ai-developer-skill-os 8.2.0 → 8.3.0

package/.agents/skills/qk-orchestrator/SKILL.md

@@ -55,6 +55,7 @@ knowledge_scope:
     - precondition-validation
   references:
     - all-skills                    # References registry to make decisions
+    - architecture
 
 # ── V8: Verification ───────────────────────────────────────
 verification:
@@ -86,7 +87,6 @@ exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
 
 > **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
 
-
 ## Preconditions
 - [ ] User request is provided (any language)
 
@@ -96,11 +96,6 @@ On missing precondition:
   Message: "Vui lòng mô tả yêu cầu của bạn."
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Scope
 - ✅ Analyze user intent and route to the correct skill
 - ✅ Verify preconditions of target skill BEFORE delegating
@@ -112,11 +107,6 @@ schema_version: 2
 - ❌ Allow UI work without `DESIGN.md` verified
 - ❌ Allow logic work without context graph from `qk-context-loader`
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Priority Order
 
 | Priority | Check | Skip Threshold |
@@ -126,11 +116,6 @@ schema_version: 2
 | P3 | Check pipeline dependencies (e.g., context-loader first) | Never for logic tasks |
 | P4 | Estimate cost/latency for user info | Budget < 70% |
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Workflow
 
 ### Phase 1 — Intent Classification
@@ -157,11 +142,6 @@ ELSE IF no match
 - Skill identified → go to Phase 2
 - No matching skill → EXIT: BLOCKED
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ### Phase 2 — Precondition Check
 
 **Steps:**
@@ -181,11 +161,6 @@ ELSE
   → EXIT: BLOCKED
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ### Phase 3 — Pipeline Enforcement
 
 **Steps:**
@@ -208,38 +183,8 @@ Release tasks:
   [qk-validation-gate] → [qk-production-release]
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Routing Table (Quick Reference)
-Full table: see `references/routing-table.md`
-
-| Intent Keywords | Primary Skill | Pipeline |
-|----------------|---------------|----------|
-| bug, lỗi, error, broken, crash, fix, sửa | `qk-bug-resolution` | direct |
-| tính năng, feature, thêm, mới, add, implement | `qk-feature-delivery` | context-loader first |
-| UI, giao diện, design, component, layout, màn hình | `qk-ui-builder` | DESIGN.md check |
-| slow, query, index, N+1, performance DB | `qk-db-optimizer` | context-loader first |
-| deploy, release, production, CI/CD, build | `qk-production-release` | validation-gate first |
-| schema, migration, database, table, model | `qk-data-lifecycle` | context-loader first |
-| refactor, clean, SOLID, DRY, code quality | `qk-engineering-standard` | direct |
-| test, lint, validate, check quality | `qk-validation-gate` | direct |
-| upgrade, update thư viện, migrate library | `qk-system-evolution` | direct |
-| docs, documentation, README, comment | `qk-docs` | direct |
-| API, endpoint, route, contract | `qk-api-lifecycle` | context-loader first |
-| access, role, permission, RBAC, auth | `qk-access-policy` | direct |
-| AI, prompt, RAG, LLM, embedding | `qk-ai-builder` | direct |
-| design system, token, CSS variable | `qk-ui-system-builder` | DESIGN.md check |
-| project audit, health, tech debt | `qk-project-health` | direct |
-| new project, bootstrap, init | `qk-project-bootstrap` | direct |
-| memory, context, recall, lưu | `qk-project-memory` | direct |
-
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
+Single source of truth: `references/routing-table.md` — do not duplicate here. Read that file before routing.
 
 ## Confidence Model
 
@@ -249,11 +194,6 @@ schema_version: 2
 | MEDIUM | Multiple possible skills | Route to most likely, note ambiguity |
 | LOW | Request is too vague | Ask clarifying question |
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Escalation Rules
 
 ```
@@ -266,11 +206,6 @@ Questions:
 Recommended Assumptions: none — routing requires clear intent
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Handoff Contract
 
 ### Consumes
@@ -290,11 +225,6 @@ schema_version: 2
 }
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Output Format
 
