taw-kit

Single entrypoint for taw-kit. User types `/taw <anything in VN or EN>` — this skill classifies the intent (BUILD / FIX / SHIP / MAINTAIN / ADVISOR) and loads the matching branch file to execute. Replaces the old one-command-per-task model (/taw-new, /taw-add, /taw-fix, /taw-deploy, /taw-security) with a single unified command. Supports dev workflows out of the box: test, upgrade, clean, perf, rollback, refactor, types, seed, review, stack-swap, status, and ADVISOR group (analyze, suggest, coverage, adversarial, scope-check) for opinionated review of existing code. User-visible strings match the user's input language (Vietnamese by default for VN users). Two modes: SAFE (default — clarify + approval, max 1 round-trip) and YOLO (skip gates, smart defaults — for demos/power users). YOLO triggers: prose contains `yolo`, `nhanh nha`, `lam luon`, `khoi hoi`, `auto`, or args start with `yolo`. Trigger phrases (EN + VN) — broad match so user can keep typing plain prose without re-invoking /taw every turn. Grouped by

Safe dependency upgrade reference: breaking-change notes for common taw-kit deps (Next.js, React, Supabase, Tailwind, TypeScript, shadcn), codemod commands, and a standard safety protocol. Used by branches/maintain/upgrade.md. Trigger phrases (EN + VN): "breaking change", "codemod", "upgrade next", "upgrade react", "nang cap an toan", "cap nhat deps", "migration guide".

taw-kit's unified commit skill: stages files, scans for secrets/env/build-artefact leaks, generates a conventional commit message by READING the actual diff (not guessing), then commits. Two modes: CONTEXT mode (called by taw orchestrator — uses .taw/checkpoint.json phase info, writes strict [P<n>] format) and SMART mode (ad-hoc — infers type+scope+subject from diff content). Replaces the old git-auto-commit + commit-message-smart skills (merged). User never types git commands. Always prefixes output with "taw:" so you know which tool did it.

taw-kit's advanced git skill: create branches, open pull requests with auto-generated body (reads diff + commits + existing PR template), merge (fast-forward only), and recover from common mistakes. Replaces the old git-pro + pr-description skills (merged). Complements taw-commit (single commits) and taw-trace (history lookup). User-visible strings in user's language; raw git/gh commands verbatim so power users can learn. Every output prefixed "taw:" for branding.

Look up taw-kit git history without needing to know git. Find which commit added a feature, changed a file, or ran during which phase. Reads the strict format written by `taw-commit` (type(scope): subject [P<n>]). Every output prefixed "taw:" for branding. Replaces the old git-trace skill (rename only). Trigger phrases (VN + EN): "xem lich su", "ai sua cai nay", "khi nao them", "commit nao lam hong", "tra lai phase", "show git history", "blame".

ast-grep (sg) pattern cookbook for safe structural refactors in TypeScript / TSX projects. Covers rename, extract, find-and-replace with code context. Used by branches/maintain/refactor.md when ast-grep is available. Trigger phrases (EN + VN): "ast-grep", "structural replace", "rename symbol", "codemod tsx", "tim cau truc", "thay the theo pattern".

Analyze and reduce Next.js JavaScript bundle size. Covers @next/bundle-analyzer setup, interpreting the report, and the common fixes (dynamic imports, replacing heavy libs, tree-shaking). Used by branches/maintain/perf.md. Trigger phrases (EN + VN): "bundle size", "bundle analyzer", "giam bundle", "first load js", "giam size", "toi uu bundle".

Add contextual logging to the exact call sites a bug passes through, run the repro, collect the logs, then REMOVE the logs. Saves dev 20 min of manually adding/removing console.log statements. Uses a marker comment so cleanup is safe and fully reversible even if something fails mid-run. Trigger phrases (EN + VN): "debug with logs", "add console logs", "flight recorder", "bug khong tai hien", "khong biet loi o dau", "add log de debug", "trace bug", "dung console log debug".

Generators for realistic Vietnamese seed data with @faker-js/faker + custom VN-specific data pools. Used by branches/maintain/seed.md. Covers names, addresses, phone numbers, VND amounts, common Vietnamese product categories. Trigger phrases (EN + VN): "faker vi", "seed tieng viet", "data gia vn", "ten viet nam", "dia chi viet nam", "vnd fake".

