@punks/cli 0.1.16 → 1.0.0

package/dist/data/scripts/sync-subagents.mjs

@@ -0,0 +1,420 @@
+import {
+  lstat,
+  mkdir,
+  readFile,
+  readdir,
+  readlink,
+  rm,
+  symlink,
+  writeFile,
+} from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { agents, capabilityPacks } from "../subagents/manifest.mjs";
+
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
+const sharedAgentsPath = path.join(repoRoot, ".agents/AGENTS.md");
+const sharedSkillsPath = path.join(repoRoot, ".agents/skills");
+const sharedHooksPath = path.join(repoRoot, ".agents/hooks");
+
+const codexDir = path.join(repoRoot, ".codex");
+const codexAgentsDir = path.join(codexDir, "agents");
+const codexHooksDir = path.join(codexDir, "hooks");
+const codexConfigPath = path.join(codexDir, "config.toml");
+const codexAgentsMirrorPath = path.join(codexDir, "AGENTS.md");
+
+const claudeDir = path.join(repoRoot, ".claude");
+const claudeAgentsDir = path.join(claudeDir, "agents");
+const claudeHooksDir = path.join(claudeDir, "hooks");
+const claudeSettingsPath = path.join(claudeDir, "settings.json");
+const claudeAgentsMirrorPath = path.join(claudeDir, "CLAUDE.md");
+const claudeSkillsMirrorPath = path.join(claudeDir, "skills");
+
+const cursorDir = path.join(repoRoot, ".cursor");
+const cursorAgentsDir = path.join(cursorDir, "agents");
+const cursorHooksDir = path.join(cursorDir, "hooks");
+const cursorHooksJsonPath = path.join(cursorDir, "hooks.json");
+
+const opencodeDir = path.join(repoRoot, ".opencode");
+const opencodeAgentsDir = path.join(opencodeDir, "agents");
+const opencodePluginsDir = path.join(opencodeDir, "plugins");
+const opencodeAgentsMirrorPath = path.join(opencodeDir, "AGENTS.md");
+
+const managedHeader = [
+  "# Generated by scripts/sync-subagents.mjs.",
+  "# Do not edit by hand; update .agents/subagents/manifest.mjs and re-run sync.",
+].join("\n");
+const claudeManagedComment =
+  "<!-- Generated by scripts/sync-subagents.mjs. Edit .agents/subagents/manifest.mjs instead. -->";
+const cursorManagedComment =
+  "<!-- Generated by scripts/sync-subagents.mjs. Edit .agents/subagents/manifest.mjs instead. -->";
+const opencodeManagedComment =
+  "<!-- Generated by scripts/sync-subagents.mjs. Edit .agents/subagents/manifest.mjs instead. -->";
+
+const codexAgentConfig = [
+  "[agents]",
+  "max_threads = 6",
+  "max_depth = 1",
+  "",
+  "[features]",
+  "codex_hooks = true",
+  "",
+  "[hooks]",
+  "SessionStart = [",
+  '  { matcher = "startup|resume", hooks = [',
+  '    { type = "command", command = "node \\"$(git rev-parse --show-toplevel)/.codex/hooks/format-edited-file.mjs\\" session-start", statusMessage = "Capturing edited-file baseline", timeout = 30 },',
+  "  ] },",
+  "]",
+  "PreToolUse = [",
+  '  { matcher = "Bash|.*[Pp]ull.?[Rr]equest.*|.*[Pp][Rr].?[Cc]reate.*|.*create[_-]?pull[_-]?request.*", hooks = [',
+  '    { type = "command", command = "node \\"$(git rev-parse --show-toplevel)/.codex/hooks/require-tests-for-pr.mjs\\" codex", statusMessage = "Checking tests before PR creation", timeout = 600 },',
+  "  ] },",
+  "]",
+  "PostToolUse = [",
+  '  { matcher = "Bash|apply_patch|.*apply.?patch.*|edit|write|multiedit", hooks = [',
+  '    { type = "command", command = "node \\"$(git rev-parse --show-toplevel)/.codex/hooks/format-edited-file.mjs\\" post", statusMessage = "Auto-formatting edited files", timeout = 30 },',
+  "  ] },",
+  "]",
+  "",
+].join("\n");
+
+const claudeSettingsConfig = {
+  hooks: {
+    PreToolUse: [
+      {
+        matcher: "mcp__github__create_pull_request",
+        hooks: [
+          {
+            type: "command",
+            command: 'node "$CLAUDE_PROJECT_DIR"/.claude/hooks/require-tests-for-pr.mjs claude',
+            timeout: 600,
+          },
+        ],
+      },
+      {
+        matcher: "Bash",
+        hooks: [
+          {
+            type: "command",
+            command: 'node "$CLAUDE_PROJECT_DIR"/.claude/hooks/require-tests-for-pr.mjs claude',
+            timeout: 600,
+          },
+        ],
+      },
+    ],
+    PostToolUse: [
+      {
+        matcher: "Edit|Write|MultiEdit",
+        hooks: [
+          {
