ai-developer-skill-os 3.1.5 → 6.0.0-rc1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -19
- package/_template/BEHAVIOR_SPEC.md +96 -0
- package/docs/GOVERNANCE.md +1 -1
- package/fix_seeds.js +22 -0
- package/framework/KERNEL.md +83 -0
- package/framework/bias-library/cosmetic-refactor.md +21 -0
- package/framework/bias-library/enterprise-crud.md +21 -0
- package/framework/bias-library/fake-ui-slop.md +20 -0
- package/framework/bias-library/hallucinated-tools.md +20 -0
- package/framework/bias-library/missing-ui-states.md +19 -0
- package/framework/bias-library/over-indexing.md +20 -0
- package/framework/bias-library/swallow-errors.md +19 -0
- package/framework/bias-library/ui-only-security.md +17 -0
- package/framework/decision-primitives.md +47 -0
- package/framework/dial-library/complexity-budget.md +13 -0
- package/framework/dial-library/granularity.md +13 -0
- package/framework/dial-library/optimization-strategy.md +13 -0
- package/framework/dial-library/strictness.md +13 -0
- package/framework/rule-library/delegation-only.md +9 -0
- package/framework/rule-library/minimal-diff.md +9 -0
- package/migrate-to-v6.js +130 -0
- package/migrate.js +147 -0
- package/migrate.py +133 -0
- package/migrate_all.cjs +96 -0
- package/package.json +2 -2
- package/skills/qk-access-policy/SKILL.md +30 -42
- package/skills/qk-ai-builder/SKILL.md +32 -43
- package/skills/qk-api-lifecycle/SKILL.md +28 -62
- package/skills/qk-bug-resolution/SKILL.md +29 -66
- package/skills/qk-context-loader/SKILL.md +25 -44
- package/skills/qk-data-lifecycle/SKILL.md +25 -58
- package/skills/qk-db-optimizer/SKILL.md +25 -53
- package/skills/qk-design-to-code/SKILL.md +32 -48
- package/skills/qk-docs/SKILL.md +26 -52
- package/skills/qk-engineering-standard/SKILL.md +28 -59
- package/skills/qk-feature-delivery/SKILL.md +29 -64
- package/skills/qk-help/SKILL.md +30 -40
- package/skills/qk-orchestrator/SKILL.md +25 -51
- package/skills/qk-policy-engine/SKILL.md +24 -49
- package/skills/qk-production-release/SKILL.md +31 -48
- package/skills/qk-project-bootstrap/SKILL.md +32 -46
- package/skills/qk-project-health/SKILL.md +26 -54
- package/skills/qk-project-memory/SKILL.md +31 -38
- package/skills/qk-system-evolution/SKILL.md +25 -61
- package/skills/qk-ui-audit/SKILL.md +25 -56
- package/skills/qk-ui-system-builder/SKILL.md +30 -42
- package/skills/qk-validation-gate/SKILL.md +26 -57
- package/specs/contracts/behavior-contract.yaml +40 -0
- package/specs/expectations/qk-bug-resolution.yaml +35 -0
- package/specs/scenarios/fix-login-nullref.yaml +3 -0
- package/taste-skill/.claude-plugin/marketplace.json +20 -0
- package/taste-skill/.claude-plugin/plugin.json +19 -0
- package/taste-skill/.github/FUNDING.yml +1 -0
- package/taste-skill/.github/copilot-instructions.md +11 -0
- package/taste-skill/CHANGELOG.md +111 -0
- package/taste-skill/LICENSE +21 -0
- package/taste-skill/README.md +212 -0
- package/taste-skill/assets/.gitkeep +0 -0
- package/taste-skill/assets/readme-banner.webp +0 -0
- package/taste-skill/assets/readme-buttons/btn-agent-skills.webp +0 -0
- package/taste-skill/assets/readme-buttons/btn-changelog.webp +0 -0
- package/taste-skill/assets/readme-buttons/btn-mit.webp +0 -0
- package/taste-skill/assets/readme-buttons/btn-site.webp +0 -0
- package/taste-skill/assets/readme-buttons/btn-tools.webp +0 -0
