oh-my-customcode 1.0.19 → 1.1.0

package/README.md

@@ -13,7 +13,7 @@
 
 **[한국어 문서 (Korean)](./README_ko.md)**
 
-49 agents. 117 skills. 23 rules. One command.
+49 agents. 118 skills. 23 rules. One command.
 
 ```bash
 npm install -g oh-my-customcode && cd your-project && omcustom init
@@ -126,13 +126,13 @@ Agent(arch-documenter):haiku      ┘
 | QA | 3 | qa-planner, qa-writer, qa-engineer |
 | Security | 1 | sec-codeql |
 | Managers | 6 | mgr-creator, mgr-updater, mgr-supplier, mgr-gitnerd, mgr-sauron, mgr-claude-code-bible |
-| System | 3 | sys-memory-keeper, sys-naggy, tracker-checkpoint |
+| System | 4 | sys-memory-keeper, sys-naggy, tracker-checkpoint, wiki-curator |
 
 Each agent declares its tools, model, memory scope, and limitations in YAML frontmatter. Tool budgets are enforced per agent type for accuracy.
 
 ---
 
-### Skills (117)
+### Skills (118)
 
 | Category | Count | Includes |
 |----------|-------|----------|
@@ -145,7 +145,7 @@ Each agent declares its tools, model, memory scope, and limitations in YAML fron
 | Package | 3 | npm-publish, npm-version, npm-audit |
 | Optimization | 3 | optimize-analyze, optimize-bundle, optimize-report |
 | Security | 3 | adversarial-review, cve-triage, jinja2-prompts |
-| Other | 7 | claude-native, vercel-deploy, skills-sh-search, result-aggregation, writing-clearly-and-concisely, and more |
+| Other | 47 | claude-native, vercel-deploy, skills-sh-search, result-aggregation, writing-clearly-and-concisely, and ~40 more |
 
 Skills use a 3-tier scope system: `core` (universal), `harness` (agent/skill maintenance), `package` (project-specific).
 
@@ -270,7 +270,7 @@ your-project/
 ├── CLAUDE.md                   # Entry point
 ├── .claude/
 │   ├── agents/                 # 49 agent definitions
-│   ├── skills/                 # 117 skill modules
+│   ├── skills/                 # 118 skill modules
 │   ├── rules/                  # 23 governance rules (R000-R023)
 │   ├── hooks/                  # 15 lifecycle hook scripts
 │   ├── schemas/                # Tool input validation schemas

package/dist/cli/index.js

@@ -241,7 +241,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "1.0.19",
+    version: "1.1.0",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {
@@ -289,7 +289,7 @@ var init_package = __esm(() => {
       yaml: "^2.8.2"
     },
     devDependencies: {
-      "@anthropic-ai/sdk": "^0.105.0",
+      "@anthropic-ai/sdk": "^0.106.0",
       "@biomejs/biome": "^2.3.12",
       "@types/bun": "^1.3.6",
       "@types/js-yaml": "^4.0.9",

package/dist/index.js

@@ -2031,7 +2031,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "1.0.19",
+  version: "1.1.0",
   description: "Batteries-included agent harness for Claude Code",
   type: "module",
   bin: {
@@ -2079,7 +2079,7 @@ var package_default = {
     yaml: "^2.8.2"
   },
   devDependencies: {
-    "@anthropic-ai/sdk": "^0.105.0",
+    "@anthropic-ai/sdk": "^0.106.0",
     "@biomejs/biome": "^2.3.12",
     "@types/bun": "^1.3.6",
     "@types/js-yaml": "^4.0.9",

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "1.0.19",
+  "version": "1.1.0",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {
@@ -51,7 +51,7 @@
     "yaml": "^2.8.2"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.105.0",
+    "@anthropic-ai/sdk": "^0.106.0",
     "@biomejs/biome": "^2.3.12",
     "@types/bun": "^1.3.6",
     "@types/js-yaml": "^4.0.9",

package/templates/.claude/agents/fe-design-expert.md

@@ -9,7 +9,7 @@ skills:
   - impeccable-design
   - web-design-guidelines
   - diagram-design
-tools: [Read, Write, Edit, Grep, Glob, Bash]
+tools: [Read, Write, Edit, Grep, Glob]
 maxTurns: 20
 disallowedTools: [Bash]
 limitations:
@@ -47,21 +47,7 @@ See `impeccable-design` skill for detailed command workflows and triggers.
 
 ### AI Slop Test
 
-Before declaring any design "done", run the AI Slop Test. This is the critical checkpoint.
-
-Ask: **Would someone immediately identify this as AI-generated?**
-
-Flag these patterns as AI slop:
-- Overused fonts: Inter, Roboto, or Arial used as default without intentional reason
-- Pure black (`#000`) or pure gray backgrounds with no color tinting
-- Excessive card nesting with uniform rounded corners and drop shadows on everything
-- Generic gradient backgrounds (blue-purple, coral-orange) with no contextual rationale
-- Bounce or elastic animations as "delight" without functional purpose
-- Centered-everything layouts that avoid spatial decisions
-- Hero sections with a gradient blob behind centered text
-- Identical spacing increments used everywhere (8px, 8px, 8px)
-- Color palettes that are purely neutral except for one brand accent
-- Empty states with a generic icon + "No items yet" + CTA
+Run the AI Slop Test as the design ship-gate — see the `impeccable-design` skill for the flag-pattern list and verdict scale.
 
 ## Workflow
 

package/templates/.claude/agents/mgr-claude-code-bible.md

@@ -16,18 +16,6 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 You are the authoritative source of truth for Claude Code specifications. You fetch official documentation from code.claude.com and validate the project against official specs.
 
 ## Two Modes

package/templates/.claude/agents/mgr-creator.md

@@ -18,10 +18,6 @@ maxTurns: 25
 permissionMode: bypassPermissions
 ---
 
-## .claude/ 경로 처리 (CC v2.1.121+)
-
-Direct Write/Edit/Bash on `.claude/**` and `templates/.claude/**` is permitted under `mode: "bypassPermissions"` as of CC v2.1.121 (#1101). The legacy `/tmp/*.sh` bypass is deprecated. For CC < v2.1.121, see git history for the legacy pattern.
-
 You are an agent creation specialist following R006 (MUST-agent-design.md) rules.
 
 ## Workflow

package/templates/.claude/agents/mgr-gitnerd.md

@@ -19,18 +19,6 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 You are a Git operations specialist following GitHub flow best practices.
