claude-code-kanban 5.1.1 → 5.2.0

package/README.md

@@ -71,8 +71,9 @@ Run `claude` in any project. You do not configure anything per project. Claude C
 - **Answer prompts from the board.** When Claude asks for permission, asks a question or waits for plan approval, the session gets an amber highlight and the ask shows with Allow and Deny buttons or an answer form. The terminal prompt stays open, and the first answer wins. [Answer prompts from the board](https://nikiforovall.blog/claude-code-kanban/guides/waiting-prompts/)
 - **Embedded terminal.** Run a real Claude Code process for any session next to its board (<kbd>Ctrl</kbd>+<kbd>&#96;</kbd>). <kbd>Ctrl</kbd>+<kbd>Alt</kbd>+<kbd>R</kbd> resumes a past session and <kbd>Ctrl</kbd>+<kbd>Alt</kbd>+<kbd>S</kbd> swaps to the previous one. The terminal is off by default when the board runs alone. Start it with `--enable-terminal` and open the `#t=<token>` link the server prints. [Embedded terminal](https://nikiforovall.blog/claude-code-kanban/guides/embedded-terminal/)
 - **New session.** <kbd>Ctrl</kbd>+<kbd>Alt</kbd>+<kbd>N</kbd> opens a dialog to pick a folder, a name, a model, an optional git worktree and a first prompt. Needs the terminal.
-- **Dispatch.** Hand a written task to a new session with `claude-code-kanban dispatch start`, or ask Claude to do it with the `kanban-dispatch` skill. Add `--report` to get the outcome back. Needs the terminal. [Dispatch tasks to other sessions](https://nikiforovall.blog/claude-code-kanban/guides/dispatch/)
-- **Steer with card moves.** Run `/claude-code-kanban:kanban-follow` in a session, then drag its cards. Claude starts, parks or stops the task. [Claude Code plugin skills](https://nikiforovall.blog/claude-code-kanban/guides/plugin-skills/)
+- **Dispatch.** Hand a written task to a new session with `claude-code-kanban dispatch start`, or ask Claude to do it with the `dispatch` skill. Add `--report` to get the outcome back. Needs the terminal. [Dispatch tasks to other sessions](https://nikiforovall.blog/claude-code-kanban/guides/dispatch/)
+- **Steer with card moves.** Run `/claude-code-kanban:follow` in a session, then drag its cards. Claude starts, parks or stops the task. [Claude Code plugin skills](https://nikiforovall.blog/claude-code-kanban/guides/plugin-skills/)
+- **Review comments.** Select text in a previewed file or the plan, add comments and send them to the session in one step. [Review comments](https://nikiforovall.blog/claude-code-kanban/guides/review-comments/)
 
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="website/public/shots/themes/ember-11-waiting-prompt-dark.webp">

package/lib/auto-compact.js

@@ -0,0 +1,42 @@
+const path = require('node:path');
+const { readSettings } = require('./claude-settings');
+
+const MIN_WINDOW = 100000;
+const MAX_WINDOW = 1000000;
+
+function toInt(v) {
+  const n = typeof v === 'number' ? v : typeof v === 'string' && /^\d+$/.test(v.trim()) ? Number(v) : NaN;
+  return Number.isFinite(n) ? n : null;
+}
+
+// Claude Code merges settings as project local > project > user, and an env var beats the
+// `autoCompactWindow` key. Shell env and managed settings are not visible from here.
+// https://code.claude.com/docs/en/env-vars.md, https://code.claude.com/docs/en/settings-reference.md
+function getAutoCompact(claudeDir, projectPath) {
+  const files = [path.join(claudeDir, 'settings.json')];
+  if (projectPath) {
+    files.push(path.join(projectPath, '.claude', 'settings.json'), path.join(projectPath, '.claude', 'settings.local.json'));
+  }
+  let enabled = true;
+  let envWindow = null;
+  let keyWindow = null;
+  let pct = null;
+  for (const file of files) {
+    const s = readSettings(file);
+    if (!s || typeof s !== 'object') continue;
+    if (typeof s.autoCompactEnabled === 'boolean') enabled = s.autoCompactEnabled;
+    keyWindow = toInt(s.autoCompactWindow) ?? keyWindow;
+    envWindow = toInt(s.env?.CLAUDE_CODE_AUTO_COMPACT_WINDOW) ?? envWindow;
+    pct = toInt(s.env?.CLAUDE_AUTOCOMPACT_PCT_OVERRIDE) ?? pct;
+  }
+  if (!enabled) return null;
+  const window = envWindow ?? keyWindow;
+  const validPct = pct != null && pct >= 1 && pct <= 100 ? pct : null;
+  if (window == null && validPct == null) return null;
+  return {
+    window: window == null ? null : Math.min(MAX_WINDOW, Math.max(MIN_WINDOW, window)),
+    pct: validPct,
+  };
+}
+
+module.exports = { getAutoCompact };

