kiro-kit 0.1.0

package/dist/presets/frontend/commands/lint.md

@@ -0,0 +1,11 @@
+---
+description: Run linting and formatting checks across the project
+inclusion: manual
+---
+
+## Workflow
+1. Run ESLint on source files: `npx eslint . --ext .ts,.tsx,.js,.jsx`
+2. Run Prettier check: `npx prettier --check .`
+3. Run TypeScript type check: `npx tsc --noEmit`
+4. Report results with error counts and fix suggestions
+5. If `--fix` flag passed, auto-fix what is possible

package/dist/presets/frontend/commands/plan/feature.md

@@ -0,0 +1,15 @@
+---
+description: Create an implementation plan for a new feature
+inclusion: manual
+argument-hint: "[feature-description]"
+---
+
+## Arguments
+FEATURE: $1 (required)
+
+## Workflow
+1. Analyze feature requirements
+2. Research relevant patterns and libraries
+3. Decompose into phases with deliverables
+4. Identify risks and dependencies
+5. Output plan to `plans/` directory

package/dist/presets/frontend/commands/plan/refactor.md

@@ -0,0 +1,15 @@
+---
+description: Plan a refactoring effort with risk assessment
+inclusion: manual
+argument-hint: "[refactor-scope]"
+---
+
+## Arguments
+SCOPE: $1 (required)
+
+## Workflow
+1. Analyze current code structure and pain points
+2. Define target architecture
+3. Plan incremental migration steps
+4. Identify breaking changes and risks
+5. Output refactoring plan to `plans/` directory

package/dist/presets/frontend/commands/release.md

@@ -0,0 +1,17 @@
+---
+description: Prepare and execute a release with version bump and changelog
+inclusion: manual
+argument-hint: "[version-type]"
+---
+
+## Arguments
+VERSION_TYPE: $1 (default: patch, options: major, minor, patch)
+
+## Workflow
+1. Verify working tree is clean
+2. Run full test suite
+3. Bump version in package.json
+4. Update CHANGELOG.md with new entries
+5. Create git commit and tag
+6. Push to remote with tags
+7. Report release summary

package/dist/presets/frontend/commands/review/code.md

@@ -0,0 +1,15 @@
+---
+description: Review recent code changes for quality and correctness
+inclusion: manual
+argument-hint: "[file-or-branch]"
+---
+
+## Arguments
+TARGET: $1 (default: staged changes)
+
+## Workflow
+1. Identify files to review (staged, branch diff, or specific file)
+2. Analyze code quality, patterns, and potential issues
+3. Check TypeScript strictness and type safety
+4. Verify error handling and edge cases
+5. Report findings categorized by severity

package/dist/presets/frontend/commands/review/security.md

@@ -0,0 +1,12 @@
+---
+description: Perform a security review of the codebase
+inclusion: manual
+---
+
+## Workflow
+1. Scan for hardcoded secrets and credentials
+2. Check dependency vulnerabilities with `npm audit`
+3. Review authentication and authorization patterns
+4. Check for XSS, CSRF, and injection vulnerabilities
+5. Verify Content Security Policy headers
+6. Report findings with severity and remediation steps

package/dist/presets/frontend/commands/scout/ext.md

@@ -0,0 +1,17 @@
+---
+description: Scout codebase using external agentic tools for faster search
+inclusion: manual
+argument-hint: "[search-query] [scale]"
+---
+
+## Arguments
+QUERY: $1 (required)
+SCALE: $2 (default: 3)
+
+## Workflow
+1. Analyze search query and determine agent count
+2. Divide codebase into sections for parallel search
+3. Launch external tools (Gemini, OpenCode) in parallel
+4. Collect results within 3-minute timeout
+5. Synthesize and deduplicate findings
+6. Report organized file list

package/dist/presets/frontend/commands/scout.md

@@ -0,0 +1,16 @@
+---
+description: Scout the codebase for files relevant to a task
+inclusion: manual
+argument-hint: "[search-query] [scale]"
+---
+
+## Arguments
+QUERY: $1 (required)
+SCALE: $2 (default: 3)
+
+## Workflow
+1. Analyze the search query and identify key directories
+2. Divide codebase into logical sections for parallel searching
+3. Search each section for files matching the query
+4. Deduplicate and organize results by category
+5. Present file list with any coverage gaps noted

