and managed Kubernetes cluster operations: cluster bootstrap, worklo
27
20
  ## Spec map
28
21
 
29
22
  ```text
30
- kubernetes/
23
+ .agent/
31
24
  ├── rules/
32
25
  │ ├── cluster-standards.md ← node sizing, OS, CRI, CNI constraints
33
26
  │ ├── workload-security.md ← PSA levels, RBAC defaults, network policy baselines
@@ -48,10 +41,3 @@ kubernetes/
48
41
  └── prompts/
49
42
  └── *.md
50
43
  ```
51
-
52
- ## Discovery patterns
53
-
54
- - `rules/*.md`
55
- - `skills/*/SKILL.md`
56
- - `workflows/*.md`
57
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Platform networking: Kubernetes ingress design, TLS termination, service mesh onboarding, DNS management, VPC design, and network segmentation. Networking changes are high-blast-radius — this area enforces a plan-review-apply discipline.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `networking/rules/*` — load all
11
- 3. `networking/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `networking/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **TLS everywhere** — plaintext traffic is forbidden between services and at ingress, without exception.
@@ -21,7 +14,7 @@ Platform networking: Kubernetes ingress design, TLS termination, service mesh on
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- networking/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── tls-policy.md ← minimum TLS version, cert rotation, mTLS requirements
27
20
  │ ├── ingress-standards.md ← ingress class, annotations, rate limiting, WAF baseline
@@ -38,10 +31,3 @@ networking/
38
31
  └── prompts/
39
32
  └── *.md
40
33
  ```
41
-
42
- ## Discovery patterns
43
-
44
- - `rules/*.md`
45
- - `skills/*/SKILL.md`
46
- - `workflows/*.md`
47
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Platform observability: Prometheus metrics and Alertmanager rules, Loki log aggregation, Tempo distributed tracing, Grafana dashboards, SLO implementation, and service monitoring onboarding.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `observability/rules/*` — load all
11
- 3. `observability/skills/*/SKILL.md` — load only the skill matching the current task
12
- 4. `observability/workflows/*` — load the workflow matching the triggered command
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **Golden signals first** — every new service exposes latency, traffic, errors, and saturation before any custom metrics.
@@ -21,7 +14,7 @@ Platform observability: Prometheus metrics and Alertmanager rules, Loki log aggr
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- observability/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── golden-signals.md ← required metrics per service, naming conventions
27
20
  │ ├── alerting-standards.md ← severity levels, routing, inhibition, runbook requirement
@@ -39,10 +32,3 @@ observability/
39
32
  └── prompts/
40
33
  └── *.md
41
34
  ```
42
-
43
- ## Discovery patterns
44
-
45
- - `rules/*.md`
46
- - `skills/*/SKILL.md`
47
- - `workflows/*.md`
48
- - `prompts/*.md`
@@ -4,13 +4,6 @@
4
4
 
5
5
  Site reliability engineering: SLO/SLI design, error budget policy, chaos engineering, capacity planning, incident command, and post-mortem facilitation. The SRE area treats reliability as a measurable feature with a finite budget — not a vague aspiration.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline
10
- 2. `sre/rules/*` — load all
11
- 3. `sre/skills/*/SKILL.md` — load matching skill only
12
- 4. `sre/workflows/*` — load matching workflow
13
-
14
7
  ## Cross-cutting constraints
15
8
 
16
9
  - **SLOs drive decisions** — if error budget remains, ship features; if exhausted, halt features and fix reliability.
@@ -21,7 +14,7 @@ Site reliability engineering: SLO/SLI design, error budget policy, chaos enginee
21
14
  ## Spec map
22
15
 
