@ngocsangairvds/vsaf 4.1.8 → 4.1.10

package/skills/vds-skill/push-srs/SKILL.md

@@ -1,116 +0,0 @@
----
-name: vds-skill-push-srs
-description: Push SRS markdown to Viettel Confluence via vds-cli. Same flow as push-prd plus link to the corresponding PRD page. Use after /sdlc-srs has produced 05-srs.md. Viettel-only (requires vds-cli).
----
-
-# /vds-skill-push-srs
-
-Publish the current SRS to Viettel Confluence via `vds-cli` — create or update the page, and link to the corresponding PRD page if it exists.
-
-## Input
-
-- `[file]` — optional path to a specific markdown file. Default: scan `.vsaf/docs/features/*/05-srs.md`
-- `[comment]` — optional version note
-
-## Config Check (run FIRST)
-
-Before doing anything, run this check via Bash tool:
-
-```bash
-node .claude/skills/_shared/vds-skill/config-check.js --cmd vds-cli --env INTERNAL_CONFLUENCE_TOKEN,VDS_CONFLUENCE_SPACE_DEFAULT
-```
-
-If BLOCKED: tell the user exactly what's missing and how to fix, then STOP. Do NOT fabricate output.
-
-## Prerequisites
-
-- `vds-cli` installed
-- An SRS markdown file must exist
-- `INTERNAL_CONFLUENCE_TOKEN` + `VDS_CONFLUENCE_SPACE_DEFAULT` in `~/.vds/.env`
-- Confluence parent page in config or lazy-prompted
-
-## Steps
-
-### Step 1 — Find SRS file
-
-- If `[file]` given: use directly
-- Otherwise: list `.vsaf/docs/features/*/05-srs.md` (exclude `*-results.md`)
-- Multiple: ask user
-- None: STOP — tell user to run `/sdlc-srs` first
-- Read full content
-
-### Step 2 — Load Confluence config
-
-Same as `/vds-skill-push-prd` Step 2.
-
-### Step 3 — Determine page title
-
-- For `05-srs.md` under `features/{feature-name}/`: title = `[SRS] {Feature Name}` (derived from folder name)
-- Otherwise: first `# Heading` or filename stem
-
-### Step 4 — Convert markdown → Confluence storage format (XHTML)
-
-Same conversion rules as `/vds-skill-push-prd` Step 4 (see that skill for full reference). Save converted body to `$BODY_FILE`.
-
-### Step 5 — Search for existing page
-
-Same as `/vds-skill-push-prd` Step 5 — search for `[SRS] {Feature Name}` page in the space, store `EXISTING_PAGE_ID` and `SEARCH_RESULT`.
-
-### Step 6 — Update existing page (via vds-cli)
-
-Same as `/vds-skill-push-prd` Step 6 (with auto-retry on conflict). Use `Updated via vds-skill-push-srs` as default version comment.
-
-### Step 7 — Create new page (via vds-cli)
-
-Same as `/vds-skill-push-prd` Step 7. Use `Initial SRS push via vds-skill-push-srs` as default version comment.
-
-### Step 8 — Link SRS page to PRD page (if PRD exists)
-
-```bash
-# Derive PRD page title from feature name
-FEATURE_NAME="<from folder>"
-PRD_TITLE="[PRD] $FEATURE_NAME"
-
-PRD_PAGE=$(vds-cli confluence search \
-    --cql "space=$SPACE_KEY AND title = \"$PRD_TITLE\"" \
-    --limit 1 --json-only)
-
-PRD_URL=$(node -e \
-    "const d=JSON.parse(require('fs').readFileSync('/dev/stdin','utf8')); process.stdout.write(d.results?.[0]?.url ?? '');" \
-    <<< "$PRD_PAGE")
-
-if [[ -n "$PRD_URL" ]]; then
-    # Prepend "Related Documents" macro to SRS body BEFORE push (modify $BODY_FILE)
-    RELATED_BLOCK='<ac:structured-macro ac:name="info"><ac:parameter ac:name="title">Related Documents</ac:parameter><ac:rich-text-body><p><a href="'"$PRD_URL"'">'"$PRD_TITLE"'</a></p></ac:rich-text-body></ac:structured-macro>'
-
-    NEW_BODY=$(mktemp --suffix=.html)
-    { echo "$RELATED_BLOCK"; cat "$BODY_FILE"; } > "$NEW_BODY"
-    mv "$NEW_BODY" "$BODY_FILE"
-fi
-```
-
-This block runs BEFORE Step 6/7 actually executes the create/update — i.e., the Related Documents banner is part of the body content pushed to Confluence.