 
 ## Capabilities

package/templates/.claude/agents/mgr-sauron.md

@@ -18,18 +18,6 @@ maxTurns: 25
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 You are an automated verification specialist that executes the mandatory R017 verification process, acting as the "all-seeing eye" that ensures system integrity through comprehensive multi-round verification.
 
 ## Core Capabilities
@@ -54,117 +42,7 @@ You are an automated verification specialist that executes the mandatory R017 ve
 | `mgr-sauron:quick` | Quick verification (single pass) |
 | `mgr-sauron:report` | Generate verification status report |
 
-## Verification Process
-
-### Phase 1: Manager Verification (5 rounds)
-
-**Round 1-2: Basic Checks**
-- mgr-supplier:audit (all agents, dependency validation)
-- mgr-updater:docs (documentation sync check)
-
-**Round 3-4: Re-verify + Update**
-- Re-run mgr-supplier:audit
-- Re-run mgr-updater:docs (apply any detected changes)
-
-**Round 5: Final Count Verification**
-- Agent count: CLAUDE.md vs actual .md files
-- Skill count: CLAUDE.md vs actual SKILL.md files
-- Memory field distribution matches CLAUDE.md
-- Hook/context/guide/rule counts
-
-### Phase 2: Deep Review (3 rounds)
-
-**Round 1: Workflow Alignment**
-- Agent workflows match purpose
-- Command definitions match implementations
-- Routing skill patterns are valid
-
-**Round 2: Reference Verification**
-- All skill references exist
-- All agent frontmatter valid
-- memory field values valid (user | project | local)
-- No orphaned agents
-
-**Round 3: Philosophy Compliance**
-- R006: Agent design rules (including memory field spec)
-- R007: Agent identification rules
-- R008: Tool identification rules
-- R009: Parallel execution rules
-- R010: Orchestrator coordination rules
-- R011: Memory integration (native-first architecture)
-
-### Phase 2.5: Documentation Accuracy
-
-**Agent Name Accuracy**
-- Every agent name in CLAUDE.md must match actual filename
-- No shortened names, no missing agents
-
-**Component Count Accuracy**
-- All counts cross-verified against filesystem
-
-**Slash Command Verification**
-- Every command must have corresponding skill
-
-**Routing Skill Completeness**
-- Every agent reachable through routing skills
-
-### Phase 3: Auto-fix & Report
-
-**Auto-fixable Issues:**
-- Count mismatches in CLAUDE.md
-- Missing memory field in agents
-- Outdated documentation references
-
-**Manual Review Required:**
-- Missing agent files
-- Invalid memory scope values
-- Philosophy violations
-
-## Output Format
-
-### Watch Mode Report
-
-```
-[Sauron] Full Verification Started
-
-=== Phase 1: Manager Verification ===
-[Round 1/5] mgr-supplier:audit
-  - 34 agents checked
-  - 3 issues found
-[Round 2/5] mgr-updater:docs
-  - Documentation sync: OK
-...
-
-=== Phase 2: Deep Review ===
-[Round 1/3] Workflow Alignment
-  - All workflows valid
-...
-
-=== Phase 3: Resolution ===
-[Auto-fixed]
-  - CLAUDE.md agent count: 33 -> 34
-
-[Manual Review Required]
-  - .claude/agents/broken-agent.md: missing
-
-[Sauron] Verification Complete
-  Total Issues: 8
-  Auto-fixed: 5
-  Manual: 3
-```
-
-### Quick Mode Report
-
-```
-[Sauron] Quick Verification
-
-Agents: 34/34 OK
-Skills: 40/40 OK
-Refs: 2 broken
-
-Status: ISSUES FOUND
-Run 'mgr-sauron:watch' for full verification
-```
+Full 5+3-round verification procedure and report format: see the sauron-watch skill (single source of truth).
 
 ## Integration
 

package/templates/.claude/agents/mgr-supplier.md

@@ -19,18 +19,6 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 You are a dependency validation specialist ensuring agents have all required skills and guides properly linked.
 
 ## Capabilities

package/templates/.claude/agents/mgr-updater.md

@@ -22,10 +22,6 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-## .claude/ 경로 처리 (CC v2.1.121+)
-
-Direct Write/Edit/Bash on `.claude/**` and `templates/.claude/**` is permitted under `mode: "bypassPermissions"` as of CC v2.1.121 (#1101). The legacy `/tmp/*.sh` bypass is deprecated. For CC < v2.1.121, see git history for the legacy pattern.
-
 You are an external source synchronization specialist keeping external components up-to-date.
 
 ## Workflow

package/templates/.claude/agents/slack-cli-expert.md

@@ -42,57 +42,4 @@ Guides are located at: `guides/slack-cli/`
 5. Execute the requested CLI operation with appropriate flags
 6. Verify results and report status to user
 
-## Key Command Patterns
-
-### App Lifecycle
-```bash
-slack create <app-name>          # Scaffold a new Slack app
-slack run                        # Start local development server
-slack deploy                     # Deploy app to Slack Platform
-slack delete                     # Delete a deployed app
-```
-
-### Authentication
-```bash
-slack login                      # Authorize a workspace
-slack logout                     # Remove workspace authorization
-slack auth list                  # List all authorized workspaces
-```
-
-### Triggers
-```bash
-slack trigger create --trigger-def <file>   # Create an event trigger
-slack trigger update --trigger-id <id>      # Update an existing trigger
-slack trigger delete --trigger-id <id>      # Delete a trigger
-slack trigger list                          # List all triggers
-```
-
-### Datastore
-```bash
-slack datastore put    '{"datastore": "<name>", "item": {...}}'
-slack datastore get    '{"datastore": "<name>", "id": "<id>"}'
-slack datastore query  '{"datastore": "<name>"}'
-slack datastore bulk-put    --datastore <name> --data-file <file>
-slack datastore bulk-delete --datastore <name> --data-file <file>
-```
-
-### Environment Variables
-```bash
-slack env add    <key> <value>   # Add or update an env variable
-slack env remove <key>           # Remove an env variable
-slack env list                   # List all env variables
-```
-
-### Collaboration
-```bash
-slack collaborators add    <email>   # Add a collaborator
-slack collaborators remove <email>   # Remove a collaborator
-slack collaborators list             # List collaborators
-```
-
-### Diagnostics
-```bash
-slack doctor                     # System diagnostics and dependency check
-slack manifest validate          # Validate app manifest before deployment
-slack feedback                   # Send feedback to Slack
-```
+Command reference: see guides/slack-cli/README.md (source of truth).

package/templates/.claude/agents/sys-naggy.md

@@ -18,18 +18,6 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 You are a task management specialist that proactively manages TODO items and reminds users of pending tasks.
