thanh-kit 2.5.0

package/templates/skills/package-upgrade/SKILL.md

@@ -0,0 +1,189 @@
+---
+name: package-upgrade
+description: Use when the user asks to analyze package upgrades, check for outdated dependencies, plan npm/NuGet updates, or assess breaking changes in package updates. Triggers on keywords like "upgrade packages", "outdated", "npm update", "breaking changes", "dependency upgrade", "package update", "version upgrade".
+allowed-tools: Read, Write, Edit, Bash, Grep, Glob, Task, WebFetch, WebSearch, TodoWrite
+---
+
+# Frontend Package Upgrade Analysis & Planning
+
+You are to operate as an expert frontend package management specialist, npm ecosystem analyst, and software architecture expert to analyze package.json files, research latest versions, collect breaking changes and migration guides, and generate a comprehensive upgrade plan.
+
+**IMPORTANT**: Always thinks hard, plan step by step to-do list first before execute. Always remember to-do list, never compact or summary it when memory context limit reach. Always preserve and carry your to-do list through every operation.
+
+---
+
+## Core Anti-Hallucination Protocols
+
+### ASSUMPTION_VALIDATION_CHECKPOINT
+Before every major operation:
+1. "What assumptions am I making about [X]?"
+2. "Have I verified this with actual code evidence?"
+3. "Could I be wrong about [specific pattern/relationship]?"
+
+### EVIDENCE_CHAIN_VALIDATION
+Before claiming any relationship:
+- "I believe package X is compatible because..." → show actual compatibility matrix
+- "This version has breaking changes because..." → cite official changelog
+- "Migration effort is Y hours because..." → show evidence from similar migrations
+
+### TOOL_EFFICIENCY_PROTOCOL
+- Batch multiple WebSearch calls for related packages
+- Use parallel Read operations for package.json files
+- Batch package research into groups of 10
+
+### CONTEXT_ANCHOR_SYSTEM
+Every 10 packages researched:
+1. Re-read the original task description
+2. Verify the current operation aligns with original goals
+3. Update the `Current Focus` in `## Progress` section
+
+---
+
+## PHASE 1: PACKAGE INVENTORY & CURRENT STATE ANALYSIS
+
+Build package inventory in `ai_task_analysis_notes/frontend-package-upgrade-analysis.md`.
+
+### PHASE 1A: INITIALIZATION AND PACKAGE DISCOVERY
+
+Initialize analysis file with:
+- `## Metadata` - Original prompt and task description
+- `## Progress` - Track phase, items processed, total items
+- `## Package Inventory` - All package.json files and dependencies
+- `## Version Research Results` - Latest versions and changelogs
+- `## Breaking Changes Analysis` - Breaking changes catalog
+- `## Migration Complexity Assessment` - Risk levels and effort estimates
+- `## Upgrade Strategy` - Phased migration plan
+
+**Find all package.json files**:
+```
+src/PlatformExampleAppWeb/package.json
+src/PlatformExampleAppWeb/apps/*/package.json
+src/PlatformExampleAppWeb/libs/*/package.json
+```
+
+For each package.json, document:
+- Project Name & Location
+- Framework Version
+- Dependencies (categorized: Framework, UI, Build Tools, Testing, Utilities)
+- DevDependencies
+
+Create **Master Package List** consolidating all unique packages.
