@sylphx/flow 2.28.1 → 2.28.3

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @sylphx/flow
 
+## 2.28.3 (2025-12-19)
+
+### 🐛 Bug Fixes
+
+- **prompts:** instruct agents to use Skill tool explicitly ([45a2d34](https://github.com/SylphxAI/flow/commit/45a2d34fca6cf3064193980b15acdc922ac0f554))
+
+## 2.28.2 (2025-12-19)
+
+Enhance PWA skill with comprehensive native app parity checklist (35 capabilities)
+
+### 📚 Documentation
+
+- **skills:** expand PWA native parity to 35 capabilities ([8d32115](https://github.com/SylphxAI/flow/commit/8d321157ff66894f8b4fc6689eee39b6ce9176d1))
+- **skills:** remove priority categorization from PWA skill ([64d3966](https://github.com/SylphxAI/flow/commit/64d39660da95fc3b03c03534e906d0a9d81e9e1f))
+- **skills:** enhance PWA skill with native app parity checklist ([8840a51](https://github.com/SylphxAI/flow/commit/8840a51e0fa3e9e1c638ca4a101235a9169edca9))
+
 ## 2.28.1 (2025-12-19)
 
 ### 🐛 Bug Fixes

package/assets/agents/builder.md

@@ -43,14 +43,7 @@ Build toward that.
 
 **Ultrathink.** Many minds beat one. Delegate workers to explore from different angles. They critique, you synthesize. Never self-assess.
 
-**Skills.** Before acting on any domain — invoke the skill:
-```
-abuse-prevention, account-security, admin, appsec, auth, billing,
-code-quality, competitive-analysis, data-modeling, database, delivery,
-deployments, growth, i18n, ledger, observability, performance, pricing,
-privacy, pwa, referral, seo, storage, support, uiux
-```
-Skills contain: tech stack decisions, non-negotiables, driving questions. Then exceed them.
+**Skills.** Before acting on any domain — use the Skill tool to load guidelines. Read the guidelines. Then exceed them.
 
 **Act.** No permission needed. No workarounds. Ship it.
 

package/assets/skills/pwa/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pwa
-description: PWA - service workers, offline support. Use when building PWA features.
+description: PWA - native app parity, offline-first, engagement. Use when building installable web apps.
 ---
 
 # PWA Guideline
@@ -8,24 +8,68 @@ description: PWA - service workers, offline support. Use when building PWA featu
 ## Tech Stack
 
 * **Framework**: Next.js
+* **Service Worker**: Serwist (Next.js integration)
 * **Platform**: Vercel
 
 ## Non-Negotiables
 
 * Service worker must not cache personalized/sensitive/authorized content
 * Cache invalidation on deploy must be correct (no stale content)
+* Offline experience must be functional, not just a fallback page
+* Installation prompt must be contextual (after value demonstrated)
+
+## Native App Parity
+
+| Capability | API |
+|------------|-----|
+| True offline | Cache API + localStorage/IndexedDB |
+| Background sync | Background Sync API |
+| App icon badge | Badging API |
+| Local notifications | Notifications API |
+| Push notifications | Web Push API |
+| App shortcuts | manifest.json `shortcuts` |
+| File handling | File Handling API |
+| Protocol handling | registerProtocolHandler |
+| Pull-to-refresh | Touch events + CSS |
+| View transitions | View Transitions API |
+| Bottom sheets | CSS + touch gestures |
+| Skeleton loading | CSS + React Suspense |
+| Swipe gestures | Touch/Pointer events |
+| Haptic feedback | Vibration API |
+| Sound effects | Web Audio API |
+| Media controls | Media Session API |
+| Wake lock | Screen Wake Lock API |
+| Orientation lock | Screen Orientation API |
+| Fullscreen | Fullscreen API |
+| Picture-in-Picture | PiP API |
+| Share | Web Share API |
+| Receive share | Share Target API |
+| Clipboard | Clipboard API |
+| Camera/Mic | MediaDevices API |
+| Geolocation | Geolocation API |
+| Motion sensors | DeviceMotion/Orientation |
+| Bluetooth | Web Bluetooth API |
+| NFC | Web NFC API |
+| Barcode scan | Barcode Detection API |
+| Speech | Web Speech API |
+| Payments | Payment Request API |
+| Credentials | Credential Management API |
+| Idle detection | Idle Detection API |
+| Network status | Network Information API |
+| Reduced motion | `prefers-reduced-motion` |
+| Window controls | Window Controls Overlay |
 
 ## Context
 
-A PWA is an opportunity to deliver native-like experience without an app store. But a bad PWA is worse than no PWA — stale content, broken offline states, and confusing installation prompts erode trust.
+PWA goal: users forget they're in a browser. The gap between "website" and "app" is measured in micro-interactions — haptics, gestures, offline resilience, and engagement hooks.
 
-Consider: what would make users want to install this? What should work offline? How do we handle the transition between online and offline gracefully?
+A bad PWA is worse than no PWA. But a great PWA can match 90% of native with 10% of the effort.
 
 ## Driving Questions
 
-* Would users actually want to install this as an app? Why or why not?
-* What should the offline experience be, and what is it today?
-* What happens when users go offline in the middle of something important?
-* How do we handle cache invalidation without breaking the experience?
-* What push notification opportunities exist that we're not using?
-* What would make the installed experience better than the browser experience?
+* What breaks when the user goes offline mid-action?
+* What would make users install this instead of bookmarking?
+* Which native gestures (swipe, pull, long-press) are missing?
+* What local notifications would drive daily engagement?
+* Where does the app feel "webby" instead of native?
+* What's the first thing users see when they open the installed app?

package/assets/slash-commands/continue.md

@@ -16,13 +16,6 @@ Push for world-class:
 
 **Never self-assess.** Delegate to workers — they critique, you synthesize. Final Gate.
 
-**Invoke skills** before acting on any domain:
-```
-abuse-prevention, account-security, admin, appsec, auth, billing,
-code-quality, competitive-analysis, data-modeling, database, delivery,
-deployments, growth, i18n, ledger, observability, performance, pricing,
-privacy, pwa, referral, seo, storage, support, uiux
-```
-Skills contain: tech stack decisions, non-negotiables, driving questions. Then exceed them.
+**Skills.** Before acting on any domain — use the Skill tool to load guidelines. Read the guidelines. Then exceed them.
 
 `/continue`

package/assets/slash-commands/review.md

@@ -17,14 +17,7 @@ args:
 
 ## Execution
 
-1. **Invoke skills** — Load guidelines for relevant domains:
-   ```
-   abuse-prevention, account-security, admin, appsec, auth, billing,
-   code-quality, competitive-analysis, data-modeling, database, delivery,
-   deployments, growth, i18n, ledger, observability, performance, pricing,
-   privacy, pwa, referral, seo, storage, support, uiux
-   ```
-   Skills contain: tech stack decisions, non-negotiables, driving questions.
+1. **Load skills** — Use the Skill tool to load guidelines for relevant domains. Read the guidelines.
 
 2. **Understand** — How is this implemented? Architecture, choices, tradeoffs.
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sylphx/flow",
-	"version": "2.28.1",
+	"version": "2.28.3",
 	"description": "One CLI to rule them all. Unified orchestration layer for AI coding assistants. Auto-detection, auto-installation, auto-upgrade.",
 	"type": "module",
 	"bin": {