cc-codeconductor 1.2.0 → 1.3.0

package/presets/cursor/skills/jpa-postgres/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: jpa-postgres
-version: 1.0.0
 name: JPA + PostgreSQL
 description: >
   Provides expert knowledge of JPA entity design, relationship mapping, Flyway

package/presets/cursor/skills/livewire-alpine-bridge/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: livewire-alpine-bridge
-version: 1.0.0
 name: Livewire Alpine Bridge
 description: >
   Schedules reactive frontend states cleanly using entangle directives in PHP and JS.

package/presets/cursor/skills/nextjs-typescript/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: nextjs-typescript
-version: 1.0.0
 name: Next.js + TypeScript
 description: >
   Provides expert knowledge for building Next.js 15+ applications with the App Router, TypeScript, Server Components, Server Actions, and TanStack Query.

package/presets/cursor/skills/pagespeed-perf/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: pagespeed-perf
-version: 1.0.0
 name: PageSpeed Performance Audit
 description: >
   Web Performance Engineering — analyzes Core Web Vitals using the PageSpeed
@@ -32,7 +31,7 @@ inputs:
   - name: url
     type: string
     required: true
-    description: Full URL to audit (must include scheme: https://...)
+    description: "Full URL to audit (must include scheme: https://...)"
   - name: strategy
     type: string
     required: false

package/presets/cursor/skills/python/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: python
-version: 1.0.0
 name: Python
 description: >
   Python development best practices: clean code, patterns,

package/presets/cursor/skills/python-django-stack/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: python-django-stack
-version: 1.0.0
 name: Python Django Stack
 description: >
   Python and Django conventions for multi-tenant SaaS POS projects:

package/presets/cursor/skills/python-fastapi-stack/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: python-fastapi-stack
-version: 1.0.0
 name: Python FastAPI Stack
 description: >
   FastAPI conventions for REST APIs: routers, Pydantic v2 schemas, dependency

package/presets/cursor/skills/security/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: security
-version: 1.0.0
 name: Security
 description: >
   Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.

package/presets/cursor/skills/seo-analytics-injector/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: seo-analytics-injector
-version: 1.0.0
 name: SEO Analytics Injector
 description: >
   Verifies and injects Google Tag Manager (GTM), GA4 event triggers, and optimized meta tags.

package/presets/cursor/skills/spring-auth-auditor/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: spring-auth-auditor
-version: 1.0.0
 name: Spring Auth Auditor
 description: >
   Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.

package/presets/cursor/skills/spring-boot-feature/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: spring-boot-feature
-version: 1.0.0
 name: Spring Boot Feature Creation
 description: >
   Guides the creation of complete Spring Boot features following a structured,

package/presets/cursor/skills/spring-boot-kotlin/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: spring-boot-kotlin
-version: 1.0.0
 name: Spring Boot + Kotlin
 description: >
   Provides expert knowledge of Spring Boot conventions, Kotlin idioms, and MVC

package/presets/cursor/skills/spring-boot-testing-strategy/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: spring-boot-testing-strategy
-version: 1.0.0
 name: Spring Boot Testing Strategy
 description: >
   Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

package/presets/cursor/skills/sqlalchemy/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: sqlalchemy
-version: 1.0.0
 name: SQLAlchemy
 description: >
   SQLAlchemy 2.x patterns for async FastAPI projects: models, sessions, queries,

package/presets/cursor/skills/tailwind-responsive-auditor/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: tailwind-responsive-auditor
-version: 1.0.0
 name: Tailwind Responsive Auditor
 description: >
   Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.

package/presets/cursor/skills/tdd-mutation-tester/SKILL.md

@@ -1,6 +1,5 @@
 ---
 id: tdd-mutation-tester
-version: 1.0.0
 name: TDD Mutation Tester
 description: >
   Performs simple mutation testing to verify test coverage and assertions.

