codymaster 7.0.1 → 7.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (341) hide show
  1. package/CHANGELOG.md +64 -0
  2. package/README.md +117 -2
  3. package/dist/agent/codex.js +73 -21
  4. package/dist/agent-dispatch.js +63 -48
  5. package/dist/cli/commands/brain.js +18 -0
  6. package/dist/cli/commands/design-studio.js +1 -1
  7. package/dist/cm-suggest.js +3 -3
  8. package/dist/dashboard-project-summary.js +9 -0
  9. package/dist/dashboard.js +11 -5
  10. package/dist/execution-analyzer.js +9 -1
  11. package/dist/judge.js +16 -15
  12. package/dist/mcp-context-server.js +45 -23
  13. package/dist/mcp-skills-tools.js +2 -2
  14. package/dist/skill-chain.js +26 -3
  15. package/dist/skill-token-report.js +105 -0
  16. package/dist/sprint-pipeline.js +3 -3
  17. package/dist/ui/onboarding.js +3 -4
  18. package/dist/utils/design-taste.js +1 -1
  19. package/dist/utils/output-compress.js +8 -0
  20. package/package.json +3 -2
  21. package/public/dashboard/app.js +40 -13
  22. package/public/dashboard/index.html +190 -5
  23. package/public/dashboard/style.css +1 -1
  24. package/scripts/build-skills.mjs +36 -2
  25. package/scripts/mcp-bridge.js +41 -24
  26. package/scripts/pack-plugin.mjs +206 -0
  27. package/skills/cm-ads-tracker/SKILL.md +401 -0
  28. package/skills/cm-ads-tracker/evals/evals.json +55 -0
  29. package/skills/cm-ads-tracker/references/gtm-architecture.md +321 -0
  30. package/skills/cm-ads-tracker/references/industry-events.md +294 -0
  31. package/skills/cm-ads-tracker/references/platforms-api.md +238 -0
  32. package/skills/cm-ads-tracker/templates/capi-payload.md +79 -0
  33. package/skills/cm-ads-tracker/templates/datalayer-push.js +104 -0
  34. package/skills/cm-ads-tracker/templates/gtm-variables.js +56 -0
  35. package/skills/cm-auto-publisher/SKILL.md +81 -0
  36. package/skills/cm-booking-calendar/SKILL.md +521 -0
  37. package/skills/cm-booking-calendar/references/industry-patterns.md +527 -0
  38. package/skills/cm-booking-calendar/templates/booking-form.css +626 -0
  39. package/skills/cm-booking-calendar/templates/booking-form.html +477 -0
  40. package/skills/cm-booking-calendar/templates/calendar-engine.js +419 -0
  41. package/skills/cm-booking-calendar/templates/calendar-export.js +395 -0
  42. package/skills/cm-booking-calendar/templates/reminder-config.js +629 -0
  43. package/skills/cm-brainstorm-idea/SKILL.md +5 -5
  44. package/skills/cm-code-review/SKILL.md +2 -2
  45. package/skills/cm-codeintell/SKILL.md +47 -580
  46. package/skills/cm-codeintell/references/integration-workflows.md +23 -0
  47. package/skills/cm-codeintell/references/layer-0-skeleton.md +54 -0
  48. package/skills/cm-codeintell/references/layer-1-codegraph.md +58 -0
  49. package/skills/cm-codeintell/references/layer-2-architecture.md +31 -0
  50. package/skills/cm-codeintell/references/layer-3-context-builder.md +32 -0
  51. package/skills/cm-content-factory/.content-factory-state.json +132 -0
  52. package/skills/cm-content-factory/.git 2/logs/refs/heads/main +1 -0
  53. package/skills/cm-content-factory/.git 2/logs/refs/remotes/origin/main +1 -0
  54. package/skills/cm-content-factory/.git 2/objects/02/fb0956734b5f8ba3f918b7defd04a89cfe0076 +0 -0
  55. package/skills/cm-content-factory/.git 2/objects/08/1e129d75dc6feac6c02037272e6bd1a04e3324 +0 -0
  56. package/skills/cm-content-factory/.git 2/objects/0c/5393416f3c5e01c9a655a802bff0dd52f76f0a +0 -0
  57. package/skills/cm-content-factory/.git 2/objects/10/0b9be46978a946a77188f68be725098a122001 +0 -0
  58. package/skills/cm-content-factory/.git 2/objects/10/cf041167fc9843610eb3d90259ef3396315fdc +0 -0
  59. package/skills/cm-content-factory/.git 2/objects/12/5e19538dd6e1338ffe74f6c4c165b00435bf48 +0 -0
  60. package/skills/cm-content-factory/.git 2/objects/16/a9b9d0088d5c1347628b45a2620b479d8ad57c +0 -0
  61. package/skills/cm-content-factory/.git 2/objects/17/8c2a9ef93c33ae4eec9d58e82321f9229843a1 +0 -0
  62. package/skills/cm-content-factory/.git 2/objects/25/397ae41d09104d763bdcac2695209d85cdea89 +0 -0
  63. package/skills/cm-content-factory/.git 2/objects/2f/a836b7947f2d458e1f639788bf4bb0983a3305 +0 -0
  64. package/skills/cm-content-factory/.git 2/objects/3a/baaaf0a1c0909c0828335791557125fba911e0 +0 -0
  65. package/skills/cm-content-factory/.git 2/objects/42/2924221b81f5ce3c4e4daac9a64a24f9b01f9a +0 -0
  66. package/skills/cm-content-factory/.git 2/objects/42/ec0ce707447dc11446a34c9995fb8533801731 +0 -0
  67. package/skills/cm-content-factory/.git 2/objects/46/e43ce92866d56ce74b1d750db307cfe6154a15 +0 -0
  68. package/skills/cm-content-factory/.git 2/objects/48/5e41b633c63f55b8277bcc59f44f67681f671a +0 -0
  69. package/skills/cm-content-factory/.git 2/objects/49/49c596a3a89fa240642acd95dd3258e261eb09 +0 -0
  70. package/skills/cm-content-factory/.git 2/objects/50/9d42d8412ef8eaf7f7e138476bac2e4d10ce60 +0 -0
  71. package/skills/cm-content-factory/.git 2/objects/55/0c8c389d981b463ef849aeb792d8be3ccb6ec8 +0 -0
  72. package/skills/cm-content-factory/.git 2/objects/5d/82d3b18410cdda3ace3677436f0cb599dbe2d2 +0 -0
  73. package/skills/cm-content-factory/.git 2/objects/60/0617c58e871a38b33bf29e282d132bb3c381ad +0 -0
  74. package/skills/cm-content-factory/.git 2/objects/6a/8369a99c687b7245c92ffaf0e0f0dab9014504 +0 -0
  75. package/skills/cm-content-factory/.git 2/objects/79/bea435d40ab531c1aaf6be0432c6a5b7aaed21 +0 -0
  76. package/skills/cm-content-factory/.git 2/objects/7e/5ebd79251c2f14e4aceb86c74b6b6daae6b500 +0 -0
  77. package/skills/cm-content-factory/.git 2/objects/81/98a822a60178d6d5023ddb3e222cddf048742e +0 -0
  78. package/skills/cm-content-factory/.git 2/objects/86/0a0e1943dfe53411d2e499a1f16f46a96ef758 +0 -0
  79. package/skills/cm-content-factory/.git 2/objects/86/971fb55fdc081fdbae52376f0f13e57a4e9b04 +0 -0
  80. package/skills/cm-content-factory/.git 2/objects/88/b89dd609a0a03f8d4fe8bfde20d5b8fc1d326d +0 -0
  81. package/skills/cm-content-factory/.git 2/objects/90/8737edb6b7809e32cc01590b4e08ba42a9d40d +0 -0
  82. package/skills/cm-content-factory/.git 2/objects/93/d5a8a9a7d4fb7f11491cb596a6880528725118 +0 -0
  83. package/skills/cm-content-factory/.git 2/objects/98/46a2ab81d0c3b3eb00ef88fc56989aa7e9f316 +0 -0
  84. package/skills/cm-content-factory/.git 2/objects/9b/d8dd1e49cf274eaf9c555f3ab39dce7af5715e +0 -0
  85. package/skills/cm-content-factory/.git 2/objects/a1/13329fb0cec96ae78b222d33a24c3b5bc7fa1f +0 -0
  86. package/skills/cm-content-factory/.git 2/objects/a9/e6effe626e8a3aea3a8fc3364b492191c6e7d0 +0 -0
  87. package/skills/cm-content-factory/.git 2/objects/ad/6de7e48d9782cca9353d1ff0aa1aab7fe1df85 +0 -0
  88. package/skills/cm-content-factory/.git 2/objects/af/54ae316f771ff692e299ffcd8bf2f06b413b59 +0 -0
