claude-toolkit 0.16.0 → 0.17.0

package/docs/stacks/capacitor-ota.md

@@ -1,145 +0,0 @@
-# Capacitor OTA (Capgo) Patterns
-
-> Capacitor 8 native runtime and Capgo over-the-air live updates: channels, encryption, staged rollouts, and store-safe delivery.
-
-**Type:** Stack Skill (requires `capacitor` stack)
-**Source:** [`stacks/capacitor/skills/ct-capacitor-ota/SKILL.md`](../../stacks/capacitor/skills/ct-capacitor-ota/SKILL.md)
-**Directory Mappings:** `capacitor.config.ts`, `capacitor.config.json`, `ios/`, `android/`
-**File Extensions:** _(none — keyed on config + content)_
-
-## Overview
-
-Capacitor wraps a web app in a native iOS/Android shell. Capgo's `@capgo/capacitor-updater` lets you replace the web bundle that shell loads, shipping JS/HTML/CSS fixes in minutes instead of waiting on store review.
-
-**Golden rule:** OTA updates the **web layer only**. Native code changes (new plugin, native dependency, Capacitor major bump) require a new store binary. Never OTA a bundle whose native contract differs from the installed shell.
-
-## Versions (as of June 2026)
-
-| Package                    | Version | Notes                                                            |
-| -------------------------- | ------- | ---------------------------------------------------------------- |
-| `@capacitor/core` & CLI    | ^8.3.x  | 8.3.1 (2026-04-16); Node 22+, SPM default for new iOS apps       |
-| `@capgo/capacitor-updater` | ^8.x    | Major version tracks Capacitor major; v8 stores channels locally |
-| `@capgo/cli`               | latest  | `npx @capgo/cli@latest …` — pin in CI                            |
-
-## Setup
-
-```bash
-npm i @capgo/capacitor-updater && npx cap sync
-npx @capgo/cli@latest init <API_KEY>   # adds app, injects notifyAppReady, builds, uploads, tests
-```
-
-## Critical: notifyAppReady()
-
-Call it as early as possible after the bundle boots. If the plugin doesn't hear it within `appReadyTimeout` (default 10s), it assumes the bundle is broken and **auto-rolls back** to the previous one — the safety net that makes OTA reversible.
-
-```typescript
-import { CapacitorUpdater } from "@capgo/capacitor-updater";
-
-CapacitorUpdater.notifyAppReady(); // top of bootstrap, before heavy async work
-```
-
-## Configuration
-
-```typescript
-// capacitor.config.ts
-import type { CapacitorConfig } from "@capacitor/cli";
-
-const config: CapacitorConfig = {
-  appId: "com.example.app",
-  appName: "Example",
-  webDir: "dist",
-  plugins: {
-    CapacitorUpdater: {
-      autoUpdate: "atBackground", // apply when app backgrounds
-      appReadyTimeout: 10000,
-      autoDeleteFailed: true,
-      autoDeletePrevious: true,
-      resetWhenUpdate: true, // wipe OTA bundles on native app update
-      // defaultChannel: "Development", // TEST/QA BUILDS ONLY — omit in production
-    },
-  },
-};
-
-export default config;
-```
-
-### autoUpdate modes
-
-| Value                        | Behavior                                                      |
-| ---------------------------- | ------------------------------------------------------------ |
-| `false` / `"off"`            | No automatic updates — drive everything from JS              |
-| `"atBackground"` *(default)* | Download silently, apply when app moves to background        |
-| `"atInstall"`                | Apply right after a fresh install / native update            |
-| `"onLaunch"`                 | Apply on next launch, then background                        |
-| `"always"`                   | Apply immediately whenever a check runs                      |
-| `"onlyDownload"`             | Download only; emit `updateAvailable` for you to act         |
-
-`periodCheckDelay` sets poll frequency (seconds, **minimum 600** / 10 min).
