frontend-project

Use this skill's deterministic renderer, which writes package.json, tsconfig files, Vite and Vitest configs, entrypoints, and tests from repo-owned templates. It never runs create-vite or any network generator, and all dependency versions must be exact pinned values.

Only npm, pnpm, yarn, and bun are accepted, each with an exact manager version. Arbitrary command tokens fail closed during request validation, and no lockfile is generated without running the approved package manager.

No. The supported materialization profile is React, TypeScript, and Vite only. Requests for Next.js, Remix, Vue, Svelte, Angular, mobile, Electron, or Node backends are explicitly rejected and belong to other owners.

Names must match VITE_[A-Z][A-Z0-9_]* and must not contain secret-like markers such as SECRET, TOKEN, PASSWORD, API_KEY, or ACCESS_KEY, even in compact forms like APIKEY. Values, defaults, and examples are also forbidden because VITE_* variables are public client data.

The skill renders exact assigned files into a private 0700 directory and returns a canonical manifest with normalized inputs, SHA-256 input and file digests, modes, and bound validation records. It never writes the target repository; the coordinator finalizes and validates the handoff.

Dependency-backed checks such as lint, format, typecheck, test, and build run only when dependencies are already installed or separately authorized. Otherwise they are reported as pending post-apply validations, while offline JSON, placeholder, digest, and permission checks always run.