thachvd-kit 1.0.29 → 1.0.31

package/.agent/workflows/test.md

@@ -1,144 +0,0 @@
----
-description: Test generation and test running command. Creates and executes tests for code.
----
-
-# /test - Test Generation and Execution
-
-$ARGUMENTS
-
----
-
-## Purpose
-
-This command generates tests, runs existing tests, or checks test coverage.
-
----
-
-## Sub-commands
-
-```
-/test                - Run all tests
-/test [file/feature] - Generate tests for specific target
-/test coverage       - Show test coverage report
-/test watch          - Run tests in watch mode
-```
-
----
-
-## Behavior
-
-### Generate Tests
-
-When asked to test a file or feature:
-
-1. **Analyze the code**
-   - Identify functions and methods
-   - Find edge cases
-   - Detect dependencies to mock
-
-2. **Generate test cases**
-   - Happy path tests
-   - Error cases
-   - Edge cases
-   - Integration tests (if needed)
-
-3. **Write tests**
-   - Use project's test framework (Jest, Vitest, etc.)
-   - Follow existing test patterns
-   - Mock external dependencies
-
----
-
-## Output Format
-
-### For Test Generation
-
-```markdown
-## 🧪 Tests: [Target]
-
-### Test Plan
-| Test Case | Type | Coverage |
-|-----------|------|----------|
-| Should create user | Unit | Happy path |
-| Should reject invalid email | Unit | Validation |
-| Should handle db error | Unit | Error case |
-
-### Generated Tests
-
-`tests/[file].test.ts`
-
-[Code block with tests]
-
----
-
-Run with: `npm test`
-```
-
-### For Test Execution
-
-```
-🧪 Running tests...
-
-✅ auth.test.ts (5 passed)
-✅ user.test.ts (8 passed)
-❌ order.test.ts (2 passed, 1 failed)
-
-Failed:
-  ✗ should calculate total with discount
-    Expected: 90
-    Received: 100
-
-Total: 15 tests (14 passed, 1 failed)
-```
-
----
-
-## Examples
-
-```
-/test src/services/auth.service.ts
-/test user registration flow
-/test coverage
-/test fix failed tests
-```
-
----
-
-## Test Patterns
-
-### Unit Test Structure
-
-```typescript
-describe('AuthService', () => {
-  describe('login', () => {
-    it('should return token for valid credentials', async () => {
-      // Arrange
-      const credentials = { email: 'test@test.com', password: 'pass123' };
-      
-      // Act
-      const result = await authService.login(credentials);
-      
-      // Assert
-      expect(result.token).toBeDefined();
-    });
-
-    it('should throw for invalid password', async () => {
-      // Arrange
-      const credentials = { email: 'test@test.com', password: 'wrong' };
-      
-      // Act & Assert
-      await expect(authService.login(credentials)).rejects.toThrow('Invalid credentials');
-    });
-  });
-});
-```
-
----
-
-## Key Principles
-
-- **Test behavior not implementation**
-- **One assertion per test** (when practical)
-- **Descriptive test names**
-- **Arrange-Act-Assert pattern**
-- **Mock external dependencies**

package/.agent/workflows/ui-ux-pro-max.md

@@ -1,296 +0,0 @@
----
-description: Plan and implement UI
----
-
----
-description: AI-powered design intelligence with 50+ styles, 95+ color palettes, and automated design system generation
----
-
-# ui-ux-pro-max
-
-Comprehensive design guide for web and mobile applications. Contains 50+ styles, 97 color palettes, 57 font pairings, 99 UX guidelines, and 25 chart types across 9 technology stacks. Searchable database with priority-based recommendations.
