oh-my-customcode 0.102.0 → 0.103.0

package/dist/cli/index.js

@@ -2334,7 +2334,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "0.102.0",
+    version: "0.103.0",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {

package/dist/index.js

@@ -2014,7 +2014,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "0.102.0",
+  version: "0.103.0",
   description: "Batteries-included agent harness for Claude Code",
   type: "module",
   bin: {

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "0.102.0",
+  "version": "0.103.0",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/agents/arch-speckit-agent.md

@@ -26,7 +26,7 @@ You are a Spec-Driven Development agent that transforms requirements into execut
 External agent from https://github.com/github/spec-kit
 - **Version**: latest
 - **Update**: `uv tool upgrade specify-cli --from git+https://github.com/github/spec-kit.git`
-- **Prerequisites**: Python 3.11+, uv, Git
+- **Prerequisites**: Python 3.14+, uv, Git
 
 ## Commands
 

package/templates/.claude/agents/be-springboot-expert.md

@@ -1,6 +1,6 @@
 ---
 name: be-springboot-expert
-description: Expert Spring Boot 3.5.x developer for enterprise-grade Java 21 applications. Use for Spring Boot projects, Java/Kotlin enterprise apps, RESTful APIs, microservices architecture, Spring Data, security patterns, virtual threads, and GraalVM native images.
+description: Expert Spring Boot 4.0 developer for enterprise-grade Java 25 LTS applications. Use for Spring Boot projects, Java/Kotlin enterprise apps, RESTful APIs, microservices architecture, Spring Data, security patterns, virtual threads, and GraalVM native images.
 model: sonnet
 domain: backend
 memory: project
@@ -17,7 +17,7 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Spring Boot developer for enterprise-grade Java/Kotlin applications. Focused on Spring Boot 3.5.x with Java 21.
+You are an expert Spring Boot developer for enterprise-grade Java/Kotlin applications. Focused on Spring Boot 4.0 (GA: 2025-11) with Java 25 LTS.
 
 ## Capabilities
 
@@ -31,7 +31,7 @@ You are an expert Spring Boot developer for enterprise-grade Java/Kotlin applica
 ## Reference Documentation
 
 - https://docs.spring.io/spring-boot/reference/index.html
-- https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.5-Release-Notes
+- https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Release-Notes
 
 ## Skills
 

package/templates/.claude/agents/de-airflow-expert.md

@@ -17,7 +17,7 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Apache Airflow developer for production-ready DAGs following official best practices, targeting **Airflow 3.1.8**.
+You are an expert Apache Airflow developer for production-ready DAGs following official best practices, targeting **Airflow 3.2.0**.
 
 ## Capabilities
 
@@ -41,7 +41,7 @@ You are an expert Apache Airflow developer for production-ready DAGs following o
 
 ## Skills
 
-Apply **airflow-best-practices** for core Airflow 3.1.8 guidelines.
+Apply **airflow-best-practices** for core Airflow 3.2.0 guidelines.
 
 ## Reference Guides
 

package/templates/.claude/agents/de-dbt-expert.md

@@ -21,6 +21,7 @@ You are an expert dbt developer for analytics engineering, SQL modeling, and dat
 
 ## Capabilities
 
+- dbt-core 1.11+ with Fusion engine (faster parallel execution)
 - Project structure: staging (stg_), intermediate (int_), marts (fct_, dim_)
 - Materializations (view, ephemeral, table, incremental)
 - Schema tests (unique, not_null, relationships, accepted_values)

package/templates/.claude/agents/de-kafka-expert.md

@@ -17,7 +17,7 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Apache Kafka developer for event streaming architectures with high throughput and reliability.
+You are an expert Apache Kafka 4.x developer for event streaming architectures with high throughput and reliability. Kafka 4.x uses KRaft (Kafka Raft) as the default metadata management — ZooKeeper has been fully removed.
 
 ## Capabilities
 
@@ -26,6 +26,7 @@ You are an expert Apache Kafka developer for event streaming architectures with
 - Consumer applications with proper offset management
 - Kafka Streams and Connect pipelines
 - Schema Registry with Avro/Protobuf serialization
+- KRaft cluster deployment and configuration (ZooKeeper removed in Kafka 4.x)
 - Cluster performance and monitoring
 - Event-driven architectures and CQRS patterns
 

package/templates/.claude/agents/de-spark-expert.md

@@ -17,17 +17,19 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Apache Spark developer for performant distributed data processing using PySpark and Scala.
+You are an expert Apache Spark 4.x developer for performant distributed data processing using PySpark and Scala. Spark 4.0 introduces Spark Connect as a decoupled client-server protocol and enables ANSI mode by default.
 
