codingbuddy-rules 1.3.1 → 2.1.0

package/.ai-rules/checklists/index.json

@@ -0,0 +1,47 @@
+{
+  "version": "1.0.0",
+  "domains": [
+    {
+      "id": "security",
+      "name": "Security",
+      "icon": "🔒",
+      "file": "security.json",
+      "description": "Security-related review items (authentication, input validation, data protection)"
+    },
+    {
+      "id": "accessibility",
+      "name": "Accessibility",
+      "icon": "♿",
+      "file": "accessibility.json",
+      "description": "WCAG 2.1 AA compliance items (forms, interactive elements, content)"
+    },
+    {
+      "id": "performance",
+      "name": "Performance",
+      "icon": "⚡",
+      "file": "performance.json",
+      "description": "Performance optimization items (rendering, loading, data fetching)"
+    },
+    {
+      "id": "testing",
+      "name": "Testing",
+      "icon": "🧪",
+      "file": "testing.json",
+      "description": "Testing strategy items (unit, component, API testing)"
+    },
+    {
+      "id": "code-quality",
+      "name": "Code Quality",
+      "icon": "📏",
+      "file": "code-quality.json",
+      "description": "Code quality items (TypeScript, SOLID principles, error handling)"
+    },
+    {
+      "id": "seo",
+      "name": "SEO",
+      "icon": "🔍",
+      "file": "seo.json",
+      "description": "SEO optimization items (metadata, structure, links)"
+    }
+  ]
+}

package/.ai-rules/checklists/performance.json

@@ -0,0 +1,97 @@
+{
+  "domain": "performance",
+  "icon": "⚡",
+  "description": "Performance optimization review items",
+  "categories": [
+    {
+      "name": "rendering",
+      "triggers": {
+        "files": ["**/components/**", "**/page/**", "**/*.tsx", "**/*.jsx"],
+        "imports": ["react", "next", "useMemo", "useCallback", "memo"],
+        "patterns": ["useState", "useEffect", "useMemo", "useCallback", "memo("]
+      },
+      "items": [
+        {
+          "id": "perf-render-001",
+          "text": "Memoize expensive calculations with useMemo",
+          "priority": "medium",
+          "reason": "Prevents unnecessary recalculations on re-render"
+        },
+        {
+          "id": "perf-render-002",
+          "text": "Use useCallback for callback props to child components",
+          "priority": "medium",
+          "reason": "Prevents unnecessary child re-renders"
+        },
+        {
+          "id": "perf-render-003",
+          "text": "Avoid inline object/array creation in JSX",
+          "priority": "low",
+          "reason": "New references cause unnecessary re-renders"
+        },
+        {
+          "id": "perf-render-004",
+          "text": "Use React.memo for pure presentational components",
+          "priority": "low",
+          "reason": "Skip re-renders when props haven't changed"
+        }
+      ]
+    },
+    {
+      "name": "loading",
+      "triggers": {
+        "files": ["**/page/**", "**/layout/**", "**/app/**"],
+        "imports": ["next/dynamic", "next/image", "react-lazy-load"],
+        "patterns": ["dynamic(", "lazy(", "Suspense", "loading"]
+      },
+      "items": [
+        {
+          "id": "perf-load-001",
+          "text": "Use code splitting with dynamic imports",
+          "priority": "high",
+          "reason": "Reduces initial bundle size"
+        },
+        {
+          "id": "perf-load-002",
+          "text": "Optimize images (WebP, proper sizing, lazy loading)",
+          "priority": "high",
+          "reason": "Images are often the largest assets"
+        },
+        {
+          "id": "perf-load-003",
+          "text": "Implement loading skeletons for async content",
+          "priority": "medium",
+          "reason": "Improves perceived performance"
+        }
+      ]
+    },
+    {
+      "name": "data_fetching",
+      "triggers": {
+        "files": ["**/api/**", "**/hook/**", "**/query/**"],
+        "imports": ["@tanstack/react-query", "swr", "axios"],
+        "patterns": ["useQuery", "useSWR", "fetch(", "getServerSideProps"]
+      },
+      "items": [
+        {
+          "id": "perf-data-001",
+          "text": "Implement proper caching strategy",
+          "priority": "high",
+          "reason": "Reduces unnecessary network requests"
+        },
+        {
+          "id": "perf-data-002",
+          "text": "Use stale-while-revalidate pattern where appropriate",
+          "priority": "medium",
+          "reason": "Shows cached data while fetching fresh data"
+        },
+        {
+          "id": "perf-data-003",
+          "text": "Paginate or virtualize large lists",
+          "priority": "high",
+          "reason": "Rendering thousands of items kills performance"
+        }
+      ]
+    }
+  ]
+}

