aigroup-workflow 2.2.0 → 2.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (645) hide show
  1. package/.claude/commands/fix-build.md +10 -5
  2. package/.claude/commands/init-project.md +13 -8
  3. package/.claude/commands/plan.md +15 -8
  4. package/.claude/commands/review.md +12 -6
  5. package/.claude/commands/tdd.md +11 -5
  6. package/.claude/commands/workflow-start.md +20 -11
  7. package/.claude/settings.json +28 -0
  8. package/.codex/agents/architect.toml +207 -0
  9. package/.codex/agents/build-error-resolver.toml +110 -0
  10. package/.codex/agents/code-reviewer.toml +233 -0
  11. package/.codex/agents/doc-updater.toml +103 -0
  12. package/.codex/agents/e2e-runner.toml +103 -0
  13. package/.codex/agents/get-current-datetime.toml +23 -0
  14. package/.codex/agents/init-architect.toml +181 -0
  15. package/.codex/agents/planner.toml +208 -0
  16. package/.codex/agents/refactor-cleaner.toml +81 -0
  17. package/.codex/agents/rust-reviewer.toml +90 -0
  18. package/.codex/agents/security-reviewer.toml +104 -0
  19. package/.codex/agents/tdd-guide.toml +87 -0
  20. package/AGENTS.md +2 -2
  21. package/CLAUDE.md +23 -1
  22. package/LICENSE +20 -20
  23. package/README.md +333 -333
  24. package/agents/a11y-architect.md +141 -141
  25. package/agents/architect.md +211 -211
  26. package/agents/build-error-resolver.md +114 -114
  27. package/agents/chief-of-staff.md +151 -151
  28. package/agents/code-architect.md +71 -71
  29. package/agents/code-explorer.md +69 -69
  30. package/agents/code-reviewer.md +237 -237
  31. package/agents/code-simplifier.md +47 -47
  32. package/agents/comment-analyzer.md +45 -45
  33. package/agents/conversation-analyzer.md +52 -52
  34. package/agents/cpp-build-resolver.md +90 -90
  35. package/agents/cpp-reviewer.md +72 -72
  36. package/agents/csharp-reviewer.md +101 -101
  37. package/agents/dart-build-resolver.md +201 -201
  38. package/agents/database-reviewer.md +91 -91
  39. package/agents/doc-updater.md +107 -107
  40. package/agents/docs-lookup.md +68 -68
  41. package/agents/e2e-runner.md +107 -107
  42. package/agents/flutter-reviewer.md +243 -243
  43. package/agents/gan-evaluator.md +209 -209
  44. package/agents/gan-generator.md +131 -131
  45. package/agents/gan-planner.md +99 -99
  46. package/agents/get-current-datetime.md +26 -26
  47. package/agents/go-build-resolver.md +94 -94
  48. package/agents/go-reviewer.md +76 -76
  49. package/agents/harness-optimizer.md +35 -35
  50. package/agents/healthcare-reviewer.md +83 -83
  51. package/agents/java-build-resolver.md +153 -153
  52. package/agents/java-reviewer.md +92 -92
  53. package/agents/kotlin-build-resolver.md +118 -118
  54. package/agents/kotlin-reviewer.md +159 -159
  55. package/agents/loop-operator.md +36 -36
  56. package/agents/opensource-forker.md +198 -198
  57. package/agents/opensource-packager.md +249 -249
  58. package/agents/opensource-sanitizer.md +188 -188
  59. package/agents/performance-optimizer.md +446 -446
  60. package/agents/planner.md +212 -212
  61. package/agents/pr-test-analyzer.md +45 -45
  62. package/agents/python-reviewer.md +98 -98
  63. package/agents/pytorch-build-resolver.md +120 -120
  64. package/agents/refactor-cleaner.md +85 -85
  65. package/agents/rust-build-resolver.md +148 -148
  66. package/agents/rust-reviewer.md +94 -94
  67. package/agents/security-reviewer.md +108 -108
  68. package/agents/seo-specialist.md +59 -59
  69. package/agents/silent-failure-hunter.md +50 -50
  70. package/agents/tdd-guide.md +91 -91
  71. package/agents/type-design-analyzer.md +41 -41
  72. package/agents/typescript-reviewer.md +112 -112
  73. package/cli/commands/update.mjs +1 -1
  74. package/cli/utils/scaffold.mjs +53 -0
  75. package/docs/rules/agents.md +166 -50
  76. package/docs/rules/cpp/coding-style.md +44 -44
  77. package/docs/rules/cpp/hooks.md +39 -39
  78. package/docs/rules/cpp/patterns.md +51 -51
  79. package/docs/rules/cpp/security.md +51 -51
  80. package/docs/rules/cpp/testing.md +44 -44
  81. package/docs/rules/csharp/coding-style.md +72 -72
  82. package/docs/rules/csharp/hooks.md +25 -25
  83. package/docs/rules/csharp/patterns.md +50 -50
  84. package/docs/rules/csharp/security.md +58 -58
  85. package/docs/rules/csharp/testing.md +46 -46
  86. package/docs/rules/dart/coding-style.md +159 -159
  87. package/docs/rules/dart/hooks.md +66 -66
  88. package/docs/rules/dart/patterns.md +261 -261
  89. package/docs/rules/dart/security.md +135 -135
  90. package/docs/rules/dart/testing.md +215 -215
  91. package/docs/rules/golang/coding-style.md +32 -32
  92. package/docs/rules/golang/hooks.md +17 -17
  93. package/docs/rules/golang/patterns.md +45 -45
  94. package/docs/rules/golang/security.md +34 -34
  95. package/docs/rules/golang/testing.md +31 -31
  96. package/docs/rules/java/coding-style.md +114 -114
  97. package/docs/rules/java/hooks.md +18 -18
  98. package/docs/rules/java/patterns.md +146 -146
  99. package/docs/rules/java/security.md +100 -100
  100. package/docs/rules/java/testing.md +131 -131
  101. package/docs/rules/kotlin/coding-style.md +86 -86
  102. package/docs/rules/kotlin/hooks.md +17 -17
  103. package/docs/rules/kotlin/patterns.md +146 -146
  104. package/docs/rules/kotlin/security.md +82 -82
  105. package/docs/rules/kotlin/testing.md +128 -128
  106. package/docs/rules/perl/coding-style.md +46 -46
  107. package/docs/rules/perl/hooks.md +22 -22
  108. package/docs/rules/perl/patterns.md +76 -76
  109. package/docs/rules/perl/security.md +69 -69
  110. package/docs/rules/perl/testing.md +54 -54
  111. package/docs/rules/php/coding-style.md +40 -40
  112. package/docs/rules/php/hooks.md +24 -24
  113. package/docs/rules/php/patterns.md +33 -33
  114. package/docs/rules/php/security.md +37 -37
  115. package/docs/rules/php/testing.md +39 -39
  116. package/docs/rules/python/coding-style.md +42 -42
  117. package/docs/rules/python/hooks.md +19 -19
  118. package/docs/rules/python/patterns.md +39 -39
  119. package/docs/rules/python/security.md +30 -30
  120. package/docs/rules/python/testing.md +38 -38
  121. package/docs/rules/rust/coding-style.md +151 -151
  122. package/docs/rules/rust/hooks.md +16 -16
  123. package/docs/rules/rust/patterns.md +168 -168
  124. package/docs/rules/rust/security.md +141 -141
  125. package/docs/rules/rust/testing.md +154 -154
  126. package/docs/rules/swift/coding-style.md +47 -47
  127. package/docs/rules/swift/hooks.md +20 -20
  128. package/docs/rules/swift/patterns.md +66 -66
  129. package/docs/rules/swift/security.md +33 -33
  130. package/docs/rules/swift/testing.md +45 -45
  131. package/docs/rules/typescript/coding-style.md +199 -199
  132. package/docs/rules/typescript/hooks.md +22 -22
  133. package/docs/rules/typescript/patterns.md +52 -52
  134. package/docs/rules/typescript/security.md +28 -28
  135. package/docs/rules/typescript/testing.md +18 -18
  136. package/docs/rules/web/coding-style.md +96 -96
  137. package/docs/rules/web/design-quality.md +62 -62
  138. package/docs/rules/web/hooks.md +120 -120
  139. package/docs/rules/web/patterns.md +79 -79
  140. package/docs/rules/web/performance.md +64 -64
  141. package/docs/rules/web/security.md +57 -57
  142. package/docs/rules/web/testing.md +55 -55
  143. package/docs/templates/README.md +36 -36
  144. package/docs/templates/ai-project-final.md +124 -124
  145. package/docs/templates/ai-project.md +105 -105
  146. package/docs/templates/api.md +157 -157
  147. package/docs/templates/bug.md +62 -62
  148. package/docs/templates/code-review.md +87 -87
  149. package/docs/templates/generic.md +116 -116
  150. package/docs/templates/implementation-plan.md +1 -1
  151. package/docs/templates/meeting.md +68 -68
  152. package/docs/templates/prd.md +98 -98
  153. package/docs/templates/ui.md +134 -134
  154. package/docs/workflow-pipeline.md +11 -10
  155. package/package.json +40 -39
  156. package/scripts/hooks/checks/orchestration-artifacts.cjs +28 -23
  157. package/scripts/hooks/checks/workflow-state.cjs +4 -5
  158. package/scripts/orchestration/lib/orchestrator.cjs +344 -117
  159. package/scripts/orchestration/lib/validate.cjs +145 -0
  160. package/scripts/orchestration/session.cjs +88 -44
  161. package/skills/SUPERPOWERS-LICENSE +21 -21
  162. package/skills/ai-ml/fine-tuning-expert/SKILL.md +162 -162
  163. package/skills/ai-ml/fine-tuning-expert/references/dataset-preparation.md +540 -540
  164. package/skills/ai-ml/fine-tuning-expert/references/deployment-optimization.md +673 -673
  165. package/skills/ai-ml/fine-tuning-expert/references/evaluation-metrics.md +597 -597
  166. package/skills/ai-ml/fine-tuning-expert/references/hyperparameter-tuning.md +565 -565
  167. package/skills/ai-ml/fine-tuning-expert/references/lora-peft.md +347 -347
  168. package/skills/ai-ml/ml-pipeline/SKILL.md +159 -159
  169. package/skills/ai-ml/ml-pipeline/references/experiment-tracking.md +833 -833
  170. package/skills/ai-ml/ml-pipeline/references/feature-engineering.md +631 -631
  171. package/skills/ai-ml/ml-pipeline/references/model-validation.md +978 -978
  172. package/skills/ai-ml/ml-pipeline/references/pipeline-orchestration.md +907 -907
  173. package/skills/ai-ml/ml-pipeline/references/training-pipelines.md +782 -782
  174. package/skills/ai-ml/rag-architect/SKILL.md +194 -194
  175. package/skills/ai-ml/rag-architect/references/chunking-strategies.md +878 -878
  176. package/skills/ai-ml/rag-architect/references/embedding-models.md +561 -561
  177. package/skills/ai-ml/rag-architect/references/rag-evaluation.md +833 -833
  178. package/skills/ai-ml/rag-architect/references/retrieval-optimization.md +795 -795
  179. package/skills/ai-ml/rag-architect/references/vector-databases.md +589 -589
  180. package/skills/ai-ml/spark-engineer/SKILL.md +148 -148
  181. package/skills/ai-ml/spark-engineer/references/partitioning-caching.md +543 -543
  182. package/skills/ai-ml/spark-engineer/references/performance-tuning.md +544 -544
  183. package/skills/ai-ml/spark-engineer/references/rdd-operations.md +599 -599
  184. package/skills/ai-ml/spark-engineer/references/spark-sql-dataframes.md +474 -474
  185. package/skills/ai-ml/spark-engineer/references/streaming-patterns.md +786 -786
  186. package/skills/backend/api-designer/SKILL.md +217 -217
  187. package/skills/backend/api-designer/references/error-handling.md +541 -541
  188. package/skills/backend/api-designer/references/openapi.md +824 -824
  189. package/skills/backend/api-designer/references/pagination.md +494 -494
  190. package/skills/backend/api-designer/references/rest-patterns.md +335 -335
  191. package/skills/backend/api-designer/references/versioning.md +391 -391
  192. package/skills/backend/architecture-designer/SKILL.md +117 -117
  193. package/skills/backend/architecture-designer/references/adr-template.md +116 -116
  194. package/skills/backend/architecture-designer/references/architecture-patterns.md +111 -111
  195. package/skills/backend/architecture-designer/references/database-selection.md +102 -102
  196. package/skills/backend/architecture-designer/references/nfr-checklist.md +112 -112
  197. package/skills/backend/architecture-designer/references/system-design.md +100 -100
  198. package/skills/backend/code-documenter/SKILL.md +147 -147
  199. package/skills/backend/code-documenter/references/api-docs-fastapi-django.md +166 -166
  200. package/skills/backend/code-documenter/references/api-docs-nestjs-express.md +220 -220
  201. package/skills/backend/code-documenter/references/coverage-reports.md +125 -125
  202. package/skills/backend/code-documenter/references/documentation-systems.md +333 -333
  203. package/skills/backend/code-documenter/references/interactive-api-docs.md +531 -531
