shesha-utils

Plugin shesha-utils from marketplace boxfusion-plugins in Boxfusion/Boxfusion-plugins. Commands read from the repo's manifest — 2 days ago.

Skills (28)

• add-analyzers

  Use this skill to add essential code quality analyzers to .NET projects, including AsyncFixer, IDisposableAnalyzers, and Microsoft.VisualStudio.Threading.Analyzers with best-practice configurations.

• add-testcontainer-integration-tests

  Adds API-level integration tests to a Shesha/ABP .NET backend using Testcontainers (a throwaway SQL Server container per test run), an in-process ASP.NET TestServer booted from the project's own Web.Host Startup, and the Boxfusion.Common.Tests.TestingFramework NuGet helpers (login, dynamic CRUD, use

• auditing-application-security

  Catalogues and security-reviews a whole Shesha application — roles and permissions, configured forms, coded screens, custom endpoints, entities and their CRUD APIs — then writes plain-English, prioritised remediation recommendations per package. Self-contained — starts the dev servers, collects live

• boxfusion-tlc

  DRAFT. Diagnose and fix a BoxFusion Shesha / ABP system end to end, the "TLC" review. It brings test coverage up to company standard first. Then a specialist team inspects code, SQL, the ORM, forms, security, operations and App Insights, proves each finding with a test, and writes a plain-English, n

• clean-form-config

  Analyzes a Shesha form configuration JSON and removes dead/obsolete component properties, strips console.log calls from JS code strings, validates property value types, validates the shape of dropdown values items, detects scripts referencing component labels instead of propertyNames, runs layout va

• create-integration-tests

  Creates and scaffolds integration test projects for Shesha framework .NET applications. Sets up xUnit test infrastructure with NHibernate, database fixtures, test modules, and base classes. Detects whether Shesha.Testing NuGet package is available and adapts accordingly — using the package when pres

• create-or-update-devexpress-report

  Creates or updates DevExpress reports in a Shesha application from natural-language requirements — instead of hand-configuring them in the front-end report designer. Generates the DevExpress XtraReport definition XML (SQL data source + bands/tables/charts), the report parameters, and a Shesha filter

• document-shaconfigs

  Documents Shesha .shaconfig configuration packages by extracting their contents and generating a CSV inventory report. Use when asked to document, inventory, audit, list, or report on .shaconfig files, Shesha configuration packages, or Shesha configuration items (forms, permission definitions, refer

• generate-sql-query

  Generates a safe, read-only Microsoft SQL Server (T-SQL) query from a natural-language request against a Shesha database, using the Shesha entity metadata to find relevant tables, build schema context, and validate the result. Ports the Shesha Automate Engine's SQL generator (prompts + validation ru

• harden-permissions

  Uses Playwright to set permissions on unsecured Shesha API endpoints via the permissioned-objects admin UI. Restricts write operations to app:Configurator. Use when the user wants to harden, secure, or lock down API endpoints, fix permissioned-objects, restrict access to admin-only services, or add

• hardening-shesha-app

  Scans a Shesha application repository for security misconfigurations that are fixable in the application itself (not the framework) and applies safe, minimal fixes. Current checks are over-long JWT token lifetime, token blacklist not wired into JwtBearer OnTokenValidated (so sign-out does not revoke

• link-backend-module-debug

  Links a Shesha backend module as a local project reference for debugging, or unlinks it back to NuGet. Reads Directory.Build.props to detect available modules, creates or updates a Debug solution file, toggles UseLocal* flags, and wraps PackageReference entries in MSBuild Choose/When/Otherwise condi

• remove-intent-architect

  Scrubs all Intent Architect artifacts and references from a Shesha (or any .NET) project. Deletes the intent/ metadata folder, Intent.Modules/ folder and .isln files, removes Intent.* NuGet package references, strips Intent using-statements, [IntentManaged(...)] attributes and [assembly: IntentTempl

• run-integration-tests

  Runs integration tests against a dedicated test database. Handles database provisioning, fast resets, config updates, and test execution. Use when the user wants to run integration tests, test against a real database, or mentions "run integration tests", "run tests", "integration test", or "test dat

