@patricio0312rev/skillset 0.1.0

package/templates/foundation/dependency-doctor/ SKILL.md

@@ -0,0 +1,163 @@
+---
+name: dependency-doctor
+description: Audits project dependencies for outdated packages, duplicates, heavy/problematic libraries, security vulnerabilities, and risky version combinations. Generates prioritized reports with security, performance, and maintainability insights, upgrade paths, and safe pinning recommendations. Use when users request dependency audits, package updates, security checks, or dependency optimization.
+---
+
+# Dependency Doctor
+
+Comprehensive dependency health analysis and upgrade planning.
+
+## Core Workflow
+
+1. **Scan manifests**: Analyze package.json, requirements.txt, Cargo.toml, go.mod, etc.
+2. **Check versions**: Identify outdated packages against latest stable versions
+3. **Detect issues**: Find duplicates, security vulnerabilities, deprecated packages, heavy bundles
+4. **Assess risk**: Evaluate breaking changes and version compatibility
+5. **Prioritize**: Rank issues by severity (security > performance > maintenance)
+6. **Generate upgrade path**: Create safe, incremental update plan
+7. **Recommend pins**: Suggest version constraints to avoid future issues
+
+## Analysis Categories
+
+### Security Issues (Critical)
+
+- Known CVEs in dependencies
+- Unmaintained packages (no updates >2 years)
+- Packages with security advisories
+- Transitive dependency vulnerabilities
+
+### Outdated Packages (High)
+
+- Major versions behind (breaking changes)
+- Minor versions behind (new features)
+- Patch versions behind (bug fixes)
+
+### Duplicate Dependencies (Medium)
+
+- Multiple versions of same package
+- Overlapping functionality (lodash + underscore)
+- Can be deduplicated
+
+### Heavy Dependencies (Medium)
+
+- Large bundle sizes (>500KB)
+- Unnecessary peer dependencies
+- Better alternatives available
+
+### Risky Combinations (Medium)
+
+- Known incompatible version pairs
+- Conflicting peer dependencies
+- Framework version mismatches
+
+## Report Structure
+
+````markdown
+# Dependency Audit Report
+
+## 🔴 Critical Security Issues (2)
+
+- axios@0.21.0 → CVE-2021-3749 → Upgrade to 1.6.0+
+- lodash@4.17.15 → Prototype pollution → Upgrade to 4.17.21+
+
+## 🟡 High Priority Updates (5)
+
+- react@17.0.2 → 18.2.0 (major, breaking changes)
+- next@12.0.0 → 14.1.0 (major, new features)
+
+## 🟢 Maintenance Updates (8)
+
+- typescript@4.9.0 → 5.3.3 (patch improvements)
+
+## 📦 Duplicates Found (3)
+
+- moment: 2.29.1, 2.30.0 → Deduplicate to 2.30.0
+- @types/node: 18.0.0, 20.0.0 → Align to 20.0.0
+
+## 🏋️ Heavy Dependencies (2)
+
+- moment (232KB) → Consider date-fns (12KB)
+- lodash (full) → Consider lodash-es or specific imports
+
+## Upgrade Path
+
+### Phase 1: Security (Do First)
+
+```bash
+npm update axios lodash
+npm audit fix
+```
+````
+
+### Phase 2: Major Frameworks (Test Thoroughly)
+
+```bash
+npm install react@18 react-dom@18
+npm install next@14
+# Run full test suite
+```
+
+### Phase 3: Minor Updates (Low Risk)
+
+```bash
+npm update
+```
+
+## Safe Pin Recommendations
+
+```json
+{
+  "axios": "^1.6.0",
+  "react": "^18.2.0",
+  "typescript": "~5.3.0"
+}
+```
+
+```
+
+## Package Manager Commands
+
+### npm
+- Audit: `npm audit`
+- Outdated: `npm outdated`
+- Dedupe: `npm dedupe`
+- Update: `npm update [package]`
+
+### yarn
+- Audit: `yarn audit`
+- Outdated: `yarn outdated`
+- Dedupe: `yarn dedupe`
+- Upgrade: `yarn upgrade [package]`
+
+### pnpm
