waitsec 0.5.3 → 0.5.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.cursor-plugin/plugin.json +1 -1
- package/README.md +42 -23
- package/package.json +1 -1
- package/plugin.json +1 -1
package/README.md
CHANGED
|
@@ -31,11 +31,11 @@ Most AI coding assistants do not fail because they lack knowledge. They fail bec
|
|
|
31
31
|
|
|
32
32
|
## The 5 Core Guardrails
|
|
33
33
|
|
|
34
|
-
1. **`ask-first
|
|
35
|
-
2. **`anti-overengineering
|
|
36
|
-
3. **`small-diff
|
|
37
|
-
4. **`debug-first
|
|
38
|
-
5. **`verify-first
|
|
34
|
+
1. **`ask-first`**: If the prompt is missing essential decisions (schemas, storage locations, permissions), the AI must pause and ask 1 to 3 direct questions instead of guessing.
|
|
35
|
+
2. **`anti-overengineering`**: Rejects unneeded design patterns, DTOs, and speculative abstractions. Keeps code lean while strictly enforcing authentication, authorization, and input validation.
|
|
36
|
+
3. **`small-diff`**: Modifications stay strictly scoped to what solves the prompt. No cleaning up surrounding files, no global formatting passes, and no unnecessary dependency changes.
|
|
37
|
+
4. **`debug-first`**: When something breaks, the AI must read the complete error message and stack trace. Never guess fixes or hide errors behind empty try/catch blocks.
|
|
38
|
+
5. **`verify-first`**: Never declare a task complete without proof. Run tests, verify builds, test edge cases, and ensure no regressions occurred before reporting done.
|
|
39
39
|
|
|
40
40
|
---
|
|
41
41
|
|
|
@@ -91,23 +91,38 @@ vendor/bin/waitsec
|
|
|
91
91
|
```
|
|
92
92
|
|
|
93
93
|
### 7. Agent Skills Directory (skills.sh)
|
|
94
|
-
Listed on [skills.sh/fastroware/waitsec](https://skills.sh/fastroware/waitsec).
|
|
94
|
+
Listed on [skills.sh/fastroware/waitsec](https://skills.sh/fastroware/waitsec).
|
|
95
|
+
|
|
96
|
+
The skills CLI does not pre-select anything for a GitHub repo, so you must choose at least one skill. To install every skill without any prompt:
|
|
97
|
+
|
|
98
|
+
```bash
|
|
99
|
+
npx skills add fastroware/waitsec -y
|
|
100
|
+
```
|
|
101
|
+
|
|
102
|
+
To install only the core guardrails:
|
|
95
103
|
|
|
96
104
|
```bash
|
|
97
|
-
npx skills add fastroware/waitsec
|
|
105
|
+
npx skills add fastroware/waitsec --skill waitsec
|
|
98
106
|
```
|
|
99
107
|
|
|
100
|
-
|
|
108
|
+
To pick a specific set:
|
|
101
109
|
|
|
102
110
|
```bash
|
|
103
|
-
|
|
104
|
-
npx skills add fastroware/waitsec/skills/waitsec # All 5 core guardrails
|
|
105
|
-
npx skills add fastroware/waitsec/skills/waitsec-ui # Upcoming — UI optimizer & anti-slop copy
|
|
106
|
-
npx skills add fastroware/waitsec/skills/waitsec-pagemaker # Upcoming — Page architect (landing, blog, contact)
|
|
107
|
-
npx skills add fastroware/waitsec/skills/waitsec-code # Upcoming — Clean code & dependency hygiene
|
|
108
|
-
npx skills add fastroware/waitsec/skills/waitsec-quality # Upcoming — Security audits & test discipline
|
|
111
|
+
npx skills add fastroware/waitsec --skill waitsec waitsec-pagemaker
|
|
109
112
|
```
|
|
110
113
|
|
|
114
|
+
Available skills:
|
|
115
|
+
|
|
116
|
+
| Skill | Purpose |
|
|
117
|
+
| :--- | :--- |
|
|
118
|
+
| `waitsec` | Core 5 guardrails: ask-first, anti-overengineering, small-diff, debug-first, verify-first |
|
|
119
|
+
| `waitsec-pagemaker` | Page architect: project recon, design preferences, SEO/GEO, Schema.org, auth and UX rules |
|
|
120
|
+
| `waitsec-code` | Clean code, anti-comment noise, dependency hygiene |
|
|
121
|
+
| `waitsec-ui` | Anti-slop UI, responsive discipline, UI copy cleanup |
|
|
122
|
+
| `waitsec-quality` | Security auditing, test discipline, migration safety |
|
|
123
|
+
|
|
124
|
+
Tip: the CLI preselects all skills only when you install from a skills.sh pack URL. For a one-command install that selects everything by default, create a pack on [skills.sh](https://skills.sh) (sign in with Vercel, import this repository) and share the pack URL `https://skills.sh/p/<pack-id>`.
