@raishin/vanguard-frontier-agentic 3.7.0 → 3.9.0

package/catalog/workflows.json

@@ -0,0 +1,50 @@
+{
+  "version": "0.1.0",
+  "description": "Workflow definitions discovered in .claude/workflows/. Generated from each script's meta block by scripts/generate-workflow-catalog.mjs — never hand-edited.",
+  "workflows": [
+    {
+      "id": "agentic-delegation",
+      "name": "agentic-delegation",
+      "path": ".claude/workflows/agentic-delegation.js",
+      "description": "Context7-grounded delegation: Haiku recon, orchestrator-tier spec, Sonnet implementation, adversarial claim verification, then the repo gate suite.",
+      "when_to_use": "Multi-step work in this repo that decomposes into cheap parallel recon plus a small amount of genuine judgment — especially anything that encodes external technical facts (model names, API behaviour, version-specific semantics) that must be grounded in primary sources before they ship.",
+      "phases": [
+        {
+          "title": "Resolve sources",
+          "detail": "Resolve Context7 library IDs once, centrally",
+          "model": "haiku"
+        },
+        {
+          "title": "Recon",
+          "detail": "Parallel Haiku sweeps, one narrow question each, citations required",
+          "model": "haiku"
+        },
+        {
+          "title": "Spec",
+          "detail": "Orchestrator-tier file-scoped specs — architecture stays here",
+          "model": ""
+        },
+        {
+          "title": "Implement",
+          "detail": "Sonnet writes against an exact spec",
+          "model": "sonnet"
+        },
+        {
+          "title": "Regenerate",
+          "detail": "Settle generated output before verification, when generators are declared",
+          "model": "haiku"
+        },
+        {
+          "title": "Verify",
+          "detail": "Adversarial Context7-grounded check of every factual claim written",
+          "model": "sonnet"
+        },
+        {
+          "title": "Gate",
+          "detail": "Repo gate suite in documented order, asset-integrity last",
+          "model": "haiku"
+        }
+      ]
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "3.7.0",
+  "version": "3.9.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {
@@ -61,7 +61,7 @@
     "validate:codex-marketplace": "python3 tests/validate-codex-marketplace.py",
     "test:codex-plugin-marketplace-install": "node tests/test-codex-plugin-marketplace-install.test.mjs",
     "validate:finops-fixtures": "python3 tests/validate-finops-price-fixtures.py",
-    "validate:readme-counts": "node tests/validate-readme-counts.mjs",
+    "validate:readme-counts": "node tests/validate-readme-counts.mjs && node scripts/generate-readme-counts.mjs --check",
     "validate:qa-cluster": "node tests/eval-qa-cluster.mjs",
     "validate:frontend-security-detection": "python3 tests/validate-frontend-security-detection.py",
     "validate:agent-tool-tiers": "python3 tests/validate-agent-tool-tiers.py",
@@ -76,16 +76,18 @@
     "model-policy:check": "node scripts/model-policy.mjs check",
     "model-policy:apply": "node scripts/model-policy.mjs apply",
     "model-policy:report": "node scripts/model-policy.mjs report",
-    "manifest:write:all": "npm run manifest:write & npm run plugin-manifest:write & npm run cursor-plugin:write & npm run kiro-powers:write & npm run asset-integrity:write & npm run readme-counts:write & wait",
+    "manifest:write:all": "npm run manifest:write & npm run plugin-manifest:write & npm run cursor-plugin:write & npm run kiro-powers:write & npm run asset-integrity:write & npm run readme-counts:write & npm run workflow-catalog:write & wait",
     "test:copilot-bundling": "python3 tests/test-copilot-skill-bundling.py",
     "test:gemini-bundling": "python3 tests/test-gemini-skill-bundling.py",
     "test:cursor-kiro-notices": "node tests/export-cursor-kiro-skill-notice.test.mjs",
     "test:fuzz": "node tests/fuzz-properties.test.mjs",
-    "validate": "npm run validate:catalog && npm run validate:aws && npm run manifest:check && npm run validate:allowed-tools && npm run validate:skill-coherence && npm run validate:skill-schema && npm run validate:agent-schema && npm run validate:model-policy && npm run validate:links && npm run validate:asset-integrity && npm run validate:mcp-trust-matrix && npm run validate:no-lifecycle-scripts && npm run validate:promotion-gatekeeper && npm run validate:install-coverage && npm run validate:maestro-routing && npm run validate:plugin-manifest && npm run validate:kiro-powers && npm run validate:multi-harness-marketplace && npm run validate:codex-marketplace && npm run validate:finops-fixtures && npm run validate:readme-counts && npm run validate:qa-cluster && npm run validate:frontend-security-detection && npm run validate:agent-tool-tiers",
+    "validate": "npm run validate:catalog && npm run validate:aws && npm run manifest:check && npm run validate:allowed-tools && npm run validate:skill-coherence && npm run validate:skill-schema && npm run validate:agent-schema && npm run validate:model-policy && npm run validate:links && npm run validate:asset-integrity && npm run validate:mcp-trust-matrix && npm run validate:no-lifecycle-scripts && npm run validate:promotion-gatekeeper && npm run validate:install-coverage && npm run validate:maestro-routing && npm run validate:plugin-manifest && npm run validate:kiro-powers && npm run validate:multi-harness-marketplace && npm run validate:codex-marketplace && npm run validate:finops-fixtures && npm run validate:readme-counts && npm run validate:qa-cluster && npm run validate:frontend-security-detection && npm run validate:agent-tool-tiers && npm run validate:workflow-catalog",
     "release:sbom": "command -v syft >/dev/null 2>&1 && syft scan dir:. -o spdx-json=sbom.spdx.json || echo 'syft not installed; SBOM is generated in CI by anchore/sbom-action'",
     "lint:md": "npx --yes markdownlint-cli2 \"**/*.md\" \"#node_modules\" \"#.git\" \"#.code-review-graph\" \"#CHANGELOG.md\"",
     "lint:spell": "codespell",
-    "lint:docs": "npm run lint:md && npm run lint:spell"
+    "lint:docs": "npm run lint:md && npm run lint:spell",
+    "workflow-catalog:write": "node scripts/generate-workflow-catalog.mjs",
+    "validate:workflow-catalog": "node scripts/generate-workflow-catalog.mjs --check"
   },
   "devDependencies": {
     "@semantic-release/changelog": "7.0.0",

