vibes-plug 2.11.0 → 3.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (181) hide show
  1. package/.claude/rules/vibes-plug-core.md +5 -0
  2. package/.cursor/rules/vibes-plug-core.mdc +8 -3
  3. package/.cursorrules +9 -3
  4. package/AGENTS.md +25 -4
  5. package/CHANGELOG.md +151 -0
  6. package/CLAUDE.md +15 -8
  7. package/README.md +216 -641
  8. package/bin/vibes.mjs +1104 -0
  9. package/index.js +1 -1
  10. package/package.json +11 -3
  11. package/plugin.json +4 -3
  12. package/scripts/check-anti-slop.js +53 -0
  13. package/scripts/check-anti-slop.mjs +53 -0
  14. package/scripts/generate_swarm_gif.py +2 -2
  15. package/scripts/install.js +3 -1
  16. package/scripts/update_skills.js +1 -1
  17. package/scripts/update_skills.mjs +86 -0
  18. package/scripts/validate-skills.mjs +111 -0
  19. package/skills/accessibility-testing-expert/SKILL.md +117 -116
  20. package/skills/affective-computing-emotion-ai/SKILL.md +83 -0
  21. package/skills/agentic-coding-workflow-expert/SKILL.md +297 -0
  22. package/skills/agentic-memory-architect/SKILL.md +52 -0
  23. package/skills/agentic-micro-economy-architect/SKILL.md +92 -0
  24. package/skills/ai-llm-integration-expert/SKILL.md +330 -187
  25. package/skills/ai-media-generation-expert/SKILL.md +173 -172
  26. package/skills/ai-prompt-engineering-expert/SKILL.md +170 -50
  27. package/skills/ai-safety-governance-expert/SKILL.md +223 -0
  28. package/skills/angular-expert/SKILL.md +149 -148
  29. package/skills/anti-slop/SKILL.md +134 -0
  30. package/skills/api-design-expert/SKILL.md +4 -3
  31. package/skills/api-gateway-proxy-expert/SKILL.md +3 -2
  32. package/skills/app-analyzer-optimizer/SKILL.md +4 -3
  33. package/skills/apple-ecosystem-expert/SKILL.md +6 -5
  34. package/skills/astro-framework-expert/SKILL.md +201 -200
  35. package/skills/async-queue-temporal-expert/SKILL.md +218 -240
  36. package/skills/authentication-identity-expert/SKILL.md +79 -184
  37. package/skills/autonomous-red-teamer/SKILL.md +338 -203
  38. package/skills/autonomous-tdd-debugger/SKILL.md +6 -5
  39. package/skills/biome-linter-formatter-expert/SKILL.md +90 -89
  40. package/skills/blockchain-web3-expert/SKILL.md +116 -115
  41. package/skills/brainstorming/SKILL.md +392 -377
  42. package/skills/browser-automation-expert/SKILL.md +260 -222
  43. package/skills/bun-runtime-expert/SKILL.md +5 -4
  44. package/skills/chatbot-messaging-expert/SKILL.md +115 -114
  45. package/skills/ci-cd-devops-architect/SKILL.md +3 -2
  46. package/skills/cloud-hosting-expert/SKILL.md +5 -4
  47. package/skills/coderabbit/SKILL.md +5 -4
  48. package/skills/compliance-gdpr-privacy-expert/SKILL.md +3 -2
  49. package/skills/composable-mach-architect/SKILL.md +338 -0
  50. package/skills/cron-scheduler-expert/SKILL.md +5 -4
  51. package/skills/data-pipeline-etl-expert/SKILL.md +3 -2
  52. package/skills/data-telemetry-expert/SKILL.md +5 -4
  53. package/skills/data-visualization-expert/SKILL.md +155 -154
  54. package/skills/database-orm-expert/SKILL.md +102 -240
  55. package/skills/deep-research-analyst/SKILL.md +182 -0
  56. package/skills/dependency-upgrade-migrator/SKILL.md +11 -10
  57. package/skills/design-system-architect/SKILL.md +34 -3
  58. package/skills/desktop-electron-expert/SKILL.md +129 -128
  59. package/skills/documentation-site-expert/SKILL.md +60 -59
  60. package/skills/doku-mcp-server/SKILL.md +5 -4
  61. package/skills/doku-payment-gateway/SKILL.md +250 -232
  62. package/skills/domain-driven-design-expert/SKILL.md +3 -2
  63. package/skills/e2e-testing-expert/SKILL.md +5 -4
  64. package/skills/ecommerce-expert/SKILL.md +88 -87
  65. package/skills/email-notification-expert/SKILL.md +35 -7
  66. package/skills/ephemeral-generative-ui-architect/SKILL.md +88 -0
  67. package/skills/error-resilience-expert/SKILL.md +26 -4
  68. package/skills/event-driven-architect/SKILL.md +5 -4
  69. package/skills/feature-flag-analytics-expert/SKILL.md +3 -2
  70. package/skills/file-upload-media-expert/SKILL.md +5 -4
  71. package/skills/firebase-security-expert/SKILL.md +5 -4
  72. package/skills/form-validation-expert/SKILL.md +7 -6
  73. package/skills/frontier-ai-models-expert/SKILL.md +116 -0
  74. package/skills/fullstack-expert/SKILL.md +68 -144
  75. package/skills/gemini-agent-booster/SKILL.md +248 -172
  76. package/skills/geospatial-maps-expert/SKILL.md +81 -80
  77. package/skills/global-a11y-i18n-expert/SKILL.md +5 -4
  78. package/skills/glsl-shader-expert/SKILL.md +155 -71
  79. package/skills/go-programming-expert/SKILL.md +5 -4
  80. package/skills/graph-rag-knowledge-expert/SKILL.md +201 -159
  81. package/skills/graphql-apollo-expert/SKILL.md +5 -4
  82. package/skills/headless-cms-expert/SKILL.md +182 -181
  83. package/skills/hig/SKILL.md +5 -4
  84. package/skills/js-backend-expert/SKILL.md +219 -218
  85. package/skills/legacy-code-translator/SKILL.md +6 -5
  86. package/skills/llm-finops-router/SKILL.md +52 -0
  87. package/skills/local-slm-edge-ai-expert/SKILL.md +168 -167
  88. package/skills/logging-error-tracking-expert/SKILL.md +5 -4
  89. package/skills/mcp-server-architect/SKILL.md +316 -294
  90. package/skills/micro-frontend-architect/SKILL.md +5 -4
  91. package/skills/mobile-expo-expert/SKILL.md +5 -4
  92. package/skills/modern-css-native-expert/SKILL.md +190 -189
  93. package/skills/monorepo-architect/SKILL.md +5 -4
  94. package/skills/mpa-orchestrator/SKILL.md +41 -4
  95. package/skills/multi-agent-orchestration/SKILL.md +388 -254
  96. package/skills/mvc-expert/SKILL.md +5 -4
