@tinkcarlos/skillora 0.2.0

package/.claude/skills/bug-fixing/scripts/requirements.txt

@@ -0,0 +1,36 @@
+# Bug-fixing scripts dependencies
+# Install: pip install -r requirements.txt
+
+# === Required (for scripts to run) ===
+# None - scripts use standard library only
+
+# === Recommended formatters ===
+ruff>=0.1.0          # Fast Python linter + formatter (replaces black, isort, flake8)
+black>=23.0.0        # Python formatter (fallback if ruff unavailable)
+
+# === Recommended linters ===
+mypy>=1.0.0          # Python static type checker
+pylint>=3.0.0        # Python linter (optional, ruff preferred)
+
+# === For JavaScript/TypeScript projects ===
+# Install via npm:
+#   npm install -g prettier    # JS/TS/CSS/HTML formatter
+#   npm install -g eslint      # JS/TS linter
+#   npm install -g typescript  # TypeScript compiler (for type checking)
+
+# === For Go projects ===
+# gofmt is included with Go installation
+
+# === For Rust projects ===
+# rustfmt: rustup component add rustfmt
+
+# === Quick install commands ===
+# Python formatters/linters:
+#   pip install ruff mypy
+#
+# Node.js formatters/linters:
+#   npm install -g prettier eslint typescript
+#
+# Check dependencies:
+#   python format_code.py --check-deps
+#   python lint_check.py --check-deps

