@tangle-network/starter-foundry 0.1.0

package/registry/layers/auth/better-auth/manifest.json

@@ -0,0 +1,65 @@
+{
+  "id": "better-auth",
+  "slot": "auth",
+  "description": "Better Auth with email/password, social login, and session management.",
+  "appliesTo": [
+    "react-vite-ts",
+    "nextjs-ts",
+    "fullstack-ts",
+    "api-service",
+    "cloudflare-worker-ts",
+    "python-api",
+    "rust-service",
+    "go-api",
+    "expo-react-native-ts",
+    "browser-extension-ts",
+    "electron-desktop-ts",
+    "tauri-desktop",
+    "mcp-server-ts",
+    "dspy-pipeline-py",
+    "agent-service-ts",
+    "agent-service-py",
+    "agent-service-rust",
+    "x402-service",
+    "zk-prover-service",
+    "evm-infra-ts",
+    "angular-ts",
+    "remix-ts",
+    "sveltekit-ts",
+    "vue-ts"
+  ],
+  "defaults": {
+    "authProvider": "better-auth"
+  },
+  "files": [
+    {
+      "source": "files/auth-config.json",
+      "target": "auth-config.json"
+    }
+  ],
+  "buildHints": {
+    "pages": [
+      "/sign-in",
+      "/sign-up"
+    ],
+    "apiRoutes": [
+      "/api/auth/[...all]"
+    ],
+    "components": [
+      "SignInForm",
+      "SignUpForm",
+      "AuthProvider"
+    ],
+    "integrations": [
+      "Better Auth",
+      "Database adapter (Drizzle/Prisma)"
+    ],
+    "architectureNotes": [
+      "Create lib/auth.ts with betterAuth() configuration.",
+      "Create lib/auth-client.ts with createAuthClient().",
+      "Mount catch-all API route at /api/auth/* that calls auth.handler.",
+      "Protect pages by checking session in server loaders or middleware."
+    ]
+  },
+  "keywords": []
+}

package/registry/layers/auth/clerk/files/auth-config.json

@@ -0,0 +1,31 @@
+{
+  "provider": "clerk",
+  "mode": "hosted",
+  "features": [
+    "sign-in",
+    "sign-up",
+    "user-profile",
+    "organization",
+    "middleware-protection",
+    "webhook-sync"
+  ],
+  "env": [
+    "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
+    "CLERK_SECRET_KEY",
+    "CLERK_WEBHOOK_SECRET"
+  ],
+  "packages": {
+    "nextjs": "@clerk/nextjs",
+    "react": "@clerk/clerk-react",
+    "remix": "@clerk/remix",
+    "express": "@clerk/express"
+  },
+  "notes": [
+    "Set NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY in .env.",
+    "Wrap the root layout with <ClerkProvider>.",
+    "Use <SignInButton>, <SignUpButton>, <UserButton> components.",
+    "Protect API routes with clerkMiddleware() in middleware.ts.",
+    "For Next.js: add matcher config to middleware.ts for protected routes.",
+    "Sync user data via Clerk webhooks → /api/webhooks/clerk endpoint."
+  ]
+}

package/registry/layers/auth/clerk/manifest.json

@@ -0,0 +1,67 @@
+{
+  "id": "clerk",
+  "slot": "auth",
+  "description": "Clerk auth with sign-in, sign-up, user management, and middleware protection.",
+  "appliesTo": [
+    "react-vite-ts",
+    "nextjs-ts",
+    "fullstack-ts",
+    "api-service",
+    "cloudflare-worker-ts",
+    "python-api",
+    "rust-service",
+    "go-api",
+    "expo-react-native-ts",
+    "browser-extension-ts",
+    "electron-desktop-ts",
+    "tauri-desktop",
+    "mcp-server-ts",
+    "dspy-pipeline-py",
+    "agent-service-ts",
+    "agent-service-py",
+    "agent-service-rust",
+    "x402-service",
+    "zk-prover-service",
+    "evm-infra-ts",
+    "angular-ts",
+    "remix-ts",
+    "sveltekit-ts",
+    "vue-ts"
+  ],
+  "defaults": {
+    "authProvider": "clerk"
+  },
+  "files": [
+    {
+      "source": "files/auth-config.json",
+      "target": "auth-config.json"
+    }
+  ],
+  "buildHints": {
+    "pages": [
+      "/sign-in",
+      "/sign-up",
+      "/profile"
+    ],
+    "apiRoutes": [
+      "/api/webhooks/clerk"
+    ],
+    "components": [
+      "SignInButton",
+      "SignUpButton",
+      "UserButton",
+      "ClerkProvider"
+    ],
+    "integrations": [
+      "Clerk hosted auth",
+      "Clerk webhooks for user sync"
+    ],
+    "architectureNotes": [
+      "Wrap root layout with <ClerkProvider publishableKey={...}>.",
+      "Add middleware.ts with clerkMiddleware() and route matcher.",
+      "Protected pages check auth() server-side or useAuth() client-side.",
+      "Webhook endpoint verifies Clerk signature and syncs user data to DB."
+    ]
+  },
+  "keywords": []
+}