  97. package/skills/n8n-automation-expert/SKILL.md +90 -89
  98. package/skills/nextjs-app-router-expert/SKILL.md +3 -2
  99. package/skills/openapi-swagger-codegen-expert/SKILL.md +4 -3
  100. package/skills/payment-gateway-expert/SKILL.md +131 -128
  101. package/skills/pdf-document-generation-expert/SKILL.md +92 -91
  102. package/skills/performance-web-vitals/SKILL.md +5 -4
  103. package/skills/post-quantum-crypto-migrator/SKILL.md +3 -2
  104. package/skills/prd-architect/SKILL.md +85 -109
  105. package/skills/proactive-background-watcher/SKILL.md +5 -4
  106. package/skills/production-ready-hardener/SKILL.md +25 -27
  107. package/skills/pwa-offline-first-expert/SKILL.md +227 -185
  108. package/skills/pydantic-ai-expert/SKILL.md +162 -0
  109. package/skills/python-programming-expert/SKILL.md +5 -4
  110. package/skills/rate-limit-abuse-prevention/SKILL.md +5 -4
  111. package/skills/realtime-collaboration-expert/SKILL.md +3 -2
  112. package/skills/rich-text-editor-expert/SKILL.md +178 -177
  113. package/skills/rust-programming-expert/SKILL.md +5 -4
  114. package/skills/saas-architect/SKILL.md +155 -0
  115. package/skills/saas-billing/SKILL.md +394 -382
  116. package/skills/saas-multi-tenant/SKILL.md +7 -6
  117. package/skills/scalability-clean-code/SKILL.md +5 -4
  118. package/skills/search-engine-expert/SKILL.md +90 -89
  119. package/skills/self-healing-cloud-orchestrator/SKILL.md +3 -2
  120. package/skills/senior-frontend/SKILL.md +21 -18
  121. package/skills/senior-frontend/scripts/frontend_scaffolder.py +1 -1
  122. package/skills/seo/SKILL.md +4 -4
  123. package/skills/session-memory-manager/SKILL.md +129 -0
  124. package/skills/solidjs-expert/SKILL.md +81 -80
  125. package/skills/spa-orchestrator/SKILL.md +5 -4
  126. package/skills/sse-websocket-streaming-expert/SKILL.md +3 -2
  127. package/skills/state-management-expert/SKILL.md +5 -4
  128. package/skills/supabase-security-expert/SKILL.md +5 -4
  129. package/skills/svelte-sveltekit-expert/SKILL.md +92 -91
  130. package/skills/svg-animation-motion-expert/SKILL.md +3 -2
  131. package/skills/synthetic-data-finetuning-expert/SKILL.md +156 -0
  132. package/skills/tailwind-expert/SKILL.md +62 -5
  133. package/skills/tanstack-query-expert/SKILL.md +5 -4
  134. package/skills/tauri-expert/SKILL.md +5 -4
  135. package/skills/typescript-expert/SKILL.md +5 -4
  136. package/skills/ui-ux-pro-max/SKILL.md +7 -4
  137. package/skills/vector-db-rag-expert/SKILL.md +209 -208
  138. package/skills/vercel-ai-sdk-expert/SKILL.md +226 -0
  139. package/skills/voice-ai-realtime-agent/SKILL.md +243 -202
  140. package/skills/vue-frontend-expert/SKILL.md +5 -4
  141. package/skills/wasm-edge-computing-expert/SKILL.md +3 -2
  142. package/skills/web-3d-graphics-expert/SKILL.md +259 -82
  143. package/skills/web-game-engine-expert/SKILL.md +278 -50
  144. package/skills/web-scraper/SKILL.md +158 -157
  145. package/skills/website-design-cloner/SKILL.md +5 -4
  146. package/skills/webxr-ar-vr-expert/SKILL.md +105 -65
  147. package/skills/wordpress-headless-expert/SKILL.md +145 -144
  148. package/skills/zero-tech-debt-auditor/SKILL.md +115 -0
  149. package/skills/zero-to-prod-orchestrator/SKILL.md +281 -227
  150. package/skills/zero-trust-secret-vault/SKILL.md +3 -2
  151. package/BLUEPRINT.md +0 -309
  152. package/skills/ai-cost-token-optimizer/SKILL.md +0 -82
  153. package/skills/ai-evals-benchmark-expert/SKILL.md +0 -188
  154. package/skills/asisten-ramah/SKILL.md +0 -47
  155. package/skills/auto-doc-updater/SKILL.md +0 -220
  156. package/skills/autonomous-chaos-monkey/SKILL.md +0 -63
  157. package/skills/background-jobs-queue-expert/SKILL.md +0 -235
  158. package/skills/bootstrap-to-modern/SKILL.md +0 -94
  159. package/skills/database-migration-versioning-expert/SKILL.md +0 -90
  160. package/skills/edge-serverless-db-expert/SKILL.md +0 -99
  161. package/skills/mcp-client-orchestrator/SKILL.md +0 -76
  162. package/skills/mobile-push-notification-expert/SKILL.md +0 -71
  163. package/skills/monday-design-aesthetic/SKILL.md +0 -73
  164. package/skills/multiple-entry-points/SKILL.md +0 -91
  165. package/skills/project-context-mapper/SKILL.md +0 -85
  166. package/skills/saas-mvp-launcher/SKILL.md +0 -260
  167. package/skills/saas-transformer/SKILL.md +0 -500
  168. package/skills/saas-transformer/references/billing_integration_guide.md +0 -401
  169. package/skills/secure-fuzz-testing/SKILL.md +0 -207
  170. package/skills/self-evolving-memory-graph/SKILL.md +0 -91
  171. package/skills/session-context-loader/SKILL.md +0 -83
  172. package/skills/session-handoff-resume/SKILL.md +0 -164
  173. package/skills/skill-baru/SKILL.md +0 -178
  174. package/skills/supabase-migration/SKILL.md +0 -91
  175. package/skills/token-saver/SKILL.md +0 -119
  176. package/skills/ui-components-expert/SKILL.md +0 -166
  177. package/skills/vibe-code-gardener/SKILL.md +0 -181
  178. package/skills/visual-qa-vision-agent/SKILL.md +0 -71
  179. /package/skills/{saas-transformer → saas-architect}/references/feature_gating_patterns.md +0 -0
  180. /package/skills/{saas-transformer → saas-architect}/references/saas_transformation_checklist.md +0 -0
  181. /package/skills/{saas-transformer → saas-architect}/scripts/saas_transformation_scanner.py +0 -0
@@ -0,0 +1,162 @@
1
+ ---
2
+ name: pydantic-ai-expert
3
+ description: "Expert guide for type-safe Python AI agent development with Pydantic AI — dependency injection, structured outputs, model-agnostic routing, and graph workflows / Panduan ahli pengembangan agen AI Python type-safe dengan Pydantic AI."
