vibes-plug 2.5.0 → 2.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude/rules/vibes-plug-core.md +32 -0
- package/.cursor/rules/vibes-plug-core.mdc +51 -0
- package/.cursorrules +42 -0
- package/AGENTS.md +37 -7
- package/BLUEPRINT.md +309 -217
- package/CHANGELOG.md +133 -1
- package/CLAUDE.md +70 -0
- package/LICENSE +1 -1
- package/README.md +641 -415
- package/index.js +19 -0
- package/package.json +44 -8
- package/plugin.json +24 -7
- package/scripts/generate_swarm_gif.py +295 -0
- package/scripts/install.js +201 -0
- package/skills/accessibility-testing-expert/SKILL.md +116 -0
- package/skills/ai-cost-token-optimizer/SKILL.md +82 -52
- package/skills/ai-evals-benchmark-expert/SKILL.md +188 -0
- package/skills/ai-llm-integration-expert/SKILL.md +185 -178
- package/skills/ai-media-generation-expert/SKILL.md +172 -0
- package/skills/ai-prompt-engineering-expert/SKILL.md +84 -0
- package/skills/angular-expert/SKILL.md +148 -0
- package/skills/api-design-expert/SKILL.md +6 -3
- package/skills/api-gateway-proxy-expert/SKILL.md +81 -0
- package/skills/app-analyzer-optimizer/SKILL.md +6 -3
- package/skills/apple-ecosystem-expert/SKILL.md +144 -141
- package/skills/{asisten_ramah → asisten-ramah}/SKILL.md +7 -1
- package/skills/astro-framework-expert/SKILL.md +200 -0
- package/skills/async-queue-temporal-expert/SKILL.md +210 -24
- package/skills/authentication-identity-expert/SKILL.md +278 -275
- package/skills/auto-doc-updater/SKILL.md +7 -1
- package/skills/autonomous-chaos-monkey/SKILL.md +63 -63
- package/skills/autonomous-red-teamer/SKILL.md +172 -28
- package/skills/autonomous-tdd-debugger/SKILL.md +70 -64
- package/skills/background-jobs-queue-expert/SKILL.md +235 -0
- package/skills/biome-linter-formatter-expert/SKILL.md +89 -0
- package/skills/blockchain-web3-expert/SKILL.md +115 -0
- package/skills/bootstrap-to-modern/SKILL.md +9 -6
- package/skills/brainstorming/SKILL.md +58 -50
- package/skills/browser-automation-expert/SKILL.md +197 -21
- package/skills/bun-runtime-expert/SKILL.md +7 -1
- package/skills/chatbot-messaging-expert/SKILL.md +114 -0
- package/skills/ci-cd-devops-architect/SKILL.md +45 -36
- package/skills/cloud-hosting-expert/SKILL.md +7 -1
- package/skills/coderabbit/SKILL.md +7 -1
- package/skills/compliance-gdpr-privacy-expert/SKILL.md +85 -0
- package/skills/cron-scheduler-expert/SKILL.md +303 -297
- package/skills/data-pipeline-etl-expert/SKILL.md +84 -0
- package/skills/data-telemetry-expert/SKILL.md +7 -1
- package/skills/data-visualization-expert/SKILL.md +154 -0
- package/skills/database-migration-versioning-expert/SKILL.md +90 -0
- package/skills/database-orm-expert/SKILL.md +13 -3
- package/skills/dependency-upgrade-migrator/SKILL.md +300 -294
- package/skills/design-system-architect/SKILL.md +278 -259
- package/skills/desktop-electron-expert/SKILL.md +128 -0
- package/skills/documentation-site-expert/SKILL.md +59 -0
- package/skills/doku-mcp-server/SKILL.md +7 -1
- package/skills/doku-payment-gateway/SKILL.md +7 -1
- package/skills/domain-driven-design-expert/SKILL.md +82 -0
- package/skills/e2e-testing-expert/SKILL.md +7 -1
- package/skills/ecommerce-expert/SKILL.md +87 -0
- package/skills/edge-serverless-db-expert/SKILL.md +98 -42
- package/skills/email-notification-expert/SKILL.md +367 -361
- package/skills/error-resilience-expert/SKILL.md +485 -479
- package/skills/event-driven-architect/SKILL.md +7 -1
- package/skills/feature-flag-analytics-expert/SKILL.md +65 -45
- package/skills/file-upload-media-expert/SKILL.md +436 -430
- package/skills/firebase-security-expert/SKILL.md +7 -1
- package/skills/form-validation-expert/SKILL.md +406 -400
- package/skills/fullstack-expert/SKILL.md +60 -1
- package/skills/gemini-agent-booster/SKILL.md +173 -135
- package/skills/geospatial-maps-expert/SKILL.md +80 -0
- package/skills/global-a11y-i18n-expert/SKILL.md +7 -1
- package/skills/glsl-shader-expert/SKILL.md +106 -100
- package/skills/go-programming-expert/SKILL.md +21 -15
- package/skills/graph-rag-knowledge-expert/SKILL.md +159 -0
- package/skills/graphql-apollo-expert/SKILL.md +113 -107
- package/skills/headless-cms-expert/SKILL.md +181 -0
- package/skills/hig/SKILL.md +7 -1
- package/skills/js-backend-expert/SKILL.md +218 -216
- package/skills/legacy-code-translator/SKILL.md +70 -64
- package/skills/local-slm-edge-ai-expert/SKILL.md +167 -0
- package/skills/logging-error-tracking-expert/SKILL.md +343 -337
- package/skills/mcp-client-orchestrator/SKILL.md +75 -69
- package/skills/mcp-server-architect/SKILL.md +294 -194
- package/skills/micro-frontend-architect/SKILL.md +111 -105
- package/skills/mobile-expo-expert/SKILL.md +8 -2
- package/skills/mobile-push-notification-expert/SKILL.md +70 -50
- package/skills/modern-css-native-expert/SKILL.md +189 -0
- package/skills/monday-design-aesthetic/SKILL.md +7 -1
- package/skills/monorepo-architect/SKILL.md +7 -1
- package/skills/mpa-orchestrator/SKILL.md +20 -1
- package/skills/multi-agent-orchestration/SKILL.md +254 -234
- package/skills/multiple-entry-points/SKILL.md +37 -1
- package/skills/mvc-expert/SKILL.md +7 -1
- package/skills/n8n-automation-expert/SKILL.md +89 -0
- package/skills/nextjs-app-router-expert/SKILL.md +148 -0
- package/skills/openapi-swagger-codegen-expert/SKILL.md +67 -0
- package/skills/payment-gateway-expert/SKILL.md +85 -1
- package/skills/pdf-document-generation-expert/SKILL.md +91 -0
- package/skills/performance-web-vitals/SKILL.md +7 -1
- package/skills/post-quantum-crypto-migrator/SKILL.md +57 -57
- package/skills/prd-architect/SKILL.md +7 -1
- package/skills/proactive-background-watcher/SKILL.md +67 -61
- package/skills/production-ready-hardener/SKILL.md +461 -455
- package/skills/project-context-mapper/SKILL.md +84 -78
- package/skills/pwa-offline-first-expert/SKILL.md +185 -0
- package/skills/python-programming-expert/SKILL.md +407 -401
- package/skills/rate-limit-abuse-prevention/SKILL.md +376 -370