  89. package/skills/cm-content-factory/.git 2/objects/b0/4cb8b0b00dad633e731c1472161419e738d674 +0 -0
  90. package/skills/cm-content-factory/.git 2/objects/b3/094abb0b9ed46419b269e4a4e36a459690e3b0 +0 -0
  91. package/skills/cm-content-factory/.git 2/objects/b9/435c5d4baac2cfc5c83009ddd27b46b60db5f1 +0 -0
  92. package/skills/cm-content-factory/.git 2/objects/ba/5da17dbaec5ec2dcfdfd126aead518d1171d5c +0 -0
  93. package/skills/cm-content-factory/.git 2/objects/c0/bf58703aa258ba5dd63083bebaec8f223d844c +0 -0
  94. package/skills/cm-content-factory/.git 2/objects/c4/701a34edf1fc1bad58ccc57bd03f9426acb59a +0 -0
  95. package/skills/cm-content-factory/.git 2/objects/c7/5ccce9a4e5cc74d9b3174550cf6d993ca43638 +0 -0
  96. package/skills/cm-content-factory/.git 2/objects/c7/710d59b5a35b0f1f0a0399386643a0bd94c929 +0 -0
  97. package/skills/cm-content-factory/.git 2/objects/d1/fe58237112e953e5fec52da22cf38e08be3df9 +5 -0
  98. package/skills/cm-content-factory/.git 2/objects/d2/2bbe9fd2f74c95bc5583e803f5e435f1e2cd86 +0 -0
  99. package/skills/cm-content-factory/.git 2/objects/d7/e72852ea2bff74581dbf247d400120086229f4 +0 -0
  100. package/skills/cm-content-factory/.git 2/objects/d8/d4c3b5553e4fd72807e1d4b49ef07d9ef3ac35 +0 -0
  101. package/skills/cm-content-factory/.git 2/objects/dc/75050c2876f6a02ae2a53a3c886f395b622977 +0 -0
  102. package/skills/cm-content-factory/.git 2/objects/ee/e8546f95acec500187c08a28a8b9ee02db0dec +0 -0
  103. package/skills/cm-content-factory/.git 2/objects/ef/263c059208b416c2146434f10cb2b9fabcba16 +0 -0
  104. package/skills/cm-content-factory/.git 2/objects/f3/ae597e84d9a59b88acd21c99bde2eaf686d785 +0 -0
  105. package/skills/cm-content-factory/.git 2/objects/f3/f6f5673c821d3d8e76fa267a9e882e7a5387ea +0 -0
  106. package/skills/cm-content-factory/.git 2/objects/f9/6e6d0ad02624dd11d5848594d056caef7a5e8b +0 -0
  107. package/skills/cm-content-factory/.git 2/objects/ff/278988fc1edf0db3abcf18de795f4cc0b4f3e1 +0 -0
  108. package/skills/cm-content-factory/.git 2/refs/heads/main +1 -0
  109. package/skills/cm-content-factory/.git 2/refs/remotes/origin/main +1 -0
  110. package/skills/cm-content-factory/.pytest_cache 2/v/cache/nodeids +76 -0
  111. package/skills/cm-content-factory/.pytest_cache 2/v/cache/stepwise +1 -0
  112. package/skills/cm-content-factory/AGENTS.md +61 -0
  113. package/skills/cm-content-factory/CLAUDE.md +63 -0
  114. package/skills/cm-content-factory/CURSOR.md +43 -0
  115. package/skills/cm-content-factory/Content Factory.zip +0 -0
  116. package/skills/cm-content-factory/SKILL.md +416 -0
  117. package/skills/cm-content-factory/cf +313 -0
  118. package/skills/cm-content-factory/config.schema.json +397 -0
  119. package/skills/cm-content-factory/dashboard/app.js +556 -0
  120. package/skills/cm-content-factory/dashboard/index.html +397 -0
  121. package/skills/cm-content-factory/dashboard/style.css +1211 -0
  122. package/skills/cm-content-factory/examples/01-real-estate.config.json +146 -0
  123. package/skills/cm-content-factory/examples/02-personal-finance.config.json +146 -0
  124. package/skills/cm-content-factory/examples/03-health-wellness.config.json +147 -0
  125. package/skills/cm-content-factory/examples/04-saas-software.config.json +147 -0
  126. package/skills/cm-content-factory/examples/05-legal-services.config.json +147 -0
  127. package/skills/cm-content-factory/examples/06-insurance.config.json +146 -0
  128. package/skills/cm-content-factory/examples/07-ecommerce-dropship.config.json +146 -0
  129. package/skills/cm-content-factory/examples/08-online-education.config.json +147 -0
  130. package/skills/cm-content-factory/examples/09-crypto-defi.config.json +147 -0
  131. package/skills/cm-content-factory/examples/10-beauty-skincare.config.json +147 -0
  132. package/skills/cm-content-factory/examples/11-home-services.config.json +146 -0
  133. package/skills/cm-content-factory/examples/12-dental-clinic.config.json +147 -0
  134. package/skills/cm-content-factory/examples/13-pet-care.config.json +147 -0
  135. package/skills/cm-content-factory/examples/14-travel-hospitality.config.json +147 -0
  136. package/skills/cm-content-factory/examples/15-ai-automation.config.json +147 -0
  137. package/skills/cm-content-factory/examples/16-wedding-events.config.json +147 -0
  138. package/skills/cm-content-factory/examples/17-fitness-coaching.config.json +148 -0
  139. package/skills/cm-content-factory/examples/18-cybersecurity.config.json +147 -0
  140. package/skills/cm-content-factory/examples/19-food-restaurant.config.json +148 -0
  141. package/skills/cm-content-factory/examples/20-solar-energy.config.json +147 -0
  142. package/skills/cm-content-factory/examples/fitness-blog.config.json +116 -0
  143. package/skills/cm-content-factory/examples/tech-blog.config.json +107 -0
  144. package/skills/cm-content-factory/extensions/EXTENSION_GUIDE.md +72 -0
  145. package/skills/cm-content-factory/extensions/hooks.py +126 -0
  146. package/skills/cm-content-factory/extensions/openclaw_adapter.py +132 -0
  147. package/skills/cm-content-factory/landing/docs/content/changelog.md +36 -0
  148. package/skills/cm-content-factory/landing/docs/content/deployment.md +46 -0
  149. package/skills/cm-content-factory/landing/docs/content/execution-flow.md +67 -0
  150. package/skills/cm-content-factory/landing/docs/content/openspace.md +27 -0
  151. package/skills/cm-content-factory/landing/docs/content/openviking.md +33 -0
  152. package/skills/cm-content-factory/landing/docs/content/use-cases.md +26 -0
  153. package/skills/cm-content-factory/landing/docs/content/v5-intro.md +28 -0
  154. package/skills/cm-content-factory/landing/docs/index.html +240 -0
  155. package/skills/cm-content-factory/landing/index.html +680 -0
  156. package/skills/cm-content-factory/landing/script.js +143 -0
  157. package/skills/cm-content-factory/landing/style.css +1216 -0
  158. package/skills/cm-content-factory/landing/translations.js +508 -0
  159. package/skills/cm-content-factory/logs/events.jsonl +11 -0
  160. package/skills/cm-content-factory/profiles/_template.profile.json +231 -0
  161. package/skills/cm-content-factory/profiles/finance.profile.json +278 -0
  162. package/skills/cm-content-factory/profiles/legal.profile.json +263 -0
  163. package/skills/cm-content-factory/profiles/medical-research.profile.json +321 -0
  164. package/skills/cm-content-factory/profiles/technology.profile.json +275 -0
  165. package/skills/cm-content-factory/scripts/agent_dispatcher.py +266 -0
  166. package/skills/cm-content-factory/scripts/audit.py +106 -0
  167. package/skills/cm-content-factory/scripts/dashboard_server.py +225 -0
  168. package/skills/cm-content-factory/scripts/deploy.py +146 -0