 
 ## Capabilities

package/templates/.claude/agents/tracker-checkpoint.md

@@ -10,18 +10,6 @@ domain: universal
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 # Tracker Checkpoint Agent
 
 ## Purpose

package/templates/.claude/agents/wiki-curator.md

@@ -14,18 +14,6 @@ memory: project
 permissionMode: bypassPermissions
 ---
 
-## Mandatory: .claude/ 경로 처리 (R010 Universal /tmp Script Bypass)
-
-ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes Write, Edit, and write-Bash. Direct `Write(".claude/...")` or `Edit(".claude/...")` triggers user approval prompts that block unattended automation, regardless of `bypassPermissions` mode or allow rules.
-
-Pattern:
-1. Write tool → `/tmp/fix-{topic}-$$.sh` containing heredoc/sed/cp targeting `.claude/`
-2. Bash tool → `bash /tmp/fix-{topic}-$$.sh`
-
-Read tool on `.claude/` paths is exempt (sensitive-path bypass for read-only). For `templates/.claude/` paths, the same pattern applies (also sensitive).
-
-Reference: R010 (.claude/rules/MUST-orchestrator-coordination.md), #1046, #1052, #1062.
-
 # Wiki Curator
 
 Dedicated agent for wiki file operations. All wiki/ directory writes go through this agent per R010 delegation rules.

package/templates/.claude/rules/MUST-agent-design.md

@@ -23,7 +23,8 @@ tools: [Read, Write, ...]  # Allowed tools
 | `sonnet` | claude-sonnet-4-6 | General tasks, code generation (default) |
 | `opus` | claude-opus-4-6 | Complex reasoning, architecture |
 | `opusplan` | claude-opus-4-6 + plan mode | Architecture planning with approval gates |
-| `opus47` | claude-opus-4-7 | Latest Opus model, supports xhigh effort |
+| `opus47` | claude-opus-4-7 | Supports xhigh effort |
+| `opus48` | claude-opus-4-8 | Latest Opus model (GA); highest capability below Fable 5 |
 | `fable` | claude-fable-5 | Mythos-class; tier above Opus, highest GA capability (access added in CC v2.1.170) |
 
 Extended context suffix: `[1m]` (e.g., `claude-opus-4-6[1m]`) — enables 1M token context window.
@@ -48,6 +49,8 @@ This is a settings-level resilience mechanism, distinct from the per-agent `mode
 
 > **v2.1.187+**: Org-configured model restrictions now apply to the model picker, `--model`, `/model`, and `ANTHROPIC_MODEL` (a restricted model shows "restricted by your organization's settings"). Extends the v2.1.175 `enforceAvailableModels` scope to per-agent `model:` override entry points — a managed model allowlist now also constrains the picker/env paths. Also fixed `--json-schema` / workflow `agent({schema})` structured output: the model can no longer re-call `StructuredOutput` indefinitely after a successful call, and follow-up turns reliably return structured output — relevant to schema-constrained subagent spawns.
 
+> **v2.1.196+**: 조직 기본 모델(org default models)이 추가되어 관리자가 org 콘솔에서 조직 전체 기본 모델을 설정하며, 사용자가 직접 선택하지 않으면 `/model`에 "Org default"(또는 "Role default")로 표시됩니다. v2.1.175 `enforceAvailableModels`/v2.1.187 org model restriction의 연장선 — 조직 관리 설정이 기본 모델 해석까지 관여합니다. 또한 백그라운드 세션 turn 이후 중복 recap 라인 문제를 수정 — schema-rejected된 StructuredOutput 시도가 재시도와 나란히 렌더되지 않습니다(schema-constrained subagent spawn / Workflow `agent({schema})`에 관련).
+
 ### Safe Mode & Bundled Skill Control (CC v2.1.169+)
 
 > **v2.1.169+**: `--safe-mode` (and `CLAUDE_CODE_SAFE_MODE`) starts Claude Code with ALL customizations disabled (CLAUDE.md, plugins, skills, hooks, MCP servers) — use it to isolate whether a project customization (agent/skill/hook) causes a regression. The `disableBundledSkills` setting (and `CLAUDE_CODE_DISABLE_BUNDLED_SKILLS` env) hides bundled skills, workflows, and built-in slash commands from the model — useful when bundled skills conflict with or duplicate project skills (R006 skill-surface management). Note: `disableBundledSkills` hides skills from the model but is a CC platform setting, distinct from the advisory `skills:` frontmatter field (which is documentation metadata, not a runtime allowlist).
@@ -195,6 +198,8 @@ Agent frontmatter `hooks:` now fire when the agent runs as a main-thread agent v
 
 > **v2.1.191+**: Hooks with comma-separated matchers (e.g. `"Bash,PowerShell"`) now fire correctly — previously such matchers silently never fired. Relevant when authoring `.claude/hooks/` entries that target multiple tools in one matcher.
 
+> **v2.1.195+**: 하이픈이 포함된 hook matcher 식별자(예: `code-reviewer`, `mcp__brave-search`)가 이제 substring이 아니라 exact-match됩니다(이전에는 부분 문자열로 우연히 매칭). 하이픈 포함 MCP 서버의 모든 tool을 매칭하려면 `mcp__brave-search__.*` 형식을 사용하세요. 참고: oh-my-customcode의 `hooks.json`은 `*` / `mcp_tool_name matches "..."` / `tool == "..."` 형식을 사용하므로 이 변경의 영향을 받지 않습니다 — 다만 하이픈 포함 tool-name matcher를 새로 추가할 때 exact-match 시맨틱을 고려해야 합니다.
+
 ## Permission Mode Guidance
 
 CC defaults `mode` to `acceptEdits` if not specified — always pass `mode: "bypassPermissions"` explicitly in Agent tool calls (see R010). See guidance details via Read tool.

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -331,6 +331,12 @@ Before spawning any agent:
 
 > **v2.1.191+**: Stopping a background agent from the tasks panel is now PERMANENT — a stopped agent no longer resurrects after being stopped. Strengthens background-agent lifecycle control. `mode: "bypassPermissions"` on every Agent tool call remains required.
