codymaster 4.8.0 → 7.0.0

package/skills/cm-qa-visual-cli/SKILL.md

@@ -1,18 +1,26 @@
-# cm-qa-visual-cli — screenshot via browse daemon
+---
+name: cm-qa-visual-cli
+description: "[Deprecated] browser daemon overlap. Use `cm-browse` instead."
+deprecated: true
+merged_into: cm-browse
+---
 
-## Prerequisites
+# cm-qa-visual-cli — Deprecated
 
-`cm browse start` running with the same `CM_BROWSE_TOKEN`.
+> ⚠️ This skill is deprecated as of CodyMaster v6.0.0 and will be removed in v6.1.0.
+>
+> **Use `cm-browse` instead.** browser daemon overlap.
+>
+> See [docs/migration-v2.md](../../docs/migration-v2.md) for the full mapping.
 
-## CLI
+The original content is preserved at [SKILL.archive.md](SKILL.archive.md) for reference.
+
+## Migration
 
 ```bash
-cm qa-visual --url http://localhost:5173 --port 17395
+# Old:           cm <use this skill>
+# New (v6.0+):   cm browse <equivalent action>
 ```
 
-Writes `cm-qa-visual.png` in the current working directory.
-
-## Next
-
-- Diff against golden images for visual regression.
-- Map `git diff` → affected routes (project-specific heuristics).
+If you depend on a capability that didn't carry over, please file an issue:
+https://github.com/tody-agent/codymaster/issues

package/skills/cm-quality-gate/SKILL.md

@@ -1,10 +1,20 @@
 ---
 name: cm-quality-gate
 description: "Use before any deployment or completion claim. Enforces test gates, evidence-based verification, and frontend safety checks. No deploy without passing. No claims without evidence."
+token_budget: 1800
+compressed: true
+deprecated: false
 ---
 
 # Quality Gate — Test + Verify + Ship Safe
 
+## TL;DR
+- **Use before** any deployment or completion claim
+- **Gates**: tests pass, no secrets, frontend safety, evidence logged
+- **Reads**: handoff/exec.json — **Writes**: handoff/quality.json
+- **Modes**: OFF | WARNING (default) | SOFT | FULL
+- **Vibecoding score**: 0..100 (Phase 2)
+
 > **Three checkpoints, one skill:** Pre-deploy testing, evidence verification, frontend safety.
 
 ## The Iron Laws
@@ -197,6 +207,34 @@ After ANY gate fails, **FIRST run Memory Integrity Check:**
 | Security scan passes | `snyk test && aikido-api-client scan-release ...` | ✅ For production / public releases |
 | i18n parity | Included in test:gate | ✅ If multilingual |
 
+## Vibecoding Index (Phase 2)
+
+After all gates pass, compute a 0–100 score for the change:
+
+```bash
+cm quality score --mode WARNING
+```
+
+Components (each weighted): **intent 30%, ownership 25%, context 20%, tests 15%, review 10%**.
+Inputs are derived automatically from `.cm/handoff/{plan,exec,review,quality}.json` when present, or can be overridden with `--intent <0..1>`, `--ownership <0..1>`, etc.
+
+Modes:
+- `OFF` — silent (LITE projects)
+- `WARNING` — print + advise (default; STANDARD projects)
+- `SOFT` — warn loudly under 60 (PROFESSIONAL projects)
+- `FULL` — exit 1 under 70 (ENTERPRISE projects, blocks deploy)
+
+The default mode follows the project tier from `cm tier classify`.
+
+## Karpathy Discipline — Loop Until Verified
+
+The gate is where "goal-driven execution" actually closes the loop:
+- **No claim without evidence.** "Tests pass" → paste the run. "Build green" → paste the hash. "Feature works" → paste the screenshot or HTTP response.
+- **Loop independently while verifiable.** If the success criterion is concrete (test green, status 200, screenshot diff < threshold), keep iterating without asking. If criterion is vague, stop and ask — don't burn cycles on guesses.
+- **Verify don't trust.** A subagent's summary says what it intended, not what it did. Re-run the gate yourself.
+
+**Gate principle:** weak criteria fail here, not in production. Reject "make it work" handoffs back to planning.
+
 ## The Bottom Line
 
