@sylphx/flow 2.16.1 → 2.16.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/assets/{slash-commands/guideline-account-security.md → skills/account-security/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-admin.md → skills/admin/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-auth.md → skills/auth/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-billing.md → skills/billing/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-code-quality.md → skills/code-quality/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-data-architecture.md → skills/data-architecture/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-database.md → skills/database/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-delivery.md → skills/delivery/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-discovery.md → skills/discovery/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-growth.md → skills/growth/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-i18n.md → skills/i18n/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-ledger.md → skills/ledger/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-observability.md → skills/observability/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-operability.md → skills/operability/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-performance.md → skills/performance/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-pricing.md → skills/pricing/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-privacy.md → skills/privacy/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-pwa.md → skills/pwa/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-referral.md → skills/referral/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-security.md → skills/security/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-seo.md → skills/seo/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-storage.md → skills/storage/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-support.md → skills/support/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-trust-safety.md → skills/trust-safety/SKILL.md} +2 -3
- package/assets/{slash-commands/guideline-uiux.md → skills/uiux/SKILL.md} +2 -3
- package/assets/slash-commands/continue.md +6 -13
- package/assets/slash-commands/review.md +8 -32
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,19 @@
|
|
|
1
1
|
# @sylphx/flow
|
|
2
2
|
|
|
3
|
+
## 2.16.2 (2025-12-17)
|
|
4
|
+
|
|
5
|
+
### 🐛 Bug Fixes
|
|
6
|
+
|
|
7
|
+
- **commands:** tell LLM to use SlashCommand tool for /review and /continue ([6983015](https://github.com/SylphxAI/flow/commit/6983015b97e89a48e973106828672b8b3000dce8))
|
|
8
|
+
|
|
9
|
+
### ♻️ Refactoring
|
|
10
|
+
|
|
11
|
+
- **assets:** convert guidelines to Skills (model-invoked) ([2eb8d01](https://github.com/SylphxAI/flow/commit/2eb8d01162f00a127c5666c8afd9b63fc477ea42))
|
|
12
|
+
|
|
13
|
+
### 🔧 Chores
|
|
14
|
+
|
|
15
|
+
- trigger release workflow ([69d661c](https://github.com/SylphxAI/flow/commit/69d661c582157650df855a3a31e21ad6a8b3e7bf))
|
|
16
|
+
|
|
3
17
|
## 2.16.1 (2025-12-17)
|
|
4
18
|
|
|
5
19
|
### ♻️ Refactoring
|
package/assets/{slash-commands/guideline-account-security.md → skills/account-security/SKILL.md}
RENAMED
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: account-security
|
|
3
|
+
description: Account security - MFA, sessions, recovery. Use when protecting user accounts.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Account Security Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: auth
|
|
3
|
+
description: Authentication patterns - sign-in, SSO, passkeys, sessions. Use when implementing auth flows.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Auth Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: billing
|
|
3
|
+
description: Billing - Stripe, webhooks, subscriptions. Use when implementing payments.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Billing Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: code-quality
|
|
3
|
+
description: Code quality - patterns, testing, maintainability. Use for code review.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Code Quality Guideline
|
package/assets/{slash-commands/guideline-data-architecture.md → skills/data-architecture/SKILL.md}
RENAMED
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: data-architecture
|
|
3
|
+
description: Data architecture - models, relationships. Use when designing data structures.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Data Architecture Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: discovery
|
|
3
|
+
description: Feature discovery - competitive analysis. Use when exploring features.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Discovery Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: observability
|
|
3
|
+
description: Observability - logging, metrics, tracing. Use when adding monitoring.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Observability Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: operability
|
|
3
|
+
description: Operations - deployment, rollback, feature flags. Use for ops tooling.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Operability Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: performance
|
|
3
|
+
description: Performance - Core Web Vitals, bundle size. Use when optimizing speed.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Performance Guideline
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
---
|
|
2
|
-
name:
|
|
3
|
-
description:
|
|
4
|
-
agent: coder
|
|
2
|
+
name: trust-safety
|
|
3
|
+
description: Trust and safety - abuse prevention, rate limiting. Use when fighting bad actors.
|
|
5
4
|
---
|
|
6
5
|
|
|
7
6
|
# Trust Safety Guideline
|
|
@@ -58,24 +58,17 @@ These questions reveal incompleteness that checklists miss.
|
|
|
58
58
|
|
|
59
59
|
5. **Fix completely** — Don't patch. Understand root cause. Implement proper solution. Test it works.
|
|
60
60
|
|
|
61
|
-
##
|
|
61
|
+
## Skills
|
|
62
62
|
|
|
63
|
-
|
|
63
|
+
Domain knowledge auto-activates when relevant. Available skills:
|
|
64
64
|
|
|
65
|
-
|
|
66
|
-
/review auth — Auth flow issues
|
|
67
|
-
/review security — Validation gaps, injection risks
|
|
68
|
-
/review database — Schema issues, missing indexes
|
|
69
|
-
/review performance — Slow paths, bundle bloat
|
|
70
|
-
```
|
|
71
|
-
|
|
72
|
-
Full list: auth, account-security, privacy, billing, pricing, ledger, security, trust-safety, uiux, seo, pwa, performance, i18n, database, data-architecture, storage, observability, operability, delivery, growth, referral, support, admin, discovery, code-quality
|
|
65
|
+
auth, account-security, privacy, billing, pricing, ledger, security, trust-safety, uiux, seo, pwa, performance, i18n, database, data-architecture, storage, observability, operability, delivery, growth, referral, support, admin, discovery, code-quality
|
|
73
66
|
|
|
74
67
|
## Loop
|
|
75
68
|
|
|
76
|
-
After fixing
|
|
69
|
+
After fixing: "Did my fixes introduce new gaps? Did fixing X reveal Y was also broken?"
