feat(delegate): Codex/Grok delegation skill, installer gitignore hardening, audit doc#68
Merged
Conversation
Introduce hapo:delegate with brief-first workflow, sandbox defaults, resume/monitor steps, and independent verification. Wire routing so assign/offload intents map to the new skill.
Capture a full-package inventory of installer, skills, hooks, and fragile points against Claude Code practices as of v0.13.2.
Add .claude/ and .opencode/ to root .gitignore on install, and expand the in-folder gitignore template so secrets, skill deps, and session artifacts stay out of git even on force-add.
Ship hapo:delegate with the installer required-skills list so npx @haposoft/cafekit installs the skill end-to-end.
Release delegate skill, dual-layer gitignore policy, and related docs.
hapo-nghialuu
force-pushed
the
feat/delegate-skill
branch
from
July 17, 2026 10:03
2dc926c to
f5562d9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Merges the
feat/delegate-skillworkstream intodev. Urgency note: npm0.13.4was published from this branch and shippedhapo:delegate;0.14.0(published fromdev) does not include it — fresh installs currently lack a skill that 0.13.4 had. Merging this and releasing0.14.1restores parity.Contents
hapo:delegateskill (995ed3d,eb087a2): dispatch scoped implementation tasks to external agent CLIs (Codex / Grok) with brief-file authoring, minimal-permission headless dispatch, background monitoring, resume, and mandatory independent verification. References document verified flags/pitfalls for both CLIs (worktree unreliability, permission degradation, stdout-vs-stderr). Registered inmigration-manifest.json.a1d5ec6): ignore runtime folders, harden.claude/.gitignore.ec9e962):docs/audit-cafekit-vs-claude-code-2026-07.md— the full-package audit that drove fix(hooks): harden env escaping and privacy symlink resolution #65/fix: audit batch 1 — validator, installer, and payload fixes #66/fix: audit follow-ups — batch 1.5, OpenCode spec-workflow port (Option A), tollgate v2 Stop gate #67; not yet ondev.b1b3226).2dc926cchore(release) 0.13.4 — historical bump from this branch.Known conflicts (expected, resolve toward dev)
Branch predates #66/#67/0.14.0 on dev:
packages/spec/package.json: keep 0.14.0 (dev) — the 0.13.4 bump here is historical.packages/spec/CHANGELOG.md+docs/project-changelog.md: fold this branch's [0.13.4]/delegate entries into the existing structure; delegate skill entry goes under a new [Unreleased] → Added..gitignore/CLAUDE.md: dev already carries newer versions of parts ofb1b3226/a1d5ec6(via fix: audit follow-ups — batch 1.5, OpenCode spec-workflow port (Option A), tollgate v2 Stop gate #67256f44b) — resolve toward dev where duplicated.Not included
Uncommitted refinements to
references/codex-delegation.mdremain in a local stash — follow-up commit after merge.Post-merge
Release 0.14.1 so npm regains
hapo:delegate.