agentic-sdlc 1.0.0 → 1.5.0

package/docs/sprints/sprint-5/designs/Design-Verification-Report.md

@@ -0,0 +1,101 @@
+# Design Verification Report - Sprint 5
+## Premium Landing Page
+
+**Version:** 1.0
+**Date:** 2026-01-02
+**Reviewer:** @QA
+**Status:** ✅ Approved (with notes)
+
+---
+
+## 1. Review Summary
+
+The design specifications (UI/UX and Backend) for the Agentic SDLC Landing Page have been reviewed for testability, completeness, consistency, and alignment with project goals.
+
+| Artifact | Status | Comments |
+|----------|--------|----------|
+| `UIUX-Design-Spec-Sprint-5-v1.md` | ✅ Pass | Comprehensive design system and accessibility defined. |
+| `Backend-Design-Spec-Sprint-5-v1.md` | ✅ Pass | Robust architecture with clear performance targets. |
+
+---
+
+## 2. Detailed Findings
+
+### 2.1 UI/UX Specification Review
+
+**Strengths:**
+- **Accessibility:** WCAG 2.1 AA compliance is baked into the requirements (colors, focus states, checking).
+- **Responsive Strategy:** Clear mobile-first approach with specific breakpoints defined.
+- **Micro-interactions:** Detailed specifications for hover, lift, and scroll effects will make validatng the "premium" feel objective.
+- **Dark Mode:** specific implementation details for shadows and images prevent ambiguity.
+
+**Notes for Implementation:**
+- Ensure the "GradientText" component degrades gracefully in browsers with reduced motion or older rendering engines.
+- **Test Case Add:** Verify the "Glassmorphism" effect doesn't cause performance drops on low-end mobile devices (FPS monitoring required).
+
+### 2.2 Backend Specification Review
+
+**Strengths:**
+- **Performance:** Explicit targets (LCP < 2.5s) allow for automated gating in CI.
+- **SEO:** Structured data and metadata strategies are well-defined.
+- **Architecture:** Separation of interactive (Client) vs. static (Server) components is optimal for Next.js 14.
+
+**Notes for Implementation:**
+- **Rate Limiting:** The `10 requests per 10 seconds` limit is good, but ensure it returns a friendly structured error message that the UI can handle gracefully.
+- **Feature Flags:** Consider adding basic feature flags for the "Newsletter" and "Contact" forms so they can be disabled instantly if spam attacks occur.
+
+---
+
+## 3. Test Strategy & Plan
+
+### 3.1 Automated Testing Scope
+
+| Layer | Tool | Coverage Target | Focus |
+|-------|------|-----------------|-------|
+| **Unit** | Vitest | 90% | Logic in utility functions, form validation, hooks. |
+| **Component** | Vitest + RTL | 80% | Interactive states (hover, focus, disabled, loading). |
+| **E2E** | Playwright | Critical Paths | Happy path: Page Load -> Scroll -> CTA Click -> Navigation. |
+| **Visual** | Percy/Happo | Key Sections | Regression testing for layout shifts across viewports. |
+| **A11y** | axe-core | 100% | Automated accessibility scans in CI. |
+
+### 3.2 Manual Testing Checklist
+
+1. **Cross-Browser Verification:**
+   - [ ] Chrome (Latest)
+   - [ ] Firefox (Latest)
+   - [ ] Safari (macOS & iOS)
+   - [ ] Edge
+
+2. **Responsive Checks:**
+   - [ ] Mobile Portrait (375px)
+   - [ ] Tablet Portrait (768px)
+   - [ ] Desktop Standard (1280px)
+   - [ ] Ultra-wide (1920px+)
+
+3. **User Experience:**
+   - [ ] "Premium" feel verification (smoothness of animations).
+   - [ ] No layout shifts (CLS) during image loading.
+   - [ ] Dark mode toggle preserves state on reload.
+
+---
+
+## 4. Risk Assessment
+
+- **Risk:** High dependency on client-side animations might impact Core Web Vitals (INP/FID).
+  - **Mitigation:** Strict bundle size monitoring and use of `will-change` CSS properties sparingly.
+- **Risk:** Third-party font loading (Google Fonts) causing layout shifts.
+  - **Mitigation:** Backend spec correctly identifies using `next/font` for self-hosting.
+
+---
+
+## 5. Approval Decision
+
+**Decision:** ✅ **APPROVED**
+
+The designs are sufficiently detailed to proceed to development. The QA team is ready to support the Sprint 5 implementation.
+
+### Next Step:
+- @SECA - Please perform final security sign-off.
+- @DEV - Ready for implementation.
+
+#qa #verification #test-plan #sprint-5

