evnict-kit 0.2.1 → 0.2.3

package/README.md

@@ -1,19 +1,369 @@
-# EVNICT-KIT v0.1.2
+<div align="center">
 
-> Bộ công cụ hỗ trợ PTPM với AI — theo QĐ-TTPM
-> Tích hợp OpenSpec (SDD) + TDD Workflow + LLM Wiki
+# 🚀 EVNICT-KIT
 
-## Quick Start
+### AI-Assisted Development Toolkit
+
+[![npm version](https://img.shields.io/npm/v/evnict-kit.svg?style=flat-square&color=cb3837)](https://www.npmjs.com/package/evnict-kit)
+[![node](https://img.shields.io/node/v/evnict-kit.svg?style=flat-square&color=339933)](https://nodejs.org)
+[![license](https://img.shields.io/npm/l/evnict-kit.svg?style=flat-square&color=blue)](https://www.npmjs.com/package/evnict-kit)
+[![downloads](https://img.shields.io/npm/dt/evnict-kit.svg?style=flat-square&color=brightgreen)](https://www.npmjs.com/package/evnict-kit)
+
+**Bộ công cụ chuẩn hóa phát triển phần mềm với AI Agent — theo QĐ-TTPM**
+
+*Tích hợp Rules Engine · Skills Framework · TDD Workflows · Wiki Knowledge Base · Multi-Tool Support*
+
+---
+
+[Cài đặt](#-cài-đặt) · [Quick Start](#-quick-start) · [Tính năng](#-tính-năng) · [Workflows](#-danh-sách-workflows) · [Multi-Tool](#-multi-tool-support) · [CLI Commands](#-cli-commands)
+
+</div>
+
+---
+
+## 📦 Cài đặt
 
 ```bash
 npm install -g evnict-kit
-cd /path/to/workspace       # chứa cmis-be/ và cmis-fe/
-evnict-kit init --name=cmis --be=cmis-be --fe=cmis-fe
 ```
 
