@lifeaitools/rdc-skills 0.8.7

package/scripts/uninstall.ps1

@@ -0,0 +1,77 @@
+# Uninstall rdc-skills plugin from Claude Code
+# Windows PowerShell script
+
+param(
+    [string]$claudeHome = $env:CLAUDE_HOME,
+    [switch]$confirm = $false
+)
+
+# Detect CLAUDE_HOME if not provided
+if (-not $claudeHome) {
+    $claudeHome = Join-Path $env:USERPROFILE ".claude"
+}
+
+Write-Host "rdc-skills Uninstaller" -ForegroundColor Red
+Write-Host "======================" -ForegroundColor Red
+Write-Host ""
+
+# Check CLAUDE_HOME exists
+if (-not (Test-Path $claudeHome)) {
+    Write-Host "CLAUDE_HOME does not exist or is empty: $claudeHome" -ForegroundColor Yellow
+    exit 0
+}
+
+Write-Host "CLAUDE_HOME: $claudeHome" -ForegroundColor Cyan
+Write-Host ""
+
+# List what will be removed
+$skillsDir = Join-Path $claudeHome "skills" "user"
+$hooksDir = Join-Path $claudeHome "hooks"
+
+$toDelete = @()
+
+if (Test-Path $skillsDir) {
+    $skills = Get-ChildItem -Path $skillsDir -Filter "rdc*.md" -ErrorAction SilentlyContinue
+    foreach ($skill in $skills) {
+        $toDelete += $skill.FullName
+    }
+}
+
+if (Test-Path $hooksDir) {
+    $hooks = Get-ChildItem -Path $hooksDir -Filter "*open-epics*" -ErrorAction SilentlyContinue
+    foreach ($hook in $hooks) {
+        $toDelete += $hook.FullName
+    }
+}
+
+if ($toDelete.Count -eq 0) {
+    Write-Host "No rdc-skills files found to remove." -ForegroundColor Yellow
+    exit 0
+}
+
+Write-Host "Will remove the following files:" -ForegroundColor Yellow
+foreach ($file in $toDelete) {
+    Write-Host "  - $(Split-Path -Leaf $file)" -ForegroundColor DarkRed
+}
+Write-Host ""
+
+# Confirm
+if (-not $confirm) {
+    $response = Read-Host "Continue? (y/N)"
+    if ($response -ne 'y' -and $response -ne 'Y') {
+        Write-Host "Cancelled." -ForegroundColor Yellow
+        exit 0
+    }
+}
+
+# Remove files
+foreach ($file in $toDelete) {
+    Remove-Item -Path $file -Force -ErrorAction SilentlyContinue
+    Write-Host "✓ Removed: $(Split-Path -Leaf $file)" -ForegroundColor Green
+}
+
+Write-Host ""
+Write-Host "Uninstall Complete" -ForegroundColor Green
+Write-Host ""
+Write-Host "Remaining guides and project overlays in docs/guides/ were NOT removed." -ForegroundColor Cyan
+Write-Host "Delete them manually if desired." -ForegroundColor Cyan

