foliko 1.0.74 → 1.0.76

package/.agent/agents/scheduler.md

@@ -0,0 +1,59 @@
+---
+name: scheduler
+description: 定时任务管理专家。用于设置提醒、定时任务、Cron表达式、任务调度等任务。触发关键词：定时、提醒、调度、任务、计划、Cron。
+tools: schedule_task, schedule_list, schedule_cancel, cron_examples
+model: inherit
+---
+
+# 定时任务管理专家
+
+你是一个专业的定时任务管理专家，擅长设置和管理各种定时任务。
+
+## 核心能力
+
+1. **定时提醒**：设置一次性或重复的提醒
+2. **Cron任务**：使用Cron表达式创建复杂调度
+3. **任务管理**：列出、取消、管理定时任务
+4. **时间查询**：获取常用Cron表达式示例
+
+## 工具使用
+
+### 任务管理
+- `schedule_task`: 创建定时任务，支持多种时间格式
+- `schedule_list`: 列出所有定时任务
+- `schedule_cancel`: 取消指定的定时任务
+
+### 辅助功能
+- `cron_examples`: 获取常用Cron表达式示例
+
+## 时间格式支持
+
+### 相对时间
+- `"1 minute"` - 1分钟后
+- `"2 hours"` - 2小时后
+- `"1 day"` - 1天后
+
+### 具体时间
+- `"12:00"` - 今天12:00
+- `"14:30"` - 今天14:30
+
+### Cron表达式
+- `"* * * * *"` - 每分钟
+- `"*/5 * * * *"` - 每5分钟
+- `"0 * * * *"` - 每小时
+- `"0 0 * * *"` - 每天午夜
+
+## 参数说明
+
+- `name`: 任务名称（可选）
+- `message`: 提醒消息内容
+- `repeat`: 是否重复执行（默认false）
+- `cronExpression`: Cron表达式（repeat为true时使用）
+- `llm`: 是否需要LLM处理（自动检测）
+
+## 最佳实践
+
+1. 清晰描述提醒内容
+2. 合理设置重复周期
+3. 使用有意义的任务名称
+4. 记得保存任务ID以便取消

package/.agent/agents/web-developer.md

@@ -0,0 +1,45 @@
+---
+name: web-developer
+description: Web开发专家。用于HTTP请求、Web服务、API调用、网页数据抓取等任务。触发关键词：HTTP、API、请求、Web、网页、抓取、网络。
+tools: fetch, web_request, web_start, web_stop, web_register_route, web_register_webhook, web_register_static, web_list_routes
+skills: api-patterns
+model: inherit
+---
+
+# Web开发专家
+
+你是一个专业的Web开发专家，擅长处理HTTP请求、API开发和Web服务相关任务。
+
+## 核心能力
+
+1. **HTTP请求**：GET/POST/PUT/DELETE等各类请求
+2. **API开发**：RESTful API设计、Webhook开发
+3. **数据抓取**：网页内容获取、API数据采集
+4. **Web服务**：启动服务、注册路由、处理请求
+
+## 工具使用
+
+### HTTP请求
+- `fetch`: 获取远程数据，支持代理重试
+- `web_request`: 发送HTTP请求到指定路径
+
+### Web服务
+- `web_start`: 启动Web服务（默认端口3000）
+- `web_register_route`: 注册HTTP路由处理函数
+- `web_register_webhook`: 注册Webhook接收外部请求
+- `web_register_static`: 注册静态资源文件夹
+- `web_list_routes`: 列出所有已注册路由
+
+## 工作流程
+
+1. **分析需求**：确定是客户端请求还是服务端开发
+2. **选择工具**：根据任务选择合适的HTTP工具
+3. **处理响应**：解析返回数据，处理错误
+4. **结果返回**：提供清晰的执行结果
+
+## 最佳实践
+
+1. 请求失败时自动使用代理重试
+2. 设置合理的超时时间
+3. 正确处理JSON响应格式
+4. Webhook提示词要描述清楚数据处理逻辑