  204. package/skills/backend/code-documenter/references/python-docstrings.md +121 -121
  205. package/skills/backend/code-documenter/references/typescript-jsdoc.md +145 -145
  206. package/skills/backend/code-documenter/references/user-guides-tutorials.md +530 -530
  207. package/skills/backend/debugging-wizard/SKILL.md +105 -105
  208. package/skills/backend/debugging-wizard/references/common-patterns.md +132 -132
  209. package/skills/backend/debugging-wizard/references/debugging-tools.md +140 -140
  210. package/skills/backend/debugging-wizard/references/quick-fixes.md +177 -177
  211. package/skills/backend/debugging-wizard/references/strategies.md +142 -142
  212. package/skills/backend/debugging-wizard/references/systematic-debugging.md +367 -367
  213. package/skills/backend/feature-forge/SKILL.md +98 -98
  214. package/skills/backend/feature-forge/references/acceptance-criteria.md +104 -104
  215. package/skills/backend/feature-forge/references/ears-syntax.md +99 -99
  216. package/skills/backend/feature-forge/references/interview-questions.md +150 -150
  217. package/skills/backend/feature-forge/references/pre-discovery-subagents.md +54 -54
  218. package/skills/backend/feature-forge/references/specification-template.md +103 -103
  219. package/skills/backend/fullstack-guardian/SKILL.md +105 -105
  220. package/skills/backend/fullstack-guardian/references/api-design-standards.md +307 -307
  221. package/skills/backend/fullstack-guardian/references/architecture-decisions.md +350 -350
  222. package/skills/backend/fullstack-guardian/references/backend-patterns.md +237 -237
  223. package/skills/backend/fullstack-guardian/references/common-patterns.md +134 -134
  224. package/skills/backend/fullstack-guardian/references/deliverables-checklist.md +354 -354
  225. package/skills/backend/fullstack-guardian/references/design-template.md +91 -91
  226. package/skills/backend/fullstack-guardian/references/error-handling.md +135 -135
  227. package/skills/backend/fullstack-guardian/references/frontend-patterns.md +340 -340
  228. package/skills/backend/fullstack-guardian/references/integration-patterns.md +333 -333
  229. package/skills/backend/fullstack-guardian/references/security-checklist.md +106 -106
  230. package/skills/backend/graphql-architect/SKILL.md +146 -146
  231. package/skills/backend/graphql-architect/references/federation.md +418 -418
  232. package/skills/backend/graphql-architect/references/migration-from-rest.md +1141 -1141
  233. package/skills/backend/graphql-architect/references/resolvers.md +425 -425
  234. package/skills/backend/graphql-architect/references/schema-design.md +393 -393
  235. package/skills/backend/graphql-architect/references/security.md +569 -569
  236. package/skills/backend/graphql-architect/references/subscriptions.md +510 -510
  237. package/skills/backend/legacy-modernizer/SKILL.md +137 -137
  238. package/skills/backend/legacy-modernizer/references/legacy-testing.md +381 -381
  239. package/skills/backend/legacy-modernizer/references/migration-strategies.md +423 -423
  240. package/skills/backend/legacy-modernizer/references/refactoring-patterns.md +395 -395
  241. package/skills/backend/legacy-modernizer/references/strangler-fig-pattern.md +281 -281
  242. package/skills/backend/legacy-modernizer/references/system-assessment.md +487 -487
  243. package/skills/backend/microservices-architect/SKILL.md +164 -164
  244. package/skills/backend/microservices-architect/references/communication.md +499 -499
  245. package/skills/backend/microservices-architect/references/data.md +721 -721
  246. package/skills/backend/microservices-architect/references/decomposition.md +344 -344
  247. package/skills/backend/microservices-architect/references/observability.md +805 -805
  248. package/skills/backend/microservices-architect/references/patterns.md +603 -603
  249. package/skills/database/database-optimizer/SKILL.md +147 -147
  250. package/skills/database/database-optimizer/references/index-strategies.md +331 -331
  251. package/skills/database/database-optimizer/references/monitoring-analysis.md +501 -501
  252. package/skills/database/database-optimizer/references/mysql-tuning.md +452 -452
  253. package/skills/database/database-optimizer/references/postgresql-tuning.md +413 -413
  254. package/skills/database/database-optimizer/references/query-optimization.md +251 -251
  255. package/skills/database/postgres-pro/SKILL.md +152 -152
  256. package/skills/database/postgres-pro/references/extensions.md +404 -404
  257. package/skills/database/postgres-pro/references/jsonb.md +321 -321
  258. package/skills/database/postgres-pro/references/maintenance.md +481 -481
  259. package/skills/database/postgres-pro/references/performance.md +265 -265
  260. package/skills/database/postgres-pro/references/replication.md +446 -446
  261. package/skills/database/sql-pro/SKILL.md +129 -129
  262. package/skills/database/sql-pro/references/database-design.md +402 -402
  263. package/skills/database/sql-pro/references/dialect-differences.md +419 -419
  264. package/skills/database/sql-pro/references/optimization.md +384 -384
  265. package/skills/database/sql-pro/references/query-patterns.md +285 -285
  266. package/skills/database/sql-pro/references/window-functions.md +328 -328
  267. package/skills/dotnet/csharp-developer/SKILL.md +125 -125
  268. package/skills/dotnet/csharp-developer/references/aspnet-core.md +394 -394
  269. package/skills/dotnet/csharp-developer/references/blazor.md +553 -553
  270. package/skills/dotnet/csharp-developer/references/entity-framework.md +409 -409
  271. package/skills/dotnet/csharp-developer/references/modern-csharp.md +248 -248
  272. package/skills/dotnet/csharp-developer/references/performance.md +498 -498
  273. package/skills/dotnet/dotnet-core-expert/SKILL.md +138 -138
  274. package/skills/dotnet/dotnet-core-expert/references/authentication.md +546 -546
  275. package/skills/dotnet/dotnet-core-expert/references/clean-architecture.md +455 -455
  276. package/skills/dotnet/dotnet-core-expert/references/cloud-native.md +548 -548
  277. package/skills/dotnet/dotnet-core-expert/references/entity-framework.md +440 -440
  278. package/skills/dotnet/dotnet-core-expert/references/minimal-apis.md +319 -319
  279. package/skills/frontend/angular-architect/SKILL.md +152 -152
  280. package/skills/frontend/angular-architect/references/components.md +297 -297
  281. package/skills/frontend/angular-architect/references/ngrx.md +401 -401
  282. package/skills/frontend/angular-architect/references/routing.md +361 -361
  283. package/skills/frontend/angular-architect/references/rxjs.md +319 -319
  284. package/skills/frontend/angular-architect/references/testing.md +405 -405
  285. package/skills/frontend/design-commands/design.md +91 -91
  286. package/skills/frontend/design-commands/handoff.md +97 -97
  287. package/skills/frontend/design-commands/prototype.md +120 -120
  288. package/skills/frontend/design-commands/spec.md +160 -160
  289. package/skills/frontend/design-commands/style.md +78 -78
  290. package/skills/frontend/flutter-expert/SKILL.md +138 -138
  291. package/skills/frontend/flutter-expert/references/bloc-state.md +259 -259
  292. package/skills/frontend/flutter-expert/references/gorouter-navigation.md +119 -119
  293. package/skills/frontend/flutter-expert/references/performance.md +99 -99
  294. package/skills/frontend/flutter-expert/references/project-structure.md +118 -118
  295. package/skills/frontend/flutter-expert/references/riverpod-state.md +130 -130
  296. package/skills/frontend/flutter-expert/references/widget-patterns.md +123 -123
  297. package/skills/frontend/nextjs-developer/SKILL.md +143 -143
  298. package/skills/frontend/nextjs-developer/references/app-router.md +311 -311
  299. package/skills/frontend/nextjs-developer/references/data-fetching.md +482 -482
  300. package/skills/frontend/nextjs-developer/references/deployment.md +545 -545
  301. package/skills/frontend/nextjs-developer/references/server-actions.md +462 -462
  302. package/skills/frontend/nextjs-developer/references/server-components.md +384 -384
  303. package/skills/frontend/react-expert/SKILL.md +149 -149
  304. package/skills/frontend/react-expert/references/hooks-patterns.md +162 -162
  305. package/skills/frontend/react-expert/references/migration-class-to-modern.md +1119 -1119
  306. package/skills/frontend/react-expert/references/performance.md +168 -168
  307. package/skills/frontend/react-expert/references/react-19-features.md +174 -174
  308. package/skills/frontend/react-expert/references/server-components.md +143 -143
  309. package/skills/frontend/react-expert/references/state-management.md +171 -171
  310. package/skills/frontend/react-expert/references/testing-react.md +174 -174
  311. package/skills/frontend/react-native-expert/SKILL.md +185 -185
  312. package/skills/frontend/react-native-expert/references/expo-router.md +187 -187
  313. package/skills/frontend/react-native-expert/references/list-optimization.md +204 -204
  314. package/skills/frontend/react-native-expert/references/platform-handling.md +188 -188
  315. package/skills/frontend/react-native-expert/references/project-structure.md +171 -171
  316. package/skills/frontend/react-native-expert/references/storage-hooks.md +173 -173
  317. package/skills/frontend/senior-frontend/SKILL.md +477 -477
  318. package/skills/frontend/senior-frontend/references/frontend_best_practices.md +806 -806
  319. package/skills/frontend/senior-frontend/references/nextjs_optimization_guide.md +724 -724
  320. package/skills/frontend/senior-frontend/references/react_patterns.md +746 -746
  321. package/skills/frontend/senior-frontend/scripts/bundle_analyzer.py +407 -407
  322. package/skills/frontend/senior-frontend/scripts/component_generator.py +329 -329
  323. package/skills/frontend/senior-frontend/scripts/frontend_scaffolder.py +1005 -1005
  324. package/skills/frontend/ui-ux-pro-max/SKILL.md +386 -386
  325. package/skills/frontend/ui-ux-pro-max/data/charts.csv +26 -26
  326. package/skills/frontend/ui-ux-pro-max/data/colors.csv +97 -97
  327. package/skills/frontend/ui-ux-pro-max/data/icons.csv +101 -101
  328. package/skills/frontend/ui-ux-pro-max/data/landing.csv +31 -31
  329. package/skills/frontend/ui-ux-pro-max/data/products.csv +96 -96
  330. package/skills/frontend/ui-ux-pro-max/data/react-performance.csv +45 -45
  331. package/skills/frontend/ui-ux-pro-max/data/stacks/astro.csv +54 -54
  332. package/skills/frontend/ui-ux-pro-max/data/stacks/flutter.csv +53 -53
  333. package/skills/frontend/ui-ux-pro-max/data/stacks/html-tailwind.csv +56 -56
  334. package/skills/frontend/ui-ux-pro-max/data/stacks/jetpack-compose.csv +53 -53
  335. package/skills/frontend/ui-ux-pro-max/data/stacks/nextjs.csv +53 -53
  336. package/skills/frontend/ui-ux-pro-max/data/stacks/nuxt-ui.csv +51 -51
  337. package/skills/frontend/ui-ux-pro-max/data/stacks/nuxtjs.csv +59 -59
  338. package/skills/frontend/ui-ux-pro-max/data/stacks/react-native.csv +52 -52
  339. package/skills/frontend/ui-ux-pro-max/data/stacks/react.csv +54 -54
  340. package/skills/frontend/ui-ux-pro-max/data/stacks/shadcn.csv +61 -61
  341. package/skills/frontend/ui-ux-pro-max/data/stacks/svelte.csv +54 -54
  342. package/skills/frontend/ui-ux-pro-max/data/stacks/swiftui.csv +51 -51
  343. package/skills/frontend/ui-ux-pro-max/data/stacks/vue.csv +50 -50
  344. package/skills/frontend/ui-ux-pro-max/data/styles.csv +68 -68
  345. package/skills/frontend/ui-ux-pro-max/data/typography.csv +57 -57
  346. package/skills/frontend/ui-ux-pro-max/data/ui-reasoning.csv +101 -101
  347. package/skills/frontend/ui-ux-pro-max/data/ux-guidelines.csv +99 -99
  348. package/skills/frontend/ui-ux-pro-max/data/web-interface.csv +31 -31
