@starlein/paperclip-plugin-company-wizard 0.4.13 → 0.4.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (120) hide show
  1. package/CHANGELOG.md +58 -0
  2. package/dist/manifest.js +1 -1
  3. package/dist/manifest.js.map +1 -1
  4. package/dist/worker.js +67 -72
  5. package/dist/worker.js.map +2 -2
  6. package/package.json +1 -1
  7. package/templates/bootstrap-instructions.md +2 -1
  8. package/templates/modules/accessibility/agents/engineer/skills/accessibility-audit.fallback.md +2 -2
  9. package/templates/modules/accessibility/agents/ui-designer/skills/accessibility-audit.fallback.md +2 -2
  10. package/templates/modules/accessibility/module.meta.json +1 -1
  11. package/templates/modules/accessibility/skills/accessibility-audit.bar.md +1 -1
  12. package/templates/modules/accessibility/skills/accessibility-audit.md +1 -1
  13. package/templates/modules/architecture-plan/agents/ceo/skills/architecture-plan.bar.md +2 -2
  14. package/templates/modules/architecture-plan/agents/ceo/skills/architecture-plan.fallback.md +2 -2
  15. package/templates/modules/architecture-plan/agents/engineer/skills/design-system.fallback.md +2 -2
  16. package/templates/modules/architecture-plan/agents/ui-designer/skills/architecture-plan.md +2 -2
  17. package/templates/modules/architecture-plan/agents/ui-designer/skills/design-system.md +2 -2
  18. package/templates/modules/architecture-plan/module.meta.json +2 -2
  19. package/templates/modules/architecture-plan/skills/architecture-plan.bar.md +1 -1
  20. package/templates/modules/architecture-plan/skills/architecture-plan.md +2 -2
  21. package/templates/modules/architecture-plan/skills/design-system.md +5 -5
  22. package/templates/modules/backlog/docs/backlog-template.md +1 -1
  23. package/templates/modules/brand-identity/agents/ceo/skills/brand-identity.fallback.md +2 -2
  24. package/templates/modules/brand-identity/agents/cmo/skills/brand-identity.fallback.md +2 -2
  25. package/templates/modules/brand-identity/module.meta.json +1 -1
  26. package/templates/modules/brand-identity/skills/brand-identity.bar.md +1 -1
  27. package/templates/modules/brand-identity/skills/brand-identity.md +3 -3
  28. package/templates/modules/build-api/skills/api-design.bar.md +1 -1
  29. package/templates/modules/build-api/skills/api-design.md +1 -1
  30. package/templates/modules/ci-cd/agents/devops/skills/ci-cd.md +1 -1
  31. package/templates/modules/ci-cd/agents/engineer/skills/ci-cd.fallback.md +2 -2
  32. package/templates/modules/ci-cd/module.meta.json +1 -1
  33. package/templates/modules/ci-cd/skills/ci-cd.bar.md +1 -1
  34. package/templates/modules/ci-cd/skills/ci-cd.md +4 -4
  35. package/templates/modules/codebase-onboarding/agents/ceo/skills/codebase-audit.fallback.md +5 -5
  36. package/templates/modules/codebase-onboarding/module.meta.json +1 -1
  37. package/templates/modules/codebase-onboarding/skills/codebase-audit.bar.md +1 -1
  38. package/templates/modules/codebase-onboarding/skills/codebase-audit.md +2 -2
  39. package/templates/modules/competitive-intel/agents/ceo/skills/competitive-tracking.fallback.md +2 -2
  40. package/templates/modules/competitive-intel/agents/cmo/skills/competitive-tracking.fallback.md +2 -2
  41. package/templates/modules/competitive-intel/agents/customer-success/skills/competitive-tracking.md +2 -2
  42. package/templates/modules/competitive-intel/agents/product-owner/skills/competitive-tracking.fallback.md +2 -2
  43. package/templates/modules/competitive-intel/module.meta.json +1 -1
  44. package/templates/modules/competitive-intel/skills/competitive-tracking.bar.md +2 -2
  45. package/templates/modules/competitive-intel/skills/competitive-tracking.md +2 -2
  46. package/templates/modules/dependency-management/agents/engineer/skills/dependency-audit.fallback.md +2 -2
  47. package/templates/modules/dependency-management/skills/dependency-audit.md +2 -2
  48. package/templates/modules/game-design/agents/ceo/skills/game-design.fallback.md +1 -1
  49. package/templates/modules/game-design/agents/game-designer/skills/game-design.md +2 -2
  50. package/templates/modules/game-design/module.meta.json +1 -1
  51. package/templates/modules/game-design/skills/audio-design.fallback.md +2 -2
  52. package/templates/modules/game-design/skills/audio-design.md +3 -3
  53. package/templates/modules/game-design/skills/game-design.bar.md +1 -1
  54. package/templates/modules/game-design/skills/game-design.md +3 -3
  55. package/templates/modules/game-design/skills/level-design.fallback.md +2 -2
  56. package/templates/modules/game-design/skills/level-design.md +4 -4
  57. package/templates/modules/github-repo/agents/engineer/skills/git-workflow.md +51 -60
  58. package/templates/modules/github-repo/docs/git-workflow.md +14 -16
  59. package/templates/modules/github-repo/module.meta.json +1 -1
  60. package/templates/modules/market-analysis/agents/ceo/skills/market-analysis.fallback.md +2 -2
  61. package/templates/modules/market-analysis/agents/cmo/skills/market-analysis.fallback.md +2 -2
  62. package/templates/modules/market-analysis/agents/product-owner/skills/market-analysis.fallback.md +2 -2
  63. package/templates/modules/market-analysis/agents/ux-researcher/skills/market-analysis.md +1 -1
  64. package/templates/modules/market-analysis/module.meta.json +1 -1
  65. package/templates/modules/market-analysis/skills/market-analysis.bar.md +1 -1
  66. package/templates/modules/market-analysis/skills/market-analysis.md +1 -1
  67. package/templates/modules/monitoring/agents/devops/skills/monitoring.md +1 -1
  68. package/templates/modules/monitoring/agents/engineer/skills/monitoring.fallback.md +2 -2
  69. package/templates/modules/monitoring/module.meta.json +1 -1
  70. package/templates/modules/monitoring/skills/monitoring.bar.md +1 -1
  71. package/templates/modules/monitoring/skills/monitoring.md +3 -3
  72. package/templates/modules/pr-review/README.md +1 -1
  73. package/templates/modules/pr-review/agents/code-reviewer/skills/code-review.md +6 -6
  74. package/templates/modules/pr-review/agents/devops/skills/infra-review.md +1 -1
  75. package/templates/modules/pr-review/agents/engineer/skills/pr-workflow.md +7 -7
  76. package/templates/modules/pr-review/agents/product-owner/skills/product-review.md +1 -1
  77. package/templates/modules/pr-review/agents/qa/skills/qa-review.md +6 -9
  78. package/templates/modules/pr-review/agents/security-engineer/skills/pr-security-review.md +1 -1
  79. package/templates/modules/pr-review/agents/ui-designer/skills/design-review.md +3 -3
  80. package/templates/modules/pr-review/agents/ux-researcher/skills/ux-review.md +2 -2
  81. package/templates/modules/pr-review/docs/pr-conventions.md +6 -4
  82. package/templates/modules/release-management/agents/ceo/skills/release-process.fallback.md +2 -2
  83. package/templates/modules/release-management/agents/engineer/skills/release-process.fallback.md +2 -2
  84. package/templates/modules/release-management/module.meta.json +1 -1
  85. package/templates/modules/release-management/skills/release-process.md +2 -2
  86. package/templates/modules/security-audit/agents/devops/skills/security-review.fallback.md +2 -2
  87. package/templates/modules/security-audit/agents/devops/skills/threat-model.fallback.md +2 -2
  88. package/templates/modules/security-audit/agents/engineer/skills/security-review.fallback.md +2 -2
  89. package/templates/modules/security-audit/agents/engineer/skills/threat-model.fallback.md +2 -2
  90. package/templates/modules/security-audit/module.meta.json +2 -2
  91. package/templates/modules/security-audit/skills/security-review.bar.md +1 -1
  92. package/templates/modules/security-audit/skills/security-review.md +1 -1
  93. package/templates/modules/security-audit/skills/threat-model.bar.md +1 -1
  94. package/templates/modules/security-audit/skills/threat-model.md +2 -2
  95. package/templates/modules/stall-detection/agents/ceo/skills/stall-detection.md +14 -2
  96. package/templates/modules/tech-stack/agents/ceo/skills/tech-stack.fallback.md +2 -2
  97. package/templates/modules/tech-stack/module.meta.json +1 -1
  98. package/templates/modules/tech-stack/skills/tech-stack.bar.md +1 -1
  99. package/templates/modules/tech-stack/skills/tech-stack.md +1 -1
  100. package/templates/modules/user-testing/agents/ceo/skills/user-testing.fallback.md +2 -2
  101. package/templates/modules/user-testing/agents/product-owner/skills/user-testing.fallback.md +2 -2
  102. package/templates/modules/user-testing/agents/qa/skills/user-testing.md +1 -1
  103. package/templates/modules/user-testing/agents/ux-researcher/skills/user-testing.fallback.md +2 -2
  104. package/templates/modules/user-testing/module.meta.json +1 -1
  105. package/templates/modules/user-testing/skills/user-testing.md +1 -1
  106. package/templates/modules/vision-workshop/agents/ceo/skills/vision-workshop.md +1 -1
  107. package/templates/modules/vision-workshop/agents/ux-researcher/skills/vision-workshop.md +1 -1
  108. package/templates/modules/vision-workshop/module.meta.json +1 -1
  109. package/templates/modules/website-relaunch/agents/ui-designer/skills/site-audit.md +1 -1
  110. package/templates/modules/website-relaunch/module.meta.json +7 -7
  111. package/templates/modules/website-relaunch/skills/design-ingestion.md +1 -1
  112. package/templates/modules/website-relaunch/skills/site-audit.md +1 -1
  113. package/templates/presets/build-game/preset.meta.json +6 -6
  114. package/templates/presets/repo-maintenance/preset.meta.json +5 -5
  115. package/templates/roles/cmo/AGENTS.md +1 -1
  116. package/templates/roles/code-reviewer/AGENTS.md +1 -1
  117. package/templates/roles/cto/AGENTS.md +4 -4
  118. package/templates/roles/devops/AGENTS.md +1 -1
  119. package/templates/roles/engineer/HEARTBEAT.md +1 -1
  120. package/templates/roles/ux-researcher/AGENTS.md +1 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@starlein/paperclip-plugin-company-wizard",
3
- "version": "0.4.13",
3
+ "version": "0.4.17",
4
4
  "type": "module",
5
5
  "description": "AI-powered wizard to bootstrap paperclip agent companies from composable templates (for latest paperclip version)",
6
6
  "repository": "https://github.com/starlein/paperclip-plugin-company-wizard",
@@ -31,7 +31,8 @@ Each section (Goals, Projects, Labels, Agents, Issues, Routines) contains object
31
31
 
