cokit-cli 1.0.9 → 1.2.0

package/{skills/ck-debugging → templates/repo/.github/skills/debug}/scripts/find-polluter.test.md

@@ -1,102 +1,102 @@
-# find-polluter.sh Test Documentation
-
-## Purpose
-Bisection script to find which test creates unwanted files or state pollution.
-
-## Manual Test Procedure
-
-### Setup Test Scenario
-```bash
-# Create test directory
-mkdir -p /tmp/polluter-test && cd /tmp/polluter-test
-
-# Create clean test
-cat > test1.test.js << 'EOF'
-console.log('Test 1: clean');
-EOF
-
-# Create polluter test
-cat > test2.test.js << 'EOF'
-const fs = require('fs');
-fs.mkdirSync('.git', { recursive: true });
-console.log('Test 2: creates pollution');
-EOF
-
-# Create another clean test
-cat > test3.test.js << 'EOF'
-console.log('Test 3: clean');
-EOF
-```
-
-### Run Script
-```bash
-# For projects with npm test
-/path/to/find-polluter.sh '.git' 'src/**/*.test.ts'
-
-# For node-only tests (modify script to use 'node' instead of 'npm test')
-./find-polluter.sh '.git' '*.test.js'
-```
-
-### Expected Output
-```
-🔍 Searching for test that creates: .git
-Test pattern: *.test.js
-
-Found 3 test files
-
-[1/3] Testing: ./test1.test.js
-[2/3] Testing: ./test2.test.js
-
-🎯 FOUND POLLUTER!
-   Test: ./test2.test.js
-   Created: .git
-```
-
-### Cleanup
-```bash
-rm -rf /tmp/polluter-test
-```
-
-## Test Results
-
-✅ Script logic verified (2025-11-11)
-- Correctly iterates through test files
-- Detects pollution creation
-- Reports the polluting test file
-- Exits early when polluter found
-
-## Usage Notes
-
-**Prerequisites:**
-- Test runner (npm test) must be configured in project
-- Test pattern must match actual test files
-- Pollution path must be accurate
-
-**Customization:**
-If your project doesn't use `npm test`, modify line 42:
-```bash
-# Replace
-npm test "$TEST_FILE" > /dev/null 2>&1 || true
-
-# With your test command
-node "$TEST_FILE" > /dev/null 2>&1 || true
-# Or
-jest "$TEST_FILE" > /dev/null 2>&1 || true
-```
-
-## Common Use Cases
-
-1. **Find test creating .git directory:**
-   ```bash
-   ./find-polluter.sh '.git' 'src/**/*.test.ts'
-   ```
-
-2. **Find test creating node_modules:**
-   ```bash
-   ./find-polluter.sh 'node_modules' 'test/**/*.spec.js'
-   ```
-
-3. **Find test creating specific file:**
-   ```bash
-   ./find-polluter.sh 'unwanted-file.txt' '**/*.test.js'
-   ```
+# find-polluter.sh Test Documentation
+
+## Purpose
+Bisection script to find which test creates unwanted files or state pollution.
+
+## Manual Test Procedure
+
+### Setup Test Scenario
+```bash
+# Create test directory
+mkdir -p /tmp/polluter-test && cd /tmp/polluter-test
+
+# Create clean test
+cat > test1.test.js << 'EOF'
+console.log('Test 1: clean');
+EOF
+
+# Create polluter test
+cat > test2.test.js << 'EOF'
+const fs = require('fs');
+fs.mkdirSync('.git', { recursive: true });
+console.log('Test 2: creates pollution');
+EOF
+
+# Create another clean test
+cat > test3.test.js << 'EOF'
+console.log('Test 3: clean');
+EOF
+```
+
+### Run Script
+```bash
+# For projects with npm test
+/path/to/find-polluter.sh '.git' 'src/**/*.test.ts'
+
+# For node-only tests (modify script to use 'node' instead of 'npm test')
+./find-polluter.sh '.git' '*.test.js'
+```
+
+### Expected Output
+```
+🔍 Searching for test that creates: .git
+Test pattern: *.test.js
+
+Found 3 test files
+
+[1/3] Testing: ./test1.test.js
+[2/3] Testing: ./test2.test.js
+
+🎯 FOUND POLLUTER!