  349. package/skills/frontend/ui-ux-pro-max/scripts/core.py +253 -253
  350. package/skills/frontend/ui-ux-pro-max/scripts/design_system.py +1067 -1067
  351. package/skills/frontend/ui-ux-pro-max/scripts/search.py +114 -114
  352. package/skills/frontend/vue-expert/SKILL.md +98 -98
  353. package/skills/frontend/vue-expert/references/build-tooling.md +480 -480
  354. package/skills/frontend/vue-expert/references/components.md +448 -448
  355. package/skills/frontend/vue-expert/references/composition-api.md +299 -299
  356. package/skills/frontend/vue-expert/references/mobile-hybrid.md +636 -636
  357. package/skills/frontend/vue-expert/references/nuxt.md +669 -669
  358. package/skills/frontend/vue-expert/references/state-management.md +449 -449
  359. package/skills/frontend/vue-expert/references/typescript.md +584 -584
  360. package/skills/frontend/vue-expert-js/SKILL.md +167 -167
  361. package/skills/frontend/vue-expert-js/references/component-architecture.md +219 -219
  362. package/skills/frontend/vue-expert-js/references/composables-patterns.md +183 -183
  363. package/skills/frontend/vue-expert-js/references/jsdoc-typing.md +535 -535
  364. package/skills/frontend/vue-expert-js/references/state-management.md +249 -249
  365. package/skills/frontend/vue-expert-js/references/testing-patterns.md +237 -237
  366. package/skills/go-rust-cpp/cpp-pro/SKILL.md +115 -115
  367. package/skills/go-rust-cpp/cpp-pro/references/build-tooling.md +440 -440
  368. package/skills/go-rust-cpp/cpp-pro/references/concurrency.md +437 -437
  369. package/skills/go-rust-cpp/cpp-pro/references/memory-performance.md +397 -397
  370. package/skills/go-rust-cpp/cpp-pro/references/modern-cpp.md +304 -304
  371. package/skills/go-rust-cpp/cpp-pro/references/templates.md +357 -357
  372. package/skills/go-rust-cpp/golang-pro/SKILL.md +122 -122
  373. package/skills/go-rust-cpp/golang-pro/references/concurrency.md +329 -329
  374. package/skills/go-rust-cpp/golang-pro/references/generics.md +442 -442
  375. package/skills/go-rust-cpp/golang-pro/references/interfaces.md +432 -432
  376. package/skills/go-rust-cpp/golang-pro/references/project-structure.md +477 -477
  377. package/skills/go-rust-cpp/golang-pro/references/testing.md +451 -451
  378. package/skills/go-rust-cpp/rust-engineer/SKILL.md +167 -167
  379. package/skills/go-rust-cpp/rust-engineer/references/async.md +458 -458
  380. package/skills/go-rust-cpp/rust-engineer/references/error-handling.md +334 -334
  381. package/skills/go-rust-cpp/rust-engineer/references/ownership.md +278 -278
  382. package/skills/go-rust-cpp/rust-engineer/references/testing.md +470 -470
  383. package/skills/go-rust-cpp/rust-engineer/references/traits.md +413 -413
  384. package/skills/infra/cli-developer/SKILL.md +113 -113
  385. package/skills/infra/cli-developer/references/design-patterns.md +221 -221
  386. package/skills/infra/cli-developer/references/go-cli.md +540 -540
  387. package/skills/infra/cli-developer/references/node-cli.md +383 -383
  388. package/skills/infra/cli-developer/references/python-cli.md +422 -422
  389. package/skills/infra/cli-developer/references/ux-patterns.md +448 -448
  390. package/skills/infra/cloud-architect/SKILL.md +216 -216
  391. package/skills/infra/cloud-architect/references/aws.md +394 -394
  392. package/skills/infra/cloud-architect/references/azure.md +562 -562
  393. package/skills/infra/cloud-architect/references/cost.md +582 -582
  394. package/skills/infra/cloud-architect/references/gcp.md +633 -633
  395. package/skills/infra/cloud-architect/references/multi-cloud.md +483 -483
  396. package/skills/infra/devops-engineer/SKILL.md +144 -144
  397. package/skills/infra/devops-engineer/references/deployment-strategies.md +241 -241
  398. package/skills/infra/devops-engineer/references/docker-patterns.md +113 -113
  399. package/skills/infra/devops-engineer/references/github-actions.md +139 -139
  400. package/skills/infra/devops-engineer/references/incident-response.md +331 -331
  401. package/skills/infra/devops-engineer/references/kubernetes.md +154 -154
  402. package/skills/infra/devops-engineer/references/platform-engineering.md +417 -417
  403. package/skills/infra/devops-engineer/references/release-automation.md +527 -527
  404. package/skills/infra/devops-engineer/references/terraform-iac.md +141 -141
  405. package/skills/infra/kubernetes-specialist/SKILL.md +241 -241
  406. package/skills/infra/kubernetes-specialist/references/configuration.md +452 -452
  407. package/skills/infra/kubernetes-specialist/references/cost-optimization.md +458 -458
  408. package/skills/infra/kubernetes-specialist/references/custom-operators.md +563 -563
  409. package/skills/infra/kubernetes-specialist/references/gitops.md +530 -530
  410. package/skills/infra/kubernetes-specialist/references/helm-charts.md +912 -912
  411. package/skills/infra/kubernetes-specialist/references/multi-cluster.md +507 -507
  412. package/skills/infra/kubernetes-specialist/references/networking.md +447 -447
  413. package/skills/infra/kubernetes-specialist/references/service-mesh.md +459 -459
  414. package/skills/infra/kubernetes-specialist/references/storage.md +535 -535
  415. package/skills/infra/kubernetes-specialist/references/troubleshooting.md +414 -414
  416. package/skills/infra/kubernetes-specialist/references/workloads.md +377 -377
  417. package/skills/infra/mcp-developer/SKILL.md +143 -143
  418. package/skills/infra/mcp-developer/references/protocol.md +244 -244
  419. package/skills/infra/mcp-developer/references/python-sdk.md +367 -367
  420. package/skills/infra/mcp-developer/references/resources.md +554 -554
  421. package/skills/infra/mcp-developer/references/tools.md +480 -480
  422. package/skills/infra/mcp-developer/references/typescript-sdk.md +350 -350
  423. package/skills/infra/monitoring-expert/SKILL.md +176 -176
  424. package/skills/infra/monitoring-expert/references/alerting-rules.md +141 -141
  425. package/skills/infra/monitoring-expert/references/application-profiling.md +331 -331
  426. package/skills/infra/monitoring-expert/references/capacity-planning.md +344 -344
  427. package/skills/infra/monitoring-expert/references/dashboards.md +126 -126
  428. package/skills/infra/monitoring-expert/references/opentelemetry.md +123 -123
  429. package/skills/infra/monitoring-expert/references/performance-testing.md +269 -269
  430. package/skills/infra/monitoring-expert/references/prometheus-metrics.md +136 -136
  431. package/skills/infra/monitoring-expert/references/structured-logging.md +142 -142
  432. package/skills/infra/sre-engineer/SKILL.md +181 -181
  433. package/skills/infra/sre-engineer/references/automation-toil.md +492 -492
  434. package/skills/infra/sre-engineer/references/error-budget-policy.md +334 -334
  435. package/skills/infra/sre-engineer/references/incident-chaos.md +576 -576
  436. package/skills/infra/sre-engineer/references/monitoring-alerting.md +424 -424
  437. package/skills/infra/sre-engineer/references/slo-sli-management.md +238 -238
  438. package/skills/infra/terraform-engineer/SKILL.md +143 -143
  439. package/skills/infra/terraform-engineer/references/best-practices.md +583 -583
  440. package/skills/infra/terraform-engineer/references/module-patterns.md +297 -297
  441. package/skills/infra/terraform-engineer/references/providers.md +452 -452
  442. package/skills/infra/terraform-engineer/references/state-management.md +371 -371
  443. package/skills/infra/terraform-engineer/references/testing.md +486 -486
  444. package/skills/infra/websocket-engineer/SKILL.md +168 -168
  445. package/skills/infra/websocket-engineer/references/alternatives.md +391 -391
  446. package/skills/infra/websocket-engineer/references/patterns.md +400 -400
  447. package/skills/infra/websocket-engineer/references/protocol.md +195 -195
  448. package/skills/infra/websocket-engineer/references/scaling.md +333 -333
  449. package/skills/infra/websocket-engineer/references/security.md +474 -474
  450. package/skills/java/java-architect/SKILL.md +132 -132
  451. package/skills/java/java-architect/references/jpa-optimization.md +393 -393
  452. package/skills/java/java-architect/references/reactive-webflux.md +356 -356
  453. package/skills/java/java-architect/references/spring-boot-setup.md +269 -269
  454. package/skills/java/java-architect/references/spring-security.md +445 -445
  455. package/skills/java/java-architect/references/testing-patterns.md +500 -500
  456. package/skills/java/kotlin-specialist/SKILL.md +147 -147
  457. package/skills/java/kotlin-specialist/references/android-compose.md +419 -419
  458. package/skills/java/kotlin-specialist/references/coroutines-flow.md +276 -276
  459. package/skills/java/kotlin-specialist/references/dsl-idioms.md +421 -421
  460. package/skills/java/kotlin-specialist/references/ktor-server.md +426 -426
  461. package/skills/java/kotlin-specialist/references/multiplatform-kmp.md +380 -380
  462. package/skills/java/spring-boot-engineer/SKILL.md +195 -195
  463. package/skills/java/spring-boot-engineer/references/cloud.md +498 -498
  464. package/skills/java/spring-boot-engineer/references/data.md +381 -381
  465. package/skills/java/spring-boot-engineer/references/security.md +459 -459
  466. package/skills/java/spring-boot-engineer/references/testing.md +545 -545
  467. package/skills/java/spring-boot-engineer/references/web.md +295 -295
  468. package/skills/javascript/javascript-pro/SKILL.md +132 -132
  469. package/skills/javascript/javascript-pro/references/async-patterns.md +334 -334
  470. package/skills/javascript/javascript-pro/references/browser-apis.md +398 -398
  471. package/skills/javascript/javascript-pro/references/modern-syntax.md +272 -272
  472. package/skills/javascript/javascript-pro/references/modules.md +357 -357
  473. package/skills/javascript/javascript-pro/references/node-essentials.md +471 -471
  474. package/skills/javascript/nestjs-expert/SKILL.md +206 -206
  475. package/skills/javascript/nestjs-expert/references/authentication.md +166 -166
  476. package/skills/javascript/nestjs-expert/references/controllers-routing.md +111 -111
  477. package/skills/javascript/nestjs-expert/references/dtos-validation.md +153 -153
  478. package/skills/javascript/nestjs-expert/references/migration-from-express.md +1237 -1237
  479. package/skills/javascript/nestjs-expert/references/services-di.md +140 -140
  480. package/skills/javascript/nestjs-expert/references/testing-patterns.md +186 -186
  481. package/skills/javascript/typescript-pro/SKILL.md +145 -145
  482. package/skills/javascript/typescript-pro/references/advanced-types.md +259 -259
  483. package/skills/javascript/typescript-pro/references/configuration.md +445 -445
  484. package/skills/javascript/typescript-pro/references/patterns.md +484 -484
  485. package/skills/javascript/typescript-pro/references/type-guards.md +352 -352
  486. package/skills/javascript/typescript-pro/references/utility-types.md +329 -329
  487. package/skills/php/laravel-specialist/SKILL.md +262 -262
  488. package/skills/php/laravel-specialist/references/eloquent.md +351 -351
  489. package/skills/php/laravel-specialist/references/livewire.md +512 -512
  490. package/skills/php/laravel-specialist/references/queues.md +423 -423
  491. package/skills/php/laravel-specialist/references/routing.md +362 -362
  492. package/skills/php/laravel-specialist/references/testing.md +522 -522
  493. package/skills/php/php-pro/SKILL.md +206 -206
  494. package/skills/php/php-pro/references/async-patterns.md +412 -412
  495. package/skills/php/php-pro/references/laravel-patterns.md +377 -377
  496. package/skills/php/php-pro/references/modern-php-features.md +323 -323
  497. package/skills/php/php-pro/references/symfony-patterns.md +466 -466