+            type: "command",
+            command: 'node "$CLAUDE_PROJECT_DIR"/.claude/hooks/format-edited-file.mjs claude',
+            timeout: 30,
+          },
+        ],
+      },
+    ],
+  },
+};
+
+const cursorHooksConfig = {
+  version: 1,
+  hooks: {
+    beforeMCPExecution: [
+      {
+        command: "node .cursor/hooks/require-tests-for-pr.mjs cursor",
+      },
+    ],
+    beforeShellExecution: [
+      {
+        command: "node .cursor/hooks/require-tests-for-pr.mjs cursor",
+      },
+    ],
+    afterFileEdit: [
+      {
+        command: "node .cursor/hooks/format-edited-file.mjs cursor",
+      },
+    ],
+  },
+};
+
+function getSkillNames(agent) {
+  if (Array.isArray(agent.skills)) {
+    return [...new Set(agent.skills)];
+  }
+
+  return [...new Set(agent.packs.flatMap((pack) => capabilityPacks[pack].skills))];
+}
+
+function formatList(items) {
+  return items.map((item) => `- ${item}`).join("\n");
+}
+
+function relativeSkillPath(skillName) {
+  const absoluteSkillDir = path.join(sharedSkillsPath, skillName);
+  return path.relative(codexAgentsDir, absoluteSkillDir);
+}
+
+function yamlString(value) {
+  return JSON.stringify(value);
+}
+
+function encodeJson(value) {
+  return `${JSON.stringify(value, null, 2)}\n`;
+}
+
+async function readGuidance(files) {
+  const entries = await Promise.all(
+    files.map(async (file) => {
+      const absolutePath = path.join(repoRoot, file);
+      let content = "";
+
+      try {
+        content = await readFile(absolutePath, "utf8");
+      } catch (error) {
+        if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
+          throw error;
+        }
+
+        content = [
+          `Missing neutral guidance source: ${file}.`,
+          "Author the scoped AGENTS.md file, create the sibling CLAUDE.md symlink mirror, then rerun .agents/scripts/sync-subagents.mjs.",
+        ].join("\n");
+      }
+
+      return `### ${file}\n${content.trim()}`;
+    }),
+  );
+
+  return entries.join("\n\n");
+}
+
+function buildPrompt(agent, guidance) {
+  const packs = agent.packs.map((pack) => {
+    const definition = capabilityPacks[pack];
+    return `${pack}: ${definition.description}`;
+  });
+
+  return [
+    `You are the ${agent.name} specialist for this repository.`,
+    "",
+    "Operate as a narrow owner for the assigned slice instead of broadening scope.",
+    "",
+    "Primary ownership:",
+    formatList(agent.ownedPaths),
+    "",
+    "Preloaded capability packs:",
+    formatList(packs),
+    "",
+    "Boundary rules:",
+    formatList(agent.boundaries),
+    "",
+    "Scoped skill activation:",
+    formatList(agent.activationInstructions ?? []),
+    "",
+    "Execution expectations:",
+    formatList([
+      "Prefer doing the assigned slice well over exploring adjacent areas.",
+      "If the task clearly belongs to a different specialist, say so explicitly instead of improvising outside your scope.",
+      "Keep repo boundaries intact: backend logic stays out of apps/web, transport stays out of packages/api, and auth-sensitive work stays in packages/auth unless the parent explicitly assigns cross-surface coordination.",
+      "If your work changes architecture, setup, contracts, decisions, or operator workflow, update docs/README.md and the relevant domain doc/runbook in the same task.",
+    ]),
+    "",
+    "Baked-in scoped guidance:",
+    guidance,
+  ].join("\n");
+}
+
+function buildClaudeAgent(agent, prompt, skillNames) {
+  const frontmatter = [
+    "---",
+    `name: ${yamlString(agent.name)}`,
+    `description: ${yamlString(agent.description)}`,
+    "model: inherit",
+    "skills:",
+    ...skillNames.map((skillName) => `  - ${skillName}`),
+    "---",
+    "",
+  ].join("\n");
+
+  return `${frontmatter}${claudeManagedComment}\n\n${prompt}\n`;
+}
+
+function buildCodexAgent(agent, prompt, skillNames) {
+  const lines = [
+    managedHeader,
+    "",
+    `name = ${JSON.stringify(agent.name)}`,
+    `description = ${JSON.stringify(agent.description)}`,
+    'model_reasoning_effort = "medium"',
+    `developer_instructions = """\n${prompt}\n"""`,
+  ];
+
