codeforge-dev 1.12.0 → 1.14.1

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/api-design/SKILL.md

@@ -1,12 +1,15 @@
 ---
 name: api-design
 description: >-
-  This skill should be used when the user asks to "design an API",
-  "design REST endpoints", "plan API versioning", "choose pagination strategy",
-  "design error responses", "API conventions", "endpoint design",
-  "create API documentation", or discusses REST API design, HTTP method
-  semantics, status code selection, authentication patterns, or rate limiting.
-version: 0.1.0
+  Provides REST API design guidance covering resource naming, pagination
+  strategies, error responses, versioning, and authentication patterns. USE
+  WHEN the user asks to "design an API", "design REST endpoints", "plan API
+  versioning", "choose a pagination strategy", "design error responses",
+  "set up rate limiting", "create OpenAPI documentation", or works with REST
+  conventions, HTTP method semantics, cursor pagination, RFC 7807, JWT auth,
+  status codes. DO NOT USE for API implementation code — use the fastapi skill
+  for building endpoints.
+version: 0.2.0
 ---
 
 # API Design

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/ast-grep-patterns/SKILL.md

@@ -1,12 +1,13 @@
 ---
 name: ast-grep-patterns
 description: >-
-  This skill should be used when the user asks to "use ast-grep",
-  "structural search", "syntax-aware search", "find code patterns",
-  "search with ast-grep", "use tree-sitter", "find function calls structurally",
-  or discusses ast-grep patterns, structural code search, meta-variables,
-  tree-sitter parsing, or syntax-aware code matching.
-version: 0.1.0
+  Teaches syntax-aware code search using ast-grep (sg) and tree-sitter with
+  meta-variable patterns for functions, imports, and classes. USE WHEN the
+  user asks to "use ast-grep", "structural search", "find code patterns",
+  "search with ast-grep", "use tree-sitter", "syntax-aware search", or works
+  with sg run, $$$ARGS meta-variables, tree-sitter tags. DO NOT USE for
+  simple text searches where Grep suffices.
+version: 0.2.0
 ---
 
 # AST-Grep Patterns

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/claude-agent-sdk/SKILL.md

@@ -1,14 +1,14 @@
 ---
 name: claude-agent-sdk
 description: >-
-  This skill should be used when the user asks to "build an agent with the Claude Agent SDK",
-  "use the Claude Agent SDK", "create an agent with TypeScript SDK", "configure SDK permissions",
-  "use canUseTool callback", "create custom MCP tools with createSdkMcpServer",
-  "manage SDK sessions", "define subagents", "configure SDK hooks",
-  "set up SDK sandbox", "stream SDK messages", "use sdk query function",
-  or discusses Claude Agent SDK TypeScript integration, SDK permission modes,
-  SDK message types, agent definitions, or programmatic Claude agent orchestration.
-version: 0.1.0
+  Provides Claude Agent SDK patterns in TypeScript covering query function,
+  permissions, MCP tools, subagents, and hooks. USE WHEN the user asks to
+  "build an agent with the Claude Agent SDK", "use canUseTool callback",
+  "create MCP tools with createSdkMcpServer", "define subagents", "configure
+  SDK hooks", "stream SDK messages", or works with @anthropic-ai/claude-agent-sdk,
+  query(), PermissionResult, AgentDefinition. DO NOT USE for PydanticAI Python
+  agents or Claude Code CLI headless mode.
+version: 0.2.0
 ---
 
 # Claude Agent SDK (TypeScript)

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/claude-code-headless/SKILL.md

@@ -1,15 +1,14 @@
 ---
 name: claude-code-headless
 description: >-
-  This skill should be used when the user asks to "run Claude Code in headless mode",
-  "use claude -p for automation", "parse stream-json output from Claude Code",
-  "use the Claude Agent SDK", "run Claude Code in CI/CD",
-  "configure MCP servers for headless Claude",
-  "set up Claude Code permissions for scripts",
-  "track Claude Code costs programmatically", or discusses Claude Code
-  print mode, non-interactive pipelines, SDK integration in TypeScript or Python,
-  structured output with json-schema, or session management for automation.
-version: 0.1.0
+  Guides non-interactive Claude Code usage via the -p flag, stream-json output
+  parsing, and CI/CD pipeline integration. USE WHEN the user asks to "run
+  Claude Code in headless mode", "use claude -p for automation", "parse
+  stream-json output", "run Claude Code in CI/CD", "track costs
+  programmatically", "set up permissions for scripts", or works with
+  --output-format stream-json, --permission-mode, --json-schema, --resume.
+  DO NOT USE for the TypeScript SDK API — use claude-agent-sdk instead.
+version: 0.2.0
 ---
 
