vibes-plug 2.11.0 → 3.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude/rules/vibes-plug-core.md +5 -0
- package/.cursor/rules/vibes-plug-core.mdc +8 -3
- package/.cursorrules +9 -3
- package/AGENTS.md +25 -4
- package/CHANGELOG.md +151 -0
- package/CLAUDE.md +15 -8
- package/README.md +216 -641
- package/bin/vibes.mjs +1104 -0
- package/index.js +1 -1
- package/package.json +11 -3
- package/plugin.json +4 -3
- package/scripts/check-anti-slop.js +53 -0
- package/scripts/check-anti-slop.mjs +53 -0
- package/scripts/generate_swarm_gif.py +2 -2
- package/scripts/install.js +3 -1
- package/scripts/update_skills.js +1 -1
- package/scripts/update_skills.mjs +86 -0
- package/scripts/validate-skills.mjs +111 -0
- package/skills/accessibility-testing-expert/SKILL.md +117 -116
- package/skills/affective-computing-emotion-ai/SKILL.md +83 -0
- package/skills/agentic-coding-workflow-expert/SKILL.md +297 -0
- package/skills/agentic-memory-architect/SKILL.md +52 -0
- package/skills/agentic-micro-economy-architect/SKILL.md +92 -0
- package/skills/ai-llm-integration-expert/SKILL.md +330 -187
- package/skills/ai-media-generation-expert/SKILL.md +173 -172
- package/skills/ai-prompt-engineering-expert/SKILL.md +170 -50
- package/skills/ai-safety-governance-expert/SKILL.md +223 -0
- package/skills/angular-expert/SKILL.md +149 -148
- package/skills/anti-slop/SKILL.md +134 -0
- package/skills/api-design-expert/SKILL.md +4 -3
- package/skills/api-gateway-proxy-expert/SKILL.md +3 -2
- package/skills/app-analyzer-optimizer/SKILL.md +4 -3
- package/skills/apple-ecosystem-expert/SKILL.md +6 -5
- package/skills/astro-framework-expert/SKILL.md +201 -200
- package/skills/async-queue-temporal-expert/SKILL.md +218 -240
- package/skills/authentication-identity-expert/SKILL.md +79 -184
- package/skills/autonomous-red-teamer/SKILL.md +338 -203
- package/skills/autonomous-tdd-debugger/SKILL.md +6 -5
- package/skills/biome-linter-formatter-expert/SKILL.md +90 -89
- package/skills/blockchain-web3-expert/SKILL.md +116 -115
- package/skills/brainstorming/SKILL.md +392 -377
- package/skills/browser-automation-expert/SKILL.md +260 -222
- package/skills/bun-runtime-expert/SKILL.md +5 -4
- package/skills/chatbot-messaging-expert/SKILL.md +115 -114
- package/skills/ci-cd-devops-architect/SKILL.md +3 -2
- package/skills/cloud-hosting-expert/SKILL.md +5 -4
- package/skills/coderabbit/SKILL.md +5 -4
- package/skills/compliance-gdpr-privacy-expert/SKILL.md +3 -2
- package/skills/composable-mach-architect/SKILL.md +338 -0
- package/skills/cron-scheduler-expert/SKILL.md +5 -4
- package/skills/data-pipeline-etl-expert/SKILL.md +3 -2
- package/skills/data-telemetry-expert/SKILL.md +5 -4
- package/skills/data-visualization-expert/SKILL.md +155 -154
- package/skills/database-orm-expert/SKILL.md +102 -240
- package/skills/deep-research-analyst/SKILL.md +182 -0
- package/skills/dependency-upgrade-migrator/SKILL.md +11 -10
- package/skills/design-system-architect/SKILL.md +34 -3
- package/skills/desktop-electron-expert/SKILL.md +129 -128
- package/skills/documentation-site-expert/SKILL.md +60 -59
- package/skills/doku-mcp-server/SKILL.md +5 -4
- package/skills/doku-payment-gateway/SKILL.md +250 -232
- package/skills/domain-driven-design-expert/SKILL.md +3 -2
- package/skills/e2e-testing-expert/SKILL.md +5 -4
- package/skills/ecommerce-expert/SKILL.md +88 -87
- package/skills/email-notification-expert/SKILL.md +35 -7
- package/skills/ephemeral-generative-ui-architect/SKILL.md +88 -0
- package/skills/error-resilience-expert/SKILL.md +26 -4
- package/skills/event-driven-architect/SKILL.md +5 -4
- package/skills/feature-flag-analytics-expert/SKILL.md +3 -2
- package/skills/file-upload-media-expert/SKILL.md +5 -4
- package/skills/firebase-security-expert/SKILL.md +5 -4
- package/skills/form-validation-expert/SKILL.md +7 -6
- package/skills/frontier-ai-models-expert/SKILL.md +116 -0
- package/skills/fullstack-expert/SKILL.md +68 -144
- package/skills/gemini-agent-booster/SKILL.md +248 -172
- package/skills/geospatial-maps-expert/SKILL.md +81 -80
- package/skills/global-a11y-i18n-expert/SKILL.md +5 -4
- package/skills/glsl-shader-expert/SKILL.md +155 -71
- package/skills/go-programming-expert/SKILL.md +5 -4
- package/skills/graph-rag-knowledge-expert/SKILL.md +201 -159
- package/skills/graphql-apollo-expert/SKILL.md +5 -4
- package/skills/headless-cms-expert/SKILL.md +182 -181
- package/skills/hig/SKILL.md +5 -4
- package/skills/js-backend-expert/SKILL.md +219 -218
- package/skills/legacy-code-translator/SKILL.md +6 -5
- package/skills/llm-finops-router/SKILL.md +52 -0
- package/skills/local-slm-edge-ai-expert/SKILL.md +168 -167
- package/skills/logging-error-tracking-expert/SKILL.md +5 -4
- package/skills/mcp-server-architect/SKILL.md +316 -294
- package/skills/micro-frontend-architect/SKILL.md +5 -4
- package/skills/mobile-expo-expert/SKILL.md +5 -4
- package/skills/modern-css-native-expert/SKILL.md +190 -189
- package/skills/monorepo-architect/SKILL.md +5 -4
- package/skills/mpa-orchestrator/SKILL.md +41 -4
- package/skills/multi-agent-orchestration/SKILL.md +388 -254
- package/skills/mvc-expert/SKILL.md +5 -4
- package/skills/n8n-automation-expert/SKILL.md +90 -89
