@heytherevibin/skillforge 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (402) hide show
  1. package/CHANGELOG.md +16 -0
  2. package/CODE_OF_CONDUCT.md +34 -0
  3. package/CONTRIBUTING.md +38 -0
  4. package/LICENSE +21 -0
  5. package/README.md +337 -0
  6. package/RELEASING.md +93 -0
  7. package/SECURITY.md +31 -0
  8. package/STRATEGY.md +26 -0
  9. package/bin/cli.js +547 -0
  10. package/lib/packs.js +184 -0
  11. package/package.json +38 -0
  12. package/python/app/__init__.py +0 -0
  13. package/python/app/__pycache__/__init__.cpython-312.pyc +0 -0
  14. package/python/app/__pycache__/auth.cpython-312.pyc +0 -0
  15. package/python/app/__pycache__/main.cpython-312.pyc +0 -0
  16. package/python/app/auth.py +63 -0
  17. package/python/app/cli.py +78 -0
  18. package/python/app/db_paths.py +26 -0
  19. package/python/app/events_cli.py +175 -0
  20. package/python/app/main.py +647 -0
  21. package/python/app/materialize.py +138 -0
  22. package/python/app/mcp_server.py +610 -0
  23. package/python/app/route_cli.py +117 -0
  24. package/python/requirements-dev.txt +1 -0
  25. package/python/requirements.txt +7 -0
  26. package/python/tests/test_db_paths.py +41 -0
  27. package/skills/accessibility/SKILL.md +145 -0
  28. package/skills/agent-architecture-audit/SKILL.md +256 -0
  29. package/skills/agent-eval/SKILL.md +144 -0
  30. package/skills/agent-harness-construction/SKILL.md +72 -0
  31. package/skills/agent-introspection-debugging/SKILL.md +152 -0
  32. package/skills/agent-payment-x402/SKILL.md +224 -0
  33. package/skills/agent-sort/SKILL.md +214 -0
  34. package/skills/agentic-engineering/SKILL.md +62 -0
  35. package/skills/agentic-os/SKILL.md +386 -0
  36. package/skills/ai-first-engineering/SKILL.md +50 -0
  37. package/skills/ai-regression-testing/SKILL.md +384 -0
  38. package/skills/android-clean-architecture/SKILL.md +338 -0
  39. package/skills/angular-developer/SKILL.md +153 -0
  40. package/skills/angular-developer/references/angular-animations.md +160 -0
  41. package/skills/angular-developer/references/angular-aria.md +410 -0
  42. package/skills/angular-developer/references/cli.md +86 -0
  43. package/skills/angular-developer/references/component-harnesses.md +59 -0
  44. package/skills/angular-developer/references/component-styling.md +91 -0
  45. package/skills/angular-developer/references/components.md +117 -0
  46. package/skills/angular-developer/references/creating-services.md +97 -0
  47. package/skills/angular-developer/references/data-resolvers.md +69 -0
  48. package/skills/angular-developer/references/define-routes.md +67 -0
  49. package/skills/angular-developer/references/defining-providers.md +72 -0
  50. package/skills/angular-developer/references/di-fundamentals.md +120 -0
  51. package/skills/angular-developer/references/e2e-testing.md +56 -0
  52. package/skills/angular-developer/references/effects.md +83 -0
  53. package/skills/angular-developer/references/hierarchical-injectors.md +43 -0
  54. package/skills/angular-developer/references/host-elements.md +80 -0
  55. package/skills/angular-developer/references/injection-context.md +63 -0
  56. package/skills/angular-developer/references/inputs.md +101 -0
  57. package/skills/angular-developer/references/linked-signal.md +59 -0
  58. package/skills/angular-developer/references/loading-strategies.md +61 -0
  59. package/skills/angular-developer/references/mcp.md +108 -0
  60. package/skills/angular-developer/references/navigate-to-routes.md +69 -0
  61. package/skills/angular-developer/references/outputs.md +86 -0
  62. package/skills/angular-developer/references/reactive-forms.md +122 -0
  63. package/skills/angular-developer/references/rendering-strategies.md +44 -0
  64. package/skills/angular-developer/references/resource.md +77 -0
  65. package/skills/angular-developer/references/route-animations.md +56 -0
  66. package/skills/angular-developer/references/route-guards.md +52 -0
  67. package/skills/angular-developer/references/router-lifecycle.md +45 -0
  68. package/skills/angular-developer/references/router-testing.md +87 -0
  69. package/skills/angular-developer/references/show-routes-with-outlets.md +68 -0
  70. package/skills/angular-developer/references/signal-forms.md +795 -0
  71. package/skills/angular-developer/references/signals-overview.md +94 -0
  72. package/skills/angular-developer/references/tailwind-css.md +69 -0
  73. package/skills/angular-developer/references/template-driven-forms.md +114 -0
  74. package/skills/angular-developer/references/testing-fundamentals.md +65 -0
  75. package/skills/api-connector-builder/SKILL.md +120 -0
  76. package/skills/api-design/SKILL.md +522 -0
  77. package/skills/architecture-decision-records/SKILL.md +178 -0
  78. package/skills/article-writing/SKILL.md +78 -0
  79. package/skills/automation-audit-ops/SKILL.md +141 -0
  80. package/skills/autonomous-agent-harness/SKILL.md +272 -0
  81. package/skills/autonomous-loops/SKILL.md +609 -0
  82. package/skills/backend-patterns/SKILL.md +560 -0
  83. package/skills/benchmark/SKILL.md +92 -0
  84. package/skills/blueprint/SKILL.md +104 -0
  85. package/skills/browser-qa/SKILL.md +86 -0
  86. package/skills/bun-runtime/SKILL.md +83 -0
  87. package/skills/canary-watch/SKILL.md +98 -0
  88. package/skills/carrier-relationship-management/SKILL.md +211 -0
  89. package/skills/cisco-ios-patterns/SKILL.md +163 -0
  90. package/skills/ck/SKILL.md +147 -0
  91. package/skills/ck/commands/forget.mjs +44 -0
  92. package/skills/ck/commands/info.mjs +24 -0
  93. package/skills/ck/commands/init.mjs +143 -0
  94. package/skills/ck/commands/list.mjs +40 -0
  95. package/skills/ck/commands/migrate.mjs +202 -0
  96. package/skills/ck/commands/resume.mjs +36 -0
  97. package/skills/ck/commands/save.mjs +210 -0
  98. package/skills/ck/commands/shared.mjs +387 -0
  99. package/skills/ck/hooks/session-start.mjs +224 -0
  100. package/skills/claude-devfleet/SKILL.md +103 -0
  101. package/skills/click-path-audit/SKILL.md +244 -0
  102. package/skills/clickhouse-io/SKILL.md +438 -0
  103. package/skills/code-tour/SKILL.md +235 -0
  104. package/skills/codebase-onboarding/SKILL.md +232 -0
  105. package/skills/coding-standards/SKILL.md +548 -0
  106. package/skills/compose-multiplatform-patterns/SKILL.md +298 -0
  107. package/skills/connections-optimizer/SKILL.md +188 -0
  108. package/skills/content-engine/SKILL.md +126 -0
  109. package/skills/content-hash-cache-pattern/SKILL.md +160 -0
  110. package/skills/context-budget/SKILL.md +134 -0
  111. package/skills/continuous-agent-loop/SKILL.md +44 -0
  112. package/skills/continuous-learning/SKILL.md +129 -0
  113. package/skills/continuous-learning/config.json +18 -0
  114. package/skills/continuous-learning/evaluate-session.sh +69 -0
  115. package/skills/continuous-learning-v2/SKILL.md +358 -0
  116. package/skills/continuous-learning-v2/agents/observer-loop.sh +322 -0
  117. package/skills/continuous-learning-v2/agents/observer.md +198 -0
  118. package/skills/continuous-learning-v2/agents/session-guardian.sh +150 -0
  119. package/skills/continuous-learning-v2/agents/start-observer.sh +248 -0
  120. package/skills/continuous-learning-v2/config.json +8 -0
  121. package/skills/continuous-learning-v2/hooks/observe.sh +476 -0
  122. package/skills/continuous-learning-v2/scripts/detect-project.sh +288 -0
  123. package/skills/continuous-learning-v2/scripts/instinct-cli.py +1519 -0
  124. package/skills/continuous-learning-v2/scripts/lib/homunculus-dir.sh +31 -0
