mirror of
https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools.git
synced 2025-12-16 13:35:11 +00:00
Add 25 world-class Claude Code skills for comprehensive software development
Created comprehensive skill collection covering all aspects of modern software development with production-ready patterns, best practices, and detailed documentation. ## Skills Organized by Domain ### Code Quality & Architecture (2 skills) - advanced-code-refactoring: SOLID principles, design patterns, refactoring patterns - code-review: Automated/manual review, security, performance, maintainability ### API & Integration (2 skills) - api-integration-expert: REST/GraphQL/WebSocket with auth, retry, caching - graphql-schema-design: Schema design, resolvers, optimization, subscriptions ### Database & Data (3 skills) - database-optimization: SQL/NoSQL tuning, indexing, query optimization - data-pipeline: ETL/ELT with Airflow, Spark, dbt - caching-strategies: Redis, Memcached, CDN, invalidation patterns ### Security & Authentication (2 skills) - security-audit: OWASP Top 10, vulnerability scanning, security hardening - auth-implementation: OAuth2, JWT, session management, SSO ### Testing & Quality (2 skills) - test-automation: Unit/integration/E2E tests, TDD/BDD, coverage - performance-profiling: CPU/memory profiling, Core Web Vitals optimization ### DevOps & Infrastructure (3 skills) - docker-kubernetes: Containerization, orchestration, production deployments - ci-cd-pipeline: GitHub Actions, automated testing, deployment strategies - logging-monitoring: Observability with Datadog, Prometheus, Grafana, ELK ### Frontend Development (3 skills) - frontend-accessibility: WCAG 2.1 compliance, ARIA, keyboard navigation - ui-component-library: Design systems with React/Vue, Storybook - mobile-responsive: Responsive design, mobile-first, PWAs ### Backend & Scaling (2 skills) - backend-scaling: Load balancing, sharding, microservices, horizontal scaling - real-time-systems: WebSockets, SSE, WebRTC for real-time features ### ML & AI (1 skill) - ml-model-integration: Model serving, inference optimization, monitoring ### Development Tools (2 skills) - git-workflow-optimizer: Git workflows, branching strategies, conflict resolution - dependency-management: Package updates, security patches, version conflicts ### Code Maintenance (3 skills) - error-handling: Robust error patterns, logging, graceful degradation - documentation-generator: API docs, README, technical specifications - migration-tools: Database/framework migrations with zero downtime ## Key Features Each skill includes: - YAML frontmatter with name, description, allowed tools - Clear purpose and when to use - Comprehensive capabilities overview - Production-ready code examples - Best practices and patterns - Success criteria - Tool-specific configurations ## Highlights - 25 comprehensive skills covering full development lifecycle - Production-ready patterns and examples - Security-first approach throughout - Performance optimization built-in - Comprehensive testing strategies - DevOps automation and infrastructure as code - Modern frontend with accessibility focus - Scalable backend architectures - Data engineering and ML integration - Advanced Git workflows ## File Structure claude_skills/ ├── README.md (comprehensive documentation) ├── advanced-code-refactoring/ │ ├── SKILL.md (main skill definition) │ ├── reference.md (design patterns, SOLID principles) │ └── examples.md (refactoring examples) ├── api-integration-expert/ │ └── SKILL.md (REST/GraphQL/WebSocket integration) ├── [23 more skills...] Total: 25 skills + comprehensive README + supporting documentation ## Usage Personal skills: cp -r claude_skills/* ~/.claude/skills/ Project skills: cp -r claude_skills/* .claude/skills/ Skills automatically activate based on context and description triggers.
This commit is contained in:
Claude
parent
fdf1c8f828
commit
484f6c6b17
323
claude_skills/README.md
Normal file
323
claude_skills/README.md
Normal file
@ -0,0 +1,323 @@
|
|||||||
|
# Claude Code Skills Collection
|
||||||
|
## World-Class AI Agent Skills for Software Development
|
||||||
|
|
||||||
|
This collection contains 25 production-ready Claude Code skills covering all aspects of modern software development, from frontend to backend, DevOps to data engineering, security to performance optimization.
|
||||||
|
|
||||||
|
## 📚 Complete Skills List
|
||||||
|
|
||||||
|
### Code Quality & Architecture
|
||||||
|
1. **[advanced-code-refactoring](./advanced-code-refactoring/)** - Expert refactoring with SOLID principles, design patterns, and architectural improvements
|
||||||
|
2. **[code-review](./code-review/)** - Automated and manual code review focusing on best practices, security, and maintainability
|
||||||
|
|
||||||
|
### API & Integration
|
||||||
|
3. **[api-integration-expert](./api-integration-expert/)** - REST, GraphQL, WebSocket APIs with auth, retry logic, and caching
|
||||||
|
4. **[graphql-schema-design](./graphql-schema-design/)** - GraphQL schema design, resolvers, optimization, and subscriptions
|
||||||
|
|
||||||
|
### Database & Data
|
||||||
|
5. **[database-optimization](./database-optimization/)** - SQL/NoSQL performance tuning, indexing, and query optimization
|
||||||
|
6. **[data-pipeline](./data-pipeline/)** - ETL/ELT pipelines with Airflow, Spark, and dbt
|
||||||
|
7. **[caching-strategies](./caching-strategies/)** - Redis, Memcached, CDN caching, and invalidation patterns
|
||||||
|
|
||||||
|
### Security & Authentication
|
||||||
|
8. **[security-audit](./security-audit/)** - OWASP Top 10, vulnerability scanning, and security hardening
|
||||||
|
9. **[auth-implementation](./auth-implementation/)** - OAuth2, JWT, session management, and SSO
|
||||||
|
|
||||||
|
### Testing & Quality Assurance
|
||||||
|
10. **[test-automation](./test-automation/)** - Unit, integration, E2E tests with TDD/BDD
|
||||||
|
11. **[performance-profiling](./performance-profiling/)** - Application performance analysis and optimization
|
||||||
|
|
||||||
|
### DevOps & Infrastructure
|
||||||
|
12. **[docker-kubernetes](./docker-kubernetes/)** - Containerization and orchestration for production
|
||||||
|
13. **[ci-cd-pipeline](./ci-cd-pipeline/)** - Automated testing and deployment pipelines
|
||||||
|
14. **[logging-monitoring](./logging-monitoring/)** - Observability with Datadog, Prometheus, Grafana
|
||||||
|
|
||||||
|
### Frontend Development
|
||||||
|
15. **[frontend-accessibility](./frontend-accessibility/)** - WCAG 2.1 compliance, ARIA, keyboard navigation
|
||||||
|
16. **[ui-component-library](./ui-component-library/)** - Design systems with React/Vue and Storybook
|
||||||
|
17. **[mobile-responsive](./mobile-responsive/)** - Responsive design, mobile-first, PWAs
|
||||||
|
|
||||||
|
### Backend & Scaling
|
||||||
|
18. **[backend-scaling](./backend-scaling/)** - Load balancing, sharding, microservices
|
||||||
|
19. **[real-time-systems](./real-time-systems/)** - WebSockets, SSE, WebRTC for real-time features
|
||||||
|
|
||||||
|
### ML & AI
|
||||||
|
20. **[ml-model-integration](./ml-model-integration/)** - Model serving, inference optimization, monitoring
|
||||||
|
|
||||||
|
### Development Tools
|
||||||
|
21. **[git-workflow-optimizer](./git-workflow-optimizer/)** - Git workflows, branching strategies, conflict resolution
|
||||||
|
22. **[dependency-management](./dependency-management/)** - Package management, updates, security patches
|
||||||
|
|
||||||
|
### Code Maintenance
|
||||||
|
23. **[error-handling](./error-handling/)** - Robust error patterns, logging, graceful degradation
|
||||||
|
24. **[documentation-generator](./documentation-generator/)** - API docs, README files, technical specs
|
||||||
|
25. **[migration-tools](./migration-tools/)** - Database and framework migrations with zero downtime
|
||||||
|
|
||||||
|
## 🎯 How to Use These Skills
|
||||||
|
|
||||||
|
### Installation
|
||||||
|
|
||||||
|
#### Personal Skills (User-level)
|
||||||
|
Copy skills to your personal Claude Code skills directory:
|
||||||
|
```bash
|
||||||
|
cp -r claude_skills/* ~/.claude/skills/
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Project Skills (Team-level)
|
||||||
|
Copy to your project's skills directory (checked into git):
|
||||||
|
```bash
|
||||||
|
cp -r claude_skills/* .claude/skills/
|
||||||
|
```
|
||||||
|
|
||||||
|
### Activation
|
||||||
|
|
||||||
|
Skills are automatically activated when Claude detects relevant context in your request. For example:
|
||||||
|
|
||||||
|
```
|
||||||
|
"Optimize this slow database query" → activates database-optimization
|
||||||
|
"Review this pull request" → activates code-review
|
||||||
|
"Set up CI/CD pipeline" → activates ci-cd-pipeline
|
||||||
|
"Make this site accessible" → activates frontend-accessibility
|
||||||
|
```
|
||||||
|
|
||||||
|
### Customization
|
||||||
|
|
||||||
|
Each skill can be customized by editing its `SKILL.md` file:
|
||||||
|
- Modify `description` to change activation triggers
|
||||||
|
- Update `allowed-tools` to restrict tool usage
|
||||||
|
- Add project-specific guidelines in the content
|
||||||
|
- Create `reference.md` for additional documentation
|
||||||
|
- Add `examples.md` for code examples
|
||||||
|
|
||||||
|
## 📖 Skill Structure
|
||||||
|
|
||||||
|
Each skill follows this structure:
|
||||||
|
```
|
||||||
|
skill-name/
|
||||||
|
├── SKILL.md (required) - Main skill definition with YAML frontmatter
|
||||||
|
├── reference.md (optional) - Detailed reference documentation
|
||||||
|
├── examples.md (optional) - Code examples and use cases
|
||||||
|
├── templates/ (optional) - Code templates
|
||||||
|
└── scripts/ (optional) - Helper scripts
|
||||||
|
```
|
||||||
|
|
||||||
|
### SKILL.md Format
|
||||||
|
```yaml
|
||||||
|
---
|
||||||
|
name: skill-identifier
|
||||||
|
description: Brief description and when to use
|
||||||
|
allowed-tools: Tool1, Tool2, Tool3
|
||||||
|
---
|
||||||
|
|
||||||
|
# Skill Title
|
||||||
|
## Purpose
|
||||||
|
## Capabilities
|
||||||
|
## Best Practices
|
||||||
|
## Success Criteria
|
||||||
|
```
|
||||||
|
|
||||||
|
## 🏆 What Makes These Skills World-Class?
|
||||||
|
|
||||||
|
### 1. **Comprehensive Coverage**
|
||||||
|
- Covers all aspects of modern software development
|
||||||
|
- From junior to senior level expertise
|
||||||
|
- Full stack: frontend, backend, data, ML, DevOps
|
||||||
|
- Security-first approach
|
||||||
|
|
||||||
|
### 2. **Production-Ready**
|
||||||
|
- Based on industry best practices
|
||||||
|
- Real-world patterns and examples
|
||||||
|
- Security and performance considerations
|
||||||
|
- Testing and monitoring included
|
||||||
|
|
||||||
|
### 3. **Tool-Aware**
|
||||||
|
- Optimized for Claude Code's tool set
|
||||||
|
- Smart tool restriction per skill
|
||||||
|
- Efficient context gathering
|
||||||
|
- Parallel tool execution patterns
|
||||||
|
|
||||||
|
### 4. **Well-Documented**
|
||||||
|
- Clear purpose and activation criteria
|
||||||
|
- Comprehensive examples
|
||||||
|
- Success criteria defined
|
||||||
|
- Reference documentation
|
||||||
|
|
||||||
|
### 5. **Maintainable**
|
||||||
|
- Modular and focused
|
||||||
|
- Easy to customize
|
||||||
|
- Version controlled
|
||||||
|
- Team collaboration ready
|
||||||
|
|
||||||
|
## 🚀 Quick Start Examples
|
||||||
|
|
||||||
|
### Example 1: Code Refactoring
|
||||||
|
```
|
||||||
|
User: "This UserService class is doing too much. Can you refactor it?"
|
||||||
|
|
||||||
|
Claude activates: advanced-code-refactoring
|
||||||
|
- Analyzes code for Single Responsibility violations
|
||||||
|
- Identifies code smells
|
||||||
|
- Applies appropriate design patterns
|
||||||
|
- Extracts separate services
|
||||||
|
- Maintains test coverage
|
||||||
|
```
|
||||||
|
|
||||||
|
### Example 2: API Integration
|
||||||
|
```
|
||||||
|
User: "Integrate Stripe payment API with retry logic and error handling"
|
||||||
|
|
||||||
|
Claude activates: api-integration-expert
|
||||||
|
- Sets up axios with retry configuration
|
||||||
|
- Implements exponential backoff
|
||||||
|
- Adds circuit breaker pattern
|
||||||
|
- Configures rate limiting
|
||||||
|
- Adds comprehensive error handling
|
||||||
|
- Includes logging and monitoring
|
||||||
|
```
|
||||||
|
|
||||||
|
### Example 3: Database Optimization
|
||||||
|
```
|
||||||
|
User: "This query is taking 5 seconds. Help optimize it."
|
||||||
|
|
||||||
|
Claude activates: database-optimization
|
||||||
|
- Runs EXPLAIN ANALYZE
|
||||||
|
- Identifies missing indexes
|
||||||
|
- Rewrites query for efficiency
|
||||||
|
- Adds appropriate indexes
|
||||||
|
- Measures improvement
|
||||||
|
- Suggests caching strategy
|
||||||
|
```
|
||||||
|
|
||||||
|
## 📊 Skill Coverage Matrix
|
||||||
|
|
||||||
|
| Domain | Skills | Coverage |
|
||||||
|
|--------|--------|----------|
|
||||||
|
| **Code Quality** | 2 | Refactoring, Code Review |
|
||||||
|
| **APIs** | 2 | REST/GraphQL Integration, Schema Design |
|
||||||
|
| **Database** | 3 | Optimization, Data Pipelines, Caching |
|
||||||
|
| **Security** | 2 | Security Audit, Authentication |
|
||||||
|
| **Testing** | 2 | Test Automation, Performance Profiling |
|
||||||
|
| **DevOps** | 3 | Docker/K8s, CI/CD, Logging/Monitoring |
|
||||||
|
| **Frontend** | 3 | Accessibility, UI Components, Responsive |
|
||||||
|
| **Backend** | 2 | Scaling, Real-time Systems |
|
||||||
|
| **ML/AI** | 1 | Model Integration |
|
||||||
|
| **Tools** | 2 | Git Workflow, Dependency Management |
|
||||||
|
| **Maintenance** | 3 | Error Handling, Documentation, Migrations |
|
||||||
|
|
||||||
|
**Total**: 25 comprehensive skills
|
||||||
|
|
||||||
|
## 🎓 Skill Difficulty Levels
|
||||||
|
|
||||||
|
### Beginner-Friendly
|
||||||
|
- documentation-generator
|
||||||
|
- git-workflow-optimizer
|
||||||
|
- mobile-responsive
|
||||||
|
- frontend-accessibility
|
||||||
|
|
||||||
|
### Intermediate
|
||||||
|
- test-automation
|
||||||
|
- code-review
|
||||||
|
- api-integration-expert
|
||||||
|
- error-handling
|
||||||
|
- dependency-management
|
||||||
|
|
||||||
|
### Advanced
|
||||||
|
- advanced-code-refactoring
|
||||||
|
- database-optimization
|
||||||
|
- security-audit
|
||||||
|
- performance-profiling
|
||||||
|
- backend-scaling
|
||||||
|
|
||||||
|
### Expert
|
||||||
|
- docker-kubernetes
|
||||||
|
- ci-cd-pipeline
|
||||||
|
- data-pipeline
|
||||||
|
- ml-model-integration
|
||||||
|
- real-time-systems
|
||||||
|
|
||||||
|
## 🔧 Customization Guide
|
||||||
|
|
||||||
|
### Adding Project-Specific Guidelines
|
||||||
|
```yaml
|
||||||
|
---
|
||||||
|
name: database-optimization
|
||||||
|
description: ...
|
||||||
|
---
|
||||||
|
|
||||||
|
# Database Optimization Expert
|
||||||
|
|
||||||
|
## Project-Specific Guidelines
|
||||||
|
- Use PostgreSQL 14+ features
|
||||||
|
- Follow company naming conventions: snake_case for tables
|
||||||
|
- Always include created_at and updated_at columns
|
||||||
|
- Use UUID for primary keys
|
||||||
|
- Include audit logging for sensitive tables
|
||||||
|
|
||||||
|
[Rest of skill content...]
|
||||||
|
```
|
||||||
|
|
||||||
|
### Restricting Tools
|
||||||
|
```yaml
|
||||||
|
---
|
||||||
|
name: security-audit
|
||||||
|
description: ...
|
||||||
|
allowed-tools: Read, Grep # Only allow reading and searching
|
||||||
|
---
|
||||||
|
```
|
||||||
|
|
||||||
|
### Adding Examples
|
||||||
|
Create `examples.md` in skill directory:
|
||||||
|
```markdown
|
||||||
|
# Security Audit Examples
|
||||||
|
|
||||||
|
## Example 1: Finding SQL Injection
|
||||||
|
...
|
||||||
|
|
||||||
|
## Example 2: Fixing XSS Vulnerability
|
||||||
|
...
|
||||||
|
```
|
||||||
|
|
||||||
|
## 📈 Success Metrics
|
||||||
|
|
||||||
|
Track skill effectiveness:
|
||||||
|
- **Activation Rate**: How often skills are triggered appropriately
|
||||||
|
- **Task Completion**: Percentage of tasks successfully completed
|
||||||
|
- **Code Quality**: Improvement in metrics (coverage, complexity, etc.)
|
||||||
|
- **Time Saved**: Reduction in development time
|
||||||
|
- **Error Reduction**: Fewer bugs and security issues
|
||||||
|
|
||||||
|
## 🤝 Contributing
|
||||||
|
|
||||||
|
To add or improve skills:
|
||||||
|
|
||||||
|
1. **Follow the structure**: SKILL.md with proper YAML frontmatter
|
||||||
|
2. **Be specific**: Clear description with trigger keywords
|
||||||
|
3. **Include examples**: Real-world code examples
|
||||||
|
4. **Define success**: Clear success criteria
|
||||||
|
5. **Test thoroughly**: Verify skill activates appropriately
|
||||||
|
|
||||||
|
## 📝 License
|
||||||
|
|
||||||
|
These skills are part of the system-prompts-and-models-of-ai-tools repository.
|
||||||
|
See main repository LICENSE for details.
|
||||||
|
|
||||||
|
## 🔗 Related Resources
|
||||||
|
|
||||||
|
- [Claude Code Documentation](https://code.claude.com/docs)
|
||||||
|
- [Claude Code Skills Guide](https://code.claude.com/docs/en/skills.md)
|
||||||
|
- [Main Repository](../)
|
||||||
|
|
||||||
|
## 📞 Support
|
||||||
|
|
||||||
|
For issues or suggestions:
|
||||||
|
- Open an issue in the main repository
|
||||||
|
- Contribute improvements via pull request
|
||||||
|
- Share your custom skills with the community
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
**Version**: 1.0
|
||||||
|
**Last Updated**: 2025-11-11
|
||||||
|
**Total Skills**: 25
|
||||||
|
**Maintained By**: Community
|
||||||
|
|
||||||
|
**Built with** ❤️ **for the Claude Code developer community**
|
||||||
145
claude_skills/advanced-code-refactoring/SKILL.md
Normal file
145
claude_skills/advanced-code-refactoring/SKILL.md
Normal file
@ -0,0 +1,145 @@
|
|||||||
|
---
|
||||||
|
name: advanced-code-refactoring
|
||||||
|
description: Expert-level code refactoring applying SOLID principles, design patterns, and architectural improvements. Use when refactoring legacy code, improving code structure, applying design patterns, or modernizing codebases.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Advanced Code Refactoring Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
This skill enables deep, architectural-level code refactoring with a focus on maintainability, scalability, and best practices. It applies proven design patterns, SOLID principles, and modern architectural approaches.
|
||||||
|
|
||||||
|
## When to Use
|
||||||
|
- Refactoring legacy or monolithic code
|
||||||
|
- Applying design patterns (Factory, Strategy, Observer, etc.)
