code-ai-installer 1.3.0 → 1.4.0

package/.agents/deployment_ci_plan/SKILL.md

@@ -1,410 +0,0 @@
----
-name: deployment_ci_plan
-description: План деплоя и CI — окружения, конфиги, секреты, миграции, проверки в CI (tests/lint/security), стратегия релизов и откатов.
----
-
-# Skill: Deployment & CI Plan
-
-Воспроизводимый build → test → deploy процесс.
-
-**Разделы:**
-1. [Environments](#1-environments)
-2. [Config & Secrets](#2-config--secrets)
-3. [Docker Setup](#3-docker)
-4. [CI Pipeline](#4-ci-pipeline)
-5. [DB Migrations](#5-migrations)
-6. [Release Strategy](#6-release)
-7. [Rollback Plan](#7-rollback)
-8. [Smoke Tests](#8-smoke)
-9. [Пример: Smart Cart Rescue](#9-пример)
-10. [Output Template](#10-output)
-
----
-
-## 1. Environments
-
-| Env | Purpose | URL | Deploy trigger | Infra |
-|-----|---------|-----|---------------|-------|
-| **local** | Development | `https://localhost:5173` | Manual (`docker compose up`) | Docker Compose |
-| **staging** | Pre-release testing | `https://staging.example.com` | Push to `staging` branch | Docker Compose / K8s |
-| **production** | Live users | `https://app.example.com` | Tag `v*` or manual approval | Docker Compose / K8s |
-
-### Environment parity rule
-
-> Dev, staging, and production use **the same Docker images**. Only env vars differ.
-
----
-
-## 2. Config & Secrets
-
-### Env vars registry
-
-| Variable | Required | Default | Env | Description |
-|----------|:--------:|---------|-----|-------------|
-| `NODE_ENV` | ✅ | — | all | `development` / `production` |
-| `PORT` | ⬜ | 3000 | all | API server port |
-| `MONGODB_URI` | ✅ | — | all | MongoDB connection string |
-| `VITE_API_URL` | ✅ | — | FE | API base URL for frontend |
-| `WIX_APP_ID` | ✅ | — | all | Wix App ID |
-| `WIX_APP_SECRET` | ✅ | — | BE | Wix App Secret (sensitive!) |
-| `WIX_REFRESH_TOKEN` | ✅ | — | BE | Wix OAuth refresh token |
-| `LOG_LEVEL` | ⬜ | info | BE | pino log level |
-
-### Secrets policy
-
-| Rule | How |
-|------|-----|
-| **Storage** | `.env` local, Docker secrets / K8s secrets / Vault for prod |
-| **Never in code** | grep check in CI |
-| **Never in logs** | pino redact config |
-| **Never in Docker image** | ARG for build, ENV for runtime only |
-| **Rotation** | Document rotation procedure per secret |
-| **.env.example** | Committed, no real values, all vars listed |
-
----
-
-## 3. Docker Setup
-
-### Dockerfile (multi-stage, Node.js)
-
-```dockerfile
-# ── Build stage ──
-FROM node:20-alpine AS builder
-WORKDIR /app
-COPY package.json package-lock.json ./
-RUN npm ci --ignore-scripts
-COPY . .
