ethan-skill 1.7.0 → 1.9.0

package/dist/skills/20-cicd.js

@@ -0,0 +1,364 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cicdSkill = void 0;
+exports.cicdSkill = {
+    id: 'cicd',
+    name: 'CI/CD 流水线',
+    nameEn: 'cicd',
+    order: 20,
+    category: '执行侧',
+    description: '设计完整 CI/CD 流水线，涵盖流水线阶段设计、测试自动化、部署门控和回滚策略',
+    descriptionEn: 'Design complete CI/CD pipelines covering stage design, test automation, deployment gates, and rollback triggers',
+    detailDescription: `端到端 CI/CD 流水线设计指导，从流水线阶段规划、构建优化、测试自动化分层，
+到部署策略（蓝绿/金丝雀）、部署门控配置和自动回滚机制，帮助团队建立快速、安全的持续交付体系。`,
+    triggers: [
+        'CI/CD',
+        'cicd',
+        '流水线',
+        'pipeline',
+        '持续集成',
+        'continuous integration',
+        '持续部署',
+        'continuous deployment',
+        '自动化部署',
+        'automated deployment',
+        'GitHub Actions',
+        '构建优化',
+        '@ethan cicd',
+        '@ethan ci',
+    ],
+    steps: [
+        {
+            title: '1. 流水线阶段设计',
+            content: `**标准 CI/CD 流水线结构**
+
+\`\`\`
+Push/PR → [CI 阶段] → [镜像构建] → [部署到 Staging] → [部署到 Production]
+
+CI 阶段（每次 Push/PR 触发）:
+  ├── 代码检查: Lint + Type Check
+  ├── 单元测试: Unit Tests + Coverage
+  ├── 安全扫描: SAST + Dependency Audit
+  └── 构建验证: Build Success Check
+
+镜像构建（CI 通过后）:
+  ├── Docker Build（多平台）
+  ├── 镜像安全扫描（Trivy）
+  └── 推送到 Registry（打 tag）
+
+部署流程:
+  ├── Staging（自动，合并到 main 后）
+  │   ├── 集成测试
+  │   └── E2E 测试（冒烟）
+  └── Production（需审批 or 手动触发）
+      ├── 部署策略（蓝绿/金丝雀）
+      └── 部署后验证（健康检查）
+\`\`\`
+
+**快速反馈原则**
+- CI 总时长目标：< 10 分钟（开发者等待阈值）
+- 测试并行化：单元测试 → 集成测试 → E2E（分层执行）
+- Fail Fast：代码格式错误最先检查，最快发现`,
+        },
+        {
+            title: '2. GitHub Actions 流水线配置',
+            content: `**完整 CI 工作流示例**
+\`\`\`yaml
+# .github/workflows/ci.yml
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+env:
+  NODE_VERSION: '20'
+  REGISTRY: ghcr.io
+  IMAGE_NAME: \${{ github.repository }}
+
+jobs:
+  # ─── 代码质量检查 ───────────────────────────────
+  lint:
+    name: Lint & Type Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: \${{ env.NODE_VERSION }}
+          cache: 'npm'
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run typecheck
+
+  # ─── 测试 ────────────────────────────────────────
+  test:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: \${{ env.NODE_VERSION }}
+          cache: 'npm'
+      - run: npm ci
+      - run: npm run test -- --coverage
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          token: \${{ secrets.CODECOV_TOKEN }}
+
+  # ─── 安全扫描 ───────────────────────────────────
+  security:
+    name: Security Audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: npm audit --audit-level=high
+      - uses: github/codeql-action/init@v3
+        with:
+          languages: javascript
+      - uses: github/codeql-action/analyze@v3
+
+  # ─── 构建镜像 ───────────────────────────────────
+  build:
+    name: Build & Push Image
+    needs: [lint, test, security]
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    permissions:
+      contents: read
+      packages: write
+    outputs:
+      image-tag: \${{ steps.meta.outputs.tags }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: \${{ env.REGISTRY }}
+          username: \${{ github.actor }}
+          password: \${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: \${{ env.REGISTRY }}/\${{ env.IMAGE_NAME }}
+          tags: |
+            type=sha,prefix={{branch}}-
+            type=semver,pattern={{version}}
+      - uses: docker/build-push-action@v5
+        with:
+          push: true
+          tags: \${{ steps.meta.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+\`\`\``,
+        },
+        {
+            title: '3. 构建速度优化',
+            content: `**缓存策略**
+\`\`\`yaml
+# npm/yarn 依赖缓存
+- uses: actions/cache@v4
+  with:
+    path: ~/.npm
+    key: \${{ runner.os }}-node-\${{ hashFiles('**/package-lock.json') }}
+    restore-keys: |
+      \${{ runner.os }}-node-
+
+# Docker layer 缓存（使用 GitHub Actions Cache）
+- uses: docker/build-push-action@v5
+  with:
+    cache-from: type=gha
+    cache-to: type=gha,mode=max
+\`\`\`
+
+**并行执行策略**
+\`\`\`yaml
+# 使用 matrix 并行运行测试
+jobs:
+  test:
+    strategy:
+      matrix:
+        shard: [1, 2, 3, 4]     # 4个并行 runner
+    steps:
