agileflow 3.3.0 → 3.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/README.md +6 -6
- package/lib/skill-loader.js +0 -1
- package/package.json +1 -1
- package/scripts/agileflow-statusline.sh +81 -0
- package/scripts/agileflow-welcome.js +79 -0
- package/scripts/claude-tmux.sh +90 -23
- package/scripts/claude-watchdog.sh +225 -0
- package/scripts/generators/agent-registry.js +14 -1
- package/scripts/generators/inject-babysit.js +22 -9
- package/scripts/generators/inject-help.js +19 -9
- package/scripts/lib/ac-test-matcher.js +452 -0
- package/scripts/lib/audit-cleanup.js +250 -0
- package/scripts/lib/audit-registry.js +304 -0
- package/scripts/lib/configure-features.js +35 -0
- package/scripts/lib/feature-catalog.js +3 -3
- package/scripts/lib/gate-enforcer.js +295 -0
- package/scripts/lib/model-profiles.js +118 -0
- package/scripts/lib/quality-gates.js +163 -0
- package/scripts/lib/signal-detectors.js +44 -1
- package/scripts/lib/skill-catalog.js +557 -0
- package/scripts/lib/skill-recommender.js +311 -0
- package/scripts/lib/status-writer.js +255 -0
- package/scripts/lib/story-claiming.js +128 -45
- package/scripts/lib/task-sync.js +32 -38
- package/scripts/lib/tdd-phase-manager.js +455 -0
- package/scripts/lib/team-events.js +34 -3
- package/scripts/lib/tmux-audit-monitor.js +611 -0
- package/scripts/lib/tmux-group-colors.js +113 -0
- package/scripts/lib/tool-registry.yaml +241 -0
- package/scripts/lib/tool-shed.js +441 -0
- package/scripts/messaging-bridge.js +209 -1
- package/scripts/native-team-observer.js +219 -0
- package/scripts/obtain-context.js +14 -0
- package/scripts/ralph-loop.js +30 -5
- package/scripts/smart-detect.js +21 -0
- package/scripts/spawn-audit-sessions.js +877 -0
- package/scripts/team-manager.js +56 -16
- package/scripts/tmux-close-windows.sh +180 -0
- package/src/core/agents/a11y-analyzer-aria.md +155 -0
- package/src/core/agents/a11y-analyzer-forms.md +162 -0
- package/src/core/agents/a11y-analyzer-keyboard.md +175 -0
- package/src/core/agents/a11y-analyzer-semantic.md +153 -0
- package/src/core/agents/a11y-analyzer-visual.md +158 -0
- package/src/core/agents/a11y-consensus.md +248 -0
- package/src/core/agents/ads-audit-budget.md +181 -0
- package/src/core/agents/ads-audit-compliance.md +169 -0
- package/src/core/agents/ads-audit-creative.md +164 -0
- package/src/core/agents/ads-audit-google.md +226 -0
- package/src/core/agents/ads-audit-meta.md +183 -0
- package/src/core/agents/ads-audit-tracking.md +197 -0
- package/src/core/agents/ads-consensus.md +396 -0
- package/src/core/agents/ads-generate.md +145 -0
- package/src/core/agents/ads-performance-tracker.md +197 -0
- package/src/core/agents/api-quality-analyzer-conventions.md +148 -0
- package/src/core/agents/api-quality-analyzer-docs.md +176 -0
- package/src/core/agents/api-quality-analyzer-errors.md +183 -0
- package/src/core/agents/api-quality-analyzer-pagination.md +171 -0
- package/src/core/agents/api-quality-analyzer-versioning.md +143 -0
- package/src/core/agents/api-quality-consensus.md +214 -0
- package/src/core/agents/arch-analyzer-circular.md +148 -0
- package/src/core/agents/arch-analyzer-complexity.md +171 -0
- package/src/core/agents/arch-analyzer-coupling.md +146 -0
- package/src/core/agents/arch-analyzer-layering.md +151 -0
