@sylphx/flow 2.15.3 → 2.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/CHANGELOG.md +18 -0
  2. package/assets/slash-commands/continue.md +98 -0
  3. package/assets/slash-commands/{review-account-security.md → guideline-account-security.md} +3 -11
  4. package/assets/slash-commands/{review-admin.md → guideline-admin.md} +3 -11
  5. package/assets/slash-commands/{review-auth.md → guideline-auth.md} +3 -11
  6. package/assets/slash-commands/{review-billing.md → guideline-billing.md} +3 -11
  7. package/assets/slash-commands/{review-code-quality.md → guideline-code-quality.md} +3 -11
  8. package/assets/slash-commands/{review-data-architecture.md → guideline-data-architecture.md} +3 -11
  9. package/assets/slash-commands/{review-database.md → guideline-database.md} +3 -11
  10. package/assets/slash-commands/{review-delivery.md → guideline-delivery.md} +3 -11
  11. package/assets/slash-commands/{review-discovery.md → guideline-discovery.md} +3 -11
  12. package/assets/slash-commands/{review-growth.md → guideline-growth.md} +3 -11
  13. package/assets/slash-commands/{review-i18n.md → guideline-i18n.md} +3 -11
  14. package/assets/slash-commands/{review-ledger.md → guideline-ledger.md} +3 -11
  15. package/assets/slash-commands/{review-observability.md → guideline-observability.md} +3 -11
  16. package/assets/slash-commands/{review-operability.md → guideline-operability.md} +3 -11
  17. package/assets/slash-commands/{review-performance.md → guideline-performance.md} +3 -11
  18. package/assets/slash-commands/{review-pricing.md → guideline-pricing.md} +3 -11
  19. package/assets/slash-commands/{review-privacy.md → guideline-privacy.md} +3 -11
  20. package/assets/slash-commands/{review-pwa.md → guideline-pwa.md} +3 -11
  21. package/assets/slash-commands/{review-referral.md → guideline-referral.md} +3 -11
  22. package/assets/slash-commands/{review-security.md → guideline-security.md} +3 -11
  23. package/assets/slash-commands/{review-seo.md → guideline-seo.md} +3 -11
  24. package/assets/slash-commands/{review-storage.md → guideline-storage.md} +3 -11
  25. package/assets/slash-commands/{review-support.md → guideline-support.md} +3 -11
  26. package/assets/slash-commands/{review-trust-safety.md → guideline-trust-safety.md} +3 -11
  27. package/assets/slash-commands/{review-uiux.md → guideline-uiux.md} +3 -11
  28. package/assets/slash-commands/review.md +68 -0
  29. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,23 @@
1
1
  # @sylphx/flow
2
2
 
3
+ ## 2.16.1 (2025-12-17)
4
+
5
+ ### ♻️ Refactoring
6
+
7
+ - **commands:** simplify /continue and /review - think, don't checklist ([754eec1](https://github.com/SylphxAI/flow/commit/754eec1211719fc68f25ce47510e5797a33e1469))
8
+
9
+ ## 2.16.0 (2025-12-17)
10
+
11
+ ### ✨ Features
12
+
13
+ - **commands:** add closed-loop to /continue ([dca7b76](https://github.com/SylphxAI/flow/commit/dca7b7612c65febef242549ad965289a189ce5e4))
14
+ - **commands:** enhance /continue with role-based simulation ([ca3ebfe](https://github.com/SylphxAI/flow/commit/ca3ebfe06a73f3db722ff8f88c353202067e18f6))
15
+ - **commands:** add /continue slash command for finishing incomplete work ([16c8aaf](https://github.com/SylphxAI/flow/commit/16c8aaf22337713c39395e4465d5bcdf1bfaafd9))
16
+
17
+ ### ♻️ Refactoring
18
+
19
+ - **commands:** split review into mandate + guidelines ([16754bc](https://github.com/SylphxAI/flow/commit/16754bc7403d13dd329b2097c3c8f25e360a7c59))
20
+
3
21
  ## 2.15.3 (2025-12-17)
4
22
 
5
23
  ### ⚡️ Performance
@@ -0,0 +1,98 @@
1
+ ---
2
+ name: continue
3
+ description: Continue incomplete work - find gaps, finish features, fix what's broken
4
+ agent: coder
5
+ ---
6
+
7
+ # Continue
8
+
9
+ Find what's incomplete. Finish it.