package/lib/claude-settings.js

@@ -0,0 +1,21 @@
+const fs = require('node:fs');
+
+const fileCache = new Map();
+
+// Parsed Claude Code settings file, or null when it is missing or invalid. Re-read only
+// after its mtime changes.
+function readSettings(file) {
+  const mtime = fs.statSync(file, { throwIfNoEntry: false })?.mtimeMs ?? null;
+  const hit = fileCache.get(file);
+  if (hit && hit.mtime === mtime) return hit.data;
+  let data = null;
+  if (mtime !== null) {
+    try {
+      data = JSON.parse(fs.readFileSync(file, 'utf8'));
+    } catch {}
+  }
+  fileCache.set(file, { mtime, data });
+  return data;
+}
+
+module.exports = { readSettings };

package/lib/dispatch.js

@@ -8,7 +8,7 @@
 
 const crypto = require('node:crypto');
 const { tokenMatches } = require('./terminal');
-const { clampWait } = require('./session-events');
+const { clampWait, EVENT_PREFIX } = require('./session-events');
 
 const OUTCOMES = new Set(['succeeded', 'failed']);
 const MAX_SUMMARY = 4000;
@@ -45,9 +45,16 @@ function formatPreamble(record, cli = 'claude-code-kanban') {
 
 // The line reaches the parent through the postman at hook trust level; the summary is
 // last so no summary text can pose as a further field.
+const DISPATCH_OUTCOME = {
+  succeeded: 'reported success',
+  failed: 'reported failure',
+  exited: 'ended without a report',
+};
+
 function formatDispatchLine(r) {
-  const head = `cck:1 dispatch.${r.status} ${r.id} session=${r.session}`;
-  return r.summary ? `${head} summary=${r.summary}` : head;
+  const outcome = DISPATCH_OUTCOME[r.status] || r.status;
+  const head = `${EVENT_PREFIX} Dispatch ${r.id} (session ${r.session}) ${outcome}.`;
+  return r.summary ? `${head} Summary: ${r.summary}` : head;
 }
 
 function publicView(r) {
@@ -169,4 +176,4 @@ function createDispatchRegistry({ onSettle, now = Date.now } = {}) {
   return { create, attach, discard, settle, sessionExited, list, wait };
 }
 
-module.exports = { createDispatchRegistry, formatPreamble, formatDispatchLine, isPeerName };
+module.exports = { createDispatchRegistry, formatPreamble, formatDispatchLine, isPeerName, DISPATCH_OUTCOME };

