chore: import upstream snapshot with attribution

.opencode/commands/build-fix.md

@@ -0,0 +1,56 @@
+---
+description: Fix build and TypeScript errors with minimal changes
+agent: everything-claude-code:build-error-resolver
+subtask: true
+---
+
+# Build Fix Command
+
+Fix build and TypeScript errors with minimal changes: $ARGUMENTS
+
+## Your Task
+
+1. **Run type check**: `npx tsc --noEmit`
+2. **Collect all errors**
+3. **Fix errors one by one** with minimal changes
+4. **Verify each fix** doesn't introduce new errors
+5. **Run final check** to confirm all errors resolved
+
+## Approach
+
+### DO:
+- PASS: Fix type errors with correct types
+- PASS: Add missing imports
+- PASS: Fix syntax errors
+- PASS: Make minimal changes
+- PASS: Preserve existing behavior
+- PASS: Run `tsc --noEmit` after each change
+
+### DON'T:
+- FAIL: Refactor code
+- FAIL: Add new features
+- FAIL: Change architecture
+- FAIL: Use `any` type (unless absolutely necessary)
+- FAIL: Add `@ts-ignore` comments
+- FAIL: Change business logic
+
+## Common Error Fixes
+
+| Error | Fix |
+|-------|-----|
+| Type 'X' is not assignable to type 'Y' | Add correct type annotation |
+| Property 'X' does not exist | Add property to interface or fix property name |
+| Cannot find module 'X' | Install package or fix import path |
+| Argument of type 'X' is not assignable | Cast or fix function signature |
+| Object is possibly 'undefined' | Add null check or optional chaining |
+
+## Verification Steps
+
+After fixes:
+1. `npx tsc --noEmit` - should show 0 errors
+2. `npm run build` - should succeed
+3. `npm test` - tests should still pass
+
+---
+
+**IMPORTANT**: Focus on fixing errors only. No refactoring, no improvements, no architectural changes. Get the build green with minimal diff.

.opencode/commands/checkpoint.md

@@ -0,0 +1,67 @@
+---
+description: Save verification state and progress checkpoint
+agent: everything-claude-code:build
+---
+
+# Checkpoint Command
+
+Save current verification state and create progress checkpoint: $ARGUMENTS
+
+## Your Task
+
+Create a snapshot of current progress including:
+
+1. **Tests status** - Which tests pass/fail
+2. **Coverage** - Current coverage metrics
+3. **Build status** - Build succeeds or errors
+4. **Code changes** - Summary of modifications
+5. **Next steps** - What remains to be done
+
+## Checkpoint Format
+
+### Checkpoint: [Timestamp]
+
+**Tests**
+- Total: X
+- Passing: Y
+- Failing: Z
+- Coverage: XX%
+
+**Build**
+- Status: PASS: Passing / FAIL: Failing
+- Errors: [if any]
+
+**Changes Since Last Checkpoint**
+```
+git diff --stat [last-checkpoint-commit]
+```
+
+**Completed Tasks**
+- [x] Task 1
+- [x] Task 2
+- [ ] Task 3 (in progress)
+
+**Blocking Issues**
+- [Issue description]
+
+**Next Steps**
+1. Step 1
+2. Step 2
+
+## Usage with Verification Loop
+
+Checkpoints integrate with the verification loop:
+
+```
+/plan → implement → /checkpoint → /verify → /checkpoint → implement → ...
+```
+
+Use checkpoints to:
+- Save state before risky changes
+- Track progress through phases
+- Enable rollback if needed
+- Document verification points
+
+---
+
+**TIP**: Create checkpoints at natural breakpoints: after each phase, before major refactoring, after fixing critical bugs.

.opencode/commands/code-review.md

@@ -0,0 +1,68 @@
+---
+description: Review code for quality, security, and maintainability
+agent: everything-claude-code:code-reviewer
+subtask: true
+---
+
+# Code Review Command
+
+Review code changes for quality, security, and maintainability: $ARGUMENTS
+
+## Your Task
+
+1. **Get changed files**: Run `git diff --name-only HEAD`
+2. **Analyze each file** for issues
+3. **Generate structured report**
+4. **Provide actionable recommendations**
+
+## Check Categories
+
+### Security Issues (CRITICAL)
+- [ ] Hardcoded credentials, API keys, tokens
+- [ ] SQL injection vulnerabilities
+- [ ] XSS vulnerabilities
+- [ ] Missing input validation
+- [ ] Insecure dependencies
+- [ ] Path traversal risks
+- [ ] Authentication/authorization flaws
+
+### Code Quality (HIGH)
+- [ ] Functions > 50 lines
+- [ ] Files > 800 lines
+- [ ] Nesting depth > 4 levels
+- [ ] Missing error handling
+- [ ] console.log statements
+- [ ] TODO/FIXME comments
+- [ ] Missing JSDoc for public APIs
+
+### Best Practices (MEDIUM)
+- [ ] Mutation patterns (use immutable instead)
+- [ ] Unnecessary complexity
+- [ ] Missing tests for new code
+- [ ] Accessibility issues (a11y)
+- [ ] Performance concerns
+
+### Style (LOW)
+- [ ] Inconsistent naming
+- [ ] Missing type annotations
+- [ ] Formatting issues
+
+## Report Format
+
+For each issue found:
+
+```
+**[SEVERITY]** file.ts:123
+Issue: [Description]
+Fix: [How to fix]
+```
+
+## Decision
+
+- **CRITICAL or HIGH issues**: Block commit, require fixes
+- **MEDIUM issues**: Recommend fixes before merge
+- **LOW issues**: Optional improvements
+
+---
+
+**IMPORTANT**: Never approve code with security vulnerabilities!

.opencode/commands/e2e.md

@@ -0,0 +1,105 @@
+---
+description: Generate and run E2E tests with Playwright
+agent: everything-claude-code:e2e-runner
+subtask: true
+---
+
+# E2E Command
+
+Generate and run end-to-end tests using Playwright: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze user flow** to test
+2. **Create test journey** with Playwright
+3. **Run tests** and capture artifacts
+4. **Report results** with screenshots/videos
+
+## Test Structure
+
+```typescript
+import { test, expect } from '@playwright/test'
+
+test.describe('Feature: [Name]', () => {
+  test.beforeEach(async ({ page }) => {
+    // Setup: Navigate, authenticate, prepare state
+  })
+
+  test('should [expected behavior]', async ({ page }) => {
+    // Arrange: Set up test data
+
+    // Act: Perform user actions
+    await page.click('[data-testid="button"]')
+    await page.fill('[data-testid="input"]', 'value')
+
+    // Assert: Verify results
+    await expect(page.locator('[data-testid="result"]')).toBeVisible()
+  })
+
+  test.afterEach(async ({ page }, testInfo) => {
+    // Capture screenshot on failure
+    if (testInfo.status !== 'passed') {
+      await page.screenshot({ path: `test-results/${testInfo.title}.png` })
+    }
+  })
+})
+```
+
+## Best Practices
+
+### Selectors
+- Prefer `data-testid` attributes
+- Avoid CSS classes (they change)
+- Use semantic selectors (roles, labels)
+
+### Waits
+- Use Playwright's auto-waiting
+- Avoid `page.waitForTimeout()`
+- Use `expect().toBeVisible()` for assertions
+
+### Test Isolation
+- Each test should be independent
+- Clean up test data after
+- Don't rely on test order
+
+## Artifacts to Capture
+
+- Screenshots on failure
+- Videos for debugging
+- Trace files for detailed analysis
+- Network logs if relevant
+
+## Test Categories
+
+1. **Critical User Flows**
+   - Authentication (login, logout, signup)
+   - Core feature happy paths
+   - Payment/checkout flows
+
+2. **Edge Cases**
+   - Network failures
+   - Invalid inputs
+   - Session expiry
+
+3. **Cross-Browser**
+   - Chrome, Firefox, Safari
+   - Mobile viewports
+
+## Report Format
+
+```
+E2E Test Results
+================
+PASS: Passed: X
+FAIL: Failed: Y
+SKIPPED: Skipped: Z
+
+Failed Tests:
+- test-name: Error message
+  Screenshot: path/to/screenshot.png
+  Video: path/to/video.webm
+```
+
+---
+
+**TIP**: Run with `--headed` flag for debugging: `npx playwright test --headed`

