@codemieai/code 0.0.58 → 0.2.0

package/dist/agents/plugins/claude/plugin/claude-templates/templates/guides/security/security-practices.md.template

@@ -1,295 +0,0 @@
----
-# Security Practices
-
-<!--
-GENERATION INSTRUCTIONS:
-1. Find auth middleware/guards and extract flow
-2. Scan for role/permission checks and document model
-3. Locate validation schemas at API boundaries
-4. Check for security middleware (helmet, cors, rate-limit)
-5. Find secrets loading pattern (env, vault, etc.)
-6. Identify security-sensitive operations and their protections
-7. Output: 150-300 lines max
--->
-
-**Project**: [Extract from config]
-**Auth Method**: [Detect: JWT | Session | OAuth2 | API Key | None]
-**Auth Library**: [Detect: passport, jose, next-auth, etc.]
-
----
-
-## Authentication Flow
-
-<!-- Extract actual auth implementation -->
-
-### How Auth Works
-
-```
-[Request] → [Auth Middleware] → [Token/Session Validation] → [User Context]
-                  │
-                  ▼ (on failure)
-             401 Unauthorized
-```
-
-### Implementation
-
-```[lang]
-// Source: [file:lines]
-[Extract auth middleware/guard usage]
-```
-
-### Token/Session Details
-
-| Aspect | Value |
-|--------|-------|
-| Type | `[JWT / Session / API Key]` |
-| Storage | `[Header: Bearer / Cookie / Query]` |
-| Expiration | `[duration or config location]` |
-| Refresh | `[mechanism if exists]` |
-
-### Protect a Route
-
-```[lang]
-// Apply auth to new endpoints like this:
-[Extract exact syntax for protecting routes]
-```
-
----
-
-## Authorization
-
-<!-- Find permission/role checking patterns -->
-
-### Permission Model
-
-**Type**: [RBAC | ABAC | Simple roles | Custom]
-
-| Role/Permission | Access Level | Defined In |
-|-----------------|--------------|------------|
-| `[role/permission]` | [What it allows] | `[file:line]` |
-| `[role/permission]` | [What it allows] | `[file:line]` |
-
-### Enforce Permissions
-
-```[lang]
-// Source: [file:lines]
-[Extract authorization check pattern]
-```
-
-### Check User Permissions
-
-```[lang]
-// How to check permissions in code:
-[Extract permission checking syntax]
-```
-
----
-
-## Input Validation
-
-<!-- Find validation at API boundaries -->
-
-### Validation Layer
-
-**Library**: `[Zod / Joi / class-validator / Pydantic / etc.]`
-**Applied At**: `[Middleware / Decorator / Controller]`
-
-```[lang]
-// Source: [file:lines]
-[Extract validation schema example]
-```
-
-### Sanitization
-
-```[lang]
-// Source: [file:lines] - if explicit sanitization exists
-[Extract sanitization pattern or note "handled by validation library"]
-```
-
-### Rules
-
-- ✅ Validate at `[detected boundary - controller/middleware]`
-- ✅ Use schemas from `[validation path]`
-- ❌ Never trust: query params, body, headers, path params
-
----
-
-## Secrets Management
-
-<!-- Find how secrets are loaded and used -->
-
-### Loading Pattern
-
-```[lang]
-// Source: [file:lines]
-[Extract secrets/config loading]
-```
-
-### Secret Variables
-
-| Variable | Purpose | Required |
-|----------|---------|----------|
-| `[SECRET_KEY/JWT_SECRET]` | [Token signing] | Yes |
-| `[DATABASE_URL]` | [DB connection] | Yes |
-| `[API_KEY_*]` | [External services] | Varies |
-
-### Access Secrets
-
-```[lang]
-// Always access secrets via:
-[Extract config/env access pattern - never hardcode]
-```
-
-### Rules
-
-- ✅ Load from `[env / secrets manager / vault]`
-- ✅ Access via `[config module pattern]`
-- ❌ Hardcode in source code
-- ❌ Commit `.env` files
-- ❌ Log secret values
-
----
-
-## Security Middleware
-
-<!-- Find security-related middleware/headers -->
-
-### Configured Protections
-
-| Protection | Implementation | Source |
-|------------|----------------|--------|
-| Security Headers | `[helmet / manual / framework]` | `[file:line]` |
-| CORS | `[cors config location]` | `[file:line]` |
-| Rate Limiting | `[rate-limit implementation]` | `[file:line]` |
-| CSRF | `[csrf protection or N/A]` | `[file:line]` |
-
-### Headers Set
-
-```[lang]
-// Source: [file:lines]
-[Extract security headers configuration]
-```
-
-### CORS Configuration
-
-```[lang]
-// Source: [file:lines]
