ma-agents 3.4.8 → 3.5.0

package/.opencode/skills/git-workflow-skill/scripts/finish-feature.sh

@@ -1,192 +0,0 @@
-#!/bin/bash
-# finish-feature.sh - Rebase, validate, push, create PR, and clean up worktree
-# Usage: finish-feature.sh [worktree-path]
-#
-# Run from inside a worktree, or pass the worktree path as an argument.
-# After creating the PR, the worktree is removed automatically.
-
-set -e
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-NC='\033[0m'
-
-error() { echo -e "${RED}ERROR: $1${NC}" >&2; exit 1; }
-warn() { echo -e "${YELLOW}WARNING: $1${NC}" >&2; }
-success() { echo -e "${GREEN}$1${NC}"; }
-info() { echo -e "${CYAN}$1${NC}"; }
-
-# Determine working directory
-WORK_DIR="${1:-$(pwd)}"
-cd "$WORK_DIR"
-
-# Check we're in a git repo
-git rev-parse --git-dir > /dev/null 2>&1 || error "Not in a git repository"
-
-# Detect if we're in a worktree
-GIT_COMMON=$(git rev-parse --git-common-dir 2>/dev/null)
-GIT_DIR=$(git rev-parse --git-dir 2>/dev/null)
-WORKTREE_PATH=$(git rev-parse --show-toplevel)
-
-IS_WORKTREE=false
-if [[ "$GIT_COMMON" != "$GIT_DIR" && "$GIT_COMMON" != "." ]]; then
-    IS_WORKTREE=true
-    MAIN_REPO=$(cd "$GIT_COMMON/.." && pwd)
-    info "Working in worktree: ${WORKTREE_PATH}"
-else
-    MAIN_REPO="$WORKTREE_PATH"
-    info "Working in main repository (not a worktree)"
-fi
-
-# Get current branch
-CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
-
-# Validate we're on a feature branch
-if [[ "$CURRENT_BRANCH" == "dev" || "$CURRENT_BRANCH" == "main" || "$CURRENT_BRANCH" == "master" ]]; then
-    error "You are on '$CURRENT_BRANCH'. Switch to a feature branch first."
-fi
-
-if ! echo "$CURRENT_BRANCH" | grep -qE '^(feature|bugfix|hotfix|chore)/'; then
-    warn "Branch '$CURRENT_BRANCH' doesn't follow naming convention (feature|bugfix|hotfix|chore)/<description>"
-    read -p "Continue anyway? (y/N) " -n 1 -r
-    echo
-    [[ $REPLY =~ ^[Yy]$ ]] || exit 1
-fi
-
-# Check for uncommitted changes
-if ! git diff-index --quiet HEAD -- 2>/dev/null; then
-    error "You have uncommitted changes. Please commit them first."
-fi
-
-# Check there are commits to push
-COMMITS_AHEAD=$(git rev-list --count origin/dev..HEAD 2>/dev/null || echo "0")
-if [[ "$COMMITS_AHEAD" == "0" ]]; then
-    error "No commits to push. Make some changes first."
-fi
-
-echo "Found $COMMITS_AHEAD commit(s) to push"
-
-# Validate commit messages
-echo ""
-echo "Validating commit messages..."
-INVALID_COMMITS=0
-while IFS= read -r commit_msg; do
-    if ! echo "$commit_msg" | grep -qE '^(feat|fix|chore|docs|refactor|test)(\([^)]+\))?: .+'; then
-        echo -e "${RED}  x Invalid: $commit_msg${NC}"
-        INVALID_COMMITS=$((INVALID_COMMITS + 1))
-    else
-        echo -e "${GREEN}  + Valid: $commit_msg${NC}"
-    fi
-done < <(git log origin/dev..HEAD --pretty=format:"%s")
-
-if [[ $INVALID_COMMITS -gt 0 ]]; then
-    warn "$INVALID_COMMITS commit(s) don't follow conventional commit format"
-    read -p "Continue anyway? (y/N) " -n 1 -r
-    echo
-    [[ $REPLY =~ ^[Yy]$ ]] || exit 1
-fi
-
-# Fetch and rebase on dev
-echo ""
-echo "Fetching latest from origin..."
