jorgex-stack 1.0.1 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/PRD.md +297 -297
  2. package/README.md +56 -56
  3. package/dist/cli.js +7 -2
  4. package/package.json +1 -1
  5. package/stack/agents/orchestrator.md +192 -192
  6. package/stack/agents/tester.md +71 -71
  7. package/stack/commands/xreview.md +80 -80
  8. package/stack/hooks/hooks.json +18 -18
  9. package/stack/scripts/post-pr-review.cjs +156 -156
  10. package/stack/skills/diagnose/SKILL.md +117 -117
  11. package/stack/skills/diagnose/scripts/hitl-loop.template.sh +41 -41
  12. package/stack/skills/find-skills/SKILL.md +133 -133
  13. package/stack/skills/mcp-builder/LICENSE.txt +201 -201
  14. package/stack/skills/mcp-builder/SKILL.md +236 -236
  15. package/stack/skills/mcp-builder/reference/evaluation.md +601 -601
  16. package/stack/skills/mcp-builder/reference/mcp_best_practices.md +249 -249
  17. package/stack/skills/mcp-builder/reference/node_mcp_server.md +969 -969
  18. package/stack/skills/mcp-builder/reference/python_mcp_server.md +718 -718
  19. package/stack/skills/mcp-builder/scripts/connections.py +151 -151
  20. package/stack/skills/mcp-builder/scripts/evaluation.py +373 -373
  21. package/stack/skills/mcp-builder/scripts/example_evaluation.xml +22 -22
  22. package/stack/skills/mcp-builder/scripts/requirements.txt +2 -2
  23. package/stack/skills/obsidian-cli/SKILL.md +106 -106
  24. package/stack/skills/obsidian-markdown/SKILL.md +196 -196
  25. package/stack/skills/obsidian-markdown/references/CALLOUTS.md +58 -58
  26. package/stack/skills/obsidian-markdown/references/EMBEDS.md +63 -63
  27. package/stack/skills/obsidian-markdown/references/PROPERTIES.md +61 -61
  28. package/stack/skills/react-doctor/SKILL.md +19 -19
  29. package/stack/skills/skill-creator/LICENSE.txt +201 -201
  30. package/stack/skills/skill-creator/agents/analyzer.md +274 -274
  31. package/stack/skills/skill-creator/agents/comparator.md +202 -202
  32. package/stack/skills/skill-creator/agents/grader.md +223 -223
  33. package/stack/skills/skill-creator/assets/eval_review.html +146 -146
  34. package/stack/skills/skill-creator/eval-viewer/generate_review.py +471 -471
  35. package/stack/skills/skill-creator/eval-viewer/viewer.html +1325 -1325
  36. package/stack/skills/skill-creator/references/schemas.md +430 -430
  37. package/stack/skills/skill-creator/scripts/aggregate_benchmark.py +401 -401
  38. package/stack/skills/skill-creator/scripts/generate_report.py +326 -326
  39. package/stack/skills/skill-creator/scripts/improve_description.py +248 -248
  40. package/stack/skills/skill-creator/scripts/package_skill.py +136 -136
  41. package/stack/skills/skill-creator/scripts/quick_validate.py +102 -102
  42. package/stack/skills/skill-creator/scripts/run_eval.py +310 -310
  43. package/stack/skills/skill-creator/scripts/run_loop.py +332 -332
  44. package/stack/skills/skill-creator/scripts/utils.py +47 -47
  45. package/stack/skills/supabase/SKILL.md +135 -135
  46. package/stack/skills/supabase/assets/feedback-issue-template.md +17 -17
  47. package/stack/skills/supabase/references/skill-feedback.md +17 -17
  48. package/stack/skills/supabase-postgres-best-practices/SKILL.md +64 -64
  49. package/stack/skills/supabase-postgres-best-practices/references/_contributing.md +170 -170
  50. package/stack/skills/supabase-postgres-best-practices/references/_sections.md +39 -39
  51. package/stack/skills/supabase-postgres-best-practices/references/_template.md +34 -34
  52. package/stack/skills/supabase-postgres-best-practices/references/advanced-full-text-search.md +55 -55
  53. package/stack/skills/supabase-postgres-best-practices/references/advanced-jsonb-indexing.md +49 -49