  169. package/skills/cm-content-factory/scripts/extract.py +132 -0
  170. package/skills/cm-content-factory/scripts/landing_generator.py +459 -0
  171. package/skills/cm-content-factory/scripts/memory.py +521 -0
  172. package/skills/cm-content-factory/scripts/monetize.py +239 -0
  173. package/skills/cm-content-factory/scripts/pipeline.py +357 -0
  174. package/skills/cm-content-factory/scripts/plan.py +163 -0
  175. package/skills/cm-content-factory/scripts/publish.py +145 -0
  176. package/skills/cm-content-factory/scripts/research.py +337 -0
  177. package/skills/cm-content-factory/scripts/scaffold.py +464 -0
  178. package/skills/cm-content-factory/scripts/scoreboard.py +336 -0
  179. package/skills/cm-content-factory/scripts/seo.py +90 -0
  180. package/skills/cm-content-factory/scripts/state_manager.py +320 -0
  181. package/skills/cm-content-factory/scripts/token_manager.py +268 -0
  182. package/skills/cm-content-factory/scripts/validate.py +221 -0
  183. package/skills/cm-content-factory/scripts/wizard.py +329 -0
  184. package/skills/cm-content-factory/scripts/write.py +93 -0
  185. package/skills/cm-content-factory/sites/docs-site/src/assets/houston.webp +0 -0
  186. package/skills/cm-content-factory/sites/docs-site/src/content/docs/architecture.md +90 -0
  187. package/skills/cm-content-factory/sites/docs-site/src/content/docs/data-flow.md +54 -0
  188. package/skills/cm-content-factory/sites/docs-site/src/content/docs/deployment.md +38 -0
  189. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/index.md +65 -0
  190. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/lc-content-lifecycle.md +48 -0
  191. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/seq-write-mode.md +39 -0
  192. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/uj-first-batch.md +42 -0
  193. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/wf-content-pipeline.md +51 -0
  194. package/skills/cm-content-factory/sites/docs-site/src/content/docs/flows/wf-learning-cycle.md +52 -0
  195. package/skills/cm-content-factory/sites/docs-site/src/content/docs/getting-started/configuration.md +86 -0
  196. package/skills/cm-content-factory/sites/docs-site/src/content/docs/getting-started/installation.md +80 -0
  197. package/skills/cm-content-factory/sites/docs-site/src/content/docs/getting-started/intro.md +58 -0
  198. package/skills/cm-content-factory/sites/docs-site/src/content/docs/index.md +102 -0
  199. package/skills/cm-content-factory/sites/docs-site/src/content/docs/jtbd/index.md +45 -0
  200. package/skills/cm-content-factory/sites/docs-site/src/content/docs/jtbd/optimize-seo.md +29 -0
  201. package/skills/cm-content-factory/sites/docs-site/src/content/docs/jtbd/scale-content-production.md +55 -0
  202. package/skills/cm-content-factory/sites/docs-site/src/content/docs/jtbd/standardize-quality.md +29 -0
  203. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/buyer-cmo-huong.md +41 -0
  204. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/buyer-content-lead-khoa.md +40 -0
  205. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/index.md +56 -0
  206. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/user-content-manager-lan.md +46 -0
  207. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/user-seo-minh.md +45 -0
  208. package/skills/cm-content-factory/sites/docs-site/src/content/docs/personas/user-writer-tu.md +45 -0
  209. package/skills/cm-content-factory/sites/docs-site/src/content/docs/sop/content-pipeline.md +108 -0
  210. package/skills/cm-content-factory/sites/docs-site/src/content/docs/sop/index.md +22 -0
  211. package/skills/cm-content-factory/sites/docs-site/src/content/docs/sop/memory-system.md +52 -0
  212. package/skills/cm-content-factory/sites/docs-site/src/content/docs/sop/seo-optimization.md +58 -0
  213. package/skills/cm-content-factory/sites/docs-site/src/content/docs/sop/troubleshooting-guide.md +92 -0
  214. package/skills/cm-content-factory/sites/docs-site/src/styles/custom.css +575 -0
  215. package/skills/cm-content-factory/tests/conftest.py +66 -0
  216. package/skills/cm-content-factory/tests/test_agent_dispatcher.py +125 -0
  217. package/skills/cm-content-factory/tests/test_memory.py +128 -0
  218. package/skills/cm-content-factory/tests/test_pipeline.py +107 -0
  219. package/skills/cm-content-factory/tests/test_research.py +56 -0
  220. package/skills/cm-content-factory/tests/test_state_manager.py +131 -0
  221. package/skills/cm-content-factory/tests/test_token_manager.py +110 -0
  222. package/skills/cm-content-factory/tests/test_wizard.py +121 -0
  223. package/skills/cm-continuity/SKILL.md +49 -480
  224. package/skills/cm-continuity/references/cm-uri-scheme.md +23 -0
  225. package/skills/cm-continuity/references/continuity-template.md +48 -0
  226. package/skills/cm-continuity/references/mcp-context-server.md +27 -0
  227. package/skills/cm-continuity/references/memory-architecture.md +26 -0
  228. package/skills/cm-continuity/references/memory-audit.md +18 -0
  229. package/skills/cm-continuity/references/session-protocol.md +31 -0
  230. package/skills/cm-continuity/references/storage-formats.md +20 -0
  231. package/skills/cm-cro-methodology/SKILL.md +290 -0
  232. package/skills/cm-cro-methodology/references/COPYWRITING.md +178 -0
  233. package/skills/cm-cro-methodology/references/OBJECTIONS.md +135 -0
  234. package/skills/cm-cro-methodology/references/PERSUASION.md +158 -0
  235. package/skills/cm-cro-methodology/references/RESEARCH.md +220 -0
  236. package/skills/cm-cro-methodology/references/funnel-analysis.md +365 -0
  237. package/skills/cm-cro-methodology/references/testing-methodology.md +330 -0
  238. package/skills/cm-design-system/SKILL.md +5 -6
  239. package/skills/cm-execution/SKILL.md +61 -379
  240. package/skills/cm-execution/references/mode-a-batch.md +28 -0
  241. package/skills/cm-execution/references/mode-b-subagent.md +46 -0
  242. package/skills/cm-execution/references/mode-c-parallel.md +39 -0
  243. package/skills/cm-execution/references/mode-d-rarv.md +62 -0
  244. package/skills/cm-execution/references/mode-e-triz-parallel.md +53 -0
  245. package/skills/cm-execution/references/mode-f-party.md +61 -0
  246. package/skills/cm-execution/references/persona-dispatch.md +22 -0
  247. package/skills/cm-execution/references/security-rules.md +47 -0
  248. package/skills/cm-google-form/SKILL.md +266 -0
  249. package/skills/cm-google-form/templates/apps-script.js +55 -0
  250. package/skills/cm-google-form/templates/form-markup.html +110 -0
  251. package/skills/cm-google-form/templates/form-submit.js +201 -0
  252. package/skills/cm-google-form/templates/toast.css +152 -0