-git fetch origin dev
-
-echo "Rebasing on dev..."
-if ! git rebase origin/dev; then
-    error "Rebase failed. Resolve conflicts, then run 'git rebase --continue' and try again."
-fi
-
-success "Rebased successfully on dev"
-
-# Push to remote
-echo ""
-echo "Pushing branch to origin..."
-git push -u origin "$CURRENT_BRANCH" --force-with-lease
-
-success "Branch '${CURRENT_BRANCH}' pushed to origin"
-
-# Create Pull Request using gh CLI
-echo ""
-echo "Creating Pull Request..."
-
-PR_CREATED=false
-
-if ! command -v gh &> /dev/null; then
-    warn "GitHub CLI (gh) not installed. Skipping PR creation."
-    echo "Install gh: https://cli.github.com/"
-elif ! gh auth status &> /dev/null; then
-    warn "GitHub CLI not authenticated. Run: gh auth login"
-else
-    # Generate PR title from branch name
-    PR_TITLE=$(echo "$CURRENT_BRANCH" | sed 's/^[^/]*\///' | sed 's/-/ /g' | sed 's/\b\(.\)/\u\1/g')
-
-    # Get commit messages for PR body
-    FIRST_COMMIT=$(git log origin/dev..HEAD --reverse --pretty=format:"%s" | head -1)
-
-    if gh pr create --base dev --head "$CURRENT_BRANCH" --title "$PR_TITLE" --body "## Changes
-
-$FIRST_COMMIT
-
-## Commits
-$(git log origin/dev..HEAD --pretty=format:"- %s")
-
----
-Generated with [AI Agent Skills](https://github.com/mayafit/AI_Agents)"; then
-        success "Pull Request created successfully"
-        PR_URL=$(gh pr view "$CURRENT_BRANCH" --json url -q .url 2>/dev/null || echo "")
-        if [[ -n "$PR_URL" ]]; then
-            echo ""
-            info "PR URL: ${PR_URL}"
-        fi
-        PR_CREATED=true
-    else
-        warn "Failed to create PR. You may need to create it manually."
-    fi
-fi
-
-# Clean up worktree
-if [[ "$IS_WORKTREE" == true ]]; then
-    echo ""
-    echo "Cleaning up worktree..."
-
-    # Move back to main repo before removing the worktree
-    cd "$MAIN_REPO"
-
-    # Remove the worktree
-    if git worktree remove "$WORKTREE_PATH" 2>/dev/null; then
-        success "Worktree removed: ${WORKTREE_PATH}"
-    else
-        warn "Could not auto-remove worktree. Remove manually:"
-        echo "  cd ${MAIN_REPO}"
-        echo "  git worktree remove ${WORKTREE_PATH}"
-    fi
-else
-    # Not a worktree — switch back to dev (legacy behavior)
-    echo ""
-    echo "Switching back to dev branch..."
-    git checkout dev
-    git pull origin dev
-    success "Switched back to dev branch"
-fi
-
-# Prune stale worktree references
-git worktree prune 2>/dev/null || true
-
-echo ""
-success "Done!"
-echo ""
-echo "Next steps:"
-if [[ "$PR_CREATED" == true ]]; then
-    echo "  1. Request code review on the PR"
-    echo "  2. Merge after approval"
-else
-    echo "  1. Create a Pull Request to merge '${CURRENT_BRANCH}' into 'dev'"
-    echo "  2. Request code review"
-    echo "  3. Merge after approval"
-fi
-echo "  Start new work: ./scripts/start-feature.sh <type> <description>"
-echo ""
-echo "Active worktrees:"
-git worktree list

package/.opencode/skills/git-workflow-skill/scripts/install-hooks.sh

@@ -1,55 +0,0 @@
-#!/bin/bash
-# install-hooks.sh - Install git hooks for workflow enforcement
-# Usage: install-hooks.sh [hooks-source-dir]
-
-set -e
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-NC='\033[0m'
-
-error() { echo -e "${RED}ERROR: $1${NC}" >&2; exit 1; }
-success() { echo -e "${GREEN}✓ $1${NC}"; }
-warn() { echo -e "${YELLOW}WARNING: $1${NC}"; }
-
-# Check we're in a git repo
-git rev-parse --git-dir > /dev/null 2>&1 || error "Not in a git repository"
-
-# Find hooks source directory
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HOOKS_SOURCE="${1:-$SCRIPT_DIR/../hooks}"
-
-if [[ ! -d "$HOOKS_SOURCE" ]]; then
-    error "Hooks source directory not found: $HOOKS_SOURCE"
-fi
-
-# Get git hooks directory
-GIT_DIR=$(git rev-parse --git-dir)
-HOOKS_DEST="$GIT_DIR/hooks"
-
-echo "Installing git hooks..."
