eai-cli 0.0.0-bootstrap.0

package/resources/gofer/system-skills/gofer_spec_summary/SKILL.md

@@ -0,0 +1,112 @@
+---
+name: gofer:spec-summary
+description: "Generate a business-friendly summary of feature value and scope."
+---
+
+## Workspace Preflight
+
+Before doing stage/helper work:
+
+1. Resolve the repository root.
+2. Check the core Gofer sentinels:
+   - `.specify/.gofer-version`
+   - `.specify/commands/0_gofer_start.md`
+   - `.specify/templates/spec-template.md`
+   - `.specify/templates/loop-contract-template.json`
+   - `.specify/templates/working-backwards-prfaq-template.md`
+   - `.specify/templates/business-owner-summary-template.md`
+   - `.specify/templates/cto-architecture-summary-template.md`
+   - `.specify/templates/ciso-security-summary-template.md`
+   - `.specify/templates/stakeholder-review-index-template.md`
+   - `.specify/scripts/bash/create-new-feature.sh`
+   - `.specify/scripts/node/parse-stage-command.mjs`
+   - `.specify/scripts/node/gofer-loop-audit.mjs`
+   - `.specify/scripts/hooks/post-tool-use.mjs`
+   - `.specify/scripts/powershell/install-optional-tools.ps1`
+   - `.specify/templates/gofer-model-policy.yaml`
+   - `.specify/memory/gofer-model-policy.yaml`
+   - `.specify/specs/`
+   - `.specify/memory/`
+3. Check host-specific repo-owned files when relevant:
+   - Claude: `AGENTS.md`, `CLAUDE.md`, `.claude/settings.json`
+   - Codex: `AGENTS.md`
+   - Copilot: `.github/copilot-instructions.md`
+   - VS Code extension mirrors Claude/Copilot/Gemini resources itself and should still keep the core scaffold healthy
+4. If the repo already has the workspace checker script, prefer running:
+   - `node .specify/scripts/node/gofer-workspace-check.mjs --host codex --json`
+5. If the workspace is missing or stale, ask exactly:
+   - **"This repo is missing or stale for Gofer. Initialize/update it now?"**
+6. If the user says yes, run the Gofer workspace bootstrap helper and then resume this command from the top.
+7. If the user says no, stop and explain that Gofer stage/helper work depends on the repo-owned scaffold.
+
+
+# Gofer Spec Summary
+
+## EAI Platform Session Preflight
+
+Before any Gofer stage/helper command does pipeline work:
+
+1. Treat durable delivery as EAI Platform delivery by default, with Azure second
+   and every other stack only by explicit exception.
+2. Run `eai whoami` and confirm the EAI CLI is installed, the user is logged in,
+   and an active tenant is visible.
+3. If `eai` is missing, `eai whoami` fails, the token is expired, or no active
+   tenant is available, stop and run `/gofer:eai-first-run` or ask the user to
+   approve login/setup before continuing.
+4. For EAI app delivery, do not continue into research, specification, planning,
+   tasks, implementation, or validation until
+   `.specify/specs/{feature}/eai-preflight.md` records login, tenant, template,
+   app-readiness, and next-action evidence.
+5. Do not write tokens, secrets, private tenant IDs, or local `.env` values into