  54. package/stack/skills/supabase-postgres-best-practices/references/conn-idle-timeout.md +46 -46
  55. package/stack/skills/supabase-postgres-best-practices/references/conn-limits.md +44 -44
  56. package/stack/skills/supabase-postgres-best-practices/references/conn-pooling.md +41 -41
  57. package/stack/skills/supabase-postgres-best-practices/references/conn-prepared-statements.md +46 -46
  58. package/stack/skills/supabase-postgres-best-practices/references/data-batch-inserts.md +54 -54
  59. package/stack/skills/supabase-postgres-best-practices/references/data-n-plus-one.md +53 -53
  60. package/stack/skills/supabase-postgres-best-practices/references/data-pagination.md +50 -50
  61. package/stack/skills/supabase-postgres-best-practices/references/data-upsert.md +50 -50
  62. package/stack/skills/supabase-postgres-best-practices/references/lock-advisory.md +56 -56
  63. package/stack/skills/supabase-postgres-best-practices/references/lock-deadlock-prevention.md +68 -68
  64. package/stack/skills/supabase-postgres-best-practices/references/lock-short-transactions.md +50 -50
  65. package/stack/skills/supabase-postgres-best-practices/references/lock-skip-locked.md +54 -54
  66. package/stack/skills/supabase-postgres-best-practices/references/monitor-explain-analyze.md +45 -45
  67. package/stack/skills/supabase-postgres-best-practices/references/monitor-pg-stat-statements.md +55 -55
  68. package/stack/skills/supabase-postgres-best-practices/references/monitor-vacuum-analyze.md +55 -55
  69. package/stack/skills/supabase-postgres-best-practices/references/query-composite-indexes.md +44 -44
  70. package/stack/skills/supabase-postgres-best-practices/references/query-covering-indexes.md +40 -40
  71. package/stack/skills/supabase-postgres-best-practices/references/query-index-types.md +48 -48
  72. package/stack/skills/supabase-postgres-best-practices/references/query-missing-indexes.md +43 -43
  73. package/stack/skills/supabase-postgres-best-practices/references/query-partial-indexes.md +45 -45
  74. package/stack/skills/supabase-postgres-best-practices/references/schema-constraints.md +80 -80
  75. package/stack/skills/supabase-postgres-best-practices/references/schema-data-types.md +46 -46
  76. package/stack/skills/supabase-postgres-best-practices/references/schema-foreign-key-indexes.md +59 -59
  77. package/stack/skills/supabase-postgres-best-practices/references/schema-lowercase-identifiers.md +55 -55
  78. package/stack/skills/supabase-postgres-best-practices/references/schema-partitioning.md +55 -55
  79. package/stack/skills/supabase-postgres-best-practices/references/schema-primary-keys.md +61 -61
  80. package/stack/skills/supabase-postgres-best-practices/references/security-privileges.md +54 -54
  81. package/stack/skills/supabase-postgres-best-practices/references/security-rls-basics.md +50 -50
  82. package/stack/skills/supabase-postgres-best-practices/references/security-rls-performance.md +63 -63
  83. package/stack/skills/tdd/SKILL.md +109 -109
  84. package/stack/skills/tdd/deep-modules.md +33 -33
  85. package/stack/skills/tdd/interface-design.md +31 -31
  86. package/stack/skills/tdd/mocking.md +59 -59
  87. package/stack/skills/tdd/refactoring.md +10 -10
  88. package/stack/skills/tdd/tests.md +61 -61
  89. package/stack/skills/to-issues/SKILL.md +83 -83
  90. package/stack/skills/to-prd/SKILL.md +72 -72
  91. package/upstreams.json +96 -96
@@ -1,83 +1,83 @@
1
- ---
2
- name: to-issues
3
- description: Break a plan, spec, or PRD into independently-grabbable issues on the project issue tracker using tracer-bullet vertical slices. Use when user wants to convert a plan into issues, create implementation tickets, or break down work into issues.