.opencode/commands/eval.md

@@ -0,0 +1,88 @@
+---
+description: Run evaluation against acceptance criteria
+agent: everything-claude-code:build
+---
+
+# Eval Command
+
+Evaluate implementation against acceptance criteria: $ARGUMENTS
+
+## Your Task
+
+Run structured evaluation to verify the implementation meets requirements.
+
+## Evaluation Framework
+
+### Grader Types
+
+1. **Binary Grader** - Pass/Fail
+   - Does it work? Yes/No
+   - Good for: feature completion, bug fixes
+
+2. **Scalar Grader** - Score 0-100
+   - How well does it work?
+   - Good for: performance, quality metrics
+
+3. **Rubric Grader** - Category scores
+   - Multiple dimensions evaluated
+   - Good for: comprehensive review
+
+## Evaluation Process
+
+### Step 1: Define Criteria
+
+```
+Acceptance Criteria:
+1. [Criterion 1] - [weight]
+2. [Criterion 2] - [weight]
+3. [Criterion 3] - [weight]
+```
+
+### Step 2: Run Tests
+
+For each criterion:
+- Execute relevant test
+- Collect evidence
+- Score result
+
+### Step 3: Calculate Score
+
+```
+Final Score = Σ (criterion_score × weight) / total_weight
+```
+
+### Step 4: Report
+
+## Evaluation Report
+
+### Overall: [PASS/FAIL] (Score: X/100)
+
+### Criterion Breakdown
+
+| Criterion | Score | Weight | Weighted |
+|-----------|-------|--------|----------|
+| [Criterion 1] | X/10 | 30% | X |
+| [Criterion 2] | X/10 | 40% | X |
+| [Criterion 3] | X/10 | 30% | X |
+
+### Evidence
+
+**Criterion 1: [Name]**
+- Test: [what was tested]
+- Result: [outcome]
+- Evidence: [screenshot, log, output]
+
+### Recommendations
+
+[If not passing, what needs to change]
+
+## Pass@K Metrics
+
+For non-deterministic evaluations:
+- Run K times
+- Calculate pass rate
+- Report: "Pass@K = X/K"
+
+---
+
+**TIP**: Use eval for acceptance testing before marking features complete.

.opencode/commands/evolve.md

@@ -0,0 +1,36 @@
+---
+description: Analyze instincts and suggest or generate evolved structures
+agent: everything-claude-code:build
+---
+
+# Evolve Command
+
+Analyze and evolve instincts in continuous-learning-v2: $ARGUMENTS
+
+## Your Task
+
+Run:
+
+```bash
+python3 "${CLAUDE_PLUGIN_ROOT}/skills/continuous-learning-v2/scripts/instinct-cli.py" evolve $ARGUMENTS
+```
+
+If `CLAUDE_PLUGIN_ROOT` is unavailable, use:
+
+```bash
+python3 ~/.claude/skills/continuous-learning-v2/scripts/instinct-cli.py evolve $ARGUMENTS
+```
+
+## Supported Args (v2.1)
+
+- no args: analysis only
+- `--generate`: also generate files under `evolved/{skills,commands,agents}`
+
+## Behavior Notes
+
+- Uses project + global instincts for analysis.
+- Shows skill/command/agent candidates from trigger and domain clustering.
+- Shows project -> global promotion candidates.
+- With `--generate`, output path is:
+  - project context: `~/.claude/homunculus/projects/<project-id>/evolved/`
+  - global fallback: `~/.claude/homunculus/evolved/`

.opencode/commands/go-build.md

@@ -0,0 +1,87 @@
+---
+description: Fix Go build and vet errors
+agent: everything-claude-code:go-build-resolver
+subtask: true
+---
+
+# Go Build Command
+
+Fix Go build, vet, and compilation errors: $ARGUMENTS
+
+## Your Task
+
+1. **Run go build**: `go build ./...`
+2. **Run go vet**: `go vet ./...`
+3. **Fix errors** one by one
+4. **Verify fixes** don't introduce new errors
+
+## Common Go Errors
+
+### Import Errors
+```
+imported and not used: "package"
+```
+**Fix**: Remove unused import or use `_` prefix
+
+### Type Errors
+```
+cannot use x (type T) as type U
+```
+**Fix**: Add type conversion or fix type definition
+
+### Undefined Errors
+```
+undefined: identifier
+```
+**Fix**: Import package, define variable, or fix typo
+
+### Vet Errors
+```
+printf: call has arguments but no formatting directives
+```
+**Fix**: Add format directive or remove arguments
+
+## Fix Order
+
+1. **Import errors** - Fix or remove imports
+2. **Type definitions** - Ensure types exist
+3. **Function signatures** - Match parameters
+4. **Vet warnings** - Address static analysis
+
+## Build Commands
+
+```bash
+# Build all packages
+go build ./...
+
+# Build with race detector
+go build -race ./...
+
+# Build for specific OS/arch
+GOOS=linux GOARCH=amd64 go build ./...
+
+# Run go vet
+go vet ./...
+
+# Run staticcheck
+staticcheck ./...
+
+# Format code
+gofmt -w .
+
+# Tidy dependencies
+go mod tidy
+```
+
+## Verification
+
+After fixes:
+```bash
+go build ./...    # Should succeed
+go vet ./...      # Should have no warnings
+go test ./...     # Tests should pass
+```
+
+---
+
+**IMPORTANT**: Fix errors only. No refactoring, no improvements. Get the build green with minimal changes.

.opencode/commands/go-review.md

@@ -0,0 +1,71 @@
+---
+description: Go code review for idiomatic patterns
+agent: everything-claude-code:go-reviewer
+subtask: true
+---
+
+# Go Review Command
+
+Review Go code for idiomatic patterns and best practices: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze Go code** for idioms and patterns
+2. **Check concurrency** - goroutines, channels, mutexes
+3. **Review error handling** - proper error wrapping
+4. **Verify performance** - allocations, bottlenecks
+
+## Review Checklist
+
+### Idiomatic Go
+- [ ] Package naming (lowercase, no underscores)
+- [ ] Variable naming (camelCase, short)
+- [ ] Interface naming (ends with -er)
+- [ ] Error naming (starts with Err)
+
+### Error Handling
+- [ ] Errors are checked, not ignored
+- [ ] Errors wrapped with context (`fmt.Errorf("...: %w", err)`)
+- [ ] Sentinel errors used appropriately
+- [ ] Custom error types when needed
+
+### Concurrency
+- [ ] Goroutines properly managed
+- [ ] Channels buffered appropriately
+- [ ] No data races (use `-race` flag)
+- [ ] Context passed for cancellation
+- [ ] WaitGroups used correctly
+
+### Performance
+- [ ] Avoid unnecessary allocations
+- [ ] Use `sync.Pool` for frequent allocations
+- [ ] Prefer value receivers for small structs
+- [ ] Buffer I/O operations
+
+### Code Organization
+- [ ] Small, focused packages
+- [ ] Clear dependency direction
+- [ ] Internal packages for private code
+- [ ] Godoc comments on exports
+
+## Report Format
+
+### Idiomatic Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### Error Handling Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### Concurrency Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### Performance Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+---
+
+**TIP**: Run `go vet` and `staticcheck` for additional automated checks.

