@maestro-js/agent-skills 1.0.0-alpha.2 → 1.0.0-alpha.21

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.complete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  await ProjectService.CompleteProject({ id }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.delete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data, redirect } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  await ProjectService.DeleteProject({ id }, requestContext.user)
+  return redirect('/inbox')
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.edit.tsx

@@ -0,0 +1,32 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+import { ProjectSchemas } from '@setlist/schemas'
+import { Form } from '~/components/form'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const parsed = await Form.serverSafeParse(ProjectSchemas.editProjectForm, formData)
+  if (!parsed.success) {
+    return Form.validationError({ issues: parsed.issues, formData: parsed.formData, formId: parsed.formId })
+  }
+
+  const profile = requestContext.user
+  const { areaId: newAreaId, ...editFields } = parsed.data as ProjectSchemas.editProjectForm
+  await ProjectService.EditProject({ id, ...editFields }, profile)
+  if (newAreaId !== undefined) {
+    await ProjectService.MoveProject({ id, areaId: newAreaId ?? null }, profile)
+  }
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.move.tsx

@@ -0,0 +1,23 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const areaIdStr = formData.get('areaId')
+  const areaId = areaIdStr && areaIdStr !== '' ? Number(areaIdStr) : null
+
+  await ProjectService.MoveProject({ id, areaId }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.reorder.tsx

@@ -0,0 +1,30 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const beforeKey = formData.get('beforeKey')
+  const afterKey = formData.get('afterKey')
+
+  await ProjectService.ReorderProject(
+    {
+      id,
+      beforeKey: typeof beforeKey === 'string' && beforeKey !== '' ? beforeKey : null,
+      afterKey: typeof afterKey === 'string' && afterKey !== '' ? afterKey : null
+    },
+    requestContext.user
+  )
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.$id.uncomplete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid project id' }, { status: 400 })
+  }
+
+  await ProjectService.UncompleteProject({ id }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/projects.tsx

@@ -0,0 +1,23 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { ProjectService } from '~/services.server'
+import { ProjectSchemas } from '@setlist/schemas'
+import { Form } from '~/components/form'
+
+export async function action({ request, context }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const formData = await request.formData()
+  const parsed = await Form.serverSafeParse(ProjectSchemas.createProjectForm, formData)
+  if (!parsed.success) {
+    return Form.validationError({ issues: parsed.issues, formData: parsed.formData, formId: parsed.formId })
+  }
+
+  const profile = requestContext.user
+  const result = await ProjectService.CreateProject(parsed.data as ProjectSchemas.createProjectForm, profile)
+
+  return { success: true, projectId: result.projectId }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.complete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  await TaskService.CompleteTask({ id }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.delete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  await TaskService.DeleteTask({ id }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.edit.tsx

@@ -0,0 +1,27 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+import { TaskSchemas } from '@setlist/schemas'
+import { Form } from '~/components/form'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const parsed = await Form.serverSafeParse(TaskSchemas.editTaskForm, formData)
+  if (!parsed.success) {
+    return Form.validationError({ issues: parsed.issues, formData: parsed.formData, formId: parsed.formId })
+  }
+
+  await TaskService.EditTask({ id, ...(parsed.data as TaskSchemas.editTaskForm) }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.move.tsx

@@ -0,0 +1,30 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const projectId = formData.get('projectId')
+  const areaId = formData.get('areaId')
+
+  await TaskService.MoveTask(
+    {
+      id,
+      projectId: typeof projectId === 'string' && projectId !== '' ? Number(projectId) : null,
+      areaId: typeof areaId === 'string' && areaId !== '' ? Number(areaId) : null
+    },
+    requestContext.user
+  )
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.reorder.tsx

@@ -0,0 +1,32 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+
+export async function action({ request, context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  const formData = await request.formData()
+  const beforeKey = formData.get('beforeKey')
+  const afterKey = formData.get('afterKey')
+  const type = formData.get('type') || 'list'
+
+  await TaskService.ReorderTask(
+    {
+      id,
+      beforeKey: typeof beforeKey === 'string' && beforeKey !== '' ? beforeKey : null,
+      afterKey: typeof afterKey === 'string' && afterKey !== '' ? afterKey : null,
+      type: type === 'scheduled' ? 'scheduled' : 'list'
+    },
+    requestContext.user
+  )
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.$id.uncomplete.tsx

@@ -0,0 +1,19 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { data } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+
+export async function action({ context, params }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    return data({ error: 'Invalid task id' }, { status: 400 })
+  }
+
+  await TaskService.UncompleteTask({ id }, requestContext.user)
+  return { success: true }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/api/tasks.tsx

@@ -0,0 +1,23 @@
+import type { ActionFunctionArgs } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { TaskService } from '~/services.server'
+import { TaskSchemas } from '@setlist/schemas'
+import { Form } from '~/components/form'
+
+export async function action({ request, context }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const formData = await request.formData()
+  const parsed = await Form.serverSafeParse(TaskSchemas.createTaskForm, formData)
+  if (!parsed.success) {
+    return Form.validationError({ issues: parsed.issues, formData: parsed.formData, formId: parsed.formId })
+  }
+
+  const profile = requestContext.user
+  const result = await TaskService.CreateTask(parsed.data as TaskSchemas.createTaskForm, profile)
+
+  return { success: true, taskId: result.taskId }
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/areas.$id.tsx