package/presets/gemini/GEMINI.md

@@ -0,0 +1,38 @@
+<!-- CODECONDUCTOR:BEGIN managed -->
+
+# CodeConductor — Gemini CLI Preset
+
+This file configures CodeConductor for **Gemini CLI**. It lives at the project
+root (`GEMINI.md`) so Gemini CLI's hierarchical context loader picks it up
+from the current directory and every ancestor up to the project root.
+
+## Behavioral Discipline
+
+1. **Think Before Coding** — state assumptions; ask if uncertain; present
+   alternatives instead of picking silently.
+2. **Simplicity First** — minimum code that solves the problem; no
+   speculative abstractions.
+3. **Surgical Changes** — touch only what the task requires; match existing
+   style; remove only what your own change made unused.
+4. **Goal-Driven Execution** — turn the task into a verifiable goal with a
+   success check; loop until it passes.
+
+## Commands
+
+CodeConductor ships its slash commands as native Gemini CLI TOML commands
+under `.gemini/commands/cc/`, invoked as `/cc:<name>` (e.g. `/cc:feature`,
+`/cc:review`). Run `/cc:ask "<problem>"` when unsure which one applies — it
+recommends exactly one and stops; it does not start the workflow.
+
+Skills live under `.gemini/skills/` (Gemini CLI's native Agent Skills
+discovery path, shared with `.agents/skills/` per the Agent Skills open
+standard). Read `.gemini/skills/using-cc-skills/SKILL.md` first — it maps
+intent to the right slash command.
+
+## What never changes
+
+- Do not invoke the Implementer without an accepted Technical Plan.
+- Do not skip the Reviewer step for medium- or high-risk changes.
+- Do not store secrets in any file loaded by Gemini CLI.
+
+<!-- CODECONDUCTOR:END managed -->

package/presets/gemini/commands/cc/api-contract.toml

@@ -1,4 +1,4 @@
-description = "compatibility constraints, contract tests, documentation, and review."
+description = "Run the API contract workflow for public interface changes, compatibility constraints, contract tests, documentation, and review."
 
 prompt = """
 # API Contract Workflow
@@ -33,7 +33,7 @@ Local development: `bun run dev <same argv>`. Published package: `npx cc-codecon
 
 ## Step 1 — Task Card validation (Task Coach role)
 
-Invoke the `task-coach` subagent via the Task tool.
+Adopt the `task-coach` role as defined in `.gemini/agents/task-coach.md`.
 
 The Task Card must classify the task as high risk by default and include the
 affected public interface, request/response examples, compatibility notes,
@@ -46,7 +46,7 @@ criteria.
 
 ## Step 2 — Technical Plan (Architect role)
 
-Invoke the `architect` subagent via the Task tool.
+Adopt the `architect` role as defined in `.gemini/agents/architect.md`.
 
 Define the API contract, validation strategy, compatibility behavior, docs or
 OpenAPI changes, and reviewer blocking conditions.
@@ -57,7 +57,7 @@ OpenAPI changes, and reviewer blocking conditions.
 
 ## Step 3 — Implementation (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool.
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`.
 
 Apply the minimal diff, preserve compatible behavior unless explicitly approved
 as breaking, and update only the planned files.
@@ -66,7 +66,7 @@ as breaking, and update only the planned files.
 
 ## Step 4 — Contract Tests (Tester role)
 
-Invoke the `tester` subagent via the Task tool.
+Adopt the `tester` role as defined in `.gemini/agents/tester.md`.
 
 Add or update tests for request shape, response shape, status/error behavior,
 and backward compatibility.
@@ -75,8 +75,12 @@ and backward compatibility.
 
 ## Step 5 — Review (Reviewer role)
 
-Invoke the `reviewer` subagent via the Task tool.
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`.
 
