omnius 1.0.714 → 1.0.716

package/skills/reference/flaviocopes/skills/web-apis/SKILL.md

@@ -0,0 +1,82 @@
+---
+source_pack: flaviocopes
+source_kind: course
+compaction_strategy: structured
+---
+
+# Web APIs Course
+
+Web APIs reference card. 14 topic areas, 55 worked code samples in ts, typescript, bash, sql, json. Routing card only — full text lives in the local corpus.
+
+## Triggers
+
+- Web APIs reference
+- how do I do X in Web APIs
+- Web APIs syntax
+- look up Web APIs
+- ts web apis example
+- typescript web apis example
+- frontend and browser: web apis
+
+## Covers
+
+- API foundations
+- Design the Books API
+- Create a Hono Node project
+- Return the first resource
+- Inspect requests and responses
+- Check your understanding: api foundations
+- Routes and errors
+- Read path and query parameters
+- Create resources with POST
+- Update and delete resources
+- Standardize API errors
+- Check your understanding: routes and errors
+- Validation and data
+- Validate unknown input
+
+19 further sections are indexed in the local corpus.
+
+## Concept index
+
+Identifiers that appear in this title's code samples. Use them as search
+keys against the local corpus, and as a check on whether this is the right
+reference before reading further.
+
+`POST` · `TEXT` · `requestId` · `created_at` · `PUT` · `publishedYear` · `DELETE` · `JSON` · `--json` · `SELECT` · `CHECK` · `INSERT` · `INTO` · `VALUES` · `onError` · `TABLE` · `published_year` · `insertBook` · `ORDER` · `userId` · `CREATE` · `WHERE` · `createApp` · `OPTIONS` · `randomUUID` · `findIndex` · `bookInput` · `strictObject` · `zValidator` · `PRIMARY` · `KEY` · `INTEGER` · `readFileSync` · `books.db` · `sortColumns` · `DESC` · `isInteger` · `owner_id` · `bodyLimit` · `user_id`
+
+## When to use
+
+- A Web APIs question needs a worked, checked answer rather than recall.
+- You are about to guess at Web APIs syntax, a flag, or an API shape.
+- The task touches an area listed under Covers above.
+
+## When not to use
+
+- The question is about this project's own code — read the code instead.
+- A sibling card below is a closer fit; prefer the narrower one.
+
+## Related
+
+- `html` — HTML Course
+- `css` — CSS Course
+- `javascript` — JavaScript Course
+- `typescript` — TypeScript Course
+- `react` — React Course
+- `nextjs` — Next.js Course
+
+## Full text
+
+Source: https://downloads.flaviocopes.com/course-downloads/web-apis.epub
+
+The full text is not bundled. Fetch it once into the local corpus:
+
+```bash
+omnius library fetch flaviocopes --title web-apis
+```
+
+Then search it:
+
+```bash
+omnius library search flaviocopes "<query>" --title web-apis
+```

package/skills/reference/flaviocopes/skills/web-application-security/SKILL.md

@@ -0,0 +1,82 @@
+---
+source_pack: flaviocopes
+source_kind: course
+compaction_strategy: structured
+---
+
+# Web Application Security Course
+
+Web Application Security reference card. 14 topic areas, 66 worked code samples in js, javascript, bash, html, json. Routing card only — full text lives in the local corpus.
+
+## Triggers
+
+- Web Application Security reference
+- how do I do X in Web Application Security
+- Web Application Security syntax
+- look up Web Application Security
+- js web application security example
+- javascript web application security example
+- security: web application security
+
+## Covers
+
+- Browser security boundaries
+- Understand the origin boundary
+- Protect session cookies
+- Configure CORS narrowly
+- Add a Content Security Policy
+- Check your understanding: browser security boundaries
+- Injection and output
+- Prevent cross-site scripting
+- Use parameterized database queries
+- Avoid command injection
+- Keep file paths inside a root
+- Check your understanding: injection and output
+- Requests, files, and servers
+- Prevent cross-site request forgery
+
+19 further sections are indexed in the local corpus.
+
+## Concept index
+
+Identifiers that appear in this title's code samples. Use them as search
+keys against the local corpus, and as a check on whether this is the right
+reference before reading further.
+
+`app.flaviocopes.com` · `userMessage` · `owner_id` · `SELECT` · `WHERE` · `POST` · `evil.example` · `innerHTML` · `requestId` · `authz.denied` · `api.flaviocopes.com` · `actorId` · `execFile` · `http_code` · `textContent` · `created_at` · `fileTypeFromFile` · `sessionId` · `httpOnly` · `sameSite` · `flaviocopes.com` · `ownerId` · `sortColumns` · `child_process` · `output.png` · `startsWith` · `assertPublic` · `internal_error` · `NODE_ENV` · `requireAdmin` · `requireRecentAuth` · `PUT` · `note.read` · `targetId` · `cdn.stripe.com` · `dangerouslySetInnerHTML` · `includeSubDomains` · `maxAge` · `v3.js` · `randomBytes`
+
+## When to use
+
+- A Web Application Security question needs a worked, checked answer rather than recall.
+- You are about to guess at Web Application Security syntax, a flag, or an API shape.
+- The task touches an area listed under Covers above.
+
+## When not to use
+
+- The question is about this project's own code — read the code instead.
+- A sibling card below is a closer fit; prefer the narrower one.
+
+## Related
+
+- `security-fundamentals` — Security Fundamentals Course
+- `web-authentication` — Web Authentication Course
+- `api-security` — API Security Course
+- `linux-server-security` — Linux Server Security Course
+- `software-supply-chain-security` — Software Supply Chain Security Course
+- `cryptography-for-developers` — Cryptography for Developers Course
+
+## Full text
+
+Source: https://downloads.flaviocopes.com/course-downloads/web-application-security.epub
+
+The full text is not bundled. Fetch it once into the local corpus:
+
+```bash
+omnius library fetch flaviocopes --title web-application-security
+```
+
+Then search it:
+
+```bash
+omnius library search flaviocopes "<query>" --title web-application-security
+```

