npx skills add ...
npx skills add antjanus/skillbox --skill track-session
Use this skill to maintain SESSION_PROGRESS.md and track multi-session work — resuming, checkpointing, and handing off long tasks. Triggers include "resume work", "pick up where I left off", "what was I doing", "save progress", "checkpoint before I lose context", "are we done", or "I lost my SESSION_PROGRESS" — even if the user never says "session", as when they return to a multi-day refactor or ask you to write down where things stand. Applies to multi-phase work, cross-file refactors, and long debugging runs; skip it for quick one-file fixes. Do NOT use this skill for feature or milestone planning (see track-roadmap) or for a one-off summary or handoff doc that doesn't live in SESSION_PROGRESS.md (see work-summary).
npx skills add antjanus/skillbox --skill track-session
Track multi-session work in SESSION_PROGRESS.md at the project root so work can pause and resume without a context rebuild. The file is only worth having if it matches reality, so checkpoint as work happens — after a completed task, a plan change, a failure, or before asking the user a question — rather than waiting to be told to save.
The cc-dash dashboard ingests this file, which is why the frontmatter schema and the HTML id markers below are load-bearing rather than decorative.
## Plan and ## Current Status are load-bearing; ## Decisions, ## Failed Attempts, and ## Completed Work are optional — add them when there's something real to record.
Length: one line per task; Decisions and Failed Attempts get 1–2 sentences each. The file is a state record, not a narrative — no filler sections, no restated summaries, no recap of work already listed under Completed Work.
What must survive a context reset, in priority order: problems that came up and how they were resolved (Failed Attempts); options raised, tried, or set aside, and why (Decisions); anything the user asked for, ruled out, or set as a constraint, stated close to their own words; exactly where things stand (Current Status); what is still open or promised (Plan); and details that are hard to reconstruct — names, numbers, exact wording, links — kept exact. Be complete on these even at the cost of length. Condense your own reasoning to what it concluded.
IDs: t_ (task) or f_ (failed attempt) plus 1–20 [a-z0-9_-] chars — five random chars by default, or a mnemonic slug (t_redis-mw, t_authfix). The same shape applies to task: and ref:, which each take exactly one id. roadmap_ref takes exactly one roadmap id; when a session advances several features, name the others under ## Current Status. Keep an id stable once written, because dep: references point at it. Every plan item carries an id and a dep (dep:none or dep:t_XXXXX).
Log every failed approach with its reason so it isn't blindly retried. When a failure was environment-scoped — an MCP server not connected, missing credentials, a service down — say so in the entry; a later session may have a different environment, so re-checking it is correct rather than a repeat.
On /track-session with no argument, take the first branch that matches and stop:
SESSION_PROGRESS.md at the project root → Start. Don't rebuild one from the roadmap or git history; that is recover, and only on request.last_updated) → checkpoint, then keep working.status: completed → say the last session closed and what it finished, then hand off to /track-roadmap resume to pick the next feature, or to Start if the user already named the new work.The discriminator is unrecorded work in the current conversation, not how finished the file looks. Use it as a tiebreak whenever branches 2 and 4 both seem to fit: checkpoint. Writing a near-empty delta costs one turn, whereas resuming on top of unrecorded work drops it from the file and hands the next session a stale plan.
Derive project: from the repo (folder name, package.json, pyproject.toml) rather than inheriting it from a file you're about to overwrite. Stamp started and last_updated from the clock (see Checkpoint), set status: in-progress, and write at least ## Plan and ## Current Status.
If a SESSION_PROGRESS.md already exists, read it, then check whether git tracks it — that determines whether replacing it is reversible:
completed/paused and unrelated → confirm with the user, then replace the file; git holds the old copy.SESSION_ARCHIVE_<topic>.md first, then write the clean file. Replacing an untracked file destroys it permanently; public repos commonly gitignore SESSION_PROGRESS.md on purpose. When they do, offer to add SESSION_ARCHIVE_*.md to .gitignore too, so the archive doesn't become the thing that leaks.Both write the current state into the file: tick completed tasks, update ## Current Status, append decisions and failed attempts, re-stamp last_updated. The only difference is what happens next — a bare /track-session checkpoints and keeps working, while /track-session save checkpoints and stops.
Take every timestamp from the clock rather than estimating it, because a guessed stamp drifts by hours and the dashboard's staleness view trusts it:
When the last plan task is ticked, set status: completed in the same write and tell the user the session is closed. A finished file left in-progress shows as active work on the dashboard indefinitely.
