aigroup-workflow 2.2.1 → 2.2.2

package/docs/rules/web/patterns.md

@@ -1,79 +1,79 @@
-> This file extends [common/patterns.md](../common/patterns.md) with web-specific patterns.
-
-# Web Patterns
-
-## Component Composition
-
-### Compound Components
-
-Use compound components when related UI shares state and interaction semantics:
-
-```tsx
-<Tabs defaultValue="overview">
-  <Tabs.List>
-    <Tabs.Trigger value="overview">Overview</Tabs.Trigger>
-    <Tabs.Trigger value="settings">Settings</Tabs.Trigger>
-  </Tabs.List>
-  <Tabs.Content value="overview">...</Tabs.Content>
-  <Tabs.Content value="settings">...</Tabs.Content>
-</Tabs>
-```
-
-- Parent owns state
-- Children consume via context
-- Prefer this over prop drilling for complex widgets
-
-### Render Props / Slots
-
-- Use render props or slot patterns when behavior is shared but markup must vary
-- Keep keyboard handling, ARIA, and focus logic in the headless layer
-
-### Container / Presentational Split
-
-- Container components own data loading and side effects
-- Presentational components receive props and render UI
-- Presentational components should stay pure
-
-## State Management
-
-Treat these separately:
-
-| Concern | Tooling |
-|---------|---------|
-| Server state | TanStack Query, SWR, tRPC |
-| Client state | Zustand, Jotai, signals |
-| URL state | search params, route segments |
-| Form state | React Hook Form or equivalent |
-
-- Do not duplicate server state into client stores
-- Derive values instead of storing redundant computed state
-
-## URL As State
-
-Persist shareable state in the URL:
-- filters
-- sort order
-- pagination
-- active tab
-- search query
-
-## Data Fetching
-
-### Stale-While-Revalidate
-
-- Return cached data immediately
-- Revalidate in the background
-- Prefer existing libraries instead of rolling this by hand
-
-### Optimistic Updates
-
-- Snapshot current state
-- Apply optimistic update
-- Roll back on failure
-- Emit visible error feedback when rolling back
-
-### Parallel Loading
-
-- Fetch independent data in parallel
-- Avoid parent-child request waterfalls
-- Prefetch likely next routes or states when justified
+> This file extends [common/patterns.md](../common/patterns.md) with web-specific patterns.
+
+# Web Patterns
+
+## Component Composition
+
+### Compound Components
+
+Use compound components when related UI shares state and interaction semantics:
+
+```tsx
+<Tabs defaultValue="overview">
+  <Tabs.List>
+    <Tabs.Trigger value="overview">Overview</Tabs.Trigger>
+    <Tabs.Trigger value="settings">Settings</Tabs.Trigger>
+  </Tabs.List>
+  <Tabs.Content value="overview">...</Tabs.Content>
+  <Tabs.Content value="settings">...</Tabs.Content>
+</Tabs>
+```
+
+- Parent owns state
+- Children consume via context
+- Prefer this over prop drilling for complex widgets
+
+### Render Props / Slots
+
+- Use render props or slot patterns when behavior is shared but markup must vary
+- Keep keyboard handling, ARIA, and focus logic in the headless layer
+
+### Container / Presentational Split
+
+- Container components own data loading and side effects
+- Presentational components receive props and render UI
+- Presentational components should stay pure
+
+## State Management
+
+Treat these separately:
+
+| Concern | Tooling |
+|---------|---------|
+| Server state | TanStack Query, SWR, tRPC |
+| Client state | Zustand, Jotai, signals |
+| URL state | search params, route segments |
+| Form state | React Hook Form or equivalent |
+
+- Do not duplicate server state into client stores
+- Derive values instead of storing redundant computed state
+
+## URL As State
+
+Persist shareable state in the URL:
+- filters
+- sort order
+- pagination
+- active tab
+- search query
+
+## Data Fetching
+
+### Stale-While-Revalidate
+
+- Return cached data immediately
+- Revalidate in the background
+- Prefer existing libraries instead of rolling this by hand
+
+### Optimistic Updates
+
+- Snapshot current state
+- Apply optimistic update
+- Roll back on failure
+- Emit visible error feedback when rolling back
+
+### Parallel Loading
+
+- Fetch independent data in parallel
+- Avoid parent-child request waterfalls
+- Prefetch likely next routes or states when justified

