@ngxtm/devkit 3.0.2 → 3.1.0

package/skills/helm-chart-scaffolding/scripts/validate-chart.sh

@@ -0,0 +1,244 @@
+#!/bin/bash
+set -e
+
+CHART_DIR="${1:-.}"
+RELEASE_NAME="test-release"
+
+echo "═══════════════════════════════════════════════════════"
+echo "  Helm Chart Validation"
+echo "═══════════════════════════════════════════════════════"
+echo ""
+
+# Colors
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+RED='\033[0;31m'
+NC='\033[0m' # No Color
+
+success() {
+    echo -e "${GREEN}✓${NC} $1"
+}
+
+warning() {
+    echo -e "${YELLOW}⚠${NC} $1"
+}
+
+error() {
+    echo -e "${RED}✗${NC} $1"
+}
+
+# Check if Helm is installed
+if ! command -v helm &> /dev/null; then
+    error "Helm is not installed"
+    exit 1
+fi
+
+echo "📦 Chart directory: $CHART_DIR"
+echo ""
+
+# 1. Check chart structure
+echo "1️⃣  Checking chart structure..."
+if [ ! -f "$CHART_DIR/Chart.yaml" ]; then
+    error "Chart.yaml not found"
+    exit 1
+fi
+success "Chart.yaml exists"
+
+if [ ! -f "$CHART_DIR/values.yaml" ]; then
+    error "values.yaml not found"
+    exit 1
+fi
+success "values.yaml exists"
+
+if [ ! -d "$CHART_DIR/templates" ]; then
+    error "templates/ directory not found"
+    exit 1
+fi
+success "templates/ directory exists"
+echo ""
+
+# 2. Lint the chart
+echo "2️⃣  Linting chart..."
+if helm lint "$CHART_DIR"; then
+    success "Chart passed lint"
+else
+    error "Chart failed lint"
+    exit 1
+fi
+echo ""
+
+# 3. Check Chart.yaml
+echo "3️⃣  Validating Chart.yaml..."
+CHART_NAME=$(grep "^name:" "$CHART_DIR/Chart.yaml" | awk '{print $2}')
+CHART_VERSION=$(grep "^version:" "$CHART_DIR/Chart.yaml" | awk '{print $2}')
+APP_VERSION=$(grep "^appVersion:" "$CHART_DIR/Chart.yaml" | awk '{print $2}' | tr -d '"')
+
+if [ -z "$CHART_NAME" ]; then
+    error "Chart name not found"
+    exit 1
+fi
+success "Chart name: $CHART_NAME"
+
+if [ -z "$CHART_VERSION" ]; then
+    error "Chart version not found"
+    exit 1
+fi
+success "Chart version: $CHART_VERSION"
+
+if [ -z "$APP_VERSION" ]; then
+    warning "App version not specified"
+else
+    success "App version: $APP_VERSION"
+fi
+echo ""
+
+# 4. Test template rendering
+echo "4️⃣  Testing template rendering..."
+if helm template "$RELEASE_NAME" "$CHART_DIR" > /dev/null 2>&1; then
+    success "Templates rendered successfully"
+else
+    error "Template rendering failed"
+    helm template "$RELEASE_NAME" "$CHART_DIR"
+    exit 1
+fi
+echo ""
+
+# 5. Dry-run installation
+echo "5️⃣  Testing dry-run installation..."
+if helm install "$RELEASE_NAME" "$CHART_DIR" --dry-run --debug > /dev/null 2>&1; then
+    success "Dry-run installation successful"
+else
+    error "Dry-run installation failed"
+    exit 1
+fi
+echo ""
+
+# 6. Check for required Kubernetes resources
+echo "6️⃣  Checking generated resources..."
+MANIFESTS=$(helm template "$RELEASE_NAME" "$CHART_DIR")
+
+if echo "$MANIFESTS" | grep -q "kind: Deployment"; then
+    success "Deployment found"
+else
+    warning "No Deployment found"
+fi
+
+if echo "$MANIFESTS" | grep -q "kind: Service"; then
+    success "Service found"
+else
+    warning "No Service found"
+fi
+
+if echo "$MANIFESTS" | grep -q "kind: ServiceAccount"; then
+    success "ServiceAccount found"
+else
+    warning "No ServiceAccount found"
+fi
+echo ""
+
+# 7. Check for security best practices
+echo "7️⃣  Checking security best practices..."
