@uzysjung/agent-harness 26.160.0 → 26.161.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -17,7 +17,7 @@ import {
17
17
  init_esm_shims,
18
18
  residentCost,
19
19
  resolveBundleRoot
20
- } from "./chunk-ZXWOY5VO.js";
20
+ } from "./chunk-MBRLCU5O.js";
21
21
 
22
22
  // src/trust-tier-drift.ts
23
23
  init_esm_shims();
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@uzysjung/agent-harness",
3
- "version": "26.160.0",
3
+ "version": "26.161.0",
4
4
  "description": "Curate vetted AI-coding skills & plugins by your tech stack — install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
5
5
  "type": "module",
6
6
  "publishConfig": {
@@ -45,10 +45,10 @@
45
45
  "devDependencies": {
46
46
  "@biomejs/biome": "^2.4.13",
47
47
  "@types/node": "^25.6.0",
48
- "@vitest/coverage-v8": "^4.1.10",
48
+ "@vitest/coverage-v8": "^4.1.11",
49
49
  "tsup": "^8.3.0",
50
50
  "typescript": "^5.6.0",
51
- "vitest": "^4.1.10"
51
+ "vitest": "^4.1.11"
52
52
  },
53
53
  "license": "MIT",
54
54
  "repository": {
@@ -32,6 +32,7 @@ audit-harness-fit/
32
32
  |---|---|
33
33
  | 불필요한 질문·반복 검증 | 실제 마찰을 만드는 지시, 유용한 기본 행동과 추가 확인 조건, 유효한 근거 재사용 |
34
34
  | 지침 충돌 | 양쪽 원문과 충돌 상황, 확정된 의도와 실제 구현, 적용 권한에 맞는 수정안 |
35
+ | 출처 간 원칙 정합 | 우선순위표 → 문장 대장(빠진 문장은 "미평가"로) → 역방향 대조 → 알려진 충돌로 대장 검증 → 위임 범위 안 수정은 묻지 않고 적용 |
35
36
  | 지침 가치·자율 선택·모델 적합성 | 유지·수정·조건 축소·보충·통합·이관·제거·보류 판단, 유용한 도구와 맥락 보존 |
36
37
  | 긴 결정 사유·히스토리 | 본문과 메뉴에는 현재 지시, 긴 이력은 필요할 때 읽는 별도 문서 |
37
38
  | 사용자 결과·검증·실행 경로 | 사용 장면과 핵심 계약별 충분한 증거, 상황에 맞는 검증 시점과 도구·모델·리뷰어 선택 |
@@ -30,6 +30,7 @@ criteria and authority boundaries are not lowered on that basis.
30
30
  | Requested work | Read | Behavior |
31
31
  |---|---|---|
32
32
  | Audit, reconcile, or propose improvements | [Audit](references/audit.md) | Read-only findings and proposed edits |
33
+ | Bring project guidance / memory into line with named authoritative sources | [Audit § Reconcile principles](references/audit.md#reconcile-principles-across-sources), then [Apply](references/apply.md) | Precedence table, complete statement ledger, fixes within the delegated authority |
33
34
  | A full audit, or testing / usage-scene / execution-route (delegation) advice | [Verification](references/verification.md), plus Audit for findings | Propose outcome-based implementation, sufficient verification, and a suitable route |
34
35
  | Apply, remove, merge, relocate, or conduct an authorized trial | [Apply](references/apply.md); Audit only for unresolved findings | Make bounded local changes; distinguish trials from adoption |
35
36
  | Fill or refresh project context | [Populate](references/populate.md) | Edit only authorized project-context sections |
@@ -46,7 +47,8 @@ requests stay on their existing workflow.
46
47
  A full audit covers these concerns; a narrower request keeps its stated scope:
47
48
 