4
+ author: vibes-plug-swarm
5
+ version: "3.0.0"
6
+ ---
7
+
8
+ # Pydantic AI Expert (Type-Safe Python Agent Engineering)
9
+
10
+ [English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
11
+
12
+ ---
13
+
14
+ <a name="english"></a>
15
+ ## English
16
+
17
+ ### Orchestration & Integration
18
+ Connects and orchestrates with domain skills like `python-programming-expert`, `multi-agent-orchestration`, `ai-llm-integration-expert`, `ai-evals-benchmark-expert`, and `database-orm-expert` to engineer type-safe, resilient backend AI agents.
19
+
20
+ ### Description
21
+ Production-grade guide for building enterprise AI agents using **Pydantic AI** (from the creators of Pydantic). Unlike untyped or fragile agent libraries, Pydantic AI provides strict static typing (`Agent[DepsType, ReturnType]`), first-class dependency injection (`RunContext[Deps]`), automatic tool parameter validation via Pydantic v2 schemas, model-agnostic provider switching (Anthropic, OpenAI, Gemini, Groq, Ollama), dynamic system prompts, and deterministic structured outputs.
22
+
23
+ **Swarm Synergy:** Within the **Backend & APIs Swarm**, this skill serves as the Lead Python Agent Engineer. It executes critical business operations, runs data pipelines, and integrates with SQL databases with compile-time type safety in Phase 4.
24
+
25
+ ### Trigger Conditions
26
+ - Engineering Python-based autonomous agents requiring strict type safety and schema validation.
27
+ - Implementing dependency injection (passing database connections, API clients, or user sessions) into agent tools.
28
+ - Extracting guaranteed structured outputs from frontier reasoning models without JSON parsing errors.
29
+ - Designing multi-agent delegation or agent handoffs in Python microservices.
30
+ - Running unit tests and deterministic evals on agent logic using mock models (`TestModel`).
31
+
32
+ ### Pydantic AI Architecture
33
+
34
+ ```
35
+ ┌─────────────────────────────────────────────────────────────┐
36
+ │ AGENT DEFINITION │
37
+ │ Agent[DatabaseDeps, AuditReport]( │
38
+ │ model='anthropic:claude-3-7-sonnet-latest', │
39
+ │ result_type=AuditReport, │
40
+ │ ) │
41
+ └──────────────────────────────┬──────────────────────────────┘
42
+ │
43
+ ┌───────────────────────┴───────────────────────┐
44
+ ▼ ▼
45
+ ┌──────────────────────────────┐ ┌──────────────────────────────┐
46
+ │ DEPENDENCY INJECTION │ │ TOOL EXECUTION LOOP │
47
+ │ RunContext[DatabaseDeps] │ │ @agent.tool │
48
+ │ • Async DB connection pool │ │ • Auto Pydantic validation │
49
+ │ • Tenant & session auth │ │ • Structured error return │
50
+ └──────────────────────────────┘ └──────────────────────────────┘
51
+ │
52
+ ▼
53
+ ┌─────────────────────────────────────────────────────────────┐
54
+ │ DETERMINISTIC STRUCTURED RESULT │
55
+ │ result.data -> Pydantic BaseModel instance (Validated) │
56
+ └─────────────────────────────────────────────────────────────┘
57
+ ```
58
+
59
+ ### Core Implementation Guidelines
60
+
61
+ #### 1. Type-Safe Agent with Dependency Injection
62
+ Pass database pools or HTTP clients directly into tools without global state:
63
+ ```python
64
+ from dataclasses import dataclass
65
+ import asyncpg
66
+ from pydantic import BaseModel, Field
67
+ from pydantic_ai import Agent, RunContext
68
+
69
+ @dataclass
70
+ class DatabaseDeps:
71
+ pool: asyncpg.Pool
72
+ tenant_id: str
73
+
74
+ class UserAnomalyReport(BaseModel):
75
+ user_id: str
76
+ risk_score: float = Field(ge=0.0, le=1.0)
77
+ anomalous_events: list[str]
78
+ action_recommended: str
79
+
80
+ # Typed agent: Agent[DependencyType, ResultType]
81
+ security_agent = Agent[DatabaseDeps, UserAnomalyReport](
82
+ model='google-gla:gemini-2.5-flash',
83
+ result_type=UserAnomalyReport,
84
+ system_prompt=(
85
+ "You are an automated SecOps auditor. Analyze the user access logs provided "
86
+ "and generate a strictly structured anomaly assessment."