-[Extract CORS config - allowed origins, methods]
-```
-
-### Rate Limiting
-
-```[lang]
-// Source: [file:lines]
-[Extract rate limit configuration]
-```
-
-**Limits**: `[X requests per Y time window]`
-
----
-
-## SQL Injection Prevention
-
-<!-- Verify ORM/query builder or parameterized queries -->
-
-**Protection**: `[ORM: name | Query Builder: name | Parameterized queries]`
-
-```[lang]
-// ✅ Safe - Source: [file:lines]
-[Extract parameterized query example]
-
-// ❌ NEVER - vulnerable to injection
-[Show anti-pattern if found, or generic example]
-```
-
----
-
-## XSS Prevention
-
-<!-- Find output encoding/escaping -->
-
-**Protection**: `[Framework auto-escaping | Manual escaping | CSP]`
-
-```[lang]
-// Source: [file:lines]
-[Extract output escaping or template rendering pattern]
-```
-
-**Content Security Policy**: `[Configured / Not configured]`
-
----
-
-## File Upload Security
-
-<!-- If file uploads exist, document protections -->
-
-```[lang]
-// Source: [file:lines]
-[Extract file upload validation - type, size, name sanitization]
-```
-
-| Protection | Implementation |
-|------------|----------------|
-| File type validation | `[how enforced]` |
-| Size limit | `[max size]` |
-| Storage location | `[path - outside webroot?]` |
-| Filename sanitization | `[yes/no, how]` |
-
----
-
-## Audit Logging
-
-<!-- Find security event logging -->
-
-**Logged Events**:
-
-| Event | Log Level | Source |
-|-------|-----------|--------|
-| Login success/failure | `[level]` | `[file:line]` |
-| Permission denied | `[level]` | `[file:line]` |
-| Password change | `[level]` | `[file:line]` |
-| Sensitive data access | `[level]` | `[file:line]` |
-
-```[lang]
-// Source: [file:lines]
-[Extract audit log example]
-```
-
----
-
-## Dependency Security
-
-<!-- Find vulnerability scanning setup -->
-
-| Tool | Command | Frequency |
-|------|---------|-----------|
-| `[npm audit / safety / snyk / dependabot]` | `[command]` | `[CI / manual]` |
-
----
-
-## Security Anti-Patterns
-
-<!-- Extract from code review or detected issues -->
-
-| ❌ NEVER | ✅ INSTEAD | Risk |
-|----------|-----------|------|
-| `[detected or common anti-pattern]` | `[correct pattern]` | [Risk type] |
-| `[detected or common anti-pattern]` | `[correct pattern]` | [Risk type] |
-| `[detected or common anti-pattern]` | `[correct pattern]` | [Risk type] |
-| Log user passwords/tokens | Log user ID only | Data exposure |
-| Return stack traces to client | Generic error messages | Info leakage |
-
----
-
-## Quick Reference
-
-| Security Need | Location | Pattern |
-|---------------|----------|---------|
-| Auth middleware | `[path]` | `[usage syntax]` |
-| Permission check | `[path]` | `[usage syntax]` |
-| Input validation | `[path]` | `[usage syntax]` |
-| Secrets config | `[path]` | `[access pattern]` |
-| Security headers | `[path]` | - |
-| Audit logging | `[path]` | `[log function]` |
-
----

package/dist/agents/plugins/claude/plugin/claude-templates/templates/guides/standards/code-quality.md.template

@@ -1,186 +0,0 @@
----
-# Code Quality Standards
-
-<!--
-GENERATION INSTRUCTIONS:
-1. Parse linter config for active rules
-2. Extract formatter settings
-3. Scan codebase for consistent patterns
-4. Identify type checking strictness level
-5. Find pre-commit/CI quality gates
-6. Extract actual good/bad examples from codebase
-7. Output: 150-250 lines max
--->
-
-**Project**: [Extract from config]
-**Linter**: [Detect tool + config file]
-**Formatter**: [Detect tool + config file]
-**Type Checker**: [Detect tool + config file or N/A]
-
----
-
-## Quality Commands
-
-<!-- Extract exact commands from package.json, Makefile, pyproject.toml -->
-
-| Action | Command | Description |
-|--------|---------|-------------|
-| Check all | `[combined command if exists]` | Run all quality checks |
-| Lint | `[lint command]` | Check code issues |
-| Lint fix | `[lint fix command]` | Auto-fix issues |
-| Format | `[format command]` | Format code |
-| Type check | `[type check command or N/A]` | Verify types |
-
-**Before committing, run**: `[primary quality command]`
-
----
-
-## Enforced Rules
-