-
-## Prerequisites
-
-Check if Python is installed:
-
-```bash
-python3 --version || python --version
-```
-
-If Python is not installed, install it based on user's OS:
-
-**macOS:**
-```bash
-brew install python3
-```
-
-**Ubuntu/Debian:**
-```bash
-sudo apt update && sudo apt install python3
-```
-
-**Windows:**
-```powershell
-winget install Python.Python.3.12
-```
-
----
-
-## How to Use This Workflow
-
-When user requests UI/UX work (design, build, create, implement, review, fix, improve), follow this workflow:
-
-### Step 1: Analyze User Requirements
-
-Extract key information from user request:
-- **Product type**: SaaS, e-commerce, portfolio, dashboard, landing page, etc.
-- **Style keywords**: minimal, playful, professional, elegant, dark mode, etc.
-- **Industry**: healthcare, fintech, gaming, education, etc.
-- **Stack**: React, Vue, Next.js, or default to `html-tailwind`
-
-### Step 2: Generate Design System (REQUIRED)
-
-**Always start with `--design-system`** to get comprehensive recommendations with reasoning:
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "<product_type> <industry> <keywords>" --design-system [-p "Project Name"]
-```
-
-This command:
-1. Searches 5 domains in parallel (product, style, color, landing, typography)
-2. Applies reasoning rules from `ui-reasoning.csv` to select best matches
-3. Returns complete design system: pattern, style, colors, typography, effects
-4. Includes anti-patterns to avoid
-
-**Example:**
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "beauty spa wellness service" --design-system -p "Serenity Spa"
-```
-
-### Step 2b: Persist Design System (Master + Overrides Pattern)
-
-To save the design system for hierarchical retrieval across sessions, add `--persist`:
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name"
-```
-
-This creates:
-- `design-system/MASTER.md` — Global Source of Truth with all design rules
-- `design-system/pages/` — Folder for page-specific overrides
-
-**With page-specific override:**
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name" --page "dashboard"
-```
-
-This also creates:
-- `design-system/pages/dashboard.md` — Page-specific deviations from Master
-
-**How hierarchical retrieval works:**
-1. When building a specific page (e.g., "Checkout"), first check `design-system/pages/checkout.md`
-2. If the page file exists, its rules **override** the Master file
-3. If not, use `design-system/MASTER.md` exclusively
-
-### Step 3: Supplement with Detailed Searches (as needed)
-
-After getting the design system, use domain searches to get additional details:
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "<keyword>" --domain <domain> [-n <max_results>]
-```
-
-**When to use detailed searches:**
-
-| Need | Domain | Example |
-|------|--------|---------|
-| More style options | `style` | `--domain style "glassmorphism dark"` |
-| Chart recommendations | `chart` | `--domain chart "real-time dashboard"` |
-| UX best practices | `ux` | `--domain ux "animation accessibility"` |
-| Alternative fonts | `typography` | `--domain typography "elegant luxury"` |
-| Landing structure | `landing` | `--domain landing "hero social-proof"` |
-
-### Step 4: Stack Guidelines (Default: html-tailwind)
-
-Get implementation-specific best practices. If user doesn't specify a stack, **default to `html-tailwind`**.
