@ngocsangairvds/vsaf 4.0.1 → 4.0.3

package/skills/sdlc/sdlc-health/SKILL.md

@@ -18,22 +18,22 @@ Execute ALL checks below in order, then print the summary table.
 Use the Read tool to check each of these 16 skill files (sdlc-health is excluded — if you're running this, it's installed). If the file exists, mark ✓. If Read returns an error, mark ✗.
 
 ```
-~/.claude/skills/sdlc-init/SKILL.md
-~/.claude/skills/sdlc-onboard-docs/SKILL.md
-~/.claude/skills/sdlc-onboard-code/SKILL.md
-~/.claude/skills/sdlc-discovery/SKILL.md
-~/.claude/skills/sdlc-prd/SKILL.md
-~/.claude/skills/sdlc-architecture/SKILL.md
-~/.claude/skills/sdlc-srs/SKILL.md
-~/.claude/skills/sdlc-test-design/SKILL.md
-~/.claude/skills/sdlc-implement/SKILL.md
-~/.claude/skills/sdlc-review/SKILL.md
-~/.claude/skills/sdlc-feature-complete/SKILL.md
-~/.claude/skills/sdlc-ship/SKILL.md
-~/.claude/skills/sdlc-hotfix-analyze/SKILL.md
-~/.claude/skills/sdlc-hotfix-red/SKILL.md
-~/.claude/skills/sdlc-hotfix-green/SKILL.md
-~/.claude/skills/sdlc-hotfix-review/SKILL.md
+.claude/skills/sdlc-init/SKILL.md
+.claude/skills/sdlc-onboard-docs/SKILL.md
+.claude/skills/sdlc-onboard-code/SKILL.md
+.claude/skills/sdlc-discovery/SKILL.md
+.claude/skills/sdlc-prd/SKILL.md
+.claude/skills/sdlc-architecture/SKILL.md
+.claude/skills/sdlc-srs/SKILL.md
+.claude/skills/sdlc-test-design/SKILL.md
+.claude/skills/sdlc-implement/SKILL.md
+.claude/skills/sdlc-review/SKILL.md
+.claude/skills/sdlc-feature-complete/SKILL.md
+.claude/skills/sdlc-ship/SKILL.md
+.claude/skills/sdlc-hotfix-analyze/SKILL.md
+.claude/skills/sdlc-hotfix-red/SKILL.md
+.claude/skills/sdlc-hotfix-green/SKILL.md
+.claude/skills/sdlc-hotfix-review/SKILL.md
 ```
 
 ### Check 2: BMAD Skills (filesystem)
@@ -41,21 +41,21 @@ Use the Read tool to check each of these 16 skill files (sdlc-health is excluded
 Check these 15 BMAD skills — required by discovery, prd, architecture, srs, test-design, review:
 
 ```
-~/.claude/skills/bmad-advanced-elicitation/SKILL.md
-~/.claude/skills/bmad-brainstorming/SKILL.md
-~/.claude/skills/bmad-domain-research/SKILL.md
-~/.claude/skills/bmad-prfaq/SKILL.md
-~/.claude/skills/bmad-create-prd/SKILL.md
-~/.claude/skills/bmad-validate-prd/SKILL.md
-~/.claude/skills/bmad-review-adversarial-general/SKILL.md
-~/.claude/skills/bmad-create-architecture/SKILL.md
-~/.claude/skills/bmad-create-epics-and-stories/SKILL.md
-~/.claude/skills/bmad-check-implementation-readiness/SKILL.md
-~/.claude/skills/bmad-agent-analyst/SKILL.md
