@muskanmeet/invoicing-design-system 0.1.0

package/.local/skills/revenuecat/references/replit-revenuecat-sdk-docs.md

@@ -0,0 +1,279 @@
+# `@replit/revenuecat-sdk` SDK Docs
+
+This SDK lets you interact with RevenueCat's Developer API to take actions like creating paywalls, products, entitlements, and more
+that wouldn't otherwise be possible with the client-side `react-native-purchases` SDK.
+
+## Usage
+
+### Creating a Client
+
+```ts
+import { createClient } from '@replit/revenuecat-sdk/client';
+import { listProjects, getCustomer } from '@replit/revenuecat-sdk';
+
+const client = createClient({
+  baseUrl: "https://api.revenuecat.com/v2",
+  headers: {
+    Authorization: `Bearer ${process.env.REVENUECAT_API_KEY}`,
+  },
+});
+```
+
+### Making Requests
+
+Pass the client to each function:
+
+```ts
+// List all projects
+const { data, error } = await listProjects({ client });
+
+// Get a specific customer
+const { data: customer } = await getCustomer({
+  client,
+  path: {
+    project_id: 'proj_xxx',
+    customer_id: 'cust_xxx',
+  },
+});
+```
+
+### Using Types
+
+All request/response types are exported:
+
+```ts
+import type { Customer, Project, GetCustomerData } from '@replit/revenuecat-sdk';
+```
+
+### Error Handling
+
+Functions return `{ data, error, response }`:
+
+```ts
+const { data, error } = await getCustomer({
+  client,
+  path: { project_id: 'proj_xxx', customer_id: 'cust_xxx' },
+});
+
+if (error) {
+  console.error('Request failed:', error);
+  return;
+}
+```
+
+Use `throwOnError: true` to throw on non-2xx responses:
+
+```ts
+const { data } = await getCustomer({
+  client,
+  path: { project_id: 'proj_xxx', customer_id: 'cust_xxx' },
+  throwOnError: true,
+});
+```
+
+---
+
+## Functions
+
+### Paywalls
+
+- `listPaywalls(options)` → `ListPaywalls` - Get a list of paywalls
+- `createPaywall(options)` → `CreatePaywall` - Create a paywall
+- `deletePaywall(options)` → `DeletePaywall` - Delete a paywall
+- `getPaywall(options)` → `GetPaywall` - Get a paywall
+
+### Apps
+
+- `listAppPublicApiKeys(options)` → `ListAppPublicApiKeys` - Get a list of the public API keys of an app
+- `listApps(options)` → `ListApps` - Get a list of apps
+- `createApp(options)` → `CreateApp` - Create an app
+- `deleteApp(options)` → `DeleteApp` - Delete an app
+- `getApp(options)` → `GetApp` - Get an app
+- `updateApp(options)` → `UpdateApp` - Update an app
+- `getAppStorekitConfig(options)` → `GetAppStorekitConfig` - Get the StoreKit configuration for an app
+
+### Projects
+
+- `listProjects(options)` → `ListProjects` - Get a list of projects
+- `createProject(options)` → `CreateProject` - Creates a new project
+
+### Audit logs
+
+- `listAuditLogs(options)` → `ListAuditLogs` - List audit logs
+
+### Collaborators
+
+- `listCollaborators(options)` → `ListCollaborators` - Get a list of collaborators
+
+### Customers
+
+- `listCustomers(options)` → `ListCustomers` - Get a list of customers
+- `createCustomer(options)` → `CreateCustomer` - Create a customer
+- `deleteCustomer(options)` → `DeleteCustomer` - Delete a customer
+- `getCustomer(options)` → `GetCustomer` - Get a customer
+- `transferCustomerData(options)` → `TransferCustomerData` - Transfer customer's subscriptions and one-time purchases to another customer
+- `grantCustomerEntitlement(options)` → `GrantCustomerEntitlement` - Grant an entitlement to a customer
+- `revokeCustomerGrantedEntitlement(options)` → `RevokeCustomerGrantedEntitlement` - Revoke a granted entitlement from a customer
+- `assignCustomerOffering(options)` → `AssignCustomerOffering` - Assign or clear an offering override for a customer
+- `listSubscriptions(options)` → `ListSubscriptions` - Get a list of subscriptions associated with a customer
+- `listPurchases(options)` → `ListPurchases` - Get a list of purchases associated with a customer
+- `listCustomerActiveEntitlements(options)` → `ListCustomerActiveEntitlements` - Get a list of customer's active entitlements
+- `listCustomerAliases(options)` → `ListCustomerAliases` - Get a list of the customer's aliases