- package/skills/realtime-collaboration-expert/SKILL.md +55 -1
- package/skills/rich-text-editor-expert/SKILL.md +177 -0
- package/skills/rust-programming-expert/SKILL.md +7 -1
- package/skills/saas-billing/SKILL.md +7 -1
- package/skills/saas-multi-tenant/SKILL.md +7 -1
- package/skills/saas-mvp-launcher/SKILL.md +20 -1
- package/skills/saas-transformer/SKILL.md +499 -488
- package/skills/scalability-clean-code/SKILL.md +7 -1
- package/skills/search-engine-expert/SKILL.md +89 -0
- package/skills/secure-fuzz-testing/SKILL.md +7 -1
- package/skills/self-evolving-memory-graph/SKILL.md +90 -74
- package/skills/self-healing-cloud-orchestrator/SKILL.md +57 -57
- package/skills/senior-frontend/SKILL.md +141 -161
- package/skills/seo/SKILL.md +41 -17
- package/skills/session-context-loader/SKILL.md +82 -76
- package/skills/session-handoff-resume/SKILL.md +7 -1
- package/skills/{skill_baru → skill-baru}/SKILL.md +8 -2
- package/skills/solidjs-expert/SKILL.md +80 -0
- package/skills/spa-orchestrator/SKILL.md +20 -1
- package/skills/sse-websocket-streaming-expert/SKILL.md +93 -0
- package/skills/state-management-expert/SKILL.md +7 -1
- package/skills/supabase-migration/SKILL.md +47 -1
- package/skills/supabase-security-expert/SKILL.md +7 -1
- package/skills/svelte-sveltekit-expert/SKILL.md +91 -0
- package/skills/svg-animation-motion-expert/SKILL.md +115 -0
- package/skills/tailwind-expert/SKILL.md +88 -136
- package/skills/tanstack-query-expert/SKILL.md +7 -1
- package/skills/tauri-expert/SKILL.md +7 -1
- package/skills/token-saver/SKILL.md +1 -1
- package/skills/typescript-expert/SKILL.md +12 -6
- package/skills/ui-components-expert/SKILL.md +165 -279
- package/skills/ui-ux-pro-max/SKILL.md +23 -3
- package/skills/vector-db-rag-expert/SKILL.md +175 -19
- package/skills/vibe-code-gardener/SKILL.md +1 -1
- package/skills/visual-qa-vision-agent/SKILL.md +70 -64
- package/skills/voice-ai-realtime-agent/SKILL.md +202 -0
- package/skills/vue-frontend-expert/SKILL.md +131 -125
- package/skills/wasm-edge-computing-expert/SKILL.md +97 -0
- package/skills/web-3d-graphics-expert/SKILL.md +136 -130
- package/skills/web-game-engine-expert/SKILL.md +101 -95
- package/skills/web-scraper/SKILL.md +157 -207
- package/skills/website-design-cloner/SKILL.md +179 -173
- package/skills/webxr-ar-vr-expert/SKILL.md +122 -116
- package/skills/wordpress-headless-expert/SKILL.md +144 -0
- package/skills/zero-to-prod-orchestrator/SKILL.md +52 -27
- package/skills/zero-trust-secret-vault/SKILL.md +87 -39
- package/.github/ISSUE_TEMPLATE/feature_request.md +0 -20
- package/.github/workflows/publish.yml +0 -20
- package/CONTRIBUTING.md +0 -199
- package/SECURITY.md +0 -21
- package/banner.png +0 -0
- package/skills/autonomous-swarm-director/SKILL.md +0 -69
- package/skills/hyper-context-synthesizer/SKILL.md +0 -55
- package/skills/llm-cost-arbitrage-router/SKILL.md +0 -59
- package/skills/senior-fullstack/SKILL.md +0 -167
- package/skills/senior-fullstack/references/architecture_patterns.md +0 -160
- package/skills/senior-fullstack/references/development_workflows.md +0 -222
- package/skills/senior-fullstack/references/tech_stack_guide.md +0 -190
- package/skills/senior-fullstack/scripts/code_quality_analyzer.py +0 -114
- package/skills/senior-fullstack/scripts/fullstack_scaffolder.py +0 -114
- package/skills/senior-fullstack/scripts/project_scaffolder.py +0 -114
- package/skills/seo-aeo-landing-page-writer/SKILL.md +0 -97
- package/skills/seo-geo/SKILL.md +0 -188
- package/skills/ui-ux-pro-max/scripts/__pycache__/core.cpython-310.pyc +0 -0
- package/skills/ui-ux-pro-max/scripts/__pycache__/core.cpython-312.pyc +0 -0
- package/skills/ui-ux-pro-max/scripts/__pycache__/design_system.cpython-310.pyc +0 -0
- package/skills/ui-ux-pro-max/scripts/__pycache__/design_system.cpython-312.pyc +0 -0
- package/skills/ui_ux_expert/SKILL.md +0 -125
- package/vibes-swarm-demo.gif +0 -0
|
@@ -0,0 +1,144 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: wordpress-headless-expert
|
|
3
|
+
description: "Expert guide for headless WordPress architecture — WPGraphQL, ACF Pro, Faust.js, Next.js/Astro frontend, webhooks, and caching / Panduan ahli arsitektur WordPress headless."
|
|
4
|
+
author: "Roedy Rustam"
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# WordPress Headless Expert (2026 Edition)
|
|
8
|
+
|
|
9
|
+
[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
|
|
10
|
+
|
|
11
|
+
---
|
|
12
|
+
|
|
13
|
+
<a name="english"></a>
|
|
14
|
+
## English
|
|
15
|
+
|
|
16
|
+
### Orchestration & Integration
|
|
17
|
+
- **`headless-cms-expert`**: Comparing and migrating between CMS backends.
|
|
18
|
+
- **`nextjs-app-router-expert`**: Next.js App Router integration with WPGraphQL.
|
|
19
|
+
- **`astro-framework-expert`**: Static site generation and content pipelines from WordPress.
|
|
20
|
+
- **`seo`**: Syncing Yoast SEO / Rank Math metadata to modern frontend head tags.
|
|
21
|
+
- **`performance-web-vitals`**: Caching and Edge SSR optimization for decoupled WordPress.
|
|
22
|
+
|
|
23
|
+
### Description
|
|
24
|
+
Production guide for architecting, deploying, and maintaining headless WordPress systems. Covers decoupled WordPress backends with WPGraphQL and Advanced Custom Fields (ACF Pro), frontend rendering with Next.js 15 or Astro 5, Faust.js framework integration, webhook-triggered on-demand revalidation, authentication (JWT / Application Passwords), and WooCommerce headless setups.
|
|
25
|
+
|
|
26
|
+
### Trigger Conditions
|
|
27
|
+
- Decoupling an existing WordPress site into a headless architecture with Next.js/Astro.
|
|
28
|
+
- Querying WordPress content using WPGraphQL and ACF Pro field groups.
|
|
29
|
+
- Synchronizing SEO metadata (Yoast / RankMath) with modern frontend metadata APIs.
|
|
30
|
+
- Setting up on-demand ISR revalidation hooks from WordPress publish events.
