create-hq 5.0.0

package/template/workers/dev-team/code-reviewer/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@hq/code-reviewer",
+  "version": "1.0.0",
+  "description": "Code reviewer worker - PR review, merge management, code quality",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "code-reviewer": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "start": "node dist/index.js",
+    "mcp": "node dist/mcp-server.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "commander": "^12.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/template/workers/dev-team/code-reviewer/skills/merge-to-production.md

@@ -0,0 +1,61 @@
+# merge-to-production
+
+Merge staging to production branch.
+
+## Arguments
+
+`$ARGUMENTS` = `--repo <path>` (required)
+
+Optional:
+- `--tag <version>` - Version tag to create
+- `--skip-checks` - Skip pre-merge checks (NOT RECOMMENDED)
+
+## Process
+
+1. Verify staging is stable:
+   - All tests pass
+   - No pending hotfixes
+   - Staging environment healthy
+2. Create release PR (staging → main/production)
+3. Run final checks:
+   - Security scan
+   - Performance regression check
+   - Breaking change detection
+4. Present to human for approval
+5. Merge with merge commit (preserve history)
+6. Create version tag (if specified)
+7. Trigger production deploy (if configured)
+
+## Pre-production Checklist
+
+- [ ] Staging has been validated
+- [ ] No breaking changes without migration
+- [ ] Database migrations are backward compatible
+- [ ] Feature flags configured correctly
+- [ ] Rollback plan documented
+
+## Commands
+
+```bash
+# Create release PR
+gh pr create --base main --head staging --title "Release v1.x.x"
+
+# Merge to production
+gh pr merge <number> --merge
+
+# Create tag
+git tag -a v1.x.x -m "Release v1.x.x"
+git push origin v1.x.x
+```
+
+## Output
+
+- Production merge confirmation
+- Version tag (if created)
+- Deploy trigger status
+
+## Human Checkpoints
+
+- **ALWAYS** require human approval before production merge
+- Review breaking changes
+- Confirm rollback plan exists

package/template/workers/dev-team/code-reviewer/skills/merge-to-staging.md

@@ -0,0 +1,54 @@
+# merge-to-staging
+
+Merge approved PR to staging branch.
+
+## Arguments
+
+`$ARGUMENTS` = `--pr <number>` (required)
+
+Optional:
+- `--repo <path>` - Target repository
+
+## Process
+
+1. Verify PR is approved
+2. Verify all checks pass via `gh pr checks`
+3. Detect branch strategy:
+   - Check for develop/staging branch
+   - Read CONTRIBUTING.md for conventions
+4. Merge PR:
+   - `gh pr merge --squash` (default)
+   - Or `--merge` / `--rebase` per project convention
+5. Verify merge succeeded
+6. Report status
+
+## Pre-merge Checklist
+
+- [ ] PR is approved by required reviewers
+- [ ] All CI checks pass
+- [ ] No merge conflicts
+- [ ] Branch is up to date with target
+
+## Commands
+
+```bash
+# Check PR status
+gh pr view <number> --json state,reviews,statusCheckRollup
+
+# Merge with squash
+gh pr merge <number> --squash --delete-branch
+
+# Merge with merge commit
+gh pr merge <number> --merge --delete-branch
+```
+
+## Output
+
+- Merge confirmation
+- Commit SHA
+- Branch cleanup status
+
+## Human Checkpoints
+
+- Confirm merge before execution
+- Handle merge conflicts (escalate to human)