package/docs/rules/web/performance.md

@@ -1,64 +1,64 @@
-> This file extends [common/performance.md](../common/performance.md) with web-specific performance content.
-
-# Web Performance Rules
-
-## Core Web Vitals Targets
-
-| Metric | Target |
-|--------|--------|
-| LCP | < 2.5s |
-| INP | < 200ms |
-| CLS | < 0.1 |
-| FCP | < 1.5s |
-| TBT | < 200ms |
-
-## Bundle Budget
-
-| Page Type | JS Budget (gzipped) | CSS Budget |
-|-----------|---------------------|------------|
-| Landing page | < 150kb | < 30kb |
-| App page | < 300kb | < 50kb |
-| Microsite | < 80kb | < 15kb |
-
-## Loading Strategy
-
-1. Inline critical above-the-fold CSS where justified
-2. Preload the hero image and primary font only
-3. Defer non-critical CSS or JS
-4. Dynamically import heavy libraries
-
-```js
-const gsapModule = await import('gsap');
-const { ScrollTrigger } = await import('gsap/ScrollTrigger');
-```
-
-## Image Optimization
-
-- Explicit `width` and `height`
-- `loading="eager"` plus `fetchpriority="high"` for hero media only
-- `loading="lazy"` for below-the-fold assets
-- Prefer AVIF or WebP with fallbacks
-- Never ship source images far beyond rendered size
-
-## Font Loading
-
-- Max two font families unless there is a clear exception
-- `font-display: swap`
-- Subset where possible
-- Preload only the truly critical weight/style
-
-## Animation Performance
-
-- Animate compositor-friendly properties only
-- Use `will-change` narrowly and remove it when done
-- Prefer CSS for simple transitions
-- Use `requestAnimationFrame` or established animation libraries for JS motion
-- Avoid scroll handler churn; use IntersectionObserver or well-behaved libraries
-
-## Performance Checklist
-
-- [ ] All images have explicit dimensions
-- [ ] No accidental render-blocking resources
-- [ ] No layout shifts from dynamic content
-- [ ] Motion stays on compositor-friendly properties
-- [ ] Third-party scripts load async/defer and only when needed
+> This file extends [common/performance.md](../common/performance.md) with web-specific performance content.
+
+# Web Performance Rules
+
+## Core Web Vitals Targets
+
+| Metric | Target |
+|--------|--------|
+| LCP | < 2.5s |
+| INP | < 200ms |
+| CLS | < 0.1 |
+| FCP | < 1.5s |
+| TBT | < 200ms |
+
+## Bundle Budget
+
+| Page Type | JS Budget (gzipped) | CSS Budget |
+|-----------|---------------------|------------|
+| Landing page | < 150kb | < 30kb |
+| App page | < 300kb | < 50kb |
+| Microsite | < 80kb | < 15kb |
+
+## Loading Strategy
+
+1. Inline critical above-the-fold CSS where justified
+2. Preload the hero image and primary font only
+3. Defer non-critical CSS or JS
+4. Dynamically import heavy libraries
+
+```js
+const gsapModule = await import('gsap');
+const { ScrollTrigger } = await import('gsap/ScrollTrigger');
+```
+
+## Image Optimization
+
+- Explicit `width` and `height`
+- `loading="eager"` plus `fetchpriority="high"` for hero media only
+- `loading="lazy"` for below-the-fold assets
+- Prefer AVIF or WebP with fallbacks
+- Never ship source images far beyond rendered size
+
+## Font Loading
+
+- Max two font families unless there is a clear exception
+- `font-display: swap`
+- Subset where possible
+- Preload only the truly critical weight/style
+
+## Animation Performance
+
+- Animate compositor-friendly properties only
+- Use `will-change` narrowly and remove it when done
+- Prefer CSS for simple transitions
+- Use `requestAnimationFrame` or established animation libraries for JS motion
+- Avoid scroll handler churn; use IntersectionObserver or well-behaved libraries
+
+## Performance Checklist
+
+- [ ] All images have explicit dimensions
+- [ ] No accidental render-blocking resources
+- [ ] No layout shifts from dynamic content
+- [ ] Motion stays on compositor-friendly properties
+- [ ] Third-party scripts load async/defer and only when needed