  498. package/skills/php/php-pro/references/testing-quality.md +466 -466
  499. package/skills/product/competitive-analysis/SKILL.md +257 -257
  500. package/skills/product/meeting-notes/SKILL.md +266 -266
  501. package/skills/product/prd-template/SKILL.md +150 -150
  502. package/skills/product/stakeholder-update/SKILL.md +225 -225
  503. package/skills/product/user-research-synthesis/SKILL.md +235 -235
  504. package/skills/python/django-expert/SKILL.md +162 -162
  505. package/skills/python/django-expert/references/authentication.md +145 -145
  506. package/skills/python/django-expert/references/drf-serializers.md +148 -148
  507. package/skills/python/django-expert/references/models-orm.md +151 -151
  508. package/skills/python/django-expert/references/testing-django.md +204 -204
  509. package/skills/python/django-expert/references/viewsets-views.md +153 -153
  510. package/skills/python/fastapi-expert/SKILL.md +185 -185
  511. package/skills/python/fastapi-expert/references/async-sqlalchemy.md +146 -146
  512. package/skills/python/fastapi-expert/references/authentication.md +159 -159
  513. package/skills/python/fastapi-expert/references/endpoints-routing.md +142 -142
  514. package/skills/python/fastapi-expert/references/migration-from-django.md +996 -996
  515. package/skills/python/fastapi-expert/references/pydantic-v2.md +135 -135
  516. package/skills/python/fastapi-expert/references/testing-async.md +159 -159
  517. package/skills/python/pandas-pro/SKILL.md +178 -178
  518. package/skills/python/pandas-pro/references/aggregation-groupby.md +545 -545
  519. package/skills/python/pandas-pro/references/data-cleaning.md +500 -500
  520. package/skills/python/pandas-pro/references/dataframe-operations.md +420 -420
  521. package/skills/python/pandas-pro/references/merging-joining.md +596 -596
  522. package/skills/python/pandas-pro/references/performance-optimization.md +597 -597
  523. package/skills/python/python-pro/SKILL.md +177 -177
  524. package/skills/python/python-pro/references/async-patterns.md +356 -356
  525. package/skills/python/python-pro/references/packaging.md +460 -460
  526. package/skills/python/python-pro/references/standard-library.md +378 -378
  527. package/skills/python/python-pro/references/testing.md +404 -404
  528. package/skills/python/python-pro/references/type-system.md +290 -290
  529. package/skills/quality/chaos-engineer/SKILL.md +182 -182
  530. package/skills/quality/chaos-engineer/references/chaos-tools.md +511 -511
  531. package/skills/quality/chaos-engineer/references/experiment-design.md +229 -229
  532. package/skills/quality/chaos-engineer/references/game-days.md +434 -434
  533. package/skills/quality/chaos-engineer/references/infrastructure-chaos.md +348 -348
  534. package/skills/quality/chaos-engineer/references/kubernetes-chaos.md +432 -432
  535. package/skills/quality/code-reviewer/SKILL.md +119 -119
  536. package/skills/quality/code-reviewer/references/common-issues.md +142 -142
  537. package/skills/quality/code-reviewer/references/feedback-examples.md +144 -144
  538. package/skills/quality/code-reviewer/references/receiving-feedback.md +238 -238
  539. package/skills/quality/code-reviewer/references/report-template.md +109 -109
  540. package/skills/quality/code-reviewer/references/review-checklist.md +88 -88
  541. package/skills/quality/code-reviewer/references/spec-compliance-review.md +258 -258
  542. package/skills/quality/playwright-expert/SKILL.md +169 -169
  543. package/skills/quality/playwright-expert/references/api-mocking.md +140 -140
  544. package/skills/quality/playwright-expert/references/configuration.md +155 -155
  545. package/skills/quality/playwright-expert/references/debugging-flaky.md +150 -150
  546. package/skills/quality/playwright-expert/references/page-object-model.md +152 -152
  547. package/skills/quality/playwright-expert/references/selectors-locators.md +119 -119
  548. package/skills/quality/secure-code-guardian/SKILL.md +191 -191
  549. package/skills/quality/secure-code-guardian/references/authentication.md +136 -136
  550. package/skills/quality/secure-code-guardian/references/input-validation.md +146 -146
  551. package/skills/quality/secure-code-guardian/references/owasp-prevention.md +135 -135
  552. package/skills/quality/secure-code-guardian/references/security-headers.md +133 -133
  553. package/skills/quality/secure-code-guardian/references/xss-csrf.md +157 -157
  554. package/skills/quality/security-reviewer/SKILL.md +103 -103
  555. package/skills/quality/security-reviewer/references/infrastructure-security.md +268 -268
  556. package/skills/quality/security-reviewer/references/penetration-testing.md +268 -268
  557. package/skills/quality/security-reviewer/references/report-template.md +170 -170
  558. package/skills/quality/security-reviewer/references/sast-tools.md +117 -117
  559. package/skills/quality/security-reviewer/references/secret-scanning.md +125 -125
  560. package/skills/quality/security-reviewer/references/vulnerability-patterns.md +152 -152
  561. package/skills/quality/senior-qa/README.md +196 -196
  562. package/skills/quality/senior-qa/SKILL.md +399 -399
  563. package/skills/quality/senior-qa/references/qa_best_practices.md +964 -964
  564. package/skills/quality/senior-qa/references/test_automation_patterns.md +1009 -1009
  565. package/skills/quality/senior-qa/references/testing_strategies.md +649 -649
  566. package/skills/quality/senior-qa/scripts/coverage_analyzer.py +836 -836
  567. package/skills/quality/senior-qa/scripts/e2e_test_scaffolder.py +820 -820
  568. package/skills/quality/senior-qa/scripts/test_suite_generator.py +605 -605
  569. package/skills/quality/tdd-guide/HOW_TO_USE.md +313 -313
  570. package/skills/quality/tdd-guide/README.md +680 -680
  571. package/skills/quality/tdd-guide/SKILL.md +122 -122
  572. package/skills/quality/tdd-guide/assets/expected_output.json +77 -77
  573. package/skills/quality/tdd-guide/assets/sample_input_python.json +39 -39
  574. package/skills/quality/tdd-guide/assets/sample_input_typescript.json +36 -36
  575. package/skills/quality/tdd-guide/references/ci-integration.md +195 -195
  576. package/skills/quality/tdd-guide/references/framework-guide.md +206 -206
  577. package/skills/quality/tdd-guide/references/tdd-best-practices.md +128 -128
  578. package/skills/quality/tdd-guide/scripts/coverage_analyzer.py +434 -434
  579. package/skills/quality/tdd-guide/scripts/fixture_generator.py +440 -440
  580. package/skills/quality/tdd-guide/scripts/format_detector.py +384 -384
  581. package/skills/quality/tdd-guide/scripts/framework_adapter.py +428 -428
  582. package/skills/quality/tdd-guide/scripts/metrics_calculator.py +456 -456
  583. package/skills/quality/tdd-guide/scripts/output_formatter.py +354 -354
  584. package/skills/quality/tdd-guide/scripts/tdd_workflow.py +474 -474
  585. package/skills/quality/tdd-guide/scripts/test_generator.py +438 -438
  586. package/skills/quality/test-master/SKILL.md +94 -94
  587. package/skills/quality/test-master/references/automation-frameworks.md +294 -294
  588. package/skills/quality/test-master/references/e2e-testing.md +128 -128
  589. package/skills/quality/test-master/references/integration-testing.md +120 -120
  590. package/skills/quality/test-master/references/performance-testing.md +118 -118
  591. package/skills/quality/test-master/references/qa-methodology.md +247 -247
  592. package/skills/quality/test-master/references/security-testing.md +127 -127
  593. package/skills/quality/test-master/references/tdd-iron-laws.md +174 -174
  594. package/skills/quality/test-master/references/test-reports.md +104 -104
  595. package/skills/quality/test-master/references/testing-anti-patterns.md +231 -231
  596. package/skills/quality/test-master/references/unit-testing.md +113 -113
  597. package/skills/ruby/rails-expert/SKILL.md +154 -154
  598. package/skills/ruby/rails-expert/references/active-record.md +244 -244
  599. package/skills/ruby/rails-expert/references/api-development.md +401 -401
  600. package/skills/ruby/rails-expert/references/background-jobs.md +272 -272
  601. package/skills/ruby/rails-expert/references/hotwire-turbo.md +228 -228
  602. package/skills/ruby/rails-expert/references/rspec-testing.md +367 -367
  603. package/skills/swift/swift-expert/SKILL.md +163 -163
  604. package/skills/swift/swift-expert/references/async-concurrency.md +360 -360
  605. package/skills/swift/swift-expert/references/memory-performance.md +377 -377
  606. package/skills/swift/swift-expert/references/protocol-oriented.md +354 -354
  607. package/skills/swift/swift-expert/references/swiftui-patterns.md +291 -291
  608. package/skills/swift/swift-expert/references/testing-patterns.md +399 -399
  609. package/skills/workflow/brainstorming/SKILL.md +164 -164
  610. package/skills/workflow/brainstorming/scripts/frame-template.html +214 -214
  611. package/skills/workflow/brainstorming/scripts/helper.js +88 -88
  612. package/skills/workflow/brainstorming/scripts/server.cjs +354 -354
  613. package/skills/workflow/brainstorming/scripts/start-server.sh +148 -148
  614. package/skills/workflow/brainstorming/scripts/stop-server.sh +56 -56
  615. package/skills/workflow/brainstorming/spec-document-reviewer-prompt.md +49 -49
  616. package/skills/workflow/brainstorming/visual-companion.md +287 -287
  617. package/skills/workflow/documentation/SKILL.md +45 -45
  618. package/skills/workflow/entropy-management/SKILL.md +115 -115
  619. package/skills/workflow/executing-plans/SKILL.md +70 -70
  620. package/skills/workflow/finishing-a-development-branch/SKILL.md +200 -200
  621. package/skills/workflow/receiving-code-review/SKILL.md +213 -213
  622. package/skills/workflow/requesting-code-review/SKILL.md +105 -105
  623. package/skills/workflow/requesting-code-review/code-reviewer.md +146 -146
  624. package/skills/workflow/requirement-engineering/SKILL.md +111 -111
  625. package/skills/workflow/systematic-debugging/CREATION-LOG.md +119 -119
  626. package/skills/workflow/systematic-debugging/SKILL.md +296 -296
  627. package/skills/workflow/systematic-debugging/condition-based-waiting-example.ts +158 -158
  628. package/skills/workflow/systematic-debugging/condition-based-waiting.md +115 -115
  629. package/skills/workflow/systematic-debugging/defense-in-depth.md +122 -122
  630. package/skills/workflow/systematic-debugging/find-polluter.sh +63 -63
  631. package/skills/workflow/systematic-debugging/root-cause-tracing.md +169 -169
  632. package/skills/workflow/systematic-debugging/test-academic.md +14 -14
  633. package/skills/workflow/systematic-debugging/test-pressure-1.md +58 -58
  634. package/skills/workflow/systematic-debugging/test-pressure-2.md +68 -68
  635. package/skills/workflow/systematic-debugging/test-pressure-3.md +69 -69
  636. package/skills/workflow/using-git-worktrees/SKILL.md +218 -218
  637. package/skills/workflow/verification-before-completion/SKILL.md +139 -139
  638. package/skills/workflow/writing-plans/SKILL.md +151 -151
  639. package/skills/workflow/writing-plans/plan-document-reviewer-prompt.md +49 -49
  640. package/skills/workflow/writing-skills/SKILL.md +655 -655
  641. package/skills/workflow/writing-skills/anthropic-best-practices.md +1150 -1150
  642. package/skills/workflow/writing-skills/examples/CLAUDE_MD_TESTING.md +189 -189
  643. package/skills/workflow/writing-skills/persuasion-principles.md +187 -187
  644. package/skills/workflow/writing-skills/render-graphs.js +168 -168
  645. package/skills/workflow/writing-skills/testing-skills-with-subagents.md +384 -384
@@ -1,806 +1,806 @@
1
- # Frontend Best Practices
2
-
3
- Modern frontend development standards for accessibility, testing, TypeScript, and Tailwind CSS.
