@softspark/ai-toolkit 4.20.0 → 4.22.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +107 -0
- package/README.md +32 -22
- package/app/.claude-plugin/plugin.json +1 -1
- package/app/agents/code-reviewer.md +32 -15
- package/app/skills/a11y-validate/SKILL.md +61 -179
- package/app/skills/a11y-validate/reference/scanner-categories.md +174 -0
- package/app/skills/brainstorm/SKILL.md +174 -0
- package/app/skills/ci/SKILL.md +1 -0
- package/app/skills/debug/SKILL.md +2 -1
- package/app/skills/documentation-standards/SKILL.md +25 -5
- package/app/skills/fix/SKILL.md +1 -1
- package/app/skills/hipaa-validate/SKILL.md +25 -221
- package/app/skills/hipaa-validate/reference/scanner-categories.md +224 -0
- package/app/skills/pr/SKILL.md +1 -1
- package/app/skills/review/SKILL.md +49 -4
- package/app/skills/seo-validate/SKILL.md +63 -309
- package/app/skills/seo-validate/reference/scanner-categories.md +304 -0
- package/app/surface.json +296 -0
- package/benchmarks/ecosystem-doctor-snapshot.json +15 -19
- package/kb/procedures/release-preparation-sop.md +44 -2
- package/kb/reference/architecture-overview.md +3 -3
- package/kb/reference/skills-catalog.md +10 -14
- package/llms-full.txt +59 -20
- package/manifest.json +3 -3
- package/package.json +6 -3
- package/scripts/check_split.py +493 -0
- package/scripts/surface_manifest.py +246 -0
- package/scripts/sync_badges.py +133 -0
- package/scripts/validate.py +84 -2
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
{
|
|
2
|
-
"last_run": "2026-
|
|
2
|
+
"last_run": "2026-08-06T05:13:55Z",
|
|
3
3
|
"schema_version": 1,
|
|
4
4
|
"tools": {
|
|
5
5
|
"aider": {
|
|
@@ -24,7 +24,7 @@
|
|
|
24
24
|
}
|
|
25
25
|
},
|
|
26
26
|
"augment": {
|
|
27
|
-
"docs_hash": "
|
|
27
|
+
"docs_hash": "68eecb3b6a49f7f1",
|
|
28
28
|
"headings": [
|
|
29
29
|
"Admin",
|
|
30
30
|
"Auggie CLI",
|
|
@@ -51,7 +51,7 @@
|
|
|
51
51
|
"Auggie CLI": true,
|
|
52
52
|
"MCP": true,
|
|
53
53
|
"Next Edit": false,
|
|
54
|
-
"Notification":
|
|
54
|
+
"Notification": false,
|
|
55
55
|
"PostToolUse": false,
|
|
56
56
|
"PreToolUse": false,
|
|
57
57
|
"SKILL.md": false,
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
}
|
|
67
67
|
},
|
|
68
68
|
"claude-app": {
|
|
69
|
-
"docs_hash": "
|
|
69
|
+
"docs_hash": "670f833a8e1527c0",
|
|
70
70
|
"headings": [
|
|
71
71
|
"Add global and folder instructions",
|
|
72
72
|
"Availability",
|
|
@@ -107,7 +107,7 @@
|
|
|
107
107
|
}
|
|
108
108
|
},
|
|
109
109
|
"claude-code": {
|
|
110
|
-
"docs_hash": "
|
|
110
|
+
"docs_hash": "1904e0148fe997b9",
|
|
111
111
|
"headings": [
|
|
112
112
|
"Core concepts",
|
|
113
113
|
"Documentation Index",
|
|
@@ -130,7 +130,7 @@
|
|
|
130
130
|
"InstructionsLoaded": false,
|
|
131
131
|
"MCP server": true,
|
|
132
132
|
"MessageDisplay": false,
|
|
133
|
-
"Notification":
|
|
133
|
+
"Notification": false,
|
|
134
134
|
"PermissionDenied": false,
|
|
135
135
|
"PermissionRequest": false,
|
|
136
136
|
"PostCompact": false,
|
|
@@ -163,10 +163,10 @@
|
|
|
163
163
|
"slash command": false,
|
|
164
164
|
"sub-agent": true
|
|
165
165
|
},
|
|
166
|
-
"version": "2.1.
|
|
166
|
+
"version": "2.1.223 (Claude Code)"
|
|
167
167
|
},
|
|
168
168
|
"cline": {
|
|
169
|
-
"docs_hash": "
|
|
169
|
+
"docs_hash": "e4409c39f56583e8",
|
|
170
170
|
"headings": [
|
|
171
171
|
"API Reference",
|
|
172
172
|
"Best Practices",
|
|
@@ -213,7 +213,7 @@
|
|
|
213
213
|
}
|
|
214
214
|
},
|
|
215
215
|
"codex-cli": {
|
|
216
|
-
"docs_hash": "
|
|
216
|
+
"docs_hash": "91d1d7112da069da",
|
|
217
217
|
"headings": [
|
|
218
218
|
"API",
|
|
219
219
|
"API Reference",
|
|
@@ -345,10 +345,10 @@
|
|
|
345
345
|
"mcp_servers": false,
|
|
346
346
|
"sandbox": true
|
|
347
347
|
},
|
|
348
|
-
"version": "codex-cli 0.
