claude-code-arcane 1.2.0 → 1.4.0

package/CHANGELOG.md

@@ -1,3 +1,19 @@
+# [1.4.0](https://github.com/SebastianLuser/claude-code-arcane/compare/v1.3.0...v1.4.0) (2026-06-22)
+
+
+### Features
+
+* **ecommerce:** add language-agnostic +ecommerce addon profile ([4ccfc38](https://github.com/SebastianLuser/claude-code-arcane/commit/4ccfc387e7ae48672a3ce5ddbc18bf778f68c883))
+
+# [1.3.0](https://github.com/SebastianLuser/claude-code-arcane/compare/v1.2.0...v1.3.0) (2026-06-21)
+
+
+### Features
+
+* **skills:** add .NET/C# backend skill set ([3775260](https://github.com/SebastianLuser/claude-code-arcane/commit/377526032a05c2a97790a3a4396cbeada6071c1e))
+* **skills:** add install-mcp skill for Unity MCP setup ([5290038](https://github.com/SebastianLuser/claude-code-arcane/commit/52900386844a18d91a3c4f9135e27c2be0be396f))
+* **skills:** add job-hunt skillset (12 skills + profile) ([d5329e2](https://github.com/SebastianLuser/claude-code-arcane/commit/d5329e211a273719ded43639aa582b98c5dfc7ac))
+
 # [1.2.0](https://github.com/SebastianLuser/claude-code-arcane/compare/v1.1.1...v1.2.0) (2026-06-19)
 
 

package/README.md

@@ -1,6 +1,6 @@
 # Claude Code Arcane
 
-> **321 skills, 86 agents, 15 hooks and 19 rules for Claude Code — selective deploy by profile.**
+> **333 skills, 87 agents, 15 hooks and 19 rules for Claude Code — selective deploy by profile.**
 
 A configuration harness installable via `npx`. Pick a **profile** that matches your stack and only the relevant tools get installed into your project's `.claude/` directory.
 
@@ -165,6 +165,7 @@ Once installed, manage the installation from within a Claude Code session:
 | `unity-design` | Game designer — GDDs, balance, art bible, playtesting | 17 | game |
 | `backend-ts` | Backend TypeScript — Fastify, Prisma, Zod, API design | 33 | engineering |
 | `backend-go` | Backend Go — Clean Arch, DB, auth, API, CI | 19 | engineering |
+| `backend-dotnet` | Backend .NET — ASP.NET Core, Vertical Slice/Clean, EF Core, JWT | 25 | engineering |
 | `frontend` | React + Vite + TypeScript | 14 | engineering |
 | `mobile` | React Native + Expo + TypeScript | 12 | engineering |
 | `flutter` | Flutter + Dart cross-platform | 8 | engineering |
@@ -191,6 +192,8 @@ Once installed, manage the installation from within a Claude Code session:
 | `+finance` | Investment analysis, financial modeling, SaaS metrics | 3 | business |
 | `+marketing` | Content, growth, SEO/CRO, strategy, analytics | 44 | marketing |
 | `+regulatory` | ISO 13485, GDPR, FDA, SOC 2, ISMS, QMS, MDR | 13 | regulatory |
+| `+job-hunt` | Job search end-to-end — master profile, ATS CV, LinkedIn, portfolio, cover letters, outreach, interview prep | 12 | — |
+| `+ecommerce` | Commerce end-to-end agnóstico de lenguaje — data model, checkout, inventario, órdenes, pagos, promociones, shipping/tax, listings, analytics, feeds, storefront, suscripciones | 12 | ecommerce |
 | `+self-improving` | Agent self-improvement and skill extraction | 2 | — |
 | `+statusline` | Claude Code status bar (branch, division, session info) | 0 | — |
 
@@ -345,7 +348,7 @@ claude-code-arcane/
 │   ├── manifest.ts            # Read/write arcane-manifest.json
 │   ├── types.ts               # TypeScript interfaces
 │   └── utils.ts               # Cross-platform helpers
-├── skills/                    # 321 skills (flat, one dir per skill)
+├── skills/                    # 333 skills (flat, one dir per skill)
 ├── profiles/                  # 29 profiles (YAML)
 ├── agents/                    # 13 dirs, 86+ agents (Markdown)
 ├── hooks/                     # 15 lifecycle hooks (Bash)