4
- ---
5
-
6
- # To Issues
7
-
8
- Break a plan into independently-grabbable issues using vertical slices (tracer bullets).
9
-
10
- The issue tracker and triage label vocabulary should have been provided to you — run `/setup-matt-pocock-skills` if not.
11
-
12
- ## Process
13
-
14
- ### 1. Gather context
15
-
16
- Work from whatever is already in the conversation context. If the user passes an issue reference (issue number, URL, or path) as an argument, fetch it from the issue tracker and read its full body and comments.
17
-
18
- ### 2. Explore the codebase (optional)
19
-
20
- If you have not already explored the codebase, do so to understand the current state of the code. Issue titles and descriptions should use the project's domain glossary vocabulary, and respect ADRs in the area you're touching.
21
-
22
- ### 3. Draft vertical slices
23
-
24
- Break the plan into **tracer bullet** issues. Each issue is a thin vertical slice that cuts through ALL integration layers end-to-end, NOT a horizontal slice of one layer.
25
-
26
- Slices may be 'HITL' or 'AFK'. HITL slices require human interaction, such as an architectural decision or a design review. AFK slices can be implemented and merged without human interaction. Prefer AFK over HITL where possible.
27
-
28
- <vertical-slice-rules>
29
- - Each slice delivers a narrow but COMPLETE path through every layer (schema, API, UI, tests)
30
- - A completed slice is demoable or verifiable on its own
31
- - Prefer many thin slices over few thick ones
32
- </vertical-slice-rules>
33
-
34
- ### 4. Quiz the user
35
-
36
- Present the proposed breakdown as a numbered list. For each slice, show:
37
-
38
- - **Title**: short descriptive name
39
- - **Type**: HITL / AFK
40
- - **Blocked by**: which other slices (if any) must complete first
41
- - **User stories covered**: which user stories this addresses (if the source material has them)
42
-
43
- Ask the user:
44
-
45
- - Does the granularity feel right? (too coarse / too fine)
46
- - Are the dependency relationships correct?
47
- - Should any slices be merged or split further?
48
- - Are the correct slices marked as HITL and AFK?
49
-
50
- Iterate until the user approves the breakdown.
51
-
52
- ### 5. Publish the issues to the issue tracker
53
-
54
- For each approved slice, publish a new issue to the issue tracker. Use the issue body template below. These issues are considered ready for AFK agents, so publish them with the correct triage label unless instructed otherwise.
55
-
56
- Publish issues in dependency order (blockers first) so you can reference real issue identifiers in the "Blocked by" field.
57
-
58
- <issue-template>
59
- ## Parent
60
-
61
- A reference to the parent issue on the issue tracker (if the source was an existing issue, otherwise omit this section).
62
-
63
- ## What to build
64
-
65
- A concise description of this vertical slice. Describe the end-to-end behavior, not layer-by-layer implementation.
66
-
67
- Avoid specific file paths or code snippets — they go stale fast. Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it here and note briefly that it came from a prototype. Trim to the decision-rich parts — not a working demo, just the important bits.
68
-
69
- ## Acceptance criteria
70
-
71
- - [ ] Criterion 1
72
- - [ ] Criterion 2
73
- - [ ] Criterion 3
74
-
75
- ## Blocked by
76
-
77
- - A reference to the blocking ticket (if any)
78
-
79
- Or "None - can start immediately" if no blockers.
80
-
81
- </issue-template>
82
-
83
- Do NOT close or modify any parent issue.
1
+ ---
2
+ name: to-issues
3
+ description: Break a plan, spec, or PRD into independently-grabbable issues on the project issue tracker using tracer-bullet vertical slices. Use when user wants to convert a plan into issues, create implementation tickets, or break down work into issues.
4
+ ---
5
+
6
+ # To Issues
7
+
8
+ Break a plan into independently-grabbable issues using vertical slices (tracer bullets).
