quiver-cli 0.1.0

package/template/.agents/skills/repo/repo-ci/SKILL.md

@@ -0,0 +1,265 @@
+---
+name: repo-ci
+description: Create a GitHub repo (if needed) and set up Dependabot, CI workflow, auto-merge workflow, and GitHub branch ruleset.
+disable-model-invocation: true
+allowed-tools: Read, Write, Bash(gh *), Bash(cat *)
+---
+
+# /repo-ci — CI/CD and Dependabot Setup
+
+Create a GitHub repo (if needed) and set up GitHub CI, Dependabot, auto-merge, and branch protection.
+
+## Step 1: Create GitHub Repo (if needed)
+
+1. Run `gh repo view --json nameWithOwner 2>/dev/null` to check if a remote repo already exists.
+2. If no remote repo exists, create one:
+   - Derive the repo name from the current directory name.
+   - Run `gh repo create <name> --private --source=. --push` to create a private repo and push the current code.
+3. If the repo already exists, skip this step.
+
+## Step 2: Gather Context
+
+1. Read `package.json` to confirm package manager and dependencies.
+2. Run `gh repo view --json nameWithOwner` to get the repo identifier.
+3. The GitHub reviewer username for Dependabot PRs is always `Snickers03`.
+
+## Step 3: Create `.github/dependabot.yml`
+
+Replace `{{REVIEWER}}` with the username from step 1.
+
+```yaml
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "Europe/Berlin"
+
+    open-pull-requests-limit: 10
+    target-branch: "main"
+    versioning-strategy: "increase"
+
+    reviewers:
+      - "{{REVIEWER}}"
+
+    labels:
+      - "dependencies"
+
+    commit-message:
+      prefix: "deps"
+
+    groups:
+      devtools:
+        dependency-type: "development"
+        patterns:
+          - "eslint*"
+          - "@eslint/*"
+          - "prettier*"
+          - "@ianvs/*"
+          - "typescript"
+          - "typescript-eslint"
+          - "tsx"
+          - "globals"
+        update-types: ["patch", "minor"]
+
+      majors:
+        patterns:
+          - "*"
+        update-types: ["major"]
+
+    ignore:
+      - dependency-name: "node"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
+```
+
+## Step 4: Create `.github/workflows/ci.yml`
+
+Replace `{{NODE_VERSION}}` with the Node.js version from `package.json` engines or default `20`.
+
+```yaml
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: corepack enable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: { { NODE_VERSION } }
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm lint
+      - run: pnpm format --check
+
+  build:
+    name: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: corepack enable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: { { NODE_VERSION } }
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+```
+
+## Step 5: Create `.github/workflows/dependabot-auto-merge.yml`
+
+```yaml
+name: Dependabot Auto-Merge
+
+on:
+  pull_request:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Fetch Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Auto-merge patch and minor updates
+        if: steps.metadata.outputs.update-type != 'version-update:semver-major'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+```
+
+## Step 6: Create GitHub Rulesets
+
+Replace `{{REPO}}` with the `nameWithOwner` value from Step 1. Create both rulesets.
+
+### 6a: `prevent-main-direct-push` ruleset (default branch)
+
+```bash
+gh api repos/{{REPO}}/rulesets --method POST --input - <<'EOF'
+{
+  "name": "prevent-main-direct-push",
+  "target": "branch",
+  "enforcement": "active",
+  "bypass_actors": [
+    {
+      "actor_id": 5,
+      "actor_type": "RepositoryRole",
+      "bypass_mode": "always"
+    }
+  ],
+  "conditions": {
+    "ref_name": {
+      "include": ["~DEFAULT_BRANCH"],
+      "exclude": []
+    }
+  },
+  "rules": [
+    {
+      "type": "deletion"
+    },
+    {
+      "type": "required_linear_history"
+    },
+    {
+      "type": "pull_request",
+      "parameters": {
+        "required_approving_review_count": 1,
+        "dismiss_stale_reviews_on_push": false,
+        "require_code_owner_review": false,
+        "require_last_push_approval": false,
+        "required_review_thread_resolution": false,
+        "allowed_merge_methods": ["squash", "rebase"]
+      }
+    },
+    {
+      "type": "non_fast_forward"
+    }
+  ]
+}
+EOF
+```
+
+### 6b: `main-protection` ruleset (required status checks)
+
+```bash
+gh api repos/{{REPO}}/rulesets --method POST --input - <<'EOF'
+{
+  "name": "main-protection",
+  "target": "branch",
+  "enforcement": "active",
+  "bypass_actors": [
+    {
+      "actor_id": 5,
+      "actor_type": "RepositoryRole",
+      "bypass_mode": "always"
+    }
+  ],
+  "conditions": {
+    "ref_name": {
+      "include": ["refs/heads/main"],
+      "exclude": []
+    }
+  },
+  "rules": [
+    {
+      "type": "required_status_checks",
+      "parameters": {
+        "strict_required_status_checks_policy": true,
+        "required_status_checks": [
+          { "context": "lint" },
+          { "context": "build" }
+        ]
+      }
+    }
+  ]
+}
+EOF
+```
+
+## Step 7: Enable Repo Settings
+
+```bash
+gh repo edit --delete-branch-on-merge
+gh api repos/{{REPO}}/actions/permissions/workflow --method PUT --input - <<'EOF'
+{
+  "default_workflow_permissions": "read",
+  "can_approve_pull_request_reviews": true
+}
+EOF
+```
+
+## Step 8: Confirm
+
+Tell the user what was created:
+
+- `.github/dependabot.yml`
+- `.github/workflows/ci.yml`
+- `.github/workflows/dependabot-auto-merge.yml`
+- Ruleset `prevent-main-direct-push` on default branch (deletion, linear history, PR required, no force push)
+- Ruleset `main-protection` on main requiring `lint` and `build` checks
+- Auto-delete branches on merge enabled
+- GitHub Actions permitted to create and approve pull requests