  253. package/skills/cm-growth-hacking/SKILL.md +282 -0
  254. package/skills/cm-growth-hacking/bottom-sheet-engine.md +261 -0
  255. package/skills/cm-growth-hacking/calendar-integration.md +264 -0
  256. package/skills/cm-growth-hacking/references/engagement-patterns.md +346 -0
  257. package/skills/cm-growth-hacking/templates/bottom-sheet.css +528 -0
  258. package/skills/cm-growth-hacking/templates/bottom-sheet.js +269 -0
  259. package/skills/cm-growth-hacking/templates/calendar-cta.js +213 -0
  260. package/skills/cm-growth-hacking/templates/tracking-events.js +211 -0
  261. package/skills/cm-growth-hacking/templates/trigger-manager.js +254 -0
  262. package/skills/cm-growth-hacking/tracking-events.md +246 -0
  263. package/skills/cm-growth-hacking/trigger-system.md +342 -0
  264. package/skills/cm-how-it-work/SKILL.md +8 -9
  265. package/skills/cm-identity-guard/SKILL.md +4 -4
  266. package/skills/cm-jtbd/SKILL.md +98 -0
  267. package/skills/cm-notebooklm/SKILL.md +156 -0
  268. package/skills/cm-notebooklm/references/command_reference.md +94 -0
  269. package/skills/cm-notebooklm/references/workflows.md +60 -0
  270. package/skills/cm-notebooklm/resources/knowledge_sources.md +106 -0
  271. package/skills/cm-notebooklm/scripts/brain-sync.sh +453 -0
  272. package/skills/cm-notebooklm/scripts/graduate_wisdom.py +101 -0
  273. package/skills/cm-planning/SKILL.md +3 -3
  274. package/skills/cm-project-bootstrap/SKILL.md +2 -2
  275. package/skills/cm-quality-gate/SKILL.md +1 -1
  276. package/skills/cm-readit/SKILL.md +289 -0
  277. package/skills/cm-readit/audio-player.md +206 -0
  278. package/skills/cm-readit/examples/blog-reader.js +352 -0
  279. package/skills/cm-readit/examples/voice-cro.js +390 -0
  280. package/skills/cm-readit/tts-engine.md +262 -0
  281. package/skills/cm-readit/ui-patterns.md +362 -0
  282. package/skills/cm-readit/voice-cro.md +223 -0
  283. package/skills/cm-safe-deploy/SKILL.md +80 -510
  284. package/skills/cm-safe-deploy/references/gate-0-5-security-scan.md +31 -0
  285. package/skills/cm-safe-deploy/references/gate-0-secret-hygiene.md +68 -0
  286. package/skills/cm-safe-deploy/references/gate-1-syntax.md +23 -0
  287. package/skills/cm-safe-deploy/references/gate-2-test-suite.md +28 -0
  288. package/skills/cm-safe-deploy/references/gate-3-i18n.md +19 -0
  289. package/skills/cm-safe-deploy/references/gate-4-5-build-dist.md +16 -0
  290. package/skills/cm-safe-deploy/references/gate-6-deploy-smoke.md +18 -0
  291. package/skills/cm-safe-deploy/references/rollback.md +17 -0
  292. package/skills/cm-safe-deploy/references/setup-new-project.md +20 -0
  293. package/skills/cm-skill-index/SKILL.md +15 -15
  294. package/skills/cm-start/SKILL.md +1 -1
  295. package/skills/cm-tdd/SKILL.md +51 -356
  296. package/skills/cm-tdd/references/bugfix-example.md +15 -0
  297. package/skills/cm-tdd/references/rationalizations.md +20 -0
  298. package/skills/cm-tdd/references/red-green-refactor.md +33 -0
  299. package/skills/cm-tdd/references/stuck-debugging.md +18 -0
  300. package/skills/cm-tdd/references/test-quality.md +19 -0
  301. package/skills/cm-ux-master/SKILL.md +368 -115
  302. package/skills/profiles/core.txt +1 -4
  303. package/skills/profiles/design.txt +1 -2
  304. package/skills/profiles/full.txt +10 -16
  305. package/skills/profiles/growth.txt +9 -9
  306. package/skills/profiles/top35.json +13 -13
  307. package/skills/cm-conductor-worktrees/SKILL.archive.md +0 -28
  308. package/skills/cm-conductor-worktrees/SKILL.md +0 -26
  309. package/skills/cm-dashboard/SKILL.archive.md +0 -15
  310. package/skills/cm-dashboard/SKILL.md +0 -26
  311. package/skills/cm-dashboard/ui/app.js +0 -1278
  312. package/skills/cm-dashboard/ui/index.html +0 -206
  313. package/skills/cm-dashboard/ui/style.css +0 -440
  314. package/skills/cm-design-studio/SKILL.archive.md +0 -34
  315. package/skills/cm-design-studio/SKILL.md +0 -26
  316. package/skills/cm-engineering-meta/SKILL.archive.md +0 -73
  317. package/skills/cm-engineering-meta/SKILL.md +0 -26
  318. package/skills/cm-git-worktrees/SKILL.archive.md +0 -157
  319. package/skills/cm-git-worktrees/SKILL.md +0 -26
  320. package/skills/cm-post-deploy-canary/SKILL.archive.md +0 -22
  321. package/skills/cm-post-deploy-canary/SKILL.md +0 -26
  322. package/skills/cm-qa-visual-cli/SKILL.archive.md +0 -22
  323. package/skills/cm-qa-visual-cli/SKILL.md +0 -26
  324. package/skills/cm-second-opinion-cli/SKILL.archive.md +0 -23
  325. package/skills/cm-second-opinion-cli/SKILL.md +0 -26
  326. package/skills/cm-secret-shield/SKILL.archive.md +0 -580
  327. package/skills/cm-secret-shield/SKILL.md +0 -26
  328. package/skills/cm-security-gate/SKILL.archive.md +0 -239
  329. package/skills/cm-security-gate/SKILL.md +0 -26
  330. package/skills/cm-skill-health/SKILL.archive.md +0 -83
  331. package/skills/cm-skill-health/SKILL.md +0 -26
  332. package/skills/cm-skill-mastery/SKILL.archive.md +0 -156
  333. package/skills/cm-skill-mastery/SKILL.md +0 -26
  334. package/skills/cm-skill-search/SKILL.archive.md +0 -49
  335. package/skills/cm-skill-search/SKILL.md +0 -26
  336. package/skills/cm-skill-share/SKILL.archive.md +0 -58
  337. package/skills/cm-skill-share/SKILL.md +0 -26
  338. package/skills/cm-test-gate/SKILL.archive.md +0 -245
  339. package/skills/cm-test-gate/SKILL.md +0 -26
  340. package/skills/cm-ui-preview/SKILL.archive.md +0 -153
  341. package/skills/cm-ui-preview/SKILL.md +0 -26
@@ -17,13 +17,13 @@ Establish a robust, stable, and consistent UI Design System by either extracting
17
17
  - Extract semantic colors (Primary, Secondary, Success, Warning, Danger), neutral ramps (50-900), typography scales, spacing tokens, and border radii.
18
18
  3. **Pre-built UI Kits (Default Mode)**:
19
19
  - If the user wants a beautiful design quickly, DO NOT try to generate tokens manually.
20
- - Instead, copy one of the pre-built design systems from `skills/cm-design-system/resources/` into the project's `.stitch/DESIGN.md` or pass directly to `cm-ui-preview`:
20
+ - Instead, copy one of the pre-built design systems from `skills/cm-design-system/resources/` into the project's `.stitch/DESIGN.md` or continue directly in `cm-design-system`:
21
21
  - `shadcn-default.md` (Use this as the absolute DEFAULT if no style is specified)
22
22
  - `halo-modern.md` (Premium dark mode, glowing accents)
23
23
  - `lunaris-advanced.md` (Tech-focused, monospaced fonts)
24
24
  - `nitro-enterprise.md` (High-contrast, data-dense enterprise)
25
25
  4. **Pencil.dev & Google Stitch MCP**:
26
- - **Stitch path:** Use `DESIGN.md` with `<!-- STITCH_TOKENS_START -->` JSON block to feed design tokens into Google Stitch's AI generator via `cm-ui-preview`.
