@softspark/ai-toolkit 3.5.0 → 4.0.0

package/app/skills/persona/SKILL.md

@@ -69,6 +69,6 @@ Unlike `--persona` at install time (which injects into CLAUDE.md permanently), `
 ## When NOT to Use
 
 - For **permanent** persona injection at install time — use `ai-toolkit install --persona <name>` (project or global)
-- For multi-agent parallel work with different specialists — use `/orchestrate` or `/teams`
+- For multi-agent parallel work with different specialists — use `/orchestrate` or `/workflow`
 - For a specific language or framework context (not a general engineering stance) — use the language-pattern skills (`/typescript-patterns`, etc.)
 - To edit or create a persona file — edit `app/personas/<name>.md` directly; this skill only switches between existing ones

package/app/skills/plan/SKILL.md

@@ -46,6 +46,28 @@ smart_query("project template: {type}")
 hybrid_search_kb("architecture {pattern}")
 ```
 
+## Estimation & Templates
+
+### T-shirt sizing (use for >1 day work)
+
+| Size | Effort | Example |
+|------|--------|---------|
+| XS | <2h | typo, add field |
+| S | 2-4h | simple component, basic API |
+| M | 1-2 days | feature with tests |
+| L | 3-5 days | complex feature |
+| XL | 1-2 weeks | major subsystem |
+
+Avoid hour-precise estimates beyond a week — they are false confidence (cone of uncertainty: 4× variance at idea, 1.5× at design).
+
+### SMART tasks vs phase outcomes
+
+Plan-level tasks should be **phase-aligned outcomes** ("authentication ships behind a feature flag"), not SMART implementation steps ("add JWT middleware"). The latter belongs in the issue tracker after `/prd-to-issues`.
+
+### Pre-mortem (mandatory for >1 day plans)
+
+List ≥5 named failure modes with mitigation. A 2-bullet pre-mortem is theater. Risk register cap: 10 entries ranked by (probability × impact); below line 10 is noise.
+
 ## Related Skills
 
 - Plan approved? -> `/orchestrate` or `/workflow` to execute with agents

package/app/skills/refactor-plan/SKILL.md

@@ -126,5 +126,5 @@ What is explicitly NOT part of this refactor.
 - For **executing** a refactor directly — use `/refactor`
 - For architecture-level audit without a specific refactor in mind — use `/architecture-audit`
 - For creating a PRD (product requirements) — use `/write-a-prd`
-- For a plan without the GitHub RFC step — use `/plan` or `/plan-writing`
+- For a plan without the GitHub RFC step — use `/plan`
 - For interface design of a single module — use `/design-an-interface`

package/app/skills/research-mastery/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: research-mastery
-description: "Hierarchical retrieval: KB first (smart_query/crag_search), then MCP/Context7, then web. Triggers: research, fact-check, verify, synthesize, cross-reference, multi-source, investigate, cite sources."
+description: "Hierarchical retrieval: KB → MCP/Context7 → web. Triggers: research, fact-check, verify, synthesize, cross-reference, multi-source, cite sources."
 effort: medium
 user-invocable: false
 allowed-tools: Read
@@ -43,6 +43,18 @@ You MUST search in this order. Do not skip steps.
 **Why**: Fallback for general programming concepts.
 **Rule**: Use only for generic syntax/logic, NEVER for project specifics.
 
+## Local Fallback (No MCP Available)
+
+If `rag-mcp` is not configured, fall back to filesystem tools — still inside `kb/`:
+
+```
+Grep   pattern="your query"   path="kb/"   # search file contents
+Glob   pattern="kb/**/*.md"                # list KB files
+Read   "kb/reference/architecture.md"      # full document
+```
+
+Always cite sources as `[PATH: kb/...]` regardless of which method retrieved them.
+
 ## 🛑 Validation Protocol
 Before acting on information:
 1. **Cite the Source**: "According to `kb/architecture.md`..."

package/app/skills/swarm/SKILL.md

@@ -30,7 +30,7 @@ Agent(subagent_type="...", prompt="sub-task 2 — own files: path/b/")
 Agent(subagent_type="...", prompt="sub-task N — own files: path/n/")
 ```
 
-After all complete: aggregate results with `hive-mind` skill, produce synthesis report.
+After all complete: aggregate results (see Aggregation section below), produce synthesis report.
 
 ### Consensus
 Same problem, 3 independent agents from different angles. Launch all 3 **in a single response**.
@@ -75,10 +75,15 @@ Agent(
 
 ## Aggregation (after all agents complete)
 
-1. Collect all agent outputs
-2. De-duplicate identical findings
-3. Synthesize unique insights
-4. Generate final swarm report
+1. **Collect** all agent outputs into a uniform format (JSON or Markdown sections)
+2. **De-duplicate** identical findings across agents
+3. **Synthesize** unique insights into one report
+4. **For Consensus mode**: weighted voting — each agent returns confidence 0.0–1.0, winner is highest-confidence solution; record dissents from agents that scored below winner
+5. **Generate** final swarm report
+
+### File ownership during aggregation
+
+When agents touch overlapping paths despite ownership rules: do NOT auto-merge. Escalate to user citing which two agents touched the same hunk. Use `--worktree` mode to prevent this proactively (see below).
 