  125. package/skills/continuous-learning-v2/scripts/migrate-homunculus.sh +62 -0
  126. package/skills/continuous-learning-v2/scripts/test_parse_instinct.py +1018 -0
  127. package/skills/cost-aware-llm-pipeline/SKILL.md +182 -0
  128. package/skills/cost-tracking/SKILL.md +147 -0
  129. package/skills/council/SKILL.md +202 -0
  130. package/skills/cpp-coding-standards/SKILL.md +722 -0
  131. package/skills/cpp-testing/SKILL.md +323 -0
  132. package/skills/crosspost/SKILL.md +110 -0
  133. package/skills/csharp-testing/SKILL.md +320 -0
  134. package/skills/customer-billing-ops/SKILL.md +139 -0
  135. package/skills/customs-trade-compliance/SKILL.md +262 -0
  136. package/skills/dart-flutter-patterns/SKILL.md +562 -0
  137. package/skills/dashboard-builder/SKILL.md +108 -0
  138. package/skills/data-scraper-agent/SKILL.md +764 -0
  139. package/skills/database-migrations/SKILL.md +428 -0
  140. package/skills/deep-research/SKILL.md +158 -0
  141. package/skills/defi-amm-security/SKILL.md +166 -0
  142. package/skills/deployment-patterns/SKILL.md +426 -0
  143. package/skills/design-system/SKILL.md +81 -0
  144. package/skills/django-celery/SKILL.md +456 -0
  145. package/skills/django-patterns/SKILL.md +733 -0
  146. package/skills/django-security/SKILL.md +592 -0
  147. package/skills/django-tdd/SKILL.md +728 -0
  148. package/skills/django-verification/SKILL.md +468 -0
  149. package/skills/dmux-workflows/SKILL.md +190 -0
  150. package/skills/docker-patterns/SKILL.md +363 -0
  151. package/skills/documentation-lookup/SKILL.md +89 -0
  152. package/skills/dotnet-patterns/SKILL.md +320 -0
  153. package/skills/e2e-testing/SKILL.md +325 -0
  154. package/skills/email-ops/SKILL.md +120 -0
  155. package/skills/energy-procurement/SKILL.md +227 -0
  156. package/skills/enterprise-agent-ops/SKILL.md +49 -0
  157. package/skills/error-handling/SKILL.md +375 -0
  158. package/skills/eval-harness/SKILL.md +269 -0
  159. package/skills/evm-token-decimals/SKILL.md +130 -0
  160. package/skills/exa-search/SKILL.md +106 -0
  161. package/skills/fal-ai-media/SKILL.md +287 -0
  162. package/skills/fastapi-patterns/SKILL.md +327 -0
  163. package/skills/finance-billing-ops/SKILL.md +126 -0
  164. package/skills/flox-environments/SKILL.md +496 -0
  165. package/skills/flutter-dart-code-review/SKILL.md +434 -0
  166. package/skills/foundation-models-on-device/SKILL.md +243 -0
  167. package/skills/frontend-design-direction/SKILL.md +92 -0
  168. package/skills/frontend-patterns/SKILL.md +641 -0
  169. package/skills/frontend-slides/SKILL.md +183 -0
  170. package/skills/frontend-slides/STYLE_PRESETS.md +330 -0
  171. package/skills/frontend-slides/animation-patterns.md +122 -0
  172. package/skills/frontend-slides/html-template.md +419 -0
  173. package/skills/frontend-slides/scripts/export-pdf.sh +418 -0
  174. package/skills/frontend-slides/scripts/extract-pptx.py +96 -0
  175. package/skills/frontend-slides/viewport-base.css +153 -0
  176. package/skills/fsharp-testing/SKILL.md +279 -0
  177. package/skills/gan-style-harness/SKILL.md +278 -0
  178. package/skills/gateguard/SKILL.md +125 -0
  179. package/skills/git-workflow/SKILL.md +714 -0
  180. package/skills/github-ops/SKILL.md +143 -0
  181. package/skills/golang-patterns/SKILL.md +673 -0
  182. package/skills/golang-testing/SKILL.md +719 -0
  183. package/skills/google-workspace-ops/SKILL.md +94 -0
  184. package/skills/healthcare-cdss-patterns/SKILL.md +245 -0
  185. package/skills/healthcare-emr-patterns/SKILL.md +159 -0
  186. package/skills/healthcare-eval-harness/SKILL.md +207 -0
  187. package/skills/healthcare-phi-compliance/SKILL.md +145 -0
  188. package/skills/hermes-imports/SKILL.md +87 -0
  189. package/skills/hexagonal-architecture/SKILL.md +275 -0
  190. package/skills/hipaa-compliance/SKILL.md +78 -0
  191. package/skills/homelab-network-readiness/SKILL.md +169 -0
  192. package/skills/homelab-network-setup/SKILL.md +129 -0
  193. package/skills/homelab-pihole-dns/SKILL.md +274 -0
  194. package/skills/homelab-vlan-segmentation/SKILL.md +311 -0
  195. package/skills/homelab-wireguard-vpn/SKILL.md +305 -0
  196. package/skills/hookify-rules/SKILL.md +128 -0
  197. package/skills/inventory-demand-planning/SKILL.md +246 -0
  198. package/skills/investor-materials/SKILL.md +95 -0
  199. package/skills/investor-outreach/SKILL.md +90 -0
  200. package/skills/ios-icon-gen/SKILL.md +157 -0
  201. package/skills/ios-icon-gen/scripts/generate_icons.swift +258 -0
  202. package/skills/ios-icon-gen/scripts/iconify_gen.sh +235 -0
  203. package/skills/iterative-retrieval/SKILL.md +209 -0
  204. package/skills/java-coding-standards/SKILL.md +382 -0
  205. package/skills/jira-integration/SKILL.md +292 -0
  206. package/skills/jpa-patterns/SKILL.md +150 -0
  207. package/skills/knowledge-ops/SKILL.md +153 -0
  208. package/skills/kotlin-coroutines-flows/SKILL.md +283 -0
  209. package/skills/kotlin-exposed-patterns/SKILL.md +718 -0
  210. package/skills/kotlin-ktor-patterns/SKILL.md +688 -0
  211. package/skills/kotlin-patterns/SKILL.md +710 -0
  212. package/skills/kotlin-testing/SKILL.md +823 -0
  213. package/skills/laravel-patterns/SKILL.md +414 -0
  214. package/skills/laravel-plugin-discovery/SKILL.md +228 -0
  215. package/skills/laravel-security/SKILL.md +284 -0
  216. package/skills/laravel-tdd/SKILL.md +282 -0
  217. package/skills/laravel-verification/SKILL.md +178 -0
  218. package/skills/lead-intelligence/SKILL.md +320 -0
  219. package/skills/lead-intelligence/agents/enrichment-agent.md +85 -0
  220. package/skills/lead-intelligence/agents/mutual-mapper.md +75 -0
  221. package/skills/lead-intelligence/agents/outreach-drafter.md +98 -0
  222. package/skills/lead-intelligence/agents/signal-scorer.md +60 -0
  223. package/skills/liquid-glass-design/SKILL.md +279 -0
  224. package/skills/llm-trading-agent-security/SKILL.md +146 -0
  225. package/skills/logistics-exception-management/SKILL.md +221 -0
  226. package/skills/make-interfaces-feel-better/SKILL.md +151 -0
  227. package/skills/manim-video/SKILL.md +88 -0
  228. package/skills/manim-video/assets/network_graph_scene.py +52 -0
  229. package/skills/market-research/SKILL.md +74 -0
  230. package/skills/mcp-server-patterns/SKILL.md +68 -0
  231. package/skills/messages-ops/SKILL.md +103 -0
  232. package/skills/mle-workflow/SKILL.md +345 -0
  233. package/skills/motion-advanced/SKILL.md +596 -0
  234. package/skills/motion-foundations/SKILL.md +299 -0
  235. package/skills/motion-patterns/SKILL.md +435 -0
  236. package/skills/motion-ui/SKILL.md +574 -0
  237. package/skills/mysql-patterns/SKILL.md +411 -0
  238. package/skills/nanoclaw-repl/SKILL.md +32 -0
  239. package/skills/nestjs-patterns/SKILL.md +229 -0
  240. package/skills/netmiko-ssh-automation/SKILL.md +173 -0
  241. package/skills/network-bgp-diagnostics/SKILL.md +167 -0
  242. package/skills/network-config-validation/SKILL.md +210 -0
  243. package/skills/network-interface-health/SKILL.md +152 -0
  244. package/skills/nextjs-turbopack/SKILL.md +43 -0
  245. package/skills/nodejs-keccak256/SKILL.md +102 -0
  246. package/skills/nutrient-document-processing/SKILL.md +166 -0
  247. package/skills/nuxt4-patterns/SKILL.md +99 -0
  248. package/skills/openclaw-persona-forge/SKILL.md +288 -0
  249. package/skills/openclaw-persona-forge/gacha.py +224 -0
  250. package/skills/openclaw-persona-forge/gacha.sh +5 -0
  251. package/skills/openclaw-persona-forge/references/avatar-style.md +124 -0