-
-### Step 9 — Output to user
-
-```
-## SRS pushed to Confluence
-
-- Page:     {page_title}
-- Action:   [Created / Updated]
-- Space:    {space_key}
-- Comment:  {comment}
-- URL:      {confluence_page_url}
-- PRD link: [linked / not found]
-
-## Next step
-Continue to Phase 5: /sdlc-test-design
-```
-
-## Notes
-
-- If `vds-cli` is not installed, tell user to install vds-scripts first
-- Do not modify the local file during this step
-- SRS result files (`*-results.md`) are test outputs — push those separately if needed
-- Conflict handling: version mismatch → auto-retry once with fresh version number
-- PRD link is best-effort — if PRD page doesn't exist in Confluence yet, SRS pushes without the link

package/skills/vds-skill/search-confluence/SKILL.md

@@ -1,53 +0,0 @@
----
-name: vds-skill-search-confluence
-description: Search Viettel Confluence + Jira for historical context related to a feature, write index to .vsaf/docs/features/{name}/01-discovery-historical.{md,json}. Run BEFORE /sdlc-discovery to enrich grill session context. Viettel-only (requires vds-cli).
----
-
-# /vds-skill-search-confluence
-
-Search Viettel Confluence + Jira for pages/tickets related to a feature, then write a Markdown + JSON index into the feature folder. Output is consumed by `/sdlc-discovery` (Phase 1) to enrich the grill session.
-
-## Config Check (run FIRST)
-
-Before doing anything, run this check via Bash tool:
-
-```bash
-node .claude/skills/_shared/vds-skill/config-check.js --cmd vds-cli --env INTERNAL_CONFLUENCE_TOKEN,JIRA_TOKEN,VDS_CONFLUENCE_SPACE_DEFAULT,VDS_JIRA_PROJECT_DEFAULT
-```
-
-If BLOCKED: tell the user exactly what's missing and how to fix, then STOP. Do NOT fabricate output. `--dry-run` mode skips vds-cli check.
-
-## Prerequisites
-
-- `vds-cli` installed
-- Inside a project root with `.vsaf/docs/features/`
-- `INTERNAL_CONFLUENCE_TOKEN`, `JIRA_TOKEN`, `VDS_CONFLUENCE_SPACE_DEFAULT`, `VDS_JIRA_PROJECT_DEFAULT` in `~/.vds/.env`
-
-## Usage
-
-```bash
-/vds-skill-search-confluence --feature user-management --query "auth jwt"
-/vds-skill-search-confluence --feature payment --query "payment flow" --days 90 --limit 50
-/vds-skill-search-confluence --feature billing --query "billing" --dry-run
-```
-
-## Behavior
-
-1. Build CQL: `space=<DEFAULT> AND text ~ "<QUERY>" AND lastmodified > now("-Nd")`
-2. Build JQL: `project = <DEFAULT> AND text ~ "<QUERY>" AND created > -Nd ORDER BY created DESC`
-3. Execute `vds-cli confluence search` + `vds-cli jira search` (sequential)
-4. Combine into JSON at `<feature-dir>/01-discovery-historical.json`
-5. Generate Markdown summary at `<feature-dir>/01-discovery-historical.md` (top 10 Confluence + top 15 Jira)
-
-## Implementation
-
-```bash
-node .claude/skills/vds-skill-search-confluence/scripts/search.js "$@"
-```
-
-## Notes
-
-- Run BEFORE `/sdlc-discovery` to enrich grill session.