package/registry/layers/auth/none/manifest.json

@@ -0,0 +1,31 @@
+{
+  "id": "none",
+  "slot": "auth",
+  "description": "No auth provider selected.",
+  "appliesTo": [
+    "react-vite-ts",
+    "nextjs-ts",
+    "fullstack-ts",
+    "api-service",
+    "cloudflare-worker-ts",
+    "python-api",
+    "rust-service",
+    "go-api",
+    "expo-react-native-ts",
+    "browser-extension-ts",
+    "electron-desktop-ts",
+    "tauri-desktop",
+    "mcp-server-ts",
+    "dspy-pipeline-py",
+    "agent-service-ts",
+    "agent-service-py",
+    "agent-service-rust",
+    "x402-service",
+    "zk-prover-service",
+    "evm-infra-ts",
+    "angular-ts",
+    "remix-ts",
+    "sveltekit-ts",
+    "vue-ts"
+  ]
+}

package/registry/layers/auth/supabase-auth/files/auth-config.json

@@ -0,0 +1,27 @@
+{
+  "provider": "supabase-auth",
+  "features": [
+    "email-password",
+    "magic-link",
+    "social-login",
+    "phone-otp",
+    "row-level-security"
+  ],
+  "env": [
+    "NEXT_PUBLIC_SUPABASE_URL",
+    "NEXT_PUBLIC_SUPABASE_ANON_KEY",
+    "SUPABASE_SERVICE_ROLE_KEY"
+  ],
+  "packages": {
+    "nextjs": "@supabase/ssr @supabase/supabase-js",
+    "react": "@supabase/supabase-js"
+  },
+  "notes": [
+    "Set NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY in .env.",
+    "Create lib/supabase/server.ts and lib/supabase/client.ts helpers.",
+    "Use createServerClient() in server components and API routes.",
+    "Use createBrowserClient() in client components.",
+    "Row-Level Security policies in Supabase dashboard protect data per user.",
+    "Auth state syncs via middleware.ts that refreshes the session cookie."
+  ]
+}

package/registry/layers/auth/supabase-auth/manifest.json

@@ -0,0 +1,67 @@
+{
+  "id": "supabase-auth",
+  "slot": "auth",
+  "description": "Supabase Auth with email, social login, and row-level security.",
+  "appliesTo": [
+    "react-vite-ts",
+    "nextjs-ts",
+    "fullstack-ts",
+    "api-service",
+    "cloudflare-worker-ts",
+    "python-api",
+    "rust-service",
+    "go-api",
+    "expo-react-native-ts",
+    "browser-extension-ts",
+    "electron-desktop-ts",
+    "tauri-desktop",
+    "mcp-server-ts",
+    "dspy-pipeline-py",
+    "agent-service-ts",
+    "agent-service-py",
+    "agent-service-rust",
+    "x402-service",
+    "zk-prover-service",
+    "evm-infra-ts",
+    "angular-ts",
+    "remix-ts",
+    "sveltekit-ts",
+    "vue-ts"
+  ],
+  "defaults": {
+    "authProvider": "supabase-auth"
+  },
+  "files": [
+    {
+      "source": "files/auth-config.json",
+      "target": "auth-config.json"
+    }
+  ],
+  "buildHints": {
+    "pages": [
+      "/login",
+      "/signup",
+      "/auth/callback"
+    ],
+    "apiRoutes": [
+      "/auth/callback"
+    ],
+    "components": [
+      "LoginForm",
+      "SignupForm",
+      "AuthProvider"
+    ],
+    "integrations": [
+      "Supabase Auth",
+      "Supabase RLS policies"
+    ],
+    "architectureNotes": [
+      "Create lib/supabase/server.ts with createServerClient() using cookies.",
+      "Create lib/supabase/client.ts with createBrowserClient().",
+      "Add middleware.ts that calls supabase.auth.getUser() to refresh session.",
+      "Auth callback route handles OAuth redirects from Supabase.",
+      "All database queries go through the authenticated Supabase client — RLS enforces permissions."
+    ]
+  },
+  "keywords": []
+}