-echo "Source: $HOOKS_SOURCE"
-echo "Destination: $HOOKS_DEST"
-echo ""
-
-# Install each hook
-for hook in pre-commit commit-msg prepare-commit-msg; do
-    if [[ -f "$HOOKS_SOURCE/$hook" ]]; then
-        if [[ -f "$HOOKS_DEST/$hook" ]]; then
-            warn "Hook '$hook' already exists, backing up to ${hook}.backup"
-            cp "$HOOKS_DEST/$hook" "$HOOKS_DEST/${hook}.backup"
-        fi
-        cp "$HOOKS_SOURCE/$hook" "$HOOKS_DEST/$hook"
-        chmod +x "$HOOKS_DEST/$hook"
-        success "Installed: $hook"
-    fi
-done
-
-echo ""
-success "Git hooks installed successfully"
-echo ""
-echo "Installed hooks:"
-echo "  - pre-commit: Blocks commits on dev/main branches"
-echo "  - commit-msg: Validates conventional commit format"
-echo "  - prepare-commit-msg: Adds commit template"

package/.opencode/skills/git-workflow-skill/scripts/start-feature.sh

@@ -1,110 +0,0 @@
-#!/bin/bash
-# start-feature.sh - Create a new feature branch in an isolated worktree
-# Usage: start-feature.sh <branch-type> <description>
-# Example: start-feature.sh feature add-oauth-support
-#
-# Creates a git worktree so multiple agents can work in parallel
-# without interfering with each other's working directories.
-
-set -e
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-NC='\033[0m'
-
-error() { echo -e "${RED}ERROR: $1${NC}" >&2; exit 1; }
-warn() { echo -e "${YELLOW}WARNING: $1${NC}" >&2; }
-success() { echo -e "${GREEN}$1${NC}"; }
-info() { echo -e "${CYAN}$1${NC}"; }
-
-# Validate arguments
-BRANCH_TYPE="$1"
-DESCRIPTION="$2"
-
-if [[ -z "$BRANCH_TYPE" || -z "$DESCRIPTION" ]]; then
-    echo "Usage: $0 <branch-type> <description>"
-    echo "Branch types: feature, bugfix, hotfix, chore"
-    echo "Example: $0 feature add-oauth-support"
-    echo ""
-    echo "Creates an isolated worktree for parallel multi-agent development."
-    exit 1
-fi
-
-# Validate branch type
-case "$BRANCH_TYPE" in
-    feature|bugfix|hotfix|chore) ;;
-    *) error "Invalid branch type '$BRANCH_TYPE'. Use: feature, bugfix, hotfix, chore" ;;
-esac
-
-# Sanitize description (replace spaces with dashes, lowercase)
-DESCRIPTION=$(echo "$DESCRIPTION" | tr '[:upper:]' '[:lower:]' | tr ' ' '-' | tr -cd '[:alnum:]-')
-BRANCH_NAME="${BRANCH_TYPE}/${DESCRIPTION}"
-
-# Check we're in a git repo
-git rev-parse --git-dir > /dev/null 2>&1 || error "Not in a git repository"
-
-# Resolve the main repo root (works from inside a worktree too)
-GIT_COMMON=$(git rev-parse --git-common-dir 2>/dev/null)
-GIT_DIR=$(git rev-parse --git-dir 2>/dev/null)
-
-if [[ "$GIT_COMMON" != "$GIT_DIR" && "$GIT_COMMON" != "." ]]; then
-    # We're inside a worktree — resolve main repo from .git/worktrees/xxx/../../..