-- Default `--days 180`, `--limit 30`.
-- Empty results are OK — Markdown still generated, sdlc-discovery proceeds normally.
-- Dry-run skips `vds-cli` invocation — preview mode works without `vds-cli` installed.

package/skills/vds-skill/search-confluence/scripts/search.js

@@ -1,114 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const { execFileSync } = require('child_process');
-const { existsSync, mkdirSync, writeFileSync } = require('fs');
-const { join } = require('path');
-// NOTE: path matches DEPLOYED location (.claude/skills/_shared/vds-skill/), not source repo
-const { loadCredentials, ensureEnv, requireCommand } = require('../../_shared/vds-skill/credentials.js');
-
-let feature = '';
-let query = '';
-let days = 180;
-let limit = 30;
-let dryRun = false;
-
-const args = process.argv.slice(2);
-for (let i = 0; i < args.length; i++) {
-  switch (args[i]) {
-    case '--feature': feature = args[++i]; break;
-    case '--query': query = args[++i]; break;
-    case '--days': days = parseInt(args[++i], 10); break;
-    case '--limit': limit = parseInt(args[++i], 10); break;
-    case '--dry-run': dryRun = true; break;
-    default:
-      process.stderr.write(`Unknown arg: ${args[i]}\n`);
-      process.exit(2);
-  }
-}
-
-if (!feature) { process.stderr.write('ERROR: --feature is required\n'); process.exit(2); }
-if (!query) { process.stderr.write('ERROR: --query (search keywords) is required\n'); process.exit(2); }
-
-const outDir = join('.vsaf', 'docs', 'features', feature);
-const outJson = join(outDir, '01-discovery-historical.json');
-const outMd = join(outDir, '01-discovery-historical.md');
-
-if (dryRun) {
-  loadCredentials();
-  const space = process.env.VDS_CONFLUENCE_SPACE_DEFAULT || '<VDS_CONFLUENCE_SPACE_DEFAULT>';
-  const project = process.env.VDS_JIRA_PROJECT_DEFAULT || '<VDS_JIRA_PROJECT_DEFAULT>';
-  const cql = `space=${space} AND text ~ "${query}" AND lastmodified > now("-${days}d")`;
-  const jql = `project = ${project} AND text ~ "${query}" AND created > -${days}d ORDER BY created DESC`;
-  console.log('DRY-RUN — would execute:');
-  console.log(`  vds-cli confluence search --cql "${cql}" --limit ${limit} --json-only`);
-  console.log(`  vds-cli jira search "${jql}" --limit ${limit} --json-only`);
-  console.log(`  Write to: ${outJson} + ${outMd}`);
-  process.exit(0);
-}
-
-loadCredentials();
-
-const cmdCheck = requireCommand('vds-cli');
-if (!cmdCheck.found) {
-  process.stderr.write('ERROR: vds-cli not found in PATH\n');
-  if (cmdCheck.broken) process.stderr.write(`NOTE: ${cmdCheck.path} exists but fails to run (broken shim or missing venv)\n`);
-  process.exit(127);
-}
-
-(async () => {
-  if (!await ensureEnv('INTERNAL_CONFLUENCE_TOKEN', 'Enter Confluence internal server PAT')) process.exit(1);
-  if (!await ensureEnv('JIRA_TOKEN', 'Enter Jira personal access token')) process.exit(1);
-  if (!await ensureEnv('VDS_CONFLUENCE_SPACE_DEFAULT', 'Enter default Confluence space key (e.g. ENG)', false)) process.exit(1);
-  if (!await ensureEnv('VDS_JIRA_PROJECT_DEFAULT', 'Enter default Jira project key (e.g. NTTC)', false)) process.exit(1);
-
-  const space = process.env.VDS_CONFLUENCE_SPACE_DEFAULT;
-  const project = process.env.VDS_JIRA_PROJECT_DEFAULT;
-  const cql = `space=${space} AND text ~ "${query}" AND lastmodified > now("-${days}d")`;
-  const jql = `project = ${project} AND text ~ "${query}" AND created > -${days}d ORDER BY created DESC`;
-
-  mkdirSync(outDir, { recursive: true });
-
-  console.log(`Searching Confluence (limit ${limit}, last ${days}d)...`);
-  let confResults;
-  try {
-    const stdout = execFileSync('vds-cli', ['confluence', 'search', '--cql', cql, '--limit', String(limit), '--json-only'], {
-      encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'],
-    });
-    confResults = JSON.parse(stdout);
-  } catch { confResults = { results: [] }; }
-
-  console.log(`Searching Jira (limit ${limit}, last ${days}d)...`);
-  let jiraResults;
-  try {
-    const stdout = execFileSync('vds-cli', ['jira', 'search', jql, '--limit', String(limit), '--json-only'], {
