tribunal-kit 7.0.0 → 9.0.0

package/.agent/templates/sdd/implementer-prompt.md

@@ -0,0 +1,53 @@
+# Implementer Subagent Prompt Template
+
+Use this template when dispatching an implementer subagent under Tribunal-Kit Subagent-Driven Development (SDD).
+
+```
+Subagent (general-purpose):
+  description: "Implement Task N: [task name]"
+  model: [MODEL — REQUIRED: Fast/cheap for mechanical tasks; standard for integration]
+  prompt: |
+    You are implementing Task N: [task name] under Tribunal-Kit Subagent-Driven Development.
+
+    ## Task Description
+    Read your task brief first: [BRIEF_FILE]
+    It contains the exact task requirements sliced out-of-band from the implementation plan.
+
+    ## Scene Setting & Context
+    [Scene-setting: where this fits in the architecture, dependencies, Global Constraints]
+
+    ## The Iron Law of TDD (Non-Negotiable)
+    NO PRODUCTION CODE WITHOUT A FAILING TEST FIRST.
+    If you write production code before the test, you must DELETE it and start over.
+    1. Write the failing behavioral test for the requirement.
+    2. Run the test and verify it FAILS for the expected reason (RED).
+    3. Write the minimal production code to satisfy the test (GREEN).
+    4. Run the test and verify it PASSES.
+    5. Clean up logic while keeping tests passing (REFACTOR).
+
+    ## You Do Not Dispatch Subagents
+    Do all of this task's work yourself. Never spawn a helper subagent and NEVER spawn
+    a reviewer to check your work. Review is handled out-of-band by the Controller's
+    Tribunal Reviewer Wave after you submit your report.
+
+    ## Zero Placeholders
+    Never use "TODO", "TBD", "implement later", or omit error handling. Write full,
+    production-ready implementations.
+
+    ## Reporting Back
+    Write your full report to [REPORT_FILE]:
+    - What you implemented
+    - What tests you ran and passing output
+    - TDD Evidence:
+      - RED: command run, expected failure output
+      - GREEN: command run, passing output
+    - Files changed & commits created
+    - Concerns, if any
+
+    Then reply to the Controller with ONLY a short summary (<15 lines):
+    - Status: DONE | DONE_WITH_CONCERNS | BLOCKED | NEEDS_CONTEXT
+    - Commits created (short SHA + message)
+    - One-line test summary (e.g. "12/12 passing, pristine output")
+    - Concerns (if any)
+    - Path to report file
+```

package/.agent/templates/sdd/re-review-prompt.md

@@ -0,0 +1,28 @@
+# Scoped Re-Review Prompt Template
+
+Use this template when re-evaluating a task fix round after the implementer addresses prior reviewer findings.
+
+```
+Subagent (general-purpose):
+  description: "Scoped Re-Review Task N Fixes"
+  model: [MODEL — REQUIRED: Cheap/fast for mechanical fixes; mid-tier for complex logic]
+  prompt: |
+    You are performing a scoped re-review of fixes applied for Task N.
+
+    ## Open Findings from Prior Review
+    [PRIOR_FINDINGS_LIST]
+
+    ## Fix Diff Under Review
+    Fix Diff Package: [FIX_DIFF_FILE]
+    Implementer Fix Report: [FIX_REPORT_FILE]
+
+    ## Your Job
+    Verify whether the specific open findings have been properly addressed:
+    1. Are all Critical and Important issues resolved cleanly?
+    2. Did the fixes introduce any new regressions or syntax errors?
+    3. Do the updated tests verify the fix?
+
+    ## Verdict Format
+    - [✅ ALL FINDINGS RESOLVED | ❌ RESIDUAL FINDINGS REMAIN]
+    - Status for each finding: [Fixed | Incomplete | Unaddressed] (with file:line)
+```