+- `listVirtualCurrenciesBalances(options)` → `ListVirtualCurrenciesBalances` - Get a list of customer's virtual currencies balances
+- `createVirtualCurrenciesTransaction(options)` → `CreateVirtualCurrenciesTransaction` - Create a virtual currencies transaction
+- `updateVirtualCurrenciesBalance(options)` → `UpdateVirtualCurrenciesBalance` - Update a virtual currencies balance without creating a transaction
+- `listCustomerAttributes(options)` → `ListCustomerAttributes` - Get a list of the customer's attributes
+- `setCustomerAttributes(options)` → `SetCustomerAttributes` - Set a customer's attributes
+- `listCustomerInvoices(options)` → `ListCustomerInvoices` - Get a list of the customer's invoices
+- `getInvoice(options)` → `unknown` - Get an invoice
+
+### Integrations
+
+- `listWebhookIntegrations(options)` → `ListWebhookIntegrations` - List webhook integrations
+- `createWebhookIntegration(options)` → `CreateWebhookIntegration` - Create a webhook integration
+- `deleteWebhookIntegration(options)` → `DeleteWebhookIntegration` - Delete a webhook integration
+- `getWebhookIntegration(options)` → `GetWebhookIntegration` - Get a webhook integration
+- `updateWebhookIntegration(options)` → `UpdateWebhookIntegration` - Update a webhook integration
+
+### Products
+
+- `deleteProduct(options)` → `DeleteProduct` - Delete a product
+- `getProduct(options)` → `GetProduct` - Get a product
+- `updateProduct(options)` → `UpdateProduct` - Update a product
+- `archiveProduct(options)` → `ArchiveProduct` - Archive a product
+- `unarchiveProduct(options)` → `UnarchiveProduct` - Unarchive a product
+- `createProductInStore(options)` → `CreateProductInStore` - Push a product to the store
+- `listProducts(options)` → `ListProducts` - Get a list of products
+- `createProduct(options)` → `CreateProduct` - Create a product
+- `getProductStoreState(options)` → `GetProductStoreState` - Get a product store state
+- `setProductStoreState(options)` → `SetProductStoreState` - Set a product store state
+- `getProductStoreStateOperation(options)` → `GetProductStoreStateOperation` - Get a product store state operation
+- `uploadProductStoreStateScreenshot(options)` → `UploadProductStoreStateScreenshot` - Reserve a product store state screenshot upload
+
+### Virtual currencies
+
+- `listVirtualCurrencies(options)` → `ListVirtualCurrencies` - Get a list of virtual currencies
+- `createVirtualCurrency(options)` → `CreateVirtualCurrency` - Create a virtual currency
+- `deleteVirtualCurrency(options)` → `DeleteVirtualCurrency` - Delete a virtual currency
+- `getVirtualCurrency(options)` → `GetVirtualCurrency` - Get a virtual currency
+- `updateVirtualCurrency(options)` → `UpdateVirtualCurrency` - Update a virtual currency
+- `archiveVirtualCurrency(options)` → `ArchiveVirtualCurrency` - Archive a virtual currency
+- `unarchiveVirtualCurrency(options)` → `UnarchiveVirtualCurrency` - Unarchive a virtual currency
+
+### Entitlements
+
+- `deleteEntitlement(options)` → `DeleteEntitlement` - Delete an entitlement
+- `getEntitlement(options)` → `GetEntitlement` - Get an entitlement
+- `updateEntitlement(options)` → `UpdateEntitlement` - Update an entitlement
+- `listEntitlements(options)` → `ListEntitlements` - Get a list of entitlements
+- `createEntitlement(options)` → `CreateEntitlement` - Create an entitlement
+- `getProductsFromEntitlement(options)` → `GetProductsFromEntitlement` - Get a list of products attached to a given entitlement
+- `archiveEntitlement(options)` → `ArchiveEntitlement` - Archive an entitlement
+- `unarchiveEntitlement(options)` → `UnarchiveEntitlement` - Unarchive an entitlement
+- `attachProductsToEntitlement(options)` → `AttachProductsToEntitlement` - Attach a set of products to an entitlement
+- `detachProductsFromEntitlement(options)` → `DetachProductsFromEntitlement` - Detach a set of product from an entitlement
+
+### Offerings
+
+- `deleteOffering(options)` → `DeleteOffering` - Delete an offering and its attached packages