package/.ai-rules/checklists/security.json

@@ -0,0 +1,119 @@
+{
+  "domain": "security",
+  "icon": "🔒",
+  "description": "Security-related review items",
+  "categories": [
+    {
+      "name": "authentication",
+      "triggers": {
+        "files": [
+          "**/auth/**",
+          "**/login/**",
+          "**/session/**",
+          "**/password/**",
+          "**/signin/**",
+          "**/signup/**"
+        ],
+        "imports": [
+          "bcrypt",
+          "argon2",
+          "jsonwebtoken",
+          "passport",
+          "next-auth",
+          "@auth/*",
+          "jose"
+        ],
+        "patterns": [
+          "password",
+          "token",
+          "credential",
+          "session",
+          "authenticate"
+        ]
+      },
+      "items": [
+        {
+          "id": "sec-auth-001",
+          "text": "Hash passwords using bcrypt/argon2 (never store plaintext)",
+          "priority": "critical",
+          "reason": "Plaintext passwords can be stolen if database is compromised",
+          "reference": "OWASP Authentication Cheatsheet"
+        },
+        {
+          "id": "sec-auth-002",
+          "text": "Implement rate limiting on login attempts",
+          "priority": "high",
+          "reason": "Prevents brute force attacks"
+        },
+        {
+          "id": "sec-auth-003",
+          "text": "Use secure session management (HttpOnly, Secure, SameSite cookies)",
+          "priority": "critical",
+          "reason": "Prevents session hijacking and XSS attacks"
+        },
+        {
+          "id": "sec-auth-004",
+          "text": "Implement proper logout (invalidate session server-side)",
+          "priority": "high",
+          "reason": "Ensures complete session termination"
+        }
+      ]
+    },
+    {
+      "name": "input_validation",
+      "triggers": {
+        "files": ["**/api/**", "**/form/**", "**/input/**", "**/handler/**"],
+        "imports": ["zod", "yup", "joi", "validator"],
+        "patterns": ["validate", "sanitize", "input", "formData"]
+      },
+      "items": [
+        {
+          "id": "sec-input-001",
+          "text": "Validate all user input server-side",
+          "priority": "critical",
+          "reason": "Client-side validation can be bypassed"
+        },
+        {
+          "id": "sec-input-002",
+          "text": "Sanitize input to prevent XSS attacks",
+          "priority": "critical",
+          "reason": "Unsanitized input can execute malicious scripts"
+        },
+        {
+          "id": "sec-input-003",
+          "text": "Use parameterized queries to prevent SQL injection",
+          "priority": "critical",
+          "reason": "Raw queries with user input enable SQL injection"
+        }
+      ]
+    },
+    {
+      "name": "data_protection",
+      "triggers": {
+        "files": ["**/api/**", "**/data/**", "**/user/**", "**/profile/**"],
+        "imports": ["crypto", "node:crypto"],
+        "patterns": ["encrypt", "decrypt", "secret", "private", "pii"]
+      },
+      "items": [
+        {
+          "id": "sec-data-001",
+          "text": "Encrypt sensitive data at rest",
+          "priority": "high",
+          "reason": "Protects data if storage is compromised"
+        },
+        {
+          "id": "sec-data-002",
+          "text": "Use HTTPS for all data transmission",
+          "priority": "critical",
+          "reason": "Prevents man-in-the-middle attacks"
+        },
+        {
+          "id": "sec-data-003",
+          "text": "Never log sensitive information (passwords, tokens, PII)",
+          "priority": "high",
+          "reason": "Logs can be accessed by unauthorized parties"
+        }
+      ]
+    }
+  ]
+}