|
|
125
|
+
|
|
111
126
|
---
|
|
112
127
|
|
|
113
128
|
## Structure
|
|
@@ -115,7 +130,7 @@ npx skills add fastroware/waitsec/skills/waitsec-quality # Upcoming — Secur
|
|
|
115
130
|
```text
|
|
116
131
|
waitsec/
|
|
117
132
|
├── skills/
|
|
118
|
-
│ ├── waitsec/ # ACTIVE
|
|
133
|
+
│ ├── waitsec/ # ACTIVE: Core 5-phase guardrails
|
|
119
134
|
│ │ ├── SKILL.md # Hub: pipeline overview + links to detail files
|
|
120
135
|
│ │ └── references/ # Deep-dive guardrails & UI copy rules
|
|
121
136
|
│ │ ├── ask-first.md # Phase 1: Clarify requirements before coding
|
|
@@ -125,14 +140,20 @@ waitsec/
|
|
|
125
140
|
│ │ ├── verify-first.md # Phase 5: Proof before declaring done
|
|
126
141
|
│ │ └── write-info-analyzer.md # Simple rules for UI text and clean labels
|
|
127
142
|
│ │
|
|
128
|
-
│ ├── waitsec-ui/ #
|
|
143
|
+
│ ├── waitsec-ui/ # ACTIVE: Anti-slop CSS, UI copy restraint, responsive
|
|
129
144
|
│ │ └── SKILL.md
|
|
130
|
-
│ ├── waitsec-pagemaker/ #
|
|
131
|
-
│ │ ├── SKILL.md
|
|
145
|
+
│ ├── waitsec-pagemaker/ # ACTIVE: Page architect (landing, blog, articles, auth, contact)
|
|
146
|
+
│ │ ├── SKILL.md # Recon, design preferences, SEO/GEO, Schema.org, UX
|
|
132
147
|
│ │ └── references/ # Blueprints per archetype
|
|
133
|
-
│ ├──
|
|
148
|
+
│ │ ├── landing-page.md
|
|
149
|
+
│ │ ├── blog-index.md
|
|
150
|
+
│ │ ├── article-single.md
|
|
151
|
+
│ │ ├── about-me.md
|
|
152
|
+
│ │ ├── contact-page.md
|
|
153
|
+
│ │ └── auth-pages.md # Login, register, password reset, lockout states
|
|
154
|
+
│ ├── waitsec-code/ # ACTIVE: Clean code, anti-comment pollution
|
|
134
155
|
│ │ └── SKILL.md
|
|
135
|
-
│ └── waitsec-quality/ #
|
|
156
|
+
│ └── waitsec-quality/ # ACTIVE: Security auditing, testing discipline
|
|
136
157
|
│ └── SKILL.md
|
|
137
158
|
│
|
|
138
159
|
├── rules/
|
|
@@ -150,9 +171,7 @@ waitsec/
|
|
|
150
171
|
## Roadmap: Core & Extensions
|
|
151
172
|
|
|
152
173
|
- **Core (Active)**: The 5 foundational guardrails (`ask-first`, `anti-overengineering`, `small-diff`, `debug-first`, `verify-first`).
|
|
153
|
-
- **
|
|
154
|
-
- **Code (Upcoming)**: Anti-slop comments, naming conventions, and dependency discipline.
|
|
155
|
-
- **UI (Upcoming)**: Anti-slop interface rules, responsive standards, and clean typography.
|
|
174
|
+
- **Extensions (Active)**: `waitsec-pagemaker` for page building, `waitsec-code` for code hygiene, `waitsec-ui` for UI restraint, and `waitsec-quality` for security and testing discipline.
|
|
156
175
|
|
|
157
176
|
---
|
|
158
177
|
|
package/package.json
CHANGED
package/plugin.json
CHANGED