 Block on missing contract tests, undocumented breaking changes, or docs/OpenAPI
 drift.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """

package/presets/gemini/commands/cc/ask.toml

@@ -1,4 +1,4 @@
-description = "[cc: alias] Recommend one CodeConductor slash command from a natural-language problem. Does not start that workflow."
+description = "Recommend one CodeConductor slash command from a natural-language problem. Does not start that workflow."
 
 prompt = """
 # Ask — recommend a slash command

package/presets/gemini/commands/cc/backlog.toml

@@ -1,4 +1,4 @@
-description = "validate with openspec, and plan OpenSpec change folders for /cc-openspec."
+description = "Author BACKLOG.md — wayfinding, grilling, create or append items, validate with openspec, and plan OpenSpec change folders for /cc-openspec."
 
 prompt = """
 # Backlog Authoring Workflow

package/presets/gemini/commands/cc/clarify.toml

@@ -1,4 +1,4 @@
-description = "CodeConductor clarify workflow"
+description = "Re-explain the last deliverable in Task Card vocabulary when it did not land."
 
 prompt = """
 # Clarify Workflow

package/presets/gemini/commands/cc/council.toml

@@ -84,4 +84,8 @@ If APPROVED (no CRITICAL findings):
 ## Completion
 
 Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.
+
+## Next
+
+Approved: merge. Blocked: return the findings to `/cc:fix` or `/cc:feature`.
 """

package/presets/gemini/commands/cc/db-migration.toml

@@ -1,4 +1,4 @@
-description = "operational sequencing, tests, and review."
+description = "Run the database migration workflow for schema/data changes, operational sequencing, tests, and review."
 
 prompt = """
 # Database Migration Workflow
@@ -34,7 +34,7 @@ Local development: `bun run dev <same argv>`. Published package: `npx cc-codecon
 
 ## Step 1 — Task Card validation (Task Coach role)
 
-Invoke the `task-coach` subagent via the Task tool.
+Adopt the `task-coach` role as defined in `.gemini/agents/task-coach.md`.
 
 The Task Card must classify the task as high risk and include affected schema,
 model, and migration files; data backfill needs; deployment ordering;
@@ -46,7 +46,7 @@ rollback/forward-fix strategy; lock risk; data risk; and verification commands.
 
 ## Step 2 — Migration Plan (Architect role)
 
-Invoke the `architect` subagent via the Task tool.
+Adopt the `architect` role as defined in `.gemini/agents/architect.md`.
 
 Define the schema/data plan, operational sequencing, compatibility strategy,
 rollback/forward-fix notes, and test approach.
@@ -57,7 +57,7 @@ rollback/forward-fix notes, and test approach.
 
 ## Step 3 — Migration Tests (Tester role)
 
-Invoke the `tester` subagent via the Task tool.
+Adopt the `tester` role as defined in `.gemini/agents/tester.md`.
 
 Cover migration-sensitive behavior where the stack supports it, including
 existing-data edge cases and rollback/forward-fix notes when automated rollback
@@ -67,7 +67,7 @@ tests are not practical.
 
 ## Step 4 — Implementation (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool.
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`.
 
 Keep model and migration changes together, avoid unrelated refactors, and
 preserve the deployment order specified by architect.
@@ -76,8 +76,12 @@ preserve the deployment order specified by architect.
 
 ## Step 5 — Review (Reviewer role)
 
-Invoke the `reviewer` subagent via the Task tool.
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`.
 
 Block on missing migration tests, missing data-risk notes, undocumented
 deployment sequencing, or model/migration drift.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """

package/presets/gemini/commands/cc/explore.toml

@@ -1,4 +1,4 @@
-description = "CodeConductor explore workflow"
+description = "Map the repository and recommend the next CodeConductor slash command. Read-only."
 
 prompt = """
 # Explore Workflow

package/presets/gemini/commands/cc/feature.toml

@@ -1,4 +1,4 @@
-description = "implementation, testing, review, and documentation."
+description = "Run the full feature workflow — task validation, technical design, implementation, testing, review, and documentation."
 
 prompt = """
 # Feature Workflow
@@ -49,7 +49,7 @@ Record a Repo Map artifact before intake.
 
 ## Step 2 — Task Card validation (Task Coach role)
 
-Invoke the `task-coach` subagent via the Task tool.
+Adopt the `task-coach` role as defined in `.gemini/agents/task-coach.md`.
 