- package/skills/nextjs-app-router-expert/SKILL.md +3 -2
- package/skills/openapi-swagger-codegen-expert/SKILL.md +4 -3
- package/skills/payment-gateway-expert/SKILL.md +131 -128
- package/skills/pdf-document-generation-expert/SKILL.md +92 -91
- package/skills/performance-web-vitals/SKILL.md +5 -4
- package/skills/post-quantum-crypto-migrator/SKILL.md +3 -2
- package/skills/prd-architect/SKILL.md +85 -109
- package/skills/proactive-background-watcher/SKILL.md +5 -4
- package/skills/production-ready-hardener/SKILL.md +25 -27
- package/skills/pwa-offline-first-expert/SKILL.md +227 -185
- package/skills/pydantic-ai-expert/SKILL.md +162 -0
- package/skills/python-programming-expert/SKILL.md +5 -4
- package/skills/rate-limit-abuse-prevention/SKILL.md +5 -4
- package/skills/realtime-collaboration-expert/SKILL.md +3 -2
- package/skills/rich-text-editor-expert/SKILL.md +178 -177
- package/skills/rust-programming-expert/SKILL.md +5 -4
- package/skills/saas-architect/SKILL.md +155 -0
- package/skills/saas-billing/SKILL.md +394 -382
- package/skills/saas-multi-tenant/SKILL.md +7 -6
- package/skills/scalability-clean-code/SKILL.md +5 -4
- package/skills/search-engine-expert/SKILL.md +90 -89
- package/skills/self-healing-cloud-orchestrator/SKILL.md +3 -2
- package/skills/senior-frontend/SKILL.md +21 -18
- package/skills/senior-frontend/scripts/frontend_scaffolder.py +1 -1
- package/skills/seo/SKILL.md +4 -4
- package/skills/session-memory-manager/SKILL.md +129 -0
- package/skills/solidjs-expert/SKILL.md +81 -80
- package/skills/spa-orchestrator/SKILL.md +5 -4
- package/skills/sse-websocket-streaming-expert/SKILL.md +3 -2
- package/skills/state-management-expert/SKILL.md +5 -4
- package/skills/supabase-security-expert/SKILL.md +5 -4
- package/skills/svelte-sveltekit-expert/SKILL.md +92 -91
- package/skills/svg-animation-motion-expert/SKILL.md +3 -2
- package/skills/synthetic-data-finetuning-expert/SKILL.md +156 -0
- package/skills/tailwind-expert/SKILL.md +62 -5
- package/skills/tanstack-query-expert/SKILL.md +5 -4
- package/skills/tauri-expert/SKILL.md +5 -4
- package/skills/typescript-expert/SKILL.md +5 -4
- package/skills/ui-ux-pro-max/SKILL.md +7 -4
- package/skills/vector-db-rag-expert/SKILL.md +209 -208
- package/skills/vercel-ai-sdk-expert/SKILL.md +226 -0
- package/skills/voice-ai-realtime-agent/SKILL.md +243 -202
- package/skills/vue-frontend-expert/SKILL.md +5 -4
- package/skills/wasm-edge-computing-expert/SKILL.md +3 -2
- package/skills/web-3d-graphics-expert/SKILL.md +259 -82
- package/skills/web-game-engine-expert/SKILL.md +278 -50
- package/skills/web-scraper/SKILL.md +158 -157
- package/skills/website-design-cloner/SKILL.md +5 -4
- package/skills/webxr-ar-vr-expert/SKILL.md +105 -65
- package/skills/wordpress-headless-expert/SKILL.md +145 -144
- package/skills/zero-tech-debt-auditor/SKILL.md +115 -0
- package/skills/zero-to-prod-orchestrator/SKILL.md +281 -227
- package/skills/zero-trust-secret-vault/SKILL.md +3 -2
- package/BLUEPRINT.md +0 -309
- package/skills/ai-cost-token-optimizer/SKILL.md +0 -82
- package/skills/ai-evals-benchmark-expert/SKILL.md +0 -188
- package/skills/asisten-ramah/SKILL.md +0 -47
- package/skills/auto-doc-updater/SKILL.md +0 -220
- package/skills/autonomous-chaos-monkey/SKILL.md +0 -63
- package/skills/background-jobs-queue-expert/SKILL.md +0 -235
- package/skills/bootstrap-to-modern/SKILL.md +0 -94
- package/skills/database-migration-versioning-expert/SKILL.md +0 -90
- package/skills/edge-serverless-db-expert/SKILL.md +0 -99
- package/skills/mcp-client-orchestrator/SKILL.md +0 -76
- package/skills/mobile-push-notification-expert/SKILL.md +0 -71
- package/skills/monday-design-aesthetic/SKILL.md +0 -73
- package/skills/multiple-entry-points/SKILL.md +0 -91
- package/skills/project-context-mapper/SKILL.md +0 -85
- package/skills/saas-mvp-launcher/SKILL.md +0 -260
- package/skills/saas-transformer/SKILL.md +0 -500
- package/skills/saas-transformer/references/billing_integration_guide.md +0 -401
- package/skills/secure-fuzz-testing/SKILL.md +0 -207
- package/skills/self-evolving-memory-graph/SKILL.md +0 -91
- package/skills/session-context-loader/SKILL.md +0 -83
- package/skills/session-handoff-resume/SKILL.md +0 -164
- package/skills/skill-baru/SKILL.md +0 -178
- package/skills/supabase-migration/SKILL.md +0 -91
- package/skills/token-saver/SKILL.md +0 -119
- package/skills/ui-components-expert/SKILL.md +0 -166
- package/skills/vibe-code-gardener/SKILL.md +0 -181
- package/skills/visual-qa-vision-agent/SKILL.md +0 -71
- /package/skills/{saas-transformer → saas-architect}/references/feature_gating_patterns.md +0 -0
- /package/skills/{saas-transformer → saas-architect}/references/saas_transformation_checklist.md +0 -0
- /package/skills/{saas-transformer → saas-architect}/scripts/saas_transformation_scanner.py +0 -0
|
@@ -0,0 +1,162 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: pydantic-ai-expert
|
|
3
|
+
description: "Expert guide for type-safe Python AI agent development with Pydantic AI — dependency injection, structured outputs, model-agnostic routing, and graph workflows / Panduan ahli pengembangan agen AI Python type-safe dengan Pydantic AI."