package/agents/ecommerce/ecommerce-architect.md

@@ -0,0 +1,60 @@
+---
+name: ecommerce-architect
+description: "E-Commerce Architect. Owner del dominio commerce: modelado de catálogo, selección de plataforma (headless vs monolito vs SaaS), y review de diseño de checkout, pagos, inventario y órdenes. Agnóstico de lenguaje/framework. Usar como punto de entrada para arquitectura de un storefront o marketplace."
+tools: Read, Glob, Grep, Write, Edit, WebSearch
+model: opus
+maxTurns: 30
+memory: project
+disallowedTools: Bash
+skills: [commerce-data-model, payments-architecture, order-lifecycle, inventory-stock, storefront-architecture]
+---
+
+Sos el **E-Commerce Architect**. Tu rol: diseñar y revisar la arquitectura de dominio de un negocio de commerce — agnóstico de lenguaje, framework y plataforma. Decisiones de modelado y arquitectura, no código atado a un stack.
+
+## Responsabilidades
+
+1. **Domain modeling** — catálogo (product/variant/SKU), órdenes, inventario, pagos
+2. **Platform selection** — headless vs monolito vs SaaS vs composable, con trade-offs
+3. **Flow review** — checkout, pagos (idempotencia), inventario (overselling), órdenes (state machine)
+4. **Data integrity** — concurrencia, reservas, reconciliación de pagos
+5. **Routing** — derivar a la skill correcta según la necesidad
+
+## Routing Map
+
+| Necesidad | Skill |
+|-----------|-------|
+| Modelar catálogo / variantes / taxonomía / facets | `commerce-data-model` |
+| Carrito, checkout, abandoned-cart | `cart-checkout` |
+| Stock, overselling, restock forecast | `inventory-stock` |
+| Estados de orden, returns, refunds | `order-lifecycle` |
+| Arquitectura de pagos, webhooks, PCI | `payments-architecture` |
+| Implementación Stripe específica | `stripe-integration-expert` |
+| Promos, cupones, gift cards | `promotions-discounts` |
+| Envíos, impuestos, duties | `shipping-tax` |
+| Listings / PDP / marketplace copy | `product-listing` |
+| KPIs y eventos GA4 ecommerce | `commerce-analytics` |
+| Feeds Google/Meta | `merchant-feed` |
+| IA del storefront, páginas, headless | `storefront-architecture` |
+| Suscripciones, dunning | `subscription-billing` |
+
+## Protocolo (non-negotiables)
+
+1. **Data model primero** — sin un modelo de catálogo sólido, no se diseña checkout ni feeds.
+2. **Idempotencia en pagos** — toda creación de cargo lleva idempotency key. No se discute.
+3. **Server-authoritative** — precios, stock, impuestos y promos se recalculan en el server antes de cobrar.
+4. **Money en minor units enteros** — nunca floats para dinero.
+5. **Estados separados** — order / payment / fulfillment son dimensiones independientes.
+6. **Agnóstico** — si el pedido empuja a un framework concreto, lo aclarás y derivás a la skill/implementador correspondiente; no atás el diseño a un stack salvo que el usuario lo decida.
+
+## Platform Decision Matrix
+
+| Opción | Para | Costo |
+|--------|------|-------|
+| Monolito (SaaS/themed) | Time-to-market, catálogo estándar | Menos flexibilidad |
+| Headless | UX custom, omnichannel, escala | Mayor build/ops |
+| Composable | Enterprise, best-of-breed | Complejidad de integración |
+
+## Delegation
+
+**Delegate to:** las skills del routing map según el área.
+**Escala a humano:** decisiones de compliance fiscal (nexus, VAT) y selección final de PSP/plataforma — presentás opciones con trade-offs, decide el negocio.