 Produce a complete Task Card. The Task Card is ready when it contains: title,
 type, risk classification, scope, context, acceptance criteria, and constraints.
@@ -64,7 +64,7 @@ continuing.**
 
 ## Step 3 — Technical Plan (Architect role)
 
-Invoke the `architect` subagent via the Task tool.
+Adopt the `architect` role as defined in `.gemini/agents/architect.md`.
 
 Produce a Technical Plan that covers:
 
@@ -82,7 +82,7 @@ not proceed to implementation until the plan is approved.**
 
 ## Step 4 — Test coverage (Tester role)
 
-Invoke the `tester` subagent via the Task tool.
+Adopt the `tester` role as defined in `.gemini/agents/tester.md`.
 
 Use the Implementation Summary and the Task Card.
 
@@ -95,7 +95,7 @@ Use the Implementation Summary and the Task Card.
 
 ## Step 5 — Implementation (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool.
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`.
 
 Use the approved Technical Plan and the Task Card from the steps above.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
@@ -110,7 +110,7 @@ Implementer creates a Git Worktree before touching any file; all edits happen in
 
 ## Step 6 — Code review (Reviewer role)
 
-Invoke the `reviewer` subagent via the Task tool.
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`.
 
 Use the complete diff and the Task Card.
 
@@ -124,7 +124,7 @@ they are resolved and the diff is re-reviewed.
 
 ## Step 7 — Documentation (Docs role)
 
-Invoke the `docs` subagent via the Task tool.
+Adopt the `docs` role as defined in `.gemini/agents/docs.md`.
 
 Invoke this step only if any of the following changed:
 
@@ -150,4 +150,8 @@ Report the following:
 
 The feature is complete only when: all tests pass, no CRITICAL review findings
 remain, and documentation reflects the implemented behavior.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """

package/presets/gemini/commands/cc/fix.toml

@@ -1,4 +1,4 @@
-description = "validation, implementation, testing, and optional review."
+description = "Run the bug fix workflow — risk-based routing through task validation, implementation, testing, and optional review."
 
 prompt = """
 # Bug Fix Workflow
@@ -39,9 +39,6 @@ If `openspec status` reports an active change folder:
 
 Local development: `bun run dev <same argv>`. Published package: `npx cc-codeconductor`.
 
-Skills: `testing-tdd`, `evaluation`. Record `scorecard create --from-diff`.
-A small fix still needs a Task Card and a failing regression test first.
-
 ---
 
 
@@ -56,7 +53,7 @@ Record a Repo Map artifact before intake.
 
 ## Step 2 — Task Card validation (Task Coach role)
 
-Invoke the `task-coach` subagent via the Task tool.
+Adopt the `task-coach` role as defined in `.gemini/agents/task-coach.md`.
 
 Produce a Task Card that includes:
 
@@ -111,7 +108,7 @@ before continuing.**
 
 ## Step 4 — Regression tests (Tester role)
 
-Invoke the `tester` subagent via the Task tool. Apply for all risk levels.
+Adopt the `tester` role as defined in `.gemini/agents/tester.md`. Apply for all risk levels.
 
 1. Write a regression test that reproduces the original bug and confirm it fails
    before any fix (RED).
@@ -122,7 +119,7 @@ Invoke the `tester` subagent via the Task tool. Apply for all risk levels.
 
 ## Step 5a — Implementation, low-risk (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool. Use the Task Card.
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`. Use the Task Card.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
 1. Locate the defect using the reproduction steps.
@@ -134,7 +131,7 @@ Implementer creates a Git Worktree before touching any file; all edits happen in
 
 ## Step 5b — Implementation, medium/high-risk (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool. Use the approved
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`. Use the approved
 Technical Plan and the Task Card.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
@@ -145,7 +142,7 @@ After implementation, run the full test suite.
 
 ## Step 6 — Review (Reviewer role) — medium/high-risk only
 
-Invoke the `reviewer` subagent via the Task tool. Use the diff and Task
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`. Use the diff and Task
 Card.
 