48
49
  1. Questions, research, and rechecks: useful triggers, evidence reuse, and stop conditions.
49
- 2. Conflicts and changed decisions: confirmed intent, actual implementation, and authority.
50
+ 2. Conflicts and changed decisions: confirmed intent, actual implementation, and authority —
51
+ across sources, by a complete statement ledger rather than spot reading.
50
52
  3. Instruction value and autonomy: useful project context, proportionate procedures,
51
53
  missing enablers, and fit to demonstrated model and tool capabilities.
52
54
  4. Context efficiency: current actionable guidance, with long rationale and history on demand.
@@ -9,6 +9,24 @@ evaluation: Use an isolated non-production fixture with the stated policy and pe
9
9
  Record actual evidence separately; change status only for cases actually run and report partial execution
10
10
  explicitly.
11
11
  cases:
12
+ - id: principle-conflict-ledger
13
+ purpose: Principle conflicts across sources are found completely and fixed within the delegated authority.
14
+ setup: The user ranks project rules and user-level CLAUDE.md as authoritative. A project CLAUDE.md section
15
+ says every PR runs the full suite while the rule says PRs run impact-scope regression and the full suite
16
+ runs at release. A memory note says a coverage gate must still be added, but CI already wires it. Another
17
+ memory note says branch deletion needs an explicit request, while user-level guidance grants standing
18
+ approval for it. Names and paths in all files are correct.
19
+ prompt: 룰과 전역 CLAUDE.md 를 기준으로 프로젝트 CLAUDE.md 와 메모리의 원칙을 전부 맞춰줘.
20
+ expect:
21
+ - Show a precedence table naming references and subjects before comparing.
22
+ - Produce a ledger with one row per subject statement; all three conflicts appear as conflict or stale.
23
+ - Apply the three fixes (full-suite wording, the stale coverage note, the branch-deletion authority) without
24
+ asking, and state any assumption made.
25
+ - List statements not assessed instead of implying full coverage.
26
+ reject:
27
+ - Report only factual errors (names, paths) or none, because the wording of the sources differs.
28
+ - Return the conflicts as questions when the authority was already ranked.
29
+ - Treat the memory note as authority over the rule.
12
30
  - id: uncapped-findings
13
31
  purpose: A finding count is not a stopping condition.
14
32
  setup: A synthetic repository has eight independent non-protected blanket instructions that cause eight
@@ -5,6 +5,7 @@
5
5
  - [Establish coverage](#establish-coverage)
6
6
  - [Questions and rechecks](#questions-and-rechecks)
7
7
  - [Conflicts and changed decisions](#conflicts-and-changed-decisions)
8
+ - [Reconcile principles across sources](#reconcile-principles-across-sources)
8
9
  - [Instruction value and capability fit](#instruction-value-and-capability-fit)
9
10
  - [Rationale and history](#rationale-and-history)
10
11
  - [Testing and delegation](#testing-and-delegation)
@@ -79,6 +80,42 @@ goal can still be unimplemented; a bug can still contradict the intended behavio
79
80
  Keep one authoritative statement, reconcile authorized dependents, and retain
80
81
  superseded decisions as history instead of competing active commands.
81
82
 
83
+ ## Reconcile principles across sources
84
+
85
+ Use this procedure when the request names authoritative sources (for example
86
+ rules and user-level guidance) and asks that lower-precedence sources (project
87
+ `CLAUDE.md` / `AGENTS.md`, memory notes, local rules) be brought into line.
88
+ Spot reading finds wrong names and paths but misses principle conflicts; the
89
+ ledger below is what makes the comparison complete.
90
+
91
+ 1. **Precedence table first.** List every source in scope with its rank (from
92
+ the request, then the client's actual priority), its scope, and its role:
93
+ *reference* (defines the intent) or *subject* (must conform). Memory and
94
+ assistant-written notes are subjects unless the user ranks them otherwise.
95
+ 2. **Statement ledger.** Extract every actionable statement from each subject —
96
+ one row each: statement · source · the situation that triggers it · the
97
+ reference statement governing that situation · verdict (aligned / conflict /
98
+ stale / duplicate / uncovered by any reference / out of scope). Match by the
99
+ situation and the action it produces, not by wording. Verification scope and
100
+ timing, what is standing-authorized versus explicit-only, review independence,
101
+ and gates described versus actually wired are where wording differs and
102
+ actions collide. A statement without a row is unaudited; report it as not
103
+ assessed rather than implying coverage.
104
+ 3. **Reverse pass.** Read each reference top to bottom and, for every statement
105
+ it makes, find the subject statement that echoes, contradicts, or omits it.
106
+ This catches conflicts the subject never mentions.
107
+ 4. **Known-conflict control.** When the requester or the audit already knows one
108
+ real conflict, confirm the ledger surfaces it before reporting. A ledger that
109
+ misses the known case is incomplete; extend it instead of reporting it.
110
+ 5. **Act within the delegated authority.** When the request ranks the sources and
111
+ asks for improvement, conflicts and stale facts in subject sources are fixed
112
+ through the [Apply](apply.md) reference, not returned as questions. Ask only
113
+ where the change would alter a binding control or where the reference itself
114
+ is ambiguous; state the assumption and continue with the rest.
115
+
116
+ Report the precedence table, the ledger (or its per-verdict counts with the
117
+ not-assessed list), and the applied edit for each finding.
118
+
82
119
  ## Instruction value and capability fit
83
120
 
