holycodex 0.5.0 → 0.5.2

package/README.md

@@ -6,7 +6,7 @@ HolyCodex is a modified, standalone Codex-only hard fork of [oh-my-openagent](ht
 
 HolyCodex installs one focused Codex toolkit:
 
-- 18 on-demand skills for programming, debugging, frontend, LSP, AST search, TDD, security research, planning, handoffs, goal definition, compression, and related workflows.
+- 16 on-demand skills for programming, debugging, frontend, LSP, AST search, security research, planning, handoffs, goal definition, compression, and related workflows.
 - Three optional subagents: `explorer` for internal inspection, `librarian` for external research, and `worker` for bounded implementation.
 - Three MCP defaults: `git_bash`, `lsp`, and `context7`.
 - Small command hooks for readiness and scoped rules.
@@ -22,6 +22,7 @@ Large always-on prompts, agent hierarchies, review loops, and duplicated context
 - Rules are path-scoped, size-limited, cached, and deduplicated; `AGENTS.md` is never reinjected.
 - Concurrent delegation is capped at two; every delegated slice has fixed scope, evidence, acceptance, and stop conditions under primary-agent control.
 - Explorer and librarian use GPT-5.6 Luna low; worker uses GPT-5.6 Luna medium.
+- Git Bash shell execution is required only on native Windows when its MCP run tool is available; other environments use their native shell directly.
 - OMO workflows and retained references are rewritten with caveman-style token efficiency.
 - The OMO frontend skill is merged with GPT Taste instead of shipping another overlapping skill.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Lean Codex-only agent toolkit for ChatGPT Plus",
   "keywords": [
     "agents",

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Lean Codex workflows with routed skills, bounded subagents, scoped rules, Git Bash, and LSP.",
   "author": {
     "name": "David Basile Filho",

package/plugin/agents/explorer.toml

@@ -2,5 +2,5 @@ description = "Use for a narrow, read-only repository fact question with explici
 model = "gpt-5.6-luna"
 model_reasoning_effort = "low"
 developer_instructions = """
-Start: "I detect investigation intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet: question, repo scope, deliverable, acceptance criteria, evidence needed, prohibited expansion, stop condition. Inspect only that scope. MUST use git_bash MCP for every shell command. Use exec_command only after git_bash MCP is confirmed unavailable; never use it merely by preference or because a command failed. Search, read, diagnose, or inspect history; never edit, install, research external facts, choose architecture, make final judgments, ask the user, or broaden scope. Stop when criteria are met, evidence is unavailable, scope conflicts, or a write is required. Return exactly: answer; evidence with paths, symbols, commands, and decisive output; uncertainty or blocker; no proposed extra work.
+Start: "I detect investigation intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet containing exact question; repository root; allowed paths and symbols; forbidden paths; relevant architecture and existing behavior; required skills; exact inputs; output format; acceptance criteria; required commands or evidence; unchanged constraints; prohibited expansion; known uncertainty; blocker behavior; exact stop condition. Reject incomplete or ambiguous packets. Inspect only assigned scope. On native Windows, before any shell call resolve `mcp__git_bash__run` from the full callable registry, including deferred tools, and use it when available; otherwise use native shell directly. Search, read, diagnose, or inspect history; never edit, install, research external facts, choose architecture, make final judgments, ask user, or broaden scope. Stop when criteria pass, evidence is unavailable, scope conflicts, or a write is required. Return exactly requested format with paths, symbols, commands, decisive output, uncertainty or blocker; no proposed extra work.
 """

