packwise-skills 1.0.0

package/sub-skills/plugins/vscode-extension.md

@@ -0,0 +1,204 @@
+# VS Code Extension Build Sub-Skill
+
+Develop and publish Visual Studio Code extensions.
+
+**Current version**: VS Code 1.96+ / @vscode/vsce 2.x (2025-2026)
+
+## When to Use
+
+- Editor enhancements (themes, snippets, keybindings)
+- Language support (syntax highlighting, IntelliSense, debugging)
+- Developer tools (linters, formatters, test runners)
+- AI coding assistants
+- Workflow automation
+
+## Prerequisites
+
+```bash
+# Node.js 20+
+# Install VS Code Extension Manager
+npm install -g @vscode/vsce
+
+# Install Yeoman generator for scaffolding
+npm install -g yo generator-code
+```
+
+## Project Setup
+
+```bash
+# Generate extension scaffold
+yo code
+# Select: New Extension (TypeScript)
+# Name: my-extension
+# Description: My awesome extension
+# Package manager: npm
+
+# Project structure:
+my-extension/
+├── src/
+│   └── extension.ts        ← Main entry point
+├── package.json            ← Extension manifest
+├── tsconfig.json           ← TypeScript config
+├── .vscodeignore           ← Files to exclude from .vsix
+└── README.md
+```
+
+## package.json (Extension Manifest)
+
+```json
+{
+  "name": "my-extension",
+  "displayName": "My Extension",
+  "description": "My awesome VS Code extension",
+  "version": "1.0.0",
+  "engines": { "vscode": "^1.96.0" },
+  "categories": ["Other"],
+  "activationEvents": [],
+  "main": "./out/extension.js",
+  "contributes": {
+    "commands": [
+      {
+        "command": "myExtension.helloWorld",
+        "title": "Hello World"
+      }
+    ],
+    "keybindings": [
+      {
+        "command": "myExtension.helloWorld",
+        "key": "ctrl+shift+h",
+        "mac": "cmd+shift+h"
+      }
+    ],
+    "configuration": {
+      "title": "My Extension",
+      "properties": {
+        "myExtension.enableFeature": {
+          "type": "boolean",
+          "default": true,
+          "description": "Enable the awesome feature"
+        }
+      }
+    }
+  },
+  "scripts": {
+    "compile": "tsc -p ./",
+    "watch": "tsc -watch -p ./",
+    "package": "vsce package",
+    "publish": "vsce publish"
+  },
+  "devDependencies": {
+    "@types/vscode": "^1.96.0",
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0"
+  }
+}
+```
+
+## Build & Test
+
+```bash
+# Compile TypeScript
+npm run compile
+
+# Run in Extension Development Host (VS Code launches with your extension)
+# Press F5 in VS Code, or:
+code --extensionDevelopmentPath=.
+
+# Run tests
+npm test
+
+# Lint
+npm run lint
+```
+
+## Package (.vsix)
+
+```bash
+# Package as .vsix file
+vsce package
+# Output: my-extension-1.0.0.vsix
+
+# Install locally for testing
+code --install-extension my-extension-1.0.0.vsix
+
+# Package with specific version
+vsce package --pre-release  # Pre-release version
+```
+
+## Publish to Marketplace
+
+```bash
+# 1. Create Personal Access Token (PAT)
+#    dev.azure.com → User Settings → Personal Access Tokens
+#    Scope: Marketplace → Manage
+
+# 2. Create publisher (one-time)
+#    marketplace.visualstudio.com → Create Publisher
+
+# 3. Login
+vsce login YOUR_PUBLISHER_NAME
+# Enter PAT when prompted
+
+# 4. Publish
+vsce publish                  # Publish current version
+vsce publish minor            # Bump minor version + publish
+vsce publish patch            # Bump patch version + publish
+vsce publish 2.0.0            # Set specific version + publish
+
+# 5. Pre-release
+vsce publish --pre-release
+```
+
+## Testing
+
+```typescript
+// src/test/suite/extension.test.ts
+import * as assert from 'assert';
+import * as vscode from 'vscode';
+
+suite('Extension Test Suite', () => {
+    test('Command should be registered', async () => {
+        const commands = await vscode.commands.getCommands(true);
+        assert.ok(commands.includes('myExtension.helloWorld'));
+    });
+
+    test('Configuration should have default value', () => {
+        const config = vscode.workspace.getConfiguration('myExtension');
+        assert.strictEqual(config.get('enableFeature'), true);
+    });
+});
+```
+
+```bash
+# Run tests
+npm test
+# Or with coverage
+npm run test:coverage
+```
+
+## Extension Types
+
+| Type | Use Case | Key APIs |
+|------|----------|---------|
