vibes-plug 1.0.0 → 2.11.0

package/skills/browser-automation-expert/SKILL.md

@@ -0,0 +1,222 @@
+---
+name: browser-automation-expert
+description: "Expert guide for autonomous web agents (Browser-Use, Stagehand v0.4+), hardcore anti-bot evasion (Playwright Stealth, WebGL masking), and Vision LLM visual QA / Panduan ahli agen web otonom, penghindaran deteksi bot, dan QA visual berbasis Vision LLM."
+author: "Roedy Rustam"
+---
+
+# Autonomous Web Agent & Automation Expert (2026 Edition)
+
+[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
+
+---
+
+<a name="english"></a>
+## English
+
+### Purpose & Overview
+Deploy ultra-powerful autonomous web agents that perceive, navigate, and execute complex workflows without human intervention. Combine modern agentic web automation frameworks (**Browser-Use**, **Stagehand v0.4+**) with hardcore anti-detection evasion techniques (Playwright Stealth, fingerprint spoofing, residential proxy rotation) and frontier Vision LLMs (**Gemini 3.8 Flash**, **Gemini 3.5 Pro**, **Claude 3.7 Sonnet Computer Use**, **OpenAI o3 / GPT-4.5**) for pixel-accurate visual QA.
+
+### Core Capabilities
+
+1. **Autonomous Execution Frameworks (2026 Standard)**
+   - **Stagehand v0.4+**: Natural language DOM perception with semantic actions (`page.act()`, `page.extract()`, `page.observe()`). Avoid fragile CSS/XPath selectors.
+   - **Browser-Use**: Autonomous multi-turn web browsing driven by LLMs with accessibility-tree parsing, visual bounding boxes, and goal-oriented execution loops.
+
+2. **Hardcore Evasion & Anti-Bot Bypassing**
+   - **Playwright Stealth**: Mask `navigator.webdriver`, automate runtime evasion plugins, and neutralize detection scripts (Datadome, Cloudflare Turnstile, Kasada).
+   - **Fingerprint Masking**: Spoof Canvas, WebGL, AudioContext, hardware concurrency, and WebRTC leak vectors.
+   - **Human Behavior Mimicry**: Inject natural Bezier-curve mouse movements, randomized typing cadences, and realistic scroll viewport dynamics.
+
+3. **Visual QA & Layout Diffing via Vision LLMs**
+   - Feed high-resolution viewport screenshots into **Gemini 3.8 Flash** or **Claude 3.7 Sonnet**.
+   - Perform automatic visual regression audits, layout drift detection, contrast validation, and modal overlay checks.
+
+---
+
+### Production Implementation Recipes
+
+#### Recipe 1: Stagehand v0.4+ with Playwright Stealth (TypeScript)
+```typescript
+import { Stagehand } from '@browserbase/stagehand';
+import { z } from 'zod';
+
+export async function runAutonomousShoppingAgent(targetProduct: string) {
+  const stagehand = new Stagehand({
+    env: 'LOCAL',
+    modelName: 'claude-3-7-sonnet-20250219',
+    browserbaseSessionCreateParams: {
+      projectId: process.env.BROWSERBASE_PROJECT_ID,
+    },
+  });
+
+  await stagehand.init();
+  const page = stagehand.page;
+
+  try {
+    await page.goto('https://example-store.com');
+
+    // Semantic action without hardcoded selectors
+    await page.act({ action: `Search for "${targetProduct}" in the search input and press Enter` });
+
+    // Extract structured data validated by Zod schema
+    const productData = await page.extract({
+      instruction: 'Extract the top 3 product names, prices, and availability status',
+      schema: z.object({
+        products: z.array(
+          z.object({
+            title: z.string(),
+            price: z.string(),
+            inStock: z.boolean(),
+          })
+        ),
+      }),
+    });
+
+    console.log('Extracted Products:', productData.products);
+    return productData.products;
+  } finally {
+    await stagehand.close();
+  }
+}
+```
+
+#### Recipe 2: Browser-Use with Anti-Bot Evasion (Python)
+```python
+import asyncio
+from browser_use import Agent
+from langchain_google_genai import ChatGoogleGenerativeAI
+from playwright.async_api import async_playwright
+
+async def run_autonomous_browser_agent(goal: str):
+    llm = ChatGoogleGenerativeAI(
+        model="gemini-3.8-flash",
+        temperature=0.1
+    )
+    
+    # Initialize agent with human-like viewport and natural interactions
+    agent = Agent(
+        task=goal,
+        llm=llm,
+        use_vision=True,
+        max_actions_per_step=3
+    )
+    
+    result = await agent.run(max_steps=25)
+    print(f"Goal Completed: {result.is_done()}")
+    return result.final_result()
+
+if __name__ == "__main__":
+    asyncio.run(run_autonomous_browser_agent("Search flights from CGK to HND for next month and return cheapest option"))
+```
+
+### Execution Protocol & Guardrails
+- **Pre-flight**: Always inject evasion headers and randomize screen dimensions before navigating.