+- `getOffering(options)` → `GetOffering` - Get an offering
+- `updateOffering(options)` → `UpdateOffering` - Update an offering
+- `archiveOffering(options)` → `ArchiveOffering` - Archive an offering
+- `unarchiveOffering(options)` → `UnarchiveOffering` - Unarchive an offering
+- `listOfferings(options)` → `ListOfferings` - Get a list of offerings
+- `createOffering(options)` → `CreateOffering` - Create an offering
+- `listPackages(options)` → `ListPackages` - Get a list of packages in an offering
+- `createPackages(options)` → `CreatePackages` - Create a package
+
+### Packages
+
+- `deletePackageFromOffering(options)` → `DeletePackageFromOffering` - Delete a package
+- `getPackage(options)` → `GetPackage` - Get a package
+- `updatePackage(options)` → `UpdatePackage` - Update a package
+- `getProductsFromPackage(options)` → `GetProductsFromPackage` - Get a list of products attached to a given package of an offering
+- `attachProductsToPackage(options)` → `AttachProductsToPackage` - Attach a set of products to a package
+- `detachProductsFromPackage(options)` → `DetachProductsFromPackage` - Detach a set of products from a package
+
+### Subscriptions
+
+- `getSubscription(options)` → `GetSubscription` - Get a subscription
+- `getPlayStoreOrAppStoreSubscriptionTransactions(options)` → `GetPlayStoreOrAppStoreSubscriptionTransactions` - Get a Play Store or App Store subscription's transactions
+- `refundPlayStoreSubscriptionTransaction(options)` → `RefundPlayStoreSubscriptionTransaction` - Refund a Play Store subscription's transaction
+- `listSubscriptionEntitlements(options)` → `ListSubscriptionEntitlements` - Get a list of entitlements associated with a subscription
+- `cancelSubscription(options)` → `CancelSubscription` - Cancel an active Web Billing subscription
+- `refundSubscription(options)` → `RefundSubscription` - Refund an active Web Billing subscription
+- `getAuthorizedSubscriptionManagementUrl(options)` → `GetAuthorizedSubscriptionManagementUrl` - Get an authenticated Web Billing customer portal URL
+- `searchSubscriptions(options)` → `SearchSubscriptions` - Search subscriptions by store subscription identifier
+
+### Purchases
+
+- `getPurchase(options)` → `GetPurchase` - Get a purchase
+- `listPurchaseEntitlements(options)` → `ListPurchaseEntitlements` - Get a list of entitlements associated with a purchase
+- `refundPurchase(options)` → `RefundPurchase` - Refund a Web Billing purchase
+- `searchPurchases(options)` → `SearchPurchases` - Search one-time purchases by store purchase identifier
+
+### Metrics
+
+- `getOverviewMetrics(options)` → `GetOverviewMetrics` - Get overview metrics for a project
+
+### Charts
+
+- `getChartData(options)` → `GetChartData` - Get chart data
+- `getChartOptions(options)` → `GetChartOptions` - Get available options for a chart
+
+### Undocumented Endpoints
+
+The RevenueCat API has endpoints that are not implemented in this SDK.
+They can be accessed directly using the client's HTTP methods (`get`, `post`, etc.).
+
+#### Add Price to Test Store Product
+
+`POST /projects/{project_id}/products/{product_id}/test_store_prices`
+
+Request Body:
+
+```json
+{
+  "prices": [
+    { "amount_micros": 9990000, "currency": "USD" },
+    { "amount_micros": 8990000, "currency": "EUR" }
+  ]
+}
+```
+
+Usage:
+
+```ts
+const { data } = await client.post({
+  url: '/projects/{project_id}/products/{product_id}/test_store_prices',
+  path: { project_id, product_id },
+  body: {
+    prices: [
+      { amount_micros: 9990000, currency: 'USD' },
+      { amount_micros: 8990000, currency: 'EUR' },
+    ],
+  },
+});
+```
+
+#### List Test Store Product Prices
+
+`GET /projects/{project_id}/products/{product_id}/test_store_prices`
+
+Usage:
+
+```ts
+const { data } = await client.get({
+  url: '/projects/{project_id}/products/{product_id}/test_store_prices',
+  path: { project_id, product_id },
+});
+```
+
+Response:
+
+```json
+[
+  { "amount": 599, "amount_micros": 5990000, "currency": "USD" },
+  { "amount": 549, "amount_micros": 5490000, "currency": "EUR" }
+]
+```

