@tudeorangbiasa/sdd-multiagent-opencode 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/.opencode/agents/sdd-explorer.md +75 -0
  2. package/.opencode/agents/sdd-implementer.md +72 -0
  3. package/.opencode/agents/sdd-orchestrator.md +152 -0
  4. package/.opencode/agents/sdd-planner.md +58 -0
  5. package/.opencode/agents/sdd-reviewer.md +74 -0
  6. package/.opencode/agents/sdd-verifier.md +90 -0
  7. package/.opencode/commands/audit.md +75 -0
  8. package/.opencode/commands/brief.md +190 -0
  9. package/.opencode/commands/evolve.md +87 -0
  10. package/.opencode/commands/execute-parallel.md +116 -0
  11. package/.opencode/commands/execute-task.md +81 -0
  12. package/.opencode/commands/generate-prd.md +82 -0
  13. package/.opencode/commands/generate-rules.md +67 -0
  14. package/.opencode/commands/grill-me.md +99 -0
  15. package/.opencode/commands/implement.md +149 -0
  16. package/.opencode/commands/init-sdd.md +141 -0
  17. package/.opencode/commands/plan.md +96 -0
  18. package/.opencode/commands/refine.md +115 -0
  19. package/.opencode/commands/research.md +194 -0
  20. package/.opencode/commands/sdd-full-plan.md +91 -0
  21. package/.opencode/commands/specify.md +124 -0
  22. package/.opencode/commands/tasks.md +110 -0
  23. package/.opencode/commands/upgrade.md +107 -0
  24. package/.opencode/skills/sdd-audit/SKILL.md +59 -0
  25. package/.opencode/skills/sdd-evolve/SKILL.md +95 -0
  26. package/.opencode/skills/sdd-implementation/SKILL.md +88 -0
  27. package/.opencode/skills/sdd-planning/SKILL.md +59 -0
  28. package/.opencode/skills/sdd-research/SKILL.md +44 -0
  29. package/.sdd/config.json +36 -0
  30. package/.sdd/templates/feature-brief-v2.md +65 -0
  31. package/.sdd/templates/plan-compact.md +50 -0
  32. package/.sdd/templates/project-profile-template.json +33 -0
  33. package/.sdd/templates/research-compact.md +114 -0
  34. package/.sdd/templates/roadmap-template.json +29 -0
  35. package/.sdd/templates/roadmap-template.md +66 -0
  36. package/.sdd/templates/spec-compact.md +71 -0
  37. package/.sdd/templates/tasks-compact.md +48 -0
  38. package/.sdd/templates/todo-compact.md +30 -0
  39. package/README.md +272 -0
  40. package/bin/sdd-opencode.js +387 -0
  41. package/opencode.json +98 -0
  42. package/package.json +28 -0
  43. package/vendor/opencode-agent-rules/.opencode/plugins/context-guard.js +7 -0
  44. package/vendor/opencode-agent-rules/.opencode/rules/cli-first.md +31 -0
  45. package/vendor/opencode-agent-rules/.opencode/rules/context-budget.md +39 -0
  46. package/vendor/opencode-agent-rules/.opencode/rules/core-behavior.md +44 -0
  47. package/vendor/opencode-agent-rules/.opencode/rules/status-verification.md +36 -0
  48. package/vendor/opencode-agent-rules/AGENTS.md +64 -0
  49. package/vendor/opencode-agent-rules/opencode.json +9 -0
@@ -0,0 +1,194 @@
1
+ ---
2
+ description: Investigate existing patterns and gather context before specification. Supports --deep for multi-pass web research
3
+ agent: sdd-explorer
4
+ ---
5
+
6
+ Research and document findings without making changes to the codebase.
7
+
8
+ **Skill:** Uses `sdd-research` skill for structured investigation.
9
+
10
+ **Output:** `specs/active/$1/research.md`
11
+
12
+ ---
13
+
14
+ ## Usage
15
+
16
+ ```
17
+ /research $1 $ARGUMENTS
18
+ /research $1 $ARGUMENTS --deep
19
+ ```
20
+
21
+ **Flags:**
22
+ - `--deep` — Multi-pass web investigation with source verification, documentation deep-dives, real-world validation, and confidence assessment.
