@starlein/paperclip-plugin-company-wizard 0.4.13 → 0.4.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +58 -0
- package/dist/manifest.js +1 -1
- package/dist/manifest.js.map +1 -1
- package/dist/worker.js +67 -72
- package/dist/worker.js.map +2 -2
- package/package.json +1 -1
- package/templates/bootstrap-instructions.md +2 -1
- package/templates/modules/accessibility/agents/engineer/skills/accessibility-audit.fallback.md +2 -2
- package/templates/modules/accessibility/agents/ui-designer/skills/accessibility-audit.fallback.md +2 -2
- package/templates/modules/accessibility/module.meta.json +1 -1
- package/templates/modules/accessibility/skills/accessibility-audit.bar.md +1 -1
- package/templates/modules/accessibility/skills/accessibility-audit.md +1 -1
- package/templates/modules/architecture-plan/agents/ceo/skills/architecture-plan.bar.md +2 -2
- package/templates/modules/architecture-plan/agents/ceo/skills/architecture-plan.fallback.md +2 -2
- package/templates/modules/architecture-plan/agents/engineer/skills/design-system.fallback.md +2 -2
- package/templates/modules/architecture-plan/agents/ui-designer/skills/architecture-plan.md +2 -2
- package/templates/modules/architecture-plan/agents/ui-designer/skills/design-system.md +2 -2
- package/templates/modules/architecture-plan/module.meta.json +2 -2
- package/templates/modules/architecture-plan/skills/architecture-plan.bar.md +1 -1
- package/templates/modules/architecture-plan/skills/architecture-plan.md +2 -2
- package/templates/modules/architecture-plan/skills/design-system.md +5 -5
- package/templates/modules/backlog/docs/backlog-template.md +1 -1
- package/templates/modules/brand-identity/agents/ceo/skills/brand-identity.fallback.md +2 -2
- package/templates/modules/brand-identity/agents/cmo/skills/brand-identity.fallback.md +2 -2
- package/templates/modules/brand-identity/module.meta.json +1 -1
- package/templates/modules/brand-identity/skills/brand-identity.bar.md +1 -1
- package/templates/modules/brand-identity/skills/brand-identity.md +3 -3
- package/templates/modules/build-api/skills/api-design.bar.md +1 -1
- package/templates/modules/build-api/skills/api-design.md +1 -1
- package/templates/modules/ci-cd/agents/devops/skills/ci-cd.md +1 -1
- package/templates/modules/ci-cd/agents/engineer/skills/ci-cd.fallback.md +2 -2
- package/templates/modules/ci-cd/module.meta.json +1 -1
- package/templates/modules/ci-cd/skills/ci-cd.bar.md +1 -1
- package/templates/modules/ci-cd/skills/ci-cd.md +4 -4
- package/templates/modules/codebase-onboarding/agents/ceo/skills/codebase-audit.fallback.md +5 -5
- package/templates/modules/codebase-onboarding/module.meta.json +1 -1
- package/templates/modules/codebase-onboarding/skills/codebase-audit.bar.md +1 -1
- package/templates/modules/codebase-onboarding/skills/codebase-audit.md +2 -2
- package/templates/modules/competitive-intel/agents/ceo/skills/competitive-tracking.fallback.md +2 -2
- package/templates/modules/competitive-intel/agents/cmo/skills/competitive-tracking.fallback.md +2 -2
- package/templates/modules/competitive-intel/agents/customer-success/skills/competitive-tracking.md +2 -2
- package/templates/modules/competitive-intel/agents/product-owner/skills/competitive-tracking.fallback.md +2 -2
- package/templates/modules/competitive-intel/module.meta.json +1 -1
- package/templates/modules/competitive-intel/skills/competitive-tracking.bar.md +2 -2
- package/templates/modules/competitive-intel/skills/competitive-tracking.md +2 -2
- package/templates/modules/dependency-management/agents/engineer/skills/dependency-audit.fallback.md +2 -2
- package/templates/modules/dependency-management/skills/dependency-audit.md +2 -2
- package/templates/modules/game-design/agents/ceo/skills/game-design.fallback.md +1 -1
- package/templates/modules/game-design/agents/game-designer/skills/game-design.md +2 -2
- package/templates/modules/game-design/module.meta.json +1 -1
- package/templates/modules/game-design/skills/audio-design.fallback.md +2 -2
- package/templates/modules/game-design/skills/audio-design.md +3 -3
- package/templates/modules/game-design/skills/game-design.bar.md +1 -1
- package/templates/modules/game-design/skills/game-design.md +3 -3
- package/templates/modules/game-design/skills/level-design.fallback.md +2 -2
- package/templates/modules/game-design/skills/level-design.md +4 -4
- package/templates/modules/github-repo/agents/engineer/skills/git-workflow.md +51 -60
- package/templates/modules/github-repo/docs/git-workflow.md +14 -16
- package/templates/modules/github-repo/module.meta.json +1 -1
- package/templates/modules/market-analysis/agents/ceo/skills/market-analysis.fallback.md +2 -2
- package/templates/modules/market-analysis/agents/cmo/skills/market-analysis.fallback.md +2 -2
- package/templates/modules/market-analysis/agents/product-owner/skills/market-analysis.fallback.md +2 -2
- package/templates/modules/market-analysis/agents/ux-researcher/skills/market-analysis.md +1 -1
- package/templates/modules/market-analysis/module.meta.json +1 -1
- package/templates/modules/market-analysis/skills/market-analysis.bar.md +1 -1
- package/templates/modules/market-analysis/skills/market-analysis.md +1 -1
- package/templates/modules/monitoring/agents/devops/skills/monitoring.md +1 -1
- package/templates/modules/monitoring/agents/engineer/skills/monitoring.fallback.md +2 -2
- package/templates/modules/monitoring/module.meta.json +1 -1
- package/templates/modules/monitoring/skills/monitoring.bar.md +1 -1
- package/templates/modules/monitoring/skills/monitoring.md +3 -3
- package/templates/modules/pr-review/README.md +1 -1
- package/templates/modules/pr-review/agents/code-reviewer/skills/code-review.md +6 -6
- package/templates/modules/pr-review/agents/devops/skills/infra-review.md +1 -1
- package/templates/modules/pr-review/agents/engineer/skills/pr-workflow.md +7 -7
- package/templates/modules/pr-review/agents/product-owner/skills/product-review.md +1 -1
- package/templates/modules/pr-review/agents/qa/skills/qa-review.md +6 -9
- package/templates/modules/pr-review/agents/security-engineer/skills/pr-security-review.md +1 -1
- package/templates/modules/pr-review/agents/ui-designer/skills/design-review.md +3 -3
- package/templates/modules/pr-review/agents/ux-researcher/skills/ux-review.md +2 -2
