* enhance: Improve prompt-engineer agent (automated review)
- Fix broken reasoning framework: complete Ordering field and Necessity scale
- Remove OpenAI attribution from description; add invocation example block
- Restrict tools to Read only (text-transformation agent needs no writes)
- Add XML Structure and CoT Opportunity dimensions to reasoning template
- Move meta-instruction NOTE out of output template, place as agent directive
- Fix stray markdown bold markers on Reasoning Before Conclusions guideline
- Integrate orphaned examples bullet into the Examples guideline line
- Add concrete worked example section (classify customer feedback)
Automated review cycle | Co-Authored-By: Claude Code <noreply@anthropic.com>
* security: Harden CI/CD and repo for open-source safety
- Add --ignore-scripts to all npm ci/install in CI workflows and predeploy script
- Fix shell injection in discord-release-notification (use env vars + jq for payload)
- Add explicit permissions to all workflows (least privilege principle)
- Add root .npmrc with ignore-scripts=true
- Add .github/dependabot.yml for automated dependency security updates
- Add .github/CODEOWNERS to protect workflows, scripts, and API paths
- Expand .gitignore with *.pem, *.key, credentials.json patterns
* fix: Grant contents:read to deploy workflow so checkout works
Cubic correctly flagged that permissions: {} blocks actions/checkout.
- Fix broken reasoning framework: complete Ordering field and Necessity scale
- Remove OpenAI attribution from description; add invocation example block
- Restrict tools to Read only (text-transformation agent needs no writes)
- Add XML Structure and CoT Opportunity dimensions to reasoning template
- Move meta-instruction NOTE out of output template, place as agent directive
- Fix stray markdown bold markers on Reasoning Before Conclusions guideline
- Integrate orphaned examples bullet into the Examples guideline line
- Add concrete worked example section (classify customer feedback)
Automated review cycle | Co-Authored-By: Claude Code <noreply@anthropic.com>
- Changed dropdown positioning from absolute to fixed with z-index: 9999 to prevent it from being hidden behind sidebar
- Added complete profile menu with My Collections, My Components, Settings, and Sign Out options
- Implemented mock mode for local testing (window.enableAuthMock() / window.disableAuthMock())
- Mock mode automatically disabled on Vercel/production environments
Remove `model: sonnet/haiku/opus` from 396 component files. The Anthropic
API requires full model IDs (e.g., claude-sonnet-4-6), so shorthand names
cause 404 errors. Removing the field lets Claude Code use the user's
configured default model instead.
Fixes#99https://claude.ai/code/session_01Hqx78XZNbdfh38YGZn4g4T
Co-authored-by: Claude <noreply@anthropic.com>
- Detect OS color scheme preference on first visit (prefers-color-scheme)
- Fix duplicate SVG mask IDs in CountryFlag causing rendering conflicts
- Replace useCallback with useMemo for search results in SearchModal
- Remove spurious submodule reference
* feat: Complete dashboard UI overhaul with dark mode theme system
- Added ThemeToggle component with persistent theme switching
- Implemented comprehensive dark mode styles across all dashboard pages
- Enhanced UI components: Sidebar, TopBar, ComponentGrid, TrendingView, JobsView
- Improved modal designs: SearchModal, SendToRepoModal, CartSidebar
- Updated featured pages and component detail pages with dark mode support
- Added CountryFlag component for jobs display
- Refined typography, spacing, and color schemes for better readability
- Enhanced interactive elements with smooth transitions and hover states
- Updated global styles with CSS variables for theme consistency
* docs: Add comprehensive PR documentation and screenshot guide
* docs: Transform PR into compelling business-focused summary
- Emphasize user benefits and platform value
- Highlight featured partner improvements (Neon, Vercel, Supabase, etc.)
- Detail expected business impact and metrics
- Add comprehensive business value section
- Include strategic benefits and revenue impact
- Professional acknowledgments from BitreonX team
- Focus on quality and attention to detail
* docs: Add executive summary highlighting business value and BitreonX quality
* docs: Add quick reference card for easy PR creation
* fix: resolve remaining P2 issues - sidebar active state, cart height, and date format
- Fix Sidebar.astro active-state icon styling to target nested span element
- Fix CartSidebar.tsx scrollable content height to be dynamic based on footer
- Fix WeWorkRemotely date format from RFC-2822 to ISO 8601 for proper sorting
* fix: use flexbox layout for CartSidebar instead of absolute positioning
Replace hard-coded height calculations with proper flexbox layout:
- Add flex-col to sidebar panel container
- Make header and footer shrink-0 (fixed size)
- Make content flex-1 with min-h-0 (fills remaining space)
- Remove absolute positioning from footer
- Remove hard-coded viewport height calculations
This ensures the scrollable content area dynamically adjusts to the
actual footer height without items being obscured.