package/.agent/templates/sdd/task-reviewer-prompt.md

@@ -0,0 +1,59 @@
+# Tribunal Task Reviewer Prompt Template
+
+Use this template when dispatching an out-of-band task reviewer subagent under Tribunal-Kit SDD.
+
+```
+Subagent (general-purpose):
+  description: "Review Task N (Spec Compliance + Code Quality)"
+  model: [MODEL — REQUIRED: Choose per task complexity]
+  prompt: |
+    You are a Tribunal Reviewer evaluating Task N's implementation out-of-band.
+    Your evaluation is read-only. Do not mutate the repository.
+
+    ## Context & Requirements
+    Task Brief: [BRIEF_FILE]
+    Global Constraints: [GLOBAL_CONSTRAINTS]
+    Implementer Claims: [REPORT_FILE]
+
+    ## Diff Under Review
+    Base: [BASE_SHA]
+    Head: [HEAD_SHA]
+    Diff Package: [DIFF_FILE]
+
+    Read [DIFF_FILE] once. It contains the commit list, stat summary, and full diff
+    with context lines. The diff context lines ARE the files—do not crawl the broader
+    codebase unless evaluating a specific named architectural risk.
+
+    ## Verification Strategy
+    Do NOT trust the implementer's report as facts. Compare the claims against the diff.
+    Do NOT blindly re-run the full test suite—inspect the implementer's reported TDD evidence.
+
+    ## Part 1: Spec Compliance
+    - Missing: What requirements were skipped or missed?
+    - Extra: Unrequested features or over-engineering (YAGNI violations)?
+    - Misunderstood: Right feature built the wrong way?
+
+    ## Part 2: Code Quality & Tribunal Standards
+    - Security: Parameterized queries, auth checks, input sanitization?
+    - Type Safety: Clean types, zero unexplained 'any' casts?
+    - Error Resilience: Proper error boundaries and failure handling?
+    - Modularity: Clear single-responsibility boundaries?
+    - Tests: Behavioral assertions verifying real logic, not shallow mocks?
+
+    ## Calibration
+    - Critical (Must Fix): Functional bugs, security vulnerabilities, broken builds, test gaps.
+    - Important (Should Fix): Fragile patterns, missed non-critical requirements, duplication.
+    - Minor (Nice to Have): Polish, cosmetic naming, documentation comments.
+
+    ## Output Verdict Format
+    ### Spec Compliance
+    - [✅ Spec Compliant | ❌ Issues Found] (with file:line citations)
+
+    ### Issues Found
+    #### Critical (Must Fix)
+    #### Important (Should Fix)
+    #### Minor (Nice to Have)
+
+    ### Verdict
+    [APPROVED | CHANGES_REQUIRED]
+```

package/.agent/workflows/acf.md

@@ -24,6 +24,10 @@ Before distilling markdown specs into `.acf` YAML files, you MUST inspect:
 2. Existing Context Registry (`context/*.acf`) → Check target directory to prevent duplicate context creation
 3. YAML Schema Strictness → Validate output against ACF schema (rules, constraints, tech-stack, boundaries) before writing to disk
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `documentation-templates` (.agent/skills/documentation-templates/SKILL.md): README, API docs, code comments, and AI-friendly documentation
+
 ---
 
 ## When to Use /acf

package/.agent/workflows/api-tester.md

@@ -26,6 +26,11 @@ Before running automated API endpoint tests or auth-aware request sequences, you
 2. Test Server URL & Credentials (`.env.test`) → Verify base URL and test token environment variables
 3. Multi-Stage Request Sequence → Enforce sequential execution: Auth Login → Token Capture → CRUD Operations → Error Edge Case Verification
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `testing-patterns` (.agent/skills/testing-patterns/SKILL.md): Testing Trophy strategy (unit → integration → E2E)
+   - `api-patterns` (.agent/skills/api-patterns/SKILL.md): REST/GraphQL API design, versioning, and error contracts
+   - `backend-security-expert` (.agent/skills/backend-security-expert/SKILL.md): Server-side security, auth, JWT, ORM injection, RBAC
+
 ---
 
