skills/local/cali-product-workflow/skills-workflow/cali-tech-planning/SKILL.md
[Cali] Technical planning and scope sequencing skill. Generates typed scopes (feature/optimization/spike + test-*), sequences them, and creates /sisyphus goals. For software products, also generates testing-strategy.md via cali-testing-ai-code. Part of cali-product-workflow but can be used standalone.
npx skillsauth add renatocaliari/agent-sync-public-skills cali-tech-planningInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Tools: See
references/cli-tools/subagents.mdfor subagent patterns,references/cli-tools/goals.mdfor goal commands.
This skill executes the Tech Planning phase. It can be run:
/skill:cali-tech-planning — after Shape Up and Critique/skill:cali-product-workflowSecurity check: Read the YAML frontmatter of spec-product.md:
head -10 spec-product_{v}.md | grep "approved:"
approved: true → proceedapproved: true → GO BACK to Phase 6. Do not proceed.This check is deterministic — does not depend on memory.
For software products, also check product_type:
head -10 spec-product_{v}.md | grep "product_type:"
product_type: software or product_type: hybrid → activate cali-testing-ai-codeproduct_type: service → skip testing strategyRead the references/ files to guide the process:
| File | Covers | When to read |
|---|---|---|
| references/tech-context.md | Tech planning context, prerequisites, workflow position | Before starting — sets planning context |
| references/scopes-and-sequencing.md | Scope types (feature/optimization/spike + test-*), executor routing, sequencing principles | During generation — defines scope structure |
| references/tech-output.md | Tech plan output format, frontmatter, receipts | After generation — formats output |
| references/generation-principles.md | Generation principles, constraints, quality standards | During generation — guides implementation |
Use the references above to generate technical scopes:
subagent({
agent: "planner",
task: `Generate tech scopes for the approved spec-product.md using references/.
1. Check strategic stability (Step 0)
2. Codebase awareness check (Step 1)
3. Technical risk analysis (Step 2)
4. Identify spikes (Step 3)
5. Define typed scopes: feature | optimization | spike (Step 4)
6. Sequence (riskiest-first or ui-first) (Step 5)
7. Detail each scope with DoD + acceptance criteria (Step 6)
8. Format per output-format.md (Step 7)
Output: .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md
Input: .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-product_{v}.md`,
output: ".cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md"
})
Output: .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md
Input: .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-product_{v}.md
If product_type: software or product_type: hybrid:
subagent({
agent: "cali-testing-ai-code",
task: `Generate testing strategy for software product.
Input: spec-product.md (frontmatter with product_type: software)
Output: .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/testing-strategy.md
Include:
- Mutation score targets (70/50/30%)
- Tech stack detection
- CI/CD gates (hard blocks)
- Anti-patterns (over-mocking, 100% coverage)`,
output: ".cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/testing-strategy.md"
})
Based on testing-strategy.md, add scopes for:
test-unit: Unit tests for critical business logic (TDD recommended)test-integration: Integration tests for DB, APIs, external servicestest-security: Security scanning gatestest-mutation: Mutation testing validationNote on TDD: Research shows TDD alone is insufficient for AI-generated code.
⚠️ MANDATORY — NEVER SKIP unless spec-tech was already approved.
Run Plannotator gate for the tech plan BEFORE generating goals:
plannotator annotate .cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md --gate
See references/cli-tools/plannotator.md for command format, after-approval workflow, and frozen file rules.
| Scenario | Action | |---------|--------| | Standalone Tech Planning | ALWAYS run gate — visual review of all scopes | | Post Shape-Up + Interface | Gate already ran → SKIP this step | | Post Shape-Up, no Interface | Gate already ran → SKIP this step |
If approved:
approved: true, approved_at: ... in spec-tech.yaml frontmatterapprovals/ directoryIf user requests changes:
plannotator annotate ... --gateAfter tech plan approval, convert each scope into a /sisyphus goal with DoD as completion criteria:
For each scope in the approved spec-tech.md:
/sisyphus Scope: {scope_name}
Steps:
1. {step 1}
Done: {criterion}
2. {step 2}
Done: {criterion}
...
DoD: {scope DoD}
AC: {acceptance criteria}
Deps: {scope dependencies}
Optimization/spike scopes with metrics → /skill:autoresearch-create
(they become experiment loops, not goals)
Rules:
pause_goal with reason if a scope gets blocked/goal-tweak for scope adjustments during executionTech plan is saved to:
.cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md
DO NOT ask user what to do next. Execution is automatic.
After Plannotator approval on spec-tech_v{N}.md:
/skill:cali-product-scope-executor for scope routingfeature → /sisyphus + /superviseoptimization → /skill:autoresearch-createtest-unit, test-integration, test-security, test-behavior → /sisyphus (with testing gates)See phases/execution.md for full execution flow.
For test-* scopes, the execution includes hard blocks:
See skills-execution/cali-testing-ai-code/SKILL.md
If a tool is unavailable, check:
../../../cali-product-workflow/references/cli-tools/
development
PocketBase v0.39+ development - API rules, auth, collections, SDK, realtime, files, Go/JS extending, deployment, production tuning.
tools
Auto-initialize structured documentation for any project using lat.md (knowledge graph of markdown files with [[wiki links]], // @lat: code refs, and semantic search). Detects cali-product-workflow artifacts (spec-product.md, spec-tech.md, critiques) and uses them as seed material. Falls back to extracting business rules, architecture, and design decisions directly from the codebase. Use when a project lacks structured documentation or when lat.md/ is missing. After seeding, lat.md extension hooks keep documentation alive automatically.
testing
[Cali] Server security audit and hardening for private servers behind Tailscale. Use when: auditing server security, hardening SSH/firewall/Docker, checking for vulnerabilities, setting up fail2ban, reviewing port exposure, or responding to security alerts. Covers 6 layers: CloudFlare, UFW, Tailscale, SSH, Docker, Application. Triggers: "server security", "security audit", "harden server", "SSH hardening", "firewall rules", "UFW config", "fail2ban", "port security", "Docker security", "vulnerability check", "security review".
tools
Run supply chain security scans before installing packages or before releases. Triggers when: user installs a package (npm, pip, go get, brew), user asks to 'scan dependencies', 'check vulnerabilities', 'supply chain', 'security audit', 'run trivy', 'run socket', or before any release/deployment. Also triggers on mentions of: socket.dev, trivy, OSV-scanner, dotenvx, CVE, dependency audit. Covers all four tools with concrete commands.