32
32
  **Review workflow guardrail:**
33
33
 
34
- - Required PR reviews use the issue's `executionPolicy` review/approval stages, not @-mentions and not separate child review issues. When an engineer opens a PR, set the implementation issue to `in_review` with the resolved execution policy: QA review when present, Security review only for security-relevant changes, Product Owner approval for scope/intent, and a final Code Reviewer merge gate after verification is recorded. **Never list the issue's executor/author as a participant in any stage** — Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author stalls the issue in `in_review` (`422 No eligible approval participant`); the merge gate is therefore a non-author (the Code Reviewer), not the engineer who wrote the code. Each active participant records their decision through the normal issue update route (`approved` by PATCHing toward `done`, `changes_requested` by PATCHing back to `in_progress`), which is the issue-level reviewed/approved audit trail (`reviewed_by` / `approved_by` metadata where Paperclip exposes it). The Code Reviewer merge gate must verify the PR base against the project/worktree base ref shown in `heartbeat-context`, merge before approving, close/archive any isolated worktree when one exists and close-readiness allows it, and only then record final approval. Follow `docs/pr-conventions.md` when the PR review module is active.
34
+ - Required PR reviews use the issue's `executionPolicy` review/approval stages, not @-mentions and not separate child review issues. When an engineer opens a PR, set the implementation issue to `in_review` with the resolved execution policy: QA review when present, Security review only for security-relevant changes, Product Owner approval for scope/intent, and a final Code Reviewer merge gate after verification is recorded. **Never list the issue's executor/author as a participant in any stage** — Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author stalls the issue in `in_review` (`422 No eligible approval participant`); the merge gate is therefore a non-author (the Code Reviewer), not the engineer who wrote the code. Each active participant records their decision through the normal issue update route (`approved` by PATCHing toward `done`, `changes_requested` by PATCHing back to `in_progress`), which is the issue-level reviewed/approved audit trail (`reviewed_by` / `approved_by` metadata where Paperclip exposes it). The Code Reviewer merge gate must verify the PR base against the project/worktree base ref shown in `heartbeat-context`, merge before approving, close/archive any isolated worktree when one exists and close-readiness allows it, and only then record final approval. Follow `../../docs/pr-conventions.md` when the PR review module is active.
35
+ - **One PR ⇒ one issue ⇒ its policy stages. Never fan a single PR out into separate per-role issues linked by `blocks`, and never model the merge as a standalone "Code review and merge PR #N" issue that is `blockedBy` the review issues.** That fan-out strands the merge: once the review issues reach `done`, Paperclip does not reliably re-wake the blocked merge issue (worker heartbeats are off, and the liveness watchdog ignores a `blocked` issue whose blockers are all `done`), so the PR is never merged even when it is green and approved. The review/approval/merge-gate steps are **stages on the one implementation issue** that advance in place — the merge gate is the last stage on that same issue, not a separate blocked issue. If you inherit a stranded fan-out, the CEO stall-detection recovers it (*Stranded blocked*), but do not create it.
35
36
 