-RUN npm run build
-
-# ── Runtime stage ──
-FROM node:20-alpine AS runtime
-WORKDIR /app
-ENV NODE_ENV=production
-RUN addgroup -g 1001 appgroup && \
-    adduser -u 1001 -G appgroup -s /bin/sh -D appuser
-COPY --from=builder --chown=appuser:appgroup /app/dist ./dist
-COPY --from=builder --chown=appuser:appgroup /app/node_modules ./node_modules
-COPY --from=builder --chown=appuser:appgroup /app/package.json ./
-USER appuser
-EXPOSE 3000
-HEALTHCHECK --interval=30s --timeout=3s CMD wget -qO- http://localhost:3000/health/live || exit 1
-CMD ["node", "dist/server.js"]
-```
-
-### Docker Compose (development)
-
-```yaml
-version: "3.9"
-services:
-  api:
-    build:
-      context: ./api
-      dockerfile: Dockerfile
-    ports:
-      - "3000:3000"
-    env_file: ./api/.env
-    depends_on:
-      mongo:
-        condition: service_healthy
-    restart: unless-stopped
-
-  dashboard:
-    build:
-      context: ./dashboard
-      dockerfile: Dockerfile
-    ports:
-      - "3001:3001"
-    env_file: ./dashboard/.env
-    restart: unless-stopped
-
-  mongo:
-    image: mongo:7
-    ports:
-      - "27017:27017"
-    volumes:
-      - mongo_data:/data/db
-    healthcheck:
-      test: mongosh --eval "db.adminCommand('ping')"
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-  gateway:
-    image: caddy:2-alpine
-    ports:
-      - "5173:5173"
-    volumes:
-      - ./Caddyfile:/etc/caddy/Caddyfile:ro
-    depends_on:
-      - api
-      - dashboard
-
-volumes:
-  mongo_data:
-```
-
-### Docker rules
-
-| Rule | Description |
-|------|-------------|
-| **Multi-stage** | Builder → Runtime (smaller image, no dev deps) |
-| **Non-root** | `USER appuser` (never root in runtime) |
-| **Lockfile** | `npm ci` (deterministic installs) |
-| **HEALTHCHECK** | Built into Dockerfile or docker-compose |
-| **Cache-friendly** | Copy `package*.json` before source code |
-| **No secrets** | Never `COPY .env`, use `env_file` in compose |
-| **.dockerignore** | `node_modules`, `.env`, `.git`, `*.log` |
-
----
-
-## 4. CI Pipeline
-
-### GitHub Actions example
-
-```yaml
-name: CI
-on:
-  push:
-    branches: [main, staging]
-  pull_request:
-    branches: [main]
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with: { node-version: 20 }
-      - run: npm ci
-      - run: npx biome check .
-
-  test:
-    runs-on: ubuntu-latest
-    needs: lint
-    services:
-      mongo:
-        image: mongo:7
-        ports: ["27017:27017"]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with: { node-version: 20 }
-      - run: npm ci
-      - run: npm test
-        env:
-          MONGODB_URI: mongodb://localhost:27017/test
-
-  security:
-    runs-on: ubuntu-latest
-    needs: lint
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with: { node-version: 20 }
-      - run: npm ci
-      - run: npm audit --audit-level=high
-      - run: npx secretlint "**/*"
-
-  build:
-    runs-on: ubuntu-latest
-    needs: [test, security]
-    steps:
-      - uses: actions/checkout@v4
-      - run: docker build -t app-api ./api
-      - run: docker build -t app-dashboard ./dashboard
-```
-
-### Pipeline stages
-
-```
-┌────────┐    ┌──────┐    ┌──────────┐    ┌───────┐    ┌────────┐
-│  Lint  │───▸│ Test │───▸│ Security │───▸│ Build │───▸│ Deploy │
-└────────┘    └──────┘    └──────────┘    └───────┘    └────────┘
- biome check   vitest      npm audit        docker      compose
-                           secretlint       build       up -d
-```
-
-### CI rules
-
-| Rule | Description |
-|------|-------------|
-| **Block merge** | Failed CI = no merge |
-| **Parallelism** | lint ∥ security, then test, then build |
-| **Secrets** | GitHub Secrets / CI vars (never hardcoded) |
-| **Deps cache** | `actions/cache` for node_modules |
-| **Coverage** | Fail if < threshold (e.g. 70%) |
-
----
-
-## 5. Migrations
-
-### Strategy (MongoDB + migrate-mongo)
-
-```bash
-# Create migration
-npx migrate-mongo create add-templateId-to-settings
-
-# Apply pending migrations
-npx migrate-mongo up
-
-# Rollback last migration
-npx migrate-mongo down
-
-# Check status
-npx migrate-mongo status
-```
-
-### Rules
-