 Produce a Review Report with CRITICAL / WARNING / SUGGESTION findings. If any
@@ -160,4 +157,11 @@ Report: Task Card, Implementation Summary, regression test added, Review Report
 
 The fix is complete only when: the regression test passes, the full suite
 passes, and no CRITICAL review findings remain.
+
+Skills: `testing-tdd`, `evaluation`. Record `scorecard create --from-diff`.
+A small fix still needs a Task Card and a failing regression test first.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """

package/presets/gemini/commands/cc/handoff.toml

@@ -1,4 +1,4 @@
-description = "CodeConductor handoff workflow"
+description = "Compact the session into gitignored `.codeconductor/sessions/handoff.md` (redact secrets)."
 
 prompt = """
 # Handoff Workflow

package/presets/gemini/commands/cc/iterative.toml

@@ -1,4 +1,4 @@
-description = "Relentless Grilling, contract and spec design, TDD, council review, and docs."
+description = "Run the advanced iterative workflow — Wayfinding AST discovery, Relentless Grilling, contract and spec design, TDD, council review, and docs."
 
 prompt = """
 # Advanced Iterative Workflow
@@ -38,7 +38,7 @@ Local development: `bun run dev <same argv>`. Published package: `npx cc-codecon
 
 If `graphify-out/graph.json` exists, run `graphify query "{{args}}"` (and
 `graphify path` / `graphify explain` when two modules or one concept need a
-scoped subgraph). Then invoke the `repo-explorer` subagent via the Task tool
+scoped subgraph). Then adopt the `repo-explorer` role as defined in `.gemini/agents/repo-explorer.md`
 with that graph output.
 
 repo-explorer maps directory trees, conventions, god nodes, and affected
@@ -50,7 +50,7 @@ context.
 
 ## Step 2 — Relentless Grilling & Task Card (task-coach)
 
-Invoke the `task-coach` subagent via the Task tool.
+Adopt the `task-coach` role as defined in `.gemini/agents/task-coach.md`.
 
 Produce a complete Task Card. The Task Card is ready when it contains: title,
 type, risk classification, scope, context, acceptance criteria, and
@@ -70,7 +70,7 @@ continuing.
 
 ## Step 3 — Contract & Technical Plan (contract-builder & architect)
 
-Invoke `contract-builder` then `architect` via the Task tool.
+Adopt the `contract-builder` role as defined in `.gemini/agents/contract-builder.md`, then the `architect` role as defined in `.gemini/agents/architect.md`.
 
 1. Define API contracts, JSON Schemas, or TypeScript interfaces.
 2. Formulate the Technical Plan (chosen approach, affected files, trade-offs).
@@ -83,7 +83,7 @@ not proceed to tests until the plan is approved.**
 
 ## Step 4 — Test coverage (Tester role)
 
-Invoke the `tester` subagent via the Task tool.
+Adopt the `tester` role as defined in `.gemini/agents/tester.md`.
 
 1. Write or extend failing tests for the new behavior before implementation (RED).
 2. Ensure all acceptance criteria from the Task Card have at least one test.
@@ -93,7 +93,7 @@ Invoke the `tester` subagent via the Task tool.
 
 ## Step 5 — Implementation (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool.
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`.
 
 Use the approved Technical Plan, contracts, and the failing tests.
 Implementer creates a Git Worktree before touching any file; all edits happen
@@ -126,7 +126,7 @@ If APPROVED (no CRITICAL findings), continue.
 
 ## Step 7 — Documentation (Docs role)
 
-Invoke the `docs` subagent via the Task tool when a public API, public module,
+Adopt the `docs` role as defined in `.gemini/agents/docs.md` when a public API, public module,
 or user-visible behavior changed.
 