84
121
  Assess the contribution to accepted outcomes: project-specific knowledge, usable
@@ -1,18 +1,13 @@
1
1
  ---
2
2
  name: audit-service-gaps
3
3
  description: >-
4
- Audits the observable gaps between a service as it is today and an explicit target state, then
5
- researches how reference services actually solved each high-ranked gap before proposing a fix.
6
- DETECT scans through three independent lenses — north-star alignment, correctness (bugs), and
7
- user-perspective (UX) — and enumerates concrete, severity-ranked gaps; BENCHMARK verifies how a
8
- reference service closes each one and PROPOSES a differentiated close. VERIFY, CHANGE-IMPACT,
9
- DRIFT and FULL extend the same loop to post-fix closure, baseline changes, doc-vs-code drift, and
10
- the whole-service sweep. Use when the user says any of: "북극성 기준으로 부족한 점", "갭분석",
11
- "다른 벤치마크 서비스는 이 부분을 어떻게 해결했는지", "레퍼런스 서비스랑 비교해서 부족한 점
12
- 찾아줘" — or the English "gap analysis", "benchmark against reference services", "audit this
13
- service". Do NOT use it to *define* product direction (that is north-star), to review ONE
14
- standalone artifact's prose (that is multi-persona-review), or to turn an unverified benchmark
15
- claim into a fact.
4
+ Finds and prioritizes observable service gaps against an explicit target
5
+ across north-star alignment, correctness, and UX, then verifies reference
6
+ solutions before proposing fixes for high-ranked gaps. Use for "갭분석",
7
+ "북극성 기준으로 부족한 점", reference-service benchmarking, post-fix verification,
8
+ changed-baseline impact, doc-code drift, or full-service audits. Product
9
+ direction belongs to north-star; single-artifact critique to multi-persona-review.
10
+ Keep unverified benchmark claims labeled.
16
11
  ---
17
12
 
18
13
  # Audit Service Gaps (reverse + competitive)
@@ -1,12 +1,11 @@
1
1
  ---
2
2
  name: compaction-handoff
3
3
  description: >-
4
- Create a compact, reconstructible checkpoint immediately before context compaction. Persist only
5
- durable facts and decisions, overwrite one current resume anchor, verify Git and open-PR state,
6
- and emit one concrete next action plus a short /compact line. Use for "컴팩션 준비해줘",
7
- "컴팩션하고 이어서 진행할 수 있게 준비해줘", "핸드오프 준비해줘", or "prepare for
8
- compaction", or equivalent. Repeated execution must be idempotent and must not grow state files
9
- without bound.
4
+ Creates a reconstructible checkpoint before manual or automatic context
5
+ compaction or a session handoff. Use for "컴팩션 준비해줘", "핸드오프 준비해줘",
6
+ or prepare-for-compaction requests. Preserves durable facts and decisions,
7
+ verifies Git/PR state, and overwrites one bounded resume anchor with one
8
+ concrete next action and a short /compact pointer. Repeated runs are idempotent.
10
9
  ---
11
10
 