package/lib/retention.js

@@ -0,0 +1,137 @@
+// Expiry of per-session state cck writes. The rule and the sweep: docs/retention.md.
+
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const { readSettings } = require('./claude-settings');
+const { DISPATCH_OUTCOME } = require('./dispatch');
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const DEFAULT_CLEANUP_DAYS = 30;
+// A started session writes its transcript a moment after the record; the sweep must not
+// read that gap as a deleted transcript.
+const GRACE_MS = 60 * 60 * 1000;
+const MAX_DISPATCHED = 500;
+const OUTCOMES = new Set(Object.keys(DISPATCH_OUTCOME));
+
+// Only the config dir's settings: retention is per config dir, not per project.
+function retentionMs(claudeDir) {
+  const days = readSettings(path.join(claudeDir, 'settings.json'))?.cleanupPeriodDays;
+  return (Number.isInteger(days) && days > 0 ? days : DEFAULT_CLEANUP_DAYS) * DAY_MS;
+}
+
+// `known` is the set of session ids with a transcript, or null when the scan found none,
+// so a failed scan never reads as every transcript gone.
+function isExpired(id, at, { known, maxAgeMs, now }) {
+  const age = now - at;
+  if (age < GRACE_MS) return false;
+  return (known && !known.has(id)) || age > maxAgeMs;
+}
+
+/**
+ * Sessions started through `dispatch start`, kept after the dispatch settles so the card
+ * keeps its marker.
+ * @param {object} o
+ * @param {() => object|null} o.load returns `{version: 1, sessions: {[id]: {parent, status, at}}}` or null
+ * @param {(data: object) => void} o.save
+ */
+function createDispatchedStore({ load, save, now = Date.now }) {
+  // Insertion order is oldest first, so the cap drops the first key.
+  const entries = new Map();
+  const saved = load()?.sessions;
+  if (saved && typeof saved === 'object') {
+    for (const [id, e] of Object.entries(saved)) {
+      if (!e || !Number.isFinite(e.at)) continue;
+      // The dispatch registry is in memory: a dispatch that was running when the server
+      // stopped can never settle, so it reads as ended.
+      const status = OUTCOMES.has(e.status) ? e.status : 'exited';
+      entries.set(id, { parent: typeof e.parent === 'string' ? e.parent : null, status, at: e.at });
+    }
+  }
+
+  const persist = () => save({ version: 1, sessions: Object.fromEntries(entries) });
+
+  function record(id, parent) {
+    entries.delete(id);
+    entries.set(id, { parent: parent || null, status: 'running', at: now() });
+    if (entries.size > MAX_DISPATCHED) entries.delete(entries.keys().next().value);
+    persist();
+  }
+
+  function settle(id, status) {
+    const e = entries.get(id);
+    if (!e || e.status !== 'running' || !OUTCOMES.has(status)) return;
+    e.status = status;
+    persist();
+  }
+
+  // Returns how many entries went; writes only when one did.
+  function prune({ known, maxAgeMs }) {
+    const t = now();
+    let removed = 0;
+    for (const [id, e] of entries) {
+      if (isExpired(id, e.at, { known, maxAgeMs, now: t })) {
+        entries.delete(id);
+        removed++;
+      }
+    }
+    if (removed) persist();
+    return removed;
+  }
+
+  return { record, settle, prune, get: (id) => entries.get(id) || null };
+}
+
+// Names only, no stat or parse: the sweep needs which transcripts exist, not what they hold.
+// Null when none is found, so a missing or unreadable projects dir never reads as every
+// transcript gone.
+async function listTranscriptIds(projectsDir) {
+  const ids = new Set();
+  let dirs;
+  try {
+    dirs = await fs.readdir(projectsDir, { withFileTypes: true });
+  } catch {
+    return null;
+  }
+  for (const d of dirs) {
+    if (!d.isDirectory()) continue;
+    try {
+      for (const f of await fs.readdir(path.join(projectsDir, d.name))) {
+        if (f.endsWith('.jsonl')) ids.add(f.slice(0, -'.jsonl'.length));
+      }
+    } catch {}
+  }
+  return ids.size ? ids : null;
+}
+
+// `<dir>/<session id>/<ts>.md`, one folder per session.
+async function pruneSessionDirs(dir, { known, maxAgeMs, now = Date.now() }) {
+  let removed = 0;
+  let sessionDirs;
+  try {
+    sessionDirs = await fs.readdir(dir, { withFileTypes: true });
+  } catch {
+    return 0;
+  }
+  for (const d of sessionDirs) {
+    if (!d.isDirectory()) continue;
+    const sessionDir = path.join(dir, d.name);
+    try {
+      const files = await fs.readdir(sessionDir);
+      let kept = 0;
+      for (const f of files) {
+        const file = path.join(sessionDir, f);
+        const { mtimeMs } = await fs.stat(file);
+        if (isExpired(d.name, mtimeMs, { known, maxAgeMs, now })) {
+          await fs.rm(file, { force: true });
+          removed++;
+        } else kept++;
+      }
+      // An old mtime means no file was added since the read, so a review written right
+      // now cannot lose its folder.
+      if (!kept && now - (await fs.stat(sessionDir)).mtimeMs >= GRACE_MS) await fs.rmdir(sessionDir);
+    } catch {}
+  }
+  return removed;
+}
+
+module.exports = { createDispatchedStore, listTranscriptIds, pruneSessionDirs, retentionMs, GRACE_MS, MAX_DISPATCHED, DAY_MS };

package/lib/session-events.js

@@ -29,13 +29,33 @@ function sanitizeEventLine(line) {
   return line.replace(/[\x00-\x1f\x7f]/g, ' ').trim().slice(0, 1500);
 }
 
