haraps 1.0.0

package/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: scaffold-project-env
+description: Scaffolds the standard development environment, deployment scripts, AGENTS.md guidelines, and core workflows for a Next.js frontend + Rust Cloudflare Worker backend.
+---
+
+# Scaffold Project Environment Skill (Rust + Next.js)
+
+This skill automatically sets up a new repository with standard `dev` and `deploy` scripts tailored for a Rust backend (Cloudflare Workers) and a standard Next.js frontend (Vercel/Node deployment, not Pages), along with preferred agent guidelines and workflows.
+
+## Instructions for the Agent
+
+When the user runs this skill, execute the following steps precisely:
+
+### Step 1: Run the Scaffolder CLI
+
+Execute the following command in the terminal to automatically generate the project scaffolding (dev scripts, deploy scripts, AGENTS.md, workflows, and skills):
+
+```bash
+npx --yes haraps
+```
+
+### Step 2: Verification
+
+Verify that the following files were successfully created in the root directory:
+- `dev.sh` / `dev.ps1`
+- `deploy.sh` / `deploy.ps1`
+- `AGENTS.md`
+- `.agents/workflows/git-it.md`
+- `.agents/workflows/deploy-and-talk.md`
+- `.agents/skills/ponytail/SKILL.md`
+- `.agents/skills/ui-sniper-telegram/SKILL.md`
+- `.agents/skills/kill-ai-slop/SKILL.md`
+- `.agents/skills/security-review/SKILL.md`
+
+### Step 3: Inform the User
+
+Notify the user that the project has been successfully scaffolded and all the lazy senior dev standards, security reviews, UI sniper setups, and AI slop removers are in place. Remind them to use `./dev.ps1` or `./dev.sh` once their `frontend/` and `backend/` directories are initialized.

package/bin/index.js

@@ -0,0 +1,372 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+
+console.log('🚀 Scaffold Project Environment (Hara-XY) 🚀');
+
+function ensureDir(dir) {
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+
+function writeFile(filePath, content) {
+    const fullPath = path.resolve(process.cwd(), filePath);
+    ensureDir(path.dirname(fullPath));
+    fs.writeFileSync(fullPath, content.trim() + '\n', 'utf8');
+    console.log(`✅ Created: ${filePath}`);
+}
+
+// 1. Dev Scripts
+writeFile('dev.sh', `
+#!/usr/bin/env bash
+# =============================================
+# Local Development Runner (Rust + Next.js)
+# =============================================
+
+echo -e "\\e[36m=============================================\\e[0m"
+echo -e "\\e[36m  🚀 Local Dev Server (Rust + Next.js)\\e[0m"
+echo -e "\\e[36m=============================================\\e[0m"
+
+# Aggressive cleanup of ports 3000 (Next) and 8787 (Worker)
+for port in 8787 3000; do
+    targetPid=$(lsof -ti :$port)
+    if [ ! -z "$targetPid" ]; then
+        echo -e "\\e[33m  Freeing port $port (PID $targetPid)...\\e[0m"
+        kill -9 $targetPid 2>/dev/null
+    fi
+done
+
+# Run Next.js and Rust Worker concurrently
+npx concurrently \\
+  -n "NEXT,RUST" \\
+  -c "blue,green" \\
+  "cd frontend && npm run dev" \\
+  "cd backend && npx wrangler dev"
+`);
+fs.chmodSync(path.resolve(process.cwd(), 'dev.sh'), '755');
+
+writeFile('dev.ps1', `
+# =============================================
+# Local Development Runner (Rust + Next.js)
+# =============================================
+
+Write-Host "=============================================" -ForegroundColor Cyan
+Write-Host "  🚀 Local Dev Server (Rust + Next.js)" -ForegroundColor Cyan
+Write-Host "=============================================" -ForegroundColor Cyan
+
+# Aggressive cleanup of ports 3000 and 8787