+
+### PHASE 1B: PACKAGE USAGE ANALYSIS
+
+For each unique package, analyze codebase usage:
+- **Projects Using**: Which projects depend on this
+- **Import Count**: Number of files importing
+- **Key Usage Areas**: Where primarily used
+- **Configuration Files**: Config files for this package
+- **Upgrade Risk Level**: Low/Medium/High/Critical based on usage breadth
+
+---
+
+## PHASE 2: WEB RESEARCH & VERSION DISCOVERY
+
+**IMPORTANT: BATCH INTO GROUPS OF 10**
+
+For EACH package in Master Package List:
+
+### Latest Version Discovery
+- Search: "[package-name] npm latest version"
+- Check: https://www.npmjs.com/package/[package-name]
+- Extract: Latest stable version, release date, downloads
+
+### Breaking Changes Research
+- Search: "[package-name] migration guide [old-version] to [new-version]"
+- Search: "[package-name] v[X] breaking changes"
+- Search: "[package-name] changelog"
+- GitHub: Check CHANGELOG.md, releases
+
+### Ecosystem Compatibility
+- Angular version compatibility
+- Check peerDependencies
+- Cross-package dependencies
+
+Document:
+- Current vs. Latest versions
+- Version gap (major/minor/patch versions behind)
+- Breaking changes with migration steps
+- Deprecation warnings
+- Peer dependency changes
+
+---
+
+## PHASE 3: RISK ASSESSMENT & PRIORITIZATION
+
+### Risk Categories
+- **Critical Risk**: 5+ major versions behind, framework packages, 50+ breaking changes
+- **High Risk**: 3-4 major versions, state management, 20-30 breaking changes
+- **Medium Risk**: 1-2 major versions, some breaking changes
+- **Low Risk**: Patch/minor updates, backward compatible
+
+### Dependency Graph (Upgrade Order)
+1. Foundation packages (Node.js, TypeScript)
+2. Framework packages (Angular Core, CLI)
+3. Framework extensions (Material, RxJS)
+4. Third-party libraries
+5. Dev tools last
+
+---
+
+## PHASE 4: COMPREHENSIVE REPORT GENERATION
+
+Generate report at `ai_package_upgrade_reports/[YYYY-MM-DD]-frontend-package-upgrade-report.md`:
+
+### Report Structure
+
+1. **Executive Summary**
+2. **Package Inventory by Project**
+3. **Version Gap Analysis**
+4. **Breaking Changes Catalog**
+5. **Migration Complexity Assessment**
+6. **Ecosystem Compatibility Analysis**
+7. **Recommended Upgrade Strategy** (Phased Migration Plan)
+8. **Detailed Migration Guides**
+9. **Testing Strategy**
+10. **Rollback Plan**
+11. **Timeline & Resource Estimation**
+12. **Appendices**
+
+---
+
+## PHASE 5: APPROVAL GATE
+
+**CRITICAL**: Present comprehensive package upgrade report for explicit approval. **DO NOT** proceed without it.
+
+---
+
+## PHASE 6: CONFIDENCE DECLARATION
+
+Before marking complete, provide:
+
+### Solution Confidence Assessment
+
+**Overall Confidence**: [High 90-100% / Medium 70-89% / Low <70%]
+
+**Evidence Summary**:
+- All package.json files discovered: [count]
+- Web research completed: [X/Y packages]
+- Breaking changes documented: [count]
+- Official sources used: npm, GitHub, official docs
+
+**Assumptions Made**: [List or "None"]
+
+**User Confirmation Needed**:
+- IF confidence < 90%: "Please verify [specific packages] before proceeding"
+- IF confidence >= 90%: "Analysis is comprehensive, ready for migration"
+
+---
+
+## Package Upgrade Guidelines
+
+- **Comprehensive Discovery**: Find ALL package.json files
+- **Web Research Accuracy**: Use official sources only (npm, GitHub, official docs)
+- **Breaking Changes Focus**: Prioritize identifying breaking changes requiring code changes
+- **Risk Assessment**: Evaluate complexity based on breaking changes, usage breadth, dependencies
+- **Practical Planning**: Create actionable phased plan with realistic effort estimates
+- **Evidence-Based Decisions**: Base ALL recommendations on actual research with sources cited
+- **Confidence Declaration**: Declare confidence level; if < 90%, request user confirmation
+- **Batch Processing**: Research packages in batches of 10

package/templates/skills/payment-integration/README.md

@@ -0,0 +1,185 @@
+# Payment Integration Skill
+
+Comprehensive payment integration skill for SePay (Vietnamese payment gateway) and Polar (global SaaS monetization platform).