+if echo "$MANIFESTS" | grep -q "runAsNonRoot: true"; then
+    success "Running as non-root user"
+else
+    warning "Not explicitly running as non-root"
+fi
+
+if echo "$MANIFESTS" | grep -q "readOnlyRootFilesystem: true"; then
+    success "Using read-only root filesystem"
+else
+    warning "Not using read-only root filesystem"
+fi
+
+if echo "$MANIFESTS" | grep -q "allowPrivilegeEscalation: false"; then
+    success "Privilege escalation disabled"
+else
+    warning "Privilege escalation not explicitly disabled"
+fi
+echo ""
+
+# 8. Check for resource limits
+echo "8️⃣  Checking resource configuration..."
+if echo "$MANIFESTS" | grep -q "resources:"; then
+    if echo "$MANIFESTS" | grep -q "limits:"; then
+        success "Resource limits defined"
+    else
+        warning "No resource limits defined"
+    fi
+    if echo "$MANIFESTS" | grep -q "requests:"; then
+        success "Resource requests defined"
+    else
+        warning "No resource requests defined"
+    fi
+else
+    warning "No resources defined"
+fi
+echo ""
+
+# 9. Check for health probes
+echo "9️⃣  Checking health probes..."
+if echo "$MANIFESTS" | grep -q "livenessProbe:"; then
+    success "Liveness probe configured"
+else
+    warning "No liveness probe found"
+fi
+
+if echo "$MANIFESTS" | grep -q "readinessProbe:"; then
+    success "Readiness probe configured"
+else
+    warning "No readiness probe found"
+fi
+echo ""
+
+# 10. Check dependencies
+if [ -f "$CHART_DIR/Chart.yaml" ] && grep -q "^dependencies:" "$CHART_DIR/Chart.yaml"; then
+    echo "🔟 Checking dependencies..."
+    if helm dependency list "$CHART_DIR" > /dev/null 2>&1; then
+        success "Dependencies valid"
+
+        if [ -f "$CHART_DIR/Chart.lock" ]; then
+            success "Chart.lock file present"
+        else
+            warning "Chart.lock file missing (run 'helm dependency update')"
+        fi
+    else
+        error "Dependencies check failed"
+    fi
+    echo ""
+fi
+
+# 11. Check for values schema
+if [ -f "$CHART_DIR/values.schema.json" ]; then
+    echo "1️⃣1️⃣ Validating values schema..."
+    success "values.schema.json present"
+
+    # Validate schema if jq is available
+    if command -v jq &> /dev/null; then
+        if jq empty "$CHART_DIR/values.schema.json" 2>/dev/null; then
+            success "values.schema.json is valid JSON"
+        else
+            error "values.schema.json contains invalid JSON"
+            exit 1
+        fi
+    fi
+    echo ""
+fi
+
+# Summary
+echo "═══════════════════════════════════════════════════════"
+echo "  Validation Complete!"
+echo "═══════════════════════════════════════════════════════"
+echo ""
+echo "Chart: $CHART_NAME"
+echo "Version: $CHART_VERSION"
+if [ -n "$APP_VERSION" ]; then
+    echo "App Version: $APP_VERSION"
+fi
+echo ""
+success "All validations passed!"
+echo ""
+echo "Next steps:"
+echo "  • helm package $CHART_DIR"
+echo "  • helm install my-release $CHART_DIR"
+echo "  • helm test my-release"
+echo ""

package/skills/hr-pro/SKILL.md

@@ -0,0 +1,126 @@
+---
+name: hr-pro
+description: Professional, ethical HR partner for hiring,
+  onboarding/offboarding, PTO and leave, performance, compliant policies, and
+  employee relations. Ask for jurisdiction and company context before advising;
+  produce structured, bias-mitigated, lawful templates.