- package/templates/modules/pr-review/docs/pr-conventions.md +6 -4
- package/templates/modules/release-management/agents/ceo/skills/release-process.fallback.md +2 -2
- package/templates/modules/release-management/agents/engineer/skills/release-process.fallback.md +2 -2
- package/templates/modules/release-management/module.meta.json +1 -1
- package/templates/modules/release-management/skills/release-process.md +2 -2
- package/templates/modules/security-audit/agents/devops/skills/security-review.fallback.md +2 -2
- package/templates/modules/security-audit/agents/devops/skills/threat-model.fallback.md +2 -2
- package/templates/modules/security-audit/agents/engineer/skills/security-review.fallback.md +2 -2
- package/templates/modules/security-audit/agents/engineer/skills/threat-model.fallback.md +2 -2
- package/templates/modules/security-audit/module.meta.json +2 -2
- package/templates/modules/security-audit/skills/security-review.bar.md +1 -1
- package/templates/modules/security-audit/skills/security-review.md +1 -1
- package/templates/modules/security-audit/skills/threat-model.bar.md +1 -1
- package/templates/modules/security-audit/skills/threat-model.md +2 -2
- package/templates/modules/stall-detection/agents/ceo/skills/stall-detection.md +14 -2
- package/templates/modules/tech-stack/agents/ceo/skills/tech-stack.fallback.md +2 -2
- package/templates/modules/tech-stack/module.meta.json +1 -1
- package/templates/modules/tech-stack/skills/tech-stack.bar.md +1 -1
- package/templates/modules/tech-stack/skills/tech-stack.md +1 -1
- package/templates/modules/user-testing/agents/ceo/skills/user-testing.fallback.md +2 -2
- package/templates/modules/user-testing/agents/product-owner/skills/user-testing.fallback.md +2 -2
- package/templates/modules/user-testing/agents/qa/skills/user-testing.md +1 -1
- package/templates/modules/user-testing/agents/ux-researcher/skills/user-testing.fallback.md +2 -2
- package/templates/modules/user-testing/module.meta.json +1 -1
- package/templates/modules/user-testing/skills/user-testing.md +1 -1
- package/templates/modules/vision-workshop/agents/ceo/skills/vision-workshop.md +1 -1
- package/templates/modules/vision-workshop/agents/ux-researcher/skills/vision-workshop.md +1 -1
- package/templates/modules/vision-workshop/module.meta.json +1 -1
- package/templates/modules/website-relaunch/agents/ui-designer/skills/site-audit.md +1 -1
- package/templates/modules/website-relaunch/module.meta.json +7 -7
- package/templates/modules/website-relaunch/skills/design-ingestion.md +1 -1
- package/templates/modules/website-relaunch/skills/site-audit.md +1 -1
- package/templates/presets/build-game/preset.meta.json +6 -6
- package/templates/presets/repo-maintenance/preset.meta.json +5 -5
- package/templates/roles/cmo/AGENTS.md +1 -1
- package/templates/roles/code-reviewer/AGENTS.md +1 -1
- package/templates/roles/cto/AGENTS.md +4 -4
- package/templates/roles/devops/AGENTS.md +1 -1
- package/templates/roles/engineer/HEARTBEAT.md +1 -1
- package/templates/roles/ux-researcher/AGENTS.md +1 -1
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@starlein/paperclip-plugin-company-wizard",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.17",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "AI-powered wizard to bootstrap paperclip agent companies from composable templates (for latest paperclip version)",
|
|
6
6
|
"repository": "https://github.com/starlein/paperclip-plugin-company-wizard",
|
|
@@ -31,7 +31,8 @@ Each section (Goals, Projects, Labels, Agents, Issues, Routines) contains object
|
|
|
31
31
|
|
|
32
32
|
**Review workflow guardrail:**
|
|
33
33
|
|
|
34
|
-
- Required PR reviews use the issue's `executionPolicy` review/approval stages, not @-mentions and not separate child review issues. When an engineer opens a PR, set the implementation issue to `in_review` with the resolved execution policy: QA review when present, Security review only for security-relevant changes, Product Owner approval for scope/intent, and a final Code Reviewer merge gate after verification is recorded. **Never list the issue's executor/author as a participant in any stage** — Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author stalls the issue in `in_review` (`422 No eligible approval participant`); the merge gate is therefore a non-author (the Code Reviewer), not the engineer who wrote the code. Each active participant records their decision through the normal issue update route (`approved` by PATCHing toward `done`, `changes_requested` by PATCHing back to `in_progress`), which is the issue-level reviewed/approved audit trail (`reviewed_by` / `approved_by` metadata where Paperclip exposes it). The Code Reviewer merge gate must verify the PR base against the project/worktree base ref shown in `heartbeat-context`, merge before approving, close/archive any isolated worktree when one exists and close-readiness allows it, and only then record final approval. Follow
|
|
34
|
+
- Required PR reviews use the issue's `executionPolicy` review/approval stages, not @-mentions and not separate child review issues. When an engineer opens a PR, set the implementation issue to `in_review` with the resolved execution policy: QA review when present, Security review only for security-relevant changes, Product Owner approval for scope/intent, and a final Code Reviewer merge gate after verification is recorded. **Never list the issue's executor/author as a participant in any stage** — Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author stalls the issue in `in_review` (`422 No eligible approval participant`); the merge gate is therefore a non-author (the Code Reviewer), not the engineer who wrote the code. Each active participant records their decision through the normal issue update route (`approved` by PATCHing toward `done`, `changes_requested` by PATCHing back to `in_progress`), which is the issue-level reviewed/approved audit trail (`reviewed_by` / `approved_by` metadata where Paperclip exposes it). The Code Reviewer merge gate must verify the PR base against the project/worktree base ref shown in `heartbeat-context`, merge before approving, close/archive any isolated worktree when one exists and close-readiness allows it, and only then record final approval. Follow `../../docs/pr-conventions.md` when the PR review module is active.
