waitsec 0.5.3 → 0.5.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/.cursor-plugin/plugin.json +1 -1
  2. package/README.md +42 -23
  3. package/bin/cli.mjs +5 -5
  4. package/package.json +1 -1
  5. package/plugin.json +1 -1
package/.cursor-plugin/plugin.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "waitsec",
3
3
  "displayName": "waitsec",
4
4
  "description": "Practical guardrails for AI coding agents. Hold on, think first, code less.",
5
- "version": "0.5.3",
5
+ "version": "0.5.5",
6
6
  "author": {
7
7
  "name": "fastroware"
8
8
  },
package/README.md CHANGED
@@ -31,11 +31,11 @@ Most AI coding assistants do not fail because they lack knowledge. They fail bec
31
31
 
32
32
  ## The 5 Core Guardrails
33
33
 
34
- 1. **`ask-first`** — If the prompt is missing essential decisions (schemas, storage locations, permissions), the AI must pause and ask 1 to 3 direct questions instead of guessing.
35
- 2. **`anti-overengineering`** — Rejects unneeded design patterns, DTOs, and speculative abstractions. Keeps code lean while strictly enforcing authentication, authorization, and input validation.
36
- 3. **`small-diff`** — Modifications stay strictly scoped to what solves the prompt. No cleaning up surrounding files, no global formatting passes, and no unnecessary dependency changes.
37
- 4. **`debug-first`** — When something breaks, the AI must read the complete error message and stack trace. Never guess fixes or hide errors behind empty try/catch blocks.
38
- 5. **`verify-first`** — Never declare a task complete without proof. Run tests, verify builds, test edge cases, and ensure no regressions occurred before reporting done.
34
+ 1. **`ask-first`**: If the prompt is missing essential decisions (schemas, storage locations, permissions), the AI must pause and ask 1 to 3 direct questions instead of guessing.
35
+ 2. **`anti-overengineering`**: Rejects unneeded design patterns, DTOs, and speculative abstractions. Keeps code lean while strictly enforcing authentication, authorization, and input validation.
36
+ 3. **`small-diff`**: Modifications stay strictly scoped to what solves the prompt. No cleaning up surrounding files, no global formatting passes, and no unnecessary dependency changes.
37
+ 4. **`debug-first`**: When something breaks, the AI must read the complete error message and stack trace. Never guess fixes or hide errors behind empty try/catch blocks.
38
+ 5. **`verify-first`**: Never declare a task complete without proof. Run tests, verify builds, test edge cases, and ensure no regressions occurred before reporting done.
39
39
 
40
40
  ---
41
41
 
@@ -91,23 +91,38 @@ vendor/bin/waitsec
91
91
  ```
92
92
 
93
93
  ### 7. Agent Skills Directory (skills.sh)
94
- Listed on [skills.sh/fastroware/waitsec](https://skills.sh/fastroware/waitsec). Install via the universal skills CLI:
94
+ Listed on [skills.sh/fastroware/waitsec](https://skills.sh/fastroware/waitsec).
95
+
96
+ The skills CLI does not pre-select anything for a GitHub repo, so you must choose at least one skill. To install every skill without any prompt:
97
+
98
+ ```bash
99
+ npx skills add fastroware/waitsec -y
100
+ ```
101
+
102
+ To install only the core guardrails:
95
103
 
96
104
  ```bash
97
- npx skills add fastroware/waitsec
105
+ npx skills add fastroware/waitsec --skill waitsec
98
106
  ```
99
107
 
100
- Or install specifically the core guardrails module:
108
+ To pick a specific set:
101
109
 
102
110
  ```bash
103
- # Individual guardrails
104
- npx skills add fastroware/waitsec/skills/waitsec # All 5 core guardrails
105
- npx skills add fastroware/waitsec/skills/waitsec-ui # Upcoming — UI optimizer & anti-slop copy
106
- npx skills add fastroware/waitsec/skills/waitsec-pagemaker # Upcoming — Page architect (landing, blog, contact)
107
- npx skills add fastroware/waitsec/skills/waitsec-code # Upcoming — Clean code & dependency hygiene
108
- npx skills add fastroware/waitsec/skills/waitsec-quality # Upcoming — Security audits & test discipline
111
+ npx skills add fastroware/waitsec --skill waitsec waitsec-pagemaker
109
112
  ```
110
113
 
114
+ Available skills:
115
+
116
+ | Skill | Purpose |
117
+ | :--- | :--- |
118
+ | `waitsec` | Core 5 guardrails: ask-first, anti-overengineering, small-diff, debug-first, verify-first |
119
+ | `waitsec-pagemaker` | Page architect: project recon, design preferences, SEO/GEO, Schema.org, auth and UX rules |
120
+ | `waitsec-code` | Clean code, anti-comment noise, dependency hygiene |
121
+ | `waitsec-ui` | Anti-slop UI, responsive discipline, UI copy cleanup |
122
+ | `waitsec-quality` | Security auditing, test discipline, migration safety |
123
+
124
+ Tip: the CLI preselects all skills only when you install from a skills.sh pack URL. For a one-command install that selects everything by default, create a pack on [skills.sh](https://skills.sh) (sign in with Vercel, import this repository) and share the pack URL `https://skills.sh/p/<pack-id>`.
125
+
111
126
  ---
112
127
 
113
128
  ## Structure
@@ -115,7 +130,7 @@ npx skills add fastroware/waitsec/skills/waitsec-quality # Upcoming — Secur
115
130
  ```text
116
131
  waitsec/
117
132
  ├── skills/
118
- │ ├── waitsec/ # ACTIVE — Core 5-phase guardrails
133
+ │ ├── waitsec/ # ACTIVE: Core 5-phase guardrails
119
134
  │ │ ├── SKILL.md # Hub: pipeline overview + links to detail files
120
135
  │ │ └── references/ # Deep-dive guardrails & UI copy rules
121
136
  │ │ ├── ask-first.md # Phase 1: Clarify requirements before coding
@@ -125,14 +140,20 @@ waitsec/
125
140
  │ │ ├── verify-first.md # Phase 5: Proof before declaring done
126
141
  │ │ └── write-info-analyzer.md # Simple rules for UI text and clean labels
127
142
  │ │
128
- │ ├── waitsec-ui/ # UPCOMING — Anti-slop CSS, UI copy restraint, responsive
143
+ │ ├── waitsec-ui/ # ACTIVE: Anti-slop CSS, UI copy restraint, responsive
129
144
  │ │ └── SKILL.md
130
- │ ├── waitsec-pagemaker/ # UPCOMING — Page architect (landing, blog, articles, contact)
131
- │ │ ├── SKILL.md
145
+ │ ├── waitsec-pagemaker/ # ACTIVE: Page architect (landing, blog, articles, auth, contact)
146
+ │ │ ├── SKILL.md # Recon, design preferences, SEO/GEO, Schema.org, UX
132
147
  │ │ └── references/ # Blueprints per archetype
133
- │ ├── waitsec-code/ # UPCOMING — Clean code, anti-comment pollution
148
+ │ │ ├── landing-page.md
149
+ │ │ ├── blog-index.md
150
+ │ │ ├── article-single.md
151
+ │ │ ├── about-me.md
152
+ │ │ ├── contact-page.md
153
+ │ │ └── auth-pages.md # Login, register, password reset, lockout states
154
+ │ ├── waitsec-code/ # ACTIVE: Clean code, anti-comment pollution
134
155
  │ │ └── SKILL.md
135
- │ └── waitsec-quality/ # UPCOMING — Security auditing, testing discipline
156
+ │ └── waitsec-quality/ # ACTIVE: Security auditing, testing discipline
136
157
  │ └── SKILL.md
137
158
  │
138
159
  ├── rules/
@@ -150,9 +171,7 @@ waitsec/
150
171
  ## Roadmap: Core & Extensions
151
172
 