 ## KB-First Mode (`--with-kb`)
 

package/app/skills/typescript-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: typescript-patterns
-description: "TypeScript type safety: generics, conditional types, discriminated unions, Zod, satisfies, branded types. Triggers: TypeScript, TS, generics, Zod, satisfies, type narrowing, strict mode."
+description: "TypeScript types: generics, discriminated unions, Zod, satisfies, branded types. Triggers: TypeScript, TS, generics, Zod, satisfies, strict mode."
 effort: medium
 user-invocable: false
 allowed-tools: Read

package/kb/procedures/release-verification-sop.md

@@ -201,7 +201,7 @@ python3 scripts/audit_skills.py --ci
 **Verify audit_skills.py:**
 - [ ] `HIGH: 0` (MUST be zero — CI fails otherwise)
 - [ ] `WARN: 0`
-- [ ] `INFO: N` (acceptable — broad-access skills: orchestrate, swarm, teams)
+- [ ] `INFO: N` (acceptable — broad-access skills: orchestrate, swarm, workflow)
 
 ---
 

package/kb/reference/codex-cli-compatibility.md

@@ -80,7 +80,6 @@ The main adapted group is multi-agent orchestration:
 - `/orchestrate`
 - `/workflow`
 - `/swarm`
-- `/teams`
 - `/subagent-development`
 
 The adapter also covers skills that previously depended only on Claude's

package/kb/reference/opencode-compatibility.md

@@ -129,7 +129,7 @@ User-authored opencode files and user-authored `opencode.json` keys are never de
 ## Behavioral Limits
 
 - opencode does not expose the full Claude hook event surface; only the events in the mapping table above are bridged. Claude-only events (`TaskCompleted`, `TeammateIdle`, `SubagentStart`, `SubagentStop`, `PreCompact`) are silently skipped.
-- Multi-agent orchestration skills (`/orchestrate`, `/workflow`, `/swarm`, `/teams`, `/subagent-development`) run through the Codex adaptation layer — they use opencode subagents and explicit file ownership instead of Claude's `Agent`/`TaskCreate` primitives.
+- Multi-agent orchestration skills (`/orchestrate`, `/workflow`, `/swarm`, `/subagent-development`) run through the Codex adaptation layer — they use opencode subagents and explicit file ownership instead of Claude's `Agent`/`TaskCreate` primitives.
 
 ## Verification
 

package/kb/reference/skills-catalog.md

@@ -23,7 +23,7 @@ All functionality is unified under skills. Task and hybrid skills are user-invoc
 | **2 — Multi-agent workflow** | `/workflow <type>` | Cross-cutting task with known pattern |
 | **3 — Custom parallelism** | `/orchestrate`, `/swarm` | No predefined workflow matches |
 
-## Task Skills (32)
+## Task Skills (30)
 
 Task skills execute a specific action. Invoked via slash commands. `disable-model-invocation: true`.
 
@@ -76,13 +76,11 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
 | **analyze** | `/analyze` | medium | Analyze code quality, complexity, and patterns |
 | **cve-scan** | `/cve-scan` | medium | Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, ruby, dart) |
 | **docs** | `/docs` | high | Generate/update docs: README, API docs, architecture notes, changelogs (Tier 1 — single agent) |
-| **search** | `/search` | medium | Search knowledge base (MCP tools with local fallback) |
 | **explain** | `/explain` | medium | Explain architecture of a file/module using Mermaid diagrams |
 | **orchestrate** | `/orchestrate` | max | Custom multi-agent parallelism — Tier 3, native in Claude, Codex-adapted to `spawn_agent` workflows |
 | **swarm** | `/swarm` | max | Massive parallelism: map-reduce, consensus, relay — Tier 3 |
 | **workflow** | `/workflow` | max | 15 predefined multi-agent workflow types — Tier 2, Codex-adapted to native subagent orchestration |
 | **instinct-review** | `/instinct-review` | low | Review, curate, and manage learned instincts from past sessions |
-| **teams** | `/teams` | max | Launch pre-configured Agent Teams compositions for common workflows |
 | **write-a-prd** | `/write-a-prd` | high | Create PRD through interactive interview, codebase exploration, and module design |
 | **prd-to-plan** | `/prd-to-plan` | high | Convert PRD into phased implementation plan using tracer-bullet vertical slices |
 | **tdd** | `/tdd` | high | Test-driven development with red-green-refactor loop and vertical slices |
@@ -163,24 +161,16 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
 | **content-moderation-patterns** | `skills/content-moderation-patterns/` | Two-stage moderation: pre-filter + LLM classifier; categories; thresholds |
 | **model-routing-patterns** | `skills/model-routing-patterns/` | Haiku/Sonnet/Opus routing; escalation; sub-agent delegation; fallback |
 
-## Knowledge Skills - Process (7)
+## Knowledge Skills - Process (5)
 
 | Skill | Directory | Domain |
 |-------|-----------|--------|
-| **plan-writing** | `skills/plan-writing/` | Implementation plans, success criteria, pre-mortem |
-| **debugging-tactics** | `skills/debugging-tactics/` | Iron Law 4-phase debugging: root cause → pattern → hypothesis → fix |
 | **git-mastery** | `skills/git-mastery/` | Git workflows, branching, conflict resolution |
 | **architecture-decision** | `skills/architecture-decision/` | Architecture notes, trade-off analysis, alternatives |
 | **performance-profiling** | `skills/performance-profiling/` | Profiling, bottleneck analysis, optimization |
 | **research-mastery** | `skills/research-mastery/` | Multi-source research, synthesis, fact-checking |
 | **verification-before-completion** | `skills/verification-before-completion/` | Iron Law: evidence-before-claims, no completion without fresh verification |
 
-## Knowledge Skills - Orchestration (1)
-
-| Skill | Directory | Domain |
-|-------|-----------|--------|
-| **hive-mind** | `skills/hive-mind/` | Multi-agent aggregation, consensus, swarm patterns |
-
 ## Quality Guardrails
 