-Mở AI Agent trong cmis-be/ → chạy: /evnict-kit:init-rules
+Kiểm tra cài đặt:
+
+```bash
+evnict-kit --version       # Xem phiên bản hiện tại
+evnict-kit doctor           # Kiểm tra môi trường & cập nhật
+evnict-kit info             # Thống kê chi tiết về toolkit
+```
+
+> **Yêu cầu:** Node.js >= 18.0.0
+
+---
+
+## ⚡ Quick Start
+
+### 1. Khởi tạo workspace
+
+```bash
+cd /path/to/workspace         # Thư mục chứa các project BE, FE
+evnict-kit init --name=myapp --be=myapp-be --fe=myapp-fe
+```
+
+### 2. Setup AI Agent trong từng project
+
+Mở AI Agent (Antigravity / Claude / Cursor / ...) trong thư mục project, sau đó gõ:
+
+```
+/evnict-kit:init-rules        # Agent quét code → tự sinh coding rules
+/evnict-kit:init-context      # Agent sinh context file (AGENTS.md)
+/evnict-kit:init-wiki         # Setup wiki repo tri thức
+/evnict-kit:wiki-scan-project # Scan code → nạp wiki lần đầu
+```
+
+### 3. Bắt đầu phát triển
+
+```
+/evnict-kit:feature-large "Mô tả tính năng"   # Feature lớn (BE+FE+DB)
+/evnict-kit:feature-small "Mô tả"             # Feature nhỏ (sửa UI, thêm field)
+/evnict-kit:bug-fix "Mô tả bug"               # Sửa bug với TDD
+```
+
+---
+
+## 🎯 Tính năng
+
+### 🧠 Rules Engine — 5 Rule Sets
+
+| Rule File | Nội dung |
+|-----------|----------|
+| `01-general-rules` | Quy tắc chung — git flow, commit convention, code style |
+| `02-security-rules` | ATTT — OWASP, input validation, auth/authz |
+| `03-backend-conventions` | BE — Spring Boot / ASP.NET / Java EE patterns |
+| `04-frontend-conventions` | FE — Angular / React component & state patterns |
+| `05-project-conventions` | Project-specific — Agent tự scan & bổ sung |
+
+### 🛠️ Skills Framework — 22 Skills
+
+Kỹ năng chuyên biệt giúp Agent thực thi chính xác:
+
+| Nhóm | Skills |
+|------|--------|
+| **Development** | `create-api` · `create-component` · `create-page` · `database-migration` |
+| **Quality** | `code-review` · `tdd` · `bug-fix` · `fix-business-logic` · `fix-attt` |
+| **Process** | `brainstorm` · `spec` · `checkpoint` · `coordinate` · `prompt-standard` |
+| **Git** | `finish-branch` · `merge-checklist` · `git-worktrees` · `receiving-review` |
+| **Knowledge** | `wiki` · `onboard` · `doc-postmortem` · `security-audit` |
+
+### 📋 Workflows — 17 Quy trình
+
+Quy trình từng bước, Agent thực thi tự động:
+
+| Workflow | Mô tả |
+|----------|-------|
+| `feature-large` | Brainstorm → Spec → Plan → Implement → Review |
+| `feature-small` | Query wiki → Plan nhanh → Implement |
+| `bug-fix` | Classify → Root cause → TDD fix |
+| `plan` | Sinh plan + task files chi tiết |
+| `implement` | TDD per subtask (STOP-AND-ASK) |
+| `handoff` | Trao đổi giữa BE ↔ FE Agents |
+| `review` | Auto review trước merge |
+| `attt` | Quét & fix lỗi bảo mật |
+| `wiki-scan-project` | Scan code → nạp wiki tri thức |
+| `wiki-archive-feature` | Nạp tri thức feature vào wiki |
+| `wiki-query` | Tìm thông tin trong wiki |
+| `init-rules` / `init-context` / `init-check` / `init-wiki` | Setup ban đầu |
+| `spec-archive` | Lưu trữ specification |
+
+### 📚 Wiki — Knowledge Base
+
+Hệ thống tri thức dùng chung giữa các Agent (BE + FE qua symlink):
+
+- **Scan & Ingest**: Quét code tự động → sinh wiki notes
+- **Query**: Tìm kiếm tri thức trước khi code
+- **Archive**: Nạp tri thức sau mỗi feature/bugfix
+- **Handoff Protocol**: Trao đổi file `handoff.md` giữa các Agent
+
+---
+
+## 🔧 Multi-Tool Support
+
+EVNICT-KIT hỗ trợ **5 AI coding tools** — cùng hệ tri thức, khác format deploy:
+
+| Tool | Agent Dir | Context File | Deploy Mode |
+|------|-----------|-------------|-------------|
+| **Antigravity** (default) | `.agent/` | `AGENTS.md` | Rules + Skills + Workflows |
+| **Claude Code** | `.claude/` | `CLAUDE.md` | Mega-file + Commands |
+| **Cursor** | `.cursor/` | `.cursorrules` | Rules only (`.mdc`) |
+| **GitHub Copilot** | `.github/` | `copilot-instructions.md` | Single file |
+| **OpenAI Codex** | `.agent/` | `AGENTS.md` | Rules + Skills + Workflows |
+
+```bash
+# Chọn tool khi init
+evnict-kit init --name=myapp --tool=claude
+evnict-kit init --name=myapp --tool=cursor
+
+# Hoặc thay đổi tool cho project đã init
+evnict-kit init-rules --tool=cursor
+```
+
+---
+
+## 💻 CLI Commands
+
+### Lệnh chính (Terminal)
+
+| Lệnh | Mô tả |
+|-------|-------|
+| `evnict-kit init` | Khởi tạo workspace — interactive wizard hoặc flags |
+| `evnict-kit add <folder>` | Thêm project vào workspace đã init |
+| `evnict-kit doctor` | 🩺 Kiểm tra môi trường, phiên bản, cập nhật |
+| `evnict-kit info` | 📊 Thống kê chi tiết toolkit |
+| `evnict-kit upgrade` | 🔄 Kiểm tra & cập nhật phiên bản mới nhất |
+| `evnict-kit sync` | 🔄 Re-deploy templates vào các project — ghi đè files evnict-kit, giữ nguyên files user |
+
+### Lệnh Agent (gõ trong AI Agent chat)
+
+| Lệnh | Mô tả |
+|-------|-------|
+| `/evnict-kit:init-rules` | Agent quét code → điền conventions |
+| `/evnict-kit:init-context` | Agent sinh AGENTS.md |
+| `/evnict-kit:init-check` | Agent sinh demo code verify |
+| `/evnict-kit:init-wiki` | Setup wiki repo |
+| `/evnict-kit:feature-large "..."` | Phát triển feature lớn |
+| `/evnict-kit:feature-small "..."` | Phát triển feature nhỏ |
+| `/evnict-kit:bug-fix "..."` | Sửa bug với TDD |
+| `/evnict-kit:plan` | Sinh plan chi tiết |
+| `/evnict-kit:implement` | TDD implement |
+| `/evnict-kit:handoff` | Chuyển giao BE ↔ FE |
+| `/evnict-kit:review` | Auto review |
+| `/evnict-kit:attt` | Kiểm tra ATTT |
+| `/evnict-kit:wiki-query "..."` | Tìm tri thức |
+| `/evnict-kit:wiki-scan-project` | Scan code → wiki |
+| `/evnict-kit:wiki-archive-feature` | Nạp tri thức feature |
+
+---
+
+## 📐 Kiến trúc
+
+```
+evnict-kit/
+├── bin/cli.js                  # CLI entry point (Commander.js)
+├── src/