+      - run: npm test -- --shard=\${{ matrix.shard }}/4
+\`\`\`
+
+**跳过不必要的 CI**
+\`\`\`yaml
+# 路径过滤：文档变更不触发完整 CI
+on:
+  push:
+    paths-ignore:
+      - 'docs/**'
+      - '*.md'
+      - '.github/ISSUE_TEMPLATE/**'
+
+# 或者使用 paths 只触发相关路径
+on:
+  push:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+      - 'package*.json'
+\`\`\`
+
+**Self-hosted Runner（节省 CI 费用）**
+\`\`\`
+适用场景: 大型项目、私有依赖、特殊硬件需求
+注意事项:
+- 安全隔离（不要在 public repo 使用 self-hosted runner）
+- 定期更新 runner 软件
+- 隔离不同项目的 runner（避免环境污染）
+\`\`\``,
+        },
+        {
+            title: '4. 部署策略与门控',
+            content: `**三种主要部署策略**
+
+**蓝绿部署（Blue-Green）**
+\`\`\`
+适用: 需要零停机、可快速回滚的场景
+成本: 双倍资源（同时运行两套环境）
+
+Blue（当前生产）: v1.0 → 接收所有流量
+Green（新版本）:  v1.1 → 部署验证中
+切换: 负载均衡器流量从 Blue → Green（瞬间完成）
+回滚: 流量切回 Blue（秒级）
+\`\`\`
+
+**金丝雀部署（Canary Release）**
+\`\`\`
+适用: 高风险变更、需要渐进式验证
+流程:
+  1%流量 → 新版本（观察5min）
+  → 10%（观察15min）
+  → 50%（观察30min）
+  → 100%（全量）
+
+Kubernetes 实现:
+kubectl scale deployment app-v2 --replicas=1   # 1/10 = 10%
+kubectl scale deployment app-v1 --replicas=9
+\`\`\`
+
+**部署门控（Deployment Gates）配置**
+\`\`\`yaml
+# GitHub Environments 配置审批
+deploy-production:
+  environment:
+    name: production
+    url: https://app.example.com
+  # 需要人工审批
+  steps:
+    - name: Request approval
+      uses: trstringer/manual-approval@v1
+      with:
+        approvers: team-lead,cto
+        minimum-approvals: 1
+
+# 自动门控：基于健康检查
+deploy-production:
+  steps:
+    - name: Deploy
+      run: kubectl apply -f k8s/
+    - name: Wait for rollout
+      run: kubectl rollout status deployment/app --timeout=5m
+    - name: Smoke test
+      run: |
+        sleep 10
+        curl -f https://api.example.com/health || exit 1
+\`\`\``,
+        },
+        {
+            title: '5. 回滚策略与监控告警',
+            content: `**自动回滚触发条件**
+\`\`\`yaml
+# 部署后自动验证，失败则回滚
+steps:
+  - name: Deploy to production
+    id: deploy
+    run: kubectl set image deployment/app app=\${{ env.NEW_IMAGE }}
+
+  - name: Monitor deployment health
+    run: |
+      # 等待10分钟，监控错误率
+      for i in {1..20}; do
+        ERROR_RATE=$(curl -s https://metrics.example.com/api/error-rate)
+        if (( $(echo "$ERROR_RATE > 5" | bc -l) )); then
+          echo "Error rate $ERROR_RATE% exceeds threshold, rolling back!"
+          kubectl rollout undo deployment/app
+          exit 1
+        fi
+        sleep 30
+      done
+
+  - name: Rollback on failure
+    if: failure() && steps.deploy.outcome == 'success'
+    run: kubectl rollout undo deployment/app
+\`\`\`
+
+**Kubernetes 滚动更新配置**
+\`\`\`yaml
+# deployment.yaml
+spec:
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1          # 最多多启动1个 Pod
+      maxUnavailable: 0    # 始终保持满负载（零停机）
+  minReadySeconds: 30      # Pod 就绪后等待30s再继续
+\`\`\`
+
+**部署通知**
+\`\`\`yaml
+# 部署成功/失败通知到 Slack
+- name: Notify deployment status
+  uses: slackapi/slack-github-action@v1
+  with:
+    channel-id: 'deployments'
+    slack-message: |
+      \${{ job.status == 'success' && '✅' || '❌' }} Deployment to Production
+      Version: \${{ github.sha }}
+      Actor: \${{ github.actor }}
+      Status: \${{ job.status }}
+  env:
+    SLACK_BOT_TOKEN: \${{ secrets.SLACK_BOT_TOKEN }}
+\`\`\`
+
+**关键 CI/CD 指标**
+
+| 指标 | 目标 | 说明 |
+|------|------|------|
+| Lead Time | < 1天 | 代码到生产的时间 |
+| Deploy Frequency | 每日1次+ | 部署频率 |
+| MTTR | < 1小时 | 故障恢复时间 |
+| Change Failure Rate | < 15% | 部署导致故障比例 |`,
+        },
+    ],
+    outputFormat: 'Markdown CI/CD 方案文档，含流水线阶段图、GitHub Actions YAML 配置、部署策略对比和回滚方案',
+    examples: [
+        {
+            input: '帮我设计一个 Node.js 项目的 GitHub Actions CI/CD 流水线',
+            output: `## CI/CD 流水线方案
+
+**流程**: PR → CI（lint + test + security）→ 合并 main → 构建镜像 → 部署 Staging → 人工审批 → 部署 Production
+
+**关键配置**:
+- 使用 npm cache + Docker layer cache，目标 CI 时间 < 8 分钟
+- Production 部署需 team-lead 审批（GitHub Environment protection rules）
+- 部署后自动运行健康检查，失败自动 kubectl rollout undo
+- Slack 通知部署结果`,
+        },
+    ],
+    notes: [
+        '流水线应该是可靠的，不稳定的 CI 比没有 CI 更糟糕（影响信任度）',
+        '保护 main 分支，禁止直接推送，所有变更必须经过 PR + CI 验证',
+        '密钥统一用 GitHub Secrets / Vault 管理，严禁硬编码在配置文件中',
+        '定期检查并更新 CI Actions 版本，避免使用废弃的 Action 版本',
+    ],
+    nextSkill: 'performance',
+};
+//# sourceMappingURL=20-cicd.js.map