.opencode/commands/go-test.md

@@ -0,0 +1,131 @@
+---
+description: Go TDD workflow with table-driven tests
+agent: everything-claude-code:tdd-guide
+subtask: true
+---
+
+# Go Test Command
+
+Implement using Go TDD methodology: $ARGUMENTS
+
+## Your Task
+
+Apply test-driven development with Go idioms:
+
+1. **Define types** - Interfaces and structs
+2. **Write table-driven tests** - Comprehensive coverage
+3. **Implement minimal code** - Pass the tests
+4. **Benchmark** - Verify performance
+
+## TDD Cycle for Go
+
+### Step 1: Define Interface
+```go
+type Calculator interface {
+    Calculate(input Input) (Output, error)
+}
+
+type Input struct {
+    // fields
+}
+
+type Output struct {
+    // fields
+}
+```
+
+### Step 2: Table-Driven Tests
+```go
+func TestCalculate(t *testing.T) {
+    tests := []struct {
+        name    string
+        input   Input
+        want    Output
+        wantErr bool
+    }{
+        {
+            name:  "valid input",
+            input: Input{...},
+            want:  Output{...},
+        },
+        {
+            name:    "invalid input",
+            input:   Input{...},
+            wantErr: true,
+        },
+    }
+
+    for _, tt := range tests {
+        t.Run(tt.name, func(t *testing.T) {
+            got, err := Calculate(tt.input)
+            if (err != nil) != tt.wantErr {
+                t.Errorf("Calculate() error = %v, wantErr %v", err, tt.wantErr)
+                return
+            }
+            if !reflect.DeepEqual(got, tt.want) {
+                t.Errorf("Calculate() = %v, want %v", got, tt.want)
+            }
+        })
+    }
+}
+```
+
+### Step 3: Run Tests (RED)
+```bash
+go test -v ./...
+```
+
+### Step 4: Implement (GREEN)
+```go
+func Calculate(input Input) (Output, error) {
+    // Minimal implementation
+}
+```
+
+### Step 5: Benchmark
+```go
+func BenchmarkCalculate(b *testing.B) {
+    input := Input{...}
+    for i := 0; i < b.N; i++ {
+        Calculate(input)
+    }
+}
+```
+
+## Go Testing Commands
+
+```bash
+# Run all tests
+go test ./...
+
+# Run with verbose output
+go test -v ./...
+
+# Run with coverage
+go test -cover ./...
+
+# Run with race detector
+go test -race ./...
+
+# Run benchmarks
+go test -bench=. ./...
+
+# Generate coverage report
+go test -coverprofile=coverage.out ./...
+go tool cover -html=coverage.out
+```
+
+## Test File Organization
+
+```
+package/
+├── calculator.go       # Implementation
+├── calculator_test.go  # Tests
+├── testdata/           # Test fixtures
+│   └── input.json
+└── mock_test.go        # Mock implementations
+```
+
+---
+
+**TIP**: Use `testify/assert` for cleaner assertions, or stick with stdlib for simplicity.

.opencode/commands/harness-audit.md

@@ -0,0 +1,84 @@
+---
+description: Run a deterministic repository harness audit and return a prioritized scorecard.
+---
+
+# Harness Audit Command
+
+Run a deterministic repository harness audit and return a prioritized scorecard.
+
+## Usage
+
+`/harness-audit [scope] [--format text|json] [--root path]`
+
+- `scope` (optional): `repo` (default), `hooks`, `skills`, `commands`, `agents`
+- `--format`: output style (`text` default, `json` for automation)
+- `--root`: audit a specific path instead of the current working directory
+
+## Deterministic Engine
+
+Always run:
+
+```bash
+node scripts/harness-audit.js <scope> --format <text|json> [--root <path>]
+```
+
+This script is the source of truth for scoring and checks. Do not invent additional dimensions or ad-hoc points.
+
+Rubric version: `2026-05-19`.
+
+The script computes up to 12 fixed categories (`0-10` normalized each). The first seven are always applicable; GitHub Integration is always applicable; deploy-target categories are applicable only when a matching marker is detected.
+
+1. Tool Coverage
+2. Context Efficiency
+3. Quality Gates
+4. Memory Persistence
+5. Eval Coverage
+6. Security Guardrails
+7. Cost Efficiency
+8. GitHub Integration
+9. Vercel Integration *(when `vercel.json` or `.vercel/` is present)*
+10. Netlify Integration *(when `netlify.toml` or `.netlify/` is present)*
+11. Cloudflare Integration *(when `wrangler.toml` or `wrangler.jsonc` is present)*
+12. Fly Integration *(when `fly.toml` is present)*
+
+Scores are derived from explicit file/rule checks and are reproducible for the same commit.
+The script audits the current working directory by default and auto-detects whether the target is the ECC repo itself or a consumer project using ECC.
+
+## Output Contract
+
+Return:
+
+1. `overall_score` out of `max_score`. `max_score` depends on which categories are applicable to the target; never assume a fixed total.
+2. `applicable_categories[]` and `category_count` describing which categories contributed.
+3. Category scores and concrete findings.
+4. Failed checks with exact file paths.
+5. Top 3 actions from the deterministic output (`top_actions`).
+6. Suggested ECC skills to apply next.
+
+## Checklist
+
+- Use script output directly; do not rescore manually.
+- If `--format json` is requested, return the script JSON unchanged.
+- If text is requested, summarize failing checks and top actions.
+- Include exact file paths from `checks[]` and `top_actions[]`.
+
+## Example Result
+
+```text
+Harness Audit (repo, repo): 71/80
+- Tool Coverage: 10/10 (10/10 pts)
+- Context Efficiency: 9/10 (9/10 pts)
+- Quality Gates: 10/10 (10/10 pts)
+- GitHub Integration: 2/10 (2/10 pts)
+
+Top 3 Actions:
+1) [GitHub Integration] Add at least one workflow under .github/workflows/. (.github/workflows/)
+2) [Security Guardrails] Add prompt/tool preflight security guards in hooks/hooks.json. (hooks/hooks.json)
+3) [Eval Coverage] Increase automated test coverage across scripts/hooks/lib. (tests/)
+```
+
+## Arguments
+
+$ARGUMENTS:
+- `repo|hooks|skills|commands|agents` (optional scope)
+- `--format text|json` (optional output format)

.opencode/commands/instinct-export.md

@@ -0,0 +1,93 @@
+---
+description: Export instincts for sharing
+agent: everything-claude-code:build
+---
+
+# Instinct Export Command
+
+Export instincts for sharing with others: $ARGUMENTS
+
+## Your Task
+
+Export instincts from the continuous-learning-v2 system.
+
+## Export Options
+
+### Export All
+```
+/instinct-export
+```
+
+### Export High Confidence Only
+```
+/instinct-export --min-confidence 0.8
+```
+
+### Export by Category
+```
+/instinct-export --category coding
+```
+
+### Export to Specific Path
+```
+/instinct-export --output ./my-instincts.json
+```
+
+## Export Format
+
+```json
+{
+  "instincts": [
+    {
+      "id": "instinct-123",
+      "trigger": "[situation description]",
+      "action": "[recommended action]",
+      "confidence": 0.85,
+      "category": "coding",
+      "applications": 10,
+      "successes": 9,
+      "source": "session-observation"
+    }
+  ],
+  "metadata": {
+    "version": "1.0",
+    "exported": "2025-01-15T10:00:00Z",
+    "author": "username",
+    "total": 25,
+    "filter": "confidence >= 0.8"
+  }
+}
+```
+
+## Export Report
+
+```
+Export Summary
+==============
+Output: ./instincts-export.json
+Total instincts: X
+Filtered: Y
+Exported: Z
+
+Categories:
+- coding: N
+- testing: N
+- security: N
+- git: N
+
+Top Instincts (by confidence):
+1. [trigger] (0.XX)
+2. [trigger] (0.XX)
+3. [trigger] (0.XX)
+```
+
+## Sharing
+
+After export:
+- Share JSON file directly
+- Upload to team repository
+- Publish to instinct registry
+
+---
+
+**TIP**: Export high-confidence instincts (>0.8) for better quality shares.

.opencode/commands/instinct-import.md

@@ -0,0 +1,88 @@
+---
+description: Import instincts from external sources
+agent: everything-claude-code:build
+---
+
+# Instinct Import Command
+
+Import instincts from a file or URL: $ARGUMENTS
+
+## Your Task
+
+Import instincts into the continuous-learning-v2 system.
+
+## Import Sources
+
+### File Import
+```
+/instinct-import path/to/instincts.json
+```
+
+### URL Import
+```
+/instinct-import https://example.com/instincts.json
+```
+
+### Team Share Import
+```
+/instinct-import @teammate/instincts
+```
+
+## Import Format
+
+Expected JSON structure:
+
+```json
+{
+  "instincts": [
+    {
+      "trigger": "[situation description]",
+      "action": "[recommended action]",
+      "confidence": 0.7,
+      "category": "coding",
+      "source": "imported"
+    }
+  ],
+  "metadata": {
+    "version": "1.0",
+    "exported": "2025-01-15T10:00:00Z",
+    "author": "username"
+  }
+}
+```
+
+## Import Process
+
+1. **Validate format** - Check JSON structure
+2. **Deduplicate** - Skip existing instincts
+3. **Adjust confidence** - Reduce confidence for imports (×0.8)
+4. **Merge** - Add to local instinct store
+5. **Report** - Show import summary
+
+## Import Report
+
+```
+Import Summary
+==============
+Source: [path or URL]
+Total in file: X
+Imported: Y
+Skipped (duplicates): Z
+Errors: W
+
+Imported Instincts:
+- [trigger] (confidence: 0.XX)
+- [trigger] (confidence: 0.XX)
+...
+```
+
+## Conflict Resolution
+
+When importing duplicates:
+- Keep higher confidence version
+- Merge application counts
+- Update timestamp
+
+---
+
+**TIP**: Review imported instincts with `/instinct-status` after import.