9
+
10
+ The issue tracker and triage label vocabulary should have been provided to you — run `/setup-matt-pocock-skills` if not.
11
+
12
+ ## Process
13
+
14
+ ### 1. Gather context
15
+
16
+ Work from whatever is already in the conversation context. If the user passes an issue reference (issue number, URL, or path) as an argument, fetch it from the issue tracker and read its full body and comments.
17
+
18
+ ### 2. Explore the codebase (optional)
19
+
20
+ If you have not already explored the codebase, do so to understand the current state of the code. Issue titles and descriptions should use the project's domain glossary vocabulary, and respect ADRs in the area you're touching.
21
+
22
+ ### 3. Draft vertical slices
23
+
24
+ Break the plan into **tracer bullet** issues. Each issue is a thin vertical slice that cuts through ALL integration layers end-to-end, NOT a horizontal slice of one layer.
25
+
26
+ Slices may be 'HITL' or 'AFK'. HITL slices require human interaction, such as an architectural decision or a design review. AFK slices can be implemented and merged without human interaction. Prefer AFK over HITL where possible.
27
+
28
+ <vertical-slice-rules>
29
+ - Each slice delivers a narrow but COMPLETE path through every layer (schema, API, UI, tests)
30
+ - A completed slice is demoable or verifiable on its own
31
+ - Prefer many thin slices over few thick ones
32
+ </vertical-slice-rules>
33
+
34
+ ### 4. Quiz the user
35
+
36
+ Present the proposed breakdown as a numbered list. For each slice, show:
37
+
38
+ - **Title**: short descriptive name
39
+ - **Type**: HITL / AFK
40
+ - **Blocked by**: which other slices (if any) must complete first
41
+ - **User stories covered**: which user stories this addresses (if the source material has them)
42
+
43
+ Ask the user:
44
+
45
+ - Does the granularity feel right? (too coarse / too fine)
46
+ - Are the dependency relationships correct?
47
+ - Should any slices be merged or split further?
48
+ - Are the correct slices marked as HITL and AFK?
49
+
50
+ Iterate until the user approves the breakdown.
51
+
52
+ ### 5. Publish the issues to the issue tracker
53
+
54
+ For each approved slice, publish a new issue to the issue tracker. Use the issue body template below. These issues are considered ready for AFK agents, so publish them with the correct triage label unless instructed otherwise.
55
+
56
+ Publish issues in dependency order (blockers first) so you can reference real issue identifiers in the "Blocked by" field.
57
+
58
+ <issue-template>
59
+ ## Parent
60
+
61
+ A reference to the parent issue on the issue tracker (if the source was an existing issue, otherwise omit this section).
62
+
63
+ ## What to build
64
+
65
+ A concise description of this vertical slice. Describe the end-to-end behavior, not layer-by-layer implementation.
66
+
67
+ Avoid specific file paths or code snippets — they go stale fast. Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it here and note briefly that it came from a prototype. Trim to the decision-rich parts — not a working demo, just the important bits.
68
+
69
+ ## Acceptance criteria
70
+
71
+ - [ ] Criterion 1
72
+ - [ ] Criterion 2
73
+ - [ ] Criterion 3
74
+
75
+ ## Blocked by
76
+
77
+ - A reference to the blocking ticket (if any)
78
+
79
+ Or "None - can start immediately" if no blockers.
80
+
81
+ </issue-template>
82
+
83
+ Do NOT close or modify any parent issue.
@@ -1,72 +1,72 @@
1
- ---
2
- name: to-prd
3
- description: Turn the current conversation context into a PRD at work/{name}/PRD.md (work-lifecycle flow). Use when user wants to create a PRD from the current context.
4
- ---
5
-
6
- This skill takes the current conversation context and codebase understanding and produces a PRD. Do NOT interview the user — just synthesize what you already know.
7
-
8
- ## Process
9
-
10
- 1. Explore the repo to understand the current state of the codebase, if you haven't already. Use the project's domain glossary vocabulary throughout the PRD, and respect any ADRs in the area you're touching.