+| Commands | Custom actions | `vscode.commands.registerCommand` |
+| Webview | Custom UI panels | `vscode.window.createWebviewPanel` |
+| Language Server | Language support | `vscode-languageclient` / `vscode-languageserver` |
+| Tree View | Custom sidebars | `TreeDataProvider` |
+| Debug Adapter | Custom debuggers | `DebugAdapterDescriptorFactory` |
+| Notebook | Jupyter-like notebooks | `NotebookSerializer` |
+| Chat Participant | AI chat integration | `vscode.chat.createChatParticipant` |
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| Build failure | Confirm `tsconfig.json` `outDir` matches `main` field in package.json |
+| Publish rejected | Ensure all required fields: `name`, `displayName`, `description`, `version`, `engines` |
+| Size limit | .vsix max 100MB; use `.vscodeignore` to exclude node_modules source |
+| Icon requirement | At least 128x128 PNG; set in `package.json` → `icon` |
+| Extension not activating | Check `activationEvents`; use `"*"` for testing (slow), be specific in production |
+| Webview not showing | Check CSP headers; set `enableScripts: true` |
+| Tests failing in CI | Use `@vscode/test-electron` for integration tests |
+| API version mismatch | Check `engines.vscode` in package.json matches your target version |
+| `@types/vscode` version | Should match `engines.vscode` version |
+| Extension size too large | Use esbuild/webpack bundler; exclude devDependencies |

package/sub-skills/security/security-tools.md

@@ -0,0 +1,174 @@
+# Security Tools Build Sub-Skill
+
+Build and package security tools: penetration testing tools, vulnerability scanners, security monitoring, and CLI utilities.
+
+## When to Use
+
+- Penetration testing / offensive security tools
+- Vulnerability scanners (SAST/DAST)
+- Security monitoring platforms (SIEM)
+- Encryption / cryptographic tools
+- Compliance checking tools
+- CTF (Capture The Flag) tools
+
+## Tech Stack Overview
+
+| Language | Strengths | Package Method | Best For |
+|----------|-----------|---------------|----------|
+| Python | Rapid prototyping, rich security libraries | PyInstaller / Docker / pipx | Script tools, scanners, automation |
+| Go | Static binary, cross-compile, high concurrency | `go build` | Network tools, high-perf scanners |
+| Rust | Memory safety, performance | `cargo build --release` | Low-level tools, cryptographic operations |
+| C | Maximum control, minimal dependencies | Native compilation | Kernel modules, exploit development |
+
+## Python Security Tools
+
+### PyInstaller (Standalone Binary)
+
+```bash
+# Install
+pip install pyinstaller
+
+# Single-file executable
+pyinstaller --onefile --name scanner scanner.py
+
+# With hidden imports (common for security libs)
+pyinstaller --onefile \
+  --hidden-import=cryptography \
+  --hidden-import=paramiko \
+  --hidden-import=scapy \
+  --name scanner scanner.py
+
+# Console app (no GUI)
+pyinstaller --onefile --console --name vuln-scanner scanner.py
+
+# Output: dist/scanner (Linux/macOS) or dist/scanner.exe (Windows)
+```
+
+### pipx (Isolated CLI Installation)
+
+```bash
+# Install pipx
+pip install pipx
+pipx ensurepath
+
+# Install security tool in isolated environment
+pipx install bandit            # Python SAST linter
+pipx install safety            # Dependency vulnerability scanner
+pipx install semgrep           # Multi-language SAST
+pipx install trivy             # Container/filesystem scanner
+```
+
+### Docker (Reproducible Environment)
+
+```dockerfile
+FROM python:3.13-slim
+
+# Install system dependencies (common for security tools)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    nmap \
+    masscan \
+    net-tools \
+    iputils-ping \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+# Run as non-root (important for security tools too)
+RUN useradd -m scanner
+USER scanner
+
+ENTRYPOINT ["python", "scanner.py"]
+```
+
+## Go Security Tools
+
+```bash
+# Single binary, no dependencies
+CGO_ENABLED=0 go build -ldflags="-s -w" -o scanner .
+
+# Cross-compile
+GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o scanner-linux .
+GOOS=windows GOARCH=amd64 CGO_ENABLED=0 go build -o scanner.exe .
+GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build -o scanner-mac .
+
+# With version embedding
+go build -ldflags="-s -w -X main.version=$(git describe --tags)" -o scanner .