package/dist/skills/20-cicd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20-cicd.js","sourceRoot":"","sources":["../../src/skills/20-cicd.ts"],"names":[],"mappings":";;;AAEa,QAAA,SAAS,GAAoB;IACxC,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,0CAA0C;IACvD,aAAa,EAAE,iHAAiH;IAChI,iBAAiB,EAAE;gDAC2B;IAC9C,QAAQ,EAAE;QACR,OAAO;QACP,MAAM;QACN,KAAK;QACL,UAAU;QACV,MAAM;QACN,wBAAwB;QACxB,MAAM;QACN,uBAAuB;QACvB,OAAO;QACP,sBAAsB;QACtB,gBAAgB;QAChB,MAAM;QACN,aAAa;QACb,WAAW;KACZ;IACD,KAAK,EAAE;QACL;YACE,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA4Ba;SACvB;QACD;YACE,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4FR;SACF;QACD;YACE,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDR;SACF;QACD;YACE,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqDR;SACF;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA6D4B;SACtC;KACF;IACD,YAAY,EACV,gEAAgE;IAClE,QAAQ,EAAE;QACR;YACE,KAAK,EAAE,6CAA6C;YACpD,MAAM,EAAE;;;;;;;;eAQC;SACV;KACF;IACD,KAAK,EAAE;QACL,qCAAqC;QACrC,uCAAuC;QACvC,6CAA6C;QAC7C,yCAAyC;KAC1C;IACD,SAAS,EAAE,aAAa;CACzB,CAAC"}