package/agents/engineering/dotnet-engineer.md

@@ -0,0 +1,78 @@
+---
+name: dotnet-engineer
+description: "Specialist en ASP.NET Core (.NET 10) production-ready: Vertical Slice / Clean Architecture, Minimal APIs, EF Core + PostgreSQL, JWT + Identity, async correcto, testing con Testcontainers. Implementa APIs backend guiadas por backend-architect."
+tools: Read, Glob, Grep, Write, Edit, Bash
+model: sonnet
+maxTurns: 15
+memory: project
+skills: [dotnet-scaffold, dotnet-best-practices, dotnet-architecture]
+---
+
+Sos el **.NET Engineer**. Implementás APIs backend en ASP.NET Core (.NET 10) con C# 14, nullable habilitado y async end-to-end, siguiendo decisions del `backend-architect` y `database-architect`.
+
+## Expertise Areas
+
+- **Arquitectura** — Vertical Slice (features) o Clean Architecture (capas con deps hacia adentro); elegir según complejidad del dominio
+- **DI** — constructor injection (primary constructors), lifetimes correctos, `IOptions<T>` para config
+- **HTTP** — Minimal APIs con `TypedResults`, DTOs (records), FluentValidation, `ProblemDetails` (RFC 7807)
+- **Async** — async all the way, `CancellationToken` propagado end-to-end, sin sync-over-async
+- **Data** — EF Core (default) / Dapper, `DbContext` como Unit of Work (sin repos genéricos), sin N+1, migraciones versionadas
+- **Auth** — JWT + refresh, ASP.NET Identity, authorization por policies declarativas
+- **Testing** — xUnit + `WebApplicationFactory` + Testcontainers (Postgres real), FluentAssertions
+- **Ops** — Serilog (JSON), health checks, OpenTelemetry, Docker multi-stage, graceful shutdown
+
+## Idioms y Anti-Patterns
+
+### Idiomatic .NET
+- Organizar por feature/slice; endpoints finos que delegan al handler
+- Constructor injection siempre; `Scoped` para `DbContext`/handlers
+- Async con `CancellationToken`; nunca `.Result`/`.Wait()`
+- `ProblemDetails` consistente; Result pattern para fallos esperados
+- DTOs en el borde; nunca exponer entidades EF
+
+### Anti-Patterns
+- `IRepository<T>` / `IUnitOfWork` genérico sobre EF Core
+- Lógica de negocio en controllers/endpoints
+- `.Result` / `.Wait()` (sync-over-async) → deadlocks
+- `EnsureCreated()` en producción en vez de migraciones
+- Service locator / `BuildServiceProvider()` en runtime
+- N+1 por falta de `Include`/proyección
+- `Domain` dependiendo de `Infrastructure` / EF Core
+
+## Stack Defaults
+
+| Componente | Default |
+|------------|---------|
+| Runtime | .NET 10 LTS (C# 14) |
+| Framework | ASP.NET Core — Minimal APIs |
+| Arquitectura | Vertical Slice (Clean opcional) |
+| ORM | EF Core 10 |
+| DB | PostgreSQL (Npgsql) |
+| Auth | JWT + ASP.NET Identity |
+| Validación | FluentValidation → ProblemDetails |
+| Testing | xUnit + Testcontainers |
+| Deploy | Docker |
+
+## Code Review Bar
+
+**Veto:**
+- Dependencias hacia afuera (Domain → Infrastructure/EF Core)
+- Constructor injection ausente / service locator en runtime
+- Sync-over-async (`.Result`/`.Wait()`)
+- `CancellationToken` no propagado en operaciones I/O
+- Endpoints sin validación / sin `ProblemDetails`
+- Auth/authz manual en vez de policies
+- `EnsureCreated()` contra prod / secrets en `appsettings.json`
+- N+1 queries evitables; entidades EF expuestas como respuesta
+
+**Comment-only:**
+- Repo genérico innecesario sobre EF Core
+- Handler con múltiples responsabilidades
+- Logging no estructurado
+- Falta de `AsNoTracking()` en lecturas
+
+## Delegation Map
+
+**Report to:** `backend-architect`, `database-architect`, `lead-programmer`.
+**Coordina con:** `e2e-tester` (cobertura e2e), `sql-specialist` (optimización de queries).
+**No delegate down.** Tier 3 specialist.

package/docs/SKILLS-CATALOG.md

@@ -1,6 +1,6 @@
 # Skills Catalog — Claude Code Arcane
 
-Catalogo completo de los 305 skills disponibles para proyectos consumidores. Organizados por division.
+Catalogo completo de los 333 skills disponibles para proyectos consumidores. Organizados por division.
 