 ## Capabilities
 
 - DataFrame and Dataset APIs, Spark SQL
+- Spark Connect for decoupled client-server communication (Spark 4.x)
 - Broadcast joins and hint-based optimization
 - Partitioning and bucketing strategies
 - Structured Streaming applications
 - Resource management (executor/driver memory, dynamic allocation)
 - Storage format optimization (Parquet, ORC, Delta, Iceberg)
 - Job profiling via Spark UI
+- ANSI mode compliance (default in Spark 4.x — stricter SQL semantics)
 
 ## Skills
 

package/templates/.claude/agents/fe-flutter-agent.md

@@ -22,8 +22,8 @@ You are an expert Flutter developer following official documentation and Dart be
 ## Capabilities
 
 - Widget composition (StatelessWidget, StatefulWidget, InheritedWidget)
-- State management: Riverpod 3.0 (default), BLoC 9.0 (enterprise)
-- Dart 3.x null safety, sealed classes, pattern matching, records
+- State management: Riverpod 3.3 (default), BLoC 9.1 (enterprise)
+- Dart 3.11 null safety, sealed classes, pattern matching, records
 - go_router declarative navigation with deep linking
 - freezed immutable data models with code generation
 - Performance: const constructors, RepaintBoundary, Isolate
@@ -32,7 +32,7 @@ You are an expert Flutter developer following official documentation and Dart be
 
 ## Default Stack
 
-- **State**: Riverpod 3.0
+- **State**: Riverpod 3.3
 - **Navigation**: go_router
 - **Models**: freezed + json_serializable
 - **HTTP**: dio

package/templates/.claude/agents/lang-java-expert.md

@@ -0,0 +1,42 @@
+---
+name: lang-java-expert
+description: Expert Java 25 LTS developer for modern Java with Virtual Threads, Pattern Matching, Record Patterns, and Sequenced Collections. Use for Java files (*.java, pom.xml, build.gradle), Java-related keywords, high-concurrency systems, data-centric APIs with Records, and migrating from older Java versions.
+model: sonnet
+domain: backend
+memory: project
+effort: high
+skills:
+  - java-best-practices
+tools:
+  - Read
+  - Write
+  - Edit
+  - Grep
+  - Glob
+  - Bash
+permissionMode: bypassPermissions
+---
+
+You are an expert Java 25 LTS developer for modern Java features including Virtual Threads, Pattern Matching, Record Patterns, and Sequenced Collections.
+
+## Capabilities
+
+- Modern Java 25 LTS leveraging latest features
+- Virtual Threads (JEP 444) for scalable concurrency
+- Pattern Matching for switch and instanceof
+- Record Patterns (JEP 440), Sequenced Collections (JEP 431)
+- Google Java Style Guide compliance
+- Legacy Java migration to Java 25 LTS
+
+## Reference Documentation
+
+- https://docs.oracle.com/en/java/javase/25/
+- https://google.github.io/styleguide/javaguide.html
+
+## Skills
+
+Apply **java-best-practices** for core Java guidelines.
+
+## Reference Guides
+
+Consult `guides/java/` for reference documentation.

package/templates/.claude/agents/slack-cli-expert.md

@@ -14,7 +14,7 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Slack CLI developer specialized in building, deploying, and managing Slack apps using the official Slack CLI and the Slack Platform (https://docs.slack.dev/tools/slack-cli/).
+You are an expert Slack CLI developer specialized in building, deploying, and managing Slack apps using the official Slack CLI v4.0 and the Slack Platform (https://docs.slack.dev/tools/slack-cli/). Slack CLI v4.0 adds first-class Slack Agent development support.
 
 ## Capabilities
 

package/templates/.claude/ontology/agents.yaml

@@ -6,7 +6,7 @@ generated_at: "2026-02-12T00:00:00Z"
 # Agent class hierarchy
 classes:
   LanguageExpert:
-    agents: [lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java21-expert]
+    agents: [lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java-expert]
     description: "Programming language specialists"
   BackendExpert:
     agents: [be-fastapi-expert, be-springboot-expert, be-go-backend-expert, be-express-expert, be-nestjs-expert]
@@ -101,7 +101,7 @@ agents:
     keywords: [typescript, type-safety, generics, conditional-types, mapped-types, nodejs]
     file_patterns: ["*.ts", "*.tsx", "tsconfig.json", "package.json"]
 
-  lang-java21-expert:
+  lang-java-expert:
     class: LanguageExpert
     description: "Expert Java 21 developer for modern Java with Virtual Threads, Pattern Matching, Record Patterns, and Sequenced Collections. Use for Java files (*.java, pom.xml, build.gradle), Java-related keywords, high-concurrency systems, data-centric APIs with Records, and migrating from older Java versions."
     model: sonnet

package/templates/.claude/ontology/skills.yaml

@@ -147,7 +147,7 @@ skills:
     keywords: [routing, development, code-review, implementation, refactoring]
     routes_to: [
       lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert,
-      lang-typescript-expert, lang-java21-expert, fe-vercel-agent, fe-vuejs-agent,
+      lang-typescript-expert, lang-java-expert, fe-vercel-agent, fe-vuejs-agent,
       fe-svelte-agent, fe-flutter-agent, be-fastapi-expert, be-springboot-expert,
       be-go-backend-expert, be-nestjs-expert, be-express-expert, tool-npm-expert,
       tool-optimizer, tool-bun-expert, db-supabase-expert, db-postgres-expert,

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -227,6 +227,35 @@ When the user explicitly signals full-delegation intent, the orchestrator operat
 Autonomous mode and `/structured-dev-cycle` (stage-blocker) are mutually exclusive.
 -->
 