+  for (const skillName of skillNames) {
+    lines.push("");
+    lines.push("[[skills.config]]");
+    lines.push(`path = ${JSON.stringify(relativeSkillPath(skillName))}`);
+    lines.push("enabled = true");
+  }
+
+  return `${lines.join("\n")}\n`;
+}
+
+function buildCursorAgent(agent, prompt) {
+  const frontmatter = [
+    "---",
+    `name: ${agent.name}`,
+    `description: ${yamlString(agent.description)}`,
+    "model: inherit",
+    "---",
+    "",
+  ].join("\n");
+
+  return `${frontmatter}${cursorManagedComment}\n\n${prompt}\n`;
+}
+
+function buildOpenCodeAgent(agent, prompt) {
+  const frontmatter = [
+    "---",
+    `description: ${yamlString(agent.description)}`,
+    "mode: subagent",
+    "---",
+    "",
+  ].join("\n");
+
+  return `${frontmatter}${opencodeManagedComment}\n\n${prompt}\n`;
+}
+
+async function ensureSymlink(linkPath, targetPath) {
+  const relativeTarget = path.relative(path.dirname(linkPath), targetPath);
+  await mkdir(path.dirname(linkPath), { recursive: true });
+
+  try {
+    const existingStat = await lstat(linkPath);
+
+    if (existingStat.isSymbolicLink() && (await readlink(linkPath)) === relativeTarget) {
+      return;
+    }
+  } catch (error) {
+    if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
+      throw error;
+    }
+  }
+
+  await rm(linkPath, { force: true, recursive: true });
+  await symlink(relativeTarget, linkPath);
+}
+
+async function writeManagedFiles(directory, extension, renderedByName) {
+  await mkdir(directory, { recursive: true });
+
+  const managedNames = new Set(Object.keys(renderedByName).map((name) => `${name}.${extension}`));
+
+  for (const filename of await readdir(directory)) {
+    if (!filename.endsWith(`.${extension}`)) {
+      continue;
+    }
+
+    const filePath = path.join(directory, filename);
+    const existingContent = await readFile(filePath, "utf8");
+    const isManaged =
+      extension === "toml"
+        ? existingContent.startsWith(managedHeader)
+        : existingContent.includes(claudeManagedComment);
+
+    if (isManaged && !managedNames.has(filename)) {
+      await rm(filePath, { force: true });
+    }
+  }
+
+  for (const [name, content] of Object.entries(renderedByName)) {
+    await writeFile(path.join(directory, `${name}.${extension}`), content, "utf8");
+  }
+}
+
+async function syncHookSurface() {
+  await mkdir(sharedHooksPath, { recursive: true });
+  await mkdir(codexHooksDir, { recursive: true });
+  await mkdir(claudeHooksDir, { recursive: true });
+  await mkdir(cursorHooksDir, { recursive: true });
+  await mkdir(opencodePluginsDir, { recursive: true });
+
+  await ensureSymlink(
+    path.join(codexHooksDir, "format-edited-file.mjs"),
+    path.join(sharedHooksPath, "format-edited-file.mjs"),
+  );
+  await ensureSymlink(
+    path.join(codexHooksDir, "require-tests-for-pr.mjs"),
+    path.join(sharedHooksPath, "require-tests-for-pr.mjs"),
+  );
+  await ensureSymlink(
+    path.join(claudeHooksDir, "format-edited-file.mjs"),
+    path.join(sharedHooksPath, "format-edited-file.mjs"),
+  );
+  await ensureSymlink(
+    path.join(claudeHooksDir, "require-tests-for-pr.mjs"),
+    path.join(sharedHooksPath, "require-tests-for-pr.mjs"),
+  );
+  await ensureSymlink(
+    path.join(cursorHooksDir, "format-edited-file.mjs"),
+    path.join(sharedHooksPath, "format-edited-file.mjs"),
+  );
+  await ensureSymlink(
+    path.join(cursorHooksDir, "require-tests-for-pr.mjs"),
+    path.join(sharedHooksPath, "require-tests-for-pr.mjs"),
+  );
+  await ensureSymlink(
+    path.join(opencodePluginsDir, "format-edited-file.mjs"),
+    path.join(sharedHooksPath, "format-edited-file.mjs"),
+  );
+  await ensureSymlink(
+    path.join(opencodePluginsDir, "require-tests-for-pr.mjs"),
+    path.join(sharedHooksPath, "require-tests-for-pr.mjs"),
+  );
+}
+
+async function syncSkillMirrors() {
+  await ensureSymlink(claudeSkillsMirrorPath, sharedSkillsPath);
+}
+
+async function syncPromptMirrors() {
+  await ensureSymlink(codexAgentsMirrorPath, sharedAgentsPath);
+  await ensureSymlink(claudeAgentsMirrorPath, sharedAgentsPath);
+  await ensureSymlink(opencodeAgentsMirrorPath, sharedAgentsPath);