+$ports = @(8787, 3000)
+foreach ($port in $ports) {
+    $netstatOutput = netstat -ano | Select-String ":$port\\s+.*LISTENING\\s+(\\d+)"
+    if ($netstatOutput) {
+        $targetPid = $netstatOutput.Matches[0].Groups[1].Value
+        Write-Host "  Freeing port $port (PID $targetPid)..." -ForegroundColor Yellow
+        Stop-Process -Id $targetPid -Force -ErrorAction SilentlyContinue
+    }
+}
+
+Write-Host "Starting development environment..." -ForegroundColor Green
+$runnerScript = @'
+const { spawn, execSync } = require('child_process');
+let buffer = '';
+let workerChild;
+let frontendChild;
+let lastRestartTime = 0;
+const startTime = Date.now();
+
+function formatSize(bytes) {
+    if (bytes < 1024) return bytes + 'B';
+    if (bytes < 1024 * 1024) return (bytes / 1024).toFixed(1) + 'KB';
+    return (bytes / (1024 * 1024)).toFixed(1) + 'MB';
+}
+
+function formatUptime() {
+    const elapsed = Math.floor((Date.now() - startTime) / 1000);
+    const m = Math.floor(elapsed / 60).toString().padStart(2, '0');
+    const s = (elapsed % 60).toString().padStart(2, '0');
+    return \`\${m}m \${s}s\`;
+}
+
+let lastRows = 0;
+let lastCols = 0;
+
+function updateLegend() {
+    if (!process.stdout.isTTY) return;
+    const rows = process.stdout.rows || 30;
+    const cols = process.stdout.columns || 80;
+    if (rows !== lastRows || cols !== lastCols) {
+        process.stdout.write(\`\\x1b[1;\${rows - 2}r\`);
+        lastRows = rows;
+        lastCols = cols;
+    }
+    const lineCount = (buffer.match(/\\n/g) || []).length;
+    const legend1 = \` [Copy] 'c': All (\${lineCount}L) | 's': 500L | 'w': Backend | 'f': Frontend | 'e': Errors \`;
+    const legend2 = \` [System] Uptime: \${formatUptime()} | 'x': Clear | 'r': Restart ALL | 'q': Quit \`;
+    process.stdout.write(\`\\x1b[s\\x1b[\${rows - 1};1H\\x1b[42m\\x1b[30m\${legend1.padEnd(cols)}\\x1b[0m\\x1b[\${rows};1H\\x1b[42m\\x1b[30m\${legend2.padEnd(cols)}\\x1b[0m\\x1b[u\`);
+}
+
+setInterval(updateLegend, 1000);
+
+function createStreamHandler(isError, source) {
+    let remainder = '';
+    return (d) => {
+        const chunk = remainder + d.toString();
+        const lines = chunk.split('\\n');
+        remainder = lines.pop();
+        for (let line of lines) {
+            line = line.replace(/\\x1b\\[[23]J/g, '').replace(/\\r/g, '').replace(/^\\[[^\\]]+\\]\\s*/, '');
+            if (line.trim() === '') continue;
+            const tag = source === 'worker' ? '\\x1b[36m[BACKEND]\\x1b[0m' : '\\x1b[35m[FRONTEND]\\x1b[0m';
+            const out = \`\${tag} \${line}\\n\`;
+            if (isError) process.stderr.write(out);
+            else process.stdout.write(out);
+            buffer += out;
+        }
+        if (buffer.length > 500000) buffer = buffer.slice(-250000);
+    };
+}
+
+function startWorker() {
+    workerChild = spawn('npx.cmd', ['concurrently', '-c', 'cyan', '-n', 'worker', '"cd backend && npx wrangler dev"'], {
+        env: { ...process.env, FORCE_COLOR: '1' }, stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true, shell: true
+    });
+    workerChild.stdout.on('data', createStreamHandler(false, 'worker'));
+    workerChild.stderr.on('data', createStreamHandler(true, 'worker'));
+}
+
+function startFrontend() {
+    frontendChild = spawn('npx.cmd', ['concurrently', '-c', 'magenta', '-n', 'frontend', '"cd frontend && npm run dev"'], {
+        env: { ...process.env, FORCE_COLOR: '1' }, stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true, shell: true
+    });
+    frontendChild.stdout.on('data', createStreamHandler(false, 'frontend'));