-~/.claude/skills/bmad-review-edge-case-hunter/SKILL.md
-~/.claude/skills/bmad-code-review/SKILL.md
-~/.claude/skills/bmad-party-mode/SKILL.md
-~/.claude/skills/bmad-qa-generate-e2e-tests/SKILL.md
+.claude/skills/bmad-advanced-elicitation/SKILL.md
+.claude/skills/bmad-brainstorming/SKILL.md
+.claude/skills/bmad-domain-research/SKILL.md
+.claude/skills/bmad-prfaq/SKILL.md
+.claude/skills/bmad-create-prd/SKILL.md
+.claude/skills/bmad-validate-prd/SKILL.md
+.claude/skills/bmad-review-adversarial-general/SKILL.md
+.claude/skills/bmad-create-architecture/SKILL.md
+.claude/skills/bmad-create-epics-and-stories/SKILL.md
+.claude/skills/bmad-check-implementation-readiness/SKILL.md
+.claude/skills/bmad-agent-analyst/SKILL.md
+.claude/skills/bmad-review-edge-case-hunter/SKILL.md
+.claude/skills/bmad-code-review/SKILL.md
+.claude/skills/bmad-party-mode/SKILL.md
+.claude/skills/bmad-qa-generate-e2e-tests/SKILL.md
 ```
 
 ### Check 3: mattpocock Skills (filesystem)
@@ -63,11 +63,11 @@ Check these 15 BMAD skills — required by discovery, prd, architecture, srs, te
 Check these 5 skills — lean alternative for bugfix/known-domain flows:
 
 ```
-~/.claude/skills/grill-me/SKILL.md
-~/.claude/skills/diagnose/SKILL.md
-~/.claude/skills/zoom-out/SKILL.md
-~/.claude/skills/tdd/SKILL.md
-~/.claude/skills/improve-codebase-architecture/SKILL.md
+.claude/skills/grill-me/SKILL.md
+.claude/skills/diagnose/SKILL.md
+.claude/skills/zoom-out/SKILL.md
+.claude/skills/tdd/SKILL.md
+.claude/skills/improve-codebase-architecture/SKILL.md
 ```
 
 ### Check 4: Plugins (Claude-only)

package/skills/vds-skill/_shared/credentials.sh

@@ -0,0 +1,79 @@
+#!/bin/bash
+# Shared credential helper for vds-skill-* skills.
+# Sourced by skill scripts to lazy-prompt + persist credentials.
+# Config file: ~/.vds/sdlc-config.env (chmod 600)
+#
+# Portable across bash and zsh (uses eval for indirect expansion).
+
+VSAF_CONFIG_FILE="${VSAF_CONFIG_FILE:-$HOME/.vds/sdlc-config.env}"
+readonly VSAF_CONFIG_FILE
+
+# Load existing config if present
+if [[ -f "$VSAF_CONFIG_FILE" ]]; then
+    # shellcheck source=/dev/null
+    source "$VSAF_CONFIG_FILE"
+fi
+
+# Also load vds-cli's own env if present (for token reuse)
+if [[ -f "$HOME/.vds/.env" ]]; then
+    set -a
+    # shellcheck source=/dev/null
+    source "$HOME/.vds/.env"
+    set +a
+fi
+
+# ensure_env VAR_NAME "Prompt message" [is_secret]
+# Prompts user if VAR is empty, persists to config file.
+# Re-persists if VAR is pre-set (supports token rotation).
