claude-code-workflow 7.2.29 → 7.3.0

package/.codex/skills/security-audit/orchestrator.md

@@ -102,6 +102,25 @@ Determine mode from user request before spawning any agent.
 
 ## Phase Execution
 
+### Progress Tracking Initialization
+
+Before spawning any agent, initialize progress tracking. For comprehensive mode, all 4 phases; for quick-scan, Phase 1 only:
+
+```
+// Comprehensive mode
+functions.update_plan([
+  { id: "phase-1", title: "Phase 1: Supply Chain Scan", status: "in_progress" },
+  { id: "phase-2", title: "Phase 2: OWASP Review", status: "pending" },
+  { id: "phase-3", title: "Phase 3: Threat Modeling (STRIDE)", status: "pending" },
+  { id: "phase-4", title: "Phase 4: Report & Tracking", status: "pending" }
+])
+
+// Quick-scan mode
+functions.update_plan([
+  { id: "phase-1", title: "Phase 1: Supply Chain Scan", status: "in_progress" }
+])
+```
+
 ### Phase 1: Supply Chain Scan
 
 **Objective**: Detect low-hanging security risks in dependencies, secrets, CI/CD pipelines, and LLM integrations.
@@ -154,6 +173,10 @@ const phase1Result = wait_agent({ targets: ["security-auditor"], timeout_ms: 120
 |----------|-------------|
 | `.workflow/.security/supply-chain-report.json` | Dependency, secrets, CI/CD, and LLM findings |
 
+**Progress (comprehensive)**: `functions.update_plan([{id: "phase-1", status: "completed"}, {id: "phase-2", status: "in_progress"}])`
+
+**Progress (quick-scan)**: `functions.update_plan([{id: "phase-1", status: "completed"}])`
+
 ---
 
 ### Quick-Scan Gate (quick-scan mode only)
@@ -210,6 +233,8 @@ const phase2Result = wait_agent({ targets: ["security-auditor"], timeout_ms: 360
 |----------|-------------|
 | `.workflow/.security/owasp-findings.json` | OWASP findings with owasp_id, severity, file:line, evidence, remediation |
 
+**Progress**: `functions.update_plan([{id: "phase-2", status: "completed"}, {id: "phase-3", status: "in_progress"}])`
+
 ---
 
 ### Phase 3: Threat Modeling (comprehensive mode only)
@@ -250,6 +275,8 @@ const phase3Result = wait_agent({ targets: ["security-auditor"], timeout_ms: 360
 |----------|-------------|
 | `.workflow/.security/threat-model.json` | STRIDE threat model with components, trust boundaries, attack surface |
 
+**Progress**: `functions.update_plan([{id: "phase-3", status: "completed"}, {id: "phase-4", status: "in_progress"}])`
+
 ---
 
 ### Phase 4: Report & Tracking (comprehensive mode only)
@@ -297,6 +324,8 @@ const phase4Result = wait_agent({ targets: ["security-auditor"], timeout_ms: 300
 |----------|-------------|
 | `.workflow/.security/audit-report-<date>.json` | Full scored report with trend, top risks, remediation priority |
 
+**Progress**: `functions.update_plan([{id: "phase-4", status: "completed"}])`
+
 ---
 
 ### Comprehensive Gate (comprehensive mode only)

package/.codex/skills/session-sync/SKILL.md

@@ -136,7 +136,7 @@ Target files:
 `)
 
 if (!AUTO_YES) {
-  const answer = request_user_input({
+  const answer = functions.request_user_input({
     questions: [{
       header: "确认同步",
       id: "confirm_sync",

package/.codex/skills/ship/orchestrator.md

@@ -83,6 +83,20 @@ Utility subagents callable by ship-operator (not separate pipeline stages):
 
 ## Phase Execution
 
+### Progress Tracking Initialization
+
+Before spawning any agent, initialize progress tracking for all phases:
+
+```
+functions.update_plan([
+  { id: "phase-1", title: "Phase 1: Pre-Flight Checks", status: "in_progress" },
+  { id: "phase-2", title: "Phase 2: Code Review", status: "pending" },
+  { id: "phase-3", title: "Phase 3: Version Bump", status: "pending" },
+  { id: "phase-4", title: "Phase 4: Changelog & Commit", status: "pending" },
+  { id: "phase-5", title: "Phase 5: PR Creation", status: "pending" }
+])
+```
+
 ### Phase 1: Pre-Flight Checks
 
 **Objective**: Validate that the repository is in a shippable state — confirm clean working tree, appropriate branch, passing tests, and successful build.
@@ -135,6 +149,8 @@ const phase1Result = wait_agent({ targets: ["ship-operator"], timeout_ms: 300000
 | preflight-report JSON | Pass/fail per check, blockers list |
 | Gate status | pass / fail / blocked |
 