  252. package/skills/openclaw-persona-forge/references/boundary-rules.md +53 -0
  253. package/skills/openclaw-persona-forge/references/error-handling.md +53 -0
  254. package/skills/openclaw-persona-forge/references/identity-tension.md +48 -0
  255. package/skills/openclaw-persona-forge/references/naming-system.md +39 -0
  256. package/skills/openclaw-persona-forge/references/output-template.md +166 -0
  257. package/skills/opensource-pipeline/SKILL.md +254 -0
  258. package/skills/perl-patterns/SKILL.md +503 -0
  259. package/skills/perl-security/SKILL.md +502 -0
  260. package/skills/perl-testing/SKILL.md +474 -0
  261. package/skills/plan-orchestrate/SKILL.md +253 -0
  262. package/skills/plankton-code-quality/SKILL.md +236 -0
  263. package/skills/postgres-patterns/SKILL.md +146 -0
  264. package/skills/product-capability/SKILL.md +140 -0
  265. package/skills/product-lens/SKILL.md +91 -0
  266. package/skills/production-audit/SKILL.md +206 -0
  267. package/skills/production-scheduling/SKILL.md +237 -0
  268. package/skills/project-flow-ops/SKILL.md +110 -0
  269. package/skills/prompt-optimizer/SKILL.md +398 -0
  270. package/skills/python-patterns/SKILL.md +749 -0
  271. package/skills/python-testing/SKILL.md +815 -0
  272. package/skills/pytorch-patterns/SKILL.md +395 -0
  273. package/skills/quality-nonconformance/SKILL.md +259 -0
  274. package/skills/quarkus-patterns/SKILL.md +721 -0
  275. package/skills/quarkus-security/SKILL.md +466 -0
  276. package/skills/quarkus-tdd/SKILL.md +810 -0
  277. package/skills/quarkus-verification/SKILL.md +478 -0
  278. package/skills/ralphinho-rfc-pipeline/SKILL.md +66 -0
  279. package/skills/redis-patterns/SKILL.md +402 -0
  280. package/skills/regex-vs-llm-structured-text/SKILL.md +219 -0
  281. package/skills/remotion-video-creation/SKILL.md +43 -0
  282. package/skills/remotion-video-creation/rules/3d.md +86 -0
  283. package/skills/remotion-video-creation/rules/animations.md +29 -0
  284. package/skills/remotion-video-creation/rules/assets/charts-bar-chart.tsx +173 -0
  285. package/skills/remotion-video-creation/rules/assets/text-animations-typewriter.tsx +100 -0
  286. package/skills/remotion-video-creation/rules/assets/text-animations-word-highlight.tsx +108 -0
  287. package/skills/remotion-video-creation/rules/assets.md +78 -0
  288. package/skills/remotion-video-creation/rules/audio.md +172 -0
  289. package/skills/remotion-video-creation/rules/calculate-metadata.md +104 -0
  290. package/skills/remotion-video-creation/rules/can-decode.md +75 -0
  291. package/skills/remotion-video-creation/rules/charts.md +58 -0
  292. package/skills/remotion-video-creation/rules/compositions.md +146 -0
  293. package/skills/remotion-video-creation/rules/display-captions.md +126 -0
  294. package/skills/remotion-video-creation/rules/extract-frames.md +229 -0
  295. package/skills/remotion-video-creation/rules/fonts.md +152 -0
  296. package/skills/remotion-video-creation/rules/get-audio-duration.md +58 -0
  297. package/skills/remotion-video-creation/rules/get-video-dimensions.md +68 -0
  298. package/skills/remotion-video-creation/rules/get-video-duration.md +58 -0
  299. package/skills/remotion-video-creation/rules/gifs.md +138 -0
  300. package/skills/remotion-video-creation/rules/images.md +130 -0
  301. package/skills/remotion-video-creation/rules/import-srt-captions.md +67 -0
  302. package/skills/remotion-video-creation/rules/lottie.md +67 -0
  303. package/skills/remotion-video-creation/rules/measuring-dom-nodes.md +34 -0
  304. package/skills/remotion-video-creation/rules/measuring-text.md +143 -0
  305. package/skills/remotion-video-creation/rules/sequencing.md +106 -0
  306. package/skills/remotion-video-creation/rules/tailwind.md +11 -0
  307. package/skills/remotion-video-creation/rules/text-animations.md +20 -0
  308. package/skills/remotion-video-creation/rules/timing.md +179 -0
  309. package/skills/remotion-video-creation/rules/transcribe-captions.md +19 -0
  310. package/skills/remotion-video-creation/rules/transitions.md +122 -0
  311. package/skills/remotion-video-creation/rules/trimming.md +52 -0
  312. package/skills/remotion-video-creation/rules/videos.md +171 -0
  313. package/skills/repo-scan/SKILL.md +78 -0
  314. package/skills/research-ops/SKILL.md +111 -0
  315. package/skills/returns-reverse-logistics/SKILL.md +239 -0
  316. package/skills/rules-distill/SKILL.md +263 -0
  317. package/skills/rules-distill/scripts/scan-rules.sh +58 -0
  318. package/skills/rules-distill/scripts/scan-skills.sh +129 -0
  319. package/skills/rust-patterns/SKILL.md +498 -0
  320. package/skills/rust-testing/SKILL.md +499 -0
  321. package/skills/safety-guard/SKILL.md +74 -0
  322. package/skills/santa-method/SKILL.md +306 -0
  323. package/skills/scientific-db-pubmed-database/SKILL.md +175 -0
  324. package/skills/scientific-db-uspto-database/SKILL.md +177 -0
  325. package/skills/scientific-pkg-gget/SKILL.md +166 -0
  326. package/skills/scientific-thinking-literature-review/SKILL.md +192 -0
  327. package/skills/scientific-thinking-scholar-evaluation/SKILL.md +160 -0
  328. package/skills/search-first/SKILL.md +181 -0
  329. package/skills/security-bounty-hunter/SKILL.md +99 -0
  330. package/skills/security-review/SKILL.md +502 -0
  331. package/skills/security-review/cloud-infrastructure-security.md +361 -0
  332. package/skills/seo/SKILL.md +153 -0
  333. package/skills/skill-comply/SKILL.md +57 -0
  334. package/skills/skill-comply/fixtures/compliant_trace.jsonl +5 -0
  335. package/skills/skill-comply/fixtures/noncompliant_trace.jsonl +3 -0
  336. package/skills/skill-comply/fixtures/tdd_spec.yaml +44 -0
  337. package/skills/skill-comply/prompts/classifier.md +24 -0
  338. package/skills/skill-comply/prompts/scenario_generator.md +62 -0
  339. package/skills/skill-comply/prompts/spec_generator.md +42 -0
  340. package/skills/skill-comply/pyproject.toml +15 -0
  341. package/skills/skill-comply/scripts/__init__.py +0 -0
  342. package/skills/skill-comply/scripts/classifier.py +85 -0
  343. package/skills/skill-comply/scripts/grader.py +124 -0
  344. package/skills/skill-comply/scripts/parser.py +107 -0
  345. package/skills/skill-comply/scripts/report.py +170 -0
  346. package/skills/skill-comply/scripts/run.py +127 -0
  347. package/skills/skill-comply/scripts/runner.py +186 -0
  348. package/skills/skill-comply/scripts/scenario_generator.py +70 -0
  349. package/skills/skill-comply/scripts/spec_generator.py +72 -0
  350. package/skills/skill-comply/scripts/utils.py +13 -0
  351. package/skills/skill-comply/tests/test_grader.py +197 -0
  352. package/skills/skill-comply/tests/test_parser.py +90 -0
  353. package/skills/skill-comply/tests/test_runner.py +172 -0
  354. package/skills/skill-scout/SKILL.md +139 -0
  355. package/skills/skill-stocktake/SKILL.md +193 -0
  356. package/skills/skill-stocktake/scripts/quick-diff.sh +87 -0
  357. package/skills/skill-stocktake/scripts/save-results.sh +56 -0
  358. package/skills/skill-stocktake/scripts/scan.sh +170 -0
  359. package/skills/social-graph-ranker/SKILL.md +153 -0
  360. package/skills/springboot-patterns/SKILL.md +313 -0
  361. package/skills/springboot-security/SKILL.md +271 -0
  362. package/skills/springboot-tdd/SKILL.md +157 -0
  363. package/skills/springboot-verification/SKILL.md +230 -0
  364. package/skills/strategic-compact/SKILL.md +129 -0
  365. package/skills/strategic-compact/suggest-compact.sh +54 -0
  366. package/skills/swift-actor-persistence/SKILL.md +142 -0