12
11
  # Compaction Handoff Protocol
@@ -1,19 +1,15 @@
1
1
  ---
2
2
  name: external-model-consult
3
3
  description: >-
4
- Consult a second, non-Claude model through a bundled wrapper for four things:
5
- (1) natural, native-sounding KOREAN phrasing via Google Gemini — copy, UI microcopy,
6
- marketing text; (2) a MULTI-PERSONA / second-opinion review of a design, plan or spec;
7
- (3) CONCISE, well-STRUCTURED writing via OpenAI Codex — tightening prose, restructuring
8
- a doc; and (4) IMAGE GENERATION as real image files on disk (not labeled diagrams —
9
- use Mermaid). Fire it when Korean reads translated, or when you would otherwise
10
- hand-write polished Korean yourself. Triggers on "어색해", "자연스럽게 다듬어줘",
11
- "gemini 한테 물어봐", "nano banana", "제3자 관점", "codex한테 물어봐",
12
- "간결하게 정리해줘", "이미지 만들어줘", and in English "ask gemini", "ask codex",
13
- "generate an image". Returns candidates to choose from; never auto-applies. Do NOT use
14
- for deterministic transforms (rename, reformat, sort), labeled diagrams, internal logs
15
- or identifiers, anything needing repo secrets, a native subagent panel
16
- (`multi-persona-review`), or when the user explicitly wants YOUR answer.
4
+ Uses bundled CLI wrappers for Gemini Korean copywriting/polishing and
5
+ different-model critiques of designs, plans, or specs; Codex prose
6
+ tightening/restructuring; and image-file generation (Codex default;
7
+ Gemini for Gemini/Nano Banana requests). Use for polished user-facing
8
+ Korean, translated-sounding text, substantive concision/structure work,
9
+ image requests, or asking Gemini/Codex: "자연스럽게 다듬어줘", "제3자 관점",
10
+ "간결하게 정리해줘", "이미지 만들어줘". Returns candidates or image files;
11
+ never auto-applies. Not for deterministic edits, labeled diagrams,
12
+ logs/identifiers, secrets, native persona panels, or requests for your own answer.
17
13
  ---
18
14
 
19
15
  # external-model-consult
@@ -1,18 +1,13 @@
1
1
  ---
2
2
  name: gh-issue-workflow
3
3
  description: >-
4
- Runs work through GitHub Issues so the user and the agent can see the same backlog: normalize an
5
- incoming request into an issue before building, group tasks under a parent (epic) issue, order
6
- them with milestones and priority labels, read every comment before starting, and promote
7
- decisions out of comments into the issue body so they survive. Enforces the body template
8
- (배경/문제/근거/레퍼런스/제안/전제/방향성/AC/후속) so issues become reusable agent context, and
9
- keeps read-only, draft, remote-write, implement, verify, and status stages distinct. Use whenever
10
- a request will outlive the chat turn, whenever work needs an order the user can review, or when
11
- the user names issues ("이슈로 등록해줘", "에픽으로 묶어줘", "이슈 정리해줘", "#42 작업해줘",
12
- "우선순위 다시 잡자", "backlog this", "break this into sub-issues", "implement issue #N").
13
- Read-only stages make no remote change; never create, edit, label, comment on, close, or
14
- re-parent a remote issue, and never touch a project board, without the user asking for that
15
- change.
4
+ Organizes work through GitHub Issues: drafts, epics/sub-issues, milestones,
5
+ priorities, implementation, verification, and status. Use when work outlives
6
+ the chat turn, needs ordering for user review, or requests issue/backlog work
7
+ ("이슈로 등록해줘", "에픽으로 묶어줘", "#42 작업해줘", "우선순위 다시 잡자").
8
+ Normalize requests before building, read all comments, and preserve decisions
9
+ in issue bodies. Remote issue or project-board changes require the user's
10
+ request; reading and drafting do not authorize writes.
16
11
  ---
17
12
 
18
13
  # GitHub Issue Workflow
@@ -18,9 +18,11 @@ project requirements remain binding.
18
18
 
