cqs

Run a multi-category code audit on the cqs codebase. Spawns parallel agents per batch.

Trust-boundary security audit of cqs — fans out unbiddable-auditor agents across 6 categories (RT-INJ/RT-FS/RT-RES/RT-DATA/RT-RELAY/RT-EXFIL), attacker mindset, run-the-attack PoC + regression guard.

Run the retrieval recall gate with dead-gold triage and the binary A/B regression test. Required before release tags; use after any retrieval-adjacent merge.

Run after making changes, before committing — reviews the current git diff for impact and risk via cqs review.

Release a new version of cqs. Bumps version, updates changelog, runs the recall gate, publishes to crates.io, creates GitHub release.

One-command setup for cqs in a new project — skills, tears infrastructure, CLAUDE.md, init, index.

Comment-archaeology sweep - find work items hiding in TODO/FIXME/for-now comments and plan-doc ledgers, judge them, file issues, queue trivial fixes. Good idle-loop activity.

Run before modifying a function — impact + test-map + explain in one pass, presented as a modification checklist.

Execute multiple cqs queries in a single persistent session via stdin batch mode.

Task planning with scout data + task-type templates. Produces implementation checklists.

Unified cqs CLI dispatcher — semantic code search, call graph navigation, impact analysis, quality tools, notes, and infrastructure. Use `/cqs <command> [args]` for any cqs operation.

Review project docs for staleness. Checks lib.rs, Cargo.toml, README, CONTRIBUTING, SECURITY, PRIVACY, and GitHub repo metadata.

Review, prune, and suggest notes in notes.toml. Cleans stale notes and proposes new ones from recent changes.

The idle work loop - enumerate open issues and triage rows, classify fixable vs blocked, pick by value-vs-budget, dispatch. Standing user directive; invoke whenever otherwise idle.

Run before starting an implementation task — scout + gather assemble relevant files, functions, tests, and notes into a brief.

Land a ready branch - push, PR, pinned CI watch, squash-merge, issue verification, cleanup. Use for every PR landing; encodes the run-ID pinning and cleanup discipline.

Handle cqs schema version upgrades — check version, attempt migration, rebuild if needed.

Create a pull request with WSL-safe workflow. Uses --body-file to avoid heredoc permission corruption.

Rebuild the cqs index and show before/after stats comparison.

Diagnose common cqs issues — stale index, model download, schema mismatch, connection issues.

Verify all cqs features work. Run on session start and after compaction.

Update PROJECT_CONTINUITY.md and notes.toml with current session state. Use proactively before context compaction or when switching tasks.