 **Test before deploy. Scan before release. Evidence before claims. Safety before shipping. Non-negotiable.**

package/skills/cm-retro-cli/SKILL.md

@@ -1,3 +1,7 @@
+---
+name: cm-retro-cli
+description: "Use at end of sprint to append operational learnings as structured JSONL to the project retro log."
+---
 # cm-retro-cli — operational learnings JSONL
 
 ## Append

package/skills/cm-safe-deploy/SKILL.md

@@ -1,10 +1,19 @@
 ---
 name: cm-safe-deploy
 description: Use when setting up deployment infrastructure for any project - establishes multi-gate deploy pipeline with test gates, build verification, frontend safety checks, and rollback strategy before code reaches production
+token_budget: 1500
+compressed: true
+deprecated: false
 ---
 
 # Safe Deploy Pipeline v2
 
+## TL;DR
+- **Use before/during** deploying to staging or production
+- **Multi-gate**: secrets, build, stage, smoke, prod, rollback plan
+- **Identity**: verifies correct GitHub/Cloudflare/Supabase account
+- **Next**: cm-quality-gate (post-deploy)
+
 ## Overview
 
 A deploy without gates is a deploy with hope. Hope is not a strategy.

package/skills/cm-second-opinion-cli/SKILL.archive.md

@@ -0,0 +1,23 @@
+---
+name: cm-second-opinion-cli
+description: "Use when you need a cross-model review or second opinion on a diff or code change."
+---
+# cm-second-opinion-cli — cross-model review stub
+
+## CLI
+
+```bash
+cm second-opinion --file /tmp/my.diff
+```
+
+- With `OPENAI_API_KEY`, calls **OpenAI chat completions** (`CM_SECOND_OPINION_MODEL` optional, default `gpt-4o-mini`).
+- Without key, prints a **stub** reminder (no network).
+
+## Safety
+
+- **Never** paste secrets or production credentials into the diff file.
+- Prefer unified diffs of **application code** only.
+
+## Roadmap
+
+Add Anthropic / Google / Ollama providers via shared provider interface (see **cm-engineering-meta**).

package/skills/cm-second-opinion-cli/SKILL.md

@@ -1,19 +1,26 @@
-# cm-second-opinion-cli — cross-model review stub
+---
+name: cm-second-opinion-cli
+description: "[Deprecated] engineering bridge merged. Use `cm-mcp-engineering` instead."
+deprecated: true
+merged_into: cm-mcp-engineering
+---
 
-## CLI
+# cm-second-opinion-cli — Deprecated
 
-```bash
-cm second-opinion --file /tmp/my.diff
-```
-
-- With `OPENAI_API_KEY`, calls **OpenAI chat completions** (`CM_SECOND_OPINION_MODEL` optional, default `gpt-4o-mini`).
-- Without key, prints a **stub** reminder (no network).
+> ⚠️ This skill is deprecated as of CodyMaster v6.0.0 and will be removed in v6.1.0.
+>
+> **Use `cm-mcp-engineering` instead.** engineering bridge merged.
+>
+> See [docs/migration-v2.md](../../docs/migration-v2.md) for the full mapping.
 
-## Safety
+The original content is preserved at [SKILL.archive.md](SKILL.archive.md) for reference.
 
-- **Never** paste secrets or production credentials into the diff file.
-- Prefer unified diffs of **application code** only.
+## Migration
 
-## Roadmap
+```bash
+# Old:           cm <use this skill>
+# New (v6.0+):   cm mcp-engineering <equivalent action>
+```
 
-Add Anthropic / Google / Ollama providers via shared provider interface (see **cm-engineering-meta**).
+If you depend on a capability that didn't carry over, please file an issue:
+https://github.com/tody-agent/codymaster/issues