 ### Anti-Rationalization Tables
@@ -272,7 +262,6 @@ Common adapted skills:
 - `/orchestrate`
 - `/workflow`
 - `/swarm`
-- `/teams`
 - `/subagent-development`
 - `/tdd`
 

package/llms-full.txt

@@ -66,20 +66,20 @@
 
 ## Skills
 
-- **a11y-validate**: Accessibility validator for WCAG 2.1 AA, EN 301 549, EAA. Covers ARIA, contrast, keyboard, forms, media. Triggers: a11y, accessibility, WCAG, EAA, ARIA, contrast, keyboard nav, screen reader.
+- **a11y-validate**: Accessibility validator: WCAG 2.1 AA, EN 301 549, EAA. Triggers: a11y, accessibility, WCAG, EAA, ARIA, contrast, keyboard, screen reader.
 - **agent-creator**: Creates new specialized agents with frontmatter, tools, delegation. Triggers: new agent, create agent, agent scaffold, specialized agent.
 - **analyze**: Analyzes code quality, complexity, patterns across codebase. Triggers: quality report, hotspot scan, code analysis, architecture signal.
-- **api-patterns**: REST/GraphQL API design: naming, versioning, pagination, idempotency, OpenAPI. Triggers: API design, REST, GraphQL, endpoint, OpenAPI, Swagger, pagination, idempotency key, rate limit.
-- **app-builder**: App scaffolding: Next.js, Vite, Nuxt, Astro, FastAPI, Django, Laravel, RN, Flutter, Unity. Triggers: scaffold, bootstrap, new project, starter, build app, landing page, dashboard, mobile app.
-- **architecture-audit**: Audits codebase for architectural friction and shallow modules, proposes deepening refactors as RFCs. Triggers: improve architecture, shallow modules, deepen modules, reduce coupling.
+- **api-patterns**: REST/GraphQL API design: naming, versioning, pagination, idempotency, OpenAPI. Triggers: API design, REST, GraphQL, OpenAPI, Swagger, idempotency, rate limit.
+- **app-builder**: App scaffolding: Next.js, Vite, Nuxt, Astro, FastAPI, Django, Laravel, RN, Flutter. Triggers: scaffold, bootstrap, new project, starter, dashboard, mobile app.
+- **architecture-audit**: Audits codebase for architectural friction, shallow modules; proposes RFCs. Triggers: improve architecture, shallow modules, deepen modules, reduce coupling.
 - **architecture-decision**: Architecture decisions in ADR/RFC/RFD format: context, constraints, options, recommendation. Triggers: ADR, RFC, RFD, trade-offs, design choice, pick between, evaluate approach.
-- **biz-scan**: Scans codebase (schemas, endpoints, events, flags) for revenue opportunities, missing KPIs, monetization gaps. Triggers: business metrics, KPI coverage, analytics gaps, monetization, revenue opportunity.
+- **biz-scan**: Scans codebase for revenue opportunities, KPIs, monetization gaps. Triggers: business metrics, KPI, analytics gaps, monetization, revenue.
 - **brand-voice**: Direct technical voice for docs, README, user-facing text. Concise/strict modes. Triggers: documentation, README, content, output-mode, voice, prose style.
 - **briefing**: Executive daily briefing aggregating reports from all agents into decision-focused summary. Triggers: briefing, daily summary, status across system, executive update.
 - **build**: Builds project with auto-detected toolchain (npm, poetry, cargo, go, flutter, Docker). Triggers: build, compile, bundle, produce artifacts.
 - **chaos**: Injects controlled faults for resilience testing on non-prod. Triggers: chaos, fault injection, latency injection, dependency kill, resilience test.
 - **ci**: Detect/generate/debug CI pipeline config (GitHub Actions, GitLab CI). Triggers: CI setup, build pipeline, GitHub Actions config, debug CI, GitLab CI.
-- **ci-cd-patterns**: CI/CD: GitHub Actions, GitLab CI, Jenkins, caching, blue-green, canary, rollback gates. Triggers: CI, CD, pipeline, GitHub Actions, workflow YAML, release, artifact, canary, rollout.
+- **ci-cd-patterns**: CI/CD: GitHub Actions, GitLab CI, Jenkins, caching, blue-green, canary. Triggers: CI, CD, pipeline, GitHub Actions, workflow YAML, release, canary, rollout.
 - **clean-code**: Code quality: meaningful names, SRP, DRY, small functions, guard clauses, refactoring. Triggers: clean code, naming, code smell, SRP, DRY, long function, god class, dead code.
 - **command-creator**: Creates new Claude Code slash commands with frontmatter and validation. Triggers: new slash command, create command, command scaffold.
 - **commit**: Creates Conventional Commits with pre-commit validation. Triggers: commit, conventional commit, git commit, message.
@@ -92,26 +92,24 @@
 - **dart-rules**: Dart/Flutter coding rules: style, patterns, security, testing. Triggers: .dart, pubspec.yaml, Flutter, Riverpod, Bloc, widget, StatelessWidget, StatefulWidget.
 - **database-patterns**: DB schema design and query tuning: normalization, indexing, N+1, transactions, EXPLAIN. Triggers: schema, index, slow query, N+1, PostgreSQL, MySQL, EXPLAIN, deadlock, query plan.
 - **debug**: Systematic debugging via logs, health checks, hypothesis-driven investigation. Triggers: debug, error, trace root cause, fix bug, reproduce symptom, investigation.
-- **debugging-tactics**: RCA debugging: investigation, hypothesis, validation, fix. No fix without RCA. Triggers: bug, error, exception, stack trace, intermittent, flaky, crash, regression, broken after.
 - **deploy**: Deploys with pre-flight checks and health verification. Triggers: deploy, deployment, ship, release, push to prod.
-- **design-an-interface**: Generates multiple alternative interface designs in parallel and compares them (Ousterhout 'Design It Twice'). Triggers: design API, interface options, compare modules, design it twice.
+- **design-an-interface**: Generates and compares parallel interface designs (Ousterhout 'Design It Twice'). Triggers: design API, interface options, compare modules, design it twice.
 - **design-engineering**: UI craftsmanship: animation rules, easing, micro-interactions, state polish. Triggers: animation, transition, ease-out, motion, micro-interaction, hover, loading state, UI polish.
-- **docker-devops**: Docker/K8s/DevOps: Dockerfile, multi-stage builds, compose, manifests, Helm, image hardening. Triggers: Docker, Dockerfile, container, Kubernetes, k8s, compose, Helm, pod, deployment yaml.
+- **docker-devops**: Docker/K8s: Dockerfile, multi-stage, compose, manifests, Helm. Triggers: Docker, Dockerfile, container, Kubernetes, k8s, compose, Helm, pod.
 - **docs**: Generates/updates README, API docs, architecture notes. Triggers: docs, README, API docs, architecture note, documentation.
 - **documentation-standards**: KB conventions: YAML frontmatter, 5-category taxonomy (reference/howto/procedures/troubleshooting/best-practices). Triggers: kb/, SOP, runbook, howto, frontmatter, knowledge base.