-// Everything after `description=` is the description verbatim to end of line, so no amount
-// of board text can pose as a further field. That leaves the subject as the only value
-// that needs delimiting.
+// Lines are plain sentences so they still read right once the skill that explains them has
+// left the agent's context. EVENT_PREFIX marks the board as the sender.
+const EVENT_PREFIX = '[kanban board]';
+
+// Everything after `Description:` is the description verbatim to end of line, so no amount
+// of board text can pose as a further part of the line. That leaves the subject as the only
+// value that needs delimiting.
 function formatTaskMoved(taskId, prevStatus, task) {
   const subject = String(task.subject || '').replace(/(["\\])/g, '\\$1');
-  const head = `cck:1 task.moved ${taskId} ${prevStatus || 'none'}>${task.status} subject="${subject}"`;
-  return task.description ? `${head} description=${task.description}` : head;
+  const from = prevStatus ? ` from ${prevStatus}` : '';
+  const head = `${EVENT_PREFIX} The user moved task ${taskId} "${subject}"${from} to ${task.status}.`;
+  return task.description ? `${head} Description: ${task.description}` : head;
+}
+
+// The comments themselves live in the review file; the line only points at it, because a
+// batch of quotes would not survive the one-line cap. The path comes last and runs to end
+// of line, so a space in the config dir cannot split it.
+function formatReviewSubmitted(count, label, reviewFile) {
+  const comments = `${count} review comment${count === 1 ? '' : 's'}`;
+  return `${EVENT_PREFIX} The user left ${comments} on ${label}. Address them: ${reviewFile}`;
+}
+
+// A postman between two polls has no waiter for a moment, so this can miss a live one.
+// The caller then falls back to another route, which only costs a duplicate route, never
+// a lost review.
+function hasSessionListener(sessionId) {
+  return !!sessionEventBuckets.get(sessionId)?.waiters.size;
 }
 
 function enqueueSessionEvent(sessionId, line) {
@@ -59,8 +79,8 @@ function clampWait(sec) {
   return Math.min(Math.max(Number(sec) || 0, 0), MAX_WAIT_SEC);
 }
 
-// Each topic rides its own bucket, so the kanban-dispatch postman never prints task moves
-// the user did not grant with kanban-follow. No topic is the task-move bucket.
+// Each topic rides its own bucket, so the dispatch postman never prints task moves
+// the user did not grant with the follow skill. No topic is the task-move bucket.
 function topicKey(topic, sessionId) {
   return topic ? `${topic}:${sessionId}` : sessionId;
 }
@@ -109,9 +129,12 @@ function drain(sessionId, bucket) {
 }
 
 module.exports = {
+  EVENT_PREFIX,
   sessionEventBuckets,
   sanitizeEventLine,
   formatTaskMoved,
+  formatReviewSubmitted,
+  hasSessionListener,
   enqueueSessionEvent,
   handleSessionEvents,
   topicKey,

package/lib/terminal.js

@@ -356,16 +356,24 @@ function createTerminalService(o) {
   // Waits for claude to turn on bracketed paste (its input box is live), then for the
   // screen to settle. A folder-trust question also takes input, and Enter there would
   // answer it, so the prompt waits for as long as that question is on screen.
+  function bracketed(text) {
+    return `\x1b[200~${text.replace(/\r?\n/g, '\r')}\x1b[201~`;
+  }
+
+  function onTrustScreen(s) {
+    return /\btrust\b/i.test(screenText(s.term));
+  }
+
   function queuePrompt(s, prompt) {
     let armed = false;
     let timer = null;
-    const text = `\x1b[200~${prompt.replace(/\r?\n/g, '\r')}\x1b[201~`;
+    const text = bracketed(prompt);
     s.onOutput = (data) => {
       if (!armed && data.includes('\x1b[?2004h')) armed = true;
       if (!armed) return;
       clearTimeout(timer);
       timer = setTimeout(() => {
-        if (s.exited || /\btrust\b/i.test(screenText(s.term))) return;
+        if (s.exited || onTrustScreen(s)) return;
         s.onOutput = null;
         s.pty.write(text);
         setTimeout(() => { if (!s.exited) s.pty.write('\r'); }, 100);
@@ -654,6 +662,18 @@ function createTerminalService(o) {
     return r.error ? r : { id: r.session.id, cwd: r.session.cwd };
   }
 
+  // Pastes into claude's input box and stops there: Enter would also submit whatever the
+  // user had half-typed, and over a permission dialog it would answer it. A fork runs under
+  // a new session id, so its terminal id does not name the session the text is for. A
+  // pending queued prompt owns the input box until it is sent.
+  function paste(id, text) {
+    const s = sessions.get(id);
+    if (!s || s.ended || s.exited || s.onOutput || s.mode === 'shell' || s.mode === 'fork') return false;
+    if (onTrustScreen(s)) return false;
+    s.pty.write(bracketed(text));
+    return true;
+  }
+
   function shutdown() {
     shuttingDown = true;
     clearTimeout(saveTimer);
@@ -663,7 +683,7 @@ function createTerminalService(o) {
     sessions.clear();
   }
 