- package/taste-skill/assets/readme-cta-tasteskill.svg +5 -0
- package/taste-skill/assets/sponsors/animations-dev.webp +0 -0
- package/taste-skill/assets/sponsors/emil-animations-dev.webp +0 -0
- package/taste-skill/assets/taste-skill-logo.png +0 -0
- package/taste-skill/assets/taste-skill-logo.webp +0 -0
- package/taste-skill/assets/vercel-oss-program-badge.svg +44 -0
- package/taste-skill/examples/floria-bottom.webp +0 -0
- package/taste-skill/examples/floria-full.webp +0 -0
- package/taste-skill/examples/floria-top.webp +0 -0
- package/taste-skill/research/README.md +8 -0
- package/taste-skill/research/laziness/README.md +25 -0
- package/taste-skill/research/laziness/findings/empirical-results.md +58 -0
- package/taste-skill/research/laziness/findings/references.md +20 -0
- package/taste-skill/research/laziness/remediation/architectural-patterns.md +55 -0
- package/taste-skill/research/laziness/remediation/parameter-tuning.md +44 -0
- package/taste-skill/research/laziness/remediation/prompt-engineering.md +52 -0
- package/taste-skill/research/laziness/remediation/reference-prompts.md +79 -0
- package/taste-skill/research/laziness/root-causes/cognitive-shortcuts.md +23 -0
- package/taste-skill/research/laziness/root-causes/output-limits.md +39 -0
- package/taste-skill/research/laziness/root-causes/rlhf-and-compute.md +27 -0
- package/taste-skill/research/laziness/root-causes/training-data-bias.md +28 -0
- package/taste-skill/scripts/build-emil-sponsor-row.mjs +41 -0
- package/taste-skill/scripts/convert-readme-assets-webp.mjs +142 -0
- package/taste-skill/scripts/process-readme-buttons.mjs +108 -0
- package/taste-skill/scripts/process-sponsor-badge.mjs +83 -0
- package/taste-skill/skill.sh +25 -0
- package/taste-skill/skills/brandkit/SKILL.md +798 -0
- package/taste-skill/skills/brutalist-skill/SKILL.md +92 -0
- package/taste-skill/skills/gpt-tasteskill/SKILL.md +74 -0
- package/taste-skill/skills/image-to-code-skill/SKILL.md +1228 -0
- package/taste-skill/skills/imagegen-frontend-mobile/SKILL.md +1465 -0
- package/taste-skill/skills/imagegen-frontend-web/SKILL.md +987 -0
- package/taste-skill/skills/llms.txt +13 -0
- package/taste-skill/skills/minimalist-skill/SKILL.md +85 -0
- package/taste-skill/skills/output-skill/SKILL.md +49 -0
- package/taste-skill/skills/redesign-skill/SKILL.md +178 -0
- package/taste-skill/skills/soft-skill/SKILL.md +98 -0
- package/taste-skill/skills/stitch-skill/DESIGN.md +121 -0
- package/taste-skill/skills/stitch-skill/SKILL.md +184 -0
- package/taste-skill/skills/taste-skill/SKILL.md +1206 -0
- package/taste-skill/skills/taste-skill-v1/SKILL.md +226 -0
- package/tests/behavior-conformance.test.js +151 -0
- package/_template/SKILL.md +0 -154
- package/tests/spec-compliance.test.js +0 -193
|
@@ -1,69 +1,38 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-engineering-standard
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Ép buộc áp dụng SOLID, DRY, Clean Code, và các quy tắc đặt tên.
|
|
6
|
-
category: standard
|
|
7
|
-
behavior: static-analysis
|
|
8
|
-
intent: review-code
|
|
9
|
-
priority: critical
|
|
10
|
-
tags: [clean-code, architecture, refactoring, solid]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User asks to review code, refactor code, or as part of the pipeline before validation.