.opencode/commands/instinct-status.md

@@ -0,0 +1,28 @@
+---
+description: Show learned instincts (project + global) with confidence
+agent: everything-claude-code:build
+---
+
+# Instinct Status Command
+
+Show instinct status from continuous-learning-v2: $ARGUMENTS
+
+## Your Task
+
+Resolve the active ECC plugin root with the same walker `hooks/hooks.json`
+uses (env var → standard install → known plugin roots → plugin cache →
+fallback), then run the instinct CLI. This avoids reading a stale legacy
+`~/.claude/skills/continuous-learning-v2/` install when the plugin is
+active under `~/.claude/plugins/cache/...` (#2037).
+
+```bash
+ECC_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var r=(function(){var p=require('path'),f=require('fs'),o=require('os');var e=process.env.CLAUDE_PLUGIN_ROOT;if(e&&e.trim())return e.trim();var d=p.join(o.homedir(),'.claude');function L(x){try{return require(p.join(x,'scripts','lib','resolve-ecc-root')).resolveEccRoot()}catch(_){return null}}var r=L(d);if(r)return r;var s=['ecc','ecc@ecc','marketplaces/ecc','everything-claude-code','everything-claude-code@everything-claude-code','marketplaces/everything-claude-code'];for(var i=0;i<s.length;i++){r=L(p.join(d,'plugins',s[i]));if(r)return r}try{var g=['ecc','everything-claude-code'];for(var j=0;j<g.length;j++){var c=p.join(d,'plugins','cache',g[j]);var O=f.readdirSync(c);for(var k=0;k<O.length;k++){var q=p.join(c,O[k]);var V=f.readdirSync(q);for(var m=0;m<V.length;m++){r=L(p.join(q,V[m]));if(r)return r}}}}catch(_){}return d})();console.log(r)")}"
+python3 "$ECC_ROOT/skills/continuous-learning-v2/scripts/instinct-cli.py" status
+```
+
+## Behavior Notes
+
+- Output includes both project-scoped and global instincts.
+- Project instincts override global instincts when IDs conflict.
+- Output is grouped by domain with confidence bars.
+- This command does not support extra filters in v2.1.

.opencode/commands/learn.md

@@ -0,0 +1,61 @@
+---
+description: Extract patterns and learnings from current session
+agent: everything-claude-code:build
+---
+
+# Learn Command
+
+Extract patterns, learnings, and reusable insights from the current session: $ARGUMENTS
+
+## Your Task
+
+Analyze the conversation and code changes to extract:
+
+1. **Patterns discovered** - Recurring solutions or approaches
+2. **Best practices applied** - Techniques that worked well
+3. **Mistakes to avoid** - Issues encountered and solutions
+4. **Reusable snippets** - Code patterns worth saving
+
+## Output Format
+
+### Patterns Discovered
+
+**Pattern: [Name]**
+- Context: When to use this pattern
+- Implementation: How to apply it
+- Example: Code snippet
+
+### Best Practices Applied
+
+1. [Practice name]
+   - Why it works
+   - When to apply
+
+### Mistakes to Avoid
+
+1. [Mistake description]
+   - What went wrong
+   - How to prevent it
+
+### Suggested Skill Updates
+
+If patterns are significant, suggest updates to:
+- `skills/coding-standards/SKILL.md`
+- `skills/[domain]/SKILL.md`
+- `rules/[category].md`
+
+## Instinct Format (for continuous-learning-v2)
+
+```json
+{
+  "trigger": "[situation that triggers this learning]",
+  "action": "[what to do]",
+  "confidence": 0.7,
+  "source": "session-extraction",
+  "timestamp": "[ISO timestamp]"
+}
+```
+
+---
+
+**TIP**: Run `/learn` periodically during long sessions to capture insights before context compaction.

.opencode/commands/loop-start.md

@@ -0,0 +1,32 @@
+# Loop Start Command
+
+Start a managed autonomous loop pattern with safety defaults.
+
+## Usage
+
+`/loop-start [pattern] [--mode safe|fast]`
+
+- `pattern`: `sequential`, `continuous-pr`, `rfc-dag`, `infinite`
+- `--mode`:
+  - `safe` (default): strict quality gates and checkpoints
+  - `fast`: reduced gates for speed
+
+## Flow
+
+1. Confirm repository state and branch strategy.
+2. Select loop pattern and model tier strategy.
+3. Enable required hooks/profile for the chosen mode.
+4. Create loop plan and write runbook under `.claude/plans/`.
+5. Print commands to start and monitor the loop.
+
+## Required Safety Checks
+
+- Verify tests pass before first loop iteration.
+- Ensure `ECC_HOOK_PROFILE` is not disabled globally.
+- Ensure loop has explicit stop condition.
+
+## Arguments
+
+$ARGUMENTS:
+- `<pattern>` optional (`sequential|continuous-pr|rfc-dag|infinite`)
+- `--mode safe|fast` optional

.opencode/commands/loop-status.md

@@ -0,0 +1,24 @@
+# Loop Status Command
+
+Inspect active loop state, progress, and failure signals.
+
+## Usage
+
+`/loop-status [--watch]`
+
+## What to Report
+
+- active loop pattern
+- current phase and last successful checkpoint
+- failing checks (if any)
+- estimated time/cost drift
+- recommended intervention (continue/pause/stop)
+
+## Watch Mode
+
+When `--watch` is present, refresh status periodically and surface state changes.
+
+## Arguments
+
+$ARGUMENTS:
+- `--watch` optional

.opencode/commands/model-route.md

@@ -0,0 +1,26 @@
+# Model Route Command
+
+Recommend the best model tier for the current task by complexity and budget.
+
+## Usage
+
+`/model-route [task-description] [--budget low|med|high]`
+
+## Routing Heuristic
+
+- `haiku`: deterministic, low-risk mechanical changes
+- `sonnet`: default for implementation and refactors
+- `opus`: architecture, deep review, ambiguous requirements
+
+## Required Output
+
+- recommended model
+- confidence level
+- why this model fits
+- fallback model if first attempt fails
+
+## Arguments
+
+$ARGUMENTS:
+- `[task-description]` optional free-text
+- `--budget low|med|high` optional

.opencode/commands/orchestrate.md

@@ -0,0 +1,88 @@
+---
+description: Orchestrate multiple agents for complex tasks
+agent: everything-claude-code:planner
+subtask: true
+---
+
+# Orchestrate Command
+
+Orchestrate multiple specialized agents for this complex task: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze task complexity** and break into subtasks
+2. **Identify optimal agents** for each subtask
+3. **Create execution plan** with dependencies
+4. **Coordinate execution** - parallel where possible
+5. **Synthesize results** into unified output
+
+## Available Agents
+
+| Agent | Specialty | Use For |
+|-------|-----------|---------|
+| planner | Implementation planning | Complex feature design |
+| architect | System design | Architectural decisions |
+| code-reviewer | Code quality | Review changes |
+| security-reviewer | Security analysis | Vulnerability detection |
+| tdd-guide | Test-driven dev | Feature implementation |
+| build-error-resolver | Build fixes | TypeScript/build errors |
+| e2e-runner | E2E testing | User flow testing |
+| doc-updater | Documentation | Updating docs |
+| refactor-cleaner | Code cleanup | Dead code removal |
+| go-reviewer | Go code | Go-specific review |
+| go-build-resolver | Go builds | Go build errors |
+| database-reviewer | Database | Query optimization |
+
+## Orchestration Patterns
+
+### Sequential Execution
+```
+planner → tdd-guide → code-reviewer → security-reviewer
+```
+Use when: Later tasks depend on earlier results
+
+### Parallel Execution
+```
+┌→ security-reviewer
+planner →├→ code-reviewer
+└→ architect
+```
+Use when: Tasks are independent
+
+### Fan-Out/Fan-In
+```
+         ┌→ agent-1 ─┐
+planner →├→ agent-2 ─┼→ synthesizer
+         └→ agent-3 ─┘
+```
+Use when: Multiple perspectives needed
+
+## Execution Plan Format
+
+### Phase 1: [Name]
+- Agent: [agent-name]
+- Task: [specific task]
+- Depends on: [none or previous phase]
+
+### Phase 2: [Name] (parallel)
+- Agent A: [agent-name]
+  - Task: [specific task]
+- Agent B: [agent-name]
+  - Task: [specific task]
+- Depends on: Phase 1
+
+### Phase 3: Synthesis
+- Combine results from Phase 2
+- Generate unified output
+
+## Coordination Rules
+
+1. **Plan before execute** - Create full execution plan first
+2. **Minimize handoffs** - Reduce context switching
+3. **Parallelize when possible** - Independent tasks in parallel
+4. **Clear boundaries** - Each agent has specific scope
+5. **Single source of truth** - One agent owns each artifact
+
+---
+
+**NOTE**: Complex tasks benefit from multi-agent orchestration. Simple tasks should use single agents directly.

