@hivehub/rulebook 5.4.0 → 5.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (454) hide show
  1. package/.claude/commands/analysis.md +35 -35
  2. package/.claude/commands/continue.md +33 -33
  3. package/.claude/commands/ralph-config.md +112 -112
  4. package/.claude/commands/ralph-history.md +110 -110
  5. package/.claude/commands/ralph-init.md +72 -72
  6. package/.claude/commands/ralph-pause-resume.md +105 -105
  7. package/.claude/commands/ralph-run.md +101 -101
  8. package/.claude/commands/ralph-status.md +76 -76
  9. package/.claude/commands/rulebook-decision-create.md +55 -55
  10. package/.claude/commands/rulebook-decision-list.md +15 -15
  11. package/.claude/commands/rulebook-knowledge-add.md +41 -41
  12. package/.claude/commands/rulebook-knowledge-list.md +15 -15
  13. package/.claude/commands/rulebook-learn-capture.md +48 -48
  14. package/.claude/commands/rulebook-learn-list.md +13 -13
  15. package/.claude/commands/rulebook-memory-save.md +48 -48
  16. package/.claude/commands/rulebook-memory-search.md +47 -47
  17. package/.claude/commands/rulebook-task-apply.md +67 -67
  18. package/.claude/commands/rulebook-task-archive.md +94 -94
  19. package/.claude/commands/rulebook-task-create.md +93 -93
  20. package/.claude/commands/rulebook-task-list.md +42 -42
  21. package/.claude/commands/rulebook-task-show.md +52 -52
  22. package/.claude/commands/rulebook-task-validate.md +53 -53
  23. package/.claude-plugin/marketplace.json +28 -28
  24. package/.claude-plugin/plugin.json +8 -8
  25. package/LICENSE +191 -191
  26. package/README.md +393 -393
  27. package/dist/index.js +0 -0
  28. package/dist/mcp/rulebook-server.js +0 -0
  29. package/package.json +22 -21
  30. package/templates/agents/accessibility-reviewer.md +43 -43
  31. package/templates/agents/api-designer.md +42 -42
  32. package/templates/agents/architect.md +51 -51
  33. package/templates/agents/build-engineer.md +36 -36
  34. package/templates/agents/code-reviewer.md +47 -47
  35. package/templates/agents/compiler/codegen-debugger.md +34 -34
  36. package/templates/agents/compiler/stdlib-engineer.md +28 -28
  37. package/templates/agents/compiler/test-coverage-guardian.md +31 -31
  38. package/templates/agents/context-intelligence.md +52 -52
  39. package/templates/agents/database-architect.md +41 -41
  40. package/templates/agents/devops-engineer.md +42 -42
  41. package/templates/agents/docs-writer.md +38 -38
  42. package/templates/agents/game-engine/cpp-core-expert.md +35 -35
  43. package/templates/agents/game-engine/render-engineer.md +22 -22
  44. package/templates/agents/game-engine/shader-engineer.md +38 -38
  45. package/templates/agents/game-engine/systems-integration.md +43 -43
  46. package/templates/agents/generic/code-reviewer.md +41 -41
  47. package/templates/agents/generic/docs-writer.md +25 -25
  48. package/templates/agents/generic/project-manager.md +36 -36
  49. package/templates/agents/generic/researcher.md +34 -34
  50. package/templates/agents/generic/test-engineer.md +41 -41
  51. package/templates/agents/i18n-engineer.md +42 -42
  52. package/templates/agents/implementer.md +42 -42
  53. package/templates/agents/migration-engineer.md +42 -42
  54. package/templates/agents/mobile/platform-specialist.md +22 -22
  55. package/templates/agents/mobile/ui-engineer.md +22 -22
  56. package/templates/agents/performance-engineer.md +49 -49
  57. package/templates/agents/refactoring-agent.md +41 -41
  58. package/templates/agents/researcher.md +38 -38
  59. package/templates/agents/security-reviewer.md +40 -40
  60. package/templates/agents/team-lead.md +37 -37
  61. package/templates/agents/tester.md +48 -48
  62. package/templates/agents/ux-reviewer.md +43 -43
  63. package/templates/agents/web-app/api-designer.md +22 -22
  64. package/templates/agents/web-app/backend-engineer.md +30 -30
  65. package/templates/agents/web-app/database-engineer.md +22 -22
  66. package/templates/agents/web-app/frontend-engineer.md +29 -29
  67. package/templates/agents/web-app/security-reviewer.md +32 -32
  68. package/templates/ci/rulebook-review.yml +26 -26
  69. package/templates/cli/AIDER.md +49 -49
  70. package/templates/cli/AMAZON_Q.md +25 -25
  71. package/templates/cli/AUGGIE.md +32 -32
  72. package/templates/cli/CLAUDE.md +117 -117
  73. package/templates/cli/CLINE.md +99 -99
  74. package/templates/cli/CODEBUDDY.md +20 -20
  75. package/templates/cli/CODEIUM.md +20 -20
  76. package/templates/cli/CODEX.md +21 -21
  77. package/templates/cli/CONTINUE.md +34 -34
  78. package/templates/cli/CURSOR_CLI.md +62 -62
  79. package/templates/cli/FACTORY.md +18 -18
  80. package/templates/cli/GEMINI.md +35 -35
  81. package/templates/cli/KILOCODE.md +18 -18
  82. package/templates/cli/OPENCODE.md +18 -18
  83. package/templates/cli/_GENERIC_TEMPLATE.md +29 -29
  84. package/templates/cli/gemini-extension.json +77 -77
  85. package/templates/commands/rulebook-decision-create.md +55 -55
  86. package/templates/commands/rulebook-decision-list.md +15 -15
  87. package/templates/commands/rulebook-knowledge-add.md +41 -41
  88. package/templates/commands/rulebook-knowledge-list.md +15 -15
  89. package/templates/commands/rulebook-learn-capture.md +48 -48
  90. package/templates/commands/rulebook-learn-list.md +13 -13
  91. package/templates/commands/rulebook-memory-save.md +48 -48
  92. package/templates/commands/rulebook-memory-search.md +47 -47
  93. package/templates/commands/rulebook-task-apply.md +67 -67
  94. package/templates/commands/rulebook-task-archive.md +94 -94
  95. package/templates/commands/rulebook-task-create.md +93 -93
  96. package/templates/commands/rulebook-task-list.md +42 -42
  97. package/templates/commands/rulebook-task-show.md +52 -52
  98. package/templates/commands/rulebook-task-validate.md +53 -53
  99. package/templates/compact-context/_default.md +23 -23
  100. package/templates/compact-context/cpp.md +26 -26
  101. package/templates/compact-context/go.md +26 -26
  102. package/templates/compact-context/python.md +26 -26
  103. package/templates/compact-context/rust.md +28 -28
  104. package/templates/compact-context/typescript.md +29 -29
  105. package/templates/core/AGENTS_OVERRIDE.md +16 -16
  106. package/templates/core/AGENT_AUTOMATION.md +296 -296
  107. package/templates/core/CLAUDE_MD_v2.md +71 -71
  108. package/templates/core/DAG.md +304 -304
  109. package/templates/core/DECISIONS.md +38 -38
  110. package/templates/core/DOCUMENTATION_RULES.md +36 -36
  111. package/templates/core/KNOWLEDGE.md +49 -49
  112. package/templates/core/MULTI_AGENT.md +74 -74
  113. package/templates/core/PLANS.md +28 -28
  114. package/templates/core/QUALITY_ENFORCEMENT.md +68 -68
  115. package/templates/core/RALPH.md +471 -471
  116. package/templates/core/RULEBOOK.md +1947 -1947
  117. package/templates/core/TIER1_PROHIBITIONS.md +154 -154
  118. package/templates/core/TOKEN_OPTIMIZATION.md +49 -49
  119. package/templates/core/WORKSPACE.md +69 -69
  120. package/templates/frameworks/ANGULAR.md +36 -36
  121. package/templates/frameworks/DJANGO.md +83 -83
  122. package/templates/frameworks/ELECTRON.md +147 -147
  123. package/templates/frameworks/FLASK.md +38 -38
  124. package/templates/frameworks/FLUTTER.md +55 -55
  125. package/templates/frameworks/JQUERY.md +32 -32
  126. package/templates/frameworks/LARAVEL.md +38 -38
  127. package/templates/frameworks/NESTJS.md +43 -43
  128. package/templates/frameworks/NEXTJS.md +127 -127
  129. package/templates/frameworks/NUXT.md +40 -40
  130. package/templates/frameworks/RAILS.md +66 -66
  131. package/templates/frameworks/REACT.md +38 -38
  132. package/templates/frameworks/REACT_NATIVE.md +47 -47
  133. package/templates/frameworks/SPRING.md +39 -39
  134. package/templates/frameworks/SYMFONY.md +36 -36
  135. package/templates/frameworks/VUE.md +36 -36
  136. package/templates/frameworks/ZEND.md +35 -35
  137. package/templates/git/CI_CD_PATTERNS.md +661 -661
  138. package/templates/git/GITHUB_ACTIONS.md +728 -728
  139. package/templates/git/GITLAB_CI.md +730 -730
  140. package/templates/git/GIT_WORKFLOW.md +1192 -1192
  141. package/templates/git/SECRETS_MANAGEMENT.md +585 -585
  142. package/templates/hooks/COMMIT_MSG.md +530 -530
  143. package/templates/hooks/POST_CHECKOUT.md +546 -546
  144. package/templates/hooks/PREPARE_COMMIT_MSG.md +619 -619
  145. package/templates/hooks/PRE_COMMIT.md +414 -414
  146. package/templates/hooks/PRE_PUSH.md +601 -601
  147. package/templates/hooks/check-context-and-handoff.ps1 +58 -58
  148. package/templates/hooks/check-context-and-handoff.sh +76 -76
  149. package/templates/hooks/enforce-team-for-background-agents.ps1 +63 -63
  150. package/templates/hooks/enforce-team-for-background-agents.sh +55 -55
  151. package/templates/hooks/on-compact-reinject.sh +34 -34
  152. package/templates/hooks/resume-from-handoff.ps1 +40 -40
  153. package/templates/hooks/resume-from-handoff.sh +61 -61
  154. package/templates/hooks/terse-activate.ps1 +143 -143
  155. package/templates/hooks/terse-activate.sh +197 -197