- package/src/core/agents/arch-analyzer-patterns.md +162 -0
- package/src/core/agents/arch-consensus.md +227 -0
- package/src/core/agents/brainstorm-analyzer-features.md +169 -0
- package/src/core/agents/brainstorm-analyzer-growth.md +161 -0
- package/src/core/agents/brainstorm-analyzer-integration.md +172 -0
- package/src/core/agents/brainstorm-analyzer-market.md +147 -0
- package/src/core/agents/brainstorm-analyzer-ux.md +167 -0
- package/src/core/agents/brainstorm-consensus.md +237 -0
- package/src/core/agents/completeness-consensus.md +5 -5
- package/src/core/agents/perf-consensus.md +2 -2
- package/src/core/agents/security-consensus.md +2 -2
- package/src/core/agents/seo-analyzer-content.md +167 -0
- package/src/core/agents/seo-analyzer-images.md +187 -0
- package/src/core/agents/seo-analyzer-performance.md +206 -0
- package/src/core/agents/seo-analyzer-schema.md +176 -0
- package/src/core/agents/seo-analyzer-sitemap.md +172 -0
- package/src/core/agents/seo-analyzer-technical.md +144 -0
- package/src/core/agents/seo-consensus.md +289 -0
- package/src/core/agents/test-consensus.md +2 -2
- package/src/core/commands/adr.md +1 -0
- package/src/core/commands/ads/audit.md +375 -0
- package/src/core/commands/ads/budget.md +97 -0
- package/src/core/commands/ads/competitor.md +112 -0
- package/src/core/commands/ads/creative.md +85 -0
- package/src/core/commands/ads/generate.md +238 -0
- package/src/core/commands/ads/google.md +112 -0
- package/src/core/commands/ads/health.md +327 -0
- package/src/core/commands/ads/landing.md +119 -0
- package/src/core/commands/ads/linkedin.md +112 -0
- package/src/core/commands/ads/meta.md +91 -0
- package/src/core/commands/ads/microsoft.md +115 -0
- package/src/core/commands/ads/plan.md +321 -0
- package/src/core/commands/ads/test-plan.md +317 -0
- package/src/core/commands/ads/tiktok.md +129 -0
- package/src/core/commands/ads/track.md +288 -0
- package/src/core/commands/ads/youtube.md +124 -0
- package/src/core/commands/ads.md +140 -0
- package/src/core/commands/assign.md +1 -0
- package/src/core/commands/audit.md +43 -6
- package/src/core/commands/babysit.md +315 -1266
- package/src/core/commands/baseline.md +1 -0
- package/src/core/commands/blockers.md +1 -0
- package/src/core/commands/board.md +1 -0
- package/src/core/commands/changelog.md +1 -0
- package/src/core/commands/choose.md +1 -0
- package/src/core/commands/ci.md +1 -0
- package/src/core/commands/code/accessibility.md +347 -0
- package/src/core/commands/code/api.md +297 -0
- package/src/core/commands/code/architecture.md +297 -0
- package/src/core/commands/{audit → code}/completeness.md +72 -25
- package/src/core/commands/{audit → code}/legal.md +63 -16
- package/src/core/commands/{audit → code}/logic.md +64 -16
- package/src/core/commands/{audit → code}/performance.md +67 -20
- package/src/core/commands/{audit → code}/security.md +69 -19
- package/src/core/commands/{audit → code}/test.md +67 -20
- package/src/core/commands/configure.md +1 -0
- package/src/core/commands/council.md +1 -0
- package/src/core/commands/deploy.md +1 -0
- package/src/core/commands/diagnose.md +1 -0
- package/src/core/commands/docs.md +1 -0
- package/src/core/commands/epic/edit.md +213 -0
- package/src/core/commands/epic.md +1 -0
- package/src/core/commands/export.md +238 -0