 ## Como ejecutar un skill
 
@@ -70,7 +70,7 @@ Desde cualquier proyecto que tenga Arcane configurado, escribi `/` seguido del n
 
 ---
 
-## Gamedev (20 skills)
+## Gamedev (21 skills)
 
 | Skill | Descripcion | Uso |
 |-------|-------------|-----|
@@ -82,6 +82,7 @@ Desde cualquier proyecto que tenga Arcane configurado, escribi `/` seguido del n
 | `/consistency-check` | Detecta inconsistencias cross-documento en stats/items | `[full \| since-last \| entity:<name>]` |
 | `/doc-gdd` | Genera Game Design Document completo | `[game-name]` |
 | `/doc-pas` | Documentacion PAS (Problem-Analysis-Solution) | `[problem o decision title]` |
+| `/install-mcp` | Instala y registra el MCP de Unity (CoplayDev) en el proyecto | `[--secondary] [project-path]` |
 | `/map-systems` | Descompone concepto en sistemas, mapea dependencias | `[next \| system-name] [--review]` |
 | `/playtest-report` | Genera o analiza reporte de playtest | `[new\|analyze path] [--review]` |
 | `/scaffold-unity` | Scaffoldea proyecto Unity estilo Project_T | `[project-name]` |
@@ -158,7 +159,7 @@ Desde cualquier proyecto que tenga Arcane configurado, escribi `/` seguido del n
 
 ---
 
-## Software (45 skills)
+## Software (48 skills)
 
 | Skill | Descripcion | Uso |
 |-------|-------------|-----|
@@ -181,6 +182,9 @@ Desde cualquier proyecto que tenga Arcane configurado, escribi `/` seguido del n
 | `/distributed-tracing` | Setup de tracing distribuido | `[go\|ts\|react\|rn] [gcp\|tempo\|datadog]` |
 | `/doc-rfc` | Genera RFC tecnico estilo Alizia-BE | `[rfc-title o feature]` |
 | `/docker-setup` | Dockerfiles + docker-compose multi-stage | `[go\|ts\|react\|rn] [--dev\|--prod]` |
+| `/dotnet-architecture` | Arquitectura .NET: Vertical Slice y Clean Architecture | `[vertical-slice\|clean\|when-to-use]` |
+| `/dotnet-best-practices` | ASP.NET Core best practices: 40 reglas priorizadas | `[architecture\|di\|security\|performance\|all]` |
+| `/dotnet-scaffold` | Scaffold ASP.NET Core: .NET 10, EF Core, Postgres, JWT | `[project-name]` |
 | `/file-uploads` | Implementacion de file uploads | `[go\|ts\|react\|rn]` |
 | `/form-validation` | Validacion de forms: RHF + Zod | `[react\|rn] [form-name]` |
 | `/go-clean-architecture` | Clean architecture en Go | `[module o feature]` |
@@ -428,6 +432,44 @@ Desde cualquier proyecto que tenga Arcane configurado, escribi `/` seguido del n
 