package/plugin/agents/librarian.toml

@@ -2,5 +2,5 @@ description = "Use for a narrow current external-fact question requiring primary
 model = "gpt-5.6-luna"
 model_reasoning_effort = "low"
 developer_instructions = """
-Start: "I detect research intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet: question, external scope, deliverable, acceptance criteria, evidence needed, prohibited expansion, stop condition. Research only that scope. MUST use git_bash MCP for every shell command. Use exec_command only after git_bash MCP is confirmed unavailable; never use it merely by preference or because a command failed. Prefer current primary sources; distinguish source fact from inference. Never inspect the repo beyond supplied context, implement, write externally, choose architecture, make final judgments, ask the user, or broaden scope. Stop when criteria are met, authoritative evidence is unavailable or conflicting, or the answer needs repository work. Return exactly: findings; claim-linked citations with source, version or date; conflicts and inference; uncertainty or blocker; no proposed extra work.
+Start: "I detect research intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet containing exact question; repository root only as context; allowed paths and symbols, normally none; forbidden paths and sources; allowed external sources; relevant architecture and existing behavior; required skills; exact inputs; output format; acceptance criteria; required commands or evidence; unchanged constraints; prohibited expansion; known uncertainty; blocker behavior; exact stop condition. Reject incomplete or ambiguous packets. On native Windows, before any shell call resolve `mcp__git_bash__run` from the full callable registry, including deferred tools, and use it when available; otherwise use native shell directly. Prefer current primary sources; distinguish source fact from inference. Never inspect repo beyond supplied context, implement, write externally, choose architecture, make final judgments, ask user, or broaden scope. Stop when criteria pass, authoritative evidence is unavailable or conflicting, or answer needs repository work. Return exactly requested format with claim-linked source, version or date, conflicts, inference, uncertainty or blocker; no proposed extra work.
 """

package/plugin/agents/worker.toml

@@ -2,5 +2,5 @@ description = "Use for an isolated implementation slice with fixed files and acc
 model = "gpt-5.6-luna"
 model_reasoning_effort = "medium"
 developer_instructions = """
-Start: "I detect implementation intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet: fixed files and scope, required behavior, acceptance criteria, necessary context, required skills, prohibited expansion, proof, stop condition. Reject or stop on ambiguity, overlap, architecture choice, coupled out-of-scope work, user-work conflict, or missing authority. MUST use git_bash MCP for every shell command. Use exec_command only after git_bash MCP is confirmed unavailable; never use it merely by preference or because a command failed. Prompt, skill, or instruction task: load caveman skill first; write terse without losing constraints. Load required skills before their governed action. Change only assigned files. Preserve architecture, API, behavior, naming, style, and user work. Add no speculative cleanup, abstraction, dependency, docs, or scope. Run the smallest specified proof; never claim integration or final verification. Return exactly: changed paths and behavior; tests or checks with result; acceptance criteria status; blocker or residual risk; no proposed extra work.
+Start: "I detect implementation intent — [reason]. [action]." Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Accept one task packet containing exact implementation outcome; repository root; allowed paths and symbols; forbidden paths; relevant architecture and existing behavior; required skills; exact inputs; output format; acceptance criteria; required commands or evidence; unchanged constraints; prohibited expansion; known uncertainty; blocker behavior; exact stop condition. Reject or stop on ambiguity, overlap, architecture choice, coupled out-of-scope work, user-work conflict, or missing authority. On native Windows, before any shell call resolve `mcp__git_bash__run` from the full callable registry, including deferred tools, and use it when available; otherwise use native shell directly. Prompt, skill, or instruction task: load caveman first; preserve constraints. Load required skills before governed action. Change only assigned files. Preserve architecture, API, behavior, naming, style, and user work. Add no speculative cleanup, abstraction, dependency, docs, or scope. Run specified proof; never claim integration or final verification. Return exactly requested format with changed paths and behavior, command results, criteria status, blocker or residual risk; no proposed extra work.
 """

package/plugin/runtime/cli.js

@@ -122,7 +122,7 @@ function paths(home = process.env.CODEX_HOME ?? join(homedir(), ".codex")) {
 		config: join(home, "config.toml"),
 		marketplaceCache,
 		cacheRoot,
-		cache: join(cacheRoot, "0.5.0"),
+		cache: join(cacheRoot, "0.5.2"),
 		agents: join(home, "holycodex", "agents"),
 		legacy: [
 			join(home, "plugins", "cache", "sisyphuslabs", "omo"),
@@ -210,7 +210,7 @@ async function cleanup(_options) {
 }
 //#endregion
 //#region src/cli.ts
-var VERSION = "0.5.0";
+var VERSION = "0.5.2";
 var HELP = `HolyCodex ${VERSION}\n\nUsage: holycodex <install|cleanup> [options]\n\nOptions:\n  --help                 Show help\n  --version              Show version\n  --no-tui               Accepted; commands are noninteractive\n  --codex-autonomous     Set autonomous Codex permissions (default)\n  --no-codex-autonomous  Preserve existing Codex permissions\n  --json                 Print machine-readable result\n`;
 async function main() {
 	const args = process$1.argv.slice(2);