 - **ecommerce-patterns**: E-commerce: cart, checkout, payments (Stripe/Adyen), order state, inventory, promos, tax. Triggers: cart, checkout, SKU, payment, Stripe, Shopify, Medusa, Magento, coupon, refund.
 - **evaluate**: Evaluates RAG retrieval and LLM-as-judge metrics (faithfulness, relevancy, context precision). Triggers: measure RAG quality, knowledge gap, RAG eval, golden dataset.
-- **evolve**: Analyzes failure patterns in agents/skills and drafts targeted prompt/permission improvements. Triggers: improve agent, refine skill, update system prompt, optimize agent, fix failure pattern.
+- **evolve**: Analyzes agent/skill failures, drafts prompt/permission fixes. Triggers: improve agent, refine skill, system prompt, optimize agent.
 - **explain**: Explains code/architecture with Mermaid diagrams and sequence flows. Triggers: what does X do, how does Y work, explain code, sequence diagram.
 - **explore**: Explores codebase structure, stack, and architecture. Triggers: explore codebase, project structure, stack overview, architecture map.
 - **fix**: Applies targeted fix to known bug/lint error, verifies with same command that surfaced it. Triggers: fix, apply fix, fix bug, fix lint, targeted fix.
-- **flutter-patterns**: Flutter/Dart: widget composition, state mgmt (Riverpod/Bloc/Provider), navigation, platform channels. Triggers: Flutter, Dart, widget, Riverpod, Bloc, pubspec, Navigator, hot reload.
-- **git-mastery**: Advanced Git: rebase, bisect, reflog, cherry-pick, worktrees, history rewriting, LFS. Triggers: git rebase, bisect, cherry-pick, reflog, force push, merge conflict, worktree, submodule.
+- **flutter-patterns**: Flutter/Dart: widgets, state mgmt (Riverpod/Bloc), navigation, platform channels. Triggers: Flutter, Dart, widget, Riverpod, Bloc, pubspec, hot reload.
+- **git-mastery**: Advanced Git: rebase, bisect, reflog, cherry-pick, worktrees, LFS. Triggers: rebase, bisect, cherry-pick, reflog, force push, merge conflict, worktree.
 - **golang-rules**: Go coding rules: style, patterns, security, testing. Triggers: .go, go.mod, go.sum, Gin, Echo, Gorilla, testing, gofmt.
 - **grill-me**: Stress-tests a plan via Socratic questioning down each decision branch. Triggers: stress-test, grill me, validate assumptions, challenge plan, socratic review.
 - **health**: Service/infra health via liveness/readiness checks, resource usage, quick diagnostics. Triggers: health check, services up, system status, infra health, degraded service.
 - **hipaa-validate**: HIPAA validator: PHI exposure, audit logging, encryption, access control, BAA refs. Triggers: HIPAA, PHI, healthcare compliance, audit log, BAA.
-- **hive-mind**: Multi-agent swarm: consensus voting, output aggregation, file ownership, map-reduce. Triggers: swarm, hive mind, multi-agent, consensus, parallel agents, team of agents, agent voting.
 - **hook-creator**: Create new Claude Code lifecycle hook (PreToolUse/PostToolUse/Stop/SessionStart) with bash + hooks.json. Triggers: create hook, lifecycle hook, PreToolUse, PostToolUse, hook event.
 - **index**: Reindexes KB for semantic search via vector store (Qdrant). Triggers: reindex KB, rebuild index, vector reindex, refresh embeddings.
 - **instinct-review**: Reviews/promotes/removes instincts from `.claude/instincts/*.md`. Triggers: instinct review, curate instincts, manage instincts, promote instinct.
@@ -123,22 +121,21 @@
 - **kotlin-rules**: Kotlin coding rules: style, patterns, security, testing. Triggers: .kt, .kts, build.gradle.kts, Ktor, Jetpack Compose, coroutines, kotlinx.
 - **lint**: Runs linter+typechecker with auto-detected toolchain (ruff/mypy, eslint/tsc, phpstan, golangci-lint, clippy). Triggers: lint, typecheck, static analysis.
 - **mcp-builder**: Builds production MCP servers via 4-phase methodology: research, implement, test, evaluate. Triggers: build MCP, new MCP, MCP integration, MCP server scaffold.
-- **mcp-patterns**: MCP server design: tool schemas, resources, stdio/SSE transports, capability negotiation. Triggers: MCP, Model Context Protocol, MCP server, JSON-RPC, stdio, SSE, Claude Desktop config.
+- **mcp-patterns**: MCP server design: tool schemas, resources, stdio/SSE, capability negotiation. Triggers: MCP, Model Context Protocol, JSON-RPC, stdio, SSE, Claude Desktop.
 - **medplum-rules**: Medplum (FHIR healthcare) coding rules: style, patterns, security, testing. Triggers: medplum.config.mts, medplum.config.ts, FHIR, Medplum, Bot, Subscription, Questionnaire.
 - **mem-search**: Searches past coding sessions for observations, decisions, context. Triggers: mem-search, recall session, past work, prior decisions, session history.
-- **migrate**: Run/create DB migrations with detected tool (Alembic, Prisma, Laravel, Django, Flyway, Drizzle), checks backup. Triggers: apply migration, rollback, generate migration, db migration.
-- **migration-patterns**: Zero-downtime DB migrations: expand-contract, double-write, backfill, blue-green schema. Triggers: migration, schema change, zero-downtime, backfill, ALTER TABLE, online DDL, safe deploy.
+- **migrate**: Run/create DB migrations (Alembic, Prisma, Laravel, Django, Flyway, Drizzle); checks backup. Triggers: apply migration, rollback, generate migration.
+- **migration-patterns**: Zero-downtime DB migrations: expand-contract, double-write, backfill, blue-green. Triggers: migration, schema change, backfill, ALTER TABLE, online DDL.
 - **model-routing-patterns**: Multi-model pipelines (Haiku/Sonnet/Opus): cost routing, escalation, fallback chains. Triggers: model routing, Haiku, Sonnet, Opus, escalation, fallback chain.
 - **night-watch**: Autonomous maintenance (dep updates, dead code, small refactors) in isolated branch, off-hours. Triggers: night watch, autonomous maintenance, dep updates.
-- **observability-patterns**: Observability: structured logs, metrics (RED/USE), tracing (OpenTelemetry), SLO/SLI. Triggers: logging, metrics, Prometheus, Grafana, OpenTelemetry, trace, span, monitoring, alerting.
+- **observability-patterns**: Observability: structured logs, metrics (RED/USE), tracing, SLO/SLI. Triggers: logging, metrics, Prometheus, Grafana, OpenTelemetry, trace, monitoring.
 - **onboard**: Sets up ai-toolkit in a project: symlinks, CLAUDE.md, intent interview. Triggers: onboard, setup project, install ai-toolkit, migrate project.
 - **orchestrate**: Coordinates multiple specialized agents in parallel. Triggers: orchestrate, multi-agent, parallel agents, coordinate agents.
 - **panic**: Emergency kill switch — halts all agents via lockfile gate. Triggers: panic, stop everything, kill switch, halt agents, agents looping.
-- **performance-profiling**: Performance: golden signals (latency/traffic/errors/saturation), p50/p95/p99, flame graphs, load testing. Triggers: performance, slow, latency, p99, flame graph, bottleneck, load test, memory leak.