+}
+
+async function main() {
+  const claudeFiles = {};
+  const codexFiles = {};
+  const cursorFiles = {};
+  const opencodeFiles = {};
+
+  for (const agent of agents) {
+    const guidance = await readGuidance(agent.guidanceFiles);
+    const prompt = buildPrompt(agent, guidance);
+    const skillNames = getSkillNames(agent);
+
+    claudeFiles[agent.name] = buildClaudeAgent(agent, prompt, skillNames);
+    codexFiles[agent.name] = buildCodexAgent(agent, prompt, skillNames);
+    cursorFiles[agent.name] = buildCursorAgent(agent, prompt);
+    opencodeFiles[agent.name] = buildOpenCodeAgent(agent, prompt);
+  }
+
+  await mkdir(path.dirname(codexConfigPath), { recursive: true });
+  await mkdir(path.dirname(claudeSettingsPath), { recursive: true });
+  await mkdir(path.dirname(cursorHooksJsonPath), { recursive: true });
+  await writeFile(codexConfigPath, codexAgentConfig, "utf8");
+  await rm(path.join(codexDir, "hooks.json"), { force: true });
+  await writeFile(claudeSettingsPath, encodeJson(claudeSettingsConfig), "utf8");
+  await writeFile(cursorHooksJsonPath, encodeJson(cursorHooksConfig), "utf8");
+  await writeManagedFiles(claudeAgentsDir, "md", claudeFiles);
+  await writeManagedFiles(codexAgentsDir, "toml", codexFiles);
+  await writeManagedFiles(cursorAgentsDir, "md", cursorFiles);
+  await writeManagedFiles(opencodeAgentsDir, "md", opencodeFiles);
+  await syncPromptMirrors();
+  await syncSkillMirrors();
+  await syncHookSurface();
+}
+
+await main();

package/dist/data/subagents/manifest.mjs

@@ -0,0 +1,253 @@
+const capabilityPacks = {
+  "frontend-core": {
+    description:
+      "Core Next.js and React app structure guidance for product-facing frontend work.",
+    skills: [
+      "next-best-practices",
+      "async-react-patterns",
+      "react-domain-structure",
+      "vercel-react-best-practices",
+    ],
+  },
+  simplify: {
+    description:
+      "Simplify and refine recently modified code for clarity and consistency.",
+    skills: ["simplify"],
+  },
+  "frontend-ui": {
+    description:
+      "UI implementation, browser testing, visual quality, and composition patterns.",
+    skills: [
+      "agent-browser",
+      "frontend-design",
+      "web-design-guidelines",
+      "vercel-composition-patterns",
+    ],
+  },
+  "frontend-data": {
+    description:
+      "TanStack Query driven server-state fetching, mutations, hydration, and invalidation.",
+    skills: ["tanstack-query"],
+  },
+  "frontend-cache": {
+    description:
+      "Next.js cache components, PPR, cache tags, and related rendering/cache behavior.",
+    skills: ["next-cache-components"],
+  },
+  "server-core": {
+    description:
+      "Elysia transport-layer work for HTTP routes, adapters, request/response handling, and Effect-facing transport boundaries.",
+    skills: ["elysiajs", "effect-authoring"],
+  },
+  "api-core": {
+    description:
+      "Effect application logic, pre-write authoring guidance, service/layer patterns, and test-first backend domain work.",
+    skills: [
+      "effect-authoring",
+      "effect-best-practices",
+      "effect-recoverable-actions",
+      "tdd",
+    ],
+  },
+  "auth-core": {
+    description:
+      "Better Auth conventions and security-sensitive authentication behavior.",
+    skills: [
+      "better-auth-best-practices",
+      "better-auth-security-best-practices",
+    ],
+  },
+  "docs-core": {
+    description:
+      "Repo documentation maintenance, routing, and human-facing durable knowledge capture.",
+    skills: ["docs-maintenance"],
+  },
+};
+
+const skillActivationInstructions = [
+  "Before planning or editing, read every file in `guidanceFiles` for this role.",
+  "In those scoped AGENTS.md files, find the `Primary skills here` list and treat each named skill as mandatory for matching work.",
+  "Activate a skill by opening its SKILL.md, reading the workflow/checklist needed for the assigned task, and applying it before edits.",
+  "When a skill listed in scoped guidance is also present in this role's `skills`, explicitly mention in the worker's reasoning or handoff that it was used.",