23
+
24
+ **Examples:**
25
+ ```
26
+ /research user-auth JWT vs session-based authentication patterns
27
+ /research payment-system Stripe integration patterns in existing codebase
28
+ /research caching Redis vs in-memory caching for our use case
29
+ /research database-engine Best database for our use case --deep
30
+ /research auth-provider Compare Auth0 vs Clerk vs Supabase Auth --deep
31
+ ```
32
+
33
+ ---
34
+
35
+ ## Instructions
36
+
37
+ ### Phase 1: Analysis (Readonly)
38
+
39
+ **Step 1: Parse the research request**
40
+ - Extract task-id: `$1`
41
+ - Extract research topic: `$ARGUMENTS`
42
+ - Identify key questions to answer
43
+
44
+ **Step 2: Clarify research scope**
45
+
46
+ Ask if any of these are unclear:
47
+ - Should we focus on internal patterns or external solutions?
48
+ - Are there specific technologies to consider or avoid?
49
+ - What constraints exist (performance, cost, team expertise)?
50
+ - What's the primary goal: understand existing code or explore new approaches?
51
+
52
+ ### Phase 2: Planning (Create Plan)
53
+
54
+ **Present research plan before starting:**
55
+
56
+ ```
57
+ ## Research Plan
58
+
59
+ **Task ID:** $1
60
+ **Topic:** [research topic]
61
+
62
+ **Research Questions:**
63
+ 1. [Key question 1]
64
+ 2. [Key question 2]
65
+ 3. [Key question 3]
66
+
67
+ **Internal Research (Codebase):**
68
+ - Search directories: [list]
69
+ - Patterns to find: [list]
70
+ - Similar features to study: [list]
71
+
72
+ **External Research:**
73
+ - Technologies to evaluate: [list]
74
+ - Best practices to document: [list]
75
+
76
+ **Output:**
77
+ - File: `specs/active/$1/research.md`
78
+ - Structure: Executive Summary → Codebase Analysis → External Options → Recommendations
79
+
80
+ **Estimated time:** 60 minutes
81
+
82
+ Ready to proceed?
83
+ ```
84
+
85
+ **Wait for user approval before proceeding.**
86
+
87
+ ### Phase 3: Execution (After Approval)
88
+
89
+ **Step 1: Create directory structure**
90
+ ```
91
+ specs/active/$1/
92
+ └── research.md
93
+ ```
94
+
95
+ **Step 2: Conduct internal research**
96
+
97
+ Search the codebase using `codebase-memory-mcp`:
98
+ - `search_graph` for similar feature implementations
99
+ - `get_architecture` for patterns and conventions
100
+ - `get_code_snippet` for reusable utilities and components
101
+ - `query_graph` for architectural decisions
102
+
103
+ **For each finding, document:**
104
+ ```markdown
105
+ ### [Pattern/Feature Name]
106
+
107
+ **Location:** `path/to/file.ts`
108
+
109
+ **How it works:**
110
+ [Brief explanation]
111
+
112
+ **Code example:**
113
+ ```[language]
114
+ [Relevant code snippet]
115
+ ```
116
+
117
+ **Reusability:** [How this applies to our task]
118
+ ```
119
+
120
+ **Step 3: Conduct external research**
121
+
122
+ Use `exa_web_search_exa` for external research.
123
+
124
+ **Standard mode** — For each option/technology:
125
+ ```markdown
126
+ ### [Option Name]
127
+
128
+ **What it is:** [Brief description]
129
+
130
+ **Pros:**
131
+ - [Advantage 1]
132
+ - [Advantage 2]
133
+
134
+ **Cons:**
135
+ - [Disadvantage 1]
136
+ - [Disadvantage 2]
137
+
138
+ **Fit for our use case:** [High/Medium/Low] - [Why]
139
+ ```
140
+
141
+ **Deep mode** (`--deep` flag) — Multi-pass investigation:
142
+ 1. **Pass 1 — Landscape scan:** Use `exa_web_search_exa` to survey the solution space, identify top 3-5 candidates
143
+ 2. **Pass 2 — Documentation deep-dive:** Use `webfetch` to read official docs, API references, pricing pages
144
+ 3. **Pass 3 — Real-world validation:** Search for production reviews, benchmarks, comparisons, known issues
145
+ 4. **Pass 4 — Integration feasibility:** Search for integration guides with the project's detected stack
146
+
147
+ For each finding, record the source URL and reliability rating.