+## Universal bypassPermissions
+
+**ALL Agent tool calls MUST include `mode: "bypassPermissions"`.**
+
+The Agent tool defaults to `mode: "acceptEdits"`, which overrides agent frontmatter `permissionMode` and causes permission prompts during unattended execution. This is a CC platform behavior, not a configuration error.
+
+| Aspect | Detail |
+|--------|--------|
+| Scope | Every Agent tool call, without exception |
+| Why | CC's Agent tool `mode` default (`acceptEdits`) overrides frontmatter |
+| History | #926 (v0.99.1), #947 (v0.100.1), #955 (v0.103.0) — recurring issue |
+| Enforcement | Prompt-based (R021); all 23 agent-spawning skills include instruction |
+
+### Self-Check
+
+Before spawning any agent:
+1. Does the Agent tool call include `mode: "bypassPermissions"`? → YES: proceed → NO: add it
+2. Is this a new skill that spawns agents? → Add Permission Mode section
+
+### Common Violation
+
+```
+❌ WRONG: Agent tool call without mode parameter
+   Agent(subagent_type: "lang-golang-expert", prompt: "...")
+
+✓ CORRECT: Always include mode
+   Agent(subagent_type: "lang-golang-expert", mode: "bypassPermissions", prompt: "...")
+```
+
 ## Session Continuity
 
 After restart/compaction: re-read CLAUDE.md, all delegation rules still apply. Never write code directly from orchestrator.

package/templates/.claude/skills/adaptive-harness/SKILL.md

@@ -102,7 +102,7 @@ Check for language manifest files and framework indicators:
 | `svelte.config.*`, `*.svelte` | Svelte | fe-svelte-agent |
 | `pubspec.yaml`, `*.dart` | Flutter | fe-flutter-agent |
 | `*.kt`, `build.gradle.kts` | Kotlin | lang-kotlin-expert |
-| `*.java`, `pom.xml` | Java | lang-java21-expert |
+| `*.java`, `pom.xml` | Java | lang-java-expert |
 | `spring-boot` in deps | Spring Boot | be-springboot-expert |
 | `express` in package.json deps | Express | be-express-expert |
 | `@nestjs` in package.json deps | NestJS | be-nestjs-expert |

package/templates/.claude/skills/agora/SKILL.md

@@ -192,3 +192,5 @@ agora:
 | Accepting first BUILD | May miss edge cases | Loop until ALL agree |
 | Ignoring split decisions | Unresolved disagreements fester | Resolve every split with evidence |
 | Push for consensus too fast | Premature agreement | Let reviewers challenge freely |
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/.claude/skills/airflow-best-practices/SKILL.md

@@ -5,7 +5,7 @@ scope: core
 user-invocable: false
 ---
 
-# Apache Airflow Best Practices (3.1.8)
+# Apache Airflow Best Practices (3.2.0)
 
 ## DAG Authoring
 
@@ -89,6 +89,6 @@ user-invocable: false
 - **New UI**: React-based web interface (replaces Flask-based UI)
 
 ## References
-- [Airflow 3.1.8 Best Practices](https://airflow.apache.org/docs/apache-airflow/3.1.8/best-practices.html)
-- [Airflow SDK (Task SDK)](https://airflow.apache.org/docs/apache-airflow/3.1.8/authoring-and-scheduling/index.html)
-- [Migration Guide 2.x → 3.x](https://airflow.apache.org/docs/apache-airflow/3.1.8/migration-guide.html)
+- [Airflow 3.2.0 Best Practices](https://airflow.apache.org/docs/apache-airflow/3.2.0/best-practices.html)
+- [Airflow SDK (Task SDK)](https://airflow.apache.org/docs/apache-airflow/3.2.0/authoring-and-scheduling/index.html)
+- [Migration Guide 2.x → 3.x](https://airflow.apache.org/docs/apache-airflow/3.2.0/migration-guide.html)

package/templates/.claude/skills/analysis/SKILL.md

@@ -76,7 +76,7 @@ Detect tech stack by checking indicator files and dependency manifests.
 | Go Backend | go.mod + cmd/ or internal/ dirs | be-go-backend-expert | go-backend-best-practices |
 | Rust | Cargo.toml, *.rs | lang-rust-expert | rust-best-practices |
 | Kotlin | *.kt, build.gradle.kts | lang-kotlin-expert | kotlin-best-practices |
-| Java | *.java, pom.xml | lang-java21-expert | - |
+| Java | *.java, pom.xml | lang-java-expert | - |
 | Spring Boot | spring-boot in deps | be-springboot-expert | springboot-best-practices |
 | Express.js | "express" in deps | be-express-expert | - |
 | NestJS | "@nestjs" in deps | be-nestjs-expert | - |

package/templates/.claude/skills/dbt-best-practices/SKILL.md

@@ -51,5 +51,10 @@ user-invocable: false
 - Use `doc` blocks for reusable text
 - Generate and host dbt docs
 
+## Version
+
+- **dbt-core**: 1.11+ (includes Fusion engine for faster parallel model execution)
+- Fusion engine is enabled by default in dbt-core 1.11 — no configuration required
+
 ## References
 - [dbt Best Practices](https://docs.getdbt.com/guides/best-practices)

package/templates/.claude/skills/dev-lead-routing/SKILL.md

@@ -12,7 +12,7 @@ context: fork
 
 | Type | Agents |
 |------|--------|
-| Language | lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java21-expert |
+| Language | lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java-expert |
 | Frontend | fe-vercel-agent, fe-vuejs-agent, fe-svelte-agent, fe-flutter-agent, fe-design-expert |
 | Backend | be-fastapi-expert, be-springboot-expert, be-go-backend-expert, be-nestjs-expert, be-express-expert, be-django-expert |
 | Tooling | tool-npm-expert, tool-optimizer, tool-bun-expert |
@@ -31,7 +31,7 @@ context: fork
 | `.rs` | lang-rust-expert |
 | `.kt`, `.kts` | lang-kotlin-expert |
 | `.ts`, `.tsx` | lang-typescript-expert |
-| `.java` | lang-java21-expert |
+| `.java` | lang-java-expert |
 | `.js/.jsx` (React) | fe-vercel-agent |
 | `.vue` | fe-vuejs-agent |
 | `.svelte` | fe-svelte-agent |
@@ -52,7 +52,7 @@ context: fork
 | rust | lang-rust-expert |
 | kotlin | lang-kotlin-expert |
 | typescript, ts | lang-typescript-expert |
-| java | lang-java21-expert |
+| java | lang-java-expert |
 | react, next.js, vercel | fe-vercel-agent |
 | vue | fe-vuejs-agent |
 | svelte | fe-svelte-agent |