 # Claude Code Headless

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/debugging/SKILL.md

@@ -1,13 +1,17 @@
 ---
 name: debugging
 description: >-
-  This skill should be used when the user asks to "debug logs", "check logs",
-  "find error in logs", "read docker logs", "investigate failure",
-  "check container logs", "analyze error output", "find what went wrong",
-  "why did this crash", "check what happened", "diagnose the issue",
-  "look at the logs", or discusses log analysis, container debugging,
-  error investigation, crash diagnosis, or service failure troubleshooting.
-version: 0.1.0
+  Guides systematic log analysis and error diagnosis across Docker, systemd,
+  and application environments using forensic investigation methodology.
+  USE WHEN the user asks to "debug logs", "check container logs",
+  "why did this crash", "investigate failure", "find error in logs",
+  "read docker logs", "diagnose the issue", or "analyze error output",
+  or works with Docker exit codes, Python tracebacks, ECONNREFUSED,
+  OOMKilled, or journalctl. DO NOT USE for performance profiling,
+  security auditing, or dependency vulnerability scanning.
+version: 0.2.0
+allowed-tools: Bash, Read, Glob, Grep
+argument-hint: "[service or log-path]"
 ---
 
 # Debugging & Log Analysis

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/dependency-management/SKILL.md

@@ -1,12 +1,16 @@
 ---
 name: dependency-management
 description: >-
-  This skill should be used when the user asks to "check dependencies",
-  "audit dependencies", "find outdated packages", "check dependency health",
-  "scan for vulnerabilities", "find unused dependencies", "license check",
-  "npm audit", "pip audit", "cargo audit", or discusses dependency analysis,
-  supply chain security, package version gaps, or license compliance.
-version: 0.1.0
+  Provides a five-phase dependency health analysis covering outdated packages,
+  security vulnerabilities, unused deps, version conflicts, and license
+  compliance across npm, pip, cargo, and Go modules. USE WHEN the user asks
+  to "audit dependencies", "find outdated packages", "find unused
+  dependencies", "check dependency health", "license check", "npm audit",
+  "pip-audit", or "cargo audit", or works with supply chain security, CVSS
+  scores, or SPDX identifiers. DO NOT USE for general security code review
+  or application-level vulnerability scanning.
+version: 0.2.0
+allowed-tools: Bash, Read, Glob, Grep
 ---
 
 # Dependency Management

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/docker/SKILL.md

@@ -1,14 +1,14 @@
 ---
 name: docker
 description: >-
-  This skill should be used when the user asks to "write a Dockerfile",
-  "set up Docker Compose", "create a multi-stage Docker build",
-  "add health checks to Docker Compose", "use Docker Compose watch for development",
-  "configure Docker networking", "optimize Docker image size",
-  "add secrets to Docker Compose", or discusses Dockerfile best practices,
-  Compose service orchestration, container networking, volume management,
-  build caching, resource limits, or development workflows with containers.
-version: 0.1.0
+  Guides Dockerfile authoring and Docker Compose orchestration with multi-stage
+  builds, health checks, and dev watch mode. USE WHEN the user asks to "write
+  a Dockerfile", "set up Docker Compose", "create a multi-stage build", "add
+  health checks", "use Docker Compose watch", "optimize Docker image size",
+  or works with compose.yaml, docker compose, BuildKit, Compose profiles.
+  DO NOT USE for programmatic container management from Python — use
+  docker-py instead.
+version: 0.2.0
 ---
 
 # Docker & Docker Compose

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/docker-py/SKILL.md

@@ -1,13 +1,15 @@
 ---
 name: docker-py
 description: >-
-  This skill should be used when the user asks to "manage Docker containers from Python",
-  "create containers programmatically", "stream Docker container logs",
-  "execute commands in a running container", "manage Docker volumes from code",
-  "build images with the Docker SDK", "use docker-py for container lifecycle",
-  "monitor container health from Python", or discusses docker-py,
-  aiodocker, programmatic container management, or Docker Engine API.
-version: 0.1.0
+  Provides patterns for programmatic Docker container management using the
+  Docker SDK for Python and aiodocker. USE WHEN the user asks to "manage Docker
+  containers from Python", "create containers programmatically", "stream
+  container logs", "execute commands in a running container", "build images
+  with docker-py", "monitor container health from Python", or works with
+  docker-py, aiodocker, DockerClient, Docker Engine API, container lifecycle.
+  DO NOT USE for writing Dockerfiles or Docker Compose files — use the docker
+  skill instead.
+version: 0.2.0
 ---
 