+- **Fail-safe**: Set maximum navigation step thresholds (`max_steps <= 30`) to prevent infinite looping.
+- **Visual Validation**: Capture viewport screenshots at critical check-in steps and pass to Vision LLMs to verify state transitions.
+
+## Orchestration & Integration
+- Integrates with: `web-scraper`, `autonomous-chaos-monkey`, `visual-qa-vision-agent`, `e2e-testing-expert`.
+
+---
+
+<a name="bahasa-indonesia"></a>
+## Bahasa Indonesia
+
+### Tujuan & Gambaran Umum
+Terapkan agen web otonom super kuat yang dapat melihat, menavigasi, dan mengeksekusi alur kerja kompleks tanpa campur tangan manusia. Menggabungkan framework otomatisasi web agentic modern (**Browser-Use**, **Stagehand v0.4+**) dengan teknik penghindaran deteksi bot tingkat tinggi (Playwright Stealth, manipulasi sidik jari perangkat, rotasi proxy residential) dan model Vision frontier (**Gemini 3.8 Flash**, **Gemini 3.5 Pro**, **Claude 3.7 Sonnet Computer Use**, **OpenAI o3 / GPT-4.5**) untuk QA visual tingkat piksel.
+
+### Kemampuan Utama
+
+1. **Framework Eksekusi Otonom (Standar 2026)**
+   - **Stagehand v0.4+**: Persepsi DOM berbasis bahasa alami dengan aksi semantik (`page.act()`, `page.extract()`, `page.observe()`). Menghilangkan ketergantungan pada selektor CSS/XPath yang rapuh.
+   - **Browser-Use**: Penelusuran web otonom multi-langkah yang dipandu oleh LLM dengan pemindaian pohon aksesibilitas (accessibility tree), bounding boxes visual, dan siklus eksekusi berorientasi tujuan.
+
+2. **Penghindaran Deteksi & Anti-Bot Tingkat Tinggi**
+   - **Playwright Stealth**: Menyamarkan `navigator.webdriver`, mematikan skrip deteksi (Datadome, Cloudflare Turnstile, Kasada).
+   - **Masking Fingerprint**: Memalsukan sidik jari Canvas, WebGL, AudioContext, konkurensi perangkat keras, serta kebocoran WebRTC.
+   - **Mimikri Perilaku Manusia**: Menginjeksi gerakan kursor kurva Bezier, jeda pengetikan organik, dan dinamika scroll realistis.
+
+3. **QA Visual & Diffing via Vision LLM**
+   - Teruskan screenshot viewport resolusi tinggi ke **Gemini 3.8 Flash** atau **Claude 3.7 Sonnet**.
+   - Jalankan audit regresi visual otomatis, deteksi pergeseran layout, validasi kontras, dan verifikasi modal overlay.
+
+---
+
+### Resep Implementasi Produksi
+
+#### Resep 1: Stagehand v0.4+ dengan Playwright Stealth (TypeScript)
+```typescript
+import { Stagehand } from '@browserbase/stagehand';
+import { z } from 'zod';
+
+export async function jalankanAgenBelanjaOtonom(produkSasaran: string) {
+  const stagehand = new Stagehand({
+    env: 'LOCAL',
+    modelName: 'claude-3-7-sonnet-20250219',
+  });
+
+  await stagehand.init();
+  const page = stagehand.page;
+
+  try {
+    await page.goto('https://toko-contoh.com');
+
+    // Aksi semantik tanpa selektor yang kaku
+    await page.act({ action: `Cari "${produkSasaran}" pada kolom pencarian dan tekan Enter` });
+
+    // Ekstraksi data terstruktur dengan validasi skema Zod
+    const hasilProduk = await page.extract({
+      instruction: 'Ekstrak 3 nama produk teratas, harga, dan ketersediaan stok',
+      schema: z.object({
+        products: z.array(
+          z.object({
+            title: z.string(),
+            price: z.string(),
+            inStock: z.boolean(),
+          })
+        ),
+      }),
+    });
+
+    console.log('Hasil Ekstraksi:', hasilProduk.products);
+    return hasilProduk.products;
+  } finally {
+    await stagehand.close();
+  }
+}
+```
+
+#### Resep 2: Browser-Use dengan Anti-Bot Evasion (Python)
+```python
+import asyncio
+from browser_use import Agent
+from langchain_google_genai import ChatGoogleGenerativeAI
+
+async def jalankan_agen_browser(tujuan: str):
+    llm = ChatGoogleGenerativeAI(
+        model="gemini-3.8-flash",
+        temperature=0.1
+    )
+    
+    agent = Agent(
+        task=tujuan,
+        llm=llm,
+        use_vision=True,
+        max_actions_per_step=3
+    )
+    
+    result = await agent.run(max_steps=25)
+    print(f"Status Selesai: {result.is_done()}")
+    return result.final_result()
+
+if __name__ == "__main__":
+    asyncio.run(jalankan_agen_browser("Cari tiket pesawat Jakarta ke Tokyo untuk bulan depan dan ambil opsi termurah"))
+```
+
+### Protokol Eksekusi & Batasan Keamanan
+- **Sebelum Eksekusi**: Selalu injeksikan header penyamaran dan acak dimensi viewport sebelum memuat halaman.
+- **Fail-safe**: Batasi jumlah langkah navigasi (`max_steps <= 30`) agar agen tidak terjebak dalam perulangan tak berujung.
+- **Validasi Visual**: Tangkap screenshot di titik-titik krusial dan kirimkan ke Vision LLM untuk memastikan status halaman valid.
+
+## Integrasi Orkestrasi
+- Terintegrasi dengan: `web-scraper`, `autonomous-chaos-monkey`, `visual-qa-vision-agent`, `e2e-testing-expert`.