|
|
348
|
+
"version": "codex-cli 0.146.0"
|
|
349
349
|
},
|
|
350
350
|
"cursor": {
|
|
351
|
-
"docs_hash": "
|
|
351
|
+
"docs_hash": "9d032d0dae73bed2",
|
|
352
352
|
"headings": [],
|
|
353
353
|
"markers": {
|
|
354
354
|
".cursor/rules": false,
|
|
@@ -364,7 +364,7 @@
|
|
|
364
364
|
}
|
|
365
365
|
},
|
|
366
366
|
"gemini-cli": {
|
|
367
|
-
"docs_hash": "
|
|
367
|
+
"docs_hash": "d47d074674e59f6f",
|
|
368
368
|
"headings": [
|
|
369
369
|
"Breadcrumbs",
|
|
370
370
|
"Directory actions",
|
|
@@ -376,11 +376,7 @@
|
|
|
376
376
|
"Latest commit",
|
|
377
377
|
"More options",
|
|
378
378
|
"Navigation Menu",
|
|
379
|
-
"Provide feedback",
|
|
380
|
-
"Saved searches",
|
|
381
|
-
"Search code, repositories, users, issues, pull requests...",
|
|
382
379
|
"Uh oh!",
|
|
383
|
-
"Use saved searches to filter your results more quickly",
|
|
384
380
|
"docs",
|
|
385
381
|
"parent directory"
|
|
386
382
|
],
|
|
@@ -407,7 +403,7 @@
|
|
|
407
403
|
}
|
|
408
404
|
},
|
|
409
405
|
"github-copilot": {
|
|
410
|
-
"docs_hash": "
|
|
406
|
+
"docs_hash": "ee88f952816a8535",
|
|
411
407
|
"headings": [
|
|
412
408
|
"About Copilot auto model selection",
|
|
413
409
|
"About Copilot automations",
|
|
@@ -460,7 +456,7 @@
|
|
|
460
456
|
}
|
|
461
457
|
},
|
|
462
458
|
"opencode": {
|
|
463
|
-
"docs_hash": "
|
|
459
|
+
"docs_hash": "f09f3fbe98570961",
|
|
464
460
|
"headings": [
|
|
465
461
|
"Add features",
|
|
466
462
|
"Ask questions",
|
|
@@ -520,7 +516,7 @@
|
|
|
520
516
|
}
|
|
521
517
|
},
|
|
522
518
|
"windsurf": {
|
|
523
|
-
"docs_hash": "
|
|
519
|
+
"docs_hash": "496619fda7ca4576",
|
|
524
520
|
"headings": [
|
|
525
521
|
"Accounts",
|
|
526
522
|
"Advanced",
|
|
@@ -3,9 +3,9 @@ title: "SOP: Release Preparation"
|
|
|
3
3
|
category: procedures
|
|
4
4
|
service: ai-toolkit
|
|
5
5
|
tags: [sop, release, version, publish, changelog, semver, provenance, sarif, ecosystem, shellcheck]
|
|
6
|
-
version: "1.
|
|
6
|
+
version: "1.14.0"
|
|
7
7
|
created: "2026-04-10"
|
|
8
|
-
last_updated: "2026-
|
|
8
|
+
last_updated: "2026-08-06"
|
|
9
9
|
description: "Step-by-step checklist for preparing a new ai-toolkit release — ecosystem-sync drift check, version sync, changelog, artifact regeneration, validation, and tagging. Run BEFORE every git tag. Includes mandatory Provenance, SARIF, and checksum-pin checks added in v2.8.0, the single-run npm test discipline added in v1.8.0, the ecosystem-sync gate added in v1.9.0, the registry-vs-generators drift gate added in v1.10.0, the mandatory pre-tag ShellCheck gate added in v1.11.0 (publish.yml does not run ShellCheck, so a hook lint failure can publish while reddening main CI — see the v4.5.1 postmortem in Phase 5), the pre-push tag assertions added in v1.12.0 after v4.19.0 was tagged on the wrong commit (Phase 7), and the licensing gate added in v1.13.0 with the move to Apache-2.0 (Phase 5c)."
|
|
10
10
|
---
|
|
11
11
|
|
|
@@ -210,6 +210,48 @@ echo "package-lock.json: $(python3 -c "import json; print(json.load(open('packag
|
|
|
210
210
|
|
|
211
211
|
All four must print the same version. If not, fix before proceeding.
|
|
212
212
|
|
|
213
|
+
### Public surface review
|
|
214
|
+
|
|
215
|
+
```bash
|
|
216
|
+
python3 scripts/surface_manifest.py --update
|
|
217
|
+
git diff app/surface.json
|
|
218
|
+
```
|
|
219
|
+
|
|
220
|
+
**Every line the diff removes is a breaking change.** Restore it, or take the
|
|
221
|
+
deprecation path in `BACKWARD_COMPATIBILITY.md` and add a `DECISIONS.md` entry
|
|
222
|
+
before the tag. Lines added are new surface being adopted into protection — that
|
|
223
|
+
needs no ceremony.
|
|
224
|
+
|
|
225
|
+
Do not run `--update` to make a red build green. The check fails because something
|
|
226
|
+
users depend on disappeared; regenerating the manifest deletes the evidence, not
|
|
227
|
+
the problem.