|
|
4
|
+
author: vibes-plug-swarm
|
|
5
|
+
version: "3.0.0"
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# Pydantic AI Expert (Type-Safe Python Agent Engineering)
|
|
9
|
+
|
|
10
|
+
[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
|
|
11
|
+
|
|
12
|
+
---
|
|
13
|
+
|
|
14
|
+
<a name="english"></a>
|
|
15
|
+
## English
|
|
16
|
+
|
|
17
|
+
### Orchestration & Integration
|
|
18
|
+
Connects and orchestrates with domain skills like `python-programming-expert`, `multi-agent-orchestration`, `ai-llm-integration-expert`, `ai-evals-benchmark-expert`, and `database-orm-expert` to engineer type-safe, resilient backend AI agents.
|
|
19
|
+
|
|
20
|
+
### Description
|
|
21
|
+
Production-grade guide for building enterprise AI agents using **Pydantic AI** (from the creators of Pydantic). Unlike untyped or fragile agent libraries, Pydantic AI provides strict static typing (`Agent[DepsType, ReturnType]`), first-class dependency injection (`RunContext[Deps]`), automatic tool parameter validation via Pydantic v2 schemas, model-agnostic provider switching (Anthropic, OpenAI, Gemini, Groq, Ollama), dynamic system prompts, and deterministic structured outputs.
|
|
22
|
+
|
|
23
|
+
**Swarm Synergy:** Within the **Backend & APIs Swarm**, this skill serves as the Lead Python Agent Engineer. It executes critical business operations, runs data pipelines, and integrates with SQL databases with compile-time type safety in Phase 4.
|
|
24
|
+
|
|
25
|
+
### Trigger Conditions
|
|
26
|
+
- Engineering Python-based autonomous agents requiring strict type safety and schema validation.
|
|
27
|
+
- Implementing dependency injection (passing database connections, API clients, or user sessions) into agent tools.
|
|
28
|
+
- Extracting guaranteed structured outputs from frontier reasoning models without JSON parsing errors.
|
|
29
|
+
- Designing multi-agent delegation or agent handoffs in Python microservices.
|
|
30
|
+
- Running unit tests and deterministic evals on agent logic using mock models (`TestModel`).
|
|
31
|
+
|
|
32
|
+
### Pydantic AI Architecture
|
|
33
|
+
|
|
34
|
+
```
|
|
35
|
+
┌─────────────────────────────────────────────────────────────┐
|
|
36
|
+
│ AGENT DEFINITION │
|
|
37
|
+
│ Agent[DatabaseDeps, AuditReport]( │
|
|
38
|
+
│ model='anthropic:claude-3-7-sonnet-latest', │
|
|
39
|
+
│ result_type=AuditReport, │
|
|
40
|
+
│ ) │
|
|
41
|
+
└──────────────────────────────┬──────────────────────────────┘
|
|
42
|
+
│
|
|
43
|
+
┌───────────────────────┴───────────────────────┐
|
|
44
|
+
▼ ▼
|
|
45
|
+
┌──────────────────────────────┐ ┌──────────────────────────────┐
|
|
46
|
+
│ DEPENDENCY INJECTION │ │ TOOL EXECUTION LOOP │
|
|
47
|
+
│ RunContext[DatabaseDeps] │ │ @agent.tool │
|
|
48
|
+
│ • Async DB connection pool │ │ • Auto Pydantic validation │
|
|
49
|
+
│ • Tenant & session auth │ │ • Structured error return │
|
|
50
|
+
└──────────────────────────────┘ └──────────────────────────────┘
|
|
51
|
+
│
|
|
52
|
+
▼
|
|
53
|
+
┌─────────────────────────────────────────────────────────────┐
|
|
54
|
+
│ DETERMINISTIC STRUCTURED RESULT │
|
|
55
|
+
│ result.data -> Pydantic BaseModel instance (Validated) │
|
|
56
|
+
└─────────────────────────────────────────────────────────────┘
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
### Core Implementation Guidelines
|
|
60
|
+
|
|
61
|
+
#### 1. Type-Safe Agent with Dependency Injection
|
|
62
|
+
Pass database pools or HTTP clients directly into tools without global state:
|
|
63
|
+
```python
|
|
64
|
+
from dataclasses import dataclass
|
|
65
|
+
import asyncpg
|
|
66
|
+
from pydantic import BaseModel, Field
|
|
67
|
+
from pydantic_ai import Agent, RunContext
|
|
68
|
+
|
|
69
|
+
@dataclass
|
|
70
|
+
class DatabaseDeps:
|
|
71
|
+
pool: asyncpg.Pool
|
|
72
|
+
tenant_id: str
|
|
73
|
+
|
|
74
|
+
class UserAnomalyReport(BaseModel):
|
|
75
|
+
user_id: str
|
|
76
|
+
risk_score: float = Field(ge=0.0, le=1.0)
|
|
77
|
+
anomalous_events: list[str]
|
|
78
|
+
action_recommended: str
|
|
79
|
+
|
|
80
|
+
# Typed agent: Agent[DependencyType, ResultType]
|
|
81
|
+
security_agent = Agent[DatabaseDeps, UserAnomalyReport](
|
|
82
|
+
model='google-gla:gemini-2.5-flash',
|
|
83
|
+
result_type=UserAnomalyReport,
|
|
84
|
+
system_prompt=(
|
|
85
|
+
"You are an automated SecOps auditor. Analyze the user access logs provided "
|
|
86
|
+
"and generate a strictly structured anomaly assessment."