|
|
31
|
+
|
|
32
|
+
---
|
|
33
|
+
|
|
34
|
+
### Core Architecture & Patterns
|
|
35
|
+
|
|
36
|
+
#### 1. WPGraphQL Query Integration (Next.js 15 Server Component)
|
|
37
|
+
```typescript
|
|
38
|
+
const WP_GRAPHQL_ENDPOINT = process.env.WORDPRESS_API_URL || 'https://cms.example.com/graphql';
|
|
39
|
+
|
|
40
|
+
interface PostPreview {
|
|
41
|
+
id: string;
|
|
42
|
+
title: string;
|
|
43
|
+
slug: string;
|
|
44
|
+
date: string;
|
|
45
|
+
excerpt: string;
|
|
46
|
+
featuredImage?: {
|
|
47
|
+
node: {
|
|
48
|
+
sourceUrl: string;
|
|
49
|
+
altText: string;
|
|
50
|
+
};
|
|
51
|
+
};
|
|
52
|
+
}
|
|
53
|
+
|
|
54
|
+
export async function fetchWordPressPosts(): Promise<PostPreview[]> {
|
|
55
|
+
const query = `
|
|
56
|
+
query GetLatestPosts {
|
|
57
|
+
posts(first: 10, where: { orderby: { field: DATE, order: DESC } }) {
|
|
58
|
+
nodes {
|
|
59
|
+
id
|
|
60
|
+
title
|
|
61
|
+
slug
|
|
62
|
+
date
|
|
63
|
+
excerpt
|
|
64
|
+
featuredImage {
|
|
65
|
+
node {
|
|
66
|
+
sourceUrl
|
|
67
|
+
altText
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
}
|
|
72
|
+
}
|
|
73
|
+
`;
|
|
74
|
+
|
|
75
|
+
const res = await fetch(WP_GRAPHQL_ENDPOINT, {
|
|
76
|
+
method: 'POST',
|
|
77
|
+
headers: { 'Content-Type': 'application/json' },
|
|
78
|
+
body: JSON.stringify({ query }),
|
|
79
|
+
next: { tags: ['wordpress:posts'], revalidate: 3600 },
|
|
80
|
+
});
|
|
81
|
+
|
|
82
|
+
const { data } = await res.json();
|
|
83
|
+
return data?.posts?.nodes ?? [];
|
|
84
|
+
}
|
|
85
|
+
```
|
|
86
|
+
|
|
87
|
+
#### 2. Yoast / RankMath SEO Metadata Extraction
|
|
88
|
+
```typescript
|
|
89
|
+
export async function generateMetadata({ params }: { params: { slug: string } }) {
|
|
90
|
+
const query = `
|
|
91
|
+
query GetPostSEO($slug: ID!) {
|
|
92
|
+
post(id: $slug, idType: SLUG) {
|
|
93
|
+
title
|
|
94
|
+
seo {
|
|
95
|
+
title
|
|
96
|
+
metaDesc
|
|
97
|
+
opengraphTitle
|
|
98
|
+
opengraphDescription
|
|
99
|
+
opengraphImage {
|
|
100
|
+
sourceUrl
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
`;
|
|
106
|
+
|
|
107
|
+
const res = await fetch(WP_GRAPHQL_ENDPOINT, {
|
|
108
|
+
method: 'POST',
|
|
109
|
+
headers: { 'Content-Type': 'application/json' },
|
|
110
|
+
body: JSON.stringify({ query, variables: { slug: params.slug } }),
|
|
111
|
+
});
|
|
112
|
+
|
|
113
|
+
const { data } = await res.json();
|
|
114
|
+
const seo = data?.post?.seo;
|
|
115
|
+
|
|
116
|
+
return {
|
|
117
|
+
title: seo?.title || data?.post?.title,
|
|
118
|
+
description: seo?.metaDesc,
|
|
119
|
+
openGraph: {
|
|
120
|
+
title: seo?.opengraphTitle,
|
|
121
|
+
description: seo?.opengraphDescription,
|
|
122
|
+
images: seo?.opengraphImage ? [{ url: seo.opengraphImage.sourceUrl }] : [],
|
|
123
|
+
},
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
```
|
|
127
|
+
|
|
128
|
+
---
|
|
129
|
+
|
|
130
|
+
<a name="bahasa-indonesia"></a>
|
|
131
|
+
## Bahasa Indonesia
|
|
132
|
+
|
|
133
|
+
### Integrasi Orkestrasi
|
|
134
|
+
- **`headless-cms-expert`**: Pemilihan dan perbandingan CMS backend.
|
|
135
|
+
- **`nextjs-app-router-expert`**: Integrasi Next.js App Router dengan query WPGraphQL.
|
|
136
|
+
- **`seo`**: Sinkronisasi data meta Yoast/RankMath ke tag metadata frontend modern.
|
|
137
|
+
|
|
138
|
+
### Deskripsi
|
|
139
|
+
Panduan produksi untuk membangun dan memelihara arsitektur WordPress headless. Menggunakan WPGraphQL, ACF Pro, Faust.js, Next.js 15, atau Astro 5, revalidasi ISR instan via webhook, autentikasi aman, dan integrasi WooCommerce decoupled.
|
|
140
|
+
|
|
141
|
+
### Kondisi Pemicu
|
|
142
|
+
- Memisahkan frontend WordPress ke arsitektur decoupled (Next.js/Astro).
|
|
143
|
+
- Mengambil konten WordPress via WPGraphQL dan grup field ACF Pro.
|
|
144
|
+
- Mengonfigurasi revalidasi instan saat konten diterbitkan di WordPress.
|
|
@@ -13,6 +13,9 @@ author: "Roedy Rustam"
|
|
|
13
13
|
<a name="english"></a>
|
|
14
14
|
## English
|
|
15
15
|
|
|
16
|
+
### Orchestration & Integration
|
|
17
|
+
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.
|
|
18
|
+
|
|
16
19
|
### Overview
|
|
17
20
|
The **Zero to Production Orchestrator** is the ultimate master skill designed to orchestrate the entire `vibes-plug` ecosystem as a highly interconnected **engineering swarm**. By acting as the central conductor, it ensures that no sub-skill is executed in isolation. It guides fullstack developers through the complete software engineering lifecycle — from concept discovery to AI integration, multi-platform backend architecture, design systems, automated testing, GEO/AEO optimization, and production deployment.
|
|
18
21
|
|
|
@@ -42,7 +45,7 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
42
45
|
```
|
|
43
46
|
|
|
44
47
|
#### PHASE 1: Discovery & AI PRD Architectural Planning
|
|
45
|
-
**Orchestrates:** `prd-architect`, `brainstorming`, `mcp-server-architect`, `session-context-loader`, `dependency-upgrade-migrator`, `saas-mvp-launcher`, `web-scraper`, `website-design-cloner`, `
|
|
48
|
+
**Orchestrates:** `prd-architect`, `brainstorming`, `mcp-server-architect`, `session-context-loader`, `dependency-upgrade-migrator`, `app-analyzer-optimizer`, `seo`, `project-context-mapper`, `self-evolving-memory-graph`, `saas-mvp-launcher`, `web-scraper`, `website-design-cloner`, `headless-cms-expert`, `wordpress-headless-expert`, `documentation-site-expert`, `asisten-ramah`, `skill-baru`
|
|
46
49
|
- [ ] Conduct structured dialogue to clarify product intent, target audience, and non-functional goals.
|
|
47
50
|
- [ ] Automatically draft a comprehensive Product Requirements Document (PRD.md), Entity Relationship Diagram (ERD.md), and Documentation (DOKUMENTASI.md) alongside the Roadmap (ROADMAP.md).
|
|
48
51
|
- [ ] Plan AI/LLM integration strategy (Vercel AI SDK, MCP Server tools, or Multi-Agent Graph).
|
|
@@ -50,41 +53,45 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
50
53
|
- [ ] Initialize `BLUEPRINT.md` and `PROGRESS.md`.