- package/src/core/commands/help.md +16 -1
- package/src/core/commands/{discovery → ideate}/brief.md +12 -12
- package/src/core/commands/{discovery/new.md → ideate/discover.md} +20 -16
- package/src/core/commands/ideate/features.md +496 -0
- package/src/core/commands/ideate/new.md +158 -124
- package/src/core/commands/impact.md +1 -0
- package/src/core/commands/learn/explain.md +118 -0
- package/src/core/commands/learn/glossary.md +135 -0
- package/src/core/commands/learn/patterns.md +138 -0
- package/src/core/commands/learn/tour.md +126 -0
- package/src/core/commands/migrate/codemods.md +151 -0
- package/src/core/commands/migrate/plan.md +131 -0
- package/src/core/commands/migrate/scan.md +114 -0
- package/src/core/commands/migrate/validate.md +119 -0
- package/src/core/commands/multi-expert.md +1 -0
- package/src/core/commands/pr.md +1 -0
- package/src/core/commands/review.md +1 -0
- package/src/core/commands/seo/audit.md +373 -0
- package/src/core/commands/seo/competitor.md +174 -0
- package/src/core/commands/seo/content.md +107 -0
- package/src/core/commands/seo/geo.md +229 -0
- package/src/core/commands/seo/hreflang.md +140 -0
- package/src/core/commands/seo/images.md +96 -0
- package/src/core/commands/seo/page.md +198 -0
- package/src/core/commands/seo/plan.md +163 -0
- package/src/core/commands/seo/programmatic.md +131 -0
- package/src/core/commands/seo/references/cwv-thresholds.md +64 -0
- package/src/core/commands/seo/references/eeat-framework.md +110 -0
- package/src/core/commands/seo/references/quality-gates.md +91 -0
- package/src/core/commands/seo/references/schema-types.md +102 -0
- package/src/core/commands/seo/schema.md +183 -0
- package/src/core/commands/seo/sitemap.md +97 -0
- package/src/core/commands/seo/technical.md +100 -0
- package/src/core/commands/seo.md +107 -0
- package/src/core/commands/skill/list.md +68 -212
- package/src/core/commands/skill/recommend.md +216 -0
- package/src/core/commands/sprint.md +1 -0
- package/src/core/commands/status/undo.md +191 -0
- package/src/core/commands/status.md +1 -0
- package/src/core/commands/story/edit.md +204 -0
- package/src/core/commands/story/view.md +29 -7
- package/src/core/commands/story-validate.md +1 -0
- package/src/core/commands/story.md +1 -0
- package/src/core/commands/tdd-next.md +238 -0
- package/src/core/commands/tdd.md +211 -0
- package/src/core/commands/team/start.md +10 -6
- package/src/core/commands/tests.md +1 -0
- package/src/core/commands/verify.md +27 -1
- package/src/core/commands/workflow.md +2 -0
- package/src/core/experts/_core-expertise.yaml +105 -0
- package/src/core/experts/analytics/expertise.yaml +5 -99
- package/src/core/experts/codebase-query/expertise.yaml +3 -72
- package/src/core/experts/compliance/expertise.yaml +6 -72
- package/src/core/experts/database/expertise.yaml +9 -52
- package/src/core/experts/documentation/expertise.yaml +7 -140
- package/src/core/experts/integrations/expertise.yaml +7 -127
- package/src/core/experts/mentor/expertise.yaml +8 -35
- package/src/core/experts/monitoring/expertise.yaml +7 -49
- package/src/core/experts/performance/expertise.yaml +1 -26
- package/src/core/experts/security/expertise.yaml +9 -34
- package/src/core/experts/ui/expertise.yaml +6 -36
- package/src/core/knowledge/ads/ad-audit-checklist-scoring.md +424 -0
