aios-core 2.2.2 → 2.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.aios-core/.session/current-session.json +14 -14
- package/.aios-core/cli/commands/migrate/validate.js +1 -1
- package/.aios-core/core/docs/session-update-pattern.md +17 -10
- package/.aios-core/core/elicitation/elicitation-engine.js +11 -6
- package/.aios-core/core/elicitation/session-manager.js +2 -1
- package/.aios-core/core/registry/registry-schema.json +166 -166
- package/.aios-core/core/registry/service-registry.json +6585 -6585
- package/.aios-core/core-config.yaml +12 -1
- package/.aios-core/data/agent-config-requirements.yaml +5 -5
- package/.aios-core/development/agents/devops.md +12 -0
- package/.aios-core/development/scripts/squad/README.md +112 -0
- package/.aios-core/development/scripts/squad/index.js +41 -0
- package/.aios-core/development/scripts/squad/squad-loader.js +359 -0
- package/.aios-core/development/scripts/squad/squad-validator.js +685 -0
- package/.aios-core/development/tasks/add-mcp.md +11 -5
- package/.aios-core/development/tasks/search-mcp.md +309 -0
- package/.aios-core/development/tasks/setup-mcp-docker.md +11 -8
- package/.aios-core/development/tasks/squad-creator-validate.md +151 -0
- package/.aios-core/docs/standards/AGENT-PERSONALIZATION-STANDARD-V1.md +3 -3
- package/.aios-core/index.d.ts +7 -7
- package/.aios-core/index.js +1 -1
- package/.aios-core/infrastructure/scripts/batch-creator.js +1 -1
- package/.aios-core/infrastructure/scripts/component-generator.js +1 -1
- package/.aios-core/infrastructure/templates/coderabbit.yaml.template +279 -279
- package/.aios-core/infrastructure/templates/github-workflows/ci.yml.template +169 -169
- package/.aios-core/infrastructure/templates/github-workflows/pr-automation.yml.template +330 -330
- package/.aios-core/infrastructure/templates/github-workflows/release.yml.template +196 -196
- package/.aios-core/infrastructure/templates/gitignore/gitignore-aios-base.tmpl +63 -63
- package/.aios-core/infrastructure/templates/gitignore/gitignore-brownfield-merge.tmpl +18 -18
- package/.aios-core/infrastructure/templates/gitignore/gitignore-node.tmpl +85 -85
- package/.aios-core/infrastructure/templates/gitignore/gitignore-python.tmpl +145 -145
- package/.aios-core/infrastructure/tests/utilities-audit-results.json +500 -500
- package/.aios-core/infrastructure/tools/README.md +1 -1
- package/.aios-core/install-manifest.yaml +4 -1
- package/.aios-core/manifests/schema/manifest-schema.json +190 -190
- package/.aios-core/manifests/workers.csv +203 -203
- package/.aios-core/package.json +102 -102
- package/.aios-core/product/templates/activation-instructions-template.md +7 -7
- package/.aios-core/product/templates/adr.hbs +125 -125
- package/.aios-core/product/templates/component-react-tmpl.tsx +98 -98
- package/.aios-core/product/templates/dbdr.hbs +241 -241
- package/.aios-core/product/templates/engine/schemas/adr.schema.json +102 -102
- package/.aios-core/product/templates/engine/schemas/dbdr.schema.json +205 -205
- package/.aios-core/product/templates/engine/schemas/epic.schema.json +175 -175
- package/.aios-core/product/templates/engine/schemas/pmdr.schema.json +175 -175
- package/.aios-core/product/templates/engine/schemas/prd-v2.schema.json +300 -300
- package/.aios-core/product/templates/engine/schemas/prd.schema.json +152 -152
- package/.aios-core/product/templates/engine/schemas/story.schema.json +222 -222
- package/.aios-core/product/templates/engine/schemas/task.schema.json +154 -154
- package/.aios-core/product/templates/epic.hbs +212 -212
- package/.aios-core/product/templates/eslintrc-security.json +32 -32
- package/.aios-core/product/templates/github-actions-cd.yml +212 -212
