orbital-command 0.1.0

package/tailwind.config.js

@@ -0,0 +1,161 @@
+import tailwindcssAnimate from 'tailwindcss-animate';
+
+/** @type {import('tailwindcss').Config} */
+export default {
+  darkMode: ['class'],
+  content: [
+    './index.html',
+    './src/**/*.{js,ts,jsx,tsx}',
+  ],
+  theme: {
+    container: {
+      center: true,
+      padding: '2rem',
+      screens: { '2xl': '1400px' },
+    },
+    extend: {
+      fontSize: {
+        'xxs': ['11px', { lineHeight: '15px' }],
+        'xs':  ['12px', { lineHeight: '17px' }],
+        'sm':  ['13px', { lineHeight: '19px' }],
+        'base': ['14px', { lineHeight: '20px' }],
+        'lg':  ['16px', { lineHeight: '22px' }],
+        'xl':  ['18px', { lineHeight: '24px' }],
+        '2xl': ['20px', { lineHeight: '26px' }],
+      },
+      colors: {
+        border: 'hsl(var(--border))',
+        input: 'hsl(var(--input))',
+        ring: 'hsl(var(--ring))',
+        background: 'hsl(var(--background))',
+        foreground: 'hsl(var(--foreground))',
+        primary: {
+          DEFAULT: 'hsl(var(--primary))',
+          foreground: 'hsl(var(--primary-foreground))',
+        },
+        secondary: {
+          DEFAULT: 'hsl(var(--secondary))',
+          foreground: 'hsl(var(--secondary-foreground))',
+        },
+        destructive: {
+          DEFAULT: 'hsl(var(--destructive))',
+          foreground: 'hsl(var(--destructive-foreground))',
+        },
+        muted: {
+          DEFAULT: 'hsl(var(--muted))',
+          foreground: 'hsl(var(--muted-foreground))',
+        },
+        accent: {
+          DEFAULT: 'hsl(var(--accent))',
+          foreground: 'hsl(var(--accent-foreground))',
+        },
+        popover: {
+          DEFAULT: 'hsl(var(--popover))',
+          foreground: 'hsl(var(--popover-foreground))',
+        },
+        card: {
+          DEFAULT: 'hsl(var(--card))',
+          foreground: 'hsl(var(--card-foreground))',
+        },
+        // Hunter surface tokens
+        'surface': '#12121a',
+        'surface-light': '#1a1a28',
+        // Hunter accent tokens
+        'bid-green': '#00c853',
+        'ask-red': '#ff1744',
+        'accent-blue': '#06b6d4',
+        'warning-amber': '#ffab00',
+        'info-cyan': '#40c4ff',
+        // Status colors — dynamic CSS variables injected by WorkflowProvider
+        'status': {
+          'icebox': 'hsl(var(--status-icebox))',
+          'planning': 'hsl(var(--status-planning))',
+          'backlog': 'hsl(var(--status-backlog))',
+          'implementing': 'hsl(var(--status-implementing))',
+          'review': 'hsl(var(--status-review))',
+          'completed': 'hsl(var(--status-completed))',
+          'dev': 'hsl(var(--status-dev))',
+          'staging': 'hsl(var(--status-staging))',
+          'production': 'hsl(var(--status-production))',
+        },
+        // Category and agent colors — injected as CSS variables from orbital.config.json
+        // Use var(--category-<name>) and var(--agent-<name>) in components
+        'category': {
+          'feature':        'var(--category-feature, #536dfe)',
+          'bugfix':         'var(--category-bugfix, #ff1744)',
+          'refactor':       'var(--category-refactor, #8B5CF6)',
+          'infrastructure': 'var(--category-infrastructure, #40c4ff)',