 ---
 
+## Job Hunt (12 skills)
+
+| Skill | Descripcion | Uso |
+|-------|-------------|-----|
+| `/job-hunt` | Entry point: crea/gestiona el career workspace (perfiles, CVs, aplicaciones, empresas, contactos, entrevistas) y rutea | `[setup\|status\|next]` |
+| `/master-profile` | Perfil maestro single-source-of-truth del que derivan CVs, LinkedIn y portfolio | `[build\|update\|derive <role>]` |
+| `/cv-tailor` | Adapta el CV a una oferta: keywords ATS, que resaltar/bajar, reescritura de highlights | `[job-url\|jd-path\|application]` |
+| `/cv-ats-export` | Markdown -> PDF ATS-compliant (una columna, texto seleccionable) via Chrome/Edge headless | `[cv-name\|all] [--workspace <path>]` |
+| `/linkedin-optimize` | Optimiza LinkedIn: headline, About, experiencia con KPIs, keywords, value prop, pitch 30s | `[section\|full]` |
+| `/portfolio-site` | Genera/actualiza portfolio web desde el source-of-truth | `[sync\|scaffold] [repo\|--new]` |
+| `/job-search` | Busca, scorea y prioriza ofertas + plan de busqueda de 7 dias | `[search <query>\|score <url>\|plan]` |
+| `/cover-letter` | Cover letters y mensajes de aplicacion concisos y custom | `[application\|company + role]` |
+| `/cold-outreach` | Mensajes en frio a recruiters/hiring managers + follow-ups post-aplicacion | `[contact\|recruiter + company]` |
+| `/interview-prep` | Prep de entrevista: research, banco de preguntas, respuestas STAR, red flags | `[application\|company + role + round]` |
+| `/network-map` | Convierte el export de conexiones de LinkedIn en contactos por empresa + warm intros + mensajes | `[company] \| import <Connections.csv>` |
+| `/personal-brand` | Backlog secuenciado de posts de LinkedIn (4 pilares) para construir autoridad antes del outreach | `[plan\|ideas <N>\|draft <idea>]` |
+
+---
+
+## E-Commerce (12 skills)
+
+| Skill | Descripcion | Uso |
+|-------|-------------|-----|
+| `/commerce-data-model` | Modela y audita el dominio de catalogo: product/variant/SKU/option, collections, atributos, taxonomia, faceted search y paginacion | `[model\|audit\|taxonomy]` |
+| `/cart-checkout` | Disena/audita carrito y checkout: estado del cart, multi-step vs one-page, guest checkout, abandoned-cart recovery | `[design\|audit\|abandoned]` |
+| `/inventory-stock` | Inventario y stock: tracking, optimistic locking anti-overselling, reservas, multi-location, restock forecast (script) | `[design\|forecast\|audit]` |
+| `/order-lifecycle` | State machine de ordenes: order/payment/fulfillment, returns/RMA, refunds, eventos/webhooks | `[design\|states\|returns]` |
+| `/payments-architecture` | Arquitectura de pagos PSP-agnostica: payment intents, idempotencia, webhooks fiables, reconciliacion, PCI, fraude | `[design\|webhooks\|audit]` |
+| `/promotions-discounts` | Motor de promociones: cupones, automaticos, BOGO, tiered, reglas de stacking/exclusividad, gift cards | `[design\|rules\|audit]` |
+| `/shipping-tax` | Envios (zonas/rates/metodos) e impuestos (VAT/GST/nexus, duties, landed cost) calculados server-side | `[shipping\|tax\|audit]` |
+| `/product-listing` | Optimiza PDP y listings de marketplace (Amazon A10/COSMO/Rufus), titulos, bullets, A+, copy en bulk | `[pdp\|marketplace\|bulk]` |
+| `/commerce-analytics` | KPIs de commerce (CR, AOV, CLV, cohort) + spec de eventos GA4 ecommerce + validador de dataLayer (script) | `[kpis\|events\|audit]` |
+| `/merchant-feed` | Feeds de producto Google Merchant / Meta Catalog: atributos requeridos, mapping y validacion (script) | `[validate\|generate\|map]` |
+| `/storefront-architecture` | IA del storefront (home/PLP/PDP/cart/checkout/search/megamenu) + decision headless-vs-monolito + performance | `[design\|pages\|headless]` |
+| `/subscription-billing` | Billing recurrente: modelos, ciclos, proration, trials, plan changes y dunning anti-churn involuntario | `[design\|dunning\|audit]` |
+
+---
+
 ## Skills internos de Arcane
 
 Estos skills son para mantener y desarrollar el propio repo Arcane:

package/docs/USER-GUIDE.md

@@ -2,7 +2,7 @@
 
 ## What is Arcane?
 
-Arcane is a configuration harness for [Claude Code](https://docs.anthropic.com/en/docs/claude-code). It provides a curated library of **321 skills**, **86 agents**, **15 hooks**, and **19 rules** that you selectively deploy into any project. Instead of shipping everything to every project (wasting tokens and degrading performance), you pick a **profile** that matches your stack and only the relevant tools get installed.
+Arcane is a configuration harness for [Claude Code](https://docs.anthropic.com/en/docs/claude-code). It provides a curated library of **333 skills**, **87 agents**, **15 hooks**, and **19 rules** that you selectively deploy into any project. Instead of shipping everything to every project (wasting tokens and degrading performance), you pick a **profile** that matches your stack and only the relevant tools get installed.
 
 ## Table of Contents
 
@@ -536,7 +536,7 @@ Yes, and it's recommended. This way everyone on the team gets the same Claude Co
 
 ### How many tokens does a profile consume?
 
-Each skill adds ~30-100 tokens to the system prompt. A typical base profile (20-30 skills) adds ~1-2k tokens. The core profile adds ~500 tokens. Compare that to loading all 321 skills, which is why selective deploy matters.
+Each skill adds ~30-100 tokens to the system prompt. A typical base profile (20-30 skills) adds ~1-2k tokens. The core profile adds ~500 tokens. Compare that to loading all 333 skills, which is why selective deploy matters.
 
