npm - vibes-plug - Versions diffs - 1.0.0 - Mend

vibes-plug 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (141) hide show

package/.github/ISSUE_TEMPLATE/feature_request.md +20 -0
package/BLUEPRINT.md +125 -0
package/CHANGELOG.md +195 -0
package/CONTRIBUTING.md +199 -0
package/LICENSE +21 -0
package/README.md +263 -0
package/SECURITY.md +21 -0
package/banner.png +0 -0
package/package.json +25 -0
package/plugin.json +8 -0
package/scripts/update_skills.js +75 -0
package/skills/ai-llm-integration-expert/SKILL.md +162 -0
package/skills/api-design-expert/SKILL.md +310 -0
package/skills/app-analyzer-optimizer/SKILL.md +189 -0
package/skills/asisten_ramah/SKILL.md +41 -0
package/skills/authentication-identity-expert/SKILL.md +45 -0
package/skills/auto-doc-updater/SKILL.md +204 -0
package/skills/bootstrap-to-modern/SKILL.md +87 -0
package/skills/brainstorming/SKILL.md +353 -0
package/skills/bun-runtime-expert/SKILL.md +211 -0
package/skills/ci-cd-devops-architect/SKILL.md +45 -0
package/skills/cloud-hosting-expert/SKILL.md +244 -0
package/skills/coderabbit/SKILL.md +192 -0
package/skills/data-telemetry-expert/SKILL.md +213 -0
package/skills/database-orm-expert/SKILL.md +294 -0
package/skills/design-system-architect/SKILL.md +243 -0
package/skills/e2e-testing-expert/SKILL.md +315 -0
package/skills/event-driven-architect/SKILL.md +81 -0
package/skills/firebase-security-expert/SKILL.md +195 -0
package/skills/fullstack-expert/SKILL.md +202 -0
package/skills/fullstack-expert/references/api_design_guide.md +466 -0
package/skills/fullstack-expert/references/devops_infrastructure.md +477 -0
package/skills/fullstack-expert/references/multi_language_backend.md +528 -0
package/skills/fullstack-expert/references/system_design_patterns.md +358 -0
package/skills/fullstack-expert/scripts/api_contract_validator.py +253 -0
package/skills/fullstack-expert/scripts/architecture_analyzer.py +326 -0
package/skills/gemini-agent-booster/SKILL.md +135 -0
package/skills/global-a11y-i18n-expert/SKILL.md +81 -0
package/skills/go-programming-expert/SKILL.md +295 -0
package/skills/hig/SKILL.md +188 -0
package/skills/js-backend-expert/SKILL.md +192 -0
package/skills/mcp-server-architect/SKILL.md +194 -0
package/skills/mobile-expo-expert/SKILL.md +186 -0
package/skills/monday-design-aesthetic/SKILL.md +67 -0
package/skills/monorepo-architect/SKILL.md +227 -0
package/skills/mpa-orchestrator/SKILL.md +101 -0
package/skills/multi-agent-orchestration/SKILL.md +234 -0
package/skills/multiple-entry-points/SKILL.md +55 -0
package/skills/mvc-expert/SKILL.md +231 -0
package/skills/payment-gateway-expert/SKILL.md +45 -0
package/skills/performance-web-vitals/SKILL.md +332 -0
package/skills/prd-architect/SKILL.md +191 -0
package/skills/production-ready-hardener/SKILL.md +469 -0
package/skills/production-ready-hardener/references/performance_optimization.md +441 -0
package/skills/production-ready-hardener/references/production_checklist.md +161 -0
package/skills/production-ready-hardener/references/security_hardening_guide.md +379 -0
package/skills/production-ready-hardener/scripts/production_readiness_scanner.py +875 -0
package/skills/python-programming-expert/SKILL.md +271 -0
package/skills/realtime-collaboration-expert/SKILL.md +45 -0
package/skills/rust-programming-expert/SKILL.md +235 -0
package/skills/saas-billing/SKILL.md +377 -0
package/skills/saas-multi-tenant/SKILL.md +237 -0
package/skills/saas-mvp-launcher/SKILL.md +231 -0