 # Docker SDK for Python

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/documentation-patterns/SKILL.md

@@ -1,12 +1,13 @@
 ---
 name: documentation-patterns
 description: >-
-  This skill should be used when the user asks to "write a README",
-  "write documentation", "add docstrings", "add JSDoc", "document the API",
-  "create architecture docs", "documentation template", "update the docs",
-  or discusses docstring formats, README structure, API documentation,
-  inline comments, or technical writing patterns.
-version: 0.1.0
+  Guides documentation authoring including README structure, docstring formats,
+  API references, and architecture docs. USE WHEN the user asks to "write a
+  README", "add docstrings", "add JSDoc", "document the API", "create
+  architecture docs", "write documentation", "update the docs", or works with
+  Google-style docstrings, Sphinx, rustdoc, TSDoc, OpenAPI annotations.
+  DO NOT USE for writing code, fixing bugs, or generating changelogs.
+version: 0.2.0
 ---
 
 # Documentation Patterns

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/fastapi/SKILL.md

@@ -1,14 +1,15 @@
 ---
 name: fastapi
 description: >-
-  This skill should be used when the user asks to "build a FastAPI app",
-  "create a REST API with FastAPI", "add SSE streaming to FastAPI",
-  "use dependency injection in FastAPI", "define Pydantic models for an API",
-  "stream LLM responses with FastAPI", "add middleware to FastAPI",
-  "handle background tasks in FastAPI", or discusses FastAPI routing,
-  Pydantic v2 models, dependency injection, server-sent events,
-  or ASGI middleware.
-version: 0.1.0
+  Teaches modern FastAPI development including REST APIs, Pydantic v2 models,
+  SSE streaming, and ASGI middleware patterns. USE WHEN the user asks to "build
+  a FastAPI app", "create a REST API with FastAPI", "add SSE streaming", "use
+  dependency injection in FastAPI", "define Pydantic models", "stream LLM
+  responses", "add middleware to FastAPI", or works with FastAPI routing,
+  Pydantic v2, sse-starlette, EventSourceResponse, APIRouter, BackgroundTasks.
+  DO NOT USE for general Python web frameworks like Flask or Django, or for
+  frontend development.
+version: 0.2.0
 ---
 
 # FastAPI Development

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/git-forensics/SKILL.md

@@ -1,14 +1,16 @@
 ---
 name: git-forensics
 description: >-
-  This skill should be used when the user asks to "find who changed this line",
-  "search git history for a deleted function", "bisect a regression",
-  "recover a lost commit", "investigate when a bug was introduced",
-  "trace the history of a file", "search commit messages",
-  "find when code was removed", "check git blame", "use git reflog",
-  or discusses git archaeology, git bisect, git log search, pickaxe,
-  blame analysis, reflog recovery, or commit history investigation.
-version: 0.1.0
+  Provides git history investigation techniques including blame analysis,
+  bisect workflows, pickaxe search, and reflog recovery for tracing code
+  changes and recovering lost work. USE WHEN the user asks to "find who
+  changed this line", "bisect a regression", "recover a lost commit",
+  "search git history", "find when code was removed", "check git blame",
+  "use git reflog", or "trace the history of a file", or works with git
+  log -S, git bisect run, or .git-blame-ignore-revs. DO NOT USE for
+  routine git operations like committing, branching, or merging.
+version: 0.2.0
+allowed-tools: Bash, Read, Grep
 ---
 
 # Git Forensics
@@ -103,7 +105,7 @@ Track a file across renames. Without `--follow`, history stops at the rename:
 # Follow a file through renames
 git log --follow --oneline -- path/to/current_name.py
 