|
|
87
|
+
),
|
|
88
|
+
)
|
|
89
|
+
|
|
90
|
+
@security_agent.system_prompt
|
|
91
|
+
async def add_tenant_context(ctx: RunContext[DatabaseDeps]) -> str:
|
|
92
|
+
return f"Active Tenant ID: {ctx.deps.tenant_id}. Only audit records matching this tenant."
|
|
93
|
+
|
|
94
|
+
@security_agent.tool
|
|
95
|
+
async def query_audit_logs(ctx: RunContext[DatabaseDeps], user_id: str, limit: int = 50) -> list[dict]:
|
|
96
|
+
"""Retrieve raw authentication events for a given user from the audit store."""
|
|
97
|
+
async with ctx.deps.pool.acquire() as conn:
|
|
98
|
+
rows = await conn.fetch(
|
|
99
|
+
"SELECT event_time, ip_address, action, status FROM audit_logs "
|
|
100
|
+
"WHERE tenant_id = $1 AND user_id = $2 ORDER BY event_time DESC LIMIT $3",
|
|
101
|
+
ctx.deps.tenant_id, user_id, limit
|
|
102
|
+
)
|
|
103
|
+
return [dict(r) for r in rows]
|
|
104
|
+
|
|
105
|
+
# Execution:
|
|
106
|
+
async def run_audit(pool: asyncpg.Pool, tenant_id: str, target_user: str) -> UserAnomalyReport:
|
|
107
|
+
deps = DatabaseDeps(pool=pool, tenant_id=tenant_id)
|
|
108
|
+
result = await security_agent.run(f"Audit user activity for {target_user}", deps=deps)
|
|
109
|
+
return result.data # Guaranteed instance of UserAnomalyReport
|
|
110
|
+
```
|
|
111
|
+
|
|
112
|
+
#### 2. Model-Agnostic Switching & Local SLM Fallback
|
|
113
|
+
Pydantic AI allows switching between cloud APIs and local Ollama models effortlessly:
|
|
114
|
+
```python
|
|
115
|
+
import os
|
|
116
|
+
from pydantic_ai.models.anthropic import AnthropicModel
|
|
117
|
+
from pydantic_ai.models.ollama import OllamaModel
|
|
118
|
+
|
|
119
|
+
def get_agent_model():
|
|
120
|
+
if os.getenv("ENV") == "production":
|
|
121
|
+
return AnthropicModel('claude-3-7-sonnet-20250219')
|
|
122
|
+
else:
|
|
123
|
+
# Zero cost local development with Ollama
|
|
124
|
+
return OllamaModel(model_name='qwen2.5-coder:7b')
|
|
125
|
+
```
|
|
126
|
+
|
|
127
|
+
#### 3. Deterministic Testing with `TestModel`
|
|
128
|
+
Write unit tests that verify tool invocations and structured output parsing without calling live LLMs:
|
|
129
|
+
```python
|
|
130
|
+
import pytest
|
|
131
|
+
from pydantic_ai.models.test import TestModel
|
|
132
|
+
|
|
133
|
+
@pytest.mark.asyncio
|
|
134
|
+
async def test_security_agent_tool_dispatch():
|
|
135
|
+
# TestModel can simulate deterministic responses or tool calls
|
|
136
|
+
test_model = TestModel(call_tools=['query_audit_logs'])
|
|
137
|
+
|
|
138
|
+
with security_agent.override(model=test_model):
|
|
139
|
+
deps = DatabaseDeps(pool=mock_pool, tenant_id="tenant_123")
|
|
140
|
+
result = await security_agent.run("Audit user 456", deps=deps)
|
|
141
|
+
assert result.data is not None
|
|
142
|
+
```
|
|
143
|
+
|
|
144
|
+
---
|
|
145
|
+
|
|
146
|
+
<a name="bahasa-indonesia"></a>
|
|
147
|
+
## Bahasa Indonesia
|
|
148
|
+
|
|
149
|
+
### Integrasi Orkestrasi
|
|
150
|
+
Terhubung dan mengorkestrasi skill domain yang relevan seperti `python-programming-expert`, `multi-agent-orchestration`, `ai-llm-integration-expert`, `ai-evals-benchmark-expert`, dan `database-orm-expert` untuk membangun agen AI backend yang aman secara tipe (*type-safe*) dan tangguh.
