feat(ce-work,ce-security-audit): add ruflo integration and trajectory capture#774
Draft
rtorino wants to merge 9 commits intoEveryInc:mainfrom
Draft
feat(ce-work,ce-security-audit): add ruflo integration and trajectory capture#774rtorino wants to merge 9 commits intoEveryInc:mainfrom
rtorino wants to merge 9 commits intoEveryInc:mainfrom
Conversation
Enhance CE with Superpowers' behavioral enforcement patterns: - TDD guardrails: rationalization rebuttals, red-flag detection, delete-and-restart rule - Testing anti-patterns: 5 named anti-patterns with iron laws - Verification discipline: per-message freshness, claim-to-evidence mapping, linguistic red flags - Subagent templates: implementer prompt, status vocabulary (DONE/DONE_WITH_CONCERNS/NEEDS_CONTEXT/BLOCKED), escalation decision trees, model-tier routing - Spec-compliance reviewer: per-task distrust-based review agent - Code-quality per-task reviewer: per-task quality check agent - ce-work: wire reference docs and per-task review pipeline into subagent flow - ce-debug: add revert-and-verify-failure step for regression tests All enhancements are additive reference docs and agent files with minimal insertions into ce-work and ce-debug, preserving upstream merge compatibility.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Session state persistence: - Add session-state.md reference doc for SESSION_STATE.md format and behavior - Wire session state read (Phase 1 step 0) and write (task completion) into ce-work Security audit: - Add STRIDE threat modeling sections to ce-security-sentinel.agent.md - Create /ce-security-audit skill as thin wrapper dispatching existing security agents Browser QA: - Add single-spa-guide.md reference for mount detection, auth flow, WebSocket patterns - Add element-ui-selectors.md reference for teleported component interaction patterns - Wire framework-specific guide loading into ce-test-browser Also removes Phase 1 test output files (test-output/).
Session state check was in Phase 1 step 0, which only runs when a plan file is provided. Moving to Phase 0 ensures it runs for bare prompts and empty invocations too — any /ce-work session should offer to resume.
# Conflicts: # plugins/compound-engineering/agents/code-quality-per-task-reviewer.md # plugins/compound-engineering/agents/spec-compliance-reviewer.md # plugins/compound-engineering/skills/ce-work/SKILL.md
… capture Ruflo memory integration (optional): - Add ruflo-memory-integration.md reference for optional agentdb semantic session recall with graceful fallback to SESSION_STATE.md - Wire Phase 0 ruflo enrichment check into ce-work SKILL.md Trajectory capture (CE-native): - Add trajectory-capture.md reference for capturing non-obvious execution paths as human-readable markdown in docs/solutions/ - Wire Phase 3-4 trajectory capture prompt into ce-work SKILL.md Model selection scoring: - Add 6-signal scoring table to subagent-templates.md for confidence-based model tier selection (Haiku/Sonnet/Opus) Security audit CVE scanning (optional): - Add optional ruflo-security-audit CVE scanning step to ce-security-audit SKILL.md, skipped gracefully when ruflo is not installed All ruflo features are optional with graceful fallback — zero hard dependencies.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
docs/solutions//ce-security-audit(skipped when ruflo isn't installed)Changes
skills/ce-work/references/ruflo-memory-integration.mdskills/ce-work/references/trajectory-capture.mdskills/ce-work/references/subagent-templates.mdskills/ce-security-audit/SKILL.mdskills/ce-work/SKILL.mdDesign decisions
docs/solutions/as markdown searchable byce-learnings-researcher, no ruflo neededTest plan
bun test— 1252 tests pass (verified)/ce-workwith SESSION_STATE.md present, ruflo NOT installed — should resume from state, skip ruflo silently/ce-workwith ruflo-agentdb installed — should query agentdb for related past patterns after session state check/ce-security-audit diffwithout ruflo — should run CE agents, skip CVE step/ce-security-audit diffwith ruflo — should run CE agents + ruflo CVE scan, merge findings🤖 Generated with Claude Code