10
+
11
+ ## Mandate
12
+
13
+ * **Think, don't checklist.** Understand the project first. What is it trying to do? What would "done" look like?
14
+ * **Delegate workers** for parallel research. You synthesize and verify.
15
+ * **Fix, don't report.** Implement solutions directly.
16
+ * **One pass.** No deferrals. Complete each fix fully.
17
+
18
+ ## How to Find Incomplete Work
19
+
20
+ Don't grep for TODO and call it done. Incomplete work hides in:
21
+
22
+ **What's explicitly unfinished** — Yes, scan for TODO/FIXME/HACK. But ask: why are they there? What was the person avoiding?
23
+
24
+ **What's implicitly broken** — Code that "works" but:
25
+ - Fails silently (empty catch blocks, swallowed errors)
26
+ - Works only in happy path (no validation, no edge cases)
27
+ - Works but confuses users (unclear errors, missing feedback)
28
+ - Works but can't be debugged (no logs, no context)
29
+
30
+ **What's missing entirely** — Features referenced but not implemented. UI that leads nowhere. Promises in docs that code doesn't deliver.
31
+
32
+ ## The Real Test
33
+
34
+ For each part of the system, ask:
35
+
36
+ > "If I were a user trying to accomplish their goal, where would I get stuck?"
37
+
38
+ > "If this broke at 3am, could someone figure out why?"
39
+
40
+ > "If requirements changed tomorrow, what would be painful to modify?"
41
+
42
+ > "If we had 100x traffic, what would fall over first?"
43
+
44
+ These questions reveal incompleteness that checklists miss.
45
+
46
+ ## Execution
47
+
48
+ 1. **Understand the project** — Read README, main entry points, core flows. What is this thing supposed to do?
49
+
50
+ 2. **Walk the critical paths** — Trace actual user journeys through code. Where does the path get uncertain, error-prone, or incomplete?
51
+
52
+ 3. **Find the gaps** — Not just TODOs, but:
53
+ - Dead ends (code that starts something but doesn't finish)
54
+ - Weak spots (minimal implementation that will break under pressure)
55
+ - Missing pieces (what's referenced but doesn't exist)
56
+
57
+ 4. **Prioritize by impact** — What blocks users? What causes data loss? What makes debugging impossible? Fix those first.
58
+
59
+ 5. **Fix completely** — Don't patch. Understand root cause. Implement proper solution. Test it works.
60
+
61
+ ## When to Go Deeper
62
+
63
+ If issues cluster in a domain, invoke `/review <domain>` for thorough analysis:
64
+
65
+ ```
66
+ /review auth — Auth flow issues
67
+ /review security — Validation gaps, injection risks
68
+ /review database — Schema issues, missing indexes
69
+ /review performance — Slow paths, bundle bloat
70
+ ```
71
+
72
+ Full list: auth, account-security, privacy, billing, pricing, ledger, security, trust-safety, uiux, seo, pwa, performance, i18n, database, data-architecture, storage, observability, operability, delivery, growth, referral, support, admin, discovery, code-quality
73
+
74
+ ## Loop
75
+
76
+ After fixing, ask: "Did my fixes introduce new gaps? Did fixing X reveal Y was also broken?"
77
+
78
+ If yes → continue. If no Critical/High issues remain → done.