package/skills/saas-transformer/SKILL.md +446 -0
package/skills/saas-transformer/references/billing_integration_guide.md +401 -0
package/skills/saas-transformer/references/feature_gating_patterns.md +137 -0
package/skills/saas-transformer/references/saas_transformation_checklist.md +121 -0
package/skills/saas-transformer/scripts/saas_transformation_scanner.py +254 -0
package/skills/scalability-clean-code/SKILL.md +229 -0
package/skills/secure-fuzz-testing/SKILL.md +201 -0
package/skills/senior-frontend/SKILL.md +161 -0
package/skills/senior-frontend/references/frontend_best_practices.md +806 -0
package/skills/senior-frontend/references/nextjs_optimization_guide.md +724 -0
package/skills/senior-frontend/references/react_patterns.md +746 -0
package/skills/senior-frontend/scripts/bundle_analyzer.py +407 -0
package/skills/senior-frontend/scripts/component_generator.py +329 -0
package/skills/senior-frontend/scripts/frontend_scaffolder.py +1005 -0
package/skills/senior-fullstack/SKILL.md +167 -0
package/skills/senior-fullstack/references/architecture_patterns.md +160 -0
package/skills/senior-fullstack/references/development_workflows.md +222 -0
package/skills/senior-fullstack/references/tech_stack_guide.md +190 -0
package/skills/senior-fullstack/scripts/code_quality_analyzer.py +114 -0
package/skills/senior-fullstack/scripts/fullstack_scaffolder.py +114 -0
package/skills/senior-fullstack/scripts/project_scaffolder.py +114 -0
package/skills/seo/SKILL.md +225 -0
package/skills/seo/references/cwv-thresholds.md +108 -0
package/skills/seo/references/eeat-framework.md +214 -0
package/skills/seo/references/quality-gates.md +155 -0
package/skills/seo/references/schema-types.md +118 -0
package/skills/seo-aeo-landing-page-writer/SKILL.md +97 -0
package/skills/seo-geo/SKILL.md +188 -0
package/skills/session-handoff-resume/SKILL.md +158 -0
package/skills/skill_baru/SKILL.md +147 -0
package/skills/spa-orchestrator/SKILL.md +288 -0
package/skills/state-management-expert/SKILL.md +272 -0
package/skills/supabase-migration/SKILL.md +45 -0
package/skills/supabase-security-expert/SKILL.md +243 -0
package/skills/tailwind-expert/SKILL.md +188 -0
package/skills/tanstack-query-expert/SKILL.md +199 -0
package/skills/tauri-expert/SKILL.md +97 -0
package/skills/token-saver/SKILL.md +111 -0
package/skills/typescript-expert/SKILL.md +279 -0
package/skills/ui-components-expert/SKILL.md +63 -0
package/skills/ui-ux-pro-max/SKILL.md +201 -0
package/skills/ui-ux-pro-max/data/charts.csv +26 -0
package/skills/ui-ux-pro-max/data/colors.csv +97 -0
package/skills/ui-ux-pro-max/data/icons.csv +101 -0
package/skills/ui-ux-pro-max/data/landing.csv +31 -0
package/skills/ui-ux-pro-max/data/products.csv +97 -0
package/skills/ui-ux-pro-max/data/prompts.csv +24 -0
package/skills/ui-ux-pro-max/data/react-performance.csv +45 -0
package/skills/ui-ux-pro-max/data/stacks/flutter.csv +53 -0
package/skills/ui-ux-pro-max/data/stacks/html-tailwind.csv +56 -0
package/skills/ui-ux-pro-max/data/stacks/nextjs.csv +53 -0
package/skills/ui-ux-pro-max/data/stacks/nuxt-ui.csv +51 -0
package/skills/ui-ux-pro-max/data/stacks/nuxtjs.csv +59 -0
package/skills/ui-ux-pro-max/data/stacks/react-native.csv +52 -0
package/skills/ui-ux-pro-max/data/stacks/react.csv +54 -0
package/skills/ui-ux-pro-max/data/stacks/shadcn.csv +61 -0
package/skills/ui-ux-pro-max/data/stacks/svelte.csv +54 -0
package/skills/ui-ux-pro-max/data/stacks/swiftui.csv +51 -0