package/dist/presets/frontend/commands/skill/add.md

@@ -0,0 +1,16 @@
+---
+description: Add new reference files or scripts to a skill
+inclusion: manual
+argument-hint: "[skill-name] [reference-prompt]"
+---
+
+## Arguments
+SKILL: $1 (required)
+PROMPT: $2 (required)
+
+## Workflow
+1. Locate skill directory at `.kiro/skills/$1`
+2. Analyze the reference or script requirements
+3. Create appropriate files in the skill directory
+4. Update SKILL.md if needed
+5. Report added files

package/dist/presets/frontend/commands/skill/create.md

@@ -0,0 +1,16 @@
+---
+description: Create a new skill from scratch
+inclusion: manual
+argument-hint: "[skill-name] [description]"
+---
+
+## Arguments
+NAME: $1 (required)
+DESCRIPTION: $2 (required)
+
+## Workflow
+1. Create skill directory at `.kiro/skills/$1`
+2. Generate SKILL.md with front-matter and instructions
+3. Create `references/`, `scripts/`, `assets/` subdirectories
+4. Add initial reference content if applicable
+5. Report created skill structure

package/dist/presets/frontend/commands/skill/optimize.md

@@ -0,0 +1,16 @@
+---
+description: Optimize an existing skill for better performance
+inclusion: manual
+argument-hint: "[skill-name] [prompt]"
+---
+
+## Arguments
+SKILL: $1 (default: all)
+PROMPT: $2 (optional)
+
+## Workflow
+1. Read current skill content and references
+2. Analyze token efficiency and coverage
+3. Propose optimizations for progressive disclosure
+4. Present plan for user approval
+5. Implement approved changes

package/dist/presets/frontend/commands/test.md

@@ -0,0 +1,15 @@
+---
+description: Run the test suite with coverage reporting
+inclusion: manual
+argument-hint: "[pattern]"
+---
+
+## Arguments
+PATTERN: $1 (default: all tests)
+
+## Workflow
+1. Run Vitest with coverage: `npx vitest run --coverage`
+2. If pattern provided, filter tests: `npx vitest run $1`
+3. Report test results summary (passed, failed, skipped)
+4. Report coverage metrics (lines, branches, functions)
+5. Highlight any failing tests with error details

package/dist/presets/frontend/docs/code-standards.md

@@ -0,0 +1,79 @@
+# Code Standards
+
+## TypeScript
+
+- Strict mode enabled (`strict: true` in tsconfig)
+- No `any` types -- use `unknown` and narrow with type guards
+- Explicit return types on exported functions
+- Use `interface` for object shapes, `type` for unions/intersections
+- Prefer `const` assertions for literal types
+
+## React Components
+
+- Functional components only (no class components)
+- Props interface exported separately from component
+- Default export for page/layout components
+- Named exports for shared/utility components
+- Maximum 150 lines per component file
+
+## File Organization
+
+```
+src/
+  app/                 Next.js routes (pages, layouts, API)
+  components/
+    ui/                Base UI primitives (shadcn/ui)
+    [feature]/         Feature-grouped components
+  hooks/               Custom React hooks
+  lib/                 Utilities, API clients, helpers
+  types/               Shared TypeScript definitions
+  styles/              Global styles and Tailwind config
+```
+
+## Naming
+
+- Files: kebab-case (`user-profile.tsx`, `use-auth.ts`)
+- Components: PascalCase (`UserProfile`)
+- Hooks: camelCase with `use` prefix (`useAuth`)
+- Utilities: camelCase (`formatDate`)
+- Types/Interfaces: PascalCase (`UserProfile`)
+- Constants: UPPER_SNAKE_CASE (`API_BASE_URL`)
+
+## Styling
+
+- Tailwind CSS utility classes as primary styling method
+- Use `cn()` helper for conditional classes (clsx + tailwind-merge)
+- CSS variables for theme tokens (defined in globals.css)
+- No inline styles except for dynamic values
+- Responsive: mobile-first with Tailwind breakpoint prefixes
+
+## Testing
+
+- Colocate test files with source (`Component.test.tsx`)
+- Use Vitest as test runner
+- React Testing Library for component tests
+- Test behavior, not implementation details
+- Playwright for E2E tests in `e2e/` directory
+
+## Error Handling
+
+- Error boundaries at route segment level
+- Try-catch for async operations with typed errors
+- User-facing error messages must be actionable
+- Log errors to monitoring service in production
+- Never swallow errors silently
+
+## Performance
+
+- Server Components by default (no unnecessary client JS)
+- Dynamic imports for heavy components
+- Image optimization with next/image
+- Font optimization with next/font
+- Measure before optimizing (no premature optimization)
+
+## Git Conventions
+
+- Conventional commits: `type(scope): description`
+- Branch naming: `feature/description`, `fix/description`
+- PR titles under 72 characters
+- Squash merge to main