package/skills/bun-runtime-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bun-runtime-expert
 description: "Expert guide for Bun JavaScript/TypeScript runtime. Use when building, testing, or deploying applications with Bun / Panduan ahli untuk runtime JavaScript/TypeScript Bun. Digunakan saat membuat, menguji, atau meluncurkan aplikasi dengan Bun."
-author: "Roedy Rustam"
+author: "Roedy Rustam"
 ---
 
 # Bun Runtime Expert
@@ -13,6 +13,9 @@ author: "Roedy Rustam"
 <a name="english"></a>
 ## English
 
+### Orchestration & Integration
+Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.
+
 Expert-level guidance for building high-performance applications with the Bun JavaScript/TypeScript runtime (v1.1+). Covers Bun's built-in HTTP server, database clients, bundler, test runner, package manager, and Node.js migration strategies.
 
 ### Trigger Conditions
@@ -111,6 +114,9 @@ const users = await sql`SELECT * FROM users WHERE active = ${true}`;
 <a name="bahasa-indonesia"></a>
 ## Bahasa Indonesia
 
+### Integrasi Orkestrasi
+Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.
+
 Panduan tingkat ahli untuk membangun aplikasi berkinerja tinggi menggunakan runtime JavaScript/TypeScript Bun (v1.1+). Mencakup server HTTP bawaan, klien database, bundler, test runner, package manager, dan strategi migrasi dari Node.js.
 