Generate GitHub Actions CI workflows for taw-kit Next.js / Expo projects. Detection-first — reads package.json scripts and existing .github/workflows/ to avoid overwriting user's custom CI. Covers lint/type/test/build matrix, Playwright browsers, Supabase schema checks, and optional preview deploys. Trigger phrases (EN + VN): "github actions", "ci cd", "set up ci", "gen workflow", "tao ci", "chay test tren github", "workflow yaml".

Detect unused files, exports, dependencies, and imports in Next.js/TypeScript projects using knip. Safe-by-default: report first, delete only on approval. Used by branches/maintain/clean.md. Trigger phrases (EN + VN): "knip", "dead code", "unused exports", "unused deps", "don code", "xoa file thua".

Sentry error tracking + performance monitoring for Next.js App Router. Detection-first: adapts if already installed; otherwise installs fresh. Covers client + server + edge runtime, source map upload, and PII scrubbing. Trigger phrases (EN + VN): "sentry", "error tracking", "monitor loi", "theo doi loi", "crash reporting", "cai sentry", "app loi khong biet".

Stripe Checkout + webhook integration for Next.js App Router. Alternative to Polar (payment-integration skill). Detection-first: if project already has Stripe installed, adapts to existing setup; only new setup installs from scratch. Covers one-time products, subscriptions, and the webhook signature verification pattern that security-audit requires. Trigger phrases (EN + VN): "stripe", "stripe checkout", "card payment", "stripe webhook", "subscription billing", "thanh toan the", "tich hop stripe", "doi polar sang stripe".

DEPRECATED — use `/taw` instead. This shim forwards to `/taw` with the BUILD branch (add-feature path). Kept for backward compatibility with earlier taw-kit versions.

DEPRECATED — use `/taw` instead. This shim forwards to `/taw` with the SHIP branch. Kept for backward compatibility with earlier taw-kit versions.

DEPRECATED — use `/taw` instead. This shim forwards to `/taw` with the FIX branch. Kept for backward compatibility with earlier taw-kit versions.

DEPRECATED — use `/taw` instead. This shim forwards to `/taw` with the BUILD branch (preset path). Kept for backward compatibility with earlier taw-kit versions.

DEPRECATED — use `/taw` instead. This shim forwards to `/taw` with the MAINTAIN/security branch. Kept for backward compatibility with earlier taw-kit versions.

Set up and write Playwright E2E tests for Next.js projects. Detection-first — adapts to existing Playwright/Cypress setup if present. Referenced by branches/maintain/test.md when gen'ing end-to-end tests. Trigger phrases (EN + VN): "playwright", "e2e test", "end to end", "test luong", "browser test", "test user flow", "cypress".

Write and run pgTAP tests that validate Supabase Row Level Security (RLS) policies. Ensures tenants can only see their own rows, admins see all, etc. Detection-first — reads supabase/migrations/ to auto-infer tables and policies. Trigger phrases (EN + VN): "rls test", "pgtap", "supabase rls", "test policy", "kiem tra rls", "test bao mat database".

Set up and write Vitest unit/component tests for Next.js / React projects. Detection-first: adapts to whatever test runner is already installed. Used by branches/maintain/test.md when gen'ing unit or component tests. Trigger phrases (EN + VN): "vitest setup", "unit test", "gen test", "viết test", "test component", "jsdom test", "@testing-library".

Complete guide for building beautiful native UIs with Expo Router (file-based routing, like Next.js App Router but for mobile). Covers fundamentals, styling, components, navigation, animations, patterns, and native tabs. Mobile counterpart of `nextjs-app-router` skill — fullstack-dev consults THIS for mobile projects, `nextjs-app-router` for web. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "expo router", "react native ui", "build mobile screen", "tao man hinh app", "navigation mobile".

Deploy Expo (React Native) apps to iOS App Store, Android Play Store, and web via EAS Build + Submit. Mobile-equivalent of `taw-deploy` (which targets Vercel / Docker / VPS for Next.js). Use this when a taw-kit project's intent is mobile. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "deploy expo app", "publish to app store", "eas build", "day app len store", "deploy app mobile", "len app store".