|
|
151
|
+
|
|
152
|
+
### Deskripsi
|
|
153
|
+
Panduan produksi untuk membangun agen AI kelas perusahaan menggunakan **Pydantic AI** (dari pembuat library Pydantic). Tidak seperti library agen yang tidak bertipe statis atau mudah mengalami galat runtime, Pydantic AI menyediakan sistem tipe statis yang ketat (`Agent[DepsType, ReturnType]`), *dependency injection* bawaan kelas satu (`RunContext[Deps]`), validasi parameter tool otomatis melalui skema Pydantic v2, fleksibilitas pergantian model (*model-agnostic*), dan hasil output terstruktur yang terjamin validitasnya.
|
|
154
|
+
|
|
155
|
+
**Sinergi Swarm:** Di dalam **Backend & APIs Swarm**, skill ini bertindak sebagai Insinyur Agen AI Python Utama. Bertanggung jawab atas eksekusi logika bisnis kritis, orkestrasi pipeline data, dan query database SQL dengan keamanan tipe kompilasi pada Fase 4.
|
|
156
|
+
|
|
157
|
+
### Kondisi Pemicu
|
|
158
|
+
- Membangun agen otonom Python yang menuntut keamanan tipe statis dan validasi skema data ketat.
|
|
159
|
+
- Menerapkan injeksi dependensi (koneksi database, klien HTTP, session user) ke dalam tool agen tanpa variabel global.
|
|
160
|
+
- Mengekstrak data terstruktur yang dijamin valid dari model penalaran tanpa kegagalan parsing JSON.
|
|
161
|
+
- Merancang delegasi tugas antar agen (*agent handoffs*) pada arsitektur microservices berbasis Python.
|
|
162
|
+
- Menjalankan unit test deterministik dan evaluasi agen dengan `TestModel` tanpa konsumsi token API nyata.
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: python-programming-expert
|
|
3
3
|
description: "Expert-level skill for Python programming (Python 3.13/3.14+). Covers type safety, generic syntax (PEP 695), async/await TaskGroups, FastAPI 0.115+, Pydantic v2, uv package manager, Ruff, and pytest in English and Indonesian."
|
|
4
|
-
author: "Roedy Rustam"
|
|
4
|
+
author: "Roedy Rustam"
|
|
5
|
+
version: "3.0.0"
|
|
5
6
|
---
|
|
6
7
|
|
|
7
8
|
# Python Programming Expert (3.14 Edition)
|
|
@@ -14,7 +15,7 @@ author: "Roedy Rustam"
|
|
|
14
15
|
## English
|
|
15
16
|
|
|
16
17
|
### Orchestration & Integration
|
|
17
|
-
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `
|
|
18
|
+
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `session-memory-manager` to ensure cohesive execution.
|
|
18
19
|
|
|
19
20
|
### Description
|
|
20
21
|
Expert-level Python development guidance for **Python 3.13 / 3.14+** covering JIT compilation, free-threaded (no-GIL) mode, modern type safety patterns, async architecture, and the full production stack: **FastAPI 0.115+**, **Pydantic v2**, **SQLAlchemy 2.x / SQLModel**, **uv**, **Ruff**, and **pytest-asyncio**.
|
|
@@ -365,7 +366,7 @@ async def test_create_user(client: AsyncClient):
|
|
|
365
366
|
## Bahasa Indonesia
|
|
366
367
|
|
|
367
368
|
### Integrasi Orkestrasi
|
|
368
|
-
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `
|
|
369
|
+
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `session-memory-manager` untuk memastikan eksekusi yang kohesif.
|
|
369
370
|
|
|
370
371
|
### Deskripsi
|
|
371
372
|
Panduan pengembangan Python tingkat ahli untuk **Python 3.13/3.14+** mencakup JIT compilation, mode free-threaded (tanpa GIL), pola keamanan tipe modern, arsitektur async, dan stack produksi lengkap: **FastAPI 0.115+**, **Pydantic v2**, **SQLAlchemy 2.x**, **uv**, **Ruff**, dan **pytest-asyncio**.
|
|
@@ -405,4 +406,4 @@ Python 3.13 JIT: Aktifkan dengan `PYTHON_JIT=1` untuk kode CPU-bound. Free-threa
|
|
|
405
406
|
|
|
406
407
|
### Pengujian
|
|
407
408
|
|
|
408
|
-
Gunakan `pytest-asyncio` dengan `asyncio_mode = "auto"` di `pyproject.toml`. Gunakan `AsyncClient` dari `httpx` dengan `ASGITransport` untuk pengujian endpoint async yang bersih dan terisolasi tanpa perlu menjalankan server.
|
|
409
|
+
Gunakan `pytest-asyncio` dengan `asyncio_mode = "auto"` di `pyproject.toml`. Gunakan `AsyncClient` dari `httpx` dengan `ASGITransport` untuk pengujian endpoint async yang bersih dan terisolasi tanpa perlu menjalankan server.
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: rate-limit-abuse-prevention
|
|
3
3
|
description: "Expert guide for API rate limiting, bot protection, DDoS mitigation, brute-force prevention, and abuse detection / Panduan ahli untuk rate limiting API, perlindungan bot, mitigasi DDoS, pencegahan brute-force, dan deteksi penyalahgunaan."
|
|
4
|
-
author: "Roedy Rustam"
|
|
4
|
+
author: "Roedy Rustam"
|
|
5
|
+
version: "3.0.0"
|
|
5
6
|
---
|
|
6
7
|
|
|
7
8
|
# Rate Limit & Abuse Prevention (2026 Edition)
|
|
@@ -14,7 +15,7 @@ author: "Roedy Rustam"
|
|
|
14
15
|
## English
|
|
15
16
|
|
|
16
17
|
### Orchestration & Integration
|
|
17
|
-
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `
|
|
18
|
+
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `session-memory-manager` to ensure cohesive execution.