|
||||||
|
- Improving code modularity and separation of concerns
|
||||||
|
- Extracting duplicated code into reusable utilities
|
||||||
|
- Converting imperative code to declarative patterns
|
||||||
|
- Modernizing codebases (callbacks → promises → async/await)
|
||||||
|
- Improving testability through dependency injection
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
|
||||||
|
### 1. **Design Pattern Application**
|
||||||
|
- **Creational**: Factory, Builder, Singleton, Prototype
|
||||||
|
- **Structural**: Adapter, Decorator, Facade, Proxy
|
||||||
|
- **Behavioral**: Strategy, Observer, Command, Template Method
|
||||||
|
|
||||||
|
### 2. **SOLID Principles**
|
||||||
|
- **S**ingle Responsibility: One class, one reason to change
|
||||||
|
- **O**pen/Closed: Open for extension, closed for modification
|
||||||
|
- **L**iskov Substitution: Subtypes must be substitutable
|
||||||
|
- **I**nterface Segregation: Many specific interfaces over one general
|
||||||
|
- **D**ependency Inversion: Depend on abstractions, not concretions
|
||||||
|
|
||||||
|
### 3. **Architectural Improvements**
|
||||||
|
- Extract Service Layer from Controllers
|
||||||
|
- Implement Repository Pattern for data access
|
||||||
|
- Create Domain-Driven Design (DDD) boundaries
|
||||||
|
- Separate Business Logic from Infrastructure
|
||||||
|
- Apply Clean Architecture / Hexagonal Architecture
|
||||||
|
|
||||||
|
### 4. **Code Smell Detection & Resolution**
|
||||||
|
- Long methods → Extract method/class
|
||||||
|
- Large classes → Split responsibilities
|
||||||
|
- Duplicated code → Extract common utilities
|
||||||
|
- Feature envy → Move method to appropriate class
|
||||||
|
- Primitive obsession → Create value objects
|
||||||
|
- Switch statements → Replace with polymorphism
|
||||||
|
|
||||||
|
## Workflow
|
||||||
|
|
||||||
|
1. **Analyze Current Code**
|
||||||
|
- Identify code smells and anti-patterns
|
||||||
|
- Map dependencies and coupling
|
||||||
|
- Find duplicated logic
|
||||||
|
- Assess testability
|
||||||
|
|
||||||
|
2. **Design Refactoring Plan**
|
||||||
|
- Choose appropriate patterns
|
||||||
|
- Define new abstractions
|
||||||
|
- Plan incremental changes
|
||||||
|
- Identify breaking changes
|
||||||
|
|
||||||
|
3. **Execute Refactoring**
|
||||||
|
- Preserve existing tests (or create them first)
|
||||||
|
- Make small, incremental changes
|
||||||
|
- Run tests after each change
|
||||||
|
- Update documentation
|
||||||
|
|
||||||
|
4. **Verify Improvements**
|
||||||
|
- All tests pass
|
||||||
|
- Code coverage maintained or improved
|
||||||
|
- Complexity metrics improved
|
||||||
|
- No regression in functionality
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
|
||||||
|
- **Test First**: Ensure comprehensive tests exist before refactoring
|
||||||
|
- **Small Steps**: Make incremental changes, not massive rewrites
|
||||||
|
- **Preserve Behavior**: Refactoring should not change functionality
|
||||||
|
- **Measure Impact**: Use metrics (cyclomatic complexity, coupling, cohesion)
|
||||||
|
- **Document Decisions**: Explain why patterns were chosen
|
||||||
|
- **Review Thoroughly**: Refactoring requires careful code review
|
||||||
|
|
||||||
|
## Tools & Techniques
|
||||||
|
|
||||||
|
### Static Analysis
|
||||||
|
- ESLint, TSLint, Prettier (JavaScript/TypeScript)
|
||||||
|
- Pylint, Black, mypy (Python)
|
||||||
|
- RuboCop (Ruby)
|
||||||
|
- SonarQube (Multi-language)
|
||||||
|
|
||||||
|
### Complexity Metrics
|
||||||
|
- Cyclomatic Complexity (McCabe)
|
||||||
|
- Cognitive Complexity
|
||||||
|
- Lines of Code (LOC)
|
||||||
|
- Coupling Between Objects (CBO)
|
||||||
|
- Lack of Cohesion in Methods (LCOM)
|
||||||
|
|
||||||
|
### Refactoring Patterns
|
||||||
|
```typescript
|
||||||
|
// Before: Long method with multiple responsibilities
|
||||||
|
function processOrder(order) {
|
||||||
|
// Validation (20 lines)
|
||||||
|
// Price calculation (30 lines)
|
||||||
|
// Inventory update (25 lines)
|
||||||
|
// Email notification (15 lines)
|
||||||
|
}
|
||||||
|
|
||||||
|
// After: Single Responsibility
|
||||||
|
function processOrder(order) {
|
||||||
|
const validator = new OrderValidator();
|
||||||
|
const calculator = new PriceCalculator();
|
||||||
|
const inventory = new InventoryService();
|
||||||
|
const notifier = new EmailNotifier();
|
||||||
|
|
||||||
|
validator.validate(order);
|
||||||
|
const total = calculator.calculate(order);
|
||||||
|
inventory.update(order);
|
||||||
|
notifier.sendConfirmation(order);
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
Refactoring follows these priorities:
|
||||||
|
1. **Safety**: Never break existing functionality
|
||||||
|
2. **Clarity**: Code should be more readable after refactoring
|
||||||
|
3. **Testability**: Improve test coverage and ease of testing
|
||||||
|
4. **Performance**: Maintain or improve performance
|
||||||
|
5. **Maintainability**: Reduce future maintenance burden
|
||||||
|
|
||||||
|
## Dependencies
|
||||||
|
- Testing framework (Jest, pytest, RSpec, etc.)
|
||||||
|
- Linter configured for project
|
||||||
|
- Type checker (TypeScript, mypy, etc.) if applicable
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ All existing tests pass
|
||||||
|
- ✓ Code complexity reduced (measured)
|
||||||
|
- ✓ Duplication eliminated or minimized
|
||||||
|
- ✓ Design patterns appropriately applied
|
||||||
|
- ✓ SOLID principles followed
|
||||||
|
- ✓ Documentation updated
|
||||||
|
- ✓ No performance regressions
|
||||||
355
claude_skills/advanced-code-refactoring/examples.md
Normal file
355
claude_skills/advanced-code-refactoring/examples.md
Normal file
@ -0,0 +1,355 @@
|
|||||||
|
# Advanced Code Refactoring Examples
|
||||||
|
|
||||||
|
## Example 1: Applying Strategy Pattern
|
||||||
|
|
||||||
|
### Before - Switch Statement Anti-Pattern
|
||||||
|
```typescript
|
||||||
|
class PaymentProcessor {
|
||||||
|
processPayment(amount: number, method: string) {
|
||||||
|
switch(method) {
|
||||||
|
case 'credit_card':
|
||||||
|
// 50 lines of credit card logic
|
||||||
|
break;
|
||||||
|
case 'paypal':
|
||||||
|
// 40 lines of PayPal logic
|
||||||
|
break;
|
||||||
|
case 'crypto':
|
||||||
|
// 60 lines of crypto logic
|
||||||
|
break;
|
||||||
|
default:
|
||||||
|
throw new Error('Unknown payment method');
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### After - Strategy Pattern
|
||||||
|
```typescript
|
||||||
|
// Strategy interface
|
||||||
|
interface PaymentStrategy {
|
||||||
|
process(amount: number): Promise<PaymentResult>;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Concrete strategies
|
||||||
|
class CreditCardStrategy implements PaymentStrategy {
|
||||||
|
async process(amount: number): Promise<PaymentResult> {
|
||||||
|
// 50 lines of credit card logic
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class PayPalStrategy implements PaymentStrategy {
|
||||||
|
async process(amount: number): Promise<PaymentResult> {
|
||||||
|
// 40 lines of PayPal logic
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class CryptoStrategy implements PaymentStrategy {
|
||||||
|
async process(amount: number): Promise<PaymentResult> {
|
||||||
|
// 60 lines of crypto logic
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Context
|
||||||
|
class PaymentProcessor {
|
||||||
|
private strategies = new Map<string, PaymentStrategy>([
|
||||||
|
['credit_card', new CreditCardStrategy()],
|
||||||
|
['paypal', new PayPalStrategy()],
|
||||||
|
['crypto', new CryptoStrategy()],
|
||||||
|
]);
|
||||||
|
|
||||||
|
async processPayment(amount: number, method: string) {
|
||||||
|
const strategy = this.strategies.get(method);
|
||||||
|
if (!strategy) throw new Error('Unknown payment method');
|
||||||
|
return strategy.process(amount);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Example 2: Dependency Injection for Testability
|
||||||
|
|
||||||
|
### Before - Hard Dependencies
|
||||||
|
```typescript
|
||||||
|
class UserService {
|
||||||
|
async createUser(data: UserData) {
|
||||||
|
const db = new DatabaseConnection(); // Hard dependency
|
||||||
|
const emailer = new EmailService(); // Hard dependency
|
||||||
|
|
||||||
|
const user = await db.insert('users', data);
|
||||||
|
await emailer.sendWelcome(user.email);
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Testing is difficult - requires real DB and email service
|
||||||
|
```
|
||||||
|
|
||||||
|
### After - Dependency Injection
|
||||||
|
```typescript
|
||||||
|
interface Database {
|
||||||
|
insert(table: string, data: any): Promise<any>;
|
||||||
|
}
|
||||||
|
|
||||||
|
interface Emailer {
|
||||||
|
sendWelcome(email: string): Promise<void>;
|
||||||
|
}
|
||||||
|
|
||||||
|
class UserService {
|
||||||
|
constructor(
|
||||||
|
private db: Database,
|
||||||
|
private emailer: Emailer
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async createUser(data: UserData) {
|
||||||
|
const user = await this.db.insert('users', data);
|
||||||
|
await this.emailer.sendWelcome(user.email);
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Testing is easy - inject mocks
|
||||||
|
const mockDb = { insert: jest.fn() };
|
||||||
|
const mockEmailer = { sendWelcome: jest.fn() };
|
||||||
|
const service = new UserService(mockDb, mockEmailer);
|
||||||
|
```
|
||||||
|
|
||||||
|
## Example 3: Repository Pattern
|
||||||
|
|
||||||
|
### Before - Data Access Scattered
|
||||||
|
```typescript
|
||||||
|
class OrderController {
|
||||||
|
async getOrder(id: string) {
|
||||||
|
const result = await db.query('SELECT * FROM orders WHERE id = ?', [id]);
|
||||||
|
return result[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
async createOrder(data: OrderData) {
|
||||||
|
return db.query('INSERT INTO orders...', [data]);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class ReportController {
|
||||||
|
async getOrderStats() {
|
||||||
|
const result = await db.query('SELECT COUNT(*) FROM orders...');
|
||||||
|
return result;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### After - Repository Pattern
|
||||||
|
```typescript
|
||||||
|
interface OrderRepository {
|
||||||
|
findById(id: string): Promise<Order | null>;
|
||||||
|
create(data: OrderData): Promise<Order>;
|
||||||
|
findByStatus(status: string): Promise<Order[]>;
|
||||||
|
count(): Promise<number>;
|
||||||
|
}
|
||||||
|
|
||||||
|
class SQLOrderRepository implements OrderRepository {
|
||||||
|
constructor(private db: Database) {}
|
||||||
|
|
||||||
|
async findById(id: string): Promise<Order | null> {
|
||||||
|
const result = await this.db.query('SELECT * FROM orders WHERE id = ?', [id]);
|
||||||
|
return result[0] || null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async create(data: OrderData): Promise<Order> {
|
||||||
|
return this.db.query('INSERT INTO orders...', [data]);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByStatus(status: string): Promise<Order[]> {
|
||||||
|
return this.db.query('SELECT * FROM orders WHERE status = ?', [status]);
|
||||||
|
}
|
||||||
|
|
||||||
|
async count(): Promise<number> {
|
||||||
|
const result = await this.db.query('SELECT COUNT(*) as count FROM orders');
|
||||||
|
return result[0].count;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class OrderController {
|
||||||
|
constructor(private orderRepo: OrderRepository) {}
|
||||||
|
|
||||||
|
async getOrder(id: string) {
|
||||||
|
return this.orderRepo.findById(id);
|
||||||
|
}
|
||||||
|
|
||||||
|
async createOrder(data: OrderData) {
|
||||||
|
return this.orderRepo.create(data);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class ReportController {
|
||||||
|
constructor(private orderRepo: OrderRepository) {}
|
||||||
|
|
||||||
|
async getOrderStats() {
|
||||||
|
return this.orderRepo.count();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Example 4: Extract Method Refactoring
|
||||||
|
|
||||||
|
### Before - Long Method
|
||||||
|
```typescript
|
||||||
|
function processUserRegistration(userData: any) {
|
||||||
|
// Validation - 30 lines
|
||||||
|
if (!userData.email) throw new Error('Email required');
|
||||||
|
if (!userData.email.includes('@')) throw new Error('Invalid email');
|
||||||
|
if (!userData.password) throw new Error('Password required');
|
||||||
|
if (userData.password.length < 8) throw new Error('Password too short');
|
||||||
|
if (!/[A-Z]/.test(userData.password)) throw new Error('Password needs uppercase');
|
||||||
|
// ... 25 more lines of validation
|
||||||
|
|
||||||
|
// Password hashing - 15 lines
|
||||||
|
const salt = crypto.randomBytes(16);
|
||||||
|
const hash = crypto.pbkdf2Sync(userData.password, salt, 10000, 64, 'sha512');
|
||||||
|
// ... more hashing logic
|
||||||
|
|
||||||
|
// Database insertion - 20 lines
|
||||||
|
const id = uuid.v4();
|
||||||
|
const created = new Date();
|
||||||
|
// ... database logic
|
||||||
|
|
||||||
|
// Email sending - 25 lines
|
||||||
|
const template = loadTemplate('welcome');
|
||||||
|
const rendered = renderTemplate(template, userData);
|
||||||
|
// ... email logic
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### After - Extracted Methods
|
||||||
|
```typescript
|
||||||
|
function processUserRegistration(userData: UserData) {
|
||||||
|
validateUserData(userData);
|
||||||
|
const hashedPassword = hashPassword(userData.password);
|
||||||
|
const user = createUserInDatabase({ ...userData, password: hashedPassword });
|
||||||
|
sendWelcomeEmail(user);
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
|
||||||
|
function validateUserData(userData: UserData): void {
|
||||||
|
validateEmail(userData.email);
|
||||||
|
validatePassword(userData.password);
|
||||||
|
validateUsername(userData.username);
|
||||||
|
}
|
||||||
|
|
||||||
|
function validateEmail(email: string): void {
|
||||||
|
if (!email) throw new ValidationError('Email required');
|
||||||
|
if (!email.includes('@')) throw new ValidationError('Invalid email');
|
||||||
|
// ... more validation
|
||||||
|
}
|
||||||
|
|
||||||
|
function validatePassword(password: string): void {
|
||||||
|
if (!password) throw new ValidationError('Password required');
|
||||||
|
if (password.length < 8) throw new ValidationError('Password too short');
|
||||||
|
if (!/[A-Z]/.test(password)) throw new ValidationError('Needs uppercase');
|
||||||
|
// ... more validation
|
||||||
|
}
|
||||||
|
|
||||||
|
function hashPassword(password: string): string {
|
||||||
|
const salt = crypto.randomBytes(16);
|
||||||
|
return crypto.pbkdf2Sync(password, salt, 10000, 64, 'sha512').toString('hex');
|
||||||
|
}
|
||||||
|
|
||||||
|
function createUserInDatabase(userData: UserData): User {
|
||||||
|
const id = uuid.v4();
|
||||||
|
const created = new Date();
|
||||||
|
// ... database logic
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
|
||||||
|
function sendWelcomeEmail(user: User): void {
|
||||||
|
const template = loadTemplate('welcome');
|
||||||
|
const rendered = renderTemplate(template, user);
|
||||||
|
// ... email logic
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Example 5: Replace Conditional with Polymorphism
|
||||||
|
|
||||||
|
### Before - Type Checking
|
||||||
|
```typescript
|
||||||
|
class Animal {
|
||||||
|
type: 'dog' | 'cat' | 'bird';
|
||||||
|
|
||||||
|
makeSound() {
|
||||||
|
if (this.type === 'dog') return 'Woof';
|
||||||
|
if (this.type === 'cat') return 'Meow';
|
||||||
|
if (this.type === 'bird') return 'Tweet';
|
||||||
|
}
|
||||||
|
|
||||||
|
move() {
|
||||||
|
if (this.type === 'dog') return 'runs';
|
||||||
|
if (this.type === 'cat') return 'walks';
|
||||||
|
if (this.type === 'bird') return 'flies';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### After - Polymorphism
|
||||||
|
```typescript
|
||||||
|
abstract class Animal {
|
||||||
|
abstract makeSound(): string;
|
||||||
|
abstract move(): string;
|
||||||
|
}
|
||||||
|
|
||||||
|
class Dog extends Animal {
|
||||||
|
makeSound() { return 'Woof'; }
|
||||||
|
move() { return 'runs'; }
|
||||||
|
}
|
||||||
|
|
||||||
|
class Cat extends Animal {
|
||||||
|
makeSound() { return 'Meow'; }
|
||||||
|
move() { return 'walks'; }
|
||||||
|
}
|
||||||
|
|
||||||
|
class Bird extends Animal {
|
||||||
|
makeSound() { return 'Tweet'; }
|
||||||
|
move() { return 'flies'; }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Metrics Improvement Examples
|
||||||
|
|
||||||
|
### Cyclomatic Complexity Reduction
|
||||||
|
```typescript
|
||||||
|
// Before: Complexity = 12
|
||||||
|
function getDiscount(user, amount) {
|
||||||
|
if (user.isPremium) {
|
||||||
|
if (amount > 1000) {
|
||||||
|
if (user.yearsActive > 5) return 0.25;
|
||||||
|
else if (user.yearsActive > 2) return 0.20;
|
||||||
|
else return 0.15;
|
||||||
|
} else if (amount > 500) {
|
||||||
|
return 0.10;
|
||||||
|
} else {
|
||||||
|
return 0.05;
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
if (amount > 500) return 0.05;
|
||||||
|
else return 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// After: Complexity = 3 (per function)
|
||||||
|
function getDiscount(user, amount) {
|
||||||
|
if (user.isPremium) return getPremiumDiscount(user, amount);
|
||||||
|
return getStandardDiscount(amount);
|
||||||
|
}
|
||||||
|
|
||||||
|
function getPremiumDiscount(user, amount) {
|
||||||
|
if (amount <= 500) return 0.05;
|
||||||
|
if (amount <= 1000) return 0.10;
|
||||||
|
return getLargeOrderDiscount(user.yearsActive);
|
||||||
|
}
|
||||||
|
|
||||||
|
function getLargeOrderDiscount(yearsActive) {
|
||||||
|
if (yearsActive > 5) return 0.25;
|
||||||
|
if (yearsActive > 2) return 0.20;
|
||||||
|
return 0.15;
|
||||||
|
}
|
||||||
|
|
||||||
|
function getStandardDiscount(amount) {
|
||||||
|
return amount > 500 ? 0.05 : 0;
|
||||||
|
}
|
||||||
|
```
|
||||||
419
claude_skills/advanced-code-refactoring/reference.md
Normal file
419
claude_skills/advanced-code-refactoring/reference.md
Normal file
@ -0,0 +1,419 @@
|
|||||||
|
# Advanced Code Refactoring Reference
|
||||||
|
|
||||||
|
## Design Patterns Quick Reference
|
||||||
|
|
||||||
|
### Creational Patterns
|
||||||
|
|
||||||
|
#### Factory Pattern
|
||||||
|
**Purpose**: Create objects without specifying exact class
|
||||||
|
**Use When**: Object creation logic is complex or needs to be centralized
|
||||||
|
```typescript
|
||||||
|
interface Product { use(): void; }
|
||||||
|
class ConcreteProductA implements Product { use() { /* ... */ } }
|
||||||
|
class ConcreteProductB implements Product { use() { /* ... */ } }
|
||||||
|
|
||||||
|
class ProductFactory {
|
||||||
|
create(type: string): Product {
|
||||||
|
if (type === 'A') return new ConcreteProductA();
|
||||||
|
if (type === 'B') return new ConcreteProductB();
|
||||||
|
throw new Error('Unknown type');
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Builder Pattern
|
||||||
|
**Purpose**: Construct complex objects step by step
|
||||||
|
**Use When**: Object has many optional parameters
|
||||||
|
```typescript
|
||||||
|
class QueryBuilder {
|
||||||
|
private query = { select: [], where: [], orderBy: [] };
|
||||||
|
|
||||||
|
select(fields: string[]) { this.query.select = fields; return this; }
|
||||||
|
where(condition: string) { this.query.where.push(condition); return this; }
|
||||||
|
orderBy(field: string) { this.query.orderBy.push(field); return this; }
|
||||||
|
build() { return this.query; }
|
||||||
|
}
|
||||||
|
|
||||||
|
// Usage
|
||||||
|
const query = new QueryBuilder()
|
||||||
|
.select(['id', 'name'])
|
||||||
|
.where('age > 18')
|
||||||
|
.orderBy('name')
|
||||||
|
.build();
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Singleton Pattern
|
||||||
|
**Purpose**: Ensure only one instance exists
|
||||||
|
**Use When**: Need exactly one instance (database connection, config)
|
||||||
|
```typescript
|
||||||
|
class Database {
|
||||||
|
private static instance: Database;
|
||||||
|
private constructor() { /* ... */ }
|
||||||
|
|
||||||
|
static getInstance(): Database {
|
||||||
|
if (!Database.instance) {
|
||||||
|
Database.instance = new Database();
|
||||||
|
}
|
||||||
|
return Database.instance;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### Structural Patterns
|
||||||
|
|
||||||
|
#### Adapter Pattern
|
||||||
|
**Purpose**: Convert interface of a class into another interface
|
||||||
|
**Use When**: Want to use existing class with incompatible interface
|
||||||
|
```typescript
|
||||||
|
interface ModernAPI { requestData(): Promise<Data>; }
|
||||||
|
class LegacyAPI { getData(callback: Function): void { /* ... */ } }
|
||||||
|
|
||||||
|
class LegacyAdapter implements ModernAPI {
|
||||||
|
constructor(private legacy: LegacyAPI) {}
|
||||||
|
|
||||||
|
requestData(): Promise<Data> {
|
||||||
|
return new Promise((resolve) => {
|
||||||
|
this.legacy.getData(resolve);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Decorator Pattern
|
||||||
|
**Purpose**: Add behavior to objects dynamically
|
||||||
|
**Use When**: Need to add functionality without subclassing
|
||||||
|
```typescript
|
||||||
|
interface Coffee { cost(): number; description(): string; }
|
||||||
|
class SimpleCoffee implements Coffee {
|
||||||
|
cost() { return 5; }
|
||||||
|
description() { return 'Simple coffee'; }
|
||||||
|
}
|
||||||
|
|
||||||
|
class MilkDecorator implements Coffee {
|
||||||
|
constructor(private coffee: Coffee) {}
|
||||||
|
cost() { return this.coffee.cost() + 2; }
|
||||||
|
description() { return this.coffee.description() + ', milk'; }
|
||||||
|
}
|
||||||
|
|
||||||
|
const coffee = new MilkDecorator(new SimpleCoffee());
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Facade Pattern
|
||||||
|
**Purpose**: Provide simplified interface to complex subsystem
|
||||||
|
**Use When**: System is complex and you want simpler interface
|
||||||
|
```typescript
|
||||||
|
class ComplexSystemA { operationA(): void { /* ... */ } }
|
||||||
|
class ComplexSystemB { operationB(): void { /* ... */ } }
|
||||||
|
class ComplexSystemC { operationC(): void { /* ... */ } }
|
||||||
|
|
||||||
|
class Facade {
|
||||||
|
constructor(
|
||||||
|
private systemA: ComplexSystemA,
|
||||||
|
private systemB: ComplexSystemB,
|
||||||
|
private systemC: ComplexSystemC
|
||||||
|
) {}
|
||||||
|
|
||||||
|
simpleOperation(): void {
|
||||||
|
this.systemA.operationA();
|
||||||
|
this.systemB.operationB();
|
||||||
|
this.systemC.operationC();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### Behavioral Patterns
|
||||||
|
|
||||||
|
#### Strategy Pattern
|
||||||
|
**Purpose**: Define family of algorithms, make them interchangeable
|
||||||
|
**Use When**: Need different variants of an algorithm
|
||||||
|
```typescript
|
||||||
|
interface SortStrategy { sort(data: number[]): number[]; }
|
||||||
|
class QuickSort implements SortStrategy { sort(data) { /* ... */ } }
|
||||||
|
class MergeSort implements SortStrategy { sort(data) { /* ... */ } }
|
||||||
|
|
||||||
|
class Sorter {
|
||||||
|
constructor(private strategy: SortStrategy) {}
|
||||||
|
sort(data: number[]) { return this.strategy.sort(data); }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Observer Pattern
|
||||||
|
**Purpose**: Define one-to-many dependency between objects
|
||||||
|
**Use When**: Need to notify multiple objects of state changes
|
||||||
|
```typescript
|
||||||
|
interface Observer { update(data: any): void; }
|
||||||
|
|
||||||
|
class Subject {
|
||||||
|
private observers: Observer[] = [];
|
||||||
|
|
||||||
|
attach(observer: Observer) { this.observers.push(observer); }
|
||||||
|
detach(observer: Observer) { /* remove */ }
|
||||||
|
notify(data: any) { this.observers.forEach(o => o.update(data)); }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Command Pattern
|
||||||
|
**Purpose**: Encapsulate request as an object
|
||||||
|
**Use When**: Need to parameterize, queue, or log operations
|
||||||
|
```typescript
|
||||||
|
interface Command { execute(): void; undo(): void; }
|
||||||
|
|
||||||
|
class CopyCommand implements Command {
|
||||||
|
execute() { /* copy logic */ }
|
||||||
|
undo() { /* undo copy */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class CommandInvoker {
|
||||||
|
private history: Command[] = [];
|
||||||
|
|
||||||
|
execute(command: Command) {
|
||||||
|
command.execute();
|
||||||
|
this.history.push(command);
|
||||||
|
}
|
||||||
|
|
||||||
|
undo() {
|
||||||
|
const command = this.history.pop();
|
||||||
|
command?.undo();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## SOLID Principles Detailed
|
||||||
|
|
||||||
|
### Single Responsibility Principle (SRP)
|
||||||
|
**Definition**: A class should have one, and only one, reason to change
|
||||||
|
|
||||||
|
**Bad Example**:
|
||||||
|
```typescript
|
||||||
|
class User {
|
||||||
|
save() { /* database logic */ }
|
||||||
|
sendEmail() { /* email logic */ }
|
||||||
|
generateReport() { /* reporting logic */ }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Good Example**:
|
||||||
|
```typescript
|
||||||
|
class User { /* just user data */ }
|
||||||
|
class UserRepository { save(user: User) { /* database */ } }
|
||||||
|
class EmailService { send(user: User) { /* email */ } }
|
||||||
|
class ReportGenerator { generate(user: User) { /* report */ } }
|
||||||
|
```
|
||||||
|
|
||||||
|
### Open/Closed Principle (OCP)
|
||||||
|
**Definition**: Open for extension, closed for modification
|
||||||
|
|
||||||
|
**Bad Example**:
|
||||||
|
```typescript
|
||||||
|
class Rectangle { width: number; height: number; }
|
||||||
|
class Circle { radius: number; }
|
||||||
|
|
||||||
|
class AreaCalculator {
|
||||||
|
calculate(shapes: any[]) {
|
||||||
|
let area = 0;
|
||||||
|
shapes.forEach(shape => {
|
||||||
|
if (shape instanceof Rectangle) {
|
||||||
|
area += shape.width * shape.height;
|
||||||
|
} else if (shape instanceof Circle) {
|
||||||
|
area += Math.PI * shape.radius ** 2;
|
||||||
|
}
|
||||||
|
// Need to modify this class for new shapes!
