codehava-agent-kit 1.0.0

package/templates/.agent/skills/testing-patterns/scripts/test_runner.py

@@ -0,0 +1,219 @@
+#!/usr/bin/env python3
+"""
+Test Runner - Unified test execution and coverage reporting
+Runs tests and generates coverage report based on project type.
+
+Usage:
+    python test_runner.py <project_path> [--coverage]
+
+Supports:
+    - Node.js: npm test, jest, vitest
+    - Python: pytest, unittest
+"""
+
+import subprocess
+import sys
+import json
+from pathlib import Path
+from datetime import datetime
+
+# Fix Windows console encoding
+try:
+    sys.stdout.reconfigure(encoding='utf-8', errors='replace')
+except:
+    pass
+
+
+def detect_test_framework(project_path: Path) -> dict:
+    """Detect test framework and commands."""
+    result = {
+        "type": "unknown",
+        "framework": None,
+        "cmd": None,
+        "coverage_cmd": None
+    }
+    
+    # Node.js project
+    package_json = project_path / "package.json"
+    if package_json.exists():
+        result["type"] = "node"
+        try:
+            pkg = json.loads(package_json.read_text(encoding='utf-8'))
+            scripts = pkg.get("scripts", {})
+            deps = {**pkg.get("dependencies", {}), **pkg.get("devDependencies", {})}
+            
+            # Check for test script
+            if "test" in scripts:
+                result["framework"] = "npm test"
+                result["cmd"] = ["npm", "test"]
+                
+                # Try to detect specific framework for coverage
+                if "vitest" in deps:
+                    result["framework"] = "vitest"
+                    result["coverage_cmd"] = ["npx", "vitest", "run", "--coverage"]
+                elif "jest" in deps:
+                    result["framework"] = "jest"
+                    result["coverage_cmd"] = ["npx", "jest", "--coverage"]
+            elif "vitest" in deps:
+                result["framework"] = "vitest"
+                result["cmd"] = ["npx", "vitest", "run"]
+                result["coverage_cmd"] = ["npx", "vitest", "run", "--coverage"]
+            elif "jest" in deps:
+                result["framework"] = "jest"
+                result["cmd"] = ["npx", "jest"]
+                result["coverage_cmd"] = ["npx", "jest", "--coverage"]
+                
+        except:
+            pass
+    
+    # Python project
+    if (project_path / "pyproject.toml").exists() or (project_path / "requirements.txt").exists():
+        result["type"] = "python"
+        result["framework"] = "pytest"
+        result["cmd"] = ["python", "-m", "pytest", "-v"]
+        result["coverage_cmd"] = ["python", "-m", "pytest", "--cov", "--cov-report=term-missing"]
+    
+    return result
+
+
+def run_tests(cmd: list, cwd: Path) -> dict:
+    """Run tests and return results."""
+    result = {
+        "passed": False,
+        "output": "",
+        "error": "",
+        "tests_run": 0,
+        "tests_passed": 0,
+        "tests_failed": 0
+    }
+    
+    try:
+        proc = subprocess.run(
+            cmd,
+            cwd=str(cwd),
+            capture_output=True,
+            text=True,
+            encoding='utf-8',
+            errors='replace',
+            timeout=300  # 5 min timeout for tests
+        )
+        
+        result["output"] = proc.stdout[:3000] if proc.stdout else ""
+        result["error"] = proc.stderr[:500] if proc.stderr else ""
+        result["passed"] = proc.returncode == 0
+        
+        # Try to parse test counts from output
+        output = proc.stdout or ""
+        
+        # Jest/Vitest pattern: "Tests: X passed, Y failed, Z total"
+        if "passed" in output.lower() and "failed" in output.lower():
+            import re
+            match = re.search(r'(\d+)\s+passed', output, re.IGNORECASE)
+            if match:
+                result["tests_passed"] = int(match.group(1))
+            match = re.search(r'(\d+)\s+failed', output, re.IGNORECASE)
+            if match:
+                result["tests_failed"] = int(match.group(1))
+            result["tests_run"] = result["tests_passed"] + result["tests_failed"]
+        