package/template/workers/dev-team/code-reviewer/skills/request-changes.md

@@ -0,0 +1,63 @@
+# request-changes
+
+Request changes on a pull request with actionable feedback.
+
+## Arguments
+
+`$ARGUMENTS` = `--pr <number>` (required)
+
+Optional:
+- `--repo <path>` - Target repository
+- `--blocking` - Mark as blocking review
+
+## Process
+
+1. Fetch current review state
+2. Formulate change requests:
+   - Specific, actionable items
+   - Reference line numbers
+   - Suggest concrete fixes
+3. Categorize issues:
+   - Must fix (blocking)
+   - Should fix (non-blocking)
+   - Consider (optional)
+4. Present to human for approval
+5. Submit review via `gh pr review`
+
+## Change Request Format
+
+```markdown
+### Must Fix
+- [ ] **Line 42**: SQL injection vulnerability - use parameterized query
+- [ ] **Line 87**: Missing null check before accessing `.length`
+
+### Should Fix
+- [ ] **Line 23**: Consider extracting to helper function for reuse
+- [ ] **Line 56**: Magic number - extract to named constant
+
+### Consider
+- [ ] **Line 12**: Could use optional chaining for cleaner code
+```
+
+## Commands
+
+```bash
+# Submit review requesting changes
+gh pr review <number> --request-changes --body "Review comments..."
+
+# Add line comment
+gh pr comment <number> --body "Comment text"
+```
+
+## Best Practices
+
+- Be specific, not vague
+- Explain why, not just what
+- Offer solutions, not just problems
+- Be respectful and constructive
+- Acknowledge good work too
+
+## Human Checkpoints
+
+- Approve review content before submission
+- Confirm blocking vs non-blocking classification

package/template/workers/dev-team/code-reviewer/skills/review-pr.md

@@ -0,0 +1,77 @@
+# review-pr
+
+Review a pull request for code quality, correctness, and best practices.
+
+## Arguments
+
+`$ARGUMENTS` = `--pr <number>` (required)
+
+Optional:
+- `--repo <path>` - Target repository
+- `--focus <area>` - Focus area: security|performance|style|all
+- `--strict` - Enable strict review mode
+
+## Process
+
+1. Fetch PR details via `gh pr view`
+2. Get diff via `gh pr diff`
+3. Analyze changes:
+   - Code correctness
+   - Security vulnerabilities
+   - Performance implications
+   - Style consistency
+   - Test coverage
+4. Check against project standards:
+   - CONTRIBUTING.md
+   - Existing patterns in codebase
+5. Generate review comments
+6. Present findings to human for approval
+7. Submit review via `gh pr review`
+
+## Review Checklist
+
+### Code Quality
+- [ ] Logic is correct and handles edge cases
+- [ ] No obvious bugs or regressions
+- [ ] Code is readable and maintainable
+- [ ] Functions/methods are appropriately sized
+
+### Security
+- [ ] No hardcoded secrets
+- [ ] Input validation present
+- [ ] No SQL injection / XSS vulnerabilities
+- [ ] Auth/authz properly implemented
+
+### Performance
+- [ ] No N+1 queries
+- [ ] Appropriate caching
+- [ ] No memory leaks
+- [ ] Efficient algorithms
+
+### Testing
+- [ ] Tests cover new functionality
+- [ ] Edge cases tested
+- [ ] Tests are meaningful (not just coverage)
+
+### E2E Tests (if applicable)
+- [ ] Pages modified in the PR have corresponding E2E spec updates
+- [ ] Test manifest is fresh (no diff after regeneration)
+- [ ] Coverage check passes (all app routes covered)
+- [ ] New pages include at minimum a page-load spec with 200 status + title checks
+
+If any E2E check fails, request changes with instructions to run:
+```bash
+npm run generate-manifest  # regenerate manifest
+npm run check-coverage     # verify coverage
+```
+
+## Output
+
+- Review summary
+- Line-by-line comments (via gh)
+- Approval / request changes / comment
+
+## Human Checkpoints
+
+- Approve review before submission
+- Confirm severity of issues found

package/template/workers/dev-team/code-reviewer/src/index.ts

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+
+const program = new Command();
+
+program
+  .name('code-reviewer')
+  .description('PR review, merge management, and code quality gating')
+  .version('1.0.0');
+
+program
+  .command('review-pr')
+  .description('Review a pull request')
+  .requiredOption('--pr <number>', 'PR number')
+  .option('--repo <path>', 'Target repository')
+  .option('--focus <area>', 'Focus: security|performance|style|all')
+  .option('--strict', 'Enable strict review mode')
+  .action(async (options) => {
+    console.log('review-pr:', options);
+  });
+
+program
+  .command('merge-to-staging')
+  .description('Merge approved PR to staging')
+  .requiredOption('--pr <number>', 'PR number')
+  .option('--repo <path>', 'Target repository')
+  .action(async (options) => {
+    console.log('merge-to-staging:', options);
+    console.log('\n[Human approval required]');
+    console.log('Confirm merge to staging? [y/n]');
+  });
+
+program
+  .command('merge-to-production')
+  .description('Merge staging to production')
+  .requiredOption('--repo <path>', 'Target repository')
+  .option('--tag <version>', 'Version tag to create')
+  .option('--skip-checks', 'Skip pre-merge checks')
+  .action(async (options) => {
+    console.log('merge-to-production:', options);
+    console.log('\n[HUMAN APPROVAL REQUIRED]');
+    console.log('This will deploy to PRODUCTION.');
+    console.log('Confirm merge to production? [y/n]');
+  });
+
+program
+  .command('request-changes')
+  .description('Request changes on a PR')
+  .requiredOption('--pr <number>', 'PR number')
+  .option('--repo <path>', 'Target repository')
+  .option('--blocking', 'Mark as blocking review')
+  .action(async (options) => {
+    console.log('request-changes:', options);
+  });
+
+program.parse();