+```
+
+## Rust Security Tools
+
+```bash
+# Release build (optimized)
+cargo build --release
+# Output: target/release/scanner
+
+# Cross-compile with cross
+cargo install cross
+cross build --release --target x86_64-unknown-linux-musl
+```
+
+## C Security Tools
+
+```bash
+# Static binary (portable)
+gcc -static -O2 -o scanner scanner.c
+
+# With hardening flags
+gcc -O2 -fstack-protector-all -D_FORTIFY_SOURCE=2 \
+    -Wformat -Wformat-security -o scanner scanner.c
+```
+
+## Signing & Distribution
+
+### Signing Binaries (Trust)
+
+```bash
+# Windows: Sign with code signing certificate
+signtool sign /f cert.pfx /p password /tr http://timestamp.digicert.com scanner.exe
+
+# macOS: Sign and notarize
+codesign --force --sign "Developer ID Application: Your Name" scanner
+xcrun notarytool submit scanner.zip --apple-id your@email.com --password app-specific-pw
+
+# Linux: GPG sign
+gpg --detach-sign --armor scanner
+```
+
+### Distribution Channels
+
+| Channel | Method | Best For |
+|---------|--------|---------|
+| GitHub Releases | `gh release create v1.0 scanner-linux scanner.exe` | Open source tools |
+| PyPI / TestPyPI | `twine upload dist/*` | Python libraries/tools |
+| Docker Hub | `docker build -t org/scanner . && docker push org/scanner` | Containerized tools |
+| Homebrew | Create tap formula | macOS CLI tools |
+| AUR | Submit PKGBUILD | Arch Linux users |
+| Cargo crates.io | `cargo publish` | Rust libraries/tools |
+
+## Compliance & Ethics
+
+| Requirement | Implementation |
+|-------------|---------------|
+| Legal authorization | Add usage disclaimer; require explicit authorization flag |
+| Logging | Log all operations with timestamps to file |
+| Data protection | Encrypt scan results; don't hardcode credentials |
+| Distribution control | Consider private distribution for offensive tools |
+| Rate limiting | Implement request throttling to avoid DoS |
+| Disclosure | Follow responsible disclosure for found vulnerabilities |
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| PyInstaller missing modules | Use `--hidden-import` for dynamically loaded security libraries |
+| Static binary too large | Use `upx --best` to compress (Go/Rust binaries) |
+| Permission denied (network tools) | Use Linux capabilities: `setcap cap_net_raw+ep scanner` |
+| Import errors in packaged binary | Test in a clean VM/container; PyInstaller may miss C extensions |
+| Anti-virus false positive | Sign binaries; submit to AV vendors for whitelisting |
+| Cross-compile fails (CGO) | Use Docker or `cross` tool; set `CGO_ENABLED=0` when possible |
+| System tool dependency | Package with Docker; document required system tools |
+| Hardcoded credentials in source | Use environment variables; add to `.gitignore` |

package/sub-skills/web/monorepo.md

@@ -0,0 +1,274 @@
+# Monorepo Build Sub-Skill
+
+Manage and build multi-package projects using monorepo tools.
+
+**Current version**: Turborepo 2.x / pnpm 9.x / Nx 20.x (2025-2026)
+
+## When to Use
+
+- Multiple related packages/apps in one repository
+- Shared code (UI components, utilities, types) across projects
+- Need coordinated builds with dependency-aware caching
+- Want atomic commits across packages
+
+## Tool Comparison
+
+| Feature | Turborepo 2.x | Nx 20.x | pnpm Workspaces |
+|---------|--------------|---------|-----------------|
+| Approach | Build orchestrator | Full dev platform | Package manager feature |
+| Caching | Local + Remote | Local + Remote (Nx Cloud) | Not built-in |
+| Language support | Any | JS/TS, Go, Java, .NET | JS/TS only |
+| Learning curve | Low | Medium | Lowest |
+| Task runner | Built-in (turbo.json) | Built-in (project.json) | Use with Turborepo/Nx |
+| Affected detection | Yes | Yes (more granular) | No |
+| Plugin ecosystem | Smaller | Large (generators, executors) | N/A |
+| Best for | JS/TS monorepos, simplicity | Large teams, polyglot monorepos | Package management only |
+
+## pnpm Workspaces (Foundation)
+
+Most JS/TS monorepos use pnpm as the package manager regardless of build tool.