 ## When to Use /api-tester

package/.agent/workflows/audit.md

@@ -30,6 +30,11 @@ Before triggering a full project audit, you MUST inspect:
 2. Executable Scripts Inventory (`.agent/scripts/`) → Verify presence of `security_scan.js`, `lint_runner.js`, and `test_runner.js`
 3. Pipeline Execution Constraints → Confirm fixed execution order (Security → Dependencies → Type Check → Lint → Schema → Tests → Bundle) and HALT rules on critical CVE findings
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `vulnerability-scanner` (.agent/skills/vulnerability-scanner/SKILL.md): OWASP vulnerability scanning patterns and severity classification
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `code-review-checklist` (.agent/skills/code-review-checklist/SKILL.md): Code quality, security, and best practice review gates
+
 ---
 
 ## When to Use /audit

package/.agent/workflows/brainstorm.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - brainstorming
   - shape
-  - project-planner
+  - plan-writing
 scripts-binding:
   - .agent/scripts/verify_all.js
 ---
@@ -25,6 +25,22 @@ Before generating options or conducting Socratic architectural exploration, you
 2. Workspace File Layout → Understand current module scale and project structure before proposing architectural shifts
 3. Pure Exploration Constraint → Enforce zero code edits or file creation during brainstorm phase; restrict output to options, tradeoffs, and recommendations
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `brainstorming` (.agent/skills/brainstorming/SKILL.md): Structured ideation and option exploration methodology
+   - `shape` (.agent/skills/shape/SKILL.md): Socratic UX interview and feature planning before implementation
+   - `plan-writing` (.agent/skills/plan-writing/SKILL.md): Implementation plan structure, phases, and approval gates
+
+---
+
+## Path Classification (Announce First)
+
+Before asking questions, classify the request path out loud so the user can override:
+- **Spike:** A quick feasibility probe ("is it possible...", "quick prototype"). Output is a recommendation; any code written is strictly throwaway.
+- **Bounded:** A well-scoped change to existing code in this repository (one small endpoint, a new flag). Present short design in chat and get explicit human approval before any implementation.
+- **Architectural:** New feature, new subsystem, or interface change. Full process: clarifying questions, 2-3 approaches, written spec committed to `docs/specs/YYYY-MM-DD-<topic>-design.md`, human approval gate, then `/plan-writing` or `/sdd`.
+
+> **One-Way Ratchet:** When in doubt, take the heavier path. If hidden complexity is discovered mid-task, upgrade the path immediately. Never downgrade mid-task.
+
 ---
 
 ## When to Use /brainstorm

package/.agent/workflows/changelog.md

@@ -25,6 +25,11 @@ Before generating changelogs or parsing git history, you MUST inspect:
 2. Package Manifest & Version (`package.json`) → Retrieve current release version and target release tag
 3. Keep a Changelog Formatting Standard → Enforce categories: Added, Changed, Deprecated, Removed, Fixed, Security
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `github-operations` (.agent/skills/github-operations/SKILL.md): Git workflows, branching strategies, and PR management
+   - `git-pro` (.agent/skills/git-pro/SKILL.md): Advanced git operations, rebasing, cherry-picking
+   - `readme-builder` (.agent/skills/readme-builder/SKILL.md): README generation and documentation structure
+
 ---
 
 ## When to Use /changelog

package/.agent/workflows/contract.md

@@ -1,3 +1,17 @@
+---
+description: AI Agent Behavioral Contract Testing & Trace Replay. Define, validate, and enforce team behavioral rules as YAML contracts. Provides init, verify, list, trace, and auto-generate from Case Law.
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+required-skills:
+  - clean-code
+  - code-review-checklist
+  - data-validation-schemas
+scripts-binding:
+  - .agent/scripts/security_scan.js
+  - .agent/scripts/lint_runner.js
+---
+
 # /contract — AI Agent Behavioral Contract Testing & Trace Replay
 