23
16
  ```text
24
- sre/
17
+ .agent/
25
18
  ├── rules/
26
19
  │ ├── slo-policy.md ← SLO definition standards, window sizes, target tiers
27
20
  │ ├── error-budget-policy.md ← budget consumption thresholds, freeze triggers
@@ -39,10 +32,3 @@ sre/
39
32
  └── prompts/
40
33
  └── *.md
41
34
  ```
42
-
43
- ## Discovery patterns
44
-
45
- - `rules/*.md`
46
- - `skills/*/SKILL.md`
47
- - `workflows/*.md`
48
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Server-side service development: REST / GraphQL API design, domain modeling, database access patterns, async processing, observability, and security. Load after `software/general/` baseline.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `backend/rules/*` — load all for this spec
12
- 4. `backend/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `backend/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC methodology and role responsibilities
@@ -27,7 +19,7 @@ Server-side service development: REST / GraphQL API design, domain modeling, dat
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- backend/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── architecture.md ← layering, module boundaries, dependency direction
33
25
  │ ├── data_access.md ← ORM usage, query patterns, N+1 prevention
@@ -50,10 +42,3 @@ backend/
50
42
  └── prompts/
51
43
  └── *.md
52
44
  ```
53
-
54
- ## Discovery patterns
55
-
56
- - `rules/*.md`
57
- - `skills/*/SKILL.md`
58
- - `workflows/*.md`
59
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Data pipeline engineering: dbt model development, data warehouse schema management, orchestration (Airflow / Prefect), data quality checks, lineage governance, SQL optimization, streaming patterns, and PII-safe data handling.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `data-engineering/rules/*` — load all for this spec
12
- 4. `data-engineering/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `data-engineering/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC methodology and handoff contracts
@@ -27,7 +19,7 @@ Data pipeline engineering: dbt model development, data warehouse schema manageme
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- data-engineering/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── data-governance.md ← data ownership, access tiers, retention policy
33
25
  │ ├── pii-handling.md ← classification, masking, pseudonymization requirements
@@ -50,10 +42,3 @@ data-engineering/
50
42
  └── prompts/
51
43
  └── *.md
52
44
  ```
53
-
54
- ## Discovery patterns
55
-
56
- - `rules/*.md`
57
- - `skills/*/SKILL.md`
58
- - `workflows/*.md`
59
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  UI and component development: component architecture, accessibility (WCAG AA), performance budgets, state management, API integration, CSS architecture, visual regression, and bundle analysis.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `frontend/rules/*` — load all for this spec
12
- 4. `frontend/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `frontend/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC roles and quality gates
@@ -27,7 +19,7 @@ UI and component development: component architecture, accessibility (WCAG AA), p
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- frontend/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── accessibility.md ← WCAG AA requirements, ARIA patterns, keyboard navigation
33
25
  │ ├── architecture.md ← component hierarchy, coupling, folder structure
@@ -51,10 +43,3 @@ frontend/
51
43
  └── prompts/
52
44
  └── *.md
53
45
  ```
54
-
55
- ## Discovery patterns
56
-
57
- - `rules/*.md`
58
- - `skills/*/SKILL.md`
59
- - `workflows/*.md`
60
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  End-to-end product feature development spanning backend services and frontend interfaces: API design, backend architecture, database access, async processing, frontend integration, testing pipelines, and full project lifecycle management.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `full-stack/rules/*` — load all for this spec
12
- 4. `full-stack/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `full-stack/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC methodology, role responsibilities, and handoff contracts
@@ -27,7 +19,7 @@ End-to-end product feature development spanning backend services and frontend in
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- full-stack/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── api-design-guide.md ← REST/GraphQL/tRPC conventions, versioning
33
25
  │ ├── backend-architecture-rule.md ← layering, module boundaries, DI
@@ -60,10 +52,3 @@ full-stack/
60
52
  └── prompts/
61
53
  └── *.md
62
54
  ```
63
-
64
- ## Discovery patterns
65
-
66
- - `rules/*.md`
67
- - `skills/*/SKILL.md`
68
- - `workflows/*.md`
69
- - `prompts/*.md`
@@ -41,7 +41,7 @@ Specializations reference general guidance and keep only domain-specific overrid
41
41
  ## Guidance tree
42
42
 