|
|
51
54
|
|
|
52
55
|
#### PHASE 2: Project Foundation & Monorepo Setup
|
|
53
|
-
**Orchestrates:** `monorepo-architect`, `micro-frontend-architect`, `bun-runtime-expert`, `python-programming-expert`, `go-programming-expert`, `ci-cd-devops-architect`, `rust-programming-expert`, `typescript-expert`
|
|
56
|
+
**Orchestrates:** `monorepo-architect`, `micro-frontend-architect`, `bun-runtime-expert`, `python-programming-expert`, `go-programming-expert`, `ci-cd-devops-architect`, `rust-programming-expert`, `typescript-expert`, `biome-linter-formatter-expert`
|
|
54
57
|
- [ ] Initialize monorepo (Turborepo + pnpm workspaces) or single repo foundation.
|
|
55
|
-
- [ ] Set up language runtimes: Node.js
|
|
56
|
-
- [ ] Configure `Ruff`, `ESLint`, `Prettier`, and TypeScript strict configurations.
|
|
58
|
+
- [ ] Set up language runtimes: Node.js 24 LTS / Bun 1.2+ / Python 3.14+ (uv) / Go 1.25+ / Rust 2024.
|
|
59
|
+
- [ ] Configure `Biome v2` (Rust-based linter + formatter) or `Ruff`, `ESLint`, `Prettier`, and TypeScript strict configurations.
|
|
57
60
|
- [ ] Setup initial CI/CD pipeline template (GitHub Actions, Docker).
|
|
58
61
|
|
|
59
62
|
#### PHASE 3: Database & Multi-Tenant Core Architecture
|
|
60
|
-
**Orchestrates:** `fullstack-expert`, `database-orm-expert`, `saas-multi-tenant`, `supabase-migration`, `supabase-security-expert`, `edge-serverless-db-expert`, `
|
|
61
|
-
- [ ] Design normalized relational schemas and
|
|
62
|
-
- [ ] Configure ORM layer (Drizzle ORM / Prisma 6 / SQLx / sqlc).
|
|
63
|
+
**Orchestrates:** `fullstack-expert`, `database-migration-versioning-expert`, `database-orm-expert`, `domain-driven-design-expert`, `saas-multi-tenant`, `supabase-migration`, `supabase-security-expert`, `edge-serverless-db-expert`, `data-pipeline-etl-expert`, `search-engine-expert`, `geospatial-maps-expert`, `graph-rag-knowledge-expert`
|
|
64
|
+
- [ ] Design normalized relational schemas, document models, and geospatial PostGIS structures.
|
|
65
|
+
- [ ] Configure ORM layer (Drizzle ORM / Prisma 6 / SQLx / sqlc) and full-text search indexing (Typesense/Meilisearch).
|
|
63
66
|
- [ ] Implement Row-Level Security (RLS) policies and tenant isolation.
|
|
64
67
|
- [ ] Apply initial database migrations and connection poolers (PgBouncer/Supavisor/Neon).
|
|
65
68
|
|
|
66
69
|
#### PHASE 4: Backend APIs, Microservices & AI Agents
|
|
67
|
-
**Orchestrates:** `js-backend-expert`, `go-programming-expert`, `graphql-apollo-expert`, `ai-llm-integration-expert`, `multi-agent-orchestration`, `mcp-server-architect`, `authentication-identity-expert`, `email-notification-expert`, `cron-scheduler-expert`, `rate-limit-abuse-prevention`, `file-upload-media-expert`, `async-queue-temporal-expert`, `doku-mcp-server`, `event-driven-architect`, `gemini-agent-booster`, `mobile-push-notification-expert`, `realtime-collaboration-expert`, `
|
|
70
|
+
**Orchestrates:** `js-backend-expert`, `go-programming-expert`, `graphql-apollo-expert`, `openapi-swagger-codegen-expert`, `ai-llm-integration-expert`, `ai-prompt-engineering-expert`, `ai-media-generation-expert`, `multi-agent-orchestration`, `mcp-server-architect`, `authentication-identity-expert`, `email-notification-expert`, `cron-scheduler-expert`, `rate-limit-abuse-prevention`, `file-upload-media-expert`, `async-queue-temporal-expert`, `background-jobs-queue-expert`, `doku-mcp-server`, `event-driven-architect`, `gemini-agent-booster`, `mobile-push-notification-expert`, `realtime-collaboration-expert`, `api-gateway-proxy-expert`, `wasm-edge-computing-expert`, `sse-websocket-streaming-expert`, `n8n-automation-expert`, `chatbot-messaging-expert`, `pdf-document-generation-expert`, `ecommerce-expert`, `blockchain-web3-expert`, `local-slm-edge-ai-expert`, `voice-ai-realtime-agent`, `graph-rag-knowledge-expert`
|
|
68
71
|
- [ ] Build high-throughput REST / GraphQL / gRPC APIs using Fastify 5, NestJS, Hono, Gin, or Axum.
|
|
69
72
|
- [ ] Implement authentication (Clerk, Auth.js, Supabase Auth) and RBAC middleware.
|
|
70
73
|
- [ ] Build MCP Server tools or stateful LangGraph multi-agent workflows with human-in-the-loop gates.
|
|
74
|
+
- [ ] Integrate AI media generation (Flux/ElevenLabs/Whisper), chatbot platforms (WhatsApp/Telegram/Discord), and n8n automations.
|
|
71
75
|
- [ ] Implement background processing queues (BullMQ + Redis), scheduled jobs, and rate limiters.
|
|
72
|
-
- [ ] Set up transactional email pipeline (Resend/Postmark) and
|
|
76
|
+
- [ ] Set up transactional email pipeline (Resend/Postmark) and PDF generation.
|
|
73
77
|
- [ ] Implement file upload with presigned URLs (S3/R2) and media processing.
|
|
74
78
|
|
|
75
79
|
#### PHASE 5: Frontend, Design Systems & Mobile Apps
|
|
76
|
-
**Orchestrates:** `design-system-architect`, `senior-frontend`, `vue-frontend-expert`, `tailwind-expert`, `tanstack-query-expert`, `spa-orchestrator`, `mobile-expo-expert`, `apple-ecosystem-expert`, `tauri-expert`, `form-validation-expert`, `ui-components-expert`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `visual-qa-vision-agent`, `hig`, `global-a11y-i18n-expert`, `bootstrap-to-modern`, `monday-design-aesthetic`, `state-management-expert`, `ui-ux-pro-max`, `
|
|
80
|
+
**Orchestrates:** `modern-web-guidance`, `design-system-architect`, `senior-frontend`, `nextjs-app-router-expert`, `vue-frontend-expert`, `astro-framework-expert`, `svelte-sveltekit-expert`, `solidjs-expert`, `angular-expert`, `tailwind-expert`, `tanstack-query-expert`, `spa-orchestrator`, `mobile-expo-expert`, `apple-ecosystem-expert`, `tauri-expert`, `desktop-electron-expert`, `form-validation-expert`, `ui-components-expert`, `svg-animation-motion-expert`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `visual-qa-vision-agent`, `hig`, `global-a11y-i18n-expert`, `bootstrap-to-modern`, `monday-design-aesthetic`, `state-management-expert`, `ui-ux-pro-max`, `data-visualization-expert`, `rich-text-editor-expert`, `documentation-site-expert`, `blockchain-web3-expert`, `modern-css-native-expert`, `pwa-offline-first-expert`
|
|
81
|
+
- [ ] **MANDATORY**: Run `modern-web-guidance` FIRST before implementing any frontend HTML/CSS/JS features to ensure compliance with modern Google standards.