+metadata:
+  model: sonnet
+---
+
+## Use this skill when
+
+- Working on hr pro tasks or workflows
+- Needing guidance, best practices, or checklists for hr pro
+
+## Do not use this skill when
+
+- The task is unrelated to hr pro
+- You need a different domain or tool outside this scope
+
+## Instructions
+
+- Clarify goals, constraints, and required inputs.
+- Apply relevant best practices and validate outcomes.
+- Provide actionable steps and verification.
+- If detailed examples are required, open `resources/implementation-playbook.md`.
+
+You are **HR-Pro**, a professional, employee-centered and compliance-aware Human Resources subagent for Claude Code.
+
+## IMPORTANT LEGAL DISCLAIMER
+- **NOT LEGAL ADVICE.** HR-Pro provides general HR information and templates only and does not create an attorney–client relationship.
+- **Consult qualified local legal counsel** before implementing policies or taking actions that have legal effect (e.g., hiring, termination, disciplinary actions, leave determinations, compensation changes, works council/union matters).
+- This is **especially critical for international operations** (cross-border hiring, immigration, benefits, data transfers, working time rules). When in doubt, **escalate to counsel**.
+
+## Scope & Mission
+- Provide practical, lawful, and ethical HR deliverables across:
+  - Hiring & recruiting (job descriptions, structured interview kits, rubrics, scorecards)
+  - Onboarding & offboarding (checklists, comms, 30/60/90 plans)
+  - PTO (Paid Time Off) & leave policies, scheduling, and basic payroll rules of thumb
+  - Performance management (competency matrices, goal setting, reviews, PIPs)
+  - Employee relations (feedback frameworks, investigations templates, documentation standards)
+  - Compliance-aware policy drafting (privacy/data handling, working time, anti-discrimination)
+- Balance company goals and employee well-being. Never recommend practices that infringe lawful rights.
+
+## Operating Principles
+1. **Compliance-first**: Follow applicable labor and privacy laws. If jurisdiction is unknown, ask for it and provide jurisdiction-neutral guidance with jurisdiction-specific notes. **For multi-country or international scenarios, advise engaging local counsel in each jurisdiction and avoid conflicting guidance; default to the most protective applicable standard until counsel confirms.**
+2. **Evidence-based**: Use structured interviews, job-related criteria, and objective rubrics. Avoid prohibited or discriminatory questions.
+3. **Privacy & data minimization**: Only request or process the minimum personal data needed. Avoid sensitive data unless strictly necessary.
+4. **Bias mitigation & inclusion**: Use inclusive language, standardized evaluation criteria, and clear scoring anchors.
+5. **Clarity & actionability**: Deliver checklists, templates, tables, and step-by-step playbooks. Prefer Markdown.
+6. **Guardrails**: Not legal advice; flag uncertainty and **prompt escalation to qualified counsel**, particularly on high-risk actions (terminations, medical data, protected leave, union/works council issues, cross-border employment).
+
+## Information to Collect (ask up to 3 targeted questions max before proceeding)
+- **Jurisdiction** (country/state/region), union presence, and any internal policy constraints
+- **Company profile**: size, industry, org structure (IC vs. managers), remote/hybrid/on-site
+- **Employment types**: full-time, part-time, contractors; standard working hours; holiday calendar
+
+## Deliverable Format (always follow)
+Output a single Markdown package with:
+1) **Summary** (what you produced and why)  
+2) **Inputs & assumptions** (jurisdiction, company size, constraints)  
+3) **Final artifacts** (policies, JD, interview kits, rubrics, matrices, templates) with placeholders like `{{CompanyName}}`, `{{Jurisdiction}}`, `{{RoleTitle}}`, `{{ManagerName}}`, `{{StartDate}}`  
+4) **Implementation checklist** (steps, owners, timeline)  
+5) **Communication draft** (email/Slack announcement)  
+6) **Metrics** (e.g., time-to-fill, pass-through rates, eNPS, review cycle adherence)
+
+## Core Playbooks
+
+### 1) Hiring (role design → JD → interview → decision)
+- **Job Description (JD)**: mission, outcomes in the first 90 days, core competencies, must-haves vs. nice-to-haves, pay band (if available), and inclusive EOE statement.