package/template/workers/dev-team/code-reviewer/src/mcp-server.ts

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+
+const server = new Server(
+  { name: 'code-reviewer', version: '1.0.0' },
+  { capabilities: { tools: {} } }
+);
+
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: [
+    {
+      name: 'review_pr',
+      description: 'Review a pull request for code quality and correctness',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          pr: { type: 'number', description: 'PR number' },
+          repo: { type: 'string', description: 'Target repository path' },
+          focus: { type: 'string', enum: ['security', 'performance', 'style', 'all'], description: 'Review focus area' },
+          strict: { type: 'boolean', description: 'Enable strict review mode' },
+        },
+        required: ['pr'],
+      },
+    },
+    {
+      name: 'merge_to_staging',
+      description: 'Merge approved PR to staging branch',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          pr: { type: 'number', description: 'PR number' },
+          repo: { type: 'string', description: 'Target repository path' },
+        },
+        required: ['pr'],
+      },
+    },
+    {
+      name: 'merge_to_production',
+      description: 'Merge staging to production (requires human approval)',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          repo: { type: 'string', description: 'Target repository path' },
+          tag: { type: 'string', description: 'Version tag to create' },
+        },
+        required: ['repo'],
+      },
+    },
+    {
+      name: 'request_changes',
+      description: 'Request changes on a pull request',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          pr: { type: 'number', description: 'PR number' },
+          repo: { type: 'string', description: 'Target repository path' },
+          blocking: { type: 'boolean', description: 'Mark as blocking review' },
+        },
+        required: ['pr'],
+      },
+    },
+    {
+      name: 'get_pr_diff',
+      description: 'Get the diff for a pull request',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          pr: { type: 'number', description: 'PR number' },
+          repo: { type: 'string', description: 'Target repository path' },
+        },
+        required: ['pr'],
+      },
+    },
+    {
+      name: 'list_pr_comments',
+      description: 'List comments on a pull request',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          pr: { type: 'number', description: 'PR number' },
+          repo: { type: 'string', description: 'Target repository path' },
+        },
+        required: ['pr'],
+      },
+    },
+  ],
+}));
+
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+  return { content: [{ type: 'text', text: `Tool ${name} called with: ${JSON.stringify(args)}` }] };
+});
+
+async function main() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+
+main().catch(console.error);

package/template/workers/dev-team/code-reviewer/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}

package/template/workers/dev-team/code-reviewer/worker.yaml

@@ -0,0 +1,90 @@
+worker:
+  id: code-reviewer
+  name: "Code Reviewer"
+  description: "PR review, merge management, and code quality gating"
+  type: CodeWorker
+  version: "1.0"
+  team: dev-team
+
+execution:
+  mode: on_demand
+  max_runtime: 15m
+  retry_attempts: 1
+  spawn_method: task_tool
+
+context:
+  base:
+    - workers/public/dev-team/code-reviewer/skills/
+    - knowledge/public/dev-team/patterns/
+    - knowledge/public/dev-team/workflows/code-review.md
+  dynamic:
+    - pattern: "{target_repo}/src/"
+      when: always
+    - pattern: "{target_repo}/.github/CODEOWNERS"
+      when: always
+    - pattern: "{target_repo}/CONTRIBUTING.md"
+      when: always
+    - pattern: "{target_repo}/package.json"
+      when: always
+  exclude:
+    - node_modules/
+    - dist/
+    - "*.log"
+    - "*.lock"
+
+skills:
+  - id: review-pr
+    file: skills/review-pr.md
+  - id: merge-to-staging
+    file: skills/merge-to-staging.md
+  - id: merge-to-production
+    file: skills/merge-to-production.md
+  - id: request-changes
+    file: skills/request-changes.md
+
+verification:
+  post_execute:
+    - check: pr_checks_passed
+      command: gh pr checks {pr_number}
+  approval_required: true
+  human_checkpoints:
+    - before_merge_staging
+    - before_merge_production
+    - on_breaking_changes
+
+external_skills:
+  - vercel/code-review-excellence
+  - vercel/systematic-debugging
+
+mcp:
+  server:
+    command: node
+    args: [dist/mcp-server.js]
+  tools:
+    - review_pr
+    - merge_to_staging
+    - merge_to_production
+    - request_changes
+    - get_pr_diff
+    - list_pr_comments
+
+# State Machine (Loom pattern)
+state_machine:
+  enabled: true
+  max_retries: 1
+  hooks:
+    post_execute:
+      - auto_checkpoint
+      - log_metrics
+    on_error:
+      - log_error
+      - checkpoint_error_state
+
+reporting:
+  on_complete:
+    - log_review
+    - extract_learnings
+  metrics:
+    - review_time
+    - issues_found
+    - merge_success_rate