|
|
228
|
+
|
|
229
|
+
### Skill body budget ratchet
|
|
230
|
+
|
|
231
|
+
`validate.py` prints the largest skill body on every run:
|
|
232
|
+
|
|
233
|
+
```
|
|
234
|
+
Body budget: largest is <skill> at <N> bytes (warn 18000, error 20000)
|
|
235
|
+
```
|
|
236
|
+
|
|
237
|
+
Once that number sits at least 2000 bytes under `SKILL_BODY_BUDGET_WARN`, lower
|
|
238
|
+
`SKILL_BODY_BUDGET_WARN` by 2000 in `scripts/validate.py` and ship the tightened
|
|
239
|
+
threshold with the release. Target floor is 12000.
|
|
240
|
+
|
|
241
|
+
Two rules, both learned the hard way:
|
|
242
|
+
|
|
243
|
+
- **Never lower a threshold in the same change that something violates it.** Split
|
|
244
|
+
the offending skill into `SKILL.md` + `reference/` first, prove it with
|
|
245
|
+
`python3 scripts/check_split.py <skill> --before <pre-split SKILL.md>`, then
|
|
246
|
+
tighten in a follow-up.
|
|
247
|
+
- **Never raise a threshold to make a red build green.** A body over budget means
|
|
248
|
+
detail that belongs in `reference/` is loading on every trigger match, including
|
|
249
|
+
the accidental ones. Raising the number hides the cost, it does not remove it.
|
|
250
|
+
|
|
251
|
+
If the largest body has not moved since the previous release, leave the threshold
|
|
252
|
+
alone and say so in the release notes. A ratchet that never advances is honest;
|
|
253
|
+
one that advances past reality is not.
|
|
254
|
+
|
|
213
255
|
---
|
|
214
256
|
|
|
215
257
|
## Phase 3: Write CHANGELOG Entry
|
|
@@ -3,9 +3,9 @@ title: "AI Toolkit - Architecture Overview"
|
|
|
3
3
|
category: reference
|
|
4
4
|
service: ai-toolkit
|
|
5
5
|
tags: [architecture, overview, design, structure]
|
|
6
|
-
version: "1.6.
|
|
6
|
+
version: "1.6.1"
|
|
7
7
|
created: "2026-03-23"
|
|
8
|
-
last_updated: "2026-
|
|
8
|
+
last_updated: "2026-08-06"
|
|
9
9
|
description: "Architecture of ai-toolkit: directory layout, Claude app export, global install model, editor-aware MCP install, Codex translation layer, skill tiers, and integration with projects."
|
|
10
10
|
---
|
|
11
11
|
|
|
@@ -207,7 +207,7 @@ Three tiers determine how to approach a task:
|
|
|
207
207
|
| Type | Field | Invocation | Count |
|
|
208
208
|
|------|-------|-----------|-------|
|
|
209
209
|
| Task | `disable-model-invocation: true` | User via `/skill` only | 32 |
|
|
210
|
-
| Hybrid | (neither) | User via `/skill` + agent knowledge |
|
|
210
|
+
| Hybrid | (neither) | User via `/skill` + agent knowledge | 31 |
|
|
211
211
|
| Knowledge | `user-invocable: false` | Claude auto-loads | 46 |
|
|
212
212
|
|
|
213
213
|
## Multi-Agent Execution
|
|
@@ -3,9 +3,9 @@ title: "AI Toolkit - Skills Catalog"
|
|
|
3
3
|
category: reference
|
|
4
4
|
service: ai-toolkit
|
|
5
5
|
tags: [skills, domain-knowledge, catalog, task-skills, hybrid-skills]
|
|
6
|
-
version: "1.
|
|
6
|
+
version: "1.5.0"
|
|
7
7
|
created: "2026-03-23"
|
|
8
|
-
last_updated: "2026-
|
|
8
|
+
last_updated: "2026-08-06"
|
|
9
9
|
description: "Complete skills catalog with task, hybrid, and knowledge skills. Includes Codex adaptation notes, effort levels, skill-scoped hooks, executable scripts, security auditor, and persona presets."
|
|
10
10
|
---
|
|
11
11
|
|
|
@@ -18,13 +18,13 @@ All functionality is unified under skills. Task and hybrid skills are user-invoc
|
|
|
18
18
|
| Tier | Skills | When |
|
|
19
19
|
|------|--------|------|
|
|
20
20
|
| **1 — Quick single-agent** | `/debug`, `/review`, `/refactor`, `/analyze`, `/docs`, `/plan`, `/explain`, `/tdd`, `/grill-me`, `/triage-issue` | One concern, fast |
|
|
21
|
+
| **1.5 — Should we build it?** | `/brainstorm` | Pre-artifact conversation; prices the zero option and may end in "do not build this" |
|
|
21
22
|
| **1.5 — Product planning** | `/write-a-prd` → `/prd-to-plan` → `/prd-to-issues` | Interview-driven PRD → vertical-slice plan → GitHub issues |
|
|
22
23
|
| **1.5 — Design & architecture** | `/design-an-interface`, `/architecture-audit`, `/refactor-plan`, `/ubiquitous-language`, `/qa-session` | Parallel sub-agent exploration |
|
|
23
24
|
| **2 — Multi-agent workflow** | `/workflow <type>` | Cross-cutting task with known pattern |
|
|
24
25
|
| **3 — Custom parallelism** | `/orchestrate`, `/swarm` | No predefined workflow matches |
|
|
25
26
|
|
|
26
|
-
## Task Skills
|
|
27
|
-
|
|
27
|
+
## Task Skills
|
|
28
28
|
Task skills execute a specific action. Invoked via slash commands. `disable-model-invocation: true`.