+        # Pytest pattern: "X passed, Y failed"
+        if "pytest" in str(cmd):
+            import re
+            match = re.search(r'(\d+)\s+passed', output)
+            if match:
+                result["tests_passed"] = int(match.group(1))
+            match = re.search(r'(\d+)\s+failed', output)
+            if match:
+                result["tests_failed"] = int(match.group(1))
+            result["tests_run"] = result["tests_passed"] + result["tests_failed"]
+        
+    except FileNotFoundError:
+        result["error"] = f"Command not found: {cmd[0]}"
+    except subprocess.TimeoutExpired:
+        result["error"] = "Timeout after 300s"
+    except Exception as e:
+        result["error"] = str(e)
+    
+    return result
+
+
+def main():
+    project_path = Path(sys.argv[1] if len(sys.argv) > 1 else ".").resolve()
+    with_coverage = "--coverage" in sys.argv
+    
+    print(f"\n{'='*60}")
+    print(f"[TEST RUNNER] Unified Test Execution")
+    print(f"{'='*60}")
+    print(f"Project: {project_path}")
+    print(f"Coverage: {'enabled' if with_coverage else 'disabled'}")
+    print(f"Time: {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}")
+    
+    # Detect test framework
+    test_info = detect_test_framework(project_path)
+    print(f"Type: {test_info['type']}")
+    print(f"Framework: {test_info['framework']}")
+    print("-"*60)
+    
+    if not test_info["cmd"]:
+        print("No test framework found for this project.")
+        output = {
+            "script": "test_runner",
+            "project": str(project_path),
+            "type": test_info["type"],
+            "framework": None,
+            "passed": True,
+            "message": "No tests configured"
+        }
+        print(json.dumps(output, indent=2))
+        sys.exit(0)
+    
+    # Choose command
+    cmd = test_info["coverage_cmd"] if with_coverage and test_info["coverage_cmd"] else test_info["cmd"]
+    
+    print(f"Running: {' '.join(cmd)}")
+    print("-"*60)
+    
+    # Run tests
+    result = run_tests(cmd, project_path)
+    
+    # Print output (truncated)
+    if result["output"]:
+        lines = result["output"].split("\n")
+        for line in lines[:30]:
+            print(line)
+        if len(lines) > 30:
+            print(f"... ({len(lines) - 30} more lines)")
+    
+    # Summary
+    print("\n" + "="*60)
+    print("SUMMARY")
+    print("="*60)
+    
+    if result["passed"]:
+        print("[PASS] All tests passed")
+    else:
+        print("[FAIL] Some tests failed")
+        if result["error"]:
+            print(f"Error: {result['error'][:200]}")
+    
+    if result["tests_run"] > 0:
+        print(f"Tests: {result['tests_run']} total, {result['tests_passed']} passed, {result['tests_failed']} failed")
+    
+    output = {
+        "script": "test_runner",
+        "project": str(project_path),
+        "type": test_info["type"],
+        "framework": test_info["framework"],
+        "tests_run": result["tests_run"],
+        "tests_passed": result["tests_passed"],
+        "tests_failed": result["tests_failed"],
+        "passed": result["passed"]
+    }
+    
+    print("\n" + json.dumps(output, indent=2))
+    
+    sys.exit(0 if result["passed"] else 1)
+
+
+if __name__ == "__main__":
+    main()

package/templates/.agent/skills/uu-pdp-feature-check/SKILL.md

@@ -0,0 +1,116 @@
+---
+name: uu-pdp-feature-check
+description: |
+  Use when building any feature that collects, stores, displays, or processes
+  user personal data. Triggers on "user data", "personal info", "profile",
+  "upload", "store user", "collect", "privacy", "consent", or when creating
+  new database models with user-related fields. Do NOT use for pure UI/styling tasks.
+---
+
+# UU PDP Compliance — Checklist Fitur Baru
+
+Setiap fitur yang menyentuh data pribadi pengguna WAJIB melewati checklist ini.
+
+## 1. Identifikasi Data
+
+Sebelum coding, tentukan:
+- **Data apa** yang dikumpulkan fitur ini?
+- **Kategori mana**: Data Umum (nama, email, HP, alamat) atau Data Spesifik/Sensitif (NIK, rekening, kesehatan, biometrik, data anak)?
+- **Tujuan**: untuk apa data ini dipakai?