+- **performance-profiling**: Performance: golden signals, p50/p95/p99, flame graphs, load testing. Triggers: performance, slow, latency, p99, flame graph, bottleneck, memory leak.
 - **persona**: Switches engineering persona at runtime. Triggers: persona, switch role, backend-lead, frontend-lead, devops-eng, junior-dev.
 - **php-rules**: PHP coding rules: style, patterns, security, testing. Triggers: .php, composer.json, Laravel, Symfony, PHPUnit, PSR-12, Composer.
 - **plan**: Breaks features/goals into phased plans with task lists, agent assignments, dependencies. Triggers: plan feature, implementation roadmap, break down task, project phases.
-- **plan-writing**: Implementation plans + pre-mortems: phases, success criteria, risks, rollback, acceptance tests. Triggers: implementation plan, pre-mortem, phased plan, task breakdown, risk register.
 - **plugin-creator**: Creates opt-in plugin packs with manifests + module scaffolding for Claude/Codex. Triggers: new plugin, plugin pack, plugin scaffold.
 - **pr**: Creates GitHub PR after pre-flight checks (lint/typecheck/tests), structured summary from commits. Triggers: pr, pull request, create PR, ready to merge.
 - **prd-to-issues**: Splits a PRD into vertical-slice GitHub issues with HITL/AFK tagging and dependencies. Triggers: PRD to issues, create tickets, break down PRD, work items.
@@ -151,14 +148,13 @@
 - **refactor**: Refactors code for quality and maintainability. Triggers: refactor, clean up, restructure, improve code, modernize.
 - **refactor-plan**: Creates detailed refactor plan with tiny commits via interview, files as GitHub RFC. Triggers: refactor plan, refactoring RFC, incremental refactor, safe steps.
 - **repeat**: Runs prompt/slash command on recurring interval until done or limit. Triggers: repeat, recurring task, poll status, run every N minutes, interval.
-- **research-mastery**: Hierarchical retrieval: KB first (smart_query/crag_search), then MCP/Context7, then web. Triggers: research, fact-check, verify, synthesize, cross-reference, multi-source, investigate, cite sources.
+- **research-mastery**: Hierarchical retrieval: KB → MCP/Context7 → web. Triggers: research, fact-check, verify, synthesize, cross-reference, multi-source, cite sources.
 - **review**: Reviews code for quality, security, correctness. Triggers: code review, quality review, security review, review PR, review branch.
 - **rollback**: Rolls back git commit, DB migration, or deploy to known-good with safety + health checks. Triggers: rollback, revert deploy, revert migration, rollback commit, git revert.
 - **ruby-patterns**: Ruby/Rails: blocks, metaprogramming, ActiveRecord, Sidekiq, RSpec, Sorbet, Hanami. Triggers: Ruby, Rails, ActiveRecord, Sidekiq, RSpec, Gemfile, bundler, Hanami, Sorbet.
 - **ruby-rules**: Ruby coding rules: style, patterns, security, testing. Triggers: .rb, Gemfile, .gemspec, Rails, ActiveRecord, Sidekiq, RSpec, Sorbet, rubocop.
 - **rust-patterns**: Rust: ownership, lifetimes, async (Tokio), Result/anyhow/thiserror, traits, unsafe. Triggers: Rust, borrow checker, lifetime, Tokio, cargo, trait, impl, Result, unsafe, clippy.
 - **rust-rules**: Rust coding rules: style, patterns, security, testing. Triggers: .rs, Cargo.toml, Cargo.lock, Tokio, Axum, Serde, clippy, cargo test.
-- **search**: Searches the KB with semantic + hybrid modes. Triggers: search KB, semantic search, hybrid search, knowledge base query.
 - **security-patterns**: App security: OWASP, authN/authZ, input validation, secrets, TLS, CSRF/XSS/SQLi, JWT, CSP. Triggers: security, OWASP, auth, JWT, CSRF, XSS, SQL injection, secrets, TLS, CSP, CORS.
 - **seo-validate**: SEO validator: meta/OG, Schema.org, hreflang, Core Web Vitals, crawlability. Triggers: SEO, meta tags, Schema.org, hreflang, LCP, INP, CLS, Core Web Vitals, sitemap, crawlability.
 - **skill-audit**: Scans skills/agents for security risks: dangerous patterns, secrets, excessive perms. Triggers: skill audit, security scan, agent audit, dangerous pattern.
@@ -168,11 +164,10 @@
 - **swift-patterns**: Swift/iOS: SwiftUI, Combine, async/await, actors, SPM, Core Data, UIKit interop. Triggers: Swift, SwiftUI, Combine, iOS, Xcode, actor, Core Data, @MainActor, @State.
 - **swift-rules**: Swift coding rules: style, patterns, security, testing. Triggers: .swift, Package.swift, .xcodeproj, SwiftUI, Combine, async/await, XCTest.
 - **tdd**: TDD with red-green-refactor loop and vertical slices. Triggers: TDD, test-first, red-green-refactor, test driving development.
-- **teams**: Launches multi-agent teams for review, debugging, feature dev, security audits, migrations. Triggers: multi-agent workflow, agent teams, team review, parallel agent collaboration.
 - **test**: Runs project test suite with coverage, auto-detects framework (pytest, vitest, jest, flutter, go, cargo, phpunit). Triggers: run tests, test suite, coverage report.
 - **testing-patterns**: Testing strategy: pyramid, AAA, mocks/fakes/stubs, flaky tests, coverage. Triggers: test, fixture, mock, stub, e2e, TDD, Playwright, Cypress, flaky, coverage, property-based.
 - **triage-issue**: Bug triage: explores codebase for root cause, files GitHub issue with TDD fix plan. Triggers: triage, investigate bug, fix plan, root cause, file issue, bug report.
-- **typescript-patterns**: TypeScript type safety: generics, conditional types, discriminated unions, Zod, satisfies, branded types. Triggers: TypeScript, TS, generics, Zod, satisfies, type narrowing, strict mode.
+- **typescript-patterns**: TypeScript types: generics, discriminated unions, Zod, satisfies, branded types. Triggers: TypeScript, TS, generics, Zod, satisfies, strict mode.
 - **typescript-rules**: TypeScript/JavaScript coding rules: style, patterns, security, testing. Triggers: .ts, .tsx, .js, .jsx, package.json, tsconfig.json, React, Next.js, Vue, Vite, Vitest, Jest, ESLint.
 - **ubiquitous-language**: Extracts DDD ubiquitous language glossary, flags ambiguities, saves to UBIQUITOUS_LANGUAGE.md. Triggers: define domain terms, build glossary, harden terminology, DDD, domain model.
 - **verification-before-completion**: Forces verification commands before success claims. Evidence before assertions. Triggers: complete, fixed, passing, done, ready, verified.
@@ -5453,7 +5448,7 @@ python3 scripts/audit_skills.py --ci
 **Verify audit_skills.py:**
 - [ ] `HIGH: 0` (MUST be zero — CI fails otherwise)
 - [ ] `WARN: 0`
-- [ ] `INFO: N` (acceptable — broad-access skills: orchestrate, swarm, teams)
+- [ ] `INFO: N` (acceptable — broad-access skills: orchestrate, swarm, workflow)
 