|
|
35
|
+
- **One PR ⇒ one issue ⇒ its policy stages. Never fan a single PR out into separate per-role issues linked by `blocks`, and never model the merge as a standalone "Code review and merge PR #N" issue that is `blockedBy` the review issues.** That fan-out strands the merge: once the review issues reach `done`, Paperclip does not reliably re-wake the blocked merge issue (worker heartbeats are off, and the liveness watchdog ignores a `blocked` issue whose blockers are all `done`), so the PR is never merged even when it is green and approved. The review/approval/merge-gate steps are **stages on the one implementation issue** that advance in place — the merge gate is the last stage on that same issue, not a separate blocked issue. If you inherit a stranded fan-out, the CEO stall-detection recovers it (*Stranded blocked*), but do not create it.
|
|
35
36
|
|
|
36
37
|
**Secrets guardrail:**
|
|
37
38
|
|
package/templates/modules/accessibility/agents/engineer/skills/accessibility-audit.fallback.md
CHANGED
|
@@ -4,11 +4,11 @@ The QA Engineer and UI Designer own accessibility auditing above you. You are th
|
|
|
4
4
|
|
|
5
5
|
## Accessibility Audit (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/ACCESSIBILITY-AUDIT.md` exists and nobody has started:
|
|
8
8
|
- Check semantic HTML usage in key pages/components
|
|
9
9
|
- Verify form labels and ARIA attributes are correct
|
|
10
10
|
- Run automated accessibility checks if tooling is available
|
|
11
|
-
- Document in
|
|
11
|
+
- Document in `../../docs/ACCESSIBILITY-AUDIT.md`
|
|
12
12
|
- Tag QA or UI Designer to expand the audit
|
|
13
13
|
2. If QA or UI Designer is active, skip this entirely.
|
|
14
14
|
|
package/templates/modules/accessibility/agents/ui-designer/skills/accessibility-audit.fallback.md
CHANGED
|
@@ -4,11 +4,11 @@ The QA Engineer owns accessibility auditing above you. You are the fallback —
|
|
|
4
4
|
|
|
5
5
|
## Accessibility Audit (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/ACCESSIBILITY-AUDIT.md` exists and QA hasn't started:
|
|
8
8
|
- Review color contrast and visual accessibility of the design system
|
|
9
9
|
- Check that focus states are designed for all interactive components
|
|
10
10
|
- Verify the design system includes accessible component patterns
|
|
11
|
-
- Document in
|
|
11
|
+
- Document in `../../docs/ACCESSIBILITY-AUDIT.md`
|
|
12
12
|
- Tag QA to expand with keyboard and screen reader testing
|
|
13
13
|
2. If QA is active, skip this entirely.
|
|
14
14
|
|
|
@@ -16,7 +16,7 @@
|
|
|
16
16
|
{
|
|
17
17
|
"title": "Conduct initial accessibility audit",
|
|
18
18
|
"assignTo": "capability:accessibility-audit",
|
|
19
|
-
"description": "Audit the project for WCAG 2.2 compliance: check semantic HTML, keyboard navigation, color contrast, ARIA usage, and screen reader compatibility. Document findings and remediation plan in docs/ACCESSIBILITY-AUDIT.md."
|
|
19
|
+
"description": "Audit the project for WCAG 2.2 compliance: check semantic HTML, keyboard navigation, color contrast, ARIA usage, and screen reader compatibility. Document findings and remediation plan in ../../docs/ACCESSIBILITY-AUDIT.md."
|
|
20
20
|
}
|
|
21
21
|
]
|
|
22
22
|
}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good accessibility audit:
|
|
4
4
|
|
|
5
|
-
- A
|
|
5
|
+
- A `../../docs/ACCESSIBILITY-AUDIT.md` covering WCAG 2.2 AA across: semantic HTML, keyboard navigation, colour contrast, ARIA usage, images/media, forms, and zoom/responsive behaviour.
|
|
6
6
|
- Each finding has a severity (Critical / Major / Minor), a specific location, and a concrete remediation — Critical and Major findings have follow-up issues created.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -5,7 +5,7 @@ You own accessibility compliance. This ensures the product is usable by everyone
|
|
|
5
5
|
## Accessibility Audit Process
|
|
6
6
|
|
|
7
7
|
1. Review the project for WCAG 2.2 compliance at Level AA (minimum).
|
|
8
|
-
2. Check and document in
|
|
8
|
+
2. Check and document in `../../docs/ACCESSIBILITY-AUDIT.md`:
|
|
9
9
|
- **Semantic HTML**: Correct heading hierarchy, landmark regions, form labels
|
|
10
10
|
- **Keyboard navigation**: All interactive elements focusable and operable, logical tab order, visible focus indicators
|
|
11
11
|
- **Color and contrast**: Minimum 4.5:1 for normal text, 3:1 for large text, no color-only information
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
## Architecture Plan — Done Bar (CEO Fallback)
|
|
2
2
|
|
|
3
3
|
**Done:**
|
|
4
|
-
-
|
|
4
|
+
- `../../docs/ARCHITECTURE.md` exists with at least: a brief system overview (what the system does, its main components), the primary data flows, and a clear note that this is a CEO-generated placeholder pending engineer review.
|
|
5
5
|
- A follow-up issue exists, assigned to an engineer or the architecture-plan capability, to complete the full architecture document.
|
|
6
6
|
|
|
7
7
|
**Not done:**
|
|
8
|
-
- No
|
|
8
|
+
- No `../../docs/ARCHITECTURE.md` exists at all.
|
|
9
9
|
- The document exists but contains no actionable overview (placeholder text only).
|
|
10
10
|
- No follow-up issue was created for the engineer to complete the work.
|
|
11
11
|
|
|
@@ -4,9 +4,9 @@ The Engineer primarily owns system architecture. You are the fallback — step i
|
|
|
4
4
|
|
|
5
5
|
## Architecture Plan (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/ARCHITECTURE.md` exists and no engineer has started:
|
|
8
8
|
- Sketch a minimal architecture based on the tech stack and project goals
|
|
9
|
-
- Document in
|
|
9
|
+
- Document in `../../docs/ARCHITECTURE.md`
|
|
10
10
|
- Create an issue for the engineer to review and expand
|
|
11
11
|
2. If an engineer is active, skip this entirely.
|
|
12
12
|
|
package/templates/modules/architecture-plan/agents/engineer/skills/design-system.fallback.md
CHANGED
|
@@ -4,10 +4,10 @@ The UI Designer primarily owns the design system. You are the fallback — set u
|
|
|
4
4
|
|
|
5
5
|
## Design System (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/DESIGN-SYSTEM.md` exists and no UI Designer has started:
|
|
8
8
|
- Choose a sensible default palette (e.g., Tailwind defaults or a minimal custom set)