148
+
149
+ **Step 4: Generate research.md**
150
+
151
+ Use the structure from the original spec-kit research template.
152
+
153
+ ### Phase 4: Verification
154
+
155
+ **CHECKPOINT: Research Complete (REQUIRED)**
156
+
157
+ Before final output, verify:
158
+ - [ ] File created at `specs/active/$1/research.md`
159
+ - [ ] Codebase patterns documented with examples
160
+ - [ ] Multiple options presented with pros/cons
161
+ - [ ] Comparison matrix included
162
+ - [ ] Recommendations provided with rationale
163
+ - [ ] Open questions listed
164
+
165
+ ---
166
+
167
+ ## Output
168
+
169
+ **Your response MUST end with:**
170
+
171
+ ```
172
+ āœ… Research complete: `specs/active/$1/research.md`
173
+
174
+ **Mode:** Standard | Deep
175
+ **Key Findings:**
176
+ - [Finding 1]
177
+ - [Finding 2]
178
+ - [Finding 3]
179
+
180
+ **Recommendation:** [Primary recommendation]
181
+ **Confidence:** [High/Medium/Low] (deep research only)
182
+
183
+ **Codebase patterns found:** [Count] reusable patterns
184
+ **Options evaluated:** [Count] approaches compared
185
+ **Sources consulted:** [Count] (deep research only)
186
+
187
+ **Next steps:**
188
+ - Review the research document
189
+ - Discuss recommendations with team if needed
190
+ - Run `/specify $1` to define requirements
191
+ - Or run `/plan $1` if requirements are clear
192
+
193
+ **Open questions:** [Count] items need input before proceeding
194
+ ```
@@ -0,0 +1,91 @@
1
+ ---
2
+ description: Create a comprehensive project roadmap from A to Z with kanban-style task organization, epic hierarchy, and DAG-based parallel execution
3
+ agent: sdd-orchestrator
4
+ ---
5
+
6
+ **You are a project roadmap architect.** Create complete project plans with epic-level organization, task hierarchy, and kanban board structure.
7
+
8
+ **Supports `--until-finish` flag** for automated execution of the entire project after roadmap creation.
9
+
10
+ ---
11
+
12
+ ## Usage
13
+
14
+ ```
15
+ /sdd-full-plan $1 $ARGUMENTS
16
+ ```
17
+
18
+ **Examples:**
19
+ ```
20
+ /sdd-full-plan blog-platform Full-featured blog with CMS and analytics
21
+ /sdd-full-plan ecommerce-app Multi-vendor marketplace --until-finish
22
+ ```
23
+
24
+ ### The `--until-finish` Flag
25
+
26
+ When provided, automatically executes all tasks after roadmap creation:
27
+ - Creates roadmap (Phase 1-3)
28
+ - Executes ALL tasks in dependency order
29
+ - Stops on error and reports issue
30
+
31
+ ---
32
+
33
+ ## Instructions
34
+
35
+ ### Phase 1: Analysis
36
+
37
+ 1. **Parse project request** - Extract project-id: `$1` and description: `$ARGUMENTS`
38
+ 2. **Gather requirements** - Ask about goal, users, tech stack, timeline, team size, must-haves, nice-to-haves
39
+ 3. **Assess complexity** - Determine level (Simple/Medium/Complex/Enterprise) and recommended SDD approach
40
+
41
+ ### Phase 2: Planning
42
+
43
+ **Present roadmap preview** with epic structure, complexity, estimated duration, and SDD approach. Wait for approval.
44
+
45
+ **Ask execution mode:**
46
+ - **Option A:** One-by-one processing (interactive, step-by-step)
47
+ - **Option B:** Immediate execution (generate all at once)
48
+ - **Option C:** Phased creation (recommended for enterprise: 8+ epics, 40+ tasks)
49
+
50
+ Wait for execution mode selection before proceeding.
51
+
52
+ ### Phase 3: Execution
53
+
54
+ **Create directory structure:**
55
+ ```
56
+ specs/todo-roadmap/$1/
57
+ ā”œā”€ā”€ roadmap.json
58
+ ā”œā”€ā”€ roadmap.md
59
+ ā”œā”€ā”€ tasks/
60
+ └── execution-log.md
61
+ ```
62
+
63
+ **Generate roadmap.json** with: Project metadata, Kanban columns, Tasks/epics with dependencies and DAG structure, Statistics.