79
+
80
+ ## Output
81
+
82
+ ```
83
+ ## What I Found
84
+
85
+ [Describe the gaps discovered — not a checklist, but an understanding of what's incomplete and why]
86
+
87
+ ## What I Fixed
88
+
89
+ - [Description of fix and why it matters]
90
+
91
+ ## What Remains
92
+
93
+ - [Issues that need human decision or are blocked]
94
+
95
+ ## Next
96
+
97
+ [/continue again | /review <domain> | done]
98
+ ```
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-account-security
3
- description: Review account security - sessions, MFA, devices, security events
2
+ name: guideline-account-security
3
+ description: Guideline: account security - sessions, MFA, devices, security events
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Account Security Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of account security in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify threats users can't protect themselves from.
7
+ # Account Security Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-admin
3
- description: Review admin - RBAC, bootstrap, audit, operational tools
2
+ name: guideline-admin
3
+ description: Guideline: admin - RBAC, bootstrap, audit, operational tools
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Admin Platform Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of the admin platform in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify operational gaps and safety improvements.
7
+ # Admin Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-auth
3
- description: Review authentication - sign-in, SSO, passkeys, verification
2
+ name: guideline-auth
3
+ description: Guideline: authentication - sign-in, SSO, passkeys, verification
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Authentication Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of authentication in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify security gaps and UX friction in auth flows.
7
+ # Auth Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-billing
3
- description: Review billing - Stripe integration, webhooks, subscription state
2
+ name: guideline-billing
3
+ description: Guideline: billing - Stripe integration, webhooks, subscription state
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Billing Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of billing and payments in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify revenue leakage and reliability improvements.
7
+ # Billing Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-code-quality
3
- description: Review code quality - architecture, types, testing, maintainability
2
+ name: guideline-code-quality
3
+ description: Guideline: code quality - architecture, types, testing, maintainability
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Code Quality Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of code quality in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify code that works but shouldn't exist in its current form.
7
+ # Code Quality Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-data-architecture
3
- description: Review data architecture - boundaries, consistency, state machines
2
+ name: guideline-data-architecture
3
+ description: Guideline: data architecture - boundaries, consistency, state machines
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Data Architecture Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of data architecture in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify architectural weaknesses that will cause problems at scale.
7
+ # Data Architecture Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-database
3
- description: Review database - schema, migrations, performance, reliability
2
+ name: guideline-database
3
+ description: Guideline: database - schema, migrations, performance, reliability
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Database Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of the database in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify schema problems that will hurt at scale.
7
+ # Database Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-delivery
3
- description: Review delivery - CI gates, automated verification, release safety
2
+ name: guideline-delivery
3
+ description: Guideline: delivery - CI gates, automated verification, release safety
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Delivery Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of delivery gates in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what could go wrong in production that we're not catching.
7
+ # Delivery Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-discovery
3
- description: Review discovery - competitive research, opportunities, market positioning
2
+ name: guideline-discovery
3
+ description: Guideline: discovery - competitive research, opportunities, market positioning
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Discovery Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** to discover opportunities for this product.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify opportunities, then **implement improvements directly**. Don't just report — build.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **This review IS exploration** — think broadly and creatively about what could be.
7
+ # Discovery Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-growth
3
- description: Review growth - activation, retention, virality
2
+ name: guideline-growth
3
+ description: Guideline: growth - activation, retention, virality
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Growth Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of growth systems in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify growth opportunities that don't yet exist.
7
+ # Growth Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-i18n
3
- description: Review i18n - localization, routing, translation quality
2
+ name: guideline-i18n
3
+ description: Guideline: i18n - localization, routing, translation quality
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Internationalization Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of internationalization in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what would make the product feel native to each locale.
7
+ # i18n Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-ledger
3
- description: Review ledger - balance systems, financial integrity, reconciliation
2
+ name: guideline-ledger
3
+ description: Guideline: ledger - balance systems, financial integrity, reconciliation
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Ledger Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of any balance/credits/wallet system in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify financial integrity risks before they become real problems.