+- **Retensi**: berapa lama data disimpan?
+
+## 2. Checklist Implementasi
+
+```
+□ Consent tersedia sebelum data dikumpulkan
+  → Jika data baru yang belum ada consent-nya, update consent flow
+
+□ Data minimization — hanya kumpulkan yang benar-benar dibutuhkan
+  → Hapus field yang "nice to have" tapi tidak essential
+
+□ Data sensitif dienkripsi di kolom database
+  → NIK, nomor rekening, data kesehatan: gunakan pgcrypto
+
+□ Audit log tersedia untuk akses ke data ini
+  → Siapa mengakses, kapan, dari IP mana
+
+□ User bisa lihat/edit/hapus data ini dari settings
+  → Terhubung ke fitur "Unduh Data" dan "Hapus Akun"
+
+□ Data TIDAK dikirim ke layanan luar negeri dalam bentuk raw
+  → Cloudflare/Firebase/Resend: pastikan hanya metadata, bukan data sensitif
+
+□ Log tidak mengandung data PII
+  → console.log TIDAK boleh print NIK, password, nomor rekening, token
+```
+
+## 3. Pola Enkripsi Kolom Sensitif (PostgreSQL)
+
+```sql
+-- Aktifkan pgcrypto (sekali saja)
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+
+-- Simpan data terenkripsi
+UPDATE users
+SET nik_encrypted = pgp_sym_encrypt(nik_plaintext, current_setting('app.encryption_key'))
+WHERE id = $1;
+
+-- Baca data terenkripsi
+SELECT pgp_sym_decrypt(nik_encrypted::bytea, current_setting('app.encryption_key'))
+FROM users WHERE id = $1;
+```
+
+```prisma
+// Di schema.prisma: simpan sebagai Bytes untuk data terenkripsi
+model User {
+  nikEncrypted Bytes?   // Terenkripsi via pgcrypto
+  // JANGAN buat field nikPlaintext
+}
+```
+
+## 4. Audit Log Pattern
+
+```typescript
+// lib/audit/index.ts
+export async function logDataAccess(params: {
+  actorId: string
+  action: 'VIEW' | 'EDIT' | 'DELETE' | 'EXPORT'
+  resourceType: string
+  resourceId: string
+  ipAddress: string
+}) {
+  await prisma.auditLog.create({
+    data: {
+      ...params,
+      createdAt: new Date(),
+      // Audit log: append-only, tidak ada updatedAt
+    },
+  })
+}
+```
+
+## 5. Yang TIDAK BOLEH Dilakukan
+
+```typescript
+// ❌ Log data sensitif
+console.log('User NIK:', user.nik)
+console.log('Payment token:', token)
+
+// ❌ Kirim data sensitif ke Resend sebagai email content
+await resend.emails.send({ html: `NIK kamu: ${user.nik}` })
+
+// ❌ Simpan PII di URL/query params
+router.push(`/verify?nik=${nik}`)
+
+// ❌ Hard-code data sensitif di kode
+const adminNIK = '3201...'
+```
+
+## 6. Layanan Luar Negeri — Batasan
+
+| Layanan | Boleh Kirim | JANGAN Kirim |
+|---------|-------------|--------------|
+| Cloudflare | Headers, IP (sudah ada DPA) | Konten body yang terenkripsi |
+| Firebase FCM | Device token, notif payload | NIK, data rekening, data kesehatan |
+| Resend | Alamat email, teks notifikasi umum | NIK, nomor rekening, data medis |
+| Sentry | Error message, stack trace | Password, token auth, NIK |

package/templates/.agent/skills/vibe-buildplan/SKILL.md

@@ -0,0 +1,232 @@
+---
+name: vibe-buildplan
+description: |
+  Use after vibe-techdesign. Generates sprint plan and initial backlog from PRD.
+  Triggers on "buat sprint plan", "breakdown task", "berapa sprint",
+  "buat backlog dari PRD", "rencana build", "mulai sprint pertama",
+  or /vibe-plan step 4.
+  Requires: docs/01-PRD.md + docs/02-TECH-DESIGN.md
+  Output: docs/04-BACKLOG.md (terisi) + BUILD_PLAN.md
+---
+
+# Vibe Build Plan — Sprint Planner dari PRD
+
+Skill ini mengubah PRD + Tech Design menjadi sprint plan yang konkret dan siap dikerjakan.