43
43
  ```text
44
- general/
44
+ .agent/
45
45
  ├── rules/
46
46
  │ ├── git-workflow-guide.md ← branching, commit messages, PR conventions
47
47
  │ ├── github-workflow-guide.md ← GitHub-specific CI triggers and branch protection
@@ -60,9 +60,3 @@ general/
60
60
  ├── code-review-workflow.md ← /code-review
61
61
  └── development-cycle-workflow.md ← /dev-cycle
62
62
  ```
63
-
64
- ## Discovery patterns
65
-
66
- - `rules/*.md`
67
- - `skills/*/SKILL.md`
68
- - `workflows/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Machine learning operations: experiment tracking, model training pipelines, feature engineering, model evaluation, champion/challenger workflows, inference serving, model monitoring, and production safety gates. MLOps treats models as software artifacts with the same reproducibility and observability requirements as any production service.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `mlops/rules/*` — load all for this spec
12
- 4. `mlops/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `mlops/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC methodology and handoff contracts
@@ -27,7 +19,7 @@ Machine learning operations: experiment tracking, model training pipelines, feat
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- mlops/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── reproducibility.md ← seed pinning, dependency locking, artifact versioning
33
25
  │ ├── data-integrity.md ← training data lineage, validation, split discipline
@@ -48,10 +40,3 @@ mlops/
48
40
  └── prompts/
49
41
  └── *.md
50
42
  ```
51
-
52
- ## Discovery patterns
53
-
54
- - `rules/*.md`
55
- - `skills/*/SKILL.md`
56
- - `workflows/*.md`
57
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  iOS, Android, and cross-platform mobile development (React Native, Flutter): offline-first architecture, platform compliance (App Store / Play Store), performance budgets, native module integration, push notifications, OTA update delivery, release builds, and crash triage.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `mobile/rules/*` — load all for this spec
12
- 4. `mobile/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `mobile/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC methodology and handoff contracts
@@ -27,7 +19,7 @@ iOS, Android, and cross-platform mobile development (React Native, Flutter): off
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- mobile/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── offline-first.md ← local state, sync strategy, conflict resolution
33
25
  │ ├── performance-budget.md ← frame rate, TTI, memory, crash rate thresholds
@@ -49,10 +41,3 @@ mobile/
49
41
  └── prompts/
50
42
  └── *.md
51
43
  ```
52
-
53
- ## Discovery patterns
54
-
55
- - `rules/*.md`
56
- - `skills/*/SKILL.md`
57
- - `workflows/*.md`
58
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Internal platform engineering for software teams: Kubernetes manifests, Terraform patterns, CI/CD pipeline setup, secrets management, observability stack configuration, networking, cost governance, and production incident response. The platform area bridges software development and dedicated DevOps specializations.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `platform/rules/*` — load all for this spec
12
- 4. `platform/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `platform/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Spec selection
16
8
 
17
9
  For deep platform specialization, prefer the dedicated DevOps area specs:
@@ -35,7 +27,7 @@ For deep platform specialization, prefer the dedicated DevOps area specs:
35
27
  ## Spec map
36
28
 