 ### Why replace instead of merge on install?
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-arcane",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "description": "Skills, agents, hooks and rules for Claude Code — installable via npx arcane",
   "type": "module",
   "bin": {

package/profiles/backend-dotnet.yaml

@@ -0,0 +1,54 @@
+name: backend-dotnet
+description: "Backend .NET — ASP.NET Core (.NET 10), Vertical Slice / Clean Architecture, EF Core + PostgreSQL, JWT + Identity, testing. Best practices priorizadas por impacto."
+type: base
+
+skills:
+  # .NET-specific (nuevas)
+  - dotnet-scaffold
+  - dotnet-best-practices
+  - dotnet-architecture
+  # API & data
+  - database
+  - database-indexing
+  - data-migrations
+  - api-design
+  - api-docs
+  - api-versioning
+  - caching-strategy
+  - webhooks
+  - rate-limiting
+  # Auth & security
+  - auth-strategy
+  - jwt-strategy
+  - oauth-setup
+  - rbac-abac
+  - audit-log
+  # Ops & quality
+  - testing
+  - contract-testing
+  - deps-audit
+  - env-sync
+  - observability
+  - performance
+  - async-ops
+  - ci-cd-setup
+
+rules:
+  universal:
+    - backend-code
+    - api-code
+    - dotnet-code
+    - migration-code
+  gamedev:
+    []
+
+agents:
+  - engineering
+
+permissions:
+  allow:
+    - "Bash(dotnet *)"
+    - "Bash(docker ps*)"
+    - "Bash(docker images*)"
+  deny:
+    []

package/profiles/ecommerce.yaml

@@ -0,0 +1,48 @@
+name: ecommerce
+description: "E-Commerce — dominio commerce end-to-end agnostico de lenguaje: data model, carrito/checkout, inventario, ordenes, pagos, promociones, shipping/tax, listings, analytics, feeds, storefront y suscripciones"
+type: addon
+
+skills:
+  # net-new (12)
+  - commerce-data-model
+  - cart-checkout
+  - inventory-stock
+  - order-lifecycle
+  - payments-architecture
+  - promotions-discounts
+  - shipping-tax
+  - product-listing
+  - commerce-analytics
+  - merchant-feed
+  - storefront-architecture
+  - subscription-billing
+  # reutilizadas (existentes, relevantes a e-commerce)
+  - stripe-integration-expert
+  - page-cro
+  - form-cro
+  - schema-markup
+  - seo-audit
+  - analytics-tracking
+  - pricing-strategy
+  - ab-test-setup
+  - referral-program
+
+rules:
+  universal:
+    []
+  gamedev:
+    []
+
+agents:
+  - ecommerce
+
+permissions:
+  allow:
+    - "Bash(python *restock_forecast.py*)"
+    - "Bash(python3 *restock_forecast.py*)"
+    - "Bash(python *ga4_ecommerce_validate.py*)"
+    - "Bash(python3 *ga4_ecommerce_validate.py*)"
+    - "Bash(python *feed_validate.py*)"
+    - "Bash(python3 *feed_validate.py*)"
+  deny:
+    []

package/profiles/job-hunt.yaml

@@ -0,0 +1,35 @@
+name: job-hunt
+description: "Job Hunt — busqueda laboral end-to-end: perfil maestro, CV ATS, LinkedIn, portfolio, cover letters, outreach a recruiters, scoring de ofertas y prep de entrevistas"
+type: addon
+
+skills:
+  - job-hunt
+  - master-profile
+  - cv-tailor
+  - cv-ats-export
+  - linkedin-optimize
+  - portfolio-site
+  - job-search
+  - cover-letter
+  - cold-outreach
+  - interview-prep
+  - network-map
+  - personal-brand
+
+rules:
+  universal:
+    []
+  gamedev:
+    []
+
+agents:
+  []
+
+permissions:
+  allow:
+    - "Bash(python *cv_export.py*)"
+    - "Bash(python3 *cv_export.py*)"
+    - "Bash(python *network_map.py*)"
+    - "Bash(python3 *network_map.py*)"
+  deny:
+    []

package/profiles/unity-design.yaml

@@ -10,6 +10,7 @@ skills:
   - map-systems
   - asset-spec
   - game-audit
+  - install-mcp
   - quick-design
   - ux-design
   - design-system

package/profiles/unity-dev.yaml

@@ -12,6 +12,7 @@ skills:
   - release-checklist
   - patch-notes
   - onboard
+  - install-mcp
   - scaffold-unity
   - unity-game-architecture
   - map-systems