package/skills/ui-ux-pro-max/data/stacks/vue.csv +50 -0
package/skills/ui-ux-pro-max/data/styles.csv +59 -0
package/skills/ui-ux-pro-max/data/typography.csv +58 -0
package/skills/ui-ux-pro-max/data/ui-reasoning.csv +101 -0
package/skills/ui-ux-pro-max/data/ux-guidelines.csv +100 -0
package/skills/ui-ux-pro-max/data/web-interface.csv +31 -0
package/skills/ui-ux-pro-max/scripts/__pycache__/core.cpython-310.pyc +0 -0
package/skills/ui-ux-pro-max/scripts/__pycache__/core.cpython-312.pyc +0 -0
package/skills/ui-ux-pro-max/scripts/__pycache__/design_system.cpython-310.pyc +0 -0
package/skills/ui-ux-pro-max/scripts/__pycache__/design_system.cpython-312.pyc +0 -0
package/skills/ui-ux-pro-max/scripts/core.py +257 -0
package/skills/ui-ux-pro-max/scripts/design_system.py +493 -0
package/skills/ui-ux-pro-max/scripts/search.py +81 -0
package/skills/ui_ux_expert/SKILL.md +114 -0
package/skills/vibe-code-gardener/SKILL.md +173 -0
package/skills/web-scraper/SKILL.md +205 -0
package/skills/web-scraper/references/data-transforms.md +397 -0
package/skills/web-scraper/references/extraction-patterns.md +475 -0
package/skills/web-scraper/references/output-templates.md +481 -0
package/skills/zero-to-prod-orchestrator/SKILL.md +180 -0

package/skills/production-ready-hardener/references/performance_optimization.md ADDED Viewed

@@ -0,0 +1,441 @@
+# Performance Optimization Guide
+## Overview
+This guide provides concrete performance optimization patterns for production applications. It covers frontend performance (Core Web Vitals), backend optimization (database, caching, API), and infrastructure tuning.
+---
+## 1. Core Web Vitals Optimization
+### LCP (Largest Contentful Paint) < 2.5s
+```typescript
+// app/layout.tsx — Font optimization
+import { Inter } from 'next/font/google';
+const inter = Inter({
+  subsets: ['latin'],
+  display: 'swap', // Prevent FOIT (Flash of Invisible Text)
+  preload: true,
+  variable: '--font-inter',
+});
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en" className={inter.variable}>
+      <body>{children}</body>
+    </html>
+  );
+}
+```
+```typescript
+// components/hero-image.tsx — Image optimization
+import Image from 'next/image';
+export function HeroImage() {
+  return (
+    <Image
+      src="/hero.webp"
+      alt="Product hero image"
+      width={1200}
+      height={630}
+      priority          // Preload above-the-fold images
+      sizes="(max-width: 768px) 100vw, (max-width: 1200px) 50vw, 1200px"
+      quality={85}
+      placeholder="blur"
+      blurDataURL="data:image/jpeg;base64,/9j/4AAQ..."  // Base64 placeholder
+    />
+  );
+}
+```
+### INP (Interaction to Next Paint) < 200ms
+```typescript
+// Pattern: Defer expensive computations
+'use client';
+import { useTransition, useState } from 'react';
+export function SearchResults() {
+  const [query, setQuery] = useState('');
+  const [results, setResults] = useState<Product[]>([]);
+  const [isPending, startTransition] = useTransition();
+  function handleSearch(value: string) {
+    setQuery(value); // Urgent: update input immediately
+    startTransition(() => {
+      // Non-urgent: defer expensive filtering
+      const filtered = allProducts.filter(p =>
+        p.name.toLowerCase().includes(value.toLowerCase())
+      );
+      setResults(filtered);
+    });
+  }
+  return (
+    <div>
+      <input
+        value={query}
+        onChange={(e) => handleSearch(e.target.value)}
+        placeholder="Search products..."