+   Test: ./test2.test.js
+   Created: .git
+```
+
+### Cleanup
+```bash
+rm -rf /tmp/polluter-test
+```
+
+## Test Results
+
+✅ Script logic verified (2025-11-11)
+- Correctly iterates through test files
+- Detects pollution creation
+- Reports the polluting test file
+- Exits early when polluter found
+
+## Usage Notes
+
+**Prerequisites:**
+- Test runner (npm test) must be configured in project
+- Test pattern must match actual test files
+- Pollution path must be accurate
+
+**Customization:**
+If your project doesn't use `npm test`, modify line 42:
+```bash
+# Replace
+npm test "$TEST_FILE" > /dev/null 2>&1 || true
+
+# With your test command
+node "$TEST_FILE" > /dev/null 2>&1 || true
+# Or
+jest "$TEST_FILE" > /dev/null 2>&1 || true
+```
+
+## Common Use Cases
+
+1. **Find test creating .git directory:**
+   ```bash
+   ./find-polluter.sh '.git' 'src/**/*.test.ts'
+   ```
+
+2. **Find test creating node_modules:**
+   ```bash
+   ./find-polluter.sh 'node_modules' 'test/**/*.spec.js'
+   ```
+
+3. **Find test creating specific file:**
+   ```bash
+   ./find-polluter.sh 'unwanted-file.txt' '**/*.test.js'
+   ```

package/templates/repo/.github/skills/devops/.env.example

@@ -0,0 +1,76 @@
+# DevOps Skill - Environment Variables
+
+# =============================================================================
+# Cloudflare Configuration
+# =============================================================================
+# Get these from: https://dash.cloudflare.com
+# API Token: Profile -> API Tokens -> Create Token
+# Account ID: Overview -> Account ID (right sidebar)
+
+CLOUDFLARE_API_TOKEN=your_cloudflare_api_token_here
+CLOUDFLARE_ACCOUNT_ID=your_cloudflare_account_id_here
+
+# Optional: Specific zone configuration
+# CLOUDFLARE_ZONE_ID=your_zone_id_here
+
+# =============================================================================
+# Google Cloud Configuration
+# =============================================================================
+# Authentication via service account key file or gcloud CLI
+# Download from: IAM & Admin -> Service Accounts -> Create Key
+
+# Option 1: Service account key file path
+GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account-key.json
+
+# Option 2: Project configuration
+# GCP_PROJECT_ID=your-project-id
+# GCP_REGION=us-central1
+# GCP_ZONE=us-central1-a
+
+# =============================================================================
+# Docker Configuration
+# =============================================================================
+# Optional: Docker registry authentication
+
+# Docker Hub
+# DOCKER_USERNAME=your_docker_username
+# DOCKER_PASSWORD=your_docker_password
+
+# Google Container Registry (GCR)
+# GCR_HOSTNAME=gcr.io
+# GCR_PROJECT_ID=your-project-id
+
+# AWS ECR
+# AWS_ACCOUNT_ID=123456789012
+# AWS_REGION=us-east-1
+
+# =============================================================================
+# CI/CD Configuration
+# =============================================================================
+# Optional: For automated deployments
+
+# GitHub Actions
+# GITHUB_TOKEN=your_github_token
+
+# GitLab CI
+# GITLAB_TOKEN=your_gitlab_token
+
+# =============================================================================
+# Monitoring & Logging
+# =============================================================================
+# Optional: For observability
+
+# Sentry
+# SENTRY_DSN=your_sentry_dsn
+
+# Datadog
+# DD_API_KEY=your_datadog_api_key
+
+# =============================================================================
+# Notes
+# =============================================================================
+# 1. Copy this file to .env and fill in your actual values
+# 2. Never commit .env file to version control
+# 3. Use different credentials for dev/staging/production
+# 4. Rotate credentials regularly
+# 5. Use least-privilege principle for API tokens

package/templates/repo/.github/skills/devops/SKILL.md

@@ -0,0 +1,104 @@
+---
+name: devops
+description: Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Azure (App Service, AKS), Kubernetes (kubectl, Helm). Use for serverless, containers, CI/CD, GitOps, security audit.