+ensure_env() {
+    local var="$1"
+    local prompt="${2:-Enter $var}"
+    local is_secret="${3:-true}"
+
+    # Portable indirect expansion (works in both bash and zsh)
+    local value
+    eval "value=\${$var:-}"
+
+    if [[ -z "$value" ]]; then
+        # Prompt user
+        if [[ "$is_secret" == "true" ]]; then
+            read -rsp "$prompt: " value
+            echo "" >&2
+        else
+            read -rp "$prompt: " value
+        fi
+
+        if [[ -z "$value" ]]; then
+            echo "ERROR: $var is required" >&2
+            return 1
+        fi
+
+        export "$var=$value"
+    fi
+
+    # Persist to config file (idempotent — replace existing entry or append)
+    mkdir -p "$(dirname "$VSAF_CONFIG_FILE")" || { echo "ERROR: Cannot create config dir $(dirname "$VSAF_CONFIG_FILE")" >&2; return 1; }
+
+    if grep -q "^${var}=" "$VSAF_CONFIG_FILE" 2>/dev/null; then
+        # Update in place (BSD/GNU sed compatible via tmp file)
+        local tmp
+        tmp=$(mktemp) || { echo "ERROR: mktemp failed" >&2; return 1; }
+        trap 'rm -f "$tmp"' EXIT INT TERM
+        grep -v "^${var}=" "$VSAF_CONFIG_FILE" > "$tmp"
+        printf '%s=%q\n' "$var" "$value" >> "$tmp"
+        mv "$tmp" "$VSAF_CONFIG_FILE"
+        trap - EXIT INT TERM
+    else
+        printf '%s=%q\n' "$var" "$value" >> "$VSAF_CONFIG_FILE"
+    fi
+    chmod 600 "$VSAF_CONFIG_FILE" || echo "WARN: Could not set chmod 600 on $VSAF_CONFIG_FILE" >&2
+}
+
+# require_command COMMAND_NAME — exits 127 if missing
+require_command() {
+    if ! command -v "$1" >/dev/null 2>&1; then
+        echo "ERROR: Required command '$1' not found in PATH" >&2
+        echo "       Install it before running this skill." >&2
+        return 127
+    fi
+}

package/skills/vds-skill/create-bitbucket-pr/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: vds-skill-create-bitbucket-pr
+description: Create a Bitbucket PR via `vds-cli bitbucket pr create`. Auto-extracts PROJECT/REPO from `git remote get-url origin`. Viettel-only — for GitHub use `gh pr create`. Run after /sdlc-ship when remote is bitbucket.digital.vn.
+---
+
+# /vds-skill-create-bitbucket-pr
+
+Create a Bitbucket PR on Viettel internal Bitbucket via `vds-cli`.
+
+## Config Check (run FIRST)
+
+Before doing anything, run this check via Bash tool:
+
+```bash
+source .claude/skills/_shared/vds-skill/credentials.sh 2>/dev/null
+MISSING=""
+[[ -z "${VDS_BITBUCKET_TOKEN:-}" ]] && MISSING="$MISSING VDS_BITBUCKET_TOKEN"
+if [[ -n "$MISSING" ]]; then
+  echo "BLOCKED — missing:$MISSING"
+  echo "Fix: edit ~/.vds/sdlc-config.env (or run: vsaf install vds-skill)"
+else
+  echo "OK"
+fi
+```
+
+If BLOCKED: tell the user exactly what's missing and how to fix, then STOP. Do NOT fabricate output. `--dry-run` mode skips credential + vds-cli checks.
+
+## Prerequisites
+
+- `vds-cli` installed (for non-dry-run)
+- Inside a git repo with remote pointing to `bitbucket.digital.vn`
+- On a named branch (not detached HEAD)
+- `VDS_BITBUCKET_TOKEN` in `~/.vds/sdlc-config.env`
+
+## Usage
+
+```bash
+/vds-skill-create-bitbucket-pr                          # interactive, target=master
+/vds-skill-create-bitbucket-pr --target develop          # different target
+/vds-skill-create-bitbucket-pr --dry-run                 # preview without executing
+/vds-skill-create-bitbucket-pr --description-file FILE   # custom description
+/vds-skill-create-bitbucket-pr --title "Custom title"
+```
+
+## Behavior
+
+1. Verify remote URL matches `bitbucket.digital.vn` — abort if not
+2. Extract PROJECT/REPO from remote URL
+3. Determine source branch (current) + target (default `master`)
+4. Auto-detect description from `.vsaf/docs/features/*/09-ship.md` or `.vsaf/docs/hotfixes/*/03-ship.md`
+5. Lazy-prompt `VDS_BITBUCKET_TOKEN` if not set
+6. Confirm with user before executing
+7. Run `vds-cli bitbucket pr create $PROJECT/$REPO --source ... --target ... --title ... --description-file ... --yes --json-only`
+
+## Implementation
+
+```bash
+bash .claude/skills/vds-skill-create-bitbucket-pr/scripts/create-pr.sh "$@"
+```
+
+## Notes
+
+- For GitHub repos: use `gh pr create` instead (already standard in `/sdlc-ship`).