  367. package/skills/swift-concurrency-6-2/SKILL.md +216 -0
  368. package/skills/swift-protocol-di-testing/SKILL.md +189 -0
  369. package/skills/swiftui-patterns/SKILL.md +259 -0
  370. package/skills/tdd-workflow/SKILL.md +462 -0
  371. package/skills/team-builder/SKILL.md +166 -0
  372. package/skills/terminal-ops/SKILL.md +108 -0
  373. package/skills/tinystruct-patterns/SKILL.md +130 -0
  374. package/skills/tinystruct-patterns/references/architecture.md +77 -0
  375. package/skills/tinystruct-patterns/references/data-handling.md +35 -0
  376. package/skills/tinystruct-patterns/references/routing.md +57 -0
  377. package/skills/tinystruct-patterns/references/system-usage.md +74 -0
  378. package/skills/tinystruct-patterns/references/testing.md +59 -0
  379. package/skills/token-budget-advisor/SKILL.md +133 -0
  380. package/skills/ui-demo/SKILL.md +464 -0
  381. package/skills/ui-to-vue/SKILL.md +134 -0
  382. package/skills/unified-notifications-ops/SKILL.md +186 -0
  383. package/skills/verification-loop/SKILL.md +125 -0
  384. package/skills/video-editing/SKILL.md +309 -0
  385. package/skills/videodb/SKILL.md +373 -0
  386. package/skills/videodb/reference/api-reference.md +550 -0
  387. package/skills/videodb/reference/capture-reference.md +407 -0
  388. package/skills/videodb/reference/capture.md +101 -0
  389. package/skills/videodb/reference/editor.md +443 -0
  390. package/skills/videodb/reference/generative.md +331 -0
  391. package/skills/videodb/reference/rtstream-reference.md +564 -0
  392. package/skills/videodb/reference/rtstream.md +65 -0
  393. package/skills/videodb/reference/search.md +230 -0
  394. package/skills/videodb/reference/streaming.md +406 -0
  395. package/skills/videodb/reference/use-cases.md +118 -0
  396. package/skills/videodb/scripts/ws_listener.py +282 -0
  397. package/skills/visa-doc-translate/README.md +86 -0
  398. package/skills/visa-doc-translate/SKILL.md +117 -0
  399. package/skills/vite-patterns/SKILL.md +448 -0
  400. package/skills/windows-desktop-e2e/SKILL.md +787 -0
  401. package/skills/workspace-surface-audit/SKILL.md +124 -0
  402. package/skills/x-api/SKILL.md +233 -0
@@ -0,0 +1,434 @@
1
+ ---
2
+ name: flutter-dart-code-review
3
+ description: Library-agnostic Flutter/Dart code review checklist covering widget best practices, state management patterns (BLoC, Riverpod, Provider, GetX, MobX, Signals), Dart idioms, performance, accessibility, security, and clean architecture.
4
+ ---
5
+
6
+ # Flutter/Dart Code Review Best Practices
7
+
8
+ Comprehensive, library-agnostic checklist for reviewing Flutter/Dart applications. These principles apply regardless of which state management solution, routing library, or DI framework is used.
9
+
10
+ ---
11
+
12
+ ## 1. General Project Health
13
+
14
+ - [ ] Project follows consistent folder structure (feature-first or layer-first)
15
+ - [ ] Proper separation of concerns: UI, business logic, data layers
16
+ - [ ] No business logic in widgets; widgets are purely presentational
17
+ - [ ] `pubspec.yaml` is clean — no unused dependencies, versions pinned appropriately
18
+ - [ ] `analysis_options.yaml` includes a strict lint set with strict analyzer settings enabled
19
+ - [ ] No `print()` statements in production code — use `dart:developer` `log()` or a logging package
20
+ - [ ] Generated files (`.g.dart`, `.freezed.dart`, `.gr.dart`) are up-to-date or in `.gitignore`
21
+ - [ ] Platform-specific code isolated behind abstractions
22
+
23
+ ---
24
+
25
+ ## 2. Dart Language Pitfalls
26
+
27
+ - [ ] **Implicit dynamic**: Missing type annotations leading to `dynamic` — enable `strict-casts`, `strict-inference`, `strict-raw-types`
28
+ - [ ] **Null safety misuse**: Excessive `!` (bang operator) instead of proper null checks or Dart 3 pattern matching (`if (value case var v?)`)
29
+ - [ ] **Type promotion failures**: Using `this.field` where local variable promotion would work
30
+ - [ ] **Catching too broadly**: `catch (e)` without `on` clause; always specify exception types
31
+ - [ ] **Catching `Error`**: `Error` subtypes indicate bugs and should not be caught
32
+ - [ ] **Unused `async`**: Functions marked `async` that never `await` — unnecessary overhead
33
+ - [ ] **`late` overuse**: `late` used where nullable or constructor initialization would be safer; defers errors to runtime
34
+ - [ ] **String concatenation in loops**: Use `StringBuffer` instead of `+` for iterative string building
35
+ - [ ] **Mutable state in `const` contexts**: Fields in `const` constructor classes should not be mutable
36
+ - [ ] **Ignoring `Future` return values**: Use `await` or explicitly call `unawaited()` to signal intent
37
+ - [ ] **`var` where `final` works**: Prefer `final` for locals and `const` for compile-time constants
38
+ - [ ] **Relative imports**: Use `package:` imports for consistency
39
+ - [ ] **Mutable collections exposed**: Public APIs should return unmodifiable views, not raw `List`/`Map`
40
+ - [ ] **Missing Dart 3 pattern matching**: Prefer switch expressions and `if-case` over verbose `is` checks and manual casting
41
+ - [ ] **Throwaway classes for multiple returns**: Use Dart 3 records `(String, int)` instead of single-use DTOs
42
+ - [ ] **`print()` in production code**: Use `dart:developer` `log()` or the project's logging package; `print()` has no log levels and cannot be filtered
43
+
44
+ ---
45
+
46
+ ## 3. Widget Best Practices
47
+
48
+ ### Widget decomposition:
49
+ - [ ] No single widget with a `build()` method exceeding ~80-100 lines
50
+ - [ ] Widgets split by encapsulation AND by how they change (rebuild boundaries)
51
+ - [ ] Private `_build*()` helper methods that return widgets are extracted to separate widget classes (enables element reuse, const propagation, and framework optimizations)
52
+ - [ ] Stateless widgets preferred over Stateful where no mutable local state is needed
53
+ - [ ] Extracted widgets are in separate files when reusable
54
+
55
+ ### Const usage:
56
+ - [ ] `const` constructors used wherever possible — prevents unnecessary rebuilds
57
+ - [ ] `const` literals for collections that don't change (`const []`, `const {}`)
58
+ - [ ] Constructor is declared `const` when all fields are final
59
+
60
+ ### Key usage:
61
+ - [ ] `ValueKey` used in lists/grids to preserve state across reorders
62
+ - [ ] `GlobalKey` used sparingly — only when accessing state across the tree is truly needed
63
+ - [ ] `UniqueKey` avoided in `build()` — it forces rebuild every frame
64
+ - [ ] `ObjectKey` used when identity is based on a data object rather than a single value
65
+
66
+ ### Theming & design system:
67
+ - [ ] Colors come from `Theme.of(context).colorScheme` — no hardcoded `Colors.red` or hex values
68
+ - [ ] Text styles come from `Theme.of(context).textTheme` — no inline `TextStyle` with raw font sizes
69
+ - [ ] Dark mode compatibility verified — no assumptions about light background
70
+ - [ ] Spacing and sizing use consistent design tokens or constants, not magic numbers
71
+
72
+ ### Build method complexity:
73
+ - [ ] No network calls, file I/O, or heavy computation in `build()`
74
+ - [ ] No `Future.then()` or `async` work in `build()`
75
+ - [ ] No subscription creation (`.listen()`) in `build()`
76
+ - [ ] `setState()` localized to smallest possible subtree
77
+
78
+ ---
79
+
80
+ ## 4. State Management (Library-Agnostic)
81
+
82
+ These principles apply to all Flutter state management solutions (BLoC, Riverpod, Provider, GetX, MobX, Signals, ValueNotifier, etc.).