+Output: backlog terisi + BUILD_PLAN.md sebagai panduan build phase.
+
+## Persiapan
+
+Baca kedua file ini sebelum mulai:
+- `docs/01-PRD.md` — untuk user stories dan fitur
+- `docs/02-TECH-DESIGN.md` — untuk stack dan ERD
+
+---
+
+## Pertanyaan yang Diajukan
+
+**Q1:** "Berapa lama satu sprint? (1 minggu / 2 minggu)"
+
+**Q2:** "Berapa jam per hari yang bisa dialokasikan untuk coding?
+  (termasuk semua anggota tim — contoh: 2 developer × 4 jam/hari = 8 jam/hari)"
+
+**Q3:** "Target berapa sprint untuk MVP yang bisa di-launch?"
+
+**Q4:** "Ada task teknis yang sudah harus ada sebelum coding fitur?
+  (setup Docker, CI/CD, domain, SSL, dll)"
+
+---
+
+## Logic: Kalkulasi Kapasitas
+
+```
+Total jam per sprint = jam/hari × hari kerja per sprint
+Buffer factor = 0.7 (ambil 70% kapasitas untuk hal tak terduga)
+Efektif per sprint = total jam × 0.7
+
+Size → jam estimasi:
+XS = 1 jam
+S  = 2 jam
+M  = 4 jam
+L  = 8 jam
+XL = 16 jam (harus dipecah)
+```
+
+---
+
+## Output 1: `docs/04-BACKLOG.md` (TERISI dari PRD)
+
+Generate backlog dengan task konkret dari setiap REQ di PRD:
+
+```markdown
+# 04 — Sprint Backlog — [Nama Aplikasi]
+> Dibuat dari PRD [tanggal] | Update setiap sprint
+
+## 📋 Sprint 1 — Setup & Foundation
+
+**Goal:** Environment siap, auth berfungsi, dapat login
+**Kapasitas:** [X] jam efektif
+
+### 🔴 In Progress
+| ID | Task | PIC | Notes |
+|----|------|-----|-------|
+| — | — | — | — |
+
+### 🟡 Todo
+| ID | Task | Size | Estimasi | REQ ref |
+|----|------|------|----------|---------|
+| T001 | Setup monorepo + Docker Compose (postgres:17, redis:7.4) | S | 2j | — |
+| T002 | Setup Next.js 16.1 + Prisma 7 + schema awal | S | 2j | — |
+| T003 | Better Auth 1.5 — login email + Google OAuth | M | 4j | REQ-001, REQ-002 |
+| T004 | Layout dashboard + protected routes | M | 4j | REQ-001 |
+| T005 | Halaman login + register (web) | M | 4j | REQ-001 |
+| T006 | Setup GitHub Actions → Coolify CI/CD | S | 2j | — |
+| [T00X] | [task lain dari PRD jika muat] | [size] | [jam] | [REQ] |
+
+**Total estimasi Sprint 1:** [X] jam
+
+### 🟢 Done
+| ID | Task | Selesai |
+|----|------|---------|
+| — | — | — |
+
+---
+
+## 📋 Sprint 2 — [Core Feature Utama dari PRD]
+
+**Goal:** [fitur P0 pertama berjalan end-to-end]
+**Kapasitas:** [X] jam efektif
+
+### 🟡 Todo
+| ID | Task | Size | Estimasi | REQ ref |
+|----|------|------|----------|---------|
+| T010 | [task dari F02 di PRD] | M | 4j | REQ-010 |
+| T011 | [task dari F02 lanjutan] | M | 4j | REQ-011 |
+| T012 | [task dari F03 di PRD] | L | 8j | REQ-012 |
+| [dst berdasarkan PRD] | | | | |
+
+---
+
+## 📋 Sprint 3 — [Payment + Notifikasi jika ada]
+
+[Generate berdasarkan P0 yang tersisa di PRD]
+
+---
+
+## 📦 Product Backlog (P1 — Sprint Berikutnya)
+
+[Semua fitur P1 dari PRD, dipecah jadi task]
+
+---
+
+## 🐛 Bug Log
+| ID | Deskripsi | Severity | Status | Ditemukan |
+|----|-----------|----------|--------|-----------|
+| — | — | — | — | — |
+```
+
+---
+