+- PR description defaults to the latest ship report from `.vsaf/docs/`.
+- Dry-run works without `vds-cli` installed (preview mode).

package/skills/vds-skill/create-bitbucket-pr/scripts/create-pr.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+# vds-skill-create-bitbucket-pr: create Bitbucket PR via vds-cli
+# Usage: create-pr.sh [--dry-run] [--target BRANCH] [--description-file FILE] [--title TITLE]
+# Auto-extracts project/repo from `git remote get-url origin`.
+
+# NOTE: No `set -e` — we want full control of the exit-code path.
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/../../_shared/vds-skill/credentials.sh"
+
+require_command git
+# Note: require_command vds-cli moved AFTER dry-run check.
+
+DRY_RUN=false
+TARGET_BRANCH="master"
+DESC_FILE=""
+TITLE=""
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --dry-run) DRY_RUN=true; shift ;;
+        --target) TARGET_BRANCH="$2"; shift 2 ;;
+        --description-file) DESC_FILE="$2"; shift 2 ;;
+        --title) TITLE="$2"; shift 2 ;;
+        *) echo "Unknown arg: $1" >&2; exit 2 ;;
+    esac
+done
+
+REMOTE_URL=$(git remote get-url origin 2>/dev/null || true)
+if [[ -z "$REMOTE_URL" ]]; then
+    echo "ERROR: No git remote 'origin' configured" >&2
+    exit 1
+fi
+
+if [[ ! "$REMOTE_URL" =~ bitbucket\.digital\.vn ]]; then
+    echo "WARNING: Remote URL does not match bitbucket.digital.vn pattern:" >&2
+    echo "  $REMOTE_URL" >&2
+    echo "  This skill is for Viettel Bitbucket. For GitHub, use 'gh pr create'." >&2
+    exit 1
+fi
+
+# Extract PROJECT/REPO from URL
+# Handles:
+#   ssh://git@bitbucket.digital.vn/PROJECT/repo.git
+#   ssh://git@bitbucket.digital.vn:7999/PROJECT/repo.git
+#   https://bitbucket.digital.vn/scm/PROJECT/repo.git
+if [[ "$REMOTE_URL" =~ /scm/([^/]+)/([^/]+)\.git$ ]]; then
+    PROJECT="${BASH_REMATCH[1]}"
+    REPO="${BASH_REMATCH[2]}"
+elif [[ "$REMOTE_URL" =~ /([^/]+)/([^/]+)\.git$ ]]; then
+    PROJECT="${BASH_REMATCH[1]}"
+    REPO="${BASH_REMATCH[2]}"
+else
+    echo "ERROR: Cannot parse PROJECT/REPO from remote URL: $REMOTE_URL" >&2
+    exit 1
+fi
+
+SOURCE_BRANCH=$(git rev-parse --abbrev-ref HEAD)
+if [[ -z "$SOURCE_BRANCH" ]] || [[ "$SOURCE_BRANCH" == "HEAD" ]]; then
+    echo "ERROR: Not on a named branch" >&2
+    exit 1
+fi
+
+if [[ -z "$TITLE" ]]; then
+    TITLE=$(git log -1 --pretty=%s)
+fi
+
+if [[ -z "$DESC_FILE" ]]; then
+    DESC_FILE=$(find .vsaf/docs/features -name '09-ship.md' 2>/dev/null | head -1)
+    [[ -z "$DESC_FILE" ]] && DESC_FILE=$(find .vsaf/docs/hotfixes -name '03-ship.md' 2>/dev/null | head -1)
+fi
+
+CMD=(vds-cli bitbucket pr create "$PROJECT/$REPO"
+     --source "$SOURCE_BRANCH"
+     --target "$TARGET_BRANCH"
+     --title "$TITLE")
+[[ -n "$DESC_FILE" ]] && [[ -f "$DESC_FILE" ]] && CMD+=(--description-file "$DESC_FILE")
+
+if [[ "$DRY_RUN" == "true" ]]; then
+    echo "DRY-RUN — would execute:"
+    printf '  %q' "${CMD[@]}"
+    echo ""
+    echo "  + --yes --json-only"
+    exit 0
+fi
+
+require_command vds-cli
+
+ensure_env VDS_BITBUCKET_TOKEN "Enter VDS Bitbucket personal access token"
+
+echo "About to create PR:"
+echo "  Project/Repo: $PROJECT/$REPO"
+echo "  Source:       $SOURCE_BRANCH"