26
+ - **Stitch path:** Use `DESIGN.md` with `<!-- STITCH_TOKENS_START -->` JSON block to feed design tokens into Google Stitch's AI generator via `cm-design-system`.
27
27
  - **Pencil path:** Use the Pencil MCP tools to create and manage `.pen` design files directly:
28
28
 
29
29
  **Pencil.dev Workflow:**
@@ -55,7 +55,7 @@ Establish a robust, stable, and consistent UI Design System by either extracting
55
55
  })
56
56
  ```
57
57
 
58
- - For UI component rendering against these tokens, you MUST hand off to `cm-ui-preview`.
58
+ - For UI component rendering against these tokens, continue through `cm-design-system`.
59
59
  - **IMPORTANT:** Never use `view_file` or `grep_search` on `.pen` files. Always use `mcp_pencil_batch_get`.
60
60
  5. **Export Custom `DESIGN.md` (Extraction Mode)**:
61
61
  - If extracting from a site visually, create the `DESIGN.md` document.
@@ -68,7 +68,7 @@ Establish a robust, stable, and consistent UI Design System by either extracting
68
68
  **Action:**
69
69
  1. Extract semantic colors: Primary (Blurple), surface colors, typography (Inter), rounded corners.
70
70
  2. Build the `DESIGN.md` including the Stitch STITCH_TOKENS JSON block with these tokens.
71
- 3. Tell the user: "Extraction complete. I've saved the tokens in `DESIGN.md`. Would you like me to hand this off to `cm-ui-preview` to generate components?"
71
+ 3. Tell the user: "Extraction complete. I've saved the tokens in `DESIGN.md`. Would you like me to continue the `cm-design-system` flow to generate components?"
72
72
 
73
73
  ## Example 2: Scaffold a new robust design system
74
74
  **Input:** "Create a modern dark-mode design system using Halo UI kit."
@@ -90,9 +90,8 @@ Establish a robust, stable, and consistent UI Design System by either extracting
90
90
  7. Tell the user: "Design system created in `design-system.pen`. Would you like me to build screens using these components?"
91
91
 
92
92
  # Constraints
93
- - 🚫 **DO NOT** generate or build React/Vue UI components directly in this skill. Handoff UI generation to `cm-ui-preview`.
93
+ - 🚫 **DO NOT** generate or build React/Vue UI components outside the `cm-design-system` flow.
94
94
  - 🚫 **DO NOT** skip the `<!-- STITCH_TOKENS_START -->` wrapper in `DESIGN.md`. It is critical for Stitch MCP parsing.
95
95
  - 🚫 **DO NOT** guess accessibility constraints — ensure text-on-background contrast aligns with WCAG AA (handled via `cm-ux-master` heuristics).
96
96
  - 🚫 **DO NOT** use `view_file` or `grep_search` on `.pen` files. Always use Pencil MCP tools (`batch_get`, `batch_design`, etc.).
97
97
  - ✅ **ALWAYS** define a complete neutral scale (50-900) even if the source site only uses a few grays.
98
-
@@ -1,7 +1,17 @@
1
1
  ---
2
2
  name: cm-execution
3
- description: "Use when executing implementation plans choose mode: batch execution with checkpoints, subagent-per-task, or parallel dispatch for independent problems."
3
+ description: Use when executing approved implementation plans. Routes to 1 of 6 execution modes (batch/subagent/parallel/RARV/TRIZ/party) based on task shape. Loads detail refs on-demand.
4
4
  token_budget: 1800
5
+ token_core: 450
6
+ token_refs:
7
+ mode-a-batch: 280
8
+ mode-b-subagent: 380
9
+ mode-c-parallel: 240
10
+ mode-d-rarv: 520
11
+ mode-e-triz-parallel: 460
12
+ mode-f-party: 420
13
+ persona-dispatch: 180
14
+ security-rules: 540
5
15
  compressed: true
6
16
  deprecated: false
7
17
  ---
@@ -9,403 +19,75 @@ deprecated: false
9
19
  # Execution — Execute Plans at Scale
10
20
 
11
21
  ## TL;DR
12
- - **Use when** running an approved plan from cm-planning
13
- - **Modes**: A=batch, B=subagent-per-task, C=parallel, D=RARV, E=TRIZ-parallel
14
- - **Reads**: handoff/plan.json — **Writes**: handoff/exec.json
15
- - **Always**: tests pass before reporting done
16
- - **Next**: cm-code-review
22
+ - **Use when** running an approved plan from `cm-planning`
23
+ - **Reads** `handoff/plan.json` or `openspec/changes/[name]/tasks.md`
24
+ - **Writes** `handoff/exec.json`
25
+ - **Always** verify before reporting done
26
+ - **Next** `cm-code-review`
17
27
 
18
- > **Role: Lead Developer** You execute implementation plans systematically with quality gates at every checkpoint.
19
-
20
- > **Three modes, one skill.** Choose based on task structure.
21
-
22
- ## Persona Dispatch (Phase 2)
23
-
24
- In Mode B (subagent-per-task) and Mode E (TRIZ-parallel), dispatch the right persona from `agents/` based on the task type:
25
-
26
- | Task signal | Persona | File |
27
- |-------------|---------|------|
28
- | "design", "architecture", "trade-off" | architect | `agents/architect.md` |
29
- | "implement", "fix", "refactor" | engineer | `agents/engineer.md` |
30
- | "review", "audit", "verify" | reviewer | `agents/reviewer.md` |
31
- | "secret", "auth", "input validation", "deploy" | security | `agents/security.md` |
32
- | "scope", "intent", "user story" | pm | `agents/pm.md` |
33
-
34
- When dispatching a subagent, pass `subagent_type: <persona>` (Claude Code agents) or load the persona file as the system prompt for the inner call.
28
+ > **Role: Lead Developer.** You execute plans systematically with quality gates at every checkpoint.
35
29
 
36
30
  ## Step 0: Load Working Memory (MANDATORY)
31
+ Per `_shared/helpers.md#Load-Working-Memory`. After EACH completed task: `_shared/helpers.md#Update-Continuity`.
37
32
 
38
- Per `_shared/helpers.md#Load-Working-Memory`
39
-
40
- After EACH completed task: Per `_shared/helpers.md#Update-Continuity`
41
-
42
- ### Pre-flight: Skill Coverage Audit
43
-
44
- Before choosing execution mode, scan plan tasks for technology keywords:
45
-
46
- ```
47
- 1. Extract technologies/frameworks/tools from ALL task descriptions
48
- 2. Cross-reference with cm-skill-index Layer 1 triggers
49
- 3. Check installed external skills: npx skills list
50
- 4. If gap found → trigger Discovery Loop (cm-skill-mastery Part C)
51
- → npx skills find "{keyword}" → review → ask user → install
52
- 5. Log any installations to .cm-skills-log.json
53
- 6. Code Intelligence Context (cm-codeintell):
54
- → IF codegraph available: codegraph_context(task) for each task
55
- → IF modifying shared code: codegraph_impact(symbol, depth=2)
56
- → IF impact > 10 files: WARN "High impact change"
57
- → Inject context into agent prompts → agents skip grep/glob
58
- 7. Only proceed to Mode Selection after all gaps resolved
59
- ```
60
-
61
- ---
33
+ ## Step 1: Pre-flight Skill Coverage Audit
34
+ Scan plan tasks for tech keywords, cross-reference `cm-skill-index`, check installed skills, and use `npx skills find` when the plan reaches beyond current coverage. If `codegraph` or `cm-codeintell` context is available, inject it into agent prompts so execution skips redundant repo searching.
62
35
 
63
- ## Mode Selection
36
+ ## Step 2: Choose Mode
64
37
 
65
38
  ```
66
39
  Have a plan with independent tasks?
67
- ├── Need SPEED + QUALITY on 3+ tasks?
68
- └── YES → Mode E: TRIZ-Parallel (recommended)
69
- ├── Stay in this session?