package/templates/.claude/skills/django-best-practices/SKILL.md

@@ -7,7 +7,7 @@ user-invocable: false
 
 ## Purpose
 
-Apply Django patterns for building production-ready, secure, and maintainable Python web applications.
+Apply Django 6.0.4 patterns for building production-ready, secure, and maintainable Python web applications.
 
 ## Rules
 

package/templates/.claude/skills/evaluator-optimizer/SKILL.md

@@ -419,3 +419,5 @@ Integration: Works with [impeccable-design](/skills/impeccable-design) skill for
 ### Harness Eval Preset
 
 The `harness-eval` skill provides a structured 15-task SE benchmark rubric that can be used as a preset for the evaluator-optimizer pipeline. When invoked via `/omcustom:harness-eval`, the harness rubric dimensions (Test Coverage 30%, Architecture 25%, Error Handling 25%, Extensibility 20%) are loaded as the sprint contract criteria.
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/.claude/skills/flutter-best-practices/SKILL.md

@@ -81,8 +81,8 @@ Reference: guides/flutter/fundamentals.md
 
 ```yaml
 default_choice:
-  new_projects: "Riverpod 3.0"
-  enterprise: "BLoC 9.0"
+  new_projects: "Riverpod 3.3"
+  enterprise: "BLoC 9.1"
   simple_prototypes: "setState or Provider"
   avoid: "GetX (maintenance crisis, runtime crashes)"
 
@@ -285,7 +285,7 @@ Reference: guides/flutter/architecture.md
 ## Default Stack
 
 ```yaml
-state_management: Riverpod 3.0
+state_management: Riverpod 3.3
 navigation: go_router
 models: freezed + json_serializable
 di: Riverpod (built-in)
@@ -298,7 +298,7 @@ structure: Official MVVM (lib/{ui,data}/)
 ## Enterprise Stack
 
 ```yaml
-state_management: BLoC 9.0 + Cubit
+state_management: BLoC 9.1 + Cubit
 navigation: go_router or auto_route
 models: freezed + json_serializable
 di: GetIt + injectable (or Riverpod)
@@ -314,7 +314,7 @@ When writing or reviewing Flutter/Dart code:
 1. **Always** use const constructors for static widgets
 2. **Always** return Result<T> from repositories, never throw
 3. **Always** use flutter_secure_storage for sensitive data
-4. **Prefer** Riverpod 3.0 for new projects, BLoC for enterprise
+4. **Prefer** Riverpod 3.3 for new projects, BLoC for enterprise
 5. **Prefer** StatelessWidget classes over helper functions
 6. **Prefer** sealed classes for state/result types (exhaustive matching)
 7. **Use** freezed for all data model classes

package/templates/.claude/skills/intent-detection/SKILL.md

@@ -306,3 +306,5 @@ Check Codex CLI availability
 ├── Method: codex-exec (xhigh) | WebFetch fallback
 └── Reason: {explanation}
 ```
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/.claude/skills/intent-detection/patterns/agent-triggers.yaml

@@ -69,10 +69,10 @@ agents:
     supported_actions: [review, fix, refactor, explain]
     base_confidence: 40
 
-  lang-java21-expert:
+  lang-java-expert:
     keywords:
-      korean: [자바, 자바21]
-      english: [java, java21, jdk21, jdk]
+      korean: [자바, 자바25]
+      english: [java, java25, jdk25, jdk]
     file_patterns: ["*.java", "pom.xml", "build.gradle"]
     supported_actions: [review, create, fix, refactor]
     base_confidence: 35

package/templates/.claude/skills/{java21-best-practices → java-best-practices}/SKILL.md

@@ -1,13 +1,13 @@
 ---
-name: java21-best-practices
-description: Modern Java 21 patterns from Virtual Threads, Pattern Matching, Records, and Sealed Classes
+name: java-best-practices
+description: Modern Java 25 LTS patterns from Virtual Threads, Pattern Matching, Records, and Sealed Classes
 scope: core
 user-invocable: false
 ---
 
 ## Purpose
 
-Apply modern Java 21 patterns and best practices leveraging the latest language features for clean, performant, and maintainable Java code.
+Apply modern Java 25 LTS patterns and best practices leveraging the latest language features for clean, performant, and maintainable Java code.
 