@@ -0,0 +1,155 @@
+import * as React from 'react'
+import { useLoaderData, Link } from 'react-router'
+import type { LoaderFunctionArgs } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { AreaService, TaskService } from '~/services.server'
+import { TaskList, TaskExpandedDetail } from '~/components/task-list'
+import type { TaskItem, TaskDetail } from '~/components/task-list'
+import { TaskInlineCreate } from '~/components/task-inline-create'
+import { AreaForm } from '~/components/area-form'
+import { Form } from '~/components/form'
+import { Button } from '~/components/button'
+import { AlertDialog } from '~/components/alert-dialog'
+
+export async function loader({ context, params }: LoaderFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (!requestContext.user) {
+    throw new Response('Unauthorized', { status: 401 })
+  }
+
+  const id = Number(params.id)
+  if (!Number.isFinite(id)) {
+    throw new Response('Not Found', { status: 404 })
+  }
+
+  const profile = requestContext.user
+
+  function fetchData() {
+    const area = AreaService.GetAreaById({ id }, profile)
+    const tasks = AreaService.ListTasksByAreaId({ areaId: id }, profile)
+    const projects = AreaService.ListProjectsByAreaId({ areaId: id }, profile)
+
+    const taskCountMap = projects.then((projects) =>
+      Promise.all(
+        projects.map((p) =>
+          TaskService.ListTasksByProjectId({ projectId: p.id }, profile).then((t) => [p.id, t.length] as const)
+        )
+      ).then((counts) => Object.fromEntries(counts))
+    )
+
+    return { area, tasks, projects, taskCountMap }
+  }
+
+  const promises = fetchData()
+
+  const area = await promises.area
+  if (!area) {
+    throw new Response('Not Found', { status: 404 })
+  }
+
+  return {
+    area,
+    tasks: await promises.tasks,
+    projects: await promises.projects,
+    taskCountMap: await promises.taskCountMap
+  }
+}
+
+export default function AreaDetailPage() {
+  const { area, tasks, projects, taskCountMap } = useLoaderData<typeof loader>()
+  const [selectedTaskId, setSelectedTaskId] = React.useState<number | null>(null)
+  const [showDeleteDialog, setShowDeleteDialog] = React.useState(false)
+  const [isEditingTitle, setIsEditingTitle] = React.useState(false)
+
+  return (
+    <div className="mx-auto max-w-2xl px-8 py-8">
+      <div className="mb-6">
+        <div className="flex items-start justify-between gap-4">
+          <div className="min-w-0 flex-1">
+            {isEditingTitle ? (
+              <AreaForm
+                mode="inline"
+                action={`/api/areas/${area.id}/edit`}
+                defaultValues={{ title: area.title }}
+                key={area.id + '-' + area.title}
+                inputClassName="w-full bg-transparent text-2xl font-semibold tracking-tight text-neutral-900 placeholder-neutral-400 outline-none"
+                onCancel={() => setIsEditingTitle(false)}
+                onSuccess={() => setIsEditingTitle(false)}
+              />
+            ) : (
+              <h1
+                className="cursor-pointer typography-h1"
+                onClick={() => setIsEditingTitle(true)}
+              >
+                {area.title}
+              </h1>
+            )}
+          </div>
+          <Button variant="plain" color="neutral" size="sm" onClick={() => setShowDeleteDialog(true)}>
+            Delete
+          </Button>
+          <AlertDialog
+            title="Delete area?"
+            description="This action cannot be undone."
+            variant="negative"
+            isOpen={showDeleteDialog}
+            onOpenChange={setShowDeleteDialog}
+          >
+            {({ close }) => (
+              <div className="flex gap-2">
+                <AlertDialog.CancelButton />
+                <Form method="post" action={`/api/areas/${area.id}/delete`}>
+                  <Button type="submit" color="negative">
+                    Delete
+                  </Button>
+                </Form>
+              </div>
+            )}
+          </AlertDialog>
+        </div>
+      </div>
+
+      <div className="mb-8">
+        <h2 className="mb-3 text-sm font-semibold uppercase tracking-wide text-neutral-400">Tasks</h2>
+        <TaskList
+          tasks={tasks as TaskItem[]}
+          positionField="list"
+          emptyMessage="No tasks in this area"
+          selectedTaskId={selectedTaskId}
+          onSelect={(id) => setSelectedTaskId(id === selectedTaskId ? null : id)}
+          renderExpanded={(id) => {
+            const task = tasks.find((t) => t.id === id) as TaskDetail | undefined
+            if (!task) return null
+            return (
+              <TaskExpandedDetail key={id} task={task} onClose={() => setSelectedTaskId(null)} />
+            )
+          }}
+        />
+        <div className="mt-2 border-t border-neutral-950/5 pt-2">
+          <TaskInlineCreate areaId={area.id} />
+        </div>
+      </div>
+
+      {projects.length > 0 && (
+        <div>
+          <h2 className="mb-3 text-sm font-semibold uppercase tracking-wide text-neutral-400">Projects</h2>
+          <ul className="space-y-1" role="list">
+            {projects.map((project) => (
+              <li key={project.id}>
+                <Link
+                  to={`/projects/${project.id}`}
+                  className="flex items-center justify-between rounded-lg px-3 py-2 text-sm hover:bg-neutral-50"
+                >
+                  <span className="font-medium text-neutral-900">{project.title}</span>
+                  <span className="tabular-nums text-xs text-neutral-400">
+                    {taskCountMap[project.id] ?? 0} {(taskCountMap[project.id] ?? 0) === 1 ? 'task' : 'tasks'}
+                  </span>
+                </Link>
+              </li>
+            ))}
+          </ul>
+        </div>
+      )}
+    </div>
+  )
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/auth.login.tsx