87
+ ),
88
+ )
89
+
90
+ @security_agent.system_prompt
91
+ async def add_tenant_context(ctx: RunContext[DatabaseDeps]) -> str:
92
+ return f"Active Tenant ID: {ctx.deps.tenant_id}. Only audit records matching this tenant."
93
+
94
+ @security_agent.tool
95
+ async def query_audit_logs(ctx: RunContext[DatabaseDeps], user_id: str, limit: int = 50) -> list[dict]:
96
+ """Retrieve raw authentication events for a given user from the audit store."""
97
+ async with ctx.deps.pool.acquire() as conn:
98
+ rows = await conn.fetch(
99
+ "SELECT event_time, ip_address, action, status FROM audit_logs "
100
+ "WHERE tenant_id = $1 AND user_id = $2 ORDER BY event_time DESC LIMIT $3",
101
+ ctx.deps.tenant_id, user_id, limit
102
+ )
103
+ return [dict(r) for r in rows]
104
+
105
+ # Execution:
106
+ async def run_audit(pool: asyncpg.Pool, tenant_id: str, target_user: str) -> UserAnomalyReport:
107
+ deps = DatabaseDeps(pool=pool, tenant_id=tenant_id)
108
+ result = await security_agent.run(f"Audit user activity for {target_user}", deps=deps)
109
+ return result.data # Guaranteed instance of UserAnomalyReport
110
+ ```
111
+
112
+ #### 2. Model-Agnostic Switching & Local SLM Fallback
113
+ Pydantic AI allows switching between cloud APIs and local Ollama models effortlessly:
114
+ ```python
115
+ import os
116
+ from pydantic_ai.models.anthropic import AnthropicModel
117
+ from pydantic_ai.models.ollama import OllamaModel
118
+
119
+ def get_agent_model():
120
+ if os.getenv("ENV") == "production":
121
+ return AnthropicModel('claude-3-7-sonnet-20250219')
122
+ else:
123
+ # Zero cost local development with Ollama
124
+ return OllamaModel(model_name='qwen2.5-coder:7b')
125
+ ```
126
+
127
+ #### 3. Deterministic Testing with `TestModel`
128
+ Write unit tests that verify tool invocations and structured output parsing without calling live LLMs:
129
+ ```python
130
+ import pytest
131
+ from pydantic_ai.models.test import TestModel
132
+
133
+ @pytest.mark.asyncio
134
+ async def test_security_agent_tool_dispatch():
135
+ # TestModel can simulate deterministic responses or tool calls
136
+ test_model = TestModel(call_tools=['query_audit_logs'])
137
+
138
+ with security_agent.override(model=test_model):
139
+ deps = DatabaseDeps(pool=mock_pool, tenant_id="tenant_123")
140
+ result = await security_agent.run("Audit user 456", deps=deps)
141
+ assert result.data is not None
142
+ ```
143
+
144
+ ---
145
+
146
+ <a name="bahasa-indonesia"></a>
147
+ ## Bahasa Indonesia
148
+
149
+ ### Integrasi Orkestrasi
150
+ Terhubung dan mengorkestrasi skill domain yang relevan seperti `python-programming-expert`, `multi-agent-orchestration`, `ai-llm-integration-expert`, `ai-evals-benchmark-expert`, dan `database-orm-expert` untuk membangun agen AI backend yang aman secara tipe (*type-safe*) dan tangguh.
151
+
152
+ ### Deskripsi
153
+ Panduan produksi untuk membangun agen AI kelas perusahaan menggunakan **Pydantic AI** (dari pembuat library Pydantic). Tidak seperti library agen yang tidak bertipe statis atau mudah mengalami galat runtime, Pydantic AI menyediakan sistem tipe statis yang ketat (`Agent[DepsType, ReturnType]`), *dependency injection* bawaan kelas satu (`RunContext[Deps]`), validasi parameter tool otomatis melalui skema Pydantic v2, fleksibilitas pergantian model (*model-agnostic*), dan hasil output terstruktur yang terjamin validitasnya.
154
+
155
+ **Sinergi Swarm:** Di dalam **Backend & APIs Swarm**, skill ini bertindak sebagai Insinyur Agen AI Python Utama. Bertanggung jawab atas eksekusi logika bisnis kritis, orkestrasi pipeline data, dan query database SQL dengan keamanan tipe kompilasi pada Fase 4.
156
+
157
+ ### Kondisi Pemicu
158
+ - Membangun agen otonom Python yang menuntut keamanan tipe statis dan validasi skema data ketat.
159
+ - Menerapkan injeksi dependensi (koneksi database, klien HTTP, session user) ke dalam tool agen tanpa variabel global.
160
+ - Mengekstrak data terstruktur yang dijamin valid dari model penalaran tanpa kegagalan parsing JSON.
161
+ - Merancang delegasi tugas antar agen (*agent handoffs*) pada arsitektur microservices berbasis Python.
162
+ - Menjalankan unit test deterministik dan evaluasi agen dengan `TestModel` tanpa konsumsi token API nyata.
@@ -1,7 +1,8 @@
1
1
  ---
2
2
  name: python-programming-expert
3
3
  description: "Expert-level skill for Python programming (Python 3.13/3.14+). Covers type safety, generic syntax (PEP 695), async/await TaskGroups, FastAPI 0.115+, Pydantic v2, uv package manager, Ruff, and pytest in English and Indonesian."
4
- author: "Roedy Rustam"
4
+ author: "Roedy Rustam"
5
+ version: "3.0.0"
5
6
  ---
6
7
 
7
8
  # Python Programming Expert (3.14 Edition)
@@ -14,7 +15,7 @@ author: "Roedy Rustam"
14
15
  ## English
15
16
 
16
17
  ### Orchestration & Integration
17
- Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.
18
+ Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `session-memory-manager` to ensure cohesive execution.
