This file provides guidance to AI coding assistants when working with this repository.
This repository contains reusable AI coding workflows that can be installed globally or per-project in any environment (Cursor, Claude Code, Gemini). Each workflow is a self-contained directory with structured markdown files that AI agents can read and execute.
Current workflows:
- ai-ready — Codebase scanning and AGENTS.md generation (update)
- bugfix — Systematic bug resolution (assess, reproduce, diagnose, fix, test, review, document, pr)
- code-review — AI-driven code review with human-in-the-loop decisions (start, continue, clean)
- cve-fix — Automated CVE remediation from Jira tickets (start, scan, patch, validate, pr, backport, close)
- design — Design-and-decompose workflow (ingest, research, draft, decompose, revise, publish, respond, sync)
- docs-writer — Documentation creation workflow (gather, plan, draft, validate, apply, mr)
- e2e — Story-to-tests workflow for [QE] stories (ingest, plan, revise, code, validate, publish, respond)
- implement — Story-to-code workflow (ingest, plan, revise, code, validate, publish, respond)
- kcs — KCS Solution article workflow (gather, draft, validate, handoff)
- prd — Requirements-to-PRD workflow (ingest, clarify, draft, revise, publish, respond)
- skill-reviewer — Meta-workflow that audits AI skill directories
- triage — Bulk Jira bug triage with AI-driven categorization and HTML reports
Every workflow follows this canonical structure:
workflow-name/
SKILL.md # Entry point with YAML frontmatter (name, description)
guidelines.md # Behavioral rules: principles, hard limits, safety, quality
README.md # Human-readable documentation (prerequisites, artifacts, usage)
skills/
controller.md # Optional phase dispatcher
phase-name.md # Implementation for each phase
commands/
phase-name.md # Thin wrappers that invoke controller or SKILL.md
scripts/ # Optional — deterministic operations invoked by skills
prompts/ # Optional — prompt templates for sub-agent delegation
Key architectural principles:
- Auto-discovery: Any directory with
SKILL.mdis automatically discovered by the installer - Progressive disclosure: SKILL.md is thin (under 30 lines), details live in guidelines.md and skills/
- Relative paths: All file references must be relative to the file's location (for symlink compatibility)
- Phase-based execution: Most workflows operate through discrete phases with explicit transitions
- Shared resources: Cross-cutting concerns live in
_shared/and are referenced by relative path
_shared/
review-protocol.md # Shared code review criteria, finding format, severity definitions
recipes/
self-review-gate.md # Pre-PR self-review quality gate (used by bugfix, implement, e2e, cve-fix)
Recipes are self-contained, parameterized procedures that workflows reference via relative path (e.g., ../../_shared/recipes/self-review-gate.md from skills/).
Critical for symlink resolution:
commands/*.mdreference../skills/controller.md(if workflow has a controller) or../SKILL.md(for workflows without a controller) or../skills/phase-name.md(direct phase reference)skills/controller.md(when present) references sibling skills asphase-name.md(notskills/phase-name.md)SKILL.mdreferencesguidelines.mdand optionallyskills/controller.md(same directory)
- No IDE-specific syntax: All workflow content is plain markdown
- Relative paths only: For symlink compatibility across install scopes
- Progressive disclosure: SKILL.md stays under 30 lines
- No auto-advance in attended mode: Workflows wait for user input between phases unless an explicit unattended mode is documented for that workflow
- Artifact persistence: All significant outputs saved to
.artifacts/{workflow-name}/{context}/ - Read-only reviews: skill-reviewer never modifies target skill files during review
Install with ./install.sh <target> (targets: cursor, claude, gemini, all). See README.md for scopes, options, and uninstall instructions.
See CONTRIBUTING.md for workflow structure conventions, path rules, testing, and installation internals.
ai-workflows/
├── _shared/ # Cross-cutting shared resources
│ ├── review-protocol.md # Shared code review criteria and finding format
│ └── recipes/
│ └── self-review-gate.md # Pre-PR self-review quality gate
├── ai-ready/ # Workflows (auto-discovered via SKILL.md)
├── bugfix/
├── code-review/
├── cve-fix/
├── design/
├── docs-writer/
├── e2e/
├── implement/
├── kcs/
├── prd/
├── skill-reviewer/
│ ├── prompts/
│ └── scripts/
├── triage/
├── install.sh # Installer with auto-discovery
├── uninstall.sh # Removal script
├── AGENTS.md # AI assistant guidance (this file)
├── CLAUDE.md # Claude Code reference (points to AGENTS.md + install.sh appends here)
├── CONTRIBUTING.md # Workflow development guide
├── README.md # User-facing documentation
└── .gitignore # Excludes .cursor/, .claude/, .artifacts/, etc.
When a workflow invokes commands that could affect shared systems:
- Git operations: Always verify with
git statusbefore destructive operations - PR/MR creation: Confirm branch and base before pushing
- Jira writes: Only cve-fix
/closeand design/syncwrite to Jira; both require explicit approval - Documentation changes: Run Vale validation before applying changes to repository files