ai-developer-skill-os 3.1.5 → 6.0.0-rc1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (108) hide show
  1. package/README.md +15 -19
  2. package/_template/BEHAVIOR_SPEC.md +96 -0
  3. package/docs/GOVERNANCE.md +1 -1
  4. package/fix_seeds.js +22 -0
  5. package/framework/KERNEL.md +83 -0
  6. package/framework/bias-library/cosmetic-refactor.md +21 -0
  7. package/framework/bias-library/enterprise-crud.md +21 -0
  8. package/framework/bias-library/fake-ui-slop.md +20 -0
  9. package/framework/bias-library/hallucinated-tools.md +20 -0
  10. package/framework/bias-library/missing-ui-states.md +19 -0
  11. package/framework/bias-library/over-indexing.md +20 -0
  12. package/framework/bias-library/swallow-errors.md +19 -0
  13. package/framework/bias-library/ui-only-security.md +17 -0
  14. package/framework/decision-primitives.md +47 -0
  15. package/framework/dial-library/complexity-budget.md +13 -0
  16. package/framework/dial-library/granularity.md +13 -0
  17. package/framework/dial-library/optimization-strategy.md +13 -0
  18. package/framework/dial-library/strictness.md +13 -0
  19. package/framework/rule-library/delegation-only.md +9 -0
  20. package/framework/rule-library/minimal-diff.md +9 -0
  21. package/migrate-to-v6.js +130 -0
  22. package/migrate.js +147 -0
  23. package/migrate.py +133 -0
  24. package/migrate_all.cjs +96 -0
  25. package/package.json +2 -2
  26. package/skills/qk-access-policy/SKILL.md +30 -42
  27. package/skills/qk-ai-builder/SKILL.md +32 -43
  28. package/skills/qk-api-lifecycle/SKILL.md +28 -62
  29. package/skills/qk-bug-resolution/SKILL.md +29 -66
  30. package/skills/qk-context-loader/SKILL.md +25 -44
  31. package/skills/qk-data-lifecycle/SKILL.md +25 -58
  32. package/skills/qk-db-optimizer/SKILL.md +25 -53
  33. package/skills/qk-design-to-code/SKILL.md +32 -48
  34. package/skills/qk-docs/SKILL.md +26 -52
  35. package/skills/qk-engineering-standard/SKILL.md +28 -59
  36. package/skills/qk-feature-delivery/SKILL.md +29 -64
  37. package/skills/qk-help/SKILL.md +30 -40
  38. package/skills/qk-orchestrator/SKILL.md +25 -51
  39. package/skills/qk-policy-engine/SKILL.md +24 -49
  40. package/skills/qk-production-release/SKILL.md +31 -48
  41. package/skills/qk-project-bootstrap/SKILL.md +32 -46
  42. package/skills/qk-project-health/SKILL.md +26 -54
  43. package/skills/qk-project-memory/SKILL.md +31 -38
  44. package/skills/qk-system-evolution/SKILL.md +25 -61
  45. package/skills/qk-ui-audit/SKILL.md +25 -56
  46. package/skills/qk-ui-system-builder/SKILL.md +30 -42
  47. package/skills/qk-validation-gate/SKILL.md +26 -57
  48. package/specs/contracts/behavior-contract.yaml +40 -0
  49. package/specs/expectations/qk-bug-resolution.yaml +35 -0
  50. package/specs/scenarios/fix-login-nullref.yaml +3 -0
  51. package/taste-skill/.claude-plugin/marketplace.json +20 -0
  52. package/taste-skill/.claude-plugin/plugin.json +19 -0
  53. package/taste-skill/.github/FUNDING.yml +1 -0
  54. package/taste-skill/.github/copilot-instructions.md +11 -0
  55. package/taste-skill/CHANGELOG.md +111 -0
  56. package/taste-skill/LICENSE +21 -0
  57. package/taste-skill/README.md +212 -0
  58. package/taste-skill/assets/.gitkeep +0 -0
  59. package/taste-skill/assets/readme-banner.webp +0 -0
  60. package/taste-skill/assets/readme-buttons/btn-agent-skills.webp +0 -0