 ---
 
@@ -7007,7 +7002,6 @@ The main adapted group is multi-agent orchestration:
 - `/orchestrate`
 - `/workflow`
 - `/swarm`
-- `/teams`
 - `/subagent-development`
 
 The adapter also covers skills that previously depended only on Claude's
@@ -10650,7 +10644,7 @@ User-authored opencode files and user-authored `opencode.json` keys are never de
 ## Behavioral Limits
 
 - opencode does not expose the full Claude hook event surface; only the events in the mapping table above are bridged. Claude-only events (`TaskCompleted`, `TeammateIdle`, `SubagentStart`, `SubagentStop`, `PreCompact`) are silently skipped.
-- Multi-agent orchestration skills (`/orchestrate`, `/workflow`, `/swarm`, `/teams`, `/subagent-development`) run through the Codex adaptation layer — they use opencode subagents and explicit file ownership instead of Claude's `Agent`/`TaskCreate` primitives.
+- Multi-agent orchestration skills (`/orchestrate`, `/workflow`, `/swarm`, `/subagent-development`) run through the Codex adaptation layer — they use opencode subagents and explicit file ownership instead of Claude's `Agent`/`TaskCreate` primitives.
 
 ## Verification
 
@@ -10997,7 +10991,7 @@ All functionality is unified under skills. Task and hybrid skills are user-invoc
 | **2 — Multi-agent workflow** | `/workflow <type>` | Cross-cutting task with known pattern |
 | **3 — Custom parallelism** | `/orchestrate`, `/swarm` | No predefined workflow matches |
 
-## Task Skills (32)
+## Task Skills (30)
 
 Task skills execute a specific action. Invoked via slash commands. `disable-model-invocation: true`.
 