7
+ # Ledger Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-observability
3
- description: Review observability - logging, tracing, alerting, debugging
2
+ name: guideline-observability
3
+ description: Guideline: observability - logging, tracing, alerting, debugging
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Observability Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of observability in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify the production issues we can't debug today.
7
+ # Observability Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-operability
3
- description: Review operability - workflows, retries, DLQ, incident response
2
+ name: guideline-operability
3
+ description: Guideline: operability - workflows, retries, DLQ, incident response
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Operability Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of operability in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what will break at 3am and how we'd fix it.
7
+ # Operability Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-performance
3
- description: Review performance - speed, Core Web Vitals, bottlenecks
2
+ name: guideline-performance
3
+ description: Guideline: performance - speed, Core Web Vitals, bottlenecks
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Performance Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of performance in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what's making the product feel slow.
7
+ # Performance Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-pricing
3
- description: Review pricing - strategy, packaging, monetization
2
+ name: guideline-pricing
3
+ description: Guideline: pricing - strategy, packaging, monetization
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Pricing Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of pricing in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify monetization opportunities and pricing friction.
7
+ # Pricing Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-privacy
3
- description: Review privacy - consent, PII, data lifecycle, compliance
2
+ name: guideline-privacy
3
+ description: Guideline: privacy - consent, PII, data lifecycle, compliance
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Privacy Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of privacy controls in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify compliance gaps and privacy improvements.
7
+ # Privacy Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-pwa
3
- description: Review PWA - offline experience, installation, engagement
2
+ name: guideline-pwa
3
+ description: Guideline: PWA - offline experience, installation, engagement
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # PWA Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of PWA implementation in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what would make the web experience feel native.
7
+ # PWA Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-referral
3
- description: Review referral - attribution, rewards, fraud prevention
2
+ name: guideline-referral
3
+ description: Guideline: referral - attribution, rewards, fraud prevention
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Referral Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of the referral system in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify growth opportunities and fraud vectors.
7
+ # Referral Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-security
3
- description: Review security - OWASP, headers, authentication, secrets
2
+ name: guideline-security
3
+ description: Guideline: security - OWASP, headers, authentication, secrets
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Security Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of security in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify vulnerabilities and hardening opportunities not listed here.
7
+ # Security Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-seo
3
- description: Review SEO - discoverability, metadata, search rankings
2
+ name: guideline-seo
3
+ description: Guideline: SEO - discoverability, metadata, search rankings
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # SEO Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of SEO in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what would make this product dominate search results.
7
+ # SEO Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-storage
3
- description: Review storage - uploads, file handling, security
2
+ name: guideline-storage
3
+ description: Guideline: storage - uploads, file handling, security
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Storage Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of file storage and uploads in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify security risks and cost optimization opportunities.
7
+ # Storage Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-support
3
- description: Review support - help experience, communications, user satisfaction
2
+ name: guideline-support
3
+ description: Guideline: support - help experience, communications, user satisfaction
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Support Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of support and communications in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify what would make users feel genuinely supported.
7
+ # Support Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-trust-safety
3
- description: Review trust & safety - abuse prevention, moderation, user protection
2
+ name: guideline-trust-safety
3
+ description: Guideline: trust & safety - abuse prevention, moderation, user protection
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # Trust & Safety Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of trust and safety in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: identify abuse vectors before bad actors find them.
7
+ # Trust Safety Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -1,18 +1,10 @@
1
1
  ---
2
- name: review-uiux
3
- description: Review UI/UX - design system, accessibility, user experience
2
+ name: guideline-uiux
3
+ description: Guideline: UI/UX - design system, accessibility, user experience
4
4
  agent: coder
5
5
  ---
6
6
 
7
- # UI/UX Review
8
-
9
- ## Mandate
10
-
11
- * Perform a **deep, thorough review** of UI/UX in this codebase.
12
- * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
13
- * **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
14
- * **Single-pass delivery**: no deferrals; deliver complete implementation.