+│   ├── commands/               # CLI command handlers
+│   │   ├── init.js             # Interactive wizard + workspace setup
+│   │   ├── add.js              # Thêm project vào workspace
+│   │   ├── doctor.js           # Health check & version check
+│   │   ├── info.js             # Toolkit statistics
+│   │   └── upgrade.js          # Auto-upgrade
+│   └── utils/
+│       ├── config.js           # Config loader + TOOL_MAP
+│       └── file.js             # File utilities
+└── templates/
+    ├── content/                # Tool-agnostic content (source of truth)
+    │   ├── rules/              # 5 rule files
+    │   ├── skills/             # 22 skill folders
+    │   └── workflows/          # 17 workflow files
+    ├── rules/                  # Tool-specific formatted rules
+    │   ├── antigravity/        # .md files
+    │   ├── claude/             # Mega-file sections
+    │   └── cursor/             # .mdc files
+    ├── workflows/              # Tool-specific formatted workflows
+    ├── skills/                 # Tool-specific formatted skills
+    ├── context/                # Context file templates
+    ├── instruct/               # Instruction templates
+    ├── wiki/                   # Wiki scaffold (MIT — llm-wiki)
+    └── GETTING-STARTED.md      # User guide (deployed vào project)
+```
+
+---
+
+## 🔄 Luồng làm việc
+
+### Feature Development (Full)
+
+```
+feature-large → plan → implement → handoff → review → wiki-archive-feature
+```
+
+### Feature Development (Quick)
+
+```
+feature-small → implement → wiki-archive-feature (optional)
+```
+
+### Bug Fix
+
+```
+bug-fix → implement fix → wiki-archive-feature (optional)
+```
+
+### Workspace Setup
+
+```
+evnict-kit init → init-rules → init-context → init-check → init-wiki → wiki-scan-project
+```
+
+### Handoff Protocol (BE ↔ FE)
+
+```
+BE: /evnict-kit:handoff → sinh entry 🔴 Chờ xử lý
+FE: Đọc handoff.md → implement → update 🟢 Đã xử lý
+```
+
+---
+
+## ⚙️ Options Reference
+
+### `evnict-kit init`
+
+| Flag | Mô tả | Default |
+|------|-------|---------|
+| `--name <n>` | Tên dự án | *(interactive)* |
+| `--be <folder>` | Folder backend | `<name>-be` |
+| `--fe <folder>` | Folder frontend | `<name>-fe` |
+| `--tool <tool>` | AI tool | `antigravity` |
+| `--tech-be <tech>` | `springboot\|aspnet\|javaee` | `springboot` |
+| `--tech-fe <tech>` | `angular\|react-web\|react-mobile` | `angular` |
+| `--db <db>` | `oracle\|sqlserver` | `oracle` |
+| `--no-wiki` | Không setup wiki | `false` |
+| `--no-interactive` | Non-interactive mode | `false` |
+
+### `evnict-kit add <folder>`
+
+| Flag | Mô tả |
+|------|-------|
+| `--type <type>` | `backend\|frontend` |
+| `--tech <tech>` | `springboot\|angular\|react-web\|...` |
+| `--tool <tool>` | Override AI tool |
+
+---
+
+## 📊 Stats
+
+| Metric | Count |
+|--------|-------|
+| Rule Sets | 5 |
+| Skills | 23 |
+| Workflows | 17 |
+| Supported AI Tools | 5 |
+| Tech Stacks (BE) | SpringBoot · ASP.NET · Java EE |
+| Tech Stacks (FE) | Angular · React Web · React Native |
+| Databases | Oracle · SQL Server |
+
+---
+
+## 🆘 Troubleshooting
+
+| Vấn đề | Giải pháp |
+|---------|-----------|
+| Agent không hiểu lệnh | Kiểm tra file workflow trong `.agent/workflows/` |
+| Wiki không truy cập | Check symlink: `ls -la <project>-wiki/` |
+| Handoff không thấy | Check `.evnict/handoff/handoff.md` |
+| Muốn thêm project | `evnict-kit add <folder>` |
+| Wiki trống sau init | Chạy `/evnict-kit:wiki-scan-project` |
+| Cần update toolkit | `evnict-kit doctor` hoặc `npm update -g evnict-kit` |
+
+---
+
+## 📜 Changelog
+
+### v0.2.3 (Current)
+- 🎨 **Frontend Design Skill**: Skill mới `evnict-kit-frontend-design` — hướng dẫn tư duy thiết kế UI chất lượng cao cho Angular, tránh "AI slop" aesthetics
+- 🧠 **Context Refresh**: Thêm section "Tuân thủ Rules & Context" vào TẤT CẢ 36 workflows/skills — cơ chế smart check (chỉ đọc lại nếu chưa đọc, tiết kiệm token)
+- 🎯 **FE Design Hint**: 6 workflows có code FE được bổ sung nhắc tham chiếu skill frontend-design
+- 🔄 **Sync Command**: Lệnh `evnict-kit sync` — re-deploy templates khi upgrade version, không xóa files user tự thêm
+- 📦 Hỗ trợ cả Antigravity + Claude workflows
+
+### v0.2.2
+- 🧹 Removed obsolete standalone commands (`init-rules`, `init-context`, `init-workflow`, `init-check`)
+- 🩺 `doctor` command: health check, version check, workspace status
+- 📊 `info` command: toolkit statistics dashboard
+- 🔄 `upgrade` command: check & auto-upgrade to latest
+- 🎨 Post-install banner on `npm install`
+
+### v0.2.1
+- ✨ Multi-tool support: Antigravity, Claude, Cursor, Copilot, Codex
+- 📚 Wiki system: scan-project, archive-feature, query
+- 🤝 Handoff protocol: BE ↔ FE standardized
+- 📖 GETTING-STARTED.md: comprehensive user guide
+- 🩺 `doctor` & `info` CLI commands
+
+### v0.1.6
+- 📚 Wiki workflows: archive-feature, scan-project, query
+- 🤝 Standardized Handoff protocol (single `handoff.md`)
+- 📖 GETTING-STARTED.md user guide
+
+### v0.1.5
+- 🔐 Security rules & ATTT workflows
+- 📋 TDD workflow improvements
+
+### v0.1.4
+- 🔧 Multi-repo support (array format)
+- ➕ `evnict-kit add` command
+
+### v0.1.3
+- 🚀 Initial release — Rules, Skills, Workflows
+- 🧙 Interactive wizard
+
+---
+
+## 📄 License
+
+**UNLICENSED** — Internal use only (EVNICT — Trung tâm Phát triển Phần mềm)
+
+### Third-party
+
+| Package | License | Note |
+|---------|---------|------|
+| [llm-wiki](https://github.com/mduongvandinh/llm-wiki) | MIT | Minimal scaffold bundled in `templates/wiki/` |
+| [Commander.js](https://github.com/tj/commander.js) | MIT | CLI framework |
+| [js-yaml](https://github.com/nodeca/js-yaml) | MIT | YAML parser |
+
+---
+
+<div align="center">
+
+**Made with ❤️ by EVNICT — Trung tâm Phát triển Phần mềm**
 