package/plugin/runtime/core-instructions.js

@@ -1,4 +1,4 @@
 //#region src/core-instructions.ts
-var CORE_INSTRUCTIONS = "HolyCodex: Start first user-facing update: \"I detect [fix/implementation/investigation/question] intent — [reason]. [action].\" Act. Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Shell: MUST use git_bash MCP for every shell command. Use exec_command only after git_bash MCP is confirmed unavailable; never use it merely by preference or because a command failed. Prompt, skill, or instruction edit: load caveman; preserve constraints. Main agent owns intent, scope, architecture, decisions, integration, and final verification. Load each applicable skill before its governed action; a skill alone is sufficient when the main agent can complete the work directly. Delegate only a useful low-complexity slice that is bounded, independent, unambiguous, and cheaper to integrate than to do locally: explorer=read-only repo facts; librarian=read-only current external facts; worker=isolated implementation. Use skill then subagent when both apply; the skill owns method and gates, the main agent owns decisions, and the subagent owns only its assigned slice. Never delegate trivial work, tightly coupled work, architecture, final judgment, user clarification, integration, or verification. Give only necessary context plus exact scope, deliverable, acceptance criteria, evidence, prohibited expansion, and stop condition. Treat returned work as input: inspect it, resolve conflicts, integrate deliberately, and verify the user outcome. Stop delegation when the packet is satisfied or blocked; never recurse or create organization. Match reasoning effort to complexity. Use GPT 5.6 Luna low for explorer and librarian; use GPT 5.6 Luna medium for worker.";
+var CORE_INSTRUCTIONS = "HolyCodex: Start first user-facing update: \"I detect [fix/implementation/investigation/question] intent — [reason]. [action].\" Act. Default user-facing replies: grammatical sentences; no filler or hedging. Preserve technical terms, code, paths, error text, and commit keywords; use full grammar for safety warnings, irreversible confirmations, ordered steps, ambiguity, or clarification. Shell: on native Windows, before any shell call resolve `mcp__git_bash__run` from the full callable registry, including deferred tools, and use it when available; otherwise use the native shell directly. Prompt, skill, or instruction edit: load caveman; preserve constraints. Main agent owns intent, scope, architecture, decisions, integration, and final verification. Load each applicable skill before its governed action; a skill alone is sufficient when the main agent can complete the work directly. Delegate only a bounded, independent, unambiguous slice cheaper to integrate than local work and suitable for its Luna model: explorer=read-only exact repo facts; librarian=read-only current external facts from primary sources; worker=isolated fixed-scope implementation. Never delegate trivial or coupled work, architecture, user clarification, integration, final judgment, or final verification. Every packet states exact question or outcome; repository root; allowed paths and symbols; forbidden paths; relevant architecture and existing behavior; required skills; exact inputs; output format; acceptance criteria; required commands or evidence; unchanged constraints; prohibited expansion; known uncertainty; blocker behavior; exact stop condition. Use concrete names, paths, APIs, functions, tests, versions, and expected observations when known; include no unrelated transcript. Treat returns as input: inspect, reconcile, integrate, and verify. Stop when packet is satisfied or blocked; never recurse or create agent organizations. Use GPT 5.6 Luna low for explorer and librarian; use GPT 5.6 Luna medium for worker.";
 //#endregion
 export { CORE_INSTRUCTIONS as t };

package/plugin/runtime/git-bash.js

@@ -166,7 +166,7 @@ async function handleGitBashMcpRequest(input, options = {}) {
 		capabilities: { tools: { listChanged: false } },
 		serverInfo: {
 			name: "git_bash",
-			version: "0.5.0"
+			version: "0.5.2"
 		},
 		protocolVersion: protocolVersionFromInput(input) ?? "2024-11-05"
 	});
@@ -186,7 +186,7 @@ async function runMcpStdioServer(input, output, options = {}) {
 		handler: handleGitBashMcpRequest,
 		handlerOptions: options,
 		idleTimeoutMs: 0,
-		log: options.lifecycleLog,
+		...options.lifecycleLog === void 0 ? {} : { log: options.lifecycleLog },
 		parseErrorResponse: () => errorResponse(null, -32601, "Method not found")
 	});
 }
@@ -210,7 +210,7 @@ async function runToolResponse(id, args, options) {
 		const result = await (options.runGitBash ?? runGitBashCommand)({
 			bashPath: resolution.path,
 			command,
-			cwd,
+			...cwd === void 0 ? {} : { cwd },
 			timeoutMs,
 			env: options.env ?? process.env
 		});
@@ -275,8 +275,8 @@ function canRunGitBash(options) {
 }
 function resolve$1(options) {
 	if (options.exists === void 0 && options.where === void 0) return resolveGitBashForCurrentProcess({
-		platform: options.platform,
-		env: options.env
+		...options.platform === void 0 ? {} : { platform: options.platform },
+		...options.env === void 0 ? {} : { env: options.env }
 	});
 	return resolveGitBash({
 		platform: platformFromOptions(options),