64
+
65
+ **Generate task JSON files** (`tasks/[task-id].json`) with: Task metadata, Dependencies, SDD command mappings, `sdd.touchedFiles` for implementation tasks.
66
+
67
+ ### Phase 4: Verification
68
+
69
+ Before final output, verify:
70
+ - roadmap.json is valid JSON
71
+ - roadmap.md is readable
72
+ - All tasks have SDD command mappings
73
+ - Dependencies are logical (no cycles)
74
+ - execution-log.md created
75
+
76
+ ### Phase 5: Automated Execution (Only with `--until-finish`)
77
+
78
+ If `--until-finish` flag provided:
79
+ 1. **Pre-Execution Summary** — Show roadmap summary and execution queue
80
+ 2. **Delegate to `sdd-orchestrator`** for parallel DAG execution
81
+ 3. **Orchestrator identifies ready tasks** from `dag.roots` and `dag.parallelGroups`
82
+ 4. **Orchestrator spawns** `sdd-implementer` subagents for each ready task in parallel
83
+ 5. **Each implementer spawns** `sdd-verifier` as child subagent
84
+ 6. **Batch completion** — collect results, update roadmap, identify next ready tasks
85
+ 7. **Repeat** until all tasks complete or a blocker is hit
86
+
87
+ ---
88
+
89
+ ## Output
90
+
91
+ End with roadmap summary including epics and tasks count, estimated duration and complexity, files created, epic breakdown, and execution commands.
@@ -0,0 +1,124 @@
1
+ ---
2
+ description: Transform vague feature ideas into detailed, testable requirements with user stories and acceptance criteria
3
+ agent: sdd-planner
4
+ ---
5
+
6
+ You are a requirements analyst agent. Extract clear, complete requirements through strategic questioning and structured documentation.
7
+
8
+ **Skill:** Uses `sdd-planning` skill.
9
+
10
+ **Output:** `specs/active/$1/spec.md`
11
+
12
+ ---
13
+
14
+ ## Usage
15
+
16
+ ```
17
+ /specify $1 $ARGUMENTS
18
+ ```
19
+
20
+ **Examples:**
21
+ - `/specify user-auth User authentication with login, logout, and password reset`
22
+ - `/specify checkout-flow One-page checkout with guest option and multiple payment methods`
23
+ - `/specify notification-system Real-time notifications with email and push support`
24
+
25
+ ---
26
+
27
+ ## Instructions
28
+
29
+ ### Phase 1: Analysis
30
+
31
+ 1. **Parse the feature request** - Extract task-id: `$1` and feature description: `$ARGUMENTS`
32
+ 2. **Check for existing research** - Look for `specs/active/$1/research.md` and incorporate findings
33
+ 3. **Strategic questioning** - Ask questions in three categories:
34
+
35
+ **Category 1: Problem & Users**
36
+ - What specific problem does this solve?
37
+ - Who are the primary users?
38
+ - What's their current pain point?
39
+
40
+ **Category 2: Core Requirements**
41
+ - What are the 3-5 core features this MUST have?
42
+ - Which would you build first if you could only pick one?
43
+ - What's explicitly OUT of scope?
44
+
45
+ **Category 3: Constraints & Success**
46
+ - Any technical constraints?
47
+ - How will you know this is successful?
48
+ - Any deadline or timeline considerations?
49
+
50
+ **Validation:** Problem clearly stated, at least 3 core features, at least 1 exclusion defined.
51
+
52
+ ### Phase 2: Planning
53
+
54
+ **Present spec structure before creating:**
55
+
56
+ ```
57
+ ## Specification Plan
58
+
59
+ **Task ID:** $1
60
+ **Feature:** [feature name]
61
+
62
+ **What I understood:**
63
+ - Problem: [summary]
64
+ - Users: [who]
65
+ - Core features: [list]
66
+
67
+ **Specification structure:**
68
+ 1. Problem Statement
69
+ 2. User Personas
70
+ 3. Functional Requirements (with user stories)
71
+ 4. Non-Functional Requirements
72
+ 5. Out of Scope
73
+ 6. Edge Cases & Error Handling
74
+ 7. Success Metrics
75
+
76
+ **User stories I'll create:** [count]
77
+ **Edge cases to cover:** [count]
78
+
79
+ Does this capture what you want? Ready to create the spec?