-## Multi-tool: --tool=antigravity|claude|cursor|copilot|codex
+*Nâng cao năng suất phát triển phần mềm với AI Agent*
 
-## Stats: 35 rules | 20 skills | 10 workflows
-## License: UNLICENSED (EVNICT internal)
+</div>

package/bin/cli.js

@@ -2,37 +2,51 @@
 import { Command } from 'commander';
 import { initCommand } from '../src/commands/init.js';
 import { addCommand } from '../src/commands/add.js';
-import { initRulesCommand } from '../src/commands/init-rules.js';
-import { initContextCommand } from '../src/commands/init-context.js';
-import { initWorkflowCommand } from '../src/commands/init-workflow.js';
-import { initCheckCommand } from '../src/commands/init-check.js';
+import { doctorCommand } from '../src/commands/doctor.js';
+import { infoCommand } from '../src/commands/info.js';
+import { upgradeCommand } from '../src/commands/upgrade.js';
+import { syncCommand } from '../src/commands/sync.js';
 
 const program = new Command();
-program.name('evnict-kit').description('EVNICT AI-Assisted Development Toolkit v0.2.1').version('0.2.1');
+program.name('evnict-kit').description('EVNICT AI-Assisted Development Toolkit v0.2.3').version('0.2.3');
 
 program.command('init')
-  .description('Khởi tạo workspace + deploy rules/skills/workflows vào từng project (interactive hoặc flags)')
-  .option('--name <n>', 'Tên dự án (nếu bỏ qua → interactive wizard)')
+  .description('Khoi tao workspace + deploy rules/skills/workflows vao tung project')
+  .option('--name <n>', 'Ten du an (neu bo qua -> interactive wizard)')
   .option('--be <folder>', 'Folder backend (default: <n>-be)')
   .option('--fe <folder>', 'Folder frontend (default: <n>-fe)')
   .option('--tool <tool>', 'AI tool: antigravity|claude|cursor|copilot|codex', 'antigravity')
   .option('--tech-be <tech>', 'springboot|aspnet|javaee', 'springboot')
   .option('--tech-fe <tech>', 'angular|react-web|react-mobile', 'angular')
   .option('--db <db>', 'oracle|sqlserver', 'oracle')
-  .option('--no-wiki', 'Không setup wiki')
-  .option('--no-interactive', 'Bắt buộc chạy non-interactive (cần --name)')
+  .option('--no-wiki', 'Khong setup wiki')
+  .option('--no-interactive', 'Bat buoc chay non-interactive (can --name)')
   .action(initCommand);
 
 program.command('add <folder>')
-  .description('Thêm 1 project vào workspace đã init (deploy rules/skills/workflows + symlinks)')
+  .description('Them 1 project vao workspace da init (deploy rules/skills/workflows + symlinks)')
   .option('--type <type>', 'backend|frontend')
   .option('--tech <tech>', 'springboot|angular|react-web|react-mobile|aspnet')
   .option('--tool <tool>', 'AI tool override')
   .action(addCommand);
 
-program.command('init-rules').description('Scaffold rules vào từng project (theo --tool)').option('--tool <tool>','','antigravity').action(initRulesCommand);
-program.command('init-context').description('Scaffold context files vào từng project').option('--tool <tool>','','antigravity').action(initContextCommand);
-program.command('init-workflow').description('Scaffold workflows & skills vào từng project').option('--tool <tool>','','antigravity').action(initWorkflowCommand);
-program.command('init-check').description('Chuẩn bị demo-check directory').option('--tool <tool>','','antigravity').action(initCheckCommand);
+// ── Utility Commands ──
+program.command('doctor')
+  .description('Check environment, version, updates - health check')
+  .action(doctorCommand);
+
+program.command('info')
+  .description('Show toolkit statistics - rules, skills, workflows, tools')
+  .action(infoCommand);
+
+program.command('upgrade')
+  .description('Check and upgrade to latest version')
+  .option('-y, --yes', 'Auto-confirm upgrade')
+  .action(upgradeCommand);
+
+program.command('sync')
+  .description('Re-deploy templates (workflows/skills/rules) vao cac project da init — ghi de files evnict-kit, giu nguyen files user')
+  .option('-y, --yes', 'Auto-confirm sync (khong hoi)')
+  .action(syncCommand);
 