|
|
9
9
|
- Define basic typography and spacing scales
|
|
10
|
-
- Document in
|
|
10
|
+
- Document in `../../docs/DESIGN-SYSTEM.md`
|
|
11
11
|
- Create an issue for a UI Designer to review and expand if one is hired later
|
|
12
12
|
2. If a UI Designer is active, skip this entirely.
|
|
13
13
|
|
|
@@ -4,7 +4,7 @@ When the architecture plan is being created, contribute the UI/frontend perspect
|
|
|
4
4
|
|
|
5
5
|
## UI Architecture Contributions
|
|
6
6
|
|
|
7
|
-
1. Check that
|
|
7
|
+
1. Check that `../../docs/ARCHITECTURE.md` exists. If it does not exist yet, the engineer's architecture-plan task has not completed — leave an issue comment ("Waiting for engineer to complete ../../docs/ARCHITECTURE.md before adding UI layer") and do not close this issue yet. Check back on your next heartbeat.
|
|
8
8
|
|
|
9
9
|
If an Engineer is defining the architecture, coordinate with them on:
|
|
10
10
|
- **Frontend component structure**: Page layout, shared components, routing
|
|
@@ -12,7 +12,7 @@ If an Engineer is defining the architecture, coordinate with them on:
|
|
|
12
12
|
- **Asset pipeline**: Images, icons, fonts — how they're managed and optimized
|
|
13
13
|
- **Responsive strategy**: How layouts adapt across breakpoints
|
|
14
14
|
|
|
15
|
-
Document your UI architecture notes in
|
|
15
|
+
Document your UI architecture notes in `../../docs/ARCHITECTURE.md` under a `## UI Architecture` section.
|
|
16
16
|
|
|
17
17
|
## Rules
|
|
18
18
|
|
|
@@ -5,8 +5,8 @@ You own the visual design system. Establish the foundational patterns that ensur
|
|
|
5
5
|
## Design System Process
|
|
6
6
|
|
|
7
7
|
1. Review the company goal, brand context, and target audience
|
|
8
|
-
2. If
|
|
9
|
-
3. Define and document in
|
|
8
|
+
2. If `../../docs/BRAND-IDENTITY.md` exists, use it as the authoritative source for color palette, typography, and brand voice. Do not invent a palette that contradicts established brand identity.
|
|
9
|
+
3. Define and document in `../../docs/DESIGN-SYSTEM.md`:
|
|
10
10
|
- **Color palette**: Primary, secondary, accent, semantic (success, error, warning), neutrals
|
|
11
11
|
- **Typography**: Font families, scale (heading/body/caption sizes), weights, line heights
|
|
12
12
|
- **Spacing**: Base unit and scale (4px, 8px, 12px, 16px, 24px, 32px, 48px, 64px)
|
|
@@ -26,12 +26,12 @@
|
|
|
26
26
|
{
|
|
27
27
|
"title": "Design initial system architecture",
|
|
28
28
|
"assignTo": "capability:architecture-plan",
|
|
29
|
-
"description": "Based on the tech stack decisions, design the system architecture: component structure, data flow, API boundaries, and deployment model. Document in docs/ARCHITECTURE.md."
|
|
29
|
+
"description": "Based on the tech stack decisions, design the system architecture: component structure, data flow, API boundaries, and deployment model. Document in ../../docs/ARCHITECTURE.md."
|
|
30
30
|
},
|
|
31
31
|
{
|
|
32
32
|
"title": "Define design system and visual language",
|
|
33
33
|
"assignTo": "capability:design-system",
|
|
34
|
-
"description": "Establish the visual foundation: color palette, typography, spacing scale, component patterns, and brand guidelines. Document in docs/DESIGN-SYSTEM.md."
|
|
34
|
+
"description": "Establish the visual foundation: color palette, typography, spacing scale, component patterns, and brand guidelines. Document in ../../docs/DESIGN-SYSTEM.md."
|
|
35
35
|
}
|
|
36
36
|
]
|
|
37
37
|
}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good architecture plan:
|
|
4
4
|
|
|
5
|
-
- A
|
|
5
|
+
- A `../../docs/ARCHITECTURE.md` with a system overview (text/ASCII component diagram), data flow through the system, API boundaries (internal and external), deployment model, and key decisions recorded in ADR style with rationale.
|
|
6
6
|
- Decomposed into concrete implementation issues for foundational scaffolding so work can start incrementally.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -4,8 +4,8 @@ You own system architecture. Design the structure that implements the tech stack
|
|
|
4
4
|
|
|
5
5
|
## Architecture Planning Process
|
|
6
6
|
|
|
7
|
-
1. If
|
|
8
|
-
2. Design and document in
|
|
7
|
+
1. If `../../docs/TECH-STACK.md` exists, review it alongside the project requirements. Otherwise, gather tech stack context from the codebase and project docs.
|
|
8
|
+
2. Design and document in `../../docs/ARCHITECTURE.md`:
|
|
9
9
|
- **System overview**: High-level component diagram (describe in text/ASCII)
|
|
10
10
|
- **Component structure**: Modules, services, or packages and their responsibilities
|
|
11
11
|
- **Data flow**: How data moves through the system
|
|
@@ -4,9 +4,9 @@ You are establishing the project's design system foundations when no UI Designer
|
|
|
4
4
|
|
|
5
5
|
## Steps
|
|
6
6
|
|
|
7
|
-
1. Read
|
|
8
|
-
2. Read
|
|
9
|
-
3. If
|
|
7
|
+
1. Read `../../docs/TECH-STACK.md` if it exists to understand the frontend framework and styling approach.
|
|
8
|
+
2. Read `../../docs/BRAND-IDENTITY.md` if it exists for color palette, typography, and brand direction.
|
|
9
|
+
3. If `../../docs/DESIGN-SYSTEM.md` does not exist, create it using `../../docs/design-system-template.md` as a starting point.
|
|
10
10
|
4. Define the minimum viable token set:
|
|
11
11
|
- **Colors**: primary, secondary, background, surface, text, error/warning/success. Use the brand palette if available, otherwise choose accessible defaults (WCAG AA contrast ratio ≥ 4.5:1 for text).
|
|
12
12
|
- **Typography**: 2–3 font sizes (body, heading, small), font family (system stack if no brand font specified), line heights.
|
|
@@ -21,5 +21,5 @@ You are establishing the project's design system foundations when no UI Designer
|
|
|
21
21
|
|
|
22
22
|
- Keep it practical over perfect. Consistent tokens are more valuable than a comprehensive design system.