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.7.0",
+  "version": "3.9.0",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "VincentChuWaiChow",

package/powers/README.md

@@ -1,6 +1,6 @@
 # `powers/` — Kiro Powers
 
-This directory holds **44 Kiro Powers** for `vanguard-frontier-agentic`, one
+This directory holds **45 Kiro Powers** for `vanguard-frontier-agentic`, one
 per cloud/platform/IaC provider. Each Power is a directory containing a
 `POWER.md` file with strict-5 frontmatter and steering content.
 
@@ -51,7 +51,8 @@ powers/
 ├── vanguard-scaleway/POWER.md
 ├── vanguard-sigstore/POWER.md
 ├── vanguard-snowflake/POWER.md
-└── vanguard-terraform/POWER.md
+├── vanguard-terraform/POWER.md
+└── vanguard-typescript/POWER.md
 ```
 
 Each `POWER.md` declares:
@@ -88,7 +89,7 @@ cd vanguard-frontier-agentic
 ## How to update
 
 ```bash
-# Regenerate the 44 Powers from catalog/agents.json + per-provider config:
+# Regenerate the 45 Powers from catalog/agents.json + per-provider config:
 npm run kiro-powers:write
 
 # Then verify everything is in sync:

package/powers/vanguard-terraform/POWER.md

@@ -34,7 +34,7 @@ Live-guard agents enforce approval, target confirmation, evidence capture, and r
 
 ## Where the agents live
 
-Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/VincentChuWaiChow/vanguard-frontier-agentic) marketplace. For this provider, see `agents/terraform/` in that repository. All 2 agents in this provider ship a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/VincentChuWaiChow/vanguard-frontier-agentic) marketplace. For this provider, see `agents/terraform/` in that repository. All 9 agents in this provider ship a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
 