package/docs/rules/web/security.md

@@ -1,57 +1,57 @@
-> This file extends [common/security.md](../common/security.md) with web-specific security content.
-
-# Web Security Rules
-
-## Content Security Policy
-
-Always configure a production CSP.
-
-### Nonce-Based CSP
-
-Use a per-request nonce for scripts instead of `'unsafe-inline'`.
-
-```text
-Content-Security-Policy:
-  default-src 'self';
-  script-src 'self' 'nonce-{RANDOM}' https://cdn.jsdelivr.net;
-  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
-  img-src 'self' data: https:;
-  font-src 'self' https://fonts.gstatic.com;
-  connect-src 'self' https://*.example.com;
-  frame-src 'none';
-  object-src 'none';
-  base-uri 'self';
-```
-
-Adjust origins to the project. Do not cargo-cult this block unchanged.
-
-## XSS Prevention
-
-- Never inject unsanitized HTML
-- Avoid `innerHTML` / `dangerouslySetInnerHTML` unless sanitized first
-- Escape dynamic template values
-- Sanitize user HTML with a vetted local sanitizer when absolutely necessary
-
-## Third-Party Scripts
-
-- Load asynchronously
-- Use SRI when serving from a CDN
-- Audit quarterly
-- Prefer self-hosting for critical dependencies when practical
-
-## HTTPS and Headers
-
-```text
-Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
-X-Content-Type-Options: nosniff
-X-Frame-Options: DENY
-Referrer-Policy: strict-origin-when-cross-origin
-Permissions-Policy: camera=(), microphone=(), geolocation=()
-```
-
-## Forms
-
-- CSRF protection on state-changing forms
-- Rate limiting on submission endpoints
-- Validate client and server side
-- Prefer honeypots or light anti-abuse controls over heavy-handed CAPTCHA defaults
+> This file extends [common/security.md](../common/security.md) with web-specific security content.
+
+# Web Security Rules
+
+## Content Security Policy
+
+Always configure a production CSP.
+
+### Nonce-Based CSP
+
+Use a per-request nonce for scripts instead of `'unsafe-inline'`.
+
+```text
+Content-Security-Policy:
+  default-src 'self';
+  script-src 'self' 'nonce-{RANDOM}' https://cdn.jsdelivr.net;
+  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
+  img-src 'self' data: https:;
+  font-src 'self' https://fonts.gstatic.com;
+  connect-src 'self' https://*.example.com;
+  frame-src 'none';
+  object-src 'none';
+  base-uri 'self';
+```
+
+Adjust origins to the project. Do not cargo-cult this block unchanged.
+
+## XSS Prevention
+
+- Never inject unsanitized HTML
+- Avoid `innerHTML` / `dangerouslySetInnerHTML` unless sanitized first
+- Escape dynamic template values
+- Sanitize user HTML with a vetted local sanitizer when absolutely necessary
+
+## Third-Party Scripts
+
+- Load asynchronously
+- Use SRI when serving from a CDN
+- Audit quarterly
+- Prefer self-hosting for critical dependencies when practical
+
+## HTTPS and Headers
+
+```text
+Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
+X-Content-Type-Options: nosniff
+X-Frame-Options: DENY
+Referrer-Policy: strict-origin-when-cross-origin
+Permissions-Policy: camera=(), microphone=(), geolocation=()
+```
+
+## Forms
+
+- CSRF protection on state-changing forms
+- Rate limiting on submission endpoints
+- Validate client and server side
+- Prefer honeypots or light anti-abuse controls over heavy-handed CAPTCHA defaults