- package/src/core/knowledge/ads/ad-optimization-logic.md +590 -0
- package/src/core/knowledge/ads/ad-technical-specifications.md +385 -0
- package/src/core/knowledge/ads/definitive-advertising-reference-2026.md +506 -0
- package/src/core/knowledge/ads/paid-advertising-research-2026.md +445 -0
- package/src/core/teams/backend.json +41 -0
- package/src/core/teams/frontend.json +41 -0
- package/src/core/teams/qa.json +41 -0
- package/src/core/teams/solo.json +35 -0
- package/src/core/templates/agileflow-metadata.json +20 -1
- package/tools/cli/commands/setup.js +85 -3
- package/tools/cli/commands/update.js +42 -0
- package/tools/cli/installers/ide/_base-ide.js +42 -5
- package/tools/cli/installers/ide/claude-code.js +71 -3
- package/tools/cli/lib/content-injector.js +160 -12
- package/tools/cli/lib/docs-setup.js +1 -1
- package/src/core/commands/skill/create.md +0 -698
- package/src/core/commands/skill/delete.md +0 -316
- package/src/core/commands/skill/edit.md +0 -359
- package/src/core/commands/skill/test.md +0 -394
- package/src/core/commands/skill/upgrade.md +0 -552
- package/src/core/templates/skill-template.md +0 -117
|
@@ -111,42 +111,15 @@ conventions:
|
|
|
111
111
|
- "Research notes inform epic planning"
|
|
112
112
|
- "NO AI attribution in commits (per CLAUDE.md)"
|
|
113
113
|
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
scope: "Frontend, components, styling, accessibility"
|
|
117
|
-
- id: AG-API
|
|
118
|
-
scope: "Backend, endpoints, business logic, database"
|
|
119
|
-
- id: AG-CI
|
|
120
|
-
scope: "Test infrastructure, pipelines, quality tools"
|
|
121
|
-
- id: AG-DEVOPS
|
|
122
|
-
scope: "Deployment, dependencies, technical debt, release process"
|
|
123
|
-
- id: EPIC-PLANNER
|
|
124
|
-
scope: "Epic/story decomposition"
|
|
125
|
-
- id: ADR-WRITER
|
|
126
|
-
scope: "Architecture decisions"
|
|
127
|
-
- id: RESEARCH
|
|
128
|
-
scope: "Technical research"
|
|
129
|
-
- id: MENTOR
|
|
130
|
-
scope: "End-to-end guidance (babysit)"
|
|
131
|
-
|
|
132
|
-
# Learned from AgileFlow codebase exploration
|
|
133
|
-
learnings:
|
|
134
|
-
- date: 2025-12-21
|
|
135
|
-
context: "Analyzed babysit workflow"
|
|
136
|
-
insight: "Babysit command guides from 'What to work on?' through story creation, agent spawning, verification, and commit"
|
|
137
|
-
source: "packages/cli/src/core/commands/babysit.md"
|
|
138
|
-
|
|
139
|
-
- date: 2025-12-21
|
|
140
|
-
context: "Analyzed status.json structure"
|
|
141
|
-
insight: "Tracks epics (title, status, completed, summary) and stories (owner, status, priority, estimate, depends_on, test_status)"
|
|
142
|
-
source: "docs/09-agents/status.json"
|
|
114
|
+
# Agent roster: AG-UI, AG-API, AG-CI, AG-DEVOPS, EPIC-PLANNER, ADR-WRITER, RESEARCH, MENTOR
|
|
115
|
+
# (details in babysit.md delegation framework - omitted here)
|
|
143
116
|
|
|
117
|
+
# Learnings (trimmed - keep 2 most actionable)
|
|
118
|
+
learnings:
|
|
144
119
|
- date: 2025-12-21
|
|
145
|
-
context: "
|
|
146
|
-
insight: "
|
|
147
|
-
source: "packages/cli/src/core/experts/"
|
|
120
|
+
context: "Babysit workflow"
|
|
121
|
+
insight: "Guides from task selection through story creation, agent spawning, verification, and commit. Status.json tracks epics + stories."