- package/.aios-core/product/templates/github-actions-ci.yml +172 -172
- package/.aios-core/product/templates/pmdr.hbs +186 -186
- package/.aios-core/product/templates/prd-v2.0.hbs +216 -216
- package/.aios-core/product/templates/prd.hbs +201 -201
- package/.aios-core/product/templates/shock-report-tmpl.html +502 -502
- package/.aios-core/product/templates/story.hbs +263 -263
- package/.aios-core/product/templates/task.hbs +170 -170
- package/.aios-core/product/templates/tmpl-comment-on-examples.sql +158 -158
- package/.aios-core/product/templates/tmpl-migration-script.sql +91 -91
- package/.aios-core/product/templates/tmpl-rls-granular-policies.sql +104 -104
- package/.aios-core/product/templates/tmpl-rls-kiss-policy.sql +10 -10
- package/.aios-core/product/templates/tmpl-rls-roles.sql +135 -135
- package/.aios-core/product/templates/tmpl-rls-simple.sql +77 -77
- package/.aios-core/product/templates/tmpl-rls-tenant.sql +152 -152
- package/.aios-core/product/templates/tmpl-rollback-script.sql +77 -77
- package/.aios-core/product/templates/tmpl-seed-data.sql +140 -140
- package/.aios-core/product/templates/tmpl-smoke-test.sql +16 -16
- package/.aios-core/product/templates/tmpl-staging-copy-merge.sql +139 -139
- package/.aios-core/product/templates/tmpl-stored-proc.sql +140 -140
- package/.aios-core/product/templates/tmpl-trigger.sql +152 -152
- package/.aios-core/product/templates/tmpl-view-materialized.sql +133 -133
- package/.aios-core/product/templates/tmpl-view.sql +177 -177
- package/.aios-core/product/templates/token-exports-css-tmpl.css +240 -240
- package/.aios-core/quality/schemas/quality-metrics.schema.json +233 -233
- package/.aios-core/schemas/squad-schema.json +185 -0
- package/.aios-core/scripts/README.md +90 -322
- package/.aios-core/scripts/migrate-framework-docs.sh +300 -300
- package/.claude/rules/mcp-usage.md +116 -100
- package/LICENSE +48 -48
- package/README.md +3 -4
- package/bin/aios.js +2 -1
- package/package.json +1 -3
- package/packages/installer/package.json +39 -39
- package/templates/squad/LICENSE +21 -21
- package/templates/squad/README.md +37 -37
- package/templates/squad/agents/example-agent.yaml +36 -36
- package/templates/squad/package.json +19 -19
- package/templates/squad/squad.yaml +25 -25
- package/templates/squad/tasks/example-task.yaml +46 -46
- package/templates/squad/templates/example-template.md +24 -24
- package/templates/squad/tests/example-agent.test.js +53 -53
- package/templates/squad/workflows/example-workflow.yaml +54 -54
- package/tools/diagnose-npx-issue.ps1 +96 -96
- package/tools/quick-diagnose.cmd +85 -85
- package/tools/quick-diagnose.ps1 +117 -117
- package/.aios-core/core/data/agent-config-requirements.yaml +0 -368
- package/.aios-core/core/data/aios-kb.md +0 -924
- package/.aios-core/core/data/workflow-patterns.yaml +0 -267
- package/.aios-core/product/templates/1mcp-config.yaml +0 -225
- package/.aios-core/scripts/context-detector.js +0 -226
- package/.aios-core/scripts/elicitation-engine.js +0 -385
- package/.aios-core/scripts/elicitation-session-manager.js +0 -300
- package/.claude/CLAUDE.md +0 -221
|
@@ -1,279 +1,279 @@
|
|
|
1
|
-
# =============================================================================
|
|
2
|
-
# CodeRabbit Configuration Template
|
|
3
|
-
# =============================================================================
|
|
4
|
-
# Template for user projects created with AIOS-FULLSTACK
|
|
5
|
-
# Generated by: *setup-github task (Story 5.10)
|
|
6
|
-
#
|
|
7
|
-
# Variables (replaced during installation):
|
|
8
|
-
# {{REVIEW_PROFILE}} - Review profile (chill | assertive)
|
|
9
|
-
# {{PROJECT_NAME}} - Project name
|
|
10
|
-