15
- * **Explore beyond the spec**: if the current design needs fundamental rethinking, propose it.
7
+ # UI/UX Guideline
16
8
 
17
9
  ## Tech Stack
18
10
 
@@ -0,0 +1,68 @@
1
+ ---
2
+ name: review
3
+ description: Review codebase by domain - /review <what to review>
4
+ agent: coder
5
+ args:
6
+ - name: topic
7
+ description: What to review (e.g., auth, security, billing, "the login flow", "why it's slow")
8
+ required: true
9
+ ---
10
+
11
+ # Review: $ARGS
12
+
13
+ ## Mandate
14
+
15
+ * **Understand first.** Don't treat guidelines as checklists — absorb the principles, then apply judgment.
16
+ * **Think like the failure mode.** Security? Think like an attacker. Performance? Think like a slow network. Auth? Think like a confused user.
17
+ * **Delegate workers** for parallel research. You synthesize and verify.
18
+ * **Fix, don't report.** Implement solutions directly.
19
+
20
+ ## Available Guidelines
21
+
22
+ Read relevant guideline(s) based on what you're reviewing:
23
+
24
+ | Guideline | Domain |
25
+ |-----------|--------|
26
+ | `/guideline-auth` | Sign-in, SSO, passkeys, verification |
27
+ | `/guideline-account-security` | MFA, sessions, account recovery |
28
+ | `/guideline-privacy` | Data handling, consent, GDPR/CCPA |
29
+ | `/guideline-billing` | Stripe, webhooks, subscriptions |
30
+ | `/guideline-pricing` | Pricing models, tiers, feature gating |
31
+ | `/guideline-ledger` | Transactions, audit trails, reconciliation |
32
+ | `/guideline-security` | OWASP, validation, secrets |
33
+ | `/guideline-trust-safety` | Abuse prevention, rate limiting, fraud |
34
+ | `/guideline-uiux` | Design system, accessibility |
35
+ | `/guideline-seo` | Meta tags, structured data, crawlability |
36
+ | `/guideline-pwa` | Service workers, offline, installability |
37
+ | `/guideline-performance` | Core Web Vitals, bundle size, caching |
38
+ | `/guideline-i18n` | Localization, routing, hreflang |
39
+ | `/guideline-database` | Schema, indexes, migrations |
40
+ | `/guideline-data-architecture` | Data models, relationships, integrity |
41
+ | `/guideline-storage` | File uploads, CDN, blob storage |
42
+ | `/guideline-observability` | Logging, metrics, tracing, alerts |
43
+ | `/guideline-operability` | Deployment, rollback, feature flags |
44
+ | `/guideline-delivery` | CI/CD, testing, release process |
45
+ | `/guideline-growth` | Onboarding, activation, retention |
46
+ | `/guideline-referral` | Referral programs, viral loops |
47
+ | `/guideline-support` | Help systems, tickets, documentation |
48
+ | `/guideline-admin` | Admin panel, RBAC, config |
49
+ | `/guideline-discovery` | Feature discovery, competitive analysis |
50
+ | `/guideline-code-quality` | Patterns, testing, maintainability |
51
+
52
+ ## Output
53
+
54
+ ```
55
+ ## Review: [topic]
56
+
57
+ ### Understanding
58
+ [How this is implemented. Architecture, choices, tradeoffs.]
59
+
60
+ ### Issues
61
+ [What's wrong and why it matters]
62
+
63
+ ### Fixed
64
+ [Changes made]
65
+
66
+ ### Remaining
67
+ [Needs human decision or blocked]
68
+ ```
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@sylphx/flow",
3
- "version": "2.15.3",
3
+ "version": "2.16.1",
4
4
  "description": "One CLI to rule them all. Unified orchestration layer for Claude Code, OpenCode, Cursor and all AI development tools. Auto-detection, auto-installation, auto-upgrade.",
5
5
  "type": "module",
6
6
  "bin": {