 ### Kondisi Pemicu

package/skills/chatbot-messaging-expert/SKILL.md

@@ -0,0 +1,114 @@
+---
+name: chatbot-messaging-expert
+description: "Expert guide for chatbot and messaging platform integration (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) and conversational AI / Panduan ahli integrasi chatbot dan platform messaging (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) dan AI percakapan."
+author: "Roedy Rustam"
+---
+
+# Chatbot & Messaging Expert (2026 Edition)
+
+[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
+
+---
+
+<a name="english"></a>
+## English
+
+### Orchestration & Integration
+- **`ai-llm-integration-expert`**: LLM-powered conversational AI and tool calling.
+- **`sse-websocket-streaming-expert`**: Real-time messaging protocols.
+- **`webhook-receiver`**: Secure webhook endpoints for messaging platforms.
+- **`async-queue-temporal-expert`**: Message queue processing for high-volume bots.
+
+### Description
+Expert guide for building chatbots and integrating messaging platforms into applications. Covers WhatsApp Business API (Cloud API), Telegram Bot API, Discord.js v14, Slack Bolt, LINE Messaging API, and conversational AI patterns. Includes webhook verification, message handlers, interactive components (buttons, carousels), media handling, and AI-powered response generation.
+
+### Trigger Conditions
+- Building a chatbot for WhatsApp, Telegram, Discord, or Slack.
+- Integrating messaging platform APIs into existing applications.
+- Creating AI-powered conversational agents on messaging platforms.
+- Implementing webhook handlers for messaging notifications.
+
+---
+
+### Platform Quick Reference
+
+| Platform | API Type | Auth | Message Types | Webhook |
+|----------|----------|------|---------------|---------|
+| WhatsApp Business | REST (Cloud API) | Bearer Token | Text, Image, Template, Interactive | ✅ Verify token |
+| Telegram | REST (Bot API) | Bot Token | Text, Photo, Inline Keyboard, Callback | ✅ setWebhook |
+| Discord | Gateway + REST | Bot Token | Text, Embed, Components, Slash Commands | Gateway events |
+| Slack | Events API + REST | OAuth + Signing Secret | Blocks, Modals, Slash Commands | ✅ Request signing |
+
+### Core Patterns
+
+#### WhatsApp Business Cloud API
+```typescript
+// Webhook verification + message handler
+import { Hono } from 'hono';
+const app = new Hono();
+
+app.get('/webhook/whatsapp', (c) => {
+  const mode = c.req.query('hub.mode');
+  const token = c.req.query('hub.verify_token');
+  const challenge = c.req.query('hub.challenge');
+  if (mode === 'subscribe' && token === process.env.WA_VERIFY_TOKEN) {
+    return c.text(challenge!);
+  }
+  return c.text('Forbidden', 403);
+});
+
+app.post('/webhook/whatsapp', async (c) => {
+  const body = await c.req.json();
+  const message = body.entry?.[0]?.changes?.[0]?.value?.messages?.[0];
+  if (message?.type === 'text') {
+    await sendWhatsAppReply(message.from, `Echo: ${message.text.body}`);
+  }
+  return c.text('OK');
+});
+
+async function sendWhatsAppReply(to: string, text: string) {
+  await fetch(`https://graph.facebook.com/v21.0/${process.env.WA_PHONE_ID}/messages`, {
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${process.env.WA_ACCESS_TOKEN}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({ messaging_product: 'whatsapp', to, type: 'text', text: { body: text } }),
+  });
+}
+```
+
+#### Telegram Bot
+```typescript
+import { Bot, InlineKeyboard } from 'grammy';
+
+const bot = new Bot(process.env.TELEGRAM_BOT_TOKEN!);
+
+bot.command('start', (ctx) => ctx.reply('Welcome! How can I help?'));
+bot.on('message:text', async (ctx) => {
+  const aiResponse = await generateAIResponse(ctx.message.text);
+  const keyboard = new InlineKeyboard()
+    .text('👍 Helpful', 'feedback_good')
+    .text('👎 Not helpful', 'feedback_bad');
+  await ctx.reply(aiResponse, { reply_markup: keyboard });
+});
+
+bot.callbackQuery('feedback_good', (ctx) => ctx.answerCallbackQuery('Thanks!'));
+bot.start();
+```
+
+## Orchestration & Integration
+- `ai-llm-integration-expert`, `webhook-receiver`, `async-queue-temporal-expert`
+
+---
+
+<a name="bahasa-indonesia"></a>
+## Bahasa Indonesia
+
+### Deskripsi
+Panduan ahli untuk membangun chatbot dan mengintegrasikan platform messaging ke dalam aplikasi. Mencakup WhatsApp Business API, Telegram Bot API, Discord.js v14, Slack Bolt, dan pola AI percakapan.
+
+### Kondisi Pemicu
+- Membangun chatbot untuk WhatsApp, Telegram, Discord, atau Slack.
+- Mengintegrasikan API platform messaging ke aplikasi yang sudah ada.
+- Membuat agen percakapan berbasis AI di platform messaging.