36
37
  **Secrets guardrail:**
37
38
 
@@ -4,11 +4,11 @@ The QA Engineer and UI Designer own accessibility auditing above you. You are th
4
4
 
5
5
  ## Accessibility Audit (Fallback)
6
6
 
7
- 1. If no `docs/ACCESSIBILITY-AUDIT.md` exists and nobody has started:
7
+ 1. If no `../../docs/ACCESSIBILITY-AUDIT.md` exists and nobody has started:
8
8
  - Check semantic HTML usage in key pages/components
9
9
  - Verify form labels and ARIA attributes are correct
10
10
  - Run automated accessibility checks if tooling is available
11
- - Document in `docs/ACCESSIBILITY-AUDIT.md`
11
+ - Document in `../../docs/ACCESSIBILITY-AUDIT.md`
12
12
  - Tag QA or UI Designer to expand the audit
13
13
  2. If QA or UI Designer is active, skip this entirely.
14
14
 
@@ -4,11 +4,11 @@ The QA Engineer owns accessibility auditing above you. You are the fallback —
4
4
 
5
5
  ## Accessibility Audit (Fallback)
6
6
 
7
- 1. If no `docs/ACCESSIBILITY-AUDIT.md` exists and QA hasn't started:
7
+ 1. If no `../../docs/ACCESSIBILITY-AUDIT.md` exists and QA hasn't started:
8
8
  - Review color contrast and visual accessibility of the design system
9
9
  - Check that focus states are designed for all interactive components
10
10
  - Verify the design system includes accessible component patterns
11
- - Document in `docs/ACCESSIBILITY-AUDIT.md`
11
+ - Document in `../../docs/ACCESSIBILITY-AUDIT.md`
12
12
  - Tag QA to expand with keyboard and screen reader testing
13
13
  2. If QA is active, skip this entirely.
14
14
 
@@ -16,7 +16,7 @@
16
16
  {
17
17
  "title": "Conduct initial accessibility audit",
18
18
  "assignTo": "capability:accessibility-audit",
19
- "description": "Audit the project for WCAG 2.2 compliance: check semantic HTML, keyboard navigation, color contrast, ARIA usage, and screen reader compatibility. Document findings and remediation plan in docs/ACCESSIBILITY-AUDIT.md."
19
+ "description": "Audit the project for WCAG 2.2 compliance: check semantic HTML, keyboard navigation, color contrast, ARIA usage, and screen reader compatibility. Document findings and remediation plan in ../../docs/ACCESSIBILITY-AUDIT.md."
20
20
  }
21
21
  ]
22
22
  }
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good accessibility audit:
4
4
 
5
- - A `docs/ACCESSIBILITY-AUDIT.md` covering WCAG 2.2 AA across: semantic HTML, keyboard navigation, colour contrast, ARIA usage, images/media, forms, and zoom/responsive behaviour.
5
+ - A `../../docs/ACCESSIBILITY-AUDIT.md` covering WCAG 2.2 AA across: semantic HTML, keyboard navigation, colour contrast, ARIA usage, images/media, forms, and zoom/responsive behaviour.
6
6
  - Each finding has a severity (Critical / Major / Minor), a specific location, and a concrete remediation — Critical and Major findings have follow-up issues created.
7
7
 
8
8
  Not done:
@@ -5,7 +5,7 @@ You own accessibility compliance. This ensures the product is usable by everyone
5
5
  ## Accessibility Audit Process
6
6
 
7
7
  1. Review the project for WCAG 2.2 compliance at Level AA (minimum).
8
- 2. Check and document in `docs/ACCESSIBILITY-AUDIT.md`:
8
+ 2. Check and document in `../../docs/ACCESSIBILITY-AUDIT.md`:
9
9
  - **Semantic HTML**: Correct heading hierarchy, landmark regions, form labels
10
10
  - **Keyboard navigation**: All interactive elements focusable and operable, logical tab order, visible focus indicators
11
11
  - **Color and contrast**: Minimum 4.5:1 for normal text, 3:1 for large text, no color-only information
@@ -1,11 +1,11 @@
1
1
  ## Architecture Plan — Done Bar (CEO Fallback)
2
2
 
3
3
  **Done:**
4
- - `docs/ARCHITECTURE.md` exists with at least: a brief system overview (what the system does, its main components), the primary data flows, and a clear note that this is a CEO-generated placeholder pending engineer review.
4
+ - `../../docs/ARCHITECTURE.md` exists with at least: a brief system overview (what the system does, its main components), the primary data flows, and a clear note that this is a CEO-generated placeholder pending engineer review.
5
5
  - A follow-up issue exists, assigned to an engineer or the architecture-plan capability, to complete the full architecture document.
6
6
 
7
7
  **Not done:**
8
- - No `docs/ARCHITECTURE.md` exists at all.
8
+ - No `../../docs/ARCHITECTURE.md` exists at all.
9
9
  - The document exists but contains no actionable overview (placeholder text only).
10
10
  - No follow-up issue was created for the engineer to complete the work.
11
11
 
@@ -4,9 +4,9 @@ The Engineer primarily owns system architecture. You are the fallback — step i
4
4
 
5
5
  ## Architecture Plan (Fallback)
6
6
 
7
- 1. If no `docs/ARCHITECTURE.md` exists and no engineer has started:
7
+ 1. If no `../../docs/ARCHITECTURE.md` exists and no engineer has started:
8
8
  - Sketch a minimal architecture based on the tech stack and project goals
9
- - Document in `docs/ARCHITECTURE.md`
9
+ - Document in `../../docs/ARCHITECTURE.md`
10
10
  - Create an issue for the engineer to review and expand
11
11
  2. If an engineer is active, skip this entirely.
12
12
 
@@ -4,10 +4,10 @@ The UI Designer primarily owns the design system. You are the fallback — set u
4
4
 