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evnict-kit",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "EVNICT AI-Assisted Development Toolkit - Bộ công cụ hỗ trợ phát triển phần mềm với AI theo quy định QĐ-TTPM",
   "type": "module",
   "bin": {
@@ -10,11 +10,13 @@
     "bin/",
     "src/",
     "templates/",
+    "scripts/",
     "README.md"
   ],
   "scripts": {
     "test": "node test/test.js",
-    "link": "npm link"
+    "link": "npm link",
+    "postinstall": "node scripts/postinstall.js || true"
   },
   "dependencies": {
     "commander": "^12.1.0",

package/scripts/convert-claude-commands.js

@@ -0,0 +1,51 @@
+// Convert Antigravity workflows to Claude Code commands format
+// Run: node scripts/convert-claude-commands.js
+
+import { readFileSync, writeFileSync, readdirSync, mkdirSync, existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const ROOT = join(__dirname, '..');
+
+const srcDir = join(ROOT, 'templates/workflows/antigravity');
+const destDir = join(ROOT, 'templates/workflows/claude');
+
+if (!existsSync(destDir)) mkdirSync(destDir, { recursive: true });
+
+const files = readdirSync(srcDir).filter(f => f.endsWith('.md'));
+
+for (const file of files) {
+  let content = readFileSync(join(srcDir, file), 'utf8');
+
+  // Remove frontmatter (--- ... ---)
+  content = content.replace(/^---\n[\s\S]*?\n---\n\n?/, '');
+
+  // Extract command name from filename: evnict-kit-feature-large.md → feature-large
+  const slug = file.replace('evnict-kit-', '').replace('.md', '');
+
+  // Find the first # heading
+  const firstHeadingMatch = content.match(/^# (.+)$/m);
+  const title = firstHeadingMatch ? firstHeadingMatch[1] : slug;
+
+  // Add $ARGUMENTS handling after the command line
+  const commandLineRegex = /\*\*Command:\*\* `\/evnict-kit:[^`]+`/;
+  if (commandLineRegex.test(content)) {
+    content = content.replace(
+      commandLineRegex,
+      `**Command:** \`/evnict-kit:${slug} $ARGUMENTS\`\n\n$ARGUMENTS chứa mô tả từ user.`
+    );
+  } else {
+    // If no command line found, add after first heading
+    content = content.replace(
+      /^(# .+)$/m,
+      `$1\n**Command:** \`/evnict-kit:${slug} $ARGUMENTS\`\n\n$ARGUMENTS chứa mô tả từ user.`
+    );
+  }
+
+  writeFileSync(join(destDir, file), content, 'utf8');
+  console.log(`✅ ${file} → claude commands`);
+}
+
+console.log(`\nDone: ${files.length} commands converted to ${destDir}`);