18
19
 
19
20
  ### Description
20
21
  Expert-level Python development guidance for **Python 3.13 / 3.14+** covering JIT compilation, free-threaded (no-GIL) mode, modern type safety patterns, async architecture, and the full production stack: **FastAPI 0.115+**, **Pydantic v2**, **SQLAlchemy 2.x / SQLModel**, **uv**, **Ruff**, and **pytest-asyncio**.
@@ -365,7 +366,7 @@ async def test_create_user(client: AsyncClient):
365
366
  ## Bahasa Indonesia
366
367
 
367
368
  ### Integrasi Orkestrasi
368
- Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.
369
+ Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `session-memory-manager` untuk memastikan eksekusi yang kohesif.
369
370
 
370
371
  ### Deskripsi
371
372
  Panduan pengembangan Python tingkat ahli untuk **Python 3.13/3.14+** mencakup JIT compilation, mode free-threaded (tanpa GIL), pola keamanan tipe modern, arsitektur async, dan stack produksi lengkap: **FastAPI 0.115+**, **Pydantic v2**, **SQLAlchemy 2.x**, **uv**, **Ruff**, dan **pytest-asyncio**.
@@ -405,4 +406,4 @@ Python 3.13 JIT: Aktifkan dengan `PYTHON_JIT=1` untuk kode CPU-bound. Free-threa
405
406
 
406
407
  ### Pengujian
407
408
 
408
- Gunakan `pytest-asyncio` dengan `asyncio_mode = "auto"` di `pyproject.toml`. Gunakan `AsyncClient` dari `httpx` dengan `ASGITransport` untuk pengujian endpoint async yang bersih dan terisolasi tanpa perlu menjalankan server.
409
+ Gunakan `pytest-asyncio` dengan `asyncio_mode = "auto"` di `pyproject.toml`. Gunakan `AsyncClient` dari `httpx` dengan `ASGITransport` untuk pengujian endpoint async yang bersih dan terisolasi tanpa perlu menjalankan server.
@@ -1,7 +1,8 @@
1
1
  ---
2
2
  name: rate-limit-abuse-prevention
3
3
  description: "Expert guide for API rate limiting, bot protection, DDoS mitigation, brute-force prevention, and abuse detection / Panduan ahli untuk rate limiting API, perlindungan bot, mitigasi DDoS, pencegahan brute-force, dan deteksi penyalahgunaan."
4
- author: "Roedy Rustam"
4
+ author: "Roedy Rustam"
5
+ version: "3.0.0"
5
6
  ---
6
7
 
7
8
  # Rate Limit & Abuse Prevention (2026 Edition)
@@ -14,7 +15,7 @@ author: "Roedy Rustam"
14
15
  ## English
15
16
 
16
17
  ### Orchestration & Integration
17
- Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.
18
+ Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `session-memory-manager` to ensure cohesive execution.
18
19
 
19
20
  ### Description
20
21
  Production-grade guide for protecting APIs and web applications from abuse, overuse, and attacks. Covers **rate limiting algorithms** (Token Bucket, Sliding Window), **Upstash Ratelimit**, **bot protection** (Cloudflare Turnstile, hCaptcha), **DDoS mitigation** at edge, **brute-force login prevention**, **API key management & usage quotas**, and **response headers** (X-RateLimit, Retry-After).
@@ -354,7 +355,7 @@ export async function validateApiKey(rawKey: string) {
354
355
  ## Bahasa Indonesia
355
356
 
356
357
  ### Integrasi Orkestrasi
357
- Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.
358
+ Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `session-memory-manager` untuk memastikan eksekusi yang kohesif.
358
359
 
359
360
  ### Deskripsi
360
361
  Panduan tingkat produksi untuk melindungi API dan aplikasi web dari penyalahgunaan, penggunaan berlebihan, dan serangan. Mencakup **algoritma rate limiting** (Token Bucket, Sliding Window), **Upstash Ratelimit**, **perlindungan bot** (Cloudflare Turnstile, hCaptcha), **mitigasi DDoS** di edge, **pencegahan brute-force login**, **manajemen API key & kuota penggunaan**, dan **header respons** (X-RateLimit, Retry-After).
@@ -374,4 +375,4 @@ Aktifkan skill ini ketika:
374
375
  - `js-backend-expert` — Integrasi middleware Express/Fastify/Hono
375
376
  - `saas-billing` — Rate limit bertingkat per paket langganan
376
377
  - `production-ready-hardener` — Audit keamanan pra-peluncuran
377
- - `cloud-hosting-expert` — Perlindungan WAF dan DDoS di edge
378
+ - `cloud-hosting-expert` — Perlindungan WAF dan DDoS di edge
@@ -1,7 +1,8 @@
1
1
  ---
2
2
  name: realtime-collaboration-expert
3
3
  description: "Expert guide for building real-time collaboration features using WebSockets, WebRTC, CRDTs (Yjs, Automerge), and Liveblocks / Panduan ahli untuk fitur kolaborasi real-time."
4
- author: "Roedy Rustam"
4
+ author: "Roedy Rustam"
5
+ version: "3.0.0"
5
6
  ---
6
7
 
7
8
  # Real-Time Collaboration Expert / Ahli Kolaborasi Real-Time
@@ -96,4 +97,4 @@ yarray.observe(event => {
96
97
  - Terintegrasi dengan: `state-management-expert`, `event-driven-architect`, `mcp-server-architect`.
97
98
 
98
99
  ### Kondisi Pemicu
99
- Aktif setiap kali pengguna sedang membangun fitur *multiplayer*, kursor langsung (live cursors), pengeditan dokumen bersama, obrolan real-time, atau bekerja dengan WebSockets, Yjs, atau WebRTC.
100
+ Aktif setiap kali pengguna sedang membangun fitur *multiplayer*, kursor langsung (live cursors), pengeditan dokumen bersama, obrolan real-time, atau bekerja dengan WebSockets, Yjs, atau WebRTC.
@@ -1,177 +1,178 @@
1
- ---
2
- name: rich-text-editor-expert
3
- description: "Expert guide for rich text editor integration (Tiptap, Lexical, ProseMirror), collaborative editing, and custom extensions / Panduan ahli integrasi editor rich text (Tiptap, Lexical, ProseMirror), editing kolaboratif, dan ekstensi kustom."