-# Blame through renames
+# Show patch history through renames
 git log --follow -p -- path/to/file.py
 ```
 

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/migration-patterns/SKILL.md

@@ -1,12 +1,13 @@
 ---
 name: migration-patterns
 description: >-
-  This skill should be used when the user asks to "migrate from X to Y",
-  "upgrade to version N", "bump Python version", "upgrade pydantic",
-  "migrate express to fastify", "framework migration", "version upgrade",
-  "modernize the codebase", or discusses code migration, framework upgrades,
-  API version bumps, or dependency migration strategies.
-version: 0.1.0
+  Guides incremental, rollback-safe framework upgrades and dependency
+  migrations with step-by-step verification. USE WHEN the user asks to
+  "migrate from X to Y", "upgrade to version N", "bump Python version",
+  "upgrade pydantic", "migrate express to fastify", "modernize the codebase",
+  or works with Pydantic v1-to-v2, Django upgrades, CommonJS to ESM.
+  DO NOT USE for routine dependency updates without API changes.
+version: 0.2.0
 ---
 
 # Migration Patterns

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/performance-profiling/SKILL.md

@@ -1,14 +1,16 @@
 ---
 name: performance-profiling
 description: >-
-  This skill should be used when the user asks to "profile this code",
-  "find the bottleneck", "optimize performance", "measure execution time",
-  "check memory usage", "create a flamegraph", "benchmark this function",
-  "find memory leaks", "reduce latency", "run a performance test",
-  or discusses profiling tools, flamegraphs, benchmarking methodology,
-  cProfile, py-spy, scalene, Chrome DevTools performance,
-  memory profiling, or hot path analysis.
-version: 0.1.0
+  Guides measure-first performance investigation using CPU profilers, memory
+  analyzers, flamegraphs, and reproducible benchmarking across Python and
+  Node.js. USE WHEN the user asks to "profile this code", "find the
+  bottleneck", "create a flamegraph", "benchmark this function", "find
+  memory leaks", "check memory usage", "reduce latency", or "measure
+  execution time", or works with cProfile, py-spy, scalene, clinic.js,
+  Chrome DevTools, hyperfine, or pytest-benchmark. DO NOT USE for security
+  auditing, dependency management, or code refactoring.
+version: 0.2.0
+allowed-tools: Bash, Read, Glob, Grep
 ---
 
 # Performance Profiling

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/pydantic-ai/SKILL.md

@@ -1,13 +1,14 @@
 ---
 name: pydantic-ai
 description: >-
-  This skill should be used when the user asks to "build a PydanticAI agent",
-  "create an AI agent with PydanticAI", "add tools to a PydanticAI agent",
-  "stream responses with PydanticAI", "test a PydanticAI agent",
-  "connect PydanticAI to a Svelte frontend", "use RunContext for dependency injection",
-  "configure model fallbacks in PydanticAI", or discusses PydanticAI agents,
-  tool decorators, structured output, agent testing, or VercelAIAdapter.
-version: 0.1.0
+  Teaches PydanticAI agent development with tool decorators, RunContext
+  dependency injection, streaming, and VercelAIAdapter. USE WHEN the user
+  asks to "build a PydanticAI agent", "add tools to an agent", "stream
+  responses with PydanticAI", "test a PydanticAI agent", "connect PydanticAI
+  to Svelte", "configure model fallbacks", or works with pydantic-ai, Agent,
+  RunContext, TestModel, FallbackModel, VercelAIAdapter. DO NOT USE for Claude
+  Agent SDK TypeScript agents or general LLM API calls.
+version: 0.2.0
 ---
 
 # PydanticAI Agent Development

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/refactoring-patterns/SKILL.md

@@ -1,14 +1,15 @@
 ---
 name: refactoring-patterns
 description: >-
-  This skill should be used when the user asks to "refactor this code",
-  "clean up this function", "extract a method", "reduce code duplication",
-  "fix code smells", "simplify this class", "break up this large function",
-  "apply design patterns", "remove dead code", "improve code structure",
-  or discusses code smells, refactoring techniques, extract function,
-  inline variable, feature envy, god class, or behavior-preserving
-  transformations.
-version: 0.1.0
+  Teaches behavior-preserving code transformations with a smell-detect,
+  transform, verify cycle and language-specific idioms for Python and
+  TypeScript. USE WHEN the user asks to "refactor this code", "extract a
+  method", "fix code smells", "reduce code duplication", "simplify this
+  class", "break up this large function", "clean up this function", or
+  "remove dead code", or works with god class, feature envy, data clump,
+  primitive obsession, or inline variable. DO NOT USE for adding new