+      />
+      {isPending ? <Skeleton /> : <ProductGrid products={results} />}
+    </div>
+  );
+}
+```
+### CLS (Cumulative Layout Shift) < 0.1
+```css
+/* Prevent layout shifts with explicit dimensions */
+.hero-image {
+  aspect-ratio: 16 / 9;
+  width: 100%;
+  height: auto;
+}
+/* Reserve space for dynamic content */
+.ad-slot {
+  min-height: 250px;
+  contain: layout;
+}
+/* Prevent font swap shifts */
+@font-face {
+  font-family: 'Inter';
+  font-display: swap;
+  size-adjust: 100%;
+  ascent-override: 90%;
+  descent-override: 20%;
+  line-gap-override: 0%;
+}
+```
+---
+## 2. Bundle Optimization
+### Dynamic Imports & Code Splitting
+```typescript
+// Lazy load heavy components
+import dynamic from 'next/dynamic';
+const RichTextEditor = dynamic(
+  () => import('@/components/rich-text-editor'),
+  {
+    loading: () => <Skeleton className="h-64 w-full" />,
+    ssr: false, // Client-only component
+  }
+);
+const ChartDashboard = dynamic(
+  () => import('@/components/chart-dashboard'),
+  {
+    loading: () => <Skeleton className="h-96 w-full" />,
+  }
+);
+```
+### Tree-Shaking Friendly Imports
+```typescript
+// ❌ Bad: Imports entire library
+import _ from 'lodash';
+const result = _.groupBy(items, 'category');
+// ✅ Good: Import only what you need
+import groupBy from 'lodash/groupBy';
+const result = groupBy(items, 'category');
+// ✅ Best: Use native alternatives
+const result = Object.groupBy(items, (item) => item.category);
+```
+### Bundle Analysis
+```bash
+# Next.js bundle analyzer
+npm install @next/bundle-analyzer
+# next.config.ts
+import withBundleAnalyzer from '@next/bundle-analyzer';
+const config = withBundleAnalyzer({ enabled: process.env.ANALYZE === 'true' })({
+  // ... your config
+});
+# Run analysis
+ANALYZE=true npm run build
+```
+---
+## 3. Database Performance
+### Query Optimization Patterns
+```sql
+-- 1. Add compound indexes for common query patterns
+CREATE INDEX idx_orders_user_status_created
+  ON orders (user_id, status, created_at DESC);
+-- 2. Use partial indexes for filtered queries
+CREATE INDEX idx_orders_pending
+  ON orders (created_at DESC)
+  WHERE status = 'pending';
+-- 3. Use covering indexes to avoid table lookups
+CREATE INDEX idx_products_catalog
+  ON products (category_id, status)
+  INCLUDE (name, price, image_url);
+-- 4. Profile slow queries
+SET log_min_duration_statement = 100; -- Log queries > 100ms
+-- 5. EXPLAIN ANALYZE to verify index usage
+EXPLAIN (ANALYZE, BUFFERS, FORMAT TEXT)
+SELECT * FROM orders
+WHERE user_id = 'user_123' AND status = 'pending'
+ORDER BY created_at DESC
+LIMIT 20;
+```
+### Connection Pooling Configuration
+```typescript
+// lib/db/index.ts — Optimized for serverless
+import { drizzle } from 'drizzle-orm/postgres-js';
+import postgres from 'postgres';
+import * as schema from './schema';
+const globalForDb = globalThis as unknown as {
+  conn: postgres.Sql | undefined;
+};
+const connectionString = process.env.DATABASE_URL!;
+const client = globalForDb.conn ?? postgres(connectionString, {
+  max: parseInt(process.env.DB_POOL_SIZE ?? '10'),
+  idle_timeout: 20,       // Close idle connections after 20s
+  connect_timeout: 10,    // Fail fast on connection issues
+  prepare: false,         // Required for transaction poolers (PgBouncer/Supavisor)
+  max_lifetime: 60 * 30,  // Recycle connections every 30 min
+});
+if (process.env.NODE_ENV !== 'production') {
+  globalForDb.conn = client;
+}
+export const db = drizzle(client, { schema });