 ## Core Principles
 
@@ -44,7 +44,7 @@ records:
   example: record Point(int x, int y) {}
 ```
 
-Reference: guides/java21/java-style-guide.md
+Reference: guides/java/java-style-guide.md
 
 ### 2. Virtual Threads (JEP 444)
 
@@ -65,7 +65,7 @@ antipatterns:
   - "synchronized blocks in Virtual Thread code — use ReentrantLock instead"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 3. Pattern Matching
 
@@ -80,7 +80,7 @@ switch_patterns:
   null_handling: "case null supported in switch"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 4. Records (JEP 395)
 
@@ -100,7 +100,7 @@ antipatterns:
   - "Using records for entities with behavior — prefer classes"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 5. Record Patterns (JEP 440)
 
@@ -111,7 +111,7 @@ patterns:
   nested: "Nested record patterns for deep destructuring"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 6. Sealed Classes (JEP 409)
 
@@ -124,7 +124,7 @@ principles:
 pattern: "sealed interface with record implementations, exhaustive switch (no default needed)"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 7. Sequenced Collections (JEP 431)
 
@@ -136,7 +136,7 @@ principles:
 methods: "getFirst(), getLast(), addFirst(), addLast(), reversed(), firstEntry()"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 8. Text Blocks and String Features
 
@@ -146,7 +146,7 @@ patterns:
   formatted: "String.formatted() for template substitution (since Java 15)"
 ```
 
-Reference: guides/java21/modern-java21.md
+Reference: guides/java/modern-java.md
 
 ### 9. Error Handling
 
@@ -162,7 +162,7 @@ patterns:
   multi_catch: "catch (IOException | SQLException e) for related exceptions"
 ```
 
-Reference: guides/java21/java-style-guide.md
+Reference: guides/java/java-style-guide.md
 
 ### 10. Documentation
 
@@ -174,11 +174,11 @@ best_practices:
   - Keep Javadoc focused on "what", not "how"
 ```
 
-Reference: guides/java21/java-style-guide.md
+Reference: guides/java/java-style-guide.md
 
 ## Application
 
-When writing or reviewing Java 21 code:
+When writing or reviewing Java 25 LTS code:
 
 1. **Use** Records for pure data classes over verbose POJOs
 2. **Use** Sealed Classes + Pattern Matching for type hierarchies

package/templates/.claude/skills/kafka-best-practices/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: kafka-best-practices
-description: Apache Kafka best practices for event streaming, topic design, and producer-consumer patterns
+description: Apache Kafka 4.2 best practices for event streaming, topic design, and producer-consumer patterns
 scope: core
 user-invocable: false
 ---
 
 # Apache Kafka Best Practices
 
+> **Version**: Kafka 4.2.0. ZooKeeper is fully removed in Kafka 4.x — use KRaft mode for all cluster deployments.
+
 ## Producer Patterns
 
 ### Idempotent Producer (CRITICAL)

package/templates/.claude/skills/multi-model-verification/SKILL.md

@@ -128,3 +128,5 @@ Multi-model verification uses 3x the tokens of a single review. Reserve for:
 - Security-sensitive modifications
 - Architecture decisions
 - Pre-release verification
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/.claude/skills/pr-auto-improve/SKILL.md

@@ -96,7 +96,7 @@ User: "improve PR #215"
 | *.py | lang-python-expert |
 | *.go | lang-golang-expert |
 | *.kt | lang-kotlin-expert |
-| *.java | lang-java21-expert |
+| *.java | lang-java-expert |
 | *.rs | lang-rust-expert |
 | Test files | qa-engineer |
 | Docs, README | arch-documenter |

package/templates/.claude/skills/research/SKILL.md

@@ -491,3 +491,5 @@ Agent(
 | dag-orchestration | Phase sequencing follows DAG pattern |
 | result-aggregation | Team results formatted per aggregation skill |
 | multi-model-verification | Phase 2 uses multi-model verification pattern |
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/.claude/skills/spark-best-practices/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: spark-best-practices
-description: Apache Spark best practices for PySpark and Scala distributed data processing
+description: Apache Spark 4.0.2 best practices for PySpark and Scala distributed data processing
 scope: core
 user-invocable: false
 ---
 
 # Apache Spark Best Practices
 
+> **Version**: Spark 4.0.2. Key changes from Spark 3.x: ANSI mode is now **default** (stricter SQL type coercion and overflow checks), and Spark Connect provides a decoupled client-server protocol for remote Spark access.
+
 ## Performance Optimization
 
 ### Broadcast Joins (CRITICAL)

package/templates/.claude/skills/springboot-best-practices/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: springboot-best-practices
-description: Spring Boot patterns for enterprise Java applications
+description: Spring Boot 4.0 patterns for enterprise Java 25 applications
 scope: core
 user-invocable: false
 ---

package/templates/.claude/skills/task-decomposition/SKILL.md

@@ -48,6 +48,12 @@ Before decomposing, select the appropriate workflow pattern:
    ├── Map subtasks to agents (use routing skills)
    └── Generate DAG workflow spec
 
+2.5. Validate granularity against pipeline-guards limits:
+     ├── For each subtask, estimate file count
+     ├── If files > 10 → emit advisory: [Guard] ⚠ Subtask "{id}" assigned {n} files (> 10) — splitting by layer
+     ├── If files > 15 → emit hard warning: [Guard] 🛑 Subtask "{id}" assigned {n} files (> 15) — must split
+     └── Auto-split oversized subtasks by layer/domain until all ≤ 10
+
 3. Present plan to user (R015 transparency)
    ├── Show decomposed subtasks with agents
    ├── Show dependency graph
@@ -172,10 +178,43 @@ A subtask is **atomic** when it meets ALL of:
 - Single concern (one logical change)
 - Independently testable outcome
 - < 15 minutes estimated duration
-- < 3 files affected
+- < 3 files affected (ideal atomic size)
+- MUST NOT exceed 10 files (pipeline-guards advisory threshold)
+- If > 10 files unavoidable → emit [Guard] warning and split by layer/domain
+- > 15 files is a hard violation — always split further (pipeline-guards hard cap)
 
 If a subtask is not atomic → decompose further (max 2 levels deep).
 