-
-## Channels
-
-A channel points to one JS bundle. Swap which bundle a channel points to for instant rollout/rollback without rebuilding.
-
-```bash
-npx @capgo/cli@latest bundle upload --channel=production    # build → upload → assign
-npx @capgo/cli@latest channel set production -s default     # make it the cloud default
-npx @capgo/cli@latest channel set beta --self-assign        # allow in-app setChannel()
-```
-
-**Precedence** (highest first): forced device mapping → cloud per-device override → config `defaultChannel` → cloud Default Channel.
-
-Ship production binaries **without** `defaultChannel` so users follow the cloud default. Recommended ladder:
-
-| Channel       | Bundle version | Audience                  |
-| ------------- | -------------- | ------------------------- |
-| `development` | `1.2.3-dev.1`  | dev / emulator builds     |
-| `qa`          | `1.2.3-qa.1`   | QA verification           |
-| `staging`     | `1.2.3-rc.1`   | production-like sign-off  |
-| `production`  | `1.2.3`        | end users (store version) |
-
-```typescript
-// Runtime switch — needs "Allow device self-assignment" on the channel (v8+).
-await CapacitorUpdater.setChannel({ channel: "beta", triggerAutoUpdate: true });
-```
-
-## End-to-end encryption (v2)
-
-Hybrid RSA-2048 + AES-256: a random AES key encrypts each bundle; your private RSA key signs the key + checksum; the app decrypts with the embedded public key.
-
-```bash
-npx @capgo/cli@latest key create
-npx @capgo/cli@latest bundle upload --key-v2 --channel=production
-```
-
-- `.capgo_key_v2` (private) — **never commit**; store as a CI secret.
-- `.capgo_key_v2.pub` (public) — safe to commit.
-- With encryption configured, the plugin **strictly enforces** a valid signature; tampered/unsigned bundles are rejected.
-
-## Staged rollouts & monitoring
-
-- Start at ~10% of users, widen over 24h; schedule heavy rollouts 1–4 AM local, Wi-Fi-preferred.
-- Targets: ~95% adoption within 24h, ~82% global success rate.
-- Roll back instantly from the channel dashboard (crown icon on the previous build).
-- Watch the `downloadFailed` / `appReady` ratio in Capgo stats; a spike means roll back.
-
-## Store compliance
-
-OTA of JS/HTML/CSS is permitted — Apple §3.3.2 (since iOS 4.3) and Google Play (webview/JS VM code is exempt). Shipping native code OTA is not.
-
-## Anti-Patterns
-
-| Anti-pattern                              | Why it's wrong                                                            |
-| ----------------------------------------- | ------------------------------------------------------------------------ |
-| **Not calling `notifyAppReady()`**        | Every bundle auto-rolls back after `appReadyTimeout`. The #1 OTA failure. |
-| **OTA-ing a native change**               | Bundle needs a native API the shell lacks → crash. Bump the binary first. |
-| **`defaultChannel` in production builds** | Pins users off the cloud default; breaks instant rollback.               |
-| **Committing `.capgo_key_v2`**            | Leaks your signing key. Commit only the `.pub`.                          |
-| **`periodCheckDelay` < 600**              | Silently clamped; never polls faster than 10 min.                        |
-| **100% rollout with no canary**           | A bad bundle hits everyone at once. Stage it.                            |
-| **Unpinned `@capgo/cli@latest` in CI**    | A CLI minor can change upload behavior mid-pipeline. Pin it.             |
-
-## See Also
-
-- [Capacitor & OTA Best Practices](../best-practices/capacitor/README.md) — full reference set
-- [ct-vite-vitest-patterns](vite-vitest-patterns.md) — the build that produces `webDir`
-- [ct-playwright-patterns](playwright-patterns.md) — E2E-verify a bundle before upload

package/docs/stacks/cloudflare-d1-kv.md

@@ -1,144 +0,0 @@
-# Cloudflare D1 and KV Patterns
-
-> Cloudflare D1 SQL database and KV cache patterns.