+   Gofer artifacts; record only product-safe readiness status and evidence.
+
+## Token And Cost Policy
+<!-- gofer:token-cost-policy:start -->
+
+Before spawning agents, calling tools, or loading large files:
+
+1. Treat `.specify/memory/gofer-model-policy.yaml` as the repo-owned source of truth for simple, medium, hard, and arbiter model routing. If it is missing, run `/gofer:bootstrap-workspace` before continuing.
+2. Use the cheapest capable model first.
+   - Claude: Haiku for scouting/extraction; Sonnet for normal implementation, synthesis, validation, and security; Opus for high-risk arbitration or release-critical failures.
+   - Codex/OpenAI: GPT mini for simple coding; GPT nano only for locate/classify/summarize/mechanical work; GPT-5.3-Codex or flagship GPT for tool-heavy coding, architecture, and release-critical validation.
+   - Gemini: Flash-Lite for cheap large-context scan/summarize; Flash for default research synthesis; Pro for large-context architecture or high-risk arbitration.
+   - Copilot: prefer Auto for simple and default work; ask the user before choosing a paid/high-tier picker model for hard security, architecture, or release gates.
+3. Keep raw tool output out of the main conversation context. Save stable findings to `.specify/specs/{feature}/context-bundle.md`, then work from summaries.
+4. Use provider prompt/context caching only for stable, non-secret prefixes: Gofer scaffold, AGENTS/CLAUDE/Copilot instructions, constitution, repo map, stage contracts, and validation rubric.
+5. Before continuing after large research, planning, implementation, or validation bursts, checkpoint the durable artifacts and compact/clear/resume context when the host supports it.
+6. Escalate model tier only when a cheaper pass is low-confidence, contradictory, security-sensitive, or blocking release quality.
+<!-- gofer:token-cost-policy:end -->
+
+Generate a business-friendly summary of the current feature and write it to
+`.specify/specs/{feature}/spec-summary.md`.
+
+Use this when a stakeholder or implementation team needs the plain-language
+purpose, expected outcomes, and scope boundaries without diving into the full
+spec.
+
+When you run this helper:
+
+1. Read the approved feature-local artifacts (`spec.md`, `plan.md`,
+   `contract-pack.md`, `quickstart.md`) and summarize only what is already in
+   scope.
+2. Keep the summary business-facing and humble. Do not turn it into a PRD or an
+   issue-tracker export.
+3. Write the artifact only to `.specify/specs/{feature}/spec-summary.md`.
+4. If the target file already exists, replace it and prepend a regeneration note
+   such as `<!-- regenerated at [ISO timestamp] -->`.
+5. Include the minimum provenance schema:
+   - `GeneratedAt`
+   - `SourceCommandId`
+   - `SourceInputs`
+   - `OverwriteNoticeWhenApplicable`
+
+The generated summary must contain these sections:
+
+- `## Provenance`
+- `## What`
+- `## Why`
+- `## Acceptance Criteria`
+- `## Out of Scope`
+
+Keep the content Gofer-owned. Do not copy upstream Matt Pocock skill text
+verbatim.