.opencode/commands/plan.md

@@ -0,0 +1,49 @@
+---
+description: Create implementation plan with risk assessment
+agent: everything-claude-code:planner
+subtask: true
+---
+
+# Plan Command
+
+Create a detailed implementation plan for: $ARGUMENTS
+
+## Your Task
+
+1. **Restate Requirements** - Clarify what needs to be built
+2. **Identify Risks** - Surface potential issues, blockers, and dependencies
+3. **Create Step Plan** - Break down implementation into phases
+4. **Wait for Confirmation** - MUST receive user approval before proceeding
+
+## Output Format
+
+### Requirements Restatement
+[Clear, concise restatement of what will be built]
+
+### Implementation Phases
+[Phase 1: Description]
+- Step 1.1
+- Step 1.2
+...
+
+[Phase 2: Description]
+- Step 2.1
+- Step 2.2
+...
+
+### Dependencies
+[List external dependencies, APIs, services needed]
+
+### Risks
+- HIGH: [Critical risks that could block implementation]
+- MEDIUM: [Moderate risks to address]
+- LOW: [Minor concerns]
+
+### Estimated Complexity
+[HIGH/MEDIUM/LOW with time estimates]
+
+**WAITING FOR CONFIRMATION**: Proceed with this plan? (yes/no/modify)
+
+---
+
+**CRITICAL**: Do NOT write any code until the user explicitly confirms with "yes", "proceed", or similar affirmative response.

.opencode/commands/projects.md

@@ -0,0 +1,23 @@
+---
+description: List registered projects and instinct counts
+agent: everything-claude-code:build
+---
+
+# Projects Command
+
+Show continuous-learning-v2 project registry and stats: $ARGUMENTS
+
+## Your Task
+
+Run:
+
+```bash
+python3 "${CLAUDE_PLUGIN_ROOT}/skills/continuous-learning-v2/scripts/instinct-cli.py" projects
+```
+
+If `CLAUDE_PLUGIN_ROOT` is unavailable, use:
+
+```bash
+python3 ~/.claude/skills/continuous-learning-v2/scripts/instinct-cli.py projects
+```
+

.opencode/commands/promote.md

@@ -0,0 +1,23 @@
+---
+description: Promote project instincts to global scope
+agent: everything-claude-code:build
+---
+
+# Promote Command
+
+Promote instincts in continuous-learning-v2: $ARGUMENTS
+
+## Your Task
+
+Run:
+
+```bash
+python3 "${CLAUDE_PLUGIN_ROOT}/skills/continuous-learning-v2/scripts/instinct-cli.py" promote $ARGUMENTS
+```
+
+If `CLAUDE_PLUGIN_ROOT` is unavailable, use:
+
+```bash
+python3 ~/.claude/skills/continuous-learning-v2/scripts/instinct-cli.py promote $ARGUMENTS
+```
+

.opencode/commands/quality-gate.md

@@ -0,0 +1,29 @@
+# Quality Gate Command
+
+Run the ECC quality pipeline on demand for a file or project scope.
+
+## Usage
+
+`/quality-gate [path|.] [--fix] [--strict]`
+
+- default target: current directory (`.`)
+- `--fix`: allow auto-format/fix where configured
+- `--strict`: fail on warnings where supported
+
+## Pipeline
+
+1. Detect language/tooling for target.
+2. Run formatter checks.
+3. Run lint/type checks when available.
+4. Produce a concise remediation list.
+
+## Notes
+
+This command mirrors hook behavior but is operator-invoked.
+
+## Arguments
+
+$ARGUMENTS:
+- `[path|.]` optional target path
+- `--fix` optional
+- `--strict` optional

.opencode/commands/refactor-clean.md

@@ -0,0 +1,102 @@
+---
+description: Remove dead code and consolidate duplicates
+agent: everything-claude-code:refactor-cleaner
+subtask: true
+---
+
+# Refactor Clean Command
+
+Analyze and clean up the codebase: $ARGUMENTS
+
+## Your Task
+
+1. **Detect dead code** using analysis tools
+2. **Identify duplicates** and consolidation opportunities
+3. **Safely remove** unused code with documentation
+4. **Verify** no functionality broken
+
+## Detection Phase
+
+### Run Analysis Tools
+
+```bash
+# Find unused exports
+npx knip
+
+# Find unused dependencies
+npx depcheck
+
+# Find unused TypeScript exports
+npx ts-prune
+```
+
+### Manual Checks
+
+- Unused functions (no callers)
+- Unused variables
+- Unused imports
+- Commented-out code
+- Unreachable code
+- Unused CSS classes
+
+## Removal Phase
+
+### Before Removing
+
+1. **Search for usage** - grep, find references
+2. **Check exports** - might be used externally
+3. **Verify tests** - no test depends on it
+4. **Document removal** - git commit message
+
+### Safe Removal Order
+
+1. Remove unused imports first
+2. Remove unused private functions
+3. Remove unused exported functions
+4. Remove unused types/interfaces
+5. Remove unused files
+
+## Consolidation Phase
+
+### Identify Duplicates
+
+- Similar functions with minor differences
+- Copy-pasted code blocks
+- Repeated patterns
+
+### Consolidation Strategies
+
+1. **Extract utility function** - for repeated logic
+2. **Create base class** - for similar classes
+3. **Use higher-order functions** - for repeated patterns
+4. **Create shared constants** - for magic values
+
+## Verification
+
+After cleanup:
+
+1. `npm run build` - builds successfully
+2. `npm test` - all tests pass
+3. `npm run lint` - no new lint errors
+4. Manual smoke test - features work
+
+## Report Format
+
+```
+Dead Code Analysis
+==================
+
+Removed:
+- file.ts: functionName (unused export)
+- utils.ts: helperFunction (no callers)
+
+Consolidated:
+- formatDate() and formatDateTime() → dateUtils.format()
+
+Remaining (manual review needed):
+- oldComponent.tsx: potentially unused, verify with team
+```
+
+---
+
+**CAUTION**: Always verify before removing. When in doubt, ask or add `// TODO: verify usage` comment.