+- **Structured Interview Kit**:
+  - 8–12 job-related questions: a mix of behavioral, situational, and technical
+  - **Rubric** with 1–5 anchors per competency (define “meets” precisely)
+  - **Panel plan**: who covers what; avoid duplication and illegal topics
+  - **Scorecard** table and **debrief** checklist
+- **Candidate Communications**: outreach templates, scheduling notes, rejection templates that give respectful, job-related feedback.
+
+### 2) Onboarding
+- **30/60/90 plan** with outcomes, learning goals, and stakeholder map
+- **Checklists** for IT access, payroll/HRIS, compliance training, and first-week schedule
+- **Buddy program** outline and feedback loops at days 7, 30, and 90
+
+### 3) PTO & Leave
+- **Policy style**: accrual or grant; eligibility; request/approval workflow; blackout periods (if any); carryover limits; sick/family leave integration
+- **Accrual formula examples** and a table with pro-rating rules
+- **Coverage plan** template and minimum staffing rules that respect local law
+
+### 4) Performance Management
+- **Competency matrix** by level (IC/Manager)
+- **Goal setting** (SMART) and check-in cadence
+- **Review packet**: peer/manager/self forms; calibration guidance
+- **PIP (Performance Improvement Plan)** template focused on coaching, with objective evidence standards
+
+### 5) Employee Relations
+- **Issue intake** template, **investigation plan**, interview notes format, and **findings memo** skeleton
+- **Documentation standards**: factual, time-stamped, job-related; avoid medical or protected-class speculation
+- **Conflict resolution** scripts (nonviolent communication; focus on behaviors and impact)
+
+### 6) Offboarding
+- **Checklist** (access, equipment, payroll, benefits)
+- **Separation options** (voluntary/involuntary) with jurisdiction prompts and legal-counsel escalation points
+- **Exit interview** guide and trend-tracking sheet
+
+## Inter-Agent Collaboration (Claude Code)
+- For company handbooks or long-form policy docs → call `docs-architect`
+- For legal language or website policies → consult `legal-advisor`
+- For security/privacy sections → consult `security-auditor`
+- For headcount/ops metrics → consult `business-analyst`
+- For hiring content and job ads → consult `content-marketer`
+
+## Style & Output Conventions
+- Use clear, respectful tone; expand acronyms on first use (e.g., **PTO = Paid Time Off**; **FLSA = Fair Labor Standards Act**; **GDPR = General Data Protection Regulation**; **EEOC = Equal Employment Opportunity Commission**).
+- Prefer tables, numbered steps, and checklists; include copy-ready snippets.
+- Include a short “Legal & Privacy Notes” block with jurisdiction prompts and links placeholders.
+- Never include discriminatory guidance or illegal questions. If the user suggests noncompliant actions, refuse and propose lawful alternatives.
+
+## Examples of Explicit Invocation
+- “Create a structured interview kit and scorecard for {{RoleTitle}} in {{Jurisdiction}} at {{CompanyName}}”
+- “Draft an accrual-based PTO policy for a 50-person company in {{Jurisdiction}} with carryover capped at 5 days”
+- “Generate a 30/60/90 onboarding plan for a remote {{RoleTitle}} in {{Department}}”
+- “Provide a PIP template for a {{RoleTitle}} with coaching steps and objective measures”
+
+## Guardrails
+- **Not a substitute for licensed legal advice**; **consult local counsel** on high-risk or jurisdiction-specific matters (terminations, protected leaves, immigration, works councils/unions, international data transfers).
+- Avoid collecting or storing sensitive personal data; request only what is necessary.
+- If jurisdiction-specific rules are unclear, ask before proceeding and provide a neutral draft plus a checklist of local checks.

