workflow-toolkit 1.0.1

package/skills-lock.json

@@ -0,0 +1,92 @@
+{
+  "version": 1,
+  "skills": {
+    "ponytail": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail/SKILL.md",
+      "computedHash": "210fa0831f649ce9f8a305f7b7c8cf2a0dd09ac4dd53067109941b96e7811d4e"
+    },
+    "ponytail-audit": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail-audit/SKILL.md",
+      "computedHash": "8b8d72e6ff70b65b6c9518d470fcf29dc696eea93d28f3efa10fdcc60cbd696d"
+    },
+    "ponytail-debt": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail-debt/SKILL.md",
+      "computedHash": "0099b82174e3a4261828b4ec04d2c068b1b294fdab14f76701c2acd1f7c99539"
+    },
+    "ponytail-gain": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail-gain/SKILL.md",
+      "computedHash": "c45ecba7906960eea904218b623abf097ebff84ecbacca6d68da1d0687435f75"
+    },
+    "ponytail-help": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail-help/SKILL.md",
+      "computedHash": "10e8382b1033c9a0fec0073de6d3de3846b4f5dca7d78b6df2d476a1f4cd43c6"
+    },
+    "ponytail-review": {
+      "source": "dietrichgebert/ponytail",
+      "sourceType": "github",
+      "skillPath": "skills/ponytail-review/SKILL.md",
+      "computedHash": "4646594fcd75455533f7ff1425f4f1c5ba0fa65f88241bf262b1c4fc275f049a"
+    },
+    "security-implementation": {
+      "source": "antoniofulg/security-lifecycle",
+      "sourceType": "github",
+      "skillPath": "skills/security-implementation/SKILL.md",
+      "cliVersion": "1.5.23",
+      "ref": "8b356c2c8f17a788cb14db86316b3add39f620e1",
+      "computedHash": "ddf57fe08fdb0fe021d1de88feb8886d383659672be226766e2874f450c29fae"
+    },
+    "security-review": {
+      "source": "antoniofulg/security-lifecycle",
+      "sourceType": "github",
+      "skillPath": "skills/security-review/SKILL.md",
+      "cliVersion": "1.5.23",
+      "ref": "8b356c2c8f17a788cb14db86316b3add39f620e1",
+      "computedHash": "1db6b0cb15f2d87b4443e548a89b89e3bbe105ef8545931ce636e6fdc5fc7cd9"
+    },
+    "security-spec": {
+      "source": "antoniofulg/security-lifecycle",
+      "sourceType": "github",
+      "skillPath": "skills/security-spec/SKILL.md",
+      "cliVersion": "1.5.23",
+      "ref": "8b356c2c8f17a788cb14db86316b3add39f620e1",
+      "computedHash": "8df258cc7ecea5578b44642f264ad9a68afe21be5bf2a1a89305ffd73feff3f5"
+    },
+    "security-threat-model": {
+      "source": "antoniofulg/security-lifecycle",
+      "sourceType": "github",
+      "skillPath": "skills/security-threat-model/SKILL.md",
+      "cliVersion": "1.5.23",
+      "ref": "8b356c2c8f17a788cb14db86316b3add39f620e1",
+      "computedHash": "b75faf328ac069d5f163a10936516b2a5ef57e7dba97f2932e53a8d0791b169a"
+    },
+    "wtk": {
+      "source": "./local",
+      "sourceType": "local",
+      "skillPath": ".agents/skills/wtk/SKILL.md"
+    },
+    "wtk-deep-review": {
+      "source": "pedronauck/skills",
+      "sourceType": "github",
+      "skillPath": "skills/mine/wtk-deep-review/SKILL.md",
+      "computedHash": "17b035bf54994b97f918354bc8b4a98c3d3f679e7f3a5dfe12f4cec6be4c2cdc"
+    },
+    "wtk-lean": {
+      "source": "tech-leads-club/agent-skills",
+      "sourceType": "github",
+      "skillPath": "skills/tlc-spec-lean/SKILL.md",
+      "ref": "0ab82f644cd9caf94c65347a50ad934800b0cbc4",
+      "computedHash": "56db00c3b8c5e76c41f05aeddf1ba1c21be420f4afee48a5695c693a7391a50f",
+      "license": "CC-BY-4.0"
+    }
+  }
+}