|
|
23
23
|
- Do not create visual assets (icons, illustrations) — document where placeholders should go.
|
|
24
|
-
- Reference
|
|
25
|
-
- If
|
|
24
|
+
- Reference `../../docs/ARCHITECTURE.md` for the component hierarchy if it exists.
|
|
25
|
+
- If `../../docs/DESIGN-SYSTEM.md` already exists (a UI Designer ran first), review it for engineering feasibility and add implementation notes — do not overwrite their work.
|
|
@@ -39,7 +39,7 @@ _Summary of current backlog health. Update on each heartbeat cycle._
|
|
|
39
39
|
- **Ready assigned issues:** _(count by owner)_
|
|
40
40
|
- **Unassigned todo issues:** _(count; should normally be 0 except items without a suitable owner)_
|
|
41
41
|
- **In-progress issues:** _(count)_
|
|
42
|
-
- **Health:** _(healthy / thin / empty / bloated — see docs/backlog-process.md)_
|
|
42
|
+
- **Health:** _(healthy / thin / empty / bloated — see ../../docs/backlog-process.md)_
|
|
43
43
|
|
|
44
44
|
## Decisions Log
|
|
45
45
|
|
|
@@ -4,11 +4,11 @@ The UI Designer and CMO both own brand identity above you. You are the last-reso
|
|
|
4
4
|
|
|
5
5
|
## Brand Identity (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/BRAND-IDENTITY.md` exists and no designer has started:
|
|
8
8
|
- Set up a minimal brand placeholder with basic defaults
|
|
9
9
|
- Choose a neutral color palette (1 primary, 1 accent, 1 neutral)
|
|
10
10
|
- Pick a safe, widely available font pairing (e.g., Inter + system serif)
|
|
11
|
-
- Document in
|
|
11
|
+
- Document in `../../docs/BRAND-IDENTITY.md` and mark all choices as **provisional**
|
|
12
12
|
- Create an issue for the ui-designer or CMO to review and expand the brand guidelines
|
|
13
13
|
2. If a ui-designer or CMO is active, skip this entirely.
|
|
14
14
|
|
|
@@ -4,11 +4,11 @@ The UI Designer primarily owns brand identity and visual guidelines. You are the
|
|
|
4
4
|
|
|
5
5
|
## Brand Identity (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/BRAND-IDENTITY.md` exists and no designer has started:
|
|
8
8
|
- Define brand positioning: mission statement, target audience, key differentiators
|
|
9
9
|
- Establish tone of voice and communication guidelines
|
|
10
10
|
- Set up a minimal color palette and typography recommendation
|
|
11
|
-
- Document in
|
|
11
|
+
- Document in `../../docs/BRAND-IDENTITY.md` and mark visual choices as **provisional**
|
|
12
12
|
- Create an issue for the designer to refine visual identity
|
|
13
13
|
2. If a designer is active, skip this entirely.
|
|
14
14
|
|
|
@@ -16,7 +16,7 @@
|
|
|
16
16
|
{
|
|
17
17
|
"title": "Define brand identity and visual guidelines",
|
|
18
18
|
"assignTo": "capability:brand-identity",
|
|
19
|
-
"description": "Create the brand book: logo usage, color palette, typography, iconography, and tone-of-voice guidelines. Document everything in docs/BRAND-IDENTITY.md."
|
|
19
|
+
"description": "Create the brand book: logo usage, color palette, typography, iconography, and tone-of-voice guidelines. Document everything in ../../docs/BRAND-IDENTITY.md."
|
|
20
20
|
}
|
|
21
21
|
]
|
|
22
22
|
}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good brand identity:
|
|
4
4
|
|
|
5
|
-
- A
|
|
5
|
+
- A `../../docs/BRAND-IDENTITY.md` with concrete values and rationale for every element: colour palette (hex/RGB values with contrast ratios), typography (typefaces, size scale, weight usage), logo usage rules (clear space, do's and don'ts), iconography style, and tone of voice.
|
|
6
6
|
- If a tech stack exists, a design tokens file (CSS custom properties or JSON) matching the chosen stack, so the identity is immediately usable in code.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -14,12 +14,12 @@ You own the company's visual identity and brand guidelines. Define a cohesive br
|
|
|
14
14
|
- **Logo usage**: Clear space, minimum size, do's and don'ts
|
|
15
15
|
- **Iconography**: Style, stroke weight, grid alignment
|
|
16
16
|
- **Tone of voice**: Communication style, vocabulary, personality
|
|
17
|
-
3. Document everything in
|
|
18
|
-
- Use
|
|
17
|
+
3. Document everything in `../../docs/BRAND-IDENTITY.md`:
|
|
18
|
+
- Use `../../docs/brand-identity-template.md` as a starting point
|
|
19
19
|
- Fill in all sections with concrete values and rationale
|
|
20
20
|
- Include visual examples or references where possible
|
|
21
21
|
4. Create initial design tokens if a tech stack exists:
|
|
22
|
-
- If
|
|
22
|
+
- If `../../docs/TECH-STACK.md` is present, produce a tokens file (CSS custom properties or JSON) matching the chosen stack
|
|
23
23
|
- Reference the design-system module if the architecture-plan module exists
|
|
24
24
|
|
|
25
25
|
## Rules
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good API design:
|
|
4
4
|
|
|
5
|
-
- A
|
|
5
|
+
- A `../../docs/API-DESIGN.md` with a resource model, full endpoint inventory (method, path, auth requirement), authentication strategy, error-handling conventions (consistent error shape), and pagination approach.