-| Rule | Description |
-|------|-------------|
-| **Run before deploy** | Migrations applied before new code starts |
-| **Forward-compatible** | New code must work with old schema during rolling update |
-| **Reversible** | Every `up()` has matching `down()` |
-| **Tested** | Run against test DB in CI |
-| **Idempotent** | Safe to run multiple times |
-
----
-
-## 6. Release Strategy
-
-### Versioning
-
-```
-SemVer: MAJOR.MINOR.PATCH
-- MAJOR: breaking API changes
-- MINOR: new features (backward compatible)
-- PATCH: bug fixes
-
-Git tags: v1.0.0, v1.1.0, v1.1.1
-Docker tags: app-api:v1.0.0, app-api:latest
-```
-
-### Release flow
-
-```
-feature branch → PR → main (CI green) → tag vX.Y.Z → deploy
-```
-
-### Feature flags (if needed)
-
-| Flag | Purpose | Default | How to toggle |
-|------|---------|---------|---------------|
-| `ENABLE_NEW_TEMPLATE` | Show new popup template | false | Env var |
-| `ENABLE_ANALYTICS` | Send analytics events | false | Env var |
-
----
-
-## 7. Rollback Plan
-
-### Procedure
-
-```markdown
-## Rollback Checklist
-
-1. ☐ **Identify issue** — what broke? Check logs, alerts, user reports
-2. ☐ **Communicate** — inform team that rollback is starting
-3. ☐ **Rollback code:**
-   - Docker: `docker compose up -d --build` with previous image tag
-   - K8s: `kubectl rollout undo deployment/<name>`
-4. ☐ **Rollback DB (if migration applied):**
-   - `npx migrate-mongo down`
-   - Verify data integrity
-5. ☐ **Verify** — run smoke tests, check health endpoints
-6. ☐ **Post-mortem** — document what went wrong
-```
-
-### Time targets
-
-| Action | Target |
-|--------|--------|
-| Detection | < 5 min (alerts) |
-| Decision to rollback | < 10 min |
-| Rollback execution | < 5 min |
-| Verification | < 5 min |
-| **Total MTTR** | **< 25 min** |
-
----
-
-## 8. Smoke Tests
-
-### Post-deploy smoke test checklist
-
-| # | Test | How | Expected |
-|---|------|-----|----------|
-| 1 | Health check | `GET /health/live` | 200 OK |
-| 2 | Ready check | `GET /health/ready` | 200 OK (DB connected) |
-| 3 | Widget endpoint | `GET /api/v1/widget/<testId>` | 200 + valid payload |
-| 4 | Dashboard loads | Open dashboard URL | Page renders |
-| 5 | Settings CRUD | PUT, then GET settings | Values persisted |
-| 6 | Wix embed | Check embedded script on test site | Script active |
-
----
-
-## 9. Пример: Smart Cart Rescue
-
-```markdown
-# Deployment & CI Plan: Smart Cart Rescue
-
-## Environments
-- local: Docker Compose + Caddy (https://localhost:5173)
-- production: Docker Compose + Cloudflare Tunnel
-
-## CI: GitHub Actions (lint → test → security → build)
-## Migrations: migrate-mongo (run before deploy)
-## Release: SemVer tags, manual production deploy
-## Rollback: Previous Docker image + migrate-mongo down
-```
-
----
-
-## 10. Output Template
-
-```markdown
-# Deployment & CI Plan: <project-name>
-
-**Date:** YYYY-MM-DD
-
-## Environments
-<section 1 table>
-
-## Config & Secrets
-<section 2 registry + policy>
-
-## Docker Setup
-<Dockerfile + docker-compose.yml>
-
-## CI Pipeline
-<pipeline stages + YAML config>
-
-## Migrations
-<strategy + commands>
-
-## Release Strategy
-<versioning + flow>
-
-## Rollback Plan
-<procedure + time targets>
-
-## Smoke Tests
-<post-deploy checklist>
-```
-
----
-
-## DoD (Definition of Done)
-
-- ☐ CI is green (all stages pass)
-- ☐ Migrations applied and tested
-- ☐ Smoke tests passed after deploy
-- ☐ Rollback procedure documented and executable
-- ☐ No secrets in code/images/logs
-
----
-
-## См. также
-- `$docker_kubernetes_architecture` — detailed Docker/K8s architecture
-- `$k8s_manifests_conventions` — K8s manifest standards
-- `$observability_plan` — logging/metrics/alerts
-- `$security_baseline_dev` — secrets management

package/.agents/design_intake/SKILL.md

@@ -1,225 +0,0 @@
----
-name: design_intake
-description: Найти и проанализировать предоставленные дизайн-материалы (файлы/ссылки), определить "источник правды" по UI и извлечь проверяемые правила (экраны, компоненты, токены, состояния).
----
-
-# Skill: Design Intake
-
-Зафиксировать дизайн-артефакты как Source of Truth и извлечь проверяемые правила.