-    MAIN_REPO=$(cd "$GIT_COMMON/.." && pwd)
-else
-    MAIN_REPO=$(git rev-parse --show-toplevel)
-fi
-
-WORKTREE_DIR="${MAIN_REPO}/.worktrees/${DESCRIPTION}"
-
-# Fetch latest from remote
-echo "Fetching from remote..."
-git fetch origin
-
-# Verify dev branch exists
-if ! git branch -a | grep -qE '(^|\s)origin/dev$'; then
-    error "Branch 'dev' does not exist on remote. Please create it first."
-fi
-
-# Check if branch already exists
-if git show-ref --verify --quiet "refs/heads/${BRANCH_NAME}" 2>/dev/null || \
-   git show-ref --verify --quiet "refs/remotes/origin/${BRANCH_NAME}" 2>/dev/null; then
-    error "Branch '${BRANCH_NAME}' already exists. Use a different description or clean up the old branch."
-fi
-
-# Check if worktree directory already exists
-if [[ -d "$WORKTREE_DIR" ]]; then
-    error "Worktree directory already exists: ${WORKTREE_DIR}
-  To remove it: git worktree remove ${WORKTREE_DIR}"
-fi
-
-# Ensure .worktrees directory exists and is gitignored
-mkdir -p "${MAIN_REPO}/.worktrees"
-if [[ -f "${MAIN_REPO}/.gitignore" ]]; then
-    if ! grep -q '^\.worktrees' "${MAIN_REPO}/.gitignore" 2>/dev/null; then
-        echo ".worktrees/" >> "${MAIN_REPO}/.gitignore"
-        info "Added .worktrees/ to .gitignore"
-    fi
-else
-    echo ".worktrees/" > "${MAIN_REPO}/.gitignore"
-    info "Created .gitignore with .worktrees/"
-fi
-
-# Create worktree with new branch based on origin/dev
-echo "Creating worktree for '${BRANCH_NAME}'..."
-git worktree add -b "$BRANCH_NAME" "$WORKTREE_DIR" origin/dev
-
-success "Worktree created successfully"
-echo ""
-info "  Branch:    ${BRANCH_NAME}"
-info "  Directory: ${WORKTREE_DIR}"
-echo ""
-echo "Next steps:"
-echo "  1. cd ${WORKTREE_DIR}"
-echo "  2. Make your changes in this isolated directory"
-echo "  3. Commit: git commit -m 'type(scope): description'"
-echo "  4. Finish: run finish-feature.sh from inside the worktree"
-echo ""
-echo "Active worktrees:"
-git worktree list

package/.opencode/skills/git-workflow-skill/scripts/validate-workflow.sh

@@ -1,229 +0,0 @@
-#!/bin/bash
-# validate-workflow.sh - Check if current state follows git workflow rules
-# Usage: validate-workflow.sh [--list]
-#
-# Worktree-aware: detects whether you're in a worktree or main repo
-# and validates accordingly.