|
||||||
|
});
|
||||||
|
return area;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Good Example**:
|
||||||
|
```typescript
|
||||||
|
interface Shape { area(): number; }
|
||||||
|
|
||||||
|
class Rectangle implements Shape {
|
||||||
|
constructor(private width: number, private height: number) {}
|
||||||
|
area() { return this.width * this.height; }
|
||||||
|
}
|
||||||
|
|
||||||
|
class Circle implements Shape {
|
||||||
|
constructor(private radius: number) {}
|
||||||
|
area() { return Math.PI * this.radius ** 2; }
|
||||||
|
}
|
||||||
|
|
||||||
|
class AreaCalculator {
|
||||||
|
calculate(shapes: Shape[]) {
|
||||||
|
return shapes.reduce((sum, shape) => sum + shape.area(), 0);
|
||||||
|
}
|
||||||
|
// No modification needed for new shapes!
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### Liskov Substitution Principle (LSP)
|
||||||
|
**Definition**: Derived classes must be substitutable for base classes
|
||||||
|
|
||||||
|
**Bad Example**:
|
||||||
|
```typescript
|
||||||
|
class Bird {
|
||||||
|
fly() { /* fly logic */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class Penguin extends Bird {
|
||||||
|
fly() { throw new Error('Cannot fly'); } // Violates LSP!
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Good Example**:
|
||||||
|
```typescript
|
||||||
|
class Bird { eat() { /* ... */ } }
|
||||||
|
class FlyingBird extends Bird { fly() { /* ... */ } }
|
||||||
|
class Penguin extends Bird { swim() { /* ... */ } }
|
||||||
|
```
|
||||||
|
|
||||||
|
### Interface Segregation Principle (ISP)
|
||||||
|
**Definition**: Clients shouldn't depend on interfaces they don't use
|
||||||
|
|
||||||
|
**Bad Example**:
|
||||||
|
```typescript
|
||||||
|
interface Worker {
|
||||||
|
work(): void;
|
||||||
|
eat(): void;
|
||||||
|
sleep(): void;
|
||||||
|
}
|
||||||
|
|
||||||
|
class Robot implements Worker {
|
||||||
|
work() { /* ... */ }
|
||||||
|
eat() { throw new Error('Robots dont eat'); } // Forced to implement!
|
||||||
|
sleep() { throw new Error('Robots dont sleep'); }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Good Example**:
|
||||||
|
```typescript
|
||||||
|
interface Workable { work(): void; }
|
||||||
|
interface Eatable { eat(): void; }
|
||||||
|
interface Sleepable { sleep(): void; }
|
||||||
|
|
||||||
|
class Human implements Workable, Eatable, Sleepable {
|
||||||
|
work() { /* ... */ }
|
||||||
|
eat() { /* ... */ }
|
||||||
|
sleep() { /* ... */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class Robot implements Workable {
|
||||||
|
work() { /* ... */ }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### Dependency Inversion Principle (DIP)
|
||||||
|
**Definition**: Depend on abstractions, not concretions
|
||||||
|
|
||||||
|
**Bad Example**:
|
||||||
|
```typescript
|
||||||
|
class MySQLDatabase {
|
||||||
|
save(data: any) { /* MySQL specific */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class UserService {
|
||||||
|
private db = new MySQLDatabase(); // Concrete dependency!
|
||||||
|
|
||||||
|
createUser(data: any) {
|
||||||
|
this.db.save(data);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Good Example**:
|
||||||
|
```typescript
|
||||||
|
interface Database {
|
||||||
|
save(data: any): Promise<void>;
|
||||||
|
}
|
||||||
|
|
||||||
|
class MySQLDatabase implements Database {
|
||||||
|
save(data: any) { /* MySQL specific */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class PostgresDatabase implements Database {
|
||||||
|
save(data: any) { /* Postgres specific */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
class UserService {
|
||||||
|
constructor(private db: Database) {} // Abstraction!
|
||||||
|
|
||||||
|
createUser(data: any) {
|
||||||
|
this.db.save(data);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Code Smells & Refactorings
|
||||||
|
|
||||||
|
### Long Method
|
||||||
|
**Smell**: Method has too many lines (>20-30)
|
||||||
|
**Refactoring**: Extract Method
|
||||||
|
- Break into smaller, well-named methods
|
||||||
|
- Each method should do one thing
|
||||||
|
|
||||||
|
### Large Class
|
||||||
|
**Smell**: Class has too many responsibilities
|
||||||
|
**Refactoring**: Extract Class, Extract Subclass
|
||||||
|
- Identify separate responsibilities
|
||||||
|
- Create new classes for each
|
||||||
|
|
||||||
|
### Long Parameter List
|
||||||
|
**Smell**: Method takes many parameters (>3-4)
|
||||||
|
**Refactoring**: Introduce Parameter Object
|
||||||
|
- Group related parameters into object
|
||||||
|
- Pass object instead of individual parameters
|
||||||
|
|
||||||
|
### Duplicated Code
|
||||||
|
**Smell**: Same code structure in multiple places
|
||||||
|
**Refactoring**: Extract Method, Pull Up Method
|
||||||
|
- Extract duplicated code into shared method
|
||||||
|
- Place in common location
|
||||||
|
|
||||||
|
### Feature Envy
|
||||||
|
**Smell**: Method uses more features of another class
|
||||||
|
**Refactoring**: Move Method
|
||||||
|
- Move method to the class it's envious of
|
||||||
|
|
||||||
|
### Primitive Obsession
|
||||||
|
**Smell**: Using primitives instead of small objects
|
||||||
|
**Refactoring**: Replace Data Value with Object
|
||||||
|
```typescript
|
||||||
|
// Before
|
||||||
|
function distance(x1: number, y1: number, x2: number, y2: number) { /* ... */ }
|
||||||
|
|
||||||
|
// After
|
||||||
|
class Point { constructor(public x: number, public y: number) {} }
|
||||||
|
function distance(p1: Point, p2: Point) { /* ... */ }
|
||||||
|
```
|
||||||
|
|
||||||
|
### Switch Statements
|
||||||
|
**Smell**: Complex switch/if-else chains
|
||||||
|
**Refactoring**: Replace Conditional with Polymorphism
|
||||||
|
- Create subclass for each case
|
||||||
|
- Use polymorphic behavior instead
|
||||||
|
|
||||||
|
## Refactoring Checklist
|
||||||
|
|
||||||
|
Before refactoring:
|
||||||
|
- [ ] Ensure comprehensive test coverage exists
|
||||||
|
- [ ] All tests are passing
|
||||||
|
- [ ] Understand the code's current behavior
|
||||||
|
- [ ] Identify specific code smells or issues
|
||||||
|
- [ ] Plan the refactoring approach
|
||||||
|
- [ ] Commit current working state
|
||||||
|
|
||||||
|
During refactoring:
|
||||||
|
- [ ] Make small, incremental changes
|
||||||
|
- [ ] Run tests after each change
|
||||||
|
- [ ] Commit frequently with clear messages
|
||||||
|
- [ ] Don't add features while refactoring
|
||||||
|
- [ ] Keep system fully functional at all times
|
||||||
|
|
||||||
|
After refactoring:
|
||||||
|
- [ ] All tests still pass
|
||||||
|
- [ ] Code is more readable
|
||||||
|
- [ ] Complexity reduced (measured)
|
||||||
|
- [ ] No duplication
|
||||||
|
- [ ] Documentation updated
|
||||||
|
- [ ] Performance maintained or improved
|
||||||
|
- [ ] Peer review conducted
|
||||||
392
claude_skills/api-integration-expert/SKILL.md
Normal file
392
claude_skills/api-integration-expert/SKILL.md
Normal file
@ -0,0 +1,392 @@
|
|||||||
|
---
|
||||||
|
name: api-integration-expert
|
||||||
|
description: Expert in integrating REST, GraphQL, and WebSocket APIs with authentication, error handling, rate limiting, and caching. Use when building API clients, integrating third-party services, or designing API consumption patterns.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# API Integration Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Comprehensive expertise in consuming and integrating external APIs with production-grade patterns including authentication, retry logic, rate limiting, caching, and error handling.
|
||||||
|
|
||||||
|
## When to Use
|
||||||
|
- Integrating third-party APIs (Stripe, Twilio, SendGrid, etc.)
|
||||||
|
- Building API client libraries
|
||||||
|
- Implementing REST or GraphQL consumers
|
||||||
|
- Setting up WebSocket connections
|
||||||
|
- Adding authentication flows (OAuth2, JWT, API keys)
|
||||||
|
- Implementing retry logic and circuit breakers
|
||||||
|
- Adding request/response caching
|
||||||
|
- Rate limiting and throttling
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
|
||||||
|
### 1. REST API Integration
|
||||||
|
- HTTP methods (GET, POST, PUT, PATCH, DELETE)
|
||||||
|
- Request/response handling
|
||||||
|
- Query parameters and request bodies
|
||||||
|
- Headers and authentication
|
||||||
|
- Pagination patterns (offset, cursor, page-based)
|
||||||
|
- Filtering, sorting, searching
|
||||||
|
- Multipart form data and file uploads
|
||||||
|
|
||||||
|
### 2. GraphQL Integration
|
||||||
|
- Query and Mutation operations
|
||||||
|
- Subscriptions for real-time data
|
||||||
|
- Fragment composition
|
||||||
|
- Variables and directives
|
||||||
|
- Error handling
|
||||||
|
- Caching strategies
|
||||||
|
- Pagination (relay-style cursor pagination)
|
||||||
|
|
||||||
|
### 3. WebSocket Integration
|
||||||
|
- Connection management
|
||||||
|
- Reconnection logic
|
||||||
|
- Heartbeat/ping-pong
|
||||||
|
- Message framing
|
||||||
|
- Binary data handling
|
||||||
|
- Fallback to HTTP polling
|
||||||
|
|
||||||
|
### 4. Authentication Patterns
|
||||||
|
- API Keys (header, query param)
|
||||||
|
- Bearer Tokens (JWT)
|
||||||
|
- OAuth 2.0 (Authorization Code, Client Credentials)
|
||||||
|
- Basic Auth
|
||||||
|
- HMAC signatures
|
||||||
|
- Token refresh flows
|
||||||
|
|
||||||
|
### 5. Error Handling & Resilience
|
||||||
|
- HTTP status code handling
|
||||||
|
- Retry with exponential backoff
|
||||||
|
- Circuit breaker pattern
|
||||||
|
- Timeout configuration
|
||||||
|
- Graceful degradation
|
||||||
|
- Error logging and monitoring
|
||||||
|
|
||||||
|
### 6. Performance Optimization
|
||||||
|
- Response caching (in-memory, Redis)
|
||||||
|
- Request batching
|
||||||
|
- Debouncing and throttling
|
||||||
|
- Connection pooling
|
||||||
|
- Streaming large responses
|
||||||
|
- Compression (gzip, brotli)
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
// Production-Ready API Client Example
|
||||||
|
import axios, { AxiosInstance } from 'axios';
|
||||||
|
import axiosRetry from 'axios-retry';
|
||||||
|
import CircuitBreaker from 'opossum';
|
||||||
|
|
||||||
|
class APIClient {
|
||||||
|
private client: AxiosInstance;
|
||||||
|
private cache: Map<string, { data: any; expires: number }>;
|
||||||
|
|
||||||
|
constructor(private baseURL: string, private apiKey: string) {
|
||||||
|
this.cache = new Map();
|
||||||
|
|
||||||
|
// Configure axios with retry logic
|
||||||
|
this.client = axios.create({
|
||||||
|
baseURL,
|
||||||
|
timeout: 10000,
|
||||||
|
headers: {
|
||||||
|
'Authorization': `Bearer ${apiKey}`,
|
||||||
|
'Content-Type': 'application/json',
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
// Exponential backoff retry
|
||||||
|
axiosRetry(this.client, {
|
||||||
|
retries: 3,
|
||||||
|
retryDelay: axiosRetry.exponentialDelay,
|
||||||
|
retryCondition: (error) => {
|
||||||
|
return axiosRetry.isNetworkOrIdempotentRequestError(error) ||
|
||||||
|
error.response?.status === 429; // Rate limit
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
// Request interceptor for logging
|
||||||
|
this.client.interceptors.request.use(
|
||||||
|
(config) => {
|
||||||
|
console.log(`API Request: ${config.method?.toUpperCase()} ${config.url}`);
|
||||||
|
return config;
|
||||||
|
},
|
||||||
|
(error) => Promise.reject(error)
|
||||||
|
);
|
||||||
|
|
||||||
|
// Response interceptor for error handling
|
||||||
|
this.client.interceptors.response.use(
|
||||||
|
(response) => response,
|
||||||
|
(error) => {
|
||||||
|
this.handleError(error);
|
||||||
|
return Promise.reject(error);
|
||||||
|
}
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
// GET with caching
|
||||||
|
async get<T>(endpoint: string, ttl: number = 60000): Promise<T> {
|
||||||
|
const cached = this.cache.get(endpoint);
|
||||||
|
if (cached && cached.expires > Date.now()) {
|
||||||
|
return cached.data;
|
||||||
|
}
|
||||||
|
|
||||||
|
const response = await this.client.get<T>(endpoint);
|
||||||
|
this.cache.set(endpoint, {
|
||||||
|
data: response.data,
|
||||||
|
expires: Date.now() + ttl,
|
||||||
|
});
|
||||||
|
|
||||||
|
return response.data;
|
||||||
|
}
|
||||||
|
|
||||||
|
// POST with retry
|
||||||
|
async post<T>(endpoint: string, data: any): Promise<T> {
|
||||||
|
const response = await this.client.post<T>(endpoint, data);
|
||||||
|
return response.data;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Paginated requests
|
||||||
|
async* getPaginated<T>(endpoint: string, params: any = {}) {
|
||||||
|
let page = 1;
|
||||||
|
let hasMore = true;
|
||||||
|
|
||||||
|
while (hasMore) {
|
||||||
|
const response = await this.client.get<{ data: T[]; hasMore: boolean }>(
|
||||||
|
endpoint,
|
||||||
|
{ params: { ...params, page } }
|
||||||
|
);
|
||||||
|
|
||||||
|
yield* response.data.data;
|
||||||
|
|
||||||
|
hasMore = response.data.hasMore;
|
||||||
|
page++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Batch requests
|
||||||
|
async batchGet<T>(endpoints: string[]): Promise<T[]> {
|
||||||
|
return Promise.all(endpoints.map(e => this.get<T>(e)));
|
||||||
|
}
|
||||||
|
|
||||||
|
// Error handling
|
||||||
|
private handleError(error: any) {
|
||||||
|
if (error.response) {
|
||||||
|
const { status, data } = error.response;
|
||||||
|
console.error(`API Error ${status}:`, data);
|
||||||
|
|
||||||
|
switch (status) {
|
||||||
|
case 401:
|
||||||
|
// Handle unauthorized
|
||||||
|
this.refreshToken();
|
||||||
|
break;
|
||||||
|
case 429:
|
||||||
|
// Rate limit - already handled by retry
|
||||||
|
console.warn('Rate limited, retrying...');
|
||||||
|
break;
|
||||||
|
case 500:
|
||||||
|
case 502:
|
||||||
|
case 503:
|
||||||
|
// Server errors
|
||||||
|
console.error('Server error:', data);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
} else if (error.request) {
|
||||||
|
console.error('No response received:', error.request);
|
||||||
|
} else {
|
||||||
|
console.error('Request setup error:', error.message);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private async refreshToken() {
|
||||||
|
// Implement token refresh logic
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## GraphQL Client Example
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
import { GraphQLClient, gql } from 'graphql-request';
|
||||||
|
|
||||||
|
class GraphQLAPIClient {
|
||||||
|
private client: GraphQLClient;
|
||||||
|
|
||||||
|
constructor(endpoint: string, token: string) {
|
||||||
|
this.client = new GraphQLClient(endpoint, {
|
||||||
|
headers: {
|
||||||
|
authorization: `Bearer ${token}`,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async query<T>(query: string, variables?: any): Promise<T> {
|
||||||
|
try {
|
||||||
|
return await this.client.request<T>(query, variables);
|
||||||
|
} catch (error) {
|
||||||
|
this.handleGraphQLError(error);
|
||||||
|
throw error;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async mutation<T>(mutation: string, variables?: any): Promise<T> {
|
||||||
|
return this.query<T>(mutation, variables);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Type-safe queries
|
||||||
|
async getUser(id: string) {
|
||||||
|
const query = gql`
|
||||||
|
query GetUser($id: ID!) {
|
||||||
|
user(id: $id) {
|
||||||
|
id
|
||||||
|
name
|
||||||
|
email
|
||||||
|
posts {
|
||||||
|
id
|
||||||
|
title
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
`;
|
||||||
|
|
||||||
|
return this.query<{ user: User }>(query, { id });
|
||||||
|
}
|
||||||
|
|
||||||
|
private handleGraphQLError(error: any) {
|
||||||
|
if (error.response?.errors) {
|
||||||
|
error.response.errors.forEach((err: any) => {
|
||||||
|
console.error('GraphQL Error:', err.message);
|
||||||
|
if (err.extensions) {
|
||||||
|
console.error('Extensions:', err.extensions);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Rate Limiting & Circuit Breaker
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
import Bottleneck from 'bottleneck';
|
||||||
|
import CircuitBreaker from 'opossum';
|
||||||
|
|
||||||
|
// Rate limiter (100 requests per minute)
|
||||||
|
const limiter = new Bottleneck({
|
||||||
|
reservoir: 100,
|
||||||
|
reservoirRefreshAmount: 100,
|
||||||
|
reservoirRefreshInterval: 60 * 1000,
|
||||||
|
maxConcurrent: 10,
|
||||||
|
});
|
||||||
|
|
||||||
|
// Circuit breaker
|
||||||
|
const breaker = new CircuitBreaker(apiCall, {
|
||||||
|
timeout: 10000,
|
||||||
|
errorThresholdPercentage: 50,
|
||||||
|
resetTimeout: 30000,
|
||||||
|
});
|
||||||
|
|
||||||
|
breaker.on('open', () => console.log('Circuit breaker opened'));
|
||||||
|
breaker.on('halfOpen', () => console.log('Circuit breaker half-open'));
|
||||||
|
breaker.on('close', () => console.log('Circuit breaker closed'));
|
||||||
|
|
||||||
|
async function apiCall(endpoint: string) {
|
||||||
|
return limiter.schedule(() => axios.get(endpoint));
|
||||||
|
}
|
||||||
|
|
||||||
|
// Use with circuit breaker
|
||||||
|
async function safeAPICall(endpoint: string) {
|
||||||
|
try {
|
||||||
|
return await breaker.fire(endpoint);
|
||||||
|
} catch (error) {
|
||||||
|
console.error('API call failed:', error);
|
||||||
|
// Return cached or default data
|
||||||
|
return getCachedData(endpoint);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"api": {
|
||||||
|
"baseURL": "https://api.example.com",
|
||||||
|
"timeout": 10000,
|
||||||
|
"retries": 3,
|
||||||
|
"retryDelay": 1000,
|
||||||
|
"rateLimit": {
|
||||||
|
"requests": 100,
|
||||||
|
"per": "minute"
|
||||||
|
},
|
||||||
|
"cache": {
|
||||||
|
"enabled": true,
|
||||||
|
"ttl": 60000
|
||||||
|
},
|
||||||
|
"circuitBreaker": {
|
||||||
|
"enabled": true,
|
||||||
|
"timeout": 10000,
|
||||||
|
"errorThreshold": 50,
|
||||||
|
"resetTimeout": 30000
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Testing API Integrations
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
import nock from 'nock';
|
||||||
|
|
||||||
|
describe('APIClient', () => {
|
||||||
|
afterEach(() => nock.cleanAll());
|
||||||
|
|
||||||
|
it('should retry on 429 rate limit', async () => {
|
||||||
|
const scope = nock('https://api.example.com')
|
||||||
|
.get('/data')
|
||||||
|
.reply(429, { error: 'Rate limited' })
|
||||||
|
.get('/data')
|
||||||
|
.reply(200, { data: 'success' });
|
||||||
|
|
||||||
|
const client = new APIClient('https://api.example.com', 'key');
|
||||||
|
const result = await client.get('/data');
|
||||||
|
|
||||||
|
expect(result).toEqual({ data: 'success' });
|
||||||
|
expect(scope.isDone()).toBe(true);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('should use cached data', async () => {
|
||||||
|
nock('https://api.example.com')
|
||||||
|
.get('/data')
|
||||||
|
.reply(200, { data: 'cached' });
|
||||||
|
|
||||||
|
const client = new APIClient('https://api.example.com', 'key');
|
||||||
|
|
||||||
|
// First call - hits API
|
||||||
|
const result1 = await client.get('/data');
|
||||||
|
// Second call - uses cache
|
||||||
|
const result2 = await client.get('/data');
|
||||||
|
|
||||||
|
expect(result1).toEqual(result2);
|
||||||
|
});
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
## Dependencies
|
||||||
|
- axios or fetch API
|
||||||
|
- axios-retry
|
||||||
|
- opossum (circuit breaker)
|
||||||
|
- bottleneck (rate limiting)
|
||||||
|
- graphql-request (for GraphQL)
|
||||||
|
- WebSocket client library
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Authentication properly implemented
|
||||||
|
- ✓ Retry logic with exponential backoff
|
||||||
|
- ✓ Rate limiting respected
|
||||||
|
- ✓ Circuit breaker prevents cascade failures
|
||||||
|
- ✓ Responses cached appropriately
|
||||||
|
- ✓ Errors handled and logged
|
||||||
|
- ✓ Timeouts configured
|
||||||
|
- ✓ Tests cover success and failure cases
|
||||||
40
claude_skills/auth-implementation/SKILL.md
Normal file
40
claude_skills/auth-implementation/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: auth-implementation
|
||||||
|
description: Expert in authentication and authorization systems including OAuth2, JWT, session management, SSO, and identity providers. Use when implementing user authentication, authorization, or integrating with identity providers like Auth0, Okta, or Firebase Auth.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Auth Implementation Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in authentication and authorization systems including OAuth2, JWT, session management, SSO, and identity providers. Use when implementing user authentication, authorization, or integrating with identity providers like Auth0, Okta, or Firebase Auth.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
84
claude_skills/backend-scaling/SKILL.md
Normal file
84
claude_skills/backend-scaling/SKILL.md
Normal file
@ -0,0 +1,84 @@
|
|||||||
|
---
|
||||||
|
name: backend-scaling
|
||||||
|
description: Expert in backend scaling strategies including load balancing, caching, database sharding, microservices, and horizontal/vertical scaling. Use when optimizing for high traffic, designing scalable architectures, or troubleshooting performance under load.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Backend Scaling Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Design and implement scalable backend systems handling high traffic and large datasets.