# {{PATH_INSTRUCTIONS}} - Dynamically generated path instructions
|
|
11
|
-
#
|
|
12
|
-
# Documentation: https://docs.coderabbit.ai/configuration
|
|
13
|
-
# =============================================================================
|
|
14
|
-
|
|
15
|
-
version: 2
|
|
16
|
-
language: "en-US"
|
|
17
|
-
early_access: false
|
|
18
|
-
|
|
19
|
-
# -----------------------------------------------------------------------------
|
|
20
|
-
# REVIEW CONFIGURATION
|
|
21
|
-
# -----------------------------------------------------------------------------
|
|
22
|
-
reviews:
|
|
23
|
-
# Profile options: chill | assertive
|
|
24
|
-
# - chill: Minimal feedback, only critical issues (RECOMMENDED for new projects)
|
|
25
|
-
# - assertive: Comprehensive feedback, strict standards (for production)
|
|
26
|
-
profile: "{{REVIEW_PROFILE}}"
|
|
27
|
-
|
|
28
|
-
# Workflow settings
|
|
29
|
-
request_changes_workflow: false
|
|
30
|
-
high_level_summary: true
|
|
31
|
-
high_level_summary_placeholder: "@coderabbitai summary"
|
|
32
|
-
poem: false
|
|
33
|
-
review_status: true
|
|
34
|
-
collapse_walkthrough: false
|
|
35
|
-
abort_on_close: true
|
|
36
|
-
|
|
37
|
-
# Auto-review settings
|
|
38
|
-
auto_review:
|
|
39
|
-
enabled: true
|
|
40
|
-
drafts: false
|
|
41
|
-
base_branches:
|
|
42
|
-
- "main"
|
|
43
|
-
- "develop"
|
|
44
|
-
- "release/*"
|
|
45
|
-
|
|
46
|
-
# Finishing touches (disabled by default - enable as needed)
|
|
47
|
-
finishing_touches:
|
|
48
|
-
docstrings:
|
|
49
|
-
enabled: false
|
|
50
|
-
unit_tests:
|
|
51
|
-
enabled: false
|
|
52
|
-
|
|
53
|
-
# ---------------------------------------------------------------------------
|
|
54
|
-
# PATH FILTERS - Exclude from review
|
|
55
|
-
# ---------------------------------------------------------------------------
|
|
56
|
-
path_filters:
|
|
57
|
-
# Generated/build files
|
|
58
|
-
- "!**/node_modules/**"
|
|
59
|
-
- "!**/dist/**"
|
|
60
|
-
- "!**/build/**"
|
|
61
|
-
- "!**/.next/**"
|
|
62
|
-
- "!**/coverage/**"
|
|
63
|
-
- "!**/*.min.js"
|
|
64
|
-
- "!**/*.min.css"
|
|
65
|
-
|
|
66
|
-
# Lock files
|
|
67
|
-
- "!**/package-lock.json"
|
|
68
|
-
- "!**/yarn.lock"
|
|
69
|
-
- "!**/pnpm-lock.yaml"
|
|
70
|
-
|
|
71
|
-
# Generated type definitions
|
|
72
|
-
- "!**/*.d.ts"
|
|
73
|
-
|
|
74
|
-
# ---------------------------------------------------------------------------
|
|
75
|
-
# PATH INSTRUCTIONS - Context-specific review rules
|
|
76
|
-
# ---------------------------------------------------------------------------
|
|
77
|
-
path_instructions:
|
|
78
|
-
# -------------------------------------------------------------------------
|
|
79
|
-
# SOURCE CODE
|
|
80
|
-
# -------------------------------------------------------------------------
|
|
81
|
-
- path: "src/**/*.ts"
|
|
82
|
-
instructions: |
|
|
83
|
-
TypeScript source code.
|
|
84
|
-
|
|
85
|
-
CRITICAL (must fix immediately):
|
|
86
|
-
- Hardcoded credentials or API keys
|
|
87
|
-
- SQL injection vulnerabilities
|
|
88
|
-
- XSS vulnerabilities
|
|
89
|
-
- Exposed sensitive data in logs
|
|
90
|
-
|
|
91
|
-
HIGH (should fix before merge):
|
|
92
|
-
- Strict typing violations (minimize 'any')
|
|
93
|
-
- Missing error handling
|
|
94
|
-
- Unhandled promise rejections
|
|
95
|
-
- Memory leak patterns
|
|
96
|
-
|
|
97
|
-
MEDIUM (document as tech debt):
|
|
98
|
-
- Code duplication
|
|
99
|
-
- Complex functions (>50 lines)
|
|
100
|
-
- Missing input validation
|
|
101
|
-
|
|
102
|
-
LOW (optional):
|
|
103
|
-
- Style inconsistencies
|
|
104
|
-
- Naming suggestions
|
|
105
|
-
|
|
106
|
-
- path: "src/**/*.tsx"
|
|
107
|
-
instructions: |
|
|
108
|
-
React component files.
