Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/missingpackage/nightshift/goal-setupnpx skills add MissingPackage/nightshift --skill goal-setupgit clone --depth 1 https://github.com/MissingPackage/nightshiftWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00050 | $0.01365 |
| Opus 5 | $0.00025 | $0.00682 |
| Sonnet 5 | $0.00010 | $0.00273 |
| Haiku 4.5 | $0.00005 | $0.00136 |
Grade A, and why
goal-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Goal Setup (iteration 0)
Overview
Turns a goal contract into a loop-runnable spine. Runs once per goal (or after a re-scope
ruling). Protocol context: ~/.claude/ORCHESTRATION.md §2 (installed alongside the skills;
in this repo it sits at the root).
Steps
-
Scaffold
<project>/.harness/goals/<slug>/withGOAL.md(the contract — if the goal text isn't in contract shape, run it through the goal-brief structure first and mark inferences[ASSUMED]), plus emptyjournal.md,docket.md,digests.md.GLOSSARY.mdat the project root: optional to start, required once the project coins its own terms (a name whose meaning a competent outsider could not guess). It serves the AGENTS and the next session — it does NOT license jargon toward the user, whose surfaces stay plain-language regardless. Shape, deliberately minimal:# GLOSSARY — <project> <term> — <half a line: what it is, in plain words>. <where it lives, if code> <term> — ... ⚠ collides with <other term>: <the distinction in one clause>A term either pays rent here or gets renamed/dropped. Collisions get the ⚠ line: two things called the same name is the failure this file exists to prevent. Maintained at two points, never on a schedule of its own: a term coined mid-iteration is added in the same iteration (loop-iteration step 6), and weekly-maintenance flags entries whose referent no longer exists.
-
Decompose into
PHASES.md. Every phase row must be loop-runnable:- mechanical done-when (a verifier can grade it tonight);
- feasibility verified at write time: a done-when enters the table only after checking it is executable as written — parameters exist, it fits the hardware, no cell is degenerate by construction. The precedent: a merge gate demanded 9 measurements of which 6 were no-ops and 1 physically impossible, and the agent discovered it by executing them;
- objective link: each row names which GOAL.md objective metric it moves (roughly how much), or declares itself a quality gate. Count the gates — a plan that is mostly gates photographs the state instead of improving it;
- no free debt branch: a done-when of the form "either X, or declare the debt" prices its branches asymmetrically — declaring closes the row tonight, fixing opens work of unknown size — so an executor optimizing for "row closed" picks debt every time. Such a row enters the table only if the debt branch requires two facts AT declaration time: the estimated cost of the fix, and the answer to "does a working form already exist in this repo?" — an existing form makes the fix a port and the debt inexcusable. Precedent (2026-08-14): a hardware-limit debt was declared with full rigor — arithmetic, re-verification, guarding test — while the fitting form already lived in a sibling path of the same repo;
- vehicle declared: a row that is a multi-task build states
sdd-conductorin the row itself — that is what loop-iteration reads at execution, and the plan-check approval then covers the invocation. Rows without it default to direct implementation; the vendored writing-plans chain is never a phase vehicle; - authority ⊆ GOAL.md's grant — a phase needing more is created with status
blockedand a docket entry (docket-born); - sized 1-4 iterations (bigger → split); the estimate is not decoration — loop-iteration stops the row at 3x overrun;
- sliced vertically where the work allows: a build row cuts through the layers and is demonstrable on its own, never a layer-phase ("all the schemas, then all the APIs"); wide refactors go expand–contract (new next to old, migrate in lots, delete), not forced into fake slices;
parallel-grouponly with disjointowns:path sets; otherwise sequential.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 91 lines · 50 tokens per session scan A 6a94118911c4
goal-setup is a skill published in the GitHub repository MissingPackage/nightshift (2 stars, last pushed 15d ago), licensed MIT. It adds 50 tokens to every session and 1,365 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
baton-setup
One-time setup and health check for fable-baton. Use when the user asks to set up, configure, verify, or troubleshoot fable-baton - sets the default model to "best" (Fable 5 with Opus fallback) in /.claude/settings.json and verifies the plugin is fully installed.
licensing-tiers-data-governance
Implement subscription tiers with field-level access control, feature gating, rate limiting, and compliance tracking. Design data governance systems that enforce different access levels, retention policies, and regulatory requirements based on user subscription tier (Free, Pro, Enterprise).
data-infrastructure-at-scale
Build data infrastructure that scales from prototype to production. Use when architecting data pipelines, choosing data stores, planning for high throughput, or migrating to distributed systems. Covers caching, replication, sharding, message queues, and data lake architecture.
data-provenance
Track data lineage and provenance from source to consumption. Use when auditing data flows, debugging data quality issues, ensuring compliance (GDPR, SOX), or understanding data dependencies. Covers lineage tracking, impact analysis, data catalogs, and metadata management.
multi-source-data-conflation
Merge and reconcile data from multiple sources into a unified view. Use when integrating APIs, consolidating databases, building data warehouses, or creating master data. Covers entity resolution, conflict resolution, data quality, and real-time vs batch conflation.
software-architecture
Design scalable software systems with proven architectural patterns (MVC, microservices, event-driven), SOLID principles, system design trade-offs, and architectural decision records (ADRs).