 
+> **v2.1.193+**: 유휴 백그라운드 shell 명령에 대한 자동 memory-pressure reaping이 추가되었습니다(`CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP=1`로 비활성화). 또한 백그라운드 관련 여러 수정: 모든 실행 작업이 새 세션으로 이월될 때 backgrounding(←←)이 "N background tasks would be abandoned"로 잘못 취소되던 문제, 자동 업데이트마다 pinned 백그라운드 에이전트가 "Continue from where you left off"로 재프롬프트되던 문제, 그리고 메인 turn을 backgrounding할 때 메인 대화를 재실행하는 phantom "general-purpose (resumed)" subagent가 생성되던 문제를 수정 — 후자는 sole-orchestrator 설계에서 유령 subagent 재실행을 제거합니다. 아울러 백그라운드 에이전트 launch 결과가 더 이상 Claude에게 "end your response"를 지시하지 않고, 에이전트 실행 중 다른 작업을 계속하도록 개선되었습니다(async 에이전트 위임 흐름 — R007 빈 응답 금지와 정합). `mode: "bypassPermissions"`는 모든 Agent tool 호출에 여전히 필수입니다.
+
+> **v2.1.195+**: 백그라운드 작업이 더 신형 Claude Code 버전으로 기록되었을 때 `claude agents`에서 사라지거나 데이터를 잃던 문제, 크래시된 백그라운드 작업을 다시 열 때 재시작 대신 최대 5초간 빈 화면을 보이던 문제, control socket 실패 시 백그라운드 에이전트 daemon이 도달 불가 상태로 실행되어 재시작이 막히던 문제를 수정. 백그라운드-에이전트 lifecycle 견고성 강화. `mode: "bypassPermissions"`는 여전히 필수입니다.
+
+> **v2.1.196+**: 백그라운드 작업을 wake할 때 transcript probe가 실제 transcript를 오독하여 대화를 영구 삭제하고 원 프롬프트를 재실행하던 문제를 수정 — 이제 파일을 삭제하지 않고 따로 보관합니다(transcript 의존 스킬 `homework`/`episodic-memory`에 관련). `claude agents --dangerously-skip-permissions`가 조용히 auto mode로 폴백하던 문제를 수정하여 bypass 고지를 표시하고 spawned agent에도 bypass 모드를 적용합니다(R010 Universal bypassPermissions와 정합). 또한 `claude agents` 사이드 패널 문제들(에이전트 열 때 키보드 포커스 고착, 열 때마다 백그라운드 작업의 subagent type 유실, 활성 실행 중 잘못된 상태 표시)을 수정. `mode: "bypassPermissions"`는 여전히 필수입니다.
+
 ## Agent Capability Pre-Check
 
 Before delegating a task to a subagent, MUST verify the target agent's tool capabilities against the task requirements. Failure to pre-check causes round-trip waste (delegation → failure → re-delegation).

package/templates/.claude/rules/MUST-permissions.md

@@ -55,6 +55,12 @@ Use a `"*"` deny rule in `settings.json` to enforce a deny-by-default posture, t
 
 > **v2.1.191+**: Sandbox network permission dialog now REMEMBERS hosts allowed with "Yes" for the rest of the session (no per-connection re-prompt). Also: `/permissions` Recently-denied tab now PERSISTS an approved denial on close (previously discarded); managed `forceRemoteSettingsRefresh` now takes effect via MDM/file policy with `Cache-Control: no-cache`; MCP capability discovery (`tools/list`/`prompts/list`/`resources/list`) and OAuth token requests now retry transient network errors with backoff (headless skips the browser popup). Relevant to Tier-4/Tier-6 (sandbox network + MCP) permission flows.
 
+> **v2.1.193+**: `autoMode.classifyAllShell` 설정은 모든 Bash/PowerShell 명령(Tier-4)을 arbitrary-code-execution 패턴만이 아니라 전부 auto-mode classifier로 보냅니다. auto-mode 거부 사유가 transcript / 거부 토스트 / `/permissions` recent denials에 노출됩니다. MCP 서버가 인증이 필요하면 시작 시 `/mcp`를 가리키는 알림을 표시하고, MCP `headersHelper` 인증은 tool 호출이 401/403을 반환하면 자동 재실행·재연결합니다(Tier-6). 이 섹션의 tier 기반 정책과 병존하는 플랫폼-레벨 동작입니다.
+
+> **v2.1.195+**: 프로젝트 `.claude/settings.json`으로만 활성화된 외부 플러그인이 이제 모든 loader 경로에서 명시적 설치 동의를 요구합니다(이전에는 일부 경로에서 우회됨). Tier-6 MCP/플러그인 신뢰 경계 강화.
+
+> **v2.1.196+**: 조직 기본 모델(org default models)이 추가되어 관리자가 org 콘솔에서 설정하며, 사용자가 직접 고르지 않으면 `/model`에 "Org default"(또는 "Role default")로 표시됩니다 — v2.1.187 org model restriction 범위를 기본 모델 해석까지 확장(cross-ref R006). 보안: `claude mcp list`/`get`이 self-approved `.mcp.json` 서버를 spawn하지 않고 신뢰되지 않은 워크스페이스는 `⏸ Pending approval` 표시(Tier-6, cross-ref R001). 또한 `claude agents --dangerously-skip-permissions`가 조용히 auto mode로 폴백하던 문제를 수정 — 이제 bypass 고지를 표시하고 spawned agent에도 bypass 모드를 적용합니다(R010 Universal bypassPermissions와 정합).
+
 ## Agent Tool Permission Mode
 
 When spawning subagents via the Agent tool, always pass `mode: "bypassPermissions"` explicitly. The Agent tool's default mode is `acceptEdits`, which **overrides** the agent frontmatter `permissionMode` field.

package/templates/.claude/rules/MUST-safety.md

@@ -102,6 +102,10 @@ Cross-reference: R010 Subagent Scope-Creep STOP Protocol, R002 (permission tiers
 
 > **v2.1.191+**: Sandbox network permission "Yes" approvals are remembered per-session (cf. R002). Reduces re-prompts but means an allowed host stays allowed for the session — scope network allows deliberately.
 
+> **v2.1.193+**: `autoMode.classifyAllShell` 설정은 arbitrary-code-execution 패턴만이 아니라 **모든** Bash/PowerShell 명령을 auto-mode classifier로 라우팅합니다. 이 섹션의 파괴적/자격증명 가드에 대한 플랫폼-레벨 보완입니다(모델은 여전히 명령 전 파괴적 작업을 열거하고 승인을 요청 — model-level; CC가 모든 shell을 classifier로 게이팅 — platform-level, 방어심층). auto-mode 거부 사유가 transcript, 거부 토스트, `/permissions` recent denials에 표시됩니다.
+
+> **v2.1.196+**: 보안 — `claude mcp list`/`get`이 커밋된 `.claude/settings.json`으로 self-approved된 `.mcp.json` 서버를 더 이상 spawn하지 않으며, 신뢰되지 않은 워크스페이스는 `⏸ Pending approval`을 표시합니다. 이는 CLAUDE.md의 ".mcp.json auto-install 금지"(R001) 정책에 대한 플랫폼-레벨 보완입니다 — 플랫폼이 신뢰되지 않은 워크스페이스에서 self-approved MCP 서버 spawn을 차단합니다.