package/scripts/generate-templates.js

@@ -0,0 +1,119 @@
+#!/usr/bin/env node
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const T = join(__dirname, '..', 'templates');
+function w(p, c) { const f=join(T,p); mkdirSync(dirname(f),{recursive:true}); writeFileSync(f,c,'utf8'); console.log(`  ✅ ${p}`); }
+
+console.log('🔧 evnict-kit v0.1.2 templates\n');
+
+// ══ RULES COMMON R01-R08 ══
+w('rules/common/evnict-kit-R01-no-hardcoded-secrets.md',`---\nid: R01\nname: No Hardcoded Secrets\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# R01: No Hardcoded Secrets\nCấm hardcode API keys, passwords, tokens, connection strings.\nDùng env variables hoặc secret manager.\nGrep: password\\s*=\\s*", secret\\s*=, key\\s*=\\s*", token\\s*=\\s*"\nĐã commit secret → rotate NGAY → thông báo Tech Lead.\n`);
+w('rules/common/evnict-kit-R02-no-auto-git-push.md',`---\nid: R02\nname: No Auto Git Push\nseverity: HIGH\nstatus: ACTIVE\n---\n# R02: No Auto Git Push\nAgent KHÔNG git push/force/merge vào protected branch.\nĐược phép: add, commit (feature branch), checkout -b, stash, pull, diff.\n`);
+w('rules/common/evnict-kit-R03-no-destructive-ops.md',`---\nid: R03\nname: No Destructive Operations\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# R03: No Destructive Operations\nAgent KHÔNG xóa file/folder, drop DB, chmod mà không có xác nhận user.\n`);
+w('rules/common/evnict-kit-R04-no-pii-in-logs.md',`---\nid: R04\nname: No PII in Logs\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# R04: No PII in Logs\nKHÔNG log: password, token, JWT, CMND, SĐT, email, thẻ ngân hàng, data khách hàng EVN.\nLog ID thay vì data.\n`);
+w('rules/common/evnict-kit-R05-test-before-commit.md',`---\nid: R05\nname: Test Before Commit\nseverity: HIGH\nstatus: ACTIVE\n---\n# R05: Test Before Commit\nMọi thay đổi PHẢI: linter pass, unit test pass, build OK, không warning mới.\n`);
+w('rules/common/evnict-kit-R06-minimal-diff.md',`---\nid: R06\nname: Minimal Diff\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# R06: Minimal Diff — Chống Vibe Coding\nChỉ thay đổi code CẦN THIẾT. Sửa cùng chỗ >3 lần → DỪNG.\n`);
+w('rules/common/evnict-kit-R07-no-placeholder-code.md',`---\nid: R07\nname: No Placeholder Code\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# R07: No Placeholder Code\nCấm TODO, FIXME, placeholder. Implement đầy đủ hoặc throw exception.\n`);
+w('rules/common/evnict-kit-R08-respect-gitignore.md',`---\nid: R08\nname: Respect .gitignore\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# R08: Respect .gitignore\nKHÔNG tạo/sửa/commit file trong .gitignore.\n`);
+
+// ══ RULES BACKEND RB01-RB06 ══
+w('rules/backend/evnict-kit-RB01-input-validation.md',`---\nid: RB01\nname: Input Validation\nseverity: HIGH\nstatus: ACTIVE\n---\n# RB01: Input Validation\nMọi endpoint PHẢI validate input. @Valid + DTO annotations.\n`);
+w('rules/backend/evnict-kit-RB02-sql-injection-prevention.md',`---\nid: RB02\nname: SQL Injection Prevention\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# RB02: SQL Injection Prevention\nCẤM nối chuỗi SQL. Dùng parameterized/ORM/JOOQ type-safe.\n`);
+w('rules/backend/evnict-kit-RB03-error-handling.md',`---\nid: RB03\nname: Error Handling\nseverity: HIGH\nstatus: ACTIVE\n---\n# RB03: Error Handling\nMọi endpoint có error handling. KHÔNG lộ stack trace.\n`);
+w('rules/backend/evnict-kit-RB04-migration-only.md',`---\nid: RB04\nname: Migration Only\nseverity: HIGH\nstatus: ACTIVE\n---\n# RB04: Migration Only\nThay đổi DB schema PHẢI qua migration. Naming: V{YYYYMMDD}_{SEQ}__{desc}.sql\n`);
+w('rules/backend/evnict-kit-RB05-auth-on-every-route.md',`---\nid: RB05\nname: Auth on Every Route\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# RB05: Auth on Every Route\nMọi endpoint MỚI PHẢI có auth + authorization.\n`);
+w('rules/backend/evnict-kit-RB06-rate-limiting.md',`---\nid: RB06\nname: Rate Limiting\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RB06: Rate Limiting\nEndpoint public/heavy PHẢI xem xét rate limiting.\n`);
+
+// ══ RULES FRONTEND RF01-RF06 ══
+w('rules/frontend/evnict-kit-RF01-no-inline-styles.md',`---\nid: RF01\nname: No Inline Styles\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RF01: No Inline Styles\nCấm inline CSS. Dùng class.\n`);
+w('rules/frontend/evnict-kit-RF02-component-reuse.md',`---\nid: RF02\nname: Component Reuse\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RF02: Component Reuse\nCheck component có sẵn trước khi tạo mới.\n`);
+w('rules/frontend/evnict-kit-RF03-no-hardcoded-text.md',`---\nid: RF03\nname: No Hardcoded Text\nseverity: LOW\nstatus: ACTIVE\n---\n# RF03: No Hardcoded Text\nCó i18n → dùng translation keys. Không → constants file.\n`);
+w('rules/frontend/evnict-kit-RF04-accessibility.md',`---\nid: RF04\nname: Accessibility\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RF04: Accessibility\nimg→alt, button→aria-label, input→label, semantic HTML.\n`);
+w('rules/frontend/evnict-kit-RF05-no-direct-dom.md',`---\nid: RF05\nname: No Direct DOM\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RF05: No Direct DOM\nCẤM document.getElementById. Dùng ViewChild/refs.\n`);