package/docs/sprints/sprint-5/designs/Security-Review-Report.md

@@ -0,0 +1,84 @@
+# Security Review Report - Sprint 5
+## Landing Page Architecture
+
+**Version:** 1.0
+**Date:** 2026-01-02
+**Reviewer:** @SECA
+**Status:** ✅ Approved (Secure)
+
+---
+
+## 1. Executive Summary
+
+A security assessment of the Sprint 5 Landing Page architecture has been performed. The design significantly reduces attack surface by utilizing a predominantly static generation strategy (SSG) with minimal dynamic API endpoints.
+
+| Category | Status | Rating |
+|----------|--------|--------|
+| **Architecture** | ✅ Secure | Low Risk |
+| **Data Privacy** | ✅ Secure | Low Risk |
+| **API Security** | ✅ Secure | Low Risk |
+| **Dependencies** | ⚠️ Warning | Low Risk |
+
+---
+
+## 2. Threat Analysis & Mitigations
+
+### 2.1 Attack Vector: DDoS / Abuse of API Routes
+**Threat:** Malicious actors could target the `POST /api/newsletter` or `POST /api/contact` endpoints to flood the system or exhaust email quotas.
+**Design Mitigation:**
+- **Rate Limiting:** Backend spec implements `Upstash Redis` sliding window (10 req/10s). **Verified Adequate.**
+- **Mitigation Status:** ✅ **Resolved**
+
+### 2.2 Attack Vector: Cross-Site Scripting (XSS)
+**Threat:** Injection of malicious scripts via contact forms or compromised CDN assets.
+**Design Mitigation:**
+- **CSP:** Strict Content Security Policy defined in headers (script-src 'self' ...).
+- **Sanitization:** Use of `DOMPurify` for input sanitization.
+- **Framework:** React auto-escaping enabled by default.
+- **Mitigation Status:** ✅ **Resolved**
+
+### 2.3 Attack Vector: Supply Chain Attacks
+**Threat:** Compromised third-party packages (shadcn deps, framer-motion, etc.).
+**Design Mitigation:**
+- **Vulnerability Scanning:** CI pipeline includes `npm audit`.
+- **Mitigation Status:** ⚠️ **Monitor** - CI pipeline must be strictly enforced.
+
+---
+
+## 3. Compliance Review
+
+### 3.1 GDPR / Privacy
+- **Cookies:** Spec mentions a "Cookie Policy" link in footer.
+- **Consent:** If analytics (GA4) are used, a **Cookie Consent Banner** MUST be implemented. The current design includes analytics but does not explicitly detail the consent banner component.
+- **Action Item:** @DEV must implement a Cookie Consent banner component (`CookieConsent.tsx`) to trigger GA initialization only **after** user acceptance.
+
+### 3.2 Security Headers
+The proposed headers in `Backend-Design-Spec` are best-in-class:
+```json
+"X-Content-Type-Options": "nosniff",
+"X-Frame-Options": "DENY",
+"Referrer-Policy": "origin-when-cross-origin",
+"Permissions-Policy": "camera=(), microphone=(), geolocation=()"
+```
+**Verdict:** Excellent configuration.
+
+---
+
+## 4. Final Recommendations
+
+1.  **Cookie Consent:** Add a mandatory requirement for a GDPR-compliant cookie banner if Google Analytics is active.
+2.  **API Validation:** Ensure the `emailSchema` validation in `lib/validation.ts` is strict (e.g., no temporary/disposable email providers if possible).
+3.  **Honeypot:** Suggest adding a hidden "honeypot" field to the forms to passively block simple bots without friction.
+
+---
+
+## 5. Approval Decision
+
+**Decision:** ✅ **APPROVED**
+
+The security posture of the proposed design is strong. The risks are low due to the static nature of the site.
+
+### Next Step:
+- @DEV - Proceed with implementation (Note the Cookie Banner requirement).
+
+#security #review #sprint-5 #GDPR