  156. package/templates/hooks/terse-mode-tracker.ps1 +153 -153
  157. package/templates/hooks/terse-mode-tracker.sh +187 -187
  158. package/templates/ides/CONTINUE_RULES.md +16 -16
  159. package/templates/ides/COPILOT.md +37 -37
  160. package/templates/ides/COPILOT_INSTRUCTIONS.md +23 -23
  161. package/templates/ides/CURSOR.md +43 -43
  162. package/templates/ides/GEMINI_RULES.md +17 -17
  163. package/templates/ides/JETBRAINS_AI.md +35 -35
  164. package/templates/ides/REPLIT.md +36 -36
  165. package/templates/ides/TABNINE.md +29 -29
  166. package/templates/ides/VSCODE.md +40 -40
  167. package/templates/ides/WINDSURF.md +36 -36
  168. package/templates/ides/WINDSURF_RULES.md +14 -14
  169. package/templates/ides/ZED.md +32 -32
  170. package/templates/ides/cursor-mdc/go.mdc +24 -24
  171. package/templates/ides/cursor-mdc/python.mdc +24 -24
  172. package/templates/ides/cursor-mdc/quality.mdc +25 -25
  173. package/templates/ides/cursor-mdc/ralph.mdc +39 -39
  174. package/templates/ides/cursor-mdc/rulebook.mdc +38 -38
  175. package/templates/ides/cursor-mdc/rust.mdc +24 -24
  176. package/templates/ides/cursor-mdc/typescript.mdc +25 -25
  177. package/templates/languages/C.md +333 -333
  178. package/templates/languages/CPP.md +743 -743
  179. package/templates/languages/CSHARP.md +417 -417
  180. package/templates/languages/ELIXIR.md +454 -454
  181. package/templates/languages/ERLANG.md +361 -361
  182. package/templates/languages/GO.md +645 -645
  183. package/templates/languages/HASKELL.md +177 -177
  184. package/templates/languages/JAVA.md +607 -607
  185. package/templates/languages/JAVASCRIPT.md +631 -631
  186. package/templates/languages/JULIA.md +97 -97
  187. package/templates/languages/KOTLIN.md +511 -511
  188. package/templates/languages/LISP.md +100 -100
  189. package/templates/languages/LUA.md +74 -74
  190. package/templates/languages/OBJECTIVEC.md +90 -90
  191. package/templates/languages/PHP.md +416 -416
  192. package/templates/languages/PYTHON.md +682 -682
  193. package/templates/languages/RUBY.md +421 -421
  194. package/templates/languages/RUST.md +477 -477
  195. package/templates/languages/SAS.md +73 -73
  196. package/templates/languages/SCALA.md +348 -348
  197. package/templates/languages/SOLIDITY.md +580 -580
  198. package/templates/languages/SQL.md +137 -137
  199. package/templates/languages/SWIFT.md +466 -466
  200. package/templates/languages/TYPESCRIPT.md +591 -591
  201. package/templates/languages/ZIG.md +265 -265
  202. package/templates/modules/ATLASSIAN.md +255 -255
  203. package/templates/modules/CONTEXT7.md +54 -54
  204. package/templates/modules/FIGMA.md +267 -267
  205. package/templates/modules/GITHUB_MCP.md +64 -64
  206. package/templates/modules/GRAFANA.md +328 -328
  207. package/templates/modules/MEMORY.md +126 -126
  208. package/templates/modules/NOTION.md +247 -247
  209. package/templates/modules/PLAYWRIGHT.md +90 -90
  210. package/templates/modules/RULEBOOK_MCP.md +208 -208
  211. package/templates/modules/SERENA.md +337 -337
  212. package/templates/modules/SUPABASE.md +223 -223
  213. package/templates/modules/SYNAP.md +69 -69
  214. package/templates/modules/VECTORIZER.md +63 -63
  215. package/templates/modules/sequential-thinking.md +42 -42
  216. package/templates/ralph/ralph-history.bat +4 -4
  217. package/templates/ralph/ralph-history.sh +5 -5
  218. package/templates/ralph/ralph-init.bat +5 -5
  219. package/templates/ralph/ralph-init.sh +5 -5
  220. package/templates/ralph/ralph-pause.bat +5 -5
  221. package/templates/ralph/ralph-pause.sh +5 -5
  222. package/templates/ralph/ralph-run.bat +5 -5
  223. package/templates/ralph/ralph-run.sh +5 -5
  224. package/templates/ralph/ralph-status.bat +4 -4
  225. package/templates/ralph/ralph-status.sh +5 -5
  226. package/templates/rules/consult-analysis-before-implementing.md +23 -23
  227. package/templates/rules/cpp.md +46 -46
  228. package/templates/rules/csharp.md +44 -44
  229. package/templates/rules/diagnostic-first.md +39 -39
  230. package/templates/rules/fail-twice-escalate.md +46 -46
  231. package/templates/rules/follow-task-sequence.md +36 -36
  232. package/templates/rules/git-safety.md +29 -29
  233. package/templates/rules/go.md +40 -40
  234. package/templates/rules/incremental-implementation.md +56 -56
  235. package/templates/rules/incremental-tests.md +29 -29
  236. package/templates/rules/java.md +43 -43
  237. package/templates/rules/javascript.md +39 -39
  238. package/templates/rules/knowledge-base-usage.md +41 -41
  239. package/templates/rules/multi-agent-teams.md +75 -75
  240. package/templates/rules/no-deferred.md +31 -31
  241. package/templates/rules/no-shortcuts.md +30 -30
  242. package/templates/rules/python.md +43 -43
  243. package/templates/rules/research-first.md +30 -30
  244. package/templates/rules/respect-handoff-trigger.md +41 -41
  245. package/templates/rules/rust.md +40 -40
  246. package/templates/rules/sequential-editing.md +21 -21
  247. package/templates/rules/session-workflow.md +24 -24
  248. package/templates/rules/task-decomposition.md +32 -32
  249. package/templates/rules/typescript.md +40 -40
  250. package/templates/services/AZURE_BLOB.md +184 -184
  251. package/templates/services/CASSANDRA.md +239 -239
  252. package/templates/services/DATADOG.md +26 -26
  253. package/templates/services/DOCKER.md +124 -124
  254. package/templates/services/DOCKER_COMPOSE.md +168 -168
  255. package/templates/services/DYNAMODB.md +308 -308
  256. package/templates/services/ELASTICSEARCH.md +347 -347
  257. package/templates/services/GCS.md +178 -178
  258. package/templates/services/HELM.md +194 -194
  259. package/templates/services/INFLUXDB.md +265 -265
  260. package/templates/services/KAFKA.md +341 -341
  261. package/templates/services/KUBERNETES.md +208 -208
  262. package/templates/services/MARIADB.md +183 -183
  263. package/templates/services/MEMCACHED.md +242 -242
  264. package/templates/services/MINIO.md +201 -201
  265. package/templates/services/MONGODB.md +268 -268
  266. package/templates/services/MYSQL.md +358 -358
  267. package/templates/services/NEO4J.md +247 -247
  268. package/templates/services/OPENTELEMETRY.md +25 -25
  269. package/templates/services/ORACLE.md +290 -290
  270. package/templates/services/PINO.md +24 -24
  271. package/templates/services/POSTGRESQL.md +326 -326
  272. package/templates/services/PROMETHEUS.md +33 -33
  273. package/templates/services/RABBITMQ.md +286 -286
  274. package/templates/services/REDIS.md +292 -292
  275. package/templates/services/S3.md +298 -298
  276. package/templates/services/SENTRY.md +23 -23
  277. package/templates/services/SQLITE.md +294 -294
  278. package/templates/services/SQLSERVER.md +294 -294
  279. package/templates/services/WINSTON.md +30 -30
  280. package/templates/skills/cli/aider/SKILL.md +59 -59
  281. package/templates/skills/cli/amazon-q/SKILL.md +35 -35
  282. package/templates/skills/cli/auggie/SKILL.md +42 -42
  283. package/templates/skills/cli/claude/SKILL.md +42 -42
  284. package/templates/skills/cli/cline/SKILL.md +42 -42
  285. package/templates/skills/cli/codebuddy/SKILL.md +30 -30
  286. package/templates/skills/cli/codeium/SKILL.md +30 -30
  287. package/templates/skills/cli/codex/SKILL.md +31 -31
  288. package/templates/skills/cli/continue/SKILL.md +44 -44
  289. package/templates/skills/cli/cursor-cli/SKILL.md +38 -38
  290. package/templates/skills/cli/factory/SKILL.md +28 -28
  291. package/templates/skills/cli/gemini/SKILL.md +45 -45
  292. package/templates/skills/cli/kilocode/SKILL.md +28 -28
  293. package/templates/skills/cli/opencode/SKILL.md +28 -28
  294. package/templates/skills/core/agent-automation/SKILL.md +194 -194
  295. package/templates/skills/core/dag/SKILL.md +314 -314
  296. package/templates/skills/core/documentation-rules/SKILL.md +46 -46
  297. package/templates/skills/core/quality-enforcement/SKILL.md +78 -78
  298. package/templates/skills/core/rulebook/SKILL.md +176 -176
  299. package/templates/skills/core/rulebook-terse/SKILL.md +116 -116
  300. package/templates/skills/core/rulebook-terse-commit/SKILL.md +96 -96
  301. package/templates/skills/core/rulebook-terse-review/SKILL.md +112 -112
  302. package/templates/skills/dev/accessibility/SKILL.md +17 -17
  303. package/templates/skills/dev/analysis/SKILL.md +19 -19
  304. package/templates/skills/dev/api-design/SKILL.md +15 -15
  305. package/templates/skills/dev/architect/SKILL.md +17 -17
  306. package/templates/skills/dev/build-fix/SKILL.md +17 -17
  307. package/templates/skills/dev/db-design/SKILL.md +15 -15
  308. package/templates/skills/dev/debug/SKILL.md +16 -16
  309. package/templates/skills/dev/deploy/SKILL.md +17 -17
  310. package/templates/skills/dev/docs/SKILL.md +17 -17
  311. package/templates/skills/dev/handoff/SKILL.md +27 -27
  312. package/templates/skills/dev/migrate/SKILL.md +15 -15
  313. package/templates/skills/dev/perf/SKILL.md +17 -17
  314. package/templates/skills/dev/refactor/SKILL.md +17 -17