-
-**Type:** Stack Skill (requires `cloudflare` stack)
-**Source:** [`stacks/cloudflare/skills/ct-cloudflare-d1-kv/SKILL.md`](../stacks/cloudflare/skills/ct-cloudflare-d1-kv/SKILL.md)
-**Directory Mappings:** `src/db/`, `migrations/`
-**File Extensions:** `.sql`
-
-## Overview
-
-D1 is Cloudflare's serverless SQLite database, and KV is an eventually-consistent key-value store. Together they provide primary data storage and read-heavy caching for Workers.
-
-## D1 Database
-
-### Prepared Statements
-
-Always use prepared statements with `.bind()` -- never concatenate SQL strings.
-
-```rust
-let stmt = db.prepare("SELECT * FROM users WHERE id = ?1")
-    .bind(&[id.into()])?;
-let user = stmt.first::<User>(None).await?;
-```
-
-### Batch Operations
-
-Execute multiple statements in a single round trip. Batch operations are transactional -- all succeed or all fail.
-
-```rust
-let results = db.batch(vec![
-    db.prepare("INSERT INTO events ...").bind(&[...])?,
-    db.prepare("INSERT INTO event_members ...").bind(&[...])?,
-]).await?;
-```
-
-### Migration Workflow
-
-```bash
-wrangler d1 migrations create DB "add_users_table"   # Create migration
-wrangler d1 migrations apply DB --local               # Apply locally
-wrangler d1 migrations apply DB --remote              # Apply to remote
-```
-
-### Schema Conventions
-
-- Use `TEXT` for IDs (UUIDs/nanoids, not auto-increment integers)
-- Use `TEXT` for timestamps in ISO 8601 format
-- Always add `created_at` and `updated_at` columns
-- Create indexes for columns used in WHERE clauses and JOINs
-- Use `IF NOT EXISTS` / `IF EXISTS` for idempotent migrations
-- D1 has a **5MB response size limit** -- always use LIMIT
-
-## KV Namespace
-
-### Read-Through Caching Pattern
-
-```rust
-async fn get_user_cached(kv: &KvStore, db: &D1Database, user_id: &str) -> Result<User> {
-    let cache_key = format!("user:{}", user_id);
-
-    // Try cache first
-    if let Some(cached) = kv.get(&cache_key).text().await? {
-        if let Ok(user) = serde_json::from_str::<User>(&cached) {
-            return Ok(user);
-        }
-    }
-
-    // Cache miss -- query DB, then populate cache with TTL
-    let user = /* query D1 */;
-    kv.put(&cache_key, &json)?.expiration_ttl(3600).execute().await?;
-    Ok(user)
-}
-```
-
-### TTL Strategies
-
-| Data Type | TTL | Rationale |
-|---|---|---|
-| User profile | 1 hour | Changes infrequently |
-| Session data | 24 hours | Matches session lifetime |
-| Config/settings | 5 minutes | Needs faster propagation |
-| Public listings | 15 minutes | Balances freshness and load |
-
-### Key Naming Conventions
-
-Use colon-separated hierarchical keys:
-```
-user:{userId}
-user:{userId}:profile
-event:{eventId}
-event:{eventId}:members
-session:{sessionToken}
-cache:feed:{userId}:page:{pageNum}
-```
-
-### Cache Invalidation
-
-Invalidate on write operations by deleting the corresponding cache key after updating D1.
-
-## Hyperdrive (External Database Acceleration)
-
-Hyperdrive accelerates connections to external PostgreSQL/MySQL databases from Workers by maintaining regional connection pools close to your database, eliminating per-request TCP/TLS handshake overhead.