@@ -0,0 +1,98 @@
+import { data, redirect, useActionData, useNavigation } from 'react-router'
+import type { LoaderFunctionArgs, ActionFunctionArgs } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { rateLimitingMiddleware } from '~/features/rate-limiting-middleware.server'
+import { AuthService, Log } from '~/services.server'
+import { UserSchemas } from '@setlist/schemas'
+import { Form } from '~/components/form'
+import { TextField } from '~/components/text-field'
+import { Button } from '~/components/button'
+import { InlineAlert } from '~/components/inline-alert'
+
+export const middleware = [
+  rateLimitingMiddleware(({ context }) => {
+    const requestContext = getRequestContext(context)
+    const ip = requestContext.deviceContext.ip
+    if (ip) {
+      return {
+        key: `login:${ip}`,
+        maxAttemptsPerWindow: 20,
+        decaySeconds: 60
+      }
+    } else {
+      return null
+    }
+  })
+]
+
+export async function loader({ context }: LoaderFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  if (requestContext.user) {
+    throw redirect('/inbox')
+  }
+  return data({})
+}
+
+export async function action({ request, context }: ActionFunctionArgs) {
+  const formData = await request.formData()
+
+  const parsed = await Form.serverSafeParse(UserSchemas.loginForm, formData)
+  if (!parsed.success) {
+    return Form.validationError({ issues: parsed.issues, formData })
+  }
+
+  const { email } = parsed.data
+  const baseUrl = new URL(request.url).origin
+
+  try {
+    await AuthService.RequestMagicLink({ email, baseUrl })
+  } catch (error) {
+    if (error instanceof AuthService.errors.MagicLinkThrottledError) {
+      const throttledError = error as InstanceType<typeof AuthService.errors.MagicLinkThrottledError>
+      Log.info('Magic link throttled', { email })
+      throw new Response('Too Many Requests', {
+        status: 429,
+        headers: { 'Retry-After': String(throttledError.retryAfterSeconds) }
+      })
+    }
+    throw error
+  }
+
+  throw redirect(`/auth/verify?email=${encodeURIComponent(email)}`)
+}
+
+export default function LoginPage() {
+  const actionData = useActionData<typeof action>()
+  const navigation = useNavigation()
+  const isSubmitting = navigation.state === 'submitting'
+
+  const formError = actionData && !actionData.success && actionData.formSubmissionError?.issues?.[0]?.message
+
+  return (
+    <div className="flex min-h-screen items-center justify-center bg-neutral-50 px-4">
+      <div className="w-full max-w-sm space-y-8">
+        <div className="text-center">
+          <h1 className="text-2xl font-bold tracking-tight text-neutral-900">Setlist</h1>
+          <p className="mt-2 text-sm text-neutral-600">Sign in with a magic link</p>
+        </div>
+
+        {formError && <InlineAlert variant="negative" description={formError} />}
+
+        <Form method="post" className="space-y-6">
+          <TextField
+            name="email"
+            label="Email address"
+            type="email"
+            placeholder="you@example.com"
+            isRequired
+            autoFocus
+            autoComplete="email"
+          />
+          <Button type="submit" fullWidth isPending={isSubmitting}>
+            Send magic link
+          </Button>
+        </Form>
+      </div>
+    </div>
+  )
+}

package/skills/maestro-examples/references/setlist/setlist-web/app/routes/auth.logout.tsx

@@ -0,0 +1,17 @@
+import { redirect } from 'react-router'
+import type { ActionFunctionArgs } from 'react-router'
+import { getRequestContext } from '~/features/request-context.server'
+import { Auth, Log } from '~/services.server'
+
+const log = Log.channel('auth')
+
+export async function action({ request, context }: ActionFunctionArgs) {
+  const requestContext = getRequestContext(context)
+  const userId = requestContext.user?.id ?? null
+  const { cookie } = await Auth.logout({
+    cookieHeader: request.headers.get('Cookie'),
+    session: requestContext.session
+  })
+  log.info('User logged out', { action: 'auth.logout', userId })
+  return redirect('/auth/login', { headers: cookie ? { 'Set-Cookie': cookie } : {} })
+}