+
+## Features
+
+### SePay Integration
+- Vietnamese payment gateway with VietQR, NAPAS, bank transfers, and cards
+- 44+ supported banks
+- Webhook verification with API Key/OAuth2 authentication
+- QR code generation API
+- Order-based virtual accounts
+- SDK support for Node.js, PHP, and Laravel
+
+### Polar Integration
+- Global SaaS monetization platform
+- Merchant of Record (handles global tax compliance)
+- Subscription management with trials, upgrades, downgrades
+- Usage-based billing with events and meters
+- Automated benefit delivery (GitHub repos, Discord roles, license keys, files)
+- Customer self-service portal
+- Multi-language SDKs (TypeScript, Python, PHP, Go)
+- Framework adapters (Next.js, Laravel, Remix, etc.)
+
+## Structure
+
+```
+payment-integration/
+├── SKILL.md                      # Main skill definition
+├── README.md                     # This file
+├── references/                   # Progressive disclosure documentation
+│   ├── sepay/                   # SePay integration guides
+│   │   ├── overview.md          # Auth, capabilities, environments
+│   │   ├── api.md               # API endpoints and operations
+│   │   ├── webhooks.md          # Webhook setup and handling
+│   │   ├── sdk.md               # SDK usage (Node.js, PHP, Laravel)
+│   │   ├── qr-codes.md          # VietQR generation
+│   │   └── best-practices.md    # Security, patterns, monitoring
+│   └── polar/                   # Polar integration guides
+│       ├── overview.md          # Auth, MoR concept, environments
+│       ├── products.md          # Products, pricing, usage-based billing
+│       ├── checkouts.md         # Checkout flows and embedded checkout
+│       ├── subscriptions.md     # Lifecycle, upgrades, trials
+│       ├── webhooks.md          # Event handling and verification
+│       ├── benefits.md          # Automated benefit delivery
+│       ├── sdk.md               # Multi-language SDK usage
+│       └── best-practices.md    # Security, patterns, monitoring
+└── scripts/                      # Integration helper scripts
+    ├── sepay-webhook-verify.js   # SePay webhook verification
+    ├── polar-webhook-verify.js   # Polar webhook verification
+    ├── checkout-helper.js        # Checkout session generation
+    ├── test-scripts.js           # Test suite for all scripts
+    ├── package.json              # Node.js package configuration
+    └── .env.example              # Environment variable template
+```
+
+## Usage
+
+### Activate the Skill
+
+Claude Code will automatically activate this skill when you mention payment integration, subscriptions, webhooks, or platform-specific terms (SePay, Polar).
+
+### Manual Activation
+
+In conversations, simply reference the platforms:
+- "Implement SePay payment integration"
+- "Set up Polar subscriptions with usage-based billing"
+- "Create webhook handler for payment notifications"
+
+### Using Scripts
+
+**SePay Webhook Verification:**
+```bash
+cd .claude/skills/payment-integration/scripts
+node sepay-webhook-verify.js '{"id":12345,"gateway":"Vietcombank",...}'
+```
+
+**Polar Webhook Verification:**
+```bash
+node polar-webhook-verify.js '{"type":"order.paid","data":{...}}' base64secret
+```
+
+**Checkout Helper:**
+```bash
+# SePay
+node checkout-helper.js sepay '{"orderInvoiceNumber":"ORD001","orderAmount":100000,...}'
+
+# Polar
+node checkout-helper.js polar '{"productPriceId":"price_xxx","successUrl":"https://..."}'
+```
+
+**Run Tests:**
+```bash
+npm test
+```
+
+## Environment Variables
+
+Copy `.env.example` to `.env` and configure:
+
+```env
+# SePay
+SEPAY_MERCHANT_ID=SP-TEST-XXXXXXX
+SEPAY_SECRET_KEY=spsk_test_xxxxxxxxxxxxx
+SEPAY_ENV=sandbox
+SEPAY_WEBHOOK_API_KEY=your_key
+
+# Polar
+POLAR_ACCESS_TOKEN=polar_xxxxxxxxxxxxxxxx
+POLAR_SERVER=sandbox
+POLAR_WEBHOOK_SECRET=base64_secret
+```
+
+## Progressive Disclosure
+
+The skill uses progressive disclosure to minimize context usage:
+1. **SKILL.md** - Overview and quick reference (~99 lines)
+2. **references/** - Detailed guides loaded as needed (<100 lines each)
+3. **scripts/** - Executable helpers with embedded examples
+
+Load only the references you need for your current task.