|
|
13
|
-
inputs: [Source Code, Target Directory]
|
|
14
|
-
outputs: [Refactored Code, Code Review Report]
|
|
15
|
-
allowed_tools: [grep_search, read_file, write_to_file]
|
|
16
|
-
pipeline: [analyze, review, implement, validate, complete]
|
|
3
|
+
category: conventions
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
7
|
+
# qk-engineering-standard
|
|
20
8
|
|
|
21
|
-
|
|
9
|
+
## Scope
|
|
10
|
+
- Readability and structural improvements (Evaluate)
|
|
22
11
|
|
|
23
|
-
##
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
3. **Implement (Refactoring):**
|
|
32
|
-
- Extract inline styles or raw strings into constants.
|
|
33
|
-
- Split large components into smaller, pure components.
|
|
34
|
-
- Separate UI rendering from Business Logic (Custom Hooks).
|
|
35
|
-
4. **Verify (Validation):**
|
|
36
|
-
- Ensure the refactoring did NOT change the business logic or behavior of the app (Regression check).
|
|
37
|
-
|
|
38
|
-
## 🛡️ 3. Constraints & Rules
|
|
39
|
-
|
|
40
|
-
- **Code is for Humans:** Write code that junior developers can easily understand. Avoid overly clever or obscure syntax.
|
|
41
|
-
- **Scope Limit:** Do NOT refactor the entire project if the user only asked to review one file. Limit the scope to the current task context.
|
|
42
|
-
- **Preserve Behavior:** Refactoring must strictly preserve backward compatibility.
|
|
43
|
-
|
|
44
|
-
## 🌳 3. Decision Tree
|
|
45
|
-
|
|
46
|
-
```text
|
|
47
|
-
Is the file larger than 300 lines?
|
|
48
|
-
├── YES → Propose splitting the file into sub-components or moving logic to hooks.
|
|
49
|
-
└── NO → Continue normal inspection.
|
|
50
|
-
|
|
51
|
-
Does the React Component contain `fetch()` or heavy data mapping?
|
|
52
|
-
├── YES → Extract the logic into a separate `use[Feature]Data.ts` hook.
|
|
53
|
-
└── NO → Pass.
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Preserve business logic exactly
|
|
16
|
+
- Ensure tests pass after refactor
|
|
17
|
+
must_not:
|
|
18
|
+
- Invent new requirements
|
|
19
|
+
- Change public API signature
|
|
54
20
|
```
|
|
55
21
|
|
|
56
|
-
##
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
22
|
+
## Policies
|
|
23
|
+
```yaml
|
|
24
|
+
prefer:
|
|
25
|
+
- Readability over cleverness
|
|
26
|
+
- Explain trade-offs
|
|
27
|
+
```
|
|
62
28
|
|
|
63
|
-
|
|
29
|
+
## Escalation
|
|
30
|
+
```yaml
|
|
31
|
+
stop:
|
|
32
|
+
- Tests fail
|
|
33
|
+
```
|
|
64
34
|
|
|
65
|
-
|
|
66
|
-
-
|
|
67
|
-
-
|
|
68
|
-
|
|
69
|
-
- **Hành động tiếp (Next Action):** Bàn giao lại cho Pipeline.
|
|
35
|
+
## Output
|
|
36
|
+
- Evaluation summary
|
|
37
|
+
- Refactored code
|
|
38
|
+
```
|
|
@@ -1,74 +1,39 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-feature-delivery
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Phát triển tính năng mới hoàn chỉnh từ Frontend đến Backend.
|
|
6
|
-
category: engineering
|
|
7
|
-
behavior: development
|
|
8
|
-
intent: implement-feature
|
|
9
|
-
priority: high
|
|
10
|
-
tags: [feature, development, e2e, ui, api]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User asks to create a new page, component, or endpoint.
|
|
13
|
-
inputs: [Feature requirements, Design/Mockup (optional)]
|
|
14
|
-
outputs: [Implemented code, Test cases]
|
|
15
|
-
allowed_tools: [run_command, read_file, write_to_file, grep_search]
|
|
16
|
-
pipeline: [analyze, implement, engineering-standard, validate, complete]
|
|
3
|
+
category: fullstack
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
7
|
+
# qk-feature-delivery
|
|
20
8
|
|
|
21
|
-
|
|
9
|
+
## Scope
|
|
10
|
+
- New capabilities (Execute)
|
|
22
11
|
|
|
23
|
-
##
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
3. **Execute (Implementation):**
|
|
32
|
-
- Build the backend/API mock first (if applicable).