  61. package/taste-skill/assets/readme-buttons/btn-changelog.webp +0 -0
  62. package/taste-skill/assets/readme-buttons/btn-mit.webp +0 -0
  63. package/taste-skill/assets/readme-buttons/btn-site.webp +0 -0
  64. package/taste-skill/assets/readme-buttons/btn-tools.webp +0 -0
  65. package/taste-skill/assets/readme-cta-tasteskill.svg +5 -0
  66. package/taste-skill/assets/sponsors/animations-dev.webp +0 -0
  67. package/taste-skill/assets/sponsors/emil-animations-dev.webp +0 -0
  68. package/taste-skill/assets/taste-skill-logo.png +0 -0
  69. package/taste-skill/assets/taste-skill-logo.webp +0 -0
  70. package/taste-skill/assets/vercel-oss-program-badge.svg +44 -0
  71. package/taste-skill/examples/floria-bottom.webp +0 -0
  72. package/taste-skill/examples/floria-full.webp +0 -0
  73. package/taste-skill/examples/floria-top.webp +0 -0
  74. package/taste-skill/research/README.md +8 -0
  75. package/taste-skill/research/laziness/README.md +25 -0
  76. package/taste-skill/research/laziness/findings/empirical-results.md +58 -0
  77. package/taste-skill/research/laziness/findings/references.md +20 -0
  78. package/taste-skill/research/laziness/remediation/architectural-patterns.md +55 -0
  79. package/taste-skill/research/laziness/remediation/parameter-tuning.md +44 -0
  80. package/taste-skill/research/laziness/remediation/prompt-engineering.md +52 -0
  81. package/taste-skill/research/laziness/remediation/reference-prompts.md +79 -0
  82. package/taste-skill/research/laziness/root-causes/cognitive-shortcuts.md +23 -0
  83. package/taste-skill/research/laziness/root-causes/output-limits.md +39 -0
  84. package/taste-skill/research/laziness/root-causes/rlhf-and-compute.md +27 -0
  85. package/taste-skill/research/laziness/root-causes/training-data-bias.md +28 -0
  86. package/taste-skill/scripts/build-emil-sponsor-row.mjs +41 -0
  87. package/taste-skill/scripts/convert-readme-assets-webp.mjs +142 -0
  88. package/taste-skill/scripts/process-readme-buttons.mjs +108 -0
  89. package/taste-skill/scripts/process-sponsor-badge.mjs +83 -0
  90. package/taste-skill/skill.sh +25 -0
  91. package/taste-skill/skills/brandkit/SKILL.md +798 -0
  92. package/taste-skill/skills/brutalist-skill/SKILL.md +92 -0
  93. package/taste-skill/skills/gpt-tasteskill/SKILL.md +74 -0
  94. package/taste-skill/skills/image-to-code-skill/SKILL.md +1228 -0
  95. package/taste-skill/skills/imagegen-frontend-mobile/SKILL.md +1465 -0
  96. package/taste-skill/skills/imagegen-frontend-web/SKILL.md +987 -0
  97. package/taste-skill/skills/llms.txt +13 -0
  98. package/taste-skill/skills/minimalist-skill/SKILL.md +85 -0
  99. package/taste-skill/skills/output-skill/SKILL.md +49 -0
  100. package/taste-skill/skills/redesign-skill/SKILL.md +178 -0
  101. package/taste-skill/skills/soft-skill/SKILL.md +98 -0
  102. package/taste-skill/skills/stitch-skill/DESIGN.md +121 -0
  103. package/taste-skill/skills/stitch-skill/SKILL.md +184 -0
  104. package/taste-skill/skills/taste-skill/SKILL.md +1206 -0
  105. package/taste-skill/skills/taste-skill-v1/SKILL.md +226 -0
  106. package/tests/behavior-conformance.test.js +151 -0
  107. package/_template/SKILL.md +0 -154
  108. package/tests/spec-compliance.test.js +0 -193
@@ -1,69 +1,38 @@
1
1
  ---
2
2
  name: qk-engineering-standard
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Ép buộc áp dụng SOLID, DRY, Clean Code, và các quy tắc đặt tên.