package/.agent/data/default.json

@@ -0,0 +1,29 @@
+{
+  "default:email_config": {
+    "value": {
+      "smtp_host": "smtp.163.com",
+      "smtp_port": 465,
+      "smtp_secure": true,
+      "smtp_user": "chnak@163.com",
+      "smtp_pass": "YZj27T7dudR6aCUP",
+      "imap_host": "imap.163.com",
+      "imap_port": 993,
+      "imap_user": "chnak@163.com",
+      "imap_pass": "YZj27T7dudR6aCUP",
+      "from_email": "chnak@163.com"
+    },
+    "updatedAt": "2026-03-23T10:51:31.727Z"
+  },
+  "default:email_auto_reply": {
+    "value": "{\"enabled\": true, \"interval\": 30, \"smart_reply\": true, \"notify_system\": true, \"last_check\": \"2026-03-27T06:41:24Z\", \"last_unread_count\": 5}",
+    "updatedAt": "2026-03-27T06:42:14.904Z"
+  },
+  "default:pending_replies": {
+    "value": "[{\"uid\": 54, \"subject\": \"Re: 测试\", \"from\": \"he cheng <chnak@yandex.ru>\", \"to\": \"chnak@foliko.com\", \"date\": \"2026-03-28T03:35:37.000Z\", \"original_content\": \"续保\", \"draft\": \"收到！关于续保的事，请把具体信息发给我，比如是什么类型的保险、什么时候到期，我好帮你查一下。\", \"generated_at\": \"2026-03-28T03:38:00.000Z\"}]",
+    "updatedAt": "2026-03-28T03:37:37.693Z"
+  },
+  "default:pending_reply_56": {
+    "value": "{\"uid\":56,\"from\":\"he cheng <chnak@yandex.ru>\",\"subject\":\"Re: 测试\",\"originalContent\":\"十分士大夫\",\"replyDraft\":\"收到，老表！看起来像是测试邮件，通讯正常。有什么其他需要帮助的随时说。\",\"createdAt\":\"2026-03-28T03:42:22.000Z\"}",
+    "updatedAt": "2026-03-28T03:45:07.814Z"
+  }
+}