|
|
109
|
-
|
|
110
|
-
FOCUS ON:
|
|
111
|
-
- Component prop typing
|
|
112
|
-
- Hook dependency arrays
|
|
113
|
-
- Key prop usage in lists
|
|
114
|
-
- Memory leaks (useEffect cleanup)
|
|
115
|
-
- Accessibility (aria labels, semantic HTML)
|
|
116
|
-
|
|
117
|
-
SKIP:
|
|
118
|
-
- JSX formatting preferences
|
|
119
|
-
- Component organization styles
|
|
120
|
-
|
|
121
|
-
- path: "src/**/*.js"
|
|
122
|
-
instructions: |
|
|
123
|
-
JavaScript source code.
|
|
124
|
-
|
|
125
|
-
FOCUS ON:
|
|
126
|
-
- Security vulnerabilities
|
|
127
|
-
- Error handling
|
|
128
|
-
- Performance issues
|
|
129
|
-
|
|
130
|
-
SUGGEST:
|
|
131
|
-
- TypeScript migration for critical files
|
|
132
|
-
|
|
133
|
-
# -------------------------------------------------------------------------
|
|
134
|
-
# TESTS
|
|
135
|
-
# -------------------------------------------------------------------------
|
|
136
|
-
- path: "**/*.test.ts"
|
|
137
|
-
instructions: |
|
|
138
|
-
Test files.
|
|
139
|
-
|
|
140
|
-
VALIDATE:
|
|
141
|
-
- Tests cover edge cases
|
|
142
|
-
- Mocks are properly typed
|
|
143
|
-
- Test names are descriptive
|
|
144
|
-
- No implementation code in tests
|
|
145
|
-
|
|
146
|
-
DO NOT:
|
|
147
|
-
- Require JSDoc comments in tests
|
|
148
|
-
- Flag test-specific patterns (any in mocks, etc.)
|
|
149
|
-
- Suggest test framework changes
|
|
150
|
-
|
|
151
|
-
- path: "**/*.test.tsx"
|
|
152
|
-
instructions: |
|
|
153
|
-
React component test files.
|
|
154
|
-
|
|
155
|
-
VALIDATE:
|
|
156
|
-
- User interaction testing (not implementation details)
|
|
157
|
-
- Accessibility testing when applicable
|
|
158
|
-
- Proper async handling (waitFor, findBy)
|
|
159
|
-
|
|
160
|
-
- path: "**/*.spec.ts"
|
|
161
|
-
instructions: |
|
|
162
|
-
Integration/E2E test files.
|
|
163
|
-
|
|
164
|
-
VALIDATE:
|
|
165
|
-
- Test isolation
|
|
166
|
-
- Cleanup procedures
|
|
167
|
-
- Timeout handling
|
|
168
|
-
|
|
169
|
-
# -------------------------------------------------------------------------
|
|
170
|
-
# API & DATABASE
|
|
171
|
-
# -------------------------------------------------------------------------
|
|
172
|
-
- path: "src/api/**"
|
|
173
|
-
instructions: |
|
|
174
|
-
API endpoint files.
|
|
175
|
-
|
|
176
|
-
CRITICAL:
|
|
177
|
-
- Input validation missing
|
|
178
|
-
- SQL injection risks
|
|
179
|
-
- XSS vulnerabilities
|
|
180
|
-
- Authentication bypass risks
|
|
181
|
-
|
|
182
|
-
HIGH:
|
|
183
|
-
- Missing authentication checks
|
|
184
|
-
- Inconsistent error responses
|
|
185
|
-
- Missing rate limiting considerations
|
|
186
|
-
|
|
187
|
-
MEDIUM:
|
|
188
|
-
- Response format inconsistencies
|
|
189
|
-
- Missing pagination for lists
|
|
190
|
-
|
|
191
|
-
- path: "**/migrations/**"
|
|
192
|
-
instructions: |
|
|
193
|
-
Database migration files.