package/dist/presets/frontend/docs/project-roadmap.md

@@ -0,0 +1,78 @@
+# Project Roadmap
+
+## Current Phase: [Phase Name]
+
+**Status**: In Progress
+**Target**: [Date]
+
+## Phase 1: Foundation
+
+**Status**: Not Started
+**Priority**: High
+
+- [ ] Project setup (Next.js, TypeScript, Tailwind)
+- [ ] Design system foundation (tokens, primitives)
+- [ ] Authentication and authorization
+- [ ] Core layout and navigation
+- [ ] CI/CD pipeline
+
+**Success Criteria**: App builds, deploys, and authenticates users.
+
+## Phase 2: Core Features
+
+**Status**: Not Started
+**Priority**: High
+
+- [ ] [Feature 1]
+- [ ] [Feature 2]
+- [ ] [Feature 3]
+- [ ] API integration layer
+- [ ] Error handling and monitoring
+
+**Success Criteria**: Core user flows work end-to-end.
+
+## Phase 3: Polish and Performance
+
+**Status**: Not Started
+**Priority**: Medium
+
+- [ ] Performance optimization (Core Web Vitals)
+- [ ] Accessibility audit and fixes
+- [ ] Responsive design verification
+- [ ] Loading and error state refinement
+- [ ] Animation and micro-interactions
+
+**Success Criteria**: Lighthouse score 90+ on all metrics.
+
+## Phase 4: Testing and Quality
+
+**Status**: Not Started
+**Priority**: Medium
+
+- [ ] Unit test coverage (80%+ critical paths)
+- [ ] E2E tests for user flows
+- [ ] Visual regression testing
+- [ ] Cross-browser testing
+- [ ] Security audit
+
+**Success Criteria**: All tests pass, no critical vulnerabilities.
+
+## Phase 5: Launch
+
+**Status**: Not Started
+**Priority**: High
+
+- [ ] Production deployment
+- [ ] Monitoring and alerting setup
+- [ ] Documentation finalization
+- [ ] User feedback collection
+- [ ] Post-launch fixes
+
+**Success Criteria**: Stable production deployment with monitoring.
+
+---
+
+## Changelog
+
+### [Unreleased]
+- Initial project setup

package/dist/presets/frontend/docs/system-architecture.md

@@ -0,0 +1,90 @@
+# System Architecture
+
+## Overview
+
+This document describes the frontend application architecture built with Next.js App Router, React Server Components, and TypeScript.
+
+## Architecture Diagram
+
+```
+Browser
+  |
+  v
+Next.js Edge/Node Runtime
+  |
+  +-- App Router (file-based routing)
+  |     +-- Layouts (persistent UI shells)
+  |     +-- Pages (route segments)
+  |     +-- Loading (Suspense fallbacks)
+  |     +-- Error (error boundaries)
+  |
+  +-- Server Components (default)
+  |     +-- Data fetching (direct DB/API access)
+  |     +-- Static rendering
+  |     +-- Streaming with Suspense
+  |
+  +-- Client Components ('use client')
+  |     +-- Interactivity (events, state)
+  |     +-- Browser APIs
+  |     +-- Third-party client libraries
+  |
+  +-- Route Handlers (API layer)
+        +-- REST endpoints
+        +-- Server Actions (mutations)
+```
+
+## Key Architectural Decisions
+
+### Server-First Rendering
+- Server Components reduce client JavaScript bundle
+- Data fetching happens on the server (no client waterfalls)
+- Progressive enhancement for non-JS environments
+
+### Component Architecture
+- Atomic design: atoms, molecules, organisms, templates, pages
+- Composition over inheritance
+- Controlled/uncontrolled component patterns
+- Compound components for complex UI widgets
+
+### State Management
+- Server state: TanStack Query (caching, revalidation)
+- Client state: Zustand (minimal global stores)
+- URL state: searchParams for shareable state
+- Form state: React Hook Form + Zod
+
+### Data Flow
+- Top-down props for component trees
+- Context for cross-cutting concerns (theme, auth)
+- Server Actions for mutations (form submissions)
+- Optimistic updates for responsive UI
+
+## Directory Structure
+
+```
+project-root/
+  src/
+    app/               Route definitions
+    components/        Reusable UI components
+    hooks/             Custom React hooks
+    lib/               Utilities and services
+    types/             TypeScript definitions
+  public/              Static assets
+  tests/               Test utilities and fixtures
+  e2e/                 End-to-end tests
+```
+
+## Performance Architecture
+
+- Static generation for marketing pages
+- ISR for content that changes periodically
+- Streaming for data-heavy dashboards
+- Edge runtime for latency-sensitive routes
+- Image CDN with automatic format negotiation
+
+## Security
+
+- Server-only secrets (no NEXT_PUBLIC_ for sensitive data)
+- CSRF protection via Server Actions
+- Content Security Policy headers
+- Input validation with Zod on both client and server
+- Authentication via middleware (route protection)