+    frontendChild.stderr.on('data', createStreamHandler(true, 'frontend'));
+}
+
+startWorker();
+startFrontend();
+console.clear();
+updateLegend();
+
+if (process.stdin.isTTY) {
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', k => {
+        if (k === 'c' || k === 's' || k === 'w' || k === 'f' || k === 'e') {
+            const clean = buffer.replace(/\\x1B(?:[@-Z\\-_]|\\[[0-?]*[ -/]*[@-~])/g, '');
+            let out = clean;
+            if (k === 's') out = clean.split('\\n').slice(-500).join('\\n');
+            if (k === 'w') out = clean.split('\\n').filter(l => l.includes('[BACKEND]')).slice(-1000).join('\\n');
+            if (k === 'f') out = clean.split('\\n').filter(l => l.includes('[FRONTEND]')).slice(-1000).join('\\n');
+            try { execSync('clip', { input: out }); console.log('\\n\\x1b[32m📋 Copied to clipboard!\\x1b[0m\\n'); } catch (e) {}
+        } else if (k === 'r') {
+            console.log('\\n\\x1b[33m🔄 Restarting...\\x1b[0m\\n');
+            if (workerChild) try { execSync('taskkill /pid ' + workerChild.pid + ' /t /f', { stdio: 'ignore' }); } catch(e) {}
+            if (frontendChild) try { execSync('taskkill /pid ' + frontendChild.pid + ' /t /f', { stdio: 'ignore' }); } catch(e) {}
+            startWorker(); startFrontend();
+        } else if (k === '\\u0003' || k === 'q') {
+            if (workerChild) try { execSync('taskkill /pid ' + workerChild.pid + ' /t /f', { stdio: 'ignore' }); } catch(e) {}
+            if (frontendChild) try { execSync('taskkill /pid ' + frontendChild.pid + ' /t /f', { stdio: 'ignore' }); } catch(e) {}
+            process.exit();
+        }
+    });
+}
+'@
+$runnerPath = Join-Path $env:TEMP "mediqueue-dev-runner.js"
+Set-Content -Path $runnerPath -Value $runnerScript -Encoding UTF8
+node $runnerPath
+`);
+
+// 2. Deploy Scripts
+writeFile('deploy.sh', `
+#!/usr/bin/env bash
+set -e
+
+echo -e "\\e[36m=============================================\\e[0m"
+echo -e "\\e[36m  🚀 Deploying System (Rust + Next.js)\\e[0m"
+echo -e "\\e[36m=============================================\\e[0m"
+
+echo -e "\\e[32m[1/2] Deploying Rust Cloudflare Worker...\\e[0m"
+cd backend
+npx wrangler deploy
+cd ..
+
+echo -e "\\e[34m[2/2] Deploying Next.js Frontend...\\e[0m"
+cd frontend
+npm run build
+npx vercel deploy --prod
+cd ..
+
+echo -e "\\e[32mDeployment Complete!\\e[0m"
+`);
+fs.chmodSync(path.resolve(process.cwd(), 'deploy.sh'), '755');
+
+writeFile('deploy.ps1', `
+$ErrorActionPreference = 'Stop'
+
+Write-Host "=============================================" -ForegroundColor Cyan
+Write-Host "  🚀 Deploying System (Rust + Next.js)" -ForegroundColor Cyan
+Write-Host "=============================================" -ForegroundColor Cyan
+
+Write-Host "[1/2] Deploying Rust Cloudflare Worker..." -ForegroundColor Green
+Set-Location backend
+npx wrangler deploy
+Set-Location ..
+
+Write-Host "[2/2] Deploying Next.js Frontend..." -ForegroundColor Blue
+Set-Location frontend
+npm run build
+npx vercel deploy --prod
+Set-Location ..
+
+Write-Host "Deployment Complete!" -ForegroundColor Green
+`);
+
+// 3. Agent Rules
+writeFile('AGENTS.md', `
+# High-Performance Engineering Standards
+1. **Ponytail, lazy senior dev mode**: The best code is the code never written. YAGNI. Question complex requests, reuse existing standards, prefer deletion over addition, and write the minimal correct code.
+2. **Edge-First Execution**: Backend logic must be optimized for serverless edge deployment (Cloudflare Workers).
+3. **Data Layer Optimization**: Never execute untuned queries. Use connection pooling and batching.