|
|
6
6
|
- Every endpoint has: description, parameter types and constraints, request/response schema, example request/response, and possible error codes — generated from source annotations (OpenAPI/Swagger), not maintained by hand.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -35,7 +35,7 @@ When designing the data model:
|
|
|
35
35
|
|
|
36
36
|
## Output Artifacts
|
|
37
37
|
|
|
38
|
-
Document your API design decisions in
|
|
38
|
+
Document your API design decisions in `../../docs/API-DESIGN.md`:
|
|
39
39
|
- Resource model (entities and relationships)
|
|
40
40
|
- Endpoint inventory (method, path, description, auth requirement)
|
|
41
41
|
- Authentication strategy
|
|
@@ -15,7 +15,7 @@ You are the DevOps engineer and CI/CD is your core domain. You own the full pipe
|
|
|
15
15
|
- Run smoke tests after deployment
|
|
16
16
|
4. Add status badges to the project README
|
|
17
17
|
5. Set up infrastructure-as-code for pipeline resources (runners, caches, secrets)
|
|
18
|
-
6. Document the full pipeline in
|
|
18
|
+
6. Document the full pipeline in `../../docs/CI-CD.md`
|
|
19
19
|
|
|
20
20
|
## Rules
|
|
21
21
|
|
|
@@ -7,7 +7,7 @@ The DevOps engineer primarily owns CI/CD pipelines. You are the fallback — ste
|
|
|
7
7
|
1. If no CI workflow exists and DevOps hasn't started:
|
|
8
8
|
- Create a basic CI workflow: lint + test on PRs, build on push to the default branch
|
|
9
9
|
- Use standard caching and pinned action versions
|
|
10
|
-
- Document the setup in
|
|
10
|
+
- Document the setup in `../../docs/CI-CD.md` and mark the setup as **provisional** — a devops agent should review and complete the production configuration.
|
|
11
11
|
- Mark the pipeline as **provisional** — it needs DevOps review for CD, caching optimization, and security hardening
|
|
12
12
|
2. If DevOps is active, skip this entirely.
|
|
13
13
|
|
|
@@ -16,4 +16,4 @@ The DevOps engineer primarily owns CI/CD pipelines. You are the fallback — ste
|
|
|
16
16
|
- This is a safety net. Set up the basics — lint, test, build.
|
|
17
17
|
- Skip CD (deployment) — that requires infrastructure knowledge best left to DevOps.
|
|
18
18
|
- Let DevOps own pipeline optimization, deployment, and ongoing maintenance.
|
|
19
|
-
- Reference
|
|
19
|
+
- Reference `../../docs/CI-CD.md` for all configuration details so the devops agent can pick up where you left off.
|
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
{
|
|
19
19
|
"title": "Set up CI/CD pipeline",
|
|
20
20
|
"assignTo": "capability:ci-cd",
|
|
21
|
-
"description": "Configure continuous integration (lint, test, build) and deployment pipeline. Document the setup in docs/CI-CD.md. Use GitHub Actions or equivalent."
|
|
21
|
+
"description": "Configure continuous integration (lint, test, build) and deployment pipeline. Document the setup in ../../docs/CI-CD.md. Use GitHub Actions or equivalent."
|
|
22
22
|
},
|
|
23
23
|
{
|
|
24
24
|
"title": "Add linter and configure lint rules",
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good CI/CD setup:
|
|
4
4
|
|
|
5
|
-
- A working pipeline with a CI stage (lint → typecheck → test on every PR and push to the default branch) and a CD stage (deploy on merge to the default branch, smoke tests after deployment), documented in
|
|
5
|
+
- A working pipeline with a CI stage (lint → typecheck → test on every PR and push to the default branch) and a CD stage (deploy on merge to the default branch, smoke tests after deployment), documented in `../../docs/CI-CD.md` with status badges in the README.
|
|
6
6
|
- Pipelines complete in under 5 minutes (dependency caching in place), action versions pinned to full SHAs, and all secrets stored in GitHub Secrets or equivalent — none in workflow files.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# Skill: CI/CD Pipeline
|
|
2
2
|
|
|
3
|
-
You manage continuous integration and deployment pipelines. Follow the conventions in
|
|
3
|
+
You manage continuous integration and deployment pipelines. Follow the conventions in `../../docs/CI-CD.md` in the project root.
|
|
4
4
|
|
|
5
5
|
## Setup Steps
|
|
6
6
|
|
|
@@ -13,10 +13,10 @@ You manage continuous integration and deployment pipelines. Follow the conventio
|
|
|
13
13
|
- Trigger on merge to the default branch
|
|
14
14
|
- Deploy to the target environment
|
|
15
15
|
- Run smoke tests after deployment
|
|
16
|
-
4. Pin every third-party action to a full commit SHA (`uses: actions/checkout@<sha>`, not `@v4`). SHA pinning prevents supply-chain attacks from a compromised action version tag. Record the pinned SHAs in
|
|
17
|
-
5. Document the rollback procedure in
|
|
16
|
+
4. Pin every third-party action to a full commit SHA (`uses: actions/checkout@<sha>`, not `@v4`). SHA pinning prevents supply-chain attacks from a compromised action version tag. Record the pinned SHAs in `../../docs/CI-CD.md` → *Pinned Action SHAs*.
|
|
17
|
+
5. Document the rollback procedure in `../../docs/CI-CD.md` → *Rollback*: how to revert a failed deploy (e.g., `git revert` + redeploy, or infra rollback command), how to verify the rollback succeeded, and the recovery SLA. A pipeline with no documented rollback path is not done.
|
|
18
18
|
6. Add status badges to the project README
|
|
19
|
-
7. Document the full pipeline in
|
|
19
|
+
7. Document the full pipeline in `../../docs/CI-CD.md`
|
|
20
20
|
|
|
21
21
|
## Ongoing Health Checks
|
|
22
22
|
|
|
@@ -4,9 +4,9 @@ The Engineer primarily owns codebase auditing and health. You are the fallback
|
|
|
4
4
|
|
|
5
5
|
## Codebase Audit (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/CODEBASE-AUDIT.md` exists and the Engineer hasn't started:
|
|
8
8
|
- Read the project structure and key configuration files
|
|
9
|
-
- Write a high-level architecture overview in
|
|
9
|
+
- Write a high-level architecture overview in `../../docs/CODEBASE-AUDIT.md`
|
|
10
10
|
- List obvious tech debt items visible from a surface-level read
|
|
11
11
|
- Mark the document as **provisional** — it needs a thorough engineering review
|
|
12
12
|
2. If the Engineer is active, skip this entirely.
|
|
@@ -20,10 +20,10 @@ The Engineer primarily owns codebase auditing and health. You are the fallback
|
|
|
20
20
|
|
|
21
21
|
## Health Check Refresh (follow-up runs)
|
|
22
22
|
|
|
23
|
-
When
|
|
23
|
+
When `../../docs/CODEBASE-AUDIT.md` already exists (a prior audit was completed) and you are assigned a follow-up health check:
|
|
24
24
|
|
|
25
|
-
1. Read the existing
|
|
25
|
+
1. Read the existing `../../docs/CODEBASE-AUDIT.md`.
|
|
26
26
|
2. Run a quick surface scan: `find . -name "*.js" -o -name "*.ts" | head -30` to sense if new files or directories have appeared since the last audit date.