+## Granularity Validation
+
+After decomposition, validate each subtask against pipeline-guards file limits:
+
+| Subtask Files | Action |
+|---------------|--------|
+| ≤ 3 | Ideal atomic size — no action |
+| 4-10 | Acceptable — proceed without warning |
+| 11-15 | Advisory warning, attempt further split |
+| > 15 | Hard warning, MUST split before execution |
+
+### Validation Process
+
+For each decomposed subtask:
+1. Count estimated files
+2. If > 10:
+   a. Emit: `[Guard] ⚠ Subtask "{id}" assigned {n} files (> 10) — splitting by layer`
+   b. Attempt split by: layer (domain → adapter → handler) or domain separation
+   c. Re-validate split results
+3. If > 15 after split attempt:
+   a. Emit: `[Guard] 🛑 Subtask "{id}" still has {n} files (> 15) — requires user override`
+   b. Pause for user confirmation before proceeding
+
+### Generated DAG Adjustment
+
+When granularity validation triggers a split, update the DAG spec:
+- Original node is replaced by 2+ child nodes
+- Dependencies are preserved (children inherit parent's deps)
+- `max_parallel` in config respects R009 limits (soft: 4, hard: 5)
+
 ## Skip Decomposition When
 
 | Condition | Reason |
@@ -185,6 +224,10 @@ If a subtask is not atomic → decompose further (max 2 levels deep).
 | User explicitly requests "just do it" | User override |
 | Single domain, single agent | No parallelization benefit |
 
+## Permission Mode
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+
 ## Integration
 
 | Component | Integration |
@@ -195,3 +238,4 @@ If a subtask is not atomic → decompose further (max 2 levels deep).
 | R010 | Decomposition happens in orchestrator only |
 | R015 | Plan displayed before execution for user approval |
 | R018 | 3+ agents in plan → check Agent Teams eligibility |
+| pipeline-guards | Validates subtask file count against 10/15 granularity limits |

package/templates/.claude/skills/update-docs/SKILL.md

@@ -99,7 +99,7 @@ Scanning project structure...
 
 Agents:
   ✓ 15 agents found in .claude/agents/
-  ✗ Missing: lang-java21-expert.md (referenced but not found)
+  ✗ Missing: lang-java-expert.md (referenced but not found)
 
 Skills:
   ✓ 13 skills found in .claude/skills/
@@ -123,7 +123,7 @@ Run "/update-docs" to fix.
 Syncing documentation with project structure...
 
 [1/3] Verifying agents
-  - Removed reference: lang-java21-expert (not found)
+  - Removed reference: lang-java-expert (not found)
   ✓ 15 → 14 agents
 
 [2/3] Verifying skills

package/templates/.claude/skills/worker-reviewer-pipeline/SKILL.md

@@ -163,3 +163,5 @@ config: {max_iterations: 1, quality_gate: majority_pass}
 - Worker and Reviewer must be different agent instances (same type allowed)
 - Nested pipelines not supported (use dag-orchestration for complex flows)
 - Pipeline does not auto-commit; orchestrator decides post-pipeline actions
+
+When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.

package/templates/CLAUDE.md

@@ -103,6 +103,7 @@ oh-my-customcode로 구동됩니다.
 | 릴리즈 | `/pipeline auto-dev`, `/omcustom-release-notes`, `/release-plan` | 자동 개발, 릴리즈 노트 |
 | 리서치 | `/research`, `/scout`, `/deep-plan`, `/omcustom:agora` | 병렬 분석, URL 평가, 연구 계획 |
 | 메모리 | `/memory-save`, `/memory-recall` | 세션 메모리 관리 |
+| 최적화 | `/token-efficiency-audit` | 토큰 효율 감사 (3계층 방어 스택) |
 | 시스템 | `/omcustom:lists`, `/omcustom:status`, `/omcustom:help` | 전체 목록, 상태, 도움말 |
 
 > 전체 커맨드 목록 (60+ 커맨드): `/omcustom:lists` 실행
@@ -161,7 +162,7 @@ oh-my-customcode는 소프트웨어 컴파일과 동일한 구조를 따릅니
 
 | 타입 | 수량 | 에이전트 |
 |------|------|----------|
-| SW Engineer/Language | 6 | lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java21-expert |
+| SW Engineer/Language | 6 | lang-golang-expert, lang-python-expert, lang-rust-expert, lang-kotlin-expert, lang-typescript-expert, lang-java-expert |
 | SW Engineer/Backend | 6 | be-fastapi-expert, be-springboot-expert, be-go-backend-expert, be-express-expert, be-nestjs-expert, be-django-expert |
 | SW Engineer/Frontend | 5 | fe-vercel-agent, fe-vuejs-agent, fe-svelte-agent, fe-flutter-agent, fe-design-expert |
 | SW Engineer/Tooling | 4 | tool-npm-expert, tool-optimizer, tool-bun-expert, slack-cli-expert |

package/templates/guides/airflow/README.md

@@ -1,10 +1,10 @@
-# Apache Airflow Guide (3.1.8)
+# Apache Airflow Guide (3.2.0)
 
-Reference documentation for Apache Airflow 3.1.8 DAG development best practices.
+Reference documentation for Apache Airflow 3.2.0 DAG development best practices.
 
