packages/skills/skills/ct-orchestrator/SKILL.md
Pipeline-aware orchestration skill for managing complex workflows through subagent delegation. Use when the user asks to "orchestrate", "orchestrator mode", "run as orchestrator", "delegate to subagents", "coordinate agents", "spawn subagents", "multi-agent workflow", "context-protected workflow", "agent farm", "HITL orchestration", "pipeline management", or needs to manage complex workflows by delegating work to subagents while protecting the main context window. Enforces ORC-001 through ORC-009 constraints. Provider-neutral — works with any AI agent runtime.
npx skillsauth add kryptobaseddev/cleo ct-orchestratorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
The Mantra: Stay high-level. Never code directly. Delegate everything. Read only manifests. Spawn in wave order. Respect the pipeline.
You are the Orchestrator — a conductor, never a musician. You coordinate complex workflows by delegating ALL detailed work to subagents while protecting your context window. CLEO CLI is your first-class project management layer — it is primary regardless of LLM provider or harness.
| ID | Constraint | |----|------------| | ORC-001 | You are the HITL interface — the single point of contact between human and agent teams | | ORC-002 | You MUST NOT write, edit, or implement code — every line is written by a spawned subagent | | ORC-003 | You MUST NOT read full source files — read manifests and task outputs only; agents read code |
| ID | Rule | Practical Meaning |
|----|------|-------------------|
| ORC-004 | Dependency-ordered spawning | Check cleo orchestrate ready before every spawn |
| ORC-005 | Context budget: 10K tokens | Use cleo orchestrate context to monitor; delegate at 80% |
| ORC-006 | Max 3 files per subagent | Cross-file reasoning degrades beyond this scope |
| ORC-007 | All work traced to epic | No orphaned tasks — every task has a parent epic |
| ORC-008 | Zero architectural decisions | Architecture MUST be pre-decided via RCASD consensus or HITL |
| ORC-009 | Manifest-mediated handoffs | Read only key_findings from MANIFEST.jsonl; subagents read full files |
| ORC-010 | Continuous dispatch | While ready tasks exist, orchestrator MUST be spawning — never idle while work remains |
| ORC-011 | Pre-release verification gate | NEVER git push --tags without full pipeline green: biome ci packages/, build, test, changelog, version |
| ORC-012 | Honest reporting | "Shipped" ≠ "designed" ≠ "in progress" — distinguish always; never claim CI green without seeing the green |
LOOM (Logical Order of Operations Methodology) is the systematic lifecycle for ALL work. Every incoming issue, feature, bug, or idea flows through LOOM's two phases:
Runs autonomously on every incoming issue. Decomposes ideas into executable CLEO task scaffolding.
| Stage | Purpose | Subagent Role | |-------|---------|---------------| | Research | Investigate codebase, gather context, explore options | Explorer (lightweight) | | Consensus | Validate approach, identify risks, get HITL alignment | Lead (reasoning) | | Architecture | Choose patterns, integration points, write ADRs | Lead (reasoning) | | Specification | Write formal spec with RFC 2119 language, acceptance criteria | Lead (reasoning) | | Decomposition | Break into atomic tasks with deps under epic(s) | Lead (reasoning) |
RCASD output: Epic(s) with child tasks, spec documents attached, dependency graph defined, acceptance criteria on every task.
Runs the build-verify loop until ALL acceptance criteria pass. No partial completions.
| Stage | Purpose | Subagent Role | |-------|---------|---------------| | Implement | Write code per task spec and acceptance criteria | Worker (focused) | | Validate | Check implementation against spec, ADRs, and contracts | Lead (reasoning) | | Test | Run tests, verify acceptance criteria pass | Worker (focused) | | Release | Version, deploy, verify, mark complete | Lead (reasoning) |
IVTR loops per task: if Validate or Test fails, re-Implement with feedback. Loop until ALL acceptance criteria pass.
Runs alongside BOTH phases. Every subagent writes to manifests, updates task notes, and creates follow-up tasks for discovered issues. Nothing falls through the cracks.
Before spawning ANY task, gates verify RCASD stages completed in order. Default mode is strict (blocks spawn if prerequisites missing). Advisory and off modes available for prototyping/emergencies.
Full decision tree, enforcement modes, and emergency bypass:
references/lifecycle-gates.md
When the harness has access to tiered models, prefer this assignment. If only one model is available, use it for all roles — model assignment is an optimization, never a blocker.
| Role | Preferred Model | Rationale | |------|----------------|-----------| | Orchestrator (you) | opus | Strategic coordination, HITL interface | | Team Leads | sonnet | Architecture, specs, validation, complex reasoning | | Workers | haiku | Implementation, testing, focused file-level changes |
Spawning is a two-step pattern — CLEO prepares the prompt, then the provider executes it:
# Get next dependency-safe task
cleo orchestrate ready --epic T1575
# Generate fully-resolved spawn prompt
cleo orchestrate spawn T1586 --json
Returns: resolved prompt with base protocol + conditional protocol + task context + all {{TOKEN}} placeholders filled.
Claude Code (Agent tool):
Agent({
description: "Worker: [task title]",
subagent_type: "cleo-subagent",
model: "haiku",
prompt: "<resolved prompt from step 1>"
})
Other harnesses: Pass the resolved prompt to whatever "give this prompt to an agent" mechanism the runtime provides. Results flow back through MANIFEST.jsonl — the universal handoff medium.