|
|
194
|
-
|
|
195
|
-
CRITICAL:
|
|
196
|
-
- Data loss potential (DROP without backup)
|
|
197
|
-
- Missing rollback strategy
|
|
198
|
-
- Breaking schema changes
|
|
199
|
-
|
|
200
|
-
HIGH:
|
|
201
|
-
- Missing indexes for foreign keys
|
|
202
|
-
- Large table alterations without batch
|
|
203
|
-
|
|
204
|
-
NEVER:
|
|
205
|
-
- Approve destructive migrations without explicit confirmation
|
|
206
|
-
|
|
207
|
-
# -------------------------------------------------------------------------
|
|
208
|
-
# CONFIGURATION
|
|
209
|
-
# -------------------------------------------------------------------------
|
|
210
|
-
- path: "*.config.*"
|
|
211
|
-
instructions: |
|
|
212
|
-
Configuration files.
|
|
213
|
-
|
|
214
|
-
CRITICAL:
|
|
215
|
-
- Hardcoded secrets
|
|
216
|
-
- Production credentials in config
|
|
217
|
-
|
|
218
|
-
HIGH:
|
|
219
|
-
- Environment-specific values hardcoded
|
|
220
|
-
- Missing environment variable fallbacks
|
|
221
|
-
|
|
222
|
-
SUGGEST:
|
|
223
|
-
- Use .env variables for sensitive data
|
|
224
|
-
- Document configuration options
|
|
225
|
-
|
|
226
|
-
- path: ".env*"
|
|
227
|
-
instructions: |
|
|
228
|
-
Environment files.
|
|
229
|
-
|
|
230
|
-
CRITICAL:
|
|
231
|
-
- Real secrets in .env.example
|
|
232
|
-
- Production values committed
|
|
233
|
-
|
|
234
|
-
WARN:
|
|
235
|
-
- Missing required variables documentation
|
|
236
|
-
|
|
237
|
-
# -------------------------------------------------------------------------
|
|
238
|
-
# DOCUMENTATION
|
|
239
|
-
# -------------------------------------------------------------------------
|
|
240
|
-
- path: "docs/**"
|
|
241
|
-
instructions: |
|
|
242
|
-
Documentation files.
|
|
243
|
-
|
|
244
|
-
VALIDATE:
|
|
245
|
-
- Clarity and completeness
|
|
246
|
-
- Code examples are correct
|
|
247
|
-
- Links are valid
|
|
248
|
-
|
|
249
|
-
DO NOT:
|
|
250
|
-
- Flag markdown style preferences
|
|
251
|
-
- Require specific heading structures
|
|
252
|
-
|
|
253
|
-
- path: "README.md"
|
|
254
|
-
instructions: |
|
|
255
|
-
Project README.
|
|
256
|
-
|
|
257
|
-
VALIDATE:
|
|
258
|
-
- Setup instructions are complete
|
|
259
|
-
- Examples are functional
|
|
260
|
-
- Links work
|
|
261
|
-
|
|
262
|
-
{{PATH_INSTRUCTIONS}}
|
|
263
|
-
|
|
264
|
-
# -----------------------------------------------------------------------------
|
|
265
|
-
# CHAT CONFIGURATION
|
|
266
|
-
# -----------------------------------------------------------------------------
|
|
267
|
-
chat:
|
|
268
|
-
auto_reply: true
|
|
269
|
-
|
|
270
|
-
# -----------------------------------------------------------------------------
|
|
271
|
-
# KNOWLEDGE BASE
|
|
272
|
-
# -----------------------------------------------------------------------------
|
|
273
|
-
knowledge_base:
|
|
274
|
-
learnings:
|
|
275
|
-
scope: "auto"
|
|
276
|
-
issues:
|
|
277
|
-
scope: "auto"
|
|
278
|
-
pull_requests:
|
|
279
|
-
scope: "auto"
|
|
1
|
+
# =============================================================================
|
|
2
|
+
# CodeRabbit Configuration Template
|
|
3
|
+
# =============================================================================
|
|
4
|
+