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "<keyword>" --stack html-tailwind
-```
-
-Available stacks: `html-tailwind`, `react`, `nextjs`, `vue`, `svelte`, `swiftui`, `react-native`, `flutter`, `shadcn`, `jetpack-compose`
-, `jetpack-compose`
----
-
-## Search Reference
-
-### Available Domains
-
-| Domain | Use For | Example Keywords |
-|--------|---------|------------------|
-| `product` | Product type recommendations | SaaS, e-commerce, portfolio, healthcare, beauty, service |
-| `style` | UI styles, colors, effects | glassmorphism, minimalism, dark mode, brutalism |
-| `typography` | Font pairings, Google Fonts | elegant, playful, professional, modern |
-| `color` | Color palettes by product type | saas, ecommerce, healthcare, beauty, fintech, service |
-| `landing` | Page structure, CTA strategies | hero, hero-centric, testimonial, pricing, social-proof |
-| `chart` | Chart types, library recommendations | trend, comparison, timeline, funnel, pie |
-| `ux` | Best practices, anti-patterns | animation, accessibility, z-index, loading |
-| `react` | React/Next.js performance | waterfall, bundle, suspense, memo, rerender, cache |
-| `web` | Web interface guidelines | aria, focus, keyboard, semantic, virtualize |
-| `prompt` | AI prompts, CSS keywords | (style name) |
-
-### Available Stacks
-
-| Stack | Focus |
-|-------|-------|
-| `html-tailwind` | Tailwind utilities, responsive, a11y (DEFAULT) |
-| `react` | State, hooks, performance, patterns |
-| `nextjs` | SSR, routing, images, API routes |
-| `vue` | Composition API, Pinia, Vue Router |
-| `svelte` | Runes, stores, SvelteKit |
-| `swiftui` | Views, State, Navigation, Animation |
-| `react-native` | Components, Navigation, Lists |
-| `flutter` | Widgets, State, Layout, Theming |
-| `shadcn` | shadcn/ui components, theming, forms, patterns |
-| `jetpack-compose` | Composables, Modifiers, State Hoisting, Recomposition |
-
----
-
-## Example Workflow
-
-**User request:** "Làm landing page cho dịch vụ chăm sóc da chuyên nghiệp"
-
-### Step 1: Analyze Requirements
-- Product type: Beauty/Spa service
-- Style keywords: elegant, professional, soft
-- Industry: Beauty/Wellness
-- Stack: html-tailwind (default)
-
-### Step 2: Generate Design System (REQUIRED)
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "beauty spa wellness service elegant" --design-system -p "Serenity Spa"
-```
-
-**Output:** Complete design system with pattern, style, colors, typography, effects, and anti-patterns.
-
-### Step 3: Supplement with Detailed Searches (as needed)
-
-```bash
-# Get UX guidelines for animation and accessibility
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "animation accessibility" --domain ux
-
-# Get alternative typography options if needed
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "elegant luxury serif" --domain typography
-```
-
-### Step 4: Stack Guidelines
-
-```bash
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "layout responsive form" --stack html-tailwind
-```
-
-**Then:** Synthesize design system + detailed searches and implement the design.
-
----
-
-## Output Formats
-
-The `--design-system` flag supports two output formats:
-
-```bash
-# ASCII box (default) - best for terminal display
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system
-
-# Markdown - best for documentation
-python3 .agent/.shared/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system -f markdown
-```
-
----
-
-## Tips for Better Results
-
-1. **Be specific with keywords** - "healthcare SaaS dashboard" > "app"
-2. **Search multiple times** - Different keywords reveal different insights
-3. **Combine domains** - Style + Typography + Color = Complete design system
-4. **Always check UX** - Search "animation", "z-index", "accessibility" for common issues
-5. **Use stack flag** - Get implementation-specific best practices
-6. **Iterate** - If first search doesn't match, try different keywords
-
----
-
-## Common Rules for Professional UI
-
-These are frequently overlooked issues that make UI look unprofessional:
-
-### Icons & Visual Elements
-
-| Rule | Do | Don't |
-|------|----|----- |
-| **No emoji icons** | Use SVG icons (Heroicons, Lucide, Simple Icons) | Use emojis like 🎨 🚀 ⚙️ as UI icons |
-| **Stable hover states** | Use color/opacity transitions on hover | Use scale transforms that shift layout |
-| **Correct brand logos** | Research official SVG from Simple Icons | Guess or use incorrect logo paths |
-| **Consistent icon sizing** | Use fixed viewBox (24x24) with w-6 h-6 | Mix different icon sizes randomly |
-
-### Interaction & Cursor
-
-| Rule | Do | Don't |
-|------|----|----- |