package/.local/skills/revenuecat/references/subsequent-management.md

@@ -0,0 +1,63 @@
+# Subsequent Data Access & Management
+
+**CRITICAL**: DO NOT rely on hard-coded values nor reference the initial seed script for fetching data.
+
+Ensure prerequisites are met. Do not proceed until you have done so.
+
+Create a task list to track implementation progress.
+
+If the user asks to inspect, fetch, or modify RevenueCat data (e.g., "list my products", "check project settings") AFTER the initial setup:
+    - **Always use a standalone script**: Create a minimal script (e.g., `checkRevenueCat.ts` in the scripts directory) using the generated `getUncachableRevenueCatClient()` function to get an authenticated client.
+
+    - NEVER reuse the seed script used for initial setup. Always create a new script.
+
+    - Then execute the script using the run command defined in the Project Structure section of the main skill doc.
+
+    - **Source of Truth**: Always treat the RevenueCat API as the source of truth. Never attempt to query the local database for products, entitlements, or offerings.
+
+    - **Environment Variables**: Use the environment variables created during the seed process. Never hard-code IDs:
+
+        - `REVENUECAT_PROJECT_ID`
+        - `REVENUECAT_TEST_STORE_APP_ID`
+        - `REVENUECAT_APPLE_APP_STORE_APP_ID`
+        - `REVENUECAT_GOOGLE_PLAY_STORE_APP_ID`
+
+    - **Store Distinction**: Use the `app_id` from the API response to distinguish between the Test Store and production App/Play stores by comparing it to the environment variables above.
+
+    - **Minimal Example**:
+
+        ```ts
+        import { getUncachableRevenueCatClient } from "./revenueCatClient";
+        import { listProducts } from "@replit/revenuecat-sdk";
+
+        async function getProducts() {
+        const client = await getUncachableRevenueCatClient();
+        const {data: products, error: listProductsError} = await listProducts({ client, path: { project_id: process.env.REVENUECAT_PROJECT_ID! }, query: { limit: 20 } });
+        if (listProductsError) {
+            console.error("Failed to list products:", listProductsError);
+            return;
+        }
+
+        console.log(JSON.stringify(products.items, null, 2));
+        }
+
+        getProducts().catch(console.error);
+        ```
+
+**Important Considerations When Making Changes:**
+
+    - If you add or update products/packages in RevenueCat, you must also update the current offering so the client (which reads `offerings.current`) sees the changes.
+    - Display names for products must be unique -- ensure this when creating new products.
+    - Each package allows only one product per app store
+    - Access tokens expire, so always call `getUncachableRevenueCatClient()` to get a fresh client for each operation. Never cache the client.
+    - Reference the documentation for the @replit/revenuecat-sdk SDK to use the RevenueCat REST API if necessary
+
+If asked to update the price:
+
+- Test store: Create a standalone script that:
+    1. Creates new products with the updated price (use a new product identifier, e.g., append version suffix like `_v2` or price like `_999`)
+    2. Attaches the new products to the "premium" entitlement
+    3. Detaches the old products from the package
+    4. Attaches the new products to the package
+    5. **CRITICAL: Deletes the old products entirely** - The RevenueCat SDK may still resolve to old products if they exist anywhere in the project, even if they're not attached to any package. Always delete old products after creating replacements.
+- Production stores: suggest that they update the price in the respective consoles (App Store Connect / Google Play Console)

package/.local/skills/security_scan/.fingerprint

@@ -0,0 +1 @@
+062ecfff0d3c62ba0325540907166721

package/.local/skills/security_scan/SKILL.md

@@ -0,0 +1,51 @@
+---
+name: security_scan
+description: Run runDependencyAudit, runSastScan, and runHoundDogScan and return a concise, prioritized security summary with critical/high findings first. Must use this skill if security scanning is explicitly requested by the user.
+---
+
+# Security Scan Skill
+
+Run three independent scanners and summarize results:
+
+- `runDependencyAudit()` for package/dependency vulnerabilities
+- `runSastScan()` for static code findings
+- `runHoundDogScan()` for privacy/security dataflow findings
+
+## Orchestration
+
+For full scans, run scanners in parallel and tolerate per-scanner failures.
+
+```javascript
+const [depResult, sastResult, hounddogResult] = await Promise.allSettled([
+  runDependencyAudit(),
+  runSastScan(),
+  runHoundDogScan(),
+]);
+
+const dep = depResult.status === 'fulfilled' ? depResult.value : null;
+const sast = sastResult.status === 'fulfilled' ? sastResult.value : null;
+const hounddog =
+  hounddogResult.status === 'fulfilled' ? hounddogResult.value : null;
+```
+
+Do not fail the whole scan because one scanner errors.
+
+If a package install fails with HTTP 403 from `package-firewall.replit.local`, treat it as a likely security block and do not retry the same install.
+
+## Minimal Response Shape
+
+- `runDependencyAudit()`
+  - `metadata.vulnerabilities`: `{ info, low, moderate, high, critical }`
+  - `vulnerabilities[]`: `id`, `package`, `severity`, `fix`, `source`
+- `runSastScan()`
+  - `results[]`: `checkId`, `message`, `severity`, `fingerprint`, `location`
+- `runHoundDogScan()`
+  - `vulnerabilities[]`: `hash`, `ruleIds`, `message`, `severity`, `location`, `privacyViolations`, `remediation*`
+
+## Output Expectations
+
+Return concise results instead of dumping full payloads:
+
+1. Per scanner: status (`ok` or `error`) and count by severity.
+2. Top critical/high findings with file path and short message.
+3. A short remediation plan, with risky/breaking changes clearly called out.