package/scripts/uninstall.sh

@@ -0,0 +1,69 @@
+#!/bin/bash
+# Uninstall rdc-skills plugin from Claude Code
+# Unix/macOS bash script
+
+set -e
+
+CLAUDE_HOME="${CLAUDE_HOME:-$HOME/.claude}"
+
+echo "rdc-skills Uninstaller"
+echo "======================"
+echo ""
+
+# Check CLAUDE_HOME exists
+if [ ! -d "$CLAUDE_HOME" ]; then
+    echo "CLAUDE_HOME does not exist: $CLAUDE_HOME"
+    exit 0
+fi
+
+echo "CLAUDE_HOME: $CLAUDE_HOME"
+echo ""
+
+# Find files to remove
+SKILLS_DIR="$CLAUDE_HOME/skills/user"
+HOOKS_DIR="$CLAUDE_HOME/hooks"
+
+TO_DELETE=()
+
+if [ -d "$SKILLS_DIR" ]; then
+    while IFS= read -r -d '' file; do
+        TO_DELETE+=("$file")
+    done < <(find "$SKILLS_DIR" -maxdepth 1 -name "rdc*.md" -print0 2>/dev/null)
+fi
+
+if [ -d "$HOOKS_DIR" ]; then
+    while IFS= read -r -d '' file; do
+        TO_DELETE+=("$file")
+    done < <(find "$HOOKS_DIR" -maxdepth 1 -name "*open-epics*" -print0 2>/dev/null)
+fi
+
+if [ ${#TO_DELETE[@]} -eq 0 ]; then
+    echo "No rdc-skills files found to remove."
+    exit 0
+fi
+
+echo "Will remove the following files:"
+for file in "${TO_DELETE[@]}"; do
+    echo "  - $(basename "$file")"
+done
+echo ""
+
+# Confirm
+read -p "Continue? (y/N) " -n 1 -r
+echo
+if [[ ! $REPLY =~ ^[Yy]$ ]]; then
+    echo "Cancelled."
+    exit 0
+fi
+
+# Remove files
+for file in "${TO_DELETE[@]}"; do
+    rm -f "$file"
+    echo "✓ Removed: $(basename "$file")"
+done
+
+echo ""
+echo "Uninstall Complete"
+echo ""
+echo "Remaining guides and project overlays in docs/guides/ were NOT removed."
+echo "Delete them manually if desired."

package/scripts/update.ps1

@@ -0,0 +1,43 @@
+# Update rdc-skills plugin to latest version
+# Windows PowerShell script
+
+Write-Host "rdc-skills Updater" -ForegroundColor Cyan
+Write-Host "=================" -ForegroundColor Cyan
+Write-Host ""
+
+$repoRoot = Split-Path -Parent (Split-Path -Parent $MyInvocation.MyCommand.Path)
+
+# Get current version before pulling
+$oldVersion = "unknown"
+$pkgFile = Join-Path $repoRoot "package.json"
+if (Test-Path $pkgFile) {
+    $pkg = Get-Content $pkgFile | ConvertFrom-Json
+    $oldVersion = $pkg.version
+}
+
+Write-Host "Current version: $oldVersion" -ForegroundColor Yellow
+
+# Pull latest from git
+Write-Host "Pulling latest from git..." -ForegroundColor Cyan
+Push-Location $repoRoot
+git fetch origin | Out-Null
+git pull origin main --ff-only 2>&1 | ForEach-Object { Write-Host "  $_" }
+Pop-Location
+
+# Get new version after pulling
+$newVersion = "unknown"
+if (Test-Path $pkgFile) {
+    $pkg = Get-Content $pkgFile | ConvertFrom-Json
+    $newVersion = $pkg.version
+}
+
+Write-Host "New version: $newVersion" -ForegroundColor Green
+
+if ($oldVersion -eq $newVersion) {
+    Write-Host ""
+    Write-Host "Already up to date." -ForegroundColor Yellow
+} else {
+    Write-Host ""
+    Write-Host "Reinstalling..." -ForegroundColor Cyan
+    & (Join-Path $repoRoot "scripts" "install.ps1")
+}

package/scripts/update.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# Update rdc-skills plugin to latest version
+# Unix/macOS bash script
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(dirname "$SCRIPT_DIR")"
+
+echo "rdc-skills Updater"
+echo "=================="
+echo ""
+
+# Get current version before pulling
+OLD_VERSION="unknown"
+if [ -f "$REPO_ROOT/package.json" ]; then
+    OLD_VERSION=$(grep '"version"' "$REPO_ROOT/package.json" | head -1 | sed 's/.*"version": "\(.*\)".*/\1/')
+fi
+
+echo "Current version: $OLD_VERSION"
+
+# Pull latest from git
+echo "Pulling latest from git..."
+cd "$REPO_ROOT"
+git fetch origin
+git pull origin main --ff-only || true
+
+# Get new version after pulling
+NEW_VERSION="unknown"
+if [ -f "$REPO_ROOT/package.json" ]; then
+    NEW_VERSION=$(grep '"version"' "$REPO_ROOT/package.json" | head -1 | sed 's/.*"version": "\(.*\)".*/\1/')
+fi
+
+echo "New version: $NEW_VERSION"
+
+if [ "$OLD_VERSION" = "$NEW_VERSION" ]; then
+    echo ""
+    echo "Already up to date."
+else
+    echo ""
+    echo "Reinstalling..."
+    bash "$REPO_ROOT/scripts/install.sh"
+fi