37
29
  ```text
38
- platform/
30
+ .agent/
39
31
  ├── rules/
40
32
  │ ├── immutability.md ← no manual infra changes; IaC-first discipline
41
33
  │ ├── reliability.md ← SLO targets, incident severity, on-call expectations
@@ -58,10 +50,3 @@ platform/
58
50
  └── prompts/
59
51
  └── *.md
60
52
  ```
61
-
62
- ## Discovery patterns
63
-
64
- - `rules/*.md`
65
- - `skills/*/SKILL.md`
66
- - `workflows/*.md`
67
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Test strategy, risk-based verification, and release confidence: test pyramid design, flakiness management, performance auditing, regression suite maintenance, test data management, and accessibility testing.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `qa/rules/*` — load all for this spec
12
- 4. `qa/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `qa/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - SDLC role responsibilities and handoffs
@@ -27,7 +19,7 @@ Test strategy, risk-based verification, and release confidence: test pyramid des
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- qa/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── test-strategy.md ← pyramid ratios, coverage targets, risk classification
33
25
  │ ├── quality-gates.md ← blocking vs advisory criteria, merge conditions
@@ -49,10 +41,3 @@ qa/
49
41
  └── prompts/
50
42
  └── *.md
51
43
  ```
52
-
53
- ## Discovery patterns
54
-
55
- - `rules/*.md`
56
- - `skills/*/SKILL.md`
57
- - `workflows/*.md`
58
- - `prompts/*.md`
@@ -4,14 +4,6 @@
4
4
 
5
5
  Application and infrastructure security: secure coding standards, dependency auditing, SAST/DAST interpretation, threat modeling, auth patterns, cryptography standards, security headers, secret rotation, and compliance reporting.
6
6
 
7
- ## Guidance chain
8
-
9
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
10
- 2. `software/general/rules/*` — always active
11
- 3. `security/rules/*` — load all for this spec
12
- 4. `security/skills/*/SKILL.md` — load only the skill matching the current task
13
- 5. `security/workflows/*` — load the workflow matching the triggered command
14
-
15
7
  ## Inherited from general
16
8
 
17
9
  - Git / CI quality baseline
@@ -27,7 +19,7 @@ Application and infrastructure security: secure coding standards, dependency aud
27
19
  ## Spec map
28
20
 
29
21
  ```text
30
- security/
22
+ .agent/
31
23
  ├── rules/
32
24
  │ ├── secure-coding.md ← OWASP Top 10 mitigations, input validation, output encoding
33
25
  │ ├── secrets-policy.md ← storage, rotation, access audit, emergency rotation
@@ -49,10 +41,3 @@ security/
49
41
  └── prompts/
50
42
  └── *.md
51
43
  ```
52
-
53
- ## Discovery patterns
54
-
55
- - `rules/*.md`
56
- - `skills/*/SKILL.md`
57
- - `workflows/*.md`
58
- - `prompts/*.md`
@@ -12,15 +12,6 @@ Delete all AGENT INSTRUCTIONS comments before finalising.
12
12
 
13
13
  {{ONE_PARAGRAPH: what domain this spec covers, who uses it, and what kinds of work it guides agents through.}}
14
14
 
15
- ## Guidance chain
16
-
17
- Load in this order:
18
-
19
- 1. Project `.agent/` baseline (`AGENTS.md` + `.agent/*`)
20
- 2. `{{domain}}/{{spec}}/rules/*` — load all rules for this spec
21
- 3. `{{domain}}/{{spec}}/skills/*/SKILL.md` — load only the skill matching the current task (see "When to load" in each skill)
22
- 4. `{{domain}}/{{spec}}/workflows/*` — load the workflow matching the triggered slash command
23
-
24
15
  ## Inherited from {{DOMAIN_NAME}} area
25
16
 
26
17
  <!--
@@ -45,7 +36,7 @@ Avoid advice-language: "consider", "try to", "ideally".
45
36
  ## Spec map
46
37
 
47
38
  ```text
48
- {{spec-name}}/
39
+ .agent/
49
40
  ├── rules/
50
41
  │ ├── {{filename}}.md ← {{one_line_description}}
51
42
  │ └── {{filename}}.md ← {{one_line_description}}
@@ -58,10 +49,3 @@ Avoid advice-language: "consider", "try to", "ideally".
58
49
  └── prompts/
59
50
  └── *.md
60
51
  ```
61
-
62
- ## Discovery patterns
63
-
64
- - `rules/*.md`
65
- - `skills/*/SKILL.md`
66
- - `workflows/*.md`
67
- - `prompts/*.md`
@@ -22,7 +22,7 @@ theme=auto
22
22
 
23
23
  Supported values are `auto`, `dark`, and `light`.
24
24
 
25
- Target projects receive `.agentic.json`. It stores selected install settings, managed file paths, source paths, hashes, generated marker type, and skipped files from the latest rerun.
25
+ Target projects receive `.agentic.json`. It stores selected install settings, optional project-level OpenCode plugin configuration, managed file paths, source paths, hashes, generated marker type, and skipped files from the latest rerun. When Telegram notifications are enabled, `.agentic.json` includes plaintext `botToken` and `chatId`; keep that file out of public repositories.
26
26
 
27
27
  ## Repository modes
28
28
 
@@ -109,6 +109,10 @@ When MemPalace MCP is enabled during interactive install, TUI install, or throug
109
109
  1. Python availability check
110
110
  2. pip availability check
111
111
  3. `pip install mempalace`
112
- 4. Explicit skip log for automatic project initialization, plus optional manual `mempalace init`/`mempalace mine` instructions
112
+ 4. Project memory initialization with `mempalace init --yes --no-llm`
113
+ 5. Project mining with `mempalace mine <project> --wing <project-basename>`
114
+ 6. Optional shared docs mining with `mempalace mine <project>/docs --wing shared_docs`
113
115
 
114
- If auto-install or runtime checks fail, `agentic` prints manual setup instructions and continues. After setup, install checks that `mempalace-mcp` is present and leaves runtime startup/tool validation to the post-install doctor smoke check. Generated MCP configs invoke `mempalace-mcp` without arguments for all supported agent targets.
116
+ If auto-install, initialization, mining, or runtime checks fail, `agentic` prints manual setup instructions and continues. When `pip install mempalace` fails, the warning includes the pip exit status, a temporary pip output log path, and the first non-empty pip output line as the likely reason. The full pip output is also copied into the main Agentic run log. After setup, install checks that `mempalace-mcp` is present and leaves runtime startup/tool validation to the post-install doctor smoke check. Generated MCP configs invoke `mempalace-mcp` without arguments for all supported agent targets.
117
+
118
+ Each MemPalace init/mine command has a timeout controlled by `AGENTIC_MEMPALACE_TIMEOUT_SECONDS` and defaults to `60` seconds. Timeouts are reported as warnings and do not block MCP config generation.