+  features, fixing bugs, or performance optimization.
+version: 0.2.0
 ---
 
 # Refactoring Patterns

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/security-checklist/SKILL.md

@@ -1,14 +1,15 @@
 ---
 name: security-checklist
 description: >-
-  This skill should be used when the user asks to "check for security issues",
-  "audit this code for vulnerabilities", "scan for secrets", "review for
-  injection attacks", "check OWASP compliance", "find security bugs",
-  "detect hardcoded credentials", "review authentication logic",
-  "check for XSS", "audit dependencies for vulnerabilities",
-  or discusses security review, vulnerability scanning, OWASP Top 10,
-  secrets detection, SQL injection, command injection, or dependency auditing.
-version: 0.1.0
+  Provides defense-in-depth security review covering OWASP Top 10, secrets
+  detection, and dependency CVE scanning. USE WHEN the user asks to "check
+  for security issues", "scan for secrets", "audit dependencies for
+  vulnerabilities", "review for injection attacks", "check OWASP compliance",
+  "detect hardcoded credentials", or works with SQL injection, command
+  injection, pip-audit, npm audit, trivy, gitleaks. DO NOT USE for performance
+  profiling or general code quality reviews.
+version: 0.2.0
+allowed-tools: Bash, Read, Glob, Grep
 ---
 
 # Security Checklist

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/skill-building/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: skill-building
 description: >-
-  This skill should be used when the user asks to "build a skill", "write a
-  SKILL.md", "create a Claude Code skill", "design skill instructions",
-  "improve a skill description", "optimize skill content", "write effective
-  prompts for skills", or discusses skill authoring best practices, progressive
-  disclosure, or cross-vendor prompt engineering principles for Claude Code
-  plugins.
-version: 0.1.0
+  Guides Claude Code plugin skill creation covering SKILL.md structure,
+  description optimization, and progressive disclosure. USE WHEN the user
+  asks to "build a skill", "write a SKILL.md", "create a Claude Code skill",
+  "improve a skill description", "optimize skill content", "design skill
+  instructions", or works with skill authoring patterns or plugin directory
+  structure. DO NOT USE for application code or general prompt engineering.
+version: 0.2.0
 ---
 
 # Skill Building for Claude Code Plugins

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/sqlite/SKILL.md

@@ -1,13 +1,15 @@
 ---
 name: sqlite
 description: >-
-  This skill should be used when the user asks to "set up a SQLite database",
-  "use WAL mode in SQLite", "query SQLite with Python", "use better-sqlite3",
-  "add full-text search with FTS5", "store JSON in SQLite",
-  "use SQLite with Cloudflare D1", "write CTEs or window functions in SQLite",
-  or discusses SQLite pragmas, schema design, JSON1 extension, FTS5,
-  aiosqlite, or embedded database patterns.
-version: 0.1.0
+  Teaches SQLite development including WAL mode, FTS5 full-text search, JSON1
+  queries, and async Python integration with aiosqlite. USE WHEN the user asks
+  to "set up a SQLite database", "use WAL mode", "add full-text search with
+  FTS5", "store JSON in SQLite", "query SQLite with Python", "use
+  better-sqlite3", "use Cloudflare D1", "write CTEs or window functions", or
+  works with aiosqlite, better-sqlite3, PRAGMA configuration, STRICT tables,
+  expression indexes. DO NOT USE for PostgreSQL, MySQL, or other client-server
+  database systems.
+version: 0.2.0
 ---
 
 # SQLite Development

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → skill-engine}/skills/svelte5/SKILL.md

@@ -1,14 +1,13 @@
 ---
 name: svelte5
 description: >-
-  This skill should be used when the user asks to "build a Svelte component",
-  "create a Svelte app", "use Svelte runes", "set up a SvelteKit SPA",
-  "migrate from Svelte 4 to Svelte 5", "manage state with runes",
-  "add reactivity in Svelte", "use AI SDK with Svelte",
-  "add drag and drop to Svelte", "build charts with LayerCake",
-  or discusses Svelte 5 component patterns, snippets, $state, $derived,
-  $effect, $props, or SvelteKit routing.
-version: 0.1.0
+  Guides Svelte 5 development with runes, SvelteKit SPA configuration, and
+  component architecture. USE WHEN the user asks to "build a Svelte component",
+  "use Svelte 5 runes", "set up a SvelteKit SPA", "migrate from Svelte 4
+  to 5", "manage state with $state", "add drag and drop to Svelte", or works
+  with $state, $derived, $effect, $props, @ai-sdk/svelte, svelte-dnd-action.
+  DO NOT USE for Svelte 4 legacy codebases or React/Vue development.
+version: 0.2.0
 ---
 
 # Svelte 5 Development