+  "If the task touches multiple owned or related scopes, inspect each scope's nearest AGENTS.md and activate the union of relevant skills.",
+  "Do not rely on role name or inherited context alone; scoped AGENTS.md skill routing is part of the task contract.",
+];
+
+const agents = [
+  {
+    name: "docs-maintenance",
+    description:
+      "Use for repo documentation work centered on docs updates, index maintenance, ADR routing, and keeping docs grounded in implemented reality.",
+    ownedPaths: ["docs/**"],
+    guidanceFiles: ["docs/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["docs-core", "simplify"],
+    skills: ["docs-maintenance", "simplify"],
+    boundaries: [
+      "Own documentation updates in docs/ and keep them human-facing and implementation-grounded.",
+      "If the task is mainly code implementation, tell the parent to use the relevant code specialist and only return for the docs follow-up.",
+      "If the task needs planning, roadmap, or backlog work instead of repo docs, tell the parent that docs/ is not the right destination.",
+    ],
+  },
+  {
+    name: "frontend-app",
+    description:
+      "Use for apps/web feature work centered on Next.js routes, app structure, client/server component boundaries, and non-specialist frontend implementation.",
+    ownedPaths: ["apps/web/**"],
+    guidanceFiles: ["apps/web/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["frontend-core", "simplify"],
+    skills: [
+      "agent-browser",
+      "next-best-practices",
+      "next-cache-components",
+      "async-react-patterns",
+      "vercel-composition-patterns",
+      "vercel-react-best-practices",
+      "tanstack-query",
+      "react-domain-structure",
+      "simplify",
+    ],
+    boundaries: [
+      "Do not take ownership of packages/ui design-system work unless the parent explicitly assigns it.",
+      "If the task is mainly visual polish, component-library work, or browser UX verification, tell the parent to use frontend-ui instead.",
+      "If the task is mainly TanStack Query, hydration, or mutation-cache behavior, tell the parent to use frontend-data instead.",
+      "If the task is mainly Next cache components, PPR, cache tags, or revalidation behavior, tell the parent to use frontend-cache instead.",
+    ],
+  },
+  {
+    name: "frontend-ui",
+    description:
+      "Use for packages/ui work and UI-heavy frontend tasks involving component composition, visual polish, responsive behavior, accessibility, or browser validation.",
+    ownedPaths: ["packages/ui/**", "apps/web/**"],
+    guidanceFiles: ["packages/ui/AGENTS.md", "apps/web/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["frontend-core", "frontend-ui", "simplify"],
+    skills: [
+      "agent-browser",
+      "next-best-practices",
+      "next-cache-components",
+      "frontend-design",
+      "web-design-guidelines",
+      "async-react-patterns",
+      "vercel-composition-patterns",
+      "vercel-react-best-practices",
+      "tanstack-query",
+      "react-domain-structure",
+      "simplify",
+    ],
+    boundaries: [
+      "Prioritize UI primitives, composition, responsiveness, accessibility, and browser-observable behavior.",
+      "If the task is primarily data fetching, mutation orchestration, or cache invalidation, tell the parent to use frontend-data instead.",
+      "If the task is primarily cache component or PPR behavior, tell the parent to use frontend-cache instead.",
+    ],
+  },
+  {
+    name: "frontend-data",
+    description:
+      "Use for apps/web work centered on TanStack Query, server-state orchestration, hydration, optimistic updates, query invalidation, and mutation flows.",
+    ownedPaths: ["apps/web/**"],
+    guidanceFiles: ["apps/web/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["frontend-core", "frontend-data", "simplify"],
+    skills: [
+      "agent-browser",
+      "next-best-practices",
+      "next-cache-components",
+      "async-react-patterns",
+      "vercel-composition-patterns",
+      "vercel-react-best-practices",
+      "tanstack-query",