-
-### Setup
-
-```toml
-# wrangler.toml
-[[hyperdrive]]
-binding = "HYPERDRIVE"
-id = "<hyperdrive-config-id>"
-```
-
-```typescript
-// Access the connection string in your Worker
-const sql = env.HYPERDRIVE.connectionString;
-// Pass to your Postgres/MySQL client (e.g., node-postgres, drizzle)
-```
-
-### When to Use
-
-| Scenario | Use |
-|---|---|
-| Simple data, edge-native | **D1** (serverless SQLite) |
-| Read-heavy caching layer | **KV** (eventually consistent) |
-| Full relational DB (Postgres/MySQL) | **Hyperdrive** + external DB |
-
-### Key Points
-
-- Always use Hyperdrive when connecting to external databases from Workers
-- Caches common read queries automatically, reducing origin load
-- Connection pool size is configurable per Hyperdrive config (minimum 5 connections)
-- Understands read vs write queries for intelligent caching
-
-## Anti-patterns
-
-| Anti-pattern | Why it's wrong |
-|---|---|
-| **Unbounded queries** | Always use LIMIT. D1 has a 5MB response limit. |
-| **Missing indexes** | D1 is SQLite; without indexes, every query is a full table scan. |
-| **KV as primary data store** | KV is eventually consistent with no query capability. Use D1 for primary data. |
-| **Ignoring batch operations** | Each D1 call is a network round trip. Batch for performance. |
-| **KV cache without TTL** | Stale data without TTL persists indefinitely. |
-| **Not testing migrations locally** | Always apply with `--local` before `--remote`. |

package/docs/stacks/esnext-idioms.md

@@ -1,25 +0,0 @@
-# ESNext Idioms
-
-> Modern ECMAScript runtime idioms — Temporal, iterator helpers, `using`, structuredClone.
-
-**Type:** Stack Skill (requires `esnext` stack)
-**Source:** [`stacks/esnext/skills/ct-esnext-idioms/SKILL.md`](../../stacks/esnext/skills/ct-esnext-idioms/SKILL.md)
-**Detected by:** tsconfig `target`/`module`/`lib` = `ESNext`/`ES2022+`, package.json `"type":"module"`, `engines.node >= 20`, or a `.mjs` file
-**File Extensions:** `.mjs`, `.cjs`
-
-## Overview
-
-Guidance for preferring current ECMAScript **runtime features** over legacy patterns and hand-rolled polyfills. It is availability-aware: each newer feature notes the runtime/polyfill it needs, so the recommendation never generates code the target can't run. Types are covered by `ct-typescript-conventions`; general code structure by `ct-code-style`.
-
-## Topics
-
-- **Dates → `Temporal`** — immutable, timezone-correct calendar/clock math (polyfill until baseline).
-- **Resource management → `using` / `await using`** — deterministic cleanup via `Symbol.dispose`/`asyncDispose`.
-- **Iterator helpers** — lazy `map`/`filter`/`take`, `Iterator.concat`, `Array.fromAsync`.
-- **Clone & group** — `structuredClone`, `Object.groupBy` / `Map.groupBy`.
-- **Async ergonomics** — `Promise.withResolvers`, `AbortSignal.timeout`/`any`, top-level await.
-- **Immutable array ops** — `at`, `findLast`, `toSorted`/`toReversed`/`with`.
-- **Errors** — `Error({ cause })`, `AggregateError`.
-- **ESM hygiene** — `import.meta.dirname` over `__dirname`, dynamic `import()`.
-
-See the [skill source](../../stacks/esnext/skills/ct-esnext-idioms/SKILL.md) for the full patterns, availability notes, and anti-patterns table.

package/docs/stacks/i18n-typesafe.md

@@ -1,141 +0,0 @@
-# Typesafe-i18n Patterns
-
-> Typesafe-i18n internationalization patterns for SolidJS.