|
|
27
27
|
3. Note any obviously new areas (new top-level directories, new dependency groups) not present in the existing document.
|
|
28
|
-
4. Add a dated `## Health Check — <date>` section to
|
|
28
|
+
4. Add a dated `## Health Check — <date>` section to `../../docs/CODEBASE-AUDIT.md` listing: files reviewed, new areas identified, and a note that deep analysis was not performed (this is a CEO fallback — escalate to an engineer for full re-audit if significant new areas were found).
|
|
29
29
|
5. Mark the issue done.
|
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
{
|
|
19
19
|
"title": "Audit codebase and document architecture",
|
|
20
20
|
"assignTo": "capability:codebase-audit",
|
|
21
|
-
"description": "Read the existing codebase, map the architecture, identify tech debt hotspots and test coverage gaps. Document findings in docs/CODEBASE-AUDIT.md. Create follow-up issues for cleanup opportunities."
|
|
21
|
+
"description": "Read the existing codebase, map the architecture, identify tech debt hotspots and test coverage gaps. Document findings in ../../docs/CODEBASE-AUDIT.md. Create follow-up issues for cleanup opportunities."
|
|
22
22
|
}
|
|
23
23
|
]
|
|
24
24
|
}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
A good codebase audit:
|
|
4
4
|
|
|
5
|
-
- A
|
|
5
|
+
- A `../../docs/CODEBASE-AUDIT.md` with architecture overview (layers, key components, data flow), tech stack summary, tech debt inventory ranked by severity (critical / major / minor), test coverage assessment identifying untested paths, and recommended cleanup priorities.
|
|
6
6
|
- Followed by concrete, scoped follow-up issues — one per fix — for the top cleanup opportunities.
|
|
7
7
|
|
|
8
8
|
Not done:
|
|
@@ -8,7 +8,7 @@ Use this when assigned a codebase-audit issue, codebase-health routine, or expli
|
|
|
8
8
|
|
|
9
9
|
## Initial Audit
|
|
10
10
|
|
|
11
|
-
Run this when
|
|
11
|
+
Run this when `../../docs/CODEBASE-AUDIT.md` does not yet exist.
|
|
12
12
|
|
|
13
13
|
1. Map the project structure — identify key directories, entry points, and architectural layers.
|
|
14
14
|
2. Read configuration files (package.json, tsconfig, Dockerfile, CI configs) to understand the tech stack and build pipeline.
|
|
@@ -16,7 +16,7 @@ Run this when `docs/CODEBASE-AUDIT.md` does not yet exist.
|
|
|
16
16
|
4. Assess test coverage — untested paths, missing tests, weak assertions.
|
|
17
17
|
5. Identify tech debt — dead code, unused exports, complex functions, inconsistent patterns, duplicated logic.
|
|
18
18
|
6. Check for code quality issues — long files, deep nesting, too many parameters, missing boundary error handling.
|
|
19
|
-
7. Document findings in
|
|
19
|
+
7. Document findings in `../../docs/CODEBASE-AUDIT.md` or an issue document/work product:
|
|
20
20
|
- architecture overview
|
|
21
21
|
- tech stack summary
|
|
22
22
|
- tech debt inventory ranked by severity
|
package/templates/modules/competitive-intel/agents/ceo/skills/competitive-tracking.fallback.md
CHANGED
|
@@ -4,10 +4,10 @@ The Customer Success Manager, CMO, and Product Owner own competitive intelligenc
|
|
|
4
4
|
|
|
5
5
|
## Competitive Tracking (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/COMPETITIVE-LANDSCAPE.md` exists and nobody has started:
|
|
8
8
|
- Identify the top 2-3 competitors based on the company goal
|
|
9
9
|
- Write a brief comparison: what they do, how we differ
|
|
10
|
-
- Document in
|
|
10
|
+
- Document in `../../docs/COMPETITIVE-LANDSCAPE.md`
|
|
11
11
|
- Tag the Customer Success Manager, CMO, or Product Owner to expand
|
|
12
12
|
2. If any of the above roles are active, skip this entirely.
|
|
13
13
|
|
package/templates/modules/competitive-intel/agents/cmo/skills/competitive-tracking.fallback.md
CHANGED
|
@@ -4,9 +4,9 @@ The Customer Success Manager owns competitive intelligence above you. You are th
|
|
|
4
4
|
|
|
5
5
|
## Competitive Tracking (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/COMPETITIVE-LANDSCAPE.md` exists and the Customer Success Manager hasn't started:
|
|
8
8
|
- Research competitors from a marketing perspective: positioning, messaging, content strategy
|
|
9
|
-
- Document in
|
|
9
|
+
- Document in `../../docs/COMPETITIVE-LANDSCAPE.md`
|
|
10
10
|
- Focus on differentiation opportunities for go-to-market
|
|
11
11
|
- Tag the Customer Success Manager to expand with customer-facing insights
|
|
12
12
|
2. If the Customer Success Manager is active, skip this entirely.
|
package/templates/modules/competitive-intel/agents/customer-success/skills/competitive-tracking.md
CHANGED
|
@@ -4,8 +4,8 @@ You own competitive intelligence from the customer perspective. You hear what cu
|
|
|
4
4
|
|
|
5
5
|
## Competitive Tracking Process
|
|
6
6
|
|
|
7
|
-
1. Review the company goal and existing market analysis — if
|
|
8
|
-
2. Research and document in
|
|
7
|
+
1. Review the company goal and existing market analysis — if `../../docs/MARKET-ANALYSIS.md` exists, use it as context.
|
|
8
|
+
2. Research and document in `../../docs/COMPETITIVE-LANDSCAPE.md`:
|
|
9
9
|
- **Competitor profiles**: For each key competitor (3-5), document:
|
|
10
10
|
- Product overview and target audience
|
|
11
11
|
- What customers say about switching to/from them
|
|
@@ -4,12 +4,12 @@ A specialist in competitive intelligence (Customer Success or CMO) is handling p
|
|
|
4
4
|
|
|
5
5
|
## Steps
|
|
6
6
|
|
|
7
|
-
1. Read
|
|
7
|
+
1. Read `../../docs/COMPETITIVE-INTEL.md` if it exists. If it does not, check back after the primary competitive-tracking agent has completed their initial audit.
|
|
8
8
|
2. Review recent competitor changes for product-roadmap implications:
|
|
9
9
|
- New features from competitors that close a gap with your product → create a backlog issue "Evaluate [feature] parity with [competitor]" with the relevant section from COMPETITIVE-INTEL.md.