 ## Source
 
-Based on [Apache Airflow 3.1.8 official documentation](https://airflow.apache.org/docs/apache-airflow/3.1.8/) and [Astronomer best practices](https://docs.astronomer.io/).
+Based on [Apache Airflow 3.2.0 official documentation](https://airflow.apache.org/docs/apache-airflow/3.2.0/) and [Astronomer best practices](https://docs.astronomer.io/).
 
 ## Airflow 3.x Key Changes
 
@@ -39,9 +39,9 @@ This guide is referenced by:
 
 ## External Resources
 
-- [Airflow 3.1.8 Official Docs](https://airflow.apache.org/docs/apache-airflow/3.1.8/)
-- [Airflow 3.1.8 Best Practices](https://airflow.apache.org/docs/apache-airflow/3.1.8/best-practices.html)
-- [Airflow Task SDK](https://airflow.apache.org/docs/apache-airflow/3.1.8/authoring-and-scheduling/index.html)
-- [Airflow TaskFlow API](https://airflow.apache.org/docs/apache-airflow/3.1.8/core-concepts/taskflow.html)
-- [Migration Guide 2.x → 3.x](https://airflow.apache.org/docs/apache-airflow/3.1.8/migration-guide.html)
+- [Airflow 3.2.0 Official Docs](https://airflow.apache.org/docs/apache-airflow/3.2.0/)
+- [Airflow 3.2.0 Best Practices](https://airflow.apache.org/docs/apache-airflow/3.2.0/best-practices.html)
+- [Airflow Task SDK](https://airflow.apache.org/docs/apache-airflow/3.2.0/authoring-and-scheduling/index.html)
+- [Airflow TaskFlow API](https://airflow.apache.org/docs/apache-airflow/3.2.0/core-concepts/taskflow.html)
+- [Migration Guide 2.x → 3.x](https://airflow.apache.org/docs/apache-airflow/3.2.0/migration-guide.html)
 - [Astronomer Docs](https://docs.astronomer.io/)

package/templates/guides/docker/compose-best-practices.md

@@ -4,9 +4,9 @@
 
 ## File Structure
 
-```yaml
-version: "3.8"
+> **Note**: The `version` field is obsolete as of Compose Spec v5 and should be omitted from modern compose files. Docker Compose now uses the Compose Specification directly.
 
+```yaml
 services:
   # Application services
   app:
@@ -201,8 +201,6 @@ services:
 ## Complete Example
 
 ```yaml
-version: "3.8"
-
 services:
   app:
     build:
@@ -260,7 +258,7 @@ services:
       - backend
 
   nginx:
-    image: nginx:1.25-alpine
+    image: nginx:1.28-alpine
     restart: unless-stopped
     ports:
       - "80:80"

package/templates/guides/docker/dockerfile-best-practices.md

@@ -25,13 +25,13 @@ node_modules
 
 ```dockerfile
 # Build stage
-FROM golang:1.21 AS builder
+FROM golang:1.26 AS builder
 WORKDIR /app
 COPY . .
 RUN go build -o myapp
 
 # Runtime stage
-FROM alpine:3.19
+FROM alpine:3.23
 COPY --from=builder /app/myapp /usr/local/bin/
 CMD ["myapp"]
 ```
@@ -42,13 +42,13 @@ CMD ["myapp"]
 
 ```dockerfile
 # Pin versions
-FROM ubuntu:22.04
+FROM ubuntu:24.04
 
 # Use digest for reproducibility
 FROM node:20@sha256:abc123...
 
 # Use official images
-FROM python:3.12-slim
+FROM python:3.14-slim
 ```
 
 ### RUN
@@ -197,12 +197,12 @@ ENV API_KEY=secret123
 
 ```dockerfile
 # Official and verified
-FROM nginx:1.25
+FROM nginx:1.28
 FROM postgres:16
 
 # Minimal images
 FROM gcr.io/distroless/static
-FROM alpine:3.19
+FROM alpine:3.23
 ```
 
 ## Example Dockerfiles
@@ -229,13 +229,13 @@ CMD ["node", "dist/server.js"]
 ### Python
 
 ```dockerfile
-FROM python:3.12-slim AS builder
+FROM python:3.14-slim AS builder
 WORKDIR /app
 RUN pip install --user pipenv
 COPY Pipfile Pipfile.lock ./
 RUN pipenv install --system --deploy
 