|
|
29
29
|
|
|
30
30
|
| Skill | Slash Command | Effort | Description |
|
|
@@ -62,8 +62,7 @@ Task skills execute a specific action. Invoked via slash commands. `disable-mode
|
|
|
62
62
|
| **seo-validate** | `/seo-validate` | medium | Scan codebase for SEO issues: W3C semantics, meta/OG tags, Schema.org, hreflang, Core Web Vitals (LCP/INP/CLS), resource hints, GEO, SPA/SSG/CSR crawlability, technical SEO, accessibility-for-SEO. Framework-aware (Next/Nuxt/Astro/Gatsby/SvelteKit/Remix/Angular/Vue/static HTML). |
|
|
63
63
|
| **mcp-builder** | `/mcp-builder` | high | Build production-grade MCP servers using the 4-phase methodology (research, implement, test, evaluate). TypeScript/Python, stdio/streamable-http. |
|
|
64
64
|
|
|
65
|
-
## Hybrid Skills
|
|
66
|
-
|
|
65
|
+
## Hybrid Skills
|
|
67
66
|
Hybrid skills combine slash-command invocation with domain knowledge that agents reference.
|
|
68
67
|
|
|
69
68
|
| Skill | Slash Command | Effort | Description |
|
|
@@ -96,6 +95,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
96
95
|
| **mem-search** | `/mem-search` | medium | Search past coding sessions via natural language (memory-pack) |
|
|
97
96
|
| **persona** | `/persona` | low | Switch engineering persona at runtime (backend-lead, frontend-lead, devops-eng, junior-dev) |
|
|
98
97
|
| **council** | `/council` | high | 4-perspective decision evaluation (Advocate, Critic, Pragmatist, User-Proxy) with synthesis and confidence-rated recommendation. Tier 1, orchestrator, `context: fork`. |
|
|
98
|
+
| **brainstorm** | `/brainstorm` | high | Pre-artifact conversation that prices "build nothing" as a real candidate and sends the conclusion to a separate challenger agent before routing. Six exit ramps, one of which is stop. |
|
|
99
99
|
| **introspect** | `/introspect` | medium | Agent self-debugging: classify failure pattern, suggest smallest recovery action, emit structured introspection report |
|
|
100
100
|
| **brand-voice** | `/brand-voice` | medium | Anti-trope list, voice principles, LLM rhetoric prevention; output modes (`concise` ≤60% tokens, `strict` ≤40%) governing conversational responses. |
|
|
101
101
|
|
|
@@ -119,8 +119,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
119
119
|
| `application-deploy` | 3 | Deploy → smoke test → release notes |
|
|
120
120
|
| `proactive-troubleshooting` | 4 | Investigate → check perf → preventive fix → docs |
|
|
121
121
|
|
|
122
|
-
## Knowledge Skills - Development
|
|
123
|
-
|
|
122
|
+
## Knowledge Skills - Development
|
|
124
123
|
| Skill | Directory | Domain |
|
|
125
124
|
|-------|-----------|--------|
|
|
126
125
|
| **app-builder** | `skills/app-builder/` | Full-stack application architecture |
|
|
@@ -139,8 +138,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
139
138
|
| **design-engineering** | `skills/design-engineering/` | UI polish, animation craft, easing, transforms, accessibility |
|
|
140
139
|
| **documentation-standards** | `skills/documentation-standards/` | KB document conventions, frontmatter validation, category taxonomy |
|
|
141
140
|
|
|
142
|
-
## Knowledge Skills - Infrastructure
|
|
143
|
-
|
|
141
|
+
## Knowledge Skills - Infrastructure
|
|
144
142
|
| Skill | Directory | Domain |
|
|
145
143
|
|-------|-----------|--------|
|
|
146
144
|
| **docker-devops** | `skills/docker-devops/` | Docker, deployment, infrastructure |
|
|
@@ -150,8 +148,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
150
148
|
| **testing-patterns** | `skills/testing-patterns/` | Multi-language TDD: pytest, vitest, phpunit, go test, flutter |
|
|
151
149
|
| **migration-patterns** | `skills/migration-patterns/` | Database migrations, API versioning, zero-downtime |
|
|
152
150
|
|
|
153
|
-
## Knowledge Skills - AI/RAG
|
|
154
|
-
|
|
151
|
+
## Knowledge Skills - AI/RAG
|
|
155
152
|
| Skill | Directory | Domain |
|
|
156
153
|
|-------|-----------|--------|
|
|
157
154
|
| **rag-patterns** | `skills/rag-patterns/` | RAG pipelines, chunking, reranking, evaluation |
|
|
@@ -161,8 +158,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
161
158
|
| **content-moderation-patterns** | `skills/content-moderation-patterns/` | Two-stage moderation: pre-filter + LLM classifier; categories; thresholds |
|
|
162
159
|
| **model-routing-patterns** | `skills/model-routing-patterns/` | Haiku/Sonnet/Opus routing; escalation; sub-agent delegation; fallback |
|
|
163
160
|
|
|
164
|
-
## Knowledge Skills - Process
|
|
165
|
-
|
|
161
|
+
## Knowledge Skills - Process
|
|
166
162
|
| Skill | Directory | Domain |
|
|
167
163
|
|-------|-----------|--------|
|
|
168
164
|
| **git-mastery** | `skills/git-mastery/` | Git workflows, branching, conflict resolution |
|
package/llms-full.txt
CHANGED
|
@@ -84,6 +84,7 @@
|
|
|
84
84
|
- **architecture-audit**: Audits codebase for architectural friction, shallow modules; proposes RFCs. Triggers: improve architecture, shallow modules, deepen modules, reduce coupling.