70
- ├── YES → Mode B: Subagent-Driven
71
- │ └── NO Mode A: Batch Execution
72
- └── Multiple independent failures/problems?
73
- └── YES Mode C: Parallel Dispatch
74
- ```
75
-
76
- | Mode | When | Strategy |
77
- |------|------|----------|
78
- | **A: Batch** | Plan with checkpoints | Execute 3 tasks → report → feedback → next batch |
79
- | **B: Subagent** | Plan with independent tasks, same session | Fresh subagent per task + 2-stage review |
80
- | **C: Parallel** | 2+ independent problems | One agent per problem domain |
81
- | **E: TRIZ-Parallel** ⚡ | 3+ independent tasks, need speed + quality | Dependency-aware parallel dispatch with per-agent quality gates |
82
- | **F: Party** | One non-trivial task, want multi-perspective without subagent cost | Single agent rotates Architect → Engineer → Reviewer (→ Security), append-only `.cm/handoff/party.json` |
83
-
84
- ---
85
-
86
- ## Mode A: Batch Execution
87
-
88
- ### Process
89
- 1. **Load plan** from Fission-AI OpenSpec (`openspec/changes/[initiative-name]/tasks.md` and `design.md`) → review critically → raise concerns
90
- 2. **Execute batch** (default: 3 tasks)
91
- - Mark in_progress → follow steps → verify → mark complete
92
- 3. **Report** → show what was done + verification output
93
- 4. **Continue** → apply feedback → next batch
94
- 5. **Complete** → use `cm-code-review` to finish
95
- 6. **Archive** → After all tasks complete, manually move the OpenSpec folder to `openspec/changes/archive/[date]-[name]/`
96
-
97
- ### Rules
98
- - Follow plan steps exactly
99
- - Don't skip verifications
100
- - Between batches: report and wait
101
- - Stop when blocked, don't guess
102
-
103
- ---
104
-
105
- ## Mode B: Subagent-Driven Development
106
-
107
- ### Process
108
- 1. **Read plan** from `openspec/changes/[initiative-name]/tasks.md` → extract ALL tasks with full text
109
- 2. **Per task:**
110
- - Dispatch implementer subagent with full task text
111
- - Answer subagent questions if any
112
- - Subagent implements, tests, commits, self-reviews
113
- - Dispatch spec reviewer → confirm matches spec
114
- - Dispatch code quality reviewer → confirm quality
115
- - If issues → implementer fixes → re-review → repeat
116
- 3. **After all tasks** → final code review → `cm-code-review`
117
-
118
- ### Prompt Template (Implementer)
119
- ```markdown
120
- Implement [TASK_NAME]:
121
-
122
- [Full task text from plan]
123
-
124
- Context: [Where this fits in the project]
125
-
126
- Rules:
127
- - Follow TDD (cm-tdd)
128
- - Commit when done
129
- - Self-review before reporting
130
- - Ask questions if unclear
131
-
132
- Return: Summary of what you did + test results
40
+ ├─ Need SPEED + QUALITY on 3+ tasks?
41
+ └─ YES → Mode E (TRIZ-Parallel) recommended
42
+ ├─ One non-trivial task, want multi-perspective without subagent cost?
43
+ └─ YES → Mode F (Party, persona rotation)
44
+ ├─ Multiple independent failures across subsystems?
45
+ │ └─ YES Mode C (Parallel Dispatch)
46
+ ├─ Autonomous loop with backlog (`/cm-start` flow)?
47
+ │ └─ YES → Mode D (RARV)
48
+ ├─ Plan has independent tasks, stay in this session?
49
+ │ └─ YES Mode B (Subagent-Driven)
50
+ └─ Otherwise
51
+ └─ Mode A (Batch Execution)
133
52
  ```
134
53
 
135
- ### Red Flags
136
- - Never start on main/master without consent
137
- - Never skip reviews (spec OR quality)
138
- - Never dispatch parallel implementers (conflicts)
139
- - Never accept "close enough" on spec compliance
140
-
141
- ---
142
-
143
- ## Mode C: Parallel Dispatch
144
-
145
- ### When
146
- - 3+ test files failing with different root causes
147
- - Multiple subsystems broken independently
148
- - Each problem doesn't need context from others
149
-
150
- ### Process
151
- 1. **Group failures** by independent domain
152
- 2. **Create focused agent prompt** per domain:
153
- - Specific scope (one file/subsystem)
154
- - Clear goal
155
- - Constraints (don't change other code)
156
- - Expected output format
157
- 3. **Dispatch in parallel**
158
- 4. **Review + integrate** → verify no conflicts → run full suite
159
-
160
- ### Common Mistakes
161
- - ❌ Too broad: "Fix all the tests"
162
- - ✅ Specific: "Fix agent-tool-abort.test.ts"
163
- - ❌ No context: "Fix the race condition"
164
- - ✅ Context: Paste error messages + test names
165
-
166
- ---
167
-
168
- ## Mode D: Autonomous RARV
54
+ | Mode | One-line summary | Load |
55
+ |---|---|---|
56
+ | A | Batch 3 tasks, report, then continue | `references/mode-a-batch.md` |
57
+ | B | Fresh subagent per task + 2-stage review | `references/mode-b-subagent.md` |
58
+ | C | One agent per independent problem domain | `references/mode-c-parallel.md` |
59
+ | D | Reason → Act → Reflect → Verify loop | `references/mode-d-rarv.md` |
60
+ | E | Dependency-aware parallel + per-agent quality gate | `references/mode-e-triz-parallel.md` |
61
+ | F | Single agent rotates Architect → Engineer → Reviewer | `references/mode-f-party.md` |
169
62
 
170
- > **Self-driving execution.** Tasks flow through Reason Act Reflect Verify automatically.
171
-
172
- ### When
173
- - User runs `/cm-start` with a goal
174
- - `cm-tasks.json` exists with backlog items
175
- - You want continuous autonomous execution
176
-
177
- ### Process (RARV Cycle)
178
-
179
- ```
180
- LOOP until backlog empty or user interrupts:
181
- 1. REASON → Read cm-tasks.json → pick highest-priority backlog task
182
- Update task status to "in_progress"
183
- Log: { phase: "REASON", message: "Selected: <title>" }
184
-
185
- 2. ACT → Execute using the task's assigned CM skill
186
- (cm-tdd, cm-debugging, cm-safe-deploy, etc.)
187
- Log: { phase: "ACT", message: "<what was done>" }
188
-
189
- 3. REFLECT → Update cm-tasks.json with results
190
- Log: { phase: "REFLECT", message: "<outcome summary>" }
191
-
192
- 4. VERIFY → Run tests/checks (cm-quality-gate)
193
- If PASS → status = "done", completed_at = now()
194
- If FAIL → rarv_cycles++, log error, retry from REASON
195
- If rarv_cycles >= 2 → attempt Skill Discovery Fallback:
196
- → npx skills find "{task keywords}"
197
- → If skill found + user approves → install, reset rarv_cycles = 0, retry
198
- → If NOT found → rarv_cycles >= 3 → status = "blocked"
199
- Log: { phase: "VERIFY", message: "✅ passed" or "❌ <error>" }
200
-
201
- 5. NEXT → Recalculate stats, pick next task
202
- ```
203
-
204
- ### cm-tasks.json Update Protocol
205
-
206
- After EVERY phase, you MUST:
207
- 1. Read current `cm-tasks.json`
208
- 2. Sync state from `openspec/changes/[initiative-name]/tasks.md` (Keep both human-readable MD and AI-executable JSON in parallel sync)
209
- 2. Find the active task by `id`
210
- 3. Update `status`, `logs[]`, timestamps
211
- 4. Recalculate `stats` object:
212
- ```
213
- stats.total = tasks.length
214
- stats.done = tasks.filter(t => t.status === 'done').length
215
- stats.in_progress = tasks.filter(t => t.status === 'in_progress').length
216
- stats.blocked = tasks.filter(t => t.status === 'blocked').length
217
- stats.backlog = tasks.filter(t => t.status === 'backlog').length
218
- stats.rarv_cycles_total = tasks.reduce((sum, t) => sum + (t.rarv_cycles || 0), 0)
219
- ```
220
- 5. Set `updated` to current ISO timestamp
221
- 6. Write back to `cm-tasks.json`
222
-
223
- ### Rules
224
- - **Max 3 retries** per task before marking "blocked"
225
- - **Always log** — the dashboard reads logs in real-time
226
- - **Don't batch-skip** — execute one task at a time through full RARV
227
- - **Respect interrupts** — if user sends a message, pause and respond
228
-
229
- ---
230
-
231
- ## Mode E: TRIZ-Parallel ⚡
232
-
233
- > **Speed AND quality.** 6 TRIZ principles resolve the contradiction.