5
5
  ## Design System (Fallback)
6
6
 
7
- 1. If no `docs/DESIGN-SYSTEM.md` exists and no UI Designer has started:
7
+ 1. If no `../../docs/DESIGN-SYSTEM.md` exists and no UI Designer has started:
8
8
  - Choose a sensible default palette (e.g., Tailwind defaults or a minimal custom set)
9
9
  - Define basic typography and spacing scales
10
- - Document in `docs/DESIGN-SYSTEM.md`
10
+ - Document in `../../docs/DESIGN-SYSTEM.md`
11
11
  - Create an issue for a UI Designer to review and expand if one is hired later
12
12
  2. If a UI Designer is active, skip this entirely.
13
13
 
@@ -4,7 +4,7 @@ When the architecture plan is being created, contribute the UI/frontend perspect
4
4
 
5
5
  ## UI Architecture Contributions
6
6
 
7
- 1. Check that `docs/ARCHITECTURE.md` exists. If it does not exist yet, the engineer's architecture-plan task has not completed — leave an issue comment ("Waiting for engineer to complete docs/ARCHITECTURE.md before adding UI layer") and do not close this issue yet. Check back on your next heartbeat.
7
+ 1. Check that `../../docs/ARCHITECTURE.md` exists. If it does not exist yet, the engineer's architecture-plan task has not completed — leave an issue comment ("Waiting for engineer to complete ../../docs/ARCHITECTURE.md before adding UI layer") and do not close this issue yet. Check back on your next heartbeat.
8
8
 
9
9
  If an Engineer is defining the architecture, coordinate with them on:
10
10
  - **Frontend component structure**: Page layout, shared components, routing
@@ -12,7 +12,7 @@ If an Engineer is defining the architecture, coordinate with them on:
12
12
  - **Asset pipeline**: Images, icons, fonts — how they're managed and optimized
13
13
  - **Responsive strategy**: How layouts adapt across breakpoints
14
14
 
15
- Document your UI architecture notes in `docs/ARCHITECTURE.md` under a `## UI Architecture` section.
15
+ Document your UI architecture notes in `../../docs/ARCHITECTURE.md` under a `## UI Architecture` section.
16
16
 
17
17
  ## Rules
18
18
 
@@ -5,8 +5,8 @@ You own the visual design system. Establish the foundational patterns that ensur
5
5
  ## Design System Process
6
6
 
7
7
  1. Review the company goal, brand context, and target audience
8
- 2. If `docs/BRAND-IDENTITY.md` exists, use it as the authoritative source for color palette, typography, and brand voice. Do not invent a palette that contradicts established brand identity.
9
- 3. Define and document in `docs/DESIGN-SYSTEM.md`:
8
+ 2. If `../../docs/BRAND-IDENTITY.md` exists, use it as the authoritative source for color palette, typography, and brand voice. Do not invent a palette that contradicts established brand identity.
9
+ 3. Define and document in `../../docs/DESIGN-SYSTEM.md`:
10
10
  - **Color palette**: Primary, secondary, accent, semantic (success, error, warning), neutrals
11
11
  - **Typography**: Font families, scale (heading/body/caption sizes), weights, line heights
12
12
  - **Spacing**: Base unit and scale (4px, 8px, 12px, 16px, 24px, 32px, 48px, 64px)
@@ -26,12 +26,12 @@
26
26
  {
27
27
  "title": "Design initial system architecture",
28
28
  "assignTo": "capability:architecture-plan",
29
- "description": "Based on the tech stack decisions, design the system architecture: component structure, data flow, API boundaries, and deployment model. Document in docs/ARCHITECTURE.md."
29
+ "description": "Based on the tech stack decisions, design the system architecture: component structure, data flow, API boundaries, and deployment model. Document in ../../docs/ARCHITECTURE.md."
30
30
  },
31
31
  {
32
32
  "title": "Define design system and visual language",
33
33
  "assignTo": "capability:design-system",
34
- "description": "Establish the visual foundation: color palette, typography, spacing scale, component patterns, and brand guidelines. Document in docs/DESIGN-SYSTEM.md."
34
+ "description": "Establish the visual foundation: color palette, typography, spacing scale, component patterns, and brand guidelines. Document in ../../docs/DESIGN-SYSTEM.md."
35
35
  }
36
36
  ]
37
37
  }
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good architecture plan:
4
4
 
5
- - A `docs/ARCHITECTURE.md` with a system overview (text/ASCII component diagram), data flow through the system, API boundaries (internal and external), deployment model, and key decisions recorded in ADR style with rationale.
5
+ - A `../../docs/ARCHITECTURE.md` with a system overview (text/ASCII component diagram), data flow through the system, API boundaries (internal and external), deployment model, and key decisions recorded in ADR style with rationale.
6
6
  - Decomposed into concrete implementation issues for foundational scaffolding so work can start incrementally.
7
7
 
8
8
  Not done:
@@ -4,8 +4,8 @@ You own system architecture. Design the structure that implements the tech stack
4
4
 
5
5
  ## Architecture Planning Process
6
6
 
7
- 1. If `docs/TECH-STACK.md` exists, review it alongside the project requirements. Otherwise, gather tech stack context from the codebase and project docs.
8
- 2. Design and document in `docs/ARCHITECTURE.md`:
7
+ 1. If `../../docs/TECH-STACK.md` exists, review it alongside the project requirements. Otherwise, gather tech stack context from the codebase and project docs.
8
+ 2. Design and document in `../../docs/ARCHITECTURE.md`:
9
9
  - **System overview**: High-level component diagram (describe in text/ASCII)
10
10
  - **Component structure**: Modules, services, or packages and their responsibilities
11
11
  - **Data flow**: How data moves through the system
@@ -4,9 +4,9 @@ You are establishing the project's design system foundations when no UI Designer
4
4
 
5
5
  ## Steps
6
6
 
7
- 1. Read `docs/TECH-STACK.md` if it exists to understand the frontend framework and styling approach.
8
- 2. Read `docs/BRAND-IDENTITY.md` if it exists for color palette, typography, and brand direction.
9
- 3. If `docs/DESIGN-SYSTEM.md` does not exist, create it using `docs/design-system-template.md` as a starting point.
7
+ 1. Read `../../docs/TECH-STACK.md` if it exists to understand the frontend framework and styling approach.
8
+ 2. Read `../../docs/BRAND-IDENTITY.md` if it exists for color palette, typography, and brand direction.
9
+ 3. If `../../docs/DESIGN-SYSTEM.md` does not exist, create it using `../../docs/design-system-template.md` as a starting point.
10
10
  4. Define the minimum viable token set:
11
11
  - **Colors**: primary, secondary, background, surface, text, error/warning/success. Use the brand palette if available, otherwise choose accessible defaults (WCAG AA contrast ratio ≥ 4.5:1 for text).
12
12
  - **Typography**: 2–3 font sizes (body, heading, small), font family (system stack if no brand font specified), line heights.
@@ -21,5 +21,5 @@ You are establishing the project's design system foundations when no UI Designer
21
21
 