* fix: resolve 11 additional P2 code review issues
- Fix malformed Tailwind classes in featured/[slug].astro (hover border syntax)
- Fix malformed Tailwind classes in MyComponentsView and SaveToCollectionButton
- Fix tooltip initialization non-idempotency in Sidebar (prevent duplicate listeners)
- Fix Recently Added sort mislabeling in ComponentGrid
- Fix single/multi-category filter conflict in ComponentGrid
- Fix tag click event bubbling in JobsView
- Fix SearchModal MutationObserver and timer cleanup
- Fix logo visibility issue in JobsView
- Fix fallback color construction in TrendingView
- Fix theme.ts localStorage trust issue with runtime validation
- Fix missing width/height in icon SVGs
- Fix XSS vulnerability in component detail page (use textContent)
- Fix sidebar overflow-x clipping tooltips
* fix: resolve SearchModal timeout race condition and Recently Added sort mismatch
- Fix SearchModal closeModal timeout cleanup using ref to prevent race conditions
when modal is closed and reopened quickly
- Fix Recently Added sort to use reverse name sort (Z-A) instead of downloads,
providing distinct behavior from Most Popular until actual date field is available
* fix: Remove misleading 'Recently Added' sort option
The 'Recently Added' sort was using reverse alphabetical order as a placeholder, which is misleading to users expecting actual recency. Since component data doesn't include creation dates, removed this option entirely.
Fixes violation P2 in PR #451
Adds a structured deep research skill powered by NotebookLM MCP server.
Features: 9-step research workflow, 6 research types, studio artifact
generation (slides, audio, video, infographics, reports, mind maps),
and a reusable research brief template.
Requires: NotebookLM MCP server (nlm setup add claude-code)
Co-authored-by: Tu Nombre <tuemail@example.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add a new "Slides" view mode alongside Code/Preview in the SkillExplorer.
Parses YAML frontmatter into a title slide and splits H2 sections into
individual content slides with navigation, keyboard shortcuts, and fullscreen.
https://claude.ai/code/session_01XsDWS1qRqiCjBjcfcNi7Z9
* feat(jobs): add Claude Code jobs section with free scraping pipeline
Add a new Jobs page (/jobs) and homepage preview showing positions that
require Claude Code. The scraper uses only free sources (HN Firebase API,
HN Algolia, RemoteOK, WeWorkRemotely RSS) with no API keys needed.
Runs daily via GitHub Actions alongside existing data updates.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(jobs): address all Cubic review feedback (P1+P2)
P1 fixes:
- Location parser now skips role titles (e.g. "AI-Native Technical Operations Lead")
- Salary extraction filters out funding/revenue amounts ($37M raised)
- applyUrl validated with safeUrl() to prevent javascript: injection
P2 fixes:
- timeAgo() handles NaN/invalid dates gracefully
- WeWorkRemotely IDs use URL slug instead of non-deterministic hash()
- GitHub Action diff check includes dashboard/public/claude-jobs.json
- Remote flag also checks description body for remote indicators
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(jobs): fix mojibake encoding and false salary extraction
- strip_html() now fixes common UTF-8 mojibake patterns (’ → ', â€" → —)
- Salary validation requires k/K suffix or >= $1000 for raw amounts
- Removes false positives: $100-140, $150-300 (ambiguous), $20K (bounty)
- Adds $X/yr pattern for single-value annual salaries
Addresses Cubic review comments #8, #9, #10.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* feat(jobs): add Anthropic Careers source, auth gate, and UI improvements
- Add Greenhouse API collector for Anthropic career listings mentioning Claude Code
- Add Clerk auth gate requiring sign-in to view job links
- Add auth banner with sign-in CTA for unauthenticated users
- Improve description/tag color contrast (#999/#aaa) for dark theme
- Add Anthropic source badge (purple)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(jobs): address Cubic review — avoid unnecessary rerenders and remove candidate cap
- useGlobalAuth: only call setState when values actually change (prevents 500ms rerender loop)
- Remove hard cap of 80 Anthropic candidates to avoid dropping valid Claude Code roles
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
- Add Grep and Glob tools for codebase exploration before proposing architecture
- Expand description with two structured <example> blocks (monolith decomposition and greenfield service design) to improve routing accuracy
- Add Observability Design section covering OpenTelemetry, RED metrics, health endpoints, and SLO alerting
- Expand Focus Areas to include API paradigm selection, OpenAPI 3.1/AsyncAPI, event-driven architecture (Kafka/NATS/SQS), and Saga pattern
- Upgrade security from basic to production-grade: OWASP API Top 10, mTLS, JWT at gateway, RBAC/ABAC, secret management
- Add OpenAPI 3.1 spec (YAML) and event/message schema definitions to Output section
Automated review cycle | Co-Authored-By: Claude Code <noreply@anthropic.com>
- Added brightdata-local-search skill card to Skills Layer section
- Updated installCommand to include development/brightdata-local-search
- Incremented Components count from 7 to 8
- Added Featured Pages documentation to CLAUDE.md
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add skill for setting up local web search using Bright Data SERP API
with the unfancy-search pipeline (clone, configure, run locally).
