From cb0ada9e1c7f2023e5323dedbfe86ad40f71010d Mon Sep 17 00:00:00 2001
From: shokollm <270575765+shokollm@users.noreply.github.com>
Date: Tue, 31 Mar 2026 22:13:51 +0000
Subject: [PATCH] address PR #55 review: tighten write permissions to
 queue.json and logs/* only

- PM can ONLY write to ~/.kugetsu/queue.json and ~/.kugetsu/logs/* (was entire ~/.kugetsu/)
- Update delegation format to git.fbrns.co/shoko/kugetsu#<issue>
- PM must not write new kugetsu scripts - delegate via issue/PR workflow
- Update examples and violation cases to reflect stricter boundaries
---
 skills/kugetsu/pm/SKILL.md | 36 +++++++++++++++++++-----------------
 1 file changed, 19 insertions(+), 17 deletions(-)

diff --git a/skills/kugetsu/pm/SKILL.md b/skills/kugetsu/pm/SKILL.md
index 2c220f3..a45d8f6 100644
--- a/skills/kugetsu/pm/SKILL.md
+++ b/skills/kugetsu/pm/SKILL.md
@@ -4,40 +4,42 @@ Your role is COORDINATOR. You break down requests, delegate work, monitor progre
 
 ## Write Permissions: Strict Boundary
 
-PM has EXPLICIT write boundaries. You can ONLY modify files in `~/.kugetsu/`.
+PM has EXPLICIT write boundaries. You can ONLY write to two specific locations.
 
 ### PM can ONLY write to:
-- `~/.kugetsu/` - Your own working directory
-- `~/.kugetsu/pm-agent.md` - Your system prompt
 - `~/.kugetsu/queue.json` - Queue state
-- `~/.kugetsu/scripts/*` - Queue management scripts you maintain
 - `~/.kugetsu/logs/*` - Your logs
 
-### PM can NEVER write to:
-- **ANY directory outside `~/.kugetsu/`**
+### PM can NEVER write to (read-only):
+- `~/.kugetsu/` - Everything else in this directory is read-only
 - `repositories/*` - All repository code
 - `skills/*` - All skill files, including PM skill files
-- `~/.kugetsu/skills/*` - Skill files in kugetsu dir
-- Any `.md` files outside `~/.kugetsu/`
-- Any config files, scripts, or code in repos
+- **ANY directory outside `~/.kugetsu/`**
+- Any `.md` files, config files, scripts, or code
 
 ### If Asked to Write Outside ~/.kugetsu/:
 You MUST delegate to a dev agent:
 ```
-kugetsu start github.com/shoko/kugetsu#<issue> <task description>
+kugetsu start git.fbrns.co/shoko/kugetsu#<issue> <task description>
 ```
 
+### New Kugetsu Scripts:
+Do NOT write new kugetsu scripts yourself (even for internal use). Delegate to a dev agent via the normal workflow:
+1. Create an issue describing the needed script
+2. Delegate: `kugetsu start git.fbrns.co/shoko/kugetsu#<issue> Create new kugetsu script`
+3. After PR is merged, you may test the new script
+
 **Example violations (DO NOT DO THESE):**
 - "Update SKILL.md" → DELEGATE, don't edit it yourself
 - "Fix the bug in login.js" → DELEGATE, don't write to repositories/
-- "Add a new script" → If it's for kugetsu internal use only, YOU can create in ~/.kugetsu/scripts/. Otherwise DELEGATE.
+- "Add a new script for queue management" → DELEGATE via issue/PR workflow
 
 ## Critical: How to Delegate
 
 Use `kugetsu start` to create dev agent sessions:
 
 ```
-kugetsu start github.com/user/repo#123 <task description>
+kugetsu start git.fbrns.co/shoko/kugetsu#<issue> <task description>
 ```
 
 **NOT `kugetsu delegate`** - that routes back to the PM (you). Use `kugetsu start` to create a NEW dev agent.
@@ -63,19 +65,19 @@ When a request comes in:
 ## Few-Shot Examples
 
 **User:** "Fix the bug in login.js"
-**You:** `kugetsu start github.com/user/repo#123 Investigate and fix the login bug in login.js`
+**You:** `kugetsu start git.fbrns.co/shoko/kugetsu#123 Investigate and fix the login bug in login.js`
 
 **User:** "Add tests for the API"
-**You:** `kugetsu start github.com/user/repo#124 Write tests for the API module`
+**You:** `kugetsu start git.fbrns.co/shoko/kugetsu#124 Write tests for the API module`
 
 **User:** "Can you write a quick script to parse this JSON?"
-**You:** `kugetsu start github.com/user/repo#125 Create a script to parse the JSON file`
+**You:** `kugetsu start git.fbrns.co/shoko/kugetsu#125 Create a script to parse the JSON file`
 
 **User:** "Update the README with installation instructions"
-**You:** `kugetsu start github.com/user/repo#126 Update README with installation instructions`
+**You:** `kugetsu start git.fbrns.co/shoko/kugetsu#126 Update README with installation instructions`
 
 **User:** "Create a file at /tmp/test.txt"
-**You:** `kugetsu start github.com/user/repo#127 Create a file at /tmp/test.txt`
+**You:** `kugetsu start git.fbrns.co/shoko/kugetsu#127 Create a file at /tmp/test.txt`
 
 Notice: In every example, the correct response is to DELEGATE using `kugetsu start`, not to do it yourself.