|
|
77
70
|
|
|
78
|
-
If yes → continue. If no Critical/High issues remain → done.
|
|
71
|
+
If yes → run `/continue` again. If no Critical/High issues remain → done.
|
|
79
72
|
|
|
80
73
|
## Output
|
|
81
74
|
|
|
@@ -94,5 +87,5 @@ If yes → continue. If no Critical/High issues remain → done.
|
|
|
94
87
|
|
|
95
88
|
## Next
|
|
96
89
|
|
|
97
|
-
[/continue again |
|
|
90
|
+
[/continue again | done]
|
|
98
91
|
```
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: review
|
|
3
|
-
description: Review codebase by
|
|
3
|
+
description: Review codebase by topic - /review <what to review>
|
|
4
4
|
agent: coder
|
|
5
5
|
args:
|
|
6
6
|
- name: topic
|
|
7
|
-
description: What to review (e.g., auth, security,
|
|
7
|
+
description: What to review (e.g., auth, security, "the login flow", "why it's slow")
|
|
8
8
|
required: true
|
|
9
9
|
---
|
|
10
10
|
|
|
@@ -12,42 +12,18 @@ args:
|
|
|
12
12
|
|
|
13
13
|
## Mandate
|
|
14
14
|
|
|
15
|
-
* **Understand first.**
|
|
15
|
+
* **Understand first.** Absorb the principles, then apply judgment.
|
|
16
16
|
* **Think like the failure mode.** Security? Think like an attacker. Performance? Think like a slow network. Auth? Think like a confused user.
|
|
17
17
|
* **Delegate workers** for parallel research. You synthesize and verify.
|
|
18
18
|
* **Fix, don't report.** Implement solutions directly.
|
|
19
19
|
|
|
20
|
-
##
|
|
20
|
+
## Skills
|
|
21
21
|
|
|
22
|
-
|
|
22
|
+
Domain knowledge is available through Skills that auto-activate based on context:
|
|
23
23
|
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
| `/guideline-account-security` | MFA, sessions, account recovery |
|
|
28
|
-
| `/guideline-privacy` | Data handling, consent, GDPR/CCPA |
|
|
29
|
-
| `/guideline-billing` | Stripe, webhooks, subscriptions |
|
|
30
|
-
| `/guideline-pricing` | Pricing models, tiers, feature gating |
|
|
31
|
-
| `/guideline-ledger` | Transactions, audit trails, reconciliation |
|
|
32
|
-
| `/guideline-security` | OWASP, validation, secrets |
|
|
33
|
-
| `/guideline-trust-safety` | Abuse prevention, rate limiting, fraud |
|
|
34
|
-
| `/guideline-uiux` | Design system, accessibility |
|
|
35
|
-
| `/guideline-seo` | Meta tags, structured data, crawlability |
|
|
36
|
-
| `/guideline-pwa` | Service workers, offline, installability |
|
|
37
|
-
| `/guideline-performance` | Core Web Vitals, bundle size, caching |
|
|
38
|
-
| `/guideline-i18n` | Localization, routing, hreflang |
|
|
39
|
-
| `/guideline-database` | Schema, indexes, migrations |
|
|
40
|
-
| `/guideline-data-architecture` | Data models, relationships, integrity |
|
|
41
|
-
| `/guideline-storage` | File uploads, CDN, blob storage |
|
|
42
|
-
| `/guideline-observability` | Logging, metrics, tracing, alerts |
|
|
43
|
-
| `/guideline-operability` | Deployment, rollback, feature flags |
|
|
44
|
-
| `/guideline-delivery` | CI/CD, testing, release process |
|
|
45
|
-
| `/guideline-growth` | Onboarding, activation, retention |
|
|
46
|
-
| `/guideline-referral` | Referral programs, viral loops |
|
|
47
|
-
| `/guideline-support` | Help systems, tickets, documentation |
|
|
48
|
-
| `/guideline-admin` | Admin panel, RBAC, config |
|
|
49
|
-
| `/guideline-discovery` | Feature discovery, competitive analysis |
|
|
50
|
-
| `/guideline-code-quality` | Patterns, testing, maintainability |
|
|
24
|
+
auth, account-security, privacy, billing, pricing, ledger, security, trust-safety, uiux, seo, pwa, performance, i18n, database, data-architecture, storage, observability, operability, delivery, growth, referral, support, admin, discovery, code-quality
|
|
25
|
+
|
|
26
|
+
You don't need to invoke them — they activate when relevant.
|
|
51
27
|
|
|
52
28
|
## Output
|
|
53
29
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sylphx/flow",
|
|
3
|
-
"version": "2.16.
|
|
3
|
+
"version": "2.16.2",
|
|
4
4
|
"description": "One CLI to rule them all. Unified orchestration layer for Claude Code, OpenCode, Cursor and all AI development tools. Auto-detection, auto-installation, auto-upgrade.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|