package/.ai-rules/checklists/seo.json

@@ -0,0 +1,97 @@
+{
+  "domain": "seo",
+  "icon": "🔍",
+  "description": "SEO optimization review items",
+  "categories": [
+    {
+      "name": "metadata",
+      "triggers": {
+        "files": ["**/page/**", "**/layout/**", "**/app/**", "**/head/**"],
+        "imports": ["next/head", "react-helmet"],
+        "patterns": ["<title", "<meta", "metadata", "generateMetadata"]
+      },
+      "items": [
+        {
+          "id": "seo-meta-001",
+          "text": "Set unique, descriptive title for each page",
+          "priority": "critical",
+          "reason": "Titles appear in search results and browser tabs"
+        },
+        {
+          "id": "seo-meta-002",
+          "text": "Write compelling meta descriptions (150-160 chars)",
+          "priority": "high",
+          "reason": "Descriptions appear in search result snippets"
+        },
+        {
+          "id": "seo-meta-003",
+          "text": "Set canonical URL to prevent duplicate content issues",
+          "priority": "medium",
+          "reason": "Helps search engines understand the primary URL"
+        },
+        {
+          "id": "seo-meta-004",
+          "text": "Add Open Graph and Twitter Card meta tags",
+          "priority": "medium",
+          "reason": "Controls appearance when shared on social media"
+        }
+      ]
+    },
+    {
+      "name": "structure",
+      "triggers": {
+        "files": ["**/page/**", "**/layout/**", "**/*.tsx", "**/*.jsx"],
+        "imports": [],
+        "patterns": ["<h1", "<h2", "<main", "<article", "<nav"]
+      },
+      "items": [
+        {
+          "id": "seo-struct-001",
+          "text": "Use exactly one h1 per page",
+          "priority": "high",
+          "reason": "H1 signals main topic to search engines"
+        },
+        {
+          "id": "seo-struct-002",
+          "text": "Use semantic HTML elements (article, section, nav)",
+          "priority": "medium",
+          "reason": "Semantic markup helps search engines understand content"
+        },
+        {
+          "id": "seo-struct-003",
+          "text": "Implement breadcrumb navigation with structured data",
+          "priority": "low",
+          "reason": "Helps users and search engines navigate site hierarchy"
+        }
+      ]
+    },
+    {
+      "name": "links",
+      "triggers": {
+        "files": ["**/page/**", "**/*.tsx", "**/*.jsx"],
+        "imports": ["next/link"],
+        "patterns": ["<a ", "<Link", "href="]
+      },
+      "items": [
+        {
+          "id": "seo-link-001",
+          "text": "Use descriptive link text (avoid 'click here')",
+          "priority": "medium",
+          "reason": "Link text signals page content to search engines"
+        },
+        {
+          "id": "seo-link-002",
+          "text": "Add rel='noopener noreferrer' to external links",
+          "priority": "medium",
+          "reason": "Security and performance best practice"
+        },
+        {
+          "id": "seo-link-003",
+          "text": "Ensure all internal links use relative paths",
+          "priority": "low",
+          "reason": "Maintains link equity within the site"
+        }
+      ]
+    }
+  ]
+}