package/template/.agents/skills/repo/repo-init-next-js/SKILL.md

@@ -0,0 +1,129 @@
+---
+name: repo-init-next-js
+description: >
+  Bootstrap a Next.js project with Prisma (PostgreSQL), tRPC, React Query,
+  optional Clerk auth, next-themes, sonner, shadcn/ui config, and a clean folder
+  structure. Use when the user says "set up this project", "scaffold with
+  Prisma and tRPC", "/repo-init-next-js", "add Prisma and tRPC to this Next.js
+  app", or wants to initialize a fresh Next.js project with the full stack.
+---
+
+# Next.js Project Setup
+
+Bootstrap a Next.js App Router project with the full stack: Prisma + PostgreSQL, tRPC + React Query, optional Clerk auth, next-themes, sonner toasts, Tailwind v4 with shadcn/ui theme, and Prettier.
+
+## Prerequisites
+
+- A Next.js project already created (`pnpm create next-app`)
+- pnpm as package manager
+
+## Workflow
+
+### 0. Ask the User
+
+Before creating any files, ask the user for:
+
+1. **Project name** — used in `README.md` title and `package.json` name.
+2. **Project description** — used in `CLAUDE.md`, `README.md`, and `package.json`.
+3. **Node.js version** — default `24`. Used in `.nvmrc`.
+4. **PostgreSQL version** — default `16`. Used in `docker-compose.yml`.
+5. **With Clerk auth?** — default: yes. If no, skip all Clerk-related files and packages.
+6. If the user chose Clerk, also ask for:
+   - **Clerk Publishable Key** (`NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY`) — from https://dashboard.clerk.com
+   - **Clerk Secret Key** (`CLERK_SECRET_KEY`) — from https://dashboard.clerk.com
+
+### 1. Create folder structure
+
+Create these directories (skip any that already exist):
+
+```
+src/server/routers/
+src/lib/trpc/
+src/providers/
+src/components/ui/
+src/app/api/trpc/[trpc]/
+prisma/
+```
+
+If using Clerk, also create:
+
+```
+src/app/main/
+src/app/sign-in/[[...sign-in]]/
+src/app/sign-up/[[...sign-up]]/
+```
+
+### 2. Clean public folder
+
+Remove Next.js boilerplate assets:
+
+```bash
+rm -rf public/*.svg public/*.ico
+```
+
+### 3. Create all template files
+
+Read [references/file-contents.md](references/file-contents.md) and create every file listed there at its specified path. Replace `{{PROJECT_NAME}}`, `{{DESCRIPTION}}`, `{{NODE_VERSION}}`, and `{{PG_VERSION}}` with the user's answers from Step 0.
+
+**Important — existing files:** Before overwriting any file that already exists from `create-next-app` (e.g. `layout.tsx`, `page.tsx`, `next.config.ts`, `tsconfig.json`, `README.md`), you **must read it first** using the Read tool. The Write tool will reject writes to unread existing files, and if one write fails in a parallel batch, all sibling writes in that batch fail too. To avoid this, split file creation into two batches:
+
+1. First batch: all **new** files (files that don't exist yet).
+2. Second batch: read all existing files, then overwrite them.
+
+Replace existing Next.js defaults for `layout.tsx`, `next.config.ts`, and `tsconfig.json`. Note: `src/proxy.ts` is the Next.js 16 equivalent of `middleware.ts` (only created with Clerk).
+
+**If the user chose no Clerk**, skip these files and use the alternative templates marked with "(without Clerk)" in file-contents.md:
+
+- `src/providers/clerk-provider.tsx` — skip entirely
+- `src/proxy.ts` — skip entirely
+- `src/app/main/` — skip entirely
+- `src/app/sign-in/` and `src/app/sign-up/` — skip entirely
+- `src/providers/index.tsx` — use the "without Clerk" variant
+- `src/server/trpc.ts` — use the "without Clerk" variant
+- `.env.example` — use the "without Clerk" variant
+- `src/app/page.tsx` — use the "without Clerk" variant
+
+### 4. Install dependencies
+
+Run the setup script:
+
+```bash
+bash <skill-path>/scripts/setup.sh
+```
+
+If the user chose **no Clerk**, pass the `--no-clerk` flag:
+
+```bash
+bash <skill-path>/scripts/setup.sh --no-clerk
+```
+
+### 5. Initialize shadcn/ui
+
+```bash
+npx shadcn@latest init --defaults
+npx shadcn@latest add sonner button card avatar
+```
+
+This generates `globals.css`, `components.json`, `lib/utils.ts`, and `postcss.config.mjs` automatically.
+
+### 6. Set up environment
+
+Copy `.env.example` to `.env`. If using Clerk, replace the empty `NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY` and `CLERK_SECRET_KEY` values with the credentials the user provided in Step 0:
+
+```bash
+cp .env.example .env
+```
+
+Then update the Clerk key lines in `.env` with the user's provided values.
+
+### 7. Push database schema
+
+```bash
+docker compose up -d
+npx prisma generate
+npx prisma db push
+```
+
+### 8. Verify
+
+Run `pnpm dev` and confirm the app starts without errors.