|
|
85
85
|
- **architecture-decision**: Architecture decisions in ADR/RFC/RFD format: context, constraints, options, recommendation. Triggers: ADR, RFC, RFD, trade-offs, design choice, pick between, evaluate approach.
|
|
86
86
|
- **biz-scan**: Scans codebase for revenue opportunities, KPIs, monetization gaps. Triggers: business metrics, KPI, analytics gaps, monetization, revenue.
|
|
87
|
+
- **brainstorm**: Pre-artifact conversation that prices the zero option and can end in 'do not build this'. Triggers: brainstorm, should we build, is this worth it, explore idea, thinking out loud, half-formed idea.
|
|
87
88
|
- **brand-voice**: Direct technical voice for docs, README, user-facing text. Concise/strict modes. Triggers: documentation, README, content, output-mode, voice, prose style.
|
|
88
89
|
- **briefing**: Executive daily briefing aggregating reports from all agents into decision-focused summary. Triggers: briefing, daily summary, status across system, executive update.
|
|
89
90
|
- **build**: Builds project with auto-detected toolchain (npm, poetry, cargo, go, flutter, Docker). Triggers: build, compile, bundle, produce artifacts.
|
|
@@ -108,7 +109,7 @@
|
|
|
108
109
|
- **design-engineering**: UI craftsmanship: animation rules, easing, micro-interactions, state polish. Triggers: animation, transition, ease-out, motion, micro-interaction, hover, loading state, UI polish.
|
|
109
110
|
- **docker-devops**: Docker/K8s: Dockerfile, multi-stage, compose, manifests, Helm. Triggers: Docker, Dockerfile, container, Kubernetes, k8s, compose, Helm, pod.
|
|
110
111
|
- **docs**: Generates/updates README, API docs, architecture notes. Triggers: docs, README, API docs, architecture note, documentation.
|
|
111
|
-
- **documentation-standards**: KB conventions: YAML frontmatter,
|
|
112
|
+
- **documentation-standards**: KB conventions: YAML frontmatter, 8-category taxonomy (reference/howto/procedures/troubleshooting/best-practices/decisions/runbooks/planning). Triggers: kb/, SOP, runbook, howto, frontmatter, knowledge base.
|
|
112
113
|
- **ecommerce-patterns**: E-commerce: cart, checkout, payments (Stripe/Adyen), order state, inventory, promos, tax. Triggers: cart, checkout, SKU, payment, Stripe, Shopify, Medusa, Magento, coupon, refund.
|
|
113
114
|
- **evaluate**: Evaluates RAG retrieval and LLM-as-judge metrics (faithfulness, relevancy, context precision). Triggers: measure RAG quality, knowledge gap, RAG eval, golden dataset.
|
|
114
115
|
- **evolve**: Analyzes agent/skill failures, drafts prompt/permission fixes. Triggers: improve agent, refine skill, system prompt, optimize agent.
|
|
@@ -7240,9 +7241,9 @@ title: "SOP: Release Preparation"
|
|
|
7240
7241
|
category: procedures
|
|
7241
7242
|
service: ai-toolkit
|
|
7242
7243
|
tags: [sop, release, version, publish, changelog, semver, provenance, sarif, ecosystem, shellcheck]
|
|
7243
|
-
version: "1.
|
|
7244
|
+
version: "1.14.0"
|
|
7244
7245
|
created: "2026-04-10"
|
|
7245
|
-
last_updated: "2026-
|
|
7246
|
+
last_updated: "2026-08-06"
|
|
7246
7247
|
description: "Step-by-step checklist for preparing a new ai-toolkit release — ecosystem-sync drift check, version sync, changelog, artifact regeneration, validation, and tagging. Run BEFORE every git tag. Includes mandatory Provenance, SARIF, and checksum-pin checks added in v2.8.0, the single-run npm test discipline added in v1.8.0, the ecosystem-sync gate added in v1.9.0, the registry-vs-generators drift gate added in v1.10.0, the mandatory pre-tag ShellCheck gate added in v1.11.0 (publish.yml does not run ShellCheck, so a hook lint failure can publish while reddening main CI — see the v4.5.1 postmortem in Phase 5), the pre-push tag assertions added in v1.12.0 after v4.19.0 was tagged on the wrong commit (Phase 7), and the licensing gate added in v1.13.0 with the move to Apache-2.0 (Phase 5c)."
|
|
7247
7248
|
---
|
|
7248
7249
|
|
|
@@ -7447,6 +7448,48 @@ echo "package-lock.json: $(python3 -c "import json; print(json.load(open('packag
|
|
|
7447
7448
|
|
|
7448
7449
|
All four must print the same version. If not, fix before proceeding.
