llbbl

Use dfm to initialize dotfile backups, track files safely, sync private repositories, and review AI-suggested dotfile improvements

Work on llbbl/esm, a PHP enum-state-machine library, with its local quality gates and API constraints

Integrate llbbl/enum-state-machine into a PHP project with enum states, attribute transitions, guards, hooks, and validation

Use grepwrite gw to find matches, preview code rewrites, apply transactional edits with snapshots, and undo safely

Integrate logan-logger into TypeScript apps with correct runtime imports, environment config, safe metadata, and validation

Use pkglock to switch package-lock.json between local npm registries and the public registry, and install safeguards against committing local URLs

Use repjan to audit GitHub repositories, review archive candidates, export decisions, and safely archive or unarchive repos

Launch or adapt a semantic-docs site with Astro content, semantic search indexing, Turso or local libSQL, and deployment checks

Security audit with fix recommendations for JS/TS projects

Upgrade JS/TS dependencies with risk assessment and Dependabot PR integration

Generate and improve code quality scores for JS/TS projects

Scan for RustSec advisories and guide remediation

Upgrade Rust dependencies with risk assessment and verification

Generate Rust project health grade with improvement recommendations

Use when a user asks to update a GitHub PR description from the actual branch changes, test status, and tracking context.

Use when performing routine dependency maintenance in this repo: create or attach beads work, apply safe Go dependency updates (patch/minor direct dependencies), run checks, update issue status, sync beads, and provide handoff notes without committing.

Migrate a JavaScript/TypeScript project from npm, yarn, or older pnpm (≤10) to pnpm 11, adopting its supply-chain-hardened defaults (minimumReleaseAge, allowBuilds, blockExoticSubdeps, strictDepBuilds, verifyDepsBeforeRun). Use when the user says "migrate to pnpm 11", "upgrade pnpm", "switch to pnpm", or wants to harden a project against npm supply-chain attacks.