-
-**Разделы:**
-1. [Workflow](#1-workflow)
-2. [Source Discovery](#2-discovery)
-3. [Extraction Checklist](#3-extraction)
-4. [Design Rules Examples](#4-rules)
-5. [Пример: Smart Cart Rescue](#5-пример)
-6. [Output Template](#6-output)
-
----
-
-## 1. Workflow
-
-```
-1. Определи источники
-   ├── Файлы в репозитории (design/, docs/, assets/)
-   ├── Ссылки (Figma, Stitch, Zeplin)
-   └── HTML References (popup_description/*.html)
-
-2. Классифицируй каждый источник
-   ├── Source of Truth (мастер)
-   ├── Reference (вспомогательный)
-   └── Outdated (пометить, не использовать)
-
-3. Для каждого SoT → extract spec (section 3)
-
-4. Сформируй Design Reference Map (screen → file)
-
-5. Извлеки Design Rules (5-20 проверяемых правил)
-
-6. Validate: все экраны из PRD покрыты?
-```
-
----
-
-## 2. Source Discovery
-
-### Где искать
-
-```bash
-# Папки
-find_by_name: Pattern="design" Type=directory
-find_by_name: Pattern="docs" Type=directory
-find_by_name: Pattern="assets" Type=directory
-find_by_name: Pattern="ui" Type=directory
-find_by_name: Pattern="popup_description" Type=directory
-
-# Файлы
-find_by_name: Extensions=["fig","pdf","png","jpg","svg","sketch"]
-find_by_name: Pattern="*.html" SearchDirectory="<design_folder>"
-
-# Ссылки в документации
-grep_search: Query="figma.com" Includes=["*.md"]
-grep_search: Query="stitch" Includes=["*.md"]
-grep_search: Query="design" Includes=["README.md"]
-```
-
-### Source classification
-
-| Type | Marker | Priority | Example |
-|------|--------|:--------:|---------|
-| **Source of Truth** | 🟢 SoT | Highest | Figma page "Dashboard v2" |
-| **Reference** | 🟡 Ref | Medium | Old mockups, inspiration |
-| **Outdated** | 🔴 Outdated | Ignore | Previous iteration designs |
-| **Generated** | 🔵 Gen | Verify | Stitch-generated screens |
-
----
-
-## 3. Extraction Checklist
-
-For each Source of Truth, extract:
-
-| # | What to extract | How | Status |
-|---|----------------|-----|--------|
-| DI-01 | **Screen list** with names & purpose | List all distinct screens/pages | ☐ |
-| DI-02 | **Layout structure** per screen | Identify columns, sections, hierarchy | ☐ |
-| DI-03 | **Components & variants** | Button types, input styles, cards | ☐ |
-| DI-04 | **Color palette** | Primary, secondary, accent, states (success/error/warn) | ☐ |
-| DI-05 | **Typography** | Font families, sizes, weights, hierarchy | ☐ |
-| DI-06 | **Spacing & sizing** | Padding, margins, gap patterns | ☐ |
-| DI-07 | **States** | Loading, empty, error, success, disabled, hover | ☐ |
-| DI-08 | **Content / copy** | Button labels, titles, error messages, placeholder text | ☐ |
-| DI-09 | **Icons / imagery** | Icon set (Material, custom), illustrations | ☐ |
-| DI-10 | **Responsive rules** | Breakpoints, layout changes, hidden elements | ☐ |
-
----
-
-## 4. Design Rules Examples
-
-### Типичные проверяемые правила
-
-| # | Rule | Checkable? | Example |
-|---|------|:----------:|---------|
-| DR-01 | Primary CTA is always blue (#116DFF) filled button | ✅ | "Save" button |
-| DR-02 | Destructive actions are red (#D32F2F) + confirmation modal | ✅ | "Delete" button |
-| DR-03 | Form errors shown inline below field, red text | ✅ | Validation |
-| DR-04 | Empty state has illustration + text + CTA | ✅ | Coupons list |
-| DR-05 | Loading shows skeleton, not spinner (for initial load) | ✅ | Settings page |
-| DR-06 | Config panel = left 60%, Live Preview = right 40% | ✅ | Dashboard layout |
-| DR-07 | Tabs use underline active state, not background fill | ✅ | Settings tabs |
-| DR-08 | Toast appears bottom-right, auto-dismiss 3s for success | ✅ | Save settings |
-| DR-09 | Modal backdrop is dark 50% opacity | ✅ | Confirm dialog |