Read the file, then lead the reply with where things actually stand — status, tasks done out of total, working-tree state, last commit, and the next action — before any fresh analysis. Handoffs that open with narration ("I'll read the session file now, then look at the tests") bury the state the user came back for, and they end up re-deriving it themselves.
Resume is also the natural reconciliation point: if project: or status: have drifted from reality, fix them in place while you're there.
/track-session verify confirms [x] tasks actually meet their requirements — read the files, run the tests, tie each claim to evidence from this run, and append a ## Verification Results section, which cc-dash renders on the session page. Load reference/VERIFICATION.md when the user asks to verify, or when ticked boxes are the only evidence the work is done./track-session recover rebuilds a deleted SESSION_PROGRESS.md from the Claude Code transcript. Load reference/RECOVERY.md when the file is missing and the user wants it back — it carries the transcript-slug derivation and a tested Python reconstructor, which the reference explains is necessary because jq mis-parses these transcripts.✅ Specific and resumable:
❌ Too vague to resume:
✅ A resume reply that opens with state:
❌ A resume reply that opens with narration:
✅ A failed attempt that won't be blindly retried:
❌ A failed attempt that will be retried:
✅ Every good version names the file, the id, and the reason; every weak one makes the reader rebuild context from scratch.
--- is invisible to cc-dash, so a file with stacked sessions silently reports only the newest one.SESSION_PROGRESS.md is gitignored in many public repos, which makes "just replace it, git has the history" false there. Check git ls-files --error-unmatch before replacing, and archive first when it comes back non-zero.ref: or roadmap_ref, or an id with a space or capital, loses that one entry or link from the dashboard. Fix the malformed value, but don't rewrite valid mnemonic ids into random tokens — renaming an id orphans every dep: pointing at it.last_updated on every write. The dashboard's staleness view keys off it, so a checkpoint that skips the stamp makes active work look abandoned.save stops work. Users who type it mid-flow expecting a checkpoint then wonder why you halted; a bare /track-session is the one that checkpoints and continues.save with subagents still running doesn't stop them. Their results arrive after you've said you stopped. Name each in-flight agent and what it's doing under ## Current Status, and tell the user results will still land, so the next session knows to look for them.## Notes section survives on disk but never reaches the dashboard. Put a finding that should outlive the session on the linked roadmap item as a quoted note (see track-roadmap) rather than in an invented section.godot/ or web/ folder) still checkpoints to the root file; a second SESSION_PROGRESS.md deeper in the tree splits the record and the dashboard reads only one.sed -i. recover rebuilds the file by replaying Edit and Write calls from the transcript, so an update made through Bash is invisible to it.Edits, the transcript usually holds no full Write — expect to replay edits over the latest snapshot rather than lifting one copy out.roadmap_ref: r_XXXXX. Research, open questions and rejected alternatives that matter beyond this session go back to that roadmap item as quoted notes before the session closes.git show.See reference/TROUBLESHOOTING.md for resume failures, oversized session files, and verify edge cases.
git ls-files --error-unmatch SESSION_PROGRESS.md # exit 0 = tracked; non-zero = untracked or ignoreddate +%Y-%m-%dT%H:%M:%S%z | sed -E 's/([0-9]{2})$/:\1/' # 2026-09-22T11:19:48-06:00## Plan
- [x] <!-- id:t_a1b2c dep:none --> Phase 1: choose session store (picked Redis)
- [ ] <!-- id:t_g5h6i dep:t_a1b2c --> Phase 2: add session middleware
## Current Status
Working on: Phase 2
Next: add Redis client in src/auth/session.ts, then wire middleware in app.ts## Plan
- [ ] Do auth stuff
- [ ] Fix sessions
Working on auth. Tried some things that didn't work.Paused, 4 of 7 plan tasks done, working tree clean, last commit 3cf23e0 "add session middleware".
Next: add the Redis client in src/auth/session.ts, then wire it in app.ts.Let me start by reading your SESSION_PROGRESS.md to understand the context.
Then I'll check the git log and look through the auth directory...## Failed Attempts
- <!-- id:f_k7m2p task:t_g5h6i --> Tried `ioredis` autoReconnect for the session store: reconnect storms under the test harness's socket limit. Switched to a single shared client in src/auth/redisClient.ts.
- <!-- id:f_q9r4s task:t_g5h6i --> Ran the e2e suite against staging: env-scoped — STAGING_URL unset in this shell. Re-check before treating this as a real failure.## Failed Attempts
- Redis didn't work, trying something else