|
|
7449
7450
|
|
|
7451
|
+
### Public surface review
|
|
7452
|
+
|
|
7453
|
+
```bash
|
|
7454
|
+
python3 scripts/surface_manifest.py --update
|
|
7455
|
+
git diff app/surface.json
|
|
7456
|
+
```
|
|
7457
|
+
|
|
7458
|
+
**Every line the diff removes is a breaking change.** Restore it, or take the
|
|
7459
|
+
deprecation path in `BACKWARD_COMPATIBILITY.md` and add a `DECISIONS.md` entry
|
|
7460
|
+
before the tag. Lines added are new surface being adopted into protection — that
|
|
7461
|
+
needs no ceremony.
|
|
7462
|
+
|
|
7463
|
+
Do not run `--update` to make a red build green. The check fails because something
|
|
7464
|
+
users depend on disappeared; regenerating the manifest deletes the evidence, not
|
|
7465
|
+
the problem.
|
|
7466
|
+
|
|
7467
|
+
### Skill body budget ratchet
|
|
7468
|
+
|
|
7469
|
+
`validate.py` prints the largest skill body on every run:
|
|
7470
|
+
|
|
7471
|
+
```
|
|
7472
|
+
Body budget: largest is <skill> at <N> bytes (warn 18000, error 20000)
|
|
7473
|
+
```
|
|
7474
|
+
|
|
7475
|
+
Once that number sits at least 2000 bytes under `SKILL_BODY_BUDGET_WARN`, lower
|
|
7476
|
+
`SKILL_BODY_BUDGET_WARN` by 2000 in `scripts/validate.py` and ship the tightened
|
|
7477
|
+
threshold with the release. Target floor is 12000.
|
|
7478
|
+
|
|
7479
|
+
Two rules, both learned the hard way:
|
|
7480
|
+
|
|
7481
|
+
- **Never lower a threshold in the same change that something violates it.** Split
|
|
7482
|
+
the offending skill into `SKILL.md` + `reference/` first, prove it with
|
|
7483
|
+
`python3 scripts/check_split.py <skill> --before <pre-split SKILL.md>`, then
|
|
7484
|
+
tighten in a follow-up.
|
|
7485
|
+
- **Never raise a threshold to make a red build green.** A body over budget means
|
|
7486
|
+
detail that belongs in `reference/` is loading on every trigger match, including
|
|
7487
|
+
the accidental ones. Raising the number hides the cost, it does not remove it.
|
|
7488
|
+
|
|
7489
|
+
If the largest body has not moved since the previous release, leave the threshold
|
|
7490
|
+
alone and say so in the release notes. A ratchet that never advances is honest;
|
|
7491
|
+
one that advances past reality is not.
|
|
7492
|
+
|
|
7450
7493
|
---
|
|
7451
7494
|
|
|
7452
7495
|
## Phase 3: Write CHANGELOG Entry
|
|
@@ -8651,9 +8694,9 @@ title: "AI Toolkit - Architecture Overview"
|
|
|
8651
8694
|
category: reference
|
|
8652
8695
|
service: ai-toolkit
|
|
8653
8696
|
tags: [architecture, overview, design, structure]
|
|
8654
|
-
version: "1.6.
|
|
8697
|
+
version: "1.6.1"
|
|
8655
8698
|
created: "2026-03-23"
|
|
8656
|
-
last_updated: "2026-
|
|
8699
|
+
last_updated: "2026-08-06"
|
|
8657
8700
|
description: "Architecture of ai-toolkit: directory layout, Claude app export, global install model, editor-aware MCP install, Codex translation layer, skill tiers, and integration with projects."
|
|
8658
8701
|
---
|
|
8659
8702
|
|
|
@@ -8855,7 +8898,7 @@ Three tiers determine how to approach a task:
|
|
|
8855
8898
|
| Type | Field | Invocation | Count |
|
|
8856
8899
|
|------|-------|-----------|-------|
|
|
8857
8900
|
| Task | `disable-model-invocation: true` | User via `/skill` only | 32 |
|
|
8858
|
-
| Hybrid | (neither) | User via `/skill` + agent knowledge |
|
|
8901
|
+
| Hybrid | (neither) | User via `/skill` + agent knowledge | 31 |
|
|
8859
8902
|
| Knowledge | `user-invocable: false` | Claude auto-loads | 46 |
|
|
8860
8903
|
|
|
8861
8904
|
## Multi-Agent Execution
|
|
@@ -14511,9 +14554,9 @@ title: "AI Toolkit - Skills Catalog"
|
|
|
14511
14554
|
category: reference
|
|
14512
14555
|
service: ai-toolkit
|
|
14513
14556
|
tags: [skills, domain-knowledge, catalog, task-skills, hybrid-skills]
|
|
14514
|
-
version: "1.
|
|
14557
|
+
version: "1.5.0"
|
|
14515
14558
|
created: "2026-03-23"
|
|
14516
|
-
last_updated: "2026-
|
|
14559
|
+
last_updated: "2026-08-06"
|
|
14517
14560
|
description: "Complete skills catalog with task, hybrid, and knowledge skills. Includes Codex adaptation notes, effort levels, skill-scoped hooks, executable scripts, security auditor, and persona presets."