.opencode/commands/rust-build.md

@@ -0,0 +1,78 @@
+---
+description: Fix Rust build errors and borrow checker issues
+agent: everything-claude-code:rust-build-resolver
+subtask: true
+---
+
+# Rust Build Command
+
+Fix Rust build, clippy, and dependency errors: $ARGUMENTS
+
+## Your Task
+
+1. **Run cargo check**: `cargo check 2>&1`
+2. **Run cargo clippy**: `cargo clippy -- -D warnings 2>&1`
+3. **Fix errors** one at a time
+4. **Verify fixes** don't introduce new errors
+
+## Common Rust Errors
+
+### Borrow Checker
+```
+cannot borrow `x` as mutable because it is also borrowed as immutable
+```
+**Fix**: Restructure to end immutable borrow first; clone only if justified
+
+### Type Mismatch
+```
+mismatched types: expected `T`, found `U`
+```
+**Fix**: Add `.into()`, `as`, or explicit type conversion
+
+### Missing Import
+```
+unresolved import `crate::module`
+```
+**Fix**: Fix the `use` path or declare the module (add Cargo.toml deps only for external crates)
+
+### Lifetime Errors
+```
+does not live long enough
+```
+**Fix**: Use owned type or add lifetime annotation
+
+### Trait Not Implemented
+```
+the trait `X` is not implemented for `Y`
+```
+**Fix**: Add `#[derive(Trait)]` or implement manually
+
+## Fix Order
+
+1. **Build errors** - Code must compile
+2. **Clippy warnings** - Fix suspicious constructs
+3. **Formatting** - `cargo fmt` compliance
+
+## Build Commands
+
+```bash
+cargo check 2>&1
+cargo clippy -- -D warnings 2>&1
+cargo fmt --check 2>&1
+cargo tree --duplicates
+cargo test
+```
+
+## Verification
+
+After fixes:
+```bash
+cargo check                  # Should succeed
+cargo clippy -- -D warnings  # No warnings allowed
+cargo fmt --check            # Formatting should pass
+cargo test                   # Tests should pass
+```
+
+---
+
+**IMPORTANT**: Fix errors only. No refactoring, no improvements. Get the build green with minimal changes.

.opencode/commands/rust-review.md

@@ -0,0 +1,65 @@
+---
+description: Rust code review for ownership, safety, and idiomatic patterns
+agent: everything-claude-code:rust-reviewer
+subtask: true
+---
+
+# Rust Review Command
+
+Review Rust code for idiomatic patterns and best practices: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze Rust code** for idioms and patterns
+2. **Check ownership** - borrowing, lifetimes, unnecessary clones
+3. **Review error handling** - proper `?` propagation, no unwrap in production
+4. **Verify safety** - unsafe usage, injection, secrets
+
+## Review Checklist
+
+### Safety (CRITICAL)
+- [ ] No unchecked `unwrap()`/`expect()` in production paths
+- [ ] `unsafe` blocks have `// SAFETY:` comments
+- [ ] No SQL/command injection
+- [ ] No hardcoded secrets
+
+### Ownership (HIGH)
+- [ ] No unnecessary `.clone()` to satisfy borrow checker
+- [ ] `&str` preferred over `String` in function parameters
+- [ ] `&[T]` preferred over `Vec<T>` in function parameters
+- [ ] No excessive lifetime annotations where elision works
+
+### Error Handling (HIGH)
+- [ ] Errors propagated with `?`; use `.context()` in `anyhow`/`eyre` application code
+- [ ] No silenced errors (`let _ = result;`)
+- [ ] `thiserror` for library errors, `anyhow` for applications
+
+### Concurrency (HIGH)
+- [ ] No blocking in async context
+- [ ] Bounded channels preferred
+- [ ] `Mutex` poisoning handled
+- [ ] `Send`/`Sync` bounds correct
+
+### Code Quality (MEDIUM)
+- [ ] Functions under 50 lines
+- [ ] No deep nesting (>4 levels)
+- [ ] Exhaustive matching on business enums
+- [ ] Clippy warnings addressed
+
+## Report Format
+
+### CRITICAL Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### HIGH Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### MEDIUM Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+---
+
+**TIP**: Run `cargo clippy -- -D warnings` and `cargo fmt --check` for automated checks.

.opencode/commands/rust-test.md

@@ -0,0 +1,104 @@
+---
+description: Rust TDD workflow with unit and property tests
+agent: everything-claude-code:tdd-guide
+subtask: true
+---
+
+# Rust Test Command
+
+Implement using Rust TDD methodology: $ARGUMENTS
+
+## Your Task
+
+Apply test-driven development with Rust idioms:
+
+1. **Define types** - Structs, enums, traits
+2. **Write tests** - Unit tests in `#[cfg(test)]` modules
+3. **Implement minimal code** - Pass the tests
+4. **Check coverage** - Target 80%+
+
+## TDD Cycle for Rust
+
+### Step 1: Define Interface
+```rust
+pub struct Input {
+    // fields
+}
+
+pub fn process(input: &Input) -> Result<Output, Error> {
+    todo!()
+}
+```
+
+### Step 2: Write Tests
+```rust
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn valid_input_succeeds() {
+        let input = Input { /* ... */ };
+        let result = process(&input);
+        assert!(result.is_ok());
+    }
+
+    #[test]
+    fn invalid_input_returns_error() {
+        let input = Input { /* ... */ };
+        let result = process(&input);
+        assert!(result.is_err());
+    }
+}
+```
+
+### Step 3: Run Tests (RED)
+```bash
+cargo test
+```
+
+### Step 4: Implement (GREEN)
+```rust
+pub fn process(input: &Input) -> Result<Output, Error> {
+    // Minimal implementation that handles both paths
+    validate(input)?;
+    Ok(Output { /* ... */ })
+}
+```
+
+### Step 5: Check Coverage
+```bash
+cargo llvm-cov
+cargo llvm-cov --fail-under-lines 80
+```
+
+## Rust Testing Commands
+
+```bash
+cargo test                        # Run all tests
+cargo test -- --nocapture         # Show println output
+cargo test test_name              # Run specific test
+cargo test --no-fail-fast         # Don't stop on first failure
+cargo test --lib                  # Unit tests only
+cargo test --test integration     # Integration tests only
+cargo test --doc                  # Doc tests only
+cargo bench                       # Run benchmarks
+```
+
+## Test File Organization
+
+```
+src/
+├── lib.rs             # Library root
+├── service.rs         # Implementation
+└── service/
+    └── tests.rs       # Or inline #[cfg(test)] mod tests {}
+tests/
+└── integration.rs     # Integration tests
+benches/
+└── benchmark.rs       # Criterion benchmarks
+```
+
+---
+
+**TIP**: Use `rstest` for parameterized tests and `proptest` for property-based testing.

.opencode/commands/security-scan.md

@@ -0,0 +1,92 @@
+---
+description: Run AgentShield against agent, hook, MCP, permission, and secret surfaces.
+agent: everything-claude-code:security-reviewer
+subtask: true
+---
+
+# Security Scan Command
+
+Run AgentShield against the current project or a target path, then turn the findings into a prioritized remediation plan.
+
+## Usage
+
+`/security-scan [path] [--format text|json|markdown|html] [--min-severity low|medium|high|critical] [--fix]`
+
+- `path` (optional): defaults to the current project. Use a `.claude/` path, a repo root, or a checked-in template directory.
+- `--format`: output format. Use `json` for CI, `markdown` for handoffs, and `html` for standalone review reports.
+- `--min-severity`: filters lower-priority findings.
+- `--fix`: applies only AgentShield fixes explicitly marked as safe and auto-fixable.
+
+## Deterministic Engine
+
+Prefer the packaged scanner:
+
+```bash
+npx ecc-agentshield scan --path "${TARGET_PATH:-.}" --format text
+```
+
+For local AgentShield development, run from the AgentShield checkout:
+
+```bash
+npm run scan -- --path "${TARGET_PATH:-.}" --format text
+```
+
+Do not invent findings. Use AgentShield output as the source of truth and separate scanner facts from follow-up judgment.
+
+## Review Checklist
+
+1. Identify active runtime findings first:
+   - hardcoded secrets
+   - broad permissions
+   - executable hooks
+   - MCP servers with shell, filesystem, remote transport, or unpinned `npx`
+   - agent prompts that handle untrusted content without defenses
+2. Separate lower-confidence inventory:
+   - docs examples
+   - template examples
+   - plugin manifests
+   - project-local optional settings
+3. For each critical or high finding, return:
+   - file path
+   - severity
+   - runtime confidence
+   - why it matters
+   - exact remediation
+   - whether it is safe to auto-fix
+4. If `--fix` is requested, state the planned edits before applying fixes.
+5. Re-run the scan after fixes and report the before/after score.
+
+## Output Contract
+
+Return:
+
+1. Security grade and score.
+2. Counts by severity and runtime confidence.
+3. Critical/high findings with exact paths.
+4. Lower-confidence findings grouped separately.
+5. A remediation order.
+6. Commands run and whether the scan was local, CI, or npx-backed.
+
+## CI Pattern
+
+Use AgentShield in GitHub Actions for enforced gates:
+
+```yaml
+- uses: affaan-m/agentshield@v1
+  with:
+    path: "."
+    min-severity: "medium"
+    fail-on-findings: true
+```
+
+## Links
+
+- Skill: `skills/security-scan/SKILL.md`
+- Agent: `agents/security-reviewer.md`
+- Scanner: <https://github.com/affaan-m/agentshield>
+
+## Arguments
+
+$ARGUMENTS:
+- optional target path
+- optional AgentShield flags