 ```
@@ -312,11 +242,6 @@ Preconditions:
 Exit Code:   SUCCESS
 ```
 
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
-
 ## Exit Codes
 
 | Code | Meaning | When |
@@ -328,4 +253,3 @@ schema_version: 2
 
 ---
 
-

package/.agents/skills/qk-orchestrator/references/routing-table.md

@@ -1,5 +1,6 @@
 # Routing Table — qk-orchestrator V7.5
 
+> This is the ONLY routing table in the system. qk-orchestrator/SKILL.md must not contain a duplicate table.
 > Full intent → skill mapping. Updated whenever a new skill is added.
 
 ---
@@ -24,11 +25,22 @@
 | design system, token, CSS variable, design tokens | `qk-ui-system-builder` | DESIGN.md check |
 | project audit, health, tech debt, kiểm toán dự án | `qk-project-health` | direct |
 | new project, bootstrap, init, khởi tạo dự án | `qk-project-bootstrap` | direct |
-| help, list skills, danh sách, trợ giúp | `qk-orchestrator` | direct |
-| memory, context, recall, lưu ngữ cảnh | `qk-project-memory` | direct |
-| security, policy, authorization, bảo mật | `qk-policy-engine` | → redirect to `qk-access-policy` |
 | consume API, tích hợp API backend, gọi API từ FE | `qk-fe-api-integration` | `qk-context-loader` first |
 | UI audit, kiểm tra giao diện, anti-slop check | `qk-ui-audit` | DESIGN.md check |
+| metrics, telemetry, trace, agent observability, mô hình lỗi | `qk-agent-observability` | direct |
+| review code, kiểm toán, code review, PR | `qk-code-review` | direct |
+| graph, dependency, context, đọc hiểu architecture | `qk-context-loader` | direct |
+| design system rules, tokens structure, governance | `qk-design-system-engineering` | direct |
+| CI/CD, devops, pipeline, infrastructure, deployment strategy | `qk-devops-platform` | direct |
+| frontend architecture, file placement, routing strategy | `qk-frontend-architecture` | direct |
+| help, list skills, danh sách, trợ giúp | `qk-help` | direct |
+| orchestrate, định tuyến, phân loại yêu cầu | `qk-orchestrator` | direct |
+| product spec, requirement, tiêu chí chấp nhận | `qk-product-specification` | direct |
+| security, vulnerability scan, secret, OWASP | `qk-security-audit` | direct |
+| test strategy, mock, coverage, e2e, unit test | `qk-test-engineering` | direct |
+| web performance, accessibility, SEO, lighthouse | `qk-web-quality-gate` | direct |
+| memory, context, recall, lưu ngữ cảnh | `qk-project-memory` | direct |
+| security, policy, authorization, bảo mật | `qk-access-policy` | direct |
 
 ---
 

package/.agents/skills/qk-product-specification/SKILL.md

@@ -1,130 +1,253 @@
----
-# ── Identity ───────────────────────────────────────────────
-name: qk-product-specification
-version: 8.1.0
-status: experimental
-description: "Product thinking (Idea → Requirement → Acceptance criteria → Technical spec)."
-platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
-
-# ── V8: Classification ─────────────────────────────────────
-type: capability
-
-intent:
-  - product-specification
-  - requirement-analysis
-  - acceptance-criteria
-  - technical-spec
-
-complexity:
-  level: medium
-  criteria:
-    files_affected: "1-3"
-    has_behavior_change: false
-    has_external_dependency: false
-    has_breaking_change: false
-
-triggers:
-  - "viết spec"
-  - "phân tích yêu cầu"
-  - "ý tưởng sản phẩm"
-  - "acceptance criteria"
-
-# ── V8: References ─────────────────────────────────────────
-workflow: spec-driven-development
-
-rules:
-  - global
-  - coding
-
-tools:
-  - filesystem
-
-related_skills:
-  - qk-feature-delivery
-
-knowledge_scope:
-  domain:
-    - product-requirements
-    - technical-specifications
-  concepts:
-    - user-story
-    - acceptance-criteria
-  references:
-    - architecture
-
-decision_boundary:
-  owns:
-    - technical-ready specification
-    - acceptance criteria
-  does_not_own:
-    - market research
-    - pricing
-    - roadmap
-  conflicts_with: []
-  delegates_to:
-    - qk-feature-delivery
-
-# ── V8: Verification ───────────────────────────────────────