|
|
33
|
-
- Build the UI component and bind the data.
|
|
34
|
-
4. **Verify (Validation):**
|
|
35
|
-
- **4 UI States:** Implement all 4 UI states: `Loading` (Skeleton/Spinner), `Success` (Data), `Error` (Fallback UI/Retry), and `Empty` (No data).
|
|
36
|
-
- Check if the UI is responsive (works well on Mobile & Desktop).
|
|
37
|
-
|
|
38
|
-
## 🛡️ 3. Constraints & Rules
|
|
39
|
-
|
|
40
|
-
- **Contract First:** Always define the Type/Interface contract before writing the implementation logic.
|
|
41
|
-
- **State Management:** Lift state to Global (Redux/Zustand/Context) only if 2 or more components outside the same parent/child tree need to share it. Do not abuse Global State.
|
|
42
|
-
- **Component Reusability:** Do not create a new Button or Input if a Shared Component already exists in `src/components/shared/`.
|
|
43
|
-
- **DRY (Don't Repeat Yourself):** Extract inline styles or duplicate logic into hooks/utilities.
|
|
44
|
-
|
|
45
|
-
## 🌳 3. Decision Tree
|
|
46
|
-
|
|
47
|
-
```text
|
|
48
|
-
Does the feature require Backend API changes?
|
|
49
|
-
├── YES → Start with Database Schema/Types -> API Route -> UI Integration.
|
|
50
|
-
└── NO → Is it a purely visual UI component?
|
|
51
|
-
├── YES → Load UI/Design tokens and implement.
|
|
52
|
-
└── NO (Stateful) → Load `knowledge/frontend/react.md` to design the State Management strategy.
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Clarify requirements if unclear
|
|
16
|
+
- Implement complete end-to-end flow
|
|
17
|
+
must_not:
|
|
18
|
+
- Mix refactoring into feature work
|
|
19
|
+
- Ignore backward compatibility
|
|
53
20
|
```
|
|
54
21
|
|
|
55
|
-
##
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
3. `complete`: Output the final report.
|
|
62
|
-
|
|
63
|
-
## 📝 5. Output Format
|
|
64
|
-
|
|
65
|
-
Vui lòng báo cáo lại bằng Tiếng Việt với cấu trúc tương tự `templates/bug-report.md` nhưng thay đổi tiêu đề thành:
|
|
22
|
+
## Policies
|
|
23
|
+
```yaml
|
|
24
|
+
prefer:
|
|
25
|
+
- Plan before implementing
|
|
26
|
+
- Cover UI loading/error states
|
|
27
|
+
```
|
|
66
28
|
|
|
67
|
-
|
|
29
|
+
## Escalation
|
|
30
|
+
```yaml
|
|
31
|
+
stop:
|
|
32
|
+
- Requirements are ambiguous
|
|
33
|
+
ask:
|
|
34
|
+
- Before adding heavy dependencies
|
|
35
|
+
```
|
|
68
36
|
|
|
69
|
-
|
|
70
|
-
-
|
|
71
|
-
|
|
72
|
-
- **Xác thực (Verification):** Các bước để user test thử.
|
|
73
|
-
- **Rủi ro (Risks):** Có làm chậm hệ thống hay bundle size không.
|
|
74
|
-
- **Hành động tiếp (Next Action):** ...
|
|
37
|
+
## Output
|
|
38
|
+
- Feature implementation
|
|
39
|
+
```
|
package/skills/qk-help/SKILL.md
CHANGED
|
@@ -1,44 +1,34 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-help
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Hiển thị danh sách các kỹ năng hiện có và các mẹo sử dụng.
|
|
6
|
-
category: utilities
|
|
7
|
-
behavior: static-analysis
|
|
8
|
-
intent: review-code
|
|
9
|
-
priority: low
|
|
10
|
-
tags: [help, manual, list, tutorial]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User types 'help', asks for a list of skills, or doesn't know how to use the agent.