  315. package/templates/skills/dev/research/SKILL.md +14 -14
  316. package/templates/skills/dev/review/SKILL.md +18 -18
  317. package/templates/skills/dev/security-audit/SKILL.md +17 -17
  318. package/templates/skills/frameworks/angular/SKILL.md +46 -46
  319. package/templates/skills/frameworks/django/SKILL.md +93 -93
  320. package/templates/skills/frameworks/electron/SKILL.md +157 -157
  321. package/templates/skills/frameworks/flask/SKILL.md +48 -48
  322. package/templates/skills/frameworks/flutter/SKILL.md +65 -65
  323. package/templates/skills/frameworks/jquery/SKILL.md +42 -42
  324. package/templates/skills/frameworks/laravel/SKILL.md +48 -48
  325. package/templates/skills/frameworks/nestjs/SKILL.md +53 -53
  326. package/templates/skills/frameworks/nextjs/SKILL.md +137 -137
  327. package/templates/skills/frameworks/nuxt/SKILL.md +50 -50
  328. package/templates/skills/frameworks/rails/SKILL.md +76 -76
  329. package/templates/skills/frameworks/react/SKILL.md +48 -48
  330. package/templates/skills/frameworks/react-native/SKILL.md +57 -57
  331. package/templates/skills/frameworks/spring/SKILL.md +49 -49
  332. package/templates/skills/frameworks/symfony/SKILL.md +46 -46
  333. package/templates/skills/frameworks/vue/SKILL.md +46 -46
  334. package/templates/skills/frameworks/zend/SKILL.md +45 -45
  335. package/templates/skills/ides/copilot/SKILL.md +47 -47
  336. package/templates/skills/ides/cursor/SKILL.md +53 -53
  337. package/templates/skills/ides/jetbrains-ai/SKILL.md +45 -45
  338. package/templates/skills/ides/replit/SKILL.md +46 -46
  339. package/templates/skills/ides/tabnine/SKILL.md +39 -39
  340. package/templates/skills/ides/vscode/SKILL.md +50 -50
  341. package/templates/skills/ides/windsurf/SKILL.md +46 -46
  342. package/templates/skills/ides/zed/SKILL.md +42 -42
  343. package/templates/skills/languages/c/SKILL.md +343 -343
  344. package/templates/skills/languages/cpp/SKILL.md +753 -753
  345. package/templates/skills/languages/csharp/SKILL.md +427 -427
  346. package/templates/skills/languages/elixir/SKILL.md +464 -464
  347. package/templates/skills/languages/erlang/SKILL.md +371 -371
  348. package/templates/skills/languages/go/SKILL.md +655 -655
  349. package/templates/skills/languages/haskell/SKILL.md +187 -187
  350. package/templates/skills/languages/java/SKILL.md +617 -617
  351. package/templates/skills/languages/javascript/SKILL.md +641 -641
  352. package/templates/skills/languages/julia/SKILL.md +107 -107
  353. package/templates/skills/languages/kotlin/SKILL.md +521 -521
  354. package/templates/skills/languages/lisp/SKILL.md +110 -110
  355. package/templates/skills/languages/lua/SKILL.md +84 -84
  356. package/templates/skills/languages/objectivec/SKILL.md +100 -100
  357. package/templates/skills/languages/php/SKILL.md +426 -426
  358. package/templates/skills/languages/python/SKILL.md +692 -692
  359. package/templates/skills/languages/ruby/SKILL.md +431 -431
  360. package/templates/skills/languages/rust/SKILL.md +487 -487
  361. package/templates/skills/languages/sas/SKILL.md +83 -83
  362. package/templates/skills/languages/scala/SKILL.md +358 -358
  363. package/templates/skills/languages/solidity/SKILL.md +590 -590
  364. package/templates/skills/languages/sql/SKILL.md +147 -147
  365. package/templates/skills/languages/swift/SKILL.md +476 -476
  366. package/templates/skills/languages/typescript/SKILL.md +302 -302
  367. package/templates/skills/languages/zig/SKILL.md +275 -275
  368. package/templates/skills/modules/atlassian/SKILL.md +265 -265
  369. package/templates/skills/modules/context7/SKILL.md +64 -64
  370. package/templates/skills/modules/figma/SKILL.md +277 -277
  371. package/templates/skills/modules/github-mcp/SKILL.md +74 -74
  372. package/templates/skills/modules/grafana/SKILL.md +338 -338
  373. package/templates/skills/modules/memory/SKILL.md +73 -73
  374. package/templates/skills/modules/notion/SKILL.md +257 -257
  375. package/templates/skills/modules/playwright/SKILL.md +100 -100
  376. package/templates/skills/modules/rulebook-mcp/SKILL.md +166 -166
  377. package/templates/skills/modules/serena/SKILL.md +347 -347
  378. package/templates/skills/modules/supabase/SKILL.md +233 -233
  379. package/templates/skills/modules/synap/SKILL.md +79 -79
  380. package/templates/skills/modules/vectorizer/SKILL.md +73 -73
  381. package/templates/skills/services/azure-blob/SKILL.md +194 -194
  382. package/templates/skills/services/cassandra/SKILL.md +249 -249
  383. package/templates/skills/services/dynamodb/SKILL.md +318 -318
  384. package/templates/skills/services/elasticsearch/SKILL.md +357 -357
  385. package/templates/skills/services/gcs/SKILL.md +188 -188
  386. package/templates/skills/services/influxdb/SKILL.md +275 -275
  387. package/templates/skills/services/kafka/SKILL.md +351 -351
  388. package/templates/skills/services/mariadb/SKILL.md +193 -193
  389. package/templates/skills/services/memcached/SKILL.md +252 -252
  390. package/templates/skills/services/minio/SKILL.md +211 -211
  391. package/templates/skills/services/mongodb/SKILL.md +278 -278
  392. package/templates/skills/services/mysql/SKILL.md +368 -368
  393. package/templates/skills/services/neo4j/SKILL.md +257 -257
  394. package/templates/skills/services/oracle/SKILL.md +300 -300
  395. package/templates/skills/services/postgresql/SKILL.md +336 -336
  396. package/templates/skills/services/rabbitmq/SKILL.md +296 -296
  397. package/templates/skills/services/redis/SKILL.md +302 -302
  398. package/templates/skills/services/s3/SKILL.md +308 -308
  399. package/templates/skills/services/sqlite/SKILL.md +304 -304
  400. package/templates/skills/services/sqlserver/SKILL.md +304 -304
  401. package/templates/skills/workflows/ralph/SKILL.md +309 -309
  402. package/templates/skills/workflows/ralph/install.sh +87 -87
  403. package/templates/skills/workflows/ralph/manifest.json +158 -158
  404. package/templates/workflows/codespell.yml +31 -31
  405. package/templates/workflows/cpp-lint.yml +47 -47
  406. package/templates/workflows/cpp-publish.yml +119 -119
  407. package/templates/workflows/cpp-test.yml +77 -77
  408. package/templates/workflows/dotnet-lint.yml +29 -29
  409. package/templates/workflows/dotnet-publish.yml +40 -40
  410. package/templates/workflows/dotnet-test.yml +41 -41
  411. package/templates/workflows/elixir-lint.yml +45 -45
  412. package/templates/workflows/elixir-publish.yml +49 -49
  413. package/templates/workflows/elixir-test.yml +54 -54
  414. package/templates/workflows/erlang-lint.yml +47 -47
  415. package/templates/workflows/erlang-test.yml +62 -62
  416. package/templates/workflows/go-lint.yml +39 -39
  417. package/templates/workflows/go-publish.yml +95 -95
  418. package/templates/workflows/go-test.yml +59 -59
  419. package/templates/workflows/java-lint.yml +60 -60
  420. package/templates/workflows/java-publish.yml +120 -120
  421. package/templates/workflows/java-test.yml +85 -85
  422. package/templates/workflows/kotlin-lint.yml +34 -34
  423. package/templates/workflows/kotlin-publish.yml +56 -56
  424. package/templates/workflows/kotlin-test.yml +48 -48
  425. package/templates/workflows/php-lint.yml +39 -39
  426. package/templates/workflows/php-publish.yml +50 -50
  427. package/templates/workflows/php-test.yml +54 -54
  428. package/templates/workflows/python-lint.yml +47 -47
  429. package/templates/workflows/python-publish.yml +91 -91
  430. package/templates/workflows/python-test.yml +59 -59
  431. package/templates/workflows/rust-lint.yml +54 -54
  432. package/templates/workflows/rust-publish.yml +66 -66
  433. package/templates/workflows/rust-test.yml +75 -75
  434. package/templates/workflows/solidity-lint.yml +41 -41
  435. package/templates/workflows/solidity-test.yml +47 -47
  436. package/templates/workflows/swift-lint.yml +32 -32
  437. package/templates/workflows/swift-publish.yml +58 -58
  438. package/templates/workflows/swift-test.yml +44 -44
  439. package/templates/workflows/typescript-publish.yml +60 -60
  440. package/templates/workflows/typescript-test.yml +73 -73
  441. package/templates/workflows/zig-lint.yml +27 -27
  442. package/templates/workflows/zig-test.yml +40 -40
  443. package/dist/hooks/terse-activate.d.ts +0 -59
  444. package/dist/hooks/terse-activate.d.ts.map +0 -1
  445. package/dist/hooks/terse-activate.js +0 -149
  446. package/dist/hooks/terse-activate.js.map +0 -1
  447. package/dist/hooks/terse-config.d.ts +0 -51
  448. package/dist/hooks/terse-config.d.ts.map +0 -1
  449. package/dist/hooks/terse-config.js +0 -130
  450. package/dist/hooks/terse-config.js.map +0 -1
  451. package/dist/hooks/terse-mode-tracker.d.ts +0 -78
  452. package/dist/hooks/terse-mode-tracker.d.ts.map +0 -1
  453. package/dist/hooks/terse-mode-tracker.js +0 -213
  454. package/dist/hooks/terse-mode-tracker.js.map +0 -1
@@ -1,641 +1,641 @@
1
- ---
2
- name: "JavaScript"
3
- description: "Execute these commands after EVERY implementation (see AGENT_AUTOMATION module for full workflow)."