 $ARGUMENTS
@@ -12,6 +26,11 @@ Before running behavioral contract validation, inspect:
 2. Target File Scope → Determine modified or targeted files for contract validation
 3. Failure Context Snapshots (`.tribunal/traces/`) → Check past captured trace snapshots for context
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `code-review-checklist` (.agent/skills/code-review-checklist/SKILL.md): Code quality, security, and best practice review gates
+   - `data-validation-schemas` (.agent/skills/data-validation-schemas/SKILL.md): Zod, Pydantic, and input validation schema patterns
+
 ---
 
 ## When to Use /contract

package/.agent/workflows/create.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - app-builder
   - architecture
-  - project-planner
+  - codebase-design
 scripts-binding:
   - .agent/scripts/auto_preview.js
   - .agent/scripts/verify_all.js
@@ -27,6 +27,11 @@ Before scaffolding a new application, you MUST inspect:
 2. Runtime & Environment Context → Check Node/npm version and inspect `.env.example` if available
 3. Human Gate Before Disk Modification → Enforce explicit approval of Socratic requirements, stack selection, and scaffolding plan before creating any files
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `app-builder` (.agent/skills/app-builder/SKILL.md): Full-stack application scaffolding and creation orchestration
+   - `architecture` (.agent/skills/architecture/SKILL.md): System architecture, module boundaries, and dependency management
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+
 ---
 
 ## When to Use /create

package/.agent/workflows/debug.md

@@ -26,6 +26,11 @@ Before investigating or attempting any code modification during a bug report, yo
 2. Target File & Callers → Inspect file referenced in error trace along with its upstream callers
 3. Recent Changes (`git diff`) → Inspect recent edits to identify regressions before mutating code
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `systematic-debugging` (.agent/skills/systematic-debugging/SKILL.md): 4-phase debugging methodology (Collect → Hypothesize → Test → Fix)
+   - `test-result-analyzer` (.agent/skills/test-result-analyzer/SKILL.md): Root cause analysis across multiple failing test files
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+
 ---
 
 ## The Investigation Contract

package/.agent/workflows/deploy.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - deployment-procedures
   - devops-engineer
-  - verify_all
+  - containerization-pro
 scripts-binding:
   - .agent/scripts/verify_all.js
   - .agent/scripts/security_scan.js
@@ -27,6 +27,11 @@ Before triggering production deployment or executing deploy scripts, you MUST in
 2. CI/CD Manifests (`.github/workflows`, `fly.toml`, `render.yaml`, etc.) → Check deployment targets and environment variable requirements
 3. Human Gate & Rollback Baseline → Confirm baseline git tag/commit and secure explicit human approval before publishing release
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `deployment-procedures` (.agent/skills/deployment-procedures/SKILL.md): Production deployment checklists and rollback procedures
+   - `devops-engineer` (.agent/skills/devops-engineer/SKILL.md): CI/CD pipeline management and infrastructure automation
+   - `containerization-pro` (.agent/skills/containerization-pro/SKILL.md): Docker, Kubernetes, and container security best practices
+
 ---
 
 ## The Deployment Contract

package/.agent/workflows/enhance.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - clean-code
   - codebase-design
-  - test-engineer
+  - testing-patterns
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/test_runner.js
@@ -26,6 +26,11 @@ Before modifying existing features or appending functionality, you MUST inspect:
 2. Existing Contract & Unit Tests → Inspect existing tests and type signatures for the target module to prevent regression
 3. Breaking Change Detection → Ensure signature changes update all dependent call sites simultaneously before writing to disk
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+   - `testing-patterns` (.agent/skills/testing-patterns/SKILL.md): Testing Trophy strategy (unit → integration → E2E)
+
 ---
 