package/registry/layers/capability/admin-crud/files/admin-config.json

@@ -0,0 +1,29 @@
+{
+  "entities": [
+    {
+      "name": "users",
+      "fields": [
+        { "name": "id", "type": "string", "primaryKey": true },
+        { "name": "email", "type": "string", "searchable": true },
+        { "name": "role", "type": "enum", "options": ["admin", "user", "viewer"] },
+        { "name": "createdAt", "type": "datetime" }
+      ]
+    },
+    {
+      "name": "orders",
+      "fields": [
+        { "name": "id", "type": "string", "primaryKey": true },
+        { "name": "userId", "type": "string", "relation": "users" },
+        { "name": "status", "type": "enum", "options": ["pending", "completed", "canceled"] },
+        { "name": "total", "type": "number" },
+        { "name": "createdAt", "type": "datetime" }
+      ]
+    }
+  ],
+  "features": ["search", "filter", "sort", "export-csv", "bulk-actions"],
+  "notes": [
+    "Entity definitions drive the admin table schema and form generation.",
+    "Add new entities by extending the entities array.",
+    "Bulk actions apply to selected rows in the data table."
+  ]
+}

package/registry/layers/capability/admin-crud/files/admin-data.json

@@ -0,0 +1,10 @@
+{
+  "users": [
+    { "id": "usr_001", "email": "admin@example.com", "role": "admin", "createdAt": "2025-01-15T10:00:00Z" },
+    { "id": "usr_002", "email": "user@example.com", "role": "user", "createdAt": "2025-02-20T14:30:00Z" }
+  ],
+  "orders": [
+    { "id": "ord_001", "userId": "usr_002", "status": "completed", "total": 99.00, "createdAt": "2025-03-01T09:00:00Z" },
+    { "id": "ord_002", "userId": "usr_002", "status": "pending", "total": 49.00, "createdAt": "2025-03-10T16:45:00Z" }
+  ]
+}

package/registry/layers/capability/admin-crud/manifest.json

@@ -0,0 +1,58 @@
+{
+  "id": "admin-crud",
+  "description": "Adds admin dashboard patterns with entity definitions, data tables, and bulk actions.",
+  "appliesTo": [
+    "nextjs-ts",
+    "fullstack-ts"
+  ],
+  "files": [
+    {
+      "source": "files/admin-config.json",
+      "target": "admin-config.json"
+    },
+    {
+      "source": "files/admin-data.json",
+      "target": "admin-data.json"
+    }
+  ],
+  "contextHints": {
+    "extensionPoints": [
+      "admin-config.json",
+      "admin-data.json"
+    ]
+  },
+  "keywords": [
+    "admin dashboard",
+    "admin panel",
+    "crud app",
+    "back office",
+    "internal tool",
+    "data management",
+    "admin console"
+  ],
+  "buildHints": {
+    "pages": [
+      "/admin",
+      "/admin/users",
+      "/admin/orders"
+    ],
+    "apiRoutes": [
+      "/api/admin/entities",
+      "/api/admin/bulk"
+    ],
+    "components": [
+      "DataTable",
+      "EntityForm",
+      "BulkActionBar",
+      "SearchFilter",
+      "ExportButton"
+    ],
+    "dataModels": [
+      "Entity schema from admin-config.json"
+    ],
+    "integrations": [
+      "CSV export",
+      "Bulk operations"
+    ]
+  }
+}