83
+
84
+ ### Architecture:
85
+ - [ ] Business logic lives outside the widget layer — in a state management component (BLoC, Notifier, Controller, Store, ViewModel, etc.)
86
+ - [ ] State managers receive dependencies via injection, not by constructing them internally
87
+ - [ ] A service or repository layer abstracts data sources — widgets and state managers should not call APIs or databases directly
88
+ - [ ] State managers have a single responsibility — no "god" managers handling unrelated concerns
89
+ - [ ] Cross-component dependencies follow the solution's conventions:
90
+ - In **Riverpod**: providers depending on providers via `ref.watch` is expected — flag only circular or overly tangled chains
91
+ - In **BLoC**: blocs should not directly depend on other blocs — prefer shared repositories or presentation-layer coordination
92
+ - In other solutions: follow the documented conventions for inter-component communication
93
+
94
+ ### Immutability & value equality (for immutable-state solutions: BLoC, Riverpod, Redux):
95
+ - [ ] State objects are immutable — new instances created via `copyWith()` or constructors, never mutated in-place
96
+ - [ ] State classes implement `==` and `hashCode` properly (all fields included in comparison)
97
+ - [ ] Mechanism is consistent across the project — manual override, `Equatable`, `freezed`, Dart records, or other
98
+ - [ ] Collections inside state objects are not exposed as raw mutable `List`/`Map`
99
+
100
+ ### Reactivity discipline (for reactive-mutation solutions: MobX, GetX, Signals):
101
+ - [ ] State is only mutated through the solution's reactive API (`@action` in MobX, `.value` on signals, `.obs` in GetX) — direct field mutation bypasses change tracking
102
+ - [ ] Derived values use the solution's computed mechanism rather than being stored redundantly
103
+ - [ ] Reactions and disposers are properly cleaned up (`ReactionDisposer` in MobX, effect cleanup in Signals)
104
+
105
+ ### State shape design:
106
+ - [ ] Mutually exclusive states use sealed types, union variants, or the solution's built-in async state type (e.g. Riverpod's `AsyncValue`) — not boolean flags (`isLoading`, `isError`, `hasData`)
107
+ - [ ] Every async operation models loading, success, and error as distinct states
108
+ - [ ] All state variants are handled exhaustively in UI — no silently ignored cases
109
+ - [ ] Error states carry error information for display; loading states don't carry stale data
110
+ - [ ] Nullable data is not used as a loading indicator — states are explicit
111
+
112
+ ```dart
113
+ // BAD — boolean flag soup allows impossible states
114
+ class UserState {
115
+ bool isLoading = false;
116
+ bool hasError = false; // isLoading && hasError is representable!
117
+ User? user;
118
+ }
119
+
120
+ // GOOD (immutable approach) — sealed types make impossible states unrepresentable
121
+ sealed class UserState {}
122
+ class UserInitial extends UserState {}
123
+ class UserLoading extends UserState {}
124
+ class UserLoaded extends UserState {
125
+ final User user;
126
+ const UserLoaded(this.user);
127
+ }
128
+ class UserError extends UserState {
129
+ final String message;
130
+ const UserError(this.message);
131
+ }
132
+
133
+ // GOOD (reactive approach) — observable enum + data, mutations via reactivity API
134
+ // enum UserStatus { initial, loading, loaded, error }
135
+ // Use your solution's observable/signal to wrap status and data separately
136
+ ```
137
+
138
+ ### Rebuild optimization:
139
+ - [ ] State consumer widgets (Builder, Consumer, Observer, Obx, Watch, etc.) scoped as narrow as possible
140
+ - [ ] Selectors used to rebuild only when specific fields change — not on every state emission
141
+ - [ ] `const` widgets used to stop rebuild propagation through the tree
142
+ - [ ] Computed/derived state is calculated reactively, not stored redundantly
143
+
144
+ ### Subscriptions & disposal:
145
+ - [ ] All manual subscriptions (`.listen()`) are cancelled in `dispose()` / `close()`
146
+ - [ ] Stream controllers are closed when no longer needed
147
+ - [ ] Timers are cancelled in disposal lifecycle
148
+ - [ ] Framework-managed lifecycle is preferred over manual subscription (declarative builders over `.listen()`)
149
+ - [ ] `mounted` check before `setState` in async callbacks
150
+ - [ ] `BuildContext` not used after `await` without checking `context.mounted` (Flutter 3.7+) — stale context causes crashes
151
+ - [ ] No navigation, dialogs, or scaffold messages after async gaps without verifying the widget is still mounted
152
+ - [ ] `BuildContext` never stored in singletons, state managers, or static fields
153
+
154
+ ### Local vs global state:
155
+ - [ ] Ephemeral UI state (checkbox, slider, animation) uses local state (`setState`, `ValueNotifier`)
156
+ - [ ] Shared state is lifted only as high as needed — not over-globalized
157
+ - [ ] Feature-scoped state is properly disposed when the feature is no longer active
158
+
159
+ ---
160
+
161
+ ## 5. Performance
162
+
163
+ ### Unnecessary rebuilds:
164
+ - [ ] `setState()` not called at root widget level — localize state changes
165
+ - [ ] `const` widgets used to stop rebuild propagation
166
+ - [ ] `RepaintBoundary` used around complex subtrees that repaint independently
167
+ - [ ] `AnimatedBuilder` child parameter used for subtrees independent of animation
168
+
169
+ ### Expensive operations in build():
170
+ - [ ] No sorting, filtering, or mapping large collections in `build()` — compute in state management layer
171
+ - [ ] No regex compilation in `build()`
172
+ - [ ] `MediaQuery.of(context)` usage is specific (e.g., `MediaQuery.sizeOf(context)`)
173
+
174
+ ### Image optimization:
175
+ - [ ] Network images use caching (any caching solution appropriate for the project)
176
+ - [ ] Appropriate image resolution for target device (no loading 4K images for thumbnails)
177
+ - [ ] `Image.asset` with `cacheWidth`/`cacheHeight` to decode at display size
178
+ - [ ] Placeholder and error widgets provided for network images
179
+
180
+ ### Lazy loading:
181
+ - [ ] `ListView.builder` / `GridView.builder` used instead of `ListView(children: [...])` for large or dynamic lists (concrete constructors are fine for small, static lists)
182
+ - [ ] Pagination implemented for large data sets
183
+ - [ ] Deferred loading (`deferred as`) used for heavy libraries in web builds
184
+
185
+ ### Other:
186
+ - [ ] `Opacity` widget avoided in animations — use `AnimatedOpacity` or `FadeTransition`
187
+ - [ ] Clipping avoided in animations — pre-clip images
188
+ - [ ] `operator ==` not overridden on widgets — use `const` constructors instead
189
+ - [ ] Intrinsic dimension widgets (`IntrinsicHeight`, `IntrinsicWidth`) used sparingly (extra layout pass)
190
+
191
+ ---
192
+
193
+ ## 6. Testing
194
+
195
+ ### Test types and expectations:
196
+ - [ ] **Unit tests**: Cover all business logic (state managers, repositories, utility functions)
197
+ - [ ] **Widget tests**: Cover individual widget behavior, interactions, and visual output
198
+ - [ ] **Integration tests**: Cover critical user flows end-to-end
199
+ - [ ] **Golden tests**: Pixel-perfect comparisons for design-critical UI components
200
+
201
+ ### Coverage targets:
202
+ - [ ] Aim for 80%+ line coverage on business logic
203
+ - [ ] All state transitions have corresponding tests (loading → success, loading → error, retry, etc.)