22
22
  - Keep it practical over perfect. Consistent tokens are more valuable than a comprehensive design system.
23
23
  - Do not create visual assets (icons, illustrations) — document where placeholders should go.
24
- - Reference `docs/ARCHITECTURE.md` for the component hierarchy if it exists.
25
- - If `docs/DESIGN-SYSTEM.md` already exists (a UI Designer ran first), review it for engineering feasibility and add implementation notes — do not overwrite their work.
24
+ - Reference `../../docs/ARCHITECTURE.md` for the component hierarchy if it exists.
25
+ - If `../../docs/DESIGN-SYSTEM.md` already exists (a UI Designer ran first), review it for engineering feasibility and add implementation notes — do not overwrite their work.
@@ -39,7 +39,7 @@ _Summary of current backlog health. Update on each heartbeat cycle._
39
39
  - **Ready assigned issues:** _(count by owner)_
40
40
  - **Unassigned todo issues:** _(count; should normally be 0 except items without a suitable owner)_
41
41
  - **In-progress issues:** _(count)_
42
- - **Health:** _(healthy / thin / empty / bloated — see docs/backlog-process.md)_
42
+ - **Health:** _(healthy / thin / empty / bloated — see ../../docs/backlog-process.md)_
43
43
 
44
44
  ## Decisions Log
45
45
 
@@ -4,11 +4,11 @@ The UI Designer and CMO both own brand identity above you. You are the last-reso
4
4
 
5
5
  ## Brand Identity (Fallback)
6
6
 
7
- 1. If no `docs/BRAND-IDENTITY.md` exists and no designer has started:
7
+ 1. If no `../../docs/BRAND-IDENTITY.md` exists and no designer has started:
8
8
  - Set up a minimal brand placeholder with basic defaults
9
9
  - Choose a neutral color palette (1 primary, 1 accent, 1 neutral)
10
10
  - Pick a safe, widely available font pairing (e.g., Inter + system serif)
11
- - Document in `docs/BRAND-IDENTITY.md` and mark all choices as **provisional**
11
+ - Document in `../../docs/BRAND-IDENTITY.md` and mark all choices as **provisional**
12
12
  - Create an issue for the ui-designer or CMO to review and expand the brand guidelines
13
13
  2. If a ui-designer or CMO is active, skip this entirely.
14
14
 
@@ -4,11 +4,11 @@ The UI Designer primarily owns brand identity and visual guidelines. You are the
4
4
 
5
5
  ## Brand Identity (Fallback)
6
6
 
7
- 1. If no `docs/BRAND-IDENTITY.md` exists and no designer has started:
7
+ 1. If no `../../docs/BRAND-IDENTITY.md` exists and no designer has started:
8
8
  - Define brand positioning: mission statement, target audience, key differentiators
9
9
  - Establish tone of voice and communication guidelines
10
10
  - Set up a minimal color palette and typography recommendation
11
- - Document in `docs/BRAND-IDENTITY.md` and mark visual choices as **provisional**
11
+ - Document in `../../docs/BRAND-IDENTITY.md` and mark visual choices as **provisional**
12
12
  - Create an issue for the designer to refine visual identity
13
13
  2. If a designer is active, skip this entirely.
14
14
 
@@ -16,7 +16,7 @@
16
16
  {
17
17
  "title": "Define brand identity and visual guidelines",
18
18
  "assignTo": "capability:brand-identity",
19
- "description": "Create the brand book: logo usage, color palette, typography, iconography, and tone-of-voice guidelines. Document everything in docs/BRAND-IDENTITY.md."
19
+ "description": "Create the brand book: logo usage, color palette, typography, iconography, and tone-of-voice guidelines. Document everything in ../../docs/BRAND-IDENTITY.md."
20
20
  }
21
21
  ]
22
22
  }
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good brand identity:
4
4
 
5
- - A `docs/BRAND-IDENTITY.md` with concrete values and rationale for every element: colour palette (hex/RGB values with contrast ratios), typography (typefaces, size scale, weight usage), logo usage rules (clear space, do's and don'ts), iconography style, and tone of voice.
5
+ - A `../../docs/BRAND-IDENTITY.md` with concrete values and rationale for every element: colour palette (hex/RGB values with contrast ratios), typography (typefaces, size scale, weight usage), logo usage rules (clear space, do's and don'ts), iconography style, and tone of voice.
6
6
  - If a tech stack exists, a design tokens file (CSS custom properties or JSON) matching the chosen stack, so the identity is immediately usable in code.
7
7
 
8
8
  Not done:
@@ -14,12 +14,12 @@ You own the company's visual identity and brand guidelines. Define a cohesive br
14
14
  - **Logo usage**: Clear space, minimum size, do's and don'ts
15
15
  - **Iconography**: Style, stroke weight, grid alignment
16
16
  - **Tone of voice**: Communication style, vocabulary, personality
17
- 3. Document everything in `docs/BRAND-IDENTITY.md`:
18
- - Use `docs/brand-identity-template.md` as a starting point
17
+ 3. Document everything in `../../docs/BRAND-IDENTITY.md`:
18
+ - Use `../../docs/brand-identity-template.md` as a starting point
19
19
  - Fill in all sections with concrete values and rationale
20
20
  - Include visual examples or references where possible
21
21
  4. Create initial design tokens if a tech stack exists:
22
- - If `docs/TECH-STACK.md` is present, produce a tokens file (CSS custom properties or JSON) matching the chosen stack
22
+ - If `../../docs/TECH-STACK.md` is present, produce a tokens file (CSS custom properties or JSON) matching the chosen stack
23
23
  - Reference the design-system module if the architecture-plan module exists
24
24
 
25
25
  ## Rules
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good API design:
4
4
 
5
- - A `docs/API-DESIGN.md` with a resource model, full endpoint inventory (method, path, auth requirement), authentication strategy, error-handling conventions (consistent error shape), and pagination approach.
5
+ - A `../../docs/API-DESIGN.md` with a resource model, full endpoint inventory (method, path, auth requirement), authentication strategy, error-handling conventions (consistent error shape), and pagination approach.
6
6
  - Every endpoint has: description, parameter types and constraints, request/response schema, example request/response, and possible error codes — generated from source annotations (OpenAPI/Swagger), not maintained by hand.
7
7
 