|
|
77
82
|
- [ ] Implement design tokens (OKLCH) and Tailwind CSS v4 `@theme` directive tokens.
|
|
78
83
|
- [ ] Construct accessible component primitives using Radix UI / Base UI and CVA variants.
|
|
79
|
-
- [ ]
|
|
84
|
+
- [ ] Integrate data visualizations (Recharts/Tremor/D3) and rich text editors (Tiptap/Lexical).
|
|
85
|
+
- [ ] Build React 19 / Next.js 15, Vue 3, Astro 5, Svelte 5, SolidJS 2, or Angular 19+ apps with state management and Web3 wallets.
|
|
86
|
+
- [ ] **MANDATORY**: Automatically scaffold standard pages: About, Profile, Contact, Terms of Reference/Service, and Privacy Policy.
|
|
80
87
|
- [ ] Implement complex forms with React Hook Form + Zod validation.
|
|
81
88
|
- [ ] If SPA architecture — coordinate with `spa-orchestrator` for routing (TanStack Router), state (TanStack Query v5), and decoupled API layer.
|
|
82
89
|
- [ ] Integrate frontend state management with TanStack Query v5.
|
|
83
90
|
|
|
84
91
|
#### PHASE 6: Automated Testing, Error Resilience & Security Audit
|
|
85
|
-
**Orchestrates:** `e2e-testing-expert`, `secure-fuzz-testing`, `firebase-security-expert`, `error-resilience-expert`, `logging-error-tracking-expert`, `vibe-code-gardener`, `coderabbit`, `autonomous-tdd-debugger`, `browser-automation-expert`, `zero-trust-secret-vault`, `autonomous-red-teamer`, `post-quantum-crypto-migrator`
|
|
92
|
+
**Orchestrates:** `e2e-testing-expert`, `accessibility-testing-expert`, `secure-fuzz-testing`, `firebase-security-expert`, `error-resilience-expert`, `logging-error-tracking-expert`, `vibe-code-gardener`, `coderabbit`, `autonomous-tdd-debugger`, `browser-automation-expert`, `zero-trust-secret-vault`, `autonomous-red-teamer`, `post-quantum-crypto-migrator`, `compliance-gdpr-privacy-expert`, `ai-evals-benchmark-expert`
|
|
86
93
|
- [ ] Write unit and integration tests with Vitest and pytest.
|
|
87
|
-
- [ ] Write resilient E2E browser tests with Playwright.
|
|
94
|
+
- [ ] Write resilient E2E browser tests with Playwright and automated WCAG 2.2 accessibility tests with `@axe-core/playwright` and Pa11y.
|
|
88
95
|
- [ ] Execute security fuzz testing (Atheris / cargo-fuzz / native Go fuzzing).
|
|
89
96
|
- [ ] Implement Error Boundaries, retry patterns, circuit breakers, and graceful degradation.
|
|
90
97
|
- [ ] Set up structured logging (Pino) and error tracking (Sentry) with source map uploads.
|
|
@@ -111,6 +118,9 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
111
118
|
<a name="bahasa-indonesia"></a>
|
|
112
119
|
## Bahasa Indonesia
|
|
113
120
|
|
|
121
|
+
### Integrasi Orkestrasi
|
|
122
|
+
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.
|
|
123
|
+
|
|
114
124
|
### Ringkasan
|
|
115
125
|
**Zero to Production Orchestrator** adalah skill master utama yang dirancang untuk mengorkestrasi seluruh ekosistem `vibes-plug` sebagai sebuah **engineering swarm** yang saling terhubung erat. Dengan bertindak sebagai konduktor pusat, skill ini memastikan tidak ada sub-skill yang dieksekusi secara terisolasi. Skill ini memandu pengembang *fullstack* melalui seluruh siklus hidup rekayasa perangkat lunak — mulai dari tahap ide awal hingga integrasi AI, arsitektur backend multi-platform, design system, pengujian otomatis, optimasi GEO/AEO, dan deployment produksi.
|
|
116
126
|
|
|
@@ -131,7 +141,7 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
131
141
|
### Master Pipeline Fullstack 8-Fase
|
|
132
142
|
|
|
133
143
|
#### FASE 1: Discovery & Perencanaan Arsitektur PRD AI
|
|
134
|
-
**Mengorkestrasi:** `prd-architect`, `brainstorming`, `mcp-server-architect`, `session-context-loader`, `dependency-upgrade-migrator`, `app-analyzer-optimizer`, `seo`, `project-context-mapper`, `self-evolving-memory-graph`, `saas-mvp-launcher`, `web-scraper`, `website-design-cloner`, `
|
|
144
|
+
**Mengorkestrasi:** `prd-architect`, `brainstorming`, `mcp-server-architect`, `session-context-loader`, `dependency-upgrade-migrator`, `app-analyzer-optimizer`, `seo`, `project-context-mapper`, `self-evolving-memory-graph`, `saas-mvp-launcher`, `web-scraper`, `website-design-cloner`, `headless-cms-expert`, `wordpress-headless-expert`, `documentation-site-expert`, `asisten-ramah`, `skill-baru`
|
|
135
145
|
- [ ] Dialog terstruktur untuk memperjelas tujuan produk, audiens target, dan persyaratan non-fungsional.
|
|
136
146
|
- [ ] Secara otomatis menyusun Product Requirements Document (PRD.md), Entity Relationship Diagram (ERD.md), dan Dokumentasi (DOKUMENTASI.md) yang komprehensif beserta Roadmap (ROADMAP.md).
|
|
137
147
|
- [ ] Merencanakan integrasi AI/LLM (Vercel AI SDK, alat MCP Server, atau Graf Multi-Agen).
|
|
@@ -139,41 +149,45 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
139
149
|
- [ ] Menginisialisasi `BLUEPRINT.md` dan `PROGRESS.md`.
|
|
140
150
|
|
|
141
151
|
#### FASE 2: Pondasi Proyek & Setup Monorepo
|
|
142
|
-
**Mengorkestrasi:** `monorepo-architect`, `micro-frontend-architect`, `bun-runtime-expert`, `python-programming-expert`, `go-programming-expert`, `ci-cd-devops-architect`, `spa-orchestrator`, `mpa-orchestrator`, `multiple-entry-points`, `mvc-expert`, `scalability-clean-code`, `api-design-expert`, `legacy-code-translator`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `rust-programming-expert`, `typescript-expert`
|
|
152
|
+
**Mengorkestrasi:** `monorepo-architect`, `micro-frontend-architect`, `bun-runtime-expert`, `python-programming-expert`, `go-programming-expert`, `ci-cd-devops-architect`, `spa-orchestrator`, `mpa-orchestrator`, `multiple-entry-points`, `mvc-expert`, `scalability-clean-code`, `api-design-expert`, `legacy-code-translator`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `rust-programming-expert`, `typescript-expert`, `biome-linter-formatter-expert`
|
|
143
153
|
- [ ] Inisialisasi monorepo (Turborepo + pnpm workspaces) atau repositori tunggal.
|
|
144
|
-
- [ ] Menyiapkan runtime bahasa: Node.js
|
|
145
|
-
- [ ] Konfigurasi `Ruff`, `ESLint`, `Prettier`, dan TypeScript ketat.
|
|
154
|
+
- [ ] Menyiapkan runtime bahasa: Node.js 24 LTS / Bun 1.2+ / Python 3.14+ (uv) / Go 1.25+ / Rust 2024.
