Enforce safe handling of API keys, tokens, passwords, and credentials — env files, .gitignore coverage, .env.example upkeep, rotation after exposure. This is the PREVENTIVE workflow; secrets-scan is the detection pass that finds what already leaked. Run when adding an integration, before commits, before a first…
Scan project changes for leaked secrets, credentials, unsafe env handling, and accidental private data. This is the DETECTION pass over what is already in the tree; secrets-discipline is the preventive workflow that stops it happening. Run before every commit, before every release (invoked by release-check), and when…
Manage the sprint lifecycle — open a sprint, maintain the sprint branch and docs, close it, update the changelog, and prepare tags. Powers /sprint-start, /sprint-plan and /sprint-close. Use when the user says "vamos começar a sprint", "fecha a sprint", "o que tá nessa sprint?", "terminei essa etapa", "qual o próximo…
Create a 14–20 sprint roadmap in docs/SPRINTS.md plus individual sprint files, starting with Sprint -1 (consolidating the approved prototype into a design system). Runs at WIZARD stage 4.4, after BP v0.0.2, the approved prototype direction, the Product Brief, and the Technical Plan all exist. Use when the user asks…
Track real-world usage and cost across LLM providers, hosting, DB, and email after a feature ships or a launch happens. Complements cost-watchdog (preventive). Triggers when the user says "tô gastando muito", "quanto custa", "quanto deu de fatura", or after launch.
Smoke-test that the project still builds, the dev server starts, and the main user flow loads after a change. Run after every non-trivial edit, after a rollback (rollback-safe), after a fix from bug-triage-agent, before a commit, before pushing, and as part of release-check. Also when the user says "ainda tá…
Instructions for lglucas/ai-dev-operating-system, covering claude.md — ai dev operating system, golden rules, required generated artifacts for a new project and project genesis wizard.