8
8
  Not done:
@@ -35,7 +35,7 @@ When designing the data model:
35
35
 
36
36
  ## Output Artifacts
37
37
 
38
- Document your API design decisions in `docs/API-DESIGN.md`:
38
+ Document your API design decisions in `../../docs/API-DESIGN.md`:
39
39
  - Resource model (entities and relationships)
40
40
  - Endpoint inventory (method, path, description, auth requirement)
41
41
  - Authentication strategy
@@ -15,7 +15,7 @@ You are the DevOps engineer and CI/CD is your core domain. You own the full pipe
15
15
  - Run smoke tests after deployment
16
16
  4. Add status badges to the project README
17
17
  5. Set up infrastructure-as-code for pipeline resources (runners, caches, secrets)
18
- 6. Document the full pipeline in `docs/CI-CD.md`
18
+ 6. Document the full pipeline in `../../docs/CI-CD.md`
19
19
 
20
20
  ## Rules
21
21
 
@@ -7,7 +7,7 @@ The DevOps engineer primarily owns CI/CD pipelines. You are the fallback — ste
7
7
  1. If no CI workflow exists and DevOps hasn't started:
8
8
  - Create a basic CI workflow: lint + test on PRs, build on push to the default branch
9
9
  - Use standard caching and pinned action versions
10
- - Document the setup in `docs/CI-CD.md` and mark the setup as **provisional** — a devops agent should review and complete the production configuration.
10
+ - Document the setup in `../../docs/CI-CD.md` and mark the setup as **provisional** — a devops agent should review and complete the production configuration.
11
11
  - Mark the pipeline as **provisional** — it needs DevOps review for CD, caching optimization, and security hardening
12
12
  2. If DevOps is active, skip this entirely.
13
13
 
@@ -16,4 +16,4 @@ The DevOps engineer primarily owns CI/CD pipelines. You are the fallback — ste
16
16
  - This is a safety net. Set up the basics — lint, test, build.
17
17
  - Skip CD (deployment) — that requires infrastructure knowledge best left to DevOps.
18
18
  - Let DevOps own pipeline optimization, deployment, and ongoing maintenance.
19
- - Reference `docs/CI-CD.md` for all configuration details so the devops agent can pick up where you left off.
19
+ - Reference `../../docs/CI-CD.md` for all configuration details so the devops agent can pick up where you left off.
@@ -18,7 +18,7 @@
18
18
  {
19
19
  "title": "Set up CI/CD pipeline",
20
20
  "assignTo": "capability:ci-cd",
21
- "description": "Configure continuous integration (lint, test, build) and deployment pipeline. Document the setup in docs/CI-CD.md. Use GitHub Actions or equivalent."
21
+ "description": "Configure continuous integration (lint, test, build) and deployment pipeline. Document the setup in ../../docs/CI-CD.md. Use GitHub Actions or equivalent."
22
22
  },
23
23
  {
24
24
  "title": "Add linter and configure lint rules",
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good CI/CD setup:
4
4
 
5
- - A working pipeline with a CI stage (lint → typecheck → test on every PR and push to the default branch) and a CD stage (deploy on merge to the default branch, smoke tests after deployment), documented in `docs/CI-CD.md` with status badges in the README.
5
+ - A working pipeline with a CI stage (lint → typecheck → test on every PR and push to the default branch) and a CD stage (deploy on merge to the default branch, smoke tests after deployment), documented in `../../docs/CI-CD.md` with status badges in the README.
6
6
  - Pipelines complete in under 5 minutes (dependency caching in place), action versions pinned to full SHAs, and all secrets stored in GitHub Secrets or equivalent — none in workflow files.
7
7
 
8
8
  Not done:
@@ -1,6 +1,6 @@
1
1
  # Skill: CI/CD Pipeline
2
2
 
3
- You manage continuous integration and deployment pipelines. Follow the conventions in `docs/CI-CD.md` in the project root.
3
+ You manage continuous integration and deployment pipelines. Follow the conventions in `../../docs/CI-CD.md` in the project root.
4
4
 
5
5
  ## Setup Steps
6
6
 
@@ -13,10 +13,10 @@ You manage continuous integration and deployment pipelines. Follow the conventio
13
13
  - Trigger on merge to the default branch
14
14
  - Deploy to the target environment
15
15
  - Run smoke tests after deployment
16
- 4. Pin every third-party action to a full commit SHA (`uses: actions/checkout@<sha>`, not `@v4`). SHA pinning prevents supply-chain attacks from a compromised action version tag. Record the pinned SHAs in `docs/CI-CD.md` → *Pinned Action SHAs*.
17
- 5. Document the rollback procedure in `docs/CI-CD.md` → *Rollback*: how to revert a failed deploy (e.g., `git revert` + redeploy, or infra rollback command), how to verify the rollback succeeded, and the recovery SLA. A pipeline with no documented rollback path is not done.
16
+ 4. Pin every third-party action to a full commit SHA (`uses: actions/checkout@<sha>`, not `@v4`). SHA pinning prevents supply-chain attacks from a compromised action version tag. Record the pinned SHAs in `../../docs/CI-CD.md` → *Pinned Action SHAs*.
17
+ 5. Document the rollback procedure in `../../docs/CI-CD.md` → *Rollback*: how to revert a failed deploy (e.g., `git revert` + redeploy, or infra rollback command), how to verify the rollback succeeded, and the recovery SLA. A pipeline with no documented rollback path is not done.
18
18
  6. Add status badges to the project README
19
- 7. Document the full pipeline in `docs/CI-CD.md`
19
+ 7. Document the full pipeline in `../../docs/CI-CD.md`
20
20
 
21
21
  ## Ongoing Health Checks
22
22
 
@@ -4,9 +4,9 @@ The Engineer primarily owns codebase auditing and health. You are the fallback
4
4
 
5
5
  ## Codebase Audit (Fallback)
6
6
 
7
- 1. If no `docs/CODEBASE-AUDIT.md` exists and the Engineer hasn't started:
7
+ 1. If no `../../docs/CODEBASE-AUDIT.md` exists and the Engineer hasn't started:
8
8
  - Read the project structure and key configuration files
9
- - Write a high-level architecture overview in `docs/CODEBASE-AUDIT.md`
9
+ - Write a high-level architecture overview in `../../docs/CODEBASE-AUDIT.md`
10
10
  - List obvious tech debt items visible from a surface-level read
11
11
  - Mark the document as **provisional** — it needs a thorough engineering review
12
12
  2. If the Engineer is active, skip this entirely.
@@ -20,10 +20,10 @@ The Engineer primarily owns codebase auditing and health. You are the fallback
20
20
 
21
21
  ## Health Check Refresh (follow-up runs)
22
22
 
23
- When `docs/CODEBASE-AUDIT.md` already exists (a prior audit was completed) and you are assigned a follow-up health check:
23
+ When `../../docs/CODEBASE-AUDIT.md` already exists (a prior audit was completed) and you are assigned a follow-up health check:
24
24
 