|
|
13
|
-
inputs: [Help query]
|
|
14
|
-
outputs: [List of skills, Tips]
|
|
15
|
-
allowed_tools: [read_file, list_dir]
|
|
16
|
-
pipeline: [analyze, complete]
|
|
3
|
+
category: core
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
##
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
7
|
+
# qk-help
|
|
8
|
+
|
|
9
|
+
## Scope
|
|
10
|
+
- Displaying available skills and usage tips (Collect & Delegate)
|
|
11
|
+
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Present information clearly and concisely
|
|
16
|
+
must_not:
|
|
17
|
+
- Hallucinate skills that do not exist in the repository
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Policies
|
|
21
|
+
```yaml
|
|
22
|
+
prefer:
|
|
23
|
+
- Short, actionable examples over long descriptions
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Escalation
|
|
27
|
+
```yaml
|
|
28
|
+
ask:
|
|
29
|
+
- If the user's intent is unclear when asking for help
|
|
30
|
+
```
|
|
31
|
+
|
|
32
|
+
## Output
|
|
33
|
+
- List of available skills and usage instructions
|
|
34
|
+
```
|
|
@@ -1,61 +1,35 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-orchestrator
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Điều hướng yêu cầu của người dùng, phân tích ý định và ủy quyền cho các sub-skills phù hợp.
|
|
6
|
-
category: orchestration
|
|
7
|
-
behavior: static-analysis
|
|
8
|
-
intent: review-code
|
|
9
|
-
priority: critical
|
|
10
|
-
tags: [router, orchestrator, delegation, ai-manager]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: Triggered initially when the user provides a vague or complex multi-step request.
|
|
13
|
-
inputs: [User intent, Raw Context]
|
|
14
|
-
outputs: [Workflow routing, Sub-skill delegation]
|
|
15
|
-
allowed_tools: [grep_search, read_file]
|
|
16
|
-
pipeline: [analyze, plan, delegate]
|
|
3
|
+
category: core
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
7
|
+
# qk-orchestrator
|
|
20
8
|
|
|
21
|
-
|
|
9
|
+
## Scope
|
|
10
|
+
- Request analysis and task delegation (Coordinate)
|
|
22
11
|
|
|
23
|
-
##
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
3. **Delegate (Handoff):**
|
|
31
|
-
- Handoff the gathered context to the selected Skill.
|
|
32
|
-
|
|
33
|
-
## 🛡️ 2. Constraints & Rules
|
|
34
|
-
|
|
35
|
-
- **Cost-Awareness:** Evaluate task complexity. If the task is trivial (e.g., fix a typo, change display text), solve it directly to save tokens.
|
|
36
|
-
- **Delegation First:** For complex tasks, do not write source code directly. Delegate to the correct specialized Skill.
|
|
37
|
-
- **Ambiguity Check:** If the user's intent is unclear, give them 2-3 Skill suggestions to choose from.
|
|
38
|
-
|
|
39
|
-
## 🌳 3. Decision Tree
|
|
40
|
-
|
|
41
|
-
```text
|
|
42
|
-
Is the task a massive project (e.g., "Build an Admin Dashboard")?
|
|
43
|
-
├── YES → Break it down:
|
|
44
|
-
│ 1. `qk-project-bootstrap` (Setup)
|
|
45
|
-
│ 2. `qk-data-lifecycle` (DB Schema)
|
|
46
|
-
│ 3. `qk-api-lifecycle` (Endpoints)
|
|
47
|
-
│ 4. `qk-feature-delivery` (UI).
|
|
48
|
-
└── NO → Delegate to the single most appropriate skill.
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Route user request to the correct sub-skill
|
|
16
|
+
must_not:
|
|
17
|
+
- Write code directly
|
|
18
|
+
- Hallucinate non-existent skills
|
|
49
19
|
```
|
|
50
20
|
|
|
51
|
-
##
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
21
|
+
## Policies
|
|
22
|
+
```yaml
|
|
23
|
+
prefer:
|
|
24
|
+
- Delegate to specialist skills
|
|
25
|
+
```
|
|
56
26
|
|
|
57
|
-
|
|
27
|
+
## Escalation
|
|
28
|
+
```yaml
|
|
29
|
+
stop:
|
|
30
|
+
- No matching skill is found
|
|
31
|
+
```
|
|
58
32
|
|
|
59
|
-
|
|
60
|
-
-
|
|
61
|
-
|
|
33
|
+
## Output
|
|
34
|
+
- Delegation plan
|
|
35
|
+
```
|
|
@@ -1,60 +1,35 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-policy-engine
|
|
3
|
-
version: 3.1.5
|
|
4
|
-
updated: 2026-07-02
|
|
5
|
-
description: Hệ thống đánh giá chính sách để đảm bảo các hành động an toàn và được ủy quyền.