package/plugin/runtime/lsp.js

@@ -3072,7 +3072,7 @@ function coerceToolArguments(value) {
 //#endregion
 //#region packages/lsp-core/src/mcp.ts
 var SERVER_NAME = "lsp";
-var SERVER_VERSION = "0.5.0";
+var SERVER_VERSION = "0.5.2";
 async function handleLspMcpRequest(input) {
 	if (!isPlainRecord(input)) return errorResponse(null, -32600, "Invalid Request");
 	const id = jsonRpcId(input["id"]);

package/plugin/runtime/rules.js

@@ -74,13 +74,31 @@ function parseRule(text) {
 		body: text.trim()
 	};
 	const header = text.slice(4, end);
-	const globs = [...(/^globs:\s*(.+)$/m.exec(header)?.[1] ?? "").matchAll(/["']([^"']+)["']/g)].map((match) => match[1]).filter((value) => value !== void 0);
 	return {
 		alwaysApply: /^alwaysApply:\s*true\s*$/m.test(header),
-		globs,
+		globs: parseGlobs(header),
 		body: text.slice(end + 5).trim()
 	};
 }
+function parseGlobs(header) {
+	const lines = header.split("\n");
+	const index = lines.findIndex((line) => /^globs\s*:/.test(line));
+	if (index < 0) return [];
+	const value = lines[index]?.replace(/^globs\s*:\s*/, "").trim() ?? "";
+	if (value.length > 0) return (value.startsWith("[") && value.endsWith("]") ? value.slice(1, -1) : value).split(",").map(unquote).filter((glob) => glob.length > 0);
+	const globs = [];
+	for (const line of lines.slice(index + 1)) {
+		const item = /^\s+-\s*(.+?)\s*$/.exec(line)?.[1];
+		if (item === void 0) break;
+		const glob = unquote(item);
+		if (glob.length > 0) globs.push(glob);
+	}
+	return globs;
+}
+function unquote(value) {
+	const trimmed = value.trim();
+	return trimmed.length >= 2 && (trimmed.startsWith("\"") && trimmed.endsWith("\"") || trimmed.startsWith("'") && trimmed.endsWith("'")) ? trimmed.slice(1, -1) : trimmed;
+}
 function globMatches(glob, path) {
 	const normalized = path.replaceAll("\\", "/");
 	const pattern = glob.replaceAll("\\", "/").replace(/[.+^${}()|[\]\\]/g, "\\$&").replaceAll("**", "\0").replaceAll("*", "[^/]*").replaceAll("\0", ".*");
@@ -108,15 +126,18 @@ async function readable(path) {
 }
 function editPath(value, cwd) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-	const input = value;
+	const input = new Map(Object.entries(value));
 	for (const key of [
 		"filePath",
 		"file_path",
 		"path",
 		"targetPath",
 		"target_path"
-	]) if (typeof input[key] === "string") return isAbsolute(input[key]) ? input[key] : resolve(cwd, input[key]);
-	const patch = typeof input.patch === "string" ? input.patch : typeof input.input === "string" ? input.input : void 0;
+	]) {
+		const candidate = input.get(key);
+		if (typeof candidate === "string") return isAbsolute(candidate) ? candidate : resolve(cwd, candidate);
+	}
+	const patch = typeof input.get("patch") === "string" ? input.get("patch") : typeof input.get("input") === "string" ? input.get("input") : void 0;
 	const path = patch === void 0 ? void 0 : /^\*\*\* (?:Add|Update) File: (.+)$/m.exec(patch)?.[1]?.trim();
 	return path === void 0 ? void 0 : resolve(cwd, path);
 }

package/plugin/skills/debugging/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: debugging
-description: Use when a task involves a crash, wrong result, hang, race, leak, slowdown, or other reproducible defect that needs root-cause proof; do not use for feature work, behavior-preserving refactors, or speculative cleanup. Produces reproduction, evidence, regression proof, and an authorized minimal fix; unlike TDD it starts from a symptom.
+description: Use when a task involves a crash, wrong result, hang, race, leak, slowdown, or other reproducible defect that needs root-cause proof; do not use for feature work, behavior-preserving refactors, or speculative cleanup. Produces reproduction, evidence, regression proof, and an authorized minimal fix; unlike programming it owns symptom-to-cause diagnosis.
 ---
 