+```
+---
+## 4. Caching Strategy
+### Multi-Tier Caching Architecture
+```
+Request Flow:
+  Client → Browser Cache → CDN Edge → App Cache (Redis) → Database
+           (immutable)     (30s-1h)    (5min-1h)          (source)
+```
+### Application Cache (Redis)
+```typescript
+// lib/cache.ts
+import { Redis } from '@upstash/redis';
+const redis = new Redis({
+  url: process.env.UPSTASH_REDIS_REST_URL!,
+  token: process.env.UPSTASH_REDIS_REST_TOKEN!,
+});
+interface CacheConfig {
+  ttl: number;      // Time to live in seconds
+  staleWhileRevalidate?: number; // Serve stale while refreshing
+}
+export async function cached<T>(
+  key: string,
+  fetcher: () => Promise<T>,
+  config: CacheConfig = { ttl: 300 }
+): Promise<T> {
+  // Try cache first
+  const cached = await redis.get<{ data: T; timestamp: number }>(key);
+  if (cached) {
+    const age = (Date.now() - cached.timestamp) / 1000;
+    // Fresh cache — return immediately
+    if (age < config.ttl) {
+      return cached.data;
+    }
+    // Stale but within revalidation window — return stale, refresh in background
+    if (config.staleWhileRevalidate && age < config.ttl + config.staleWhileRevalidate) {
+      // Fire-and-forget background refresh
+      refreshCache(key, fetcher, config.ttl).catch(console.error);
+      return cached.data;
+    }
+  }
+  // Cache miss or expired — fetch fresh data
+  return refreshCache(key, fetcher, config.ttl);
+}
+async function refreshCache<T>(key: string, fetcher: () => Promise<T>, ttl: number): Promise<T> {
+  const data = await fetcher();
+  await redis.set(key, { data, timestamp: Date.now() }, { ex: ttl * 2 });
+  return data;
+}
+// Cache invalidation helper
+export async function invalidateCache(pattern: string): Promise<void> {
+  const keys = await redis.keys(pattern);
+  if (keys.length > 0) {
+    await redis.del(...keys);
+  }
+}
+// Usage
+const products = await cached(
+  `products:category:${categoryId}`,
+  () => db.select().from(products).where(eq(products.categoryId, categoryId)),
+  { ttl: 300, staleWhileRevalidate: 60 }
+);
+```
+### HTTP Cache Headers
+```typescript
+// next.config.ts — Static asset caching
+const config: NextConfig = {
+  async headers() {
+    return [
+      {
+        // Immutable static assets (hashed filenames)
+        source: '/_next/static/(.*)',
+        headers: [
+          {
+            key: 'Cache-Control',
+            value: 'public, max-age=31536000, immutable',
+          },
+        ],
+      },
+      {
+        // Public images
+        source: '/images/(.*)',
+        headers: [
+          {
+            key: 'Cache-Control',
+            value: 'public, max-age=86400, stale-while-revalidate=43200',
+          },
+        ],
+      },
+      {
+        // API responses — no cache by default
+        source: '/api/(.*)',
+        headers: [
+          {
+            key: 'Cache-Control',
+            value: 'no-store, no-cache, must-revalidate',
+          },
+        ],
+      },
+    ];
+  },
+};
+```
+---
+## 5. API Performance
+### Request Batching & Deduplication
+```typescript
+// lib/data-loader.ts — Batch database queries
+import DataLoader from 'dataloader';
+import { db } from './db';
+import { users } from './db/schema';
+import { inArray } from 'drizzle-orm';
+// Create per-request loader (do NOT share across requests)
+export function createUserLoader() {
+  return new DataLoader<string, typeof users.$inferSelect | null>(
+    async (ids) => {
+      const results = await db