|
|
14518
14561
|
---
|
|
14519
14562
|
|
|
@@ -14526,13 +14569,13 @@ All functionality is unified under skills. Task and hybrid skills are user-invoc
|
|
|
14526
14569
|
| Tier | Skills | When |
|
|
14527
14570
|
|------|--------|------|
|
|
14528
14571
|
| **1 — Quick single-agent** | `/debug`, `/review`, `/refactor`, `/analyze`, `/docs`, `/plan`, `/explain`, `/tdd`, `/grill-me`, `/triage-issue` | One concern, fast |
|
|
14572
|
+
| **1.5 — Should we build it?** | `/brainstorm` | Pre-artifact conversation; prices the zero option and may end in "do not build this" |
|
|
14529
14573
|
| **1.5 — Product planning** | `/write-a-prd` → `/prd-to-plan` → `/prd-to-issues` | Interview-driven PRD → vertical-slice plan → GitHub issues |
|
|
14530
14574
|
| **1.5 — Design & architecture** | `/design-an-interface`, `/architecture-audit`, `/refactor-plan`, `/ubiquitous-language`, `/qa-session` | Parallel sub-agent exploration |
|
|
14531
14575
|
| **2 — Multi-agent workflow** | `/workflow <type>` | Cross-cutting task with known pattern |
|
|
14532
14576
|
| **3 — Custom parallelism** | `/orchestrate`, `/swarm` | No predefined workflow matches |
|
|
14533
14577
|
|
|
14534
|
-
## Task Skills
|
|
14535
|
-
|
|
14578
|
+
## Task Skills
|
|
14536
14579
|
Task skills execute a specific action. Invoked via slash commands. `disable-model-invocation: true`.
|
|
14537
14580
|
|
|
14538
14581
|
| Skill | Slash Command | Effort | Description |
|
|
@@ -14570,8 +14613,7 @@ Task skills execute a specific action. Invoked via slash commands. `disable-mode
|
|
|
14570
14613
|
| **seo-validate** | `/seo-validate` | medium | Scan codebase for SEO issues: W3C semantics, meta/OG tags, Schema.org, hreflang, Core Web Vitals (LCP/INP/CLS), resource hints, GEO, SPA/SSG/CSR crawlability, technical SEO, accessibility-for-SEO. Framework-aware (Next/Nuxt/Astro/Gatsby/SvelteKit/Remix/Angular/Vue/static HTML). |
|
|
14571
14614
|
| **mcp-builder** | `/mcp-builder` | high | Build production-grade MCP servers using the 4-phase methodology (research, implement, test, evaluate). TypeScript/Python, stdio/streamable-http. |
|
|
14572
14615
|
|
|
14573
|
-
## Hybrid Skills
|
|
14574
|
-
|
|
14616
|
+
## Hybrid Skills
|
|
14575
14617
|
Hybrid skills combine slash-command invocation with domain knowledge that agents reference.
|
|
14576
14618
|
|
|
14577
14619
|
| Skill | Slash Command | Effort | Description |
|
|
@@ -14604,6 +14646,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
14604
14646
|
| **mem-search** | `/mem-search` | medium | Search past coding sessions via natural language (memory-pack) |
|
|
14605
14647
|
| **persona** | `/persona` | low | Switch engineering persona at runtime (backend-lead, frontend-lead, devops-eng, junior-dev) |
|
|
14606
14648
|
| **council** | `/council` | high | 4-perspective decision evaluation (Advocate, Critic, Pragmatist, User-Proxy) with synthesis and confidence-rated recommendation. Tier 1, orchestrator, `context: fork`. |
|
|
14649
|
+
| **brainstorm** | `/brainstorm` | high | Pre-artifact conversation that prices "build nothing" as a real candidate and sends the conclusion to a separate challenger agent before routing. Six exit ramps, one of which is stop. |
|
|
14607
14650
|
| **introspect** | `/introspect` | medium | Agent self-debugging: classify failure pattern, suggest smallest recovery action, emit structured introspection report |
|
|
14608
14651
|
| **brand-voice** | `/brand-voice` | medium | Anti-trope list, voice principles, LLM rhetoric prevention; output modes (`concise` ≤60% tokens, `strict` ≤40%) governing conversational responses. |
|
|
14609
14652
|
|
|
@@ -14627,8 +14670,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
14627
14670
|
| `application-deploy` | 3 | Deploy → smoke test → release notes |
|
|
14628
14671
|
| `proactive-troubleshooting` | 4 | Investigate → check perf → preventive fix → docs |
|
|
14629
14672
|
|
|
14630
|
-
## Knowledge Skills - Development
|
|
14631
|
-
|
|
14673
|
+
## Knowledge Skills - Development
|
|
14632
14674
|
| Skill | Directory | Domain |
|
|
14633
14675
|
|-------|-----------|--------|
|
|
14634
14676
|
| **app-builder** | `skills/app-builder/` | Full-stack application architecture |
|
|
@@ -14647,8 +14689,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
14647
14689
|
| **design-engineering** | `skills/design-engineering/` | UI polish, animation craft, easing, transforms, accessibility |
|
|
14648
14690
|
| **documentation-standards** | `skills/documentation-standards/` | KB document conventions, frontmatter validation, category taxonomy |
|
|
14649
14691
|
|
|
14650
|
-
## Knowledge Skills - Infrastructure
|