+          'docs':           'var(--category-docs, #6B7280)',
+        },
+        'agent': {
+          'attacker':  'var(--agent-attacker, #ff1744)',
+          'chaos':     'var(--agent-chaos, #F97316)',
+          'solana':    'var(--agent-solana, #8B5CF6)',
+          'frontend':  'var(--agent-frontend, #EC4899)',
+          'architect': 'var(--agent-architect, #536dfe)',
+          'devops':    'var(--agent-devops, #40c4ff)',
+          'rules':     'var(--agent-rules, #6B7280)',
+        },
+      },
+      borderRadius: {
+        lg: '0.375rem',
+        md: '0.25rem',
+        sm: '0.125rem',
+      },
+      fontFamily: {
+        sans: ['var(--font-family)', 'monospace'],
+        mono: ['var(--font-family)', 'monospace'],
+      },
+      animation: {
+        'fade-in': 'fadeIn 0.3s ease-in-out',
+        'slide-up': 'slideUp 0.3s ease-out',
+        'slide-right': 'slideRight 0.3s ease-out',
+        'pulse-dot': 'pulseDot 2s ease-in-out infinite',
+        'pulse-border': 'pulseBorder 2s ease-in-out infinite',
+        'accordion-down': 'accordion-down 0.2s ease-out',
+        'accordion-up': 'accordion-up 0.2s ease-out',
+        'glow-pulse': 'glowPulse 2s ease-in-out infinite',
+        'breathe': 'breathe 3s ease-in-out infinite',
+      },
+      keyframes: {
+        fadeIn: {
+          '0%': { opacity: '0' },
+          '100%': { opacity: '1' },
+        },
+        slideUp: {
+          '0%': { transform: 'translateY(10px)', opacity: '0' },
+          '100%': { transform: 'translateY(0)', opacity: '1' },
+        },
+        slideRight: {
+          '0%': { transform: 'translateX(-10px)', opacity: '0' },
+          '100%': { transform: 'translateX(0)', opacity: '1' },
+        },
+        pulseDot: {
+          '0%, 100%': { opacity: '1' },
+          '50%': { opacity: '0.3' },
+        },
+        pulseBorder: {
+          '0%, 100%': { borderColor: 'rgba(0, 188, 212, 0.3)' },
+          '50%': { borderColor: 'rgba(0, 188, 212, 0.8)' },
+        },
+        'accordion-down': {
+          from: { height: '0' },
+          to: { height: 'var(--radix-accordion-content-height)' },
+        },
+        'accordion-up': {
+          from: { height: 'var(--radix-accordion-content-height)' },
+          to: { height: '0' },
+        },
+        glowPulse: {
+          '0%, 100%': { boxShadow: '0 0 8px rgba(0,188,212,0.25)' },
+          '50%': { boxShadow: '0 0 18px rgba(0,188,212,0.5)' },
+        },
+        breathe: {
+          '0%, 100%': { opacity: '1', transform: 'scale(1)' },
+          '50%': { opacity: '0.85', transform: 'scale(1.02)' },
+        },
+      },
+    },
+  },
+  plugins: [tailwindcssAnimate],
+};

package/templates/agents/AUTO-INVOKE.md

@@ -0,0 +1,180 @@
+---
+name: auto-invoke
+description: Always loaded during task triage. Defines which agents trigger for which file patterns.
+tokens: ~3K
+load-when: Always (embedded in task triage)
+last-verified: 2026-01-11
+---
+
+# Agent Auto-Invocation Rules
+
+## Overview
+
+Agents are automatically invoked based on three layers of triggers. You never need to manually request an agent.
+
+---
+
+## Layer 1: Hard Triggers (Non-Negotiable)
+
+These file patterns **ALWAYS** trigger specific agents, no exceptions.