@@ -11050,13 +11044,11 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
 | **analyze** | `/analyze` | medium | Analyze code quality, complexity, and patterns |
 | **cve-scan** | `/cve-scan` | medium | Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, ruby, dart) |
 | **docs** | `/docs` | high | Generate/update docs: README, API docs, architecture notes, changelogs (Tier 1 — single agent) |
-| **search** | `/search` | medium | Search knowledge base (MCP tools with local fallback) |
 | **explain** | `/explain` | medium | Explain architecture of a file/module using Mermaid diagrams |
 | **orchestrate** | `/orchestrate` | max | Custom multi-agent parallelism — Tier 3, native in Claude, Codex-adapted to `spawn_agent` workflows |
 | **swarm** | `/swarm` | max | Massive parallelism: map-reduce, consensus, relay — Tier 3 |
 | **workflow** | `/workflow` | max | 15 predefined multi-agent workflow types — Tier 2, Codex-adapted to native subagent orchestration |
 | **instinct-review** | `/instinct-review` | low | Review, curate, and manage learned instincts from past sessions |
-| **teams** | `/teams` | max | Launch pre-configured Agent Teams compositions for common workflows |
 | **write-a-prd** | `/write-a-prd` | high | Create PRD through interactive interview, codebase exploration, and module design |
 | **prd-to-plan** | `/prd-to-plan` | high | Convert PRD into phased implementation plan using tracer-bullet vertical slices |
 | **tdd** | `/tdd` | high | Test-driven development with red-green-refactor loop and vertical slices |
@@ -11137,24 +11129,16 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
 | **content-moderation-patterns** | `skills/content-moderation-patterns/` | Two-stage moderation: pre-filter + LLM classifier; categories; thresholds |
 | **model-routing-patterns** | `skills/model-routing-patterns/` | Haiku/Sonnet/Opus routing; escalation; sub-agent delegation; fallback |
 
-## Knowledge Skills - Process (7)
+## Knowledge Skills - Process (5)
 
 | Skill | Directory | Domain |
 |-------|-----------|--------|
-| **plan-writing** | `skills/plan-writing/` | Implementation plans, success criteria, pre-mortem |
-| **debugging-tactics** | `skills/debugging-tactics/` | Iron Law 4-phase debugging: root cause → pattern → hypothesis → fix |
 | **git-mastery** | `skills/git-mastery/` | Git workflows, branching, conflict resolution |
 | **architecture-decision** | `skills/architecture-decision/` | Architecture notes, trade-off analysis, alternatives |
 | **performance-profiling** | `skills/performance-profiling/` | Profiling, bottleneck analysis, optimization |
 | **research-mastery** | `skills/research-mastery/` | Multi-source research, synthesis, fact-checking |
 | **verification-before-completion** | `skills/verification-before-completion/` | Iron Law: evidence-before-claims, no completion without fresh verification |
 
-## Knowledge Skills - Orchestration (1)
-
-| Skill | Directory | Domain |
-|-------|-----------|--------|
-| **hive-mind** | `skills/hive-mind/` | Multi-agent aggregation, consensus, swarm patterns |
-
 ## Quality Guardrails
 
 ### Anti-Rationalization Tables
@@ -11246,7 +11230,6 @@ Common adapted skills:
 - `/orchestrate`
 - `/workflow`
 - `/swarm`
-- `/teams`
 - `/subagent-development`
 - `/tdd`
 

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.5.0",
+  "version": "4.0.0",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",
@@ -9,7 +9,7 @@
       "tags": ["core", "agents"]
     },
     "skills": {
-      "description": "112 skills (32 task + 31 hybrid + 49 knowledge)",
+      "description": "107 skills (30 task + 31 hybrid + 46 knowledge)",
       "path": "app/skills",
       "target": ".claude/skills",
       "type": "symlink",
@@ -90,7 +90,7 @@
       "default": true
     },
     "skills": {
-      "description": "112 skills (task, hybrid, knowledge)",
+      "description": "107 skills (task, hybrid, knowledge)",
       "default": true
     },
     "rules-common": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "3.5.0",
-  "description": "AI coding toolkit: 112 skills, 44 agents, 12-editor write-through (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo, Aider, Augment, Antigravity, Codex, opencode), machine-enforced safety constitution, SARIF audit, signed npm provenance.",
+  "version": "4.0.0",
+  "description": "AI coding toolkit: 107 skills, 44 agents, 12-editor write-through (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo, Aider, Augment, Antigravity, Codex, opencode), machine-enforced safety constitution, SARIF audit, signed npm provenance.",
   "keywords": [
     "claude",
     "claude-code",

package/scripts/codex_skill_adapter.py

@@ -98,7 +98,7 @@ def build_codex_skill_text(skill_file: Path) -> str:
 
     if adapted:
         frontmatter = _adapt_frontmatter(frontmatter)
-        body = _adapt_body(skill_file.parent.name, body)
+        body = _adapt_body(body)
 
     rendered_frontmatter = _render_frontmatter(frontmatter)
     return f"---\n{rendered_frontmatter}\n---\n{body.rstrip()}\n"
@@ -221,7 +221,7 @@ def _adapt_allowed_tools(value: str) -> list[str]:
     return tools
 
 
-def _adapt_body(skill_name: str, body: str) -> str:
+def _adapt_body(body: str) -> str:
     body = body.replace(
         "## MANDATORY: You MUST use the Agent tool",
         "## MANDATORY: Use Codex subagents for delegation",
@@ -258,11 +258,6 @@ def _adapt_body(skill_name: str, body: str) -> str:
     if "$ARGUMENTS" in body:
         body = body.replace("$ARGUMENTS", f"$ARGUMENTS\n{_CODEX_NOTE.rstrip()}", 1)
 