4
-
5
- ---
6
-
7
- ## Table of Contents
8
-
9
- - [Accessibility (a11y)](#accessibility-a11y)
10
- - [Testing Strategies](#testing-strategies)
11
- - [TypeScript Patterns](#typescript-patterns)
12
- - [Tailwind CSS](#tailwind-css)
13
- - [Project Structure](#project-structure)
14
- - [Security](#security)
15
-
16
- ---
17
-
18
- ## Accessibility (a11y)
19
-
20
- ### Semantic HTML
21
-
22
- ```tsx
23
- // BAD - Divs for everything
24
- <div onClick={handleClick}>Click me</div>
25
- <div class="header">...</div>
26
- <div class="nav">...</div>
27
-
28
- // GOOD - Semantic elements
29
- <button onClick={handleClick}>Click me</button>
30
- <header>...</header>
31
- <nav>...</nav>
32
- <main>...</main>
33
- <article>...</article>
34
- <aside>...</aside>
35
- <footer>...</footer>
36
- ```
37
-
38
- ### Keyboard Navigation
39
-
40
- ```tsx
41
- // Ensure all interactive elements are keyboard accessible
42
- function Modal({ isOpen, onClose, children }: ModalProps) {
43
- const modalRef = useRef<HTMLDivElement>(null);
44
-
45
- useEffect(() => {
46
- if (isOpen) {
47
- // Focus first focusable element
48
- const focusable = modalRef.current?.querySelectorAll(
49
- 'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])'
50
- );
51
- (focusable?.[0] as HTMLElement)?.focus();
52
-
53
- // Trap focus within modal
54
- const handleTab = (e: KeyboardEvent) => {
55
- if (e.key === 'Tab' && focusable) {
56
- const first = focusable[0] as HTMLElement;
57
- const last = focusable[focusable.length - 1] as HTMLElement;
58
-
59
- if (e.shiftKey && document.activeElement === first) {
60
- e.preventDefault();
61
- last.focus();
62
- } else if (!e.shiftKey && document.activeElement === last) {
63
- e.preventDefault();
64
- first.focus();
65
- }
66
- }
67
-
68
- if (e.key === 'Escape') {
69
- onClose();
70
- }
71
- };
72
-
73
- document.addEventListener('keydown', handleTab);
74
- return () => document.removeEventListener('keydown', handleTab);
75
- }
76
- }, [isOpen, onClose]);
77
-
78
- if (!isOpen) return null;
79
-
80
- return (
81
- <div
82
- ref={modalRef}
83
- role="dialog"
84
- aria-modal="true"
85
- aria-labelledby="modal-title"
86
- >
87
- {children}
88
- </div>
89
- );
90
- }
91
- ```
92
-
93
- ### ARIA Attributes
94
-
95
- ```tsx
96
- // Live regions for dynamic content
97
- <div aria-live="polite" aria-atomic="true">
98
- {status && <p>{status}</p>}
99
- </div>
100
-
101
- // Loading states
102
- <button disabled={isLoading} aria-busy={isLoading}>
103
- {isLoading ? 'Loading...' : 'Submit'}
104
- </button>
105
-
106
- // Form labels
107
- <label htmlFor="email">Email address</label>
108
- <input
109
- id="email"
110
- type="email"
111
- aria-required="true"
112
- aria-invalid={!!errors.email}
113
- aria-describedby={errors.email ? 'email-error' : undefined}
114
- />
115
- {errors.email && (
116
- <p id="email-error" role="alert">
117
- {errors.email}
118
- </p>
119
- )}
120
-
121
- // Navigation
122
- <nav aria-label="Main navigation">
123
- <ul>
124
- <li><a href="/" aria-current={isHome ? 'page' : undefined}>Home</a></li>
125
- <li><a href="/about" aria-current={isAbout ? 'page' : undefined}>About</a></li>
126
- </ul>
127
- </nav>
128
-
129
- // Toggle buttons
130
- <button
131
- aria-pressed={isEnabled}
132
- onClick={() => setIsEnabled(!isEnabled)}
133
- >
134
- {isEnabled ? 'Enabled' : 'Disabled'}
135
- </button>
136
-
137
- // Expandable sections
138
- <button
139
- aria-expanded={isOpen}
140
- aria-controls="content-panel"
141
- onClick={() => setIsOpen(!isOpen)}
142
- >
143
- Show details
144
- </button>
145
- <div id="content-panel" hidden={!isOpen}>
146
- Content here
147
- </div>
148
- ```
149
-
150
- ### Color Contrast
151
-
152
- ```tsx
153
- // Ensure 4.5:1 contrast ratio for text (WCAG AA)
154
- // Use tools like @axe-core/react for testing
155
-
156
- // tailwind.config.js - Define accessible colors
157
- module.exports = {
158
- theme: {
159
- colors: {
160
- // Primary with proper contrast
161
- primary: {
162
- DEFAULT: '#2563eb', // Blue 600
163
- foreground: '#ffffff',
164
- },
165
- // Error state
166
- error: {
167
- DEFAULT: '#dc2626', // Red 600
168
- foreground: '#ffffff',
169
- },
170
- // Text colors with proper contrast
171
- foreground: '#0f172a', // Slate 900
172
- muted: '#64748b', // Slate 500 - minimum 4.5:1 on white
173
- },
174
- },
175
- };
176
-
177
- // Never rely on color alone
178
- <span className="text-red-600">
179
- <ErrorIcon aria-hidden="true" />
180
- <span>Error: Invalid input</span>
181
- </span>
182
- ```
183
-
184
- ### Screen Reader Only Content
185
-
186
- ```tsx
187
- // Visually hidden but accessible to screen readers
188
- const srOnly = 'absolute w-px h-px p-0 -m-px overflow-hidden whitespace-nowrap border-0';
189
-
190
- // Skip link for keyboard users
191
- <a href="#main-content" className={srOnly + ' focus:not-sr-only focus:absolute focus:top-0'}>
192
- Skip to main content
193
- </a>
194
-
195
- // Icon buttons need labels
196
- <button aria-label="Close menu">
197
- <XIcon aria-hidden="true" />
198
- </button>
199
-
200
- // Or use visually hidden text
201
- <button>
202
- <XIcon aria-hidden="true" />
203
- <span className={srOnly}>Close menu</span>
204
- </button>
205
- ```
206
-
207
- ---
208
-
209
- ## Testing Strategies
210
-
211
- ### Component Testing with Testing Library
212
-
213
- ```tsx
214
- // Button.test.tsx
215
- import { render, screen, fireEvent } from '@testing-library/react';
216
- import userEvent from '@testing-library/user-event';
217
- import { Button } from './Button';
218
-
219
- describe('Button', () => {
220
- it('renders with correct text', () => {
221
- render(<Button>Click me</Button>);
222
- expect(screen.getByRole('button', { name: 'Click me' })).toBeInTheDocument();
223
- });
224
-
225
- it('calls onClick when clicked', async () => {
226
- const user = userEvent.setup();
227
- const handleClick = jest.fn();
228
-
229
- render(<Button onClick={handleClick}>Click me</Button>);
230
- await user.click(screen.getByRole('button'));
231
-
232
- expect(handleClick).toHaveBeenCalledTimes(1);
233
- });
234
-
235
- it('is disabled when loading', () => {
236
- render(<Button isLoading>Submit</Button>);
237
- expect(screen.getByRole('button')).toBeDisabled();
238
- expect(screen.getByRole('button')).toHaveAttribute('aria-busy', 'true');
239
- });
240
-
241
- it('shows loading text when loading', () => {
242
- render(<Button isLoading loadingText="Submitting...">Submit</Button>);
243
- expect(screen.getByText('Submitting...')).toBeInTheDocument();
244
- });
245
- });
246
- ```
247
-
248
- ### Hook Testing
249
-
250
- ```tsx
251
- // useCounter.test.ts
252
- import { renderHook, act } from '@testing-library/react';
253
- import { useCounter } from './useCounter';
254
-
255
- describe('useCounter', () => {
256
- it('initializes with default value', () => {
257
- const { result } = renderHook(() => useCounter());
258
- expect(result.current.count).toBe(0);
259
- });
260
-
261
- it('initializes with custom value', () => {
262
- const { result } = renderHook(() => useCounter(10));
263
- expect(result.current.count).toBe(10);
264
- });
265
-
266
- it('increments count', () => {
267
- const { result } = renderHook(() => useCounter());
268
-
269
- act(() => {
270
- result.current.increment();
271
- });
272
-
273
- expect(result.current.count).toBe(1);
274
- });
275
-
276
- it('resets to initial value', () => {
277
- const { result } = renderHook(() => useCounter(5));
278
-
279
- act(() => {
280
- result.current.increment();
281
- result.current.increment();
282
- result.current.reset();
283
- });
284
-
285
- expect(result.current.count).toBe(5);
286
- });
287
- });
288
- ```
289
-
290
- ### Integration Testing
291
-
292
- ```tsx
293
- // LoginForm.test.tsx
294
- import { render, screen, waitFor } from '@testing-library/react';
295
- import userEvent from '@testing-library/user-event';
296
- import { LoginForm } from './LoginForm';
297
- import { AuthProvider } from '@/contexts/AuthContext';
298
-
299
- const mockLogin = jest.fn();
300
-
301
- jest.mock('@/lib/auth', () => ({
302
- login: (...args: unknown[]) => mockLogin(...args),
303
- }));
304
-
305
- describe('LoginForm', () => {
306
- beforeEach(() => {
307
- mockLogin.mockReset();
308
- });
309
-
310
- it('submits form with valid credentials', async () => {
311
- const user = userEvent.setup();
312
- mockLogin.mockResolvedValueOnce({ user: { id: '1', name: 'Test' } });
313
-
314
- render(
315
- <AuthProvider>
316
- <LoginForm />
317
- </AuthProvider>
318
- );
319
-
320
- await user.type(screen.getByLabelText(/email/i), 'test@example.com');
321
- await user.type(screen.getByLabelText(/password/i), 'password123');
322
- await user.click(screen.getByRole('button', { name: /sign in/i }));
323
-
324
- await waitFor(() => {
325
- expect(mockLogin).toHaveBeenCalledWith('test@example.com', 'password123');
326
- });
327
- });
328
-
329
- it('shows validation errors for empty fields', async () => {
330
- const user = userEvent.setup();
331
-
332
- render(
333
- <AuthProvider>
334
- <LoginForm />
335
- </AuthProvider>
336
- );
337
-
338
- await user.click(screen.getByRole('button', { name: /sign in/i }));
339
-
340
- expect(await screen.findByText(/email is required/i)).toBeInTheDocument();
341
- expect(await screen.findByText(/password is required/i)).toBeInTheDocument();
342
- expect(mockLogin).not.toHaveBeenCalled();
343
- });
344
- });
345
- ```
346
-
347
- ### E2E Testing with Playwright
348
-
349
- ```typescript
350
- // e2e/checkout.spec.ts
351
- import { test, expect } from '@playwright/test';
352
-
353
- test.describe('Checkout flow', () => {
354
- test.beforeEach(async ({ page }) => {
355
- await page.goto('/');
356
- await page.click('[data-testid="product-1"] button');
357
- await page.click('[data-testid="cart-button"]');
358
- });
359
-
360
- test('completes checkout with valid payment', async ({ page }) => {
361
- await page.click('text=Proceed to Checkout');
362
-
363
- // Fill shipping info
364
- await page.fill('[name="email"]', 'test@example.com');
365
- await page.fill('[name="address"]', '123 Test St');
366
- await page.fill('[name="city"]', 'Test City');
367
- await page.selectOption('[name="state"]', 'CA');
368
- await page.fill('[name="zip"]', '90210');
369
-
370
- await page.click('text=Continue to Payment');
371
- await page.click('text=Place Order');
372
-
373
- // Verify success
374
- await expect(page).toHaveURL(/\/order\/confirmation/);
375
- await expect(page.locator('h1')).toHaveText('Order Confirmed!');
376
- });
377
- });
378
- ```
379
-
380
- ---
381
-
382
- ## TypeScript Patterns
383
-
384
- ### Component Props
385
-
386
- ```tsx
387
- // Use interface for component props
388
- interface ButtonProps {
389
- variant?: 'primary' | 'secondary' | 'ghost';
390
- size?: 'sm' | 'md' | 'lg';
391
- isLoading?: boolean;
392
- children: React.ReactNode;
393
- onClick?: () => void;
394
- }
395
-
396
- // Extend HTML attributes
397
- interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {
398
- variant?: 'primary' | 'secondary';
399
- isLoading?: boolean;
400
- }
401
-
402