11
-
12
- 2. Sketch out the seams at which you're going to test the feature. Existing seams should be preferred to new ones. Use the highest seam possible. If new seams are needed, propose them at the highest point you can.
13
-
14
- Check with the user that these seams match their expectations.
15
-
16
- 3. Write the PRD using the template below to `work/{name}/PRD.md`, where `{name}` is the work's canonical kebab-case name (see the `work-lifecycle` skill) — the human reviews it there. Exception: if the project manages its work through an issue tracker and the user wants the PRD there, publish it to the tracker instead and apply the `ready-for-agent` triage label — no need for additional triage.
17
-
18
- <prd-template>
19
-
20
- ## Problem Statement
21
-
22
- The problem that the user is facing, from the user's perspective.
23
-
24
- ## Solution
25
-
26
- The solution to the problem, from the user's perspective.
27
-
28
- ## User Stories
29
-
30
- A LONG, numbered list of user stories. Each user story should be in the format of:
31
-
32
- 1. As an <actor>, I want a <feature>, so that <benefit>
33
-
34
- <user-story-example>
35
- 1. As a mobile bank customer, I want to see balance on my accounts, so that I can make better informed decisions about my spending
36
- </user-story-example>
37
-
38
- This list of user stories should be extremely extensive and cover all aspects of the feature.
39
-
40
- ## Implementation Decisions
41
-
42
- A list of implementation decisions that were made. This can include:
43
-
44
- - The modules that will be built/modified
45
- - The interfaces of those modules that will be modified
46
- - Technical clarifications from the developer
47
- - Architectural decisions
48
- - Schema changes
49
- - API contracts
50
- - Specific interactions
51
-
52
- Do NOT include specific file paths or code snippets. They may end up being outdated very quickly.
53
-
54
- Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it within the relevant decision and note briefly that it came from a prototype. Trim to the decision-rich parts — not a working demo, just the important bits.
55
-
56
- ## Testing Decisions
57
-
58
- A list of testing decisions that were made. Include:
59
-
60
- - A description of what makes a good test (only test external behavior, not implementation details)
61
- - Which modules will be tested
62
- - Prior art for the tests (i.e. similar types of tests in the codebase)
63
-
64
- ## Out of Scope
65
-
66
- A description of the things that are out of scope for this PRD.
67
-
68
- ## Further Notes
69
-
70
- Any further notes about the feature.
71
-
72
- </prd-template>
1
+ ---
2
+ name: to-prd
3
+ description: Turn the current conversation context into a PRD at work/{name}/PRD.md (work-lifecycle flow). Use when user wants to create a PRD from the current context.
4
+ ---
5
+
6
+ This skill takes the current conversation context and codebase understanding and produces a PRD. Do NOT interview the user — just synthesize what you already know.
7
+
8
+ ## Process
9
+
10
+ 1. Explore the repo to understand the current state of the codebase, if you haven't already. Use the project's domain glossary vocabulary throughout the PRD, and respect any ADRs in the area you're touching.
11
+
12
+ 2. Sketch out the seams at which you're going to test the feature. Existing seams should be preferred to new ones. Use the highest seam possible. If new seams are needed, propose them at the highest point you can.
13
+
14
+ Check with the user that these seams match their expectations.
15
+
16
+ 3. Write the PRD using the template below to `work/{name}/PRD.md`, where `{name}` is the work's canonical kebab-case name (see the `work-lifecycle` skill) — the human reviews it there. Exception: if the project manages its work through an issue tracker and the user wants the PRD there, publish it to the tracker instead and apply the `ready-for-agent` triage label — no need for additional triage.
17
+
18
+ <prd-template>
19
+
20
+ ## Problem Statement
21
+
22
+ The problem that the user is facing, from the user's perspective.
23
+
24
+ ## Solution
25
+
26
+ The solution to the problem, from the user's perspective.