+license: MIT
+version: 2.0.0
+---
+
+# DevOps Skill
+
+Deploy and manage cloud infrastructure across Cloudflare, Docker, Google Cloud, and Kubernetes.
+
+## When to Use
+
+- Deploy serverless apps to Cloudflare Workers/Pages
+- Containerize apps with Docker, Docker Compose
+- Manage GCP with gcloud CLI (Cloud Run, GKE, Cloud SQL)
+- Kubernetes cluster management (kubectl, Helm)
+- GitOps workflows (Argo CD, Flux)
+- CI/CD pipelines, multi-region deployments
+- Security audits, RBAC, network policies
+
+## Platform Selection
+
+| Need | Choose |
+|------|--------|
+| Sub-50ms latency globally | Cloudflare Workers |
+| Large file storage (zero egress) | Cloudflare R2 |
+| SQL database (global reads) | Cloudflare D1 |
+| Containerized workloads | Docker + Cloud Run/GKE/Azure Container Apps |
+| Enterprise Kubernetes | GKE / AKS |
+| Managed relational DB | Cloud SQL / Azure SQL |
+| .NET workloads | Azure App Service / Container Apps |
+| Static site + API | Cloudflare Pages |
+| Container orchestration | Kubernetes |
+| Package management for K8s | Helm |
+
+## Quick Start
+
+```bash
+# Cloudflare Worker
+wrangler init my-worker && cd my-worker && wrangler deploy
+
+# Docker
+docker build -t myapp . && docker run -p 3000:3000 myapp
+
+# GCP Cloud Run
+gcloud run deploy my-service --image gcr.io/project/image --region us-central1
+
+# Azure App Service (.NET)
+az webapp up --name myapp --resource-group mygroup --runtime "DOTNET:8.0"
+
+# Azure Container Apps
+az containerapp up --name myapp --resource-group mygroup --image myregistry.azurecr.io/myapp:latest
+
+# Kubernetes
+kubectl apply -f manifests/ && kubectl get pods
+```
+
+## Reference Navigation
+
+### Cloudflare Platform
+- `cloudflare-platform.md` - Edge computing overview
+- `cloudflare-workers-basics.md` - Handler types, patterns
+- `cloudflare-workers-advanced.md` - Performance, optimization
+- `cloudflare-workers-apis.md` - Runtime APIs, bindings
+- `cloudflare-r2-storage.md` - Object storage, S3 compatibility
+- `cloudflare-d1-kv.md` - D1 SQLite, KV store
+- `browser-rendering.md` - Puppeteer automation
+
+### Docker
+- `docker-basics.md` - Dockerfile, images, containers
+- `docker-compose.md` - Multi-container apps
+
+### Google Cloud
+- `gcloud-platform.md` - gcloud CLI, authentication
+- `gcloud-services.md` - Compute Engine, GKE, Cloud Run
+
+### Kubernetes
+- `kubernetes-basics.md` - Core concepts, architecture, workloads
+- `kubernetes-kubectl.md` - Essential commands, debugging workflow
+- `kubernetes-helm.md` / `kubernetes-helm-advanced.md` - Helm charts, templates
+- `kubernetes-security.md` / `kubernetes-security-advanced.md` - RBAC, secrets
+- `kubernetes-workflows.md` / `kubernetes-workflows-advanced.md` - GitOps, CI/CD
+- `kubernetes-troubleshooting.md` / `kubernetes-troubleshooting-advanced.md` - Debug
+
+### Scripts
+- `scripts/cloudflare-deploy.py` - Automate Worker deployments
+- `scripts/docker-optimize.py` - Analyze Dockerfiles
+
+## Best Practices
+
+**Security:** Non-root containers, RBAC, secrets in env vars, image scanning
+**Performance:** Multi-stage builds, edge caching, resource limits
+**Cost:** R2 for large egress, caching, right-size resources
+**Development:** Docker Compose local dev, wrangler dev, version control IaC
+
+## Resources
+
+- Cloudflare: https://developers.cloudflare.com
+- Docker: https://docs.docker.com
+- GCP: https://cloud.google.com/docs
+- Azure: https://learn.microsoft.com/azure/
+- Kubernetes: https://kubernetes.io/docs
+- Helm: https://helm.sh/docs

package/templates/repo/.github/skills/devops/references/browser-rendering.md

@@ -0,0 +1,305 @@
+# Cloudflare Browser Rendering
+
+Headless browser automation with Puppeteer/Playwright on Cloudflare Workers.