-
-set -e
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-NC='\033[0m'
-
-ERRORS=0
-WARNINGS=0
-
-error() { echo -e "${RED}x ERROR: $1${NC}"; ERRORS=$((ERRORS + 1)); }
-warn() { echo -e "${YELLOW}! WARNING: $1${NC}"; WARNINGS=$((WARNINGS + 1)); }
-ok() { echo -e "${GREEN}+ $1${NC}"; }
-info() { echo -e "  $1"; }
-
-# Handle --list flag to show active worktrees
-if [[ "$1" == "--list" ]]; then
-    echo "Active Worktrees"
-    echo "================"
-    git worktree list 2>/dev/null || echo "Not in a git repository"
-    exit 0
-fi
-
-echo "Git Workflow Validation (Worktree-Aware)"
-echo "========================================="
-echo ""
-
-# Check we're in a git repo
-if ! git rev-parse --git-dir > /dev/null 2>&1; then
-    error "Not in a git repository"
-    exit 1
-fi
-
-# Detect worktree status
-GIT_COMMON=$(git rev-parse --git-common-dir 2>/dev/null)
-GIT_DIR=$(git rev-parse --git-dir 2>/dev/null)
-CURRENT_DIR=$(git rev-parse --show-toplevel)
-
-IS_WORKTREE=false
-if [[ "$GIT_COMMON" != "$GIT_DIR" && "$GIT_COMMON" != "." ]]; then
-    IS_WORKTREE=true
-    MAIN_REPO=$(cd "$GIT_COMMON/.." && pwd)
-    echo -e "${CYAN}Context: Inside worktree${NC}"
-    info "Worktree: $CURRENT_DIR"
-    info "Main repo: $MAIN_REPO"
-else
-    MAIN_REPO="$CURRENT_DIR"
-    echo -e "${CYAN}Context: Main repository${NC}"
-    info "Repo: $MAIN_REPO"
-fi
-
-# Get current branch
-CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
-echo "Branch: $CURRENT_BRANCH"
-echo ""
-
-# Check 1: Not on protected branch
-echo "Checking branch..."
-if [[ "$CURRENT_BRANCH" == "dev" || "$CURRENT_BRANCH" == "main" || "$CURRENT_BRANCH" == "master" ]]; then
-    if [[ "$IS_WORKTREE" == true ]]; then
-        error "Worktree is on protected branch '$CURRENT_BRANCH'. Worktrees should be on feature branches."
-    else
-        # Main repo on dev is fine — that's the expected state
-        ok "Main repo is on '$CURRENT_BRANCH' (expected)"
-    fi
-else
-    ok "On feature branch '$CURRENT_BRANCH'"
-fi
-
-# Check 2: Branch naming convention (only for feature branches)
-if [[ "$CURRENT_BRANCH" != "dev" && "$CURRENT_BRANCH" != "main" && "$CURRENT_BRANCH" != "master" ]]; then
-    if echo "$CURRENT_BRANCH" | grep -qE '^(feature|bugfix|hotfix|chore)/[a-z0-9-]+$'; then
-        ok "Branch name follows convention"
-    else
-        warn "Branch name '$CURRENT_BRANCH' doesn't follow convention: <type>/<description>"
-        info "Expected: feature|bugfix|hotfix|chore followed by lowercase alphanumeric with dashes"
-    fi
-fi
-
-# Check 3: dev branch exists
-echo ""
-echo "Checking repository setup..."
-git fetch origin 2>/dev/null || warn "Could not fetch from origin"
-
-if git branch -a | grep -qE '(^|\s)origin/dev$'; then
-    ok "Remote 'dev' branch exists"
-else
-    error "Remote 'dev' branch not found. Create it before using this workflow."
-fi
-
-# Check 4: Up to date with dev (for feature branches)
-echo ""
-echo "Checking sync status..."
-if [[ "$CURRENT_BRANCH" != "dev" && "$CURRENT_BRANCH" != "main" && "$CURRENT_BRANCH" != "master" ]]; then
-    if git branch -a | grep -qE '(^|\s)origin/dev$'; then
-        BEHIND=$(git rev-list --count HEAD..origin/dev 2>/dev/null || echo "0")
-        if [[ "$BEHIND" == "0" ]]; then
-            ok "Branch is up to date with dev"
-        else
-            warn "Branch is $BEHIND commit(s) behind dev. Consider rebasing."
-            info "Run: git fetch origin dev && git rebase origin/dev"
-        fi
-    fi
-else
-    ok "On base branch — sync check not needed"
-fi
-
-# Check 5: Uncommitted changes
-echo ""
-echo "Checking working directory..."
-if git diff-index --quiet HEAD -- 2>/dev/null; then
-    ok "No uncommitted changes"
-else
-    warn "Uncommitted changes detected"
-    info "Run: git status"
-fi
-
-# Check 6: Untracked files (that aren't ignored)
-UNTRACKED=$(git ls-files --others --exclude-standard | wc -l)
-if [[ "$UNTRACKED" -gt 0 ]]; then
-    warn "$UNTRACKED untracked file(s) found"
-    info "Run: git status"
-else
-    ok "No untracked files"
-fi
-
-# Check 7: Validate recent commit messages (for feature branches)
-echo ""
-echo "Checking commit messages..."