 ## When to Use /enhance

package/.agent/workflows/fix-ci.md

@@ -27,6 +27,11 @@ Before attempting to fix CI pipeline failures:
 2. Inspect Workflow YAML & Project Configs → Compare runner environment (Node/Python/OS version) with local workspace
 3. Human Gate Before Disk Write → Present root cause explanation and proposed diff for approval
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `cicd-pro` (.agent/skills/cicd-pro/SKILL.md): CI/CD workflow syntax, matrix builds, and deployment strategies
+   - `diagnosing-bugs` (.agent/skills/diagnosing-bugs/SKILL.md): Bug diagnosis patterns and root cause investigation
+   - `devops-engineer` (.agent/skills/devops-engineer/SKILL.md): CI/CD pipeline management and infrastructure automation
+
 ---
 
 ## 4-Step CI Diagnosis & Repair Loop

package/.agent/workflows/fix.md

@@ -26,6 +26,11 @@ Before executing auto-fixers or modifying code files to resolve lint/type issues
 2. Target File Lint Output → Execute `node .agent/scripts/lint_runner.js` to gather precise error line numbers and rule IDs
 3. Diff Verification Before Disk Write → Show explicit diff of proposed changes and confirm Human Gate approval before saving
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `lint-and-validate` (.agent/skills/lint-and-validate/SKILL.md): ESLint, Prettier, and code quality enforcement rules
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `typescript-advanced` (.agent/skills/typescript-advanced/SKILL.md): TypeScript strict mode, generics, utility types, and type narrowing
+
 ---
 
 ## When to Use /fix

package/.agent/workflows/generate.md

@@ -27,6 +27,11 @@ Before generating code modules or invoking the Maker pipeline, you MUST inspect:
 2. Type Definitions & Path Aliases (`tsconfig.json`) → Verify module resolution paths and compiler strictness
 3. Parallel Tribunal Review Assignment → Select relevant domain reviewers (`logic`, `security`, `frontend`, `backend`, `database`, `mobile`) prior to Human Gate submission
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+   - `lint-and-validate` (.agent/skills/lint-and-validate/SKILL.md): ESLint, Prettier, and code quality enforcement rules
+
 ---
 
 ## When to Use /generate

package/.agent/workflows/marathon.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - harness-protocol
   - agent-organizer
-  - project-planner
+  - agentic-workflows-2026
 scripts-binding:
   - .agent/scripts/session_manager.js
   - .agent/scripts/verify_all.js
@@ -26,6 +26,11 @@ Before initiating or resuming a multi-session marathon harness, you MUST inspect
 2. Session Continuity Manager (`.agent/scripts/session_manager.js`) → Verify state snapshot before context truncation
 3. Atomic Feature Handoff Protocol → Ensure each session completes exactly ONE atomic feature, runs `verify_all.js`, and commits state before handoff
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `harness-protocol` (.agent/skills/harness-protocol/SKILL.md): Marathon long-running agent harness rules and handoff protocols
+   - `agent-organizer` (.agent/skills/agent-organizer/SKILL.md): Multi-agent coordination and task decomposition
+   - `agentic-workflows-2026` (.agent/skills/agentic-workflows-2026/SKILL.md): Advanced agent loops, ReAct planning, and structured tool calling
+
 ---
 
 ## When to Use /marathon

package/.agent/workflows/migrate.md

@@ -27,6 +27,11 @@ Before running framework upgrades, major dependency bumps, or database migration
 2. Database Expand-and-Contract Plan (`schema_validator.js`) → Ensure database column changes add new fields before dropping old ones
 3. Rollback Protocol Verification → Test local rollback procedure (e.g. SQLite backup or DB transaction revert) before applying migration
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `plan-writing` (.agent/skills/plan-writing/SKILL.md): Implementation plan structure, phases, and approval gates
+   - `architecture` (.agent/skills/architecture/SKILL.md): System architecture, module boundaries, and dependency management
+   - `database-design` (.agent/skills/database-design/SKILL.md): Schema normalization, indexing, migration strategy
+
 ---
 
 ## When to Use /migrate

package/.agent/workflows/minimal.md

@@ -32,6 +32,10 @@ Before proposing any code change, you MUST evaluate the **10 Core Governance Que
 9. Is the proposed abstraction necessary for the current requirement? (`MODIFY`/`EXTEND`)
 10. What is the smallest implementation that satisfies the request? (`MODIFY`/`EXTEND` vs `CREATE`)
 