+echo "  Target:       $TARGET_BRANCH"
+echo "  Title:        $TITLE"
+echo "  Description:  ${DESC_FILE:-<empty>}"
+echo ""
+read -rp "Proceed? [y/N]: " confirm
+if [[ "$confirm" != "y" ]] && [[ "$confirm" != "Y" ]]; then
+    echo "Aborted"
+    exit 1
+fi
+
+"${CMD[@]}" --yes --json-only

package/skills/vds-skill/create-jira-epic/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: vds-skill-create-jira-epic
+description: Create a Jira Epic via `vds-cli jira create --issuetype Epic` from a PRD file. Use after /sdlc-prd has produced 02-prd.md. Auto-detects PRD location, lazy-prompts credentials. Viettel-only (requires vds-cli).
+---
+
+# /vds-skill-create-jira-epic
+
+Create a Jira Epic on Viettel Jira based on a PRD markdown file.
+
+## Config Check (run FIRST)
+
+Before doing anything, run this check via Bash tool:
+
+```bash
+source .claude/skills/_shared/vds-skill/credentials.sh 2>/dev/null
+MISSING=""
+[[ -z "${VDS_JIRA_TOKEN:-}" ]] && MISSING="$MISSING VDS_JIRA_TOKEN"
+[[ -z "${VDS_JIRA_PROJECT_DEFAULT:-}" ]] && MISSING="$MISSING VDS_JIRA_PROJECT_DEFAULT"
+if [[ -n "$MISSING" ]]; then
+  echo "BLOCKED — missing:$MISSING"
+  echo "Fix: edit ~/.vds/sdlc-config.env (or run: vsaf install vds-skill)"
+else
+  echo "OK"
+fi
+```
+
+If BLOCKED: tell the user exactly what's missing and how to fix, then STOP. Do NOT fabricate output. `--dry-run` mode skips credential + vds-cli checks.
+
+## Prerequisites
+
+- `vds-cli` installed (for non-dry-run)
+- `python3` installed
+- A PRD file exists at `.vsaf/docs/features/{feature}/02-prd.md`
+- `VDS_JIRA_TOKEN` + `VDS_JIRA_PROJECT_DEFAULT` in `~/.vds/sdlc-config.env`
+
+## Usage
+
+```bash
+/vds-skill-create-jira-epic                                  # auto-detect latest PRD
+/vds-skill-create-jira-epic --feature user-management        # specific feature folder
+/vds-skill-create-jira-epic --project NTTC                   # override project key
+/vds-skill-create-jira-epic --dry-run                        # preview
+/vds-skill-create-jira-epic --description-file path/to.md    # custom description source
+```
+
+## Behavior
+
+1. Locate PRD file (or use `--description-file`)
+2. Extract summary from PRD's first H1 heading
+3. Lazy-prompt `VDS_JIRA_TOKEN` + `VDS_JIRA_PROJECT_DEFAULT` if missing
+4. Confirm with user
+5. Run `vds-cli jira create --project KEY --issuetype Epic --summary ... --description-file ... --yes --json-only`
+6. Save returned epic key to `<feature-dir>/jira-epic-key.txt`
+
+## Implementation
+
+```bash
+bash .claude/skills/vds-skill-create-jira-epic/scripts/create-epic.sh "$@"
+```
+
+## Notes
+
+- Dry-run prints constructed `vds-cli` command without executing
+- Dry-run skips `vds-cli` availability check — works on machines without vds-cli installed
+- Epic key written to `<feature-dir>/jira-epic-key.txt` for later cross-reference

package/skills/vds-skill/create-jira-epic/scripts/create-epic.sh

@@ -0,0 +1,113 @@
+#!/bin/bash
+# vds-skill-create-jira-epic: create a Jira Epic via vds-cli
+# Usage: create-epic.sh [--dry-run] [--project KEY] [--description-file FILE] [--feature NAME]
+
+# NOTE: No `set -e` — we want full control of the exit-code path.