package/docs/rules/web/testing.md

@@ -1,55 +1,55 @@
-> This file extends [common/testing.md](../common/testing.md) with web-specific testing content.
-
-# Web Testing Rules
-
-## Priority Order
-
-### 1. Visual Regression
-
-- Screenshot key breakpoints: 320, 768, 1024, 1440
-- Test hero sections, scrollytelling sections, and meaningful states
-- Use Playwright screenshots for visual-heavy work
-- If both themes exist, test both
-
-### 2. Accessibility
-
-- Run automated accessibility checks
-- Test keyboard navigation
-- Verify reduced-motion behavior
-- Verify color contrast
-
-### 3. Performance
-
-- Run Lighthouse or equivalent against meaningful pages
-- Keep CWV targets from [performance.md](performance.md)
-
-### 4. Cross-Browser
-
-- Minimum: Chrome, Firefox, Safari
-- Test scrolling, motion, and fallback behavior
-
-### 5. Responsive
-
-- Test 320, 375, 768, 1024, 1440, 1920
-- Verify no overflow
-- Verify touch interactions
-
-## E2E Shape
-
-```ts
-import { test, expect } from '@playwright/test';
-
-test('landing hero loads', async ({ page }) => {
-  await page.goto('/');
-  await expect(page.locator('h1')).toBeVisible();
-});
-```
-
-- Avoid flaky timeout-based assertions
-- Prefer deterministic waits
-
-## Unit Tests
-
-- Test utilities, data transforms, and custom hooks
-- For highly visual components, visual regression often carries more signal than brittle markup assertions
-- Visual regression supplements coverage targets; it does not replace them
+> This file extends [common/testing.md](../common/testing.md) with web-specific testing content.
+
+# Web Testing Rules
+
+## Priority Order
+
+### 1. Visual Regression
+
+- Screenshot key breakpoints: 320, 768, 1024, 1440
+- Test hero sections, scrollytelling sections, and meaningful states
+- Use Playwright screenshots for visual-heavy work
+- If both themes exist, test both
+
+### 2. Accessibility
+
+- Run automated accessibility checks
+- Test keyboard navigation
+- Verify reduced-motion behavior
+- Verify color contrast
+
+### 3. Performance
+
+- Run Lighthouse or equivalent against meaningful pages
+- Keep CWV targets from [performance.md](performance.md)
+
+### 4. Cross-Browser
+
+- Minimum: Chrome, Firefox, Safari
+- Test scrolling, motion, and fallback behavior
+
+### 5. Responsive
+
+- Test 320, 375, 768, 1024, 1440, 1920
+- Verify no overflow
+- Verify touch interactions
+
+## E2E Shape
+
+```ts
+import { test, expect } from '@playwright/test';
+
+test('landing hero loads', async ({ page }) => {
+  await page.goto('/');
+  await expect(page.locator('h1')).toBeVisible();
+});
+```
+
+- Avoid flaky timeout-based assertions
+- Prefer deterministic waits
+
+## Unit Tests
+
+- Test utilities, data transforms, and custom hooks
+- For highly visual components, visual regression often carries more signal than brittle markup assertions
+- Visual regression supplements coverage targets; it does not replace them

package/docs/templates/README.md

@@ -1,36 +1,36 @@
-# 结构化文档模板
-
-将原始文档转化为AI友好的结构化格式，减少token消耗，加速理解。
-
-## 核心原则
-
-1. **去冗余** - 删除套话、重复内容、无效信息
-2. **结构化** - 用固定格式组织，便于解析
-3. **符号化** - 用符号代替长描述（如 ✅❌⚠️）
-4. **图转文** - 图片转为关键信息描述
-5. **层级化** - 重要信息前置，细节后置
-
-## 模板列表
-
-| 模板 | 用途 | 文件 |
-|------|------|------|
-| PRD | 产品需求文档 | `prd.md` |
-| UI | 界面设计说明 | `ui.md` |
-| API | 接口文档 | `api.md` |
-| BUG | Bug报告 | `bug.md` |
-| MEETING | 会议纪要 | `meeting.md` |
-| GENERIC | 通用文档 | `generic.md` |
-
-## 使用方式
-
-1. 选择对应模板
-2. 按模板格式填写/转换内容
-3. 交给贾维斯或凯尔处理
-
-## Token节省预估
-
-| 文档类型 | 原始 | 结构化后 | 节省 |
-|---------|------|---------|------|
-| PRD | ~3000 | ~800 | 73% |
-| UI说明 | ~2000 | ~500 | 75% |
-| 会议纪要 | ~1500 | ~400 | 73% |
+# 结构化文档模板
+
+将原始文档转化为AI友好的结构化格式，减少token消耗，加速理解。
+
+## 核心原则
+
+1. **去冗余** - 删除套话、重复内容、无效信息
+2. **结构化** - 用固定格式组织，便于解析
+3. **符号化** - 用符号代替长描述（如 ✅❌⚠️）
+4. **图转文** - 图片转为关键信息描述
+5. **层级化** - 重要信息前置，细节后置
+
+## 模板列表
+
+| 模板 | 用途 | 文件 |
+|------|------|------|
+| PRD | 产品需求文档 | `prd.md` |
+| UI | 界面设计说明 | `ui.md` |
+| API | 接口文档 | `api.md` |
+| BUG | Bug报告 | `bug.md` |
+| MEETING | 会议纪要 | `meeting.md` |
+| GENERIC | 通用文档 | `generic.md` |
+
+## 使用方式
+
+1. 选择对应模板
+2. 按模板格式填写/转换内容
+3. 交给贾维斯或凯尔处理
+
+## Token节省预估
+
+| 文档类型 | 原始 | 结构化后 | 节省 |
+|---------|------|---------|------|
+| PRD | ~3000 | ~800 | 73% |
+| UI说明 | ~2000 | ~500 | 75% |
+| 会议纪要 | ~1500 | ~400 | 73% |