package/skills/hugging-face-cli/SKILL.md

@@ -0,0 +1,198 @@
+---
+name: hugging-face-cli
+description: "Execute Hugging Face Hub operations using the `hf` CLI. Use when the user needs to download models/datasets/spaces, upload files to Hub repositories, create repos, manage local cache, or run compute jobs on HF infrastructure. Covers authentication, file transfers, repository creation, cache operations, and cloud compute."
+source: "https://github.com/huggingface/skills/tree/main/skills/hugging-face-cli"
+risk: safe
+---
+
+# Hugging Face CLI
+
+The `hf` CLI provides direct terminal access to the Hugging Face Hub for downloading, uploading, and managing repositories, cache, and compute resources.
+
+## When to Use This Skill
+
+Use this skill when:
+- User needs to download models, datasets, or spaces
+- Uploading files to Hub repositories
+- Creating Hugging Face repositories
+- Managing local cache
+- Running compute jobs on HF infrastructure
+- Working with Hugging Face Hub authentication
+
+## Quick Command Reference
+
+| Task | Command |
+|------|---------|
+| Login | `hf auth login` |
+| Download model | `hf download <repo_id>` |
+| Download to folder | `hf download <repo_id> --local-dir ./path` |
+| Upload folder | `hf upload <repo_id> . .` |
+| Create repo | `hf repo create <name>` |
+| Create tag | `hf repo tag create <repo_id> <tag>` |
+| Delete files | `hf repo-files delete <repo_id> <files>` |
+| List cache | `hf cache ls` |
+| Remove from cache | `hf cache rm <repo_or_revision>` |
+| List models | `hf models ls` |
+| Get model info | `hf models info <model_id>` |
+| List datasets | `hf datasets ls` |
+| Get dataset info | `hf datasets info <dataset_id>` |
+| List spaces | `hf spaces ls` |
+| Get space info | `hf spaces info <space_id>` |
+| List endpoints | `hf endpoints ls` |
+| Run GPU job | `hf jobs run --flavor a10g-small <image> <cmd>` |
+| Environment info | `hf env` |
+
+## Core Commands
+
+### Authentication
+```bash
+hf auth login                    # Interactive login
+hf auth login --token $HF_TOKEN  # Non-interactive
+hf auth whoami                   # Check current user
+hf auth list                     # List stored tokens
+hf auth switch                   # Switch between tokens
+hf auth logout                   # Log out
+```
+
+### Download
+```bash
+hf download <repo_id>                              # Full repo to cache
+hf download <repo_id> file.safetensors             # Specific file
+hf download <repo_id> --local-dir ./models         # To local directory
+hf download <repo_id> --include "*.safetensors"    # Filter by pattern
+hf download <repo_id> --repo-type dataset          # Dataset
+hf download <repo_id> --revision v1.0              # Specific version
+```
+
+### Upload
+```bash
+hf upload <repo_id> . .                            # Current dir to root
+hf upload <repo_id> ./models /weights              # Folder to path
+hf upload <repo_id> model.safetensors              # Single file
+hf upload <repo_id> . . --repo-type dataset        # Dataset
+hf upload <repo_id> . . --create-pr                # Create PR
+hf upload <repo_id> . . --commit-message="msg"     # Custom message
+```
+
+### Repository Management
+```bash
+hf repo create <name>                              # Create model repo
+hf repo create <name> --repo-type dataset          # Create dataset
+hf repo create <name> --private                    # Private repo
+hf repo create <name> --repo-type space --space_sdk gradio  # Gradio space
+hf repo delete <repo_id>                           # Delete repo
+hf repo move <from_id> <to_id>                     # Move repo to new namespace
+hf repo settings <repo_id> --private true          # Update repo settings
+hf repo list --repo-type model                     # List repos
+hf repo branch create <repo_id> release-v1         # Create branch
+hf repo branch delete <repo_id> release-v1         # Delete branch
+hf repo tag create <repo_id> v1.0                  # Create tag
+hf repo tag list <repo_id>                         # List tags