25
- 1. Read the existing `docs/CODEBASE-AUDIT.md`.
25
+ 1. Read the existing `../../docs/CODEBASE-AUDIT.md`.
26
26
  2. Run a quick surface scan: `find . -name "*.js" -o -name "*.ts" | head -30` to sense if new files or directories have appeared since the last audit date.
27
27
  3. Note any obviously new areas (new top-level directories, new dependency groups) not present in the existing document.
28
- 4. Add a dated `## Health Check — <date>` section to `docs/CODEBASE-AUDIT.md` listing: files reviewed, new areas identified, and a note that deep analysis was not performed (this is a CEO fallback — escalate to an engineer for full re-audit if significant new areas were found).
28
+ 4. Add a dated `## Health Check — <date>` section to `../../docs/CODEBASE-AUDIT.md` listing: files reviewed, new areas identified, and a note that deep analysis was not performed (this is a CEO fallback — escalate to an engineer for full re-audit if significant new areas were found).
29
29
  5. Mark the issue done.
@@ -18,7 +18,7 @@
18
18
  {
19
19
  "title": "Audit codebase and document architecture",
20
20
  "assignTo": "capability:codebase-audit",
21
- "description": "Read the existing codebase, map the architecture, identify tech debt hotspots and test coverage gaps. Document findings in docs/CODEBASE-AUDIT.md. Create follow-up issues for cleanup opportunities."
21
+ "description": "Read the existing codebase, map the architecture, identify tech debt hotspots and test coverage gaps. Document findings in ../../docs/CODEBASE-AUDIT.md. Create follow-up issues for cleanup opportunities."
22
22
  }
23
23
  ]
24
24
  }
@@ -2,7 +2,7 @@
2
2
 
3
3
  A good codebase audit:
4
4
 
5
- - A `docs/CODEBASE-AUDIT.md` with architecture overview (layers, key components, data flow), tech stack summary, tech debt inventory ranked by severity (critical / major / minor), test coverage assessment identifying untested paths, and recommended cleanup priorities.
5
+ - A `../../docs/CODEBASE-AUDIT.md` with architecture overview (layers, key components, data flow), tech stack summary, tech debt inventory ranked by severity (critical / major / minor), test coverage assessment identifying untested paths, and recommended cleanup priorities.
6
6
  - Followed by concrete, scoped follow-up issues — one per fix — for the top cleanup opportunities.
7
7
 
8
8
  Not done:
@@ -8,7 +8,7 @@ Use this when assigned a codebase-audit issue, codebase-health routine, or expli
8
8
 
9
9
  ## Initial Audit
10
10
 
11
- Run this when `docs/CODEBASE-AUDIT.md` does not yet exist.
11
+ Run this when `../../docs/CODEBASE-AUDIT.md` does not yet exist.
12
12
 
13
13
  1. Map the project structure — identify key directories, entry points, and architectural layers.
14
14
  2. Read configuration files (package.json, tsconfig, Dockerfile, CI configs) to understand the tech stack and build pipeline.
@@ -16,7 +16,7 @@ Run this when `docs/CODEBASE-AUDIT.md` does not yet exist.
16
16
  4. Assess test coverage — untested paths, missing tests, weak assertions.
17
17
  5. Identify tech debt — dead code, unused exports, complex functions, inconsistent patterns, duplicated logic.
18
18
  6. Check for code quality issues — long files, deep nesting, too many parameters, missing boundary error handling.
19
- 7. Document findings in `docs/CODEBASE-AUDIT.md` or an issue document/work product:
19
+ 7. Document findings in `../../docs/CODEBASE-AUDIT.md` or an issue document/work product:
20
20
  - architecture overview
21
21
  - tech stack summary
22
22
  - tech debt inventory ranked by severity
@@ -4,10 +4,10 @@ The Customer Success Manager, CMO, and Product Owner own competitive intelligenc
4
4
 
5
5
  ## Competitive Tracking (Fallback)
6
6
 
7
- 1. If no `docs/COMPETITIVE-LANDSCAPE.md` exists and nobody has started:
7
+ 1. If no `../../docs/COMPETITIVE-LANDSCAPE.md` exists and nobody has started:
8
8
  - Identify the top 2-3 competitors based on the company goal
9
9
  - Write a brief comparison: what they do, how we differ
10
- - Document in `docs/COMPETITIVE-LANDSCAPE.md`
10
+ - Document in `../../docs/COMPETITIVE-LANDSCAPE.md`
11
11
  - Tag the Customer Success Manager, CMO, or Product Owner to expand
12
12
  2. If any of the above roles are active, skip this entirely.
13
13
 
@@ -4,9 +4,9 @@ The Customer Success Manager owns competitive intelligence above you. You are th
4
4
 
5
5
  ## Competitive Tracking (Fallback)
6
6
 
7
- 1. If no `docs/COMPETITIVE-LANDSCAPE.md` exists and the Customer Success Manager hasn't started:
7
+ 1. If no `../../docs/COMPETITIVE-LANDSCAPE.md` exists and the Customer Success Manager hasn't started:
8
8
  - Research competitors from a marketing perspective: positioning, messaging, content strategy
9
- - Document in `docs/COMPETITIVE-LANDSCAPE.md`
9
+ - Document in `../../docs/COMPETITIVE-LANDSCAPE.md`
10
10
  - Focus on differentiation opportunities for go-to-market
11
11
  - Tag the Customer Success Manager to expand with customer-facing insights
12
12
  2. If the Customer Success Manager is active, skip this entirely.
@@ -4,8 +4,8 @@ You own competitive intelligence from the customer perspective. You hear what cu
4
4
 
5
5
  ## Competitive Tracking Process
6
6
 
7
- 1. Review the company goal and existing market analysis — if `docs/MARKET-ANALYSIS.md` exists, use it as context.
8
- 2. Research and document in `docs/COMPETITIVE-LANDSCAPE.md`:
7
+ 1. Review the company goal and existing market analysis — if `../../docs/MARKET-ANALYSIS.md` exists, use it as context.
8
+ 2. Research and document in `../../docs/COMPETITIVE-LANDSCAPE.md`:
9
9
  - **Competitor profiles**: For each key competitor (3-5), document:
10
10
  - Product overview and target audience
11
11
  - What customers say about switching to/from them
@@ -4,12 +4,12 @@ A specialist in competitive intelligence (Customer Success or CMO) is handling p
4
4
 