# Template for user projects created with AIOS-FULLSTACK
|
|
5
|
+
# Generated by: *setup-github task (Story 5.10)
|
|
6
|
+
#
|
|
7
|
+
# Variables (replaced during installation):
|
|
8
|
+
# {{REVIEW_PROFILE}} - Review profile (chill | assertive)
|
|
9
|
+
# {{PROJECT_NAME}} - Project name
|
|
10
|
+
# {{PATH_INSTRUCTIONS}} - Dynamically generated path instructions
|
|
11
|
+
#
|
|
12
|
+
# Documentation: https://docs.coderabbit.ai/configuration
|
|
13
|
+
# =============================================================================
|
|
14
|
+
|
|
15
|
+
version: 2
|
|
16
|
+
language: "en-US"
|
|
17
|
+
early_access: false
|
|
18
|
+
|
|
19
|
+
# -----------------------------------------------------------------------------
|
|
20
|
+
# REVIEW CONFIGURATION
|
|
21
|
+
# -----------------------------------------------------------------------------
|
|
22
|
+
reviews:
|
|
23
|
+
# Profile options: chill | assertive
|
|
24
|
+
# - chill: Minimal feedback, only critical issues (RECOMMENDED for new projects)
|
|
25
|
+
# - assertive: Comprehensive feedback, strict standards (for production)
|
|
26
|
+
profile: "{{REVIEW_PROFILE}}"
|
|
27
|
+
|
|
28
|
+
# Workflow settings
|
|
29
|
+
request_changes_workflow: false
|
|
30
|
+
high_level_summary: true
|
|
31
|
+
high_level_summary_placeholder: "@coderabbitai summary"
|
|
32
|
+
poem: false
|
|
33
|
+
review_status: true
|
|
34
|
+
collapse_walkthrough: false
|
|
35
|
+
abort_on_close: true
|
|
36
|
+
|
|
37
|
+
# Auto-review settings
|
|
38
|
+
auto_review:
|
|
39
|
+
enabled: true
|
|
40
|
+
drafts: false
|
|
41
|
+
base_branches:
|
|
42
|
+
- "main"
|
|
43
|
+
- "develop"
|
|
44
|
+
- "release/*"
|
|
45
|
+
|
|
46
|
+
# Finishing touches (disabled by default - enable as needed)
|
|
47
|
+
finishing_touches:
|
|
48
|
+
docstrings:
|
|
49
|
+
enabled: false
|
|
50
|
+
unit_tests:
|
|
51
|
+
enabled: false
|
|
52
|
+
|
|
53
|
+
# ---------------------------------------------------------------------------
|
|
54
|
+
# PATH FILTERS - Exclude from review
|
|
55
|
+
# ---------------------------------------------------------------------------
|
|
56
|
+
path_filters:
|
|
57
|
+
# Generated/build files
|
|
58
|
+
- "!**/node_modules/**"
|
|
59
|
+
- "!**/dist/**"
|
|
60
|
+
- "!**/build/**"
|
|
61
|
+
- "!**/.next/**"
|
|
62
|
+
- "!**/coverage/**"
|
|
63
|
+
- "!**/*.min.js"
|
|
64
|
+
- "!**/*.min.css"
|
|
65
|
+
|
|
66
|
+
# Lock files
|
|
67
|
+
- "!**/package-lock.json"
|
|
68
|
+
- "!**/yarn.lock"
|
|
69
|
+
- "!**/pnpm-lock.yaml"
|
|
70
|
+
|
|
71
|
+
# Generated type definitions
|
|
72
|
+
- "!**/*.d.ts"
|
|
73
|
+
|
|
74
|
+
# ---------------------------------------------------------------------------
|
|
75
|
+
# PATH INSTRUCTIONS - Context-specific review rules
|
|
76
|
+
# ---------------------------------------------------------------------------
|
|
77
|
+
path_instructions:
|
|
78
|
+
# -------------------------------------------------------------------------
|
|
79
|
+
# SOURCE CODE
|
|
80
|
+
# -------------------------------------------------------------------------
|
|
81
|
+
- path: "src/**/*.ts"
|
|
82
|
+
instructions: |
|
|
83
|
+
TypeScript source code.