6
- category: standard
7
- behavior: static-analysis
8
- intent: review-code
9
- priority: critical
10
- tags: [clean-code, architecture, refactoring, solid]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User asks to review code, refactor code, or as part of the pipeline before validation.
13
- inputs: [Source Code, Target Directory]
14
- outputs: [Refactored Code, Code Review Report]
15
- allowed_tools: [grep_search, read_file, write_to_file]
16
- pipeline: [analyze, review, implement, validate, complete]
3
+ category: conventions
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-engineering-standard - Standard Operating Procedure
7
+ # qk-engineering-standard
20
8
 
21
- > **Goal:** Đóng vai trò là "Kiến trúc sư trưởng", rà soát và ép buộc mã nguồn phải tuân thủ chuẩn mực Clean Code, dễ đọc và dễ bảo trì.
9
+ ## Scope
10
+ - Readability and structural improvements (Evaluate)
22
11
 
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Context Review):**
26
- - Scan the target file(s) and determine their role (UI, Logic, API, Config).
27
- 2. **Review (Smell Detection):**
28
- - Check for Naming violations (e.g., `temp`, `data`, `res` instead of `userData`).
29
- - Check for Magic Numbers/Strings.
30
- - Check for God Components (Files > 300 lines or > 3 responsibilities).
31
- 3. **Implement (Refactoring):**
32
- - Extract inline styles or raw strings into constants.
33
- - Split large components into smaller, pure components.
34
- - Separate UI rendering from Business Logic (Custom Hooks).
35
- 4. **Verify (Validation):**
36
- - Ensure the refactoring did NOT change the business logic or behavior of the app (Regression check).
37
-
38
- ## 🛡️ 3. Constraints & Rules
39
-
40
- - **Code is for Humans:** Write code that junior developers can easily understand. Avoid overly clever or obscure syntax.
41
- - **Scope Limit:** Do NOT refactor the entire project if the user only asked to review one file. Limit the scope to the current task context.
42
- - **Preserve Behavior:** Refactoring must strictly preserve backward compatibility.
43
-
44
- ## 🌳 3. Decision Tree
45
-
46
- ```text
47
- Is the file larger than 300 lines?
48
- ├── YES → Propose splitting the file into sub-components or moving logic to hooks.
49
- └── NO → Continue normal inspection.
50
-
51
- Does the React Component contain `fetch()` or heavy data mapping?
52
- ├── YES → Extract the logic into a separate `use[Feature]Data.ts` hook.
53
- └── NO → Pass.
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Preserve business logic exactly
16
+ - Ensure tests pass after refactor
17
+ must_not:
18
+ - Invent new requirements
19
+ - Change public API signature
54
20
  ```
55
21
 
56
- ## 🤝 4. Handoff Pipeline
57
-
58
- 1. `validate`: Run static analysis (Linters, TypeScript compiler) to ensure the refactored code has no syntax errors.
59
- 2. `complete`: Generate the review report.
60
-
61
- ## 📝 5. Output Format
22
+ ## Policies
23
+ ```yaml
24
+ prefer:
25
+ - Readability over cleverness
26
+ - Explain trade-offs
27
+ ```
62
28
 
63
- Vui lòng trả kết quả bằng Tiếng Việt. Cấu trúc báo cáo bao gồm:
29
+ ## Escalation
30
+ ```yaml
31
+ stop:
32
+ - Tests fail
33
+ ```
64
34
 
65
- - **Tóm tắt (Summary):** File nào vừa được Refactor / Review.
66
- - **Chi tiết (Changes):** Các thay đổi cụ thể về Tên biến, Cấu trúc.
67
- - **Nguyên nhân (Reasoning):** Giải thích tại sao code cũ là "Bad Practice" và code mới tốt hơn thế nào.
68
- - **Xác thực (Verification):** Đảm bảo code chạy không lỗi.
69
- - **Hành động tiếp (Next Action):** Bàn giao lại cho Pipeline.
35
+ ## Output
36
+ - Evaluation summary
37
+ - Refactored code
38
+ ```
@@ -1,74 +1,39 @@
1
1
  ---
2
2
  name: qk-feature-delivery
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Phát triển tính năng mới hoàn chỉnh từ Frontend đến Backend.