+**Progress**: `functions.update_plan([{id: "phase-1", status: "completed"}, {id: "phase-2", status: "in_progress"}])`
+
 ---
 
 ### Phase 2: Code Review
@@ -187,6 +203,8 @@ const phase2Result = wait_agent({ targets: ["ship-operator"], timeout_ms: 600000
 | Review summary JSON | Risk level, risk factors, AI review recommendation, issues |
 | Gate status | pass / fail / warn / blocked |
 
+**Progress**: `functions.update_plan([{id: "phase-2", status: "completed"}, {id: "phase-3", status: "in_progress"}])`
+
 ---
 
 ### Phase 3: Version Bump
@@ -239,6 +257,8 @@ const phase3Result = wait_agent({ targets: ["ship-operator"], timeout_ms: 300000
 | Version change record JSON | version_file, previous_version, new_version, bump_type, bump_source |
 | Gate status | pass / fail / needs_context / blocked |
 
+**Progress**: `functions.update_plan([{id: "phase-3", status: "completed"}, {id: "phase-4", status: "in_progress"}])`
+
 ---
 
 ### Phase 4: Changelog & Commit
@@ -294,6 +314,8 @@ const phase4Result = wait_agent({ targets: ["ship-operator"], timeout_ms: 300000
 | Commit record JSON | changelog_entry, commit_sha, commit_message, pushed_to |
 | Gate status | pass / fail / blocked |
 
+**Progress**: `functions.update_plan([{id: "phase-4", status: "completed"}, {id: "phase-5", status: "in_progress"}])`
+
 ---
 
 ### Phase 5: PR Creation
@@ -353,6 +375,8 @@ const phase5Result = wait_agent({ targets: ["ship-operator"], timeout_ms: 300000
 | PR record JSON | pr_url, pr_title, target_branch, source_branch, linked_issues |
 | Final completion status | DONE / DONE_WITH_CONCERNS / BLOCKED |
 
+**Progress**: `functions.update_plan([{id: "phase-5", status: "completed"}])`
+
 ---
 
 ## Lifecycle Management

package/.codex/skills/spec-add/SKILL.md

@@ -196,7 +196,7 @@ if (useInteractiveWizard) {
     if (AUTO_YES) {
       dimension = 'specs'  // Default to project specs in auto mode
     } else {
-      const dimensionAnswer = request_user_input({
+      const dimensionAnswer = functions.request_user_input({
         questions: [{
           header: "Dimension",
           id: "dimension",
@@ -216,7 +216,7 @@ if (useInteractiveWizard) {
     if (AUTO_YES) {
       scope = 'project'  // Default to project scope in auto mode
     } else {
-      const scopeAnswer = request_user_input({
+      const scopeAnswer = functions.request_user_input({
         questions: [{
           header: "Scope",
           id: "scope",
@@ -236,7 +236,7 @@ if (useInteractiveWizard) {
     if (AUTO_YES) {
       category = 'general'  // Default to general in auto mode
     } else {
-      const categoryAnswer = request_user_input({
+      const categoryAnswer = functions.request_user_input({
         questions: [{
           header: "Category",
           id: "category",
@@ -261,7 +261,7 @@ if (useInteractiveWizard) {
     if (AUTO_YES) {
       type = 'convention'  // Default to convention in auto mode
     } else {
-      const typeAnswer = request_user_input({
+      const typeAnswer = functions.request_user_input({
         questions: [{
           header: "Rule Type",
           id: "rule_type",
@@ -286,7 +286,7 @@ if (useInteractiveWizard) {
       console.log("Error: Rule text is required in auto mode. Provide rule text as argument.")
       return
     }
-    const contentAnswer = request_user_input({
+    const contentAnswer = functions.request_user_input({
       questions: [{
         header: "Content",
         id: "content",

package/.codex/skills/spec-generator/SKILL.md

@@ -117,6 +117,8 @@ Input Parsing:
    |- If continue: read spec-config.json, resume from first incomplete phase
    |- If new: proceed to Phase 1
 
+Phase 0 → 1: functions.update_plan([{id:"phase-0",status:"completed"},{id:"phase-1",status:"in_progress"}])
+
 Phase 1: Discovery & Seed Analysis
    |- Ref: phases/01-discovery.md
    |- Generate session ID: SPEC-{slug}-{YYYY-MM-DD}
@@ -130,6 +132,8 @@ Phase 1: Discovery & Seed Analysis
    |- User confirmation (interactive, -y skips)
    |- Output: spec-config.json, discovery-context.json (optional)
 