package/resources/gofer/system-skills/gofer_tdd/SKILL.md

@@ -0,0 +1,112 @@
+---
+name: gofer:tdd
+description: "Guide a red-green-refactor loop tied to spec acceptance criteria."
+---
+
+## Workspace Preflight
+
+Before doing stage/helper work:
+
+1. Resolve the repository root.
+2. Check the core Gofer sentinels:
+   - `.specify/.gofer-version`
+   - `.specify/commands/0_gofer_start.md`
+   - `.specify/templates/spec-template.md`
+   - `.specify/templates/loop-contract-template.json`
+   - `.specify/templates/working-backwards-prfaq-template.md`
+   - `.specify/templates/business-owner-summary-template.md`
+   - `.specify/templates/cto-architecture-summary-template.md`
+   - `.specify/templates/ciso-security-summary-template.md`
+   - `.specify/templates/stakeholder-review-index-template.md`
+   - `.specify/scripts/bash/create-new-feature.sh`
+   - `.specify/scripts/node/parse-stage-command.mjs`
+   - `.specify/scripts/node/gofer-loop-audit.mjs`
+   - `.specify/scripts/hooks/post-tool-use.mjs`
+   - `.specify/scripts/powershell/install-optional-tools.ps1`
+   - `.specify/templates/gofer-model-policy.yaml`
+   - `.specify/memory/gofer-model-policy.yaml`
+   - `.specify/specs/`
+   - `.specify/memory/`
+3. Check host-specific repo-owned files when relevant:
+   - Claude: `AGENTS.md`, `CLAUDE.md`, `.claude/settings.json`
+   - Codex: `AGENTS.md`
+   - Copilot: `.github/copilot-instructions.md`
+   - VS Code extension mirrors Claude/Copilot/Gemini resources itself and should still keep the core scaffold healthy
+4. If the repo already has the workspace checker script, prefer running:
+   - `node .specify/scripts/node/gofer-workspace-check.mjs --host codex --json`
+5. If the workspace is missing or stale, ask exactly:
+   - **"This repo is missing or stale for Gofer. Initialize/update it now?"**
+6. If the user says yes, run the Gofer workspace bootstrap helper and then resume this command from the top.
+7. If the user says no, stop and explain that Gofer stage/helper work depends on the repo-owned scaffold.
+
+
+# Gofer TDD
+
+## EAI Platform Session Preflight
+
+Before any Gofer stage/helper command does pipeline work:
+
+1. Treat durable delivery as EAI Platform delivery by default, with Azure second
+   and every other stack only by explicit exception.
+2. Run `eai whoami` and confirm the EAI CLI is installed, the user is logged in,
+   and an active tenant is visible.
+3. If `eai` is missing, `eai whoami` fails, the token is expired, or no active
+   tenant is available, stop and run `/gofer:eai-first-run` or ask the user to
+   approve login/setup before continuing.
+4. For EAI app delivery, do not continue into research, specification, planning,
+   tasks, implementation, or validation until
+   `.specify/specs/{feature}/eai-preflight.md` records login, tenant, template,
+   app-readiness, and next-action evidence.
+5. Do not write tokens, secrets, private tenant IDs, or local `.env` values into
+   Gofer artifacts; record only product-safe readiness status and evidence.
+
+## Token And Cost Policy
+<!-- gofer:token-cost-policy:start -->
+
+Before spawning agents, calling tools, or loading large files:
+
+1. Treat `.specify/memory/gofer-model-policy.yaml` as the repo-owned source of truth for simple, medium, hard, and arbiter model routing. If it is missing, run `/gofer:bootstrap-workspace` before continuing.
+2. Use the cheapest capable model first.
+   - Claude: Haiku for scouting/extraction; Sonnet for normal implementation, synthesis, validation, and security; Opus for high-risk arbitration or release-critical failures.
+   - Codex/OpenAI: GPT mini for simple coding; GPT nano only for locate/classify/summarize/mechanical work; GPT-5.3-Codex or flagship GPT for tool-heavy coding, architecture, and release-critical validation.
+   - Gemini: Flash-Lite for cheap large-context scan/summarize; Flash for default research synthesis; Pro for large-context architecture or high-risk arbitration.
+   - Copilot: prefer Auto for simple and default work; ask the user before choosing a paid/high-tier picker model for hard security, architecture, or release gates.
+3. Keep raw tool output out of the main conversation context. Save stable findings to `.specify/specs/{feature}/context-bundle.md`, then work from summaries.
+4. Use provider prompt/context caching only for stable, non-secret prefixes: Gofer scaffold, AGENTS/CLAUDE/Copilot instructions, constitution, repo map, stage contracts, and validation rubric.
+5. Before continuing after large research, planning, implementation, or validation bursts, checkpoint the durable artifacts and compact/clear/resume context when the host supports it.
+6. Escalate model tier only when a cheaper pass is low-confidence, contradictory, security-sensitive, or blocking release quality.
+<!-- gofer:token-cost-policy:end -->
+
+Guide a red-green-refactor loop for the active feature and write the cycle log
+to `.specify/specs/{feature}/tdd-session.md`.
+
+Use this helper when you want to work test-first inside the existing Gofer
+implementation flow without replacing `/5_gofer_implement` or `/9_gofer_tests`.
+
+When you run this helper:
+
+1. Read the feature acceptance criteria and the current task scope before
+   proposing test changes.
+2. Define the smallest failing test that proves the next slice of behavior is
+   missing.
+3. Keep the cycle explicit: red, green, then refactor.
+4. Record only feature-local artifacts and paths.
+5. Write the artifact only to `.specify/specs/{feature}/tdd-session.md`.
+6. If the target file already exists, replace it and prepend a regeneration note
+   such as `<!-- regenerated at [ISO timestamp] -->`.
+7. Include the minimum provenance schema:
+   - `GeneratedAt`
+   - `SourceCommandId`
+   - `SourceInputs`
+   - `OverwriteNoticeWhenApplicable`
+
+The generated TDD session must contain these sections:
+
+- `## Provenance`
+- `## Acceptance Criteria Linkage`
+- `## Red`
+- `## Green`
+- `## Refactor`
+
+Keep the content Gofer-owned. Do not copy upstream Matt Pocock skill text
+verbatim.