package/skills/ci-cd-devops-architect/SKILL.md

@@ -1,45 +1,81 @@
----
-name: ci-cd-devops-architect
-description: "Expert guide for continuous integration, deployment pipelines, Docker, Kubernetes, and Infrastructure as Code (IaC) / Panduan ahli untuk CI/CD dan infrastruktur."
-author: "Antigravity"
----
-
-# CI/CD & DevOps Architect / Arsitek CI/CD & DevOps
-
-[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
-
----
-
-<a name="english"></a>
-## English
-
-### Description
-Expert-level skill for designing and maintaining CI/CD pipelines (GitHub Actions, GitLab CI) and managing infrastructure using Docker, Kubernetes, and Terraform.
-
-### Instructions
-- **Automate Everything**: Ensure tests, linting, formatting, and security scans run on every PR. Block merges if pipelines fail.
-- **Immutable Artifacts**: Build a Docker image once and deploy the exact same image to Staging and Production. Pass environment variables dynamically at runtime, not build time.
-- **Infrastructure as Code**: Keep all infrastructure configurations (Terraform, K8s manifests) in version control. Avoid manual changes via the cloud provider's web console.
-- **Secrets Management**: Never commit secrets to the repository. Use secure vaults like GitHub Secrets, AWS Secrets Manager, or HashiCorp Vault, and inject them securely into the environment.
-- **Zero-Downtime Deployments**: Utilize deployment strategies like rolling updates or blue-green deployments to ensure application availability during releases.
-
-### Trigger Conditions
-Active whenever the user is creating GitHub Actions, configuring Dockerfiles, writing Terraform scripts, or setting up deployment pipelines.
-
----
-
-<a name="bahasa-indonesia"></a>
-## Bahasa Indonesia
-
-### Deskripsi
-Skill tingkat ahli untuk merancang dan memelihara *pipeline* CI/CD (GitHub Actions, GitLab CI) dan mengelola infrastruktur menggunakan Docker, Kubernetes, dan Terraform.
-
-### Instruksi
-- **Otomatisasi Semuanya**: Pastikan pengujian (tests), *linting*, pemformatan, dan pemindaian keamanan berjalan di setiap *Pull Request* (PR). Blokir penggabungan kode (merge) jika *pipeline* gagal.
-- **Artifak Imutabel**: Build *image* Docker satu kali dan *deploy* image yang sama persis ke Staging dan Produksi. Operkan variabel lingkungan (environment variables) secara dinamis saat *runtime*, bukan saat *build time*.
-- **Infrastructure as Code (IaC)**: Simpan semua konfigurasi infrastruktur (Terraform, manifes K8s) di kontrol versi. Hindari perubahan manual melalui *web console* dari penyedia cloud.
-- **Manajemen Rahasia (Secrets)**: Jangan pernah melakukan *commit* untuk *secrets* ke repositori. Gunakan *vault* yang aman seperti GitHub Secrets, AWS Secrets Manager, atau HashiCorp Vault, dan injeksikan dengan aman ke dalam sistem.
-- **Deployment Tanpa Downtime**: Manfaatkan strategi *deployment* seperti pembaruan bergulir (*rolling updates*) atau *blue-green deployments* untuk memastikan ketersediaan aplikasi selama rilis.
-
-### Kondisi Pemicu
-Aktif setiap kali pengguna sedang membuat GitHub Actions, mengkonfigurasi Dockerfile, menulis skrip Terraform, atau mengatur *pipeline deployment*.
+---
+name: ci-cd-devops-architect
+description: "Expert guide for continuous integration, deployment pipelines, Docker, Kubernetes, and Infrastructure as Code (IaC) / Panduan ahli untuk CI/CD dan infrastruktur."
+author: "Roedy Rustam"
+---
+
+# CI/CD & DevOps Architect / Arsitek CI/CD & DevOps
+
+[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
+
+---
+
+<a name="english"></a>
+## English
+
+### Description
+Design and maintain CI/CD pipelines (GitHub Actions, GitLab CI, Buildkite) and manage infrastructure using Docker, Kubernetes (1.30+), and Terraform/OpenTofu.
+
+## Orchestration & Integration
+Connect with these skills to orchestrate complete workflows:
+- `cloud-hosting-expert` — Deployment targets (Vercel, Cloudflare, AWS, Railway)
+- `dependency-upgrade-migrator` — Renovate Bot configuration in CI/CD
+- `self-healing-cloud-orchestrator` — Auto-remediation and rollback pipelines
+- `logging-error-tracking-expert` — Sentry source map upload step in build pipeline