|
|
148
122
|
|
|
149
123
|
- date: 2025-12-21
|
|
150
|
-
context: "
|
|
151
|
-
insight: "
|
|
152
|
-
source: "CLAUDE.md, scripts/archive-completed-stories.sh"
|
|
124
|
+
context: "Agent Expert system"
|
|
125
|
+
insight: "26 domain experts with expertise.yaml, question.md, self-improve.md, workflow.md. Agents load expertise first before tasks."
|
|
@@ -119,56 +119,14 @@ conventions:
|
|
|
119
119
|
- "Set retention policies for logs and metrics"
|
|
120
120
|
- "Test alerts in staging before production"
|
|
121
121
|
|
|
122
|
-
|
|
123
|
-
ERROR: "Service unavailable, data loss, requires immediate attention"
|
|
124
|
-
WARN: "Degraded behavior, unexpected but handled, investigate soon"
|
|
125
|
-
INFO: "Important state changes, deployments, audit events"
|
|
126
|
-
DEBUG: "Detailed diagnostic info, development only"
|
|
127
|
-
|
|
128
|
-
metric_types:
|
|
129
|
-
counter: "Cumulative value (requests_total, errors_total)"
|
|
130
|
-
gauge: "Current value (active_connections, queue_size)"
|
|
131
|
-
histogram: "Distribution (request_duration, response_size)"
|
|
132
|
-
summary: "Quantiles (p50, p90, p99 latency)"
|
|
133
|
-
|
|
134
|
-
slo_targets:
|
|
135
|
-
availability: "99.9% (8.7 hours downtime/year)"
|
|
136
|
-
latency_p50: "<100ms"
|
|
137
|
-
latency_p95: "<200ms"
|
|
138
|
-
latency_p99: "<500ms"
|
|
139
|
-
error_rate: "<0.1%"
|
|
140
|
-
|
|
141
|
-
# Learnings are AUTO-UPDATED by self-improve.md
|
|
142
|
-
# Do not edit manually - let the agent learn from experience
|
|
143
|
-
learnings:
|
|
144
|
-
- date: 2025-12-21
|
|
145
|
-
context: "AgileFlow monitoring patterns"
|
|
146
|
-
learning: |
|
|
147
|
-
Session hooks run on SessionStart via .claude/settings.json hooks configuration.
|
|
148
|
-
The default SessionStart hook executes 'node .agileflow/scripts/get-env.js' to display
|
|
149
|
-
project info, git status, and system details at session start. This provides
|
|
150
|
-
immediate context about the development environment.
|
|
151
|
-
|
|
152
|
-
- date: 2025-12-21
|
|
153
|
-
context: "AgileFlow status line implementation"
|
|
154
|
-
learning: |
|
|
155
|
-
Status line shows real-time project context in Claude Code status bar via
|
|
156
|
-
scripts/agileflow-statusline.sh. Components include: git branch (color-coded),
|
|
157
|
-
current story from status.json, WIP count (yellow if >1, red if >3), and
|
|
158
|
-
completion percentage. This provides at-a-glance project health visibility.
|
|
122
|
+
# Log levels, metric types, SLO targets: generic observability knowledge (models know - omitted)
|
|
159
123
|
|
|
124
|
+
# Learnings (trimmed - keep 2 most actionable)
|
|
125
|
+
learnings:
|
|
160
126
|
- date: 2025-12-21
|
|
161
|
-
context: "
|
|
162
|
-
|
|
163
|
-
Agent communication is logged to docs/09-agents/bus/log.jsonl in append-only
|
|
164
|
-
format. Each entry is a JSON line with timestamp, agent_id, message_type, and
|
|
165
|
-
payload. This enables audit trails and debugging of multi-agent workflows
|
|
166
|
-
without corrupting the log file with concurrent writes.