package/rules/dotnet-code.md

@@ -0,0 +1,64 @@
+---
+paths:
+  - "**/*.cs"
+  - "**/*.csproj"
+  - "**/Program.cs"
+  - "**/*.Tests.cs"
+  - "src/**"
+  - "tests/**"
+---
+
+# .NET / C# Code Rules
+
+Reglas production-ready para ASP.NET Core (.NET 10), ordenadas por impacto. Catálogo completo (40 reglas, 10 categorías) + ejemplos incorrecto/correcto: skill `dotnet-best-practices`. Estructura de proyecto: skill `dotnet-architecture`.
+
+## CRITICAL — Arquitectura & DI
+
+- **Organizar por feature (Vertical Slice)** o por capas con dependencias hacia adentro (Clean) — nunca un `Services/` + `Controllers/` global gigante.
+- **Endpoints/controllers finos** — traducen HTTP ↔ request, llaman al handler y dan shape a la respuesta. Cero lógica de negocio.
+- **`DbContext` es Unit of Work + Repository** — no envolverlo en `IRepository<T>` / `IUnitOfWork` genérico (indirección sin valor que tapa `Include`/proyecciones).
+- **Constructor injection (primary constructors) siempre.** Nunca service locator ni `BuildServiceProvider()` manual en `Program.cs`.
+- **Lifetimes correctos** — `Scoped` para `DbContext`/handlers, `Singleton` solo si es stateless; nunca inyectar `Scoped` en `Singleton` (captured dependency).
+- **`<Nullable>enable</Nullable>`** + warnings as errors; cero `#nullable disable` para silenciar.
+
+## HIGH — Async, Error handling & Security
+
+- **Async end-to-end.** Nunca `.Result`/`.Wait()`/`.GetAwaiter().GetResult()` (deadlocks / thread-pool starvation). Sin `async void` salvo event handlers.
+- **Propagar `CancellationToken`** desde el endpoint hasta EF Core y llamadas HTTP. Sin fire-and-forget sin manejo de error.
+- **Errores vía `ProblemDetails` (RFC 7807)** — `AddProblemDetails()` + `IExceptionHandler` global. Nunca filtrar stack traces. Validación → `ValidationProblemDetails`.
+- **Result pattern para fallos esperados**, excepciones solo para lo excepcional. Sin `catch` vacíos.
+- **JWT de vida corta + refresh**, secretos en user-secrets/Key Vault (no en `appsettings.json`). Authorization por **policies declarativas**, no checks manuales de roles.
+- **Rate limiting** con el middleware built-in (`AddRateLimiter`). HTTPS/HSTS. No loguear data sensible.
+
+## HIGH — Performance & Data (EF Core)
+
+- **Evitar N+1** — `Include` o proyección a DTO con `Select`. Nunca acceder a relaciones en un loop.
+- **`AsNoTracking()`** en lecturas read-only. `AsSplitQuery()` para `Include` grandes (evita explosión cartesiana).
+- **Migraciones versionadas** (`dotnet ef migrations add` / `MigrateAsync()`); nunca `EnsureCreated()` en prod.
+- **Transacciones para operaciones multi-step**; `EnableRetryOnFailure` para resiliencia de conexión (Npgsql).
+- **Caching estratégico** (`HybridCache`/output caching) con TTL e invalidación apropiada.
+
+## MEDIUM — API, Testing & DevOps
+
+- **DTOs en el borde** (records) — nunca exponer entidades EF como respuestas HTTP.
+- **API versioning** (`Asp.Versioning`) para cambios breaking; OpenAPI con `Microsoft.AspNetCore.OpenApi`.
+- **`TypedResults`** en minimal APIs para status codes correctos y testeables.
+- **Tests con xUnit**; integración con `WebApplicationFactory` + Postgres real (Testcontainers). No mockear `DbContext` ni usar el in-memory provider (miente sobre comportamiento relacional).
+- **Structured logging (Serilog JSON)** + health checks (liveness/readiness). Graceful shutdown vía `IHostApplicationLifetime`.
+- **Config por entorno** (`IOptions<T>`, `appsettings.{Environment}.json`) — nada hardcodeado.
+
+## Anti-Patterns
+
+- `IRepository<T>` / `IUnitOfWork` genérico sobre EF Core
+- Lógica de negocio en controllers/endpoints
+- `.Result` / `.Wait()` (sync-over-async) → deadlocks
+- `EnsureCreated()` contra una DB de producción
+- Service locator / `BuildServiceProvider()` en runtime
+- Devolver entidades EF crudas como respuesta HTTP
+- N+1 queries por falta de `Include`/proyección
+- `Domain` referenciando `Infrastructure` / EF Core (dependencia hacia afuera)
+- Forzar Clean Architecture en un CRUD simple (sobre-ingeniería)
+
+---
+
+_Derivado de [github/awesome-copilot](https://github.com/github/awesome-copilot) (dotnet-best-practices), [dotnet/skills](https://github.com/dotnet/skills) y [ardalis/CleanArchitecture](https://github.com/ardalis/CleanArchitecture). Condensado al formato Arcane._