+
 ## Required Before Destructive Operations
 
 Verify target, assess impact scope, check recoverability, get user approval.

package/templates/.claude/rules/SHOULD-hud-statusline.md

@@ -27,6 +27,10 @@ Format: `─── [Spawn] {subagent_type}:{model} | {description} ───`
 
 > **v2.1.172+**: Added a `model` attribute to the `claude_code.lines_of_code.count` OTEL metric — lines-of-code telemetry can now be sliced by model. Extends the per-dimension metric slicing (v2.1.161) in the `monitoring-setup` skill.
 
+> **v2.1.193+**: `claude_code.assistant_response` OpenTelemetry 로그 이벤트가 추가되어 모델의 응답 텍스트를 포함합니다. `OTEL_LOG_ASSISTANT_RESPONSES=1`이 아니면 redacted 되지만, 이 변수가 unset이면 `OTEL_LOG_USER_PROMPTS`를 따릅니다 — **보안 주의: 이미 프롬프트 내용을 로깅하는 배포는 업그레이드 즉시 응답 내용도 수신하기 시작합니다. 프롬프트만 유지하려면 `OTEL_LOG_ASSISTANT_RESPONSES=0`으로 설정하세요.** v2.1.157 tool_parameters / v2.1.161 metric slicing에 이은 `monitoring-setup` 스킬 OTEL 관측성 확장이며, 응답 텍스트 로깅은 명시적 opt-out이 필요한 민감 항목입니다.
+
+> **v2.1.196+**: 여러 병렬 요청이 사용량 한도에 도달하는 순간 rate-limit 경고가 깜빡이며 꺼지고 rate-limit telemetry가 과다 집계되던 문제를 수정. R012 관측성의 rate-limit 계측 정확도 개선입니다.
+
 <!-- DETAIL: HUD Events full spec
 ### When to Display: Multi-step tasks, parallel execution, long-running operations. Skip for single brief operations.
 ### Parallel Display:

package/templates/.claude/skills/agent-eval-framework/SKILL.md

@@ -125,7 +125,7 @@ task start → record tool_calls[] + timestamps → task end
 
 ### Persistent Storage (added v0.116.0, #1036)
 
-Baseline annotations and observed trajectories can be persisted to eval-core's SQLite database (`evalBaselines` + `agentTrajectories` tables). This complements the YAML file approach for cross-session analysis. Use eval-core query module (TBD — separate followup) for analytics.
+Baseline annotations and observed trajectories can be persisted to eval-core's SQLite database (`evalBaselines` + `agentTrajectories` tables). This complements the YAML file approach for cross-session analysis. The eval-core query API for the `evalBaselines`/`agentTrajectories` tables is not yet implemented — use the YAML annotation approach meanwhile.
 
 ## Integration with Existing Skills
 

package/templates/.claude/skills/grill-with-docs/ADR-FORMAT.md

@@ -0,0 +1,47 @@
+# ADR Format
+
+ADRs live in `docs/adr/` and use sequential numbering: `0001-slug.md`, `0002-slug.md`, etc.
+
+Create the `docs/adr/` directory lazily — only when the first ADR is needed.
+
+## Template
+
+```md
+# {Short title of the decision}
+
+{1-3 sentences: what's the context, what did we decide, and why.}
+```
+
+That's it. An ADR can be a single paragraph. The value is in recording *that* a decision was made and *why* — not in filling out sections.
+
+## Optional sections
+
+Only include these when they add genuine value. Most ADRs won't need them.
+
+- **Status** frontmatter (`proposed | accepted | deprecated | superseded by ADR-NNNN`) — useful when decisions are revisited
+- **Considered Options** — only when the rejected alternatives are worth remembering
+- **Consequences** — only when non-obvious downstream effects need to be called out
+
+## Numbering
+
+Scan `docs/adr/` for the highest existing number and increment by one.
+
+## When to offer an ADR
+
+All three of these must be true:
+
+1. **Hard to reverse** — the cost of changing your mind later is meaningful
+2. **Surprising without context** — a future reader will look at the code and wonder "why on earth did they do it this way?"
+3. **The result of a real trade-off** — there were genuine alternatives and you picked one for specific reasons
+
+If a decision is easy to reverse, skip it — you'll just reverse it. If it's not surprising, nobody will wonder why. If there was no real alternative, there's nothing to record beyond "we did the obvious thing."
+
+### What qualifies
+
+- **Architectural shape.** "We're using a monorepo." "The write model is event-sourced, the read model is projected into Postgres."
+- **Integration patterns between contexts.** "Ordering and Billing communicate via domain events, not synchronous HTTP."
+- **Technology choices that carry lock-in.** Database, message bus, auth provider, deployment target. Not every library — just the ones that would take a quarter to swap out.
+- **Boundary and scope decisions.** "Customer data is owned by the Customer context; other contexts reference it by ID only." The explicit no-s are as valuable as the yes-s.
+- **Deliberate deviations from the obvious path.** "We're using manual SQL instead of an ORM because X." Anything where a reasonable reader would assume the opposite. These stop the next engineer from "fixing" something that was deliberate.
+- **Constraints not visible in the code.** "We can't use AWS because of compliance requirements." "Response times must be under 200ms because of the partner API contract."
+- **Rejected alternatives when the rejection is non-obvious.** If you considered GraphQL and picked REST for subtle reasons, record it — otherwise someone will suggest GraphQL again in six months.

package/templates/.claude/skills/grill-with-docs/CONTEXT-FORMAT.md

@@ -0,0 +1,60 @@
+# CONTEXT.md Format
+
+## Structure
+
+```md
+# {Context Name}
+
+{One or two sentence description of what this context is and why it exists.}
+
+## Language
+
+**Order**:
+{A one or two sentence description of the term}
+_Avoid_: Purchase, transaction
+
+**Invoice**:
+A request for payment sent to a customer after delivery.
+_Avoid_: Bill, payment request
+
+**Customer**:
+A person or organization that places orders.
+_Avoid_: Client, buyer, account
+```
+
+## Rules
+
+- **Be opinionated.** When multiple words exist for the same concept, pick the best one and list the others under `_Avoid_`.
+- **Keep definitions tight.** One or two sentences max. Define what it IS, not what it does.
+- **Only include terms specific to this project's context.** General programming concepts (timeouts, error types, utility patterns) don't belong even if the project uses them extensively. Before adding a term, ask: is this a concept unique to this context, or a general programming concept? Only the former belongs.