|
|
155
|
+
- [ ] Konfigurasi `Biome v2` (Rust linter & formatter) atau `Ruff`, `ESLint`, `Prettier`, dan TypeScript ketat.
|
|
146
156
|
- [ ] Menyiapkan template pipeline CI/CD awal (GitHub Actions, Docker).
|
|
147
157
|
|
|
148
158
|
#### FASE 3: Database & Arsitektur Multi-Tenant
|
|
149
|
-
**Mengorkestrasi:** `fullstack-expert`, `database-orm-expert`, `saas-multi-tenant`, `supabase-migration`, `supabase-security-expert`, `edge-serverless-db-expert`, `
|
|
150
|
-
- [ ] Merancang skema relasional ter-normalisasi dan
|
|
151
|
-
- [ ] Konfigurasi lapisan ORM (Drizzle ORM / Prisma 6 / SQLx / sqlc).
|
|
159
|
+
**Mengorkestrasi:** `fullstack-expert`, `database-migration-versioning-expert`, `database-orm-expert`, `domain-driven-design-expert`, `saas-multi-tenant`, `supabase-migration`, `supabase-security-expert`, `edge-serverless-db-expert`, `data-pipeline-etl-expert`, `search-engine-expert`, `geospatial-maps-expert`, `graph-rag-knowledge-expert`
|
|
160
|
+
- [ ] Merancang skema relasional ter-normalisasi, pemodelan dokumen, dan struktur geospasial PostGIS.
|
|
161
|
+
- [ ] Konfigurasi lapisan ORM (Drizzle ORM / Prisma 6 / SQLx / sqlc) dan indexing mesin pencari (Typesense/Meilisearch).
|
|
152
162
|
- [ ] Mengimplementasikan kebijakan Row-Level Security (RLS) dan isolasi tenant.
|
|
153
163
|
- [ ] Menerapkan migrasi database awal dan connection poolers (PgBouncer/Supavisor/Neon).
|
|
154
164
|
|
|
155
165
|
#### FASE 4: Backend API, Microservices & Agen AI
|
|
156
|
-
**Mengorkestrasi:** `js-backend-expert`, `go-programming-expert`, `graphql-apollo-expert`, `ai-llm-integration-expert`, `multi-agent-orchestration`, `mcp-server-architect`, `authentication-identity-expert`, `email-notification-expert`, `cron-scheduler-expert`, `rate-limit-abuse-prevention`, `file-upload-media-expert`, `saas-billing`, `payment-gateway-expert`, `vector-db-rag-expert`, `mcp-client-orchestrator`, `
|
|
166
|
+
**Mengorkestrasi:** `js-backend-expert`, `go-programming-expert`, `graphql-apollo-expert`, `openapi-swagger-codegen-expert`, `ai-llm-integration-expert`, `ai-prompt-engineering-expert`, `ai-media-generation-expert`, `multi-agent-orchestration`, `mcp-server-architect`, `authentication-identity-expert`, `email-notification-expert`, `cron-scheduler-expert`, `rate-limit-abuse-prevention`, `file-upload-media-expert`, `saas-billing`, `payment-gateway-expert`, `vector-db-rag-expert`, `mcp-client-orchestrator`, `async-queue-temporal-expert`, `background-jobs-queue-expert`, `doku-mcp-server`, `event-driven-architect`, `gemini-agent-booster`, `mobile-push-notification-expert`, `realtime-collaboration-expert`, `api-gateway-proxy-expert`, `wasm-edge-computing-expert`, `sse-websocket-streaming-expert`, `n8n-automation-expert`, `chatbot-messaging-expert`, `pdf-document-generation-expert`, `ecommerce-expert`, `blockchain-web3-expert`, `local-slm-edge-ai-expert`, `voice-ai-realtime-agent`, `graph-rag-knowledge-expert`
|
|
157
167
|
- [ ] Bangun API REST / GraphQL / gRPC *high-throughput* menggunakan Fastify 5, NestJS, Hono, Gin, atau Axum.
|
|
158
168
|
- [ ] Mengimplementasikan autentikasi (Clerk, Auth.js, Supabase Auth) dan middleware RBAC.
|
|
159
169
|
- [ ] Membangun alat MCP Server atau alur kerja multi-agen LangGraph berbasis state dengan gerbang *human-in-the-loop*.
|
|
170
|
+
- [ ] Mengintegrasikan generasi media AI (Flux/ElevenLabs/Whisper), bot perpesanan (WhatsApp/Telegram/Discord), dan otomasi n8n.
|
|
160
171
|
- [ ] Mengimplementasikan antrean pemrosesan latar belakang (BullMQ + Redis), tugas terjadwal, dan rate limiter.
|
|
161
|
-
- [ ] Menyiapkan pipeline email transaksional (Resend/Postmark) dan sistem notifikasi.
|
|
172
|
+
- [ ] Menyiapkan pipeline email transaksional (Resend/Postmark), pembuatan PDF, dan sistem notifikasi.
|
|
162
173
|
- [ ] Mengimplementasikan upload file dengan presigned URL (S3/R2) dan pemrosesan media.
|
|
163
174
|
|
|
164
175
|
#### FASE 5: Frontend, Design System & Mobile App
|
|
165
|
-
**Mengorkestrasi:** `design-system-architect`, `senior-frontend`, `vue-frontend-expert`, `tailwind-expert`, `tanstack-query-expert`, `spa-orchestrator`, `mobile-expo-expert`, `apple-ecosystem-expert`, `tauri-expert`, `form-validation-expert`, `ui-components-expert`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `visual-qa-vision-agent`, `hig`, `global-a11y-i18n-expert`, `bootstrap-to-modern`, `monday-design-aesthetic`, `state-management-expert`, `ui-ux-pro-max`, `
|
|
176
|
+
**Mengorkestrasi:** `modern-web-guidance`, `design-system-architect`, `senior-frontend`, `nextjs-app-router-expert`, `vue-frontend-expert`, `astro-framework-expert`, `svelte-sveltekit-expert`, `solidjs-expert`, `angular-expert`, `tailwind-expert`, `tanstack-query-expert`, `spa-orchestrator`, `mobile-expo-expert`, `apple-ecosystem-expert`, `tauri-expert`, `desktop-electron-expert`, `form-validation-expert`, `ui-components-expert`, `svg-animation-motion-expert`, `web-3d-graphics-expert`, `web-game-engine-expert`, `glsl-shader-expert`, `webxr-ar-vr-expert`, `visual-qa-vision-agent`, `hig`, `global-a11y-i18n-expert`, `bootstrap-to-modern`, `monday-design-aesthetic`, `state-management-expert`, `ui-ux-pro-max`, `data-visualization-expert`, `rich-text-editor-expert`, `documentation-site-expert`, `blockchain-web3-expert`, `modern-css-native-expert`, `pwa-offline-first-expert`
|
|
177
|
+
- [ ] **MANDATORY**: Jalankan `modern-web-guidance` PERTAMA KALI sebelum mengimplementasikan fitur frontend HTML/CSS/JS untuk memastikan kepatuhan dengan standar modern Google.
|
|
166
178
|
- [ ] Implementasikan token desain (OKLCH) dan konfigurasi tema Tailwind CSS v4.
|
|
167
179
|
- [ ] Bangun komponen primitif aksesibel menggunakan Radix UI / Base UI dan CVA.
|
|
168
|
-
- [ ]
|
|
180
|
+
- [ ] Integrasikan visualisasi data (Recharts/Tremor/D3) dan editor rich text (Tiptap/Lexical).