package/skills/cart-checkout/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: cart-checkout
+description: "Design and audit cart and checkout flows — cart state, multi-step vs one-page checkout, guest checkout, address/shipping/tax/payment steps, and abandoned-cart recovery. Platform-agnostic conversion and correctness patterns. Triggers: designing a checkout, auditing drop-off, planning abandoned-cart flows."
+argument-hint: "[design | audit | abandoned]"
+category: "ecommerce"
+user-invocable: true
+allowed-tools: Read, Glob, Grep
+---
+
+# Cart & Checkout
+
+The highest-leverage surface in commerce: where intent becomes revenue. Design carts and checkouts that are correct under concurrency and optimized for completion — without prescribing a framework.
+
+## Before Starting
+
+Gather: cart model (server-persisted vs client, guest vs account), checkout type (single vs multi-step), payment/shipping/tax requirements, and goal (design new flow, audit drop-off, or build abandoned-cart recovery).
+
+## How This Skill Works
+
+| Mode | Trigger | Output |
+|------|---------|--------|
+| **Design** | `design` | Cart state model + checkout step flow + edge cases |
+| **Audit** | `audit` | Friction/drop-off analysis with prioritized fixes |
+| **Abandoned** | `abandoned` | Recovery sequence (triggers, timing, channels) |
+
+---
+
+## Phase 1 — Cart State
+
+| Decision | Recommendation |
+|----------|----------------|
+| Persistence | Server-side cart keyed by session + user; merge on login |
+| Pricing | **Re-price at checkout** — never trust cart-stored prices |
+| Inventory | Soft-reserve at checkout start, not on add-to-cart |
+| Identity | Allow guest carts; merge guest → account without losing items |
+
+**Rule:** The cart is a draft, not a contract. Totals, stock, and promotions are recomputed server-side before payment.
+
+---
+
+## Phase 2 — Checkout Flow
+
+Canonical steps: **Cart → Identity → Shipping address → Shipping method → Payment → Review → Confirmation.**
+
+- **Guest checkout** is non-negotiable for B2C — forced account creation is the #1 avoidable drop-off.
+- Collect email first (enables abandoned-cart + receipts).
+- One-page vs multi-step: multi-step for complex shipping/tax; one-page for low-SKU/digital. Either way, show progress and never lose entered data on validation error.
+- Recompute tax/shipping when the address changes; show the final total before the pay button.
+- Make payment **idempotent** — a double-click must not double-charge (hand off to `payments-architecture`).
+
+For the full step-by-step field list, error handling, and address validation patterns, see [references/checkout-flow-spec.md](references/checkout-flow-spec.md).
+
+---
+
+## Phase 3 — Abandoned-Cart Recovery
+
+| Touch | Timing | Angle |
+|-------|--------|-------|
+| 1 | ~1h | Reminder ("you left these") |
+| 2 | ~24h | Help/objection handling + reviews |
+| 3 | ~72h | Incentive (discount) — only if margin allows |
+
+Capture email as early as possible; suppress recovery once the order completes; respect consent and frequency caps.
+
+---
+
+## Output Artifacts
+
+| Request | Output |
+|---------|--------|
+| Design flow | Cart model + annotated step diagram + edge-case list |
+| Audit | Drop-off table with severity and READY-to-ship fixes |
+| Abandoned | Trigger/timing/channel sequence + suppression rules |
+
+A checkout is **READY** when guest checkout works, prices/stock are re-validated server-side, payment is idempotent, and data survives validation errors.
+
+---
+
+## Related Skills
+
+- **payments-architecture**: owns the payment step (intents, idempotency, webhooks).
+- **shipping-tax**: computes the shipping and tax shown at checkout.
+- **promotions-discounts**: applies coupons/discounts at the cart.
+- **page-cro** / **form-cro**: deeper conversion optimization of the checkout UI.
+- **order-lifecycle**: takes over once the order is placed.