-| DR-10 | Font: headings = 600 weight, body = 400 | ✅ | Typography |
-| DR-11 | Border radius: buttons 8px, cards 12px, inputs 4px | ✅ | Components |
-| DR-12 | Color picker shows 4 tokens: bg, text, accent, overlay | ✅ | Design tab |
-
-### Rule format
-
-```markdown
-### DR-XX: <Short name>
-
-**Source:** <File/Frame/Page> in <SoT>
-**Scope:** <Where it applies>
-**Rule:** <Concrete, checkable statement>
-**Verification:** <How to check — visual / code / grep>
-```
-
----
-
-## 5. Пример: Smart Cart Rescue
-
-```markdown
-# Design Intake: Smart Cart Rescue Dashboard
-
-## Sources
-| # | Source | Type | Location | Format |
-|---|--------|------|----------|--------|
-| 1 | Template HTML refs | 🟢 SoT | `popup_description/` | HTML files |
-| 2 | Glassmorphism spec | 🟢 SoT | `popup_description/glassmorphism_spec.md` | Markdown |
-| 3 | Neo-Brutalism spec | 🟢 SoT | `popup_description/neo_brutalism_spec.md` | Markdown |
-| 4 | Stitch screens | 🔵 Gen | Stitch project "SCR Dashboard" | PNG/Stitch |
-| 5 | WDS documentation | 🟡 Ref | `@wix/design-system` docs | Web |
-
-## Source of Truth
-- **Widget design:** Template spec .md files + HTML references
-- **Dashboard UI:** WDS components + UX Spec
-- **Config panel:** UX Spec (no design file — follows WDS patterns)
-
-## Design Reference Map
-| Screen | SoT Source | Frame/File |
-|--------|-----------|-----------|
-| Settings panel | UX Spec + WDS | — |
-| Widget: Glassmorphism | glassmorphism_spec.md | `popup7.html` |
-| Widget: Neo-Brutalism | neo_brutalism_spec.md | `popup9.html` |
-| Coupons list | WDS Table pattern | — |
-
-## Design Rules (extracted)
-- DR-01: Glassmorphism popup uses 4-color token system (bg, text, accent, overlay)
-- DR-02: Timer digits use monospace font
-- DR-03: CTA button text from settings, icon optional (Material Symbols)
-- DR-04: Neo-Brutalism uses hard shadows (4px 4px 0 #000)
-- DR-05: Config panel: 2 columns, left = form, right = live preview
-```
-
----
-
-## 6. Output Template
-
-```markdown
-# Design Intake Report
-
-**Date:** YYYY-MM-DD
-**Author:** UX/UI Designer Agent
-**PRD:** <reference>
-
-## Sources Inventory
-| # | Source | Type | Location | Format | Status |
-|---|--------|:----:|----------|--------|:------:|
-| 1 | ... | 🟢 SoT | ... | ... | ✅ Analyzed |
-| 2 | ... | 🟡 Ref | ... | ... | ✅ Reviewed |
-| 3 | ... | 🔴 Outdated | ... | ... | ⏭️ Skipped |
-
-## Source of Truth
-| Domain | SoT | Notes |
-|--------|-----|-------|
-| Widget UI | Template specs + HTML refs | Per-template |
-| Dashboard | WDS + UX Spec | No Figma |
-| Config Panel | UX Spec | WDS components |
-
-## Extraction Results
-| # | Check | Status |
-|---|-------|--------|
-| DI-01 | Screen list | ✅ X screens |
-| DI-02 | Layout structure | ✅ |
-| DI-03 | Components & variants | ✅ X components |
-| DI-04 | Color palette | ✅ X tokens |
-| ... | ... | ... |
-
-## Design Reference Map
-| Screen | Source | File/Frame | SoT |
-|--------|--------|-----------|:---:|
-| ... | ... | ... | 🟢 |
-
-## Design Rules
-<DR-01..DR-XX per section 4 format>
-
-## Coverage Check
-- [ ] All PRD screens have a design source
-- [ ] All design screens are in UX Spec screen list
-- [ ] All components are in UI Inventory
-
-## Gaps / Open Questions
-| # | Gap | Impact | Resolution |
-|---|-----|--------|-----------|
-| 1 | No design for error states | P1 | Apply standard error pattern |
-
-## Next Step
-→ Proceed to $ux_spec / $design_parity_review
-```
-
----
-
-## См. также
-- `$ux_spec` — UX Spec (uses intake output)
-- `$design_parity_review` — compare design with implementation
-- `$ui_inventory` — component inventory
-- `$google_stitch` — generate screens from text