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/../../_shared/vds-skill/credentials.sh"
+
+require_command python3
+# Note: require_command vds-cli moved AFTER dry-run check so --dry-run
+#       works without vds-cli installed (preview mode).
+
+DRY_RUN=false
+PROJECT_KEY=""
+DESC_FILE=""
+FEATURE_NAME=""
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --dry-run) DRY_RUN=true; shift ;;
+        --project) PROJECT_KEY="$2"; shift 2 ;;
+        --description-file) DESC_FILE="$2"; shift 2 ;;
+        --feature) FEATURE_NAME="$2"; shift 2 ;;
+        *) echo "Unknown arg: $1" >&2; exit 2 ;;
+    esac
+done
+
+# Determine PRD file path
+if [[ -z "$DESC_FILE" ]]; then
+    if [[ -n "$FEATURE_NAME" ]]; then
+        for path in ".vsaf/docs/features/$FEATURE_NAME/02-prd.md"; do
+            [[ -f "$path" ]] && DESC_FILE="$path" && break
+        done
+    fi
+
+    # Fallback: most recent 02-prd.md
+    if [[ -z "$DESC_FILE" ]]; then
+        DESC_FILE=$(find .vsaf/docs/features -name '02-prd.md' 2>/dev/null \
+                    | xargs -I{} ls -t {} 2>/dev/null | head -1)
+    fi
+fi
+
+if [[ -z "$DESC_FILE" ]] || [[ ! -f "$DESC_FILE" ]]; then
+    echo "ERROR: PRD file not found. Run /sdlc-prd first or specify --description-file" >&2
+    exit 1
+fi
+
+# Derive feature name from PRD path if not given
+if [[ -z "$FEATURE_NAME" ]]; then
+    FEATURE_NAME=$(basename "$(dirname "$DESC_FILE")")
+fi
+
+# Extract summary from PRD (first H1)
+SUMMARY=$(grep -m1 '^# ' "$DESC_FILE" | sed 's/^# //' || true)
+[[ -z "$SUMMARY" ]] && SUMMARY="$FEATURE_NAME"
+
+if [[ "$DRY_RUN" == "true" ]]; then
+    DISPLAY_PROJECT="${PROJECT_KEY:-${VDS_JIRA_PROJECT_DEFAULT:-<VDS_JIRA_PROJECT_DEFAULT>}}"
+    CMD_DRY=(vds-cli jira create
+         --project "$DISPLAY_PROJECT"
+         --issuetype Epic
+         --summary "$SUMMARY"
+         --description-file "$DESC_FILE")
+    echo "DRY-RUN — would execute:"
+    printf '  %q' "${CMD_DRY[@]}"
+    echo ""
+    echo "  + --yes --json-only"
+    exit 0
+fi
+
+require_command vds-cli
+
+# Ensure credentials
+ensure_env VDS_JIRA_TOKEN "Enter VDS Jira personal access token"
+ensure_env VDS_JIRA_PROJECT_DEFAULT "Enter default Jira project key (e.g. NTTC)" false
+
+PROJECT_KEY="${PROJECT_KEY:-$VDS_JIRA_PROJECT_DEFAULT}"
+
+CMD=(vds-cli jira create
+     --project "$PROJECT_KEY"
+     --issuetype Epic
+     --summary "$SUMMARY"
+     --description-file "$DESC_FILE")
+
+echo "About to create Jira Epic:"
+echo "  Project:      $PROJECT_KEY"
+echo "  Summary:      $SUMMARY"
+echo "  Description:  $DESC_FILE"
+echo "  Feature:      $FEATURE_NAME"
+echo ""
+read -rp "Proceed? [y/N]: " confirm
+if [[ "$confirm" != "y" ]] && [[ "$confirm" != "Y" ]]; then
+    echo "Aborted"
+    exit 1
+fi
+
+RESULT=$("${CMD[@]}" --yes --json-only)