-<!-- Extract key rules from linter/formatter config -->
-
-### From Linter (`[config file]`)
-
-| Rule | Setting | Rationale |
-|------|---------|-----------|
-| `[rule-name]` | `[error/warn/value]` | [Brief why] |
-| `[rule-name]` | `[error/warn/value]` | [Brief why] |
-| `[rule-name]` | `[error/warn/value]` | [Brief why] |
-| `[rule-name]` | `[error/warn/value]` | [Brief why] |
-
-### From Formatter (`[config file]`)
-
-| Setting | Value |
-|---------|-------|
-| Line length | `[value]` |
-| Indentation | `[tabs/spaces, size]` |
-| Quotes | `[single/double]` |
-| Trailing comma | `[yes/no/es5]` |
-| Semicolons | `[yes/no]` |
-
----
-
-## Naming Standards
-
-<!-- Extract from linter rules + analyze codebase patterns -->
-
-| Element | Rule | ✅ Correct | ❌ Wrong |
-|---------|------|-----------|----------|
-| Variables | `[camelCase/snake_case]` | `userName` | `user_name` / `UserName` |
-| Functions | `[camelCase/snake_case]` | `getUserById` | `GetUserById` |
-| Classes | `[PascalCase]` | `UserService` | `userService` |
-| Constants | `[UPPER_SNAKE]` | `MAX_RETRIES` | `maxRetries` |
-| Files | `[kebab/snake/pascal]` | `[actual example]` | `[counter example]` |
-| Boolean vars | `[is/has/should prefix]` | `isActive` | `active` |
-
----
-
-## Type Safety
-
-<!-- Detect type checking level and requirements -->
-
-**Strictness**: `[strict / moderate / basic / none]`
-**Config**: `[tsconfig.json / mypy.ini / pyproject.toml section]`
-
-### Required Typing
-
-```[lang]
-// ✅ Correct - Source: [file:lines]
-[Extract well-typed function example]
-
-// ❌ Missing types - would fail type check
-[Show same function without types]
-```
-
-### Type Rules
-
-| Rule | Required |
-|------|----------|
-| Function parameters | ✅ Always |
-| Function returns | ✅ Always |
-| Variables | `[inferred OK / explicit required]` |
-| `any` / `unknown` | `[forbidden / discouraged / allowed]` |
-
----
-
-## Code Complexity Limits
-
-<!-- Extract from linter config or establish from codebase patterns -->
-
-| Metric | Limit | Enforced By |
-|--------|-------|-------------|
-| Function length | `[max lines]` | `[rule name or convention]` |
-| File length | `[max lines]` | `[rule name or convention]` |
-| Cyclomatic complexity | `[max value]` | `[rule name or N/A]` |
-| Nesting depth | `[max levels]` | `[rule name or convention]` |
-| Parameters per function | `[max count]` | `[rule name or convention]` |
-
-### Reduce Complexity
-
-```[lang]
-// ❌ Too complex
-[Extract or create example of deep nesting/long function]
-
-// ✅ Refactored
-[Show extracted/simplified version]
-```
-
----
-
-## Import Organization
-
-<!-- Extract from linter rules (import-order, isort, etc.) -->
-
-```[lang]
-// Source: [well-organized file:lines]
-
-// Group 1: [Built-in/Standard library]
-[imports]
-
-// Group 2: [External/Third-party packages]
-[imports]
-
-// Group 3: [Internal/Local modules]
-[imports]
-```
-
-**Rules**:
-- ✅ Sorted alphabetically within groups
-- ✅ One import per line (or `[grouped style if used]`)
-- ❌ Wildcard imports (`import *`)
-- ❌ Unused imports
-
----
-
-## Documentation Standards
-
-<!-- Extract from docstring linter rules or conventions -->
-
-### Required Documentation
-
-| Element | Required | Format |
-|---------|----------|--------|
-| Public functions | ✅ | `[JSDoc / docstring / etc.]` |
-| Public classes | ✅ | `[format]` |
-| Complex logic | ✅ | Inline comments |
-| Private/internal | Optional | - |
-
-### Format
-
-```[lang]
-// Source: [file:lines]
-[Extract canonical documentation example]
-```
-
----
-
-## Common Violations & Fixes
-
-<!-- Extract from common linter errors in codebase or CI logs -->
-
-| Violation | Fix |
-|-----------|-----|
-| `[linter-error-code]`: [description] | [How to fix] |
-| `[linter-error-code]`: [description] | [How to fix] |
-| `[linter-error-code]`: [description] | [How to fix] |
-|

package/dist/agents/plugins/claude/plugin/claude-templates/templates/guides/standards/git-workflow.md.template

@@ -1,177 +0,0 @@
-# Git Workflow
-
-## Quick Summary
-
-Git workflow for [PROJECT_NAME]: branching, commits, pull requests, and code review.