+- Audit: `pnpm audit`
+- Outdated: `pnpm outdated`
+- Dedupe: `pnpm dedupe`
+- Update: `pnpm update [package]`
+
+### pip
+- Outdated: `pip list --outdated`
+- Update: `pip install --upgrade [package]`
+- Security: `pip-audit` or `safety check`
+
+## Upgrade Best Practices
+
+1. **Backup first**: Commit current state or create branch
+2. **Read changelogs**: Check for breaking changes
+3. **Update incrementally**: One major version at a time
+4. **Test thoroughly**: Run full test suite after each update
+5. **Check peer deps**: Ensure compatibility
+6. **Lock files**: Commit updated lock files
+7. **Monitor**: Watch for runtime issues after deployment
+
+## Version Pinning Strategy
+
+- **Exact**: `1.2.3` - Only for problematic packages
+- **Patch**: `~1.2.3` - Safe updates (1.2.x)
+- **Minor**: `^1.2.3` - Most common (1.x.x)
+- **Range**: `>=1.2.3 <2.0.0` - Explicit bounds
+
+## References
+
+See `references/common-issues.md` for known problematic package combinations and migration guides.
+```

package/templates/foundation/dev-environment-bootstrapper/ SKILL.md

@@ -0,0 +1,259 @@
+---
+name: dev-environment-bootstrapper
+description: Standardizes development environment setup across machines by generating tool version configs (Node, Python, Ruby), package manager configs (pnpm, Volta, asdf, mise), environment variable templates, and setup scripts with onboarding documentation. Use when users need to "setup dev environment", "standardize tooling", "configure version managers", or "create onboarding scripts".
+---
+
+# Dev Environment Bootstrapper
+
+Create consistent, reproducible development environments across all machines.
+
+## Core Workflow
+
+1. **Detect stack**: Identify languages and tools used in project
+2. **Choose version manager**: Select appropriate tool (Volta, asdf, mise, nvm, pyenv)
+3. **Generate configs**: Create .tool-versions, .nvmrc, package.json volta fields, etc.
+4. **Setup environment vars**: Create .env.example with all required variables
+5. **Write setup script**: Generate bootstrap script for automated setup
+6. **Create onboarding doc**: Write SETUP.md with step-by-step instructions
+
+## Version Management Strategies
+
+### Volta (Recommended for Node.js)
+
+```json
+// package.json
+{
+  "volta": {
+    "node": "20.11.0",
+    "pnpm": "8.15.0"
+  }
+}
+```
+
+### asdf (Multi-language)
+
+```
+# .tool-versions
+nodejs 20.11.0
+python 3.11.7
+ruby 3.2.2
+```
+
+### mise (Modern alternative to asdf)
+
+```toml
+# .mise.toml
+[tools]
+node = "20.11.0"
+python = "3.11"
+```
+
+### nvm (Node.js only)
+
+```
+# .nvmrc
+20.11.0
+```
+
+## Environment Variables Template
+
+```bash
+# .env.example
+
+# Application
+NODE_ENV=development
+PORT=3000
+
+# Database
+DATABASE_URL=postgresql://user:password@localhost:5432/dbname
+
+# External APIs
+OPENAI_API_KEY=sk-...
+STRIPE_SECRET_KEY=sk_test_...
+
+# Feature Flags
+ENABLE_FEATURE_X=false
+```
+
+## Setup Script Structure
+
+### For Node.js Projects
+
+```bash
+#!/bin/bash
+set -e
+
+echo "🚀 Setting up development environment..."
+
+# Check prerequisites
+command -v pnpm >/dev/null 2>&1 || { echo "Installing pnpm..."; npm install -g pnpm; }
+
+# Install dependencies
+echo "📦 Installing dependencies..."
+pnpm install
+
+# Setup environment
+echo "⚙️ Setting up environment variables..."
+cp .env.example .env
+echo "Edit .env file with your values"
+
+# Setup database (if needed)
+if [ -f "prisma/schema.prisma" ]; then
+  echo "🗄️ Setting up database..."