19
19
  ## 1. Keep ownership with useful context
20
20
 
21
- The agent holding the user's intent and relevant project context owns the
22
- integrated result. It may plan, draft, implement, run checks, and refine directly.
23
- Roles describe responsibilities; they do not require separate workers.
21
+ The current session normally holds the user's intent and relevant project context.
22
+ It chooses the execution structure and owns integration and final acceptance. It
23
+ may plan, draft, implement, run checks, and refine directly, or delegate where
24
+ another model is better suited. Roles describe responsibilities, not model names
25
+ or a requirement for separate workers.
24
26
 
25
27
  Keep tightly coupled work together when a handoff would mostly make another
26
28
  agent reconstruct the same understanding. Completing the task in one capable
@@ -49,6 +51,21 @@ Choose from actual capabilities and task evidence rather than fixed vendor-role
49
51
  assignments or universal effort floors. Honor explicit model, effort, budget,
50
52
  and data-processing constraints. Adapt when capabilities or evidence change.
51
53
 
54
+ For planning and design, keep drafting in the session when context continuity is
55
+ valuable. Use another capable model for problem framing, a first draft, alternative
56
+ designs, trade-off analysis, a focused question, or independent review according to
57
+ the expected information gain. A model useful for review may be the better author.
58
+ Possible arrangements include session drafting followed by useful independent
59
+ review, or session-defined goals and constraints followed by another model's
60
+ design. The session integrates either result; neither arrangement requires an
61
+ extra review by default. Compare separately developed alternatives when their
62
+ different approaches justify the additional work.
63
+
64
+ Choose effort by actual difficulty, interacting decisions, remaining uncertainty,
65
+ likely rework, and the benefit of further reasoning. High stakes call for stronger
66
+ assurance, not automatically maximum effort: inspecting code, contracts, tests,
67
+ or external facts may resolve a risk that more reasoning alone cannot.
68
+
52
69
  ## 3. Make additional contexts earn their cost
53
70
 
54
71
  Add a worker for a concrete benefit: needed expertise or tools, useful context or
@@ -62,9 +79,11 @@ Independence makes parallel work possible; its expected contribution makes it
62
79
  worthwhile. Each additional worker should provide a distinct useful result.
63
80
 
64
81
  Parallel changes need clear interfaces and non-overlapping ownership or suitable
65
- isolation, including shared test resources and integration assumptions. Use the
66
- main context for complementary work rather than repeating a delegated task.
67
- Apply the same benefit test to nested delegation and account for its total cost.
82
+ isolation, including shared test resources. Different files are insufficient if
83
+ workers still depend on each other's unresolved decisions or shared contracts.
84
+ Settle those dependencies first or keep the dependent work together. Use the main
85
+ context for complementary work rather than repeating a delegated task. Apply the
86
+ same benefit test to nested delegation and account for its total cost.
68
87
 
69
88
  Several perspectives can be considered in one context. Separate them when
70
89
  independent scrutiny, different evidence, or specialized capability adds value,
@@ -85,26 +104,47 @@ constraints explicit rather than relying on a lossy summary or hidden context.
85
104
 
86
105
  Ask for the result needed for integration, its evidence, and remaining gaps.
87
106
  Short results can return directly. Use durable files or artifacts for large,
88
- reusable, or truncation-prone output, agreeing on the destination before it is
89
- produced. Preserve relevant version information so evidence stays attributable.
107
+ reusable, or truncation-prone output; choose the destination when delegating.
108
+ Preserve relevant version information so evidence stays attributable.
90
109
 
91
- ## 5. Review consequential uncertainty, not every stage
110
+ Let implementers resolve routine details within the agreed scope. Bring newly
111
+ discovered consequential choices back to the owning session when they change
112
+ user behavior, API or data contracts, architecture, or security boundaries, or
113
+ expose a conflict with the design or a material ambiguity. Return the issue and
114
+ evidence, not a request to approve every detail. The session resolves it within
115
+ existing authority and involves the user only when their decision is needed.
92
116
 
93
- Implementers should execute relevant checks and correct their work. This is
94
- verification, but not independent review. Add independent review when a fresh
95
- perspective materially improves assurance or when explicitly required.
117
+ ## 5. Review consequential uncertainty, not every stage
96
118
 