package/resources/gofer/system-skills/gofer_vocabulary/SKILL.md

@@ -0,0 +1,112 @@
+---
+name: gofer:vocabulary
+description: "Extract domain terminology into a canonical feature glossary."
+---
+
+## Workspace Preflight
+
+Before doing stage/helper work:
+
+1. Resolve the repository root.
+2. Check the core Gofer sentinels:
+   - `.specify/.gofer-version`
+   - `.specify/commands/0_gofer_start.md`
+   - `.specify/templates/spec-template.md`
+   - `.specify/templates/loop-contract-template.json`
+   - `.specify/templates/working-backwards-prfaq-template.md`
+   - `.specify/templates/business-owner-summary-template.md`
+   - `.specify/templates/cto-architecture-summary-template.md`
+   - `.specify/templates/ciso-security-summary-template.md`
+   - `.specify/templates/stakeholder-review-index-template.md`
+   - `.specify/scripts/bash/create-new-feature.sh`
+   - `.specify/scripts/node/parse-stage-command.mjs`
+   - `.specify/scripts/node/gofer-loop-audit.mjs`
+   - `.specify/scripts/hooks/post-tool-use.mjs`
+   - `.specify/scripts/powershell/install-optional-tools.ps1`
+   - `.specify/templates/gofer-model-policy.yaml`
+   - `.specify/memory/gofer-model-policy.yaml`
+   - `.specify/specs/`
+   - `.specify/memory/`
+3. Check host-specific repo-owned files when relevant:
+   - Claude: `AGENTS.md`, `CLAUDE.md`, `.claude/settings.json`
+   - Codex: `AGENTS.md`
+   - Copilot: `.github/copilot-instructions.md`
+   - VS Code extension mirrors Claude/Copilot/Gemini resources itself and should still keep the core scaffold healthy
+4. If the repo already has the workspace checker script, prefer running:
+   - `node .specify/scripts/node/gofer-workspace-check.mjs --host codex --json`
+5. If the workspace is missing or stale, ask exactly:
+   - **"This repo is missing or stale for Gofer. Initialize/update it now?"**
+6. If the user says yes, run the Gofer workspace bootstrap helper and then resume this command from the top.
+7. If the user says no, stop and explain that Gofer stage/helper work depends on the repo-owned scaffold.
+
+
+# Gofer Vocabulary
+
+## EAI Platform Session Preflight
+
+Before any Gofer stage/helper command does pipeline work:
+
+1. Treat durable delivery as EAI Platform delivery by default, with Azure second
+   and every other stack only by explicit exception.
+2. Run `eai whoami` and confirm the EAI CLI is installed, the user is logged in,
+   and an active tenant is visible.
+3. If `eai` is missing, `eai whoami` fails, the token is expired, or no active
+   tenant is available, stop and run `/gofer:eai-first-run` or ask the user to
+   approve login/setup before continuing.
+4. For EAI app delivery, do not continue into research, specification, planning,
+   tasks, implementation, or validation until
+   `.specify/specs/{feature}/eai-preflight.md` records login, tenant, template,
+   app-readiness, and next-action evidence.
+5. Do not write tokens, secrets, private tenant IDs, or local `.env` values into
+   Gofer artifacts; record only product-safe readiness status and evidence.
+
+## Token And Cost Policy