4
- author: "Roedy Rustam"
5
- ---
6
-
7
- # Rich Text Editor Expert (2026 Edition)
8
-
9
- [English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
10
-
11
- ---
12
-
13
- <a name="english"></a>
14
- ## English
15
-
16
- ### Orchestration & Integration
17
- - **`realtime-collaboration-expert`**: Yjs/Automerge CRDTs for collaborative editing.
18
- - **`form-validation-expert`**: Form integration patterns for editor content.
19
- - **`headless-cms-expert`**: CMS schema integration for rich text fields.
20
- - **`file-upload-media-expert`**: Image/video embedding within editor content.
21
- - **`senior-frontend`**: React component patterns for editor wrappers.
22
-
23
- ### Description
24
- Expert guide for integrating production-quality rich text editors into web applications. Covers Tiptap v2 (ProseMirror-based, extensible), Lexical (Meta's framework, high-performance), and ProseMirror (low-level, maximum control). Includes custom node/mark creation, collaborative editing with Yjs, slash commands, mention systems, image/video embedding, Portable Text output, and accessibility compliance.
25
-
26
- ### Trigger Conditions
27
- - Adding a WYSIWYG or rich text editor to an application.
28
- - Building collaborative document editing features.
29
- - Creating custom editor extensions (mentions, slash commands, embeds).
30
- - Choosing between Tiptap, Lexical, or ProseMirror.
31
- - Implementing content serialization (HTML, JSON, Markdown, Portable Text).
32
-
33
- ---
34
-
35
- ### Editor Selection Guide
36
-
37
- | Criteria | Tiptap v2 | Lexical (Meta) | ProseMirror |
38
- |----------|-----------|----------------|-------------|
39
- | Abstraction Level | High | Medium | Low |
40
- | Framework | React, Vue, vanilla | React (primary) | Vanilla JS |
41
- | Extension Ecosystem | ★★★★★ (50+ extensions) | ★★★ (growing) | ★★★★ (community) |
42
- | Collaboration | Yjs built-in | Yjs plugin | Yjs via prosemirror-collab |
43
- | Performance | ★★★★ | ★★★★★ | ★★★★ |
44
- | Learning Curve | Low-Medium | Medium-High | High |
45
- | **Best For** | Most apps, CMS | High-scale, messaging | Custom editors |
46
-
47
- **Recommendation:** Use **Tiptap v2** for 90% of use cases. Use **Lexical** for high-performance messaging apps. Use **ProseMirror** only when you need full low-level control.
48
-
49
- ### Core Patterns
50
-
51
- #### 1. Tiptap v2 Setup (React)
52
-
53
- ```tsx
54
- import { useEditor, EditorContent } from '@tiptap/react';
55
- import StarterKit from '@tiptap/starter-kit';
56
- import Placeholder from '@tiptap/extension-placeholder';
57
- import Image from '@tiptap/extension-image';
58
- import Link from '@tiptap/extension-link';
59
- import Collaboration from '@tiptap/extension-collaboration';
60
- import * as Y from 'yjs';
61
-
62
- const ydoc = new Y.Doc();
63
-
64
- function RichEditor({ onUpdate }: { onUpdate: (json: object) => void }) {
65
- const editor = useEditor({
66
- extensions: [
67
- StarterKit.configure({ history: false }), // Disable history for collab
68
- Placeholder.configure({ placeholder: 'Start writing...' }),
69
- Image.configure({ inline: true, allowBase64: false }),
70
- Link.configure({ openOnClick: false, autolink: true }),
71
- Collaboration.configure({ document: ydoc }),
72
- ],
73
- onUpdate: ({ editor }) => onUpdate(editor.getJSON()),
74
- });
75
-
76
- return (
77
- <div className="editor-wrapper">
78
- <MenuBar editor={editor} />
79
- <EditorContent editor={editor} className="prose max-w-none" />
80
- </div>
81
- );
82
- }
83
- ```
84
-
85
- #### 2. Custom Slash Command Extension (Tiptap)
86
-
87
- ```typescript
88
- import { Extension } from '@tiptap/core';
89
- import Suggestion from '@tiptap/suggestion';
90
-
91
- export const SlashCommands = Extension.create({
92
- name: 'slashCommands',
93
- addOptions() {
94
- return {
95
- suggestion: {
96
- char: '/',
97
- items: ({ query }) => [
98
- { title: 'Heading 1', command: ({ editor }) => editor.chain().focus().toggleHeading({ level: 1 }).run() },
99
- { title: 'Bullet List', command: ({ editor }) => editor.chain().focus().toggleBulletList().run() },
100
- { title: 'Code Block', command: ({ editor }) => editor.chain().focus().toggleCodeBlock().run() },
101
- { title: 'Image', command: ({ editor }) => { /* open upload dialog */ } },
102
- ].filter((item) => item.title.toLowerCase().includes(query.toLowerCase())),
103
- },
104
- };
105
- },
106
- addProseMirrorPlugins() {
107
- return [Suggestion({ editor: this.editor, ...this.options.suggestion })];
108
- },
109
- });
110
- ```
111
-
112
- #### 3. Lexical Setup (React)
113
-
114
- ```tsx
115
- import { LexicalComposer } from '@lexical/react/LexicalComposer';
116
- import { RichTextPlugin } from '@lexical/react/LexicalRichTextPlugin';
117
- import { ContentEditable } from '@lexical/react/LexicalContentEditable';
118
- import { HistoryPlugin } from '@lexical/react/LexicalHistoryPlugin';
119
- import { AutoFocusPlugin } from '@lexical/react/LexicalAutoFocusPlugin';
120
- import { HeadingNode, QuoteNode } from '@lexical/rich-text';
121
- import { ListNode, ListItemNode } from '@lexical/list';
122
- import { CodeNode } from '@lexical/code';
123
-
124
- const editorConfig = {
125
- namespace: 'MyEditor',
126
- nodes: [HeadingNode, QuoteNode, ListNode, ListItemNode, CodeNode],
127
- onError: (error: Error) => console.error(error),
128
- theme: { /* custom theme classes */ },
129
- };
130
-
131
- function LexicalEditor() {
132
- return (
133
- <LexicalComposer initialConfig={editorConfig}>
134
- <RichTextPlugin
135
- contentEditable={<ContentEditable className="prose" />}
136
- placeholder={<div className="text-gray-400">Start writing...</div>}
137
- ErrorBoundary={LexicalErrorBoundary}
138
- />
139
- <HistoryPlugin />
140
- <AutoFocusPlugin />
141
- </LexicalComposer>
142
- );
143
- }
144
- ```
145
-
146
- #### 4. Content Serialization Patterns
147
- - **JSON** (Tiptap/Lexical): Store editor state as JSON for exact restoration.