|
|
6
3
|
category: security
|
|
7
|
-
|
|
8
|
-
intent: review-code
|
|
9
|
-
priority: high
|
|
10
|
-
tags: [security, policy, guardrails, authorization]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User asks to perform a high-risk destructive action (e.g., DROP table, mass delete).
|
|
13
|
-
inputs: [Requested Action, Context]
|
|
14
|
-
outputs: [Approval/Denial, Policy violations]
|
|
15
|
-
allowed_tools: [read_file]
|
|
16
|
-
pipeline: [analyze, evaluate, complete]
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
7
|
+
# qk-policy-engine
|
|
20
8
|
|
|
21
|
-
|
|
9
|
+
## Scope
|
|
10
|
+
- System policy evaluation for safe and authorized actions (Govern)
|
|
22
11
|
|
|
23
|
-
##
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
- Check if the action violates any safety constraints.
|
|
31
|
-
3. **Complete (Decision):**
|
|
32
|
-
- Approve (Allow execution) or Deny (Block execution) with explicit reasons.
|
|
33
|
-
|
|
34
|
-
## 🛡️ 2. Constraints & Rules
|
|
35
|
-
|
|
36
|
-
- **Deny by Default:** If an action is highly destructive and no backup plan exists, DENY it.
|
|
37
|
-
- **Override:** Only allow skipping the policy if the user explicitly passes an `--override` flag in their prompt.
|
|
38
|
-
|
|
39
|
-
## 🌳 3. Decision Tree
|
|
40
|
-
|
|
41
|
-
```text
|
|
42
|
-
Does the action involve deleting data or resources in Production?
|
|
43
|
-
├── YES → Has the user provided a backup confirmation?
|
|
44
|
-
│ ├── YES → Approve.
|
|
45
|
-
│ └── NO → DENY and request backup confirmation.
|
|
46
|
-
└── NO → Approve.
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Evaluate requested actions against defined system constraints
|
|
16
|
+
- Enforce OS-level invariants
|
|
17
|
+
must_not:
|
|
18
|
+
- Allow destructive commands (e.g. rm -rf /) to bypass checks
|
|
47
19
|
```
|
|
48
20
|
|
|
49
|
-
##
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
21
|
+
## Policies
|
|
22
|
+
```yaml
|
|
23
|
+
prefer:
|
|
24
|
+
- Strict adherence to policy over convenience
|
|
25
|
+
```
|
|
54
26
|
|
|
55
|
-
|
|
27
|
+
## Escalation
|
|
28
|
+
```yaml
|
|
29
|
+
stop:
|
|
30
|
+
- Action explicitly violates core safety policies
|
|
31
|
+
```
|
|
56
32
|
|
|
57
|
-
|
|
58
|
-
-
|
|
59
|
-
|
|
60
|
-
- **Hành động tiếp (Next Action):** ...
|
|
33
|
+
## Output
|
|
34
|
+
- Policy evaluation result (Allow/Deny)
|
|
35
|
+
```
|
|
@@ -1,52 +1,35 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-production-release
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Chuẩn bị codebase để phát hành lên production (Build, CI/CD, Security).
|
|
6
|
-
category: operations
|
|
7
|
-
behavior: validation
|
|
8
|
-
intent: validate
|
|
9
|
-
priority: high
|
|
10
|
-
tags: [deploy, release, build, production]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User asks to deploy the app, build for production, or release a new version.