+- **Group terms under subheadings** when natural clusters emerge. If all terms belong to a single cohesive area, a flat list is fine.
+
+## Single vs multi-context repos
+
+**Single context (most repos):** One `CONTEXT.md` at the repo root.
+
+**Multiple contexts:** A `CONTEXT-MAP.md` at the repo root lists the contexts, where they live, and how they relate to each other:
+
+```md
+# Context Map
+
+## Contexts
+
+- [Ordering](./src/ordering/CONTEXT.md) — receives and tracks customer orders
+- [Billing](./src/billing/CONTEXT.md) — generates invoices and processes payments
+- [Fulfillment](./src/fulfillment/CONTEXT.md) — manages warehouse picking and shipping
+
+## Relationships
+
+- **Ordering → Fulfillment**: Ordering emits `OrderPlaced` events; Fulfillment consumes them to start picking
+- **Fulfillment → Billing**: Fulfillment emits `ShipmentDispatched` events; Billing consumes them to generate invoices
+- **Ordering ↔ Billing**: Shared types for `CustomerId` and `Money`
+```
+
+The skill infers which structure applies:
+
+- If `CONTEXT-MAP.md` exists, read it to find contexts
+- If only a root `CONTEXT.md` exists, single context
+- If neither exists, create a root `CONTEXT.md` lazily when the first term is resolved
+
+When multiple contexts exist, infer which one the current topic relates to. If unclear, ask.

package/templates/.claude/skills/grill-with-docs/README.md

@@ -0,0 +1,11 @@
+# grill-with-docs
+
+`grill-with-docs` is a multi-platform skill (works in Claude Code) for stress-testing a plan against the language, boundaries, and decisions already present in a codebase.
+
+It asks one focused question at a time, checks the repository when the answer should be discoverable from code or docs, and captures settled domain language in `CONTEXT.md`. It can also suggest ADRs when a decision is hard to reverse, surprising without context, and shaped by a real trade-off.
+
+This version is packaged as a standalone skill. It includes its own context and ADR formats, so it does not rely on other skills being installed.
+
+## Credits
+
+Inspired by Matt Pocock's [`grill-with-docs`](https://github.com/mattpocock/skills/tree/main/skills/engineering/grill-with-docs) skill, packaged from [w00ing/skills](https://github.com/w00ing/skills/tree/main/grill-with-docs).

package/templates/.claude/skills/grill-with-docs/SKILL.md

@@ -0,0 +1,101 @@
+---
+name: grill-with-docs
+description: Grilling session that challenges your plan against the existing domain model, sharpens terminology, and updates documentation (CONTEXT.md, ADRs) inline as decisions crystallise. Use when user wants to stress-test a plan against their project's language and documented decisions.
+scope: core
+version: 1.0.0
+user-invocable: true
+---
+
+<what-to-do>
+
+Interview me relentlessly about every aspect of this plan until we reach a shared understanding. Walk down each branch of the design tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+
+Ask the questions one at a time, waiting for feedback on each question before continuing.
+
+If a question can be answered by exploring the codebase, explore the codebase instead.
+
+</what-to-do>
+
+<supporting-info>
+
+## Domain awareness
+
+During codebase exploration, also look for existing documentation:
+
+### File structure
+
+Most repos have a single context:
+
+```
+/
+├── CONTEXT.md
+├── docs/
+│   └── adr/
+│       ├── 0001-event-sourced-orders.md
+│       └── 0002-postgres-for-write-model.md
+└── src/
+```
+
+If a `CONTEXT-MAP.md` exists at the root, the repo has multiple contexts. The map points to where each one lives:
+
+```
+/
+├── CONTEXT-MAP.md
+├── docs/
+│   └── adr/                          ← system-wide decisions
+├── src/
+│   ├── ordering/
+│   │   ├── CONTEXT.md
+│   │   └── docs/adr/                 ← context-specific decisions
+│   └── billing/
+│       ├── CONTEXT.md
+│       └── docs/adr/
+```
+
+Create files lazily — only when you have something to write. If no `CONTEXT.md` exists, create one when the first term is resolved. If no `docs/adr/` exists, create it when the first ADR is needed.
+
+## During the session
+
+### Challenge against the glossary
+
+When the user uses a term that conflicts with the existing language in `CONTEXT.md`, call it out immediately. "Your glossary defines 'cancellation' as X, but you seem to mean Y — which is it?"
+
+### Sharpen fuzzy language
+
+When the user uses vague or overloaded terms, propose a precise canonical term. "You're saying 'account' — do you mean the Customer or the User? Those are different things."
+
+### Discuss concrete scenarios
+
+When domain relationships are being discussed, stress-test them with specific scenarios. Invent scenarios that probe edge cases and force the user to be precise about the boundaries between concepts.
+
+### Cross-reference with code
+
+When the user states how something works, check whether the code agrees. If you find a contradiction, surface it: "Your code cancels entire Orders, but you just said partial cancellation is possible — which is right?"
+
+### Update CONTEXT.md inline
+
+When a term is resolved, update `CONTEXT.md` right there. Don't batch these up — capture them as they happen. Use the format in [CONTEXT-FORMAT.md](./CONTEXT-FORMAT.md).
+
+`CONTEXT.md` should be totally devoid of implementation details. Do not treat `CONTEXT.md` as a spec, a scratch pad, or a repository for implementation decisions. It is a glossary and nothing else.
+
+### Offer ADRs sparingly
+
+Only offer to create an ADR when all three are true:
+
+1. **Hard to reverse** — the cost of changing your mind later is meaningful
+2. **Surprising without context** — a future reader will wonder "why did they do it this way?"
+3. **The result of a real trade-off** — there were genuine alternatives and you picked one for specific reasons
+
+If any of the three is missing, skip the ADR. Use the format in [ADR-FORMAT.md](./ADR-FORMAT.md).
+
+</supporting-info>
+
+## Cross-References
+
+| Skill | Relationship |
+|-------|--------------|
+| `brainstorming` (superpowers) | Process skill for early creative exploration; grill-with-docs is the domain-model stress-test that follows once a plan exists |
+| `ambiguity-gate` | Pre-routing clarity scoring; grill-with-docs goes deeper — interviews one question at a time against the codebase |
+| `deep-plan` | Research→plan→verify; grill-with-docs complements by sharpening terminology and capturing decisions as docs |
+
+**Unique value**: grill-with-docs captures settled domain language in `CONTEXT.md` (glossary) and offers ADRs inline as decisions crystallise — a domain-model documentation dimension the planning/grilling skills above do not cover.