204
+ - [ ] Edge cases tested: empty states, error states, loading states, boundary values
205
+
206
+ ### Test isolation:
207
+ - [ ] External dependencies (API clients, databases, services) are mocked or faked
208
+ - [ ] Each test file tests exactly one class/unit
209
+ - [ ] Tests verify behavior, not implementation details
210
+ - [ ] Stubs define only the behavior needed for each test (minimal stubbing)
211
+ - [ ] No shared mutable state between test cases
212
+
213
+ ### Widget test quality:
214
+ - [ ] `pumpWidget` and `pump` used correctly for async operations
215
+ - [ ] `find.byType`, `find.text`, `find.byKey` used appropriately
216
+ - [ ] No flaky tests depending on timing — use `pumpAndSettle` or explicit `pump(Duration)`
217
+ - [ ] Tests run in CI and failures block merges
218
+
219
+ ---
220
+
221
+ ## 7. Accessibility
222
+
223
+ ### Semantic widgets:
224
+ - [ ] `Semantics` widget used to provide screen reader labels where automatic labels are insufficient
225
+ - [ ] `ExcludeSemantics` used for purely decorative elements
226
+ - [ ] `MergeSemantics` used to combine related widgets into a single accessible element
227
+ - [ ] Images have `semanticLabel` property set
228
+
229
+ ### Screen reader support:
230
+ - [ ] All interactive elements are focusable and have meaningful descriptions
231
+ - [ ] Focus order is logical (follows visual reading order)
232
+
233
+ ### Visual accessibility:
234
+ - [ ] Contrast ratio >= 4.5:1 for text against background
235
+ - [ ] Tappable targets are at least 48x48 pixels
236
+ - [ ] Color is not the sole indicator of state (use icons/text alongside)
237
+ - [ ] Text scales with system font size settings
238
+
239
+ ### Interaction accessibility:
240
+ - [ ] No no-op `onPressed` callbacks — every button does something or is disabled
241
+ - [ ] Error fields suggest corrections
242
+ - [ ] Context does not change unexpectedly while user is inputting data
243
+
244
+ ---
245
+
246
+ ## 8. Platform-Specific Concerns
247
+
248
+ ### iOS/Android differences:
249
+ - [ ] Platform-adaptive widgets used where appropriate
250
+ - [ ] Back navigation handled correctly (Android back button, iOS swipe-to-go-back)
251
+ - [ ] Status bar and safe area handled via `SafeArea` widget
252
+ - [ ] Platform-specific permissions declared in `AndroidManifest.xml` and `Info.plist`
253
+
254
+ ### Responsive design:
255
+ - [ ] `LayoutBuilder` or `MediaQuery` used for responsive layouts
256
+ - [ ] Breakpoints defined consistently (phone, tablet, desktop)
257
+ - [ ] Text doesn't overflow on small screens — use `Flexible`, `Expanded`, `FittedBox`
258
+ - [ ] Landscape orientation tested or explicitly locked
259
+ - [ ] Web-specific: mouse/keyboard interactions supported, hover states present
260
+
261
+ ---
262
+
263
+ ## 9. Security
264
+
265
+ ### Secure storage:
266
+ - [ ] Sensitive data (tokens, credentials) stored using platform-secure storage (Keychain on iOS, EncryptedSharedPreferences on Android)
267
+ - [ ] Never store secrets in plaintext storage
268
+ - [ ] Biometric authentication gating considered for sensitive operations
269
+
270
+ ### API key handling:
271
+ - [ ] API keys NOT hardcoded in Dart source — use `--dart-define`, `.env` files excluded from VCS, or compile-time configuration
272
+ - [ ] Secrets not committed to git — check `.gitignore`
273
+ - [ ] Backend proxy used for truly secret keys (client should never hold server secrets)
274
+
275
+ ### Input validation:
276
+ - [ ] All user input validated before sending to API
277
+ - [ ] Form validation uses proper validation patterns
278
+ - [ ] No raw SQL or string interpolation of user input
279
+ - [ ] Deep link URLs validated and sanitized before navigation
280
+
281
+ ### Network security:
282
+ - [ ] HTTPS enforced for all API calls
283
+ - [ ] Certificate pinning considered for high-security apps
284
+ - [ ] Authentication tokens refreshed and expired properly
285
+ - [ ] No sensitive data logged or printed
286
+
287
+ ---
288
+
289
+ ## 10. Package/Dependency Review
290
+
291
+ ### Evaluating pub.dev packages:
292
+ - [ ] Check **pub points score** (aim for 130+/160)
293
+ - [ ] Check **likes** and **popularity** as community signals
294
+ - [ ] Verify the publisher is **verified** on pub.dev
295
+ - [ ] Check last publish date — stale packages (>1 year) are a risk
296
+ - [ ] Review open issues and response time from maintainers
297
+ - [ ] Check license compatibility with your project
298
+ - [ ] Verify platform support covers your targets
299
+
300
+ ### Version constraints:
301
+ - [ ] Use caret syntax (`^1.2.3`) for dependencies — allows compatible updates
302
+ - [ ] Pin exact versions only when absolutely necessary
303
+ - [ ] Run `flutter pub outdated` regularly to track stale dependencies
304
+ - [ ] No dependency overrides in production `pubspec.yaml` — only for temporary fixes with a comment/issue link
305
+ - [ ] Minimize transitive dependency count — each dependency is an attack surface
306
+
307
+ ### Monorepo-specific (melos/workspace):
308
+ - [ ] Internal packages import only from public API — no `package:other/src/internal.dart` (breaks Dart package encapsulation)
309
+ - [ ] Internal package dependencies use workspace resolution, not hardcoded `path: ../../` relative strings
310
+ - [ ] All sub-packages share or inherit root `analysis_options.yaml`
311
+
312
+ ---
313
+
314
+ ## 11. Navigation and Routing
315
+
316
+ ### General principles (apply to any routing solution):
317
+ - [ ] One routing approach used consistently — no mixing imperative `Navigator.push` with a declarative router
318
+ - [ ] Route arguments are typed — no `Map<String, dynamic>` or `Object?` casting
319
+ - [ ] Route paths defined as constants, enums, or generated — no magic strings scattered in code
320
+ - [ ] Auth guards/redirects centralized — not duplicated across individual screens
321
+ - [ ] Deep links configured for both Android and iOS
322
+ - [ ] Deep link URLs validated and sanitized before navigation
323
+ - [ ] Navigation state is testable — route changes can be verified in tests
324
+ - [ ] Back behavior is correct on all platforms
325
+
326
+ ---
327
+
328
+ ## 12. Error Handling
329
+
330
+ ### Framework error handling:
331
+ - [ ] `FlutterError.onError` overridden to capture framework errors (build, layout, paint)
332
+ - [ ] `PlatformDispatcher.instance.onError` set for async errors not caught by Flutter
333
+ - [ ] `ErrorWidget.builder` customized for release mode (user-friendly instead of red screen)
334
+ - [ ] Global error capture wrapper around `runApp` (e.g., `runZonedGuarded`, Sentry/Crashlytics wrapper)
335
+
336
+ ### Error reporting:
337
+ - [ ] Error reporting service integrated (Firebase Crashlytics, Sentry, or equivalent)
338
+ - [ ] Non-fatal errors reported with stack traces
339
+ - [ ] State management error observer wired to error reporting (e.g., BlocObserver, ProviderObserver, or equivalent for your solution)
340
+ - [ ] User-identifiable info (user ID) attached to error reports for debugging
341
+
342
+ ### Graceful degradation:
343
+ - [ ] API errors result in user-friendly error UI, not crashes
344
+ - [ ] Retry mechanisms for transient network failures
345
+ - [ ] Offline state handled gracefully
346
+ - [ ] Error states in state management carry error info for display
347
+ - [ ] Raw exceptions (network, parsing) are mapped to user-friendly, localized messages before reaching the UI — never show raw exception strings to users
348
+
349
+ ---
350
+
351
+ ## 13. Internationalization (l10n)
352
+
353
+ ### Setup:
354
+ - [ ] Localization solution configured (Flutter's built-in ARB/l10n, easy_localization, or equivalent)
355
+ - [ ] Supported locales declared in app configuration
356
+
357
+ ### Content:
358
+ - [ ] All user-visible strings use the localization system — no hardcoded strings in widgets
359
+ - [ ] Template file includes descriptions/context for translators
360
+ - [ ] ICU message syntax used for plurals, genders, selects
361
+ - [ ] Placeholders defined with types
362
+ - [ ] No missing keys across locales
363
+
364
+ ### Code review:
365
+ - [ ] Localization accessor used consistently throughout the project
366
+ - [ ] Date, time, number, and currency formatting is locale-aware
367
+ - [ ] Text directionality (RTL) supported if targeting Arabic, Hebrew, etc.