+
+## Platform Selection Guide
+
+**Choose SePay for:**
+- Vietnamese market targeting
+- Bank transfer automation
+- Local payment methods
+- QR code payments (VietQR/NAPAS)
+- Direct bank monitoring
+
+**Choose Polar for:**
+- Global market
+- SaaS/subscription business
+- Usage-based billing
+- Automated benefit delivery
+- Tax compliance (Merchant of Record)
+- Customer self-service
+
+## Examples
+
+### SePay Payment Flow
+1. Load `references/sepay/overview.md` for authentication
+2. Load `references/sepay/sdk.md` for integration
+3. Use `checkout-helper.js` to generate payment form
+4. Load `references/sepay/webhooks.md` for notifications
+5. Use `sepay-webhook-verify.js` to verify authenticity
+
+### Polar Subscription Flow
+1. Load `references/polar/overview.md` for setup
+2. Load `references/polar/products.md` for pricing
+3. Load `references/polar/checkouts.md` for payment
+4. Load `references/polar/subscriptions.md` for lifecycle
+5. Load `references/polar/webhooks.md` for events
+6. Load `references/polar/benefits.md` for automation
+
+## Testing
+
+All scripts include comprehensive test coverage:
+- SePay webhook verification (with/without authentication)
+- Polar webhook signature validation
+- Checkout configuration generation
+- Error handling and edge cases
+
+Run `npm test` in the scripts directory to verify functionality.
+
+## Support
+
+### SePay
+- Docs: https://developer.sepay.vn/en
+- Email: info@sepay.vn
+- Hotline: 02873059589
+
+### Polar
+- Docs: https://polar.sh/docs
+- API Reference: https://polar.sh/docs/api-reference
+- GitHub: https://github.com/polarsource/polar
+
+## License
+
+MIT
+
+## Version
+
+1.0.0

package/templates/skills/payment-integration/SKILL.md

@@ -0,0 +1,118 @@
+---
+name: payment-integration
+description: Implement payment integrations with SePay (Vietnamese payment gateway with VietQR, bank transfers, cards) and Polar (global SaaS monetization platform with subscriptions, usage-based billing, automated benefits). Use when integrating payment processing, implementing checkout flows, managing subscriptions, handling webhooks, processing bank transfers, generating QR codes, automating benefit delivery, or building billing systems. Supports authentication (API keys, OAuth2), product management, customer portals, tax compliance (Polar as MoR), and comprehensive SDK integrations (Node.js, PHP, Python, Go, Laravel, Next.js).
+version: 1.0.0
+license: MIT
+---
+
+# Payment Integration
+
+Implement payment processing with SePay (Vietnamese payments) and Polar (global SaaS monetization).