• setup-claude-logger

  Installs the Claude Logger configuration into Claude Code settings.json files — the CLAUDE_LOGGER_API_URL env var, the shesha-utils plugin, and the boxfusion-plugins marketplace. The UserPromptSubmit/PreToolUse/PostToolUse/SessionStart/Stop ingest hooks ship with the plugin (hooks/hooks.json) and re

• shesha-access-control

  Designs, documents, and implements access control for Shesha framework applications. Covers discovery of existing roles/permissions, access control design documentation, permission and role creation, API-level authorization, data-level filtering via global specifications, locking built-in framework

• shesha-code-review

  Deterministic application-code review for a BoxFusion Shesha / ABP system, back end and front end — error handling, control flow, transactions, side effects, structure, dead code and test predicates. Flags where the code violates basic engineering practice in ways that cause real problems and which

• shesha-forms-review

  Deterministic Shesha form review for a BoxFusion Shesha / ABP system — the live form configurations in the environment's database, their scripts and their data sources. Finds where a form does something other than intended and where form scripts cause wrong data, failed saves or wasted requests, and

• shesha-module-registry-sync

  Scans a target project repository for its Shesha modules, looks up each module's full published version and dependency history on the private Boxfusion Azure Artifacts NuGet/npm feed (or the public nuget.org/npmjs.org registries, plus a specific git ref for source extraction, when the repo is specif

• shesha-operations-review

  Deterministic operations and reliability review for a BoxFusion Shesha / ABP system — CI and pipelines, configuration and secrets in config files, dependencies, telemetry, background jobs, messaging and notification delivery, plus the test and debug safety nets. Finds what fails in production and ho

• shesha-orm-review

  Deterministic data-access and ORM review for a BoxFusion Shesha / ABP system — entity mappings, dynamic CRUD, GraphQL, GetAll, repositories, lazy loading, specifications and filters. Finds where the system over-fetches, searches every field, skips paging, or loads related records the slow way, and e

• shesha-project-setup

  Set up a Shesha-based project development environment aligned to Boxfusion development standards and best practices. Run this when a new Shesha project has just been created to verify and configure the dev environment.

• shesha-skill-creator

  Creates new Shesha-specific skills by analyzing existing Shesha application code, documentation, and descriptions. Produces properly structured SKILL.md files with supporting reference files following best practices. Use when the user wants to create a new skill for Shesha code generation, workflow

• shesha-sql-review

  Deterministic SQL and database review for a BoxFusion Shesha / ABP application — schema, indexes, stored procedures, functions, views, raw SQL in code, and migrations. Finds what will degrade or break as data grows, what is wrong or dangerous, and what grows unbounded, and emits findings.json per th

• shesha-unused-code-audit

  Audits a BoxFusion Shesha / ABP application for unused and dead code — API endpoints, entities and their dynamic CRUD APIs, application services and methods, classes, DTOs, form configurations, reference lists, settings, permissions, front-end components and routes, database objects, background jobs

• skill-creator

  Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.

• switch-model-provider

  Switches Claude Code between Anthropic Claude models and Z.ai GLM models by editing the env block of the global (~/.claude/settings.json) and/or project (<repo>/.claude/settings.json) settings files. Switching to GLM adds the ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN / ANTHROPIC_MODEL / ANTHROPIC_DE

• upgrade-shesha-stack

  Upgrades a Shesha project to a target Shesha version, resolving the matching version of every other Shesha and Boxfusion module from the private Azure Artifacts feed, updating the backend Directory.Build.props and all frontend @shesha-io/* packages, then restoring, building and installing to verify,

Hooks (5)

• UserPromptSubmit

  python "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py" || python3 "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py"

• PreToolUse

  python "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py" || python3 "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py"

• PostToolUse

  python "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py" || python3 "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py"

• SessionStart

  python "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py" || python3 "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py"

• Stop

  python "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py" || python3 "${CLAUDE_PLUGIN_ROOT}/skills/setup-claude-logger/scripts/cc_logger.py"