+4. **Minimalist Frontend Render**: Ensure frontend implementations are highly optimized for Next.js, favoring SSR where appropriate, avoiding heavy client bundles, and ensuring mobile-first responsive design.
+5. **Master Debugging**: Trace issues to their root cause before writing a fix. Use the "Five Whys" protocol.
+6. **Strict Typing**: TypeScript and Rust types must be explicit, avoid \`any\` or \`unwrap()\` where possible.
+7. **Structured Logging**: Implement structured logging, avoiding excessive console.logs in production.
+8. **Atomic Commits**: Ensure commits are small, atomic, and pass CI checks before pushing.
+9. **Error Boundaries**: Frontend must wrap critical components in Error Boundaries to prevent full app crashes.
+10. **No Placeholder Code**: Never write generic "TODO" or placeholder logic if the requirements are known.
+11. **Security Best Practices**: Enforce strict input validation, rate limiting, and secure credential handling by default.
+12. **Automated Testing & TDD**: Require unit and integration tests for critical paths. Code is not done until it's tested.
+13. **Strict Linting & Formatting**: Enforce ESLint, Prettier, and Clippy with zero warnings allowed.
+14. **Accessibility (a11y) First**: Require ARIA labels, semantic HTML, and keyboard navigation for all frontend components.
+15. **Documentation Standards**: Mandate JSDoc (frontend) and Rustdoc (backend) for all public APIs and reusable components.
+16. **CI/CD Pipeline Setup**: Ensure GitHub Actions (or similar) are configured for automated checks, tests, and deployments.
+17. **State Management Rules**: Prefer local state or React Context; enforce strict rules against unnecessary global state.
+18. **Environment Variable Validation**: Fail fast at startup if required \`.env\` variables are missing.
+19. **Kill AI Slop**: Remove aesthetic clichés (indigo gradients, glowing cards, excessive emojis) that serve no functional purpose.
+20. **Security First Principle**: Treat all external input as malicious; leverage the Security Review skill for all external-facing endpoints.
+`);
+
+// 4. Workflows
+writeFile('.agents/workflows/git-it.md', `
+# Safe Git Sync Workflow
+1. Stage all changes (\`git add .\`).
+2. Write a descriptive, conventional commit message based on the recent changes.
+3. Commit the changes (\`git commit -m "..."\`).
+4. Pull with rebase (\`git pull --rebase\`).
+5. Push to the remote branch (\`git push\`).
+`);
+
+writeFile('.agents/workflows/deploy-and-talk.md', `
+# Deploy and Talk Workflow
+1. Execute the deployment script (\`./deploy.ps1\` or \`./deploy.sh\`).
+2. Verify successful deployment output.
+3. Send a Telegram notification using \`Invoke-RestMethod\` to alert the team that the deployment is complete. Include a brief changelog.
+`);
+
+// 5. Skills
+writeFile('.agents/skills/ponytail/SKILL.md', `
+---
+name: ponytail
+description: Enforces lazy senior dev principles. Efficient, not careless. Deletion over addition.
+---
+# Ponytail, lazy senior dev mode
+
+You are a lazy senior developer. Lazy means efficient, not careless. The best code is the code never written.
+
+Before writing any code, stop at the first rung that holds:
+1. Does this need to be built at all? (YAGNI)
+2. Does it already exist in this codebase? Reuse the helper, util, or pattern that's already here, don't re-write it.
+3. Does the standard library already do this? Use it.
+4. Does a native platform feature cover it? Use it.
+5. Does an already-installed dependency solve it? Use it.
+6. Can this be one line? Make it one line.
+7. Only then: write the minimum code that works.
+
+The ladder runs after you understand the problem, not instead of it: read the task and the code it touches, trace the real flow end to end, then climb.
+
+Bug fix = root cause, not symptom: a report names a symptom. Grep every caller of the function you touch and fix the shared function once.
+
+Rules:
+- No abstractions that weren't explicitly requested.
+- No new dependency if it can be avoided.
+- No boilerplate nobody asked for.
+- Deletion over addition. Boring over clever. Fewest files possible.
+- Shortest working diff wins, but only once you understand the problem.
+- Question complex requests: "Do you actually need X, or does Y cover it?"
+- Mark deliberate simplifications that cut a real corner with a known ceiling with a \`ponytail:\` comment naming the ceiling and upgrade path.