-
-**Category**: Standards
-**Complexity**: Simple
-**Prerequisites**: Git basics
-
----
-
-## 🚨 SIZE LIMIT WARNING
-
-**This generated guide MUST be 200-400 lines maximum.**
-
-**When filling this template**:
-- ✅ Code examples: 5-15 lines (NEVER > 20)
-- ✅ ONE example per pattern
-- ✅ Use file:line references, not full code
-- ✅ Use tables for multiple patterns
-- ❌ NO multiple examples for same pattern
-- ❌ NO verbose explanations
-- ❌ NO copying entire functions
-
-**Validate line count after generation**: `wc -l [this-file]`
-**If > 400 lines**: Condense immediately before continuing!
-
----
-
-## Branching Strategy
-
-| Branch Type | Pattern | Purpose |
-|-------------|---------|---------|
-| Main | `main` | Production code |
-| Feature | `feature/[name]` | New features |
-| Bugfix | `bugfix/[name]` | Bug fixes |
-| Hotfix | `hotfix/[name]` | Emergency fixes |
-
-**Project Pattern**: [Your specific pattern]
-
----
-
-## Workflow
-
-```bash
-# 1. Create branch
-git checkout main
-git pull
-git checkout -b feature/[name]
-
-# 2. Work & commit
-git add [files]
-git commit -m "[type]: [message]"
-
-# 3. Push
-git push origin feature/[name]
-
-# 4. Create PR via UI/CLI
-```
-
----
-
-## Commit Format
-
-```
-[type]([scope]): [subject]
-
-[optional body]
-
-[optional footer]
-```
-
-**Types**: feat | fix | docs | style | refactor | test | chore
-
-**Examples**:
-- `feat(auth): add OAuth2 login`
-- `fix(api): resolve timeout issue`
-- `docs(readme): update setup instructions`
-
----
-
-## Commit Rules
-
-| ✅ DO | ❌ DON'T |
-|-------|----------|
-| Atomic commits | Mix unrelated changes |
-| Descriptive messages | "fix stuff" |
-| Present tense | Past tense |
-| Reference issues | Skip context |
-
----
-
-## Pull Request
-
-### PR Title
-
-```
-[type]([scope]): [description]
-```
-
-### PR Template
-
-```markdown
-## Summary
-[Brief description]
-
-## Changes
-- [Change 1]
-- [Change 2]
-
-## Testing
-- [ ] Tests added/updated
-- [ ] Manual testing done
-
-## Checklist
-- [ ] Code follows standards
-- [ ] Tests pass
-- [ ] No merge conflicts
-```
-
----
-
-## Code Review Checklist
-
-- [ ] Code follows project standards
-- [ ] Logic is correct
-- [ ] Tests are adequate
-- [ ] No security issues
-- [ ] Documentation updated
-
----
-
-## Merge Strategy
-
-**Project Standard**: [Merge commit / Squash / Rebase]
-
-```bash
-# After PR approved
-[merge_command]
-
-# Delete branch
-git branch -d feature/[name]
-```
-
----
-
-## Common Commands
-
-```bash
-# Status
-git status
-
-# Stage
-git add [files]
-
-# Commit
-git commit -m "message"
-
-# Push
-git push origin [branch]
-
-# Pull
-git pull origin [branch]
-
-# Undo last commit (keep changes)
-git reset --soft HEAD~1
-```
-
----
-
-## References
-
-- **Branch Pattern**: [Details]
-- **PR Process**: [Link if documented]
-
----