القائمة
Commit changes with the dev-gatherly git identity using Conventional Commits format. Use after every atomic step in the REPL loop.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Launch and drive the Gatherly app locally (FastAPI backend + Next.js frontend) and verify it renders. Use when asked to run, start, launch, or screenshot the app, or to confirm a change works in the real running app.
Scan code for security violations S1-S8 (auth, tenant isolation, RBAC, rate limiting, audit logging, raw SQL, secrets, HTTP timeouts). Use before commit on any code touching endpoints, services, or data access.
Run the event-readiness checklist against an event. Evaluates the readiness checks, produces findings, and routes them to the host. Use when the user asks to audit, score, or check the readiness of an event.
Push the current branch and create a production-ready PR with a complete description (What, Why, How to test). Runs /review-pr first if not already done. Use when implementation is complete.
Monitor CI/CD pipeline runs, diagnose failures, and route fixes to the right phase. Use after pushing a branch or when a pipeline turns red.
Read-only deep-dive into the codebase to understand patterns, data flow, and integration points before modifying anything. Use before any non-trivial change.
| name | commit-sc |
| description | Commit changes with the dev-gatherly git identity using Conventional Commits format. Use after every atomic step in the REPL loop. |
| allowed-tools | Bash, Read |
You commit the current staged (or unstaged) changes with the project's git identity and a properly formatted Conventional Commits message.
git config user.name should be dev-gatherly. The session-start hook sets this; if missing, set it now.git diff --staged (or git diff if nothing staged). Refuse to commit empty or accidentally massive diffs (>500 lines without explicit confirmation).feat — new user-facing capabilityfix — bug fixrefactor — code restructure with no behavior changetest — tests onlydocs — documentation onlychore — tooling, dependencies, configsperf — performance improvementci — CI/CD changessecurity — security-related fix or hardeningbe, fe, db, infra, events, guests, rsvp, billing, auth, audit, docs.<type>(<scope>): <imperative subject, ≤72 chars>
<optional body — explain WHY, not what. Wrap at 80 chars.>
Refs: F-12
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
The Co-Authored-By trailer is required on every commit. The Refs:/issue
trailer is optional in this local-only setup (no GitHub remote/issues).
git -c user.name='dev-gatherly' -c user.email='dev@gatherly.local' commit -F <msgfile>.
Use a -F message file (or a here-doc) for multi-line bodies.feat(events): add event capacity limits with waitlist
Hosts can cap an event's headcount. Once full, new RSVPs land on a
waitlist and are promoted automatically when a guest cancels. The
guest-list endpoint paginates.
Refs: F-12
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
fix(rsvp): handle duplicate RSVP submissions for the same guest
A guest hitting the public RSVP link twice previously created two rows.
The handler now upserts on (event_id, email) and returns the existing
RSVP unchanged.
Refs: F-08, fixes #143
security(be): require admin capability for event deletion
Deletion was previously gated only by capability event:write, which
Hosts have. This adds the explicit event:delete capability check (Admin
only) and updates the default role bindings.
Refs: F-15, audit finding GA-A-2026-05-12-44
You refuse if:
--no-verify is in the message or any flagmain or master and the user isn't explicitly overriding.venv/bin/python -m pytest on macOS/Linux, since the Makefile is Windows-only; if it fails, refuse)--no-verify. Pre-commit hooks exist for a reason.console.log, print() debug statements, or TODO: remove before commit.dev-gatherly.