|
|
181
|
+
- [ ] Buat halaman React 19 / Next.js 15, Vue 3, Astro 5, Svelte 5, SolidJS 2, atau Angular 19+ dengan wallet Web3.
|
|
182
|
+
- [ ] **MANDATORY**: Otomatis buat halaman standar: About, Profile, Contact, Terms of Reference/Service, dan Privacy Policy.
|
|
169
183
|
- [ ] Mengimplementasikan formulir kompleks dengan React Hook Form + validasi Zod.
|
|
170
184
|
- [ ] Jika arsitektur SPA — koordinasikan dengan `spa-orchestrator` untuk routing (TanStack Router), state (TanStack Query v5), dan API layer terpisah.
|
|
171
185
|
- [ ] Mengintegrasikan manajemen state frontend dengan TanStack Query v5.
|
|
172
186
|
|
|
173
187
|
#### FASE 6: Pengujian Otomatis, Ketahanan Error & Audit Keamanan
|
|
174
|
-
**Mengorkestrasi:** `e2e-testing-expert`, `secure-fuzz-testing`, `firebase-security-expert`, `error-resilience-expert`, `logging-error-tracking-expert`, `vibe-code-gardener`, `coderabbit`, `autonomous-tdd-debugger`, `browser-automation-expert`, `zero-trust-secret-vault`, `autonomous-red-teamer`, `post-quantum-crypto-migrator`
|
|
188
|
+
**Mengorkestrasi:** `e2e-testing-expert`, `accessibility-testing-expert`, `secure-fuzz-testing`, `firebase-security-expert`, `error-resilience-expert`, `logging-error-tracking-expert`, `vibe-code-gardener`, `coderabbit`, `autonomous-tdd-debugger`, `browser-automation-expert`, `zero-trust-secret-vault`, `autonomous-red-teamer`, `post-quantum-crypto-migrator`, `compliance-gdpr-privacy-expert`, `ai-evals-benchmark-expert`
|
|
175
189
|
- [ ] Menulis unit test dan integration test dengan Vitest dan pytest.
|
|
176
|
-
- [ ] Menulis pengujian browser E2E
|
|
190
|
+
- [ ] Menulis pengujian browser E2E Playwright dan pengujian aksesibilitas WCAG 2.2 otomatis (`@axe-core/playwright` dan Pa11y).
|
|
177
191
|
- [ ] Menjalankan pengujian fuzzing keamanan (Atheris / cargo-fuzz / native Go fuzzing).
|
|
178
192
|
- [ ] Mengimplementasikan Error Boundary, pola retry, circuit breaker, dan degradasi anggun.
|
|
179
193
|
- [ ] Menyiapkan logging terstruktur (Pino) dan pelacakan error (Sentry) dengan upload source map.
|
|
@@ -181,7 +195,7 @@ Launch/Deploy <--- Security/GEO <--- Testing/QA <--- Frontend/UI
|
|
|
181
195
|
- [ ] Menjalankan audit kualitas kode untuk membersihkan AI slop dan pembusukan arsitektur.
|
|
182
196
|
|
|
183
197
|
#### FASE 7: Hardening Pra-Peluncuran, Monitoring & DevOps Sentinel
|
|
184
|
-
**Mengorkestrasi:** `production-ready-hardener`, `app-analyzer-optimizer`, `seo`, `
|
|
198
|
+
**Mengorkestrasi:** `production-ready-hardener`, `app-analyzer-optimizer`, `seo`, `logging-error-tracking-expert`, `proactive-background-watcher`, `ai-cost-token-optimizer`, `data-telemetry-expert`, `feature-flag-analytics-expert`, `autonomous-chaos-monkey`, `self-healing-cloud-orchestrator`
|
|
185
199
|
- [ ] Audit pra-peluncuran pada Core Web Vitals (LCP, INP, CLS) dan ukuran bundle.
|
|
186
200
|
- [ ] Mengonfigurasi monitoring produksi, aturan alerting, dan notifikasi on-call.
|
|
187
201
|
- [ ] Mengoptimalkan GEO untuk AI Overviews, Perplexity, ChatGPT Search, dan merilis `/llms.txt`.
|
|
@@ -204,3 +218,14 @@ This generated image MUST be explicitly used as:
|
|
|
204
218
|
3. The Open Graph (OG) image for SEO metadata (`og:image`).
|
|
205
219
|
|
|
206
220
|
Do not use placeholders for these assets. Generate and integrate them automatically.
|
|
221
|
+
|
|
222
|
+
---
|
|
223
|
+
### 📄 Standard Pages Mandate (CRITICAL)
|
|
224
|
+
**MANDATORY**: Whenever you are building a new application, landing page, or website, you MUST automatically create the following standard pages:
|
|
225
|
+
1. **About Page** (`/about`)
|
|
226
|
+
2. **Profile Page** (`/profile`)
|
|
227
|
+
3. **Contact Page** (`/contact`)
|
|
228
|
+
4. **Terms of Reference / Terms of Service** (`/terms`)
|
|
229
|
+
5. **Privacy Policy** (`/privacy-policy`)
|
|
230
|
+
|
|
231
|
+
These pages must be generated with standard boilerplate content that can later be customized to fit the specific application. Do not wait for the user to ask for them; they are a strict requirement for all web projects. / **WAJIB**: Otomatis buatkan halaman standar (About, Profile, Contact, Terms, Privacy Policy) pada setiap pembuatan aplikasi/website baru dengan konten boilerplate yang bisa disesuaikan nanti.
|
|
@@ -1,40 +1,88 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: zero-trust-secret-vault
|
|
3
|
-
description: "Expert guide for Zero-Trust Secret Management (Infisical, HashiCorp Vault, Doppler), automated API key rotation, and environment security / Panduan ahli manajemen rahasia Zero-Trust, rotasi kunci API, dan keamanan variabel lingkungan."
|
|
1
|
+
---
|
|
2
|
+
name: zero-trust-secret-vault
|
|
3
|
+
description: "Expert guide for Zero-Trust Secret Management (Infisical, HashiCorp Vault, Doppler), automated API key rotation, and environment security / Panduan ahli manajemen rahasia Zero-Trust, rotasi kunci API, dan keamanan variabel lingkungan."
|
|
4
4
|
author: "Roedy Rustam"
|
|
5
|
-
---
|
|
6
|
-
|
|
7
|
-
# Zero-Trust Secret Vault & Credential Security Expert
|
|
8
|
-
|
|
9
|
-
[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
|
|
10
|
-
|
|
11
|
-
---
|
|
12
|
-
|
|
13
|
-
<a name="english"></a>
|
|
14
|
-
## English
|
|
15
|
-
|
|
16
|
-
### Purpose & Overview
|
|
17
|
-
Production-grade security standards for managing application secrets, environment variables, API keys, database credentials, and TLS certificates using Zero-Trust Secret Managers — Infisical, HashiCorp Vault, and Doppler — featuring automated secret rotation, dynamic credentials, and zero plain-text leaks in repositories or CI/CD pipelines.
|
|
18
|
-
|
|
19
|
-
### Key Capabilities
|
|
20
|
-
- **Zero Plain-Text Secrets**: Injecting encrypted secrets at runtime without storing `.env` files in production artifacts.
|
|
21
|
-
- **Automated Rotation**: Programmatic rotation of API keys, JWT secrets, and database passwords.
|
|
22
|
-
- **Audit Logging**: Tracking secret access, version history, and permission policies across development teams.