 # Debugging

package/plugin/skills/frontend/SKILL.md

@@ -5,12 +5,12 @@ description: Use when a task needs frontend, web UI, UX, visual design, interact
 
 # Frontend
 
-Preserve stack, behavior, tokens, patterns, supplied visual contract, and existing product identity. Keep scope small. Avoid generic AI styling. Do not force `DESIGN.md`, research, dependencies, GSAP, or heavy QA.
+Preserve stack, behavior, tokens, patterns, supplied visual contract, and product identity. Keep scope small. Avoid generic AI styling. Do not force `DESIGN.md`, research, dependencies, GSAP, or heavy QA.
 
 ## Approval sequence
 
 1. Load `frontend`; inspect the request, product shell, target surface, design tokens, nearest pattern, responsive contract, supplied references, and relevant states.
-2. Select only material design decisions: theme or visual direction, typography, layout and density, color and surfaces, asset role, interaction and motion, responsive behavior, and accessibility or state treatment. Preserve established decisions unless change is requested.
+2. Select only material design decisions: visual direction, typography, layout and density, color and surfaces, assets, responsive behavior, applicable states, plus a motion system and accessibility treatment for every task. Define how motion communicates hierarchy, state, interaction, continuity, or navigation; keep it proportional. Define `prefers-reduced-motion`, keyboard operation, focus visibility, semantics, contrast, and labels. Preserve established decisions unless change is requested.
 3. Present the compact decision set with existing constraints and ask for approval before implementation. For a fix, audit, accessibility, or performance task, include only decisions that alter user-visible design; diagnosis and technical implementation details need no approval.
 4. After approval, ask whether the user wants to define a goal. Only after explicit agreement load `define-goal`; otherwise implement.
 
@@ -24,26 +24,17 @@ Approval owns visible direction and material interaction changes. Existing compo
 - Palette/type/style: load only relevant `references/ui-ux-db` data.
 - Motion-rich premium React/Tailwind page creation or redesign: mandatory GPT Taste route below. Ordinary fixes, debugging, accessibility, and performance work stay on normal route.
 
-## Mandatory GPT Taste route
+## GPT Taste route
 
-- During the approval decision set, emit `<design_plan>` with deterministic prompt-derived selection: one hero, one approved font stack (`Satoshi`, `Cabinet Grotesk`, `Outfit`, or `Geist`; never `Inter`), three component architectures, two GSAP paradigms. Do not repeat a default combination or replace an established type contract.
-- Follow AIDA: premium nav; Attention hero; Interest bento/features; Desire scroll/media; Action CTA/footer. Separate chapters with `py-32 md:py-48`.
-- Select cinematic center, artistic asymmetry, or editorial split. Build one hero: wide `max-w-5xl`/`max-w-6xl` H1, responsive `clamp`, maximum 2–3 lines, strong art direction, perfect button contrast, no stamp icons, pill tags, or raw stats.
-- Build dense gapless bento: 3–5 intentional cards, `grid-flow-dense`, spans proven to fill every cell, mixed imagery/type/CSS effects, no dead corners or empty cards.
-- Use contextual `https://picsum.photos/seed/{keyword}/1920/1080` assets; art-direct coherent grayscale/blend/contrast/opacity with subtle radial blur, grain mesh, or dark overlays.
-- Select three architectures: inline heading image, horizontal expanding accordion, infinite partner marquee, restrained testimonial carousel, pinned gallery, or stacked cards.
-- Use real GSAP with `@gsap/react` and `ScrollTrigger`. Select two systems: pinned title/gallery split, image scale/fade scroll, scrubbed word reveal, or stacked cards. Motion explains hierarchy, state, or navigation; static interface fails. Interactive images/cards use slow contained scale hover.
-- Wrap page: `<main className="overflow-x-hidden w-full max-w-full">`.
+- During approval, emit `<design_plan>` with prompt-derived visual direction, type, layout, motion, responsive, accessibility, and state choices. Established contracts win.
+- Treat AIDA, bento layouts, font shortlists, GSAP, Picsum, component counts, and named motion patterns as options only when they fit product, task, and stack.
+- For each chosen pattern, state its user-facing purpose and containment. Do not add dependencies or remote assets unless approved and required.
+- Motion is required but may be subtle. Avoid gratuitous, blocking, performance-heavy, or reduced-motion-unsafe effects.
+- Prevent horizontal overflow, clipped content, dead layouts, empty cards, fake dashboards, copied text, and inaccessible interaction.
 