+
+*File patterns are configurable via `orbital.config.json` and `.claude/config/agent-triggers.json`.*
+
+### High-Risk Files -> Full Security Review
+
+| File Pattern | Agents Triggered | Reason |
+|--------------|------------------|--------|
+| `encrypt*.ts` | Attacker | Secret handling |
+| `auth*.ts` | Attacker | Authentication |
+| `controllers/*.ts` (new routes) | Attacker + Architect | API surface |
+| `middleware/*.ts` | Attacker + Architect | Auth/security middleware |
+
+### Domain Files -> Expert Review
+
+| File Pattern | Agents Triggered | Reason |
+|--------------|------------------|--------|
+| `frontend/src/**/*` | Frontend Designer | UI components |
+| `migrations/*` | Architect | Schema changes |
+| `config/*.ts` | Chaos | Configuration changes |
+| `*.test.ts` | Rules Enforcer | Test quality |
+
+### Infrastructure Files -> Architecture Review
+
+| File Pattern | Agents Triggered | Reason |
+|--------------|------------------|--------|
+| `Dockerfile` | Architect + Chaos | Container config |
+| `.github/workflows/*.yml` | Architect + Chaos | CI/CD pipeline |
+| `docker-compose.yml` | Architect | Local dev setup |
+
+---
+
+## Layer 2: Smart Triggers (Task-Based)
+
+### Feature Development
+```
+Task contains: "add", "create", "implement", "new feature"
+Trigger: Architect + Chaos + Frontend Designer + [domain experts]
+```
+
+### Bug Fixes
+```
+Task contains: "fix", "bug", "broken", "not working"
+Trigger: Chaos + [domain expert for affected area]
+```
+
+### Refactoring
+```
+Task contains: "refactor", "restructure", "split", "extract"
+Trigger: Architect + [domain expert] + Chaos
+```
+
+### Security Work
+```
+Task contains: "auth", "permission", "encrypt", "secret", "token", "password"
+Trigger: Attacker (SECURITY MODE - runs twice)
+```
+
+---
+
+## Layer 3: Always-On
+
+| Agent | When | Mode |
+|-------|------|------|
+| Rules Enforcer | Before EVERY commit | Blocking |
+
+---
+
+## Invocation Modes
+
+### Full Mode (Default)
+All triggered agents run. For features, refactors, significant changes.
+
+### Quick Mode
+Only Rules Enforcer. Request with: `"quick mode: [task]"`
+**Cannot use for**: Security files, new endpoints.
+
+### Security Mode (Automatic)
+Attacker runs before AND after implementation.
+Auto-triggered for: Auth, encryption, user input handling.
+
+---
+
+## High-Signal Diff Patterns
+
+When reviewing diffs, **escalate attention** if you see these patterns. They indicate higher-risk changes even within already-triggered files.
+
+### Critical Patterns (Double Review)
+
+| Pattern in Diff | Why It Matters | Action |
+|-----------------|----------------|--------|
+| `privateKey`, `secretKey`, `apiKey` | Secret handling | Attacker: verify no logging/exposure |
+| New `catch` block without error classification | Error handling gap | Verify classification added |
+| Removed `finally` block | Resource leak risk | Chaos: verify cleanup still happens |
+
+### Incomplete Implementation Patterns (BLOCKING)
+
+| Pattern in Diff | Why It Matters | Action |
+|-----------------|----------------|--------|
+| `PLACEHOLDER`, `STUB_`, `DUMMY_` strings | Incomplete implementation | BLOCK - must implement or throw |
+| `mockData`, `fakeUser`, `dummyData` | Mock data in prod | Move to test fixtures |
+| `// for now`, `// TODO:`, `// FIXME:` | Untracked shortcut | Complete or link to ticket |
+| `\|\| 'default-secret'` with secret/key/token | Hardcoded secret fallback | BLOCK - require env var |
+
+### Elevated Patterns (Extra Scrutiny)
+
+| Pattern in Diff | Why It Matters | Action |
+|-----------------|----------------|--------|
+| New `setTimeout`/`setInterval` | Potential memory leak | Chaos: verify cleanup on unmount |
+| `status` or `state` transitions | State machine change | Verify valid transition |
+| New `res.json` in controller | Response format | Architect: verify consistent format |
+
+### Attention Patterns (Cross-Reference)
+
+| Pattern in Diff | Cross-Reference With |
+|-----------------|---------------------|
+| New endpoint parameter | Attacker: check validation exists |
+| Database column change | Architect: check migration exists |
+| New WebSocket emit | Frontend Designer: check frontend handles it |
+| Error message text change | Frontend Designer: check user-facing clarity |
+
+---
+
+## Scope-Aware Context
+
+When agents are invoked for **scope reviews**, they receive focused context from the scope document rather than raw code.