234
-
235
- ### When
236
- - 3+ tasks that can potentially run in parallel
237
- - Speed is important but quality cannot be sacrificed
238
- - Tasks are well-defined with clear file scope
239
- - You need to maximize throughput without merge conflicts
240
-
241
- ### TRIZ Principles Applied
242
-
243
- | # | Principle | How Applied |
244
- |---|-----------|-------------|
245
- | **#1** | Segmentation | Tasks split by file-dependency graph → only truly independent tasks run together |
246
- | **#3** | Local Quality | Each agent runs its own mini quality gate (syntax + tests) before reporting |
247
- | **#10** | Prior Action | Pre-flight check scans for file overlaps BEFORE dispatch |
248
- | **#15** | Dynamicity | Batch size adapts: starts at 2, scales up after clean runs, down after conflicts |
249
- | **#18** | Feedback | Real-time conflict detection via shared ledger of modified files |
250
- | **#40** | Composite | Each agent = implementer + tester + reviewer (3 roles in 1) |
251
-
252
- ### Process
253
-
254
- ```
255
- 1. ANALYZE → Extract file dependencies from task descriptions
256
- 2. GRAPH → Build dependency graph, group into independent batches
257
- 3. ADAPT → Read parallel history, compute optimal batch size
258
- 4. PRE-FLIGHT → Check conflict ledger for overlaps with running agents
259
- 5. DISPATCH → Send batch to agents with quality contracts
260
- 6. MONITOR → Each agent reports modified files → detect conflicts
261
- 7. VERIFY → Each agent runs mini quality gate before reporting done
262
- 8. RECORD → Update parallel history for future batch sizing
263
- ```
264
-
265
- ### Rules
266
- - **Never dispatch conflicting tasks** — pre-flight must pass
267
- - **Each agent must self-validate** — no "trust me it works"
268
- - **Adaptive sizing is mandatory** — don't hardcode batch sizes
269
- - **File scope is enforced** — agents must not modify files outside their scope
270
- - **Conflict = halt** — stop further dispatch until conflict is resolved
271
-
272
- ### Common Mistakes
273
- - ❌ "All tasks are independent" → Always run dependency analysis first
274
- - ❌ "Skip pre-flight, save time" → Pre-flight prevents wasted agent work
275
- - ❌ "Batch size 5 for everything" → Start at 2, let the system adapt
276
- - ❌ "One task failed, continue anyway" → Fix before next batch
277
-
278
- ---
279
-
280
- ## Mode F: Party (Persona Rotation, single agent)
281
-
282
- > **One agent, three voices.** Cheaper than Mode B, deeper than Mode A.
283
-
284
- ### When
285
- - Task is non-trivial but small enough for one session
286
- - You want multi-perspective scrutiny without paying for N subagents
287
- - Quality matters more than raw speed
288
-
289
- ### Process
290
-
291
- ```
292
- 1. ARCHITECT → Load agents/architect.md as voice → propose design / approach
293
- → Append round to .cm/handoff/party.json
294
- 2. ENGINEER → Load agents/engineer.md as voice → implement against the design
295
- → Append round
296
- 3. REVIEWER → Load agents/reviewer.md as voice → critique implementation
297
- → verdict: "pass" | "revise" | "block"
298
- → Append round
299
- 4. (optional) SECURITY → Load agents/security.md when task touches auth/files/subprocess
300
- → Append round
301
- 5. SYNTHESIZE → Write `final` summary; mark handoff emitted_at
302
- ```
303
-
304
- ### Stop Conditions
305
- - Reviewer verdict `pass` → done, write `final`
306
- - Reviewer verdict `revise` → loop back to ENGINEER (max 2 revisions)
307
- - Reviewer verdict `block` or 3rd revision → escalate to user, do not ship
308
-
309
- ### Output Contract
310
-
311
- Writes to `.cm/handoff/party.json` matching `PartyHandoff` from `src/handoff/contracts.ts`:
312
-
313
- ```json
314
- {
315
- "schema": "party@1",
316
- "emitted_at": "<ISO>",
317
- "emitted_by": "cm-execution",
318
- "data": {
319
- "topic": "<task title>",
320
- "rounds": [
321
- {"persona":"architect","output":"...","ts":"<ISO>"},
322
- {"persona":"engineer","output":"...","ts":"<ISO>"},
323
- {"persona":"reviewer","output":"...","verdict":"pass","ts":"<ISO>"}
324
- ],
325
- "final": "<one-paragraph synthesis>"
326
- }
327
- }
328
- ```
329
-
330
- ### Rules
331
- - **Never skip the reviewer round** — that defeats the point of party mode
332
- - **Never edit a previous round** — append-only, like a journal
333
- - **One agent the whole way** — do NOT dispatch subagents inside party mode (use Mode B for that)
334
- - **Persona files are the source of truth** — load them as system context, don't paraphrase
335
-
336
- ### Common Mistakes
337
- - ❌ Running architect + engineer in same voice → missed trade-offs
338
- - ❌ Skipping security persona on auth/file-touching tasks → see Security Rules below
339
- - ❌ Letting reviewer revise > 2× → that's a planning problem, escalate
340
-
341
- ---
342
-
343
- ## Security Rules (Learned: March 2026)
344
-
345
- > **Code that touches files, subprocesses, or the DOM MUST follow these rules. No exceptions.**
346
-
347
- ### Frontend — DOM Safety
348
-
349
- | Pattern | Risk | Fix |
350
- |---------|------|-----|
351
- | `innerHTML = \`...\${data}...\`` | DOM XSS | `innerHTML = \`...\${esc(data)}...\`` |
352
- | `innerHTML = variable` | DOM XSS | `textContent = variable` |
353
- | `eval(input)` / `new Function(input)` | Code injection | Avoid entirely |
354
- | `document.write(data)` | DOM XSS | Use DOM API |
355
- | `el.setAttribute('on*', data)` | Event injection | `el.addEventListener()` |
356
-
357
- **Always:** Escape before innerHTML, prefer `textContent`, validate URLs via allowlist.
358
-
359
- ### Backend — Python
360
-
361
- | Pattern | Risk | Fix |
362
- |---------|------|-----|
363
- | `Path(user_input) / "file"` | Path Traversal | `safe_resolve(base, user_input)` |
364
- | `subprocess.run(f"cmd {arg}", shell=True)` | Command Injection | `subprocess.run(["cmd", arg])` |
365
- | `open(config["path"])` | Path Traversal | `safe_open(base, config["path"])` |
366
- | `json.load()` → paths unvalidated | Path Traversal | Validate ALL paths from config via `safe_resolve()` |
367
-
368
- **Always:** Import `safe_path`, validate EVERY path from CLI/config/API against a base directory.
369
-
370
- ### Backend — Express/Node
371
-
372
- | Pattern | Risk | Fix |
373
- |---------|------|-----|
374
- | Missing `app.disable('x-powered-by')` | Info leak | Add after `express()` |
375
- | No body size limit | DoS | `express.json({ limit: '1mb' })` |
376
- | `path.resolve(userInput)` without validation | Path Traversal | Check null bytes + `relative_to(baseDir)` |
377
- | `Object.assign(config, userInput)` | Prototype Pollution | Filter `__proto__`, `constructor` keys |
63
+ **Action:** Pick exactly one mode, read only that reference, and execute from there.