 Ban emojis; cheap/generic meta-labels (`SECTION 01`, `QUESTION 05`, `ABOUT US`); invisible button text; empty bento cells/cards; narrow multi-line/centered heroes; repeated left/right or flat sections/backgrounds; stock-feeling imagery; fake dashboards; meaningless gradients; copied reference text.
 
-Required `<design_plan>`:
-
-1. Three-line deterministic selection: hero, font stack, three architectures, two GSAP systems.
-2. AIDA map.
-3. H1 max-width and 2–3-line proof; confirm no stamps/tags.
-4. Grid-span math and `grid-flow-dense` proof.
-5. Meta-label sweep and button-contrast check.
+Required `<design_plan>`: visible direction; layout and responsive contract; asset role; motion purpose and reduced-motion fallback; accessibility treatment; applicable loading, error, and empty states. Include only chosen patterns, not a fixed architecture count.
 
 Only after approval and optional goal choice may implementation begin.
 
@@ -51,9 +42,9 @@ Only after approval and optional goal choice may implementation begin.
 
 1. Inspect target and nearest established pattern.
 2. Lock visual direction: type, spacing, surfaces, color, asset role, motion role.
-3. Implement smallest coherent slice. Keep semantics and keyboard behavior.
+3. Implement smallest coherent slice with purposeful motion, reduced-motion behavior, keyboard operation, visible focus, semantic structure, contrast, and labels.
 4. Test narrow/mobile/wide containment. No horizontal leak, clipped text, overlap, or unreadable measure.
-5. Check contrast, focus, labels, reduced motion, loading, error, empty state when in scope.
+5. Check loading, error, and empty states when applicable.
 6. Check interaction and performance proportional to change. Avoid layout shift, oversized media, needless client work.
 
 Use real assets when supplied. Never invent research or claim screenshot parity without visual comparison.

package/plugin/skills/plan/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: plan
-description: Use when the user asks for a plan or when a complex, risky, ambiguous, or multi-stage task needs an approved plan before implementation; do not use for simple direct work, status, or explanation. Produces one repo-grounded reviewed plan with approval and optional goal gates; unlike plan-review, it owns the full planning sequence.
+description: Use when the user asks for a plan or implementation requires unresolved architecture, cross-cutting coordination, irreversible decisions, high risk, or material ambiguity; do not use for multiple obvious steps, simple direct work, status, or explanation. Produces one repo-grounded reviewed plan with approval and optional goal gates; unlike plan-review, it owns the full planning sequence.
 ---
 
 # Plan

package/plugin/skills/programming/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: programming
-description: Use when a task edits Python, Rust, TypeScript, Go, or their matching manifests; do not use for prose-only edits or unsupported languages. Applies language-specific correctness, typing, size, and verification rules; debugging, TDD, or refactor may additionally own the workflow.
+description: Use when a task edits Python, Rust, TypeScript, Go, or their matching manifests; do not use for prose-only edits or unsupported languages. Applies language-specific correctness, typing, size, and verification rules; debugging or refactor may additionally own the workflow.
 ---
 
 # Programming
@@ -22,7 +22,7 @@ Before editing `.py`, `.pyi`, `.rs`, `.ts`, `.tsx`, `.mts`, `.cts`, `.go`, or ma
 
 ## Test
 
-Public behavior red first. Confirm intended failure. Minimum green. Refactor. Use real object or fake before mock. Deterministic fixture; no sleep. At least one end-to-end user outcome for a new feature. Run smallest test in loop.
+Defect: add a public-seam regression test first and confirm the intended failure. Explicit test-first request or clearly defined new behavior without adequate proof: test public seam first, confirm failure, implement minimum green, then refactor. Existing tests may lock small covered changes. Do not force red-green for prose, configuration-only work, trivial mechanical edits, or behavior already adequately covered. Use real object or fake before mock. Deterministic fixture; no sleep. Add an end-to-end user outcome for new behavior when proportional. Run smallest test in loop.
 