+Phase 1 → 1.5: functions.update_plan([{id:"phase-1",status:"completed"},{id:"phase-1.5",status:"in_progress"}])
+
 Phase 1.5: Requirement Expansion & Clarification
    |- Ref: phases/01-5-requirement-clarification.md
    |- CLI gap analysis: completeness scoring, missing dimensions detection
@@ -140,6 +144,8 @@ Phase 1.5: Requirement Expansion & Clarification
    |- Auto mode (-y): CLI auto-expansion without interaction
    |- Output: refined-requirements.json
 
+Phase 1.5 → 2: functions.update_plan([{id:"phase-1.5",status:"completed"},{id:"phase-2",status:"in_progress"}])
+
 Phase 2: Product Brief  [AGENT: doc-generator]
    |- spawn_agent({ task_name: "doc-gen-p2", fork_context: false, message: <context envelope> })
    |- Agent reads: phases/02-product-brief.md
@@ -149,6 +155,8 @@ Phase 2: Product Brief  [AGENT: doc-generator]
    |- close_agent({ target: "doc-gen-p2" })
    |- Orchestrator validates: files exist, spec-config.json updated
 
+Phase 2 → 3: functions.update_plan([{id:"phase-2",status:"completed"},{id:"phase-3",status:"in_progress"}])
+
 Phase 3: Requirements / PRD  [AGENT: doc-generator]
    |- spawn_agent({ task_name: "doc-gen-p3", fork_context: false, message: <context envelope> })
    |- Agent reads: phases/03-requirements.md
@@ -158,6 +166,8 @@ Phase 3: Requirements / PRD  [AGENT: doc-generator]
    |- close_agent({ target: "doc-gen-p3" })
    |- Orchestrator validates: directory exists, file count matches
 
+Phase 3 → 4: functions.update_plan([{id:"phase-3",status:"completed"},{id:"phase-4",status:"in_progress"}])
+
 Phase 4: Architecture  [AGENT: doc-generator]
    |- spawn_agent({ task_name: "doc-gen-p4", fork_context: false, message: <context envelope> })
    |- Agent reads: phases/04-architecture.md
@@ -167,6 +177,8 @@ Phase 4: Architecture  [AGENT: doc-generator]
    |- close_agent({ target: "doc-gen-p4" })
    |- Orchestrator validates: directory exists, ADR files present
 
+Phase 4 → 5: functions.update_plan([{id:"phase-4",status:"completed"},{id:"phase-5",status:"in_progress"}])
+
 Phase 5: Epics & Stories  [AGENT: doc-generator]
    |- spawn_agent({ task_name: "doc-gen-p5", fork_context: false, message: <context envelope> })
    |- Agent reads: phases/05-epics-stories.md
@@ -176,6 +188,8 @@ Phase 5: Epics & Stories  [AGENT: doc-generator]
    |- close_agent({ target: "doc-gen-p5" })
    |- Orchestrator validates: directory exists, MVP epics present
 
+Phase 5 → 6: functions.update_plan([{id:"phase-5",status:"completed"},{id:"phase-6",status:"in_progress"}])
+
 Phase 6: Readiness Check  [INLINE + ENHANCED]
    |- Ref: phases/06-readiness-check.md
    |- Gemini CLI: cross-document validation (completeness, consistency, traceability)
@@ -196,6 +210,8 @@ Phase 6.5: Auto-Fix (conditional)  [AGENT: doc-generator]
    |- Re-run Phase 6 validation
    |- Max 2 iterations, then force handoff
 
+Phase 6 → 7: functions.update_plan([{id:"phase-6",status:"completed"},{id:"phase-7",status:"in_progress"}])
+
 Phase 7: Issue Export  [INLINE]
    |- Ref: phases/07-issue-export.md
    |- Read EPIC-*.md files, assign waves (MVP->wave-1, others->wave-2)
@@ -205,6 +221,8 @@ Phase 7: Issue Export  [INLINE]
    |- Update spec-config.json with issue_ids
    |- Handoff: team-planex, wave-1 only, view issues, done
 
+Phase 7 complete: functions.update_plan([{id:"phase-7",status:"completed"}])
+
 Complete: Full specification package with issues ready for execution
 
 Phase 6/7 -> Handoff Bridge (conditional, based on user selection):
@@ -221,7 +239,7 @@ Phase 6/7 -> Handoff Bridge (conditional, based on user selection):
 
 ## Directory Setup
 
-```
+```javascript
 // Session ID generation
 const slug = topic.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fff]+/g, '-').slice(0, 40);
 const date = new Date().toISOString().slice(0, 10);
@@ -229,6 +247,19 @@ const sessionId = `SPEC-${slug}-${date}`;
 const workDir = `.workflow/.spec/${sessionId}`;
 