|
|
84
|
+
|
|
85
|
+
CRITICAL (must fix immediately):
|
|
86
|
+
- Hardcoded credentials or API keys
|
|
87
|
+
- SQL injection vulnerabilities
|
|
88
|
+
- XSS vulnerabilities
|
|
89
|
+
- Exposed sensitive data in logs
|
|
90
|
+
|
|
91
|
+
HIGH (should fix before merge):
|
|
92
|
+
- Strict typing violations (minimize 'any')
|
|
93
|
+
- Missing error handling
|
|
94
|
+
- Unhandled promise rejections
|
|
95
|
+
- Memory leak patterns
|
|
96
|
+
|
|
97
|
+
MEDIUM (document as tech debt):
|
|
98
|
+
- Code duplication
|
|
99
|
+
- Complex functions (>50 lines)
|
|
100
|
+
- Missing input validation
|
|
101
|
+
|
|
102
|
+
LOW (optional):
|
|
103
|
+
- Style inconsistencies
|
|
104
|
+
- Naming suggestions
|
|
105
|
+
|
|
106
|
+
- path: "src/**/*.tsx"
|
|
107
|
+
instructions: |
|
|
108
|
+
React component files.
|
|
109
|
+
|
|
110
|
+
FOCUS ON:
|
|
111
|
+
- Component prop typing
|
|
112
|
+
- Hook dependency arrays
|
|
113
|
+
- Key prop usage in lists
|
|
114
|
+
- Memory leaks (useEffect cleanup)
|
|
115
|
+
- Accessibility (aria labels, semantic HTML)
|
|
116
|
+
|
|
117
|
+
SKIP:
|
|
118
|
+
- JSX formatting preferences
|
|
119
|
+
- Component organization styles
|
|
120
|
+
|
|
121
|
+
- path: "src/**/*.js"
|
|
122
|
+
instructions: |
|
|
123
|
+
JavaScript source code.
|
|
124
|
+
|
|
125
|
+
FOCUS ON:
|
|
126
|
+
- Security vulnerabilities
|
|
127
|
+
- Error handling
|
|
128
|
+
- Performance issues
|
|
129
|
+
|
|
130
|
+
SUGGEST:
|
|
131
|
+
- TypeScript migration for critical files
|
|
132
|
+
|
|
133
|
+
# -------------------------------------------------------------------------
|
|
134
|
+
# TESTS
|
|
135
|
+
# -------------------------------------------------------------------------
|
|
136
|
+
- path: "**/*.test.ts"
|
|
137
|
+
instructions: |
|
|
138
|
+
Test files.
|
|
139
|
+
|
|
140
|
+
VALIDATE:
|
|
141
|
+
- Tests cover edge cases
|
|
142
|
+
- Mocks are properly typed
|
|
143
|
+
- Test names are descriptive
|
|
144
|
+
- No implementation code in tests
|
|
145
|
+
|
|
146
|
+
DO NOT:
|
|
147
|
+
- Require JSDoc comments in tests
|
|
148
|
+
- Flag test-specific patterns (any in mocks, etc.)
|
|
149
|
+
- Suggest test framework changes
|
|
150
|
+
|
|
151
|
+
- path: "**/*.test.tsx"
|
|
152
|
+
instructions: |
|
|
153
|
+
React component test files.
|
|
154
|
+
|
|
155
|
+
VALIDATE:
|
|
156
|
+
- User interaction testing (not implementation details)
|
|
157
|
+
- Accessibility testing when applicable
|
|
158
|
+
- Proper async handling (waitFor, findBy)
|
|
159
|
+
|
|
160
|
+
- path: "**/*.spec.ts"
|
|
161
|
+
instructions: |
|
|
162
|
+
Integration/E2E test files.
|
|
163
|
+
|
|
164
|
+
VALIDATE:
|
|
165
|
+
- Test isolation
|
|
166
|
+
- Cleanup procedures
|
|
167
|
+
- Timeout handling
|
|
168
|
+
|
|
169
|
+
# -------------------------------------------------------------------------
|
|
170
|
+
# API & DATABASE
|
|
171
|
+
# -------------------------------------------------------------------------
|
|
172
|
+
- path: "src/api/**"
|
|
173
|
+
instructions: |
|
|
174
|
+
API endpoint files.