 ## Companion install paths
 

package/powers/vanguard-typescript/POWER.md

@@ -0,0 +1,43 @@
+---
+name: "vanguard-typescript"
+displayName: "Vanguard Frontier — TypeScript"
+description: "Curated TypeScript agents for the TypeScript program and the published package — type soundness in shared code, runtime boundary contracts, module resolution and emit, Node execution compatibility, declaration governance, build-graph cost, static enforcement policy, async contract reliability, publication integrity, estate modernization, and MCP tool contracts. Routes via typescript-maestro to specialist agents based on task scope. Static review only; no live mutations."
+keywords: ["typescript", "tsconfig", "tsc", "declaration-emit", "module-resolution", "type-safety", "npm-publish", "static-review"]
+author: "VincentChuWaiChow"
+---
+# Vanguard Frontier — TypeScript
+
+Curated TypeScript agents for the TypeScript program and the published package — type soundness in shared code, runtime boundary contracts, module resolution and emit, Node execution compatibility, declaration governance, build-graph cost, static enforcement policy, async contract reliability, publication integrity, estate modernization, and MCP tool contracts. Routes via typescript-maestro to specialist agents based on task scope. Static review only; no live mutations.
+
+## When to engage this Power
+
+Activate when the task references TypeScript services, resources, or operations. Do not activate on unrelated requests — narrow keyword matching is required to avoid false activations (Kiro Powers convention).
+
+## Routing pattern
+
+- **`typescript-maestro-agent`** — classifies and routes the task to the right specialist
+
+Use the maestro as the entry point: classify the task, then dispatch to one specialist or a parallel team of specialists. Never have the maestro itself execute a live mutation.
+
+## Live-guard agents (gate_mode only)
+
+- *(none — this provider has no live-mutation guards in the catalog)*
+
+Live-guard agents enforce approval, target confirmation, evidence capture, and rollback plans before executing a mutation. They are never auto-dispatched — the maestro must place them in `live-guard-gate` or `runtime-evidence-gate` mode.
+
+## Invariants
+
+- Static review only — agents read source and sanitized configuration, and never compile, build, test, publish, deploy, sign, or contact a live system.
+- Never request or accept secrets, npm or registry tokens, signing keys, connection strings, tenant identifiers, or customer data.
+- This repository contains no TypeScript program of its own, so no verdict may be grounded in an assumed compiler, tsconfig, or Node version — a version-gated conclusion requires evidence the user supplies, and its absence is a refuse-and-ask.
+- Compile-time is not runtime: types are erased, so a passing build is evidence about the source and never about the payload crossing an I/O boundary.
+- Frontend application diffs, framework specifics, bundler configuration, dependency intake, and the monorepo task graph belong to the frontend board — hand them off rather than absorbing them.
+
+## Where the agents live
+
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/VincentChuWaiChow/vanguard-frontier-agentic) marketplace. For this provider, see `agents/typescript/` in that repository. All 14 agents in this provider ship a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+
+## Companion install paths
+
+- **Claude Code:** `/plugin marketplace add VincentChuWaiChow/vanguard-frontier-agentic` then `/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic`
+- **Codex / Copilot / Cursor / Gemini CLI / Kiro (file export):** `npx vfa-export-agents --platform <harness> --provider typescript --repo .`

package/scripts/gen_kotlin_agents.py

@@ -19,7 +19,7 @@ the whole board stays consistent and reproducible (behaviour changes only when t
 committed data changes).
 
 Run:  python3 scripts/gen_kotlin_agents.py
-Then: python3 scripts/update-catalog-new-agents.py && npm run manifest:write:all
+Then: python3 scripts/update-catalog-new-agents.py --provider kotlin && npm run manifest:write:all
       && npm run docs-data:write && npm run model-policy:apply
       && npm run asset-integrity:write && npm run validate
 

package/scripts/gen_netsuite_agents.py

@@ -17,7 +17,7 @@ static-review (T0) house style:
   skills/netsuite/<skill-id>/references/*.md
 
 Run:  python3 scripts/gen_netsuite_agents.py
-Then: python3 scripts/update-catalog-new-agents.py && npm run manifest:write:all
+Then: python3 scripts/update-catalog-new-agents.py --provider netsuite && npm run manifest:write:all
       && python3 tests/validate-asset-integrity.py --write && npm run validate
 """
 from __future__ import annotations

package/scripts/gen_python_agents.py

@@ -19,7 +19,7 @@ the whole board stays consistent and reproducible (behaviour changes only when t
 committed data changes).
 
 Run:  python3 scripts/gen_python_agents.py
-Then: python3 scripts/update-catalog-new-agents.py && npm run manifest:write:all
+Then: python3 scripts/update-catalog-new-agents.py --provider python && npm run manifest:write:all
       && npm run docs-data:write && npm run model-policy:apply
       && npm run asset-integrity:write && npm run validate
 

package/scripts/gen_python_live_agents.py

@@ -17,7 +17,7 @@ static generator, with three live-plane differences:
   3. Live skills declare allowed-tools `Read Grep Glob WebSearch WebFetch Bash`.
 
 Run:  python3 scripts/gen_python_live_agents.py
-Then: python3 scripts/update-catalog-new-agents.py && npm run manifest:write:all
+Then: python3 scripts/update-catalog-new-agents.py --provider python && npm run manifest:write:all
       && npm run docs-data:write && npm run model-policy:apply
       && npm run asset-integrity:write && npm run validate
 """