5
5
  ## Steps
6
6
 
7
- 1. Read `docs/COMPETITIVE-INTEL.md` if it exists. If it does not, check back after the primary competitive-tracking agent has completed their initial audit.
7
+ 1. Read `../../docs/COMPETITIVE-INTEL.md` if it exists. If it does not, check back after the primary competitive-tracking agent has completed their initial audit.
8
8
  2. Review recent competitor changes for product-roadmap implications:
9
9
  - New features from competitors that close a gap with your product → create a backlog issue "Evaluate [feature] parity with [competitor]" with the relevant section from COMPETITIVE-INTEL.md.
10
10
  - Competitor pricing or positioning shifts that affect your value proposition → add a comment to the relevant goal or create an issue for CEO/CMO review.
11
11
  3. Update the product backlog with any priority changes driven by competitive pressure (coordinate with CEO before reprioritising existing high-priority items).
12
- 4. Add a `## Product Implications` section to `docs/COMPETITIVE-INTEL.md` if it doesn't already exist, noting your recommendations.
12
+ 4. Add a `## Product Implications` section to `../../docs/COMPETITIVE-INTEL.md` if it doesn't already exist, noting your recommendations.
13
13
  5. Mark the issue done.
14
14
 
15
15
  ## Rules
@@ -17,7 +17,7 @@
17
17
  {
18
18
  "title": "Build initial competitive landscape",
19
19
  "assignTo": "capability:competitive-tracking",
20
- "description": "Research key competitors: their positioning, strengths, weaknesses, pricing, and recent moves. Document a living competitive landscape in docs/COMPETITIVE-LANDSCAPE.md with actionable differentiation insights."
20
+ "description": "Research key competitors: their positioning, strengths, weaknesses, pricing, and recent moves. Document a living competitive landscape in ../../docs/COMPETITIVE-LANDSCAPE.md with actionable differentiation insights."
21
21
  }
22
22
  ]
23
23
  }
@@ -1,11 +1,11 @@
1
1
  ## Competitive Tracking — Done Bar
2
2
 
3
3
  **Done:**
4
- - `docs/COMPETITIVE-INTEL.md` exists with a profile for each tracked competitor that includes: product positioning, key differentiators, pricing model (if public), and a specific takeaway for your product ("what this means for us").
4
+ - `../../docs/COMPETITIVE-INTEL.md` exists with a profile for each tracked competitor that includes: product positioning, key differentiators, pricing model (if public), and a specific takeaway for your product ("what this means for us").
5
5
  - Differentiation opportunities are explicitly named — not just competitor feature lists, but concrete gaps or advantages your product has or could develop.
6
6
  - Each competitor profile was updated within the last tracking cycle (not stale from a previous run).
7
7
 
8
8
  **Not done:**
9
9
  - Competitor profiles are feature lists with no positioning takeaway.
10
10
  - "Differentiation opportunities" section is absent or contains only generic observations ("we should improve UX").
11
- - `docs/COMPETITIVE-INTEL.md` was not updated this run (routine ran but no document was touched).
11
+ - `../../docs/COMPETITIVE-INTEL.md` was not updated this run (routine ran but no document was touched).
@@ -4,8 +4,8 @@ You own competitive intelligence. This is a living analysis — profiles evolve
4
4
 
5
5
  ## Competitive Tracking Process
6
6
 
7
- 1. Review the company goal and existing market analysis — if `docs/MARKET-ANALYSIS.md` exists, use it as context. Otherwise, start from the project description.
8
- 2. Research and document in `docs/COMPETITIVE-LANDSCAPE.md`:
7
+ 1. Review the company goal and existing market analysis — if `../../docs/MARKET-ANALYSIS.md` exists, use it as context. Otherwise, start from the project description.
8
+ 2. Research and document in `../../docs/COMPETITIVE-LANDSCAPE.md`:
9
9
  - **Competitor profiles**: For each key competitor (3-5), document:
10
10
  - Product overview and target audience
11
11
  - Positioning and messaging
@@ -4,10 +4,10 @@ DevOps or Security Engineer primarily owns dependency management. You are the fa
4
4
 
5
5
  ## Dependency Audit (Fallback)
6
6
 
7
- 1. If no `docs/DEPENDENCY-AUDIT.md` exists and no one else has started:
7
+ 1. If no `../../docs/DEPENDENCY-AUDIT.md` exists and no one else has started:
8
8
  - Run the package manager's built-in audit command (`npm audit`, `pip-audit`, etc.)
9
9
  - Apply safe patch-level updates that don't break tests
10
- - Document current dependency state in `docs/DEPENDENCY-AUDIT.md`
10
+ - Document current dependency state in `../../docs/DEPENDENCY-AUDIT.md`
11
11
  - Mark the document as **provisional** — it needs a security/ops review for CVE prioritization
12
12
  2. If DevOps or Security Engineer is active, skip this entirely.
13
13
 
@@ -20,7 +20,7 @@ You are responsible for keeping the project's dependencies healthy, secure, and
20
20
  - Can it be updated in-place (patch/minor bump)?
21
21
  - Does it require migration work (major version, breaking changes)?
22
22
  - Are there alternatives if the dependency is abandoned?
23
- 5. **Document** findings in `docs/DEPENDENCY-AUDIT.md`:
23
+ 5. **Document** findings in `../../docs/DEPENDENCY-AUDIT.md`:
24
24
  - Summary table of dependencies by status (current, outdated, vulnerable, deprecated)
25
25
  - Prioritized upgrade plan with estimated effort
26
26
  - Lock file hygiene notes
@@ -34,7 +34,7 @@ When assigned a "Dependency audit" routine-run issue:
34
34
  1. Run the vulnerability scan: `npm audit --json` (or equivalent for the project's package manager). Flag any new Critical or High CVEs not present in the last audit.
35
35
  2. Check for newly outdated dependencies: compare current versions against the latest. Flag anything more than one major version behind.
36
36
  3. Apply safe patch updates (semver patch-only, no breaking changes): update, run the test suite, commit if green.
37
- 4. Update `docs/DEPENDENCY-AUDIT.md` with the new scan date, any new findings, and any updates applied.
37
+ 4. Update `../../docs/DEPENDENCY-AUDIT.md` with the new scan date, any new findings, and any updates applied.
38
38
  5. Mark the routine issue done. If Critical CVEs were found that cannot be patched, create a separate high-priority issue for each and escalate to CEO.
39
39
 
40
40
  ## Rules
@@ -4,7 +4,7 @@ The Game Designer or Engineer primarily owns the game design. You are the fallba
4
4
 
5
5
  ## Game Design (Fallback)
6
6
 
7
- 1. If no `docs/GDD.md` exists and no one else has started:
7
+ 1. If no `../../docs/GDD.md` exists and no one else has started:
8
8
  - Write a minimal Game Design Document covering: concept pitch, core mechanic, basic game loop, target platform
9
9
  - List obvious design questions that need answers (progression, win conditions, art style)
10
10
  - Mark the document as **provisional** — it needs a thorough design review