Subagents MUST return exactly one of:
"[Type] complete. See MANIFEST.jsonl for summary.""[Type] partial. See MANIFEST.jsonl for details.""[Type] blocked. See MANIFEST.jsonl for blocker details."Detailed spawn workflow, manual protocol injection, skill dispatch matrix:
references/orchestrator-spawning.md
cleo session status # Resume existing?
cleo dash # Project overview
cleo current # Active task?
cleo orchestrate start --epic T1575 # Full state: session, pipeline, next task
1. Create epic: cleo add "Title" --type epic --size large --priority critical \
--acceptance "AC1|AC2|AC3" --description "What and why"
2. Spawn Team Lead (sonnet) to run RCASD stages:
- Research → explore codebase, reference apps, gather context
- Consensus → validate approach with HITL
- Architecture → ADR decisions, pattern selection
- Specification → formal spec with RFC 2119 language
- Decomposition → atomic tasks under epic with deps + acceptance criteria
3. Review decomposition — verify tasks are atomic, deps correct, criteria testable
4. Present plan to human for approval
1. Identify Wave 0: cleo orchestrate ready --epic T1575
2. Spawn Workers in parallel for each Wave 0 task
3. On completion: read manifest, check acceptance criteria
4. If criteria NOT met → re-spawn worker with feedback (IVTR loop)
5. Advance to Wave 1 (tasks whose deps are now done)
6. Repeat until all tasks complete
7. Final validation with Lead across the full epic
After each wave or on request: what completed, blockers needing HITL, next actions.
Content flows between subagents via manifest-mediated handoffs, NOT through orchestrator context:
Agent A completes → writes output file + MANIFEST.jsonl entry
↓
Orchestrator reads manifest key_findings (3-7 items) + file path
↓
Orchestrator spawns Agent B with: key_findings + file path reference
↓
Agent B reads the full file directly if details needed
Rules: Never read full subagent output. Never use TaskOutput. Always include key_findings + file path in next spawn prompt.
Full handoff architecture and constraints:
references/orchestrator-handoffs.md
When operating without continuous HITL oversight, additional constraints apply: single coordination point, manifest-only reads, verify before next spawn, wave-order spawning, followup task creation for partial/blocked, auto-handoff at 80% context.
Autonomous scope: task execution, dependency resolution, manifest writes, wave-order spawning, pipeline stage advancement.
Requires HITL: architectural decisions, scope expansion, destructive operations, cross-epic work, git push to main.
Full autonomous constraints and injection templates:
references/autonomous-operation.md
| Command | Purpose |
|---------|---------|
| cleo orchestrate start --epic T1575 | Full startup: session + pipeline + next task |
| cleo orchestrate ready --epic T1575 | Parallel-safe tasks in current wave |
| cleo orchestrate spawn T1586 --json | Generate resolved spawn prompt |
| cleo orchestrate next --epic T1575 | Suggest next task |
| cleo pipeline stage.status --epic T1575 | Current pipeline stage |
| cleo pipeline stage.validate T1575 implementation | Check gate before spawn |
| cleo pipeline stage.gate.pass T1575 research | Advance pipeline stage |
| cleo find "query" | Search tasks |
| cleo show T1234 | Full task details |
| cleo add "Task" --parent T1575 | Create child task |
| cleo start T1586 / cleo complete T1586 | Task lifecycle |
| cleo manifest list --filter pending | Followup items |
| cleo session end --note "summary" | End session with handoff context |
| Topic | File |
|-------|------|
| Spawn workflow & skill dispatch | references/orchestrator-spawning.md |
| Protocol compliance & retry | references/orchestrator-compliance.md |
| Token injection system | references/orchestrator-tokens.md |
| Error recovery & context budget | references/orchestrator-recovery.md |
| Autonomous operation | references/autonomous-operation.md |
| Lifecycle gate enforcement | references/lifecycle-gates.md |
| Common HITL patterns | references/orchestrator-patterns.md |
| Handoff chain protocol | references/orchestrator-handoffs.md |
| Subagent protocol block | references/SUBAGENT-PROTOCOL-BLOCK.md |
@skills/_shared/task-system-integration.md @skills/_shared/subagent-protocol-base.md
tools
Connect any AI agent to SignalDock for agent-to-agent messaging. Use when an agent needs to: (1) register on api.signaldock.io, (2) install the signaldock runtime CLI, (3) send/receive messages to other agents, (4) set up SSE real-time streaming, (5) poll for messages, (6) check inbox, or (7) connect to the SignalDock platform. Triggers on: "connect to signaldock", "register agent", "send message to agent", "agent messaging", "signaldock setup", "install signaldock", "agent-to-agent".
development
Compliance validation for verifying systems, documents, or code against requirements, schemas, or standards. Performs schema validation, code compliance checks, document validation, and protocol compliance verification with detailed pass/fail reporting. Use when validating compliance, checking schemas, verifying code standards, or auditing protocol implementations. Triggers on validation tasks, compliance checks, or quality verification needs.
testing
General implementation task execution for completing assigned CLEO tasks by following instructions and producing concrete deliverables. Handles coding, configuration, documentation work with quality verification against acceptance criteria and progress reporting. Use when executing implementation tasks, completing assigned work, or producing task deliverables. Triggers on implementation tasks, general execution needs, or task completion work.
tools
Quick ephemeral sticky notes for project-wide capture before formal classification