package/scripts/watch-init.mjs

@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+// watch-init.mjs — initialize a session log + viewer for rdc:watch.
+//
+// Usage:
+//   node scripts/watch-init.mjs [--project-root <path>]
+//
+// Creates:
+//   <projectRoot>/.rdc/session-log/<runId>.log    (with banner line)
+//   <projectRoot>/.rdc/session-log/current.log    (copy of the new log)
+//   <projectRoot>/.rdc/session-log/viewer.html    (copied from plugin assets)
+//
+// Exits 0 on success, 1 on error.
+
+import { mkdirSync, writeFileSync, copyFileSync, existsSync, statSync, readFileSync } from "node:fs";
+import { join, resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { platform } from "node:os";
+
+function parseArgs(argv) {
+  const out = { projectRoot: process.cwd() };
+  for (let i = 0; i < argv.length; i++) {
+    if (argv[i] === "--project-root" && argv[i + 1]) {
+      out.projectRoot = resolve(argv[++i]);
+    }
+  }
+  return out;
+}
+
+function randId(n) {
+  const chars = "abcdefghijklmnopqrstuvwxyz0123456789";
+  let s = "";
+  for (let i = 0; i < n; i++) s += chars[Math.floor(Math.random() * chars.length)];
+  return s;
+}
+
+function makeRunId() {
+  const d = new Date();
+  const pad = (x) => String(x).padStart(2, "0");
+  const stamp =
+    d.getFullYear() + "-" + pad(d.getMonth() + 1) + "-" + pad(d.getDate()) +
+    "-" + pad(d.getHours()) + pad(d.getMinutes()) + pad(d.getSeconds());
+  return stamp + "-" + randId(6);
+}
+
+function openHint(viewerPath) {
+  const p = platform();
+  if (p === "win32") return `start "" "${viewerPath}"`;
+  if (p === "darwin") return `open "${viewerPath}"`;
+  return `xdg-open "${viewerPath}"`;
+}
+
+function main() {
+  const { projectRoot } = parseArgs(process.argv.slice(2));
+  const here = dirname(fileURLToPath(import.meta.url));                    // .../rdc-skills/scripts
+  const pluginRoot = resolve(here, "..");                                   // .../rdc-skills
+  const assetViewer = join(pluginRoot, "assets", "watcher", "viewer.html");
+
+  if (!existsSync(assetViewer)) {
+    console.error(`watch-init: viewer asset missing at ${assetViewer}`);
+    process.exit(1);
+  }
+
+  const logDir = join(projectRoot, ".rdc", "session-log");
+  mkdirSync(logDir, { recursive: true });
+
+  const runId = makeRunId();
+  const logPath = join(logDir, `${runId}.log`);
+  const currentPath = join(logDir, "current.log");
+  const viewerPath = join(logDir, "viewer.html");
+
+  const iso = new Date().toISOString();
+  const banner = `[${iso}] [banner] Session started: ${runId}\n`;
+  writeFileSync(logPath, banner, "utf8");
+  writeFileSync(currentPath, banner, "utf8");
+
+  // Copy viewer.html if missing or stale (source newer than dest).
+  let needsCopy = !existsSync(viewerPath);
+  if (!needsCopy) {
+    try {
+      const srcM = statSync(assetViewer).mtimeMs;
+      const dstM = statSync(viewerPath).mtimeMs;
+      if (srcM > dstM) needsCopy = true;
+    } catch { needsCopy = true; }
+  }
+  if (needsCopy) copyFileSync(assetViewer, viewerPath);
+
+  console.log("run_id:     " + runId);
+  console.log("log_path:   " + logPath);
+  console.log("current:    " + currentPath);
+  console.log("viewer:     " + viewerPath);
+  console.log("open_hint:  " + openHint(viewerPath));
+  process.exit(0);
+}
+
+try {
+  main();
+} catch (err) {
+  console.error("watch-init: " + (err && err.message ? err.message : String(err)));
+  process.exit(1);
+}