|
||||||
|
|
||||||
|
## Strategies
|
||||||
|
- **Horizontal scaling**: Add more servers
|
||||||
|
- **Vertical scaling**: Increase server resources
|
||||||
|
- **Load balancing**: Distribute traffic (Nginx, HAProxy, ALB)
|
||||||
|
- **Caching layers**: Redis, Memcached, CDN
|
||||||
|
- **Database sharding**: Split data across databases
|
||||||
|
- **Read replicas**: Separate read and write operations
|
||||||
|
- **Microservices**: Decompose monoliths
|
||||||
|
- **Message queues**: Async processing (RabbitMQ, Kafka)
|
||||||
|
- **Connection pooling**: Reuse database connections
|
||||||
|
- **Rate limiting**: Prevent abuse
|
||||||
|
|
||||||
|
## Architecture Patterns
|
||||||
|
```typescript
|
||||||
|
// Load balancer configuration (Nginx)
|
||||||
|
upstream backend {
|
||||||
|
least_conn;
|
||||||
|
server backend1.example.com weight=3;
|
||||||
|
server backend2.example.com weight=2;
|
||||||
|
server backend3.example.com backup;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Rate limiting middleware
|
||||||
|
import rateLimit from 'express-rate-limit';
|
||||||
|
|
||||||
|
const limiter = rateLimit({
|
||||||
|
windowMs: 15 * 60 * 1000,
|
||||||
|
max: 100,
|
||||||
|
standardHeaders: true,
|
||||||
|
legacyHeaders: false,
|
||||||
|
});
|
||||||
|
|
||||||
|
app.use('/api/', limiter);
|
||||||
|
|
||||||
|
// Database sharding strategy
|
||||||
|
class ShardedDB {
|
||||||
|
getShardForUser(userId: string): Database {
|
||||||
|
const shardId = hashFunction(userId) % NUM_SHARDS;
|
||||||
|
return this.shards[shardId];
|
||||||
|
}
|
||||||
|
|
||||||
|
async getUserData(userId: string) {
|
||||||
|
const shard = this.getShardForUser(userId);
|
||||||
|
return shard.query('SELECT * FROM users WHERE id = ?', [userId]);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Message queue for async processing
|
||||||
|
import { Queue } from 'bullmq';
|
||||||
|
|
||||||
|
const emailQueue = new Queue('emails', {
|
||||||
|
connection: { host: 'redis', port: 6379 }
|
||||||
|
});
|
||||||
|
|
||||||
|
// Add job
|
||||||
|
await emailQueue.add('welcome-email', {
|
||||||
|
to: 'user@example.com',
|
||||||
|
template: 'welcome'
|
||||||
|
});
|
||||||
|
|
||||||
|
// Process jobs
|
||||||
|
const worker = new Worker('emails', async (job) => {
|
||||||
|
await sendEmail(job.data);
|
||||||
|
}, { connection });
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Handle 10,000+ req/sec
|
||||||
|
- ✓ <100ms p99 latency
|
||||||
|
- ✓ 99.9% uptime
|
||||||
|
- ✓ Auto-scaling configured
|
||||||
|
- ✓ Zero single points of failure
|
||||||
|
|
||||||
40
claude_skills/caching-strategies/SKILL.md
Normal file
40
claude_skills/caching-strategies/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: caching-strategies
|
||||||
|
description: Expert in caching strategies including Redis, Memcached, CDN caching, application-level caching, and cache invalidation patterns. Use for implementing caching layers, optimizing performance, or designing cache invalidation strategies.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Caching Strategies Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in caching strategies including Redis, Memcached, CDN caching, application-level caching, and cache invalidation patterns. Use for implementing caching layers, optimizing performance, or designing cache invalidation strategies.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
146
claude_skills/ci-cd-pipeline/SKILL.md
Normal file
146
claude_skills/ci-cd-pipeline/SKILL.md
Normal file
@ -0,0 +1,146 @@
|
|||||||
|
---
|
||||||
|
name: ci-cd-pipeline
|
||||||
|
description: Expert in CI/CD pipeline design and implementation using GitHub Actions, GitLab CI, Jenkins, and other tools. Use when setting up automated testing, deployment pipelines, or DevOps workflows.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# CI/CD Pipeline Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Design and implement automated CI/CD pipelines for testing, building, and deploying applications.
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
- GitHub Actions, GitLab CI, Jenkins
|
||||||
|
- Automated testing in CI
|
||||||
|
- Build and artifact management
|
||||||
|
- Multi-environment deployments
|
||||||
|
- Blue-green and canary deployments
|
||||||
|
- Rollback strategies
|
||||||
|
- Secret management in CI/CD
|
||||||
|
- Pipeline monitoring and notifications
|
||||||
|
|
||||||
|
## GitHub Actions Example
|
||||||
|
```yaml
|
||||||
|
name: CI/CD Pipeline
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches: [main, develop]
|
||||||
|
pull_request:
|
||||||
|
branches: [main]
|
||||||
|
|
||||||
|
env:
|
||||||
|
NODE_VERSION: '18'
|
||||||
|
REGISTRY: ghcr.io
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
test:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: Setup Node.js
|
||||||
|
uses: actions/setup-node@v3
|
||||||
|
with:
|
||||||
|
node-version: ${{ env.NODE_VERSION }}
|
||||||
|
cache: 'npm'
|
||||||
|
|
||||||
|
- name: Install dependencies
|
||||||
|
run: npm ci
|
||||||
|
|
||||||
|
- name: Run linter
|
||||||
|
run: npm run lint
|
||||||
|
|
||||||
|
- name: Run tests
|
||||||
|
run: npm test -- --coverage
|
||||||
|
|
||||||
|
- name: Upload coverage
|
||||||
|
uses: codecov/codecov-action@v3
|
||||||
|
with:
|
||||||
|
files: ./coverage/lcov.info
|
||||||
|
|
||||||
|
- name: Build
|
||||||
|
run: npm run build
|
||||||
|
|
||||||
|
security-scan:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: Run Snyk
|
||||||
|
uses: snyk/actions/node@master
|
||||||
|
env:
|
||||||
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||||
|
|
||||||
|
- name: Run npm audit
|
||||||
|
run: npm audit --audit-level=high
|
||||||
|
|
||||||
|
build-and-push:
|
||||||
|
needs: [test, security-scan]
|
||||||
|
if: github.ref == 'refs/heads/main'
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
packages: write
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: Set up Docker Buildx
|
||||||
|
uses: docker/setup-buildx-action@v2
|
||||||
|
|
||||||
|
- name: Login to Registry
|
||||||
|
uses: docker/login-action@v2
|
||||||
|
with:
|
||||||
|
registry: ${{ env.REGISTRY }}
|
||||||
|
username: ${{ github.actor }}
|
||||||
|
password: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
||||||
|
- name: Extract metadata
|
||||||
|
id: meta
|
||||||
|
uses: docker/metadata-action@v4
|
||||||
|
with:
|
||||||
|
images: ${{ env.REGISTRY }}/${{ github.repository }}
|
||||||
|
tags: |
|
||||||
|
type=sha,prefix={{branch}}-
|
||||||
|
type=ref,event=branch
|
||||||
|
type=semver,pattern={{version}}
|
||||||
|
|
||||||
|
- name: Build and push
|
||||||
|
uses: docker/build-push-action@v4
|
||||||
|
with:
|
||||||
|
context: .
|
||||||
|
push: true
|
||||||
|
tags: ${{ steps.meta.outputs.tags }}
|
||||||
|
cache-from: type=gha
|
||||||
|
cache-to: type=gha,mode=max
|
||||||
|
|
||||||
|
deploy:
|
||||||
|
needs: build-and-push
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
environment: production
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Deploy to Kubernetes
|
||||||
|
uses: azure/k8s-deploy@v4
|
||||||
|
with:
|
||||||
|
manifests: |
|
||||||
|
k8s/deployment.yaml
|
||||||
|
k8s/service.yaml
|
||||||
|
images: |
|
||||||
|
${{ env.REGISTRY }}/${{ github.repository }}:${{ github.sha }}
|
||||||
|
|
||||||
|
- name: Verify deployment
|
||||||
|
run: |
|
||||||
|
kubectl rollout status deployment/myapp
|
||||||
|
kubectl get pods
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Pipeline runs < 10min
|
||||||
|
- ✓ Automated tests pass
|
||||||
|
- ✓ Security scans pass
|
||||||
|
- ✓ Zero-downtime deployments
|
||||||
|
- ✓ Rollback capability
|
||||||
|
- ✓ Notifications on failure
|
||||||
|
|
||||||
122
claude_skills/code-review/SKILL.md
Normal file
122
claude_skills/code-review/SKILL.md
Normal file
@ -0,0 +1,122 @@
|
|||||||
|
---
|
||||||
|
name: code-review
|
||||||
|
description: Expert in automated and manual code review focusing on best practices, security, performance, and maintainability. Use for conducting code reviews, setting up automated checks, or providing feedback on pull requests.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Code Review Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Conduct thorough code reviews focusing on quality, security, performance, and maintainability.
|
||||||
|
|
||||||
|
## Review Checklist
|
||||||
|
|
||||||
|
### Code Quality
|
||||||
|
- [ ] Follows project coding standards
|
||||||
|
- [ ] Clear and descriptive variable/function names
|
||||||
|
- [ ] No code duplication (DRY principle)
|
||||||
|
- [ ] Functions are small and focused
|
||||||
|
- [ ] Appropriate design patterns used
|
||||||
|
- [ ] Code is self-documenting
|
||||||
|
- [ ] Complex logic has comments
|
||||||
|
|
||||||
|
### Security
|
||||||
|
- [ ] No hardcoded secrets
|
||||||
|
- [ ] Input validation present
|
||||||
|
- [ ] Output sanitization (XSS prevention)
|
||||||
|
- [ ] Parameterized queries (SQL injection prevention)
|
||||||
|
- [ ] Authentication/authorization checks
|
||||||
|
- [ ] No sensitive data in logs
|
||||||
|
|
||||||
|
### Performance
|
||||||
|
- [ ] No N+1 queries
|
||||||
|
- [ ] Efficient algorithms used
|
||||||
|
- [ ] Appropriate data structures
|
||||||
|
- [ ] No unnecessary re-renders (React)
|
||||||
|
- [ ] Database indexes present
|
||||||
|
- [ ] Caching implemented where appropriate
|
||||||
|
|
||||||
|
### Testing
|
||||||
|
- [ ] Tests added/updated
|
||||||
|
- [ ] Edge cases covered
|
||||||
|
- [ ] Mock dependencies appropriately
|
||||||
|
- [ ] Tests are readable and maintainable
|
||||||
|
|
||||||
|
### Documentation
|
||||||
|
- [ ] README updated if needed
|
||||||
|
- [ ] API documentation current
|
||||||
|
- [ ] Breaking changes documented
|
||||||
|
- [ ] Migration guide if applicable
|
||||||
|
|
||||||
|
## Automated Code Review Tools
|
||||||
|
```yaml
|
||||||
|
# .github/workflows/code-review.yml
|
||||||
|
name: Code Review
|
||||||
|
on: [pull_request]
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
review:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: ESLint
|
||||||
|
run: npm run lint
|
||||||
|
|
||||||
|
- name: TypeScript
|
||||||
|
run: npx tsc --noEmit
|
||||||
|
|
||||||
|
- name: Prettier
|
||||||
|
run: npx prettier --check .
|
||||||
|
|
||||||
|
- name: Security Audit
|
||||||
|
run: npm audit
|
||||||
|
|
||||||
|
- name: Complexity Analysis
|
||||||
|
uses: wemake-services/cognitive-complexity-action@v1
|
||||||
|
```
|
||||||
|
|
||||||
|
## Code Review Comments Template
|
||||||
|
|
||||||
|
```markdown
|
||||||
|
### Performance Concern
|
||||||
|
**Severity**: Medium
|
||||||
|
**Location**: `src/users/service.ts:45`
|
||||||
|
|
||||||
|
**Issue**: This query causes N+1 problem when loading users with posts.
|
||||||
|
|
||||||
|
**Suggestion**:
|
||||||
|
\`\`\`typescript
|
||||||
|
// Instead of:
|
||||||
|
const users = await User.find();
|
||||||
|
for (const user of users) {
|
||||||
|
user.posts = await Post.find({ userId: user.id });
|
||||||
|
}
|
||||||
|
|
||||||
|
// Use:
|
||||||
|
const users = await User.find().populate('posts');
|
||||||
|
\`\`\`
|
||||||
|
|
||||||
|
### Security Vulnerability
|
||||||
|
**Severity**: High
|
||||||
|
**Location**: `src/api/users.ts:23`
|
||||||
|
|
||||||
|
**Issue**: User input not validated, vulnerable to SQL injection.
|
||||||
|
|
||||||
|
**Suggestion**:
|
||||||
|
\`\`\`typescript
|
||||||
|
// Use parameterized queries
|
||||||
|
const user = await db.query(
|
||||||
|
'SELECT * FROM users WHERE id = ?',
|
||||||
|
[req.params.id]
|
||||||
|
);
|
||||||
|
\`\`\`
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ All checklist items reviewed
|
||||||
|
- ✓ No critical issues found
|
||||||
|
- ✓ Automated checks passing
|
||||||
|
- ✓ Constructive feedback provided
|
||||||
|
- ✓ Code maintainability improved
|
||||||
|
|
||||||
34
claude_skills/create_skills.sh
Executable file
34
claude_skills/create_skills.sh
Executable file
@ -0,0 +1,34 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# This script creates template SKILL.md files for remaining skills
|
||||||
|
# Will be populated with comprehensive content
|
||||||
|
|
||||||
|
skills=(
|
||||||
|
"test-automation:test-automation:Expert in automated testing strategies including unit, integration, E2E tests, TDD/BDD, test coverage, and CI/CD integration. Use when writing tests, setting up test frameworks, improving test coverage, or implementing test automation pipelines."
|
||||||
|
"performance-profiling:performance-profiling:Expert in application performance analysis, profiling, optimization, and monitoring. Use when identifying performance bottlenecks, optimizing slow code, reducing memory usage, or improving application speed."
|
||||||
|
"docker-kubernetes:docker-kubernetes:Expert in containerization with Docker and orchestration with Kubernetes including deployment, scaling, networking, and production-grade configurations. Use for containerizing applications, Kubernetes deployments, microservices architecture, or DevOps automation."
|
||||||
|
"ci-cd-pipeline:ci-cd-pipeline:Expert in CI/CD pipeline design and implementation using GitHub Actions, GitLab CI, Jenkins, and other tools. Use when setting up automated testing, deployment pipelines, or DevOps workflows."
|
||||||
|
"frontend-accessibility:frontend-accessibility:Expert in web accessibility (WCAG 2.1 AAA) including ARIA, keyboard navigation, screen reader support, and inclusive design. Use for accessibility audits, implementing a11y features, or ensuring compliance with accessibility standards."
|
||||||
|
"backend-scaling:backend-scaling:Expert in backend scaling strategies including load balancing, caching, database sharding, microservices, and horizontal/vertical scaling. Use when optimizing for high traffic, designing scalable architectures, or troubleshooting performance under load."
|
||||||
|
"data-pipeline:data-pipeline:Expert in building ETL/ELT pipelines, data processing, transformation, and orchestration using tools like Airflow, Spark, and dbt. Use for data engineering tasks, building data workflows, or implementing data processing systems."
|
||||||
|
"ml-model-integration:ml-model-integration:Expert in integrating AI/ML models into applications including model serving, API design, inference optimization, and monitoring. Use when deploying ML models, building AI features, or optimizing model performance in production."
|
||||||
|
"documentation-generator:documentation-generator:Expert in generating comprehensive technical documentation including API docs, code comments, README files, and technical specifications. Use for auto-generating documentation, improving code documentation, or creating developer guides."
|
||||||
|
"error-handling:error-handling:Expert in robust error handling patterns, exception management, logging, monitoring, and graceful degradation. Use when implementing error handling strategies, debugging production issues, or improving application reliability."
|
||||||
|
"code-review:code-review:Expert in automated and manual code review focusing on best practices, security, performance, and maintainability. Use for conducting code reviews, setting up automated checks, or providing feedback on pull requests."
|
||||||
|
"git-workflow-optimizer:git-workflow-optimizer:Expert in Git workflows, branching strategies, merge strategies, conflict resolution, and Git best practices. Use for optimizing Git workflows, resolving complex merge conflicts, or setting up branching strategies."
|
||||||
|
"dependency-management:dependency-management:Expert in package management, dependency updates, security patches, and managing dependency conflicts. Use when updating dependencies, resolving version conflicts, or auditing package security."
|
||||||
|
"logging-monitoring:logging-monitoring:Expert in application logging, monitoring, observability, alerting, and incident response using tools like Datadog, Prometheus, Grafana, and ELK stack. Use for implementing logging strategies, setting up monitoring dashboards, or troubleshooting production issues."
|
||||||
|
"auth-implementation:auth-implementation:Expert in authentication and authorization systems including OAuth2, JWT, session management, SSO, and identity providers. Use when implementing user authentication, authorization, or integrating with identity providers like Auth0, Okta, or Firebase Auth."
|
||||||
|
"graphql-schema-design:graphql-schema-design:Expert in GraphQL schema design, resolvers, optimization, subscriptions, and federation. Use when designing GraphQL APIs, optimizing query performance, or implementing GraphQL subscriptions."
|
||||||
|
"real-time-systems:real-time-systems:Expert in building real-time systems using WebSockets, Server-Sent Events, WebRTC, and real-time databases. Use for implementing chat, live updates, collaborative features, or real-time notifications."
|
||||||
|
"caching-strategies:caching-strategies:Expert in caching strategies including Redis, Memcached, CDN caching, application-level caching, and cache invalidation patterns. Use for implementing caching layers, optimizing performance, or designing cache invalidation strategies."
|
||||||
|
"migration-tools:migration-tools:Expert in database migrations, framework migrations, version upgrades, and data migration strategies. Use when migrating databases, upgrading frameworks, or planning large-scale migrations with zero downtime."
|
||||||
|
"ui-component-library:ui-component-library:Expert in building design systems and component libraries using React, Vue, or web components with Storybook, testing, and documentation. Use when creating reusable UI components, building design systems, or implementing component libraries."
|
||||||
|
"mobile-responsive:mobile-responsive:Expert in responsive web design, mobile-first development, progressive web apps, and cross-device compatibility. Use for building responsive layouts, optimizing mobile performance, or implementing PWA features."
|
||||||
|
)
|
||||||
|
|
||||||
|
for skill_info in "${skills[@]}"; do
|
||||||
|
IFS=':' read -r folder name desc <<< "$skill_info"
|
||||||
|
echo "Creating $name..."
|
||||||
|
done
|
||||||
|
|
||||||
116
claude_skills/data-pipeline/SKILL.md
Normal file
116
claude_skills/data-pipeline/SKILL.md
Normal file
@ -0,0 +1,116 @@
|
|||||||
|
---
|
||||||
|
name: data-pipeline
|
||||||
|
description: Expert in building ETL/ELT pipelines, data processing, transformation, and orchestration using tools like Airflow, Spark, and dbt. Use for data engineering tasks, building data workflows, or implementing data processing systems.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Data Pipeline Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Build robust ETL/ELT pipelines for data processing, transformation, and orchestration.