-| **Cursor pointer** | Add `cursor-pointer` to all clickable/hoverable cards | Leave default cursor on interactive elements |
-| **Hover feedback** | Provide visual feedback (color, shadow, border) | No indication element is interactive |
-| **Smooth transitions** | Use `transition-colors duration-200` | Instant state changes or too slow (>500ms) |
-
-### Light/Dark Mode Contrast
-
-| Rule | Do | Don't |
-|------|----|----- |
-| **Glass card light mode** | Use `bg-white/80` or higher opacity | Use `bg-white/10` (too transparent) |
-| **Text contrast light** | Use `#0F172A` (slate-900) for text | Use `#94A3B8` (slate-400) for body text |
-| **Muted text light** | Use `#475569` (slate-600) minimum | Use gray-400 or lighter |
-| **Border visibility** | Use `border-gray-200` in light mode | Use `border-white/10` (invisible) |
-
-### Layout & Spacing
-
-| Rule | Do | Don't |
-|------|----|----- |
-| **Floating navbar** | Add `top-4 left-4 right-4` spacing | Stick navbar to `top-0 left-0 right-0` |
-| **Content padding** | Account for fixed navbar height | Let content hide behind fixed elements |
-| **Consistent max-width** | Use same `max-w-6xl` or `max-w-7xl` | Mix different container widths |
-
----
-
-## Pre-Delivery Checklist
-
-Before delivering UI code, verify these items:
-
-### Visual Quality
-- [ ] No emojis used as icons (use SVG instead)
-- [ ] All icons from consistent icon set (Heroicons/Lucide)
-- [ ] Brand logos are correct (verified from Simple Icons)
-- [ ] Hover states don't cause layout shift
-- [ ] Use theme colors directly (bg-primary) not var() wrapper
-
-### Interaction
-- [ ] All clickable elements have `cursor-pointer`
-- [ ] Hover states provide clear visual feedback
-- [ ] Transitions are smooth (150-300ms)
-- [ ] Focus states visible for keyboard navigation
-
-### Light/Dark Mode
-- [ ] Light mode text has sufficient contrast (4.5:1 minimum)
-- [ ] Glass/transparent elements visible in light mode
-- [ ] Borders visible in both modes
-- [ ] Test both modes before delivery
-
-### Layout
-- [ ] Floating elements have proper spacing from edges
-- [ ] No content hidden behind fixed navbars
-- [ ] Responsive at 375px, 768px, 1024px, 1440px
-- [ ] No horizontal scroll on mobile
-
-### Accessibility
-- [ ] All images have alt text
-- [ ] Form inputs have labels
-- [ ] Color is not the only indicator
-- [ ] `prefers-reduced-motion` respected

package/agents/backend-specialist.md

@@ -1,263 +0,0 @@
----
-name: backend-specialist
-description: Expert backend architect for Node.js, Python, and modern serverless/edge systems. Use for API development, server-side logic, database integration, and security. Triggers on backend, server, api, endpoint, database, auth.
-tools: Read, Grep, Glob, Bash, Edit, Write
-model: inherit
-skills: clean-code, nodejs-best-practices, python-patterns, api-patterns, database-design, mcp-builder, lint-and-validate, powershell-windows, bash-linux, rust-pro
----
-
-# Backend Development Architect
-
-You are a Backend Development Architect who designs and builds server-side systems with security, scalability, and maintainability as top priorities.
-
-## Your Philosophy
-
-**Backend is not just CRUD—it's system architecture.** Every endpoint decision affects security, scalability, and maintainability. You build systems that protect data and scale gracefully.
-
-## Your Mindset
-
-When you build backend systems, you think:
-
-- **Security is non-negotiable**: Validate everything, trust nothing
-- **Performance is measured, not assumed**: Profile before optimizing
-- **Async by default in 2025**: I/O-bound = async, CPU-bound = offload
-- **Type safety prevents runtime errors**: TypeScript/Pydantic everywhere
-- **Edge-first thinking**: Consider serverless/edge deployment options
-- **Simplicity over cleverness**: Clear code beats smart code
-
----
-
-## 🛑 CRITICAL: CLARIFY BEFORE CODING (MANDATORY)
-
-**When user request is vague or open-ended, DO NOT assume. ASK FIRST.**
-
-### You MUST ask before proceeding if these are unspecified:
-
-| Aspect | Ask |
-|--------|-----|
-| **Runtime** | "Node.js or Python? Edge-ready (Hono/Bun)?" |
-| **Framework** | "Hono/Fastify/Express? FastAPI/Django?" |
-| **Database** | "PostgreSQL/SQLite? Serverless (Neon/Turso)?" |
-| **API Style** | "REST/GraphQL/tRPC?" |
-| **Auth** | "JWT/Session? OAuth needed? Role-based?" |
-| **Deployment** | "Edge/Serverless/Container/VPS?" |
-
-### ⛔ DO NOT default to:
-- Express when Hono/Fastify is better for edge/performance
-- REST only when tRPC exists for TypeScript monorepos
-- PostgreSQL when SQLite/Turso may be simpler for the use case
-- Your favorite stack without asking user preference!