package/skills/build/SKILL.md

@@ -0,0 +1,238 @@
+---
+name: rdc:build
+description: >-
+  Usage `rdc:build <epic-id|topic> [--unattended]` — dispatch typed agents from an epic, commit, push, update work items. The build engine. Use after rdc:plan or when the project lead says "build it".
+---
+
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
+> One checklist upfront, updated in place, shown again at end with a 1-line verdict.
+
+> **Sandbox contract:** This skill honors `RDC_TEST=1` per `guides/agent-bootstrap.md` § RDC_TEST Sandbox Contract. Destructive external calls short-circuit under the flag.
+
+
+# rdc:build — Typed Agent Dispatch Engine
+
+## When to Use
+- Plan is approved and ready to execute
+- Project lead says "build it", "go", "execute", "do not stop"
+- An epic exists with child tasks ready for implementation
+- Called by `rdc:overnight` as part of the automated build loop
+
+## Arguments
+- `rdc:build <epic-id>` — build from a specific Supabase epic
+- `rdc:build <topic>` — find the epic by label/title match
+- `rdc:build` (no args) — show open epics and ask which to build (interactive only)
+- `rdc:build <epic-id> --unattended` — silent mode for overnight builds
+
+## Agent Types & Guide Files
+
+Every dispatched agent MUST read two files before starting — in this order:
+1. `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` — credentials, git rules, completion report format
+   (fallback: `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` if `.rdc/` does not exist)
+2. `{PROJECT_ROOT}/.rdc/guides/<type>.md` — role-specific guide
+   (fallback: `{PROJECT_ROOT}/.rdc/guides/<type>.md`)
+
+Include both lines in every agent prompt:
+```
+"Read {PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md first (fallback: .rdc/guides/agent-bootstrap.md), then {PROJECT_ROOT}/.rdc/guides/<type>.md (fallback: .rdc/guides/<type>.md) before starting."
+```
+
+| Agent Type | Guide File | When to dispatch |
+|-----------|-----------|-----------------|
+| `frontend` | `.rdc/guides/frontend.md` | React components, pages, UI, Tailwind, animation |
+| `backend` | `.rdc/guides/backend.md` | API routes, server components, database queries, auth |
+| `data` | `.rdc/guides/data.md` | Migrations, schema changes, RPC functions |
+| `design` | `.rdc/guides/design.md` | Visual design, brand palettes, OG images, token work |
+| `infra` | `.rdc/guides/infrastructure.md` | CI/CD, deployment, DNS, SSL |
+| `content` | `.rdc/guides/content.md` | Marketing copy, messaging, tone |
+| `cs2` | `.rdc/guides/cs2.md` | CS 2.0 paradigm work (generic) |
+| `hail` | `.rdc/guides/cs2.md` + `packages/hail/CLAUDE.md` | Grammar, DSL compiler, evolution |
+| `pal` | `.rdc/guides/cs2.md` + `packages/pal/CLAUDE.md` | Sessions, moment windows, graph memory |
+| `bpmn` | `.rdc/guides/cs2.md` + `docs/systems/<domain>/flowable-bpmn-architecture.md` | BPMN flows, governance |
+| `virtue` | `.rdc/guides/cs2.md` + `packages/virtue-engine/CLAUDE.md` | Virtue weights, coherence, certification |
+| `viz` | `.rdc/guides/frontend.md` + `.rdc/guides/design.md` | Custom viz components, charts, diagrams |
+
+### How to classify a task → agent type
+
+Read the task title and description, then:
+- Mentions React, component, page, UI, Tailwind → `frontend`
+- Mentions API route, server, database query, auth → `backend`
+- Mentions migration, schema, table, RPC → `data`
+- Mentions brand, palette, typography, OG image → `design`
+- Mentions deploy, infrastructure, CI, DNS → `infra`
+- Mentions copy, messaging, email template → `content`
+- Mentions grammar, DSL, compiler → `hail`
+- Mentions session, moment, memory graph → `pal`
+- Mentions BPMN, flow, governance → `bpmn`
+- Mentions virtue, coherence, certification → `virtue`
+- Mentions visualization, chart, diagram, SVG → `viz`
+- Multiple types? Dispatch multiple agents, each with its guide.
+
+## Procedure
+
+1. **Load the epic:**
+   ```sql
+   SELECT get_work_items_by_epic('<epic-id>', 'todo');
+   ```
+   - Interactive (no args): show open epics, ask which to build
+   - Unattended (no tasks found): escalate via advisor tool
+