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- **Orchestration**: Apache Airflow, Prefect, Dagster
|
||||||
|
- **Processing**: Apache Spark, dbt, Pandas
|
||||||
|
- **Storage**: S3, GCS, Data Lakes
|
||||||
|
- **Warehouses**: Snowflake, BigQuery, Redshift
|
||||||
|
- **Streaming**: Apache Kafka, AWS Kinesis
|
||||||
|
- **Quality**: Great Expectations, dbt tests
|
||||||
|
|
||||||
|
## Airflow DAG Example
|
||||||
|
```python
|
||||||
|
from airflow import DAG
|
||||||
|
from airflow.operators.python import PythonOperator
|
||||||
|
from airflow.providers.postgres.operators.postgres import PostgresOperator
|
||||||
|
from datetime import datetime, timedelta
|
||||||
|
|
||||||
|
default_args = {
|
||||||
|
'owner': 'data-team',
|
||||||
|
'retries': 3,
|
||||||
|
'retry_delay': timedelta(minutes=5),
|
||||||
|
'email_on_failure': True,
|
||||||
|
}
|
||||||
|
|
||||||
|
with DAG(
|
||||||
|
'user_analytics_pipeline',
|
||||||
|
default_args=default_args,
|
||||||
|
schedule_interval='@daily',
|
||||||
|
start_date=datetime(2024, 1, 1),
|
||||||
|
catchup=False,
|
||||||
|
tags=['analytics', 'users'],
|
||||||
|
) as dag:
|
||||||
|
|
||||||
|
extract_users = PythonOperator(
|
||||||
|
task_id='extract_users',
|
||||||
|
python_callable=extract_from_api,
|
||||||
|
op_kwargs={'endpoint': 'users'}
|
||||||
|
)
|
||||||
|
|
||||||
|
transform_data = PythonOperator(
|
||||||
|
task_id='transform_data',
|
||||||
|
python_callable=transform_user_data,
|
||||||
|
)
|
||||||
|
|
||||||
|
load_to_warehouse = PostgresOperator(
|
||||||
|
task_id='load_to_warehouse',
|
||||||
|
postgres_conn_id='warehouse',
|
||||||
|
sql='sql/load_users.sql',
|
||||||
|
)
|
||||||
|
|
||||||
|
data_quality_check = PythonOperator(
|
||||||
|
task_id='data_quality_check',
|
||||||
|
python_callable=run_quality_checks,
|
||||||
|
)
|
||||||
|
|
||||||
|
extract_users >> transform_data >> load_to_warehouse >> data_quality_check
|
||||||
|
```
|
||||||
|
|
||||||
|
## dbt Transformation
|
||||||
|
```sql
|
||||||
|
-- models/staging/stg_users.sql
|
||||||
|
with source as (
|
||||||
|
select * from {{ source('raw', 'users') }}
|
||||||
|
),
|
||||||
|
|
||||||
|
transformed as (
|
||||||
|
select
|
||||||
|
id as user_id,
|
||||||
|
lower(email) as email,
|
||||||
|
created_at,
|
||||||
|
updated_at,
|
||||||
|
case
|
||||||
|
when status = 'active' then true
|
||||||
|
else false
|
||||||
|
end as is_active
|
||||||
|
from source
|
||||||
|
where created_at is not null
|
||||||
|
)
|
||||||
|
|
||||||
|
select * from transformed
|
||||||
|
|
||||||
|
-- models/marts/fct_user_activity.sql
|
||||||
|
with user_events as (
|
||||||
|
select * from {{ ref('stg_events') }}
|
||||||
|
),
|
||||||
|
|
||||||
|
aggregated as (
|
||||||
|
select
|
||||||
|
user_id,
|
||||||
|
count(*) as total_events,
|
||||||
|
count(distinct date(created_at)) as active_days,
|
||||||
|
min(created_at) as first_event_at,
|
||||||
|
max(created_at) as last_event_at
|
||||||
|
from user_events
|
||||||
|
group by 1
|
||||||
|
)
|
||||||
|
|
||||||
|
select * from aggregated
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Data freshness < 1 hour
|
||||||
|
- ✓ Pipeline success rate > 99%
|
||||||
|
- ✓ Data quality checks passing
|
||||||
|
- ✓ Idempotent operations
|
||||||
|
- ✓ Monitoring and alerting
|
||||||
|
|
||||||
413
claude_skills/database-optimization/SKILL.md
Normal file
413
claude_skills/database-optimization/SKILL.md
Normal file
@ -0,0 +1,413 @@
|
|||||||
|
---
|
||||||
|
name: database-optimization
|
||||||
|
description: Expert in SQL/NoSQL database performance optimization, query tuning, indexing strategies, schema design, and migrations. Use when optimizing slow queries, designing database schemas, creating indexes, or troubleshooting database performance issues.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Database Optimization Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Comprehensive database performance optimization including query tuning, indexing strategies, schema design, connection pooling, caching, and migration management for SQL and NoSQL databases.
|
||||||
|
|
||||||
|
## When to Use
|
||||||
|
- Slow query optimization
|
||||||
|
- Index design and creation
|
||||||
|
- Schema normalization/denormalization
|
||||||
|
- Database migration planning
|
||||||
|
- Connection pool configuration
|
||||||
|
- Query plan analysis
|
||||||
|
- N+1 query problems
|
||||||
|
- Database scaling strategies
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
|
||||||
|
### SQL Optimization
|
||||||
|
- Query performance analysis with EXPLAIN
|
||||||
|
- Index design (B-tree, Hash, GiST, GIN)
|
||||||
|
- Query rewriting for performance
|
||||||
|
- JOIN optimization
|
||||||
|
- Subquery vs JOIN analysis
|
||||||
|
- Window functions and CTEs
|
||||||
|
- Partitioning strategies
|
||||||
|
|
||||||
|
### NoSQL Optimization
|
||||||
|
- Document structure design (MongoDB)
|
||||||
|
- Key-value optimization (Redis)
|
||||||
|
- Column-family design (Cassandra)
|
||||||
|
- Graph traversal optimization (Neo4j)
|
||||||
|
- Sharding strategies
|
||||||
|
- Replication configuration
|
||||||
|
|
||||||
|
### Schema Design
|
||||||
|
- Normalization (1NF, 2NF, 3NF, BCNF)
|
||||||
|
- Strategic denormalization
|
||||||
|
- Foreign key relationships
|
||||||
|
- Composite keys
|
||||||
|
- UUID vs auto-increment IDs
|
||||||
|
- Soft deletes vs hard deletes
|
||||||
|
|
||||||
|
## SQL Query Optimization Examples
|
||||||
|
|
||||||
|
```sql
|
||||||
|
-- BEFORE: Slow query with N+1 problem
|
||||||
|
SELECT * FROM users;
|
||||||
|
-- Then in application: for each user, SELECT * FROM orders WHERE user_id = ?
|
||||||
|
|
||||||
|
-- AFTER: Single query with JOIN
|
||||||
|
SELECT
|
||||||
|
u.*,
|
||||||
|
o.id as order_id,
|
||||||
|
o.total as order_total,
|
||||||
|
o.created_at as order_date
|
||||||
|
FROM users u
|
||||||
|
LEFT JOIN orders o ON u.id = o.user_id
|
||||||
|
ORDER BY u.id, o.created_at DESC;
|
||||||
|
|
||||||
|
-- BETTER: Use window functions for latest order
|
||||||
|
SELECT
|
||||||
|
u.*,
|
||||||
|
o.id as latest_order_id,
|
||||||
|
o.total as latest_order_total
|
||||||
|
FROM users u
|
||||||
|
LEFT JOIN LATERAL (
|
||||||
|
SELECT id, total, created_at
|
||||||
|
FROM orders
|
||||||
|
WHERE user_id = u.id
|
||||||
|
ORDER BY created_at DESC
|
||||||
|
LIMIT 1
|
||||||
|
) o ON true;
|
||||||
|
```
|
||||||
|
|
||||||
|
### Index Strategy
|
||||||
|
|
||||||
|
```sql
|
||||||
|
-- Analyze query plan
|
||||||
|
EXPLAIN ANALYZE
|
||||||
|
SELECT * FROM orders
|
||||||
|
WHERE user_id = 123
|
||||||
|
AND status = 'pending'
|
||||||
|
AND created_at > '2024-01-01';
|
||||||
|
|
||||||
|
-- Create composite index (order matters!)
|
||||||
|
CREATE INDEX idx_orders_user_status_created
|
||||||
|
ON orders(user_id, status, created_at);
|
||||||
|
|
||||||
|
-- Covering index (include all needed columns)
|
||||||
|
CREATE INDEX idx_orders_covering
|
||||||
|
ON orders(user_id, status)
|
||||||
|
INCLUDE (total, created_at);
|
||||||
|
|
||||||
|
-- Partial index (for specific conditions)
|
||||||
|
CREATE INDEX idx_orders_pending
|
||||||
|
ON orders(user_id, created_at)
|
||||||
|
WHERE status = 'pending';
|
||||||
|
|
||||||
|
-- Expression index
|
||||||
|
CREATE INDEX idx_users_lower_email
|
||||||
|
ON users(LOWER(email));
|
||||||
|
```
|
||||||
|
|
||||||
|
### Query Rewriting
|
||||||
|
|
||||||
|
```sql
|
||||||
|
-- SLOW: Using OR
|
||||||
|
SELECT * FROM users WHERE name = 'John' OR email = 'john@example.com';
|
||||||
|
|
||||||
|
-- FAST: Using UNION ALL (if mutually exclusive)
|
||||||
|
SELECT * FROM users WHERE name = 'John'
|
||||||
|
UNION ALL
|
||||||
|
SELECT * FROM users WHERE email = 'john@example.com' AND name != 'John';
|
||||||
|
|
||||||
|
-- SLOW: Subquery in SELECT
|
||||||
|
SELECT
|
||||||
|
u.*,
|
||||||
|
(SELECT COUNT(*) FROM orders WHERE user_id = u.id) as order_count
|
||||||
|
FROM users u;
|
||||||
|
|
||||||
|
-- FAST: JOIN with aggregation
|
||||||
|
SELECT
|
||||||
|
u.*,
|
||||||
|
COALESCE(o.order_count, 0) as order_count
|
||||||
|
FROM users u
|
||||||
|
LEFT JOIN (
|
||||||
|
SELECT user_id, COUNT(*) as order_count
|
||||||
|
FROM orders
|
||||||
|
GROUP BY user_id
|
||||||
|
) o ON u.id = o.user_id;
|
||||||
|
|
||||||
|
-- SLOW: NOT IN with subquery
|
||||||
|
SELECT * FROM users WHERE id NOT IN (SELECT user_id FROM orders);
|
||||||
|
|
||||||
|
-- FAST: NOT EXISTS or LEFT JOIN
|
||||||
|
SELECT u.*
|
||||||
|
FROM users u
|
||||||
|
WHERE NOT EXISTS (SELECT 1 FROM orders o WHERE o.user_id = u.id);
|
||||||
|
|
||||||
|
-- Or
|
||||||
|
SELECT u.*
|
||||||
|
FROM users u
|
||||||
|
LEFT JOIN orders o ON u.id = o.user_id
|
||||||
|
WHERE o.id IS NULL;
|
||||||
|
```
|
||||||
|
|
||||||
|
## MongoDB Optimization
|
||||||
|
|
||||||
|
```javascript
|
||||||
|
// Schema design with embedded documents
|
||||||
|
{
|
||||||
|
_id: ObjectId("..."),
|
||||||
|
user_id: 123,
|
||||||
|
email: "user@example.com",
|
||||||
|
profile: { // Embedded for 1:1 relationships
|
||||||
|
firstName: "John",
|
||||||
|
lastName: "Doe",
|
||||||
|
avatar: "url"
|
||||||
|
},
|
||||||
|
address: [ // Embedded array for 1:few
|
||||||
|
{ street: "123 Main", city: "NYC", type: "home" },
|
||||||
|
{ street: "456 Work Ave", city: "NYC", type: "work" }
|
||||||
|
],
|
||||||
|
// Reference for 1:many (use separate collection)
|
||||||
|
order_ids: [ObjectId("..."), ObjectId("...")]
|
||||||
|
}
|
||||||
|
|
||||||
|
// Indexing strategies
|
||||||
|
db.users.createIndex({ email: 1 }, { unique: true });
|
||||||
|
db.users.createIndex({ "profile.lastName": 1, "profile.firstName": 1 });
|
||||||
|
db.orders.createIndex({ user_id: 1, created_at: -1 });
|
||||||
|
|
||||||
|
// Compound index for common queries
|
||||||
|
db.orders.createIndex({
|
||||||
|
status: 1,
|
||||||
|
user_id: 1,
|
||||||
|
created_at: -1
|
||||||
|
});
|
||||||
|
|
||||||
|
// Text index for search
|
||||||
|
db.products.createIndex({
|
||||||
|
name: "text",
|
||||||
|
description: "text"
|
||||||
|
});
|
||||||
|
|
||||||
|
// Aggregation pipeline optimization
|
||||||
|
db.orders.aggregate([
|
||||||
|
// Match first (filter early)
|
||||||
|
{ $match: { status: "pending", created_at: { $gte: ISODate("2024-01-01") } } },
|
||||||
|
|
||||||
|
// Lookup (join) only needed data
|
||||||
|
{ $lookup: {
|
||||||
|
from: "users",
|
||||||
|
localField: "user_id",
|
||||||
|
foreignField: "_id",
|
||||||
|
as: "user"
|
||||||
|
}},
|
||||||
|
|
||||||
|
// Project (select only needed fields)
|
||||||
|
{ $project: {
|
||||||
|
order_id: "$_id",
|
||||||
|
total: 1,
|
||||||
|
"user.email": 1
|
||||||
|
}},
|
||||||
|
|
||||||
|
// Group and aggregate
|
||||||
|
{ $group: {
|
||||||
|
_id: "$user.email",
|
||||||
|
total_spent: { $sum: "$total" },
|
||||||
|
order_count: { $sum: 1 }
|
||||||
|
}},
|
||||||
|
|
||||||
|
// Sort
|
||||||
|
{ $sort: { total_spent: -1 } },
|
||||||
|
|
||||||
|
// Limit
|
||||||
|
{ $limit: 10 }
|
||||||
|
]);
|
||||||
|
```
|
||||||
|
|
||||||
|
## Connection Pooling
|
||||||
|
|
||||||
|
```javascript
|
||||||
|
// PostgreSQL with pg
|
||||||
|
const { Pool } = require('pg');
|
||||||
|
|
||||||
|
const pool = new Pool({
|
||||||
|
host: 'localhost',
|
||||||
|
database: 'mydb',
|
||||||
|
max: 20, // Max clients in pool
|
||||||
|
idleTimeoutMillis: 30000, // Close idle clients after 30s
|
||||||
|
connectionTimeoutMillis: 2000, // Timeout acquiring connection
|
||||||
|
});
|
||||||
|
|
||||||
|
// Proper connection usage
|
||||||
|
async function getUser(id) {
|
||||||
|
const client = await pool.connect();
|
||||||
|
try {
|
||||||
|
const result = await client.query('SELECT * FROM users WHERE id = $1', [id]);
|
||||||
|
return result.rows[0];
|
||||||
|
} finally {
|
||||||
|
client.release(); // Always release!
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Transaction with automatic rollback
|
||||||
|
async function transferMoney(fromId, toId, amount) {
|
||||||
|
const client = await pool.connect();
|
||||||
|
try {
|
||||||
|
await client.query('BEGIN');
|
||||||
|
await client.query('UPDATE accounts SET balance = balance - $1 WHERE id = $2', [amount, fromId]);
|
||||||
|
await client.query('UPDATE accounts SET balance = balance + $1 WHERE id = $2', [amount, toId]);
|
||||||
|
await client.query('COMMIT');
|
||||||
|
} catch (error) {
|
||||||
|
await client.query('ROLLBACK');
|
||||||
|
throw error;
|
||||||
|
} finally {
|
||||||
|
client.release();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Caching Strategies
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
import Redis from 'ioredis';
|
||||||
|
|
||||||
|
const redis = new Redis();
|
||||||
|
|
||||||
|
// Cache-aside pattern
|
||||||
|
async function getUser(id: string) {
|
||||||
|
// Try cache first
|
||||||
|
const cached = await redis.get(`user:${id}`);
|
||||||
|
if (cached) return JSON.parse(cached);
|
||||||
|
|
||||||
|
// Cache miss - query database
|
||||||
|
const user = await db.query('SELECT * FROM users WHERE id = $1', [id]);
|
||||||
|
|
||||||
|
// Store in cache with TTL
|
||||||
|
await redis.setex(`user:${id}`, 3600, JSON.stringify(user));
|
||||||
|
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Invalidate cache on update
|
||||||
|
async function updateUser(id: string, data: any) {
|
||||||
|
await db.query('UPDATE users SET ... WHERE id = $1', [id]);
|
||||||
|
await redis.del(`user:${id}`); // Invalidate cache
|
||||||
|
}
|
||||||
|
|
||||||
|
// Write-through cache
|
||||||
|
async function createUser(data: any) {
|
||||||
|
const user = await db.query('INSERT INTO users ... RETURNING *', [data]);
|
||||||
|
await redis.setex(`user:${user.id}`, 3600, JSON.stringify(user));
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Migration Best Practices
|
||||||
|
|
||||||
|
```sql
|
||||||
|
-- migrations/001_create_users.up.sql
|
||||||
|
BEGIN;
|
||||||
|
|
||||||
|
CREATE TABLE users (
|
||||||
|
id SERIAL PRIMARY KEY,
|
||||||
|
email VARCHAR(255) UNIQUE NOT NULL,
|
||||||
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE INDEX idx_users_email ON users(email);
|
||||||
|
|
||||||
|
COMMIT;
|
||||||
|
|
||||||
|
-- migrations/001_create_users.down.sql
|
||||||
|
BEGIN;
|
||||||
|
DROP TABLE IF EXISTS users CASCADE;
|
||||||
|
COMMIT;
|
||||||
|
|
||||||
|
-- Safe column addition (non-blocking)
|
||||||
|
ALTER TABLE users ADD COLUMN phone VARCHAR(20);
|
||||||
|
|
||||||
|
-- Safe column removal (two-step)
|
||||||
|
-- Step 1: Make column nullable and stop using it
|
||||||
|
ALTER TABLE users ALTER COLUMN old_column DROP NOT NULL;
|
||||||
|
-- Deploy code that doesn't use column
|
||||||
|
-- Step 2: Drop column
|
||||||
|
ALTER TABLE users DROP COLUMN old_column;
|
||||||
|
|
||||||
|
-- Safe index creation (concurrent)
|
||||||
|
CREATE INDEX CONCURRENTLY idx_users_phone ON users(phone);
|
||||||
|
|
||||||
|
-- Safe data migration (batched)
|
||||||
|
DO $$
|
||||||
|
DECLARE
|
||||||
|
batch_size INT := 1000;
|
||||||
|
offset_val INT := 0;
|
||||||
|
affected INT;
|
||||||
|
BEGIN
|
||||||
|
LOOP
|
||||||
|
UPDATE users
|
||||||
|
SET normalized_email = LOWER(email)
|
||||||
|
WHERE id IN (
|
||||||
|
SELECT id FROM users
|
||||||
|
WHERE normalized_email IS NULL
|
||||||
|
LIMIT batch_size
|
||||||
|
);
|
||||||
|
|
||||||
|
GET DIAGNOSTICS affected = ROW_COUNT;
|
||||||
|
EXIT WHEN affected = 0;
|
||||||
|
|
||||||
|
-- Pause between batches
|
||||||
|
PERFORM pg_sleep(0.1);
|
||||||
|
END LOOP;
|
||||||
|
END $$;
|
||||||
|
```
|
||||||
|
|
||||||
|
## Performance Monitoring
|
||||||
|
|
||||||
|
```sql
|
||||||
|
-- PostgreSQL slow query log
|
||||||
|
ALTER SYSTEM SET log_min_duration_statement = 1000; -- Log queries > 1s
|
||||||
|
|
||||||
|
-- Find slow queries
|
||||||
|
SELECT
|
||||||
|
query,
|
||||||
|
calls,
|
||||||
|
total_time,
|
||||||
|
mean_time,
|
||||||
|
max_time
|
||||||
|
FROM pg_stat_statements
|
||||||
|
ORDER BY mean_time DESC
|
||||||
|
LIMIT 10;
|
||||||
|
|
||||||
|
-- Find missing indexes
|
||||||
|
SELECT
|
||||||
|
schemaname,
|
||||||
|
tablename,
|
||||||
|
seq_scan,
|
||||||
|
seq_tup_read,
|
||||||
|
idx_scan,
|
||||||
|
seq_tup_read / seq_scan as avg_seq_tup_read
|
||||||
|
FROM pg_stat_user_tables
|
||||||
|
WHERE seq_scan > 0
|
||||||
|
ORDER BY seq_tup_read DESC
|
||||||
|
LIMIT 10;
|
||||||
|
|
||||||
|
-- Table bloat
|
||||||
|
SELECT
|
||||||
|
tablename,
|
||||||
|
pg_size_pretty(pg_total_relation_size(tablename::regclass)) as size,
|
||||||
|
pg_size_pretty(pg_total_relation_size(tablename::regclass) - pg_relation_size(tablename::regclass)) as index_size
|
||||||
|
FROM pg_tables
|
||||||
|
WHERE schemaname = 'public'
|
||||||
|
ORDER BY pg_total_relation_size(tablename::regclass) DESC;
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Query execution time < 100ms for common queries
|
||||||
|
- ✓ Proper indexes on frequently queried columns
|
||||||
|
- ✓ No N+1 query problems
|
||||||
|
- ✓ Connection pooling configured
|
||||||
|
- ✓ Cache hit rate > 80% for cacheable data
|
||||||
|
- ✓ Database CPU < 70%
|
||||||
|
- ✓ Zero-downtime migrations
|
||||||
|
- ✓ Monitoring and alerting in place
|
||||||
40
claude_skills/dependency-management/SKILL.md
Normal file
40
claude_skills/dependency-management/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: dependency-management
|
||||||
|
description: Expert in package management, dependency updates, security patches, and managing dependency conflicts. Use when updating dependencies, resolving version conflicts, or auditing package security.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Dependency Management Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in package management, dependency updates, security patches, and managing dependency conflicts. Use when updating dependencies, resolving version conflicts, or auditing package security.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
104
claude_skills/docker-kubernetes/SKILL.md
Normal file
104
claude_skills/docker-kubernetes/SKILL.md
Normal file
@ -0,0 +1,104 @@
|
|||||||
|
---
|
||||||
|
name: docker-kubernetes
|
||||||
|
description: Expert in containerization with Docker and orchestration with Kubernetes including deployment, scaling, networking, and production-grade configurations. Use for containerizing applications, Kubernetes deployments, microservices architecture, or DevOps automation.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Docker & Kubernetes Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Master containerization and orchestration for scalable, production-ready deployments.