+hf repo tag delete <repo_id> v1.0                  # Delete tag
+```
+
+### Delete Files from Repo
+```bash
+hf repo-files delete <repo_id> folder/             # Delete folder
+hf repo-files delete <repo_id> "*.txt"             # Delete with pattern
+```
+
+### Cache Management
+```bash
+hf cache ls                      # List cached repos
+hf cache ls --revisions          # Include individual revisions
+hf cache rm model/gpt2           # Remove cached repo
+hf cache rm <revision_hash>      # Remove cached revision
+hf cache prune                   # Remove detached revisions
+hf cache verify gpt2             # Verify checksums from cache
+```
+
+### Browse Hub
+```bash
+# Models
+hf models ls                                        # List top trending models
+hf models ls --search "MiniMax" --author MiniMaxAI  # Search models
+hf models ls --filter "text-generation" --limit 20  # Filter by task
+hf models info MiniMaxAI/MiniMax-M2.1               # Get model info
+
+# Datasets
+hf datasets ls                                      # List top trending datasets
+hf datasets ls --search "finepdfs" --sort downloads # Search datasets
+hf datasets info HuggingFaceFW/finepdfs             # Get dataset info
+
+# Spaces
+hf spaces ls                                        # List top trending spaces
+hf spaces ls --filter "3d" --limit 10               # Filter by 3D modeling spaces
+hf spaces info enzostvs/deepsite                    # Get space info
+```
+
+### Jobs (Cloud Compute)
+```bash
+hf jobs run python:3.12 python script.py           # Run on CPU
+hf jobs run --flavor a10g-small <image> <cmd>      # Run on GPU
+hf jobs run --secrets HF_TOKEN <image> <cmd>       # With HF token
+hf jobs ps                                         # List jobs
+hf jobs logs <job_id>                              # View logs
+hf jobs cancel <job_id>                            # Cancel job
+```
+
+### Inference Endpoints
+```bash
+hf endpoints ls                                     # List endpoints
+hf endpoints deploy my-endpoint \
+  --repo openai/gpt-oss-120b \
+  --framework vllm \
+  --accelerator gpu \
+  --instance-size x4 \
+  --instance-type nvidia-a10g \
+  --region us-east-1 \
+  --vendor aws
+hf endpoints describe my-endpoint                   # Show endpoint details
+hf endpoints pause my-endpoint                      # Pause endpoint
+hf endpoints resume my-endpoint                     # Resume endpoint
+hf endpoints scale-to-zero my-endpoint              # Scale to zero
+hf endpoints delete my-endpoint --yes               # Delete endpoint
+```
+**GPU Flavors:** `cpu-basic`, `cpu-upgrade`, `cpu-xl`, `t4-small`, `t4-medium`, `l4x1`, `l4x4`, `l40sx1`, `l40sx4`, `l40sx8`, `a10g-small`, `a10g-large`, `a10g-largex2`, `a10g-largex4`, `a100-large`, `h100`, `h100x8`
+
+## Common Patterns
+
+### Download and Use Model Locally
+```bash
+# Download to local directory for deployment
+hf download meta-llama/Llama-3.2-1B-Instruct --local-dir ./model
+
+# Or use cache and get path
+MODEL_PATH=$(hf download meta-llama/Llama-3.2-1B-Instruct --quiet)
+```
+
+### Publish Model/Dataset
+```bash
+hf repo create my-username/my-model --private
+hf upload my-username/my-model ./output . --commit-message="Initial release"
+hf repo tag create my-username/my-model v1.0
+```
+
+### Sync Space with Local
+```bash
+hf upload my-username/my-space . . --repo-type space \
+  --exclude="logs/*" --delete="*" --commit-message="Sync"
+```
+
+### Check Cache Usage
+```bash
+hf cache ls                      # See all cached repos and sizes
+hf cache rm model/gpt2           # Remove a repo from cache
+```
+
+## Key Options
+
+- `--repo-type`: `model` (default), `dataset`, `space`
+- `--revision`: Branch, tag, or commit hash
+- `--token`: Override authentication
+- `--quiet`: Output only essential info (paths/URLs)
+
+## References
+
+- **Complete command reference**: See [references/commands.md](references/commands.md)
+- **Workflow examples**: See [references/examples.md](references/examples.md)