+<!-- gofer:token-cost-policy:start -->
+
+Before spawning agents, calling tools, or loading large files:
+
+1. Treat `.specify/memory/gofer-model-policy.yaml` as the repo-owned source of truth for simple, medium, hard, and arbiter model routing. If it is missing, run `/gofer:bootstrap-workspace` before continuing.
+2. Use the cheapest capable model first.
+   - Claude: Haiku for scouting/extraction; Sonnet for normal implementation, synthesis, validation, and security; Opus for high-risk arbitration or release-critical failures.
+   - Codex/OpenAI: GPT mini for simple coding; GPT nano only for locate/classify/summarize/mechanical work; GPT-5.3-Codex or flagship GPT for tool-heavy coding, architecture, and release-critical validation.
+   - Gemini: Flash-Lite for cheap large-context scan/summarize; Flash for default research synthesis; Pro for large-context architecture or high-risk arbitration.
+   - Copilot: prefer Auto for simple and default work; ask the user before choosing a paid/high-tier picker model for hard security, architecture, or release gates.
+3. Keep raw tool output out of the main conversation context. Save stable findings to `.specify/specs/{feature}/context-bundle.md`, then work from summaries.
+4. Use provider prompt/context caching only for stable, non-secret prefixes: Gofer scaffold, AGENTS/CLAUDE/Copilot instructions, constitution, repo map, stage contracts, and validation rubric.
+5. Before continuing after large research, planning, implementation, or validation bursts, checkpoint the durable artifacts and compact/clear/resume context when the host supports it.
+6. Escalate model tier only when a cheaper pass is low-confidence, contradictory, security-sensitive, or blocking release quality.
+<!-- gofer:token-cost-policy:end -->
+
+Extract the feature's shared domain language into a canonical glossary and
+write it to `.specify/specs/{feature}/glossary.md`.
+
+Use this when research, specification, contracts, or implementation rely on
+terms that need stable definitions across Claude, Copilot, Codex, and Gemini
+surfaces.
+
+When you run this helper:
+
+1. Read the feature-local context that already exists (`research.md`, `spec.md`,
+   `plan.md`, `contracts/`, `quickstart.md`) and ignore unrelated repository
+   content.
+2. Identify project-specific terms, acronyms, role names, workflow names, and
+   overloaded words that need precise definitions.
+3. Write the artifact only to `.specify/specs/{feature}/glossary.md`. Never
+   write to repo root or any provider-specific surface directory.
+4. If the target file already exists, replace it and prepend a regeneration note
+   such as `<!-- regenerated at [ISO timestamp] -->`.
+5. Include the minimum provenance schema:
+   - `GeneratedAt`
+   - `SourceCommandId`
+   - `SourceInputs`
+   - `OverwriteNoticeWhenApplicable`
+
+The generated glossary must contain these sections:
+
+- `## Provenance`
+- `## Term Entries`
+- `## Definitions`
+- `## Source Artifacts`
+
+Keep the content Gofer-owned and concise. Do not copy upstream Matt Pocock
+skill text verbatim.