+
+## When to Use
+
+Use when implementing:
+- Payment gateway integration (checkout, processing)
+- Subscription management (trials, upgrades, billing)
+- Webhook handling (payment notifications)
+- QR code payments (VietQR, NAPAS)
+- Usage-based billing (metering, credits)
+- Automated benefit delivery (licenses, GitHub access, Discord roles)
+- Customer portals (self-service management)
+- Bank transfer automation (Vietnamese banks)
+- Product catalogs with pricing
+
+## Platform Selection
+
+**Choose SePay for:**
+- Vietnamese market (VND currency)
+- Bank transfer automation
+- VietQR/NAPAS payments
+- Local payment methods
+- Direct bank account monitoring
+
+**Choose Polar for:**
+- Global SaaS products
+- Subscription management
+- Usage-based billing
+- Automated benefits (GitHub, Discord, licenses)
+- Merchant of Record (tax compliance)
+- Digital product sales
+
+## Quick Reference
+
+### SePay Integration
+- **Overview & Auth**: `references/sepay/overview.md` - Platform capabilities, API/OAuth2 auth, supported banks
+- **API Reference**: `references/sepay/api.md` - Endpoints, transactions, bank accounts, virtual accounts
+- **Webhooks**: `references/sepay/webhooks.md` - Setup, payload structure, verification, retry logic
+- **SDK Usage**: `references/sepay/sdk.md` - Node.js, PHP, Laravel implementations
+- **QR Codes**: `references/sepay/qr-codes.md` - VietQR generation, templates, integration
+- **Best Practices**: `references/sepay/best-practices.md` - Security, patterns, monitoring
+
+### Polar Integration
+- **Overview & Auth**: `references/polar/overview.md` - Platform capabilities, authentication methods, MoR concept
+- **Products & Pricing**: `references/polar/products.md` - Product types, pricing models, usage-based billing
+- **Checkouts**: `references/polar/checkouts.md` - Checkout flows, embedded checkout, links
+- **Subscriptions**: `references/polar/subscriptions.md` - Lifecycle, upgrades, downgrades, trials
+- **Webhooks**: `references/polar/webhooks.md` - Event types, signature verification, monitoring
+- **Benefits**: `references/polar/benefits.md` - Automated delivery (GitHub, Discord, licenses, files)
+- **SDK Usage**: `references/polar/sdk.md` - TypeScript, Python, PHP, Go, framework adapters
+- **Best Practices**: `references/polar/best-practices.md` - Security, patterns, monitoring
+
+### Integration Scripts
+- **SePay Webhook Verification**: `scripts/sepay-webhook-verify.js` - Verify SePay webhook authenticity
+- **Polar Webhook Verification**: `scripts/polar-webhook-verify.js` - Verify Polar webhook signatures
+- **Checkout Helper**: `scripts/checkout-helper.js` - Generate checkout sessions for both platforms
+
+## Implementation Workflow
+
+### SePay Implementation
+1. Load `references/sepay/overview.md` for auth setup
+2. Load `references/sepay/api.md` or `references/sepay/sdk.md` for integration
+3. Load `references/sepay/webhooks.md` for payment notifications
+4. Use `scripts/sepay-webhook-verify.js` for webhook verification
+5. Load `references/sepay/best-practices.md` for production readiness
+
+### Polar Implementation
+1. Load `references/polar/overview.md` for auth and concepts
+2. Load `references/polar/products.md` for product setup
+3. Load `references/polar/checkouts.md` for payment flows
+4. Load `references/polar/webhooks.md` for event handling
+5. Use `scripts/polar-webhook-verify.js` for webhook verification
+6. Load `references/polar/benefits.md` if automating delivery
+7. Load `references/polar/best-practices.md` for production readiness
+
+## Key Capabilities
+
+**SePay:**
+- Payment gateway (QR, bank transfer, cards)
+- Bank account monitoring with webhooks
+- Order-based virtual accounts
+- VietQR generation API
+- 44+ Vietnamese banks supported
+- Rate limit: 2 calls/second
+
+**Polar:**
+- Merchant of Record (global tax compliance)
+- Subscription lifecycle management
+- Usage-based billing (events, meters)
+- Automated benefits (GitHub, Discord, licenses)
+- Customer portal (self-service)
+- Multi-language SDKs
+- Rate limit: 300 req/min
+
+## Instructions
+
+When implementing payment integration:
+
+1. **Identify platform** based on requirements (Vietnamese vs global, payment types)
+2. **Load relevant references** progressively as needed
+3. **Implement authentication** using platform-specific methods
+4. **Set up products/pricing** according to business model
+5. **Implement checkout flow** (hosted, embedded, or API-driven)
+6. **Configure webhooks** with proper verification
+7. **Handle payment events** (success, failure, refund)
+8. **Test thoroughly** in sandbox before production
+9. **Monitor and optimize** using platform analytics
+
+Load only the references needed for current implementation step to maintain context efficiency.