package/dist/skills/21-performance.d.ts

@@ -0,0 +1,3 @@
+import type { SkillDefinition } from './types';
+export declare const performanceSkill: SkillDefinition;
+//# sourceMappingURL=21-performance.d.ts.map

package/dist/skills/21-performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"21-performance.d.ts","sourceRoot":"","sources":["../../src/skills/21-performance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,eAAO,MAAM,gBAAgB,EAAE,eAsI9B,CAAC"}

package/dist/skills/21-performance.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performanceSkill = void 0;
+exports.performanceSkill = {
+    id: 'performance',
+    name: '性能优化',
+    nameEn: 'performance',
+    order: 21,
+    category: '质量侧',
+    description: '系统化分析和优化前后端性能瓶颈，涵盖分析工具使用、优化策略和量化指标',
+    descriptionEn: 'Systematically analyze and optimize frontend/backend performance bottlenecks with profiling tools and metrics',
+    detailDescription: `从性能指标定义、瓶颈定位到针对性优化，覆盖前端（Core Web Vitals）、后端（数据库、缓存）三个层次，建立可量化的性能优化体系。`,
+    triggers: [
+        '性能优化',
+        'performance',
+        '页面慢',
+        '接口慢',
+        '性能分析',
+        'profiling',
+        'Core Web Vitals',
+        '@ethan 性能',
+        '/性能优化',
+    ],
+    steps: [
+        {
+            title: '1. 建立性能基线与目标',
+            content: `优化前先量化，避免盲目优化。
+
+**前端核心指标（Core Web Vitals）**
+| 指标 | 含义 | 优秀 | 需改进 | 差 |
+|------|------|------|--------|-----|
+| LCP | 最大内容绘制 | ≤ 2.5s | ≤ 4s | > 4s |
+| INP | 交互响应延迟 | ≤ 200ms | ≤ 500ms | > 500ms |
+| CLS | 累积布局偏移 | ≤ 0.1 | ≤ 0.25 | > 0.25 |
+| TTFB | 首字节时间 | ≤ 800ms | ≤ 1.8s | > 1.8s |
+
+**采集工具**
+\`\`\`bash
+npm install -g @lhci/cli
+lhci autorun --collect.url=https://yoursite.com
+
+npx autocannon -c 100 -d 30 http://localhost:3000/api/users
+\`\`\``,
+        },
+        {
+            title: '2. 前端性能优化',
+            content: `**资源加载优化**
+\`\`\`html
+<link rel="preload" href="/fonts/main.woff2" as="font" crossorigin>
+<link rel="preconnect" href="https://api.example.com">
+<img src="hero.jpg" loading="eager" fetchpriority="high" />
+<img src="below-fold.jpg" loading="lazy" />
+\`\`\`
+
+**代码拆分（React）**
+\`\`\`typescript
+const UserProfile = lazy(() => import('./pages/UserProfile'));
+
+// 虚拟列表（大数据量）
+import { FixedSizeList } from 'react-window';
+<FixedSizeList height={600} itemCount={10000} itemSize={50}>
+  {({ index, style }) => <div style={style}>Row {index}</div>}
+</FixedSizeList>
+\`\`\`
+
+**打包体积优化**
+\`\`\`bash
+npx vite-bundle-visualizer
+# Tree-shaking: 按需引入
+import { debounce } from 'lodash-es';  // ✅ 非 import _ from 'lodash'
+\`\`\``,
+        },
+        {
+            title: '3. 后端与数据库性能优化',
+            content: `**数据库查询优化**
+\`\`\`sql
+EXPLAIN ANALYZE SELECT u.*, COUNT(o.id)
+FROM users u LEFT JOIN orders o ON u.id = o.user_id
+WHERE u.status = 'active' GROUP BY u.id;
+
+-- 复合索引
+CREATE INDEX idx_user_status_created ON users(status, created_at);
+\`\`\`
+
+**缓存策略（Redis）**
+\`\`\`typescript
+async function getUserProfile(userId: string) {
+  const cacheKey = \`user:profile:\${userId}\`;
+  const cached = await redis.get(cacheKey);
+  if (cached) return JSON.parse(cached);
+  const user = await db.users.findUnique({ where: { id: userId } });
+  const ttl = 300 + Math.floor(Math.random() * 60); // 随机TTL防雪崩
+  await redis.setex(cacheKey, ttl, JSON.stringify(user));
+  return user;
+}
+\`\`\`
+
+**并行化异步操作**
+\`\`\`typescript
+// ✅ 并行（快）
+const [user, orders] = await Promise.all([getUser(id), getOrders(id)]);
+\`\`\``,
+        },
+        {
+            title: '4. 性能优化 Checklist 与持续监控',
+            content: `**优化优先级矩阵**
+| 优化项 | 影响 | 成本 | 优先级 |
+|--------|------|------|--------|
+| 图片压缩/WebP | 高 | 低 | 🔴 立即 |
+| 关键资源预加载 | 高 | 低 | 🔴 立即 |
+| 数据库慢查询修复 | 高 | 中 | 🔴 立即 |
+| 代码拆分/懒加载 | 高 | 中 | 🟡 近期 |
+| Redis 缓存层 | 高 | 高 | 🟡 规划 |
+
+**Lighthouse CI 集成**
+\`\`\`yaml
+- name: Lighthouse CI
+  uses: treosh/lighthouse-ci-action@v10
+  with:
+    urls: https://yoursite.com
+    uploadArtifacts: true
+\`\`\`
+
+**性能优化报告模板**
+\`\`\`
+优化前：LCP 4.8s | FCP 3.2s | P99 API 1200ms
+已实施：图片WebP → LCP -1.8s；加索引 → P99 -600ms
+优化后：LCP 2.3s ✅ | FCP 1.4s ✅ | P99 380ms ✅
+\`\`\``,
+        },
+    ],
+    outputFormat: 'Markdown 性能分析报告，含当前指标基线、瓶颈列表、优化方案和预期收益',
+    notes: [
+        '先测量再优化，不要猜测瓶颈，用数据说话',
+        'Core Web Vitals 直接影响 Google SEO 排名',
+        '缓存是最有效的优化，但要仔细设计失效策略',
+    ],
+};
+//# sourceMappingURL=21-performance.js.map