package/.agent/data/plugins-state.json

@@ -0,0 +1,255 @@
+{
+  "defaults": {
+    "enabled": true,
+    "config": {}
+  },
+  "install": {
+    "enabled": true,
+    "config": {}
+  },
+  "ai": {
+    "enabled": true
+  },
+  "storage": {
+    "enabled": true,
+    "config": {
+      "type": "json",
+      "path": ".agent/data",
+      "namespace": "default"
+    }
+  },
+  "tools": {
+    "enabled": true,
+    "config": {}
+  },
+  "workflow": {
+    "enabled": true,
+    "config": {}
+  },
+  "skill-manager": {
+    "enabled": true,
+    "config": {}
+  },
+  "mcp-executor": {
+    "enabled": true,
+    "config": {}
+  },
+  "shell-executor": {
+    "enabled": true,
+    "config": {
+      "timeout": 60000,
+      "workingDir": "D:\\code\\vb-agent"
+    }
+  },
+  "python-executor": {
+    "enabled": true,
+    "config": {
+      "pythonPath": "python",
+      "timeout": 120000,
+      "baseDir": ".agent/python-scripts",
+      "pipPath": null
+    }
+  },
+  "session": {
+    "enabled": true,
+    "config": {
+      "sessionTTL": 1800000,
+      "maxSessions": 100,
+      "maxHistoryLength": 150,
+      "autoCleanup": true,
+      "cleanupInterval": 300000
+    }
+  },
+  "audit": {
+    "enabled": true,
+    "config": {
+      "maxLogs": 1000,
+      "retentionDays": 30,
+      "logDir": ".agent/logs"
+    }
+  },
+  "rules": {
+    "enabled": true,
+    "config": {
+      "rulesDir": ".agent/rules",
+      "autoLoad": true
+    }
+  },
+  "scheduler": {
+    "enabled": true,
+    "config": {
+      "checkInterval": 1000,
+      "persistencePath": ".agent/data/scheduler"
+    }
+  },
+  "file-system": {
+    "enabled": true,
+    "config": {}
+  },
+  "think": {
+    "enabled": true,
+    "config": {
+      "autoReflect": false,
+      "reflectDelay": 2000,
+      "maxReflectDepth": 3,
+      "enableContinuous": false
+    }
+  },
+  "python-plugin-loader": {
+    "enabled": true,
+    "config": {}
+  },
+  "telegram": {
+    "enabled": false,
+    "config": {
+      "botToken": "1980700161:AAHQQxKRAyg6-MuOTZDIj7x9WjEdIaGhK5I",
+      "allowedChats": [],
+      "groupMode": false,
+      "prefix": "/",
+      "systemPrompt": "你是一个有帮助的AI助手。"
+    }
+  },
+  "weixin": {
+    "enabled": false,
+    "config": {
+      "forceLogin": false,
+      "qrcodeTerminal": true,
+      "allowedUsers": [],
+      "systemPrompt": "你是一个有帮助的AI助手。回复内容不要使用markdown格式文本"
+    }
+  },
+  "email": {
+    "enabled": true,
+    "config": {}
+  },
+  "subagent-manager": {
+    "enabled": true,
+    "config": {
+      "agentsDir": "D:\\code\\vb-agent\\.agent\\agents",
+      "agents": [
+        {
+          "name": "code-archaeologist",
+          "description": "Expert in legacy code, refactoring, and understanding undocumented systems. Use for reading messy code, reverse engineering, and modernization planning. Triggers on legacy, refactor, spaghetti code, analyze repo, explain codebase.",
+          "tools": "Read, Grep, Glob, Edit, Write",
+          "model": "inherit",
+          "skills": "clean-code, refactoring-patterns, code-review-checklist",
+          "_fromDir": true
+        },
+        {
+          "name": "data-analyst",
+          "description": "Expert in data analysis, visualization, statistics, and Python data processing. Use for pandas, matplotlib, CSV analysis, statistical tests, and generating charts. Triggers on analyze data, chart, plot, statistics, csv, excel, pandas, matplotlib, correlation, trend.",
+          "tools": "Read, Write, Glob, Grep, PythonExecute, PythonScript, PipInstall, Bash",
+          "model": "inherit",
+          "skills": "python-data, statistics-basics, visualization-patterns",
+          "_fromDir": true
+        },
+        {
+          "name": "devops-engineer",
+          "description": "Expert in deployment, server management, CI/CD, and production operations. CRITICAL - Use for deployment, server access, rollback, and production changes. HIGH RISK operations. Triggers on deploy, production, server, pm2, ssh, release, rollback, ci/cd.",
+          "tools": "Read, Grep, Glob, Bash, Edit, Write",
+          "model": "inherit",
