agent-comms
SendMessage recipient validation and worktreePath safety (CWE-59). TRIGGER when: validating a SendMessage `to:` recipient against the agent whitelist, or a…
Execute an OpenSpec tasks.md during implementation. TRIGGER when: working through spec task checkboxes and applying code changes. SKIP: authoring the tasks.md (use spec-design); verifying the result (use spec-review).
$ npx -y skills add komluk/scaffolding --skill spec-develop --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/spec-developContext preview
The summary Claude sees to decide when to auto-load this skill.
Execute an OpenSpec tasks.md during implementation. TRIGGER when: working through spec task checkboxes and applying code changes. SKIP: authoring the tasks.md (use spec-design); verifying the result (use spec-review).
name: spec-develop description: "Execute an OpenSpec tasks.md during implementation. TRIGGER when: working through spec task checkboxes and applying code changes. SKIP: authoring the tasks.md (use spec-design); verifying the result (use spec-review)."
Guide for implementing code changes driven by `tasks.md`.
| File | Purpose | Action | |------|---------|--------| | `{specs_path}/tasks.md` | Implementation checklist | Read, execute, mark done | | `{specs_path}/design.md` | Architecture decisions | Reference during implementation | | `{specs_path}/proposal.md` | Context and motivation | Reference if unclear on intent |
**Path Enforcement**: The `specs_path` MUST be `.scaffolding/conversations/{UUID}/specs/` where `{UUID}` is a valid UUID (format: `xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`). NEVER use descriptive folder names.
Parse all task groups and checkboxes. Identify dependency order.
For each task (`- [ ] N.M description`):
1. Read the task description and target file path 2. Check design.md for relevant requirements and decisions 3. Implement the change following project patterns 4. Mark complete: change `- [ ]` to `- [x]`
| Stack | Validation Command | |-------|--------------------| | Backend | `pytest` | | Frontend | `npm run validate` | | Both | Run both commands |
If a task cannot be completed:
- [ ] 2.3 Implement caching layer > BLOCKED: Redis connection config not yet available. Depends on devops setup.
Continue with unblocked tasks. Do not stop the entire chain.
| Rule | Detail | |------|--------| | Execute in order | Respect dependency sequence | | Mark progress | `- [ ]` -> `- [x]` as you complete | | Reference design | Check design.md before implementing | | Never modify specs | Only modify tasks.md checkboxes, never change spec content | | Validate per group | Run tests after each task group | | Note blockers | Add `> BLOCKED:` note, skip and continue | | Search before write | Check `core/utils/`, `core/exceptions.py` before creating helpers |
## 2. Core Implementation - [x] 2.1 Implement service in `./backend/service.py` - [x] 2.2 Add Pydantic schemas in `./backend/schemas.py` - [ ] 2.3 Add router in `./backend/router.py` > BLOCKED: Waiting for auth middleware decision - [x] 2.4 Run validation: `pytest`
If tasks.md has some `[x]` items already: 1. Skip completed tasks 2. Resume from first unchecked `- [ ]` 3. Re-read design.md for context on remaining work
When design.md specifies a technical choice, follow it:
| Design says | You do | |-------------|--------| | "Use Repository pattern" | Create repository class, not inline queries | | "Use Pydantic v2 model_validator" | Use `@model_validator`, not `@validator` | | "Max 500 lines per file" | Split if approaching limit | | "Existing utility in core/utils" | Import it, do not recreate |
| Avoid | Instead | |-------|---------| | Skipping validation steps | Run tests after every group | | Modifying design.md content | Only reviewer or planner changes specs | | Implementing out of order | Follow dependency sequence | | Ignoring blocked tasks silently | Add explicit `> BLOCKED:` note | | Creating duplicate utilities | Search `core/` first |
Spec-driven multi-agent orchestration for Claude Code — pure markdown, zero backend, runs on the stock runtime. 13 agents, 36 skills, 19 commands, 15 hooks, per-phase model tiers, opt-in lifecycle hooks, optional cross-device semantic memory.
Repo: komluk/scaffolding
SendMessage recipient validation and worktreePath safety (CWE-59). TRIGGER when: validating a SendMessage `to:` recipient against the agent whitelist, or a…
3-tier markdown memory protocol (shared/agent/conversation) for cross-session knowledge. TRIGGER when: reading or writing agent memory files, choosing which…
RESTful API design standards: resource naming, HTTP methods, status codes, pagination, versioning. TRIGGER when: designing new API endpoints, defining error…
Optimize Claude Code context-window usage for accuracy and cost. TRIGGER when: hitting context limits, structuring prompts for an agent, or trimming what gets…
Schema design, index strategy, migration safety, and query analysis. TRIGGER when: designing tables or indexes, writing a migration, or diagnosing a slow…