368
+ - [ ] No string concatenation for localized text — use parameterized messages
369
+
370
+ ---
371
+
372
+ ## 14. Dependency Injection
373
+
374
+ ### Principles (apply to any DI approach):
375
+ - [ ] Classes depend on abstractions (interfaces), not concrete implementations at layer boundaries
376
+ - [ ] Dependencies provided externally via constructor, DI framework, or provider graph — not created internally
377
+ - [ ] Registration distinguishes lifetime: singleton vs factory vs lazy singleton
378
+ - [ ] Environment-specific bindings (dev/staging/prod) use configuration, not runtime `if` checks
379
+ - [ ] No circular dependencies in the DI graph
380
+ - [ ] Service locator calls (if used) are not scattered throughout business logic
381
+
382
+ ---
383
+
384
+ ## 15. Static Analysis
385
+
386
+ ### Configuration:
387
+ - [ ] `analysis_options.yaml` present with strict settings enabled
388
+ - [ ] Strict analyzer settings: `strict-casts: true`, `strict-inference: true`, `strict-raw-types: true`
389
+ - [ ] A comprehensive lint rule set is included (very_good_analysis, flutter_lints, or custom strict rules)
390
+ - [ ] All sub-packages in monorepos inherit or share the root analysis options
391
+
392
+ ### Enforcement:
393
+ - [ ] No unresolved analyzer warnings in committed code
394
+ - [ ] Lint suppressions (`// ignore:`) are justified with comments explaining why
395
+ - [ ] `flutter analyze` runs in CI and failures block merges
396
+
397
+ ### Key rules to verify regardless of lint package:
398
+ - [ ] `prefer_const_constructors` — performance in widget trees
399
+ - [ ] `avoid_print` — use proper logging
400
+ - [ ] `unawaited_futures` — prevent fire-and-forget async bugs
401
+ - [ ] `prefer_final_locals` — immutability at variable level
402
+ - [ ] `always_declare_return_types` — explicit contracts
403
+ - [ ] `avoid_catches_without_on_clauses` — specific error handling
404
+ - [ ] `always_use_package_imports` — consistent import style
405
+
406
+ ---
407
+
408
+ ## State Management Quick Reference
409
+
410
+ The table below maps universal principles to their implementation in popular solutions. Use this to adapt review rules to whichever solution the project uses.
411
+
412
+ | Principle | BLoC/Cubit | Riverpod | Provider | GetX | MobX | Signals | Built-in |
413
+ |-----------|-----------|----------|----------|------|------|---------|----------|
414
+ | State container | `Bloc`/`Cubit` | `Notifier`/`AsyncNotifier` | `ChangeNotifier` | `GetxController` | `Store` | `signal()` | `StatefulWidget` |
415
+ | UI consumer | `BlocBuilder` | `ConsumerWidget` | `Consumer` | `Obx`/`GetBuilder` | `Observer` | `Watch` | `setState` |
416
+ | Selector | `BlocSelector`/`buildWhen` | `ref.watch(p.select(...))` | `Selector` | N/A | computed | `computed()` | N/A |
417
+ | Side effects | `BlocListener` | `ref.listen` | `Consumer` callback | `ever()`/`once()` | `reaction` | `effect()` | callbacks |
418
+ | Disposal | auto via `BlocProvider` | `.autoDispose` | auto via `Provider` | `onClose()` | `ReactionDisposer` | manual | `dispose()` |
419
+ | Testing | `blocTest()` | `ProviderContainer` | `ChangeNotifier` directly | `Get.put` in test | store directly | signal directly | widget test |
420
+
421
+ ---
422
+
423
+ ## Sources
424
+
425
+ - [Effective Dart: Style](https://dart.dev/effective-dart/style)
426
+ - [Effective Dart: Usage](https://dart.dev/effective-dart/usage)
427
+ - [Effective Dart: Design](https://dart.dev/effective-dart/design)
428
+ - [Flutter Performance Best Practices](https://docs.flutter.dev/perf/best-practices)
429
+ - [Flutter Testing Overview](https://docs.flutter.dev/testing/overview)
430
+ - [Flutter Accessibility](https://docs.flutter.dev/ui/accessibility-and-internationalization/accessibility)
431
+ - [Flutter Internationalization](https://docs.flutter.dev/ui/accessibility-and-internationalization/internationalization)
432
+ - [Flutter Navigation and Routing](https://docs.flutter.dev/ui/navigation)
433
+ - [Flutter Error Handling](https://docs.flutter.dev/testing/errors)
434
+ - [Flutter State Management Options](https://docs.flutter.dev/data-and-backend/state-mgmt/options)
@@ -0,0 +1,243 @@
1
+ ---
2
+ name: foundation-models-on-device
3
+ description: Apple FoundationModels framework for on-device LLM — text generation, guided generation with @Generable, tool calling, and snapshot streaming in iOS 26+.
4
+ ---
5
+
6
+ # FoundationModels: On-Device LLM (iOS 26)
7
+
8
+ Patterns for integrating Apple's on-device language model into apps using the FoundationModels framework. Covers text generation, structured output with `@Generable`, custom tool calling, and snapshot streaming — all running on-device for privacy and offline support.
9
+
10
+ ## When to Activate
11
+
12
+ - Building AI-powered features using Apple Intelligence on-device
13
+ - Generating or summarizing text without cloud dependency
14
+ - Extracting structured data from natural language input
15
+ - Implementing custom tool calling for domain-specific AI actions
16
+ - Streaming structured responses for real-time UI updates
17
+ - Need privacy-preserving AI (no data leaves the device)
18
+
19
+ ## Core Pattern — Availability Check
20
+
21
+ Always check model availability before creating a session:
22
+
23
+ ```swift
24
+ struct GenerativeView: View {
25
+ private var model = SystemLanguageModel.default
26
+
27
+ var body: some View {
28
+ switch model.availability {
29
+ case .available:
30
+ ContentView()
31
+ case .unavailable(.deviceNotEligible):
32
+ Text("Device not eligible for Apple Intelligence")
33
+ case .unavailable(.appleIntelligenceNotEnabled):
34
+ Text("Please enable Apple Intelligence in Settings")
35
+ case .unavailable(.modelNotReady):
36
+ Text("Model is downloading or not ready")
37
+ case .unavailable(let other):
38
+ Text("Model unavailable: \(other)")
39
+ }
40
+ }
41
+ }
42
+ ```
43
+
44
+ ## Core Pattern — Basic Session
45
+
46
+ ```swift
47
+ // Single-turn: create a new session each time
48
+ let session = LanguageModelSession()
49
+ let response = try await session.respond(to: "What's a good month to visit Paris?")