97
- Give the reviewer the original objective, constraints, actual artifacts, and
98
- execution evidence, with sufficient capability to assess the material risks.
99
- Focus independent assessment on consequential assumptions and blind spots rather
100
- than replaying the author's reasoning or assigning a reviewer to each artifact.
101
- Neither model prestige nor agreement among agents substitutes for evidence.
119
+ Implementers may write and run relevant tests and correct their work. Writing a
120
+ test and judging whether it sufficiently covers the outcome are different
121
+ responsibilities; assigning a reviewer does not prohibit implementer-written
122
+ tests. Self-checking is verification, not independent review. Add independent
123
+ review when a fresh perspective materially improves assurance or when explicitly
124
+ required.
125
+
126
+ Consider the consequence of being wrong: costly-to-reverse product scope or core
127
+ user-flow decisions, long-lived contracts or data models, compatibility, security,
128
+ privacy, deletion, and money. Review uncertain assumptions before dependent work
129
+ becomes expensive. Established patterns, confirmed local bug fixes, and mechanical
130
+ updates usually need no additional reviewer unless their actual impact or remaining
131
+ uncertainty warrants one. Apply the same judgment to plans, designs, and code.
132
+
133
+ Give the reviewer the original objective, constraints, relevant decisions, actual
134
+ artifacts, and execution evidence, with sufficient capability to assess the risks.
135
+ Enable inspection of source code, API and data contracts, and measurements when
136
+ needed; the draft alone may carry the author's mistaken assumptions. Focus on
137
+ consequential assumptions and blind spots without prescribing the conclusion.
138
+ Independence comes from a separate assessment of evidence, not a different model
139
+ name. Neither model prestige nor agreement among agents substitutes for evidence.
102
140
 
103
141
  Own acceptance and integration: inspect the artifacts and evidence material to
104
142
  the outcome, resolve substantiated gaps, and check affected integration behavior.
105
143
  Reuse applicable execution and review evidence across stages; revisit areas when
106
144
  changes or new information invalidate it. Finish when required readiness is
107
145
  supported, rather than commissioning another pass without a likely benefit.
146
+ Return substantiated findings to the existing implementer when its retained
147
+ context makes correction efficient; reassess only the affected evidence.
108
148
 
109
149
  ## 6. Preserve authority and continuity
110
150
 
@@ -1,16 +1,12 @@
1
1
  ---
2
2
  name: multi-persona-review
3
3
  description: >-
4
- A panel-review skill that critiques ONE artifact (launch post, README, doc, markdown, plan,
5
- design) via 3-5 disjoint user-perspective personas running in parallel, then synthesizes deduped,
6
- severity-ranked improvement points (P0/P1/P2). Use when the user says "작성글을 사용자 관점의
7
- 페르소나를 여러명 만들어서 (손넷 모델정도로) 피드백 받아바", "다면 리뷰 해볼까", "페르소나로 리뷰",
8
- "여러 관점으로 피드백", or in English "multi-persona review", "review this from different user
9
- perspectives", "get persona feedback on this post/README/doc", "panel review this artifact".
10
- Lighter than a full service audit — point it at ONE artifact, not a whole codebase. Do NOT use it
11
- for a whole-service or whole-codebase audit, nor for a gap-vs-benchmark loop (both are
12
- audit-service-gaps), and do NOT simulate diversity by renaming reviewers that inspect the same
13
- evidence.
4
+ Reviews one artifact (post, README, document, plan, or design) through 3-5
5
+ distinct target-user personas in independent parallel reviews, then
6
+ deduplicates and prioritizes concrete improvement candidates. Use for
7
+ "다면 리뷰", "페르소나로 리뷰", "여러 관점으로 피드백", or multi-persona/panel review
8
+ requests. Not for whole-service/codebase audits or gap-versus-benchmark
9
+ analysis; those belong to audit-service-gaps.
14
10
  ---
15
11
 