|
|
18
19
|
|
|
19
20
|
### Description
|
|
20
21
|
Production-grade guide for protecting APIs and web applications from abuse, overuse, and attacks. Covers **rate limiting algorithms** (Token Bucket, Sliding Window), **Upstash Ratelimit**, **bot protection** (Cloudflare Turnstile, hCaptcha), **DDoS mitigation** at edge, **brute-force login prevention**, **API key management & usage quotas**, and **response headers** (X-RateLimit, Retry-After).
|
|
@@ -354,7 +355,7 @@ export async function validateApiKey(rawKey: string) {
|
|
|
354
355
|
## Bahasa Indonesia
|
|
355
356
|
|
|
356
357
|
### Integrasi Orkestrasi
|
|
357
|
-
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `
|
|
358
|
+
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `session-memory-manager` untuk memastikan eksekusi yang kohesif.
|
|
358
359
|
|
|
359
360
|
### Deskripsi
|
|
360
361
|
Panduan tingkat produksi untuk melindungi API dan aplikasi web dari penyalahgunaan, penggunaan berlebihan, dan serangan. Mencakup **algoritma rate limiting** (Token Bucket, Sliding Window), **Upstash Ratelimit**, **perlindungan bot** (Cloudflare Turnstile, hCaptcha), **mitigasi DDoS** di edge, **pencegahan brute-force login**, **manajemen API key & kuota penggunaan**, dan **header respons** (X-RateLimit, Retry-After).
|
|
@@ -374,4 +375,4 @@ Aktifkan skill ini ketika:
|
|
|
374
375
|
- `js-backend-expert` — Integrasi middleware Express/Fastify/Hono
|
|
375
376
|
- `saas-billing` — Rate limit bertingkat per paket langganan
|
|
376
377
|
- `production-ready-hardener` — Audit keamanan pra-peluncuran
|
|
377
|
-
- `cloud-hosting-expert` — Perlindungan WAF dan DDoS di edge
|
|
378
|
+
- `cloud-hosting-expert` — Perlindungan WAF dan DDoS di edge
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: realtime-collaboration-expert
|
|
3
3
|
description: "Expert guide for building real-time collaboration features using WebSockets, WebRTC, CRDTs (Yjs, Automerge), and Liveblocks / Panduan ahli untuk fitur kolaborasi real-time."
|
|
4
|
-
author: "Roedy Rustam"
|
|
4
|
+
author: "Roedy Rustam"
|
|
5
|
+
version: "3.0.0"
|
|
5
6
|
---
|
|
6
7
|
|
|
7
8
|
# Real-Time Collaboration Expert / Ahli Kolaborasi Real-Time
|
|
@@ -96,4 +97,4 @@ yarray.observe(event => {
|
|
|
96
97
|
- Terintegrasi dengan: `state-management-expert`, `event-driven-architect`, `mcp-server-architect`.
|
|
97
98
|
|
|
98
99
|
### Kondisi Pemicu
|
|
99
|
-
Aktif setiap kali pengguna sedang membangun fitur *multiplayer*, kursor langsung (live cursors), pengeditan dokumen bersama, obrolan real-time, atau bekerja dengan WebSockets, Yjs, atau WebRTC.
|
|
100
|
+
Aktif setiap kali pengguna sedang membangun fitur *multiplayer*, kursor langsung (live cursors), pengeditan dokumen bersama, obrolan real-time, atau bekerja dengan WebSockets, Yjs, atau WebRTC.
|
|
@@ -1,177 +1,178 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: rich-text-editor-expert
|
|
3
|
-
description: "Expert guide for rich text editor integration (Tiptap, Lexical, ProseMirror), collaborative editing, and custom extensions / Panduan ahli integrasi editor rich text (Tiptap, Lexical, ProseMirror), editing kolaboratif, dan ekstensi kustom."
|
|
4
|
-
author: "Roedy Rustam"
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
- **`
|
|
19
|
-
- **`
|
|
20
|
-
- **`
|
|
21
|
-
- **`
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
-
|
|
29
|
-
-
|
|
30
|
-
-
|
|
31
|
-
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
|
41
|
-
|
|
|
42
|
-
|
|
|
43
|
-
|
|
|
44
|
-
|
|
|
45
|
-
|
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
import
|
|
56
|
-
import
|
|
57
|
-
import
|
|
58
|
-
import
|
|
59
|
-
import
|
|
60
|
-
import
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
<
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
import
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
{ title: '
|
|
100
|
-
{ title: '
|
|
101
|
-
{ title: '
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
}
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
import {
|
|
117
|
-
import {
|
|
118
|
-
import {
|
|
119
|
-
import {
|
|
120
|
-
import {
|
|
121
|
-
import {
|
|
122
|
-
import {
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
}
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
<
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
- **
|
|
149
|
-
- **
|
|
150
|
-
- **
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
- [ ]
|
|
155
|
-
- [ ]
|
|
156
|
-
- [ ]
|
|
157
|
-
- [ ]
|
|
158
|
-
- [ ]
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
- **`
|
|
168
|
-
- **`
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
-
|
|
176
|
-
-
|
|
177
|
-
-
|
|
1
|
+
---
|
|
2
|
+
name: rich-text-editor-expert
|
|
3
|
+
description: "Expert guide for rich text editor integration (Tiptap, Lexical, ProseMirror), collaborative editing, and custom extensions / Panduan ahli integrasi editor rich text (Tiptap, Lexical, ProseMirror), editing kolaboratif, dan ekstensi kustom."