-  return { token, handleUpgrade, clientConfig, list, isRunning, end, authorized, startNew, restore, shutdown, unavailableReason };
+  return { token, handleUpgrade, clientConfig, list, isRunning, end, authorized, startNew, paste, restore, shutdown, unavailableReason };
 }
 
 module.exports = { createTerminalService, readTerminalConfig, ptyEnv, shellArgs, resolveShell, claudeArgsFor, parseNewSpec, findPickProcess, tokenMatches };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-kanban",
-  "version": "5.1.1",
+  "version": "5.2.0",
   "description": "A web-based Kanban board for viewing Claude Code tasks with agent teams support",
   "main": "server.js",
   "type": "commonjs",

package/plugin/plugins/claude-code-kanban/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-kanban",
-  "version": "2.16.1",
+  "version": "2.17.0",
   "description": "claude-code-kanban dashboard integration: agent activity tracking, context statusline, skills to drive the board from a session and to follow it",
   "experimental": {
     "monitors": "./monitors.json"

package/plugin/plugins/claude-code-kanban/hooks/hooks.json

@@ -6,7 +6,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]
@@ -18,7 +19,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]
@@ -30,7 +32,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]
@@ -42,7 +45,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]
@@ -54,7 +58,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]
@@ -66,7 +71,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/approval-gate.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/approval-gate.sh\"",
+            "shell": "bash",
             "timeout": 86400
           }
         ]
@@ -78,7 +84,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/agent-spy.sh\"",
+            "shell": "bash",
             "timeout": 5
           }
         ]

package/plugin/plugins/claude-code-kanban/monitors.json

@@ -1,14 +1,14 @@
 [
   {
     "name": "kanban-doorbell",
-    "description": "Notifies this session when its tasks are moved on the kanban board.",
+    "description": "Notifies this session when its tasks are moved on the kanban board or the user sends it review comments.",
     "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/postman.js\"",
-    "when": "on-skill-invoke:claude-code-kanban:kanban-follow"
+    "when": "on-skill-invoke:claude-code-kanban:follow"
   },
   {
     "name": "kanban-dispatch-inbox",
     "description": "Notifies this session when a session it dispatched through cck reports or exits.",
     "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/postman.js\" --topic dispatch --keep-backlog",
-    "when": "on-skill-invoke:claude-code-kanban:kanban-dispatch"
+    "when": "on-skill-invoke:claude-code-kanban:dispatch"
   }
 ]

package/plugin/plugins/claude-code-kanban/scripts/postman.js

@@ -11,7 +11,7 @@
 //
 // The lines we print carry board text (the card subject and description), which the
 // session is told to read as the user's own brief. That is only safe because we are armed
-// by an explicit `kanban-follow` invocation: the user asked to follow the board before anything the
+// by an explicit `follow` invocation: the user asked to follow the board before anything the
 // board says can reach the model.
 
 const fs = require('fs');
@@ -29,7 +29,7 @@ const RETRY_MS = 15000;
 // Windows sometimes fails a loopback connect with ETIMEDOUT while the board is up, so that
 // error gets a few short waits before the normal one.
 const CONNECT_RETRY_MS = [250, 500, 1000, 2000];
-// `--topic dispatch` is the kanban-dispatch inbox: reports from sessions this one started.
+// `--topic dispatch` is the dispatch inbox: reports from sessions this one started.
 const TOPIC = process.argv.includes('--topic') ? process.argv[process.argv.indexOf('--topic') + 1] : null;
 // A dispatch report is a result, not an instruction, so a late attach still wants it.
 const KEEP_BACKLOG = process.argv.includes('--keep-backlog');

package/plugin/plugins/claude-code-kanban/skills/{kanban-dispatch → dispatch}/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: kanban-dispatch
+name: dispatch
 description: Dispatch a task to another Claude Code session through the kanban board (cck), fire-and-forget or with a report back. Use when the user asks to dispatch, delegate, or start a session for a task, or to collect or check on a dispatched session's result.
 argument-hint: '<task> [--report] [--group <name>] [--model haiku|sonnet|opus|fable] [--worktree [name]]'
 ---
@@ -11,7 +11,7 @@ This file only points at the guide. The guide ships with the `claude-code-kanban
 Invoking this skill also arms this session's dispatch inbox: when a session you dispatched with `--report` reports or exits, a line arrives here:
 
 ```
-cck:1 dispatch.<succeeded|failed|exited> <dispatch-id> session=<uuid> summary=<text>
+[kanban board] Dispatch <dispatch-id> (session <uuid>) <reported success|reported failure|ended without a report>. Summary: <text>
 ```
 