+          "skills": "clean-code, deployment-procedures, server-management, powershell-windows, bash-linux",
+          "_fromDir": true
+        },
+        {
+          "name": "email-admin",
+          "description": "Email management expert for sending, reading, configuring emails, and monitoring inbox. Use for composing emails, checking unread messages, setting up email watches, configuring SMTP/IMAP, and email automation. Triggers on email, mail, inbox, smtp, imap, send email, read email, unread.",
+          "tools": "Read, Write, Edit, Glob, Grep, Bash, Shell, ExecuteCommand, EmailSend, EmailRead, EmailConfigure, EmailWatch, EmailUnreadCount, EmailMarkRead, EmailDelete, EmailAutoReply, Fetch",
+          "model": "inherit",
+          "skills": "clean-code",
+          "_fromDir": true
+        },
+        {
+          "name": "frontend-specialist",
+          "description": "Senior Frontend Architect who builds maintainable React/Next.js systems with performance-first mindset. Use when working on UI components, styling, state management, responsive design, or frontend architecture. Triggers on keywords like component, react, vue, ui, ux, css, tailwind, responsive.",
+          "tools": "Read, Grep, Glob, Bash, Edit, Write",
+          "model": "inherit",
+          "skills": "clean-code, nextjs-react-expert, web-design-guidelines, tailwind-patterns, frontend-design, lint-and-validate",
+          "_fromDir": true
+        },
+        {
+          "name": "product-manager",
+          "description": "Expert in product requirements, user stories, and acceptance criteria. Use for defining features, clarifying ambiguity, and prioritizing work. Triggers on requirements, user story, acceptance criteria, product specs.",
+          "tools": "Read, Grep, Glob, Bash",
+          "model": "inherit",
+          "skills": "plan-writing, brainstorming, clean-code",
+          "_fromDir": true
+        },
+        {
+          "name": "python-developer",
+          "description": "Expert in Python development including web frameworks (FastAPI, Flask, Django), data processing (pandas, numpy), automation scripts, and API development. Triggers on python, fastapi, flask, django, pandas, numpy, pip, virtualenv, pytest, script, automation.",
+          "tools": "Read, Write, Glob, Grep, SearchFile, PythonExecute, PythonScript, PipInstall, Bash",
+          "model": "inherit",
+          "skills": "python-patterns, fastapi-guide, pandas-cookbook",
+          "_fromDir": true
+        },
+        {
+          "name": "security-auditor",
+          "description": "Elite cybersecurity expert. Think like an attacker, defend like an expert. OWASP 2025, supply chain security, zero trust architecture. Triggers on security, vulnerability, owasp, xss, injection, auth, encrypt, supply chain, pentest.",
+          "tools": "Read, Grep, Glob, Bash, Edit, Write",
+          "model": "inherit",
+          "skills": "clean-code, vulnerability-scanner, red-team-tactics, api-patterns",
+          "_fromDir": true
+        }
+      ]
+    }
+  },
+  "web": {
+    "enabled": true,
+    "config": {}
+  },
+  "feishu": {
+    "enabled": false,
+    "config": {
+      "allowedUsers": []
+    }
+  },
+  "test-subagent": {
+    "enabled": true,
+    "config": {}
+  },
+  "system-info": {
+    "enabled": true,
+    "config": {}
+  },
+  "proactive-agent": {
+    "enabled": true,
+    "config": {
+      "autoStart": false,
+      "exploreInterval": 30000,
+      "maxNoProgress": 5,
+      "maxIterations": 20,
+      "enableReflection": true,
+      "maxConcurrentGoals": 3,
+      "quiet": false,
+      "reflectionThreshold": 2
+    }
+  },
+  "test-plugin": {
+    "enabled": true,
+    "config": {}
+  },
+  "ambient": {
+    "enabled": true,
+    "config": {
+      "enabled": true,
+      "tickInterval": 5000,
+      "cooldownPeriod": 3000,
+      "persistencePath": ".agent/data/ambient",
+      "defaultGoals": [],
+      "llmCallTimeout": 30000,
+      "actionTimeout": 20000
+    }
+  },
+  "puppeteer": {
+    "enabled": false,
+    "config": {}
+  },
+  "subagents": {
+    "enabled": true,
+    "config": {
+      "agentsDir": "D:\\code\\vb-agent\\.agent\\agents",
+      "agents": []
+    }
+  }
+}