|
|
4
|
+
author: "Roedy Rustam"
|
|
5
|
+
version: "3.0.0"
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# Rich Text Editor Expert (2026 Edition)
|
|
9
|
+
|
|
10
|
+
[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
|
|
11
|
+
|
|
12
|
+
---
|
|
13
|
+
|
|
14
|
+
<a name="english"></a>
|
|
15
|
+
## English
|
|
16
|
+
|
|
17
|
+
### Orchestration & Integration
|
|
18
|
+
- **`realtime-collaboration-expert`**: Yjs/Automerge CRDTs for collaborative editing.
|
|
19
|
+
- **`form-validation-expert`**: Form integration patterns for editor content.
|
|
20
|
+
- **`headless-cms-expert`**: CMS schema integration for rich text fields.
|
|
21
|
+
- **`file-upload-media-expert`**: Image/video embedding within editor content.
|
|
22
|
+
- **`senior-frontend`**: React component patterns for editor wrappers.
|
|
23
|
+
|
|
24
|
+
### Description
|
|
25
|
+
Expert guide for integrating production-quality rich text editors into web applications. Covers Tiptap v2 (ProseMirror-based, extensible), Lexical (Meta's framework, high-performance), and ProseMirror (low-level, maximum control). Includes custom node/mark creation, collaborative editing with Yjs, slash commands, mention systems, image/video embedding, Portable Text output, and accessibility compliance.
|
|
26
|
+
|
|
27
|
+
### Trigger Conditions
|
|
28
|
+
- Adding a WYSIWYG or rich text editor to an application.
|
|
29
|
+
- Building collaborative document editing features.
|
|
30
|
+
- Creating custom editor extensions (mentions, slash commands, embeds).
|
|
31
|
+
- Choosing between Tiptap, Lexical, or ProseMirror.
|
|
32
|
+
- Implementing content serialization (HTML, JSON, Markdown, Portable Text).
|
|
33
|
+
|
|
34
|
+
---
|
|
35
|
+
|
|
36
|
+
### Editor Selection Guide
|
|
37
|
+
|
|
38
|
+
| Criteria | Tiptap v2 | Lexical (Meta) | ProseMirror |
|
|
39
|
+
|----------|-----------|----------------|-------------|
|
|
40
|
+
| Abstraction Level | High | Medium | Low |
|
|
41
|
+
| Framework | React, Vue, vanilla | React (primary) | Vanilla JS |
|
|
42
|
+
| Extension Ecosystem | ★★★★★ (50+ extensions) | ★★★ (growing) | ★★★★ (community) |
|
|
43
|
+
| Collaboration | Yjs built-in | Yjs plugin | Yjs via prosemirror-collab |
|
|
44
|
+
| Performance | ★★★★ | ★★★★★ | ★★★★ |
|
|
45
|
+
| Learning Curve | Low-Medium | Medium-High | High |
|
|
46
|
+
| **Best For** | Most apps, CMS | High-scale, messaging | Custom editors |
|
|
47
|
+
|
|
48
|
+
**Recommendation:** Use **Tiptap v2** for 90% of use cases. Use **Lexical** for high-performance messaging apps. Use **ProseMirror** only when you need full low-level control.
|
|
49
|
+
|
|
50
|
+
### Core Patterns
|
|
51
|
+
|
|
52
|
+
#### 1. Tiptap v2 Setup (React)
|
|
53
|
+
|
|
54
|
+
```tsx
|
|
55
|
+
import { useEditor, EditorContent } from '@tiptap/react';
|
|
56
|
+
import StarterKit from '@tiptap/starter-kit';
|
|
57
|
+
import Placeholder from '@tiptap/extension-placeholder';
|
|
58
|
+
import Image from '@tiptap/extension-image';
|
|
59
|
+
import Link from '@tiptap/extension-link';
|
|
60
|
+
import Collaboration from '@tiptap/extension-collaboration';
|
|
61
|
+
import * as Y from 'yjs';
|
|
62
|
+
|
|
63
|
+
const ydoc = new Y.Doc();
|
|
64
|
+
|
|
65
|
+
function RichEditor({ onUpdate }: { onUpdate: (json: object) => void }) {
|
|
66
|
+
const editor = useEditor({
|
|
67
|
+
extensions: [
|
|
68
|
+
StarterKit.configure({ history: false }), // Disable history for collab
|
|
69
|
+
Placeholder.configure({ placeholder: 'Start writing...' }),
|
|
70
|
+
Image.configure({ inline: true, allowBase64: false }),
|
|
71
|
+
Link.configure({ openOnClick: false, autolink: true }),
|
|
72
|
+
Collaboration.configure({ document: ydoc }),
|
|
73
|
+
],
|
|
74
|
+
onUpdate: ({ editor }) => onUpdate(editor.getJSON()),
|
|
75
|
+
});
|
|
76
|
+
|
|
77
|
+
return (
|
|
78
|
+
<div className="editor-wrapper">
|
|
79
|
+
<MenuBar editor={editor} />
|
|
80
|
+
<EditorContent editor={editor} className="prose max-w-none" />
|
|
81
|
+
</div>
|
|
82
|
+
);
|
|
83
|
+
}
|
|
84
|
+
```
|
|
85
|
+
|
|
86
|
+
#### 2. Custom Slash Command Extension (Tiptap)
|
|
87
|
+
|
|
88
|
+
```typescript
|
|
89
|
+
import { Extension } from '@tiptap/core';
|
|
90
|
+
import Suggestion from '@tiptap/suggestion';
|
|
91
|
+
|
|
92
|
+
export const SlashCommands = Extension.create({
|
|
93
|
+