- function Button({ variant = 'primary', isLoading, children, ...props }: ButtonProps) {
403
- return (
404
- <button
405
- {...props}
406
- disabled={props.disabled || isLoading}
407
- className={cn(variants[variant], props.className)}
408
- >
409
- {isLoading ? <Spinner /> : children}
410
- </button>
411
- );
412
- }
413
-
414
- // Polymorphic components
415
- type PolymorphicProps<E extends React.ElementType> = {
416
- as?: E;
417
- } & React.ComponentPropsWithoutRef<E>;
418
-
419
- function Box<E extends React.ElementType = 'div'>({
420
- as,
421
- children,
422
- ...props
423
- }: PolymorphicProps<E>) {
424
- const Component = as || 'div';
425
- return <Component {...props}>{children}</Component>;
426
- }
427
-
428
- // Usage
429
- <Box as="section" id="hero">Content</Box>
430
- <Box as="article">Article content</Box>
431
- ```
432
-
433
- ### Discriminated Unions
434
-
435
- ```tsx
436
- // State machines with exhaustive type checking
437
- type AsyncState<T> =
438
- | { status: 'idle' }
439
- | { status: 'loading' }
440
- | { status: 'success'; data: T }
441
- | { status: 'error'; error: Error };
442
-
443
- function DataDisplay<T>({ state, render }: {
444
- state: AsyncState<T>;
445
- render: (data: T) => React.ReactNode;
446
- }) {
447
- switch (state.status) {
448
- case 'idle':
449
- return null;
450
- case 'loading':
451
- return <Spinner />;
452
- case 'success':
453
- return <>{render(state.data)}</>;
454
- case 'error':
455
- return <ErrorMessage error={state.error} />;
456
- // TypeScript ensures all cases are handled
457
- }
458
- }
459
- ```
460
-
461
- ### Generic Components
462
-
463
- ```tsx
464
- // Generic list component
465
- interface ListProps<T> {
466
- items: T[];
467
- renderItem: (item: T, index: number) => React.ReactNode;
468
- keyExtractor: (item: T) => string;
469
- emptyMessage?: string;
470
- }
471
-
472
- function List<T>({ items, renderItem, keyExtractor, emptyMessage }: ListProps<T>) {
473
- if (items.length === 0) {
474
- return <p className="text-muted">{emptyMessage || 'No items'}</p>;
475
- }
476
-
477
- return (
478
- <ul>
479
- {items.map((item, index) => (
480
- <li key={keyExtractor(item)}>{renderItem(item, index)}</li>
481
- ))}
482
- </ul>
483
- );
484
- }
485
-
486
- // Usage
487
- <List
488
- items={users}
489
- keyExtractor={(user) => user.id}
490
- renderItem={(user) => <UserCard user={user} />}
491
- />
492
- ```
493
-
494
- ### Type Guards
495
-
496
- ```tsx
497
- // User-defined type guards
498
- interface User {
499
- id: string;
500
- name: string;
501
- email: string;
502
- }
503
-
504
- interface Admin extends User {
505
- role: 'admin';
506
- permissions: string[];
507
- }
508
-
509
- function isAdmin(user: User): user is Admin {
510
- return 'role' in user && user.role === 'admin';
511
- }
512
-
513
- function UserBadge({ user }: { user: User }) {
514
- if (isAdmin(user)) {
515
- // TypeScript knows user is Admin here
516
- return <Badge variant="admin">Admin ({user.permissions.length} perms)</Badge>;
517
- }
518
-
519
- return <Badge>User</Badge>;
520
- }
521
-
522
- // API response type guards
523
- interface ApiSuccess<T> {
524
- success: true;
525
- data: T;
526
- }
527
-
528
- interface ApiError {
529
- success: false;
530
- error: string;
531
- }
532
-
533
- type ApiResponse<T> = ApiSuccess<T> | ApiError;
534
-
535
- function isApiSuccess<T>(response: ApiResponse<T>): response is ApiSuccess<T> {
536
- return response.success === true;
537
- }
538
- ```
539
-
540
- ---
541
-
542
- ## Tailwind CSS
543
-
544
- ### Component Variants with CVA
545
-
546
- ```tsx
547
- import { cva, type VariantProps } from 'class-variance-authority';
548
- import { cn } from '@/lib/utils';
549
-
550
- const buttonVariants = cva(
551
- // Base styles
552
- 'inline-flex items-center justify-center rounded-md font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50',
553
- {
554
- variants: {
555
- variant: {
556
- primary: 'bg-blue-600 text-white hover:bg-blue-700 focus-visible:ring-blue-500',
557
- secondary: 'bg-gray-100 text-gray-900 hover:bg-gray-200 focus-visible:ring-gray-500',
558
- ghost: 'hover:bg-gray-100 hover:text-gray-900',
559
- destructive: 'bg-red-600 text-white hover:bg-red-700 focus-visible:ring-red-500',
560
- },
561
- size: {
562
- sm: 'h-8 px-3 text-sm',
563
- md: 'h-10 px-4 text-sm',
564
- lg: 'h-12 px-6 text-base',
565
- icon: 'h-10 w-10',
566
- },
567
- },
568
- defaultVariants: {
569
- variant: 'primary',
570
- size: 'md',
571
- },
572
- }
573
- );
574
-
575
- interface ButtonProps
576
- extends React.ButtonHTMLAttributes<HTMLButtonElement>,
577
- VariantProps<typeof buttonVariants> {}
578
-
579
- function Button({ className, variant, size, ...props }: ButtonProps) {
580
- return (
581
- <button
582
- className={cn(buttonVariants({ variant, size }), className)}
583
- {...props}
584
- />
585
- );
586
- }
587
-
588
- // Usage
589
- <Button variant="primary" size="lg">Large Primary</Button>
590
- <Button variant="ghost" size="icon"><MenuIcon /></Button>
591
- ```
592
-
593
- ### Responsive Design
594
-
595
- ```tsx
596
- // Mobile-first responsive design
597
- <div className="
598
- grid
599
- grid-cols-1 {/* Mobile: 1 column */}
600
- sm:grid-cols-2 {/* 640px+: 2 columns */}
601
- lg:grid-cols-3 {/* 1024px+: 3 columns */}
602
- xl:grid-cols-4 {/* 1280px+: 4 columns */}
603
- gap-4
604
- sm:gap-6
605
- lg:gap-8
606
- ">
607
- {products.map(product => <ProductCard key={product.id} product={product} />)}
608
- </div>
609
-
610
- // Container with responsive padding
611
- <div className="container mx-auto px-4 sm:px-6 lg:px-8">
612
- Content
613
- </div>
614
-
615
- // Hide/show based on breakpoint
616
- <nav className="hidden md:flex">Desktop nav</nav>
617
- <button className="md:hidden">Mobile menu</button>
618
- ```
619
-
620
- ### Animation Utilities
621
-
622
- ```tsx
623
- // Skeleton loading
624
- <div className="animate-pulse space-y-4">
625
- <div className="h-4 bg-gray-200 rounded w-3/4" />
626
- <div className="h-4 bg-gray-200 rounded w-1/2" />
627
- </div>
628
-
629
- // Transitions
630
- <button className="
631
- transition-all
632
- duration-200
633
- ease-in-out
634
- hover:scale-105
635
- active:scale-95
636
- ">
637
- Hover me
638
- </button>
639
-
640
- // Custom animations in tailwind.config.js
641
- module.exports = {
642
- theme: {
643
- extend: {
644
- animation: {
645
- 'fade-in': 'fadeIn 0.3s ease-out',
646
- 'slide-up': 'slideUp 0.3s ease-out',
647
- 'spin-slow': 'spin 3s linear infinite',
648
- },
649
- keyframes: {
650
- fadeIn: {
651
- '0%': { opacity: '0' },
652
- '100%': { opacity: '1' },
653
- },
654
- slideUp: {
655
- '0%': { transform: 'translateY(10px)', opacity: '0' },
656
- '100%': { transform: 'translateY(0)', opacity: '1' },
657
- },
658
- },
659
- },
660
- },
661
- };
662
-
663
- // Usage
664
- <div className="animate-fade-in">Fading in</div>
665
- ```
666
-
667
- ---
668
-
669
- ## Project Structure
670
-
671
- ### Feature-Based Structure
672
-
673
- ```
674
- src/
675
- ├── app/ # Next.js App Router
676
- │ ├── (auth)/ # Auth route group
677
- │ │ ├── login/
678
- │ │ └── register/
679
- │ ├── dashboard/
680
- │ │ ├── page.tsx
681
- │ │ └── layout.tsx
682
- │ └── layout.tsx
683
- ├── components/
684
- │ ├── ui/ # Shared UI components
685
- │ │ ├── Button.tsx
686
- │ │ ├── Input.tsx
687
- │ │ └── index.ts
688
- │ └── features/ # Feature-specific components
689
- │ ├── auth/
690
- │ │ ├── LoginForm.tsx
691
- │ │ └── RegisterForm.tsx
692
- │ └── dashboard/
693
- │ ├── StatsCard.tsx
694
- │ └── RecentActivity.tsx
695
- ├── hooks/ # Custom React hooks
696
- │ ├── useAuth.ts
697
- │ ├── useDebounce.ts
698
- │ └── useLocalStorage.ts
699
- ├── lib/ # Utilities and configs
700
- │ ├── utils.ts
701
- │ ├── api.ts
702
- │ └── constants.ts
703
- ├── types/ # TypeScript types
704
- │ ├── user.ts
705
- │ └── api.ts
706
- └── styles/
707
- └── globals.css
708
- ```
709
-
710
- ### Barrel Exports
711
-
712
- ```tsx
713
- // components/ui/index.ts
714
- export { Button } from './Button';
715
- export { Input } from './Input';
716
- export { Card, CardHeader, CardContent, CardFooter } from './Card';
717
- export { Dialog, DialogTrigger, DialogContent } from './Dialog';
718
-
719
- // Usage
720
- import { Button, Input, Card } from '@/components/ui';
721
- ```
722
-
723
- ---
724
-
725
- ## Security
726
-
727
- ### XSS Prevention
728
-
729
- React escapes content by default, which prevents most XSS attacks. When you need to render HTML content:
730
-
731
- 1. **Avoid rendering raw HTML** when possible
732
- 2. **Sanitize with DOMPurify** for trusted content sources
733
- 3. **Use allow-lists** for permitted tags and attributes
734
-
735
- ```tsx
736
- // React escapes by default - this is safe
737
- <div>{userInput}</div>
738
-
739
- // When you must render HTML, sanitize first
740
- import DOMPurify from 'dompurify';
741
-
742
- function SafeHTML({ html }: { html: string }) {
743
- const sanitized = DOMPurify.sanitize(html, {
744
- ALLOWED_TAGS: ['b', 'i', 'em', 'strong', 'a', 'p'],
745
- ALLOWED_ATTR: ['href'],
746
- });
747
-
748
- return <div dangerouslySetInnerHTML={{ __html: sanitized }} />;
749
- }
750
- ```
751
-
752
- ### Input Validation
753
-
754
- ```tsx
755
- import { z } from 'zod';
756
- import { useForm } from 'react-hook-form';
757
- import { zodResolver } from '@hookform/resolvers/zod';
758
-
759
- const schema = z.object({
760
- email: z.string().email('Invalid email address'),
761
- password: z.string()
762
- .min(8, 'Password must be at least 8 characters')
763
- .regex(/[A-Z]/, 'Password must contain uppercase letter')
764
- .regex(/[0-9]/, 'Password must contain number'),
765
- confirmPassword: z.string(),
766
- }).refine((data) => data.password === data.confirmPassword, {
767
- message: 'Passwords do not match',
768
- path: ['confirmPassword'],
769
- });
770
-
771
- type FormData = z.infer<typeof schema>;
772
-
773
- function RegisterForm() {
774
- const { register, handleSubmit, formState: { errors } } = useForm<FormData>({
775
- resolver: zodResolver(schema),
776
- });
777
-
778
- return (
779
- <form onSubmit={handleSubmit(onSubmit)}>
780
- <Input {...register('email')} error={errors.email?.message} />
781
- <Input type="password" {...register('password')} error={errors.password?.message} />
782
- <Input type="password" {...register('confirmPassword')} error={errors.confirmPassword?.message} />
783
- <Button type="submit">Register</Button>
784
- </form>
785
- );
786
- }
787
- ```
788
-
789
- ### Secure API Calls
790
-
791
- ```tsx
792
- // Use environment variables for API endpoints
793
- const API_URL = process.env.NEXT_PUBLIC_API_URL;
794
-
795
- // Never include secrets in client code - use server-side API routes
796
- // app/api/data/route.ts
797
- export async function GET() {
798
- const response = await fetch('https://api.example.com/data', {
799
- headers: {
800
- 'Authorization': `Bearer ${process.env.API_SECRET}`, // Server-side only
801
- },
802
- });
803
-
804
- return Response.json(await response.json());
805
- }
806
- ```
1
+ # Frontend Best Practices
2
+
3
+ Modern frontend development standards for accessibility, testing, TypeScript, and Tailwind CSS.