27
+
28
+ ## User Stories
29
+
30
+ A LONG, numbered list of user stories. Each user story should be in the format of:
31
+
32
+ 1. As an <actor>, I want a <feature>, so that <benefit>
33
+
34
+ <user-story-example>
35
+ 1. As a mobile bank customer, I want to see balance on my accounts, so that I can make better informed decisions about my spending
36
+ </user-story-example>
37
+
38
+ This list of user stories should be extremely extensive and cover all aspects of the feature.
39
+
40
+ ## Implementation Decisions
41
+
42
+ A list of implementation decisions that were made. This can include:
43
+
44
+ - The modules that will be built/modified
45
+ - The interfaces of those modules that will be modified
46
+ - Technical clarifications from the developer
47
+ - Architectural decisions
48
+ - Schema changes
49
+ - API contracts
50
+ - Specific interactions
51
+
52
+ Do NOT include specific file paths or code snippets. They may end up being outdated very quickly.
53
+
54
+ Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it within the relevant decision and note briefly that it came from a prototype. Trim to the decision-rich parts — not a working demo, just the important bits.
55
+
56
+ ## Testing Decisions
57
+
58
+ A list of testing decisions that were made. Include:
59
+
60
+ - A description of what makes a good test (only test external behavior, not implementation details)
61
+ - Which modules will be tested
62
+ - Prior art for the tests (i.e. similar types of tests in the codebase)
63
+
64
+ ## Out of Scope
65
+
66
+ A description of the things that are out of scope for this PRD.
67
+
68
+ ## Further Notes
69
+
70
+ Any further notes about the feature.
71
+
72
+ </prd-template>
package/upstreams.json CHANGED
@@ -1,96 +1,96 @@
1
- {
2
- "$comment": "Terceros gestionados por `jorgex-stack update`: fuente, versión conocida y política. `commit` = pin del upstream en la última revisión aceptada (2026-06-11, auditoría de seguridad): update --check compara el HEAD del repo contra el pin y avisa si se movió; cualquier actualización de la copia vendorizada se hace con diff manual y re-pin deliberado, nunca a ciegas. El pin es del repo completo (no por path): en monorepos activos un pin movido no implica que la skill cambiara — el diff lo confirma. Las skills 'modified: true' tienen cambios locales respecto al upstream — update debe hacer diff/aviso, NUNCA reemplazo ciego (PRD §7.3). Skills propias sin upstream (no se actualizan desde fuera): agent-delegation, work-lifecycle. `path` = ruta dentro del repo upstream donde vive la skill (para diff/descarga quirúrgica). `kind: \"release\"` = la actualización se compara contra tags de release en vez de HEAD (e.g. paquetes Python sin SKILL.md en repo).",
3
- "tools": {
4
- "engram": {
5
- "kind": "binary",
6
- "source": "github:Gentleman-Programming/engram",
7
- "verify": "sha256",
8
- "policy": "respect-existing — D7: si hay un Engram instalado (binario o DB), no se toca; update del binario solo con confirmación explícita y la DB jamás"
9
- }
10
- },
11
- "skills": {
12
- "agent-browser": {
13
- "source": "github:vercel-labs/agent-browser",
14
- "path": "skills/agent-browser",
15
- "commit": "5185339ca3fdab9848e11b8ec676eecfdec3733f"
16
- },
17
- "deploy-to-vercel": {
18
- "source": "github:vercel-labs/agent-skills",
19
- "path": "skills/deploy-to-vercel",
20
- "version": "3.0.0",
21
- "commit": "f8a72b9603728bb92a217a879b7e62e43ad76c81",