-
-**Type:** Stack Skill (requires `i18n-typesafe` stack)
-**Source:** [`stacks/i18n-typesafe/skills/ct-i18n-typesafe/SKILL.md`](../stacks/i18n-typesafe/skills/ct-i18n-typesafe/SKILL.md)
-**Directory Mappings:** `src/locales/`, `src/i18n/`
-
-## Overview
-
-typesafe-i18n provides fully type-safe translations with autocompletion. Translation keys are checked at compile time -- missing or misspelled keys cause TypeScript errors.
-
-## Setup
-
-### Directory Structure
-
-```text
-src/i18n/
-  i18n-types.ts       # Auto-generated types
-  i18n-util.ts         # Auto-generated utilities
-  i18n-solid.tsx       # SolidJS adapter
-  en/index.ts          # Base locale (source of truth)
-  fr/index.ts          # French translations
-```
-
-### Configuration (`.typesafe-i18n.json`)
-
-```json
-{
-  "baseLocale": "en",
-  "adapter": "solid",
-  "outputPath": "src/i18n/{locale}/"
-}
-```
-
-### Run the Generator
-
-```bash
-npx typesafe-i18n    # Watches base locale and regenerates types
-```
-
-## Base Locale
-
-The base locale is the source of truth. All types are derived from it.
-
-```ts
-// src/i18n/en/index.ts
-const en = {
-  common: {
-    welcome: 'Welcome, {name:string}!',
-    itemCount: '{count:number} {{item|items}}',
-    save: 'Save',
-  },
-  auth: {
-    signIn: 'Sign in',
-    signOut: 'Sign out',
-  },
-} satisfies BaseTranslation;
-```
-
-## Adding Translations
-
-Other locales use the `Translation` type derived from the base locale. Missing keys or wrong parameter types cause compile errors.
-
-```ts
-// src/i18n/fr/index.ts
-const fr = {
-  common: {
-    welcome: 'Bienvenue, {name} !',
-    itemCount: '{count} {{article|articles}}',
-    save: 'Enregistrer',
-  },
-  auth: {
-    signIn: 'Se connecter',
-    signOut: 'Se deconnecter',
-  },
-} satisfies Translation;
-```
-
-## Usage in Components
-
-```tsx
-const { LL } = useI18nContext();
-
-return (
-  <div>
-    <h1>{LL().events.title()}</h1>
-    <span>{LL().events.attendees({ count: event.memberCount })}</span>
-  </div>
-);
-```
-
-### Provider Setup
-
-```tsx
-<I18nProvider locale="en">
-  <Router />
-</I18nProvider>
-```
-
-## Parameterized Translations
-
-| Syntax                   | Example                      | Description              |
-| ------------------------ | ---------------------------- | ------------------------ |
-| `{name:string}`          | `'Hello {name:string}'`      | Named string parameter   |
-| `{count:number}`         | `'{count:number} items'`     | Named number parameter   |
-| `{{singular\|plural}}`   | `'{count} {{item\|items}}'`  | Plural forms             |
-| `{0:string}`             | `'Click {0:string}'`         | Positional parameter     |
-
-## Namespace Organization
-
-Organize translations by feature/domain. Keep namespaces flat (one level deep):
-
-```ts
-const en = {
-  common: { ... },    // Global
-  auth: { ... },       // Authentication
-  events: { ... },     // Events feature
-  profile: { ... },    // User profile
-  settings: { ... },   // Settings
-  admin: { ... },      // Admin panel
-};
-```
-
-## Anti-patterns
-
-| Anti-pattern                   | Why it's wrong                                                                  |
-| ------------------------------ | ------------------------------------------------------------------------------- |
-| **Hardcoded strings**          | Every user-visible string must go through `LL()`.                               |
-| **Missing translations**       | `Translation` type catches these at compile time -- run `tsc --noEmit` in CI.   |
-| **Interpolating HTML**         | Do not embed HTML in translation strings. Use component composition.            |
-| **Dynamic key access**         | `LL()[dynamicKey]()` bypasses type safety. Use conditional rendering.           |
-| **Forgetting to load locale**  | Call `loadLocale()` before rendering.                                           |
-| **Over-splitting namespaces**  | Too many small namespaces add overhead. Group by feature, not component.        |
-
-## Best Practices Reference
-
-| Topic                                    | Guide                                                                           |
-| ---------------------------------------- | ------------------------------------------------------------------------------- |
-| `satisfies` pattern used in translations | [The satisfies Operator](../best-practices/typescript/satisfies-operator.md)    |
-| i18n provider and context pattern        | [Context & Global State](../best-practices/solidjs/context-and-global-state.md) |

package/docs/stacks/playwright-patterns.md

@@ -1,179 +0,0 @@
-# Playwright E2E Patterns
-
-> Playwright E2E testing with Page Objects, fixtures, auth, network mocking, and CI/CD.