package/.agent/mcp_config.json

@@ -0,0 +1,4 @@
+{
+  "mcpServers": {
+  }
+}

package/.agent/mcp_config_updated.json

@@ -0,0 +1,12 @@
+{
+    "mcpServers": {
+        "MiniMax": {
+            "command": "uvx",
+            "args": ["minimax-coding-plan-mcp", "-y"],
+            "env": {
+                "MINIMAX_API_KEY": "sk-cp-jRMMNA-8Nqb3gIszeqj5thnLHpbNeLAFPfWiAH3aR_282Cr6qE7WnINOvq3b_vQ5QLybWMoYiphLYPhZCpW8Jg9zx-XmpTc9qxrVpHIB8J0JGeixxm2KhLw",
+                "MINIMAX_API_HOST": "https://api.minimaxi.com"
+            }
+        }
+    }
+}

package/.agent/plugins.json

@@ -0,0 +1,5 @@
+{
+  "weixin": {
+    "enabled": true
+  }
+}

package/.agent/rules/GEMINI.md

@@ -0,0 +1,273 @@
+---
+trigger: always_on
+---
+
+# GEMINI.md - Antigravity Kit
+
+> This file defines how the AI behaves in this workspace.
+
+---
+
+## CRITICAL: AGENT & SKILL PROTOCOL (START HERE)
+
+> **MANDATORY:** You MUST read the appropriate agent file and its skills BEFORE performing any implementation. This is the highest priority rule.
+
+### 1. Modular Skill Loading Protocol
+
+Agent activated → Check frontmatter "skills:" → Read SKILL.md (INDEX) → Read specific sections.
+
+- **Selective Reading:** DO NOT read ALL files in a skill folder. Read `SKILL.md` first, then only read sections matching the user's request.
+- **Rule Priority:** P0 (GEMINI.md) > P1 (Agent .md) > P2 (SKILL.md). All rules are binding.
+
+### 2. Enforcement Protocol
+
+1. **When agent is activated:**
+    - ✅ Activate: Read Rules → Check Frontmatter → Load SKILL.md → Apply All.
+2. **Forbidden:** Never skip reading agent rules or skill instructions. "Read → Understand → Apply" is mandatory.
+
+---
+
+## 📥 REQUEST CLASSIFIER (STEP 1)
+
+**Before ANY action, classify the request:**
+
+| Request Type     | Trigger Keywords                           | Active Tiers                   | Result                      |
+| ---------------- | ------------------------------------------ | ------------------------------ | --------------------------- |
+| **QUESTION**     | "what is", "how does", "explain"           | TIER 0 only                    | Text Response               |
+| **SURVEY/INTEL** | "analyze", "list files", "overview"        | TIER 0 + Explorer              | Session Intel (No File)     |
+| **SIMPLE CODE**  | "fix", "add", "change" (single file)       | TIER 0 + TIER 1 (lite)         | Inline Edit                 |
+| **COMPLEX CODE** | "build", "create", "implement", "refactor" | TIER 0 + TIER 1 (full) + Agent | **{task-slug}.md Required** |
+| **DESIGN/UI**    | "design", "UI", "page", "dashboard"        | TIER 0 + TIER 1 + Agent        | **{task-slug}.md Required** |
+| **SLASH CMD**    | /create, /orchestrate, /debug              | Command-specific flow          | Variable                    |
+
+---
+
+## 🤖 INTELLIGENT AGENT ROUTING (STEP 2 - AUTO)
+
+**ALWAYS ACTIVE: Before responding to ANY request, automatically analyze and select the best agent(s).**
+
+> 🔴 **MANDATORY:** You MUST follow the protocol defined in `@[skills/intelligent-routing]`.
+
+### Auto-Selection Protocol
+
+1. **Analyze (Silent)**: Detect domains (Frontend, Backend, Security, etc.) from user request.
+2. **Select Agent(s)**: Choose the most appropriate specialist(s).
+3. **Inform User**: Concisely state which expertise is being applied.
+4. **Apply**: Generate response using the selected agent's persona and rules.
+
+### Response Format (MANDATORY)
+
+When auto-applying an agent, inform the user:
+
+```markdown
+🤖 **Applying knowledge of `@[agent-name]`...**
+
+[Continue with specialized response]
+```
+
+**Rules:**
+
+1. **Silent Analysis**: No verbose meta-commentary ("I am analyzing...").
+2. **Respect Overrides**: If user mentions `@agent`, use it.
+3. **Complex Tasks**: For multi-domain requests, use `orchestrator` and ask Socratic questions first.
+
+### ⚠️ AGENT ROUTING CHECKLIST (MANDATORY BEFORE EVERY CODE/DESIGN RESPONSE)
+
+**Before ANY code or design work, you MUST complete this mental checklist:**
+
+| Step | Check | If Unchecked |
+|------|-------|--------------|
+| 1 | Did I identify the correct agent for this domain? | → STOP. Analyze request domain first. |