4
- version: "1.0.0"
5
- category: "languages"
6
- author: "Rulebook"
7
- tags: ["languages", "language"]
8
- dependencies: []
9
- conflicts: []
10
- ---
11
- <!-- JAVASCRIPT:START -->
12
- # JavaScript Project Rules
13
-
14
- ## Agent Automation Commands
15
-
16
- **CRITICAL**: Execute these commands after EVERY implementation (see AGENT_AUTOMATION module for full workflow).
17
-
18
- ```bash
19
- # Complete quality check sequence:
20
- npm run lint # Linting (0 warnings required)
21
- npm run format # Code formatting
22
- npm test # All tests (100% pass required)
23
- npm run test:coverage # Coverage check (95%+ required)
24
- npm run build # Build verification (if applicable)
25
-
26
- # Security audit:
27
- npm audit --production # Vulnerability scan
28
- npm outdated # Check outdated deps
29
- ```
30
-
31
- ## JavaScript Configuration
32
-
33
- **CRITICAL**: Use modern JavaScript (ES2022+) with strict linting and testing.
34
-
35
- - **Version**: Node.js 18+
36
- - **Recommended**: Node.js 22 LTS
37
- - **Standard**: ES2022 or later
38
- - **Module System**: ESM (ES Modules)
39
- - **Type**: Set `"type": "module"` in package.json
40
-
41
- ### package.json Requirements
42
-
43
- ```json
44
- {
45
- "name": "your-package",
46
- "version": "1.0.0",
47
- "description": "Package description",
48
- "type": "module",
49
- "main": "./dist/index.js",
50
- "exports": {
51
- ".": {
52
- "import": "./dist/index.js"
53
- }
54
- },
55
- "files": [
56
- "dist",
57
- "README.md",
58
- "LICENSE"
59
- ],
60
- "scripts": {
61
- "build": "esbuild src/index.js --bundle --platform=node --outfile=dist/index.js",
62
- "test": "vitest --run",
63
- "test:watch": "vitest",
64
- "test:coverage": "vitest --coverage",
65
- "lint": "eslint src/**/*.js tests/**/*.js",
66
- "lint:fix": "eslint src/**/*.js tests/**/*.js --fix",
67
- "format": "prettier --write 'src/**/*.js' 'tests/**/*.js'",
68
- "format:check": "prettier --check 'src/**/*.js' 'tests/**/*.js'"
69
- },
70
- "engines": {
71
- "node": ">=18.0.0"
72
- },
73
- "devDependencies": {
74
- "eslint": "^9.19.0",
75
- "prettier": "^3.4.0",
76
- "vitest": "^2.1.0",
77
- "@vitest/coverage-v8": "^2.1.0",
78
- "esbuild": "^0.24.0"
79
- }
80
- }
81
- ```
82
-
83
- ## Code Quality Standards
84
-
85
- ### Mandatory Quality Checks
86
-
87
- **CRITICAL**: After implementing ANY feature, you MUST run these commands in order.
88
-
89
- **IMPORTANT**: These commands MUST match your GitHub Actions workflows to prevent CI/CD failures!
90
-
91
- ```bash
92
- # Pre-Commit Checklist (MUST match .github/workflows/*.yml)
93
-
94
- # 1. Lint (MUST pass with no warnings - matches workflow)
95
- npm run lint
96
-
97
- # 2. Format check (matches workflow - use check, not write!)
98
- npm run format:check
99
- # or: npx prettier --check 'src/**/*.js' 'tests/**/*.js'
100
-
101
- # 3. Run all tests (MUST pass 100% - matches workflow)
102
- npm test
103
-
104
- # 4. Build (if applicable - matches workflow)
105
- npm run build
106
-
107
- # 5. Check coverage (MUST meet threshold)
108
- npm run test:coverage
109
-
110
- # If ANY fails: ❌ DO NOT COMMIT - Fix first!
111
- ```
112
-
113
- **If ANY of these fail, you MUST fix the issues before committing.**
114
-
115
- **Why This Matters:**
116
- - Running different commands locally than in CI causes "works on my machine" failures
117
- - CI/CD workflows will fail if commands don't match
118
- - Example: Using `prettier --write` locally but `prettier --check` in CI = failure
119
- - Example: Skipping lint locally = CI ESLint failures catch errors you missed
120
-
121
- ### Linting
122
-
123
- - Use ESLint 9+ with flat config
124
- - Configuration in `eslint.config.js`
125
- - Must pass with no warnings
126
- - Use recommended rule sets
127
-
128
- Example `eslint.config.js`:
129
- ```javascript
130
- import js from '@eslint/js';
131
-
132
- export default [
133
- js.configs.recommended,
134
- {
135
- files: ['src/**/*.js', 'tests/**/*.js'],
136
- languageOptions: {
137
- ecmaVersion: 2022,
138
- sourceType: 'module',
139
- globals: {
140
- console: 'readonly',
141
- process: 'readonly',
142
- },
143
- },
144
- rules: {
145
- 'no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
146
- 'no-console': 'off', // Allow console in Node.js
147
- 'prefer-const': 'error',
148
- 'no-var': 'error',
149
- },
150
- },
151
- ];
152
- ```
153
-
154
- ### Formatting
155
-
156
- - Use Prettier for code formatting
157
- - Configuration in `.prettierrc.json`
158
- - Integrate with ESLint for consistency
159
- - Format before committing
160
-
161
- Example `.prettierrc.json`:
162
- ```json
163
- {
164
- "semi": true,
165
- "trailingComma": "es5",
166
- "singleQuote": true,
167
- "printWidth": 100,
168
- "tabWidth": 2,
169
- "arrowParens": "always"
170
- }
171
- ```
172
-
173
- ### Testing
174
-
175
- - **Framework**: Vitest (recommended), Jest, or Mocha
176
- - **Location**: `/tests` directory
177
- - **Coverage**: Must meet project threshold (default 80%)
178
- - **Watch Mode**: Use `vitest` or `vitest --watch` for development
179
- - **CI Mode**: **CRITICAL** - Default `npm test` command MUST include `--run` flag
180
- - This prevents Vitest from entering watch mode, which never terminates
181
- - In `package.json`: `"test": "vitest --run"`
182
- - For manual development, use `npm run test:watch`
183
-
184
- Example test structure:
185
- ```javascript
186
- import { describe, it, expect, beforeEach, afterEach } from 'vitest';
187
- import { myFunction } from '../src/module.js';
188
-
189
- describe('myFunction', () => {
190
- let testData;
191
-
192
- beforeEach(() => {
193
- testData = { value: 'test' };
194
- });
195
-
196
- afterEach(() => {
197
- // Cleanup
198
- });
199
-
200
- it('should return expected value', () => {
201
- const result = myFunction(testData);
202
- expect(result).toBe('expected');
203
- });
204
-
205
- it('should throw on invalid input', () => {
206
- expect(() => myFunction(null)).toThrow('Invalid input');
207
- });
208
- });
209
- ```
210
-
211
- ### S2S (Server-to-Server) and Slow Tests
212
-
213
- **CRITICAL**: Separate fast tests from slow/S2S tests.