+2. **CHECK FOR EXISTING WORK (mandatory — never skip):**
+   ```sql
+   -- Check if prototypes exist from earlier sessions
+   SELECT name, component, source_path, status, notes
+   FROM prototype_registry
+   WHERE status IN ('prototype', 'converting')
+   ORDER BY created_at DESC;
+
+   -- Check for design decisions on this topic
+   SELECT topic, context_type, summary, source
+   FROM design_context
+   WHERE topic ILIKE '%<epic-topic>%'
+   ORDER BY created_at DESC;
+   ```
+   **If a prototype exists: ADAPT IT. Do not build from scratch.**
+   Tell the agent: "Read <source_path> first and convert it to the production contract."
+   
+   **If design decisions exist: follow them.** Include the summary in the agent prompt.
+
+3. **Load the plan** (if exists): check `.rdc/plans/` for matching topic (fallback: `.rdc/plans/`).
+
+4. **Read CLAUDE.md files** for all affected packages.
+
+5. **Classify each task** → assign agent type from the table above.
+
+5b. **Write a checklist into every work item before dispatching:**
+    For each task, append a checklist to its notes BEFORE setting to `in_progress`:
+    ```sql
+    SELECT update_work_item_status('<id>'::uuid, 'in_progress',
+      '["CHECKLIST: [ ] <deliverable 1>, [ ] <deliverable 2>, [ ] tsc clean, [ ] route 200, [ ] committed"]'::jsonb
+    );
+    ```
+    The agent must complete every item on this checklist and return it checked off in AGENT_COMPLETE.
+    A checklist with unchecked items = incomplete work. Do not proceed to next wave with unchecked items.
+
+6. **Group tasks into waves** — parallelize tasks with no file overlap:
+   - Wave 1: independent tasks (different packages/files)
+   - Wave 2: tasks that depend on Wave 1 outputs
+   - Wave 3: integration tasks
+
+7. **For each wave — dispatch typed agents in parallel:**
+
+   ### ⛔ Agent Dispatch Non-Negotiable Defaults
+   Every `Agent()` call MUST include these parameters — no exceptions:
+   ```
+   model: "sonnet"
+   max_turns: 70
+   isolation: "worktree"
+   ```
+   Agents run Sonnet 4.6 — capable for implementation work, budget-safe for parallel dispatch. The supervisor session model does NOT cascade to agents; you must set it explicitly.
+   Without `max_turns: 70`, agents hit the default turn cap mid-task and stop.
+   `isolation: "worktree"` gives each agent its own git worktree and branch — eliminates push race conditions and index lock contention when multiple agents commit in parallel. The supervisor merges worktree branches after each wave (Step 9).
+
+   ### Required agent prompt contents
+   - Set work item to `in_progress` before dispatching
+   - Each agent prompt MUST include:
+     - `"Read {PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md first (fallback: .rdc/guides/agent-bootstrap.md), then {PROJECT_ROOT}/.rdc/guides/<type>.md (fallback: .rdc/guides/<type>.md) before starting."`
+     - Specific files to create/modify
+     - Exact deliverables and commit message
+     - `"NEVER run pnpm build/test. NEVER modify files outside your scope."`
+     - **`"You are running in an isolated git worktree. Commit your work normally. Do NOT push to origin — the supervisor merges your branch after the wave completes."`**
+     - **`"When done, set your work item to 'review' (NOT 'done') and return AGENT_COMPLETE with a verification field. The validator closes work items — you do not."`**
+     - **`"COMPLETION PROOF REQUIRED in AGENT_COMPLETE: list every file written, the exact commit hash, and paste the vitest/tsc output. A report without this evidence will be rejected."`**
+     - **`"If you find that a file or feature already exists: you MUST still verify it satisfies the full task spec before marking review. Finding a file is not completion. Run verification, check every requirement, and report what you found vs. what was required."`**
+   - Use `run_in_background: true` for parallel execution
+   - NEVER let agents overlap on the same files
+
+8. **Post-wave test gate (mandatory):**
+   After all agents in a wave complete, before proceeding:
+   ```bash
+   # For each package modified in this wave:
+   cd packages/<name> && npx vitest run 2>&1 | tail -20
+   ```
+   - All tests must pass before proceeding to next wave
+   - If tests fail: fix before proceeding
+   - NEVER use `pnpm build` or `pnpm turbo test` — vitest only per package
+   - New code must have tests: if a modified package shows 0 new test files, flag it
+
+9. **After all wave agents complete — merge worktrees and push:**
+
+   Each completed agent returns a worktree branch (e.g. `claude/agent-frontend-abc123`). Merge them all to develop before running the test gate:
+
+   ```bash
+   # For each worktree branch returned by agents in this wave:
+   git merge --no-ff <worktree-branch> -m "merge(<agent-type>): <task-title>"
+   ```
+
+   - Resolve any conflicts before proceeding — do not skip
+   - Worker agents set items to `review` — **do NOT close to `done` yet**
+   - After all branches merged, push once:
+     ```bash
+     if [ "$RDC_TEST" != "1" ]; then
+       git push origin develop
+     else
+       echo "[RDC_TEST] skipping git push"
+     fi
+     ```
+   - Then run the post-wave test gate (Step 8) on the merged state
+   - Continue to next wave
+
+   **If an agent fails (returns no worktree branch):**
+   - Interactive: diagnose before retrying
+   - Unattended: retry once; on second failure escalate via advisor
+     ```
+     BUILD_STATUS: { wave, tasks_done, tasks_failed, commits, escalated: true }
+     ```
+
+10. **Mandatory validator gate (runs after ALL waves complete — before any work item closes):**
+
+    ⛔ **NO work item may be set to `done` without the validator passing it.**
+
+    Dispatch ONE validator agent with the complete list of `review` work items and the full git diff.
+    ⚠️ The validator does NOT use `isolation: "worktree"` — it must read the fully merged develop branch. Omit the isolation parameter for this dispatch only.
+
+    ```
+    "Read C:/Dev/regen-root/.rdc/guides/agent-bootstrap.md then C:/Dev/regen-root/.rdc/guides/verify.md.
+     Validate these work items: [list of IDs and titles].
+     Apps touched: [list].
+     Git diff since build start: [attach or reference].
+     You are the ONLY agent that closes work items to done.
+     Follow verify.md procedure exactly: tsc → vitest → dev server route probes → record result per item."
+    ```
+
+    The validator:
+    - Runs `npx tsc --noEmit` for every touched app/package
+    - Starts the dev server and probes every modified route (expects HTTP 200, not 500)
+    - Runs vitest for every touched package
+    - Sets passing items to `done`, failing items back to `todo` with failure detail
+    - Returns `VALIDATOR_COMPLETE` report
+
+    **If the validator finds failures:** fix them in a new wave, then re-run the validator. Do not skip.
+    **File existence alone is NOT verification.** A route returning 500 is a failure regardless of tsc passing.
+
+11. **After verification passes:**
+    - All wave commits are already on develop and pushed (Step 9 pushes after each wave merge).
+    - Update epic version: `bump_epic_version()`
+    - Report summary with verification evidence quoted
+
+## Agent TDD Requirements
+
+When dispatching agents, include in every prompt:
+```
+TDD REQUIREMENT: Write tests FIRST for new functions/modules.
+Run: npx vitest run packages/<name> to verify red → implement → verify green.
+NEVER run pnpm build or pnpm turbo. Use npx vitest run only.
+```
+
+## Rules
+- Branch: development branch only (auto-commit, no confirmation needed)
+- NEVER let two agents edit the same file
+- NEVER run `pnpm build` (crashes system) — code only
+- Every agent reads its guide file — no exceptions
+- Update Supabase work items IN REAL TIME — not batch at end
+- Push after each wave, not just at the end
+- Unattended: NEVER pause — continue automatically
+- Unattended: max 2 retries per task before escalating to advisor
+- Every Agent() dispatch: `model: "sonnet"` + `max_turns: 70` + `isolation: "worktree"` — non-negotiable (Sonnet agents, Opus supervisor). Exception: validator agent in Step 10 omits isolation.
+- Finding an existing file is NOT task completion — verify it satisfies the spec