Build and distribute Expo development clients (custom Expo Go) locally or via TestFlight when a taw-kit mobile project requires native modules (camera, BLE, etc.) beyond stock Expo Go. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "expo dev client", "custom expo go", "tao dev client", "test native module".

Set up Tailwind CSS v4 in Expo with react-native-css and NativeWind v5 for universal styling across iOS / Android / Web. Used by fullstack-dev when a taw-kit project targets mobile (React Native / Expo) instead of, or in addition to, Next.js. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "expo tailwind", "nativewind setup", "style react native", "tao app mobile voi tailwind", "cai dat nativewind".

Wire Supabase JS client into a React Native (Expo) taw-kit project: session persistence via AsyncStorage, magic-link OAuth callback via expo-linking deep links, Realtime subscriptions on RN, and shared TypeScript types with the Next.js webapp twin (taw-kit's typical web<->mobile pair pattern). This is the mobile counterpart of `auth-magic-link` (web). User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "supabase react native", "supabase mobile", "auth mobile expo", "magic link mobile", "tich hop supabase vao app", "supabase deep link".

Caveman-style terse output rules for AGENT-INTERNAL work only (planner, researcher, fullstack-dev, tester, reviewer, debug). Cuts ~60-70% of output tokens by killing preamble, postamble, tool narration, and filler. Never activates for user-facing Vietnamese output (taw, taw-add, taw-new, approval-plan, vietnamese-copy, error-to-vi hints shown to user). Inspired by JuliusBrussee/caveman but scoped so non-dev VN users still get friendly hand-holding in their language.

Fetch up-to-date documentation for a framework, library, or API that taw-kit uses. Invoke when the orchestrator hits an unfamiliar feature (new Next.js version, Supabase RLS syntax, Polar webhook shape). Vietnamese trigger phrases: "tra tài liệu", "xem docs mới nhất", "tìm hướng dẫn <tên lib>".

Generate Mermaid v11 diagrams for architecture, data flow, or user journey when a picture explains faster than prose. Used by planner when rendering phase files. Vietnamese trigger phrases: "vẽ sơ đồ", "vẽ flow", "diagram kiến trúc".

Break a multi-step task into numbered reasoning steps before acting. Used by taw-kit planner agent to decompose ambiguous Vietnamese prompts into executable phases. Vietnamese trigger phrases: "suy nghĩ từng bước", "phân tích kĩ", "chia nhỏ ra".

Render a 3-5 bullet plan to the user in Vietnamese and wait for confirmation before proceeding. Accepts "OK", "co", "duoc", "chay di" as approval signals. Used by taw, taw-add, and taw-fix before any code changes are made.

Implement Supabase magic-link email authentication for taw-kit projects. No password required — user enters email, receives a login link. Includes middleware-based route protection and session management.

Systematic error analysis for taw-kit projects. Reads stack traces, greps relevant source files, identifies root cause, and proposes a targeted fix. Activated by taw-fix. Uses sequential-thinking for multi-cause errors.

Generate and validate .env.local and .env.example files for taw-kit projects. Ensures all required secrets are present before build or deploy. Never logs secret values. Activated at project init and before taw-deploy.

Translate common Next.js, TypeScript, Supabase, and npm build errors into plain Vietnamese with actionable fix hints. Used by taw-fix and taw-deploy so non-dev users never see raw English error messages.

Build contact, lead capture, and booking forms that save submissions to Supabase. Uses react-hook-form + zod validation. Vietnamese field labels and error messages. Activated by taw and taw-add for any form feature request.

Next.js 14 App Router conventions for taw-kit projects. Covers file-based routing, layouts, Server Components, Client Components, API route handlers, and middleware. Reference for fullstack-dev agent during code generation.

Integrate Polar checkout for digital products and subscriptions, plus Vietnamese payment fallbacks (SePay/MoMo QR). Activated by taw when payment is part of the product description.

Run Next.js dev server and expose it via localtunnel for live preview sharing. Returns a public URL the user can send to clients or view on mobile. Activated after scaffold to let user see their site before deploy.

Add essential SEO to taw-kit projects: meta tags, Open Graph, sitemap.xml, robots.txt, and structured data. Optimised for Vietnamese content and Google search in Vietnam market.