50
+ print(response.content)
51
+
52
+ // Multi-turn: reuse session for conversation context
53
+ let session = LanguageModelSession(instructions: """
54
+ You are a cooking assistant.
55
+ Provide recipe suggestions based on ingredients.
56
+ Keep suggestions brief and practical.
57
+ """)
58
+
59
+ let first = try await session.respond(to: "I have chicken and rice")
60
+ let followUp = try await session.respond(to: "What about a vegetarian option?")
61
+ ```
62
+
63
+ Key points for instructions:
64
+ - Define the model's role ("You are a mentor")
65
+ - Specify what to do ("Help extract calendar events")
66
+ - Set style preferences ("Respond as briefly as possible")
67
+ - Add safety measures ("Respond with 'I can't help with that' for dangerous requests")
68
+
69
+ ## Core Pattern — Guided Generation with @Generable
70
+
71
+ Generate structured Swift types instead of raw strings:
72
+
73
+ ### 1. Define a Generable Type
74
+
75
+ ```swift
76
+ @Generable(description: "Basic profile information about a cat")
77
+ struct CatProfile {
78
+ var name: String
79
+
80
+ @Guide(description: "The age of the cat", .range(0...20))
81
+ var age: Int
82
+
83
+ @Guide(description: "A one sentence profile about the cat's personality")
84
+ var profile: String
85
+ }
86
+ ```
87
+
88
+ ### 2. Request Structured Output
89
+
90
+ ```swift
91
+ let response = try await session.respond(
92
+ to: "Generate a cute rescue cat",
93
+ generating: CatProfile.self
94
+ )
95
+
96
+ // Access structured fields directly
97
+ print("Name: \(response.content.name)")
98
+ print("Age: \(response.content.age)")
99
+ print("Profile: \(response.content.profile)")
100
+ ```
101
+
102
+ ### Supported @Guide Constraints
103
+
104
+ - `.range(0...20)` — numeric range
105
+ - `.count(3)` — array element count
106
+ - `description:` — semantic guidance for generation
107
+
108
+ ## Core Pattern — Tool Calling
109
+
110
+ Let the model invoke custom code for domain-specific tasks:
111
+
112
+ ### 1. Define a Tool
113
+
114
+ ```swift
115
+ struct RecipeSearchTool: Tool {
116
+ let name = "recipe_search"
117
+ let description = "Search for recipes matching a given term and return a list of results."
118
+
119
+ @Generable
120
+ struct Arguments {
121
+ var searchTerm: String
122
+ var numberOfResults: Int
123
+ }
124
+
125
+ func call(arguments: Arguments) async throws -> ToolOutput {
126
+ let recipes = await searchRecipes(
127
+ term: arguments.searchTerm,
128
+ limit: arguments.numberOfResults
129
+ )
130
+ return .string(recipes.map { "- \($0.name): \($0.description)" }.joined(separator: "\n"))
131
+ }
132
+ }
133
+ ```
134
+
135
+ ### 2. Create Session with Tools
136
+
137
+ ```swift
138
+ let session = LanguageModelSession(tools: [RecipeSearchTool()])
139
+ let response = try await session.respond(to: "Find me some pasta recipes")
140
+ ```
141
+
142
+ ### 3. Handle Tool Errors
143
+
144
+ ```swift
145
+ do {
146
+ let answer = try await session.respond(to: "Find a recipe for tomato soup.")
147
+ } catch let error as LanguageModelSession.ToolCallError {
148
+ print(error.tool.name)
149
+ if case .databaseIsEmpty = error.underlyingError as? RecipeSearchToolError {
150
+ // Handle specific tool error
151
+ }
152
+ }
153
+ ```
154
+
155
+ ## Core Pattern — Snapshot Streaming
156
+
157
+ Stream structured responses for real-time UI with `PartiallyGenerated` types:
158
+
159
+ ```swift
160
+ @Generable
161
+ struct TripIdeas {
162
+ @Guide(description: "Ideas for upcoming trips")
163
+ var ideas: [String]
164
+ }
165
+
166
+ let stream = session.streamResponse(
167
+ to: "What are some exciting trip ideas?",
168
+ generating: TripIdeas.self
169
+ )
170
+
171
+ for try await partial in stream {
172
+ // partial: TripIdeas.PartiallyGenerated (all properties Optional)
173
+ print(partial)
174
+ }
175
+ ```
176
+
177
+ ### SwiftUI Integration
178
+
179
+ ```swift
180
+ @State private var partialResult: TripIdeas.PartiallyGenerated?
181
+ @State private var errorMessage: String?
182
+
183
+ var body: some View {
184
+ List {
185
+ ForEach(partialResult?.ideas ?? [], id: \.self) { idea in
186
+ Text(idea)
187
+ }
188
+ }
189
+ .overlay {
190
+ if let errorMessage { Text(errorMessage).foregroundStyle(.red) }
191
+ }
192
+ .task {
193
+ do {
194
+ let stream = session.streamResponse(to: prompt, generating: TripIdeas.self)
195
+ for try await partial in stream {
196
+ partialResult = partial
197
+ }
198
+ } catch {
199
+ errorMessage = error.localizedDescription
200
+ }
201
+ }
202
+ }
203
+ ```
204
+
205
+ ## Key Design Decisions
206
+
207
+ | Decision | Rationale |
208
+ |----------|-----------|
209
+ | On-device execution | Privacy — no data leaves the device; works offline |
210
+ | 4,096 token limit | On-device model constraint; chunk large data across sessions |
211
+ | Snapshot streaming (not deltas) | Structured output friendly; each snapshot is a complete partial state |
212
+ | `@Generable` macro | Compile-time safety for structured generation; auto-generates `PartiallyGenerated` type |
213
+ | Single request per session | `isResponding` prevents concurrent requests; create multiple sessions if needed |
214
+ | `response.content` (not `.output`) | Correct API — always access results via `.content` property |
215
+
216
+ ## Best Practices
217
+
218
+ - **Always check `model.availability`** before creating a session — handle all unavailability cases
219
+ - **Use `instructions`** to guide model behavior — they take priority over prompts
220
+ - **Check `isResponding`** before sending a new request — sessions handle one request at a time
221
+ - **Access `response.content`** for results — not `.output`
222
+ - **Break large inputs into chunks** — 4,096 token limit applies to instructions + prompt + output combined
223
+ - **Use `@Generable`** for structured output — stronger guarantees than parsing raw strings
224
+ - **Use `GenerationOptions(temperature:)`** to tune creativity (higher = more creative)
225
+ - **Monitor with Instruments** — use Xcode Instruments to profile request performance
226
+
227
+ ## Anti-Patterns to Avoid
228
+
229
+ - Creating sessions without checking `model.availability` first
230
+ - Sending inputs exceeding the 4,096 token context window
231
+ - Attempting concurrent requests on a single session
232
+ - Using `.output` instead of `.content` to access response data
233
+ - Parsing raw string responses when `@Generable` structured output would work
234
+ - Building complex multi-step logic in a single prompt — break into multiple focused prompts
235
+ - Assuming the model is always available — device eligibility and settings vary
236
+
237
+ ## When to Use
238
+
239
+ - On-device text generation for privacy-sensitive apps
240
+ - Structured data extraction from user input (forms, natural language commands)
241
+ - AI-assisted features that must work offline
242
+ - Streaming UI that progressively shows generated content
243
+ - Domain-specific AI actions via tool calling (search, compute, lookup)