80
+ ```
81
+
82
+ **Wait for user approval before proceeding.**
83
+
84
+ ### Phase 3: Execution
85
+
86
+ **Create directory if it doesn't exist:** `specs/active/$1/`
87
+
88
+ **Generate `specs/active/$1/spec.md`** with the full specification structure including Problem Statement, User Personas, Functional Requirements with user stories and acceptance criteria, Non-Functional Requirements, Out of Scope, Edge Cases & Error Handling, Success Metrics, Open Questions, and Revision History.
89
+
90
+ ### Phase 4: Verification
91
+
92
+ **Before final output, verify:**
93
+ - File created at `specs/active/$1/spec.md`
94
+ - Problem statement is clear
95
+ - At least 3 user stories with acceptance criteria
96
+ - Non-functional requirements defined
97
+ - Out of scope items listed
98
+ - Edge cases documented
99
+ - Success metrics defined
100
+
101
+ ---
102
+
103
+ ## Output
104
+
105
+ **Your response MUST end with:**
106
+
107
+ ```
108
+ āœ… Specification created: `specs/active/$1/spec.md`
109
+
110
+ **Summary:**
111
+ - Problem: [One sentence summary]
112
+ - User stories: [Count]
113
+ - Requirements: [Count] functional, [Count] non-functional
114
+ - Edge cases: [Count]
115
+
116
+ **Key features:**
117
+ 1. [Feature 1]
118
+ 2. [Feature 2]
119
+ 3. [Feature 3]
120
+
121
+ **Next steps:**
122
+ - Review the specification with stakeholders
123
+ - Run `/plan $1` to create technical implementation plan
124
+ ```
@@ -0,0 +1,110 @@
1
+ ---
2
+ description: Break down a technical plan into actionable, prioritized development tasks with effort estimates and dependencies
3
+ agent: sdd-planner
4
+ ---
5
+
6
+ You are a project planning agent that transforms technical plans into actionable, prioritized task lists.
7
+
8
+ **Output:** `specs/active/$1/tasks.md`
9
+
10
+ ---
11
+
12
+ ## Prerequisites
13
+
14
+ - Must have existing `plan.md` file in task directory
15
+
16
+ ## Usage
17
+
18
+ ```
19
+ /tasks $1
20
+ /tasks $1 --tdd
21
+ ```
22
+
23
+ **Flags:**
24
+ | Flag | Description |
25
+ |------|-------------|
26
+ | `--tdd` | Generate TDD tasks: each task includes test-first approach with failing test → implementation → pass |
27
+
28
+ ---
29
+
30
+ ## Instructions
31
+
32
+ ### Step 1: Read Planning Documents
33
+
34
+ Read in order:
35
+ 1. `specs/active/$1/plan.md` (REQUIRED)
36
+ 2. `specs/active/$1/spec.md` (if exists)
37
+ 3. `specs/active/$1/research.md` (if exists)
38
+
39
+ **If plan.md doesn't exist:** Suggest running `/plan $1` or `/brief $1` first.
40
+
41
+ ### Step 2: Analyze & Preview
42
+
43
+ Present a preview:
44
+
45
+ ```
46
+ ## Task Breakdown Preview
47
+
48
+ **Task ID:** $1
49
+ **Phases:** [Count] phases, [X] total tasks
50
+ **Estimated effort:** [Total hours/days]
51
+ **Key dependencies:** [List critical blockers]
52
+
53
+ Ready to generate the full task breakdown?
54
+ ```
55
+
56
+ **Wait for user approval before proceeding.**
57
+
58
+ ### Step 3: Generate tasks.md
59
+
60
+ **Create directory if it doesn't exist:** `specs/active/$1/`
61
+
62
+ **Generate `tasks.md`** with: Summary table, Phases with tasks (each with Description, Acceptance Criteria, Effort, Priority, Dependencies), Quick Reference Checklist, Next Steps.