-    if skill_name == "teams":
-        body = body.replace(
-            "Launches a pre-configured Agent Teams composition for your task.",
-            "Launches a pre-configured Codex subagent composition for your task.",
-        )
     return body
 
 

package/app/skills/debugging-tactics/SKILL.md

@@ -1,136 +0,0 @@
----
-name: debugging-tactics
-description: "RCA debugging: investigation, hypothesis, validation, fix. No fix without RCA. Triggers: bug, error, exception, stack trace, intermittent, flaky, crash, regression, broken after."
-effort: medium
-user-invocable: false
-allowed-tools: Grep, Read
----
-
-# Debugging Tactics Skill
-
-## The Iron Law
-
-```
-NO FIXES WITHOUT ROOT CAUSE INVESTIGATION FIRST
-```
-
-If you haven't completed Phase 1 (Root Cause Investigation), you cannot propose fixes.
-
-Random fixes waste time and create new bugs. Quick patches mask underlying issues.
-
-**Violating the letter of this process is violating the spirit of debugging.**
-
-## The Four Phases
-
-You MUST complete each phase before proceeding to the next.
-
-### Phase 1: Root Cause Investigation
-
-**BEFORE attempting ANY fix:**
-
-1. **Read Error Messages Carefully**
-   - Don't skip past errors or warnings — they often contain the answer
-   - Read stack traces completely
-   - Note line numbers, file paths, error codes
-
-2. **Reproduce Consistently**
-   - Can you trigger it reliably?
-   - What are the exact steps?
-   - If not reproducible, gather more data — don't guess
-
-3. **Check Recent Changes**
-   - `git diff`, recent commits, new dependencies
-   - Config changes, environmental differences
-
-4. **Gather Evidence in Multi-Component Systems**
-   For each component boundary: log what enters, log what exits, verify state at each layer.
-   Run once to gather evidence showing WHERE it breaks, THEN investigate that specific component.
-
-5. **Trace Data Flow**
-   Where does the bad value originate? Trace backward through call stack to the source. Fix at source, not at symptom.
-
-### Phase 2: Pattern Analysis
-
-1. **Find Working Examples** — locate similar working code in same codebase
-2. **Compare Against References** — read reference implementations COMPLETELY, not skimming
-3. **Identify Differences** — list every difference, however small
-4. **Understand Dependencies** — what other components, settings, config does this need?
-
-### Phase 3: Hypothesis and Testing
-
-1. **Form Single Hypothesis** — "I think X is the root cause because Y" (be specific)
-2. **Test Minimally** — smallest possible change, one variable at a time
-3. **Verify Before Continuing** — did it work? If not, form NEW hypothesis. Don't add more fixes on top.
-
-### Phase 4: Implementation
-
-1. **Create Failing Test Case** — MUST have before fixing (use TDD skill)
-2. **Implement Single Fix** — address root cause, ONE change at a time, no "while I'm here" improvements
-3. **Verify Fix** — test passes? No regressions? Issue resolved?
-4. **If Fix Doesn't Work** — count your attempts:
-   - If < 3: Return to Phase 1, re-analyze with new information
-   - **If >= 3: STOP and question the architecture** (see below)
-
-### Architecture Escalation (3+ Failed Fixes)
-
-**Pattern indicating architectural problem:**
-- Each fix reveals new shared state/coupling in different places
-- Fixes require "massive refactoring" to implement
-- Each fix creates new symptoms elsewhere
-
-**STOP and question fundamentals:**
-- Is this pattern fundamentally sound?
-- Should we refactor architecture vs. continue fixing symptoms?
-- Discuss with user before attempting more fixes
-
-This is NOT a failed hypothesis — this is a wrong architecture.
-
-## Red Flags — STOP and Follow Process
-
-| Excuse | Reality |
-|--------|---------|
-| "Quick fix for now, investigate later" | Systematic is faster than thrashing |
-| "Just try changing X and see" | One variable at a time, with hypothesis |
-| "I'll skip the test, I'll manually verify" | Untested fixes don't stick |
-| "It's probably X, let me fix that" | Seeing symptoms is not understanding root cause |
-| "One more fix attempt" (after 2+) | 3+ failures = architectural problem. STOP. |
-| "Here are the main problems: [list]" | You're proposing fixes without investigation |
-
-## Legacy Reference
-
-## Language-Specific Tactics
-
-### Python
-- **Debugger**: `import pdb; pdb.set_trace()` (or `ipdb`)
-- **Trace**: `traceback.print_stack()`
-- **Memory**: `tracemalloc` for leaks.
-```python
-import tracemalloc
-tracemalloc.start()
-# ... code ...
-snapshot = tracemalloc.take_snapshot()
-top_stats = snapshot.statistics('lineno')
-```
-
-### Node.js / TypeScript
-- **Debugger**: `node --inspect-brk app.js` -> Open `chrome://inspect`.
-- **Memory**: `heapdump` or built-in inspector.
-- **Async Traces**: Ensure `Error.stackTraceLimit = Infinity`.
-
-### PHP (Laravel/Symfony)
-- **Debugger**: Xdebug (`xdebug_break()`).
-- **Logs**: `Log::info('State:', $data);`.
-- **Query Log**: `DB::enableQueryLog(); ... dd(DB::getQueryLog());`.
-
-### Flutter / Dart
-- **Debugger**: `debugger()` statement.
-- **Inspector**: Flutter DevTools (Widget Inspector).
-- **Network**: Network tab in DevTools for API calls.
-
-## "5 Whys" Root Cause Analysis
-Ask "Why?" 5 times to find the real issue:
-- "The app crashed." -> Why? -> "Null pointer exception."
-- -> Why? -> "User object was null."
-- -> Why? -> "API returned 404."
-- -> Why? -> "User ID was invalid."
-- -> Why? -> "Frontend validation allowed negative IDs." (ROOT CAUSE)