+        .select()
+        .from(users)
+        .where(inArray(users.id, [...ids]));
+      const map = new Map(results.map(u => [u.id, u]));
+      return ids.map(id => map.get(id) ?? null);
+    },
+    { maxBatchSize: 100, cache: true }
+  );
+}
+```
+### Response Compression & Streaming
+```typescript
+// app/api/export/route.ts — Stream large responses
+export async function GET() {
+  const encoder = new TextEncoder();
+  const stream = new ReadableStream({
+    async start(controller) {
+      // Stream header
+      controller.enqueue(encoder.encode('['));
+      let first = true;
+      const cursor = db.select().from(records).prepare('export_cursor');
+      for await (const batch of cursor.execute()) {
+        for (const record of batch) {
+          if (!first) controller.enqueue(encoder.encode(','));
+          controller.enqueue(encoder.encode(JSON.stringify(record)));
+          first = false;
+        }
+      }
+      controller.enqueue(encoder.encode(']'));
+      controller.close();
+    },
+  });
+  return new Response(stream, {
+    headers: {
+      'Content-Type': 'application/json',
+      'Transfer-Encoding': 'chunked',
+    },
+  });
+}
+```
+---
+## Performance Budget
+| Metric | Target | Tool |
+|--------|--------|------|
+| LCP | < 2.5s | Lighthouse, CrUX |
+| INP | < 200ms | Lighthouse, CrUX |
+| CLS | < 0.1 | Lighthouse, CrUX |
+| TTFB | < 800ms | WebPageTest |
+| Total JS | < 200KB gzip | Bundle analyzer |
+| Total CSS | < 50KB gzip | Bundle analyzer |
+| Lighthouse | ≥ 90 | Lighthouse CI |
+| API p99 | < 500ms | APM (Sentry/Datadog) |
+| DB query p99 | < 100ms | EXPLAIN ANALYZE |
+---
+## Conclusion
+Performance is not an optimization — it's a feature. Measure before optimizing, focus on real user metrics (Core Web Vitals), and implement caching at every layer. The fastest request is the one you never make.

package/skills/production-ready-hardener/references/production_checklist.md ADDED Viewed

@@ -0,0 +1,161 @@
+# Production Readiness Checklist
+## Overview
+This is a condensed, actionable checklist for production readiness validation. Use this as a quick-reference during the final review before deployment.
+---
+## 🔴 Critical Blockers (Must Fix)
+These items are **deployment blockers**. Do NOT deploy if any of these fail.
+### Security
+- [ ] **RLS enabled on all public tables** (Supabase/PostgreSQL)
+- [ ] **Firebase Security Rules are strict** (no `allow read, write: if true`)
+- [ ] **No secrets in source code** — grep for API keys, passwords, tokens
+- [ ] **`.env` in `.gitignore`** — verified not committed
+- [ ] **HTTPS enforced** — HSTS header active
+- [ ] **Authentication on all protected routes** — verified with unauthenticated requests
+- [ ] **SQL injection prevention** — all queries parameterized
+- [ ] **CORS allow-list configured** — no wildcard `*` in production
+### Data Integrity
+- [ ] **Database backups configured** — verified restore procedure works
+- [ ] **Migration files in sync** — no pending migrations
+- [ ] **Foreign key constraints** — referential integrity enforced
+- [ ] **Input validation** — all API endpoints validate request bodies
+### Reliability
+- [ ] **Health check endpoints** respond correctly (`/healthz`, `/readyz`)
+- [ ] **Error handling** — all endpoints return structured errors (not stack traces)
+- [ ] **Graceful shutdown** — SIGTERM handled, connections drained
+- [ ] **Circuit breakers** on external service calls (payment, email, etc.)