-      encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'],
-    });
-    jiraResults = JSON.parse(stdout);
-  } catch { jiraResults = { issues: [] }; }
-
-  const combined = { query, days_back: days, confluence: confResults.results || [], jira: jiraResults.issues || [] };
-  writeFileSync(outJson, JSON.stringify(combined, null, 2) + '\n');
-
-  const lines = [
-    `# Discovery Historical Context — ${query}`, '',
-    `> Generated by /vds-skill-search-confluence — searched last ${days} days`, '',
-    `## Confluence pages (${combined.confluence.length} results)`, '',
-  ];
-  for (const page of combined.confluence.slice(0, 10)) {
-    const title = page.title || '<no title>';
-    const url = page.url || (page._links && page._links.webui) || '';
-    const modified = page.lastModified || (page.version && page.version.when) || '?';
-    lines.push(`- [${title}](${url}) — modified ${modified}`);
-  }
-  lines.push('', `## Jira tickets (${combined.jira.length} results)`, '');
-  for (const issue of combined.jira.slice(0, 15)) {
-    const key = issue.key || '?';
-    const summary = (issue.fields && issue.fields.summary) || '<no summary>';
-    const status = (issue.fields && issue.fields.status && issue.fields.status.name) || '?';
-    lines.push(`- **${key}** — ${summary} (${status})`);
-  }
-  writeFileSync(outMd, lines.join('\n') + '\n');
-  console.log(`Wrote: ${outJson}`);
-  console.log(`Wrote: ${outMd}`);
-})();

package/skills/vds-skill/vds-scripts/.secrets.baseline

@@ -1,133 +0,0 @@
-{
-  "version": "1.5.0",
-  "plugins_used": [
-    {
-      "name": "ArtifactoryDetector"
-    },
-    {
-      "name": "AWSKeyDetector"
-    },
-    {
-      "name": "AzureStorageKeyDetector"
-    },
-    {
-      "name": "Base64HighEntropyString",
-      "limit": 4.5
-    },
-    {
-      "name": "BasicAuthDetector"
-    },
-    {
-      "name": "CloudantDetector"
-    },
-    {
-      "name": "DiscordBotTokenDetector"
-    },
-    {
-      "name": "GitHubTokenDetector"
-    },
-    {
-      "name": "GitLabTokenDetector"
-    },
-    {
-      "name": "HexHighEntropyString",
-      "limit": 3.0
-    },
-    {
-      "name": "IbmCloudIamDetector"
-    },
-    {
-      "name": "IbmCosHmacDetector"
-    },
-    {
-      "name": "IPPublicDetector"
-    },
-    {
-      "name": "JwtTokenDetector"
-    },
-    {
-      "name": "KeywordDetector",
-      "keyword_exclude": ""
-    },
-    {
-      "name": "MailchimpDetector"
-    },
-    {
-      "name": "NpmDetector"
-    },
-    {
-      "name": "OpenAIDetector"
-    },
-    {
-      "name": "PrivateKeyDetector"
-    },
-    {
-      "name": "PypiTokenDetector"
-    },
-    {
-      "name": "SendGridDetector"
-    },
-    {
-      "name": "SlackDetector"
-    },
-    {
-      "name": "SoftlayerDetector"
-    },
-    {
-      "name": "SquareOAuthDetector"
-    },
-    {
-      "name": "StripeDetector"
-    },
-    {
-      "name": "TelegramBotTokenDetector"
-    },
-    {
-      "name": "TwilioKeyDetector"
-    }
-  ],
-  "filters_used": [
-    {
-      "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
-    },
-    {
-      "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
-      "min_level": 2
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_indirect_reference"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_likely_id_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_lock_file"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_potential_uuid"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_sequential_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_swagger_file"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_templated_secret"
-    },
-    {
-      "path": "detect_secrets.filters.regex.should_exclude_file",
-      "pattern": [
-        ".*"
-      ]
-    }
-  ],
-  "results": {},
-  "generated_at": "2026-01-29T05:10:47Z"
-}

package/skills/vds-skill/vds-scripts/vds_cli_common/src/vds_cli_common/migrate_sdlc_config.py

@@ -1,210 +0,0 @@
-"""Migrate credentials from legacy ~/.vds/sdlc-config.env to ~/.vds/.env.