+
+### Context Extraction
+
+Provide agents with:
+1. **SPECIFICATION section** (primary)
+2. **PROCESS > Decisions & Reasoning** (secondary)
+3. **PROCESS > Uncertainties** (if relevant)
+4. **Files Summary table** -- determines which agents to invoke
+
+### Structured Output for Agent Review
+
+Each agent should return findings in this format:
+
+```
+[AGENT_NAME] Review:
+
+CRITICAL:
+- [Issue]: [Description] -> [Recommendation]
+
+HIGH:
+- [Issue]: [Description] -> [Recommendation]
+
+MEDIUM:
+- [Issue]: [Description]
+
+VERIFIED OK:
+- [What was checked and found correct]
+```
+
+---
+
+## Related
+
+- [README.md](./README.md) - System overview
+- [CONFLICT-RESOLUTION.md](./CONFLICT-RESOLUTION.md) - When agents disagree
+- [SKILL-TRIGGERS.md](./SKILL-TRIGGERS.md) - Skill auto-suggestion rules

package/templates/agents/CONFLICT-RESOLUTION.md

@@ -0,0 +1,128 @@
+---
+name: conflict-resolution
+description: Loaded when agents disagree. Defines priority hierarchy and escalation procedures.
+tokens: ~1.5K
+load-when: When agents disagree
+last-verified: 2026-01-11
+---
+
+# Agent Conflict Resolution
+
+## Overview
+
+When multiple agents have conflicting recommendations, conflicts are categorized and resolved appropriately.
+
+---
+
+## Conflict Categories
+
+### Minor Conflicts (Auto-Resolve)
+
+Automatically resolved using priority hierarchy:
+- Style preferences
+- Implementation approach when both options are valid
+- "Nice to have" suggestions that contradict
+- Optimization preferences with no security/safety impact
+
+### Major Conflicts (Human Decision Required)
+
+Escalated to you for a decision:
+- Security vs. functionality trade-offs
+- Architectural decisions with long-term implications
+- When two agents both flag 🚫 BLOCKER on opposing advice
+- When resolution significantly changes scope or approach
+- Performance vs. security trade-offs
+
+---
+
+## Priority Hierarchy
+
+For auto-resolving minor conflicts:
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│  PRIORITY ORDER (highest to lowest)                         │
+├─────────────────────────────────────────────────────────────┤
+│                                                             │
+│  1. 🗡️ ATTACKER                                             │
+│     Security concerns ALWAYS win                            │
+│                                                             │
+│  2. 💥 CHAOS AGENT                                          │
+│     Reliability/failure modes are second                    │
+│                                                             │
+│  3. DOMAIN EXPERTS                                          │
+│     Domain correctness                                      │
+│                                                             │
+│  4. 🏗️ ARCHITECT                                            │
+│     Patterns and structure                                  │
+│                                                             │
+│  5. 🎨 FRONTEND DESIGNER                                    │
+│     UX and aesthetic preferences                           │
+│                                                             │
+│  6. 📋 RULES ENFORCER                                       │
+│     Code style rules                                        │
+│                                                             │
+└─────────────────────────────────────────────────────────────┘
+```
+
+**Core Principle:** Security > Reliability > Correctness > Patterns > Aesthetics
+
+---
+
+## Major Conflict Format
+
+When a major conflict requires your decision:
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│ ⚠️ AGENT CONFLICT - Decision Required                       │
+├─────────────────────────────────────────────────────────────┤
+│                                                             │
+│ CONFLICT TYPE: [Security vs Functionality / etc.]          │
+│                                                             │
+│ ─────────────────────────────────────────────────────────── │
+│                                                             │
+│ 🗡️ ATTACKER says:                                           │
+│ "[Their recommendation]"                                   │
+│                                                             │
+│ Reasoning: [Why they recommend this]                       │
+│ Risk if ignored: [What could go wrong]                     │
+│                                                             │
+│ ─────────────────────────────────────────────────────────── │
+│                                                             │
+│ 🏗️ ARCHITECT says:                                          │
+│ "[Their opposing recommendation]"                          │
+│                                                             │
+│ Reasoning: [Why they recommend this]                       │
+│ Risk if ignored: [What could go wrong]                     │
+│                                                             │
+│ ─────────────────────────────────────────────────────────── │
+│                                                             │
+│ MY RECOMMENDATION: [Agent X - brief reason]                │
+│                                                             │
+│ But this is your call. Which approach?                     │
+│ A) Follow [Agent X]                                        │
+│ B) Follow [Agent Y]                                        │
+│ C) Hybrid approach                                         │
+│                                                             │
+└─────────────────────────────────────────────────────────────┘
+```
+
+---
+
+## Recording Decisions
+
+When you decide on a major conflict, document it:
+
+```typescript
+// DECISION 2026-01-11: Using in-memory rate limiting over Redis-based
+// Reason: Reduces complexity for initial launch
+// Revisit: When scaling beyond single server
+```
+
+---
+
+## Related
+
+- [README.md](./README.md) - System overview
+- [AUTO-INVOKE.md](./AUTO-INVOKE.md) - When agents are triggered

package/templates/agents/QUICK-REFERENCE.md

@@ -0,0 +1,122 @@
+---
+name: quick-reference
+description: One-page overview of the agent system. Quick reference for agent triggers and priorities.