|
14651
|
-
|
|
14692
|
+
## Knowledge Skills - Infrastructure
|
|
14652
14693
|
| Skill | Directory | Domain |
|
|
14653
14694
|
|-------|-----------|--------|
|
|
14654
14695
|
| **docker-devops** | `skills/docker-devops/` | Docker, deployment, infrastructure |
|
|
@@ -14658,8 +14699,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
14658
14699
|
| **testing-patterns** | `skills/testing-patterns/` | Multi-language TDD: pytest, vitest, phpunit, go test, flutter |
|
|
14659
14700
|
| **migration-patterns** | `skills/migration-patterns/` | Database migrations, API versioning, zero-downtime |
|
|
14660
14701
|
|
|
14661
|
-
## Knowledge Skills - AI/RAG
|
|
14662
|
-
|
|
14702
|
+
## Knowledge Skills - AI/RAG
|
|
14663
14703
|
| Skill | Directory | Domain |
|
|
14664
14704
|
|-------|-----------|--------|
|
|
14665
14705
|
| **rag-patterns** | `skills/rag-patterns/` | RAG pipelines, chunking, reranking, evaluation |
|
|
@@ -14669,8 +14709,7 @@ Hybrid skills combine slash-command invocation with domain knowledge that agents
|
|
|
14669
14709
|
| **content-moderation-patterns** | `skills/content-moderation-patterns/` | Two-stage moderation: pre-filter + LLM classifier; categories; thresholds |
|
|
14670
14710
|
| **model-routing-patterns** | `skills/model-routing-patterns/` | Haiku/Sonnet/Opus routing; escalation; sub-agent delegation; fallback |
|
|
14671
14711
|
|
|
14672
|
-
## Knowledge Skills - Process
|
|
14673
|
-
|
|
14712
|
+
## Knowledge Skills - Process
|
|
14674
14713
|
| Skill | Directory | Domain |
|
|
14675
14714
|
|-------|-----------|--------|
|
|
14676
14715
|
| **git-mastery** | `skills/git-mastery/` | Git workflows, branching, conflict resolution |
|
package/manifest.json
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
{
|
|
2
|
-
"version": "4.
|
|
2
|
+
"version": "4.22.0",
|
|
3
3
|
"components": {
|
|
4
4
|
"agents": {
|
|
5
5
|
"description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",
|
|
@@ -12,7 +12,7 @@
|
|
|
12
12
|
]
|
|
13
13
|
},
|
|
14
14
|
"skills": {
|
|
15
|
-
"description": "
|
|
15
|
+
"description": "109 skills (32 task + 31 hybrid + 46 knowledge)",
|
|
16
16
|
"path": "app/skills",
|
|
17
17
|
"target": ".claude/skills",
|
|
18
18
|
"type": "symlink",
|
|
@@ -137,7 +137,7 @@
|
|
|
137
137
|
"default": true
|
|
138
138
|
},
|
|
139
139
|
"skills": {
|
|
140
|
-
"description": "
|
|
140
|
+
"description": "109 skills (task, hybrid, knowledge)",
|
|
141
141
|
"default": true
|
|
142
142
|
},
|
|
143
143
|
"rules-common": {
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@softspark/ai-toolkit",
|
|
3
|
-
"version": "4.
|
|
4
|
-
"description": "AI coding toolkit:
|
|
3
|
+
"version": "4.22.0",
|
|
4
|
+
"description": "AI coding toolkit: 109 skills, 44 agents, 12 developer-tool integrations, recoverable native tool-output filtering, Claude Chat/Cowork export, safety constitution, SARIF audit, and signed npm provenance.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"claude",
|
|
7
7
|
"claude-code",
|
|
@@ -67,7 +67,10 @@
|
|
|
67
67
|
"generate:roo-rules": "python3 scripts/generate_roo_rules.py .",
|
|
68
68
|
"generate:augment-rules": "python3 scripts/generate_augment_rules.py .",
|
|
69
69
|
"generate:claude-app": "python3 scripts/claude_app.py sync",
|
|
70
|
-
"generate:all": "npm run generate:language-rules && npm run generate:claude-app && npm run generate:agents && npm run generate:opencode-agents && npm run generate:opencode-commands && npm run generate:cursor && npm run generate:cursor-mdc && npm run generate:windsurf && npm run generate:windsurf-rules && npm run generate:copilot && npm run generate:gemini && npm run generate:cline && npm run generate:roo && npm run generate:roo-rules && npm run generate:aider && npm run generate:augment-rules && npm run generate:llms"
|
|
70
|
+
"generate:all": "npm run generate:language-rules && npm run generate:claude-app && npm run generate:agents && npm run generate:opencode-agents && npm run generate:opencode-commands && npm run generate:cursor && npm run generate:cursor-mdc && npm run generate:windsurf && npm run generate:windsurf-rules && npm run generate:copilot && npm run generate:gemini && npm run generate:cline && npm run generate:roo && npm run generate:roo-rules && npm run generate:aider && npm run generate:augment-rules && npm run generate:llms && npm run generate:badges",
|
|
71
|
+
"generate:badges": "python3 scripts/sync_badges.py",
|
|
72
|
+
"surface": "python3 scripts/surface_manifest.py",
|
|
73
|
+
"surface:update": "python3 scripts/surface_manifest.py --update"
|
|
71
74
|
},
|
|
72
75
|
"files": [
|
|
73
76
|
"bin/",
|