.opencode/commands/security.md

@@ -0,0 +1,89 @@
+---
+description: Run comprehensive security review
+agent: everything-claude-code:security-reviewer
+subtask: true
+---
+
+# Security Review Command
+
+Conduct a comprehensive security review: $ARGUMENTS
+
+## Your Task
+
+Analyze the specified code for security vulnerabilities following OWASP guidelines and security best practices.
+
+## Security Checklist
+
+### OWASP Top 10
+
+1. **Injection** (SQL, NoSQL, OS command, LDAP)
+   - Check for parameterized queries
+   - Verify input sanitization
+   - Review dynamic query construction
+
+2. **Broken Authentication**
+   - Password storage (bcrypt, argon2)
+   - Session management
+   - Multi-factor authentication
+   - Password reset flows
+
+3. **Sensitive Data Exposure**
+   - Encryption at rest and in transit
+   - Proper key management
+   - PII handling
+
+4. **XML External Entities (XXE)**
+   - Disable DTD processing
+   - Input validation for XML
+
+5. **Broken Access Control**
+   - Authorization checks on every endpoint
+   - Role-based access control
+   - Resource ownership validation
+
+6. **Security Misconfiguration**
+   - Default credentials removed
+   - Error handling doesn't leak info
+   - Security headers configured
+
+7. **Cross-Site Scripting (XSS)**
+   - Output encoding
+   - Content Security Policy
+   - Input sanitization
+
+8. **Insecure Deserialization**
+   - Validate serialized data
+   - Implement integrity checks
+
+9. **Using Components with Known Vulnerabilities**
+   - Run `npm audit`
+   - Check for outdated dependencies
+
+10. **Insufficient Logging & Monitoring**
+    - Security events logged
+    - No sensitive data in logs
+    - Alerting configured
+
+### Additional Checks
+
+- [ ] Secrets in code (API keys, passwords)
+- [ ] Environment variable handling
+- [ ] CORS configuration
+- [ ] Rate limiting
+- [ ] CSRF protection
+- [ ] Secure cookie flags
+
+## Report Format
+
+### Critical Issues
+[Issues that must be fixed immediately]
+
+### High Priority
+[Issues that should be fixed before release]
+
+### Recommendations
+[Security improvements to consider]
+
+---
+
+**IMPORTANT**: Security issues are blockers. Do not proceed until critical issues are resolved.

.opencode/commands/setup-pm.md

@@ -0,0 +1,67 @@
+---
+description: Configure package manager preference
+agent: everything-claude-code:build
+---
+
+# Setup Package Manager Command
+
+Configure your preferred package manager: $ARGUMENTS
+
+## Your Task
+
+Set up package manager preference for the project or globally.
+
+## Detection Order
+
+1. **Environment variable**: `CLAUDE_PACKAGE_MANAGER`
+2. **Project config**: `.claude/package-manager.json`
+3. **package.json**: `packageManager` field
+4. **Lock file**: Auto-detect from lock files
+5. **Global config**: `~/.claude/package-manager.json`
+6. **Fallback**: First available
+
+## Configuration Options
+
+### Option 1: Environment Variable
+```bash
+export CLAUDE_PACKAGE_MANAGER=pnpm
+```
+
+### Option 2: Project Config
+```bash
+# Create .claude/package-manager.json
+echo '{"packageManager": "pnpm"}' > .claude/package-manager.json
+```
+
+### Option 3: package.json
+```json
+{
+  "packageManager": "pnpm@8.0.0"
+}
+```
+
+### Option 4: Global Config
+```bash
+# Create ~/.claude/package-manager.json
+echo '{"packageManager": "yarn"}' > ~/.claude/package-manager.json
+```
+
+## Supported Package Managers
+
+| Manager | Lock File | Commands |
+|---------|-----------|----------|
+| npm | package-lock.json | `npm install`, `npm run` |
+| pnpm | pnpm-lock.yaml | `pnpm install`, `pnpm run` |
+| yarn | yarn.lock | `yarn install`, `yarn run` |
+| bun | bun.lockb | `bun install`, `bun run` |
+
+## Verification
+
+Check current setting:
+```bash
+node scripts/setup-package-manager.js --detect
+```
+
+---
+
+**TIP**: For consistency across team, add `packageManager` field to package.json.

.opencode/commands/skill-create.md

@@ -0,0 +1,117 @@
+---
+description: Generate skills from git history analysis
+agent: everything-claude-code:build
+---
+
+# Skill Create Command
+
+Analyze git history to generate Claude Code skills: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze commits** - Pattern recognition from history
+2. **Extract patterns** - Common practices and conventions
+3. **Generate SKILL.md** - Structured skill documentation
+4. **Create instincts** - For continuous-learning-v2
+
+## Analysis Process
+
+### Step 1: Gather Commit Data
+```bash
+# Recent commits
+git log --oneline -100
+
+# Commits by file type
+git log --name-only --pretty=format: | sort | uniq -c | sort -rn
+
+# Most changed files
+git log --pretty=format: --name-only | sort | uniq -c | sort -rn | head -20
+```
+
+### Step 2: Identify Patterns
+
+**Commit Message Patterns**:
+- Common prefixes (feat, fix, refactor)
+- Naming conventions
+- Co-author patterns
+
+**Code Patterns**:
+- File structure conventions
+- Import organization
+- Error handling approaches
+
+**Review Patterns**:
+- Common review feedback
+- Recurring fix types
+- Quality gates
+
+### Step 3: Generate SKILL.md
+
+```markdown
+# [Skill Name]
+
+## Overview
+[What this skill teaches]
+
+## Patterns
+
+### Pattern 1: [Name]
+- When to use
+- Implementation
+- Example
+
+### Pattern 2: [Name]
+- When to use
+- Implementation
+- Example
+
+## Best Practices
+
+1. [Practice 1]
+2. [Practice 2]
+3. [Practice 3]
+
+## Common Mistakes
+
+1. [Mistake 1] - How to avoid
+2. [Mistake 2] - How to avoid
+
+## Examples
+
+### Good Example
+```[language]
+// Code example
+```
+
+### Anti-pattern
+```[language]
+// What not to do
+```
+```
+
+### Step 4: Generate Instincts
+
+For continuous-learning-v2:
+
+```json
+{
+  "instincts": [
+    {
+      "trigger": "[situation]",
+      "action": "[response]",
+      "confidence": 0.8,
+      "source": "git-history-analysis"
+    }
+  ]
+}
+```
+
+## Output
+
+Creates:
+- `skills/[name]/SKILL.md` - Skill documentation
+- `skills/[name]/instincts.json` - Instinct collection
+
+---
+
+**TIP**: Run `/skill-create --instincts` to also generate instincts for continuous learning.

.opencode/commands/tdd.md

@@ -0,0 +1,66 @@
+---
+description: Enforce TDD workflow with 80%+ coverage
+agent: everything-claude-code:tdd-guide
+subtask: true
+---
+
+# TDD Command
+
+Implement the following using strict test-driven development: $ARGUMENTS
+
+## TDD Cycle (MANDATORY)
+
+```
+RED → GREEN → REFACTOR → REPEAT
+```
+
+1. **RED**: Write a failing test FIRST
+2. **GREEN**: Write minimal code to pass the test
+3. **REFACTOR**: Improve code while keeping tests green
+4. **REPEAT**: Continue until feature complete
+
+## Your Task
+
+### Step 1: Define Interfaces (SCAFFOLD)
+- Define TypeScript interfaces for inputs/outputs
+- Create function signature with `throw new Error('Not implemented')`
+
+### Step 2: Write Failing Tests (RED)
+- Write tests that exercise the interface
+- Include happy path, edge cases, and error conditions
+- Run tests - verify they FAIL
+
+### Step 3: Implement Minimal Code (GREEN)
+- Write just enough code to make tests pass
+- No premature optimization
+- Run tests - verify they PASS
+
+### Step 4: Refactor (IMPROVE)
+- Extract constants, improve naming
+- Remove duplication
+- Run tests - verify they still PASS
+
+### Step 5: Check Coverage
+- Target: 80% minimum
+- 100% for critical business logic
+- Add more tests if needed
+
+## Coverage Requirements
+
+| Code Type | Minimum |
+|-----------|---------|
+| Standard code | 80% |
+| Financial calculations | 100% |
+| Authentication logic | 100% |
+| Security-critical code | 100% |
+
+## Test Types to Include
+
+- **Unit Tests**: Individual functions
+- **Edge Cases**: Empty, null, max values, boundaries
+- **Error Conditions**: Invalid inputs, network failures
+- **Integration Tests**: API endpoints, database operations
+
+---
+
+**MANDATORY**: Tests must be written BEFORE implementation. Never skip the RED phase.