6
- category: engineering
7
- behavior: development
8
- intent: implement-feature
9
- priority: high
10
- tags: [feature, development, e2e, ui, api]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User asks to create a new page, component, or endpoint.
13
- inputs: [Feature requirements, Design/Mockup (optional)]
14
- outputs: [Implemented code, Test cases]
15
- allowed_tools: [run_command, read_file, write_to_file, grep_search]
16
- pipeline: [analyze, implement, engineering-standard, validate, complete]
3
+ category: fullstack
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-feature-delivery - Standard Operating Procedure
7
+ # qk-feature-delivery
20
8
 
21
- > **Goal:** Phát triển một tính năng mới hoàn chỉnh, từ giao diện (Frontend) đến API (Backend) và Cơ sở dữ liệu (nếu có).
9
+ ## Scope
10
+ - New capabilities (Execute)
22
11
 
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Requirements Gathering):**
26
- - Read the user's requirements.
27
- - Break down the feature into sub-tasks (e.g., Schema -> API -> UI Component -> Integration).
28
- 2. **Plan (Architecture & Design):**
29
- - Identify if you need to load specific knowledge files (e.g., `knowledge/frontend/react.md`).
30
- - Define data interfaces (TypeScript Types/Interfaces) first.
31
- 3. **Execute (Implementation):**
32
- - Build the backend/API mock first (if applicable).
33
- - Build the UI component and bind the data.
34
- 4. **Verify (Validation):**
35
- - **4 UI States:** Implement all 4 UI states: `Loading` (Skeleton/Spinner), `Success` (Data), `Error` (Fallback UI/Retry), and `Empty` (No data).
36
- - Check if the UI is responsive (works well on Mobile & Desktop).
37
-
38
- ## 🛡️ 3. Constraints & Rules
39
-
40
- - **Contract First:** Always define the Type/Interface contract before writing the implementation logic.
41
- - **State Management:** Lift state to Global (Redux/Zustand/Context) only if 2 or more components outside the same parent/child tree need to share it. Do not abuse Global State.
42
- - **Component Reusability:** Do not create a new Button or Input if a Shared Component already exists in `src/components/shared/`.
43
- - **DRY (Don't Repeat Yourself):** Extract inline styles or duplicate logic into hooks/utilities.
44
-
45
- ## 🌳 3. Decision Tree
46
-
47
- ```text
48
- Does the feature require Backend API changes?
49
- ├── YES → Start with Database Schema/Types -> API Route -> UI Integration.
50
- └── NO → Is it a purely visual UI component?
51
- ├── YES → Load UI/Design tokens and implement.
52
- └── NO (Stateful) → Load `knowledge/frontend/react.md` to design the State Management strategy.
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Clarify requirements if unclear
16
+ - Implement complete end-to-end flow
17
+ must_not:
18
+ - Mix refactoring into feature work
19
+ - Ignore backward compatibility
53
20
  ```
54
21
 
55
- ## 🤝 4. Handoff Pipeline
56
-
57
- After implementing the feature, map to the pipeline:
58
-
59
- 1. `engineering-standard`: Ensure naming conventions and file size limits are respected.
60
- 2. `validate`: Run tests and format the code.
61
- 3. `complete`: Output the final report.
62
-
63
- ## 📝 5. Output Format
64
-
65
- Vui lòng báo cáo lại bằng Tiếng Việt với cấu trúc tương tự `templates/bug-report.md` nhưng thay đổi tiêu đề thành:
22
+ ## Policies
23
+ ```yaml
24
+ prefer:
25
+ - Plan before implementing
26
+ - Cover UI loading/error states
27
+ ```
66
28
 
67
- ### 🚀 Báo Cáo Triển Khai Tính Năng (Feature Report)
29
+ ## Escalation
30
+ ```yaml
31
+ stop:
32
+ - Requirements are ambiguous
33
+ ask:
34
+ - Before adding heavy dependencies
35
+ ```
68
36
 
69
- - **Tóm tắt (Summary):** Tính năng gì đã được làm.