22
- "note": "por diseño empaqueta el proyecto entero (tarball) y lo sube a un endpoint de Vercel para desplegarlo; excluye .env/.env.*/.git/node_modules"
23
- },
24
- "diagnose": {
25
- "source": "github:mattpocock/skills",
26
- "path": "skills/engineering/diagnose",
27
- "commit": "694fa30311e02c2639942308513555e61ee84a6f"
28
- },
29
- "find-skills": {
30
- "source": "github:vercel-labs/skills",
31
- "path": "skills/find-skills",
32
- "commit": "be0dd25b4a8665894a56f45ef582cc02ca802c39"
33
- },
34
- "graphify": {
35
- "source": "github:safishamsi/graphify",
36
- "kind": "release",
37
- "version": "0.7.16",
38
- "commit": "cce26730212baab6d92ce5f390ef5aae56268f31"
39
- },
40
- "mcp-builder": {
41
- "source": "github:anthropics/skills",
42
- "path": "skills/mcp-builder",
43
- "commit": "57546260929473d4e0d1c1bb75297be2fdfa1949",
44
- "license": "Apache-2.0"
45
- },
46
- "obsidian-cli": {
47
- "source": "github:kepano/obsidian-skills",
48
- "path": "skills/obsidian-cli",
49
- "commit": "a1dc48e68138490d522c04cbf5822214c6eb1202"
50
- },
51
- "obsidian-markdown": {
52
- "source": "github:kepano/obsidian-skills",
53
- "path": "skills/obsidian-markdown",
54
- "commit": "a1dc48e68138490d522c04cbf5822214c6eb1202"
55
- },
56
- "react-doctor": {
57
- "source": "github:millionco/react-doctor",
58
- "path": "skills/react-doctor",
59
- "commit": "a48fb06ffbe7221655e18529fcc954ecae17a22f"
60
- },
61
- "skill-creator": {
62
- "source": "github:anthropics/skills",
63
- "path": "skills/skill-creator",
64
- "commit": "57546260929473d4e0d1c1bb75297be2fdfa1949",
65
- "license": "Apache-2.0"
66
- },
67
- "supabase": {
68
- "source": "github:supabase/agent-skills",
69
- "path": "skills/supabase",
70
- "version": "0.1.2",
71
- "commit": "1356046015476711a769601079262b5635929427"
72
- },
73
- "supabase-postgres-best-practices": {
74
- "source": "github:supabase/agent-skills",
75
- "path": "skills/supabase-postgres-best-practices",
76
- "commit": "1356046015476711a769601079262b5635929427",
77
- "license": "MIT"
78
- },
79
- "tdd": {
80
- "source": "github:mattpocock/skills",
81
- "path": "skills/engineering/tdd",
82
- "commit": "694fa30311e02c2639942308513555e61ee84a6f"
83
- },
84
- "to-issues": {
85
- "source": "github:mattpocock/skills",
86
- "path": "skills/engineering/to-issues",
87
- "commit": "694fa30311e02c2639942308513555e61ee84a6f"
88
- },
89
- "to-prd": {
90
- "source": "github:mattpocock/skills",
91
- "path": "skills/engineering/to-prd",
92
- "commit": "694fa30311e02c2639942308513555e61ee84a6f",
93
- "modified": true
94
- }
95
- }
96
- }
1
+ {
2
+ "$comment": "Terceros gestionados por `jorgex-stack update`: fuente, versión conocida y política. `commit` = pin del upstream en la última revisión aceptada (2026-06-11, auditoría de seguridad): update --check compara el HEAD del repo contra el pin y avisa si se movió; cualquier actualización de la copia vendorizada se hace con diff manual y re-pin deliberado, nunca a ciegas. El pin es del repo completo (no por path): en monorepos activos un pin movido no implica que la skill cambiara — el diff lo confirma. Las skills 'modified: true' tienen cambios locales respecto al upstream — update debe hacer diff/aviso, NUNCA reemplazo ciego (PRD §7.3). Skills propias sin upstream (no se actualizan desde fuera): agent-delegation, work-lifecycle. `path` = ruta dentro del repo upstream donde vive la skill (para diff/descarga quirúrgica). `kind: \"release\"` = la actualización se compara contra tags de release en vez de HEAD (e.g. paquetes Python sin SKILL.md en repo).",