.opencode/commands/test-coverage.md

@@ -0,0 +1,80 @@
+---
+description: Analyze and improve test coverage
+agent: everything-claude-code:tdd-guide
+subtask: true
+---
+
+# Test Coverage Command
+
+Analyze test coverage and identify gaps: $ARGUMENTS
+
+## Your Task
+
+1. **Run coverage report**: `npm test -- --coverage`
+2. **Analyze results** - Identify low coverage areas
+3. **Prioritize gaps** - Critical code first
+4. **Generate missing tests** - For uncovered code
+
+## Coverage Targets
+
+| Code Type | Target |
+|-----------|--------|
+| Standard code | 80% |
+| Financial logic | 100% |
+| Auth/security | 100% |
+| Utilities | 90% |
+| UI components | 70% |
+
+## Coverage Report Analysis
+
+### Summary
+```
+File           | % Stmts | % Branch | % Funcs | % Lines
+---------------|---------|----------|---------|--------
+All files      |   XX    |    XX    |   XX    |   XX
+```
+
+### Low Coverage Files
+[Files below target, prioritized by criticality]
+
+### Uncovered Lines
+[Specific lines that need tests]
+
+## Test Generation
+
+For each uncovered area:
+
+### [Function/Component Name]
+
+**Location**: `src/path/file.ts:123`
+
+**Coverage Gap**: [description]
+
+**Suggested Tests**:
+```typescript
+describe('functionName', () => {
+  it('should [expected behavior]', () => {
+    // Test code
+  })
+
+  it('should handle [edge case]', () => {
+    // Edge case test
+  })
+})
+```
+
+## Coverage Improvement Plan
+
+1. **Critical** (add immediately)
+   - [ ] file1.ts - Auth logic
+   - [ ] file2.ts - Payment handling
+
+2. **High** (add this sprint)
+   - [ ] file3.ts - Core business logic
+
+3. **Medium** (add when touching file)
+   - [ ] file4.ts - Utilities
+
+---
+
+**IMPORTANT**: Coverage is a metric, not a goal. Focus on meaningful tests, not just hitting numbers.

.opencode/commands/update-codemaps.md

@@ -0,0 +1,81 @@
+---
+description: Update codemaps for codebase navigation
+agent: everything-claude-code:doc-updater
+subtask: true
+---
+
+# Update Codemaps Command
+
+Update codemaps to reflect current codebase structure: $ARGUMENTS
+
+## Your Task
+
+Generate or update codemaps in `docs/CODEMAPS/` directory:
+
+1. **Analyze codebase structure**
+2. **Generate component maps**
+3. **Document relationships**
+4. **Update navigation guides**
+
+## Codemap Types
+
+### Architecture Map
+```
+docs/CODEMAPS/ARCHITECTURE.md
+```
+- High-level system overview
+- Component relationships
+- Data flow diagrams
+
+### Module Map
+```
+docs/CODEMAPS/MODULES.md
+```
+- Module descriptions
+- Public APIs
+- Dependencies
+
+### File Map
+```
+docs/CODEMAPS/FILES.md
+```
+- Directory structure
+- File purposes
+- Key files
+
+## Codemap Format
+
+### [Module Name]
+
+**Purpose**: [Brief description]
+
+**Location**: `src/[path]/`
+
+**Key Files**:
+- `file1.ts` - [purpose]
+- `file2.ts` - [purpose]
+
+**Dependencies**:
+- [Module A]
+- [Module B]
+
+**Exports**:
+- `functionName()` - [description]
+- `ClassName` - [description]
+
+**Usage Example**:
+```typescript
+import { functionName } from '@/module'
+```
+
+## Generation Process
+
+1. Scan directory structure
+2. Parse imports/exports
+3. Build dependency graph
+4. Generate markdown maps
+5. Validate links
+
+---
+
+**TIP**: Keep codemaps updated when adding new modules or significant refactoring.

.opencode/commands/update-docs.md

@@ -0,0 +1,67 @@
+---
+description: Update documentation for recent changes
+agent: everything-claude-code:doc-updater
+subtask: true
+---
+
+# Update Docs Command
+
+Update documentation to reflect recent changes: $ARGUMENTS
+
+## Your Task
+
+1. **Identify changed code** - `git diff --name-only`
+2. **Find related docs** - README, API docs, guides
+3. **Update documentation** - Keep in sync with code
+4. **Verify accuracy** - Docs match implementation
+
+## Documentation Types
+
+### README.md
+- Installation instructions
+- Quick start guide
+- Feature overview
+- Configuration options
+
+### API Documentation
+- Endpoint descriptions
+- Request/response formats
+- Authentication details
+- Error codes
+
+### Code Comments
+- JSDoc for public APIs
+- Complex logic explanations
+- TODO/FIXME cleanup
+
+### Guides
+- How-to tutorials
+- Architecture decisions (ADRs)
+- Troubleshooting guides
+
+## Update Checklist
+
+- [ ] README reflects current features
+- [ ] API docs match endpoints
+- [ ] JSDoc updated for changed functions
+- [ ] Examples are working
+- [ ] Links are valid
+- [ ] Version numbers updated
+
+## Documentation Quality
+
+### Good Documentation
+- Accurate and up-to-date
+- Clear and concise
+- Has working examples
+- Covers edge cases
+
+### Avoid
+- Outdated information
+- Missing parameters
+- Broken examples
+- Ambiguous language
+
+---
+
+**IMPORTANT**: Documentation should be updated alongside code changes, not as an afterthought.

.opencode/commands/verify.md

@@ -0,0 +1,67 @@
+---
+description: Run verification loop to validate implementation
+agent: everything-claude-code:build
+---
+
+# Verify Command
+
+Run verification loop to validate the implementation: $ARGUMENTS
+
+## Your Task
+
+Execute comprehensive verification:
+
+1. **Type Check**: `npx tsc --noEmit`
+2. **Lint**: `npm run lint`
+3. **Unit Tests**: `npm test`
+4. **Integration Tests**: `npm run test:integration` (if available)
+5. **Build**: `npm run build`
+6. **Coverage Check**: Verify 80%+ coverage
+
+## Verification Checklist
+
+### Code Quality
+- [ ] No TypeScript errors
+- [ ] No lint warnings
+- [ ] No console.log statements
+- [ ] Functions < 50 lines
+- [ ] Files < 800 lines
+
+### Tests
+- [ ] All tests passing
+- [ ] Coverage >= 80%
+- [ ] Edge cases covered
+- [ ] Error conditions tested
+
+### Security
+- [ ] No hardcoded secrets
+- [ ] Input validation present
+- [ ] No SQL injection risks
+- [ ] No XSS vulnerabilities
+
+### Build
+- [ ] Build succeeds
+- [ ] No warnings
+- [ ] Bundle size acceptable
+
+## Verification Report
+
+### Summary
+- Status: PASS: PASS / FAIL: FAIL
+- Score: X/Y checks passed
+
+### Details
+| Check | Status | Notes |
+|-------|--------|-------|
+| TypeScript | PASS:/FAIL: | [details] |
+| Lint | PASS:/FAIL: | [details] |
+| Tests | PASS:/FAIL: | [details] |
+| Coverage | PASS:/FAIL: | XX% (target: 80%) |
+| Build | PASS:/FAIL: | [details] |
+
+### Action Items
+[If FAIL, list what needs to be fixed]
+
+---
+
+**NOTE**: Verification loop should be run before every commit and PR.