+---
+## 🟡 High Priority (Should Fix)
+### Frontend
+- [ ] **Error boundaries** on all page segments
+- [ ] **Loading states** — Suspense with skeleton UIs
+- [ ] **Mobile responsive** — tested on 320px, 768px, 1024px, 1440px
+- [ ] **Accessibility** — keyboard navigation, screen reader tested
+- [ ] **SEO meta tags** — title, description, OG tags on all pages
+- [ ] **Image optimization** — WebP/AVIF, lazy loading, proper sizes
+### Backend
+- [ ] **Rate limiting** active on public API endpoints
+- [ ] **Connection pooling** configured for database
+- [ ] **Request timeouts** set on all external calls
+- [ ] **Structured logging** — JSON format with correlation IDs
+- [ ] **Background job queues** for heavy operations
+### Testing
+- [ ] **Unit test coverage ≥ 80%**
+- [ ] **E2E tests** pass for critical flows
+- [ ] **CI pipeline** runs on every PR
+- [ ] **No TypeScript errors** — `tsc --noEmit` passes
+### DevOps
+- [ ] **CI/CD pipeline** — automated lint → test → build → deploy
+- [ ] **Docker multi-stage build** — optimized image size
+- [ ] **Zero-downtime deployment** strategy configured
+- [ ] **Monitoring** — error tracking (Sentry) configured
+- [ ] **Rollback** — ability to revert within 5 minutes
+---
+## 🔵 Recommended (Nice to Have)
+### Performance
+- [ ] **Lighthouse score ≥ 90** on all key pages
+- [ ] **CDN** for static assets
+- [ ] **Multi-tier caching** — Redis cache layer
+- [ ] **Database read replicas** for read-heavy workloads
+- [ ] **Bundle analysis** — no unused large dependencies
+### Quality
+- [ ] **CodeRabbit** configured on repository
+- [ ] **Fuzz testing** on parsers and validators
+- [ ] **Visual regression testing** configured
+- [ ] **Load testing** — k6/Artillery baseline established
+### Documentation
+- [ ] **CHANGELOG.md** up-to-date
+- [ ] **BLUEPRINT.md** with architecture diagram
+- [ ] **README.md** — setup, deployment, and architecture guide
+- [ ] **Runbook** — incident response procedures documented
+- [ ] **API documentation** — OpenAPI spec or equivalent
+---
+## Quick Verification Commands
+### Security Scan
+```bash
+# JavaScript/TypeScript
+npm audit --production
+npx audit-ci --config audit-ci.json
+# Python
+pip audit
+safety check
+# Rust
+cargo audit
+# Go
+govulncheck ./...
+# Search for hardcoded secrets
+grep -rn "sk_live\|sk_test\|password\|secret\|api_key" src/ --include="*.ts" --include="*.tsx" --include="*.js"
+```
+### Build & Type Check
+```bash
+# TypeScript
+npx tsc --noEmit
+npm run build
+# Lint
+npm run lint -- --max-warnings 0
+# Test
+npm run test -- --coverage --watchAll=false
+```
+### Docker
+```bash
+# Build and verify
+docker build -t app:latest .
+docker run --rm app:latest node -e "console.log('OK')"
+# Check image size
+docker images app:latest --format "table {{.Repository}}\t{{.Tag}}\t{{.Size}}"
+```
+### Database
+```bash
+# Check pending migrations
+npx drizzle-kit check  # or npx prisma migrate status
+# Verify RLS (Supabase/PostgreSQL)
+psql -c "SELECT tablename, rowsecurity FROM pg_tables WHERE schemaname = 'public';"
+```
+---
+## Go/No-Go Decision Matrix
+| Category | Critical Issues | Decision |
+|----------|----------------|----------|
+| Security | 0 | ✅ GO |
+| Security | 1+ | 🔴 NO-GO |
+| Data Integrity | 0 | ✅ GO |
+| Data Integrity | 1+ | 🔴 NO-GO |
+| Reliability | 0 | ✅ GO |
+| Reliability | 1+ | 🟡 Conditional (with risk acceptance) |
+| Performance | Any | ✅ GO (fix in next sprint) |
+| Documentation | Any | ✅ GO (fix within 1 week) |
+**Rule: Zero critical security and data integrity issues = GO. Everything else is negotiable with documented risk acceptance.**