 Bash(`mkdir -p "${workDir}"`);
+
+// Initialize progress tracking (MANDATORY)
+functions.update_plan([
+  { id: "phase-0", title: "Phase 0: Specification Study", status: "in_progress" },
+  { id: "phase-1", title: "Phase 1: Discovery", status: "pending" },
+  { id: "phase-1.5", title: "Phase 1.5: Req Expansion", status: "pending" },
+  { id: "phase-2", title: "Phase 2: Product Brief", status: "pending" },
+  { id: "phase-3", title: "Phase 3: Requirements (PRD)", status: "pending" },
+  { id: "phase-4", title: "Phase 4: Architecture", status: "pending" },
+  { id: "phase-5", title: "Phase 5: Epics & Stories", status: "pending" },
+  { id: "phase-6", title: "Phase 6: Readiness Check", status: "pending" },
+  { id: "phase-7", title: "Phase 7: Issue Export", status: "pending" }
+])
 ```
 
 ## Output Structure
@@ -294,7 +325,7 @@ Bash(`mkdir -p "${workDir}"`);
 
 ## Core Rules
 
-1. **Start Immediately**: First action is Phase 0 (spec study), then Phase 1
+1. **Start Immediately**: First action is `functions.update_plan` initialization, then Phase 0 (spec study), then Phase 1
 2. **Progressive Phase Loading**: Read phase docs ONLY when that phase is about to execute
 3. **Auto-Continue**: All phases run autonomously; proceed to next phase after current completes
 4. **Parse Every Output**: Extract required data from each phase for next phase context

package/.codex/skills/spec-generator/phases/01-5-requirement-clarification.md

@@ -139,7 +139,7 @@ while (!userSatisfied && requirementState.discussion_rounds < 5) {
     // Format questions and suggestions from gapAnalysis for display
     // Present as a structured summary to the user
 
-    request_user_input({
+    functions.request_user_input({
       questions: [
         {
           header: "Req Expand",
@@ -192,7 +192,7 @@ CONSTRAINTS: 避免重复已回答的问题，聚焦未覆盖的领域
     // If status === "ready_for_confirmation", break to confirmation step
     // If status === "need_more_discussion", present follow-up questions
 
-    request_user_input({
+    functions.request_user_input({
       questions: [
         {
           header: "Follow-up",
@@ -297,7 +297,7 @@ if (!autoMode) {
   // Build confirmation summary from requirementState
   const summary = buildConfirmationSummary(requirementState);
 
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "Confirm",

package/.codex/skills/spec-generator/phases/01-discovery.md

@@ -178,7 +178,7 @@ Schema:
 ```javascript
 if (!autoMode) {
   // Confirm problem statement and select depth
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "Problem",

package/.codex/skills/spec-generator/phases/02-product-brief.md

@@ -175,7 +175,7 @@ if (!autoMode) {
   // - Confirm vision statement
   // - Resolve any conflicts between perspectives
   // - Adjust scope if needed
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "Review",

package/.codex/skills/spec-generator/phases/03-requirements.md

@@ -121,7 +121,7 @@ CONSTRAINTS: Be genuinely critical. Focus on requirements that would block imple
 if (!autoMode) {
   // Present requirements grouped by initial priority
   // Allow user to adjust MoSCoW labels
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "Must-Have",

package/.codex/skills/spec-generator/phases/04-architecture.md

@@ -152,7 +152,7 @@ CONSTRAINTS: Be genuinely critical, not just validating. Focus on actionable imp
 if (!autoMode) {
   // Present ADRs with review feedback to user
   // For each ADR where review raised concerns:
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "ADR Review",

package/.codex/skills/spec-generator/phases/05-epics-stories.md

@@ -131,7 +131,7 @@ CONSTRAINTS: Focus on issues that would block execution planning. Be specific ab
 ```javascript
 if (!autoMode) {
   // Present Epic overview table and dependency diagram
-  request_user_input({
+  functions.request_user_input({
     questions: [
       {
         header: "Epics",

package/.codex/skills/spec-generator/phases/06-readiness-check.md

@@ -310,7 +310,7 @@ Write(`${workDir}/spec-config.json`, JSON.stringify(specConfig, null, 2));
 ### Step 6: Handoff Options
 
 ```javascript
-request_user_input({
+functions.request_user_input({
   questions: [
     {
       header: "Next Step",

package/.codex/skills/spec-generator/phases/07-issue-export.md

@@ -253,7 +253,7 @@ Write(`${workDir}/spec-config.json`, JSON.stringify(specConfig, null, 2));
 ### Step 7: Handoff Options
 
 ```javascript
-const answer = request_user_input({
+const answer = functions.request_user_input({
   questions: [
     {
       header: "Next Step",