package/docs/sprints/sprint-6/.brain-state.json

@@ -0,0 +1,29 @@
+{
+  "sprint": "sprint-6",
+  "currentState": "PLANNING",
+  "previousState": "IDLE",
+  "stateHistory": [
+    {
+      "state": "IDLE",
+      "timestamp": "2026-01-04T08:15:56.402416",
+      "reason": "Initial state"
+    },
+    {
+      "state": "PLANNING",
+      "from": "IDLE",
+      "timestamp": "2026-01-04T08:16:12.210909",
+      "reason": "Testing workflow",
+      "forced": false
+    }
+  ],
+  "approvalGates": {
+    "planApproved": false,
+    "designApproved": false,
+    "securityApproved": false,
+    "finalApproved": false
+  },
+  "artifacts": {},
+  "roleStatus": {},
+  "createdAt": "2026-01-04T08:15:56.402451",
+  "lastUpdated": "2026-01-04T08:16:12.210868"
+}

package/package.json

@@ -1,16 +1,92 @@
-{
-  "name": "agentic-sdlc",
-  "version": "1.0.0",
-  "description": "Simulating a complete Software Development Lifecycle (SDLC) with specialized AI Agents.",
-  "main": "index.js",
-  "bin": {
-    "agentic-sdlc": "./bin/cli.js"
-  },
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "dependencies": {
-    "fs-extra": "^11.2.0"
-  },
-  "type": "module"
-}
+{
+  "name": "agentic-sdlc",
+  "version": "1.5.0",
+  "description": "Simulating a complete Software Development Lifecycle (SDLC) with specialized AI Agents.",
+  "type": "module",
+  "private": false,
+  "packageManager": "bun@1.2.2",
+  "workspaces": [
+    "projects/todo-app/frontend",
+    "projects/todo-app/backend",
+    "projects/landing-page"
+  ],
+  "bin": {
+    "agentic-sdlc": "./bin/cli.js"
+  },
+  "scripts": {
+    "test": "pytest tests/ -v",
+    "test:cov": "pytest tests/ -v --cov=tools --cov-report=html",
+    "workflow:cycle": "python tools/workflows/cycle.py",
+    "workflow:housekeeping": "python tools/workflows/housekeeping.py",
+    "kb:search": "python tools/kb/search.py",
+    "kb:stats": "python tools/kb/stats.py",
+    "kb:update": "python tools/kb/update-index.py",
+    "health": "python tools/validation/health-check.py",
+    "agent": "python tools/run.py",
+    "agent:list": "python tools/agent/manage.py list",
+    "agent:create": "python tools/agent/manage.py create",
+    "agent:validate": "python tools/agent/manage.py validate",
+    "agent:info": "python tools/agent/manage.py info",
+    "setup": "python tools/setup/init.py",
+    "release:preview": "python tools/release/release.py preview",
+    "release:changelog": "python tools/release/release.py changelog",
+    "release:version": "python tools/release/release.py version --auto",
+    "release": "python tools/release/release.py release",
+    "dev:todo:fe": "turbo run dev --filter=todo-app-frontend",
+    "dev:todo:be": "turbo run dev --filter=todo-app-backend",
+    "dev:todo": "turbo run dev --filter=todo-app-*",
+    "dev:all": "turbo run dev",
+    "build:todo:fe": "turbo run build --filter=todo-app-frontend",
+    "build:todo:be": "turbo run build --filter=todo-app-backend",
+    "build:todo": "turbo run build --filter=todo-app-*",
+    "build:all": "turbo run build",
+    "test:todo:fe": "turbo run test --filter=todo-app-frontend",
+    "test:todo:be": "turbo run test --filter=todo-app-backend",
+    "test:todo": "turbo run test --filter=todo-app-*",
+    "test:projects": "turbo run test",
+    "lint": "turbo run lint",
+    "typecheck": "turbo run typecheck",
+    "clean": "turbo run clean",
+    "clean:all": "turbo run clean && rimraf node_modules/.cache .turbo",
+    "preview:todo:fe": "turbo run preview --filter=todo-app-frontend"
+  },
+  "keywords": [
+    "sdlc",
+    "ai",
+    "agent",
+    "automation",
+    "workflow",
+    "cursor",
+    "copilot",
+    "development",
+    "project-management"
+  ],
+  "author": "truongnat",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/truongnat/agentic-sdlc.git"
+  },
+  "bugs": {
+    "url": "https://github.com/truongnat/agentic-sdlc/issues"
+  },
+  "homepage": "https://github.com/truongnat/agentic-sdlc#readme",
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "files": [
+    "bin/",
+    ".agent/",
+    "docs/",
+    "README.md",
+    "CHANGELOG.md",
+    "package.json"
+  ],
+  "dependencies": {
+    "fs-extra": "^11.2.0"
+  },
+  "devDependencies": {
+    "rimraf": "^6.1.2",
+    "turbo": "^2.7.2"
+  }
+}