|
|
10
10
|
- Competitor pricing or positioning shifts that affect your value proposition → add a comment to the relevant goal or create an issue for CEO/CMO review.
|
|
11
11
|
3. Update the product backlog with any priority changes driven by competitive pressure (coordinate with CEO before reprioritising existing high-priority items).
|
|
12
|
-
4. Add a `## Product Implications` section to
|
|
12
|
+
4. Add a `## Product Implications` section to `../../docs/COMPETITIVE-INTEL.md` if it doesn't already exist, noting your recommendations.
|
|
13
13
|
5. Mark the issue done.
|
|
14
14
|
|
|
15
15
|
## Rules
|
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
{
|
|
18
18
|
"title": "Build initial competitive landscape",
|
|
19
19
|
"assignTo": "capability:competitive-tracking",
|
|
20
|
-
"description": "Research key competitors: their positioning, strengths, weaknesses, pricing, and recent moves. Document a living competitive landscape in docs/COMPETITIVE-LANDSCAPE.md with actionable differentiation insights."
|
|
20
|
+
"description": "Research key competitors: their positioning, strengths, weaknesses, pricing, and recent moves. Document a living competitive landscape in ../../docs/COMPETITIVE-LANDSCAPE.md with actionable differentiation insights."
|
|
21
21
|
}
|
|
22
22
|
]
|
|
23
23
|
}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
## Competitive Tracking — Done Bar
|
|
2
2
|
|
|
3
3
|
**Done:**
|
|
4
|
-
-
|
|
4
|
+
- `../../docs/COMPETITIVE-INTEL.md` exists with a profile for each tracked competitor that includes: product positioning, key differentiators, pricing model (if public), and a specific takeaway for your product ("what this means for us").
|
|
5
5
|
- Differentiation opportunities are explicitly named — not just competitor feature lists, but concrete gaps or advantages your product has or could develop.
|
|
6
6
|
- Each competitor profile was updated within the last tracking cycle (not stale from a previous run).
|
|
7
7
|
|
|
8
8
|
**Not done:**
|
|
9
9
|
- Competitor profiles are feature lists with no positioning takeaway.
|
|
10
10
|
- "Differentiation opportunities" section is absent or contains only generic observations ("we should improve UX").
|
|
11
|
-
-
|
|
11
|
+
- `../../docs/COMPETITIVE-INTEL.md` was not updated this run (routine ran but no document was touched).
|
|
@@ -4,8 +4,8 @@ You own competitive intelligence. This is a living analysis — profiles evolve
|
|
|
4
4
|
|
|
5
5
|
## Competitive Tracking Process
|
|
6
6
|
|
|
7
|
-
1. Review the company goal and existing market analysis — if
|
|
8
|
-
2. Research and document in
|
|
7
|
+
1. Review the company goal and existing market analysis — if `../../docs/MARKET-ANALYSIS.md` exists, use it as context. Otherwise, start from the project description.
|
|
8
|
+
2. Research and document in `../../docs/COMPETITIVE-LANDSCAPE.md`:
|
|
9
9
|
- **Competitor profiles**: For each key competitor (3-5), document:
|
|
10
10
|
- Product overview and target audience
|
|
11
11
|
- Positioning and messaging
|
package/templates/modules/dependency-management/agents/engineer/skills/dependency-audit.fallback.md
CHANGED
|
@@ -4,10 +4,10 @@ DevOps or Security Engineer primarily owns dependency management. You are the fa
|
|
|
4
4
|
|
|
5
5
|
## Dependency Audit (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/DEPENDENCY-AUDIT.md` exists and no one else has started:
|
|
8
8
|
- Run the package manager's built-in audit command (`npm audit`, `pip-audit`, etc.)
|
|
9
9
|
- Apply safe patch-level updates that don't break tests
|
|
10
|
-
- Document current dependency state in
|
|
10
|
+
- Document current dependency state in `../../docs/DEPENDENCY-AUDIT.md`
|
|
11
11
|
- Mark the document as **provisional** — it needs a security/ops review for CVE prioritization
|
|
12
12
|
2. If DevOps or Security Engineer is active, skip this entirely.
|
|
13
13
|
|
|
@@ -20,7 +20,7 @@ You are responsible for keeping the project's dependencies healthy, secure, and
|
|
|
20
20
|
- Can it be updated in-place (patch/minor bump)?
|
|
21
21
|
- Does it require migration work (major version, breaking changes)?
|
|
22
22
|
- Are there alternatives if the dependency is abandoned?
|
|
23
|
-
5. **Document** findings in
|
|
23
|
+
5. **Document** findings in `../../docs/DEPENDENCY-AUDIT.md`:
|
|
24
24
|
- Summary table of dependencies by status (current, outdated, vulnerable, deprecated)
|
|
25
25
|
- Prioritized upgrade plan with estimated effort
|
|
26
26
|
- Lock file hygiene notes
|
|
@@ -34,7 +34,7 @@ When assigned a "Dependency audit" routine-run issue:
|
|
|
34
34
|
1. Run the vulnerability scan: `npm audit --json` (or equivalent for the project's package manager). Flag any new Critical or High CVEs not present in the last audit.
|
|
35
35
|
2. Check for newly outdated dependencies: compare current versions against the latest. Flag anything more than one major version behind.
|
|
36
36
|
3. Apply safe patch updates (semver patch-only, no breaking changes): update, run the test suite, commit if green.
|
|
37
|
-
4. Update
|
|
37
|
+
4. Update `../../docs/DEPENDENCY-AUDIT.md` with the new scan date, any new findings, and any updates applied.
|
|
38
38
|
5. Mark the routine issue done. If Critical CVEs were found that cannot be patched, create a separate high-priority issue for each and escalate to CEO.
|
|
39
39
|
|
|
40
40
|
## Rules
|
|
@@ -4,7 +4,7 @@ The Game Designer or Engineer primarily owns the game design. You are the fallba
|
|
|
4
4
|
|
|
5
5
|
## Game Design (Fallback)
|
|
6
6
|
|
|
7
|
-
1. If no
|
|
7
|
+
1. If no `../../docs/GDD.md` exists and no one else has started:
|
|
8
8
|
- Write a minimal Game Design Document covering: concept pitch, core mechanic, basic game loop, target platform
|
|
9
9
|
- List obvious design questions that need answers (progression, win conditions, art style)
|
|
10
10
|
- Mark the document as **provisional** — it needs a thorough design review
|