-verification:
-  required: true
-  strategy: feature
-
-lifecycle:
-  promotion_gate:
-    requirements:
-      tests:
-        minimum_pass_rate: 0.95
-      usage:
-        minimum_runs: 20
-      conflicts:
-        zero_boundary_violation: true
-      evidence:
-        required:
-          - evaluation_report
-          - usage_history
-          - boundary_audit
-  demotion_gate:
-    triggers:
-      - repeated_failure
-      - boundary_violation
-      - outdated_reference
-    action:
-      change_status: "stable -> experimental"
-
-selection:
-  priority: medium
-  confidence_threshold: 0.80
-
-examples: []
-learnings: []
-
-# ── V7 Runtime ─────────────────────────────────────────────
-execution_mode: deterministic
-cost: medium
-latency: medium
-risk: low
-side_effects: read_only
-produces: [report, specification]
-consumes: [user-description]
-
-token_budget:
-  max_files_read: 3
-  max_lines_per_read: 150
-  max_shell_commands: 0
-  stop_early: false
-
-exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
----
-
-# qk-product-specification — Product Specifier
-
-> **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
-
-## Preconditions
-- [ ] Tuân thủ workflow `spec-driven-development`.
-
-## Scope
-- Tiếp nhận Idea ban đầu từ user, thực hiện phân tích yêu cầu (Requirement Analysis).
-- Xác định và làm rõ ranh giới của tính năng.
-- Lên danh sách Acceptance Criteria (Tiêu chí nghiệm thu).
-- Đóng gói thành Technical Spec (đặc tả kỹ thuật) để chuẩn bị cho quá trình code (Plan & Implementation).
+---
+# ── Identity ───────────────────────────────────────────────
+name: qk-product-specification
+version: 8.1.0
+status: experimental
+description: "Product thinking (Idea → Requirement → Acceptance criteria → Technical spec)."
+platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
+
+# ── V8: Classification ─────────────────────────────────────
+type: capability
+
+intent:
+  - product-specification
+  - requirement-analysis
+  - acceptance-criteria
+  - technical-spec
+
+complexity:
+  level: medium
+  criteria:
+    files_affected: "1-3"
+    has_behavior_change: false
+    has_external_dependency: false
+    has_breaking_change: false
+
+triggers:
+  - "viết spec"
+  - "phân tích yêu cầu"
+  - "ý tưởng sản phẩm"
+  - "acceptance criteria"
+
+# ── V8: References ─────────────────────────────────────────
+workflow: spec-driven-development
+
+rules:
+  - global
+  - coding
+
+tools:
+  - filesystem
+
+related_skills:
+  - qk-feature-delivery
+
+knowledge_scope:
+  domain:
+    - product-requirements
+    - technical-specifications
+  concepts:
+    - user-story
+    - acceptance-criteria
+  references:
+    - architecture
+    - security
+    - anti-patterns
+
+decision_boundary:
+  owns:
+    - technical-ready specification
+    - acceptance criteria
+  does_not_own:
+    - market research
+    - pricing
+    - roadmap
+  conflicts_with: []
+  delegates_to:
+    - qk-feature-delivery
+
+# ── V8: Verification ───────────────────────────────────────
+verification:
+  required: true
+  strategy: feature
+
+lifecycle:
+  promotion_gate:
+    requirements:
+      tests:
+        minimum_pass_rate: 0.95
+      usage:
+        minimum_runs: 20
+      conflicts:
+        zero_boundary_violation: true
+      evidence:
+        required:
+          - evaluation_report
+          - usage_history
+          - boundary_audit
+  demotion_gate:
+    triggers:
+      - repeated_failure
+      - boundary_violation
+      - outdated_reference
+    action:
+      change_status: "stable -> experimental"
+
+selection:
+  priority: medium
+  confidence_threshold: 0.80
+
+examples: []
+learnings: []
+
+# ── V7 Runtime ─────────────────────────────────────────────
+execution_mode: deterministic
+cost: medium
+latency: medium
+risk: low
+side_effects: read_only
+produces: [report, specification]
+consumes: [user-description]
+
+token_budget:
+  max_files_read: 3