package/.agent/ide-integration/aider-commands.md

@@ -1,40 +0,0 @@
-# Aider CLI - TeamLifecycle Integration
-
-## Configuration for Aider
-
-Add this to your `.aider.conf.yml` file:
-
-```yaml
-# TeamLifecycle SDLC Roles
-
-# Custom commands for Aider
-commands:
-  pm: "@PM - {message}"
-  orchestrator: "@ORCHESTRATOR - {message}"
-  po: "@PO - {message}"
-  sa: "@SA - {message}"
-  uiux: "@UIUX - {message}"
-  qa: "@QA - {message}"
-  seca: "@SECA - {message}"
-  dev: "@DEV - {message}"
-  devops: "@DEVOPS - {message}"
-  tester: "@TESTER - {message}"
-  reporter: "@REPORTER - {message}"
-  stakeholder: "@STAKEHOLDER - {message}"
-  auto: "@PM - {message} --mode=full-auto"
-  semi-auto: "@PM - {message} --mode=semi-auto"
-
-# Context files to always include
-read:
-  - .agent/rules/global.md
-  - .agent/usage.md
-```
-
-## Usage
-
-```bash
-aider
-> /pm Build a CLI tool for file conversion
-> /dev Implement JSON to YAML converter
-> /kb-search command parsing
-```