-if [[ "$CURRENT_BRANCH" != "dev" && "$CURRENT_BRANCH" != "main" && "$CURRENT_BRANCH" != "master" ]]; then
-    COMMITS=$(git rev-list --count origin/dev..HEAD 2>/dev/null || echo "0")
-    if [[ "$COMMITS" -gt 0 ]]; then
-        INVALID=0
-        while IFS= read -r msg; do
-            if ! echo "$msg" | grep -qE '^(feat|fix|chore|docs|refactor|test)(\([^)]+\))?: .+'; then
-                INVALID=$((INVALID + 1))
-            fi
-        done < <(git log origin/dev..HEAD --pretty=format:"%s" 2>/dev/null)
-
-        if [[ "$INVALID" -eq 0 ]]; then
-            ok "All $COMMITS commit(s) follow conventional format"
-        else
-            warn "$INVALID of $COMMITS commit(s) don't follow conventional format"
-            info "Format: <type>(<scope>): <description>"
-            info "Types: feat, fix, chore, docs, refactor, test"
-        fi
-    else
-        info "No commits ahead of dev yet"
-    fi
-else
-    info "On base branch — commit check not needed"
-fi
-
-# Check 8: Git hooks installed
-echo ""
-echo "Checking git hooks..."
-HOOKS_DIR="${GIT_COMMON}/hooks"
-if [[ "$IS_WORKTREE" == true ]]; then
-    # Worktrees share hooks with the main repo
-    HOOKS_DIR="${GIT_COMMON}/hooks"
-fi
-
-if [[ -f "$HOOKS_DIR/pre-commit" && -x "$HOOKS_DIR/pre-commit" ]]; then
-    ok "pre-commit hook installed"
-else
-    warn "pre-commit hook not installed"
-    info "Run: ./scripts/install-hooks.sh"
-fi
-
-if [[ -f "$HOOKS_DIR/commit-msg" && -x "$HOOKS_DIR/commit-msg" ]]; then
-    ok "commit-msg hook installed"
-else
-    warn "commit-msg hook not installed"
-    info "Run: ./scripts/install-hooks.sh"
-fi
-
-# Check 9: Worktree health
-echo ""
-echo "Checking worktrees..."
-WORKTREE_COUNT=$(git worktree list | wc -l)
-ok "$WORKTREE_COUNT worktree(s) registered"
-
-# Check for stale worktrees
-STALE_COUNT=$(git worktree list --porcelain | grep -c "^prunable" 2>/dev/null || echo "0")
-if [[ "$STALE_COUNT" -gt 0 ]]; then
-    warn "$STALE_COUNT stale worktree(s) found"
-    info "Run: git worktree prune"
-else
-    ok "No stale worktrees"
-fi
-
-# Check .worktrees in .gitignore
-if [[ -f "${MAIN_REPO}/.gitignore" ]]; then
-    if grep -q '^\.worktrees' "${MAIN_REPO}/.gitignore" 2>/dev/null; then
-        ok ".worktrees/ is in .gitignore"
-    else
-        warn ".worktrees/ is NOT in .gitignore"
-        info "Add '.worktrees/' to your .gitignore"
-    fi
-fi
-
-# List active worktrees
-echo ""
-echo "Active worktrees:"
-git worktree list | while IFS= read -r line; do
-    echo "  $line"
-done
-
-# Summary
-echo ""
-echo "========================================="
-if [[ $ERRORS -gt 0 ]]; then
-    echo -e "${RED}Validation failed: $ERRORS error(s), $WARNINGS warning(s)${NC}"
-    exit 1
-elif [[ $WARNINGS -gt 0 ]]; then
-    echo -e "${YELLOW}Validation passed with $WARNINGS warning(s)${NC}"
-    exit 0
-else
-    echo -e "${GREEN}Validation passed: All checks OK${NC}"
-    exit 0
-fi

package/.opencode/skills/js-ts-dependency-mgmt/SKILL.md

@@ -1,49 +0,0 @@
----
-name: JS/TS Dependency Management
-description: Standardize package management and security across NPM, Yarn, and PNPM.