4
+
5
+ ---
6
+
7
+ ## Table of Contents
8
+
9
+ - [Accessibility (a11y)](#accessibility-a11y)
10
+ - [Testing Strategies](#testing-strategies)
11
+ - [TypeScript Patterns](#typescript-patterns)
12
+ - [Tailwind CSS](#tailwind-css)
13
+ - [Project Structure](#project-structure)
14
+ - [Security](#security)
15
+
16
+ ---
17
+
18
+ ## Accessibility (a11y)
19
+
20
+ ### Semantic HTML
21
+
22
+ ```tsx
23
+ // BAD - Divs for everything
24
+ <div onClick={handleClick}>Click me</div>
25
+ <div class="header">...</div>
26
+ <div class="nav">...</div>
27
+
28
+ // GOOD - Semantic elements
29
+ <button onClick={handleClick}>Click me</button>
30
+ <header>...</header>
31
+ <nav>...</nav>
32
+ <main>...</main>
33
+ <article>...</article>
34
+ <aside>...</aside>
35
+ <footer>...</footer>
36
+ ```
37
+
38
+ ### Keyboard Navigation
39
+
40
+ ```tsx
41
+ // Ensure all interactive elements are keyboard accessible
42
+ function Modal({ isOpen, onClose, children }: ModalProps) {
43
+ const modalRef = useRef<HTMLDivElement>(null);
44
+
45
+ useEffect(() => {
46
+ if (isOpen) {
47
+ // Focus first focusable element
48
+ const focusable = modalRef.current?.querySelectorAll(
49
+ 'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])'
50
+ );
51
+ (focusable?.[0] as HTMLElement)?.focus();
52
+
53
+ // Trap focus within modal
54
+ const handleTab = (e: KeyboardEvent) => {
55
+ if (e.key === 'Tab' && focusable) {
56
+ const first = focusable[0] as HTMLElement;
57
+ const last = focusable[focusable.length - 1] as HTMLElement;
58
+
59
+ if (e.shiftKey && document.activeElement === first) {
60
+ e.preventDefault();
61
+ last.focus();
62
+ } else if (!e.shiftKey && document.activeElement === last) {
63
+ e.preventDefault();
64
+ first.focus();
65
+ }
66
+ }
67
+
68
+ if (e.key === 'Escape') {
69
+ onClose();
70
+ }
71
+ };
72
+
73
+ document.addEventListener('keydown', handleTab);
74
+ return () => document.removeEventListener('keydown', handleTab);
75
+ }
76
+ }, [isOpen, onClose]);
77
+
78
+ if (!isOpen) return null;
79
+
80
+ return (
81
+ <div
82
+ ref={modalRef}
83
+ role="dialog"
84
+ aria-modal="true"
85
+ aria-labelledby="modal-title"
86
+ >
87
+ {children}
88
+ </div>
89
+ );
90
+ }
91
+ ```
92
+
93
+ ### ARIA Attributes
94
+
95
+ ```tsx
96
+ // Live regions for dynamic content
97
+ <div aria-live="polite" aria-atomic="true">
98
+ {status && <p>{status}</p>}
99
+ </div>
100
+
101
+ // Loading states
102
+ <button disabled={isLoading} aria-busy={isLoading}>
103
+ {isLoading ? 'Loading...' : 'Submit'}
104
+ </button>
105
+
106
+ // Form labels
107
+ <label htmlFor="email">Email address</label>
108
+ <input
109
+ id="email"
110
+ type="email"
111
+ aria-required="true"
112
+ aria-invalid={!!errors.email}
113
+ aria-describedby={errors.email ? 'email-error' : undefined}
114
+ />
115
+ {errors.email && (
116
+ <p id="email-error" role="alert">
117
+ {errors.email}
118
+ </p>
119
+ )}
120
+
121
+ // Navigation
122
+ <nav aria-label="Main navigation">
123
+ <ul>
124
+ <li><a href="/" aria-current={isHome ? 'page' : undefined}>Home</a></li>
125
+ <li><a href="/about" aria-current={isAbout ? 'page' : undefined}>About</a></li>
126
+ </ul>
127
+ </nav>
128
+
129
+ // Toggle buttons
130
+ <button
131
+ aria-pressed={isEnabled}
132
+ onClick={() => setIsEnabled(!isEnabled)}
133
+ >
134
+ {isEnabled ? 'Enabled' : 'Disabled'}
135
+ </button>
136
+
137
+ // Expandable sections
138
+ <button
139
+ aria-expanded={isOpen}
140
+ aria-controls="content-panel"
141
+ onClick={() => setIsOpen(!isOpen)}
142
+ >
143
+ Show details
144
+ </button>
145
+ <div id="content-panel" hidden={!isOpen}>
146
+ Content here
147
+ </div>
148
+ ```
149
+
150
+ ### Color Contrast
151
+
152
+ ```tsx
153
+ // Ensure 4.5:1 contrast ratio for text (WCAG AA)
154
+ // Use tools like @axe-core/react for testing
155
+
156
+ // tailwind.config.js - Define accessible colors
157
+ module.exports = {
158
+ theme: {
159
+ colors: {
160
+ // Primary with proper contrast
161
+ primary: {
162
+ DEFAULT: '#2563eb', // Blue 600
163
+ foreground: '#ffffff',
164
+ },
165
+ // Error state
166
+ error: {
167
+ DEFAULT: '#dc2626', // Red 600
168
+ foreground: '#ffffff',
169
+ },
170
+ // Text colors with proper contrast
171
+ foreground: '#0f172a', // Slate 900
172
+ muted: '#64748b', // Slate 500 - minimum 4.5:1 on white
173
+ },
174
+ },
175
+ };
176
+
177
+ // Never rely on color alone
178
+ <span className="text-red-600">
179
+ <ErrorIcon aria-hidden="true" />
180
+ <span>Error: Invalid input</span>
181
+ </span>
182
+ ```
183
+
184
+ ### Screen Reader Only Content
185
+
186
+ ```tsx
187
+ // Visually hidden but accessible to screen readers
188
+ const srOnly = 'absolute w-px h-px p-0 -m-px overflow-hidden whitespace-nowrap border-0';
189
+
190
+ // Skip link for keyboard users
191
+ <a href="#main-content" className={srOnly + ' focus:not-sr-only focus:absolute focus:top-0'}>
192
+ Skip to main content
193
+ </a>
194
+
195
+ // Icon buttons need labels
196
+ <button aria-label="Close menu">
197
+ <XIcon aria-hidden="true" />
198
+ </button>
199
+
200
+ // Or use visually hidden text
201
+ <button>
202
+ <XIcon aria-hidden="true" />
203
+ <span className={srOnly}>Close menu</span>
204
+ </button>
205
+ ```
206
+
207
+ ---
208
+
209
+ ## Testing Strategies
210
+
211
+ ### Component Testing with Testing Library
212
+
213
+ ```tsx
214
+ // Button.test.tsx
215
+ import { render, screen, fireEvent } from '@testing-library/react';
216
+ import userEvent from '@testing-library/user-event';
217
+ import { Button } from './Button';
218
+
219
+ describe('Button', () => {
220
+ it('renders with correct text', () => {
221
+ render(<Button>Click me</Button>);
222
+ expect(screen.getByRole('button', { name: 'Click me' })).toBeInTheDocument();
223
+ });
224
+
225
+ it('calls onClick when clicked', async () => {
226
+ const user = userEvent.setup();
227
+ const handleClick = jest.fn();
228
+
229
+ render(<Button onClick={handleClick}>Click me</Button>);
230
+ await user.click(screen.getByRole('button'));
231
+
232
+ expect(handleClick).toHaveBeenCalledTimes(1);
233
+ });
234
+
235
+ it('is disabled when loading', () => {
236
+ render(<Button isLoading>Submit</Button>);
237
+ expect(screen.getByRole('button')).toBeDisabled();
238
+ expect(screen.getByRole('button')).toHaveAttribute('aria-busy', 'true');
239
+ });
240
+
241
+ it('shows loading text when loading', () => {
242
+ render(<Button isLoading loadingText="Submitting...">Submit</Button>);
243
+ expect(screen.getByText('Submitting...')).toBeInTheDocument();
244
+ });
245
+ });
246
+ ```
247
+
248
+ ### Hook Testing
249
+
250
+ ```tsx
251
+ // useCounter.test.ts
252
+ import { renderHook, act } from '@testing-library/react';
253
+ import { useCounter } from './useCounter';
254
+
255
+ describe('useCounter', () => {
256
+ it('initializes with default value', () => {
257
+ const { result } = renderHook(() => useCounter());
258
+ expect(result.current.count).toBe(0);
259
+ });
260
+
261
+ it('initializes with custom value', () => {
262
+ const { result } = renderHook(() => useCounter(10));
263
+ expect(result.current.count).toBe(10);
264
+ });
265
+
266
+ it('increments count', () => {
267
+ const { result } = renderHook(() => useCounter());
268
+
269
+ act(() => {
270
+ result.current.increment();
271
+ });
272
+
273
+ expect(result.current.count).toBe(1);
274
+ });
275
+
276
+ it('resets to initial value', () => {
277
+ const { result } = renderHook(() => useCounter(5));
278
+
279
+ act(() => {
280
+ result.current.increment();
281
+ result.current.increment();
282
+ result.current.reset();
283
+ });
284
+
285
+ expect(result.current.count).toBe(5);
286
+ });
287
+ });
288
+ ```
289
+
290
+ ### Integration Testing
291
+
292
+ ```tsx
293
+ // LoginForm.test.tsx
294
+ import { render, screen, waitFor } from '@testing-library/react';
295
+ import userEvent from '@testing-library/user-event';
296
+ import { LoginForm } from './LoginForm';
297
+ import { AuthProvider } from '@/contexts/AuthContext';
298
+
299
+ const mockLogin = jest.fn();
300
+
301
+ jest.mock('@/lib/auth', () => ({
302
+ login: (...args: unknown[]) => mockLogin(...args),
303
+ }));
304
+
305
+ describe('LoginForm', () => {
306
+ beforeEach(() => {
307
+ mockLogin.mockReset();
308
+ });
309
+
310
+ it('submits form with valid credentials', async () => {
311
+ const user = userEvent.setup();
312
+ mockLogin.mockResolvedValueOnce({ user: { id: '1', name: 'Test' } });
313
+
314
+ render(
315
+ <AuthProvider>
316
+ <LoginForm />
317
+ </AuthProvider>
318
+ );
319
+
320
+ await user.type(screen.getByLabelText(/email/i), 'test@example.com');
321
+ await user.type(screen.getByLabelText(/password/i), 'password123');
322
+ await user.click(screen.getByRole('button', { name: /sign in/i }));
323
+
324
+ await waitFor(() => {
325
+ expect(mockLogin).toHaveBeenCalledWith('test@example.com', 'password123');
326
+ });
327
+ });
328
+
329
+ it('shows validation errors for empty fields', async () => {
330
+ const user = userEvent.setup();
331
+
332
+ render(
333
+ <AuthProvider>
334
+ <LoginForm />
335
+ </AuthProvider>
336
+ );
337
+
338
+ await user.click(screen.getByRole('button', { name: /sign in/i }));
339
+
340
+ expect(await screen.findByText(/email is required/i)).toBeInTheDocument();
341
+ expect(await screen.findByText(/password is required/i)).toBeInTheDocument();
342
+ expect(mockLogin).not.toHaveBeenCalled();
343
+ });
344
+ });
345
+ ```
346
+
347
+ ### E2E Testing with Playwright
348
+
349
+ ```typescript
350
+ // e2e/checkout.spec.ts
351
+ import { test, expect } from '@playwright/test';
352
+
353
+ test.describe('Checkout flow', () => {
354
+ test.beforeEach(async ({ page }) => {
355
+ await page.goto('/');
356
+ await page.click('[data-testid="product-1"] button');
357
+ await page.click('[data-testid="cart-button"]');
358
+ });
359
+
360
+ test('completes checkout with valid payment', async ({ page }) => {
361
+ await page.click('text=Proceed to Checkout');
362
+
363
+ // Fill shipping info
364
+ await page.fill('[name="email"]', 'test@example.com');
365
+ await page.fill('[name="address"]', '123 Test St');
366
+ await page.fill('[name="city"]', 'Test City');
367
+ await page.selectOption('[name="state"]', 'CA');
368
+ await page.fill('[name="zip"]', '90210');
369
+
370
+ await page.click('text=Continue to Payment');
371
+ await page.click('text=Place Order');
372
+
373
+ // Verify success
374
+ await expect(page).toHaveURL(/\/order\/confirmation/);
375
+ await expect(page.locator('h1')).toHaveText('Order Confirmed!');
376
+ });
377
+ });
378
+ ```
379
+
380
+ ---
381
+
382
+ ## TypeScript Patterns
383
+
384
+ ### Component Props
385
+
386
+ ```tsx
387
+ // Use interface for component props
388
+ interface ButtonProps {
389
+ variant?: 'primary' | 'secondary' | 'ghost';
390
+ size?: 'sm' | 'md' | 'lg';
391
+ isLoading?: boolean;
392
+ children: React.ReactNode;
393
+ onClick?: () => void;
394
+ }
395
+
396
+ // Extend HTML attributes
397
+ interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {
398
+ variant?: 'primary' | 'secondary';
399