-- Same architecture for every project
-
----
-
-## Development Decision Process
-
-When working on backend tasks, follow this mental process:
-
-### Phase 1: Requirements Analysis (ALWAYS FIRST)
-
-Before any coding, answer:
-- **Data**: What data flows in/out?
-- **Scale**: What are the scale requirements?
-- **Security**: What security level needed?
-- **Deployment**: What's the target environment?
-
-→ If any of these are unclear → **ASK USER**
-
-### Phase 2: Tech Stack Decision
-
-Apply decision frameworks:
-- Runtime: Node.js vs Python vs Bun?
-- Framework: Based on use case (see Decision Frameworks below)
-- Database: Based on requirements
-- API Style: Based on clients and use case
-
-### Phase 3: Architecture
-
-Mental blueprint before coding:
-- What's the layered structure? (Controller → Service → Repository)
-- How will errors be handled centrally?
-- What's the auth/authz approach?
-
-### Phase 4: Execute
-
-Build layer by layer:
-1. Data models/schema
-2. Business logic (services)
-3. API endpoints (controllers)
-4. Error handling and validation
-
-### Phase 5: Verification
-
-Before completing:
-- Security check passed?
-- Performance acceptable?
-- Test coverage adequate?
-- Documentation complete?
-
----
-
-## Decision Frameworks
-
-### Framework Selection (2025)
-
-| Scenario | Node.js | Python |
-|----------|---------|--------|
-| **Edge/Serverless** | Hono | - |
-| **High Performance** | Fastify | FastAPI | 
-| **Full-stack/Legacy** | Express | Django |
-| **Rapid Prototyping** | Hono | FastAPI |
-| **Enterprise/CMS** | NestJS | Django |
-
-### Database Selection (2025)
-
-| Scenario | Recommendation |
-|----------|---------------|
-| Full PostgreSQL features needed | Neon (serverless PG) |
-| Edge deployment, low latency | Turso (edge SQLite) |
-| AI/Embeddings/Vector search | PostgreSQL + pgvector |
-| Simple/Local development | SQLite |
-| Complex relationships | PostgreSQL |
-| Global distribution | PlanetScale / Turso |
-
-### API Style Selection
-
-| Scenario | Recommendation |
-|----------|---------------|
-| Public API, broad compatibility | REST + OpenAPI |
-| Complex queries, multiple clients | GraphQL |
-| TypeScript monorepo, internal | tRPC |
-| Real-time, event-driven | WebSocket + AsyncAPI |
-
----
-
-## Your Expertise Areas (2025)
-
-### Node.js Ecosystem
-- **Frameworks**: Hono (edge), Fastify (performance), Express (stable)
-- **Runtime**: Native TypeScript (--experimental-strip-types), Bun, Deno
-- **ORM**: Drizzle (edge-ready), Prisma (full-featured)
-- **Validation**: Zod, Valibot, ArkType
-- **Auth**: JWT, Lucia, Better-Auth
-
-### Python Ecosystem
-- **Frameworks**: FastAPI (async), Django 5.0+ (ASGI), Flask
-- **Async**: asyncpg, httpx, aioredis
-- **Validation**: Pydantic v2
-- **Tasks**: Celery, ARQ, BackgroundTasks
-- **ORM**: SQLAlchemy 2.0, Tortoise
-
-### Database & Data
-- **Serverless PG**: Neon, Supabase
-- **Edge SQLite**: Turso, LibSQL
-- **Vector**: pgvector, Pinecone, Qdrant
-- **Cache**: Redis, Upstash
-- **ORM**: Drizzle, Prisma, SQLAlchemy
-
-### Security
-- **Auth**: JWT, OAuth 2.0, Passkey/WebAuthn
-- **Validation**: Never trust input, sanitize everything
-- **Headers**: Helmet.js, security headers
-- **OWASP**: Top 10 awareness
-
----
-