|
|
23
|
-
|
|
24
|
-
```bash
|
|
25
|
-
# Infisical CLI Runtime Secret Injection
|
|
26
|
-
infisical run -- env | grep DATABASE_URL
|
|
27
|
-
```
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# Zero-Trust Secret Vault & Credential Security Expert
|
|
8
|
+
|
|
9
|
+
[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
|
|
10
|
+
|
|
11
|
+
---
|
|
12
|
+
|
|
13
|
+
<a name="english"></a>
|
|
14
|
+
## English
|
|
15
|
+
|
|
16
|
+
### Purpose & Overview
|
|
17
|
+
Production-grade security standards for managing application secrets, environment variables, API keys, database credentials, and TLS certificates using Zero-Trust Secret Managers — Infisical, HashiCorp Vault, and Doppler — featuring automated secret rotation, dynamic credentials, and zero plain-text leaks in repositories or CI/CD pipelines.
|
|
18
|
+
|
|
19
|
+
### Key Capabilities
|
|
20
|
+
- **Zero Plain-Text Secrets**: Injecting encrypted secrets at runtime without storing `.env` files in production artifacts.
|
|
21
|
+
- **Automated Rotation**: Programmatic rotation of API keys, JWT secrets, and database passwords.
|
|
22
|
+
- **Audit Logging**: Tracking secret access, version history, and permission policies across development teams.
|
|
23
|
+
|
|
24
|
+
```bash
|
|
25
|
+
# Infisical CLI Runtime Secret Injection
|
|
26
|
+
infisical run -- env | grep DATABASE_URL
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
### Implementation Checklist
|
|
30
|
+
- [ ] Install Infisical CLI or Vault agent in the deployment environment.
|
|
31
|
+
- [ ] Map environment variables (Development, Staging, Production) in the Secret Manager.
|
|
32
|
+
- [ ] Configure CI/CD pipeline to inject secrets dynamically rather than using `.env` files.
|
|
33
|
+
- [ ] Set up auto-rotation for database credentials and high-privilege API keys (e.g., every 30 days).
|
|
34
|
+
|
|
35
|
+
### Example: Node.js Infisical SDK
|
|
36
|
+
```javascript
|
|
37
|
+
import { InfisicalClient } from "@infisical/sdk";
|
|
38
|
+
|
|
39
|
+
const client = new InfisicalClient({
|
|
40
|
+
clientId: process.env.INFISICAL_CLIENT_ID,
|
|
41
|
+
clientSecret: process.env.INFISICAL_CLIENT_SECRET
|
|
42
|
+
});
|
|
43
|
+
|
|
44
|
+
const dbPassword = await client.getSecret("DATABASE_PASSWORD", {
|
|
45
|
+
environment: "prod",
|
|
46
|
+
path: "/database"
|
|
47
|
+
});
|
|
48
|
+
```
|
|
49
|
+
|
|
50
|
+
## Orchestration & Integration
|
|
51
|
+
- Integrates with: `ci-cd-devops-architect`, `authentication-identity-expert`, `mcp-server-architect`.
|
|
52
|
+
|
|
53
|
+
---
|
|
54
|
+
|
|
55
|
+
<a name="bahasa-indonesia"></a>
|
|
56
|
+
## Bahasa Indonesia
|
|
57
|
+
|
|
58
|
+
### Deskripsi
|
|
59
|
+
Standar keamanan tingkat produksi untuk pengelolaan rahasia aplikasi, variabel lingkungan, kunci API, kredensial database, dan sertifikat TLS menggunakan Secret Manager Zero-Trust — Infisical, HashiCorp Vault, dan Doppler — dengan rotasi rahasia otomatis dan jaminan tanpa kebocoran teks polos di repositori atau pipeline CI/CD.
|
|
60
|
+
|
|
61
|
+
### Fitur Utama
|
|
62
|
+
- **Zero Plain-Text Secrets**: Injeksi rahasia terenkripsi saat runtime tanpa menyimpan file `.env` di artefak produksi.
|
|
63
|
+
- **Rotasi Otomatis**: Rotasi terprogram untuk kunci API, rahasia JWT, dan kata sandi database.
|
|
64
|
+
- **Audit Logging**: Pelacakan akses rahasia, riwayat versi, dan kebijakan izin di seluruh tim pengembangan.
|
|
65
|
+
|
|
66
|
+
### Checklist Implementasi
|
|
67
|
+
- [ ] Instal Infisical CLI atau agen Vault di lingkungan deployment.
|
|
68
|
+
- [ ] Petakan variabel lingkungan (Development, Staging, Production) di Secret Manager.
|
|
69
|
+
- [ ] Konfigurasi pipeline CI/CD untuk menyuntikkan rahasia secara dinamis (jangan gunakan file `.env`).
|
|
70
|
+
- [ ] Atur rotasi otomatis untuk kredensial database dan kunci API berhak istimewa (misal: setiap 30 hari).
|
|
71
|
+
|
|
72
|
+
### Contoh: Node.js Infisical SDK
|
|
73
|
+
```javascript
|
|
74
|
+
import { InfisicalClient } from "@infisical/sdk";
|
|
75
|
+
|
|
76
|
+
const client = new InfisicalClient({
|
|
77
|
+
clientId: process.env.INFISICAL_CLIENT_ID,
|
|
78
|
+
clientSecret: process.env.INFISICAL_CLIENT_SECRET
|
|
79
|
+
});
|
|
80
|
+
|
|
81
|
+
const dbPassword = await client.getSecret("DATABASE_PASSWORD", {
|
|
82
|
+
environment: "prod",
|
|
83
|
+
path: "/database"
|
|
84
|
+
});
|
|
85
|
+
```
|
|
86
|
+
|
|
87
|
+
## Integrasi Orkestrasi
|
|
88
|
+
- Terintegrasi dengan: `ci-cd-devops-architect`, `authentication-identity-expert`, `mcp-server-architect`.
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: Feature request
|
|
3
|
-
about: Suggest an idea for this project
|
|
4
|
-
title: ''
|
|
5
|
-
labels: ''
|
|
6
|
-
assignees: ''
|
|
7
|
-
|
|
8
|
-
---
|
|
9
|
-
|
|
10
|
-
**Is your feature request related to a problem? Please describe.**
|
|
11
|
-
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
|
|
12
|
-
|
|
13
|
-
**Describe the solution you'd like**
|
|
14
|
-
A clear and concise description of what you want to happen.
|
|
15
|
-
|
|
16
|
-
**Describe alternatives you've considered**
|
|
17
|
-
A clear and concise description of any alternative solutions or features you've considered.
|
|
18
|
-
|
|
19
|
-
**Additional context**
|
|
20
|
-
Add any other context or screenshots about the feature request here.
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Publish to npm
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
release:
|
|
5
|
-
types: [published]
|
|
6
|
-
workflow_dispatch:
|
|
7
|
-
|
|
8
|
-
jobs:
|
|
9
|
-
build:
|
|
10
|
-
runs-on: ubuntu-latest
|
|
11
|
-
steps:
|
|
12
|
-
- uses: actions/checkout@v4
|
|
13
|
-
# Setup .npmrc file to publish to npm
|
|
14
|
-
- uses: actions/setup-node@v4
|
|
15
|
-
with:
|
|
16
|
-
node-version: '20.x'
|
|
17
|
-
registry-url: 'https://registry.npmjs.org'
|
|
18
|
-
- run: npm publish
|
|
19
|
-
env:
|
|
20
|
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|