+`);
+
+writeFile('.agents/skills/ui-sniper-telegram/SKILL.md', `
+---
+name: ui-sniper-telegram
+description: Automates the setup of a UI Sniper system integrated with a Telegram bot for capturing frontend UI feedback directly to a Telegram group.
+---
+# UI Sniper Telegram Integration Skill
+1. **Ask for Credentials**: Prompt the user for their \`TELEGRAM_BOT_TOKEN\` and \`TELEGRAM_CHAT_ID\`. Wait for their response.
+2. **Install**: Install \`ui-sniper\` and scaffold the Next.js API route (\`app/api/ui-sniper-webhook/route.ts\`), and set up the \`UISniperWrapper.tsx\` component.
+3. **Configure**: Add the wrapper to \`app/layout.tsx\` and place the credentials in \`.env.local\`.
+`);
+
+writeFile('.agents/skills/kill-ai-slop/SKILL.md', `
+---
+name: kill-ai-slop
+description: Scans a web project to detect and strip out AI-generated aesthetic clichés (indigo gradients, excessive emojis, glowing cards) replacing them with clean, tasteful, and accessible design patterns.
+---
+
+# Kill AI Slop Skill
+Run the following command in the terminal to execute the scanner:
+\`\`\`bash
+npx --yes skills add yetone/kill-ai-slop
+\`\`\`
+Or execute the scanner directly on the project directory:
+\`\`\`bash
+npx --yes kill-ai-slop .
+\`\`\`
+Review the reported "tells" and apply the suggested clean fixes (e.g., removing indigo gradients, replacing emojis with proper SVG icons, removing glowing cards in favor of paper/ink aesthetics).
+`);
+
+writeFile('.agents/skills/security-review/SKILL.md', `
+---
+name: security-review
+description: 'AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss.'
+---
+
+# Security Review
+
+An AI-powered security scanner that reasons about your codebase the way a human security researcher would — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss.
+
+## Execution Workflow
+1. **Scope Resolution**: Determine what to scan (specific path or entire project).
+2. **Dependency Audit**: Audit dependencies first (check package.json, Cargo.toml for known vulnerable packages).
+3. **Secrets & Exposure Scan**: Scan ALL files for hardcoded API keys, tokens, passwords, and \`.env\` files.
+4. **Vulnerability Deep Scan**: Check for Injection Flaws, Authentication/Access Control issues, Data Handling weaknesses, and Cryptography issues.
+5. **Cross-File Data Flow Analysis**: Trace user-controlled input from entry points to dangerous sinks.
+6. **Self-Verification Pass**: Filter false positives.
+7. **Generate Security Report**: Output a findings summary table and structured report with severities (CRITICAL, HIGH, MEDIUM, LOW, INFO).
+8. **Propose Patches**: For every CRITICAL and HIGH finding, generate a concrete patch for human review. **Never auto-apply any patch.**
+`);
+
+console.log('✅ All skills, workflows, dev scripts, and rules generated successfully.');
+console.log('');
+console.log('📦 Installing additional NPM packages in the current project...');
+
+try {
+    // If there is a package.json, install UI dependencies
+    if (fs.existsSync('package.json')) {
+        console.log('   - Installing ui-sniper and html2canvas...');
+        execSync('npm install ui-sniper html2canvas', { stdio: 'inherit' });
+    } else {
+        console.log('   - No package.json found. Skipping ui-sniper installation.');
+    }
+} catch (error) {
+    console.warn('⚠️ Could not install npm dependencies automatically.');
+}
+
+console.log('');
+console.log('🎉 Scaffolding Complete! 🎉');
+console.log('👉 To start your project, run ./dev.ps1 or ./dev.sh (if your frontend/backend folders are set up).');
+console.log('👉 Agents have been loaded with Ponytail, Security Review, and Kill AI Slop skills.');

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "haraps",
+  "version": "1.0.0",
+  "description": "NPM package to scaffold standard development environment, deployment scripts, AGENTS.md guidelines, and core workflows for a Next.js frontend + Rust Cloudflare Worker backend.",
+  "main": "bin/index.js",
+  "bin": {
+    "haraps": "bin/index.js"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}