----
-# JS/TS Dependency Management (NPM, Yarn, PNPM)
-
-This skill enforces best practices for managing dependencies in the JS/TS ecosystem, focusing on build stability, supply chain security, and environment hygiene.
-
-## Policies
-
-### 1. Build Stability & Reproducibility
-*   **Rule**: Always use a lockfile (`package-lock.json`, `yarn.lock`, or `pnpm-lock.yaml`) and pin versions.
-*   **Action**: 
-    - Use specific versions in `package.json` (prefer `1.2.3` over `^1.2.3` for critical production apps).
-    - NEVER use `*` or `latest`.
-    - Always commit the lockfile to version control.
-
-### 2. Supply Chain Security (OWASP A03:2025)
-*   **Rule**: Mandatory scanning for known vulnerabilities in dependencies.
-*   **Action**: 
-    - Consistently run `npm audit` or `yarn audit`.
-    - Ban insecure registry URLs (use HTTPS only).
-    - Avoid Git-based dependencies (`"pkg": "git+https://..."`) unless from an internal/verified source.
-    - Be cautious of "Typosquatting"—double-check package names before installation.
-
-### 3. Dependency Categorization
-*   **Rule**: Correctly distinguish between runtime and development dependencies.
-*   **Action**: 
-    - **dependencies**: Packages needed for the app to run (e.g., `express`, `react`).
-    - **devDependencies**: Packages needed only for building/testing (e.g., `typescript`, `jest`, `eslint`).
-    - **peerDependencies**: Libraries intended to be used with other specific versions of a host package.
-
-### 4. Registry Hygiene
-*   **Rule**: Standardize configuration via `.npmrc`.
-*   **Action**: 
-    - Define `save-exact=true` if pinning is the default project policy.
-    - Set up scoped registries for private packages correctly.
-
-### 5. Automated Updates
-*   **Rule**: Keep dependencies current while maintaining safety.
-*   **Action**: Use tools like `npm-check-updates` (ncu) to audit updates, but verify them in separate PRs/branches.
-
-## Process Reference
-
-| Tool | Lockfile | Installation | Audit |
-| :--- | :--- | :--- | :--- |
-| **NPM** | `package-lock.json` | `npm install` | `npm audit` |
-| **Yarn** | `yarn.lock` | `yarn install` | `yarn audit` |
-| **PNPM** | `pnpm-lock.yaml` | `pnpm install` | `pnpm audit` |

package/.opencode/skills/js-ts-dependency-mgmt/examples/dependency_mgmt.md

@@ -1,60 +0,0 @@
-# JS/TS Dependency Management Examples
-
-### 1. Secure `package.json` Structure
-**Good Pattern:**
-```json
-{
-  "name": "secure-app",
-  "version": "1.0.0",
-  "dependencies": {
-    "axios": "1.6.2",        // Pinned version
-    "express": "4.18.2"      // Pinned version
-  },
-  "devDependencies": {
-    "typescript": "5.3.2",
-    "jest": "29.7.0",
-    "eslint": "8.54.0"
-  }
-}
-```
-
-### 2. Standardized `.npmrc`
-```text
-# Enforce exact version saving by default
-save-exact=true
-
-# Ensure every developer uses the same registry
-registry=https://registry.npmjs.org/
-
-# Forbid scrips for security during install if possible
-# ignore-scripts=true
-```
-
-### 3. Managing Scoped/Private Packages
-If you use a private registry (like Artifactory or GitHub Packages):
-```text
-@my-org:registry=https://npm.pkg.github.com
-//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}
-```
-
-### 4. Dependency Auditing Workflow
-**Routine Check:**
-```bash
-# Check for vulnerabilities
-npm audit
-
-# Fix minor issues automatically
-npm audit fix
-
-# Check for outdated packages without installing
-npx npm-check-updates
-```
-
-### 5. Cleaning up Node Modules
-```bash
-# Remove unused dependencies
-npm prune
-
-# Clean install (deletes node_modules and installs from lockfile)
-npm ci
-```