+
+## Setup
+
+**wrangler.toml:**
+```toml
+name = "browser-worker"
+main = "src/index.ts"
+compatibility_date = "2024-01-01"
+
+browser = { binding = "MYBROWSER" }
+```
+
+## Basic Screenshot Worker
+
+```typescript
+import puppeteer from '@cloudflare/puppeteer';
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+    const page = await browser.newPage();
+
+    await page.goto('https://example.com', { waitUntil: 'networkidle2' });
+    const screenshot = await page.screenshot({ type: 'png' });
+
+    await browser.close();
+
+    return new Response(screenshot, {
+      headers: { 'Content-Type': 'image/png' }
+    });
+  }
+};
+```
+
+## Session Reuse (Cost Optimization)
+
+```typescript
+// Disconnect instead of close
+await browser.disconnect();
+
+// Retrieve and reconnect
+const sessions = await puppeteer.sessions(env.MYBROWSER);
+const freeSession = sessions.find(s => !s.connectionId);
+
+if (freeSession) {
+  const browser = await puppeteer.connect(env.MYBROWSER, freeSession.sessionId);
+}
+```
+
+## PDF Generation
+
+```typescript
+const browser = await puppeteer.launch(env.MYBROWSER);
+const page = await browser.newPage();
+
+await page.setContent(`
+  <!DOCTYPE html>
+  <html>
+    <head>
+      <style>
+        body { font-family: Arial; padding: 50px; }
+        h1 { color: #2c3e50; }
+      </style>
+    </head>
+    <body>
+      <h1>Certificate</h1>
+      <p>Awarded to: <strong>John Doe</strong></p>
+    </body>
+  </html>
+`);
+
+const pdf = await page.pdf({
+  format: 'A4',
+  printBackground: true,
+  margin: { top: '1cm', right: '1cm', bottom: '1cm', left: '1cm' }
+});
+
+await browser.close();
+
+return new Response(pdf, {
+  headers: { 'Content-Type': 'application/pdf' }
+});
+```
+
+## Durable Objects for Persistent Sessions
+
+```typescript
+export class Browser {
+  state: DurableObjectState;
+  browser: any;
+  lastUsed: number;
+
+  constructor(state: DurableObjectState, env: Env) {
+    this.state = state;
+    this.lastUsed = Date.now();
+  }
+
+  async fetch(request: Request, env: Env) {
+    if (!this.browser) {
+      this.browser = await puppeteer.launch(env.MYBROWSER);
+    }
+
+    this.lastUsed = Date.now();
+    await this.state.storage.setAlarm(Date.now() + 10000);
+
+    const page = await this.browser.newPage();
+    const url = new URL(request.url).searchParams.get('url');
+    await page.goto(url);
+    const screenshot = await page.screenshot();
+    await page.close();
+
+    return new Response(screenshot, {
+      headers: { 'Content-Type': 'image/png' }
+    });
+  }
+
+  async alarm() {
+    if (Date.now() - this.lastUsed > 60000) {
+      await this.browser?.close();
+      this.browser = null;
+    } else {
+      await this.state.storage.setAlarm(Date.now() + 10000);
+    }
+  }
+}
+```
+
+## AI-Powered Web Scraper
+
+```typescript
+import { Ai } from '@cloudflare/ai';
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+    const page = await browser.newPage();
+    await page.goto('https://news.ycombinator.com');
+    const content = await page.content();
+    await browser.close();
+
+    const ai = new Ai(env.AI);
+    const response = await ai.run('@cf/meta/llama-3-8b-instruct', {
+      messages: [
+        {
+          role: 'system',
+          content: 'Extract top 5 article titles and URLs as JSON'
+        },
+        { role: 'user', content: content }
+      ]
+    });
+
+    return Response.json(response);
+  }
+};
+```
+
+## Crawler with Queues