3
+ "tools": {
4
+ "engram": {
5
+ "kind": "binary",
6
+ "source": "github:Gentleman-Programming/engram",
7
+ "verify": "sha256",
8
+ "policy": "respect-existing — D7: si hay un Engram instalado (binario o DB), no se toca; update del binario solo con confirmación explícita y la DB jamás"
9
+ }
10
+ },
11
+ "skills": {
12
+ "agent-browser": {
13
+ "source": "github:vercel-labs/agent-browser",
14
+ "path": "skills/agent-browser",
15
+ "commit": "5185339ca3fdab9848e11b8ec676eecfdec3733f"
16
+ },
17
+ "deploy-to-vercel": {
18
+ "source": "github:vercel-labs/agent-skills",
19
+ "path": "skills/deploy-to-vercel",
20
+ "version": "3.0.0",
21
+ "commit": "f8a72b9603728bb92a217a879b7e62e43ad76c81",
22
+ "note": "por diseño empaqueta el proyecto entero (tarball) y lo sube a un endpoint de Vercel para desplegarlo; excluye .env/.env.*/.git/node_modules"
23
+ },
24
+ "diagnose": {
25
+ "source": "github:mattpocock/skills",
26
+ "path": "skills/engineering/diagnose",
27
+ "commit": "694fa30311e02c2639942308513555e61ee84a6f"
28
+ },
29
+ "find-skills": {
30
+ "source": "github:vercel-labs/skills",
31
+ "path": "skills/find-skills",
32
+ "commit": "be0dd25b4a8665894a56f45ef582cc02ca802c39"
33
+ },
34
+ "graphify": {
35
+ "source": "github:safishamsi/graphify",
36
+ "kind": "release",
37
+ "version": "0.7.16",
38
+ "commit": "cce26730212baab6d92ce5f390ef5aae56268f31"
39
+ },
40
+ "mcp-builder": {
41
+ "source": "github:anthropics/skills",
42
+ "path": "skills/mcp-builder",
43
+ "commit": "57546260929473d4e0d1c1bb75297be2fdfa1949",
44
+ "license": "Apache-2.0"
45
+ },
46
+ "obsidian-cli": {
47
+ "source": "github:kepano/obsidian-skills",
48
+ "path": "skills/obsidian-cli",
49
+ "commit": "a1dc48e68138490d522c04cbf5822214c6eb1202"
50
+ },
51
+ "obsidian-markdown": {
52
+ "source": "github:kepano/obsidian-skills",
53
+ "path": "skills/obsidian-markdown",
54
+ "commit": "a1dc48e68138490d522c04cbf5822214c6eb1202"
55
+ },
56
+ "react-doctor": {
57
+ "source": "github:millionco/react-doctor",
58
+ "path": "skills/react-doctor",
59
+ "commit": "a48fb06ffbe7221655e18529fcc954ecae17a22f"
60
+ },
61
+ "skill-creator": {
62
+ "source": "github:anthropics/skills",
63
+ "path": "skills/skill-creator",
64
+ "commit": "57546260929473d4e0d1c1bb75297be2fdfa1949",
65
+ "license": "Apache-2.0"
66
+ },
67
+ "supabase": {
68
+ "source": "github:supabase/agent-skills",
69
+ "path": "skills/supabase",
70
+ "version": "0.1.2",
71
+ "commit": "1356046015476711a769601079262b5635929427"
72
+ },
73
+ "supabase-postgres-best-practices": {
74
+ "source": "github:supabase/agent-skills",
75
+ "path": "skills/supabase-postgres-best-practices",
76
+ "commit": "1356046015476711a769601079262b5635929427",
77
+ "license": "MIT"
78
+ },
79
+ "tdd": {
80
+ "source": "github:mattpocock/skills",
81
+ "path": "skills/engineering/tdd",
82
+ "commit": "694fa30311e02c2639942308513555e61ee84a6f"
83
+ },
84
+ "to-issues": {
85
+ "source": "github:mattpocock/skills",
86
+ "path": "skills/engineering/to-issues",
87
+ "commit": "694fa30311e02c2639942308513555e61ee84a6f"
88
+ },
89
+ "to-prd": {
90
+ "source": "github:mattpocock/skills",
91
+ "path": "skills/engineering/to-prd",
92
+ "commit": "694fa30311e02c2639942308513555e61ee84a6f",
93
+ "modified": true
94
+ }
95
+ }
96
+ }