+- `e2e-testing-expert` — Automated Playwright & Vitest test steps in CI
+- `zero-trust-secret-vault` — CI/CD secret management and injection
+- `production-ready-hardener` — Pre-deployment security scanning in CI
+
+### Key CI/CD Workflows & Patterns
+- **Automate Everything**: Enforce tests, linting, formatting, and security scans on every PR. Block merges on pipeline failure.
+- **Dependency Update Bot**: Configure Renovate Bot for automated patch/minor updates (`dependency-upgrade-migrator`).
+- **Source Maps Upload**: Upload Sentry source maps during build phase (`logging-error-tracking-expert`).
+- **Immutable Artifacts**: Build Docker image once, deploy identical image to Staging and Production. Inject environment variables dynamically at runtime.
+- **Infrastructure as Code**: Store all infrastructure configurations (Terraform/OpenTofu, K8s manifests) in version control. No manual web console changes.
+- **Zero-Trust Secrets**: Never commit secrets. Use Infisical, GitHub OIDC, or HashiCorp Vault (`zero-trust-secret-vault`).
+- **Zero-Downtime Deployments**: Utilize rolling updates or blue-green deployments.
+
+### Implementation Checklist
+- [ ] Configure branch protection (require passing status checks before merge).
+- [ ] Set up multi-stage Docker builds to reduce image size and attack surface.
+- [ ] Implement caching for package managers (pnpm, bun, cargo, go mod) in CI.
+- [ ] Scan container images for vulnerabilities before registry push.
+
+### Trigger Conditions
+Trigger when creating GitHub Actions, configuring Dockerfiles, writing Terraform/OpenTofu scripts, setting up Renovate Bot, or configuring deployment pipelines.
+
+---
+
+<a name="bahasa-indonesia"></a>
+## Bahasa Indonesia
+
+### Deskripsi
+Rancang dan pelihara *pipeline* CI/CD (GitHub Actions, GitLab CI, Buildkite) dan kelola infrastruktur menggunakan Docker, Kubernetes (1.30+), dan Terraform/OpenTofu.
+
+## Integrasi Orkestrasi
+Hubungkan dengan skill berikut untuk mengorkestrasi alur kerja:
+- `cloud-hosting-expert` — Target deployment (Vercel, Cloudflare, AWS, Railway)
+- `dependency-upgrade-migrator` — Konfigurasi Renovate Bot di CI/CD
+- `self-healing-cloud-orchestrator` — Pipeline auto-remediasi dan rollback
+- `logging-error-tracking-expert` — Langkah upload source map Sentry di pipeline build
+- `e2e-testing-expert` — Langkah pengujian otomatis Playwright & Vitest di CI
+- `zero-trust-secret-vault` — Manajemen dan injeksi rahasia CI/CD
+- `production-ready-hardener` — Pemindaian keamanan pra-deployment di CI
+
+### Alur Kerja & Pola CI/CD Utama
+- **Otomatisasi Semuanya**: Wajibkan pengujian, *linting*, pemformatan, dan pemindaian keamanan di setiap PR. Blokir merge jika *pipeline* gagal.
+- **Bot Pembaruan Dependensi**: Konfigurasi Renovate Bot untuk update otomatis patch/minor (`dependency-upgrade-migrator`).
+- **Upload Source Maps**: Upload source maps Sentry pada fase build (`logging-error-tracking-expert`).
+- **Artifak Imutabel**: Build *image* Docker sekali, *deploy* image yang persis sama ke Staging dan Produksi. Injeksi variabel lingkungan saat runtime.
+- **Infrastructure as Code (IaC)**: Simpan semua konfigurasi infrastruktur (Terraform/OpenTofu, manifes K8s) di kontrol versi. Jangan ubah manual via konsol web.
+- **Manajemen Rahasia (Secrets)**: Jangan komit rahasia. Gunakan GitHub OIDC, Infisical, atau HashiCorp Vault (`zero-trust-secret-vault`).
+- **Deployment Tanpa Downtime**: Manfaatkan pembaruan bergulir (*rolling updates*) atau *blue-green deployments*.
+
+### Checklist Implementasi
+- [ ] Konfigurasi perlindungan cabang (wajib lulus status check sebelum merge).
+- [ ] Siapkan multi-stage Docker builds untuk mengurangi ukuran image dan permukaan serangan.
+- [ ] Implementasikan caching untuk package managers (pnpm, bun, cargo, go mod) di workflow CI.
+- [ ] Pindai image kontainer untuk kerentanan sebelum push ke registry.
+
+### Kondisi Pemicu
+Picu saat membuat GitHub Actions, mengkonfigurasi Dockerfile, menulis skrip Terraform/OpenTofu, mengatur Renovate Bot, atau mengatur *pipeline deployment*.