63
+
64
+ **If --tdd flag:** Each task should include TDD-specific structure:
65
+
66
+ ```markdown
67
+ ### Task X: [Title] --tdd
68
+
69
+ **Description:** [What to build]
70
+
71
+ **TDD Steps:**
72
+ 1. **Write failing test** - Define expected behavior in test
73
+ 2. **Implement minimum code** - Only what's needed to pass
74
+ 3. **Verify test passes** - Run focused test
75
+ 4. **Refactor** - Clean up after pass (optional)
76
+
77
+ **Test file:** `tests/[feature].test.ts`
78
+ **Acceptance Criteria:**
79
+ - [ ] Test fails before implementation
80
+ - [ ] Implementation makes test pass
81
+ - [ ] No extra features added
82
+
83
+ **Effort:** [X] hours
84
+ **Priority:** [high/medium/low]
85
+ **Dependencies:** [list]
86
+ ```
87
+
88
+ ### Verification
89
+
90
+ Before final output, verify:
91
+ - [ ] File created at `specs/active/$1/tasks.md`
92
+ - [ ] All tasks have acceptance criteria and effort estimates
93
+ - [ ] Dependencies are clearly marked
94
+ - [ ] No task exceeds 2 days
95
+
96
+ ---
97
+
98
+ ## Output
99
+
100
+ ```
101
+ āœ… Tasks created: `specs/active/$1/tasks.md`
102
+
103
+ **Summary:**
104
+ - Total tasks: [Count]
105
+ - Phases: [Count]
106
+ - Estimated effort: [Total]
107
+
108
+ **Ready to implement:**
109
+ - Run `/implement $1` to start execution
110
+ ```
@@ -0,0 +1,107 @@
1
+ ---
2
+ description: Escalate from lightweight SDD Quick Planning (Brief) to comprehensive SDD Full Planning when complexity is discovered during development
3
+ ---
4
+
5
+ **Planning escalation agent** - Expand lightweight briefs into comprehensive SDD documentation when complexity warrants it. Read existing briefs, validate upgrade need, expand content into research.md, spec.md, plan.md, and tasks.md while preserving all existing decisions and context.
6
+
7
+ ---
8
+
9
+ ## Usage
10
+
11
+ ```
12
+ /upgrade $1 $ARGUMENTS
13
+ ```
14
+
15
+ **Examples:**
16
+ ```
17
+ /upgrade checkout-flow Discovered PCI compliance requirements
18
+ /upgrade user-auth Multiple third-party integrations needed
19
+ /upgrade notification-system Architecture more complex than expected
20
+ ```
21
+
22
+ ---
23
+
24
+ ## Instructions
25
+
26
+ ### Phase 1: Analysis (Readonly)
27
+
28
+ **Step 1: Find existing brief**
29
+
30
+ Look for: `specs/active/$1/feature-brief.md`
31
+
32
+ **If brief not found:** Suggest creating a brief first or starting with full SDD.
33
+
34
+ **Step 2: Read and analyze the brief** - Extract problem statement, target users, core requirements, technical approach, next actions, discoveries
35
+
36
+ **Step 3: Walk through Escalation Decision Tree**
37
+
38
+ Present validation questions about complexity, risk, and uncertainty. Score and recommend.
39
+
40
+ ### Phase 2: Planning (Create Plan)
41
+
42
+ **If upgrade is confirmed, present expansion plan:**
43
+
44
+ ```
45
+ ## Upgrade Plan
46
+
47
+ **Task:** $1
48
+ **Existing:** `specs/active/$1/feature-brief.md`
49
+
50
+ **Documents to create:**
51
+ 1. **research.md** - Codebase analysis, external options, recommendations
52
+ 2. **spec.md** - User stories with acceptance criteria, non-functional requirements, edge cases
53
+ 3. **plan.md** - Full architecture, component design, API contracts
54
+ 4. **tasks.md** - Phased breakdown, effort estimates, dependencies
55
+
56
+ **Content mapping:**
57
+ | Brief Section | Expands To |
58
+ |---------------|------------|
59
+ | Problem Statement | spec.md: Problem & Users |
60
+ | Core Requirements | spec.md: Functional Requirements |
61
+ | Technical Approach | plan.md: Architecture |
62
+ | Next Actions | tasks.md: Task Breakdown |
63
+
64
+ Ready to begin the upgrade?