|
|
13
|
-
inputs: [Release request, Environment configs]
|
|
14
|
-
outputs: [Deployment artifacts, Release checklist]
|
|
15
|
-
allowed_tools: [run_command, grep_search]
|
|
16
|
-
pipeline: [analyze, review, implement, validate, complete]
|
|
3
|
+
category: devops
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
##
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
- **Tóm tắt (Summary):** Trạng thái Build.
|
|
50
|
-
- **Chi tiết (Changes):** Dung lượng Bundle (Bundle size optimization).
|
|
51
|
-
- **Rủi ro (Risks):** Có lộ secret không.
|
|
52
|
-
- **Hành động tiếp (Next Action):** Checklist để user tự Deploy.
|
|
7
|
+
# qk-production-release
|
|
8
|
+
|
|
9
|
+
## Scope
|
|
10
|
+
- Preparing codebase for production release including Build, CI/CD, and Security checks (Plan & Govern)
|
|
11
|
+
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Verify that all tests pass and linters are clean
|
|
16
|
+
- Check for exposed secrets or misconfigurations
|
|
17
|
+
must_not:
|
|
18
|
+
- Deploy code that fails security audits
|
|
19
|
+
```
|
|
20
|
+
|
|
21
|
+
## Policies
|
|
22
|
+
```yaml
|
|
23
|
+
prefer:
|
|
24
|
+
- Immutable artifacts and deterministic builds
|
|
25
|
+
```
|
|
26
|
+
|
|
27
|
+
## Escalation
|
|
28
|
+
```yaml
|
|
29
|
+
stop:
|
|
30
|
+
- Security vulnerabilities or critical test failures are detected
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
## Output
|
|
34
|
+
- Release checklist and deployment readiness status
|
|
35
|
+
```
|
|
@@ -1,50 +1,36 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qk-project-bootstrap
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
description: Khởi tạo dự án mới với các best practices, linters, và cấu trúc thư mục chuẩn.
|
|
6
|
-
category: setup
|
|
7
|
-
behavior: development
|
|
8
|
-
intent: implement-feature
|
|
9
|
-
priority: high
|
|
10
|
-
tags: [bootstrap, scaffolding, setup, init]
|
|
11
|
-
platforms: [claude-code, cursor, windsurf, gemini-cli]
|
|
12
|
-
trigger: User asks to start a new project, create a new repo, or setup standard configurations.
|
|
13
|
-
inputs: [Stack selection, Project Name]
|
|
14
|
-
outputs: [Scaffolded Codebase, Configs]
|
|
15
|
-
allowed_tools: [run_command, write_to_file]
|
|
16
|
-
pipeline: [analyze, implement, engineering-standard, validate, complete]
|
|
3
|
+
category: fullstack
|
|
4
|
+
version: 6.0.0
|
|
17
5
|
---
|
|
18
6
|
|
|
19
|
-
#
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
##
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
- **Chi tiết (Changes):** Cấu trúc thư mục mới và các file cấu hình.
|
|
50
|
-
- **Xác thực (Verification):** Cách chạy dự án.
|
|
7
|
+
# qk-project-bootstrap
|
|
8
|
+
|
|
9
|
+
## Scope
|
|
10
|
+
- Initializing new projects with best practices (Execute)
|
|
11
|
+
|
|
12
|
+
## Constraints
|
|
13
|
+
```yaml
|
|
14
|
+
must:
|
|
15
|
+
- Setup linters, formatters, and standard directory structures
|
|
16
|
+
- Follow the organization's existing templates if available
|
|
17
|
+
must_not:
|
|
18
|
+
- Hardcode outdated dependency versions
|
|
19
|
+
- Skip adding basic README instructions
|
|
20
|
+
```
|
|
21
|
+
|
|
22
|
+
## Policies
|
|
23
|
+
```yaml
|
|
24
|
+
prefer:
|
|
25
|
+
- Standard tooling over custom scripts
|
|
26
|
+
```
|
|
27
|
+
|
|
28
|
+
## Escalation
|
|
29
|
+
```yaml
|
|
30
|
+
ask:
|
|
31
|
+
- To clarify preferred framework/language if not specified
|
|
32
|
+
```
|
|
33
|
+
|
|
34
|
+
## Output
|
|
35
|
+
- Bootstrapped repository structure
|
|
36
|
+
```
|