+## Output 2: `BUILD_PLAN.md` (baru, di root)
+
+```markdown
+# BUILD_PLAN — [Nama Aplikasi]
+> Panduan build phase untuk agent dan developer
+> Dibuat: [tanggal] | Berdasarkan: PRD v0.1 + Tech Design
+
+## Overview
+
+| Sprint | Goal | Deliverable |
+|--------|------|-------------|
+| Sprint 1 | Setup + Auth | App bisa login, deploy ke staging |
+| Sprint 2 | [core feature] | [deliverable konkret] |
+| Sprint 3 | [feature lanjut] | [deliverable] |
+| Sprint N | Polish + Launch | App siap production |
+
+**Total estimasi:** [N] sprint × [X] minggu = [Y] minggu
+
+---
+
+## Cara Pakai Build Plan ini dengan Antigravity
+
+### Per Fitur Baru (size M/L)
+```
+1. Jalankan /new-feature
+2. Agent buat spec di specs/NNN-nama-fitur.md
+3. Review spec → approve
+4. Agent implementasi sesuai acceptance criteria
+5. /git-commit → /deploy
+```
+
+### Urutan Build yang Benar
+
+**Phase 1: Foundation (Sprint 1)**
+Jangan coding fitur sebelum ini selesai:
+- [ ] Docker Compose jalan (postgres + redis)
+- [ ] Prisma migrate berhasil
+- [ ] Auth berjalan (bisa login + logout)
+- [ ] Deploy ke staging berhasil
+- [ ] Health check endpoint aktif
+
+**Phase 2: Core Features (Sprint 2-3)**
+Build fitur berdasarkan urutan REQ di PRD:
+- [ ] [REQ-010] — [nama fitur]
+- [ ] [REQ-011] — [nama fitur]
+- [ ] dst berdasarkan PRD
+
+**Phase 3: Payment & Notifikasi (jika ada)**
+- [ ] Xendit sandbox setup
+- [ ] Webhook handler + BullMQ
+- [ ] FCM push notif
+- [ ] Email via Resend
+
+**Phase 4: UU PDP & Security**
+Wajib sebelum launch:
+- [ ] Fitur hapus akun
+- [ ] Fitur unduh data
+- [ ] Privacy Policy live
+- [ ] Cloudflare DPA accepted
+- [ ] Firebase DPT accepted
+
+**Phase 5: Launch Preparation**
+- [ ] Load testing
+- [ ] Security review
+- [ ] Monitoring aktif (Uptime Kuma + Sentry)
+- [ ] Backup strategy running
+
+---
+
+## Prompt Template untuk Build Phase
+
+Gunakan format ini di Antigravity untuk setiap task:
+
+```
+[KONTEKS] Sprint [N] — Task T0XX: [nama task]
+[REQ] REQ-XXX dari PRD
+[TUGAS] [deskripsi spesifik sesuai acceptance criteria]
+[CONSTRAINT] Jangan ubah: [files yang tidak boleh diubah]
+use context7
+```
+
+---
+
+## Definition of Done per Task
+
+Task dianggap selesai jika:
+- [ ] Kode ter-commit dengan format benar
+- [ ] TypeScript strict — tidak ada error
+- [ ] Loading/Empty/Error state ada (untuk komponen UI)
+- [ ] Input divalidasi dengan Zod
+- [ ] Error handling ada di setiap async function
+- [ ] Di-test manual di browser/device
+- [ ] Di-update di backlog (pindah ke Done)
+```
+
+---
+
+## Aturan Penting
+
+- Task harus konkret dan bisa selesai dalam satu sesi coding (≤ 4 jam)
+- XL task harus dipecah sebelum masuk sprint — jangan taruh di backlog sebagai XL
+- Sprint 1 selalu: setup infrastruktur + auth — jangan ada fitur business logic di sprint 1
+- Urutan task harus memperhatikan dependency: DB schema dulu, baru UI
+- Setelah generate, reminder: "Build plan siap. Mulai dengan Sprint 1 Task T001 — ketik `/new-feature` jika siap."