package/resources/gofer/system-skills/gofer_zoom_out/SKILL.md

@@ -0,0 +1,112 @@
+---
+name: gofer:zoom-out
+description: "Show how the current feature connects to broader system boundaries."
+---
+
+## Workspace Preflight
+
+Before doing stage/helper work:
+
+1. Resolve the repository root.
+2. Check the core Gofer sentinels:
+   - `.specify/.gofer-version`
+   - `.specify/commands/0_gofer_start.md`
+   - `.specify/templates/spec-template.md`
+   - `.specify/templates/loop-contract-template.json`
+   - `.specify/templates/working-backwards-prfaq-template.md`
+   - `.specify/templates/business-owner-summary-template.md`
+   - `.specify/templates/cto-architecture-summary-template.md`
+   - `.specify/templates/ciso-security-summary-template.md`
+   - `.specify/templates/stakeholder-review-index-template.md`
+   - `.specify/scripts/bash/create-new-feature.sh`
+   - `.specify/scripts/node/parse-stage-command.mjs`
+   - `.specify/scripts/node/gofer-loop-audit.mjs`
+   - `.specify/scripts/hooks/post-tool-use.mjs`
+   - `.specify/scripts/powershell/install-optional-tools.ps1`
+   - `.specify/templates/gofer-model-policy.yaml`
+   - `.specify/memory/gofer-model-policy.yaml`
+   - `.specify/specs/`
+   - `.specify/memory/`
+3. Check host-specific repo-owned files when relevant:
+   - Claude: `AGENTS.md`, `CLAUDE.md`, `.claude/settings.json`
+   - Codex: `AGENTS.md`
+   - Copilot: `.github/copilot-instructions.md`
+   - VS Code extension mirrors Claude/Copilot/Gemini resources itself and should still keep the core scaffold healthy
+4. If the repo already has the workspace checker script, prefer running:
+   - `node .specify/scripts/node/gofer-workspace-check.mjs --host codex --json`
+5. If the workspace is missing or stale, ask exactly:
+   - **"This repo is missing or stale for Gofer. Initialize/update it now?"**
+6. If the user says yes, run the Gofer workspace bootstrap helper and then resume this command from the top.
+7. If the user says no, stop and explain that Gofer stage/helper work depends on the repo-owned scaffold.
+
+
+# Gofer Zoom Out
+
+## EAI Platform Session Preflight
+
+Before any Gofer stage/helper command does pipeline work:
+
+1. Treat durable delivery as EAI Platform delivery by default, with Azure second
+   and every other stack only by explicit exception.
+2. Run `eai whoami` and confirm the EAI CLI is installed, the user is logged in,
+   and an active tenant is visible.
+3. If `eai` is missing, `eai whoami` fails, the token is expired, or no active
+   tenant is available, stop and run `/gofer:eai-first-run` or ask the user to
+   approve login/setup before continuing.
+4. For EAI app delivery, do not continue into research, specification, planning,
+   tasks, implementation, or validation until
+   `.specify/specs/{feature}/eai-preflight.md` records login, tenant, template,
+   app-readiness, and next-action evidence.
+5. Do not write tokens, secrets, private tenant IDs, or local `.env` values into
+   Gofer artifacts; record only product-safe readiness status and evidence.
+
+## Token And Cost Policy
+<!-- gofer:token-cost-policy:start -->
+
+Before spawning agents, calling tools, or loading large files:
+
+1. Treat `.specify/memory/gofer-model-policy.yaml` as the repo-owned source of truth for simple, medium, hard, and arbiter model routing. If it is missing, run `/gofer:bootstrap-workspace` before continuing.
+2. Use the cheapest capable model first.
+   - Claude: Haiku for scouting/extraction; Sonnet for normal implementation, synthesis, validation, and security; Opus for high-risk arbitration or release-critical failures.
+   - Codex/OpenAI: GPT mini for simple coding; GPT nano only for locate/classify/summarize/mechanical work; GPT-5.3-Codex or flagship GPT for tool-heavy coding, architecture, and release-critical validation.
+   - Gemini: Flash-Lite for cheap large-context scan/summarize; Flash for default research synthesis; Pro for large-context architecture or high-risk arbitration.
+   - Copilot: prefer Auto for simple and default work; ask the user before choosing a paid/high-tier picker model for hard security, architecture, or release gates.
+3. Keep raw tool output out of the main conversation context. Save stable findings to `.specify/specs/{feature}/context-bundle.md`, then work from summaries.
+4. Use provider prompt/context caching only for stable, non-secret prefixes: Gofer scaffold, AGENTS/CLAUDE/Copilot instructions, constitution, repo map, stage contracts, and validation rubric.
+5. Before continuing after large research, planning, implementation, or validation bursts, checkpoint the durable artifacts and compact/clear/resume context when the host supports it.
+6. Escalate model tier only when a cheaper pass is low-confidence, contradictory, security-sensitive, or blocking release quality.
+<!-- gofer:token-cost-policy:end -->
+
+Expand the current feature into its surrounding system context and write the
+result to `.specify/specs/{feature}/zoom-out-report.md`.
+
+Use this helper when the feature needs broader architectural framing: upstream
+dependencies, downstream consumers, or cross-cutting risks that are easy to
+miss inside a narrow task view.
+
+When you run this helper:
+
+1. Read the approved feature-local artifacts and identify the current boundary
+   being changed.
+2. Map the upstream inputs, downstream consumers, and cross-cutting impacts that
+   materially affect the feature.
+3. Keep the output feature-local and architecture-focused.
+4. Write the artifact only to
+   `.specify/specs/{feature}/zoom-out-report.md`.
+5. If the target file already exists, replace it and prepend a regeneration note
+   such as `<!-- regenerated at [ISO timestamp] -->`.
+6. Include the minimum provenance schema:
+   - `GeneratedAt`
+   - `SourceCommandId`
+   - `SourceInputs`
+   - `OverwriteNoticeWhenApplicable`
+
+The generated zoom-out report must contain these sections:
+
+- `## Provenance`
+- `## Current Boundary`
+- `## Upstream/Downstream`
+- `## Cross-Cutting Impact`
+
+Keep the content Gofer-owned. Do not copy upstream Matt Pocock skill text
+verbatim.