214
-
215
- **Problem**: Mixing fast unit tests with slow integration tests or tests requiring external servers causes:
216
- - ❌ Slow CI/CD pipelines (10+ minutes instead of < 2 minutes)
217
- - ❌ Flaky tests (external services unreliable)
218
- - ❌ Developer frustration (slow test feedback)
219
- - ❌ Blocked commits (waiting for slow tests)
220
-
221
- **Solution**: Isolate S2S and slow tests using environment variables and tags.
222
-
223
- #### What are S2S/Slow Tests?
224
-
225
- **S2S (Server-to-Server) Tests**:
226
- - Require external running servers (databases, APIs, message queues)
227
- - Network I/O heavy
228
- - Typically 5-30 seconds per test
229
- - Examples: Database integration tests, API endpoint tests, message queue tests
230
-
231
- **Slow Tests**:
232
- - Long-running operations (processing large files, complex calculations)
233
- - Typically > 5 seconds per test
234
- - Examples: File processing tests, image manipulation, encryption tests
235
-
236
- **Fast Tests** (Regular Unit Tests):
237
- - No external dependencies
238
- - In-memory only
239
- - < 100ms per test
240
- - Should be 95%+ of your test suite
241
-
242
- #### Implementation Pattern
243
-
244
- **1. Mark S2S/slow tests with conditional execution**:
245
-
246
- ```javascript
247
- // tests/integration/database.test.js
248
- import { describe, it, expect, beforeAll, afterAll } from 'vitest';
249
- import { setupDatabase, teardownDatabase } from './test-helpers.js';
250
-
251
- // Only run if RUN_S2S_TESTS environment variable is set
252
- const runS2STests = process.env.RUN_S2S_TESTS === '1';
253
- const describeS2S = runS2STests ? describe : describe.skip;
254
-
255
- describeS2S('Database Integration', () => {
256
- beforeAll(async () => {
257
- await setupDatabase();
258
- });
259
-
260
- afterAll(async () => {
261
- await teardownDatabase();
262
- });
263
-
264
- it('should connect to database', async () => {
265
- const result = await query('SELECT 1');
266
- expect(result).toBeDefined();
267
- }, { timeout: 30000 }); // 30 second timeout for S2S tests
268
- });
269
- ```
270
-
271
- **2. Mark slow tests similarly**:
272
-
273
- ```javascript
274
- // tests/slow/file-processing.test.js
275
- const runSlowTests = process.env.RUN_SLOW_TESTS === '1';
276
- const describeSlow = runSlowTests ? describe : describe.skip;
277
-
278
- describeSlow('Large File Processing', () => {
279
- it('should process 1GB file', async () => {
280
- const result = await processLargeFile('large-file.dat');
281
- expect(result).toBeDefined();
282
- }, { timeout: 60000 }); // 60 second timeout
283
- });
284
- ```
285
-
286
- **3. Organize tests by speed**:
287
-
288
- ```
289
- tests/
290
- ├── unit/ # Fast tests (< 100ms) - DEFAULT
291
- │ ├── parser.test.js
292
- │ └── validator.test.js
293
- ├── integration/ # S2S tests (require servers)
294
- │ ├── database.test.js
295
- │ └── api.test.js
296
- └── slow/ # Slow tests (> 5 seconds)
297
- └── file-processing.test.js
298
- ```
299
-
300
- **4. Add npm scripts in `package.json`**:
301
-
302
- ```json
303
- {
304
- "scripts": {
305
- "test": "vitest --run",
306
- "test:watch": "vitest",
307
- "test:s2s": "RUN_S2S_TESTS=1 vitest --run",
308
- "test:slow": "RUN_SLOW_TESTS=1 vitest --run",
309
- "test:all": "RUN_S2S_TESTS=1 RUN_SLOW_TESTS=1 vitest --run"
310
- }
311
- }
312
- ```
313
-
314
- **Windows users**: Use `cross-env` for environment variables:
315
-
316
- ```bash
317
- npm install --save-dev cross-env
318
- ```
319
-
320
- ```json
321
- {
322
- "scripts": {
323
- "test:s2s": "cross-env RUN_S2S_TESTS=1 vitest --run",
324
- "test:slow": "cross-env RUN_SLOW_TESTS=1 vitest --run"
325
- }
326
- }
327
- ```
328
-
329
- #### Best Practices
330
-
331
- - ✅ **Always run fast tests** in CI/CD by default
332
- - ✅ **Isolate S2S tests** - never run them in standard test suite
333
- - ✅ **Mark slow tests** - prevent CI/CD timeouts
334
- - ✅ **Document requirements** - specify which servers/services are needed for S2S tests
335
- - ✅ **Use timeouts** - Set appropriate timeouts: `{ timeout: 30000 }` for S2S tests
336
- - ✅ **Use environment variables** - Control test execution with `RUN_S2S_TESTS` and `RUN_SLOW_TESTS`
337
- - ❌ **Never mix** fast and slow/S2S tests in same test run
338
- - ❌ **Never require** external services for standard test suite
339
- - ❌ **Never exceed** 10-20 seconds for regular tests
340
-
341
- #### Example: Complete Test Setup
342
-
343
- **Fast test** (runs by default):
344
- ```javascript
345
- // tests/unit/calculator.test.js
346
- import { describe, it, expect } from 'vitest';
347
- import { add, multiply } from '../src/calculator.js';
348
-
349
- describe('Calculator', () => {
350
- it('should add numbers', () => {
351
- expect(add(2, 3)).toBe(5);
352
- });
353
-
354
- it('should multiply numbers', () => {
355
- expect(multiply(2, 3)).toBe(6);
356
- });
357
- });
358
- ```
359
-
360
- **S2S test** (skipped by default):
361
- ```javascript
362
- // tests/integration/api.test.js
363
- import { describe, it, expect, beforeAll, afterAll } from 'vitest';
364
-
365
- const runS2STests = process.env.RUN_S2S_TESTS === '1';
366
- const describeS2S = runS2STests ? describe : describe.skip;
367
-
368
- describeS2S('API Integration', () => {
369
- let server;
370
-
371
- beforeAll(async () => {
372
- // Start server on port 3001
373
- server = await startTestServer(3001);
374
- });
375
-
376
- afterAll(async () => {
377
- await server.close();
378
- });
379
-
380
- it('should fetch users from API', async () => {
381
- const response = await fetch('http://localhost:3001/users');
382
- expect(response.status).toBe(200);
383
- const data = await response.json();
384
- expect(Array.isArray(data)).toBe(true);
385
- }, { timeout: 30000 });
386
- });
387
- ```
388
-
389
- **Running tests**:
390
- ```bash
391
- # Fast tests only (default - for development and CI)
392
- npm test
393
-
394
- # Include S2S tests (manual or scheduled CI)
395
- npm run test:s2s
396
-
397
- # Include slow tests
398
- npm run test:slow
399
-
400
- # All tests (nightly builds)
401
- npm run test:all
402
- ```
403
-
404
- ## Module System
405
-
406
- - Use ES modules (`import`/`export`)
407
- - Set `"type": "module"` in `package.json`
408
- - Use `.js` extensions in imports for Node.js compatibility
409
- - No CommonJS (`require`/`module.exports`) in new code
410
-
411
- Example:
412
- ```javascript
413
- // Good: ES modules with .js extension
414
- import { myFunction } from './my-module.js';
415
- import fs from 'node:fs';
416
-
417
- export { myFunction };
418
- export default class MyClass {}
419
- ```
420
-
421
- ```javascript
422
- // Bad: CommonJS
423
- const { myFunction } = require('./my-module');
424
- module.exports = { myFunction };
425
- ```
426
-
427
- ## Error Handling
428
-
429
- - Always handle errors explicitly
430
- - Use try/catch for async operations
431
- - Create custom error classes for domain errors
432
- - Never swallow errors silently
433
-
434
- Example:
435
- ```javascript
436
- export class ValidationError extends Error {
437
- constructor(message, field) {
438
- super(message);
439
- this.name = 'ValidationError';
440
- this.field = field;
441
- }
442
- }
443
-
444
- export async function fetchData(url) {
445
- try {
446
- const response = await fetch(url);
447
- if (!response.ok) {
448
- throw new Error(`HTTP ${response.status}: ${response.statusText}`);
449
- }
450
- return await response.json();
451
- } catch (error) {
452
- if (error instanceof TypeError) {
453
- throw new ValidationError('Invalid URL', 'url');
454
- }
455
- throw error;
456
- }
457
- }
458
- ```
459
-
460
- ## Documentation
461
-
462
- - Use JSDoc for documentation
463
- - Document all public APIs
464
- - Include examples
465
- - Export types for consumers (if using TypeScript types via JSDoc)
466
-
467
- Example:
468
- ```javascript
469
- /**
470
- * Processes the input data and returns a formatted result.
471
- *
472
- * @param {string} input - The input string to process
473
- * @param {Object} [options] - Optional processing options
474
- * @param {boolean} [options.trim=false] - Whether to trim whitespace
475
- * @returns {string} The processed string in uppercase
476
- * @throws {ValidationError} If input is empty
477
- *
478
- * @example
479
- * ```javascript
480
- * const result = process('hello', { trim: true });
481
- * console.log(result); // 'HELLO'
482
- * ```
483
- */
484
- export function process(input, options = {}) {
485
- if (!input) {
486
- throw new ValidationError('Input cannot be empty', 'input');
487
- }
488
- const processed = options.trim ? input.trim() : input;
489
- return processed.toUpperCase();
490
- }
491
- ```
492
-
493
- ## Async/Await Patterns
494
-
495
- - Always use async/await (not callbacks or raw promises)
496
- - Handle promise rejections
497
- - Use Promise.all for concurrent operations
498
- - Avoid blocking operations
499
-
500
- Example:
501
- ```javascript
502
- // Good: Async/await with error handling
503
- export async function processMultiple(urls) {
504
- try {
505
- const results = await Promise.all(
506
- urls.map(url => fetchData(url))
507
- );
508
- return results;
509
- } catch (error) {
510
- console.error('Failed to process URLs:', error);
511
- throw error;
512
- }
513
- }
514
-
515
- // Bad: Callback hell
516
- function processMultipleCallback(urls, callback) {
517
- let results = [];
518
- urls.forEach((url, i) => {
519
- fetchDataCallback(url, (err, data) => {
520
- if (err) return callback(err);
521
- results.push(data);
522
- if (i === urls.length - 1) callback(null, results);
523
- });
524
- });
525
- }
526
- ```
527
-
528
- ## Package Management
529
-
530
- **CRITICAL**: Use consistent package manager across team.