-
-The old installer wrote credentials with wrong variable names to a file
-that vds-cli never reads. This module:
-1. Parses sdlc-config.env
-2. Maps old var names → names the orchestrators actually expect
-3. Merges into ~/.vds/.env without overwriting user-set values
-4. Creates a timestamped backup of .env before modifying
-"""
-
-from __future__ import annotations
-
-import os
-import time
-from dataclasses import dataclass, field
-from pathlib import Path
-
-
-# ── Mapping table ──
-# Source: orchestrator config.py files (pydantic alias= fields)
-
-MAPPING: dict[str, str] = {
-    "VDS_CONFLUENCE_TOKEN": "INTERNAL_CONFLUENCE_TOKEN",
-    "VDS_JIRA_TOKEN": "JIRA_TOKEN",
-    "VDS_BITBUCKET_TOKEN": "BITBUCKET_TOKEN",
-    # These pass through unchanged
-    "VDS_USERNAME": "VDS_USERNAME",
-    "VDS_PASSWORD": "VDS_PASSWORD",
-    "VDS_CONFLUENCE_SPACE_DEFAULT": "VDS_CONFLUENCE_SPACE_DEFAULT",
-    "VDS_JIRA_PROJECT_DEFAULT": "VDS_JIRA_PROJECT_DEFAULT",
-}
-
-PLACEHOLDERS = frozenset({
-    "changeme",
-    "<your-token>",
-    "xxx",
-    "todo",
-    "your-confluence-token",
-    "your-jira-token",
-    "your-bitbucket-token",
-})
-
-
-@dataclass
-class MigrationResult:
-    migrated: list[str] = field(default_factory=list)
-    skipped: list[str] = field(default_factory=list)
-    warnings: list[str] = field(default_factory=list)
-    legacy_not_found: bool = False
-
-
-def parse_legacy_env(path: Path) -> dict[str, str]:
-    """Parse a shell-style .env file into {key: value}.
-
-    Handles: comments, blank lines, export prefix, single/double quotes,
-    CRLF line endings, UTF-8 BOM, equals signs in values.
-    Skips entries with empty/whitespace-only values.
-    """
-    if not path.exists():
-        return {}
-
-    raw = path.read_bytes()
-    # Strip UTF-8 BOM
-    if raw.startswith(b"\xef\xbb\xbf"):
-        raw = raw[3:]
-    text = raw.decode("utf-8")
-
-    result: dict[str, str] = {}
-    for line in text.splitlines():
-        line = line.strip()
-        if not line or line.startswith("#"):
-            continue
-        if line.startswith("export "):
-            line = line[7:].lstrip()
-        eq = line.find("=")
-        if eq <= 0:
-            continue
-        key = line[:eq].strip()
-        val = line[eq + 1:].strip()
-        # Strip matching quotes
-        if len(val) >= 2 and val[0] == val[-1] and val[0] in ("'", '"'):
-            val = val[1:-1]
-        if not val:
-            continue
-        result[key] = val
-    return result
-
-
-def _is_placeholder(value: str) -> bool:
-    return value.lower() in PLACEHOLDERS
-
-
-def _parse_target_active_keys(path: Path) -> dict[str, str]:
-    """Parse target .env, returning only active (uncommented, non-empty) keys."""