+w('rules/frontend/evnict-kit-RF06-responsive-design.md',`---\nid: RF06\nname: Responsive Design\nseverity: MEDIUM\nstatus: ACTIVE\n---\n# RF06: Responsive\nĐúng trên mobile(<768), tablet(768-1024), desktop(>1024).\n`);
+
+// ══ RULES SECURITY ATTT01-08 ══
+w('rules/security/evnict-kit-ATTT01-sql-injection.md',`---\nid: ATTT01\nname: SQL Injection Deep Scan\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# ATTT01: SQL Injection Scan\ngrep -rn "query.*+.*\\"\\|createNativeQuery.*+\\|DSL.field(.*+" --include="*.java" src/\n`);
+w('rules/security/evnict-kit-ATTT02-xss-prevention.md',`---\nid: ATTT02\nname: XSS Prevention\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# ATTT02: XSS Scan\ngrep -rn "innerHTML\\|bypassSecurityTrust\\|dangerouslySetInnerHTML" src/\n`);
+w('rules/security/evnict-kit-ATTT03-csrf-protection.md',`---\nid: ATTT03\nseverity: HIGH\nstatus: ACTIVE\n---\n# ATTT03: CSRF Protection\nPOST/PUT/DELETE PHẢI có CSRF token hoặc SameSite cookie.\n`);
+w('rules/security/evnict-kit-ATTT04-jwt-security.md',`---\nid: ATTT04\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# ATTT04: JWT Security\nRS256/RS512, key≥2048, exp≤24h, refresh rotation, no sensitive data in payload.\n`);
+w('rules/security/evnict-kit-ATTT05-dependency-cve.md',`---\nid: ATTT05\nseverity: HIGH\nstatus: ACTIVE\n---\n# ATTT05: Dependency CVE\nJava: mvnw dependency-check | Node: npm audit | .NET: dotnet list --vulnerable\nCritical→24h | High→sprint | Medium→next sprint\n`);
+w('rules/security/evnict-kit-ATTT06-file-upload.md',`---\nid: ATTT06\nseverity: HIGH\nstatus: ACTIVE\n---\n# ATTT06: File Upload Security\nValidate ext+MIME+magic bytes+size. UUID rename. Lưu MinIO/S3 ngoài web root.\n`);
+w('rules/security/evnict-kit-ATTT07-data-exposure.md',`---\nid: ATTT07\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# ATTT07: Data Exposure\nDùng DTO—KHÔNG return Entity. Error: message chung, KHÔNG stack trace.\n`);
+w('rules/security/evnict-kit-ATTT08-owasp-top10.md',`---\nid: ATTT08\nseverity: CRITICAL\nstatus: ACTIVE\n---\n# ATTT08: OWASP Top 10 Checklist\nA01 Access→RB05 | A02 Crypto→ATTT04 | A03 Inject→RB02 | A04 Design→ATTT06\nA05 Config→R01 | A06 Components→ATTT05 | A07 Auth→RB05 | A08 Integrity→RB04\nA09 Logging→R04 | A10 SSRF\n`);
+
+// ══ RULES DYNAMIC (CHƯA KHỞI TẠO) ══
+const PH=`⚠️ CHƯA ĐƯỢC KHỞI TẠO — chạy /evnict-kit:init-rules để AI Agent điền nội dung`;
+w('rules/project/evnict-kit-RP01-naming-convention.md',`---\nid: RP01\nname: Naming Convention\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP01: Naming Convention\n${PH}\n## Sẽ chứa: class, method, variable, file, package, branch, commit, DB table/column naming\n`);
+w('rules/project/evnict-kit-RP02-architecture-pattern.md',`---\nid: RP02\nname: Architecture Pattern\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP02: Architecture\n${PH}\n## Sẽ chứa: kiến trúc tổng thể, package structure, dependency flow, decisions\n`);
+w('rules/project/evnict-kit-RP03-coding-convention.md',`---\nid: RP03\nname: Coding Convention\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP03: Coding Convention\n${PH}\n## Sẽ chứa: code style, import order, error handling, logging, DTO patterns\n`);
+w('rules/project/evnict-kit-RP04-api-convention.md',`---\nid: RP04\nname: API Convention\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP04: API Convention\n${PH}\n## Sẽ chứa: REST URL, request/response format, pagination, error format\n`);
+w('rules/project/evnict-kit-RP05-database-convention.md',`---\nid: RP05\nname: Database Convention\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP05: Database Convention\n${PH}\n## Sẽ chứa: table/column naming, ORM/JOOQ patterns, FK naming\n`);
+w('rules/project/evnict-kit-RP06-component-convention.md',`---\nid: RP06\nname: Component Convention\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP06: Component Convention\n${PH}\n## Sẽ chứa: component structure, state management, form handling, UI library\n`);
+w('rules/project/evnict-kit-RP07-integration-map.md',`---\nid: RP07\nname: Integration Map\nstatus: CHƯA_KHỞI_TẠO\n---\n# RP07: Integration Map\n${PH}\n## Sẽ chứa: external services, API clients, message queues, scheduled jobs\n`);
+
+w('rules/INDEX.md',`# EVNICT-KIT Rules Index v0.1.2\n## Static (28): R01-R08, RB01-RB06, RF01-RF06, ATTT01-ATTT08\n## Dynamic (7): RP01-RP07 — chạy /evnict-kit:init-rules để khởi tạo\n`);
+
+console.log('✅ Rules done\n');
+
+// ══ SKILLS (20 files) ══
+const skills = [
+['evnict-kit-create-api-endpoint','Tạo API endpoint chuẩn — validation, auth, error handling, test','backend'],
+['evnict-kit-create-component','Tạo UI component — check reuse, props, styling, test, a11y','frontend'],
+['evnict-kit-create-page','Tạo page/màn hình — routing, layout, responsive, loading states','frontend'],
+['evnict-kit-database-migration','Tạo migration an toàn — V{date}_{seq}__{desc}.sql + rollback','backend'],
+['evnict-kit-write-tests','Viết test TDD — Red→Green→Refactor, unit + integration','both'],