+EPIC_KEY=$(echo "$RESULT" | python3 -c 'import json,sys; print(json.load(sys.stdin).get("key",""))')
+
+if [[ -z "$EPIC_KEY" ]]; then
+    echo "ERROR: Failed to extract epic key from vds-cli response" >&2
+    echo "Response: $RESULT" >&2
+    exit 1
+fi
+
+EPIC_KEY_FILE="$(dirname "$DESC_FILE")/jira-epic-key.txt"
+echo "$EPIC_KEY" > "$EPIC_KEY_FILE"
+
+echo ""
+echo "✓ Created Jira Epic: $EPIC_KEY"
+echo "  Saved key to: $EPIC_KEY_FILE"

package/skills/vds-skill/install-deps.mjs

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+
+/**
+ * VDS Skill Pack — credential & config setup
+ *
+ * Creates ~/.vds/sdlc-config.env template with all required
+ * environment variables for vds-skill-* skills.
+ *
+ * Usage:
+ *   node install-deps.mjs [projectPath]
+ */
+
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+
+const projectPath = process.argv[2] || process.cwd();
+
+// ── Config ──
+
+const VDS_DIR = join(homedir(), '.vds');
+const CONFIG_FILE = join(VDS_DIR, 'sdlc-config.env');
+
+const REQUIRED_VARS = [
+  { name: 'VDS_CONFLUENCE_TOKEN', desc: 'Confluence personal access token', skills: 'push-prd, push-srs, search-confluence' },
+  { name: 'VDS_JIRA_TOKEN', desc: 'Jira personal access token', skills: 'create-jira-epic, search-confluence' },
+  { name: 'VDS_BITBUCKET_TOKEN', desc: 'Bitbucket personal access token', skills: 'create-bitbucket-pr' },
+  { name: 'VDS_CONFLUENCE_SPACE_DEFAULT', desc: 'Default Confluence space key (e.g. CEP)', skills: 'push-prd, push-srs, search-confluence' },
+  { name: 'VDS_JIRA_PROJECT_DEFAULT', desc: 'Default Jira project key (e.g. NTTC)', skills: 'create-jira-epic, search-confluence' },
+];
+
+// ── Helpers ──
+
+function log(icon, msg) {
+  console.log(`  ${icon} ${msg}`);
+}
+
+function parseExistingConfig(filePath) {
+  if (!existsSync(filePath)) return {};
+  const vars = {};
+  for (const line of readFileSync(filePath, 'utf-8').split('\n')) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) continue;
+    const eq = trimmed.indexOf('=');
+    if (eq > 0) {
+      const key = trimmed.slice(0, eq);
+      const val = trimmed.slice(eq + 1).replace(/^['"]|['"]$/g, '');
+      if (val) vars[key] = val;
+    }
+  }
+  return vars;
+}
+
+// ── Step 1: Ensure ~/.vds/ directory ──
+
+console.log('\n[vds-skill] Setting up VDS credentials...\n');
+
+mkdirSync(VDS_DIR, { recursive: true });
+
+// ── Step 2: Create or merge config template ──
+
+const existing = parseExistingConfig(CONFIG_FILE);
+const missing = [];
+const filled = [];
+
+for (const v of REQUIRED_VARS) {
+  if (existing[v.name]) {
+    filled.push(v);
+  } else {
+    missing.push(v);
+  }
+}
+
+if (!existsSync(CONFIG_FILE)) {
+  // Create fresh template
+  const lines = [
+    '# VDS Skill Pack — credential config',
+    '# File: ~/.vds/sdlc-config.env',
+    '# Permissions: 600 (auto-set by credentials.sh)',