70
- - **Chi tiết (Changes):** Liệt kê các file tạo mới / chỉnh sửa.
71
- - **Kiến trúc (Reasoning):** Giải thích quyết định thiết kế State/API.
72
- - **Xác thực (Verification):** Các bước để user test thử.
73
- - **Rủi ro (Risks):** Có làm chậm hệ thống hay bundle size không.
74
- - **Hành động tiếp (Next Action):** ...
37
+ ## Output
38
+ - Feature implementation
39
+ ```
@@ -1,44 +1,34 @@
1
1
  ---
2
2
  name: qk-help
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Hiển thị danh sách các kỹ năng hiện có và các mẹo sử dụng.
6
- category: utilities
7
- behavior: static-analysis
8
- intent: review-code
9
- priority: low
10
- tags: [help, manual, list, tutorial]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User types 'help', asks for a list of skills, or doesn't know how to use the agent.
13
- inputs: [Help query]
14
- outputs: [List of skills, Tips]
15
- allowed_tools: [read_file, list_dir]
16
- pipeline: [analyze, complete]
3
+ category: core
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-help - Standard Operating Procedure
20
-
21
- > **Goal:** Bản đồ hướng dẫn sử dụng Agent Skills. Giúp User tra cứu nhanh lệnh.
22
-
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Scan):**
26
- - Read the skills directory to list all available tools.
27
- 2. **Complete (Format):**
28
- - Format the skills into a neat Markdown table.
29
-
30
- ## 🛡️ 2. Constraints & Rules
31
-
32
- - **Keep it short:** Do not print the entire content of `SKILL.md`. Only print the Name and Description from the metadata.
33
-
34
- ## 🤝 3. Handoff Pipeline
35
-
36
- 1. `complete`: Output the Help table.
37
-
38
- ## 📝 4. Output Format
39
-
40
- Vui lòng trả kết quả bằng Tiếng Việt dạng Bảng (Table).
41
-
42
- - **Cột 1:** Tên Skill
43
- - **Cột 2:** Mô tả ngắn (Tiếng Việt)
44
- - **Cột 3:** Lệnh kích hoạt (Ví dụ: `@qk-bug-resolution`)
7
+ # qk-help
8
+
9
+ ## Scope
10
+ - Displaying available skills and usage tips (Collect & Delegate)
11
+
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Present information clearly and concisely
16
+ must_not:
17
+ - Hallucinate skills that do not exist in the repository
18
+ ```
19
+
20
+ ## Policies
21
+ ```yaml
22
+ prefer:
23
+ - Short, actionable examples over long descriptions
24
+ ```
25
+
26
+ ## Escalation
27
+ ```yaml
28
+ ask:
29
+ - If the user's intent is unclear when asking for help
30
+ ```
31
+
32
+ ## Output
33
+ - List of available skills and usage instructions
34
+ ```
@@ -1,61 +1,35 @@
1
1
  ---
2
2
  name: qk-orchestrator
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Điều hướng yêu cầu của người dùng, phân tích ý định và ủy quyền cho các sub-skills phù hợp.
6
- category: orchestration
7
- behavior: static-analysis
8
- intent: review-code
9
- priority: critical
10
- tags: [router, orchestrator, delegation, ai-manager]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: Triggered initially when the user provides a vague or complex multi-step request.
13
- inputs: [User intent, Raw Context]
14
- outputs: [Workflow routing, Sub-skill delegation]
15
- allowed_tools: [grep_search, read_file]
16
- pipeline: [analyze, plan, delegate]
3
+ category: core
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-orchestrator - Standard Operating Procedure
7
+ # qk-orchestrator
20
8
 
21
- > **Goal:** "Tổng tư lệnh" (Master Orchestrator). Phân tích ý đồ của người dùng và điều phối các kỹ năng (Skills) khác để giải quyết vấn đề thay vì làm mọi thứ một cách thủ công.
9
+ ## Scope
10
+ - Request analysis and task delegation (Coordinate)
22
11
 
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Intent Parsing):**
26
- - Read the user's request. Determine the goal: Is it a Bug Fix, a New Feature, a Refactor, or just a Question?