+
+```bash
+# Install pnpm
+npm install -g pnpm@latest
+```
+
+```yaml
+# pnpm-workspace.yaml (project root)
+packages:
+  - "apps/*"
+  - "packages/*"
+```
+
+```
+my-monorepo/
+├── apps/
+│   ├── web/              # Frontend app
+│   ├── admin/            # Admin dashboard
+│   └── api/              # Backend API
+├── packages/
+│   ├── ui/               # Shared UI components
+│   ├── utils/            # Shared utilities
+│   ├── tsconfig/         # Shared TypeScript configs
+│   └── eslint-config/    # Shared ESLint configs
+├── pnpm-workspace.yaml
+├── pnpm-lock.yaml
+└── package.json
+```
+
+```json
+// Root package.json
+{
+  "name": "my-monorepo",
+  "private": true,
+  "scripts": {
+    "build": "turbo run build",
+    "dev": "turbo run dev",
+    "lint": "turbo run lint",
+    "test": "turbo run test"
+  },
+  "devDependencies": {
+    "turbo": "^2.3.0"
+  }
+}
+```
+
+```json
+// apps/web/package.json — use workspace: protocol for internal deps
+{
+  "name": "@myrepo/web",
+  "dependencies": {
+    "@myrepo/ui": "workspace:*",
+    "@myrepo/utils": "workspace:*"
+  }
+}
+```
+
+## Turborepo
+
+### Configuration
+
+```json
+// turbo.json
+{
+  "$schema": "https://turbo.build/schema.json",
+  "tasks": {
+    "build": {
+      "dependsOn": ["^build"],
+      "outputs": ["dist/**", ".next/**", "build/**"],
+      "cache": true
+    },
+    "dev": {
+      "cache": false,
+      "persistent": true
+    },
+    "lint": {
+      "dependsOn": ["^build"]
+    },
+    "test": {
+      "dependsOn": ["build"],
+      "outputs": ["coverage/**"]
+    },
+    "clean": {
+      "cache": false
+    }
+  }
+}
+```
+
+### Build Commands
+
+```bash
+# Build all packages in dependency order
+turbo run build
+
+# Build only packages affected by changes
+turbo run build --filter=...[HEAD^1]
+
+# Build specific package and its dependencies
+turbo run build --filter=@myrepo/web...
+
+# Build with remote caching (Vercel)
+turbo run build --team=myteam --token=$TURBO_TOKEN
+
+# Dry run (show execution plan without building)
+turbo run build --dry-run
+
+# Run multiple tasks
+turbo run build lint test
+
+# Clear cache
+turbo run clean
+turbo prune  # Remove unused cache entries
+```
+
+### Remote Caching
+
+```bash
+# Link to Vercel remote cache
+npx turbo login
+npx turbo link
+
+# Or self-hosted: set TURBO_API and TURBO_TOKEN
+export TURBO_API=https://my-cache-server.com
+export TURBO_TOKEN=my-token
+```
+
+## Nx
+
+### Setup
+
+```bash
+# Add Nx to existing monorepo
+npx nx init
+
+# Or create new Nx workspace
+npx create-nx-workspace my-monorepo --preset=ts
+```
+
+### Configuration
+
+```json
+// nx.json
+{
+  "tasksRunnerOptions": {
+    "default": {
+      "runner": "nx/tasks-runners/default",
+      "options": {
+        "cacheableOperations": ["build", "test", "lint"]
+      }
+    }
+  },
+  "targetDefaults": {
+    "build": {
+      "dependsOn": ["^build"],
+      "outputs": ["{projectRoot}/dist"]
+    },
+    "test": {
+      "dependsOn": ["build"]
+    }
+  }
+}
+```
+
+```json
+// apps/web/project.json
+{
+  "name": "web",
+  "sourceRoot": "apps/web/src",
+  "targets": {
+    "build": {
+      "executor": "@nx/vite:build",
+      "outputs": ["{options.outputPath}"],
+      "options": {
+        "outputPath": "dist/apps/web"
+      }
+    },
+    "dev": {
+      "executor": "@nx/vite:dev-server"
+    },
+    "test": {
+      "executor": "@nx/vite:test"
+    }
+  }
+}
+```
+
+### Build Commands
+
+```bash
+# Build all
+npx nx run-many -t build
+
+# Build affected only (compares with main branch)
+npx nx affected -t build
+
+# Build specific project
+npx nx build web
+
+# Graph visualization
+npx nx graph
+
+# Remote cache (Nx Cloud)
+npx nx connect-to-nx-cloud
+```
+
+## CI/CD — GitHub Actions (Turborepo)
+
+```yaml
+name: Monorepo Build
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2  # Needed for affected detection
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - run: npm install -g pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm turbo run build lint test
+        env:
+          TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+          TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
+```
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| `workspace:*` dependency not resolved | Ensure `pnpm-workspace.yaml` includes the package's directory |
+| Circular dependency between packages | Restructure; extract shared code to a third package |
+| Cache hit but stale output | `turbo run build --force` to bypass cache |
+| `turbo` not found | Add to root `devDependencies` or install globally |
+| Nx graph shows wrong dependencies | Check `import` paths; ensure `tsconfig.json` paths are correct |
+| Phantom dependencies | pnpm prevents this by default; don't use `shamefully-hoist` |
+| Type errors across packages | Use `workspace:*` + TypeScript project references |
+| `pnpm install` fails with lockfile conflicts | Use `--frozen-lockfile` in CI; regenerate with `pnpm install --lockfile-only` |