This file provides guidance to AI coding assistants when working with this repository.
This repository contains reusable AI coding workflows that can be installed globally or per-project in any environment (Cursor, Claude Code, Gemini). Each workflow is a self-contained directory with structured markdown files that AI agents can read and execute.
Current workflows:
- ai-ready — Codebase scanning and AGENTS.md generation (update)
- bugfix — Systematic bug resolution (assess, reproduce, diagnose, fix, test, review, document, pr)
- code-review — AI-driven code review with human-in-the-loop decisions (start, continue, clean)
- cve-fix — Automated CVE remediation from Jira tickets (start, scan, patch, validate, pr, backport, close)
- design — Design-and-decompose workflow (ingest, research, draft, decompose, revise, publish, respond, sync)
- docs-writer — Documentation creation workflow (gather, plan, draft, validate, apply, mr)
- e2e — Story-to-tests workflow for [QE] stories (ingest, plan, revise, code, validate, publish, respond)
- implement — Story-to-code workflow (ingest, plan, revise, code, validate, publish, respond)
- kcs — KCS Solution article workflow (gather, draft, validate, handoff)
- prd — Requirements-to-PRD workflow (ingest, clarify, draft, revise, publish, respond)
- sizing — Pre-cycle Feature sizing with T-shirt sizes and team effort breakdowns (ingest, assess, apply)
- skill-reviewer — Meta-workflow that audits AI skill directories
- triage — Bulk Jira bug triage with AI-driven categorization and HTML reports
Every workflow follows this canonical structure:
workflow-name/
SKILL.md # Entry point with YAML frontmatter (name, version, description)
guidelines.md # Behavioral rules: principles, hard limits, safety, quality
README.md # Human-readable documentation (prerequisites, artifacts, usage)
skills/
controller.md # Optional phase dispatcher
phase-name.md # Implementation for each phase
commands/
phase-name.md # Thin wrappers that invoke controller or SKILL.md
scripts/ # Optional — deterministic operations invoked by skills
prompts/ # Optional — prompt templates for sub-agent delegation
Key architectural principles:
- Auto-discovery: Any directory with
SKILL.mdis automatically discovered by the installer - Progressive disclosure: SKILL.md is thin (under 30 lines), details live in guidelines.md and skills/
- Relative paths: All file references must be relative to the file's location (for symlink compatibility)
- Phase-based execution: Most workflows operate through discrete phases with explicit transitions
- Shared resources: Cross-cutting concerns live in
_shared/and are referenced by relative path - Phase overrides: Projects can override individual phases by placing a replacement skill file at
.workflows/{workflow}/skills/{phase}.mdin their repo root. The controller checks for this override before falling back to the built-in default. See CONTRIBUTING.md for details.
_shared/
review-protocol.md # Shared code review criteria, finding format, severity definitions
sizing-rubric.md # Shared sizing definitions (T-shirt sizes, heuristics, team effort guidance)
recipes/
phase-override-resolution.md # Project-level phase override lookup and activation
self-review-gate.md # Pre-PR self-review quality gate (used by bugfix, implement, e2e, cve-fix)
Recipes are self-contained, parameterized procedures that workflows reference via relative path (e.g., ../../_shared/recipes/self-review-gate.md from skills/).
Critical for symlink resolution:
commands/*.mdreference../skills/controller.md(if workflow has a controller) or../SKILL.md(for workflows without a controller) or../skills/phase-name.md(direct phase reference)skills/controller.md(when present) references sibling skills asphase-name.md(notskills/phase-name.md)SKILL.mdreferencesguidelines.mdand optionallyskills/controller.md(same directory)
- No IDE-specific syntax: All workflow content is plain markdown
- Relative paths only: For symlink compatibility across install scopes
- Progressive disclosure: SKILL.md stays under 30 lines
- No auto-advance in attended mode: Workflows wait for user input between phases unless an explicit unattended mode is documented for that workflow
- Artifact persistence: All significant outputs saved to
.artifacts/{workflow-name}/{context}/ - Read-only reviews: skill-reviewer never modifies target skill files during review
When modifying workflow files in this repository, update the version
in the workflow's SKILL.md frontmatter following semver:
- PATCH (0.1.0 → 0.1.1): Typo fixes, wording clarification without behavioral change, formatting
- MINOR (0.1.0 → 0.2.0): Adding/changing/reordering steps, modifying rules in guidelines.md, changing templates, adding phases
- MAJOR (0.1.0 → 1.0.0): Removing phases, renaming phases or commands, restructuring the workflow
Behavioral files (the AI reads and executes these):
SKILL.md body, guidelines.md, skills/*.md, commands/*.md,
templates/*, prompts/*, scripts/*, _shared/**/*.md, and
root-level .md files in workflow directories that are read during
execution (e.g., design/decomposition-review.md).
Non-behavioral files (no bump needed): README.md, GUIDE.md
When you modify a file in _shared/, also PATCH-bump every workflow
that references it. Find affected workflows by searching for the
basename (e.g., self-review-gate for _shared/recipes/self-review-gate.md):
grep -rl "<basename-without-extension>" */skills/*.md \
*/commands/*.md */guidelines.md | sed 's|/.*||' | sort -uBump each discovered workflow's SKILL.md version (PATCH increment).
Include the version bump in the same commit as the behavioral change. Do not make a separate commit for the version bump.
Install with ./install.sh <target> (targets: cursor, claude, gemini, all). See README.md for scopes, options, and uninstall instructions.
See CONTRIBUTING.md for workflow structure conventions, path rules, testing, and installation internals.
ai-workflows/
├── _shared/ # Cross-cutting shared resources
│ ├── review-protocol.md # Shared code review criteria and finding format
│ ├── sizing-rubric.md # Shared sizing definitions and heuristics
│ └── recipes/
│ ├── phase-override-resolution.md # Project-level phase override lookup
│ └── self-review-gate.md # Pre-PR self-review quality gate
├── ai-ready/ # Workflows (auto-discovered via SKILL.md)
├── bugfix/
├── code-review/
├── cve-fix/
├── design/
├── docs-writer/
├── e2e/
├── implement/
├── kcs/
├── prd/
├── sizing/
├── skill-reviewer/
│ ├── prompts/
│ └── scripts/
├── triage/
├── install.sh # Installer with auto-discovery
├── uninstall.sh # Removal script
├── AGENTS.md # AI assistant guidance (this file)
├── CLAUDE.md # Claude Code reference (points to AGENTS.md + install.sh appends here)
├── CONTRIBUTING.md # Workflow development guide
├── README.md # User-facing documentation
└── .gitignore # Excludes .cursor/, .claude/, .artifacts/, etc.
When a workflow invokes commands that could affect shared systems:
- Git operations: Always verify with
git statusbefore destructive operations - PR/MR creation: Confirm branch and base before pushing
- Jira writes: Only cve-fix
/close, design/sync, and sizing/applywrite to Jira; all require explicit approval - Documentation changes: Run Vale validation before applying changes to repository files