package/dist/presets/frontend/hooks/.env.example

@@ -0,0 +1,9 @@
+# Hook environment variables
+# Copy this file to .env and fill in your values.
+
+# Discord webhook URL for notifications
+DISCORD_WEBHOOK_URL=<your-discord-webhook-url>
+
+# Telegram bot token and chat ID for notifications
+TELEGRAM_BOT_TOKEN=<your-telegram-bot-token>
+TELEGRAM_CHAT_ID=<your-telegram-chat-id>

package/dist/presets/frontend/hooks/README.md

@@ -0,0 +1,28 @@
+# Hooks
+
+Cross-platform hook scripts for Kiro IDE automation.
+
+## Available Hooks
+
+| Hook | Trigger | Description |
+|------|---------|-------------|
+| scout-block | PreToolUse | Blocks dangerous commands (rm -rf, drop database, etc.) |
+| modularization-hook | PostToolUse | Warns when files exceed 200 lines |
+| discord-notify | agentStop | Sends notification via Discord webhook |
+| telegram-notify | agentStop | Sends notification via Telegram bot |
+| pre-commit-lint | PreToolUse | Runs linter before commit |
+| git-status-tracker | PostToolUse | Logs git working tree status summary |
+
+## Platform Support
+
+Each hook has a primary `.js` (Node.js) version and platform-specific fallbacks:
+- `.js` - Cross-platform (requires Node.js)
+- `.sh` - Unix/macOS/Linux (bash)
+- `.ps1` - Windows (PowerShell)
+
+## Environment Variables
+
+Copy `hooks/.env.example` to `hooks/.env` and configure:
+- `DISCORD_WEBHOOK_URL` - Required for discord-notify
+- `TELEGRAM_BOT_TOKEN` - Required for telegram-notify
+- `TELEGRAM_CHAT_ID` - Required for telegram-notify

package/dist/presets/frontend/hooks/discord-notify.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+// Sends a notification to Discord via webhook.
+// Requires DISCORD_WEBHOOK_URL in hooks/.env or environment.
+
+const https = require('https');
+
+const WEBHOOK_URL = process.env.DISCORD_WEBHOOK_URL || '';
+const message = process.argv.slice(2).join(' ') || 'Agent task completed.';
+
+if (!WEBHOOK_URL) {
+  process.stderr.write('[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping.\n');
+  process.exit(0);
+}
+
+const url = new URL(WEBHOOK_URL);
+const payload = JSON.stringify({ content: message });
+
+const options = {
+  hostname: url.hostname,
+  path: url.pathname,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+};
+
+const req = https.request(options, (res) => {
+  process.exit(res.statusCode >= 200 && res.statusCode < 300 ? 0 : 1);
+});
+
+req.on('error', () => process.exit(1));
+req.write(payload);
+req.end();

package/dist/presets/frontend/hooks/discord-notify.ps1

@@ -0,0 +1,19 @@
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+$Message = if ($args.Count -gt 0) { $args -join ' ' } else { 'Agent task completed.' }
+
+$WebhookUrl = $env:DISCORD_WEBHOOK_URL
+
+if (-not $WebhookUrl) {
+    Write-Error "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping."
+    exit 0
+}
+
+$Body = @{ content = $Message } | ConvertTo-Json
+try {
+    Invoke-RestMethod -Uri $WebhookUrl -Method Post -Body $Body -ContentType 'application/json'
+    exit 0
+} catch {
+    exit 1
+}