package/.ai-rules/checklists/testing.json

@@ -0,0 +1,97 @@
+{
+  "domain": "testing",
+  "icon": "🧪",
+  "description": "Testing strategy and coverage review items",
+  "categories": [
+    {
+      "name": "unit_testing",
+      "triggers": {
+        "files": ["**/util/**", "**/lib/**", "**/helper/**", "**/service/**"],
+        "imports": ["vitest", "jest", "@testing-library/*"],
+        "patterns": ["describe", "it(", "test(", "expect"]
+      },
+      "items": [
+        {
+          "id": "test-unit-001",
+          "text": "Write tests for all pure functions",
+          "priority": "high",
+          "reason": "Pure functions are easiest to test and most valuable to cover"
+        },
+        {
+          "id": "test-unit-002",
+          "text": "Cover edge cases and error conditions",
+          "priority": "high",
+          "reason": "Edge cases often hide bugs"
+        },
+        {
+          "id": "test-unit-003",
+          "text": "Use descriptive test names that explain behavior",
+          "priority": "medium",
+          "reason": "Test names document expected behavior"
+        },
+        {
+          "id": "test-unit-004",
+          "text": "Target 90%+ coverage for core logic",
+          "priority": "high",
+          "reason": "High coverage reduces regression risk"
+        }
+      ]
+    },
+    {
+      "name": "component_testing",
+      "triggers": {
+        "files": ["**/components/**", "**/features/**", "**/widgets/**"],
+        "imports": ["@testing-library/react", "react-test-renderer"],
+        "patterns": ["render(", "screen.", "userEvent"]
+      },
+      "items": [
+        {
+          "id": "test-comp-001",
+          "text": "Test user interactions (click, type, submit)",
+          "priority": "high",
+          "reason": "UI should respond correctly to user actions"
+        },
+        {
+          "id": "test-comp-002",
+          "text": "Test different component states (loading, error, success)",
+          "priority": "high",
+          "reason": "Components should handle all states gracefully"
+        },
+        {
+          "id": "test-comp-003",
+          "text": "Use Testing Library queries by role/label for accessibility",
+          "priority": "medium",
+          "reason": "Tests that query like users improve accessibility"
+        }
+      ]
+    },
+    {
+      "name": "api_testing",
+      "triggers": {
+        "files": ["**/api/**", "**/hook/**", "**/query/**", "**/mutation/**"],
+        "imports": ["msw", "nock", "@tanstack/react-query"],
+        "patterns": ["fetch(", "axios", "useMutation", "useQuery"]
+      },
+      "items": [
+        {
+          "id": "test-api-001",
+          "text": "Mock API responses with MSW for realistic testing",
+          "priority": "high",
+          "reason": "Avoid mocking implementation details"
+        },
+        {
+          "id": "test-api-002",
+          "text": "Test loading, success, and error states",
+          "priority": "high",
+          "reason": "API calls can fail in multiple ways"
+        },
+        {
+          "id": "test-api-003",
+          "text": "Test retry and caching behavior",
+          "priority": "medium",
+          "reason": "Data fetching libraries have complex behavior"
+        }
+      ]
+    }
+  ]
+}

package/.ai-rules/keyword-modes.json

@@ -5,7 +5,11 @@
       "instructions": "설계 우선 접근. TDD 관점에서 테스트 케이스 먼저 정의. 구현 전 아키텍처 검토.",
       "rules": ["rules/core.md", "rules/augmented-coding.md"],
       "agent": "plan-mode",
-      "delegates_to": "frontend-developer"
+      "delegates_to": "frontend-developer",
+      "defaultSpecialists": [
+        "architecture-specialist",
+        "test-strategy-specialist"
+      ]
     },
     "ACT": {
       "description": "Actual task execution phase",
@@ -16,14 +20,24 @@
         "rules/augmented-coding.md"
       ],
       "agent": "act-mode",
-      "delegates_to": "frontend-developer"
+      "delegates_to": "frontend-developer",
+      "defaultSpecialists": [
+        "code-quality-specialist",
+        "test-strategy-specialist"
+      ]
     },
     "EVAL": {
       "description": "Result review and assessment phase",
       "instructions": "코드 품질 검토. SOLID 원칙 준수 확인. 테스트 커버리지 점검. 개선점 제안.",
       "rules": ["rules/core.md", "rules/augmented-coding.md"],
       "agent": "eval-mode",
-      "delegates_to": "code-reviewer"
+      "delegates_to": "code-reviewer",
+      "defaultSpecialists": [
+        "security-specialist",
+        "accessibility-specialist",
+        "performance-specialist",
+        "code-quality-specialist"
+      ]
     }
   },
   "defaultMode": "PLAN"