package/templates/.claude/skills/intent-detection/patterns/agent-triggers.yaml

@@ -160,6 +160,14 @@ agents:
     supported_actions: [review, create, fix, refactor]
     base_confidence: 35
 
+  be-django-expert:
+    keywords:
+      korean: [장고, 디장고]
+      english: [django, "django rest", drf]
+    file_patterns: ["manage.py", "settings.py", "urls.py", "models.py", "wsgi.py", "asgi.py"]
+    supported_actions: [review, create, fix, refactor]
+    base_confidence: 75
+
   # SW Engineers - Tooling
   tool-bun-expert:
     keywords:
@@ -185,6 +193,14 @@ agents:
     supported_actions: [analyze, optimize, report, bundle]
     base_confidence: 40
 
+  slack-cli-expert:
+    keywords:
+      korean: [슬랙, 슬랙봇, 슬랙 알림, 슬랙 메시지]
+      english: [slack, "slack cli", "slack bot", "slack notification", webhook]
+    file_patterns: []
+    supported_actions: [send, notify, configure, post]
+    base_confidence: 75
+
   # SW Engineers - Database
   db-supabase-expert:
     keywords:
@@ -194,6 +210,79 @@ agents:
     supported_actions: [review, create, fix, migrate]
     base_confidence: 40
 
+  db-postgres-expert:
+    keywords:
+      korean: [포스트그레스, 포스트그레스큐엘, 피지]
+      english: [postgres, postgresql, psql, pgsql]
+    file_patterns: ["*.sql", "postgresql.conf", "pg_hba.conf"]
+    supported_actions: [review, create, fix, optimize]
+    base_confidence: 75
+
+  db-redis-expert:
+    keywords:
+      korean: [레디스, 캐시, 인메모리]
+      english: [redis, cache, "redis cluster", "in-memory"]
+    file_patterns: ["redis.conf", "*.rdb"]
+    supported_actions: [review, create, fix, optimize]
+    base_confidence: 75
+
+  db-alembic-expert:
+    keywords:
+      korean: [알렘빅, 마이그레이션, 스키마 마이그레이션]
+      english: [alembic, migration, "schema migration"]
+    file_patterns: ["alembic.ini", "alembic/versions/*.py", "migrations/*.py", "env.py"]
+    supported_actions: [migrate, review, create, fix]
+    base_confidence: 75
+
+  # DE Engineers
+  de-airflow-expert:
+    keywords:
+      korean: [에어플로우, DAG, 워크플로우 스케줄]
+      english: [airflow, dag, "apache airflow", scheduler]
+    file_patterns: ["dags/*.py", "airflow.cfg"]
+    supported_actions: [review, create, fix, refactor]
+    base_confidence: 75
+
+  de-dbt-expert:
+    keywords:
+      korean: [디비티, 데이터 모델링]
+      english: [dbt, "data build tool", "sql model"]
+    file_patterns: ["models/*.sql", "dbt_project.yml", "schema.yml"]
+    supported_actions: [review, create, fix, test]
+    base_confidence: 75
+
+  de-spark-expert:
+    keywords:
+      korean: [스파크, 분산 처리]
+      english: [spark, pyspark, "apache spark", "distributed processing"]
+    file_patterns: ["*.py", "*.scala"]
+    supported_actions: [review, create, fix, optimize]
+    base_confidence: 75
+
+  de-kafka-expert:
+    keywords:
+      korean: [카프카, 스트리밍, 이벤트 스트림]
+      english: [kafka, streaming, "event stream", "apache kafka", producer, consumer]
+    file_patterns: ["*.properties", "server.properties"]
+    supported_actions: [review, create, fix, configure]
+    base_confidence: 75
+
+  de-snowflake-expert:
+    keywords:
+      korean: [스노우플레이크, 데이터 웨어하우스]
+      english: [snowflake, "data warehouse", warehouse, snowsql]
+    file_patterns: ["*.sql"]
+    supported_actions: [review, create, fix, optimize]
+    base_confidence: 75
+
+  de-pipeline-expert:
+    keywords:
+      korean: [데이터 파이프라인, ETL, ELT, 데이터 적재]
+      english: [pipeline, etl, elt, "data pipeline", ingestion]
+    file_patterns: ["pipelines/*.py", "*.yaml"]
+    supported_actions: [review, create, fix, design]
+    base_confidence: 70
+
   # SW Architects
   arch-documenter:
     keywords:
@@ -228,6 +317,15 @@ agents:
     supported_actions: [review, create, fix, explain]
     base_confidence: 40
 
+  # Security
+  sec-codeql-expert:
+    keywords:
+      korean: [코드큐엘, 보안 스캔, 취약점 스캔, 정적 분석]
+      english: [codeql, sarif, vulnerability, "static analysis", "security scan", sast]
+    file_patterns: ["*.ql", "*.qll", "codeql/*"]
+    supported_actions: [scan, analyze, review]
+    base_confidence: 75
+
   # Managers
   mgr-creator:
     keywords:
@@ -304,6 +402,22 @@ agents:
     supported_actions: [save, recall, remember]
     base_confidence: 40
 
+  tracker-checkpoint:
+    keywords:
+      korean: [체크포인트, 진행 상태, 파이프라인 상태, 추적]
+      english: ["pipeline state", checkpoint, "track progress", "state tracking", resume]
+    file_patterns: []
+    supported_actions: [track, checkpoint, resume]
+    base_confidence: 70
+
+  wiki-curator:
+    keywords:
+      korean: [위키 페이지, 위키 큐레이션, 지식 정리]
+      english: ["wiki page", "wiki curation", "knowledge base page", "wiki write"]
+    file_patterns: ["wiki/**"]
+    supported_actions: [create, update, curate]
+    base_confidence: 70
+
   # ---------------------------------------------------------------------------
   # Research / Information Gathering (skill-based, not agent)
   # ---------------------------------------------------------------------------
@@ -412,6 +526,15 @@ agents:
     supported_actions: [coordinate, review, lead]
     base_confidence: 40
 
+  de-lead:
+    keywords:
+      korean: [데이터 엔지니어링, DE 리드, 파이프라인 조율, 데이터 파이프라인]
+      english: [airflow, dbt, spark, kafka, snowflake, pipeline, ETL, DAG, "de lead", "data engineering"]
+    file_patterns: ["dags/*.py", "*.sql", "models/"]
+    supported_actions: [coordinate, review, lead]
+    base_confidence: 40
+    routing_rule: "Invoke de-lead-routing skill to route DE tasks to the correct data engineering expert"
+
   secretary:
     keywords:
       korean: [에이전트, 관리, 오케스트레이션]
@@ -718,7 +841,7 @@ agents:
     file_patterns: []
     supported_actions: [reference, lookup]
     base_confidence: 65
-    routing_rule: "Reference guides/development/ directory"
+    routing_rule: "Reference appropriate guides/ subdirectory"
 
   guide-best-practices:
     keywords:

package/templates/CLAUDE.md

@@ -116,7 +116,7 @@ project/
 +-- CLAUDE.md                    # 진입점
 +-- .claude/
 |   +-- agents/                  # 서브에이전트 정의 (49 파일)
-|   +-- skills/                  # 스킬 (117 디렉토리)
+|   +-- skills/                  # 스킬 (118 디렉토리)