package/registry/layers/capability/agent-ai-sdk/files/ai-sdk-config.json

@@ -0,0 +1,15 @@
+{
+  "provider": "{{aiSdkProvider}}",
+  "features": ["stream-text", "generate-text", "tool-calling", "multi-provider", "structured-output"],
+  "providers": {
+    "anthropic": { "model": "claude-sonnet-4-20250514", "package": "@ai-sdk/anthropic" },
+    "openai": { "model": "gpt-4o", "package": "@ai-sdk/openai" },
+    "google": { "model": "gemini-2.0-flash", "package": "@ai-sdk/google" }
+  },
+  "notes": [
+    "Set the provider API key in environment: ANTHROPIC_API_KEY, OPENAI_API_KEY, or GOOGLE_API_KEY.",
+    "Use streamText() for streaming, generateText() for single-shot.",
+    "Tool definitions use zod schemas: z.object({ query: z.string() }).",
+    "Switch providers by changing the model import — application code stays the same."
+  ]
+}

package/registry/layers/capability/agent-ai-sdk/manifest.json

@@ -0,0 +1,18 @@
+{
+  "id": "agent-ai-sdk",
+  "description": "Adds Vercel AI SDK patterns with streamText, tool definitions, and multi-provider support.",
+  "appliesTo": ["agent-service-ts", "nextjs-ts", "fullstack-ts", "api-service"],
+  "defaults": { "aiSdkProvider": "anthropic" },
+  "files": [
+    { "source": "files/ai-sdk-config.json", "target": "ai-sdk-config.json" }
+  ],
+  "contextHints": { "extensionPoints": ["ai-sdk-config.json"] },
+  "keywords": ["ai sdk", "vercel ai", "vercel ai sdk", "streamtext", "generatetext", "ai sdk tools", "ai core"],
+  "buildHints": {
+    "apiRoutes": ["/api/chat"],
+    "components": ["ChatStream", "ToolCallRenderer"],
+    "dataModels": ["Message", "ToolDefinition", "StreamChunk"],
+    "integrations": ["Vercel AI SDK", "Anthropic provider", "OpenAI provider"],
+    "architectureNotes": ["Use streamText() for streaming responses in API routes.", "Define tools with zod schemas for type-safe function calling.", "Multi-provider: swap providers without changing application code.", "Use useChat() hook on the client for streaming UI integration."]
+  }
+}

package/registry/layers/capability/agent-browser/files/browser-agent-config.json

@@ -0,0 +1,13 @@
+{
+  "engine": "{{browserEngine}}",
+  "headless": true,
+  "viewport": { "width": 1280, "height": 720 },
+  "features": ["navigate", "click", "type", "screenshot", "dom-snapshot", "scroll", "wait"],
+  "limits": { "maxSteps": 50, "pageLoadTimeout": 30000, "actionTimeout": 5000 },
+  "notes": [
+    "Use simplified DOM snapshots (key elements + attributes) rather than full HTML — reduces token usage.",
+    "Screenshots provide visual context for the LLM to reason about page state.",
+    "Action recording enables replay for debugging failed automation runs.",
+    "Set headless=false for local debugging to see what the agent sees."
+  ]
+}

package/registry/layers/capability/agent-browser/manifest.json

@@ -0,0 +1,17 @@
+{
+  "id": "agent-browser",
+  "description": "Adds browser automation agent patterns with DOM interaction, screenshots, and action replay.",
+  "appliesTo": ["agent-service-ts", "agent-service-py", "playwright-worker"],
+  "defaults": { "browserEngine": "chromium" },
+  "files": [
+    { "source": "files/browser-agent-config.json", "target": "browser-agent-config.json" }
+  ],
+  "contextHints": { "extensionPoints": ["browser-agent-config.json"] },
+  "keywords": ["browser use", "browser agent", "browser automation agent", "web agent", "dom agent", "computer use", "screen agent", "browser-use", "stagehand"],
+  "buildHints": {
+    "components": ["BrowserSession", "ActionRecorder", "DOMSnapshot"],
+    "dataModels": ["BrowserAction", "PageState", "Screenshot"],
+    "integrations": ["Playwright", "CDP (Chrome DevTools Protocol)", "Vision model for screenshots"],
+    "architectureNotes": ["Use Playwright for reliable cross-browser automation.", "Capture DOM snapshots (simplified HTML) for the LLM context, not raw HTML.", "Record actions for replay and debugging.", "Take screenshots at key decision points for vision model feedback."]
+  }
+}