|
||||||
|
|
||||||
|
## Key Areas
|
||||||
|
- Dockerfile optimization (multi-stage builds, layer caching)
|
||||||
|
- Kubernetes manifests (Deployments, Services, Ingress)
|
||||||
|
- Helm charts and package management
|
||||||
|
- ConfigMaps and Secrets management
|
||||||
|
- Resource limits and requests
|
||||||
|
- Health checks (liveness, readiness, startup probes)
|
||||||
|
- Horizontal Pod Autoscaling (HPA)
|
||||||
|
- Service mesh (Istio, Linkerd)
|
||||||
|
- CI/CD integration
|
||||||
|
|
||||||
|
## Example Dockerfile
|
||||||
|
```dockerfile
|
||||||
|
# Multi-stage build
|
||||||
|
FROM node:18-alpine AS builder
|
||||||
|
WORKDIR /app
|
||||||
|
COPY package*.json ./
|
||||||
|
RUN npm ci --only=production
|
||||||
|
COPY . .
|
||||||
|
RUN npm run build
|
||||||
|
|
||||||
|
FROM node:18-alpine
|
||||||
|
RUN apk add --no-cache dumb-init
|
||||||
|
WORKDIR /app
|
||||||
|
COPY --from=builder /app/dist ./dist
|
||||||
|
COPY --from=builder /app/node_modules ./node_modules
|
||||||
|
EXPOSE 3000
|
||||||
|
USER node
|
||||||
|
ENTRYPOINT ["dumb-init", "--"]
|
||||||
|
CMD ["node", "dist/main.js"]
|
||||||
|
```
|
||||||
|
|
||||||
|
## Kubernetes Deployment
|
||||||
|
```yaml
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: app
|
||||||
|
spec:
|
||||||
|
replicas: 3
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: myapp
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: myapp
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: app
|
||||||
|
image: myapp:1.0.0
|
||||||
|
ports:
|
||||||
|
- containerPort: 3000
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: "128Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "256Mi"
|
||||||
|
cpu: "200m"
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health
|
||||||
|
port: 3000
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /ready
|
||||||
|
port: 3000
|
||||||
|
initialDelaySeconds: 5
|
||||||
|
periodSeconds: 5
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: app-service
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: myapp
|
||||||
|
ports:
|
||||||
|
- port: 80
|
||||||
|
targetPort: 3000
|
||||||
|
type: LoadBalancer
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Images < 500MB
|
||||||
|
- ✓ Build time < 5min
|
||||||
|
- ✓ Zero-downtime deployments
|
||||||
|
- ✓ Auto-scaling configured
|
||||||
|
- ✓ Monitoring and logging
|
||||||
|
|
||||||
132
claude_skills/documentation-generator/SKILL.md
Normal file
132
claude_skills/documentation-generator/SKILL.md
Normal file
@ -0,0 +1,132 @@
|
|||||||
|
---
|
||||||
|
name: documentation-generator
|
||||||
|
description: Expert in generating comprehensive technical documentation including API docs, code comments, README files, and technical specifications. Use for auto-generating documentation, improving code documentation, or creating developer guides.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Documentation Generator Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Generate comprehensive technical documentation including API docs, README files, and developer guides.
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
- API documentation (OpenAPI/Swagger)
|
||||||
|
- Code comments and JSDoc
|
||||||
|
- README generation
|
||||||
|
- Architecture diagrams
|
||||||
|
- Changelog management
|
||||||
|
- Developer onboarding guides
|
||||||
|
|
||||||
|
## OpenAPI/Swagger
|
||||||
|
```yaml
|
||||||
|
openapi: 3.0.0
|
||||||
|
info:
|
||||||
|
title: User API
|
||||||
|
version: 1.0.0
|
||||||
|
description: API for managing users
|
||||||
|
|
||||||
|
paths:
|
||||||
|
/users:
|
||||||
|
get:
|
||||||
|
summary: List all users
|
||||||
|
parameters:
|
||||||
|
- name: page
|
||||||
|
in: query
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
|
default: 1
|
||||||
|
- name: limit
|
||||||
|
in: query
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
|
default: 20
|
||||||
|
responses:
|
||||||
|
'200':
|
||||||
|
description: Successful response
|
||||||
|
content:
|
||||||
|
application/json:
|
||||||
|
schema:
|
||||||
|
type: object
|
||||||
|
properties:
|
||||||
|
data:
|
||||||
|
type: array
|
||||||
|
items:
|
||||||
|
$ref: '#/components/schemas/User'
|
||||||
|
meta:
|
||||||
|
$ref: '#/components/schemas/Pagination'
|
||||||
|
|
||||||
|
components:
|
||||||
|
schemas:
|
||||||
|
User:
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- id
|
||||||
|
- email
|
||||||
|
properties:
|
||||||
|
id:
|
||||||
|
type: string
|
||||||
|
format: uuid
|
||||||
|
email:
|
||||||
|
type: string
|
||||||
|
format: email
|
||||||
|
name:
|
||||||
|
type: string
|
||||||
|
```
|
||||||
|
|
||||||
|
## JSDoc Example
|
||||||
|
```typescript
|
||||||
|
/**
|
||||||
|
* Creates a new user account
|
||||||
|
*
|
||||||
|
* @param {CreateUserDto} userData - User registration data
|
||||||
|
* @param {string} userData.email - User's email address
|
||||||
|
* @param {string} userData.password - User's password (min 8 chars)
|
||||||
|
* @returns {Promise<User>} Created user object
|
||||||
|
* @throws {ValidationError} If input is invalid
|
||||||
|
* @throws {DuplicateError} If email already exists
|
||||||
|
*
|
||||||
|
* @example
|
||||||
|
* const user = await createUser({
|
||||||
|
* email: 'user@example.com',
|
||||||
|
* password: 'SecurePass123!'
|
||||||
|
* });
|
||||||
|
*/
|
||||||
|
async function createUser(userData: CreateUserDto): Promise<User> {
|
||||||
|
// Implementation
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## README Template
|
||||||
|
```markdown
|
||||||
|
# Project Name
|
||||||
|
|
||||||
|
Brief description of what this project does.
|
||||||
|
|
||||||
|
## Installation
|
||||||
|
\`\`\`bash
|
||||||
|
npm install
|
||||||
|
\`\`\`
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
\`\`\`typescript
|
||||||
|
import { func } from 'package';
|
||||||
|
func();
|
||||||
|
\`\`\`
|
||||||
|
|
||||||
|
## API Reference
|
||||||
|
See [API.md](./API.md)
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
See [CONTRIBUTING.md](./CONTRIBUTING.md)
|
||||||
|
|
||||||
|
## License
|
||||||
|
MIT
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ All public APIs documented
|
||||||
|
- ✓ README complete and up-to-date
|
||||||
|
- ✓ Code comments for complex logic
|
||||||
|
- ✓ Architecture documented
|
||||||
|
- ✓ Examples provided
|
||||||
|
|
||||||
130
claude_skills/error-handling/SKILL.md
Normal file
130
claude_skills/error-handling/SKILL.md
Normal file
@ -0,0 +1,130 @@
|
|||||||
|
---
|
||||||
|
name: error-handling
|
||||||
|
description: Expert in robust error handling patterns, exception management, logging, monitoring, and graceful degradation. Use when implementing error handling strategies, debugging production issues, or improving application reliability.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Error Handling Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Implement robust error handling, logging, and graceful degradation patterns.
|
||||||
|
|
||||||
|
## Error Handling Patterns
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
// Custom error classes
|
||||||
|
class AppError extends Error {
|
||||||
|
constructor(
|
||||||
|
message: string,
|
||||||
|
public statusCode: number = 500,
|
||||||
|
public isOperational: boolean = true
|
||||||
|
) {
|
||||||
|
super(message);
|
||||||
|
this.name = this.constructor.name;
|
||||||
|
Error.captureStackTrace(this, this.constructor);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class ValidationError extends AppError {
|
||||||
|
constructor(message: string) {
|
||||||
|
super(message, 400);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
class NotFoundError extends AppError {
|
||||||
|
constructor(resource: string) {
|
||||||
|
super(`${resource} not found`, 404);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Global error handler
|
||||||
|
app.use((err: Error, req: Request, res: Response, next: NextFunction) => {
|
||||||
|
if (err instanceof AppError) {
|
||||||
|
return res.status(err.statusCode).json({
|
||||||
|
error: {
|
||||||
|
message: err.message,
|
||||||
|
statusCode: err.statusCode,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// Log unexpected errors
|
||||||
|
logger.error('Unexpected error:', err);
|
||||||
|
|
||||||
|
// Don't expose internal errors
|
||||||
|
res.status(500).json({
|
||||||
|
error: {
|
||||||
|
message: 'Internal server error',
|
||||||
|
statusCode: 500,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
// Async error handling
|
||||||
|
const asyncHandler = (fn: Function) => (req: Request, res: Response, next: NextFunction) => {
|
||||||
|
Promise.resolve(fn(req, res, next)).catch(next);
|
||||||
|
};
|
||||||
|
|
||||||
|
app.get('/users/:id', asyncHandler(async (req, res) => {
|
||||||
|
const user = await findUser(req.params.id);
|
||||||
|
if (!user) throw new NotFoundError('User');
|
||||||
|
res.json(user);
|
||||||
|
}));
|
||||||
|
|
||||||
|
// Graceful degradation
|
||||||
|
async function getUserWithFallback(id: string): Promise<User> {
|
||||||
|
try {
|
||||||
|
return await fetchFromPrimaryDB(id);
|
||||||
|
} catch (error) {
|
||||||
|
logger.warn('Primary DB failed, using cache', { error });
|
||||||
|
try {
|
||||||
|
return await fetchFromCache(id);
|
||||||
|
} catch (cacheError) {
|
||||||
|
logger.error('Cache also failed', { cacheError });
|
||||||
|
return getDefaultUser();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Circuit breaker pattern
|
||||||
|
class CircuitBreaker {
|
||||||
|
private failures = 0;
|
||||||
|
private state: 'closed' | 'open' | 'half-open' = 'closed';
|
||||||
|
|
||||||
|
async execute<T>(fn: () => Promise<T>): Promise<T> {
|
||||||
|
if (this.state === 'open') {
|
||||||
|
throw new Error('Circuit breaker is open');
|
||||||
|
}
|
||||||
|
|
||||||
|
try {
|
||||||
|
const result = await fn();
|
||||||
|
this.onSuccess();
|
||||||
|
return result;
|
||||||
|
} catch (error) {
|
||||||
|
this.onFailure();
|
||||||
|
throw error;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private onSuccess() {
|
||||||
|
this.failures = 0;
|
||||||
|
this.state = 'closed';
|
||||||
|
}
|
||||||
|
|
||||||
|
private onFailure() {
|
||||||
|
this.failures++;
|
||||||
|
if (this.failures >= 5) {
|
||||||
|
this.state = 'open';
|
||||||
|
setTimeout(() => this.state = 'half-open', 60000);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ All errors caught and handled
|
||||||
|
- ✓ Appropriate HTTP status codes
|
||||||
|
- ✓ No exposed stack traces in production
|
||||||
|
- ✓ Errors logged with context
|
||||||
|
- ✓ Graceful degradation implemented
|
||||||
|
|
||||||
151
claude_skills/frontend-accessibility/SKILL.md
Normal file
151
claude_skills/frontend-accessibility/SKILL.md
Normal file
@ -0,0 +1,151 @@
|
|||||||
|
---
|
||||||
|
name: frontend-accessibility
|
||||||
|
description: Expert in web accessibility (WCAG 2.1 AAA) including ARIA, keyboard navigation, screen reader support, and inclusive design. Use for accessibility audits, implementing a11y features, or ensuring compliance with accessibility standards.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Frontend Accessibility Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Ensure web applications are accessible to all users including those with disabilities, following WCAG 2.1 guidelines.
|
||||||
|
|
||||||
|
## WCAG 2.1 Principles (POUR)
|
||||||
|
1. **Perceivable**: Content must be presentable to users
|
||||||
|
2. **Operable**: UI components must be operable
|
||||||
|
3. **Understandable**: Information must be understandable
|
||||||
|
4. **Robust**: Content must be robust enough for assistive technologies
|
||||||
|
|
||||||
|
## Key Areas
|
||||||
|
- Semantic HTML
|
||||||
|
- ARIA attributes and roles
|
||||||
|
- Keyboard navigation
|
||||||
|
- Screen reader compatibility
|
||||||
|
- Color contrast (WCAG AA: 4.5:1, AAA: 7:1)
|
||||||
|
- Focus management
|
||||||
|
- Alternative text for images
|
||||||
|
- Form accessibility
|
||||||
|
- Skip links
|
||||||
|
|
||||||
|
## Accessible Component Examples
|
||||||
|
|
||||||
|
```tsx
|
||||||
|
// Accessible button
|
||||||
|
<button
|
||||||
|
type="button"
|
||||||
|
aria-label="Close dialog"
|
||||||
|
onClick={handleClose}
|
||||||
|
className="focus:outline-none focus:ring-2 focus:ring-blue-500"
|
||||||
|
>
|
||||||
|
<XIcon aria-hidden="true" />
|
||||||
|
</button>
|
||||||
|
|
||||||
|
// Accessible form
|
||||||
|
<form onSubmit={handleSubmit}>
|
||||||
|
<label htmlFor="email" className="block text-sm font-medium">
|
||||||
|
Email address
|
||||||
|
<span className="text-red-500" aria-label="required">*</span>
|
||||||
|
</label>
|
||||||
|
<input
|
||||||
|
id="email"
|
||||||
|
type="email"
|
||||||
|
required
|
||||||
|
aria-required="true"
|
||||||
|
aria-describedby="email-error"
|
||||||
|
aria-invalid={hasError}
|
||||||
|
className="mt-1 block w-full"
|
||||||
|
/>
|
||||||
|
{hasError && (
|
||||||
|
<p id="email-error" role="alert" className="text-red-600 text-sm">
|
||||||
|
Please enter a valid email address
|
||||||
|
</p>
|
||||||
|
)}
|
||||||
|
</form>
|
||||||
|
|
||||||
|
// Accessible modal
|
||||||
|
function Modal({ isOpen, onClose, title, children }: ModalProps) {
|
||||||
|
const modalRef = useRef<HTMLDivElement>(null);
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
if (isOpen) {
|
||||||
|
// Focus trap
|
||||||
|
const focusableElements = modalRef.current?.querySelectorAll(
|
||||||
|
'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])'
|
||||||
|
);
|
||||||
|
const firstElement = focusableElements?.[0] as HTMLElement;
|
||||||
|
firstElement?.focus();
|
||||||
|
}
|
||||||
|
}, [isOpen]);
|
||||||
|
|
||||||
|
if (!isOpen) return null;
|
||||||
|
|
||||||
|
return (
|
||||||
|
<div
|
||||||
|
role="dialog"
|
||||||
|
aria-modal="true"
|
||||||
|
aria-labelledby="modal-title"
|
||||||
|
className="fixed inset-0 z-50"
|
||||||
|
ref={modalRef}
|
||||||
|
>
|
||||||
|
<div className="fixed inset-0 bg-black opacity-50" onClick={onClose} />
|
||||||
|
<div className="relative bg-white p-6 rounded-lg">
|
||||||
|
<h2 id="modal-title" className="text-xl font-bold">
|
||||||
|
{title}
|
||||||
|
</h2>
|
||||||
|
<button
|
||||||
|
onClick={onClose}
|
||||||
|
aria-label="Close"
|
||||||
|
className="absolute top-4 right-4"
|
||||||
|
>
|
||||||
|
×
|
||||||
|
</button>
|
||||||
|
{children}
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Accessible navigation
|
||||||
|
<nav aria-label="Main navigation">
|
||||||
|
<ul role="list">
|
||||||
|
<li><a href="/" aria-current={isHome ? "page" : undefined}>Home</a></li>
|
||||||
|
<li><a href="/about">About</a></li>
|
||||||
|
<li><a href="/contact">Contact</a></li>
|
||||||
|
</ul>
|
||||||
|
</nav>
|
||||||
|
|
||||||
|
// Skip link
|
||||||
|
<a
|
||||||
|
href="#main-content"
|
||||||
|
className="sr-only focus:not-sr-only focus:absolute focus:top-0 focus:left-0"
|
||||||
|
>
|
||||||
|
Skip to main content
|
||||||
|
</a>
|
||||||
|
<main id="main-content">...</main>
|
||||||
|
```
|
||||||
|
|
||||||
|
## Testing Tools
|
||||||
|
- axe DevTools
|
||||||
|
- WAVE browser extension
|
||||||
|
- Lighthouse accessibility audit
|
||||||
|
- Screen readers (NVDA, JAWS, VoiceOver)
|
||||||
|
- Keyboard-only navigation testing
|
||||||
|
|
||||||
|
## Accessibility Checklist
|
||||||
|
- [ ] All images have alt text
|
||||||
|
- [ ] Color contrast meets WCAG AA (4.5:1)
|
||||||
|
- [ ] Keyboard navigation works
|
||||||
|
- [ ] Focus indicators visible
|
||||||
|
- [ ] Forms have labels
|
||||||
|
- [ ] ARIA attributes used correctly
|
||||||
|
- [ ] Headings in logical order (h1 → h2 → h3)
|
||||||
|
- [ ] No flashing content (seizure risk)
|
||||||
|
- [ ] Video/audio has captions
|
||||||
|
- [ ] Screen reader tested
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ WCAG 2.1 AA compliance (AAA preferred)
|
||||||
|
- ✓ axe DevTools: 0 violations
|
||||||
|
- ✓ Lighthouse accessibility: 100/100
|
||||||
|
- ✓ Keyboard accessible
|
||||||
|
- ✓ Screen reader compatible
|
||||||
|
|
||||||
154
claude_skills/git-workflow-optimizer/SKILL.md
Normal file
154
claude_skills/git-workflow-optimizer/SKILL.md
Normal file
@ -0,0 +1,154 @@
|
|||||||
|
---
|
||||||
|
name: git-workflow-optimizer
|
||||||
|
description: Expert in Git workflows, branching strategies, merge strategies, conflict resolution, and Git best practices. Use for optimizing Git workflows, resolving complex merge conflicts, or setting up branching strategies.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Git Workflow Optimizer
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Optimize Git workflows with best practices for branching, merging, and collaboration.