378
64
 
65
+ ## Conditional References
66
+ - **Mode B / E / F** → also read `references/persona-dispatch.md`
67
+ - **Task touches auth, files, subprocess, DOM, config paths, or user input** → MUST read `references/security-rules.md` before writing code
379
68
 
69
+ ## Karpathy Discipline — Surgical Changes
70
+ - Touch only what the task requires. No "while I'm here" refactors.
71
+ - Match existing style even if you would write it differently.
72
+ - Notice unrelated dead code? Mention it, do not delete it.
73
+ - Clean only your own orphans. Pre-existing dead code stays unless asked.
74
+ - **Diff test:** every changed line must trace to the task.
380
75
 
381
76
  ## Integration
382
-
383
77
  | Skill | When |
384
- |-------|------|
385
- | `cm-git-worktrees` | REQUIRED: isolated workspace before starting |
386
- | `cm-planning` | Creates the plan this skill executes |
387
- | `cm-code-review` | Complete development after all tasks |
388
- | `cm-tdd` | Subagents follow TDD for each task |
389
- | `cm-quality-gate` | VERIFY phase uses this for validation |
390
- | `cm-ui-preview` | RECOMMENDED: Preview UI on Google Stitch before implementing frontend tasks |
391
-
392
- ### Workflows
78
+ |---|---|
79
+ | `cm-planning` | Produces the plan this skill consumes |
80
+ | `cm-tdd` | Use per task when implementing or fixing |
81
+ | `cm-quality-gate` | VERIFY phase / pre-report validation |
82
+ | `cm-code-review` | Final review after all tasks are done |
83
+ | `cm-design-system` | Recommended before frontend-heavy tasks |
84
+
85
+ ## Workflows
393
86
  | Command | Purpose |
394
- |---------|---------|
87
+ |---|---|
395
88
  | `/cm-start` | Create tasks + launch RARV + open dashboard |
396
89
  | `/cm-status` | Quick terminal progress summary |
397
90
  | `/cm-dashboard` | Open browser dashboard |
398
91
 
399
- ## Karpathy Discipline — Surgical Changes
400
-
401
- Every executor (single agent or subagent fleet) must follow:
402
- - **Touch only what the task requires.** No "while I'm here" formatting, renames, or refactors.
403
- - **Match existing style** even if you'd write it differently. Consistency > taste.
404
- - **Notice unrelated dead code? Mention it, don't delete.** Out-of-scope cleanup → spawn a separate task.
405
- - **Clean only your own orphans.** If your edit makes an import/var unused, remove it. Pre-existing dead code stays unless explicitly asked.
406
-
407
- **Diff test:** Every changed line should trace to the task. If a reviewer asks "why this line?", you must point at the task — not "felt cleaner".
408
-
409
92
  ## The Bottom Line
410
-
411
- **Choose your mode. Execute systematically. Review at every checkpoint.**
93
+ **Choose your mode → load that one reference → execute systematically → review at every checkpoint.**
@@ -0,0 +1,28 @@
1
+ # Mode A — Batch Execution
2
+
3
+ > Use when: linear plan with checkpoints, no parallelism needed.
4
+
5
+ ## Process
6
+ 1. **Load plan** from `openspec/changes/[initiative-name]/tasks.md` and `design.md`, then review critically and raise concerns.
7
+ 2. **Execute batch** (default: 3 tasks):
8
+ - Mark `in_progress`
9
+ - Follow the task steps
10
+ - Verify the result
11
+ - Mark `complete`
12
+ 3. **Report** what was done and include verification output.
13
+ 4. **Apply feedback** and continue with the next batch.
14
+ 5. **Complete** with `cm-code-review`.
15
+ 6. **Archive** manually: move the OpenSpec folder to `openspec/changes/archive/[date]-[name]/`.
16
+
17
+ ## Rules
18
+ - Follow plan steps exactly.
19
+ - Do not skip verification.
20
+ - Between batches: report and wait.
21
+ - Stop when blocked. Do not guess.
22
+
23
+ ## Common Mistakes
24
+ | Mistake | Fix |
25
+ |---|---|
26
+ | Executing 8 tasks in one batch | Stick to 3 and get feedback |
27
+ | Skipping verification to save time | Verification is the work |
28
+ | Guessing when blocked | Stop and ask the user |
@@ -0,0 +1,46 @@
1
+ # Mode B — Subagent-Driven Development
2
+
3
+ > Use when: plan has independent tasks, you want to stay in this session, quality matters more than raw speed.
4
+
5
+ ## Process
6
+ 1. **Read plan** from `openspec/changes/[initiative-name]/tasks.md` and extract all tasks with full text.
7
+ 2. **Per task:**
8
+ - Dispatch an **implementer** subagent with full task text.
9
+ - Answer subagent questions if any.
10
+ - Subagent implements, tests, self-reviews, and reports back.
11
+ - Dispatch **spec reviewer** to confirm spec match.
12
+ - Dispatch **code quality reviewer** to confirm quality.
13
+ - If issues appear: implementer fixes → re-review → repeat, max 2 cycles.
14
+ 3. **After all tasks** → final review via `cm-code-review`.
15
+
16
+ ## Prompt Template (Implementer)
17
+ ```markdown
18
+ Implement [TASK_NAME]:
19
+
20
+ [Full task text from plan]
21
+
22
+ Context: [Where this fits in the project]
23
+
24
+ Rules:
25
+ - Follow TDD (cm-tdd)
26
+ - Self-review before reporting
27
+ - Ask questions if unclear
28
+
29
+ Return: Summary of what you did + test results
30
+ ```
31
+
32
+ ## Persona
33
+ Read `references/persona-dispatch.md` to choose engineer / reviewer / security / architect voices.
34
+
35
+ ## Red Flags
36
+ - Never start on `main` or `master` without consent.
37
+ - Never skip spec review or quality review.
38
+ - Never dispatch parallel implementers in Mode B. Use Mode E for that.
39
+ - Never accept "close enough" on spec compliance.
40
+
41
+ ## Common Mistakes
42
+ | Mistake | Fix |
43
+ |---|---|
44
+ | Implementer also reviews own code | Always dispatch separate reviewer |
45
+ | Prompt is vague | Paste the full task text and context |
46
+ | Re-review loop exceeds 2 cycles | Escalate: that is a planning problem |
@@ -0,0 +1,39 @@
1
+ # Mode C — Parallel Dispatch
2
+
3
+ > Use when: 3+ test files fail with different root causes, or multiple subsystems break independently.
4
+
5
+ ## Process
6
+ 1. **Group failures** by independent domain.
7
+ 2. **Create focused agent prompt** per domain:
8
+ - Specific scope
9
+ - Clear goal
10
+ - Constraints
11
+ - Expected output
12
+ 3. **Dispatch in parallel**.
13
+ 4. **Review and integrate** → verify no conflicts → run the full suite.
14
+
15
+ ## Prompt Template (Focused)
16
+ ```markdown
17
+ Fix [FILE / SUBSYSTEM].
18
+
19
+ Failure:
20
+ [paste error message + test name + relevant stack]
21
+
22
+ Constraints:
23
+ - Do not modify files outside [scope]
24
+ - Do not refactor unrelated code
25
+ - Add a regression test
26
+
27
+ Return: diff + test output
28
+ ```
29
+
30
+ ## Common Mistakes
31
+ | Too broad | Better |
32
+ |---|---|
33
+ | Fix all the tests | Fix `agent-tool-abort.test.ts` |
34
+ | Fix the race condition | Fix race in `worker.ts:processQueue` and include these 3 error lines |
35
+ | No reproduction context | Paste error messages + failing test names |
36
+
37
+ ## When NOT to use Mode C
38
+ - Failures share one root cause → fix once, not N times.
39
+ - Tasks touch the same file → use Mode B serially or Mode E with a dependency graph.