+  max_lines_per_read: 150
+  max_shell_commands: 0
+  stop_early: true
+
+exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
+---
+
+# qk-product-specification — Product Specifier
+
+> **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
+
+## Preconditions
+- [ ] Tuân thủ workflow `spec-driven-development`.
+
+## Scope
+- Tiếp nhận Idea ban đầu từ user, thực hiện phân tích yêu cầu (Requirement Analysis).
+- Xác định và làm rõ ranh giới của tính năng.
+- Lên danh sách Acceptance Criteria (Tiêu chí nghiệm thu). **BẮT BUỘC có Security Acceptance Criteria để phòng ngừa rủi ro theo R-SEC-04 (Zero-Trust).**
+- Đóng gói thành Technical Spec (đặc tả kỹ thuật) để chuẩn bị cho quá trình code (Plan & Implementation).
+
+## Non-Goals
+- ❌ Provide implementation outside of Product Thinking & Requirements scope
+- ❌ Override explicit user directives without explanation
+- ❌ Guess ambiguous requirements without asking
+
+## Priority Order
+
+| Priority | Task | Skip Threshold |
+|----------|------|----------------|
+| P1 | Core Product Thinking & Requirements analysis and decision making | Never |
+| P2 | Validation of existing patterns | Budget < 30% |
+| P3 | Detailed documentation generation | Budget < 50% |
+| P4 | Edge case exploration | Budget < 70% |
+
+## Workflow
+
+### Phase 1 — Context Loading
+**Steps:**
+1. Read existing configuration and requirements related to Product Thinking & Requirements.
+2. Check for missing preconditions.
+
+**Decision:**
+```
+IF context is clear
+  → Confidence: HIGH → go to Phase 2
+ELSE
+  → EXIT: BLOCKED — ask user
+```
+
+### Phase 2 — Analysis & Strategy
+**Steps:**
+1. Analyze the current state against Product Thinking & Requirements best practices.
+2. Formulate strategy or audit report based on findings.
+
+**Decision:**
+```
+IF strategy/audit is complete
+  → Confidence: HIGH → go to Phase 3
+ELSE IF minor gaps exist
+  → Confidence: MEDIUM → proceed with assumptions noted
+```
+
+### Phase 3 — Finalization
+**Steps:**
+1. Generate final report or configuration.
+2. Prepare handoff data for subsequent skills.
+
+## Confidence Model
+
+| Level | Condition | Action |
+|-------|-----------|--------|
+| HIGH | All preconditions met, context fully understood | Proceed directly |
+| MEDIUM | Some context missing but safe defaults exist | Proceed and note assumptions |
+| LOW | Core requirements missing | EXIT: BLOCKED |
+
+## Severity (for findings)
+
+| Level | Definition |
+|-------|-----------|
+| CRITICAL | Severe violation of Product Thinking & Requirements principles |
+| HIGH | Significant risk or technical debt |
+| MEDIUM | Suboptimal pattern but functional |
+| LOW | Minor style or documentation issue |
+
+## Evidence Format
+
+```
+[SEVERITY] Context/File
+Issue:      [what was found]
+Confidence: HIGH
+Recommendation: [actionable advice]
+```
+
+## Retry Policy
+```
+Task fails due to missing context
+  └─ Ask user for clarification
+       ├─ Provided → Retry Phase 1
+       └─ Not provided → EXIT: BLOCKED
+```
+
+## Escalation Rules
+
+```
+BLOCKED: Missing critical context for Product Thinking & Requirements
+Missing:
+  - [Specific requirement]
+Questions:
+  1. Bạn có thể cung cấp thêm thông tin về yêu cầu này không?
+  2. Mục tiêu chính của bạn là gì?
+Recommended Assumptions: none
+```
+
+## Handoff Contract
+
+### Consumes
+```json
+{
+  "from": "user or qk-orchestrator",
+  "required_fields": ["context"],
+  "optional_fields": ["existing_config"]
+}
+```
+
+### Produces
+```json
+{
+  "to": "user or downstream skill",
+  "output_fields": ["strategy_report", "exit_code"]
+}
+```
+
+## Exit Codes
+
+| Code | Meaning | When |
+|------|---------|------|
+| SUCCESS | Product Thinking & Requirements task completed successfully | Strategy/audit generated |
+| PARTIAL | Task completed with assumptions | Medium confidence |
+| BLOCKED | Missing context | Cannot proceed |
+| FAILED | Critical conflict or error | Unresolvable constraint |