 ## Size
 

package/plugin/skills/rules/SKILL.md

@@ -9,7 +9,7 @@ Automatic when plugin enabled. Static rules load on session start and user promp
 
 Sources: `CONTEXT.md`, `.holycodex/rules/**/*.md`, `.codex/rules/**/*.md`, `.github/instructions/**/*.md`, `.github/copilot-instructions.md`. Never load or reinject `AGENTS.md`.
 
-Frontmatter: `alwaysApply: true` for static rule; `globs` string or list for path match. Body after frontmatter is injected. Native and plugin rules dedupe by normalized content hash. Per-rule cap 8,000 chars; event cap 24,000 chars.
+Frontmatter: `alwaysApply: true` for static rule; `globs` accepts quoted or unquoted scalar, inline array, or multiline array. Body after frontmatter is injected. Native and plugin rules dedupe by normalized content hash. Per-rule cap 8,000 chars; event cap 24,000 chars.
 
 Environment: `HOLYCODEX_RULES_DISABLED=1`, `HOLYCODEX_RULES_MAX_RULE_CHARS`, `HOLYCODEX_RULES_MAX_RESULT_CHARS`.
 

package/plugin/skills/comment-checker/SKILL.md

@@ -1,8 +0,0 @@
----
-name: comment-checker
-description: Use when an edit produces a comment-checker warning that must be fixed or explained; do not use for ordinary comments, lint output, or before an edit. Produces a disposition for every blocking warning; unlike programming checks it handles the edit hook only.
----
-
-# Comment Checker
-
-After successful `apply_patch`, `write`, `edit`, `multi_edit`, or `multiedit`, fix or explain any blocking warning before continuing. Non-edit tools are ignored. No MCP tool exists. Missing checker binaries produce no output.

package/plugin/skills/tdd/SKILL.md

@@ -1,24 +0,0 @@
----
-name: tdd
-description: Use when a task requests TDD, regression coverage, integration tests, or a public-seam failing test before implementation; do not use for test inspection, unrelated failures, or work with adequate existing proof. Produces deterministic red-green-refactor slices; unlike debugging it governs test-first delivery after behavior is known.
----
-
-# TDD
-
-Find established seam before asking user. Ask only if materially different contracts remain.
-
-## Slice
-
-1. Pick one observable outcome.
-2. Red: test public seam. Run it. Confirm failure matches missing behavior, not setup error.
-3. Green: minimum production code. No second case yet.
-4. Refactor only with green test.
-5. Repeat vertical slice.
-
-Given/When/Then: known fixture; one action; only observable result caused by action.
-
-Reject private-method tests, tautology, snapshot abuse, broad mocking, sleeps, wall-clock dependence, implementation-coupled assertions, deleted failing tests.
-
-Test doubles order: real object; in-memory fake; test container or sandbox; wire fake; narrow mock last. Fake must honor real contract.
-
-Fixtures deterministic and isolated. Coverage proportional to risk. Run smallest test during loop; broader gates at completion. See `tests.md` and `mocking.md` only when needed.

package/plugin/skills/tdd/mocking.md

@@ -1,5 +0,0 @@
-# Mocking
-
-Prefer real objects, test databases, or fakes. Mock only system boundaries: external APIs, time, randomness, and sometimes databases or filesystems. Never mock owned classes or internal collaborators.
-
-Inject boundary dependencies. Expose one typed operation per external action instead of a generic conditional fetcher; each mock then has one input and result shape.

package/plugin/skills/tdd/tests.md

@@ -1,7 +0,0 @@
-# Tests
-
-Test caller-visible behavior through public interfaces. Good tests survive refactors, use known literal expectations, perform one action, and assert its observable result.
-
-Reject tests of private methods, internal calls, call counts, storage inspected behind the public interface, snapshots without a stable contract, or expected values recomputed by production logic. These test implementation, not behavior.
-
-Example: after `createUser`, verify `getUser(id)` returns the user; do not query the database directly.