148
- - **HTML**: Use `editor.getHTML()` for rendering in non-editor contexts.
149
- - **Markdown**: Convert with `@tiptap/extension-markdown` for developer-facing content.
150
- - **Portable Text** (Sanity): Map Tiptap nodes to Portable Text blocks for CMS storage.
151
-
152
- ### Production Checklist
153
- - [ ] Content sanitization (DOMPurify) before rendering user HTML.
154
- - [ ] Image upload with presigned URLs (not base64 in content).
155
- - [ ] Keyboard shortcuts documented and accessible.
156
- - [ ] Mobile-responsive toolbar (sticky or floating).
157
- - [ ] Autosave with debounce (500ms) and conflict resolution.
158
- - [ ] Max content length validation.
159
-
160
- ---
161
-
162
- <a name="bahasa-indonesia"></a>
163
- ## Bahasa Indonesia
164
-
165
- ### Integrasi Orkestrasi
166
- - **`realtime-collaboration-expert`**: CRDT Yjs/Automerge untuk editing kolaboratif.
167
- - **`form-validation-expert`**: Pola integrasi form untuk konten editor.
168
- - **`headless-cms-expert`**: Integrasi skema CMS untuk field rich text.
169
-
170
- ### Deskripsi
171
- Panduan ahli untuk mengintegrasikan editor rich text berkualitas produksi ke dalam aplikasi web. Mencakup Tiptap v2, Lexical (Meta), dan ProseMirror. Termasuk pembuatan node/mark kustom, editing kolaboratif dengan Yjs, slash commands, sistem mention, embedding gambar/video, dan output Portable Text.
172
-
173
- ### Kondisi Pemicu
174
- - Menambahkan editor WYSIWYG atau rich text ke aplikasi.
175
- - Membangun fitur editing dokumen kolaboratif.
176
- - Membuat ekstensi editor kustom (mention, slash commands, embed).
177
- - Memilih antara Tiptap, Lexical, atau ProseMirror.
1
+ ---
2
+ name: rich-text-editor-expert
3
+ description: "Expert guide for rich text editor integration (Tiptap, Lexical, ProseMirror), collaborative editing, and custom extensions / Panduan ahli integrasi editor rich text (Tiptap, Lexical, ProseMirror), editing kolaboratif, dan ekstensi kustom."
4
+ author: "Roedy Rustam"
5
+ version: "3.0.0"
6
+ ---
7
+
8
+ # Rich Text Editor Expert (2026 Edition)
9
+
10
+ [English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
11
+
12
+ ---
13
+
14
+ <a name="english"></a>
15
+ ## English
16
+
17
+ ### Orchestration & Integration
18
+ - **`realtime-collaboration-expert`**: Yjs/Automerge CRDTs for collaborative editing.
19
+ - **`form-validation-expert`**: Form integration patterns for editor content.
20
+ - **`headless-cms-expert`**: CMS schema integration for rich text fields.
21
+ - **`file-upload-media-expert`**: Image/video embedding within editor content.
22
+ - **`senior-frontend`**: React component patterns for editor wrappers.
23
+
24
+ ### Description
25
+ Expert guide for integrating production-quality rich text editors into web applications. Covers Tiptap v2 (ProseMirror-based, extensible), Lexical (Meta's framework, high-performance), and ProseMirror (low-level, maximum control). Includes custom node/mark creation, collaborative editing with Yjs, slash commands, mention systems, image/video embedding, Portable Text output, and accessibility compliance.
26
+
27
+ ### Trigger Conditions
28
+ - Adding a WYSIWYG or rich text editor to an application.
29
+ - Building collaborative document editing features.
30
+ - Creating custom editor extensions (mentions, slash commands, embeds).
31
+ - Choosing between Tiptap, Lexical, or ProseMirror.
32
+ - Implementing content serialization (HTML, JSON, Markdown, Portable Text).
33
+
34
+ ---
35
+
36
+ ### Editor Selection Guide
37
+
38
+ | Criteria | Tiptap v2 | Lexical (Meta) | ProseMirror |
39
+ |----------|-----------|----------------|-------------|
40
+ | Abstraction Level | High | Medium | Low |
41
+ | Framework | React, Vue, vanilla | React (primary) | Vanilla JS |
42
+ | Extension Ecosystem | ★★★★★ (50+ extensions) | ★★★ (growing) | ★★★★ (community) |
43
+ | Collaboration | Yjs built-in | Yjs plugin | Yjs via prosemirror-collab |
44
+ | Performance | ★★★★ | ★★★★★ | ★★★★ |
45
+ | Learning Curve | Low-Medium | Medium-High | High |
46
+ | **Best For** | Most apps, CMS | High-scale, messaging | Custom editors |
47
+
48
+ **Recommendation:** Use **Tiptap v2** for 90% of use cases. Use **Lexical** for high-performance messaging apps. Use **ProseMirror** only when you need full low-level control.