-FROM python:3.12-slim
+FROM python:3.14-slim
 WORKDIR /app
 COPY --from=builder /root/.local /root/.local
 COPY . .
@@ -248,7 +248,7 @@ CMD ["gunicorn", "-b", "0.0.0.0:8000", "app:app"]
 ### Go
 
 ```dockerfile
-FROM golang:1.21-alpine AS builder
+FROM golang:1.26-alpine AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download

package/templates/guides/flutter/index.yaml

@@ -22,7 +22,7 @@ documents:
 
   - name: state-management
     path: ./state-management.md
-    description: Riverpod 3.0, BLoC 9.0, Provider patterns and selection guide
+    description: Riverpod 3.3, BLoC 9.1, Provider patterns and selection guide
 
   - name: architecture
     path: ./architecture.md

package/templates/guides/flutter/state-management.md

@@ -6,13 +6,13 @@
 
 | Approach | Complexity | Scalability | Best For |
 |----------|-----------|-------------|----------|
-| **Riverpod 3.0** | Medium | Excellent | New projects (default) |
-| **BLoC 9.0** | High | Excellent | Enterprise, regulated industries |
+| **Riverpod 3.3** | Medium | Excellent | New projects (default) |
+| **BLoC 9.1** | High | Excellent | Enterprise, regulated industries |
 | **Provider** | Low | Moderate | Simple apps, learning |
 | **setState** | Low | Poor | Ephemeral local UI state |
 | **GetX** | Low | Poor | **AVOID** for new projects |
 
-## Riverpod 3.0 (Default)
+## Riverpod 3.3 (Default)
 
 ### Provider Types
 
@@ -81,7 +81,7 @@ class ProductListScreen extends ConsumerWidget {
 - Use `family` for parameterized providers
 - Use `keepAlive` sparingly (expensive computations only)
 
-## BLoC 9.0 (Enterprise)
+## BLoC 9.1 (Enterprise)
 
 ### Cubit (Simple)
 

package/templates/guides/index.yaml

@@ -9,6 +9,12 @@ guides:
       type: internal
 
   # Frontend
+  - name: claude-design
+    description: Claude Design artifact handoff workflow — connecting Anthropic's conversational design tool outputs to Claude Code's fe-design-expert implementation pipeline
+    path: ./claude-design/
+    source:
+      type: internal
+
   - name: impeccable-design
     description: AI design language reference — typography, color, motion, and UX writing for production-grade UI
     path: ./impeccable-design/
@@ -43,9 +49,9 @@ guides:
       origin: go.dev
       url: https://go.dev/doc/effective_go
 
-  - name: java21
-    description: Java 21 language reference and modern feature documentation
-    path: ./java21/
+  - name: java
+    description: Java language reference and modern feature documentation
+    path: ./java/
     source:
       type: external
       origin: docs.oracle.com

package/templates/guides/{java21 → java}/index.yaml

@@ -1,29 +1,29 @@
-# Java 21 Guide
+# Java Guide
 
 metadata:
-  name: java21
-  description: Java 21 language reference and modern feature documentation
+  name: java
+  description: Java 25 LTS language reference and modern feature documentation
 
 source:
   type: external
   origin: docs.oracle.com
   urls:
-    - https://docs.oracle.com/en/java/javase/21/
+    - https://docs.oracle.com/en/java/javase/25/
     - https://openjdk.org/projects/loom/
     - https://openjdk.org/jeps/440
     - https://openjdk.org/jeps/441
     - https://openjdk.org/jeps/444
     - https://google.github.io/styleguide/javaguide.html
-  last_fetched: "2026-03-11"
+  last_fetched: "2026-04-20"
 
 documents:
-  - name: modern-java21
-    path: ./modern-java21.md
-    description: Java 21 modern features (Virtual Threads, Pattern Matching, Records, Sealed Classes)
+  - name: modern-java
+    path: ./modern-java.md
+    description: Java 25 LTS modern features (Virtual Threads, Pattern Matching, Records, Sealed Classes)
 
   - name: java-style-guide
     path: ./java-style-guide.md
     description: Google Java Style Guide conventions
 
 used_by:
-  - lang-java21-expert
+  - lang-java-expert

package/templates/guides/{java21/modern-java21.md → java/modern-java.md}

@@ -1,4 +1,4 @@
-# Modern Java 21 Features
+# Modern Java Features
 
 > Sources: https://openjdk.org/jeps/ (JEP 431, 440, 441, 444)
 
@@ -77,7 +77,7 @@ if (obj instanceof String) {
     return s.length();
 }
 
-// Java 21
+// Java 21+
 if (obj instanceof String s) {
     return s.length();
 }

package/templates/guides/slack-cli/README.md

@@ -1,6 +1,6 @@
 # Slack CLI Reference Guide
 
-> Source: https://docs.slack.dev/tools/slack-cli/ | Version: v3.15.0
+> Source: https://docs.slack.dev/tools/slack-cli/ | Version: v4.0
 
 ## Overview
 

package/templates/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.102.0",
+  "version": "0.103.0",
   "lastUpdated": "2026-04-18T00:00:00.000Z",
   "components": [
     {

package/templates/.claude/agents/lang-java21-expert.md

@@ -1,42 +0,0 @@
----
-name: lang-java21-expert
-description: Expert Java 21 developer for modern Java with Virtual Threads, Pattern Matching, Record Patterns, and Sequenced Collections. Use for Java files (*.java, pom.xml, build.gradle), Java-related keywords, high-concurrency systems, data-centric APIs with Records, and migrating from older Java versions.
-model: sonnet
-domain: backend
-memory: project
-effort: high
-skills:
-  - java21-best-practices
-tools:
-  - Read
-  - Write
-  - Edit
-  - Grep
-  - Glob
-  - Bash
-permissionMode: bypassPermissions
----
-
-You are an expert Java 21 developer for modern Java features including Virtual Threads, Pattern Matching, Record Patterns, and Sequenced Collections.
-
-## Capabilities
-
-- Modern Java 21 leveraging latest features
-- Virtual Threads (JEP 444) for scalable concurrency
-- Pattern Matching for switch and instanceof
-- Record Patterns (JEP 440), Sequenced Collections (JEP 431)
-- Google Java Style Guide compliance
-- Legacy Java migration to Java 21
-
-## Reference Documentation
-
-- https://docs.oracle.com/en/java/javase/21/
-- https://google.github.io/styleguide/javaguide.html
-
-## Skills
-
-Apply **java21-best-practices** for core Java 21 guidelines.
-
-## Reference Guides
-
-Consult `guides/java21/` for reference documentation.