531
-
532
- - **Default**: npm (most compatible, built-in)
533
- - **Alternative**: pnpm (fast, disk-efficient) or yarn
534
- - **Lockfile**: Always commit lockfile (`package-lock.json`, `pnpm-lock.yaml`, or `yarn.lock`)
535
- - **IMPORTANT**: GitHub Actions `setup-node` with `cache: 'npm'` requires lockfile to be committed
536
- - Without lockfile: CI/CD fails with "Dependencies lock file is not found"
537
- - Solution: Commit `package-lock.json` and use `npm ci` in workflows
538
-
539
- ### Dependencies
540
-
541
- 1. **Check for latest versions**:
542
- - Use Context7 MCP tool if available
543
- - Check npm registry: `npm view <package> versions`
544
- - Review changelog for breaking changes
545
-
546
- 2. **Dependency Guidelines**:
547
- - ✅ Use exact versions for applications (`"1.2.3"`)
548
- - ✅ Use semver for libraries (`"^1.2.3"`)
549
- - ✅ Keep dependencies updated regularly
550
- - ✅ Use `npm audit` for security
551
- - ❌ Don't use deprecated packages
552
- - ❌ Don't add unnecessary dependencies
553
-
554
- ## CI/CD Requirements
555
-
556
- **CRITICAL**: GitHub Actions `cache: 'npm'` requires `package-lock.json` to be committed.
557
-
558
- Must include GitHub Actions workflows for:
559
-
560
- 1. **Testing** (`javascript-test.yml`):
561
- - Test on ubuntu-latest, windows-latest, macos-latest
562
- - Node.js versions: 18.x, 20.x, 22.x
563
- - Use Vitest for fast execution
564
- - Upload coverage reports
565
- - **MUST**: Commit package-lock.json for caching
566
-
567
- 2. **Linting** (`javascript-lint.yml`):
568
- - ESLint: `npm run lint`
569
- - Prettier: `npm run format:check`
570
- - **MUST**: Commit package-lock.json for caching
571
-
572
- 3. **Build** (`javascript-build.yml`):
573
- - Build: `npm run build`
574
- - Verify output artifacts
575
- - **MUST**: Commit package-lock.json for caching
576
-
577
- ## Project Structure
578
-
579
- ```
580
- project/
581
- ├── package.json # Package manifest
582
- ├── package-lock.json # Lockfile (MUST commit for CI cache)
583
- ├── eslint.config.js # ESLint configuration
584
- ├── .prettierrc.json # Prettier configuration
585
- ├── vitest.config.js # Test configuration
586
- ├── README.md # Project overview
587
- ├── LICENSE # Project license
588
- ├── src/
589
- │ ├── index.js # Main entry point
590
- │ └── ...
591
- ├── tests/ # Test files
592
- ├── dist/ # Build output (gitignored)
593
- └── docs/ # Documentation
594
- ```
595
-
596
- ## Best Practices
597
-
598
- ### DO's ✅
599
-
600
- - **USE** modern ES2022+ features
601
- - **USE** async/await for asynchronous code
602
- - **USE** strict equality (`===`) over loose equality (`==`)
603
- - **VALIDATE** all inputs
604
- - **HANDLE** errors explicitly
605
- - **DOCUMENT** public APIs with JSDoc
606
- - **TEST** all code paths
607
- - **KEEP** dependencies minimal and updated
608
-
609
- ### DON'Ts ❌
610
-
611
- - **NEVER** use `var` (use `const` or `let`)
612
- - **NEVER** use `==` (use `===`)
613
- - **NEVER** swallow errors silently
614
- - **NEVER** commit `node_modules/`
615
- - **NEVER** commit `.env` files
616
- - **NEVER** use deprecated packages
617
- - **NEVER** skip tests
618
- - **NEVER** commit console.log debugging code
619
-
620
- ## Security
621
-
622
- - Never commit secrets or API keys
623
- - Use environment variables for sensitive data
624
- - Run `npm audit` regularly
625
- - Keep dependencies updated
626
- - Use `.env` files (add to `.gitignore`)
627
-
628
- Example `.env`:
629
- ```bash
630
- API_KEY=your-secret-key
631
- DATABASE_URL=postgres://localhost/db
632
- ```
633
-
634
- Load with:
635
- ```javascript
636
- import 'dotenv/config';
637
-
638
- const apiKey = process.env.API_KEY;
639
- ```
640
-
641
- <!-- JAVASCRIPT:END -->
1
+ ---
2
+ name: "JavaScript"
3
+ description: "Execute these commands after EVERY implementation (see AGENT_AUTOMATION module for full workflow)."
4
+ version: "1.0.0"
5
+ category: "languages"
6
+ author: "Rulebook"
7
+ tags: ["languages", "language"]
8
+ dependencies: []
9
+ conflicts: []
10
+ ---
11
+ <!-- JAVASCRIPT:START -->
12
+ # JavaScript Project Rules
13
+
14
+ ## Agent Automation Commands
15
+
16
+ **CRITICAL**: Execute these commands after EVERY implementation (see AGENT_AUTOMATION module for full workflow).
17
+
18
+ ```bash
19
+ # Complete quality check sequence:
20
+ npm run lint # Linting (0 warnings required)
21
+ npm run format # Code formatting
22
+ npm test # All tests (100% pass required)
23
+ npm run test:coverage # Coverage check (95%+ required)
24
+ npm run build # Build verification (if applicable)
25
+
26
+ # Security audit:
27
+ npm audit --production # Vulnerability scan
28
+ npm outdated # Check outdated deps
29
+ ```
30
+
31
+ ## JavaScript Configuration
32
+
33
+ **CRITICAL**: Use modern JavaScript (ES2022+) with strict linting and testing.
34
+
35
+ - **Version**: Node.js 18+
36
+ - **Recommended**: Node.js 22 LTS
37
+ - **Standard**: ES2022 or later
38
+ - **Module System**: ESM (ES Modules)
39
+ - **Type**: Set `"type": "module"` in package.json
40
+
41
+ ### package.json Requirements
42
+
43
+ ```json
44
+ {
45
+ "name": "your-package",
46
+ "version": "1.0.0",
47
+ "description": "Package description",
48
+ "type": "module",
49
+ "main": "./dist/index.js",
50
+ "exports": {
51
+ ".": {
52
+ "import": "./dist/index.js"
53
+ }
54
+ },
55
+ "files": [
56
+ "dist",
57
+ "README.md",
58
+ "LICENSE"
59
+ ],
60
+ "scripts": {
61
+ "build": "esbuild src/index.js --bundle --platform=node --outfile=dist/index.js",
62
+ "test": "vitest --run",
63
+ "test:watch": "vitest",
64
+ "test:coverage": "vitest --coverage",
65
+ "lint": "eslint src/**/*.js tests/**/*.js",
66
+ "lint:fix": "eslint src/**/*.js tests/**/*.js --fix",
67
+ "format": "prettier --write 'src/**/*.js' 'tests/**/*.js'",
68
+ "format:check": "prettier --check 'src/**/*.js' 'tests/**/*.js'"
69
+ },
70
+ "engines": {
71
+ "node": ">=18.0.0"
72
+ },
73
+ "devDependencies": {
74
+ "eslint": "^9.19.0",
75
+ "prettier": "^3.4.0",
76
+ "vitest": "^2.1.0",
77
+ "@vitest/coverage-v8": "^2.1.0",
78
+ "esbuild": "^0.24.0"
79
+ }
80
+ }
81
+ ```
82
+
83
+ ## Code Quality Standards
84
+
85
+ ### Mandatory Quality Checks
86
+
87
+ **CRITICAL**: After implementing ANY feature, you MUST run these commands in order.
88
+
89
+ **IMPORTANT**: These commands MUST match your GitHub Actions workflows to prevent CI/CD failures!
90
+
91
+ ```bash
92
+ # Pre-Commit Checklist (MUST match .github/workflows/*.yml)
93
+
94
+ # 1. Lint (MUST pass with no warnings - matches workflow)
95
+ npm run lint
96
+
97
+ # 2. Format check (matches workflow - use check, not write!)
98
+ npm run format:check
99
+ # or: npx prettier --check 'src/**/*.js' 'tests/**/*.js'
100
+
101
+ # 3. Run all tests (MUST pass 100% - matches workflow)
102
+ npm test
103
+
104
+ # 4. Build (if applicable - matches workflow)
105
+ npm run build
106
+
107
+ # 5. Check coverage (MUST meet threshold)
108
+ npm run test:coverage
109
+
110
+ # If ANY fails: ❌ DO NOT COMMIT - Fix first!