package/.claude/skills/cicd-pipeline/SKILL.md

@@ -0,0 +1,300 @@
+---
+name: cicd-pipeline
+description: |
+  CI/CD pipeline configuration with GitHub Actions, GitLab CI, and DevSecOps.
+
+  Use when:
+  - Setting up CI/CD pipelines
+  - Configuring GitHub Actions workflows
+  - Implementing automated testing/deployment
+  - Adding security scanning to pipelines
+
+  Key Features:
+  - GitHub Actions / GitLab CI templates
+  - Multi-stage pipelines
+  - Security scanning integration
+  - Deployment strategies
+allowed-tools: [read, write, execute, grep, glob]
+---
+
+# CI/CD Pipeline
+
+Automate everything, trust nothing.
+
+## The Iron Law
+
+```
+NO MERGE WITHOUT CI. NO DEPLOY WITHOUT CD. NO PIPELINE WITHOUT SECURITY.
+```
+
+---
+
+## Quick Start
+
+```
+CI/CD 需求
+    │
+    ▼
+┌─────────────────────────────────────────────────────────────┐
+│ Step 1: 选择平台                                             │
+│ ─────────────────────────────────────────────────────────── │
+│ GitHub → GitHub Actions                                     │
+│ GitLab → GitLab CI                                          │
+│ 自托管 → Jenkins / Drone                                    │
+└─────────────────────────────────────────────────────────────┘
+    │
+    ▼
+┌─────────────────────────────────────────────────────────────┐
+│ Step 2: 配置流水线                                           │
+│ ─────────────────────────────────────────────────────────── │
+│ 1. 代码检查 (Lint + Type Check)                             │
+│ 2. 测试 (Unit + Integration)                                │
+│ 3. 安全扫描 (SAST + Dependency)                             │
+│ 4. 构建 (Build + Docker)                                    │
+│ 5. 部署 (Staging → Production)                              │
+└─────────────────────────────────────────────────────────────┘
+```
+
+---
+
+## 🔴 GitHub Actions 模板
+
+### 基础 CI
+
+```yaml
+# .github/workflows/ci.yml
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run type-check
+
+  test:
+    runs-on: ubuntu-latest
+    needs: lint
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+      - run: npm ci
+      - run: npm test -- --coverage
+      - uses: codecov/codecov-action@v4
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: npm audit --audit-level=high
+      - uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+```
+
+### CD 部署
+
+```yaml
+# .github/workflows/deploy.yml
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - uses: actions/checkout@v4
+      - run: npm ci && npm run build
+      - uses: amondnet/vercel-action@v25
+        with:
+          vercel-token: ${{ secrets.VERCEL_TOKEN }}
+          vercel-org-id: ${{ secrets.VERCEL_ORG_ID }}
+          vercel-project-id: ${{ secrets.VERCEL_PROJECT_ID }}
+          vercel-args: '--prod'
+```
+
+---
+
+## 🔴 GitLab CI 模板
+
+```yaml
+# .gitlab-ci.yml
+stages:
+  - lint
+  - test
+  - security
+  - build
+  - deploy
+
+variables:
+  NODE_VERSION: "20"
+
+lint:
+  stage: lint
+  image: node:${NODE_VERSION}
+  script:
+    - npm ci
+    - npm run lint
+    - npm run type-check
+  cache:
+    paths:
+      - node_modules/
+
+test:
+  stage: test
+  image: node:${NODE_VERSION}
+  script:
+    - npm ci
+    - npm test -- --coverage
+  coverage: '/Lines\s*:\s*(\d+\.?\d*)%/'
+  artifacts:
+    reports:
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage/cobertura-coverage.xml
+
+security:
+  stage: security
+  image: node:${NODE_VERSION}
+  script:
+    - npm audit --audit-level=high
+  allow_failure: true
+
+build:
+  stage: build
+  image: docker:latest
+  services:
+    - docker:dind
+  script:
+    - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA .
+    - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
+
+deploy:
+  stage: deploy
+  environment: production
+  only:
+    - main
+  script:
+    - echo "Deploying to production..."
+```
+
+---
+
+## 🔴 流水线阶段
+
+| 阶段 | 内容 | 失败处理 |
+|------|------|----------|
+| **Lint** | ESLint, Prettier, Type Check | 阻塞 |
+| **Test** | Unit, Integration | 阻塞 |
+| **Security** | SAST, Dependency Scan | 阻塞 (P0/P1) |
+| **Build** | Docker, Artifacts | 阻塞 |
+| **Deploy Staging** | 预发布环境 | 阻塞 |
+| **Deploy Prod** | 生产环境 | 需审批 |
+
+---
+
+## 🔴 安全集成
+
+### 依赖扫描
+
+```yaml
+# GitHub Actions
+- uses: snyk/actions/node@master
+- run: npm audit --audit-level=high
+
+# GitLab CI
+include:
+  - template: Security/Dependency-Scanning.gitlab-ci.yml
+```
+
+### SAST 扫描
+
+```yaml
+# GitHub Actions
+- uses: github/codeql-action/analyze@v3
+
+# GitLab CI
+include:
+  - template: Security/SAST.gitlab-ci.yml
+```
+
+### Secret 扫描
+
+```yaml
+# GitHub Actions
+- uses: trufflesecurity/trufflehog@main
+  with:
+    path: ./
+    base: ${{ github.event.repository.default_branch }}
+```
+
+---
+
+## 🔴 部署策略
+
+| 策略 | 适用场景 | 风险 |
+|------|----------|------|
+| **Rolling** | 无状态服务 | 低 |
+| **Blue-Green** | 需要快速回滚 | 中 |
+| **Canary** | 大流量服务 | 低 |
+| **Feature Flag** | 渐进式发布 | 低 |
+
+---
+
+## 输出契约
+
+```markdown
+## CI/CD Pipeline Report
+
+### 配置文件
+- `.github/workflows/ci.yml`
+- `.github/workflows/deploy.yml`
+
+### 流水线阶段
+| 阶段 | 状态 | 耗时 |
+|------|------|------|
+| Lint | ✅ | 45s |
+| Test | ✅ | 2m30s |
+| Security | ✅ | 1m15s |
+| Build | ✅ | 3m |
+| Deploy | ✅ | 1m |
+
+### 安全扫描结果
+- 依赖漏洞: 0 High, 2 Medium
+- SAST: 0 Issues
+
+### 部署信息
+- 环境: Production
+- URL: https://app.example.com
+- 版本: v1.2.3
+```
+
+---
+
+## Reference Navigation
+
+| Situation | Read This |
+|-----------|-----------|
+| GitHub Actions | `references/github-actions-templates.md` |
+| GitLab CI | `references/gitlab-ci-templates.md` |
+| 安全扫描 | `references/security-scanning.md` |
+| 部署策略 | `references/deployment-strategies.md` |