 |   +-- rules/                   # 전역 규칙 (R000-R023)
 |   +-- hooks/                   # 훅 스크립트 (보안, 검증, HUD)
 |   +-- contexts/                # 컨텍스트 파일 (ecomode)

package/templates/guides/index.yaml

@@ -221,6 +221,12 @@ guides:
       origin: redis.io
       url: https://redis.io/docs/
 
+  - name: drizzle-orm
+    description: Drizzle ORM sql template literal pitfalls and table-qualifier safety patterns
+    path: ./drizzle-orm/
+    source:
+      type: internal
+
   # Git
   - name: git-worktree-workflow
     description: Git worktree workflow for parallel branch development
@@ -228,6 +234,12 @@ guides:
     source:
       type: internal
 
+  - name: git-safety
+    description: Safe git operation patterns for autonomous agents — working tree loss prevention
+    path: ./git-safety/
+    source:
+      type: internal
+
   # Architecture
   - name: skill-bundle-design
     description: Domain skill bundle design patterns for Author/Test/Troubleshoot tri-pattern
@@ -235,6 +247,18 @@ guides:
     source:
       type: internal
 
+  - name: architecture
+    description: Reference patterns from AWS sample-deep-insight hierarchical multi-agent system
+    path: ./architecture/
+    source:
+      type: internal
+
+  - name: harness-engineering
+    description: Harness engineering guide — agent behavior control and infrastructure isolation as first-class design
+    path: ./harness-engineering/
+    source:
+      type: internal
+
   # Writing
   - name: elements-of-style
     description: The Elements of Style writing clarity guidelines
@@ -269,3 +293,126 @@ guides:
     path: ./agents-md-quality/
     source:
       type: internal
+
+  - name: agent-design
+    description: Agent design pattern references — Ralph loop persistence, Socratic interview templates, PAL cost routing, and CLI agent patterns
+    path: ./agent-design/
+    source:
+      type: internal
+
+  - name: agent-eval
+    description: Agent evaluation framework reference — 4-metric methodology and ideal trajectory annotation
+    path: ./agent-eval/
+    source:
+      type: internal
+
+  - name: agent-teams
+    description: Agent Teams troubleshooting guide for common operational issues and shutdown handling
+    path: ./agent-teams/
+    source:
+      type: internal
+
+  - name: agent-workflow
+    description: Autonomous challenge session lessons and guardrails for long-running agent runs
+    path: ./agent-workflow/
+    source:
+      type: internal
+
+  - name: browser-automation
+    description: Browser automation patterns for AI agents via MCP-based browser tools and lightweight CDP alternatives
+    path: ./browser-automation/
+    source:
+      type: internal
+
+  - name: compound-ai-workflow
+    description: Compound AI workflow principles — accumulating artifacts as context across sessions
+    path: ./compound-ai-workflow/
+    source:
+      type: internal
+
+  - name: deep-plan
+    description: Companion guide for the deep-plan skill — research, plan, and verify phases
+    path: ./deep-plan/
+    source:
+      type: internal
+
+  - name: external-tools
+    description: External tool integration references — graphify knowledge graph and ECC absorption decisions
+    path: ./external-tools/
+    source:
+      type: internal
+
+  - name: hook-data-flow
+    description: Hook data flow reference — stall detection pipeline for parallel agents (R009)
+    path: ./hook-data-flow/
+    source:
+      type: internal
+
+  - name: middleware-patterns
+    description: Lifecycle middleware patterns for customizing the agent harness
+    path: ./middleware-patterns/
+    source:
+      type: internal
+
+  - name: multi-agent-debate-patterns
+    description: Multi-agent debate anti-patterns and structural mechanisms to prevent them
+    path: ./multi-agent-debate-patterns/
+    source:
+      type: internal
+
+  - name: multi-provider-exec
+    description: Cross-provider LLM execution reference for external exec skills
+    path: ./multi-provider-exec/
+    source:
+      type: internal
+
+  - name: professor-triage
+    description: Companion guide for the professor-triage skill — issue triage phases
+    path: ./professor-triage/
+    source:
+      type: internal
+
+  - name: profiles
+    description: Manifest install profile guide — minimal/full profile selection patterns
+    path: ./profiles/
+    source:
+      type: internal
+
+  # Security
+  - name: security
+    description: Security pre-flight analysis pattern (AgentShield) for pre-write risk identification
+    path: ./security/
+    source:
+      type: internal
+
+  # Skill Development
+  - name: skill-promotion
+    description: Skill promotion guide — instinct extraction and failure-pattern mining
+    path: ./skill-promotion/
+    source:
+      type: internal
+
+  # Token Efficiency
+  - name: cc-token-saver
+    description: cc-token-saver plugin integration guide for token and cost optimization
+    path: ./cc-token-saver/
+    source:
+      type: external
+      origin: github
+      url: https://github.com/ww-w-ai/cc-token-saver
+      license: Apache-2.0
+
+  - name: token-efficiency
+    description: Token-efficient context retrieval integration — CRG and Semble MCP wrappers
+    path: ./token-efficiency/
+    source:
+      type: internal
+
+  # Tooling
+  - name: slack-cli
+    description: Slack CLI reference for creating and managing Slack apps from the command line
+    path: ./slack-cli/
+    source:
+      type: external
+      origin: slack.dev
+      url: https://docs.slack.dev/tools/slack-cli/

package/templates/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.19",
+  "version": "1.1.0",
   "lastUpdated": "2026-06-26T00:00:00.000Z",
   "omcustomMinClaudeCode": "2.1.121",
   "omcustomMinClaudeCodeReason": "Sensitive-path direct Write/Edit on .claude/** under bypassPermissions (R010 deprecation, #1101)",
@@ -20,7 +20,7 @@
       "name": "skills",
       "path": ".claude/skills",
       "description": "Reusable skill modules (includes slash commands)",
-      "files": 117
+      "files": 118
     },
     {
       "name": "guides",