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
- Rewrote description to trigger on explicit user test-generation intent
- Fixed framework detection to use real bash injection instead of passive @file mentions
- Replaced redundant Task/Process sections with a single six-step Test Generation Framework
- Added Python (pytest), Go (testify), and Rust (#[cfg(test)]) framework-specific guidance
- Added conditional handling for component name vs file path in $ARGUMENTS
- Trimmed verbose best-practices sections to a concise four-point checklist
Automated review cycle | Co-Authored-By: Claude Code <noreply@anthropic.com>
* Add x-twitter-scraper skill
X (Twitter) data integration skill powered by the Xquik REST API,
MCP server, and HMAC webhooks. Covers tweet search, user lookup,
19 extraction tools, giveaway draws, account monitoring, trending
topics, and follow checks.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: Improve x-twitter-scraper skill per component review
- Move from marketing/ to business-marketing/ (correct category)
- Rewrite description from SEO spam to agent invocation context
- Add agent role, user questions, and decision guidance
- Replace hardcoded API keys with process.env.XQUIK_API_KEY
- Use ${XQUIK_API_KEY} in MCP config instead of placeholder
- Remove duplicate auth blocks in code examples
- Add Related Skills section (social-content, competitive-ads-extractor)
- Remove competitor tool mentions (Cursor, Copilot, Windsurf)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Burak Bayır <burakbayir1@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
* feat: add Component Review Loop with dashboard, API, and agents
Automated daily cycle that reviews, improves, and creates PRs for
components with full traceability in Neon and Linear coordination.
- Add Neon schema: review_cycles, tool_executions, cycle_control tables
- Add API endpoints: cycles (CRUD), tools (logging), control (pause/resume)
- Add dashboard panel at /live-task with cycle table and tool timeline
- Add 3 agents: component-researcher, component-improver, linear-tracker
- Add Clerk auth on control endpoint (restricted to admin email)
- Add authenticateAndGetEmail() to shared auth lib
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix: address code review feedback on component review loop
- Fix Neon BIGSERIAL types: id fields now typed as string
- Add Agent tool to component-improver for reviewer delegation
- Fix linear-tracker: remove next-review label on failure to prevent re-queuing
- Validate cycle_id and limit params in API endpoints
- Add https:// check on PR URLs before rendering as links
- Add cycleStartTime to ToolTimeline scroll effect deps
- Note catalog regen is handled by pr-verification, not improver
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* feat: add Bright Data web data template as featured integration
Add Bright Data skills (search, scrape, data-feeds, bright-data-mcp,
bright-data-best-practices, design-mirror), MCP component, and featured
page with complete documentation covering 60+ tools for web search,
scraping, structured data extraction, and browser automation.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* chore: regenerate components.json with Bright Data components
Updates catalog to include new web-data skills (search, scrape,
data-feeds, bright-data-mcp, bright-data-best-practices, design-mirror)
and brightdata MCP component.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* feat(dashboard): improve Bright Data featured page UX
- Move Bright Data to first position in featured list
- Add View buttons linking to each skill detail page
- Add rounded corners to logo images across featured cards, header, and sidebar
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
- Add MarkdownViewer, JsonViewer, SkillExplorer components with Code/Preview toggle, search (Cmd+F), TOC sidebar, and gradient fade expand/collapse
- Add FileTreeSidebar for skill file navigation (starts collapsed)
- Make file tree panel stretch to match content height
- Green download badge with icon on detail pages
- Remove Add to Stack button and sidebar collapse functionality
- Metadata displayed as clickable label pills with modal
- Add marked dependency for client-side markdown rendering
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The skill now searches for CLOUDFLARE_ACCOUNT_ID and CLOUDFLARE_API_TOKEN
in shell env vars, .env, .env.local, and ~/.env before prompting the user.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
New skill that crawls entire websites using Cloudflare's Browser Rendering
/crawl endpoint and saves results as markdown. Supports async job polling,
pagination, URL filtering, and multiple output formats.
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
dependabot[bot]