27
- 2. **Plan (Context Gathering & Skill Selection):**
28
- - Determine which specific files are needed.
29
- - Select the most appropriate Skill (e.g., `qk-feature-delivery` for new UI, `qk-bug-resolution` for fixing errors).
30
- 3. **Delegate (Handoff):**
31
- - Handoff the gathered context to the selected Skill.
32
-
33
- ## 🛡️ 2. Constraints & Rules
34
-
35
- - **Cost-Awareness:** Evaluate task complexity. If the task is trivial (e.g., fix a typo, change display text), solve it directly to save tokens.
36
- - **Delegation First:** For complex tasks, do not write source code directly. Delegate to the correct specialized Skill.
37
- - **Ambiguity Check:** If the user's intent is unclear, give them 2-3 Skill suggestions to choose from.
38
-
39
- ## 🌳 3. Decision Tree
40
-
41
- ```text
42
- Is the task a massive project (e.g., "Build an Admin Dashboard")?
43
- ├── YES → Break it down:
44
- │ 1. `qk-project-bootstrap` (Setup)
45
- │ 2. `qk-data-lifecycle` (DB Schema)
46
- │ 3. `qk-api-lifecycle` (Endpoints)
47
- │ 4. `qk-feature-delivery` (UI).
48
- └── NO → Delegate to the single most appropriate skill.
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Route user request to the correct sub-skill
16
+ must_not:
17
+ - Write code directly
18
+ - Hallucinate non-existent skills
49
19
  ```
50
20
 
51
- ## 🤝 4. Handoff Pipeline
52
-
53
- 1. `delegate`: Call the target Skill.
54
-
55
- ## 📝 5. Output Format
21
+ ## Policies
22
+ ```yaml
23
+ prefer:
24
+ - Delegate to specialist skills
25
+ ```
56
26
 
57
- Vui lòng trả kết quả bằng Tiếng Việt.
27
+ ## Escalation
28
+ ```yaml
29
+ stop:
30
+ - No matching skill is found
31
+ ```
58
32
 
59
- - **Tóm tắt (Summary):** Đã phân tích xong yêu cầu của User.
60
- - **Quyết định điều phối (Reasoning):** Giao việc cho Skill nào.
61
- - **Hành động tiếp (Next Action):** Tự động chuyển vai trò sang Skill được chọn.
33
+ ## Output
34
+ - Delegation plan
35
+ ```
@@ -1,60 +1,35 @@
1
1
  ---
2
2
  name: qk-policy-engine
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Hệ thống đánh giá chính sách để đảm bảo các hành động an toàn và được ủy quyền.
6
3
  category: security
7
- behavior: static-analysis
8
- intent: review-code
9
- priority: high
10
- tags: [security, policy, guardrails, authorization]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User asks to perform a high-risk destructive action (e.g., DROP table, mass delete).
13
- inputs: [Requested Action, Context]
14
- outputs: [Approval/Denial, Policy violations]
15
- allowed_tools: [read_file]
16
- pipeline: [analyze, evaluate, complete]
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-policy-engine - Standard Operating Procedure
7
+ # qk-policy-engine
20
8
 
21
- > **Goal:** Đóng vai trò là "Bộ quy tắc thép" (Policy Enforcer). Ngăn chặn các lệnh sai lầm có thể phá hoại hệ thống.
9
+ ## Scope
10
+ - System policy evaluation for safe and authorized actions (Govern)
22
11
 
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Risk Assessment):**
26
- - Classify the user's request (Low, Medium, High risk).
27
- - High Risk: Dropping databases, deleting multiple files, force-pushing to `main`.
28
- 2. **Evaluate (Policy Check):**
29
- - Load security policies (from `.agents/AGENTS.md` or `.cursorrules`).
30
- - Check if the action violates any safety constraints.
31
- 3. **Complete (Decision):**
32
- - Approve (Allow execution) or Deny (Block execution) with explicit reasons.
33
-
34
- ## 🛡️ 2. Constraints & Rules
35
-
36
- - **Deny by Default:** If an action is highly destructive and no backup plan exists, DENY it.
37
- - **Override:** Only allow skipping the policy if the user explicitly passes an `--override` flag in their prompt.