16
12
  # Multi-Persona Review (다면페르소나 워크플로우 리뷰)
@@ -1,19 +1,13 @@
1
1
  ---
2
2
  name: north-star
3
3
  description: >-
4
- Defines and enforces a project's long-term direction (North Star Statement,
5
- metric-as-proxy NSM, strategic Pillars with a module↔pillar map, Will/Won't,
6
- 4-gate + priority-order decision heuristics), then turns that direction into a
7
- ranked, persisted roadmap so the plan survives /compact and new sessions. Use
8
- when starting a new project, when scope creep is suspected, when a non-obvious
9
- feature request needs prioritization, or when the user asks where the project
10
- should go next. Sits one layer above SPEC/PRD — answers 'why and where to', not
11
- 'what and how'. Fires on the user's real phrasings: "앞으로 어떤 방향으로
12
- 개선·발전시킬지 고민해봐", "NORTH.md / NORTH_STAR 보고 나아갈 방향 + 기능 제안",
13
- "북극성 정렬 로드맵", and the English "what direction should we take next",
14
- "propose a roadmap from the north star". Do NOT use it to find what is broken
15
- right now — detecting bugs, gaps, or quality regressions belongs to the audit/gap
16
- skills; this skill consumes their findings and DIRECTS forward planning.
4
+ Defines long-term product direction, a North Star metric, strategic boundaries,
5
+ and alignment criteria, then applies them to a prioritized, persisted roadmap.
6
+ Use at new-project startup, suspected scope creep, non-obvious feature-priority
7
+ decisions, direction reviews, or "앞으로 어떤 방향으로 발전시킬까", "북극성 정렬 로드맵",
8
+ and roadmap/feature requests based on NORTH.md or NORTH_STAR.
9
+ Answers why and where to go above SPEC/PRD; consumes audit findings rather
10
+ than detecting current bugs, gaps, or regressions.
17
11
  ---
18
12
 
19
13
  # North Star
@@ -1,18 +1,13 @@
1
1
  ---
2
2
  name: objective-brief
3
3
  description: >-
4
- Rewrite work about to be delegated, designed, or run over several steps into the canonical XML
5
- brief — objective, inputs, invariants, success_criteria, boundaries, autonomy, verification,
6
- communication, output_format — so the worker receives one judgeable definition of done instead
7
- of prose. Runs in two directions: INBOUND reshapes a sprawling or half-formed request into that
8
- shape, filling each field from context already on screen and dropping sections that do not
9
- apply; OUTBOUND writes the prompt a spawned worker actually receives. Trigger on "브리프로 정리",
10
- "작업 지시서로 만들어", "프롬프트 구조화", and in English "turn this into a task brief",
11
- "structure this prompt". Fire unprompted before handing a multi-part task to a subagent, a
12
- workflow worker, or a parallel lane, and before design or multi-step work at feature or project
13
- scale. Do NOT fire on a one-line question, a lookup, a single edit, or a routine change — a
14
- clarifying question is not a brief, and nine XML tags around a small ask cost more than they
15
- buy.
4
+ Structures requests and worker prompts into the canonical XML task brief,
5
+ using existing context to state the objective, constraints, and verifiable
6
+ completion criteria. Use for "브리프로 정리", "작업 지시서로 만들어",
7
+ "프롬프트 구조화", or task-brief requests. Apply proactively before multi-part
8
+ delegation to subagents, workflow workers, or parallel lanes, and before
9
+ feature- or project-scale design or multi-step execution. Omit inapplicable
10
+ fields; skip one-line questions, lookups, single edits, and routine changes.
16
11
  ---
17
12
 