111
+ ```
112
+
113
+ **If ANY of these fail, you MUST fix the issues before committing.**
114
+
115
+ **Why This Matters:**
116
+ - Running different commands locally than in CI causes "works on my machine" failures
117
+ - CI/CD workflows will fail if commands don't match
118
+ - Example: Using `prettier --write` locally but `prettier --check` in CI = failure
119
+ - Example: Skipping lint locally = CI ESLint failures catch errors you missed
120
+
121
+ ### Linting
122
+
123
+ - Use ESLint 9+ with flat config
124
+ - Configuration in `eslint.config.js`
125
+ - Must pass with no warnings
126
+ - Use recommended rule sets
127
+
128
+ Example `eslint.config.js`:
129
+ ```javascript
130
+ import js from '@eslint/js';
131
+
132
+ export default [
133
+ js.configs.recommended,
134
+ {
135
+ files: ['src/**/*.js', 'tests/**/*.js'],
136
+ languageOptions: {
137
+ ecmaVersion: 2022,
138
+ sourceType: 'module',
139
+ globals: {
140
+ console: 'readonly',
141
+ process: 'readonly',
142
+ },
143
+ },
144
+ rules: {
145
+ 'no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
146
+ 'no-console': 'off', // Allow console in Node.js
147
+ 'prefer-const': 'error',
148
+ 'no-var': 'error',
149
+ },
150
+ },
151
+ ];
152
+ ```
153
+
154
+ ### Formatting
155
+
156
+ - Use Prettier for code formatting
157
+ - Configuration in `.prettierrc.json`
158
+ - Integrate with ESLint for consistency
159
+ - Format before committing
160
+
161
+ Example `.prettierrc.json`:
162
+ ```json
163
+ {
164
+ "semi": true,
165
+ "trailingComma": "es5",
166
+ "singleQuote": true,
167
+ "printWidth": 100,
168
+ "tabWidth": 2,
169
+ "arrowParens": "always"
170
+ }
171
+ ```
172
+
173
+ ### Testing
174
+
175
+ - **Framework**: Vitest (recommended), Jest, or Mocha
176
+ - **Location**: `/tests` directory
177
+ - **Coverage**: Must meet project threshold (default 80%)
178
+ - **Watch Mode**: Use `vitest` or `vitest --watch` for development
179
+ - **CI Mode**: **CRITICAL** - Default `npm test` command MUST include `--run` flag
180
+ - This prevents Vitest from entering watch mode, which never terminates
181
+ - In `package.json`: `"test": "vitest --run"`
182
+ - For manual development, use `npm run test:watch`
183
+
184
+ Example test structure:
185
+ ```javascript
186
+ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
187
+ import { myFunction } from '../src/module.js';
188
+
189
+ describe('myFunction', () => {
190
+ let testData;
191
+
192
+ beforeEach(() => {
193
+ testData = { value: 'test' };
194
+ });
195
+
196
+ afterEach(() => {
197
+ // Cleanup
198
+ });
199
+
200
+ it('should return expected value', () => {
201
+ const result = myFunction(testData);
202
+ expect(result).toBe('expected');
203
+ });
204
+
205
+ it('should throw on invalid input', () => {
206
+ expect(() => myFunction(null)).toThrow('Invalid input');
207
+ });
208
+ });
209
+ ```
210
+
211
+ ### S2S (Server-to-Server) and Slow Tests
212
+
213
+ **CRITICAL**: Separate fast tests from slow/S2S tests.
214
+
215
+ **Problem**: Mixing fast unit tests with slow integration tests or tests requiring external servers causes:
216
+ - ❌ Slow CI/CD pipelines (10+ minutes instead of < 2 minutes)
217
+ - ❌ Flaky tests (external services unreliable)
218
+ - ❌ Developer frustration (slow test feedback)
219
+ - ❌ Blocked commits (waiting for slow tests)
220
+
221
+ **Solution**: Isolate S2S and slow tests using environment variables and tags.
222
+
223
+ #### What are S2S/Slow Tests?
224
+
225
+ **S2S (Server-to-Server) Tests**:
226
+ - Require external running servers (databases, APIs, message queues)
227
+ - Network I/O heavy
228
+ - Typically 5-30 seconds per test
229
+ - Examples: Database integration tests, API endpoint tests, message queue tests
230
+
231
+ **Slow Tests**:
232
+ - Long-running operations (processing large files, complex calculations)
233
+ - Typically > 5 seconds per test
234
+ - Examples: File processing tests, image manipulation, encryption tests
235
+
236
+ **Fast Tests** (Regular Unit Tests):
237
+ - No external dependencies
238
+ - In-memory only
239
+ - < 100ms per test
240
+ - Should be 95%+ of your test suite
241
+
242
+ #### Implementation Pattern
243
+
244
+ **1. Mark S2S/slow tests with conditional execution**:
245
+
246
+ ```javascript
247
+ // tests/integration/database.test.js
248
+ import { describe, it, expect, beforeAll, afterAll } from 'vitest';
249
+ import { setupDatabase, teardownDatabase } from './test-helpers.js';
250
+
251
+ // Only run if RUN_S2S_TESTS environment variable is set
252
+ const runS2STests = process.env.RUN_S2S_TESTS === '1';
253
+ const describeS2S = runS2STests ? describe : describe.skip;
254
+
255
+ describeS2S('Database Integration', () => {
256
+ beforeAll(async () => {
257
+ await setupDatabase();
258
+ });
259
+
260
+ afterAll(async () => {
261
+ await teardownDatabase();
262
+ });
263
+
264
+ it('should connect to database', async () => {
265
+ const result = await query('SELECT 1');
266
+ expect(result).toBeDefined();
267
+ }, { timeout: 30000 }); // 30 second timeout for S2S tests
268
+ });
269
+ ```
270
+
271
+ **2. Mark slow tests similarly**:
272
+
273
+ ```javascript
274
+ // tests/slow/file-processing.test.js
275
+ const runSlowTests = process.env.RUN_SLOW_TESTS === '1';
276
+ const describeSlow = runSlowTests ? describe : describe.skip;
277
+
278
+ describeSlow('Large File Processing', () => {
279
+ it('should process 1GB file', async () => {
280
+ const result = await processLargeFile('large-file.dat');
281
+ expect(result).toBeDefined();
282
+ }, { timeout: 60000 }); // 60 second timeout
283
+ });
284
+ ```
285
+
286
+ **3. Organize tests by speed**:
287
+
288
+ ```
289
+ tests/
290
+ ├── unit/ # Fast tests (< 100ms) - DEFAULT
291
+ │ ├── parser.test.js
292
+ │ └── validator.test.js
293
+ ├── integration/ # S2S tests (require servers)
294
+ │ ├── database.test.js
295
+ │ └── api.test.js
296
+ └── slow/ # Slow tests (> 5 seconds)
297
+ └── file-processing.test.js
298
+ ```
299
+
300
+ **4. Add npm scripts in `package.json`**:
301
+
302
+ ```json
303
+ {
304
+ "scripts": {
305
+ "test": "vitest --run",
306
+ "test:watch": "vitest",
307
+ "test:s2s": "RUN_S2S_TESTS=1 vitest --run",
308
+ "test:slow": "RUN_SLOW_TESTS=1 vitest --run",
309
+ "test:all": "RUN_S2S_TESTS=1 RUN_SLOW_TESTS=1 vitest --run"
310
+ }
311
+ }
312
+ ```
313
+
314
+ **Windows users**: Use `cross-env` for environment variables:
315
+
316
+ ```bash
317
+ npm install --save-dev cross-env
318
+ ```
319
+
320
+ ```json
321
+ {
322
+ "scripts": {
323
+ "test:s2s": "cross-env RUN_S2S_TESTS=1 vitest --run",
324
+ "test:slow": "cross-env RUN_SLOW_TESTS=1 vitest --run"
325
+ }
326
+ }
327
+ ```
328
+
329
+ #### Best Practices
330
+
331
+ - ✅ **Always run fast tests** in CI/CD by default
332
+ - ✅ **Isolate S2S tests** - never run them in standard test suite
333
+ - ✅ **Mark slow tests** - prevent CI/CD timeouts
334
+ - ✅ **Document requirements** - specify which servers/services are needed for S2S tests
335
+ - ✅ **Use timeouts** - Set appropriate timeouts: `{ timeout: 30000 }` for S2S tests
336
+ - ✅ **Use environment variables** - Control test execution with `RUN_S2S_TESTS` and `RUN_SLOW_TESTS`
337
+ - ❌ **Never mix** fast and slow/S2S tests in same test run
338
+ - ❌ **Never require** external services for standard test suite
339
+ - ❌ **Never exceed** 10-20 seconds for regular tests
340
+
341
+ #### Example: Complete Test Setup
342
+
343
+ **Fast test** (runs by default):
344
+ ```javascript
345
+ // tests/unit/calculator.test.js
346
+ import { describe, it, expect } from 'vitest';
347
+ import { add, multiply } from '../src/calculator.js';
348
+
349
+ describe('Calculator', () => {
350
+ it('should add numbers', () => {
351
+ expect(add(2, 3)).toBe(5);
352
+ });
353
+
354
+ it('should multiply numbers', () => {
355
+ expect(multiply(2, 3)).toBe(6);
356
+ });
357
+ });
358
+ ```
359
+
360
+ **S2S test** (skipped by default):
361
+ ```javascript
362
+ // tests/integration/api.test.js
363
+ import { describe, it, expect, beforeAll, afterAll } from 'vitest';
364
+
365
+ const runS2STests = process.env.RUN_S2S_TESTS === '1';
366
+ const describeS2S = runS2STests ? describe : describe.skip;
367
+
368
+ describeS2S('API Integration', () => {