-
-**Type:** Stack Skill (requires `playwright` stack)
-**Source:** [`stacks/playwright/skills/ct-playwright-patterns/SKILL.md`](../../stacks/playwright/skills/ct-playwright-patterns/SKILL.md)
-**Directory Mappings:** `e2e/`, `playwright.config.ts`
-**File Extensions:** `.spec.ts`
-
-## Overview
-
-E2E tests sit at the top of the testing pyramid. They exercise full user journeys in real browsers. Write fewer, make each one count.
-
-## Project Structure
-
-```
-e2e/
-  fixtures/          # Custom Playwright fixtures
-    index.ts         # Extended test with page objects
-  pages/             # Page Object classes
-  components/        # Component Object classes (reusable fragments)
-  specs/             # Test files organized by feature
-  helpers/           # Utilities (data factories, API helpers)
-  .auth/             # storageState files (gitignored)
-```
-
-## Page Object Model + Fixtures
-
-Combine Page Objects with custom fixtures. Tests receive pre-built page objects:
-
-```typescript
-// e2e/pages/LoginPage.ts
-export class LoginPage {
-  private readonly emailInput: Locator;
-  private readonly submitButton: Locator;
-
-  constructor(private readonly page: Page) {
-    this.emailInput = page.getByLabel("Email");
-    this.submitButton = page.getByRole("button", { name: "Sign in" });
-  }
-
-  async goto() { await this.page.goto("/login"); }
-  async login(email: string, password: string) {
-    await this.emailInput.fill(email);
-    await this.submitButton.click();
-  }
-}
-
-// e2e/fixtures/index.ts
-export const test = base.extend<Fixtures>({
-  loginPage: async ({ page }, use) => { await use(new LoginPage(page)); },
-});
-```
-
-Fixtures are lazy (created on demand) and composable (can depend on each other).
-
-## Authentication
-
-Use project dependencies with `storageState` to authenticate once and reuse:
-
-```typescript
-// e2e/auth.setup.ts
-setup("authenticate", async ({ page }) => {
-  await page.goto("/login");
-  await page.getByLabel("Email").fill("test@example.com");
-  await page.getByRole("button", { name: "Sign in" }).click();
-  await page.waitForURL("/dashboard");
-  await page.context().storageState({ path: "e2e/.auth/user.json" });
-});
-```
-
-Config: `dependencies: ["setup"]` + `storageState: "e2e/.auth/user.json"`. Add `e2e/.auth/` to `.gitignore`.
-
-For multi-role testing, create separate setup files per role.
-
-## Locator Priority
-
-1. `getByRole()` -- accessibility semantics, survives refactors
-2. `getByLabel()` -- form elements
-3. `getByPlaceholder()` -- input hints
-4. `getByText()` -- visible text
-5. `getByTestId()` -- stable but less semantic
-6. CSS/XPath -- **avoid**
-
-## Web-First Assertions
-
-Always use auto-retrying assertions:
-
-```typescript
-// GOOD
-await expect(page.getByRole("alert")).toBeVisible();
-await expect(page).toHaveURL("/dashboard");
-
-// BAD -- checks once, no retry
-expect(await page.getByRole("alert").isVisible()).toBeTruthy();
-```
-
-Key assertions: `toBeVisible()`, `toBeEnabled()`, `toHaveText()`, `toHaveURL()`, `toHaveCount()`, `toHaveScreenshot()`, `toMatchAriaSnapshot()`.