+11. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+
 ---
 
 ## Sub-Commands

package/.agent/workflows/orchestrate.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - agent-organizer
   - parallel-agents
-  - swarm-dispatcher
+  - agentic-patterns
 scripts-binding:
   - .agent/scripts/swarm_dispatcher.js
   - .agent/scripts/verify_all.js
@@ -26,6 +26,11 @@ Before dispatching multi-agent orchestrations or parallel sub-task workers, you
 2. Context Window Budget Allocation → Provide scoped `context_summary` per worker; ban dumping full conversation history to workers
 3. Fan-In Synthesis & Human Gate → Collect all worker outputs via `Promise.allSettled()` pattern and present unified synthesis before writing disk changes
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `agent-organizer` (.agent/skills/agent-organizer/SKILL.md): Multi-agent coordination and task decomposition
+   - `parallel-agents` (.agent/skills/parallel-agents/SKILL.md): Parallel agent dispatch patterns and fan-in synthesis
+   - `agentic-patterns` (.agent/skills/agentic-patterns/SKILL.md): Agentic design patterns for multi-agent systems
+
 ---
 
 ## When to Use /orchestrate

package/.agent/workflows/performance-benchmarker.md

@@ -5,7 +5,7 @@ version: 3.0.0
 last-updated: 2026-07-30
 required-skills:
   - performance-profiling
-  - vitals-reviewer
+  - web-quality-audit
   - 60fps-animation
 scripts-binding:
   - .agent/scripts/bundle_analyzer.js
@@ -26,6 +26,11 @@ Before running performance benchmarks or capturing latency metrics, you MUST ins
 2. Benchmark Scripts Availability (`.agent/scripts/bundle_analyzer.js`) → Verify automated bundle and latency measurement tooling
 3. Before/After Metric Recording Constraint → Require side-by-side metric tables (LCP, CLS, INP, TTFB, Bundle Size) for every benchmark pass
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `performance-profiling` (.agent/skills/performance-profiling/SKILL.md): Performance measurement methodology and profiling tools
+   - `web-quality-audit` (.agent/skills/web-quality-audit/SKILL.md): Lighthouse-style analysis across Performance, Accessibility, SEO
+   - `60fps-animation` (.agent/skills/60fps-animation/SKILL.md): GPU compositor-friendly properties and layout thrash avoidance
+
 ---
 
 ## When to Use /performance-benchmarker

package/.agent/workflows/pipeline.md

@@ -27,6 +27,11 @@ Before running 3-pass pipeline generation, you MUST inspect:
 2. Context Token Allocation -> Keep Pass 2 builder prompt under 2,500 tokens (loading max 3 essential skill key-rules)
 3. Zero-LLM Pass 3 Validator → Run deterministic security, lint, and type checks on generated code prior to Human Gate submission
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+   - `lint-and-validate` (.agent/skills/lint-and-validate/SKILL.md): ESLint, Prettier, and code quality enforcement rules
+
 ## When to Use /pipeline
 
 | Use `/pipeline` when...                          | Use something else when...              |

package/.agent/workflows/plan.md

@@ -6,7 +6,7 @@ last-updated: 2026-07-30
 required-skills:
   - plan-writing
   - architecture
-  - project-planner
+  - domain-modeling
 scripts-binding:
   - .agent/scripts/verify_all.js
 ---
@@ -25,6 +25,11 @@ Before drafting implementation plans or technical blueprints, you MUST inspect:
 2. Existing Architecture & Directory Layout → Review current module boundaries to prevent redundant architectural patterns
 3. Zero Code Modification Rule → Restrict outputs in `/plan` mode to research, architectural design, and plan artifact generation; ban code generation before Plan approval
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `plan-writing` (.agent/skills/plan-writing/SKILL.md): Implementation plan structure, phases, and approval gates
+   - `architecture` (.agent/skills/architecture/SKILL.md): System architecture, module boundaries, and dependency management
+   - `domain-modeling` (.agent/skills/domain-modeling/SKILL.md): Ubiquitous language, entity relationships, bounded contexts
+
 ---
 