package/.local/skills/skill-authoring/.fingerprint

@@ -0,0 +1 @@
+db9cb57bcd07a2ffc97349269fc5d86e

package/.local/skills/skill-authoring/SKILL.md

@@ -0,0 +1,99 @@
+---
+name: skill-authoring
+description: Create reusable skills that extend agent capabilities. Use when the user asks to create a skill, teach you something reusable, or save instructions for future tasks.
+---
+
+# Skill Authoring
+
+Create skills to save reusable knowledge, procedures, and workflows that persist across sessions. Skills are instructions for future versions of yourself—write them as if teaching a fresh instance how to handle a task.
+
+## When to Use
+
+- User asks to "create a skill" or "teach you how to do X"
+- User wants to save instructions for repeated future use
+- A workflow should be reusable across sessions
+
+## How to Create a Skill
+
+1. Choose a skill name (lowercase, hyphens only, e.g., `code-review`)
+2. Write the SKILL.md file to `.agents/skills/SKILLNAME/SKILL.md`
+
+## SKILL.md Format
+
+```markdown
+---
+name: skill-name
+description: What this skill does. When to use it.
+---
+
+# Skill Title
+
+Instructions, examples, and workflows go here.
+```
+
+### Frontmatter Requirements
+
+- `name`: Max 64 chars, lowercase letters/numbers/hyphens only
+- `description`: Max 1024 chars, include WHAT it does and WHEN to use it
+
+## Writing Tips
+
+- **Be concise**: Only include info you don't already know
+- **Match specificity to fragility**: Exact commands for fragile ops, general guidance for flexible tasks
+- **Include examples**: Input/output pairs help with output quality
+- **Keep under 500 lines**: For longer skills, reference separate files
+
+## Skill Locations
+
+- **`.agents/skills/`** - User and agent-editable skills. Create new skills here. These can be freely modified, updated, and deleted.
+- **`~/.local/skills/`** - Replit-provided skills. These are read-only and managed by the platform.
+
+## Key Considerations
+
+- **Description is critical for discovery**: The description determines when you'll use this skill in the future. Be specific about triggers:
+  - Bad: `description: Processes documents` (too vague)
+  - Good: `description: Extracts text and images from PDF files. Use when the user asks to read, parse, or convert PDF documents.`
+- **Collaborate with the user**: Ask what they want included. Don't guess—the user knows what's important to them
+- **Include project-specific context**: File paths, naming conventions, API endpoints, preferred libraries—things unique to this user's workflow
+- **Use separate files for large content**: Organize reference material in folders (e.g., `.agents/skills/SKILLNAME/reference/api.md`) and link to it from SKILL.md
+- **Skills can be updated**: Skills in `.agents/skills/` are mutable. Update them as you discover better patterns—don't treat them as permanent. Iterate as the user's needs evolve
+- **Skills can reference other skills**: A skill can invoke or build upon other skills. Use this to compose complex workflows from simpler building blocks
+
+## Complete Example
+
+```markdown
+---
+name: pr-review
+description: Reviews pull requests for code quality and security. Use when the user asks to review a PR or check code changes.
+---
+
+# PR Review
+
+## Process
+
+1. Read the PR description and linked issues
+2. Review each file for issues
+3. Check for test coverage
+4. Look for security vulnerabilities
+5. Summarize findings with line references
+
+## What to Check
+
+- Logic errors and edge cases
+- Security issues (injection, XSS, auth bypass)
+- Performance concerns
+- Missing error handling
+
+## Output Format
+
+\`\`\`markdown
+## Summary
+[1-2 sentence overview]
+
+## Issues Found
+- **[severity]** file:line - description
+
+## Verdict
+[Approve / Request Changes / Comment]
+\`\`\`
+```

package/.local/skills/slides/.fingerprint

@@ -0,0 +1 @@
+76c241b6eb44bb2cee58453bb134f9c5