|
|
127
|
+
context: "Session hooks and status line"
|
|
128
|
+
insight: "SessionStart hooks in .claude/settings.json. Status line via agileflow-statusline.sh shows git branch, current story, WIP count, completion %."
|
|
167
129
|
|
|
168
130
|
- date: 2025-12-21
|
|
169
|
-
context: "
|
|
170
|
-
|
|
171
|
-
Validation scripts (e.g., scripts/validate-*.sh) output PASS/WARN/FAIL status
|
|
172
|
-
codes with colored output for health checks. Scripts validate configuration,
|
|
173
|
-
file structure, and dependencies. Exit code 0 = all checks passed, non-zero =
|
|
174
|
-
failures detected. This standardized format enables automated CI/CD integration.
|
|
131
|
+
context: "Agent activity logging"
|
|
132
|
+
insight: "docs/09-agents/bus/log.jsonl: append-only JSON Lines with timestamp, agent_id, message_type, payload. Never edit existing lines."
|
|
@@ -35,36 +35,11 @@ relationships:
|
|
|
35
35
|
target: "<50ms p95"
|
|
36
36
|
measurement: "Query profiling"
|
|
37
37
|
|
|
38
|
-
patterns
|
|
39
|
-
- name: N+1 Query Fix
|
|
40
|
-
description: "Batch queries instead of loop"
|
|
41
|
-
detection: "Multiple similar queries in sequence"
|
|
42
|
-
- name: Caching Layer
|
|
43
|
-
description: "Cache expensive computations"
|
|
44
|
-
types: [memory, redis, cdn]
|
|
45
|
-
- name: Lazy Loading
|
|
46
|
-
description: "Load resources on demand"
|
|
47
|
-
applies_to: [images, modules, routes]
|
|
48
|
-
- name: Database Indexing
|
|
49
|
-
description: "Add indexes for slow queries"
|
|
50
|
-
detection: "EXPLAIN shows table scan"
|
|
38
|
+
# Generic perf patterns (N+1, caching, lazy loading, indexing) omitted - models know these
|
|
51
39
|
|
|
52
40
|
conventions:
|
|
53
41
|
- "Profile before optimizing (no premature optimization)"
|
|
54
42
|
- "Measure before and after every change"
|
|
55
|
-
- "Set performance budgets in CI"
|
|
56
|
-
- "Document performance trade-offs"
|
|
57
|
-
- "Monitor production performance continuously"
|
|
58
|
-
- "Alert on performance regressions"
|
|
59
|
-
|
|
60
|
-
bottlenecks:
|
|
61
|
-
common:
|
|
62
|
-
- "Unindexed database queries"
|
|
63
|
-
- "N+1 query patterns"
|
|
64
|
-
- "Large bundle sizes"
|
|
65
|
-
- "Unoptimized images"
|
|
66
|
-
- "Missing caching"
|
|
67
|
-
- "Synchronous operations"
|
|
68
43
|
|
|
69
44
|
learnings:
|
|
70
45
|
- date: 2025-12-21
|
|
@@ -29,8 +29,6 @@ files:
|
|
|
29
29
|
- path: .npmrc
|
|
30
30
|
purpose: "npm token (GITIGNORED - never commit)"
|
|
31
31
|
note: "Contains NPM_TOKEN for publishing"
|
|
32
|
-
- path: .mcp.json
|
|
33
|
-
purpose: "MCP secrets (GITIGNORED)"
|
|
34
32
|
- path: .env
|
|
35
33
|
purpose: "Environment secrets (GITIGNORED)"
|
|
36
34
|
|
|
@@ -39,7 +37,6 @@ files:
|
|
|
39
37
|
purpose: "Ensures sensitive files are not committed"
|
|
40
38
|
sensitive_patterns:
|
|
41
39
|
- ".npmrc"
|
|
42
|
-
- ".mcp.json"
|
|
43
40
|
- ".env"
|
|
44
41
|
- "CLAUDE.md (internal docs)"
|
|
45
42
|
|
|
@@ -66,7 +63,7 @@ relationships:
|
|
|
66
63
|
files: [src/lib/crypto.ts]
|
|
67
64
|
- component: secrets
|
|
68
65
|
storage: "GitHub Secrets for CI, local gitignored files"
|
|
69
|
-
files: [".npmrc", ".