49
+
50
+ ### Core Patterns
51
+
52
+ #### 1. Tiptap v2 Setup (React)
53
+
54
+ ```tsx
55
+ import { useEditor, EditorContent } from '@tiptap/react';
56
+ import StarterKit from '@tiptap/starter-kit';
57
+ import Placeholder from '@tiptap/extension-placeholder';
58
+ import Image from '@tiptap/extension-image';
59
+ import Link from '@tiptap/extension-link';
60
+ import Collaboration from '@tiptap/extension-collaboration';
61
+ import * as Y from 'yjs';
62
+
63
+ const ydoc = new Y.Doc();
64
+
65
+ function RichEditor({ onUpdate }: { onUpdate: (json: object) => void }) {
66
+ const editor = useEditor({
67
+ extensions: [
68
+ StarterKit.configure({ history: false }), // Disable history for collab
69
+ Placeholder.configure({ placeholder: 'Start writing...' }),
70
+ Image.configure({ inline: true, allowBase64: false }),
71
+ Link.configure({ openOnClick: false, autolink: true }),
72
+ Collaboration.configure({ document: ydoc }),
73
+ ],
74
+ onUpdate: ({ editor }) => onUpdate(editor.getJSON()),
75
+ });
76
+
77
+ return (
78
+ <div className="editor-wrapper">
79
+ <MenuBar editor={editor} />
80
+ <EditorContent editor={editor} className="prose max-w-none" />
81
+ </div>
82
+ );
83
+ }
84
+ ```
85
+
86
+ #### 2. Custom Slash Command Extension (Tiptap)
87
+
88
+ ```typescript
89
+ import { Extension } from '@tiptap/core';
90
+ import Suggestion from '@tiptap/suggestion';
91
+
92
+ export const SlashCommands = Extension.create({
93
+ name: 'slashCommands',
94
+ addOptions() {
95
+ return {
96
+ suggestion: {
97
+ char: '/',
98
+ items: ({ query }) => [
99
+ { title: 'Heading 1', command: ({ editor }) => editor.chain().focus().toggleHeading({ level: 1 }).run() },
100
+ { title: 'Bullet List', command: ({ editor }) => editor.chain().focus().toggleBulletList().run() },
101
+ { title: 'Code Block', command: ({ editor }) => editor.chain().focus().toggleCodeBlock().run() },
102
+ { title: 'Image', command: ({ editor }) => { /* open upload dialog */ } },
103
+ ].filter((item) => item.title.toLowerCase().includes(query.toLowerCase())),
104
+ },
105
+ };
106
+ },
107
+ addProseMirrorPlugins() {
108
+ return [Suggestion({ editor: this.editor, ...this.options.suggestion })];
109
+ },
110
+ });
111
+ ```
112
+
113
+ #### 3. Lexical Setup (React)
114
+
115
+ ```tsx
116
+ import { LexicalComposer } from '@lexical/react/LexicalComposer';
117
+ import { RichTextPlugin } from '@lexical/react/LexicalRichTextPlugin';
118
+ import { ContentEditable } from '@lexical/react/LexicalContentEditable';
119
+ import { HistoryPlugin } from '@lexical/react/LexicalHistoryPlugin';
120
+ import { AutoFocusPlugin } from '@lexical/react/LexicalAutoFocusPlugin';
121
+ import { HeadingNode, QuoteNode } from '@lexical/rich-text';
122
+ import { ListNode, ListItemNode } from '@lexical/list';
123
+ import { CodeNode } from '@lexical/code';
124
+
125
+ const editorConfig = {
126
+ namespace: 'MyEditor',
127
+ nodes: [HeadingNode, QuoteNode, ListNode, ListItemNode, CodeNode],
128
+ onError: (error: Error) => console.error(error),
129
+ theme: { /* custom theme classes */ },
130
+ };
131
+
132
+ function LexicalEditor() {
133
+ return (
134
+ <LexicalComposer initialConfig={editorConfig}>
135
+ <RichTextPlugin
136
+ contentEditable={<ContentEditable className="prose" />}
137
+ placeholder={<div className="text-gray-400">Start writing...</div>}
138
+ ErrorBoundary={LexicalErrorBoundary}
139
+ />
140
+ <HistoryPlugin />
141
+ <AutoFocusPlugin />
142
+ </LexicalComposer>
143
+ );
144
+ }
145
+ ```
146
+
147
+ #### 4. Content Serialization Patterns
148
+ - **JSON** (Tiptap/Lexical): Store editor state as JSON for exact restoration.
149
+ - **HTML**: Use `editor.getHTML()` for rendering in non-editor contexts.
150
+ - **Markdown**: Convert with `@tiptap/extension-markdown` for developer-facing content.
151
+ - **Portable Text** (Sanity): Map Tiptap nodes to Portable Text blocks for CMS storage.
152
+
153
+ ### Production Checklist
154
+ - [ ] Content sanitization (DOMPurify) before rendering user HTML.
155
+ - [ ] Image upload with presigned URLs (not base64 in content).
156
+ - [ ] Keyboard shortcuts documented and accessible.
157
+ - [ ] Mobile-responsive toolbar (sticky or floating).
158
+ - [ ] Autosave with debounce (500ms) and conflict resolution.
159
+ - [ ] Max content length validation.
160
+
161
+ ---
162
+
163
+ <a name="bahasa-indonesia"></a>
164
+ ## Bahasa Indonesia
165
+
166
+ ### Integrasi Orkestrasi
167
+ - **`realtime-collaboration-expert`**: CRDT Yjs/Automerge untuk editing kolaboratif.
168
+ - **`form-validation-expert`**: Pola integrasi form untuk konten editor.
169
+ - **`headless-cms-expert`**: Integrasi skema CMS untuk field rich text.
170
+
171
+ ### Deskripsi
172
+ Panduan ahli untuk mengintegrasikan editor rich text berkualitas produksi ke dalam aplikasi web. Mencakup Tiptap v2, Lexical (Meta), dan ProseMirror. Termasuk pembuatan node/mark kustom, editing kolaboratif dengan Yjs, slash commands, sistem mention, embedding gambar/video, dan output Portable Text.
173
+
174
+ ### Kondisi Pemicu
175
+ - Menambahkan editor WYSIWYG atau rich text ke aplikasi.
176
+ - Membangun fitur editing dokumen kolaboratif.
177
+ - Membuat ekstensi editor kustom (mention, slash commands, embed).
178
+ - Memilih antara Tiptap, Lexical, atau ProseMirror.