contextos-agents 1.6.1 → 2.0.0-beta.2

package/.agents/core/skills/engineering-workflow/skill.yaml

@@ -1,13 +1,13 @@
+schemaVersion: 2
 name: engineering-workflow
+type: instruction-only
 description: >
   Senior engineering workflow skill inspired by Addy Osmani's agent-skills.
   Enforces the full development lifecycle: spec → plan → build → test → review → ship.
   AI must never write code before a spec and plan are approved.
-tags:
-  - workflow
-  - engineering
-  - tdd
-  - planning
-  - review
 version: 1.0.0
-source: https://github.com/addyosmani/agent-skills
+resources:
+  - EXAMPLES.md
+  - SKILL.md
+  - TROUBLESHOOTING.md
+  - VALIDATION.json

package/.agents/core/skills/gemini-precision/SKILL.md

@@ -90,6 +90,10 @@ Activate whenever:
   - State what was inspected or verified from the code.
   - State the architectural decision made and the immediate next action.
 - Keep narration crisp and actionable without excessive verbosity.
+- **Zero-Spam Constraint**:
+  - ❌ **Forbidden**: Starting every intermediate step, tool call, or status update with domain/phase/role tags (e.g. `[DOMAIN: ...] [PHASE: ...] [ROLE: ...]`).
+  - ✅ **Mandatory**: Declare role and phase strictly once at the start of a phase. Intermediate step updates must be clean, natural language sentences describing technical actions directly.
+  - Do not narrate routine micro-inspections (single line reads or basic greps). Announce only meaningful task phases and decisions.
 
 ---
 

package/.agents/core/skills/gemini-precision/skill.yaml

@@ -1,9 +1,8 @@
+schemaVersion: 2
 name: gemini-precision
+type: instruction-only
 description: High-precision engineering and execution guardrails optimized for Google Gemini models. Enforces zero-assumption file inspection, complete non-lazy implementations, surgical blast-radius containment, and mandatory proof-of-work execution.
-tags:
-  - gemini
-  - precision
-  - quality
-  - workflow
-  - antigravity
 version: 1.0.0
+resources:
+  - SKILL.md
+  - VALIDATION.json

package/.agents/core/skills/gstack-roles/SKILL.md

@@ -25,12 +25,14 @@ Inspired by [Garry Tan's gstack](https://github.com/garrytan/gstack) — shippin
 
 ## Role Identification Protocol
 
-At the start of each task, declare your role:
+At the start of each task or major phase switch, declare your role:
 
 ```
 [ROLE: <Role Name>] — <One-line description of your mandate for this task>
 ```
 
+> **Anti-Spam Invariant**: Declare this role **strictly once per phase**. Never prefix intermediate tool calls, file operations, or step updates with role tags.
+
 Then execute ONLY within the constraints of that role.
 
 ---

package/.agents/core/skills/gstack-roles/skill.yaml

@@ -1,12 +1,15 @@
+schemaVersion: 2
 name: gstack-roles
+type: instruction-only
 description: >
   Role-based AI specialist system inspired by Garry Tan's gstack.
   Defines 23 specialist roles (CEO, Eng Manager, Designer, QA, Security etc.)
   and teaches the AI to adopt the correct role before each task phase.
-tags:
-  - roles
-  - management
-  - workflow
-  - planning
 version: 1.0.0
-source: https://github.com/garrytan/gstack
+deprecated: true
+canonical: engineering-workflow
+resources:
+  - EXAMPLES.md
+  - SKILL.md
+  - TROUBLESHOOTING.md
+  - VALIDATION.json

package/.agents/core/skills/ponytail-mindset/skill.yaml

@@ -1,14 +1,14 @@
+schemaVersion: 2
 name: ponytail-mindset
+type: instruction-only
 description: >
   Minimalist coding mindset based on DietrichGebert/ponytail.
   Teaches the AI to write only what is strictly necessary.
   Uses a 7-rung ladder: YAGNI → reuse → stdlib → platform → deps → one-liner → minimum.
   Minimizes unnecessary boilerplate and over-engineering while keeping all safety, validation and security guards.
-tags:
-  - minimalism
-  - efficiency
-  - quality
-  - yagni
-  - refactoring
 version: 1.0.0
-source: https://github.com/DietrichGebert/ponytail
+resources:
+  - EXAMPLES.md
+  - SKILL.md
+  - TROUBLESHOOTING.md
+  - VALIDATION.json

package/.agents/core/skills/security/skill.yaml

@@ -1,10 +1,29 @@
+schemaVersion: 2
 id: security
 name: Application Security
 category: backend
-tags: [backend, security, auth, owasp, jwt, encryption]
+type: instruction-only
 requires: []
 optional: [node, fastapi, nestjs]
 conflicts: []
 weight: 9
-documents:
+resources:
+  - EXAMPLES.md
+  - SKILL.md
+  - TROUBLESHOOTING.md
+  - VALIDATION.json
   - security.md
+rules:
+  - id: SEC-001
+    level: must
+    enforcement: prompt-guidance
+    summary: Always validate and sanitize all user input and untrusted external payloads before processing
+  - id: SEC-002
+    level: must
+    enforcement: runtime
+    checker: secret-scanner
+    summary: Zero plaintext credentials, private keys, or API tokens committed to repository
+  - id: SEC-003
+    level: must
+    enforcement: prompt-guidance
+    summary: Enforce authentication and authorization checks prior to accessing sensitive resources or data