152
173
  - **Core (Active)**: The 5 foundational guardrails (`ask-first`, `anti-overengineering`, `small-diff`, `debug-first`, `verify-first`).
153
- - **Quality (Upcoming)**: Specialized deep-dives for `security`, `testing`, `performance`, and `accessibility`.
154
- - **Code (Upcoming)**: Anti-slop comments, naming conventions, and dependency discipline.
155
- - **UI (Upcoming)**: Anti-slop interface rules, responsive standards, and clean typography.
174
+ - **Extensions (Active)**: `waitsec-pagemaker` for page building, `waitsec-code` for code hygiene, `waitsec-ui` for UI restraint, and `waitsec-quality` for security and testing discipline.
156
175
 
157
176
  ---
158
177
 
package/bin/cli.mjs CHANGED
@@ -23,22 +23,22 @@ const AVAILABLE_SKILLS = [
23
23
  },
24
24
  {
25
25
  value: 'waitsec-ui',
26
- label: 'waitsec-ui (preview)',
26
+ label: 'waitsec-ui',
27
27
  hint: 'Anti-slop UI copy & CSS, responsive guardrails',
28
28
  },
29
29
  {
30
30
  value: 'waitsec-pagemaker',
31
- label: 'waitsec-pagemaker (preview)',
31
+ label: 'waitsec-pagemaker',
32
32
  hint: 'Page architect: landing pages, blog/articles, contact, about me',
33
33
  },
34
34
  {
35
35
  value: 'waitsec-code',
36
- label: 'waitsec-code (preview)',
36
+ label: 'waitsec-code',
37
37
  hint: 'Clean code rules, anti-comment noise, dependency control',
38
38
  },
39
39
  {
40
40
  value: 'waitsec-quality',
41
- label: 'waitsec-quality (preview)',
41
+ label: 'waitsec-quality',
42
42
  hint: 'Security audits, test discipline, data integrity',
43
43
  },
44
44
  ];
@@ -148,7 +148,7 @@ async function main() {
148
148
  const selectedSkills = await multiselect({
149
149
  message: 'Select the skills you want (Press Space to select, Enter to confirm):',
150
150
  options: AVAILABLE_SKILLS,
151
- initialValues: ['waitsec'],
151
+ initialValues: AVAILABLE_SKILLS.map((s) => s.value),
152
152
  required: 'You must select at least one skill.',
153
153
  });
154
154
  if (isCancel(selectedSkills)) stop('Installation cancelled.');
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "waitsec",
3
- "version": "0.5.3",
3
+ "version": "0.5.5",
4
4
  "description": "Practical guardrails for AI coding agents. Hold on, think first, code less.",
5
5
  "main": "rules/waitsec.md",
6
6
  "bin": {
package/plugin.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
2
  "name": "waitsec",
3
3
  "description": "Practical guardrails for AI coding agents. Hold on, think first, code less.",
4
- "version": "0.5.3"
4
+ "version": "0.5.5"
5
5
  }