package/resources/gofer/templates/agent-file-template.md

@@ -0,0 +1,28 @@
+# [PROJECT NAME] Development Guidelines
+
+Auto-generated from all feature plans. Last updated: [DATE]
+
+## Active Technologies
+
+[EXTRACTED FROM ALL PLAN.MD FILES]
+
+## Project Structure
+
+```text
+[ACTUAL STRUCTURE FROM PLANS]
+```
+
+## Commands
+
+[ONLY COMMANDS FOR ACTIVE TECHNOLOGIES]
+
+## Code Style
+
+[LANGUAGE-SPECIFIC, ONLY FOR LANGUAGES IN USE]
+
+## Recent Changes
+
+[LAST 3 FEATURES AND WHAT THEY ADDED]
+
+<!-- MANUAL ADDITIONS START -->
+<!-- MANUAL ADDITIONS END -->

package/resources/gofer/templates/assumptions-template.md

@@ -0,0 +1,94 @@
+---
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+last-reviewed: '{{ISO-timestamp}}'
+status: active
+---
+
+# Assumptions Register: {{feature-name}}
+
+## Overview
+
+This document tracks all assumptions made during the development of
+{{feature-name}}. Assumptions are identified during problem validation,
+research, specification, and implementation. Each assumption is tracked through
+its lifecycle.
+
+## Status Legend
+
+| Status          | Meaning                         | Action Required      |
+| --------------- | ------------------------------- | -------------------- |
+| VALIDATED       | Confirmed true through evidence | None                 |
+| UNVALIDATED     | Assumed true, not yet checked   | Verify before launch |
+| DISPROVEN       | Found to be false               | Spec revision needed |
+| PARTIALLY_VALID | True under some conditions only | Scope adjustment     |
+
+## Critical Assumptions (High Risk)
+
+These assumptions, if wrong, would significantly impact the solution:
+
+| ID  | Assumption | Type      | Status      | Evidence           | Impact if Wrong      |
+| --- | ---------- | --------- | ----------- | ------------------ | -------------------- |
+| A1  | {{text}}   | Business  | UNVALIDATED | {{source-or-none}} | {{impact-statement}} |
+| A2  | {{text}}   | Technical | UNVALIDATED | {{source-or-none}} | {{impact-statement}} |
+
+## Business Assumptions
+
+| ID  | Assumption | Status      | Evidence | Added During       |
+| --- | ---------- | ----------- | -------- | ------------------ |
+| BA1 | {{text}}   | UNVALIDATED | —        | Problem Validation |
+| BA2 | {{text}}   | UNVALIDATED | —        | Discovery          |
+
+## Technical Assumptions
+
+| ID  | Assumption | Status      | Evidence | Added During |
+| --- | ---------- | ----------- | -------- | ------------ |
+| TA1 | {{text}}   | UNVALIDATED | —        | Research     |
+| TA2 | {{text}}   | UNVALIDATED | —        | Planning     |
+
+## User Behavior Assumptions
+
+| ID  | Assumption | Status      | Evidence | Added During |
+| --- | ---------- | ----------- | -------- | ------------ |
+| UA1 | {{text}}   | UNVALIDATED | —        | Discovery    |
+
+## Data Assumptions
+
+| ID  | Assumption | Status      | Evidence | Added During |
+| --- | ---------- | ----------- | -------- | ------------ |
+| DA1 | {{text}}   | UNVALIDATED | —        | Research     |
+
+## Regulatory Assumptions
+
+| ID  | Assumption | Status      | Evidence | Added During       |
+| --- | ---------- | ----------- | -------- | ------------------ |
+| RA1 | {{text}}   | UNVALIDATED | —        | Problem Validation |
+
+## Disproven Assumptions (Action Log)
+
+| ID  | Assumption | Disproven When | Evidence Against | Affected Specs | Corrective Action | Status |
+| --- | ---------- | -------------- | ---------------- | -------------- | ----------------- | ------ |
+| —   | —          | —              | —                | —              | —                 | —      |
+
+## Validation Schedule
+
+| Assumption ID | Verify By      | Method                  | Owner   |
+| ------------- | -------------- | ----------------------- | ------- |
+| A1            | Before coding  | {{verification-method}} | {{who}} |
+| A2            | During testing | {{verification-method}} | {{who}} |
+
+## Drift Controls
+
+Use this table to force a mini-loop when assumptions expire, are disproven, or
+are invalidated by new product/platform evidence.
+
+| Assumption ID | Status      | Owner   | Expires At        | Revalidate Trigger         | Reopen Stage |
+| ------------- | ----------- | ------- | ----------------- | -------------------------- | ------------ |
+| A1            | UNVALIDATED | {{who}} | {{ISO-timestamp}} | {{event-or-change-signal}} | 1_research   |
+| A2            | UNVALIDATED | {{who}} | {{ISO-timestamp}} | {{event-or-change-signal}} | 2_specify    |
+
+## Review History
+
+| Date         | Reviewer | Changes Made               |
+| ------------ | -------- | -------------------------- |
+| {{ISO-date}} | Claude   | Initial assumption capture |