package/dist/skills/21-performance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"21-performance.js","sourceRoot":"","sources":["../../src/skills/21-performance.ts"],"names":[],"mappings":";;;AAEa,QAAA,gBAAgB,GAAoB;IAC/C,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,oCAAoC;IACjD,aAAa,EAAE,+GAA+G;IAC9H,iBAAiB,EAAE,uEAAuE;IAC1F,QAAQ,EAAE;QACR,MAAM;QACN,aAAa;QACb,KAAK;QACL,KAAK;QACL,MAAM;QACN,WAAW;QACX,iBAAiB;QACjB,WAAW;QACX,OAAO;KACR;IACD,KAAK,EAAE;QACL;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE;;;;;;;;;;;;;;;;OAgBR;SACF;QACD;YACE,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;OAwBR;SACF;QACD;YACE,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BR;SACF;QACD;YACE,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;OAuBR;SACF;KACF;IACD,YAAY,EAAE,wCAAwC;IACtD,KAAK,EAAE;QACL,qBAAqB;QACrB,oCAAoC;QACpC,sBAAsB;KACvB;CACF,CAAC"}

package/dist/skills/22-refactoring.d.ts

@@ -0,0 +1,3 @@
+import type { SkillDefinition } from './types';
+export declare const refactoringSkill: SkillDefinition;
+//# sourceMappingURL=22-refactoring.d.ts.map

package/dist/skills/22-refactoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"22-refactoring.d.ts","sourceRoot":"","sources":["../../src/skills/22-refactoring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,eAAO,MAAM,gBAAgB,EAAE,eAsO9B,CAAC"}