+    '#',
+    '# Fill in the values below. Skills will use these automatically.',
+    '# To rotate a token: update the value here, skills pick it up next run.',
+    '',
+  ];
+
+  for (const v of REQUIRED_VARS) {
+    lines.push(`# ${v.desc}`);
+    lines.push(`# Used by: ${v.skills}`);
+    lines.push(`${v.name}=`);
+    lines.push('');
+  }
+
+  writeFileSync(CONFIG_FILE, lines.join('\n'), { mode: 0o600 });
+  log('✅', `Config created: ${CONFIG_FILE}`);
+} else if (missing.length > 0) {
+  // Append missing vars to existing config
+  const appendLines = ['\n# --- Added by vds-skill install ---\n'];
+  for (const v of missing) {
+    if (!readFileSync(CONFIG_FILE, 'utf-8').includes(v.name)) {
+      appendLines.push(`# ${v.desc}`);
+      appendLines.push(`# Used by: ${v.skills}`);
+      appendLines.push(`${v.name}=`);
+      appendLines.push('');
+    }
+  }
+  if (appendLines.length > 1) {
+    writeFileSync(CONFIG_FILE, readFileSync(CONFIG_FILE, 'utf-8') + appendLines.join('\n'), { mode: 0o600 });
+    log('✅', `Config updated: ${CONFIG_FILE}`);
+  }
+} else {
+  log('✅', `Config already complete: ${CONFIG_FILE}`);
+}
+
+// ── Step 3: Print status ──
+
+console.log('');
+if (filled.length > 0) {
+  log('✅', `${filled.length} credential(s) already configured:`);
+  for (const v of filled) {
+    log('  ', `${v.name} — ${v.desc}`);
+  }
+}
+
+if (missing.length > 0) {
+  console.log('');
+  log('⚠️', `${missing.length} credential(s) need to be filled:`);
+  console.log('');
+  console.log('  ┌────────────────────────────────────┬──────────────────────────────────────────────┐');
+  console.log('  │ Variable                           │ Description                                  │');
+  console.log('  ├────────────────────────────────────┼──────────────────────────────────────────────┤');
+  for (const v of missing) {
+    const name = v.name.padEnd(36);
+    const desc = v.desc.padEnd(44);
+    console.log(`  │ ${name}│ ${desc}│`);
+  }
+  console.log('  └────────────────────────────────────┴──────────────────────────────────────────────┘');
+  console.log('');
+  log('📝', `Edit config file:`);
+  console.log(`       ${CONFIG_FILE}`);
+  console.log('');
+  log('💡', 'Skills will also lazy-prompt at runtime if values are empty.');
+}
+
+// ── Step 4: Check vds-cli ──
+
+console.log('');
+try {
+  const { execSync } = await import('child_process');
+  const version = execSync('vds-cli --version', { stdio: 'pipe', encoding: 'utf-8' }).trim();
+  log('✅', `vds-cli ${version}`);
+} catch {
+  log('⚠️', 'vds-cli not found — required for non-dry-run execution');
+  log('  ', 'Install vds-scripts from Viettel internal repo, then verify:');
+  log('  ', '  command -v vds-cli && vds-cli --version');
+}
+
+console.log('\n[vds-skill] Setup complete ✅\n');