name: 'slashCommands',
|
|
94
|
+
addOptions() {
|
|
95
|
+
return {
|
|
96
|
+
suggestion: {
|
|
97
|
+
char: '/',
|
|
98
|
+
items: ({ query }) => [
|
|
99
|
+
{ title: 'Heading 1', command: ({ editor }) => editor.chain().focus().toggleHeading({ level: 1 }).run() },
|
|
100
|
+
{ title: 'Bullet List', command: ({ editor }) => editor.chain().focus().toggleBulletList().run() },
|
|
101
|
+
{ title: 'Code Block', command: ({ editor }) => editor.chain().focus().toggleCodeBlock().run() },
|
|
102
|
+
{ title: 'Image', command: ({ editor }) => { /* open upload dialog */ } },
|
|
103
|
+
].filter((item) => item.title.toLowerCase().includes(query.toLowerCase())),
|
|
104
|
+
},
|
|
105
|
+
};
|
|
106
|
+
},
|
|
107
|
+
addProseMirrorPlugins() {
|
|
108
|
+
return [Suggestion({ editor: this.editor, ...this.options.suggestion })];
|
|
109
|
+
},
|
|
110
|
+
});
|
|
111
|
+
```
|
|
112
|
+
|
|
113
|
+
#### 3. Lexical Setup (React)
|
|
114
|
+
|
|
115
|
+
```tsx
|
|
116
|
+
import { LexicalComposer } from '@lexical/react/LexicalComposer';
|
|
117
|
+
import { RichTextPlugin } from '@lexical/react/LexicalRichTextPlugin';
|
|
118
|
+
import { ContentEditable } from '@lexical/react/LexicalContentEditable';
|
|
119
|
+
import { HistoryPlugin } from '@lexical/react/LexicalHistoryPlugin';
|
|
120
|
+
import { AutoFocusPlugin } from '@lexical/react/LexicalAutoFocusPlugin';
|
|
121
|
+
import { HeadingNode, QuoteNode } from '@lexical/rich-text';
|
|
122
|
+
import { ListNode, ListItemNode } from '@lexical/list';
|
|
123
|
+
import { CodeNode } from '@lexical/code';
|
|
124
|
+
|
|
125
|
+
const editorConfig = {
|
|
126
|
+
namespace: 'MyEditor',
|
|
127
|
+
nodes: [HeadingNode, QuoteNode, ListNode, ListItemNode, CodeNode],
|
|
128
|
+
onError: (error: Error) => console.error(error),
|
|
129
|
+
theme: { /* custom theme classes */ },
|
|
130
|
+
};
|
|
131
|
+
|
|
132
|
+
function LexicalEditor() {
|
|
133
|
+
return (
|
|
134
|
+
<LexicalComposer initialConfig={editorConfig}>
|
|
135
|
+
<RichTextPlugin
|
|
136
|
+
contentEditable={<ContentEditable className="prose" />}
|
|
137
|
+
placeholder={<div className="text-gray-400">Start writing...</div>}
|
|
138
|
+
ErrorBoundary={LexicalErrorBoundary}
|
|
139
|
+
/>
|
|
140
|
+
<HistoryPlugin />
|
|
141
|
+
<AutoFocusPlugin />
|
|
142
|
+
</LexicalComposer>
|
|
143
|
+
);
|
|
144
|
+
}
|
|
145
|
+
```
|
|
146
|
+
|
|
147
|
+
#### 4. Content Serialization Patterns
|
|
148
|
+
- **JSON** (Tiptap/Lexical): Store editor state as JSON for exact restoration.
|
|
149
|
+
- **HTML**: Use `editor.getHTML()` for rendering in non-editor contexts.
|
|
150
|
+
- **Markdown**: Convert with `@tiptap/extension-markdown` for developer-facing content.
|
|
151
|
+
- **Portable Text** (Sanity): Map Tiptap nodes to Portable Text blocks for CMS storage.
|
|
152
|
+
|
|
153
|
+
### Production Checklist
|
|
154
|
+
- [ ] Content sanitization (DOMPurify) before rendering user HTML.
|
|
155
|
+
- [ ] Image upload with presigned URLs (not base64 in content).
|
|
156
|
+
- [ ] Keyboard shortcuts documented and accessible.
|
|
157
|
+
- [ ] Mobile-responsive toolbar (sticky or floating).
|
|
158
|
+
- [ ] Autosave with debounce (500ms) and conflict resolution.
|
|
159
|
+
- [ ] Max content length validation.
|
|
160
|
+
|
|
161
|
+
---
|
|
162
|
+
|
|
163
|
+
<a name="bahasa-indonesia"></a>
|
|
164
|
+
## Bahasa Indonesia
|
|
165
|
+
|
|
166
|
+
### Integrasi Orkestrasi
|
|
167
|
+
- **`realtime-collaboration-expert`**: CRDT Yjs/Automerge untuk editing kolaboratif.
|
|
168
|
+
- **`form-validation-expert`**: Pola integrasi form untuk konten editor.
|
|
169
|
+
- **`headless-cms-expert`**: Integrasi skema CMS untuk field rich text.
|
|
170
|
+
|
|
171
|
+
### Deskripsi
|
|
172
|
+
Panduan ahli untuk mengintegrasikan editor rich text berkualitas produksi ke dalam aplikasi web. Mencakup Tiptap v2, Lexical (Meta), dan ProseMirror. Termasuk pembuatan node/mark kustom, editing kolaboratif dengan Yjs, slash commands, sistem mention, embedding gambar/video, dan output Portable Text.
|
|
173
|
+
|
|
174
|
+
### Kondisi Pemicu
|
|
175
|
+
- Menambahkan editor WYSIWYG atau rich text ke aplikasi.
|
|
176
|
+
- Membangun fitur editing dokumen kolaboratif.
|
|
177
|
+
- Membuat ekstensi editor kustom (mention, slash commands, embed).
|
|
178
|
+
- Memilih antara Tiptap, Lexical, atau ProseMirror.
|