+['evnict-kit-code-review','Code review checklist — security, logic, quality, vibe coding','both'],
+['evnict-kit-bug-fix','Sửa bug — reproduce, root cause, TDD fix, regression test','both'],
+['evnict-kit-fix-business-logic','Fix lỗi nghiệp vụ — verify business rules, test scenarios','both'],
+['evnict-kit-security-audit','Security audit OWASP Top 10, dependency scan','both'],
+['evnict-kit-fix-attt','Fix lỗi ATTT — classify, hotfix, OWASP fix, security review','both'],
+['evnict-kit-checkpoint','Checkpoint & rollback plan trước khi dùng AI (QĐ Mục 8.8)','both'],
+['evnict-kit-doc-postmortem','Tài liệu đặc tả sau AI session (QĐ Mục 8.9)','both'],
+['evnict-kit-merge-checklist','Pre-merge checklist (QĐ Mục 8.10)','both'],
+['evnict-kit-prompt-standard','Chuẩn viết prompt cho AI Agent (QĐ Mục 8.5)','both'],
+['evnict-kit-onboard','Onboarding member mới — tóm tắt project từ wiki+context','both'],
+['evnict-kit-wiki','Push/Query tri thức LLM Wiki — không cần mở wiki repo','both'],
+['evnict-kit-spec','Tạo spec SDD — specify+clarify, propose plan','both'],
+['evnict-kit-tdd','TDD per subtask — test→implement→verify, 3-strike rule','both'],
+['evnict-kit-coordinate','FE↔BE coordination qua handoff files + API contracts','both'],
+['evnict-kit-review-auto','Auto review trước merge — check rules, ATTT, conventions','both'],
+];
+for(const [name,desc,scope] of skills){
+  w(`skills/${name}/SKILL.md`,`---\nname: ${name}\ndescription: ${desc}\nscope: ${scope}\n---\n# ${name}\n${desc}\n`);
+}
+console.log(`✅ Skills: ${skills.length}\n`);
+
+// ══ WORKFLOWS (10 files) ══
+const workflows = [
+['init/evnict-kit-init-rules','evnict-kit:init-rules','Agent đọc code, điền rules động RP01-RP07'],
+['init/evnict-kit-init-context','evnict-kit:init-context','Agent sinh context file từ rules đã khởi tạo'],
+['init/evnict-kit-init-check','evnict-kit:init-check','Sinh demo code để verify conventions'],
+['work/evnict-kit-feature-large','evnict-kit:feature-large','Feature lớn: spec→plan→TDD→archive'],
+['work/evnict-kit-feature-small','evnict-kit:feature-small','Feature nhỏ: wiki query→plan→TDD→archive'],
+['work/evnict-kit-bug-fix','evnict-kit:bug-fix','Bug fix: wiki→analyze→TDD fix→archive'],
+['work/evnict-kit-attt','evnict-kit:attt','ATTT scan/check module'],
+['work/evnict-kit-implement','evnict-kit:implement','Thực thi tasks TDD, FE↔BE coordination'],
+['work/evnict-kit-archive-wiki','evnict-kit:archive-wiki','Push wiki + archive spec + postmortem'],
+['work/evnict-kit-review','evnict-kit:review','Auto review: rules + ATTT + conventions'],
+];
+for(const [path,trigger,desc] of workflows){
+  w(`workflows/${path}.md`,`---\nname: ${trigger}\ntype: workflow-command\ndescription: ${desc}\ntrigger: /${trigger}\n---\n# /${trigger}\n${desc}\n`);
+}
+console.log(`✅ Workflows: ${workflows.length}\n`);
+
+// ══ CONTEXT TEMPLATES ══
+w('context/AGENT.md.template',`# {{PROJECT_NAME}} — AI Agent Context\n# Generated by evnict-kit v0.1.2\n## Overview: {{TECH_STACK}} | {{DATABASE}}\n## Structure: <!-- CHƯA KHỞI TẠO -->\n## Commands: <!-- CHƯA KHỞI TẠO -->\n## Conventions: → rules/project/RP03\n## Architecture: → rules/project/RP02\n## Security: → rules/ (R01,RB02,RB05,ATTT01-08)\n## Safety: ❌ git push | ❌ xóa file | ❌ secrets | ❌ log PII\n`);
+w('context/CLAUDE.md.template',`# {{PROJECT_NAME}} — Claude Code\n# Generated by evnict-kit v0.1.2\n## {{TECH_STACK}} | {{DATABASE}}\n## Rules: .claude/rules/ | ❌ push ❌ secrets ❌ PII\n<!-- CHƯA KHỞI TẠO — /evnict-kit:init-context -->\n`);
+w('context/cursorrules.template',`# {{PROJECT_NAME}} | {{TECH_STACK}} | evnict-kit v0.1.2\n# Rules: .cursor/rules/ | ❌ push ❌ secrets ❌ PII\n<!-- CHƯA KHỞI TẠO -->\n`);
+
+// ══ INSTRUCT TEMPLATES ══
+w('instruct/Instruct-Agent-AI.be.md',`# Instruct-Agent-AI.md — Backend\n# Project: {{PROJECT_NAME}} | Tech: {{TECH_STACK}} | DB: {{DATABASE}}\n\n## Khi nhận /evnict-kit:init-rules:\n### Task 1: Scan structure → tree -L 3\n### Task 2: Naming → cập nhật RP01 → ACTIVE\n### Task 3: Architecture → cập nhật RP02 → ACTIVE\n### Task 4: Coding convention → cập nhật RP03 → ACTIVE\n### Task 5: API convention → cập nhật RP04 → ACTIVE\n### Task 6: Database convention → cập nhật RP05 → ACTIVE\n### Task 7: Integrations → cập nhật RP07 → ACTIVE\n### Task 8: Summary → {{AGENT_DIR}}/context/init-summary-backend.md\n\n## Bảo mật: KHÔNG ghi secrets, IP nội bộ, URLs production\n`);
+w('instruct/Instruct-Agent-AI.fe.md',`# Instruct-Agent-AI.md — Frontend\n# Project: {{PROJECT_NAME}} | Tech: {{TECH_STACK}}\n\n## Khi nhận /evnict-kit:init-rules:\n### Task 1: Scan structure\n### Task 2: Naming → RP01 → ACTIVE\n### Task 3: Architecture → RP02 → ACTIVE\n### Task 4: Coding convention → RP03 → ACTIVE\n### Task 5: Component convention → RP06 → ACTIVE\n### Task 6: Integrations → RP07 → ACTIVE\n### Task 7: Summary → {{AGENT_DIR}}/context/init-summary-frontend.md\n`);
+
+console.log('═══════════════════════════════════════');
+console.log('  🎉 v0.1.2 complete!');
+console.log(`  Rules: 36 | Skills: ${skills.length} | Workflows: ${workflows.length}`);
+console.log('═══════════════════════════════════════\n');