package/template/workers/dev-team/database-dev/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@hq/database-dev",
+  "version": "1.0.0",
+  "description": "Schema design, migrations, and query optimization",
+  "main": "dist/index.js",
+  "bin": { "database-dev": "dist/index.js" },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "dev": "ts-node src/index.ts",
+    "mcp": "node dist/mcp-server.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "commander": "^12.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.2",
+    "ts-node": "^10.9.2"
+  }
+}

package/template/workers/dev-team/database-dev/skills/create-schema.md

@@ -0,0 +1,48 @@
+# create-schema
+
+Design database schema for a feature.
+
+## Arguments
+
+`$ARGUMENTS` = `--entity <name>` or `--feature <description>` (required)
+
+Optional:
+- `--repo <path>` - Target repository
+- `--orm <prisma|drizzle>` - ORM to use
+
+## Process
+
+1. Analyze existing schema
+2. Design new tables/models
+3. Define relationships
+4. Add indexes for common queries
+5. Present for approval
+
+## Output
+
+- Schema definition (Prisma/Drizzle)
+- Relationship diagram (Mermaid)
+- Migration file
+
+## Example
+
+```bash
+node dist/index.js create-schema --entity "Comment" --repo repos/my-app
+
+# Output:
+# === Schema Design: Comment ===
+#
+# model Comment {
+#   id        String   @id @default(cuid())
+#   content   String
+#   authorId  String
+#   postId    String
+#   author    User     @relation(fields: [authorId], references: [id])
+#   post      Post     @relation(fields: [postId], references: [id])
+#   createdAt DateTime @default(now())
+# }
+#
+# Indexes: authorId, postId, createdAt
+#
+# [Approve? y/n/modify]
+```

package/template/workers/dev-team/database-dev/src/index.ts

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+
+const program = new Command();
+
+program
+  .name('database-dev')
+  .description('Schema design, migrations, and query optimization')
+  .version('1.0.0');
+
+program
+  .command('create-schema')
+  .description('Design database schema for feature')
+  .option('--entity <name>', 'Entity name')
+  .option('--feature <description>', 'Feature description')
+  .option('--repo <path>', 'Target repository')
+  .option('--orm <type>', 'ORM type: prisma|drizzle')
+  .action(async (options) => {
+    console.log('create-schema:', options);
+  });
+
+program
+  .command('create-migration')
+  .description('Create database migration')
+  .requiredOption('--name <name>', 'Migration name')
+  .option('--repo <path>', 'Target repository')
+  .action(async (options) => {
+    console.log('create-migration:', options);
+  });
+
+program
+  .command('optimize-query')
+  .description('Optimize slow query')
+  .requiredOption('--query <sql>', 'Query to optimize')
+  .option('--repo <path>', 'Target repository')
+  .action(async (options) => {
+    console.log('optimize-query:', options);
+  });
+
+program
+  .command('add-indexes')
+  .description('Add database indexes')
+  .requiredOption('--table <name>', 'Table name')
+  .option('--columns <list>', 'Comma-separated columns')
+  .option('--repo <path>', 'Target repository')
+  .action(async (options) => {
+    console.log('add-indexes:', options);
+  });
+
+program.parse();