+ isLoading?: boolean;
400
+ }
401
+
402
+ function Button({ variant = 'primary', isLoading, children, ...props }: ButtonProps) {
403
+ return (
404
+ <button
405
+ {...props}
406
+ disabled={props.disabled || isLoading}
407
+ className={cn(variants[variant], props.className)}
408
+ >
409
+ {isLoading ? <Spinner /> : children}
410
+ </button>
411
+ );
412
+ }
413
+
414
+ // Polymorphic components
415
+ type PolymorphicProps<E extends React.ElementType> = {
416
+ as?: E;
417
+ } & React.ComponentPropsWithoutRef<E>;
418
+
419
+ function Box<E extends React.ElementType = 'div'>({
420
+ as,
421
+ children,
422
+ ...props
423
+ }: PolymorphicProps<E>) {
424
+ const Component = as || 'div';
425
+ return <Component {...props}>{children}</Component>;
426
+ }
427
+
428
+ // Usage
429
+ <Box as="section" id="hero">Content</Box>
430
+ <Box as="article">Article content</Box>
431
+ ```
432
+
433
+ ### Discriminated Unions
434
+
435
+ ```tsx
436
+ // State machines with exhaustive type checking
437
+ type AsyncState<T> =
438
+ | { status: 'idle' }
439
+ | { status: 'loading' }
440
+ | { status: 'success'; data: T }
441
+ | { status: 'error'; error: Error };
442
+
443
+ function DataDisplay<T>({ state, render }: {
444
+ state: AsyncState<T>;
445
+ render: (data: T) => React.ReactNode;
446
+ }) {
447
+ switch (state.status) {
448
+ case 'idle':
449
+ return null;
450
+ case 'loading':
451
+ return <Spinner />;
452
+ case 'success':
453
+ return <>{render(state.data)}</>;
454
+ case 'error':
455
+ return <ErrorMessage error={state.error} />;
456
+ // TypeScript ensures all cases are handled
457
+ }
458
+ }
459
+ ```
460
+
461
+ ### Generic Components
462
+
463
+ ```tsx
464
+ // Generic list component
465
+ interface ListProps<T> {
466
+ items: T[];
467
+ renderItem: (item: T, index: number) => React.ReactNode;
468
+ keyExtractor: (item: T) => string;
469
+ emptyMessage?: string;
470
+ }
471
+
472
+ function List<T>({ items, renderItem, keyExtractor, emptyMessage }: ListProps<T>) {
473
+ if (items.length === 0) {
474
+ return <p className="text-muted">{emptyMessage || 'No items'}</p>;
475
+ }
476
+
477
+ return (
478
+ <ul>
479
+ {items.map((item, index) => (
480
+ <li key={keyExtractor(item)}>{renderItem(item, index)}</li>
481
+ ))}
482
+ </ul>
483
+ );
484
+ }
485
+
486
+ // Usage
487
+ <List
488
+ items={users}
489
+ keyExtractor={(user) => user.id}
490
+ renderItem={(user) => <UserCard user={user} />}
491
+ />
492
+ ```
493
+
494
+ ### Type Guards
495
+
496
+ ```tsx
497
+ // User-defined type guards
498
+ interface User {
499
+ id: string;
500
+ name: string;
501
+ email: string;
502
+ }
503
+
504
+ interface Admin extends User {
505
+ role: 'admin';
506
+ permissions: string[];
507
+ }
508
+
509
+ function isAdmin(user: User): user is Admin {
510
+ return 'role' in user && user.role === 'admin';
511
+ }
512
+
513
+ function UserBadge({ user }: { user: User }) {
514
+ if (isAdmin(user)) {
515
+ // TypeScript knows user is Admin here
516
+ return <Badge variant="admin">Admin ({user.permissions.length} perms)</Badge>;
517
+ }
518
+
519
+ return <Badge>User</Badge>;
520
+ }
521
+
522
+ // API response type guards
523
+ interface ApiSuccess<T> {
524
+ success: true;
525
+ data: T;
526
+ }
527
+
528
+ interface ApiError {
529
+ success: false;
530
+ error: string;
531
+ }
532
+
533
+ type ApiResponse<T> = ApiSuccess<T> | ApiError;
534
+
535
+ function isApiSuccess<T>(response: ApiResponse<T>): response is ApiSuccess<T> {
536
+ return response.success === true;
537
+ }
538
+ ```
539
+
540
+ ---
541
+
542
+ ## Tailwind CSS
543
+
544
+ ### Component Variants with CVA
545
+
546
+ ```tsx
547
+ import { cva, type VariantProps } from 'class-variance-authority';
548
+ import { cn } from '@/lib/utils';
549
+
550
+ const buttonVariants = cva(
551
+ // Base styles
552
+ 'inline-flex items-center justify-center rounded-md font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50',
553
+ {
554
+ variants: {
555
+ variant: {
556
+ primary: 'bg-blue-600 text-white hover:bg-blue-700 focus-visible:ring-blue-500',
557
+ secondary: 'bg-gray-100 text-gray-900 hover:bg-gray-200 focus-visible:ring-gray-500',
558
+ ghost: 'hover:bg-gray-100 hover:text-gray-900',
559
+ destructive: 'bg-red-600 text-white hover:bg-red-700 focus-visible:ring-red-500',
560
+ },
561
+ size: {
562
+ sm: 'h-8 px-3 text-sm',
563
+ md: 'h-10 px-4 text-sm',
564
+ lg: 'h-12 px-6 text-base',
565
+ icon: 'h-10 w-10',
566
+ },
567
+ },
568
+ defaultVariants: {
569
+ variant: 'primary',
570
+ size: 'md',
571
+ },
572
+ }
573
+ );
574
+
575
+ interface ButtonProps
576
+ extends React.ButtonHTMLAttributes<HTMLButtonElement>,
577
+ VariantProps<typeof buttonVariants> {}
578
+
579
+ function Button({ className, variant, size, ...props }: ButtonProps) {
580
+ return (
581
+ <button
582
+ className={cn(buttonVariants({ variant, size }), className)}
583
+ {...props}
584
+ />
585
+ );
586
+ }
587
+
588
+ // Usage
589
+ <Button variant="primary" size="lg">Large Primary</Button>
590
+ <Button variant="ghost" size="icon"><MenuIcon /></Button>
591
+ ```
592
+
593
+ ### Responsive Design
594
+
595
+ ```tsx
596
+ // Mobile-first responsive design
597
+ <div className="
598
+ grid
599
+ grid-cols-1 {/* Mobile: 1 column */}
600
+ sm:grid-cols-2 {/* 640px+: 2 columns */}
601
+ lg:grid-cols-3 {/* 1024px+: 3 columns */}
602
+ xl:grid-cols-4 {/* 1280px+: 4 columns */}
603
+ gap-4
604
+ sm:gap-6
605
+ lg:gap-8
606
+ ">
607
+ {products.map(product => <ProductCard key={product.id} product={product} />)}
608
+ </div>
609
+
610
+ // Container with responsive padding
611
+ <div className="container mx-auto px-4 sm:px-6 lg:px-8">
612
+ Content
613
+ </div>
614
+
615
+ // Hide/show based on breakpoint
616
+ <nav className="hidden md:flex">Desktop nav</nav>
617
+ <button className="md:hidden">Mobile menu</button>
618
+ ```
619
+
620
+ ### Animation Utilities
621
+
622
+ ```tsx
623
+ // Skeleton loading
624
+ <div className="animate-pulse space-y-4">
625
+ <div className="h-4 bg-gray-200 rounded w-3/4" />
626
+ <div className="h-4 bg-gray-200 rounded w-1/2" />
627
+ </div>
628
+
629
+ // Transitions
630
+ <button className="
631
+ transition-all
632
+ duration-200
633
+ ease-in-out
634
+ hover:scale-105
635
+ active:scale-95
636
+ ">
637
+ Hover me
638
+ </button>
639
+
640
+ // Custom animations in tailwind.config.js
641
+ module.exports = {
642
+ theme: {
643
+ extend: {
644
+ animation: {
645
+ 'fade-in': 'fadeIn 0.3s ease-out',
646
+ 'slide-up': 'slideUp 0.3s ease-out',
647
+ 'spin-slow': 'spin 3s linear infinite',
648
+ },
649
+ keyframes: {
650
+ fadeIn: {
651
+ '0%': { opacity: '0' },
652
+ '100%': { opacity: '1' },
653
+ },
654
+ slideUp: {
655
+ '0%': { transform: 'translateY(10px)', opacity: '0' },
656
+ '100%': { transform: 'translateY(0)', opacity: '1' },
657
+ },
658
+ },
659
+ },
660
+ },
661
+ };
662
+
663
+ // Usage
664
+ <div className="animate-fade-in">Fading in</div>
665
+ ```
666
+
667
+ ---
668
+
669
+ ## Project Structure
670
+
671
+ ### Feature-Based Structure
672
+
673
+ ```
674
+ src/
675
+ ├── app/ # Next.js App Router
676
+ │ ├── (auth)/ # Auth route group
677
+ │ │ ├── login/
678
+ │ │ └── register/
679
+ │ ├── dashboard/
680
+ │ │ ├── page.tsx
681
+ │ │ └── layout.tsx
682
+ │ └── layout.tsx
683
+ ├── components/
684
+ │ ├── ui/ # Shared UI components
685
+ │ │ ├── Button.tsx
686
+ │ │ ├── Input.tsx
687
+ │ │ └── index.ts
688
+ │ └── features/ # Feature-specific components
689
+ │ ├── auth/
690
+ │ │ ├── LoginForm.tsx
691
+ │ │ └── RegisterForm.tsx
692
+ │ └── dashboard/
693
+ │ ├── StatsCard.tsx
694
+ │ └── RecentActivity.tsx
695
+ ├── hooks/ # Custom React hooks
696
+ │ ├── useAuth.ts
697
+ │ ├── useDebounce.ts
698
+ │ └── useLocalStorage.ts
699
+ ├── lib/ # Utilities and configs
700
+ │ ├── utils.ts
701
+ │ ├── api.ts
702
+ │ └── constants.ts
703
+ ├── types/ # TypeScript types
704
+ │ ├── user.ts
705
+ │ └── api.ts
706
+ └── styles/
707
+ └── globals.css
708
+ ```
709
+
710
+ ### Barrel Exports
711
+
712
+ ```tsx
713
+ // components/ui/index.ts
714
+ export { Button } from './Button';
715
+ export { Input } from './Input';
716
+ export { Card, CardHeader, CardContent, CardFooter } from './Card';
717
+ export { Dialog, DialogTrigger, DialogContent } from './Dialog';
718
+
719
+ // Usage
720
+ import { Button, Input, Card } from '@/components/ui';
721
+ ```
722
+
723
+ ---
724
+
725
+ ## Security
726
+
727
+ ### XSS Prevention
728
+
729
+ React escapes content by default, which prevents most XSS attacks. When you need to render HTML content:
730
+
731
+ 1. **Avoid rendering raw HTML** when possible
732
+ 2. **Sanitize with DOMPurify** for trusted content sources
733
+ 3. **Use allow-lists** for permitted tags and attributes
734
+
735
+ ```tsx
736
+ // React escapes by default - this is safe
737
+ <div>{userInput}</div>
738
+
739
+ // When you must render HTML, sanitize first
740
+ import DOMPurify from 'dompurify';
741
+
742
+ function SafeHTML({ html }: { html: string }) {
743
+ const sanitized = DOMPurify.sanitize(html, {
744
+ ALLOWED_TAGS: ['b', 'i', 'em', 'strong', 'a', 'p'],
745
+ ALLOWED_ATTR: ['href'],
746
+ });
747
+
748
+ return <div dangerouslySetInnerHTML={{ __html: sanitized }} />;
749
+ }
750
+ ```
751
+
752
+ ### Input Validation
753
+
754
+ ```tsx
755
+ import { z } from 'zod';
756
+ import { useForm } from 'react-hook-form';
757
+ import { zodResolver } from '@hookform/resolvers/zod';
758
+
759
+ const schema = z.object({
760
+ email: z.string().email('Invalid email address'),
761
+ password: z.string()
762
+ .min(8, 'Password must be at least 8 characters')
763
+ .regex(/[A-Z]/, 'Password must contain uppercase letter')
764
+ .regex(/[0-9]/, 'Password must contain number'),
765
+ confirmPassword: z.string(),
766
+ }).refine((data) => data.password === data.confirmPassword, {
767
+ message: 'Passwords do not match',
768
+ path: ['confirmPassword'],
769
+ });
770
+
771
+ type FormData = z.infer<typeof schema>;
772
+
773
+ function RegisterForm() {
774
+ const { register, handleSubmit, formState: { errors } } = useForm<FormData>({
775
+ resolver: zodResolver(schema),
776
+ });
777
+
778
+ return (
779
+ <form onSubmit={handleSubmit(onSubmit)}>
780
+ <Input {...register('email')} error={errors.email?.message} />
781
+ <Input type="password" {...register('password')} error={errors.password?.message} />
782
+ <Input type="password" {...register('confirmPassword')} error={errors.confirmPassword?.message} />
783
+ <Button type="submit">Register</Button>
784
+ </form>
785
+ );
786
+ }
787
+ ```
788
+
789
+ ### Secure API Calls
790
+
791
+ ```tsx
792
+ // Use environment variables for API endpoints
793
+ const API_URL = process.env.NEXT_PUBLIC_API_URL;
794
+
795
+ // Never include secrets in client code - use server-side API routes
796
+ // app/api/data/route.ts
797
+ export async function GET() {
798
+ const response = await fetch('https://api.example.com/data', {
799
+ headers: {
800
+ 'Authorization': `Bearer ${process.env.API_SECRET}`, // Server-side only
801
+ },
802
+ });
803
+
804
+ return Response.json(await response.json());
805
+ }
806
+ ```