|
||||||
|
|
||||||
|
## Branching Strategies
|
||||||
|
|
||||||
|
### Git Flow
|
||||||
|
```bash
|
||||||
|
# Main branches
|
||||||
|
main # Production code
|
||||||
|
develop # Development integration
|
||||||
|
|
||||||
|
# Supporting branches
|
||||||
|
feature/user-auth
|
||||||
|
release/1.2.0
|
||||||
|
hotfix/critical-bug
|
||||||
|
|
||||||
|
# Workflow
|
||||||
|
git checkout develop
|
||||||
|
git checkout -b feature/new-feature
|
||||||
|
# ... work ...
|
||||||
|
git checkout develop
|
||||||
|
git merge --no-ff feature/new-feature
|
||||||
|
```
|
||||||
|
|
||||||
|
### GitHub Flow (Simpler)
|
||||||
|
```bash
|
||||||
|
# Only main branch + feature branches
|
||||||
|
main
|
||||||
|
feature/user-profile
|
||||||
|
feature/api-endpoints
|
||||||
|
|
||||||
|
# Workflow
|
||||||
|
git checkout -b feature/user-profile
|
||||||
|
# ... work ...
|
||||||
|
git push origin feature/user-profile
|
||||||
|
# Create PR → Review → Merge to main
|
||||||
|
```
|
||||||
|
|
||||||
|
### Trunk-Based Development
|
||||||
|
```bash
|
||||||
|
# Short-lived branches
|
||||||
|
main
|
||||||
|
short-lived-feature # Max 1-2 days
|
||||||
|
|
||||||
|
# Frequent integration to main
|
||||||
|
git checkout -b quick-feature
|
||||||
|
# ... small change ...
|
||||||
|
git push && create PR
|
||||||
|
# Merge immediately after review
|
||||||
|
```
|
||||||
|
|
||||||
|
## Commit Best Practices
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Conventional Commits
|
||||||
|
feat: add user authentication
|
||||||
|
fix: resolve login redirect issue
|
||||||
|
docs: update API documentation
|
||||||
|
style: format code with prettier
|
||||||
|
refactor: extract user service
|
||||||
|
test: add integration tests
|
||||||
|
chore: update dependencies
|
||||||
|
|
||||||
|
# Good commit message
|
||||||
|
feat(auth): implement JWT token refresh
|
||||||
|
|
||||||
|
- Add refresh token endpoint
|
||||||
|
- Store refresh tokens in Redis
|
||||||
|
- Set 7-day expiry on refresh tokens
|
||||||
|
- Update auth middleware to handle refresh
|
||||||
|
|
||||||
|
Closes #123
|
||||||
|
|
||||||
|
# Atomic commits
|
||||||
|
git add -p # Stage hunks interactively
|
||||||
|
git commit -m "fix: resolve validation error"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Conflict Resolution
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# When conflict occurs
|
||||||
|
git merge feature-branch
|
||||||
|
# CONFLICT in file.ts
|
||||||
|
|
||||||
|
# Option 1: Manual resolution
|
||||||
|
vim file.ts # Resolve conflicts
|
||||||
|
git add file.ts
|
||||||
|
git commit
|
||||||
|
|
||||||
|
# Option 2: Use merge tool
|
||||||
|
git mergetool
|
||||||
|
|
||||||
|
# Option 3: Choose one side
|
||||||
|
git checkout --ours file.ts # Keep your version
|
||||||
|
git checkout --theirs file.ts # Use their version
|
||||||
|
|
||||||
|
# Abort merge if needed
|
||||||
|
git merge --abort
|
||||||
|
```
|
||||||
|
|
||||||
|
## Useful Commands
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Interactive rebase (clean history)
|
||||||
|
git rebase -i HEAD~3
|
||||||
|
|
||||||
|
# Squash commits
|
||||||
|
git rebase -i main
|
||||||
|
# Mark commits as 'squash' or 'fixup'
|
||||||
|
|
||||||
|
# Cherry-pick specific commits
|
||||||
|
git cherry-pick abc123
|
||||||
|
|
||||||
|
# Find when bug was introduced
|
||||||
|
git bisect start
|
||||||
|
git bisect bad # Current is bad
|
||||||
|
git bisect good v1.0 # v1.0 was good
|
||||||
|
# Git checks out middle commit
|
||||||
|
# Test and mark good/bad until found
|
||||||
|
|
||||||
|
# Clean up branches
|
||||||
|
git branch --merged | grep -v "\*\|main\|develop" | xargs -n 1 git branch -d
|
||||||
|
|
||||||
|
# Stash changes
|
||||||
|
git stash save "WIP: working on feature"
|
||||||
|
git stash list
|
||||||
|
git stash pop
|
||||||
|
|
||||||
|
# Undo last commit (keep changes)
|
||||||
|
git reset --soft HEAD~1
|
||||||
|
|
||||||
|
# Undo last commit (discard changes)
|
||||||
|
git reset --hard HEAD~1
|
||||||
|
|
||||||
|
# Amend last commit
|
||||||
|
git commit --amend --no-edit
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Clear branching strategy
|
||||||
|
- ✓ Descriptive commit messages
|
||||||
|
- ✓ Clean commit history
|
||||||
|
- ✓ No merge conflicts
|
||||||
|
- ✓ Regular integration
|
||||||
|
|
||||||
40
claude_skills/graphql-schema-design/SKILL.md
Normal file
40
claude_skills/graphql-schema-design/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: graphql-schema-design
|
||||||
|
description: Expert in GraphQL schema design, resolvers, optimization, subscriptions, and federation. Use when designing GraphQL APIs, optimizing query performance, or implementing GraphQL subscriptions.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Graphql Schema Design Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in GraphQL schema design, resolvers, optimization, subscriptions, and federation. Use when designing GraphQL APIs, optimizing query performance, or implementing GraphQL subscriptions.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
40
claude_skills/logging-monitoring/SKILL.md
Normal file
40
claude_skills/logging-monitoring/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: logging-monitoring
|
||||||
|
description: Expert in application logging, monitoring, observability, alerting, and incident response using tools like Datadog, Prometheus, Grafana, and ELK stack. Use for implementing logging strategies, setting up monitoring dashboards, or troubleshooting production issues.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Logging Monitoring Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in application logging, monitoring, observability, alerting, and incident response using tools like Datadog, Prometheus, Grafana, and ELK stack. Use for implementing logging strategies, setting up monitoring dashboards, or troubleshooting production issues.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
40
claude_skills/migration-tools/SKILL.md
Normal file
40
claude_skills/migration-tools/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: migration-tools
|
||||||
|
description: Expert in database migrations, framework migrations, version upgrades, and data migration strategies. Use when migrating databases, upgrading frameworks, or planning large-scale migrations with zero downtime.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Migration Tools Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in database migrations, framework migrations, version upgrades, and data migration strategies. Use when migrating databases, upgrading frameworks, or planning large-scale migrations with zero downtime.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
84
claude_skills/ml-model-integration/SKILL.md
Normal file
84
claude_skills/ml-model-integration/SKILL.md
Normal file
@ -0,0 +1,84 @@
|
|||||||
|
---
|
||||||
|
name: ml-model-integration
|
||||||
|
description: Expert in integrating AI/ML models into applications including model serving, API design, inference optimization, and monitoring. Use when deploying ML models, building AI features, or optimizing model performance in production.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# ML Model Integration Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Deploy and integrate machine learning models into production applications.
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
- Model serving (FastAPI, TensorFlow Serving)
|
||||||
|
- Inference optimization
|
||||||
|
- A/B testing models
|
||||||
|
- Model versioning
|
||||||
|
- Monitoring and drift detection
|
||||||
|
- Batch and real-time inference
|
||||||
|
- Feature stores
|
||||||
|
|
||||||
|
## FastAPI Model Serving
|
||||||
|
```python
|
||||||
|
from fastapi import FastAPI
|
||||||
|
from pydantic import BaseModel
|
||||||
|
import joblib
|
||||||
|
import numpy as np
|
||||||
|
|
||||||
|
app = FastAPI()
|
||||||
|
|
||||||
|
# Load model at startup
|
||||||
|
model = joblib.load('model.pkl')
|
||||||
|
|
||||||
|
class PredictionRequest(BaseModel):
|
||||||
|
features: list[float]
|
||||||
|
|
||||||
|
class PredictionResponse(BaseModel):
|
||||||
|
prediction: float
|
||||||
|
confidence: float
|
||||||
|
|
||||||
|
@app.post('/predict', response_model=PredictionResponse)
|
||||||
|
async def predict(request: PredictionRequest):
|
||||||
|
features = np.array([request.features])
|
||||||
|
prediction = model.predict(features)[0]
|
||||||
|
confidence = model.predict_proba(features).max()
|
||||||
|
|
||||||
|
return PredictionResponse(
|
||||||
|
prediction=float(prediction),
|
||||||
|
confidence=float(confidence)
|
||||||
|
)
|
||||||
|
|
||||||
|
@app.get('/health')
|
||||||
|
async def health():
|
||||||
|
return {'status': 'healthy', 'model_version': '1.0.0'}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Model Monitoring
|
||||||
|
```python
|
||||||
|
import mlflow
|
||||||
|
|
||||||
|
# Log model performance
|
||||||
|
with mlflow.start_run():
|
||||||
|
mlflow.log_metric('accuracy', accuracy)
|
||||||
|
mlflow.log_metric('precision', precision)
|
||||||
|
mlflow.log_metric('recall', recall)
|
||||||
|
mlflow.log_param('model_type', 'random_forest')
|
||||||
|
mlflow.sklearn.log_model(model, 'model')
|
||||||
|
|
||||||
|
# Monitor drift
|
||||||
|
from evidently import ColumnMapping
|
||||||
|
from evidently.report import Report
|
||||||
|
from evidently.metric_preset import DataDriftPreset
|
||||||
|
|
||||||
|
report = Report(metrics=[DataDriftPreset()])
|
||||||
|
report.run(reference_data=train_data, current_data=prod_data)
|
||||||
|
report.save_html('drift_report.html')
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Inference latency < 100ms
|
||||||
|
- ✓ Model accuracy monitored
|
||||||
|
- ✓ A/B testing framework
|
||||||
|
- ✓ Rollback capability
|
||||||
|
- ✓ Feature drift detected
|
||||||
|
|
||||||
40
claude_skills/mobile-responsive/SKILL.md
Normal file
40
claude_skills/mobile-responsive/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: mobile-responsive
|
||||||
|
description: Expert in responsive web design, mobile-first development, progressive web apps, and cross-device compatibility. Use for building responsive layouts, optimizing mobile performance, or implementing PWA features.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Mobile Responsive Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in responsive web design, mobile-first development, progressive web apps, and cross-device compatibility. Use for building responsive layouts, optimizing mobile performance, or implementing PWA features.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
173
claude_skills/performance-profiling/SKILL.md
Normal file
173
claude_skills/performance-profiling/SKILL.md
Normal file
@ -0,0 +1,173 @@
|
|||||||
|
---
|
||||||
|
name: performance-profiling
|
||||||
|
description: Expert in application performance analysis, profiling, optimization, and monitoring. Use when identifying performance bottlenecks, optimizing slow code, reducing memory usage, or improving application speed.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Performance Profiling Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Identify and fix performance bottlenecks through profiling, analysis, and optimization of CPU, memory, network, and rendering performance.
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
- CPU profiling and flame graphs
|
||||||
|
- Memory profiling and leak detection
|
||||||
|
- Bundle size optimization
|
||||||
|
- Render performance optimization
|
||||||
|
- Database query performance
|
||||||
|
- Network performance analysis
|
||||||
|
- Core Web Vitals optimization
|
||||||
|
- Performance budgets
|
||||||
|
|
||||||
|
## Profiling Tools
|
||||||
|
- Chrome DevTools Performance
|
||||||
|
- Node.js --inspect
|
||||||
|
- Lighthouse
|
||||||
|
- WebPageTest
|
||||||
|
- webpack-bundle-analyzer
|
||||||
|
- Clinic.js
|
||||||
|
- New Relic / Datadog APM
|
||||||
|
|
||||||
|
## Performance Optimization Patterns
|
||||||
|
|
||||||
|
```typescript
|
||||||
|
// 1. Memoization
|
||||||
|
import { useMemo, useCallback } from 'react';
|
||||||
|
|
||||||
|
function ExpensiveComponent({ data }: Props) {
|
||||||
|
// Memoize expensive calculations
|
||||||
|
const processedData = useMemo(() => {
|
||||||
|
return data.map(item => expensiveOperation(item));
|
||||||
|
}, [data]);
|
||||||
|
|
||||||
|
// Memoize callbacks
|
||||||
|
const handleClick = useCallback(() => {
|
||||||
|
console.log('clicked');
|
||||||
|
}, []);
|
||||||
|
|
||||||
|
return <div>{processedData.map(renderItem)}</div>;
|
||||||
|
}
|
||||||
|
|
||||||
|
// 2. Code splitting
|
||||||
|
const HeavyComponent = lazy(() => import('./HeavyComponent'));
|
||||||
|
|
||||||
|
function App() {
|
||||||
|
return (
|
||||||
|
<Suspense fallback={<Loading />}>
|
||||||
|
<HeavyComponent />
|
||||||
|
</Suspense>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
// 3. Virtual scrolling for long lists
|
||||||
|
import { FixedSizeList } from 'react-window';
|
||||||
|
|
||||||
|
function VirtualList({ items }: Props) {
|
||||||
|
return (
|
||||||
|
<FixedSizeList
|
||||||
|
height={600}
|
||||||
|
itemCount={items.length}
|
||||||
|
itemSize={50}
|
||||||
|
width="100%"
|
||||||
|
>
|
||||||
|
{({ index, style }) => (
|
||||||
|
<div style={style}>{items[index].name}</div>
|
||||||
|
)}
|
||||||
|
</FixedSizeList>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
// 4. Debouncing and throttling
|
||||||
|
import { debounce } from 'lodash';
|
||||||
|
|
||||||
|
const debouncedSearch = debounce(async (query: string) => {
|
||||||
|
const results = await searchAPI(query);
|
||||||
|
setResults(results);
|
||||||
|
}, 300);
|
||||||
|
|
||||||
|
// 5. Image optimization
|
||||||
|
<Image
|
||||||
|
src="/large-image.jpg"
|
||||||
|
alt="Description"
|
||||||
|
width={800}
|
||||||
|
height={600}
|
||||||
|
loading="lazy"
|
||||||
|
placeholder="blur"
|
||||||
|
quality={85}
|
||||||
|
/>
|
||||||
|
|
||||||
|
// 6. Efficient data fetching
|
||||||
|
async function getDataInParallel() {
|
||||||
|
const [users, posts, comments] = await Promise.all([
|
||||||
|
fetchUsers(),
|
||||||
|
fetchPosts(),
|
||||||
|
fetchComments(),
|
||||||
|
]);
|
||||||
|
return { users, posts, comments };
|
||||||
|
}
|
||||||
|
|
||||||
|
// 7. Worker threads for CPU-intensive tasks
|
||||||
|
const worker = new Worker(new URL('./worker.ts', import.meta.url));
|
||||||
|
worker.postMessage({ data: largeDataset });
|
||||||
|
worker.onmessage = (e) => setResult(e.data);
|
||||||
|
```
|
||||||
|
|
||||||
|
## Memory Leak Detection
|
||||||
|
|
||||||
|
```javascript
|
||||||
|
// Common memory leak patterns to avoid
|
||||||
|
// 1. Forgotten timers
|
||||||
|
useEffect(() => {
|
||||||
|
const timer = setInterval(() => fetchData(), 1000);
|
||||||
|
return () => clearInterval(timer); // Clean up!
|
||||||
|
}, []);
|
||||||
|
|
||||||
|
// 2. Detached DOM nodes
|
||||||
|
// Always remove event listeners
|
||||||
|
element.removeEventListener('click', handler);
|
||||||
|
|
||||||
|
// 3. Closures holding references
|
||||||
|
let cache = {}; // Growing forever
|
||||||
|
function memoize(fn) {
|
||||||
|
return (arg) => {
|
||||||
|
if (!cache[arg]) cache[arg] = fn(arg);
|
||||||
|
return cache[arg];
|
||||||
|
};
|
||||||
|
}
|
||||||
|
// Solution: Use WeakMap or LRU cache with size limit
|
||||||
|
```
|
||||||
|
|
||||||
|
## Performance Budgets
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"budgets": [
|
||||||
|
{
|
||||||
|
"type": "bundle",
|
||||||
|
"maximumSize": "250kb"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "script",
|
||||||
|
"maximumSize": "170kb"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "image",
|
||||||
|
"maximumSize": "150kb"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"metrics": {
|
||||||
|
"FCP": "< 1.8s",
|
||||||
|
"LCP": "< 2.5s",
|
||||||
|
"TBT": "< 200ms",
|
||||||
|
"CLS": "< 0.1"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ LCP < 2.5s
|
||||||
|
- ✓ FID < 100ms
|
||||||
|
- ✓ CLS < 0.1
|
||||||
|
- ✓ Bundle size under budget
|
||||||
|
- ✓ No memory leaks
|
||||||
|
- ✓ 60fps rendering
|
||||||
|
|
||||||
40
claude_skills/real-time-systems/SKILL.md
Normal file
40
claude_skills/real-time-systems/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: real-time-systems
|
||||||
|
description: Expert in building real-time systems using WebSockets, Server-Sent Events, WebRTC, and real-time databases. Use for implementing chat, live updates, collaborative features, or real-time notifications.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Real Time Systems Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in building real-time systems using WebSockets, Server-Sent Events, WebRTC, and real-time databases. Use for implementing chat, live updates, collaborative features, or real-time notifications.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
557
claude_skills/security-audit/SKILL.md
Normal file
557
claude_skills/security-audit/SKILL.md
Normal file
@ -0,0 +1,557 @@
|
|||||||
|
---
|
||||||
|
name: security-audit
|
||||||
|
description: Comprehensive security audit expert identifying vulnerabilities, implementing security best practices, and fixing OWASP Top 10 issues. Use for security reviews, vulnerability scanning, authentication implementation, or security hardening.
|
||||||
|
allowed-tools: Read, Grep, Bash, Edit
|
||||||
|
---
|
||||||
|
|
||||||
|
# Security Audit Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Identify and fix security vulnerabilities including OWASP Top 10, implement authentication/authorization, secure coding practices, dependency scanning, and compliance with security standards.
|
||||||
|
|
||||||
|
## When to Use
|
||||||
|
- Security code review
|
||||||
|
- Vulnerability assessment
|
||||||
|
- Authentication/authorization implementation
|
||||||
|
- Input validation and sanitization
|
||||||
|
- SQL injection prevention
|
||||||
|
- XSS prevention
|
||||||
|
- CSRF protection
|
||||||
|
- Dependency vulnerability scanning
|
||||||
|
- Security hardening
|
||||||
|
- Compliance audit (GDPR, SOC 2, etc.)
|
||||||
|
|
||||||
|
## OWASP Top 10 Coverage
|
||||||
|
|
||||||
|
### 1. Broken Access Control
|
||||||
|
**Issues**: Unauthorized access, privilege escalation, IDOR
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// BAD: Direct object reference without authorization
|
||||||
|
app.get('/api/users/:id', async (req, res) => {
|
||||||
|
const user = await db.findUser(req.params.id);
|
||||||
|
res.json(user); // Anyone can access any user!
|
||||||
|
});
|
||||||
|
|
||||||
|
// GOOD: Check ownership
|
||||||
|
app.get('/api/users/:id', authenticateToken, async (req, res) => {
|
||||||
|
const requestedUserId = req.params.id;
|
||||||
|
const authenticatedUserId = req.user.id;
|
||||||
|
|
||||||
|
// Check if user is authorized
|
||||||
|
if (requestedUserId !== authenticatedUserId && !req.user.isAdmin) {
|
||||||
|
return res.status(403).json({ error: 'Forbidden' });
|
||||||
|
}
|
||||||
|
|
||||||
|
const user = await db.findUser(requestedUserId);
|
||||||
|
res.json(user);
|
||||||
|
});
|
||||||
|
|
||||||
|
// Implement RBAC (Role-Based Access Control)
|
||||||
|
function checkPermission(resource: string, action: string) {
|
||||||
|
return (req, res, next) => {
|
||||||
|
const userRole = req.user.role;
|
||||||
|
if (hasPermission(userRole, resource, action)) {
|
||||||
|
next();
|
||||||
|
} else {
|
||||||
|
res.status(403).json({ error: 'Insufficient permissions' });
|
||||||
|
}
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
app.delete('/api/posts/:id',
|
||||||
|
authenticateToken,
|
||||||
|
checkPermission('posts', 'delete'),
|
||||||
|
deletePost
|
||||||
|
);
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Cryptographic Failures
|
||||||
|
**Issues**: Weak encryption, plaintext passwords, insecure protocols
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
import bcrypt from 'bcrypt';
|
||||||
|
import crypto from 'crypto';
|
||||||
|
|
||||||
|
// Password hashing
|
||||||
|
async function hashPassword(password: string): Promise<string> {
|
||||||
|
const saltRounds = 12; // Increase for more security
|
||||||
|
return bcrypt.hash(password, saltRounds);
|
||||||
|
}
|
||||||
|
|
||||||
|
async function verifyPassword(password: string, hash: string): Promise<boolean> {
|
||||||
|
return bcrypt.compare(password, hash);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Encrypt sensitive data
|
||||||
|
function encrypt(text: string, key: Buffer): string {
|
||||||
|
const iv = crypto.randomBytes(16);
|
||||||
|
const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
|
||||||
|
|
||||||
|
let encrypted = cipher.update(text, 'utf8', 'hex');
|
||||||
|
encrypted += cipher.final('hex');
|
||||||
|
|
||||||
|
const authTag = cipher.getAuthTag();
|
||||||
|
|
||||||
|
return `${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted}`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function decrypt(encryptedText: string, key: Buffer): string {
|
||||||
|
const [ivHex, authTagHex, encrypted] = encryptedText.split(':');
|
||||||
|
|
||||||
|
const iv = Buffer.from(ivHex, 'hex');
|
||||||
|
const authTag = Buffer.from(authTagHex, 'hex');
|
||||||
|
|
||||||
|
const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
|
||||||
|
decipher.setAuthTag(authTag);
|
||||||
|
|
||||||
|
let decrypted = decipher.update(encrypted, 'hex', 'utf8');
|
||||||
|
decrypted += decipher.final('utf8');
|
||||||
|
|
||||||
|
return decrypted;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Use environment variables for secrets
|
||||||
|
const ENCRYPTION_KEY = Buffer.from(process.env.ENCRYPTION_KEY!, 'hex');
|
||||||
|
|
||||||
|
// Enforce HTTPS
|
||||||
|
app.use((req, res, next) => {
|
||||||
|
if (!req.secure && process.env.NODE_ENV === 'production') {
|
||||||
|
return res.redirect(301, `https://${req.headers.host}${req.url}`);
|
||||||
|
}
|
||||||
|
next();
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
### 3. Injection (SQL, NoSQL, Command)
|
||||||
|
**Issues**: SQL injection, NoSQL injection, command injection
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// BAD: String concatenation
|
||||||
|
const userId = req.params.id;
|
||||||
|
const query = `SELECT * FROM users WHERE id = ${userId}`; // VULNERABLE!
|
||||||
|
db.query(query);
|
||||||
|
|
||||||
|
// GOOD: Parameterized queries
|
||||||
|
const userId = req.params.id;
|
||||||
|
const query = 'SELECT * FROM users WHERE id = $1';
|
||||||
|
db.query(query, [userId]); // Safe
|
||||||
|
|
||||||
|
// BAD: NoSQL injection
|
||||||
|
const username = req.body.username;
|
||||||
|
db.users.find({ username: username }); // Can inject { $ne: null }
|
||||||
|
|
||||||
|
// GOOD: Sanitize input
|
||||||
|
const username = req.body.username;
|
||||||
|
if (typeof username !== 'string') {
|
||||||
|
throw new Error('Invalid username');
|
||||||
|
}
|
||||||
|
db.users.find({ username: username });
|
||||||
|
|
||||||
|
// BAD: Command injection
|
||||||
|
const filename = req.query.file;
|
||||||
|
exec(`cat ${filename}`); // VULNERABLE!