+---
+
+# Agent System Quick Reference
+
+*One-page overview. Print this or keep it open.*
+
+---
+
+## Trigger Matrix
+
+| Files Changed | Agents Activated | Mode |
+|---------------|------------------|------|
+| `encrypt*.ts`, `auth*.ts` | 🗡️ | SECURITY |
+| `controllers/*.ts` (new routes) | 🗡️ 🏗️ | SECURITY |
+| `frontend/src/**/*` | 🎨 | FULL |
+| `migrations/*` | 🏗️ | FULL |
+| `config/*.ts` | 💥 | FULL |
+| `middleware/*.ts` | 🗡️ 🏗️ | SECURITY |
+
+*Additional patterns are configurable via orbital.config.json and agent-triggers.json.*
+
+---
+
+## The 5 Critical Questions
+
+Ask these for EVERY change:
+
+1. **🗡️ What user input reaches this code? Is it validated?**
+2. **🗡️ Can user A trigger this with user B's resource ID?**
+3. **💥 What state are we in if this line throws?**
+4. **💥 Is this idempotent on retry?**
+5. **🏗️ Does this fit our existing patterns?**
+
+---
+
+## Priority Order (Conflicts)
+
+When agents disagree, this order wins:
+
+```
+🗡️ Security (1st) → 💥 Reliability (2nd) → Domain Correctness (3rd)
+→ 🏗️ Patterns (4th) → 🎨 Aesthetics (5th)
+```
+
+---
+
+## Workflow Modes
+
+| Mode | When | What Runs |
+|------|------|-----------|
+| **FULL** | Default for features | All triggered agents |
+| **QUICK** | `"quick mode: [task]"` | Only Rules Enforcer |
+| **SECURITY** | Auth/encryption/sensitive | Attacker runs twice (before + after) |
+
+---
+
+## Review Completion Checklist
+
+Before implementing:
+```
+[] All triggered agents applied
+[] Attack vectors identified (if security-related)
+[] Failure modes listed (always)
+```
+
+After implementing:
+```
+[] Red team stress test passed
+[] No unresolved blockers
+[] Test gaps identified
+[] Rules Enforcer passed
+```
+
+Before committing:
+```
+[] Learned Patterns updated?
+[] Known Issues updated?
+```
+
+---
+
+## Agent Responsibilities (1-liner each)
+
+| Agent | Core Question |
+|-------|---------------|
+| Attacker | "How would I exploit this?" |
+| Chaos | "What breaks when things go wrong?" |
+| Frontend Designer | "What does the user see/experience?" |
+| Architect | "Does this fit our patterns?" |
+| Rules Enforcer | "Do all project rules pass?" |
+
+---
+
+## Quick Commands
+
+```bash
+# Full verification before commit (configure in orbital.config.json)
+# npm run type-check && npm run lint && npm run build && npm test
+```
+
+---
+
+## When Stuck
+
+- **Agent not activating?** Check trigger patterns in AUTO-INVOKE.md
+- **Agents disagree?** Use priority order above, escalate majors to user
+- **Rule violation?** See fix guide in rules-enforcer.md
+- **Pattern unclear?** Check agent docs in `.claude/agents/`
+
+---
+
+## Related Files
+
+```
+.claude/agents/AUTO-INVOKE.md       - Trigger rules
+.claude/agents/CONFLICT-RESOLUTION.md - Priority handling
+.claude/agents/workflows/           - Mode-specific workflows
+.claude/quick/rules.md              - Project rules
+```