-
-## Network Mocking
-
-```typescript
-// Mock API
-await page.route("**/api/users", async (route) => {
-  await route.fulfill({ status: 200, contentType: "application/json", body: JSON.stringify([{ name: "Alice" }]) });
-});
-
-// Block analytics
-await page.route("**/analytics/**", (route) => route.abort());
-```
-
-Mock ~80% of API calls for speed; keep ~20% hitting real endpoints. Always call `route.continue()`, `route.fulfill()`, or `route.abort()`. Use `page.unrouteAll()` in cleanup.
-
-## WebSocket Mocking (v1.53+)
-
-```typescript
-await page.routeWebSocket("wss://example.com/ws", (ws) => {
-  ws.onMessage((message) => { ws.send("mocked response"); });
-});
-```
-
-## Accessibility Testing
-
-```typescript
-import AxeBuilder from "@axe-core/playwright";
-
-test("WCAG 2.1 AA", async ({ page }) => {
-  await page.goto("/");
-  const results = await new AxeBuilder({ page }).withTags(["wcag2a", "wcag2aa", "wcag21aa"]).analyze();
-  expect(results.violations).toEqual([]);
-});
-```
-
-Aria snapshots (v1.52+): `await expect(nav).toMatchAriaSnapshot(...)`.
-
-## Parallelization
-
-- File-level parallel (default) -- start here
-- In-file: `test.describe.configure({ mode: "parallel" })`
-- Full: `fullyParallel: true` in config
-
-Each worker gets its own `BrowserContext` (isolated cookies/storage). Use `mode: "serial"` sparingly.
-
-## CI/CD
-
-- Use official Playwright Docker image (`mcr.microsoft.com/playwright:v1.58.0-noble`)
-- Upload reports + traces as artifacts
-- Use `--shard` for suites exceeding 5 minutes
-- `retries: process.env.CI ? 2 : 0`
-- Traces: `trace: "on-first-retry"`
-
-## Flaky Test Prevention
-
-| Cause                  | Fix                                              |
-| ---------------------- | ------------------------------------------------ |
-| `waitForTimeout()`     | Web-first assertions or `waitForResponse`        |
-| Brittle selectors      | `getByRole`, `getByLabel`, `getByTestId`         |
-| Shared state           | Fresh `BrowserContext` per test                   |
-| External API flakiness | Mock with `page.route()`                         |
-| Animation timing       | `--force-prefers-reduced-motion`                 |
-| Missing `await`        | #1 source of false-passing tests. Lint for it.   |
-
-## Anti-Patterns
-
-1. **Using `waitForTimeout()`** -- Use web-first assertions or explicit wait conditions.
-2. **Fragile CSS/XPath selectors** -- Use role-based and semantic locators.
-3. **Using `{ force: true }`** -- Masks real actionability problems.
-4. **Missing `await` on assertions** -- #1 source of false-passing tests.
-5. **Tests without assertions** -- A test that clicks without asserting is just a script.
-6. **Using Playwright for unit tests** -- Use Vitest for pure logic.
-7. **Committing raw codegen output** -- Always refactor into Page Objects.
-8. **Not cleaning up route handlers** -- Use `page.unrouteAll()`.
-
-## See Also
-
-- [ct-testing-patterns](../skills/testing-patterns.md) -- Framework-agnostic TDD practices
-- [Playwright E2E Best Practices](../best-practices/testing/playwright-e2e.md) -- SolidJS-specific E2E patterns
-- [ct-vite-vitest-patterns](vite-vitest-patterns.md) -- Unit testing layer
-- [ct-storybook-patterns](storybook-patterns.md) -- Interaction testing layer