package/registry/layers/capability/agent-code-review/files/review-config.json

@@ -0,0 +1,11 @@
+{
+  "languages": "{{reviewLanguages}}",
+  "rules": "{{reviewRules}}",
+  "outputFormat": "inline-comments",
+  "severity": ["critical", "warning", "suggestion"],
+  "notes": [
+    "review-pipeline.mjs processes diffs and generates inline comments.",
+    "Rules are composable: add custom rules alongside built-in checks.",
+    "Integrate with github-handler.mjs for automated PR reviews."
+  ]
+}

package/registry/layers/capability/agent-code-review/files/review-pipeline.ts

@@ -0,0 +1,205 @@
+// Types
+
+export interface Hunk {
+  oldStart: number
+  oldLines: number
+  newStart: number
+  newLines: number
+  content: string
+  additions: string[]
+  deletions: string[]
+}
+
+export interface DiffFile {
+  path: string
+  oldPath?: string
+  status: 'added' | 'modified' | 'deleted' | 'renamed'
+  hunks: Hunk[]
+  additions: number
+  deletions: number
+}
+
+export type ReviewCategory = 'feature' | 'bugfix' | 'refactor' | 'test' | 'docs' | 'config' | 'unknown'
+
+interface CategorizedChanges {
+  categories: Map<ReviewCategory, DiffFile[]>
+  primary: ReviewCategory
+  summary: string
+}
+
+// Implementation
+
+export function parseDiff(diffText: string): DiffFile[] {
+  const files: DiffFile[] = []
+  const fileSections = diffText.split(/^diff --git /m).filter(Boolean)
+
+  for (const section of fileSections) {
+    const lines = section.split('\n')
+
+    // Extract file paths from the header line: a/path b/path
+    const headerMatch = lines[0]?.match(/a\/(.+?)\s+b\/(.+)/)
+    if (!headerMatch) continue
+
+    const oldPath = headerMatch[1]
+    const newPath = headerMatch[2]
+
+    // Determine status
+    let status: DiffFile['status'] = 'modified'
+    if (section.includes('new file mode')) status = 'added'
+    else if (section.includes('deleted file mode')) status = 'deleted'
+    else if (oldPath !== newPath) status = 'renamed'
+
+    // Parse hunks
+    const hunks: Hunk[] = []
+    const hunkRegex = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(.*)$/
+    let currentHunk: Hunk | null = null
+
+    for (const line of lines) {
+      const hunkMatch = line.match(hunkRegex)
+      if (hunkMatch) {
+        if (currentHunk) hunks.push(currentHunk)
+        currentHunk = {
+          oldStart: parseInt(hunkMatch[1], 10),
+          oldLines: parseInt(hunkMatch[2] ?? '1', 10),
+          newStart: parseInt(hunkMatch[3], 10),
+          newLines: parseInt(hunkMatch[4] ?? '1', 10),
+          content: hunkMatch[5]?.trim() ?? '',
+          additions: [],
+          deletions: [],
+        }
+        continue
+      }
+
+      if (!currentHunk) continue
+
+      if (line.startsWith('+') && !line.startsWith('+++')) {
+        currentHunk.additions.push(line.slice(1))
+      } else if (line.startsWith('-') && !line.startsWith('---')) {
+        currentHunk.deletions.push(line.slice(1))
+      }
+    }
+
+    if (currentHunk) hunks.push(currentHunk)
+
+    const additions = hunks.reduce((s, h) => s + h.additions.length, 0)
+    const deletions = hunks.reduce((s, h) => s + h.deletions.length, 0)
+
+    files.push({
+      path: newPath,
+      ...(status === 'renamed' ? { oldPath } : {}),
+      status,
+      hunks,
+      additions,
+      deletions,
+    })
+  }
+
+  return files
+}
+
+export function categorizeChanges(files: DiffFile[]): CategorizedChanges {
+  const categories = new Map<ReviewCategory, DiffFile[]>()