 Load the guide before running any dispatch command:

package/plugin/plugins/claude-code-kanban/skills/{kanban-follow → follow}/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: kanban-follow
+name: follow
 description: Let kanban card moves drive this session.
 disable-model-invocation: true
 ---
@@ -9,31 +9,39 @@ disable-model-invocation: true
 The user typing this skill is the whole grant: it armed the doorbell — a monitor watching the board for moves of *this session's* tasks, live for the rest of the session. Confirm in one line and run no command. Moves made before it attached are discarded, so every line you get is current.
 
 ```
-cck:1 task.moved <taskId> <from>><to> subject="<subject>" description=<description>
+[kanban board] The user moved task <taskId> "<subject>" from <from> to <to>. Description: <description>
 ```
 
-`description=` is omitted when the card has none. Everything after it is the description verbatim to end of line, truncated if long — read the task with `TaskGet` for the full text or for `activeForm` and `blockedBy`. Only moves are announced.
+`Description:` is omitted when the card has none. Everything after it is the description verbatim to end of line, truncated if long — read the task with `TaskGet` for the full text or for `activeForm` and `blockedBy`. Moves and review comments (below) are the only lines announced.
 
 **A move is an instruction, not an FYI** — the user dragging a card is the user telling you something, and the subject and description are their brief for the work:
 
 | Transition | What the user means |
 |---|---|
-| `pending>in_progress` / `todo>in_progress` | Start this task now. |
-| `in_progress>pending` / `in_progress>todo` | Stop working on it and park it. |
-| `*>completed` | The user considers it done — do not keep working on it. |
-| `*>cancelled` | Abandon it. Undo nothing unless asked. |
+| To `in_progress` | Start this task now. |
+| From `in_progress` to `pending` or `todo` | Stop working on it and park it. |
+| To `completed` | The user considers it done — do not keep working on it. |
+| To `cancelled` | Abandon it. Undo nothing unless asked. |
 
 Act on the newest line per task; a card dragged twice means only its final position. When a move contradicts your current work, the board wins.
 
 Delivery is best-effort and the task file is the authority, so a missed line only delays you to your next turn.
 
+## Review comments
+
+```
+[kanban board] The user left <n> review comments on <source>. Address them: <review file>
+```
+
+The review file holds the comments and how to read them.
+
 ## Finish the task on the board
 
-A move hands you work; the task file is where you hand it back. When the work a `>in_progress` move asked for is done, set that task to `completed` with `TaskUpdate` before you reply — the card moves itself, and the board is where the user is watching. A card left in In Progress reads as work still running.
+A move hands you work; the task file is where you hand it back. When the work a move to `in_progress` asked for is done, set that task to `completed` with `TaskUpdate` before you reply — the card moves itself, and the board is where the user is watching. A card left in In Progress reads as work still running.
 
 Your own `TaskUpdate` writes the task file rather than going through the board, so it rings no doorbell: there is no echo to guard against.
 
 ## Troubleshooting
 
-- **No lines arrive** → the doorbell arms once per session, on the namespaced dispatch: `/claude-code-kanban:kanban-follow`. A session that never got it never hears the board.
+- **No lines arrive** → the doorbell arms once per session, on the namespaced dispatch: `/claude-code-kanban:follow`. A session that never got it never hears the board.
 - **"Cannot reach cck server…"** → the error names the port it tried. Ask the user to start the server with `claude-code-kanban`.

package/plugin/plugins/claude-code-kanban/skills/kanban/SKILL.md

@@ -29,7 +29,7 @@ claude-code-kanban help <command> <subcommand> # flags and examples
 | `view` / `peek` | `session view <id>`, `session peek <id>` |
 | tasks, projects | `task list`, `project list` |
 
-To be driven *by* the board instead — card moves arriving as instructions — the user types `/claude-code-kanban:kanban-follow`.
+To be driven *by* the board instead — card moves arriving as instructions — the user types `/claude-code-kanban:follow`.
 
 ## Troubleshooting