|
|
66
|
+
files: [".npmrc", ".env"]
|
|
70
67
|
|
|
71
68
|
patterns:
|
|
72
69
|
- name: JWT with Refresh Tokens
|
|
@@ -86,7 +83,7 @@ patterns:
|
|
|
86
83
|
- name: Gitignored Secrets
|
|
87
84
|
description: "Local secret files excluded from version control"
|
|
88
85
|
location: ".gitignore"
|
|
89
|
-
files: [".npmrc", ".
|
|
86
|
+
files: [".npmrc", ".env", "CLAUDE.md"]
|
|
90
87
|
|
|
91
88
|
- name: No Hardcoded Secrets
|
|
92
89
|
description: "Never commit tokens, passwords, or API keys"
|
|
@@ -104,39 +101,17 @@ conventions:
|
|
|
104
101
|
- "HTTPS required in production"
|
|
105
102
|
- "Security headers: HSTS, CSP, X-Frame-Options"
|
|
106
103
|
- "Store CI secrets in GitHub Secrets (NPM_TOKEN)"
|
|
107
|
-
- "Gitignore sensitive files (.npmrc, .
|
|
104
|
+
- "Gitignore sensitive files (.npmrc, .env)"
|
|
108
105
|
- "Warn user if they try to commit credentials files"
|
|
109
106
|
|
|
110
|
-
|
|
111
|
-
- "A01: Broken Access Control"
|
|
112
|
-
- "A02: Cryptographic Failures"
|
|
113
|
-
- "A03: Injection"
|
|
114
|
-
- "A04: Insecure Design"
|
|
115
|
-
- "A05: Security Misconfiguration"
|
|
116
|
-
- "A06: Vulnerable Components"
|
|
117
|
-
- "A07: Authentication Failures"
|
|
118
|
-
- "A08: Data Integrity Failures"
|
|
119
|
-
- "A09: Logging Failures"
|
|
120
|
-
- "A10: SSRF"
|
|
107
|
+
# OWASP top 10 omitted - models know this standard
|
|
121
108
|
|
|
122
|
-
#
|
|
109
|
+
# Learnings (trimmed - keep 2 most actionable)
|
|
123
110
|
learnings:
|
|
124
111
|
- date: 2025-12-21
|
|
125
|
-
context: "
|
|
126
|
-
insight: "NPM_TOKEN
|
|
127
|
-
source: "CLAUDE.md, .github/workflows/npm-publish.yml"
|
|
112
|
+
context: "Secret management"
|
|
113
|
+
insight: "NPM_TOKEN in GitHub Secrets for CI. Gitignored: .npmrc, CLAUDE.md. Never commit tokens."
|
|
128
114
|
|
|
129
115
|
- date: 2025-12-21
|
|
130
|
-
context: "
|
|
131
|
-
insight: ".
|
|
132
|
-
source: ".gitignore"
|
|
133
|
-
|
|
134
|
-
- date: 2025-12-21
|
|
135
|
-
context: "Analyzed CI secrets pattern"
|
|
136
|
-
insight: "GitHub Actions uses secrets.NPM_TOKEN for npm publish; workflow verifies package version matches tag before publishing"
|
|
137
|
-
source: ".github/workflows/npm-publish.yml"
|
|
138
|
-
|
|
139
|
-
- date: 2025-12-21
|
|
140
|
-
context: "Analyzed commit guidelines"
|
|
141
|
-
insight: "CLAUDE.md explicitly states: do not commit files that likely contain secrets (.env, credentials.json); warn user if requested"
|
|
142
|
-
source: "CLAUDE.md"
|
|
116
|
+
context: "Commit security"
|
|
117
|
+
insight: "CLAUDE.md forbids committing .env, credentials.json. Warn user if they request it. No AI attribution in commits."