65
+ ```
66
+
67
+ **Wait for user approval before proceeding.**
68
+
69
+ ### Phase 3: Execution (After Approval)
70
+
71
+ **Step 1: Create research.md** - Expand from brief's technical approach
72
+ **Step 2: Create spec.md** - Expand requirements from brief
73
+ **Step 3: Create plan.md** - Expand technical approach
74
+ **Step 4: Create tasks.md** - Expand next actions
75
+ **Step 5: Update the original brief** - Add upgrade notice
76
+
77
+ ### Phase 4: Verification
78
+
79
+ **CHECKPOINT: Upgrade Complete (REQUIRED)**
80
+
81
+ Before final output, verify:
82
+ - [ ] research.md created with brief context
83
+ - [ ] spec.md created with expanded requirements
84
+ - [ ] plan.md created with expanded architecture
85
+ - [ ] tasks.md created with expanded task breakdown
86
+ - [ ] feature-brief.md marked as upgraded
87
+ - [ ] All brief content preserved in new documents
88
+
89
+ ---
90
+
91
+ ## Output
92
+
93
+ ```
94
+ āœ… Upgrade complete: $1
95
+
96
+ **Upgraded from:** SDD Quick Brief → SDD Full
97
+
98
+ **Documents created:**
99
+ - `specs/active/$1/research.md` - Research & context
100
+ - `specs/active/$1/spec.md` - Full specification
101
+ - `specs/active/$1/plan.md` - Technical architecture
102
+ - `specs/active/$1/tasks.md` - Implementation breakdown
103
+
104
+ **Content preserved:** Problem statement, requirements, technical approach, discoveries/changelog
105
+
106
+ **Next steps:** Review expanded documents, fill gaps if needed, run `/implement $1` when ready
107
+ ```
@@ -0,0 +1,59 @@
1
+ ---
2
+ name: sdd-audit
3
+ description: Structured compliance checks for SDD workflows. Activates when auditing implementations against specifications, reviewing code quality, or validating security and performance. Use with /audit command.
4
+ ---
5
+
6
+ ## What I do
7
+
8
+ - Compare implementation against specifications systematically
9
+ - Identify security vulnerabilities, performance issues, and code quality problems
10
+ - Generate structured review comments with severity levels
11
+ - Propose fixes after thorough investigation
12
+
13
+ ## When to use me
14
+
15
+ Use this skill when:
16
+ - Running `/audit` command
17
+ - Need to verify implementation matches spec
18
+ - Pre-merge quality gate
19
+ - Investigating specific issues or bugs
20
+
21
+ ## Audit Protocol
22
+
23
+ ### Phase 1: Load Specifications
24
+ 1. Read `spec.md` for requirements
25
+ 2. Read `plan.md` for intended approach
26
+ 3. Read `tasks.md` and `todo-list.md` for completed work
27
+
28
+ ### Phase 2: Analyze Implementation
29
+ 1. Identify completed tasks
30
+ 2. Read actual implementation files using `codebase-memory-mcp`
31
+ 3. Compare code against spec/plan requirements
32
+
33
+ ### Phase 3: Security Review Checklist
34
+ - [ ] Input validation on all user inputs
35
+ - [ ] Authentication and authorization checks
36
+ - [ ] No secrets or credentials in code
37
+ - [ ] SQL injection protection (parameterized queries)
38
+ - [ ] XSS protection (output encoding)
39
+ - [ ] CSRF protection for state-changing operations
40
+ - [ ] Secure data handling (encryption, hashing)
41
+
42
+ ### Phase 4: Performance Review Checklist
43
+ - [ ] No N+1 query patterns
44
+ - [ ] Efficient algorithms (avoid O(n²) where O(n) possible)
45
+ - [ ] Proper caching strategy
46
+ - [ ] No memory leaks (event listeners, subscriptions)
47
+ - [ ] Lazy loading where appropriate
48
+
49
+ ### Phase 5: Generate Findings
50
+
51
+ **Severity Levels:**
52
+ - šŸ”“ **CRITICAL**: Broken, security risk, blocker
53
+ - 🟠 **MAJOR**: Logic error, missing feature
54
+ - 🟔 **MINOR**: Style, optimization, cleanup
55
+ - ⚪ **OUTDATED**: Code correct, spec wrong
56
+
57
+ ## Output Template
58
+
59
+ Generate audit report with: Executive Summary, Quick Stats, Review Comments table, Detailed Findings, Recommended Actions.