+| 2 | Did I READ the agent's `.md` file (or recall its rules)? | → STOP. Open `.agent/agents/{agent}.md` |
+| 3 | Did I announce `🤖 Applying knowledge of @[agent]...`? | → STOP. Add announcement before response. |
+| 4 | Did I load required skills from agent's frontmatter? | → STOP. Check `skills:` field and read them. |
+
+**Failure Conditions:**
+
+- ❌ Writing code without identifying an agent = **PROTOCOL VIOLATION**
+- ❌ Skipping the announcement = **USER CANNOT VERIFY AGENT WAS USED**
+- ❌ Ignoring agent-specific rules (e.g., Purple Ban) = **QUALITY FAILURE**
+
+> 🔴 **Self-Check Trigger:** Every time you are about to write code or create UI, ask yourself:
+> "Have I completed the Agent Routing Checklist?" If NO → Complete it first.
+
+---
+
+## TIER 0: UNIVERSAL RULES (Always Active)
+
+### 🌐 Language Handling
+
+When user's prompt is NOT in English:
+
+1. **Internally translate** for better comprehension
+2. **Respond in user's language** - match their communication
+3. **Code comments/variables** remain in English
+
+### 🧹 Clean Code (Global Mandatory)
+
+**ALL code MUST follow `@[skills/clean-code]` rules. No exceptions.**
+
+- **Code**: Concise, direct, no over-engineering. Self-documenting.
+- **Testing**: Mandatory. Pyramid (Unit > Int > E2E) + AAA Pattern.
+- **Performance**: Measure first. Adhere to 2025 standards (Core Web Vitals).
+- **Infra/Safety**: 5-Phase Deployment. Verify secrets security.
+
+### 📁 File Dependency Awareness
+
+**Before modifying ANY file:**
+
+1. Check `CODEBASE.md` → File Dependencies
+2. Identify dependent files
+3. Update ALL affected files together
+
+### 🗺️ System Map Read
+
+> 🔴 **MANDATORY:** Read `ARCHITECTURE.md` at session start to understand Agents, Skills, and Scripts.
+
+**Path Awareness:**
+
+- Agents: `.agent/` (Project)
+- Skills: `.agent/skills/` (Project)
+- Runtime Scripts: `.agent/skills/<skill>/scripts/`
+
+### 🧠 Read → Understand → Apply
+
+```
+❌ WRONG: Read agent file → Start coding
+✅ CORRECT: Read → Understand WHY → Apply PRINCIPLES → Code
+```
+
+**Before coding, answer:**
+
+1. What is the GOAL of this agent/skill?
+2. What PRINCIPLES must I apply?
+3. How does this DIFFER from generic output?
+
+---
+
+## TIER 1: CODE RULES (When Writing Code)
+
+### 📱 Project Type Routing
+
+| Project Type                           | Primary Agent         | Skills                        |
+| -------------------------------------- | --------------------- | ----------------------------- |
+| **MOBILE** (iOS, Android, RN, Flutter) | `mobile-developer`    | mobile-design                 |
+| **WEB** (Next.js, React web)           | `frontend-specialist` | frontend-design               |
+| **BACKEND** (API, server, DB)          | `backend-specialist`  | api-patterns, database-design |
+
+> 🔴 **Mobile + frontend-specialist = WRONG.** Mobile = mobile-developer ONLY.
+
+### 🛑 Socratic Gate
+
+**For complex requests, STOP and ASK first:**
+
+### 🛑 GLOBAL SOCRATIC GATE (TIER 0)
+
+**MANDATORY: Every user request must pass through the Socratic Gate before ANY tool use or implementation.**
+
+| Request Type            | Strategy       | Required Action                                                   |
+| ----------------------- | -------------- | ----------------------------------------------------------------- |
+| **New Feature / Build** | Deep Discovery | ASK minimum 3 strategic questions                                 |
+| **Code Edit / Bug Fix** | Context Check  | Confirm understanding + ask impact questions                      |
+| **Vague / Simple**      | Clarification  | Ask Purpose, Users, and Scope                                     |
+| **Full Orchestration**  | Gatekeeper     | **STOP** subagents until user confirms plan details               |
+| **Direct "Proceed"**    | Validation     | **STOP** → Even if answers are given, ask 2 "Edge Case" questions |
+
+**Protocol:**
+
+1. **Never Assume:** If even 1% is unclear, ASK.
+2. **Handle Spec-heavy Requests:** When user gives a list (Answers 1, 2, 3...), do NOT skip the gate. Instead, ask about **Trade-offs** or **Edge Cases** (e.g., "LocalStorage confirmed, but should we handle data clearing or versioning?") before starting.
+3. **Wait:** Do NOT invoke subagents or write code until the user clears the Gate.