38
-
39
- ## 🌳 3. Decision Tree
40
-
41
- ```text
42
- Does the action involve deleting data or resources in Production?
43
- ├── YES → Has the user provided a backup confirmation?
44
- │ ├── YES → Approve.
45
- │ └── NO → DENY and request backup confirmation.
46
- └── NO → Approve.
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Evaluate requested actions against defined system constraints
16
+ - Enforce OS-level invariants
17
+ must_not:
18
+ - Allow destructive commands (e.g. rm -rf /) to bypass checks
47
19
  ```
48
20
 
49
- ## 🤝 4. Handoff Pipeline
50
-
51
- 1. `complete`: Generate the Policy Decision Report.
52
-
53
- ## 📝 5. Output Format
21
+ ## Policies
22
+ ```yaml
23
+ prefer:
24
+ - Strict adherence to policy over convenience
25
+ ```
54
26
 
55
- Vui lòng trả kết quả bằng Tiếng Việt.
27
+ ## Escalation
28
+ ```yaml
29
+ stop:
30
+ - Action explicitly violates core safety policies
31
+ ```
56
32
 
57
- - **Tóm tắt (Summary):** Mức độ rủi ro (Risk Level).
58
- - **Phán quyết (Decision):** ✅ APPROVED hoặc ❌ DENIED.
59
- - **Nguyên nhân (Reasoning):** Vi phạm chính sách nào (nếu bị Deny).
60
- - **Hành động tiếp (Next Action):** ...
33
+ ## Output
34
+ - Policy evaluation result (Allow/Deny)
35
+ ```
@@ -1,52 +1,35 @@
1
1
  ---
2
2
  name: qk-production-release
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Chuẩn bị codebase để phát hành lên production (Build, CI/CD, Security).
6
- category: operations
7
- behavior: validation
8
- intent: validate
9
- priority: high
10
- tags: [deploy, release, build, production]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User asks to deploy the app, build for production, or release a new version.
13
- inputs: [Release request, Environment configs]
14
- outputs: [Deployment artifacts, Release checklist]
15
- allowed_tools: [run_command, grep_search]
16
- pipeline: [analyze, review, implement, validate, complete]
3
+ category: devops
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-production-release - Standard Operating Procedure
20
-
21
- > **Goal:** Chuẩn bị gói phần mềm để đẩy lên môi trường Production an toàn và tối ưu nhất (Minified, Tree-shaked).
22
-
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Pre-flight Checks):**
26
- - Check if the git branch is clean.
27
- - Verify environment variables are documented.
28
- 2. **Implement (Build & Optimize):**
29
- - Run `npm run build`.
30
- 3. **Validate (Security Gate):**
31
- - Scan the build output (e.g., `dist/` or `.next/`) for leaked API Keys (`grep_search`).
32
- 4. **Complete (Deployment Plan):**
33
- - Provide a manual checklist for the user to execute the final deployment.
34
-
35
- ## 🛡️ 3. Constraints & Rules
36
-
37
- - **No Rogue Deploys:** Never run commands like `firebase deploy` or `vercel --prod` without explicit, undeniable user approval.
38
- - **Secret Safety:** Never hardcode URLs. Ensure they are injected via ENV.
39
-
40
- ## 🤝 3. Handoff Pipeline
41
-
42
- 1. `validate`: Run security sweep on the build output.
43
- 2. `complete`: Output the Release Report.
44
-
45
- ## 📝 4. Output Format
46
-
47
- Vui lòng trả kết quả bằng Tiếng Việt.
48
-
49
- - **Tóm tắt (Summary):** Trạng thái Build.
50
- - **Chi tiết (Changes):** Dung lượng Bundle (Bundle size optimization).
51
- - **Rủi ro (Risks):** Có lộ secret không.
52
- - **Hành động tiếp (Next Action):** Checklist để user tự Deploy.