-    if not path.exists():
-        return {}
-    result: dict[str, str] = {}
-    for line in path.read_text(encoding="utf-8").splitlines():
-        stripped = line.strip()
-        if not stripped or stripped.startswith("#"):
-            continue
-        if stripped.startswith("export "):
-            stripped = stripped[7:].lstrip()
-        eq = stripped.find("=")
-        if eq <= 0:
-            continue
-        key = stripped[:eq].strip()
-        val = stripped[eq + 1:].strip()
-        if len(val) >= 2 and val[0] == val[-1] and val[0] in ("'", '"'):
-            val = val[1:-1]
-        result[key] = val
-    return result
-
-
-def migrate_sdlc_config(
-    legacy_path: Path,
-    target_path: Path,
-) -> MigrationResult:
-    """Migrate credentials from sdlc-config.env → .env.
-
-    Args:
-        legacy_path: Path to ~/.vds/sdlc-config.env
-        target_path: Path to ~/.vds/.env
-
-    Returns:
-        MigrationResult with lists of migrated, skipped, and warning entries.
-    """
-    result = MigrationResult()
-
-    if not legacy_path.exists():
-        result.legacy_not_found = True
-        return result
-
-    legacy_vars = parse_legacy_env(legacy_path)
-    if not legacy_vars:
-        return result
-
-    target_active = _parse_target_active_keys(target_path)
-
-    # Build list of vars to write
-    to_write: dict[str, str] = {}
-
-    for old_key, value in legacy_vars.items():
-        if old_key not in MAPPING:
-            result.warnings.append(f"Unknown key '{old_key}' in sdlc-config.env — not migrated")
-            continue
-
-        new_key = MAPPING[old_key]
-
-        if _is_placeholder(value):
-            result.skipped.append(old_key)
-            continue
-
-        # Check if target already has a real value for this key
-        existing = target_active.get(new_key, "")
-        if existing and not _is_placeholder(existing):
-            # Target has real value — do not overwrite
-            continue
-
-        to_write[new_key] = value
-        result.migrated.append(new_key)
-
-    if not to_write:
-        return result
-
-    # Backup existing target if it exists
-    if target_path.exists():
-        ts = str(int(time.time()))
-        backup = target_path.parent / f".env.bak.{ts}"
-        backup.write_text(target_path.read_text(encoding="utf-8"), encoding="utf-8")
-
-    # Read existing content (or start fresh)
-    if target_path.exists():
-        lines = target_path.read_text(encoding="utf-8").splitlines(keepends=True)
-    else:
-        target_path.parent.mkdir(parents=True, exist_ok=True)
-        lines = []
-
-    # Update existing lines in-place where key exists with empty/placeholder value
-    updated_keys: set[str] = set()
-    new_lines: list[str] = []
-    for line in lines:
-        stripped = line.strip()
-        if stripped and not stripped.startswith("#"):
-            eq = stripped.find("=")
-            if eq > 0:
-                key = stripped[:eq].strip()
-                if key in to_write:
-                    new_lines.append(f"{key}={to_write[key]}\n")
-                    updated_keys.add(key)
-                    continue
-        new_lines.append(line if line.endswith("\n") else line + "\n")
-
-    # Append remaining keys not already in file
-    remaining = {k: v for k, v in to_write.items() if k not in updated_keys}
-    if remaining:
-        if new_lines and not new_lines[-1].strip() == "":
-            new_lines.append("\n")
-        new_lines.append("# --- Migrated from sdlc-config.env ---\n")
-        for key, val in remaining.items():
-            new_lines.append(f"{key}={val}\n")
-
-    # Atomic write via temp file
-    tmp_path = target_path.parent / ".env.tmp"
-    tmp_path.write_text("".join(new_lines), encoding="utf-8")
-    if os.name != "nt":
-        os.chmod(tmp_path, 0o600)
-    tmp_path.rename(target_path)
-
-    return result