+  pnpm prisma generate
+  pnpm prisma migrate dev
+fi
+
+echo "✅ Setup complete! Run 'pnpm dev' to start"
+```
+
+### For Python Projects
+
+```bash
+#!/bin/bash
+set -e
+
+echo "🚀 Setting up development environment..."
+
+# Create virtual environment
+python -m venv venv
+source venv/bin/activate
+
+# Install dependencies
+pip install -r requirements.txt
+pip install -r requirements-dev.txt
+
+# Setup environment
+cp .env.example .env
+
+# Run migrations
+python manage.py migrate
+
+echo "✅ Setup complete! Run 'source venv/bin/activate && python manage.py runserver'"
+```
+
+## Onboarding Documentation Template
+
+````markdown
+# Development Setup
+
+## Prerequisites
+
+- Node.js 20.11+ (managed via Volta)
+- pnpm 8.15+
+- PostgreSQL 15+
+- Redis 7+ (optional)
+
+## Quick Start
+
+1. **Clone repository**
+   ```bash
+   git clone <repo-url>
+   cd <repo-name>
+   ```
+````
+
+2. **Install tools** (if using Volta)
+
+   ```bash
+   curl https://get.volta.sh | bash
+   # Volta will automatically use versions from package.json
+   ```
+
+3. **Run setup script**
+
+   ```bash
+   ./scripts/setup.sh
+   ```
+
+4. **Configure environment**
+
+   - Copy `.env.example` to `.env`
+   - Fill in required values
+   - See ENVIRONMENT_VARIABLES.md for details
+
+5. **Start development server**
+   ```bash
+   pnpm dev
+   ```
+
+## Troubleshooting
+
+**Port already in use**
+
+- Kill process: `lsof -ti:3000 | xargs kill`
+
+**Database connection failed**
+
+- Check PostgreSQL is running: `pg_isready`
+- Verify DATABASE_URL in .env
+
+**Node version mismatch**
+
+- Install Volta: See step 2
+- Or use nvm: `nvm use`
+
+## Common Commands
+
+```bash
+pnpm dev          # Start dev server
+pnpm build        # Build for production
+pnpm test         # Run tests
+pnpm lint         # Check code quality
+pnpm format       # Format code
+```
+
+```
+
+## Cross-Platform Considerations
+
+### Shell Scripts
+- Provide both .sh (Unix) and .ps1 (Windows) versions
+- Or use Node.js scripts for true cross-platform
+
+### Path Separators
+- Use Node's `path.join()` in scripts
+- Avoid hardcoded `/` or `\`
+
+### Line Endings
+- Configure .gitattributes:
+```
+
+- text=auto
+  \*.sh text eol=lf
+
+```
+
+## Version Manager Comparison
+
+| Tool | Languages | Auto-switching | Config File |
+|------|-----------|----------------|-------------|
+| Volta | Node, Yarn, pnpm | Yes | package.json |
+| asdf | Multi | Yes | .tool-versions |
+| mise | Multi | Yes | .mise.toml |
+| nvm | Node only | Manual | .nvmrc |
+| pyenv | Python only | Yes | .python-version |
+
+## Best Practices
+
+1. **Pin exact versions** in configs to avoid surprises
+2. **Document all requirements** in onboarding guide
+3. **Test setup script** on clean machine
+4. **Keep .env.example updated** with all variables
+5. **Provide troubleshooting** for common issues
+6. **Use tool version managers** over manual installs
+7. **Make setup idempotent** (safe to run multiple times)
+
+## Output Checklist
+
+Every dev environment bootstrap should include:
+
+- [ ] Version manager config (.tool-versions, package.json volta, etc.)
+- [ ] Package manager choice documented
+- [ ] .env.example with all variables
+- [ ] Setup script (setup.sh or setup.js)
+- [ ] SETUP.md or DEVELOPMENT.md onboarding guide
+- [ ] Troubleshooting section
+- [ ] Common commands reference
+- [ ] Prerequisites listed
+```