 ## When to Use /plan

package/.agent/workflows/preview.md

@@ -5,7 +5,7 @@ version: 3.0.0
 last-updated: 2026-07-30
 required-skills:
   - bash-linux
-  - frontend-specialist
+  - nextjs-react-expert
   - devops-engineer
 scripts-binding:
   - .agent/scripts/auto_preview.js
@@ -25,6 +25,11 @@ Before managing dev server lifecycle or starting preview servers, you MUST inspe
 2. Environment Configuration (`.env`) → Check port bindings and dev server host configs
 3. Dev Server Lifecycle Script (`.agent/scripts/auto_preview.js`) → Use automated script for process management, port collision detection, and health checks
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `bash-linux` (.agent/skills/bash-linux/SKILL.md): Shell scripting patterns and command-line automation
+   - `nextjs-react-expert` (.agent/skills/nextjs-react-expert/SKILL.md): Next.js 15+ App Router, Server Components, Server Actions, PPR
+   - `devops-engineer` (.agent/skills/devops-engineer/SKILL.md): CI/CD pipeline management and infrastructure automation
+
 ---
 
 ## Commands

package/.agent/workflows/refactor.md

@@ -27,6 +27,12 @@ Before executing structural refactoring or extracting interfaces, you MUST inspe
 2. Baseline Test Suite Verification (`test_runner.js`) → Ensure all unit and integration tests pass BEFORE initiating refactor steps
 3. Observable Behavior Preservation → Enforce zero change in public function behavior or API contracts; verify tests pass cleanly after every step
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+   - `architecture` (.agent/skills/architecture/SKILL.md): System architecture, module boundaries, and dependency management
+   - `codebase-design` (.agent/skills/codebase-design/SKILL.md): Deep module design with small interfaces and clean seams
+   - `tdd-workflow` (.agent/skills/tdd-workflow/SKILL.md): Red-Green-Refactor TDD cycle and test-first development
+
 ---
 
 ## The Refactoring Contract

package/.agent/workflows/review-ai.md

@@ -26,6 +26,11 @@ Before auditing LLM integrations, prompt templates, or AI API calls, you MUST in
 2. Prompt Injection Boundary Check → Confirm user inputs are strictly passed via message roles or delimited blocks; ban string concatenation into system prompts
 3. 3-Reviewer AI Integration Gate → Run ai-code-reviewer, logic-reviewer, and security-auditor before approving AI code diffs
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `llm-engineering` (.agent/skills/llm-engineering/SKILL.md): LLM integration patterns, prompt engineering, and cost optimization
+   - `ai-prompt-injection-defense` (.agent/skills/ai-prompt-injection-defense/SKILL.md): Prompt injection detection and sanitization patterns
+   - `generative-ui-expert` (.agent/skills/generative-ui-expert/SKILL.md): Vercel AI SDK, streaming UI, structured tool calling
+
 ---
 
 ## When to Use /review-ai

package/.agent/workflows/review.md

@@ -26,6 +26,11 @@ Before auditing code for hallucinations or structural flaws, you MUST inspect:
 2. Package Manifest (`package.json`) → Cross-reference imported packages against installed dependencies
 3. Pure Read-Only Constraint → Prohibit any file mutations or generation; output findings in structured audit tables strictly
 
+4. Required Skills → Before executing, load and follow procedural rules from:
+   - `code-review-checklist` (.agent/skills/code-review-checklist/SKILL.md): Code quality, security, and best practice review gates
+   - `vulnerability-scanner` (.agent/skills/vulnerability-scanner/SKILL.md): OWASP vulnerability scanning patterns and severity classification
+   - `clean-code` (.agent/skills/clean-code/SKILL.md): Self-documenting naming, no over-engineering, error handling patterns
+
 ---
 
 ## When to Use /review