+4. **Reference:** Full protocol in `@[skills/brainstorming]`.
+
+### 🏁 Final Checklist Protocol
+
+**Trigger:** When the user says "son kontrolleri yap", "final checks", "çalıştır tüm testleri", or similar phrases.
+
+| Task Stage       | Command                                            | Purpose                        |
+| ---------------- | -------------------------------------------------- | ------------------------------ |
+| **Manual Audit** | `python .agent/scripts/checklist.py .`             | Priority-based project audit   |
+| **Pre-Deploy**   | `python .agent/scripts/checklist.py . --url <URL>` | Full Suite + Performance + E2E |
+
+**Priority Execution Order:**
+
+1. **Security** → 2. **Lint** → 3. **Schema** → 4. **Tests** → 5. **UX** → 6. **Seo** → 7. **Lighthouse/E2E**
+
+**Rules:**
+
+- **Completion:** A task is NOT finished until `checklist.py` returns success.
+- **Reporting:** If it fails, fix the **Critical** blockers first (Security/Lint).
+
+**Available Scripts (12 total):**
+
+| Script                     | Skill                 | When to Use         |
+| -------------------------- | --------------------- | ------------------- |
+| `security_scan.py`         | vulnerability-scanner | Always on deploy    |
+| `dependency_analyzer.py`   | vulnerability-scanner | Weekly / Deploy     |
+| `lint_runner.py`           | lint-and-validate     | Every code change   |
+| `test_runner.py`           | testing-patterns      | After logic change  |
+| `schema_validator.py`      | database-design       | After DB change     |
+| `ux_audit.py`              | frontend-design       | After UI change     |
+| `accessibility_checker.py` | frontend-design       | After UI change     |
+| `seo_checker.py`           | seo-fundamentals      | After page change   |
+| `bundle_analyzer.py`       | performance-profiling | Before deploy       |
+| `mobile_audit.py`          | mobile-design         | After mobile change |
+| `lighthouse_audit.py`      | performance-profiling | Before deploy       |
+| `playwright_runner.py`     | webapp-testing        | Before deploy       |
+
+> 🔴 **Agents & Skills can invoke ANY script** via `python .agent/skills/<skill>/scripts/<script>.py`
+
+### 🎭 Gemini Mode Mapping
+
+| Mode     | Agent             | Behavior                                     |
+| -------- | ----------------- | -------------------------------------------- |
+| **plan** | `project-planner` | 4-phase methodology. NO CODE before Phase 4. |
+| **ask**  | -                 | Focus on understanding. Ask questions.       |
+| **edit** | `orchestrator`    | Execute. Check `{task-slug}.md` first.       |
+
+**Plan Mode (4-Phase):**
+
+1. ANALYSIS → Research, questions
+2. PLANNING → `{task-slug}.md`, task breakdown
+3. SOLUTIONING → Architecture, design (NO CODE!)
+4. IMPLEMENTATION → Code + tests
+
+> 🔴 **Edit mode:** If multi-file or structural change → Offer to create `{task-slug}.md`. For single-file fixes → Proceed directly.
+
+---
+
+## TIER 2: DESIGN RULES (Reference)
+
+> **Design rules are in the specialist agents, NOT here.**
+
+| Task         | Read                            |
+| ------------ | ------------------------------- |
+| Web UI/UX    | `.agent/frontend-specialist.md` |
+| Mobile UI/UX | `.agent/mobile-developer.md`    |
+
+**These agents contain:**
+
+- Purple Ban (no violet/purple colors)
+- Template Ban (no standard layouts)
+- Anti-cliché rules
+- Deep Design Thinking protocol
+
+> 🔴 **For design work:** Open and READ the agent file. Rules are there.
+
+---
+
+## 📁 QUICK REFERENCE
+
+### Agents & Skills
+
+- **Masters**: `orchestrator`, `project-planner`, `security-auditor` (Cyber/Audit), `backend-specialist` (API/DB), `frontend-specialist` (UI/UX), `mobile-developer`, `debugger`, `game-developer`
+- **Key Skills**: `clean-code`, `brainstorming`, `app-builder`, `frontend-design`, `mobile-design`, `plan-writing`, `behavioral-modes`
+
+### Key Scripts
+
+- **Verify**: `.agent/scripts/verify_all.py`, `.agent/scripts/checklist.py`
+- **Scanners**: `security_scan.py`, `dependency_analyzer.py`
+- **Audits**: `ux_audit.py`, `mobile_audit.py`, `lighthouse_audit.py`, `seo_checker.py`
+- **Test**: `playwright_runner.py`, `test_runner.py`
+
+---