+
+  const testPatterns = [/\.test\./, /\.spec\./, /__tests__/, /\.e2e\./]
+  const docPatterns = [/\.md$/, /docs\//, /README/, /CHANGELOG/, /LICENSE/]
+  const configPatterns = [/\.json$/, /\.ya?ml$/, /\.toml$/, /\.env/, /Dockerfile/, /\.config\./]
+  const bugfixIndicators = ['fix', 'patch', 'hotfix', 'bug', 'error', 'issue']
+
+  for (const file of files) {
+    let category: ReviewCategory = 'unknown'
+    const lower = file.path.toLowerCase()
+
+    if (testPatterns.some((p) => p.test(file.path))) {
+      category = 'test'
+    } else if (docPatterns.some((p) => p.test(file.path))) {
+      category = 'docs'
+    } else if (configPatterns.some((p) => p.test(lower))) {
+      category = 'config'
+    } else {
+      // Analyze diff content for bugfix vs feature vs refactor
+      const allAdditions = file.hunks.flatMap((h) => h.additions).join(' ').toLowerCase()
+      const isBugfix = bugfixIndicators.some((w) => allAdditions.includes(w))
+
+      if (isBugfix) {
+        category = 'bugfix'
+      } else if (file.status === 'added') {
+        category = 'feature'
+      } else if (file.additions > 0 && file.deletions > 0 && Math.abs(file.additions - file.deletions) < file.additions * 0.3) {
+        // Similar number of additions and deletions suggests refactoring
+        category = 'refactor'
+      } else {
+        category = 'feature'
+      }
+    }
+
+    const existing = categories.get(category) ?? []
+    existing.push(file)
+    categories.set(category, existing)
+  }
+
+  // Determine primary category by file count
+  let primary: ReviewCategory = 'unknown'
+  let maxCount = 0
+  for (const [cat, catFiles] of categories) {
+    if (catFiles.length > maxCount) {
+      maxCount = catFiles.length
+      primary = cat
+    }
+  }
+
+  const parts: string[] = []
+  for (const [cat, catFiles] of categories) {
+    parts.push(`${cat}: ${catFiles.length} file(s)`)
+  }
+
+  return { categories, primary, summary: parts.join(', ') }
+}
+
+export function buildReviewPrompt(diff: DiffFile[], context?: string): string {
+  const categorized = categorizeChanges(diff)
+  const totalAdditions = diff.reduce((s, f) => s + f.additions, 0)
+  const totalDeletions = diff.reduce((s, f) => s + f.deletions, 0)
+
+  const sections: string[] = [
+    '# Code Review Request',
+    '',
+    `**Change type:** ${categorized.primary}`,
+    `**Scope:** ${diff.length} file(s), +${totalAdditions} -${totalDeletions}`,
+    `**Breakdown:** ${categorized.summary}`,
+  ]
+
+  if (context) {
+    sections.push('', '## Context', context)
+  }
+
+  sections.push('', '## Changed Files')
+
+  for (const file of diff) {
+    sections.push(``, `### ${file.path} (${file.status}, +${file.additions} -${file.deletions})`)
+    for (const hunk of file.hunks) {
+      if (hunk.content) sections.push(`\`${hunk.content}\``)
+      if (hunk.deletions.length > 0) {
+        sections.push('```diff')
+        for (const line of hunk.deletions) sections.push(`- ${line}`)
+        sections.push('```')
+      }
+      if (hunk.additions.length > 0) {
+        sections.push('```diff')
+        for (const line of hunk.additions) sections.push(`+ ${line}`)
+        sections.push('```')
+      }
+    }
+  }
+
+  sections.push(
+    '',
+    '## Review Checklist',
+    '- [ ] Logic correctness',
+    '- [ ] Error handling',
+    '- [ ] Security implications',
+    '- [ ] Performance considerations',
+    '- [ ] Test coverage',
+  )
+
+  return sections.join('\n')
+}