+      "react-domain-structure",
+      "simplify",
+    ],
+    boundaries: [
+      "Stay focused on data-fetching contracts, query lifecycle, cache coordination, and mutation UX.",
+      "If the task becomes mainly visual redesign or shared component work, tell the parent to use frontend-ui instead.",
+      "If the task becomes mainly cache component or PPR behavior, tell the parent to use frontend-cache instead.",
+    ],
+  },
+  {
+    name: "frontend-cache",
+    description:
+      "Use for apps/web work centered on Next.js cache components, PPR, cache tags, revalidation, and rendering/cache boundary issues.",
+    ownedPaths: ["apps/web/**"],
+    guidanceFiles: ["apps/web/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["frontend-core", "frontend-cache", "simplify"],
+    skills: [
+      "agent-browser",
+      "next-best-practices",
+      "next-cache-components",
+      "async-react-patterns",
+      "vercel-composition-patterns",
+      "vercel-react-best-practices",
+      "tanstack-query",
+      "react-domain-structure",
+      "simplify",
+    ],
+    boundaries: [
+      "Stay focused on rendering strategy, cache tagging, revalidation, and cache component behavior.",
+      "If the task is primarily TanStack Query or client-side mutation cache behavior, tell the parent to use frontend-data instead.",
+      "If the task is primarily visual polish or component-library work, tell the parent to use frontend-ui instead.",
+    ],
+  },
+  {
+    name: "server-transport",
+    description:
+      "Use for apps/server work centered on Elysia routes, transport adaptation, middleware, request/response schemas, and HTTP boundary concerns.",
+    ownedPaths: ["apps/server/**"],
+    guidanceFiles: ["apps/server/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["server-core", "simplify"],
+    skills: ["elysiajs", "effect-authoring", "simplify"],
+    boundaries: [
+      "Keep transport concerns in apps/server; do not pull Effect domain logic into the server app.",
+      "If the task is mainly Effect service/layer logic or tRPC/domain procedures in packages/api, tell the parent to use api-domain instead.",
+      "If the task is mainly auth flow or security-sensitive Better Auth behavior, tell the parent to use auth-security instead.",
+    ],
+  },
+  {
+    name: "api-domain",
+    description:
+      "Use for packages/api work centered on Effect services, layers, domain logic, tRPC procedures, and backend tests.",
+    ownedPaths: ["packages/api/**"],
+    guidanceFiles: ["packages/api/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["api-core", "simplify"],
+    skills: [
+      "effect-authoring",
+      "effect-best-practices",
+      "effect-backend-structure",
+      "effect-recoverable-actions",
+      "tdd",
+      "simplify",
+    ],
+    boundaries: [
+      "Own Effect application logic and tests in packages/api.",
+      "If the task is mainly HTTP transport or Elysia route wiring in apps/server, tell the parent to use server-transport instead.",
+      "If the task is mainly Better Auth configuration or security-sensitive auth flow behavior in packages/auth, tell the parent to use auth-security instead.",
+    ],
+  },
+  {
+    name: "auth-security",
+    description:
+      "Use for packages/auth work centered on Better Auth configuration, auth flows, provider setup, session behavior, and security-sensitive changes.",
+    ownedPaths: ["packages/auth/**"],
+    guidanceFiles: ["packages/auth/AGENTS.md"],
+    activationInstructions: skillActivationInstructions,
+    packs: ["auth-core", "simplify"],
+    skills: [
+      "better-auth-best-practices",
+      "better-auth-security-best-practices",
+      "simplify",
+    ],
+    boundaries: [
+      "Treat auth work as security-sensitive and stay inside packages/auth unless explicitly coordinating with another specialist.",
+      "If the task is mainly Effect application logic, tell the parent to use api-domain instead.",
+      "If the task is mainly HTTP transport or route mounting, tell the parent to use server-transport instead.",
+    ],
+  },
+];
+
+export { agents, capabilityPacks };