|
|
175
|
+
|
|
176
|
+
CRITICAL:
|
|
177
|
+
- Input validation missing
|
|
178
|
+
- SQL injection risks
|
|
179
|
+
- XSS vulnerabilities
|
|
180
|
+
- Authentication bypass risks
|
|
181
|
+
|
|
182
|
+
HIGH:
|
|
183
|
+
- Missing authentication checks
|
|
184
|
+
- Inconsistent error responses
|
|
185
|
+
- Missing rate limiting considerations
|
|
186
|
+
|
|
187
|
+
MEDIUM:
|
|
188
|
+
- Response format inconsistencies
|
|
189
|
+
- Missing pagination for lists
|
|
190
|
+
|
|
191
|
+
- path: "**/migrations/**"
|
|
192
|
+
instructions: |
|
|
193
|
+
Database migration files.
|
|
194
|
+
|
|
195
|
+
CRITICAL:
|
|
196
|
+
- Data loss potential (DROP without backup)
|
|
197
|
+
- Missing rollback strategy
|
|
198
|
+
- Breaking schema changes
|
|
199
|
+
|
|
200
|
+
HIGH:
|
|
201
|
+
- Missing indexes for foreign keys
|
|
202
|
+
- Large table alterations without batch
|
|
203
|
+
|
|
204
|
+
NEVER:
|
|
205
|
+
- Approve destructive migrations without explicit confirmation
|
|
206
|
+
|
|
207
|
+
# -------------------------------------------------------------------------
|
|
208
|
+
# CONFIGURATION
|
|
209
|
+
# -------------------------------------------------------------------------
|
|
210
|
+
- path: "*.config.*"
|
|
211
|
+
instructions: |
|
|
212
|
+
Configuration files.
|
|
213
|
+
|
|
214
|
+
CRITICAL:
|
|
215
|
+
- Hardcoded secrets
|
|
216
|
+
- Production credentials in config
|
|
217
|
+
|
|
218
|
+
HIGH:
|
|
219
|
+
- Environment-specific values hardcoded
|
|
220
|
+
- Missing environment variable fallbacks
|
|
221
|
+
|
|
222
|
+
SUGGEST:
|
|
223
|
+
- Use .env variables for sensitive data
|
|
224
|
+
- Document configuration options
|
|
225
|
+
|
|
226
|
+
- path: ".env*"
|
|
227
|
+
instructions: |
|
|
228
|
+
Environment files.
|
|
229
|
+
|
|
230
|
+
CRITICAL:
|
|
231
|
+
- Real secrets in .env.example
|
|
232
|
+
- Production values committed
|
|
233
|
+
|
|
234
|
+
WARN:
|
|
235
|
+
- Missing required variables documentation
|
|
236
|
+
|
|
237
|
+
# -------------------------------------------------------------------------
|
|
238
|
+
# DOCUMENTATION
|
|
239
|
+
# -------------------------------------------------------------------------
|
|
240
|
+
- path: "docs/**"
|
|
241
|
+
instructions: |
|
|
242
|
+
Documentation files.
|
|
243
|
+
|
|
244
|
+
VALIDATE:
|
|
245
|
+
- Clarity and completeness
|
|
246
|
+
- Code examples are correct
|
|
247
|
+
- Links are valid
|
|
248
|
+
|
|
249
|
+
DO NOT:
|
|
250
|
+
- Flag markdown style preferences
|
|
251
|
+
- Require specific heading structures
|
|
252
|
+
|
|
253
|
+
- path: "README.md"
|
|
254
|
+
instructions: |
|
|
255
|
+
Project README.
|
|
256
|
+
|
|
257
|
+
VALIDATE:
|
|
258
|
+
- Setup instructions are complete
|
|
259
|
+
- Examples are functional
|
|
260
|
+
- Links work
|
|
261
|
+
|
|
262
|
+
{{PATH_INSTRUCTIONS}}
|
|
263
|
+
|
|
264
|
+
# -----------------------------------------------------------------------------
|
|
265
|
+
# CHAT CONFIGURATION
|
|
266
|
+
# -----------------------------------------------------------------------------
|
|
267
|
+
chat:
|
|
268
|
+
auto_reply: true
|
|
269
|
+
|
|
270
|
+
# -----------------------------------------------------------------------------
|
|
271
|
+
# KNOWLEDGE BASE
|
|
272
|
+
# -----------------------------------------------------------------------------
|
|
273
|
+
knowledge_base:
|
|
274
|
+
learnings:
|
|
275
|
+
scope: "auto"
|
|
276
|
+
issues:
|
|
277
|
+
scope: "auto"
|
|
278
|
+
pull_requests:
|
|
279
|
+
scope: "auto"
|