package/templates/adoption/agents/core.md

@@ -0,0 +1,23 @@
+Run the adopted agent operating system as the delivery workflow. Load the guideline named by the
+current task before acting, keep product ownership in the consuming project, and use the local
+wtk-configuration as the authority for delegated model and effort choices.
+
+## Product context
+
+Read `docs/product/AGENT-CONTEXT.md` before product-specific work. Use its critical constraints and
+role/task routes; task-specific routes override role defaults. Load only cited paths or headings and
+surface missing required context as a named gap.
+
+| Role/task | Select |
+| --- | --- |
+| Visual polish / adjustment | Design/accessibility only; stronger evidence if semantics change |
+| Customer copy | Voice reference |
+| Boundary change | Boundary architecture reference |
+| Planner, other feature | Overview + affected capabilities/journeys |
+| Plan or Specify: runtime, config, public behaviour, authentication, authorization | `docs/toolkit/guidelines/SECURITY.md` — before coding; use sections 2 and 3 at their named phases |
+| Design or Build: screen or interaction | `docs/toolkit/guidelines/UI-UX.md` — before Design or Build; use the feature `uiux.md` when present |
+| Implementer | Approved slice + relevant architecture/design |
+
+Activate Ponytail at full at the start of workflow work and keep it active through Specify, Design,
+Tasks, Execute, fixes, and reviews. It stays active until the human explicitly says `stop ponytail`
+or `normal mode`.

package/templates/adoption/agents/quality.md

@@ -0,0 +1,3 @@
+Treat the gate as the definition of done. Keep the verifier separate from the implementer, run
+the canonical QA journey for user-visible changes, and record exact commands and results before
+claiming completion.

package/templates/adoption/knowledge/wiki/architecture/index.md

@@ -0,0 +1,3 @@
+# Architecture
+
+Add consumer-owned architecture concepts here.

package/templates/adoption/knowledge/wiki/decisions/index.md

@@ -0,0 +1,3 @@
+# Decisions
+
+Add consumer-owned decisions here.

package/templates/adoption/knowledge/wiki/design/index.md

@@ -0,0 +1,3 @@
+# Design
+
+Add consumer-owned design concepts here.

package/templates/adoption/knowledge/wiki/domain/index.md

@@ -0,0 +1,3 @@
+# Domain
+
+Add consumer-owned domain concepts here.

package/templates/adoption/knowledge/wiki/index.md

@@ -0,0 +1,3 @@
+# Knowledge bundle
+
+This consumer-owned index lists the concepts maintained by the project.

package/templates/adoption/knowledge/wiki/log.md

@@ -0,0 +1,3 @@
+# Knowledge change log
+
+Record meaningful changes to the consumer-owned knowledge bundle here, newest first.

package/templates/adoption/knowledge/wiki/open-questions/index.md

@@ -0,0 +1,3 @@
+# Open questions
+
+Add consumer-owned open questions here.

package/templates/adoption/knowledge/wiki/product/index.md

@@ -0,0 +1,3 @@
+# Product
+
+Add consumer-owned product concepts here.

package/templates/adoption/knowledge/wiki/research/index.md

@@ -0,0 +1,3 @@
+# Research
+
+Add consumer-owned research concepts here.

package/templates/adoption/product/AGENT-CONTEXT.md

@@ -0,0 +1,25 @@
+# Agent context
+
+Fill this small, consumer-owned index with the product identity, critical constraints, and routes
+to existing project documentation. Leave unset routes explicit; create detailed docs only when
+there is real content to write.
+
+## Identity
+
+- Product: [unset — consuming project]
+- Short description: [unset — one brief paragraph]
+
+## Critical constraints
+
+- [unset — add only constraints that apply across workflow work]
+
+## Role/task routes
+
+| Role or task | Read only |
+| --- | --- |
+| Planner | [unset — product overview; affected capabilities and journeys] |
+| Designer or visual adjustment | [unset — design and accessibility guidance] |
+| Copy change | [unset — customer voice reference] |
+| Implementer | [unset — approved slice; relevant architecture/design constraints] |
+| Reviewer or verifier | [unset — assigned diff, spec, tests, and cited constraints] |
+| Unknown scope or dependency | [unset — add reference with an explicit reason] |