package/skills/reference/flaviocopes/skills/web-authentication/SKILL.md

@@ -0,0 +1,82 @@
+---
+source_pack: flaviocopes
+source_kind: course
+compaction_strategy: structured
+---
+
+# Web Authentication Course
+
+Web Authentication reference card. 14 topic areas, 15 worked code samples in sql, json, ts, typescript, html. Routing card only — full text lives in the local corpus.
+
+## Triggers
+
+- Web Authentication reference
+- how do I do X in Web Authentication
+- Web Authentication syntax
+- look up Web Authentication
+- sql web authentication example
+- json web authentication example
+- security: web authentication
+
+## Covers
+
+- Authentication foundations
+- Separate identity, authentication, and authorization
+- Threat-model the login system
+- Choose server-side sessions
+- Set a secure session cookie
+- Check your understanding: authentication foundations
+- Password authentication
+- Design safe signup
+- Hash passwords with a trusted library
+- Implement login with generic errors
+- Defend against automated login
+- Check your understanding: password authentication
+- Sessions and authorization
+- Authenticate every request
+
+19 further sections are indexed in the local corpus.
+
+## Concept index
+
+Identifiers that appear in this title's code samples. Use them as search
+keys against the local corpus, and as a check on whether this is the right
+reference before reading further.
+
+`WHERE` · `owner_id` · `UPDATE` · `POST` · `passwordHash` · `userId` · `SELECT` · `expires_at` · `ownerId` · `DELETE` · `last_seen_at` · `authenticated_at` · `revoked_at` · `fastmail.com` · `consumed_at` · `crypto.randomBytes` · `CREATE` · `UNIQUE` · `INDEX` · `users_email_unique` · `normalized_email` · `API` · `passwordHasher` · `flaviocopes.com` · `sessionId` · `authenticatedAt` · `csrfToken` · `created_at` · `book.ownerId` · `returnTo` · `external_identities` · `token_hash` · `user_id` · `target_email` · `history.replaceState` · `Math.random` · `document.cookie` · `FlavioCopes.com` · `unknown_account` · `req.user`
+
+## When to use
+
+- A Web Authentication question needs a worked, checked answer rather than recall.
+- You are about to guess at Web Authentication syntax, a flag, or an API shape.
+- The task touches an area listed under Covers above.
+
+## When not to use
+
+- The question is about this project's own code — read the code instead.
+- A sibling card below is a closer fit; prefer the narrower one.
+
+## Related
+
+- `security-fundamentals` — Security Fundamentals Course
+- `web-application-security` — Web Application Security Course
+- `api-security` — API Security Course
+- `linux-server-security` — Linux Server Security Course
+- `software-supply-chain-security` — Software Supply Chain Security Course
+- `cryptography-for-developers` — Cryptography for Developers Course
+
+## Full text
+
+Source: https://downloads.flaviocopes.com/course-downloads/web-authentication.epub
+
+The full text is not bundled. Fetch it once into the local corpus:
+
+```bash
+omnius library fetch flaviocopes --title web-authentication
+```
+
+Then search it:
+
+```bash
+omnius library search flaviocopes "<query>" --title web-authentication
+```