18
13
  # Objective Brief
@@ -1,17 +1,13 @@
1
1
  ---
2
2
  name: recurrence-prevention
3
3
  description: >-
4
- When the same defect, mistake, or incident happens AGAIN — a recurrence, not a one-off — verify
5
- it against prior evidence (memory, rule 근거 links, git/CHANGELOG history), classify it as a
6
- simple slip vs a complex harness problem, then re-evaluate the countermeasure that failed:
7
- repair or replace it, choosing a record, a one-line criterion, a code fix, or a structural gate
8
- (test, hook, derive) by evidence — more deterministic when prose has demonstrably failed,
9
- nothing new when repair suffices. Complex problems get countermeasure candidates designed
10
- by a multi-persona panel instead of a quick patch. Use for "재발했어", "같은 실수 또 했네",
11
- "이거 저번에도 그랬잖아", "재발방지 대책 등록해줘", "재발방지 룰 만들어", "this happened again",
12
- "same bug as last time", "add a recurrence countermeasure", "postmortem this failure". Do NOT use
13
- it for a first-time defect (fix it, record it, stop), do NOT create a standing rule from an
14
- unverified first occurrence, and do NOT use it as a general audit of the steering layer at rest.
4
+ Verifies reported or detected recurrence against prior evidence and repairs
5
+ or replaces the failed countermeasure, choosing a proportionate record,
6
+ rule, code fix, or structural gate. Use for "재발했어", "같은 실수 또 했네",
7
+ "재발방지 대책 등록해줘", "재발방지 룰 만들어", recurring failures, failed safeguards,
8
+ or recurrence-focused postmortems. Complex cases use multi-persona
9
+ countermeasure design. Not for ordinary first-time defects or general harness
10
+ audits; do not create a standing rule from an unverified first occurrence.
15
11
  ---
16
12
 
17
13
  # Recurrence Prevention (재발방지)
@@ -1,12 +1,11 @@
1
1
  ---
2
2
  name: self-hosted-github-runner
3
- description: >
4
- GitHub 호스티드 러너를 못 쓰게 됐을 때, 레포의 기존 워크플로를 **그대로** 자기 머신의 Docker
5
- self-hosted runner 에서 돌리게 만든다. 결제 실패·지출한도·분(minutes) 소진·조직 쿼터·Actions
6
- 장애로 CI 가 멈췄을 때, "CI 를 로컬에서 돌리자"·"self-hosted runner"·"act 로 돌릴까"·"CI 죽었는데
7
- 머지·배포 어떻게 하냐"는 말이 나올 때 쓴다. **누군가 "CI 스텝을 스크립트에 옮겨 적어 로컬에서
8
- 돌리자"고 제안할 때도 반드시 이 스킬을 켠다** — 그 안은 워크플로를 두 벌로 갈라놓고, 갈라진
9
- 순간부터 로컬 초록이 CI 초록을 뜻하지 않게 되기 때문이다.
3
+ description: >-
4
+ GitHub 호스티드 러너의 결제·사용량·쿼터·장애 문제로 CI가 막혔을 때,
5
+ 기존 워크플로를 복제하지 않고 Docker self-hosted runner에서 실행하도록 돕는다.
6
+ "CI를 로컬에서 돌리자", "self-hosted runner", "act로 돌릴까",
7
+ "CI가 멈췄는데 머지·배포는?" 또는 CI 스텝을 로컬 스크립트로 옮기자는 제안에도 사용한다.
8
+ PR·배포 게이트 복구와 로컬 실행 목적을 구분해 runner 또는 act를 선택한다.
10
9
  ---
11
10
 
12
11
  # Self-Hosted GitHub Runner
@@ -1,6 +1,12 @@
1
1
  ---
2
2
  name: ui-visual-review
3
- description: "Captures screenshots of key UI flows after E2E tests pass, runs an agent-side first-pass diff (regressions, console errors, layout shifts), then surfaces a checklist for the user's final approval. Also owns the browser-launch rules AND procedure — read it BEFORE opening a browser by any means (Playwright, chrome-devtools MCP, a launcher script), not after something feels slow: the prohibitions here exist because attaching to the user's live Chrome or using a throwaway context degrades the session in ways that are expensive to undo. Fire it for manual E2E checks, UX/fidelity comparison against a reference product, a one-time OAuth login, automated capture, and whenever the user reports the browser is laggy. Use after E2E tests pass on a UI track (csr-*, ssr-*, full)."
3
+ description: >-
4
+ Captures and compares key UI-flow screenshots after E2E tests pass on UI
5
+ tracks (csr-*, ssr-*, full), flags visual regressions and console errors,
6
+ and prepares findings for user approval. Also owns browser-launch rules:
7
+ read before opening any browser via Playwright, chrome-devtools MCP, or a
8
+ launcher. Use for manual E2E checks, reference-product UX/fidelity comparisons,
9
+ OAuth login, automated capture, or reported browser lag.
4
10
  ---
5
11
 
6
12
  # UI Visual Review