|
|
@@ -91,25 +91,7 @@ patterns:
|
|
|
91
91
|
location: Component file top
|
|
92
92
|
convention: "interface ComponentNameProps"
|
|
93
93
|
|
|
94
|
-
-
|
|
95
|
-
description: "Forward refs for DOM access and composition"
|
|
96
|
-
location: Base components
|
|
97
|
-
use_case: "When component wraps native element"
|
|
98
|
-
|
|
99
|
-
- name: "Styling with Tailwind"
|
|
100
|
-
description: "Utility-first CSS with Tailwind classes"
|
|
101
|
-
location: className prop
|
|
102
|
-
helper: "cn() for conditional classes"
|
|
103
|
-
|
|
104
|
-
- name: "Class Variance Authority (CVA)"
|
|
105
|
-
description: "Type-safe component variants"
|
|
106
|
-
location: src/components/ui/
|
|
107
|
-
use_case: "Components with multiple variants"
|
|
108
|
-
|
|
109
|
-
- name: "Accessibility"
|
|
110
|
-
description: "WCAG 2.1 AA compliance, ARIA attributes"
|
|
111
|
-
location: Interactive components
|
|
112
|
-
requirements: [keyboard-nav, screen-reader, focus-visible]
|
|
94
|
+
# Generic React patterns (forwardRef, Tailwind, CVA, a11y) omitted - models know these
|
|
113
95
|
|
|
114
96
|
- name: "CLI Colored Output"
|
|
115
97
|
description: "Use chalk for terminal colors with semantic meaning"
|
|
@@ -140,24 +122,12 @@ conventions:
|
|
|
140
122
|
- "CLI colors: chalk with semantic colors (green=success, red=error, yellow=warn)"
|
|
141
123
|
- "CLI prompts: inquirer with validation functions"
|
|
142
124
|
|
|
143
|
-
#
|
|
125
|
+
# Learnings (trimmed - keep 2 most actionable)
|
|
144
126
|
learnings:
|
|
145
127
|
- date: 2025-12-21
|
|
146
|
-
context: "
|
|
147
|
-
insight: "
|
|
148
|
-
source: "packages/cli/tools/cli/lib/ui.js"
|
|
128
|
+
context: "CLI UI patterns"
|
|
129
|
+
insight: "chalk for colors (brand #e8683a, green=success, yellow=warning, red=error, dim=info). inquirer for prompts (input, checkbox, confirm)."
|
|
149
130
|
|
|
150
131
|
- date: 2025-12-21
|
|
151
|
-
context: "
|
|
152
|
-
insight: "
|
|
153
|
-
source: "packages/cli/tools/cli/lib/ui.js"
|
|
154
|
-
|
|
155
|
-
- date: 2025-12-21
|
|
156
|
-
context: "Analyzed ASCII logo pattern"
|
|
157
|
-
insight: "displayLogo() renders Unicode block-style ASCII art with brand color; shows version from package.json"
|
|
158
|
-
source: "packages/cli/tools/cli/lib/ui.js"
|
|
159
|
-
|
|
160
|
-
- date: 2025-12-21
|
|
161
|
-
context: "Analyzed IDE choices UI"
|
|
162
|
-
insight: "IDE_CHOICES array with name, value, checked, configDir, description for checkbox prompts"
|
|
163
|
-
source: "packages/cli/tools/cli/lib/ui.js"
|
|
132
|
+
context: "CLI logo and IDE choices"
|
|
133
|
+
insight: "displayLogo() renders brand art with version. IDE_CHOICES array for checkbox prompts with name, value, checked, configDir."
|