package/.agent/ide-integration/cline-config.json

@@ -1,108 +0,0 @@
-{
-  "name": "TeamLifecycle SDLC",
-  "version": "1.0.0",
-  "description": "Structured SDLC workflow with specialized roles",
-  "slashCommands": [
-    {
-      "name": "pm",
-      "description": "Project Manager - Planning and scope management",
-      "systemPrompt": "You are the Project Manager (@PM). Load instructions from .agent/workflows/pm.md and follow the TeamLifecycle workflow.",
-      "userMessageTemplate": "@PM - {{input}}"
-    },
-    {
-      "name": "orchestrator",
-      "description": "Orchestrator - Workflow automation",
-      "systemPrompt": "You are the Orchestrator (@ORCHESTRATOR). Load instructions from .agent/workflows/orchestrator.md and automate the workflow.",
-      "userMessageTemplate": "@ORCHESTRATOR - {{input}}"
-    },
-    {
-      "name": "po",
-      "description": "Product Owner - Backlog and prioritization",
-      "systemPrompt": "You are the Product Owner (@PO). Load instructions from .agent/workflows/po.md.",
-      "userMessageTemplate": "@PO - {{input}}"
-    },
-    {
-      "name": "sa",
-      "description": "System Analyst - Architecture and API design",
-      "systemPrompt": "You are the System Analyst (@SA). Load instructions from .agent/workflows/sa.md.",
-      "userMessageTemplate": "@SA - {{input}}"
-    },
-    {
-      "name": "uiux",
-      "description": "UI/UX Designer - Interface and user experience",
-      "systemPrompt": "You are the UI/UX Designer (@UIUX). Load instructions from .agent/workflows/designer.md.",
-      "userMessageTemplate": "@UIUX - {{input}}"
-    },
-    {
-      "name": "qa",
-      "description": "QA Analyst - Design review and quality assurance",
-      "systemPrompt": "You are the QA Analyst (@QA). Load instructions from .agent/workflows/qa.md.",
-      "userMessageTemplate": "@QA - {{input}}"
-    },
-    {
-      "name": "seca",
-      "description": "Security Analyst - Security assessment",
-      "systemPrompt": "You are the Security Analyst (@SECA). Load instructions from .agent/workflows/seca.md.",
-      "userMessageTemplate": "@SECA - {{input}}"
-    },
-    {
-      "name": "dev",
-      "description": "Developer - Code implementation",
-      "systemPrompt": "You are the Developer (@DEV). Load instructions from .agent/workflows/dev.md.",
-      "userMessageTemplate": "@DEV - {{input}}"
-    },
-    {
-      "name": "devops",
-      "description": "DevOps Engineer - CI/CD and deployment",
-      "systemPrompt": "You are the DevOps Engineer (@DEVOPS). Load instructions from .agent/workflows/devops.md.",
-      "userMessageTemplate": "@DEVOPS - {{input}}"
-    },
-    {
-      "name": "tester",
-      "description": "Tester - Functional testing and bug detection",
-      "systemPrompt": "You are the Tester (@TESTER). Load instructions from .agent/workflows/tester.md.",
-      "userMessageTemplate": "@TESTER - {{input}}"
-    },
-    {
-      "name": "reporter",
-      "description": "Reporter - Documentation and progress reports",
-      "systemPrompt": "You are the Reporter (@REPORTER). Load instructions from .agent/workflows/reporter.md.",
-      "userMessageTemplate": "@REPORTER - {{input}}"
-    },
-    {
-      "name": "stakeholder",
-      "description": "Stakeholder - Final approval",
-      "systemPrompt": "You are the Stakeholder (@STAKEHOLDER). Load instructions from .agent/workflows/stakeholder.md.",
-      "userMessageTemplate": "@STAKEHOLDER - {{input}}"
-    },
-    {
-      "name": "auto",
-      "description": "Start project with full automation",
-      "systemPrompt": "You are the Project Manager (@PM) with full automation enabled. Load instructions from .agent/workflows/pm.md and .agent/workflows/orchestrator.md.",
-      "userMessageTemplate": "@PM - {{input}} --mode=full-auto"
-    },
-    {
-      "name": "semi-auto",
-      "description": "Start project with semi-automation",
-      "systemPrompt": "You are the Project Manager (@PM) with semi-automation enabled. Load instructions from .agent/workflows/pm.md and .agent/workflows/orchestrator.md.",
-      "userMessageTemplate": "@PM - {{input}} --mode=semi-auto"
-    },
-    {
-      "name": "kb-search",
-      "description": "Search knowledge base",
-      "systemPrompt": "Search the knowledge base at .agent/knowledge-base/ for relevant entries. Check index.md first, then search by category, technology, and keywords.",
-      "userMessageTemplate": "Search knowledge base for: {{input}}"
-    },
-    {
-      "name": "kb-add",
-      "description": "Add entry to knowledge base",
-      "systemPrompt": "Create a new knowledge base entry using the template at .agent/templates/Knowledge-Entry-Template.md. Save to appropriate category folder and update index.md.",
-      "userMessageTemplate": "Create knowledge base entry for: {{input}}"
-    }
-  ],
-  "contextFiles": [
-    ".agent/rules/global.md",
-    ".agent/usage.md"
-  ],
-  "customInstructions": "This project uses TeamLifecycle SDLC workflow. All role definitions are in .agent/workflows/. Follow global rules from .agent/rules/global.md. Create artifacts in docs/sprints/sprint-[N]/ structure. Use templates from .agent/templates/. Search knowledge base before starting complex work."
-}