package/dist/presets/frontend/hooks/discord-notify.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+MESSAGE="${*:-Agent task completed.}"
+
+if [ -z "$DISCORD_WEBHOOK_URL" ]; then
+  echo "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping." >&2
+  exit 0
+fi
+
+curl -s -o /dev/null -w "%{http_code}" \
+  -H "Content-Type: application/json" \
+  -d "{\"content\": \"$MESSAGE\"}" \
+  "$DISCORD_WEBHOOK_URL" | grep -q "^2" && exit 0 || exit 1

package/dist/presets/frontend/hooks/git-status-tracker.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+// Tracks git status changes and logs summary.
+// Useful as a PostToolUse or agentStop hook.
+
+const { execSync } = require('child_process');
+
+try {
+  const status = execSync('git status --porcelain', { encoding: 'utf8' }).trim();
+  if (!status) {
+    process.stdout.write('[git-status] Working tree clean.\n');
+    process.exit(0);
+  }
+
+  const lines = status.split('\n');
+  const added = lines.filter((l) => l.startsWith('A') || l.startsWith('?')).length;
+  const modified = lines.filter((l) => l.startsWith('M') || l.startsWith(' M')).length;
+  const deleted = lines.filter((l) => l.startsWith('D') || l.startsWith(' D')).length;
+
+  process.stdout.write(
+    `[git-status] ${lines.length} changes: +${added} ~${modified} -${deleted}\n`
+  );
+} catch (err) {
+  process.stderr.write('[git-status] Not a git repository or git unavailable.\n');
+}
+
+process.exit(0);

package/dist/presets/frontend/hooks/modularization-hook.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+// PostToolUse hook: warns when a file exceeds 200 lines.
+// Encourages splitting large files into smaller modules.
+
+const fs = require('fs');
+const path = require('path');
+
+const MAX_LINES = 200;
+const CODE_EXTENSIONS = ['.js', '.ts', '.jsx', '.tsx', '.py', '.go', '.rs', '.java'];
+
+const filePath = process.argv[2] || '';
+
+if (!filePath || !fs.existsSync(filePath)) {
+  process.exit(0);
+}
+
+const ext = path.extname(filePath).toLowerCase();
+if (!CODE_EXTENSIONS.includes(ext)) {
+  process.exit(0);
+}
+
+try {
+  const content = fs.readFileSync(filePath, 'utf8');
+  const lineCount = content.split('\n').length;
+
+  if (lineCount > MAX_LINES) {
+    process.stderr.write(
+      `[modularization] Warning: ${filePath} has ${lineCount} lines (max ${MAX_LINES}). Consider splitting.\n`
+    );
+    process.exit(1);
+  }
+} catch (err) {
+  // Silently ignore read errors
+}
+
+process.exit(0);

package/dist/presets/frontend/hooks/pre-commit-lint.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// Pre-commit hook: runs linter on staged files.
+// Exits non-zero if lint fails, preventing commit.
+
+const { execSync } = require('child_process');
+
+try {
+  execSync('npm run lint --silent', { stdio: 'pipe' });
+  process.exit(0);
+} catch (err) {
+  process.stderr.write('[pre-commit-lint] Lint failed. Fix errors before committing.\n');
+  if (err.stdout) process.stderr.write(err.stdout.toString());
+  if (err.stderr) process.stderr.write(err.stderr.toString());
+  process.exit(1);
+}

package/dist/presets/frontend/hooks/scout-block.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+// Security guard: blocks dangerous commands before execution.
+// Registered as PreToolUse hook.
+
+const BLOCKED_PATTERNS = [
+  /rm\s+(-rf|-fr)\s+[\/~]/i,
+  /rm\s+(-rf|-fr)\s+\./i,
+  /drop\s+(database|table|schema)/i,
+  /truncate\s+table/i,
+  /delete\s+from\s+\w+\s*;?\s*$/i,
+  /format\s+[a-z]:/i,
+  /mkfs\./i,
+  /dd\s+if=.*of=\/dev/i,
+  /chmod\s+-R\s+777\s+\//i,
+  />\s*\/dev\/sd[a-z]/i,
+  /:(){ :\|:& };:/,
+  /shutdown/i,
+  /reboot/i,
+  /init\s+0/i,
+];
+
+const input = process.argv.slice(2).join(' ') || '';
+const blocked = BLOCKED_PATTERNS.some((p) => p.test(input));
+
+if (blocked) {
+  process.stderr.write(`[scout-block] Blocked dangerous command: ${input}\n`);
+  process.exit(2);
+}
+
+process.exit(0);