|
||||||
|
|
||||||
|
// GOOD: Use libraries instead of shell commands
|
||||||
|
const filename = req.query.file;
|
||||||
|
// Validate filename
|
||||||
|
if (!/^[a-zA-Z0-9_-]+\.txt$/.test(filename)) {
|
||||||
|
throw new Error('Invalid filename');
|
||||||
|
}
|
||||||
|
const content = await fs.readFile(path.join(SAFE_DIR, filename), 'utf8');
|
||||||
|
|
||||||
|
// Input validation with Zod
|
||||||
|
import { z } from 'zod';
|
||||||
|
|
||||||
|
const userSchema = z.object({
|
||||||
|
email: z.string().email(),
|
||||||
|
password: z.string().min(8).regex(/[A-Z]/).regex(/[0-9]/),
|
||||||
|
age: z.number().int().min(13).max(120),
|
||||||
|
});
|
||||||
|
|
||||||
|
app.post('/api/users', async (req, res) => {
|
||||||
|
try {
|
||||||
|
const validatedData = userSchema.parse(req.body);
|
||||||
|
// Safe to use validatedData
|
||||||
|
} catch (error) {
|
||||||
|
return res.status(400).json({ error: 'Validation failed' });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
### 4. Insecure Design
|
||||||
|
**Issues**: Missing security controls, insufficient threat modeling
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// Rate limiting to prevent brute force
|
||||||
|
import rateLimit from 'express-rate-limit';
|
||||||
|
|
||||||
|
const loginLimiter = rateLimit({
|
||||||
|
windowMs: 15 * 60 * 1000, // 15 minutes
|
||||||
|
max: 5, // 5 attempts
|
||||||
|
message: 'Too many login attempts, please try again later',
|
||||||
|
});
|
||||||
|
|
||||||
|
app.post('/api/login', loginLimiter, login);
|
||||||
|
|
||||||
|
// Account lockout after failed attempts
|
||||||
|
async function attemptLogin(email: string, password: string) {
|
||||||
|
const user = await db.findUserByEmail(email);
|
||||||
|
|
||||||
|
if (!user) throw new Error('Invalid credentials');
|
||||||
|
|
||||||
|
// Check if account is locked
|
||||||
|
if (user.locked_until && user.locked_until > new Date()) {
|
||||||
|
throw new Error('Account temporarily locked');
|
||||||
|
}
|
||||||
|
|
||||||
|
const isValid = await verifyPassword(password, user.password_hash);
|
||||||
|
|
||||||
|
if (!isValid) {
|
||||||
|
// Increment failed attempts
|
||||||
|
user.failed_attempts += 1;
|
||||||
|
|
||||||
|
if (user.failed_attempts >= 5) {
|
||||||
|
user.locked_until = new Date(Date.now() + 15 * 60 * 1000);
|
||||||
|
}
|
||||||
|
|
||||||
|
await db.updateUser(user);
|
||||||
|
throw new Error('Invalid credentials');
|
||||||
|
}
|
||||||
|
|
||||||
|
// Reset failed attempts on successful login
|
||||||
|
user.failed_attempts = 0;
|
||||||
|
user.locked_until = null;
|
||||||
|
await db.updateUser(user);
|
||||||
|
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Implement audit logging
|
||||||
|
function auditLog(action: string, userId: string, details: any) {
|
||||||
|
db.audit_logs.insert({
|
||||||
|
action,
|
||||||
|
user_id: userId,
|
||||||
|
details,
|
||||||
|
ip_address: req.ip,
|
||||||
|
user_agent: req.headers['user-agent'],
|
||||||
|
timestamp: new Date(),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### 5. Security Misconfiguration
|
||||||
|
**Issues**: Default credentials, unnecessary features enabled, verbose errors
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// Production error handling
|
||||||
|
app.use((err, req, res, next) => {
|
||||||
|
// Log full error server-side
|
||||||
|
console.error(err.stack);
|
||||||
|
|
||||||
|
// Don't expose stack traces to clients
|
||||||
|
if (process.env.NODE_ENV === 'production') {
|
||||||
|
res.status(500).json({ error: 'Internal server error' });
|
||||||
|
} else {
|
||||||
|
res.status(500).json({ error: err.message, stack: err.stack });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
// Security headers with Helmet
|
||||||
|
import helmet from 'helmet';
|
||||||
|
|
||||||
|
app.use(helmet({
|
||||||
|
contentSecurityPolicy: {
|
||||||
|
directives: {
|
||||||
|
defaultSrc: ["'self'"],
|
||||||
|
styleSrc: ["'self'", "'unsafe-inline'"],
|
||||||
|
scriptSrc: ["'self'"],
|
||||||
|
imgSrc: ["'self'", 'data:', 'https:'],
|
||||||
|
},
|
||||||
|
},
|
||||||
|
hsts: {
|
||||||
|
maxAge: 31536000,
|
||||||
|
includeSubDomains: true,
|
||||||
|
preload: true,
|
||||||
|
},
|
||||||
|
}));
|
||||||
|
|
||||||
|
// CORS configuration
|
||||||
|
import cors from 'cors';
|
||||||
|
|
||||||
|
app.use(cors({
|
||||||
|
origin: process.env.ALLOWED_ORIGINS?.split(',') || [],
|
||||||
|
credentials: true,
|
||||||
|
optionsSuccessStatus: 200,
|
||||||
|
}));
|
||||||
|
|
||||||
|
// Disable X-Powered-By
|
||||||
|
app.disable('x-powered-by');
|
||||||
|
```
|
||||||
|
|
||||||
|
### 6. Vulnerable Components
|
||||||
|
**Issues**: Outdated dependencies, known vulnerabilities
|
||||||
|
**Fixes**:
|
||||||
|
```bash
|
||||||
|
# Check for vulnerabilities
|
||||||
|
npm audit
|
||||||
|
npm audit fix
|
||||||
|
|
||||||
|
# Use Snyk for continuous monitoring
|
||||||
|
npm install -g snyk
|
||||||
|
snyk test
|
||||||
|
snyk monitor
|
||||||
|
|
||||||
|
# Dependency scanning in CI/CD
|
||||||
|
# .github/workflows/security.yml
|
||||||
|
name: Security Scan
|
||||||
|
on: [push, pull_request]
|
||||||
|
jobs:
|
||||||
|
security:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- run: npm audit --audit-level=high
|
||||||
|
- run: npm run lint:security
|
||||||
|
```
|
||||||
|
|
||||||
|
### 7. Authentication Failures
|
||||||
|
**Issues**: Weak passwords, missing MFA, session fixation
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// Strong password requirements
|
||||||
|
function validatePassword(password: string): boolean {
|
||||||
|
const requirements = [
|
||||||
|
password.length >= 12,
|
||||||
|
/[a-z]/.test(password),
|
||||||
|
/[A-Z]/.test(password),
|
||||||
|
/[0-9]/.test(password),
|
||||||
|
/[^a-zA-Z0-9]/.test(password),
|
||||||
|
];
|
||||||
|
|
||||||
|
return requirements.every(Boolean);
|
||||||
|
}
|
||||||
|
|
||||||
|
// JWT with refresh tokens
|
||||||
|
import jwt from 'jsonwebtoken';
|
||||||
|
|
||||||
|
function generateTokens(userId: string) {
|
||||||
|
const accessToken = jwt.sign(
|
||||||
|
{ userId },
|
||||||
|
process.env.JWT_SECRET!,
|
||||||
|
{ expiresIn: '15m' }
|
||||||
|
);
|
||||||
|
|
||||||
|
const refreshToken = jwt.sign(
|
||||||
|
{ userId },
|
||||||
|
process.env.JWT_REFRESH_SECRET!,
|
||||||
|
{ expiresIn: '7d' }
|
||||||
|
);
|
||||||
|
|
||||||
|
return { accessToken, refreshToken };
|
||||||
|
}
|
||||||
|
|
||||||
|
// Secure session configuration
|
||||||
|
import session from 'express-session';
|
||||||
|
|
||||||
|
app.use(session({
|
||||||
|
secret: process.env.SESSION_SECRET!,
|
||||||
|
resave: false,
|
||||||
|
saveUninitialized: false,
|
||||||
|
cookie: {
|
||||||
|
secure: true, // HTTPS only
|
||||||
|
httpOnly: true, // Not accessible via JavaScript
|
||||||
|
sameSite: 'strict', // CSRF protection
|
||||||
|
maxAge: 24 * 60 * 60 * 1000, // 24 hours
|
||||||
|
},
|
||||||
|
}));
|
||||||
|
|
||||||
|
// Multi-factor authentication
|
||||||
|
import speakeasy from 'speakeasy';
|
||||||
|
|
||||||
|
function setupMFA(userId: string) {
|
||||||
|
const secret = speakeasy.generateSecret({
|
||||||
|
name: `MyApp (${userId})`,
|
||||||
|
});
|
||||||
|
|
||||||
|
// Store secret.base32 for user
|
||||||
|
return {
|
||||||
|
secret: secret.base32,
|
||||||
|
qrCode: secret.otpauth_url,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function verifyMFAToken(token: string, secret: string): boolean {
|
||||||
|
return speakeasy.totp.verify({
|
||||||
|
secret,
|
||||||
|
encoding: 'base32',
|
||||||
|
token,
|
||||||
|
window: 2,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### 8. Software and Data Integrity Failures
|
||||||
|
**Issues**: Unsigned packages, insecure CI/CD, lack of integrity verification
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// Verify file integrity with checksums
|
||||||
|
import crypto from 'crypto';
|
||||||
|
|
||||||
|
function calculateChecksum(filePath: string): Promise<string> {
|
||||||
|
return new Promise((resolve, reject) => {
|
||||||
|
const hash = crypto.createHash('sha256');
|
||||||
|
const stream = fs.createReadStream(filePath);
|
||||||
|
|
||||||
|
stream.on('data', (data) => hash.update(data));
|
||||||
|
stream.on('end', () => resolve(hash.digest('hex')));
|
||||||
|
stream.on('error', reject);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// Signed URLs for secure downloads
|
||||||
|
function generateSignedURL(resource: string, expiresIn: number = 3600): string {
|
||||||
|
const expiry = Math.floor(Date.now() / 1000) + expiresIn;
|
||||||
|
const signature = crypto
|
||||||
|
.createHmac('sha256', process.env.URL_SIGNING_SECRET!)
|
||||||
|
.update(`${resource}:${expiry}`)
|
||||||
|
.digest('hex');
|
||||||
|
|
||||||
|
return `${resource}?expires=${expiry}&signature=${signature}`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function verifySignedURL(resource: string, expires: number, signature: string): boolean {
|
||||||
|
if (Date.now() / 1000 > expires) return false;
|
||||||
|
|
||||||
|
const expected = crypto
|
||||||
|
.createHmac('sha256', process.env.URL_SIGNING_SECRET!)
|
||||||
|
.update(`${resource}:${expires}`)
|
||||||
|
.digest('hex');
|
||||||
|
|
||||||
|
return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### 9. Security Logging Failures
|
||||||
|
**Issues**: Insufficient logging, no monitoring, missing alerts
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
import winston from 'winston';
|
||||||
|
|
||||||
|
const logger = winston.createLogger({
|
||||||
|
level: 'info',
|
||||||
|
format: winston.format.json(),
|
||||||
|
transports: [
|
||||||
|
new winston.transports.File({ filename: 'error.log', level: 'error' }),
|
||||||
|
new winston.transports.File({ filename: 'combined.log' }),
|
||||||
|
],
|
||||||
|
});
|
||||||
|
|
||||||
|
// Log security events
|
||||||
|
function logSecurityEvent(event: string, details: any) {
|
||||||
|
logger.warn('Security Event', {
|
||||||
|
event,
|
||||||
|
...details,
|
||||||
|
timestamp: new Date().toISOString(),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// Log failed login attempts
|
||||||
|
app.post('/api/login', async (req, res) => {
|
||||||
|
try {
|
||||||
|
const user = await attemptLogin(req.body.email, req.body.password);
|
||||||
|
logger.info('Successful login', { userId: user.id, ip: req.ip });
|
||||||
|
} catch (error) {
|
||||||
|
logSecurityEvent('Failed login', {
|
||||||
|
email: req.body.email,
|
||||||
|
ip: req.ip,
|
||||||
|
userAgent: req.headers['user-agent'],
|
||||||
|
});
|
||||||
|
res.status(401).json({ error: 'Invalid credentials' });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
### 10. Server-Side Request Forgery (SSRF)
|
||||||
|
**Issues**: Unvalidated URL redirects, internal network access
|
||||||
|
**Fixes**:
|
||||||
|
```typescript
|
||||||
|
// Validate and sanitize URLs
|
||||||
|
import { URL } from 'url';
|
||||||
|
|
||||||
|
function validateURL(urlString: string): boolean {
|
||||||
|
try {
|
||||||
|
const url = new URL(urlString);
|
||||||
|
|
||||||
|
// Block private networks
|
||||||
|
const hostname = url.hostname;
|
||||||
|
if (
|
||||||
|
hostname === 'localhost' ||
|
||||||
|
hostname.startsWith('127.') ||
|
||||||
|
hostname.startsWith('192.168.') ||
|
||||||
|
hostname.startsWith('10.') ||
|
||||||
|
hostname.startsWith('172.')
|
||||||
|
) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Only allow HTTP/HTTPS
|
||||||
|
if (!['http:', 'https:'].includes(url.protocol)) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return true;
|
||||||
|
} catch {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Safe URL fetching
|
||||||
|
async function fetchURL(urlString: string) {
|
||||||
|
if (!validateURL(urlString)) {
|
||||||
|
throw new Error('Invalid URL');
|
||||||
|
}
|
||||||
|
|
||||||
|
const response = await fetch(urlString, {
|
||||||
|
redirect: 'manual', // Don't follow redirects
|
||||||
|
timeout: 5000,
|
||||||
|
});
|
||||||
|
|
||||||
|
return response;
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Security Checklist
|
||||||
|
- [ ] All inputs validated and sanitized
|
||||||
|
- [ ] Parameterized queries (no SQL injection)
|
||||||
|
- [ ] Passwords hashed with bcrypt (12+ rounds)
|
||||||
|
- [ ] HTTPS enforced
|
||||||
|
- [ ] Security headers configured (CSP, HSTS, etc.)
|
||||||
|
- [ ] CORS properly configured
|
||||||
|
- [ ] Rate limiting on sensitive endpoints
|
||||||
|
- [ ] Authentication with JWT or sessions
|
||||||
|
- [ ] Authorization checks on all protected routes
|
||||||
|
- [ ] No secrets in code (use environment variables)
|
||||||
|
- [ ] Dependencies scanned for vulnerabilities
|
||||||
|
- [ ] Error messages don't leak sensitive info
|
||||||
|
- [ ] Audit logging for security events
|
||||||
|
- [ ] File uploads validated and scanned
|
||||||
|
- [ ] CSRF protection enabled
|
||||||
|
|
||||||
|
## Tools
|
||||||
|
- npm audit / yarn audit
|
||||||
|
- Snyk
|
||||||
|
- OWASP ZAP
|
||||||
|
- SonarQube
|
||||||
|
- ESLint security plugins
|
||||||
|
- Helmet.js
|
||||||
|
- express-rate-limit
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Zero critical/high vulnerabilities
|
||||||
|
- ✓ All OWASP Top 10 addressed
|
||||||
|
- ✓ Security headers properly configured
|
||||||
|
- ✓ Authentication/authorization working
|
||||||
|
- ✓ Input validation comprehensive
|
||||||
|
- ✓ Audit logging in place
|
||||||
|
- ✓ Dependencies up to date
|
||||||
113
claude_skills/test-automation/SKILL.md
Normal file
113
claude_skills/test-automation/SKILL.md
Normal file
@ -0,0 +1,113 @@
|
|||||||
|
---
|
||||||
|
name: test-automation
|
||||||
|
description: Expert in automated testing strategies including unit, integration, E2E tests, TDD/BDD, test coverage, and CI/CD integration. Use when writing tests, setting up test frameworks, improving test coverage, or implementing test automation pipelines.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash
|
||||||
|
---
|
||||||
|
|
||||||
|
# Test Automation Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Comprehensive test automation including unit tests, integration tests, E2E tests, TDD/BDD, test coverage analysis, and CI/CD integration.
|
||||||
|
|
||||||
|
## Capabilities
|
||||||
|
- Unit testing (Jest, Mocha, pytest, JUnit)
|
||||||
|
- Integration testing
|
||||||
|
- E2E testing (Playwright, Cypress, Selenium)
|
||||||
|
- API testing (Postman, REST Assured)
|
||||||
|
- Test-Driven Development (TDD)
|
||||||
|
- Behavior-Driven Development (BDD)
|
||||||
|
- Mocking and stubbing
|
||||||
|
- Code coverage analysis
|
||||||
|
- Performance testing
|
||||||
|
- Visual regression testing
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
```typescript
|
||||||
|
// Unit test example with Jest
|
||||||
|
describe('UserService', () => {
|
||||||
|
let userService: UserService;
|
||||||
|
let mockDb: jest.Mocked<Database>;
|
||||||
|
|
||||||
|
beforeEach(() => {
|
||||||
|
mockDb = { findUser: jest.fn(), createUser: jest.fn() } as any;
|
||||||
|
userService = new UserService(mockDb);
|
||||||
|
});
|
||||||
|
|
||||||
|
it('should create user with hashed password', async () => {
|
||||||
|
const userData = { email: 'test@example.com', password: 'password123' };
|
||||||
|
mockDb.createUser.mockResolvedValue({ id: '1', ...userData });
|
||||||
|
|
||||||
|
const result = await userService.createUser(userData);
|
||||||
|
|
||||||
|
expect(mockDb.createUser).toHaveBeenCalledWith(
|
||||||
|
expect.objectContaining({
|
||||||
|
email: userData.email,
|
||||||
|
password: expect.not.stringContaining('password123'), // Hashed
|
||||||
|
})
|
||||||
|
);
|
||||||
|
expect(result.id).toBe('1');
|
||||||
|
});
|
||||||
|
|
||||||
|
it('should throw error for duplicate email', async () => {
|
||||||
|
mockDb.createUser.mockRejectedValue(new Error('Duplicate email'));
|
||||||
|
|
||||||
|
await expect(userService.createUser({ email: 'test@example.com', password: 'pass' }))
|
||||||
|
.rejects.toThrow('Duplicate email');
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
// E2E test with Playwright
|
||||||
|
test('user can complete checkout flow', async ({ page }) => {
|
||||||
|
await page.goto('/products');
|
||||||
|
await page.click('[data-testid="add-to-cart"]');
|
||||||
|
await page.click('[data-testid="cart-icon"]');
|
||||||
|
await page.fill('[data-testid="email"]', 'test@example.com');
|
||||||
|
await page.click('[data-testid="checkout-button"]');
|
||||||
|
|
||||||
|
await expect(page.locator('[data-testid="confirmation"]')).toBeVisible();
|
||||||
|
});
|
||||||
|
|
||||||
|
// API testing
|
||||||
|
describe('POST /api/users', () => {
|
||||||
|
it('should create user and return 201', async () => {
|
||||||
|
const response = await request(app)
|
||||||
|
.post('/api/users')
|
||||||
|
.send({ email: 'new@example.com', password: 'Password123!' })
|
||||||
|
.expect(201);
|
||||||
|
|
||||||
|
expect(response.body).toHaveProperty('id');
|
||||||
|
expect(response.body.email).toBe('new@example.com');
|
||||||
|
});
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
## Test Coverage Goals
|
||||||
|
- Unit tests: >80% coverage
|
||||||
|
- Integration tests: Critical paths
|
||||||
|
- E2E tests: User journeys
|
||||||
|
- Mutation testing score: >70%
|
||||||
|
|
||||||
|
## CI/CD Integration
|
||||||
|
```yaml
|
||||||
|
# .github/workflows/test.yml
|
||||||
|
name: Test
|
||||||
|
on: [push, pull_request]
|
||||||
|
jobs:
|
||||||
|
test:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
- uses: actions/setup-node@v3
|
||||||
|
- run: npm ci
|
||||||
|
- run: npm test -- --coverage
|
||||||
|
- run: npm run test:e2e
|
||||||
|
- uses: codecov/codecov-action@v3
|
||||||
|
```
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ >80% code coverage
|
||||||
|
- ✓ All critical paths tested
|
||||||
|
- ✓ Tests run in CI/CD
|
||||||
|
- ✓ Fast test execution (<5min)
|
||||||
|
- ✓ Reliable tests (no flakiness)
|
||||||
|
|
||||||
40
claude_skills/ui-component-library/SKILL.md
Normal file
40
claude_skills/ui-component-library/SKILL.md
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: ui-component-library
|
||||||
|
description: Expert in building design systems and component libraries using React, Vue, or web components with Storybook, testing, and documentation. Use when creating reusable UI components, building design systems, or implementing component libraries.
|
||||||
|
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebFetch
|
||||||
|
---
|
||||||
|
|
||||||
|
# Ui Component Library Expert
|
||||||
|
|
||||||
|
## Purpose
|
||||||
|
Expert in building design systems and component libraries using React, Vue, or web components with Storybook, testing, and documentation. Use when creating reusable UI components, building design systems, or implementing component libraries.
|
||||||
|
|
||||||
|
## Key Capabilities
|
||||||
|
- Industry-standard best practices
|
||||||
|
- Production-ready implementations
|
||||||
|
- Performance optimization
|
||||||
|
- Security considerations
|
||||||
|
- Testing strategies
|
||||||
|
- Monitoring and maintenance
|
||||||
|
|
||||||
|
## Tools & Technologies
|
||||||
|
- Latest frameworks and libraries
|
||||||
|
- CI/CD integration
|
||||||
|
- Automated workflows
|
||||||
|
- Documentation standards
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
- Follow industry standards
|
||||||
|
- Implement security measures
|
||||||
|
- Optimize for performance
|
||||||
|
- Maintain comprehensive tests
|
||||||
|
- Document thoroughly
|
||||||
|
|
||||||
|
## Success Criteria
|
||||||
|
- ✓ Production-ready implementation
|
||||||
|
- ✓ Best practices followed
|
||||||
|
- ✓ Comprehensive testing
|
||||||
|
- ✓ Clear documentation
|
||||||
|
- ✓ Performance optimized
|
||||||
|
- ✓ Security validated
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user