package/resources/gofer/templates/audit-history-template.md

@@ -0,0 +1,35 @@
+---
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+workflowProfile: enterpriseai
+---
+
+# Audit History: {{feature-name}}
+
+## Finding Register
+
+| Finding ID | Source     | Severity            | Status                              | Recurrence | Owner     | Expiry           | Evidence |
+| ---------- | ---------- | ------------------- | ----------------------------------- | ---------- | --------- | ---------------- | -------- |
+| AUD-001    | {{source}} | Red / Yellow / Gray | Open / Fixed / Accepted / Escalated | {{count}}  | {{owner}} | {{date-or-none}} | {{path}} |
+
+## Accepted Exceptions
+
+| Finding ID     | Decision Owner | Reason     | Compensating Control | Expiry   | Review Cadence |
+| -------------- | -------------- | ---------- | -------------------- | -------- | -------------- |
+| {{finding-id}} | {{owner}}      | {{reason}} | {{control}}          | {{date}} | {{cadence}}    |
+
+## Recurring Finding Escalation
+
+Recurring red findings must escalate to the persona with decision rights for the
+affected area:
+
+| Area                              | Decision Owner          |
+| --------------------------------- | ----------------------- |
+| Business value or adoption        | Business owner          |
+| Architecture or platform fit      | Enterprise architecture |
+| Identity, security, residual risk | CISO                    |
+| Data model, lineage, quality      | Data architecture       |
+| Delivery readiness                | Internal delivery       |
+| Operating model                   | CIO / COO               |
+| Financial risk or value tracking  | CFO                     |
+| Policy exception                  | Risk/compliance         |

package/resources/gofer/templates/brand/brand-profile-template.json

@@ -0,0 +1,45 @@
+{
+  "organizationName": "",
+  "documentAudience": "mixed",
+  "brandMode": "neutral",
+  "logo": {
+    "primaryPath": "",
+    "secondaryPath": "",
+    "usage": "none",
+    "status": "pending"
+  },
+  "colors": {
+    "primary": "#111827",
+    "secondary": "#f8fafc",
+    "accent": "#0f766e",
+    "background": "#ffffff",
+    "text": "#111827"
+  },
+  "typography": {
+    "headingFont": "Aptos Display",
+    "bodyFont": "Aptos",
+    "monoFont": "Cascadia Code",
+    "baseSize": "11pt",
+    "h1Size": "28pt",
+    "h2Size": "18pt",
+    "lineHeight": "1.35"
+  },
+  "layout": {
+    "pageSize": "A4",
+    "margins": "standard",
+    "headerText": "",
+    "footerText": "",
+    "confidentialityLabel": ""
+  },
+  "visualStyle": {
+    "diagramTheme": "executive",
+    "mermaidTheme": "base",
+    "marpThemePath": ".specify/templates/brand/marp-theme-template.css"
+  },
+  "review": {
+    "owner": "",
+    "approvedBy": "",
+    "approvedAt": "",
+    "sourceEvidence": []
+  }
+}