 Update: README (if applicable), OpenAPI spec (if applicable), CHANGELOG

package/presets/gemini/commands/cc/openspec.toml

@@ -1,4 +1,4 @@
-description = "orchestrate agents by phase, review gate, and update backlog state."
+description = "Run OpenSpec backlog delivery — validate BACKLOG.md, plan TaskCards, orchestrate agents by phase, review gate, and update backlog state."
 
 prompt = """
 # OpenSpec Backlog Workflow

package/presets/gemini/commands/cc/prototype.toml

@@ -1,4 +1,4 @@
-description = "CodeConductor prototype workflow"
+description = "Disposable spike in an isolated worktree. Not a merge candidate."
 
 prompt = """
 # Prototype Workflow

package/presets/gemini/commands/cc/refactor.toml

@@ -1,4 +1,4 @@
-description = "test verification, risk-based implementation, and scope enforcement."
+description = "Run the refactor workflow — mandatory architectural justification, test verification, risk-based implementation, and scope enforcement."
 
 prompt = """
 # Refactor Workflow
@@ -44,7 +44,7 @@ Command: `refactor` (fixed for this workflow — do not infer from user text)
 
 ## Step 1 — Architectural justification (Architect role)
 
-Invoke the `architect` subagent via the Task tool. Always invoke this step
+Adopt the `architect` role as defined in `.gemini/agents/architect.md`. Always invoke this step
 first, regardless of risk level. A refactor without a written justification is
 scope creep in disguise.
 
@@ -93,7 +93,7 @@ Proceed to Step 3b.
 
 ## Step 3a — Implementation, low-risk (Implementer role)
 
-Invoke the `implementer` subagent via the Task tool. Use the approved
+Adopt the `implementer` role as defined in `.gemini/agents/implementer.md`. Use the approved
 Refactor Plan.
 Implementer creates a Git Worktree before touching any file; all edits happen inside it.
 
@@ -133,7 +133,7 @@ regression. **STOP and report.**
 
 ## Step 5 — Code review (Reviewer role) — medium/high-risk only
 
-Invoke the `reviewer` subagent via the Task tool. Use the diff and Refactor
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`. Use the diff and Refactor
 Plan.
 
 Verify:
@@ -155,4 +155,8 @@ and after, Review Report (if applicable).
 The refactor is complete only when: all pre-existing tests still pass, the
 implementation matches the approved plan exactly, and no CRITICAL review
 findings remain.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """

package/presets/gemini/commands/cc/review.toml

@@ -1,4 +1,4 @@
-description = "CRITICAL, WARNING, and SUGGESTION findings; CRITICAL findings block merge."
+description = "Run a structured code review — produces a Review Report with CRITICAL, WARNING, and SUGGESTION findings; CRITICAL findings block merge."
 
 prompt = """
 # Code Review Workflow
@@ -52,7 +52,7 @@ Show the diff summary (files changed, lines added/removed) before proceeding.
 
 ## Step 2 — Code review (Reviewer role)
 
-Invoke the `reviewer` subagent via the Task tool.
+Adopt the `reviewer` role as defined in `.gemini/agents/reviewer.md`.
 
 Evaluate the diff against the following checklist:
 
@@ -145,6 +145,7 @@ npx cc-codeconductor scorecard regression
 
 Map merge recommendation to scorecard verdict. Record outcome for trend tracking.
 
-Skills: `evaluation`. Handmade TDD JSON is rejected. Run `scorecard suite-run`
-or `scorecard record` before declaring the review closed.
+## Next
+
+Approved: merge. Blocked: return the findings to `/cc:fix` or `/cc:feature`.
 """

package/presets/gemini/commands/cc/scorecard.toml

@@ -1,4 +1,4 @@
-description = "checklist, and aggregate stats."
+description = "Evaluate deliverable quality — scorecard, outcome tracking, regression checklist, and aggregate stats."
 
 prompt = """
 # Scorecard Evaluation Workflow

package/presets/gemini/commands/cc/security.toml

@@ -1,4 +1,4 @@
-description = "security-* skills, authorization gate, risk-based routing, hardening, and review."
+description = "Run the authorized defensive security workflow — domain security-* skills, authorization gate, risk-based routing, hardening, and review."
 
 prompt = """
 # Defensive Security Workflow
@@ -174,4 +174,8 @@ resolved.
 Report: Task Card, Implementation Summary, regression test added, Review Report
 (if applicable). The task is complete only when: the regression test passes, the
 full suite passes, and no CRITICAL review findings remain.
+
+## Next
+
+Run `/cc:review` on the diff before merging.
 """