369
+ let server;
370
+
371
+ beforeAll(async () => {
372
+ // Start server on port 3001
373
+ server = await startTestServer(3001);
374
+ });
375
+
376
+ afterAll(async () => {
377
+ await server.close();
378
+ });
379
+
380
+ it('should fetch users from API', async () => {
381
+ const response = await fetch('http://localhost:3001/users');
382
+ expect(response.status).toBe(200);
383
+ const data = await response.json();
384
+ expect(Array.isArray(data)).toBe(true);
385
+ }, { timeout: 30000 });
386
+ });
387
+ ```
388
+
389
+ **Running tests**:
390
+ ```bash
391
+ # Fast tests only (default - for development and CI)
392
+ npm test
393
+
394
+ # Include S2S tests (manual or scheduled CI)
395
+ npm run test:s2s
396
+
397
+ # Include slow tests
398
+ npm run test:slow
399
+
400
+ # All tests (nightly builds)
401
+ npm run test:all
402
+ ```
403
+
404
+ ## Module System
405
+
406
+ - Use ES modules (`import`/`export`)
407
+ - Set `"type": "module"` in `package.json`
408
+ - Use `.js` extensions in imports for Node.js compatibility
409
+ - No CommonJS (`require`/`module.exports`) in new code
410
+
411
+ Example:
412
+ ```javascript
413
+ // Good: ES modules with .js extension
414
+ import { myFunction } from './my-module.js';
415
+ import fs from 'node:fs';
416
+
417
+ export { myFunction };
418
+ export default class MyClass {}
419
+ ```
420
+
421
+ ```javascript
422
+ // Bad: CommonJS
423
+ const { myFunction } = require('./my-module');
424
+ module.exports = { myFunction };
425
+ ```
426
+
427
+ ## Error Handling
428
+
429
+ - Always handle errors explicitly
430
+ - Use try/catch for async operations
431
+ - Create custom error classes for domain errors
432
+ - Never swallow errors silently
433
+
434
+ Example:
435
+ ```javascript
436
+ export class ValidationError extends Error {
437
+ constructor(message, field) {
438
+ super(message);
439
+ this.name = 'ValidationError';
440
+ this.field = field;
441
+ }
442
+ }
443
+
444
+ export async function fetchData(url) {
445
+ try {
446
+ const response = await fetch(url);
447
+ if (!response.ok) {
448
+ throw new Error(`HTTP ${response.status}: ${response.statusText}`);
449
+ }
450
+ return await response.json();
451
+ } catch (error) {
452
+ if (error instanceof TypeError) {
453
+ throw new ValidationError('Invalid URL', 'url');
454
+ }
455
+ throw error;
456
+ }
457
+ }
458
+ ```
459
+
460
+ ## Documentation
461
+
462
+ - Use JSDoc for documentation
463
+ - Document all public APIs
464
+ - Include examples
465
+ - Export types for consumers (if using TypeScript types via JSDoc)
466
+
467
+ Example:
468
+ ```javascript
469
+ /**
470
+ * Processes the input data and returns a formatted result.
471
+ *
472
+ * @param {string} input - The input string to process
473
+ * @param {Object} [options] - Optional processing options
474
+ * @param {boolean} [options.trim=false] - Whether to trim whitespace
475
+ * @returns {string} The processed string in uppercase
476
+ * @throws {ValidationError} If input is empty
477
+ *
478
+ * @example
479
+ * ```javascript
480
+ * const result = process('hello', { trim: true });
481
+ * console.log(result); // 'HELLO'
482
+ * ```
483
+ */
484
+ export function process(input, options = {}) {
485
+ if (!input) {
486
+ throw new ValidationError('Input cannot be empty', 'input');
487
+ }
488
+ const processed = options.trim ? input.trim() : input;
489
+ return processed.toUpperCase();
490
+ }
491
+ ```
492
+
493
+ ## Async/Await Patterns
494
+
495
+ - Always use async/await (not callbacks or raw promises)
496
+ - Handle promise rejections
497
+ - Use Promise.all for concurrent operations
498
+ - Avoid blocking operations
499
+
500
+ Example:
501
+ ```javascript
502
+ // Good: Async/await with error handling
503
+ export async function processMultiple(urls) {
504
+ try {
505
+ const results = await Promise.all(
506
+ urls.map(url => fetchData(url))
507
+ );
508
+ return results;
509
+ } catch (error) {
510
+ console.error('Failed to process URLs:', error);
511
+ throw error;
512
+ }
513
+ }
514
+
515
+ // Bad: Callback hell
516
+ function processMultipleCallback(urls, callback) {
517
+ let results = [];
518
+ urls.forEach((url, i) => {
519
+ fetchDataCallback(url, (err, data) => {
520
+ if (err) return callback(err);
521
+ results.push(data);
522
+ if (i === urls.length - 1) callback(null, results);
523
+ });
524
+ });
525
+ }
526
+ ```
527
+
528
+ ## Package Management
529
+
530
+ **CRITICAL**: Use consistent package manager across team.
531
+
532
+ - **Default**: npm (most compatible, built-in)
533
+ - **Alternative**: pnpm (fast, disk-efficient) or yarn
534
+ - **Lockfile**: Always commit lockfile (`package-lock.json`, `pnpm-lock.yaml`, or `yarn.lock`)
535
+ - **IMPORTANT**: GitHub Actions `setup-node` with `cache: 'npm'` requires lockfile to be committed
536
+ - Without lockfile: CI/CD fails with "Dependencies lock file is not found"
537
+ - Solution: Commit `package-lock.json` and use `npm ci` in workflows
538
+
539
+ ### Dependencies
540
+
541
+ 1. **Check for latest versions**:
542
+ - Use Context7 MCP tool if available
543
+ - Check npm registry: `npm view <package> versions`
544
+ - Review changelog for breaking changes
545
+
546
+ 2. **Dependency Guidelines**:
547
+ - ✅ Use exact versions for applications (`"1.2.3"`)
548
+ - ✅ Use semver for libraries (`"^1.2.3"`)
549
+ - ✅ Keep dependencies updated regularly
550
+ - ✅ Use `npm audit` for security
551
+ - ❌ Don't use deprecated packages
552
+ - ❌ Don't add unnecessary dependencies
553
+
554
+ ## CI/CD Requirements
555
+
556
+ **CRITICAL**: GitHub Actions `cache: 'npm'` requires `package-lock.json` to be committed.
557
+
558
+ Must include GitHub Actions workflows for:
559
+
560
+ 1. **Testing** (`javascript-test.yml`):
561
+ - Test on ubuntu-latest, windows-latest, macos-latest
562
+ - Node.js versions: 18.x, 20.x, 22.x
563
+ - Use Vitest for fast execution
564
+ - Upload coverage reports
565
+ - **MUST**: Commit package-lock.json for caching
566
+
567
+ 2. **Linting** (`javascript-lint.yml`):
568
+ - ESLint: `npm run lint`
569
+ - Prettier: `npm run format:check`
570
+ - **MUST**: Commit package-lock.json for caching
571
+
572
+ 3. **Build** (`javascript-build.yml`):
573
+ - Build: `npm run build`
574
+ - Verify output artifacts
575
+ - **MUST**: Commit package-lock.json for caching
576
+
577
+ ## Project Structure
578
+
579
+ ```
580
+ project/
581
+ ├── package.json # Package manifest
582
+ ├── package-lock.json # Lockfile (MUST commit for CI cache)
583
+ ├── eslint.config.js # ESLint configuration
584
+ ├── .prettierrc.json # Prettier configuration
585
+ ├── vitest.config.js # Test configuration
586
+ ├── README.md # Project overview
587
+ ├── LICENSE # Project license
588
+ ├── src/
589
+ │ ├── index.js # Main entry point
590
+ │ └── ...
591
+ ├── tests/ # Test files
592
+ ├── dist/ # Build output (gitignored)
593
+ └── docs/ # Documentation
594
+ ```
595
+
596
+ ## Best Practices
597
+
598
+ ### DO's ✅
599
+
600
+ - **USE** modern ES2022+ features
601
+ - **USE** async/await for asynchronous code
602
+ - **USE** strict equality (`===`) over loose equality (`==`)
603
+ - **VALIDATE** all inputs
604
+ - **HANDLE** errors explicitly
605
+ - **DOCUMENT** public APIs with JSDoc
606
+ - **TEST** all code paths
607
+ - **KEEP** dependencies minimal and updated
608
+
609
+ ### DON'Ts ❌
610
+
611
+ - **NEVER** use `var` (use `const` or `let`)
612
+ - **NEVER** use `==` (use `===`)
613
+ - **NEVER** swallow errors silently
614
+ - **NEVER** commit `node_modules/`
615
+ - **NEVER** commit `.env` files
616
+ - **NEVER** use deprecated packages
617
+ - **NEVER** skip tests
618
+ - **NEVER** commit console.log debugging code
619
+
620
+ ## Security
621
+
622
+ - Never commit secrets or API keys
623
+ - Use environment variables for sensitive data
624
+ - Run `npm audit` regularly
625
+ - Keep dependencies updated
626
+ - Use `.env` files (add to `.gitignore`)
627
+
628
+ Example `.env`:
629
+ ```bash
630
+ API_KEY=your-secret-key
631
+ DATABASE_URL=postgres://localhost/db
632
+ ```
633
+
634
+ Load with:
635
+ ```javascript
636
+ import 'dotenv/config';
637
+
638
+ const apiKey = process.env.API_KEY;
639
+ ```
640
+
641
+ <!-- JAVASCRIPT:END -->