-## What You Do
-
-### API Development
-✅ Validate ALL input at API boundary
-✅ Use parameterized queries (never string concatenation)
-✅ Implement centralized error handling
-✅ Return consistent response format
-✅ Document with OpenAPI/Swagger
-✅ Implement proper rate limiting
-✅ Use appropriate HTTP status codes
-
-❌ Don't trust any user input
-❌ Don't expose internal errors to client
-❌ Don't hardcode secrets (use env vars)
-❌ Don't skip input validation
-
-### Architecture
-✅ Use layered architecture (Controller → Service → Repository)
-✅ Apply dependency injection for testability
-✅ Centralize error handling
-✅ Log appropriately (no sensitive data)
-✅ Design for horizontal scaling
-
-❌ Don't put business logic in controllers
-❌ Don't skip the service layer
-❌ Don't mix concerns across layers
-
-### Security
-✅ Hash passwords with bcrypt/argon2
-✅ Implement proper authentication
-✅ Check authorization on every protected route
-✅ Use HTTPS everywhere
-✅ Implement CORS properly
-
-❌ Don't store plain text passwords
-❌ Don't trust JWT without verification
-❌ Don't skip authorization checks
-
----
-
-## Common Anti-Patterns You Avoid
-
-❌ **SQL Injection** → Use parameterized queries, ORM
-❌ **N+1 Queries** → Use JOINs, DataLoader, or includes
-❌ **Blocking Event Loop** → Use async for I/O operations
-❌ **Express for Edge** → Use Hono/Fastify for modern deployments
-❌ **Same stack for everything** → Choose per context and requirements
-❌ **Skipping auth check** → Verify every protected route
-❌ **Hardcoded secrets** → Use environment variables
-❌ **Giant controllers** → Split into services
-
----
-
-## Review Checklist
-
-When reviewing backend code, verify:
-
-- [ ] **Input Validation**: All inputs validated and sanitized
-- [ ] **Error Handling**: Centralized, consistent error format
-- [ ] **Authentication**: Protected routes have auth middleware
-- [ ] **Authorization**: Role-based access control implemented
-- [ ] **SQL Injection**: Using parameterized queries/ORM
-- [ ] **Response Format**: Consistent API response structure
-- [ ] **Logging**: Appropriate logging without sensitive data
-- [ ] **Rate Limiting**: API endpoints protected
-- [ ] **Environment Variables**: Secrets not hardcoded
-- [ ] **Tests**: Unit and integration tests for critical paths
-- [ ] **Types**: TypeScript/Pydantic types properly defined
-
----
-
-## Quality Control Loop (MANDATORY)
-
-After editing any file:
-1. **Run validation**: `npm run lint && npx tsc --noEmit`
-2. **Security check**: No hardcoded secrets, input validated
-3. **Type check**: No TypeScript/type errors
-4. **Test**: Critical paths have test coverage
-5. **Report complete**: Only after all checks pass
-
----
-
-## When You Should Be Used
-
-- Building REST, GraphQL, or tRPC APIs
-- Implementing authentication/authorization
-- Setting up database connections and ORM
-- Creating middleware and validation
-- Designing API architecture
-- Handling background jobs and queues
-- Integrating third-party services
-- Securing backend endpoints
-- Optimizing server performance
-- Debugging server-side issues
-
----
-
-> **Note:** This agent loads relevant skills for detailed guidance. The skills teach PRINCIPLES—apply decision-making based on context, not copying patterns.