+
+```typescript
+export default {
+  async queue(batch: MessageBatch<any>, env: Env): Promise<void> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+
+    for (const message of batch.messages) {
+      const page = await browser.newPage();
+      await page.goto(message.body.url);
+
+      const links = await page.evaluate(() => {
+        return Array.from(document.querySelectorAll('a')).map(a => a.href);
+      });
+
+      for (const link of links) {
+        await env.QUEUE.send({ url: link });
+      }
+
+      await page.close();
+      message.ack();
+    }
+
+    await browser.close();
+  }
+};
+```
+
+## Configuration
+
+### Timeout
+```typescript
+await page.goto(url, {
+  timeout: 60000,  // 60 seconds max
+  waitUntil: 'networkidle2'
+});
+
+await page.waitForSelector('.content', { timeout: 45000 });
+```
+
+### Viewport
+```typescript
+await page.setViewport({ width: 1920, height: 1080 });
+```
+
+### Screenshot Options
+```typescript
+const screenshot = await page.screenshot({
+  type: 'png',       // 'png' | 'jpeg' | 'webp'
+  quality: 90,       // JPEG/WebP only
+  fullPage: true,    // Full scrollable page
+  clip: {            // Crop
+    x: 0, y: 0,
+    width: 800,
+    height: 600
+  }
+});
+```
+
+## Limits & Pricing
+
+### Free Plan
+- 10 minutes/day
+- 3 concurrent browsers
+- 3 new browsers/minute
+
+### Paid Plan
+- 10 hours/month included
+- 30 concurrent browsers
+- 30 new browsers/minute
+- $0.09/hour overage
+- $2.00/concurrent browser overage
+
+### Cost Optimization
+1. Use `disconnect()` instead of `close()`
+2. Enable Keep-Alive (10 min max)
+3. Pool tabs with browser contexts
+4. Cache auth state with KV
+5. Implement Durable Objects cleanup
+
+## Best Practices
+
+### Session Management
+- Always use `disconnect()` for reuse
+- Implement session pooling
+- Track session IDs and states
+
+### Performance
+- Cache content in KV
+- Use browser contexts vs multiple browsers
+- Choose appropriate `waitUntil` strategy
+- Set realistic timeouts
+
+### Error Handling
+- Handle timeout errors gracefully
+- Check session availability before connecting
+- Validate responses before caching
+
+### Security
+- Validate user-provided URLs
+- Implement authentication
+- Sanitize extracted content
+- Set appropriate CORS headers
+
+## Troubleshooting
+
+**Timeout Errors:**
+```typescript
+await page.goto(url, {
+  timeout: 60000,
+  waitUntil: 'domcontentloaded'  // Faster than networkidle2
+});
+```
+
+**Memory Issues:**
+```typescript
+await page.close();  // Close pages
+await browser.disconnect();  // Reuse session
+```
+
+**Font Rendering:**
+Use supported fonts (Noto Sans, Roboto, etc.) or inject custom:
+```html
+<link href="https://fonts.googleapis.com/css2?family=Poppins" rel="stylesheet">
+```
+
+## Key Methods
+
+### Puppeteer
+- `puppeteer.launch(binding)` - Start browser
+- `puppeteer.connect(binding, sessionId)` - Reconnect
+- `puppeteer.sessions(binding)` - List sessions
+- `browser.newPage()` - Create page
+- `browser.disconnect()` - Disconnect (keep alive)
+- `browser.close()` - Close (terminate)
+- `page.goto(url, options)` - Navigate
+- `page.screenshot(options)` - Capture
+- `page.pdf(options)` - Generate PDF
+- `page.content()` - Get HTML
+- `page.evaluate(fn)` - Execute JS
+
+## Resources
+
+- Docs: https://developers.cloudflare.com/browser-rendering/
+- Puppeteer: https://pptr.dev/
+- Examples: https://developers.cloudflare.com/workers/examples/