7
+ # qk-production-release
8
+
9
+ ## Scope
10
+ - Preparing codebase for production release including Build, CI/CD, and Security checks (Plan & Govern)
11
+
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Verify that all tests pass and linters are clean
16
+ - Check for exposed secrets or misconfigurations
17
+ must_not:
18
+ - Deploy code that fails security audits
19
+ ```
20
+
21
+ ## Policies
22
+ ```yaml
23
+ prefer:
24
+ - Immutable artifacts and deterministic builds
25
+ ```
26
+
27
+ ## Escalation
28
+ ```yaml
29
+ stop:
30
+ - Security vulnerabilities or critical test failures are detected
31
+ ```
32
+
33
+ ## Output
34
+ - Release checklist and deployment readiness status
35
+ ```
@@ -1,50 +1,36 @@
1
1
  ---
2
2
  name: qk-project-bootstrap
3
- version: 3.1.5
4
- updated: 2026-07-02
5
- description: Khởi tạo dự án mới với các best practices, linters, và cấu trúc thư mục chuẩn.
6
- category: setup
7
- behavior: development
8
- intent: implement-feature
9
- priority: high
10
- tags: [bootstrap, scaffolding, setup, init]
11
- platforms: [claude-code, cursor, windsurf, gemini-cli]
12
- trigger: User asks to start a new project, create a new repo, or setup standard configurations.
13
- inputs: [Stack selection, Project Name]
14
- outputs: [Scaffolded Codebase, Configs]
15
- allowed_tools: [run_command, write_to_file]
16
- pipeline: [analyze, implement, engineering-standard, validate, complete]
3
+ category: fullstack
4
+ version: 6.0.0
17
5
  ---
18
6
 
19
- # 🛠️ qk-project-bootstrap - Standard Operating Procedure
20
-
21
- > **Goal:** "Thợ xây móng". Khởi tạo một dự án mới hoàn toàn với các cấu hình chuẩn mực nhất từ Day 1.
22
-
23
- ## 🔄 1. Chain of Thought (SOP)
24
-
25
- 1. **Analyze (Requirements):**
26
- - Ask the user for their preferred stack (e.g., Next.js, Vite, NestJS).
27
- 2. **Implement (Scaffolding):**
28
- - Run the initialization command (e.g., `npx create-next-app@latest`).
29
- - Overwrite `.eslintrc`, `prettierrc`, `tsconfig.json` with strict rules.
30
- - Scaffold the architecture (e.g., create `src/features/`, `src/components/shared/`).
31
- 3. **Verify (Validation):**
32
- - Run `npm run dev` in a short background task to ensure it doesn't crash.
33
-
34
- ## 🛡️ 2. Constraints & Rules
35
-
36
- - **Strict Mode:** Always enable `strict: true` in TypeScript configurations.
37
- - **Package Manager Check:** If the user uses `pnpm`, do NOT run `npm install`. Stick to one package manager.
38
-
39
- ## 🤝 3. Handoff Pipeline
40
-
41
- 1. `engineering-standard`: Verify the generated folder structure.
42
- 2. `complete`: Output the Bootstrap Report.
43
-
44
- ## 📝 4. Output Format
45
-
46
- Vui lòng trả kết quả bằng Tiếng Việt.
47
-
48
- - **Tóm tắt (Summary):** Dự án đã được khởi tạo với Stack nào.
49
- - **Chi tiết (Changes):** Cấu trúc thư mục mới và các file cấu hình.
50
- - **Xác thực (Verification):** Cách chạy dự án.
7
+ # qk-project-bootstrap
8
+
9
+ ## Scope
10
+ - Initializing new projects with best practices (Execute)
11
+
12
+ ## Constraints
13
+ ```yaml
14
+ must:
15
+ - Setup linters, formatters, and standard directory structures
16
+ - Follow the organization's existing templates if available
17
+ must_not:
18
+ - Hardcode outdated dependency versions
19
+ - Skip adding basic README instructions
20
+ ```
21
+
22
+ ## Policies
23
+ ```yaml
24
+ prefer:
25
+ - Standard tooling over custom scripts
26
+ ```
27
+
28
+ ## Escalation
29
+ ```yaml
30
+ ask:
31
+ - To clarify preferred framework/language if not specified
32
+ ```
33
+
34
+ ## Output
35
+ - Bootstrapped repository structure
36
+ ```