package/.agent/ide-integration/cursor-rules.md

@@ -1,63 +0,0 @@
-# Cursor IDE - TeamLifecycle Integration
-
-## Custom Instructions for Cursor
-
-Add this to your `.cursorrules` file in the project root:
-
-```markdown
-# TeamLifecycle SDLC Roles
-
-You have access to specialized SDLC roles. When user types a slash command, interpret it as the corresponding role tag:
-
-## Role Commands
-
-- `/pm` → @PM - Project Manager (planning, scope management)
-- `/orchestrator` → @ORCHESTRATOR - Workflow automation
-- `/po` → @PO - Product Owner (backlog, prioritization)
-- `/sa` → @SA - System Analyst (architecture, API design)
-- `/uiux` → @UIUX - UI/UX Designer (interface, user experience)
-- `/qa` → @QA - Quality Assurance (design review, testing strategy)
-- `/seca` → @SECA - Security Analyst (security assessment)
-- `/dev` → @DEV - Developer (implementation)
-- `/devops` → @DEVOPS - DevOps Engineer (CI/CD, deployment)
-- `/tester` → @TESTER - Tester (functional testing, bug detection)
-- `/reporter` → @REPORTER - Reporter (documentation, progress reports)
-- `/stakeholder` → @STAKEHOLDER - Stakeholder (final approval)
-
-## Quick Start Commands
-
-- `/auto [requirements]` → Start project with full automation (@PM --mode=full-auto)
-- `/semi-auto [requirements]` → Start project with semi-automation (@PM --mode=semi-auto)
-
-## Knowledge Base Commands
-
-- `/kb-search [query]` → Search knowledge base for solutions
-- `/kb-add [topic]` → Add entry to knowledge base
-
-## Usage Examples
-
-```
-/pm Build a todo app with authentication and real-time sync
-/auto Create a mobile fitness tracking app for iOS and Android
-/dev Implement OAuth2 authentication flow
-/kb-search React hydration error
-```
-
-## Instructions Location
-
-All role definitions and templates are in `.agent/`:
-- Roles: `.agent/workflows/`
-- Templates: `.agent/templates/`
-- Knowledge Base: `.agent/knowledge-base/`
-- Global Rules: `.agent/rules/global.md`
-- Usage Guide: `.agent/usage.md`
-
-When a slash command is used, load the corresponding role file and execute according to TeamLifecycle workflow.
-```
-
-## Installation
-
-1. Create `.cursorrules` file in your project root
-2. Copy the content above into the file
-3. Restart Cursor IDE
-4. Type `/` in chat to see available commands

package/.agent/ide-integration/github-copilot-instructions.md

@@ -1,75 +0,0 @@
-# GitHub Copilot Chat - TeamLifecycle Integration
-
-## Custom Instructions for GitHub Copilot
-
-Add this to your `.github/copilot-instructions.md` file:
-
-```markdown
-# TeamLifecycle SDLC System
-
-This project uses a structured SDLC workflow with specialized roles. All instructions are in `.agent/`.
-
-## Slash Commands (Role Shortcuts)
-
-When user types these commands, interpret as role tags:
-
-### Core Roles
-- `/pm` → @PM (Project Manager)
-- `/orchestrator` → @ORCHESTRATOR (Workflow Automation)
-- `/po` → @PO (Product Owner)
-- `/sa` → @SA (System Analyst)
-- `/uiux` → @UIUX (UI/UX Designer)
-- `/qa` → @QA (Quality Assurance)
-- `/seca` → @SECA (Security Analyst)
-- `/dev` → @DEV (Developer)
-- `/devops` → @DEVOPS (DevOps Engineer)
-- `/tester` → @TESTER (Tester)
-- `/reporter` → @REPORTER (Reporter)
-- `/stakeholder` → @STAKEHOLDER (Stakeholder)
-
-### Quick Actions
-- `/auto [requirements]` → @PM [requirements] --mode=full-auto
-- `/semi-auto [requirements]` → @PM [requirements] --mode=semi-auto
-- `/kb-search [query]` → Search `.agent/knowledge-base/`
-- `/kb-add [topic]` → Create knowledge base entry
-
-## Role Behavior
-
-Each role has specific responsibilities defined in `.agent/workflows/[role].md`:
-
-1. **Load role file** when command is used
-2. **Follow role rules** strictly
-3. **Create artifacts** in `docs/sprints/sprint-[N]/[category]/`
-4. **Tag next roles** using @tags
-5. **Use templates** from `.agent/templates/`
-
-## Workflow
-
-```
-Planning → Design → Verification → Development → Testing → Reporting → Approval
-```
-
-## Key Files
-
-- Global Rules: `.agent/rules/global.md`
-- Usage Guide: `.agent/usage.md`
-- Roles: `.agent/workflows/*.md`
-- Templates: `.agent/templates/*.md`
-- Knowledge Base: `.agent/knowledge-base/`
-
-## Examples
-
-```
-/pm Build a REST API for task management
-/auto Create a mobile app for expense tracking
-/dev Implement JWT authentication
-/kb-search OAuth token refresh
-```
-```
-
-## Installation
-
-1. Create `.github/copilot-instructions.md` in your project
-2. Copy the content above
-3. Copilot will automatically load these instructions
-4. Use `/` commands in Copilot Chat