Skill Commands

Access and apply code patterns from the command line.

Commands#

Command	Description
`list`	List available skills
`show <name>`	Show skill content
`search <query>`	Search for skills
`apply <name>`	Apply a skill to your project

Option	Description
`--category <cat>`	Filter by category
`--tier <tier>`	Filter by tier
`--json`	Output as JSON

bootspring skill show#

Display skill content and documentation.

Options#

Option	Description
`--summary`	Show concise summary
`--sections <list>`	Show specific sections
`--json`	Output as JSON

Example#

Loading code block...

Output:

auth/jwt - JWT Session Authentication
═══════════════════════════════════════════════════════════════════

Overview
────────
First-party JWT session auth for Next.js with secure cookies,
route protection, and server-side session verification.

Installation
────────────
npm install jose

Environment Variables
─────────────────────
AUTH_JWT_SECRET=replace-with-a-long-random-secret
AUTH_COOKIE_NAME=session
AUTH_COOKIE_SECURE=true

Implementation
──────────────

1. Create session helpers

```typescript
// lib/session.ts
import { SignJWT, jwtVerify } from 'jose';

const secret = new TextEncoder().encode(process.env.AUTH_JWT_SECRET);

export async function createSession(userId: string) {
  return new SignJWT({ sub: userId })
    .setProtectedHeader({ alg: 'HS256' })
    .setIssuedAt()
    .setExpirationTime('7d')
    .sign(secret);
}

export async function verifySession(token: string) {
  const { payload } = await jwtVerify(token, secret);
  return payload;
}

Create middleware for protected routes

Loading code block...

Read the session in protected routes

Loading code block...

Best Practices ────────────── • Store session JWTs in secure, HTTP-only cookies • Rotate server-side sessions after sensitive auth events • Require verified email for billing and key-management flows • Keep authorization checks separate from token parsing

Related Skills ────────────── • auth/session - Session lifecycle and rotation • auth/rbac - Permission checks • api/rate-limiting - Protect auth endpoints


```bash
# Show summary only
bootspring skill show auth/jwt --summary

# Show specific sections
bootspring skill show auth/jwt --sections "installation,implementation"

bootspring skill search#

Search for skills by keyword.

Usage#

Loading code block...

Options#

Option	Description
`--limit <n>`	Limit results
`--json`	Output as JSON

Example#

Loading code block...

Output:

Search Results: "authentication"
═══════════════════════════════════════════════════════════════════

Found 6 skills:

1. auth/jwt
   First-party JWT session auth
   Tags: auth, jwt, sessions

2. auth/nextauth
   NextAuth.js authentication patterns
   Tags: auth, nextauth, oauth

3. auth/oauth
   OAuth provider integration
   Tags: auth, oauth, providers

4. auth/session
   Session management
   Tags: auth, jwt, cookies

5. auth/mfa
   Multi-factor authentication
   Tags: auth, mfa, totp

6. auth/rbac
   Role-based access control
   Tags: auth, permissions, roles

───────────────────────────────────────────────────────────────────
Use 'bootspring skill show <name>' for details

bootspring skill apply#

Apply a skill pattern to your project.

Usage#

Loading code block...

Options#

Option	Description
`--dry-run`	Preview changes without writing
`--force`	Overwrite existing files
`--output <dir>`	Output directory

Example#

Loading code block...

Output:

Applying: auth/jwt
═══════════════════════════════════════════════════════════════════

Analyzing project...
✓ Detected Next.js 14 (App Router)
✓ Detected TypeScript

Files to create:
  • proxy.ts
  • lib/session.ts
  • app/(auth)/sign-in/[[...sign-in]]/page.tsx
  • app/api/auth/sign-in/route.ts
  • app/api/auth/session/route.ts
  • lib/auth.ts

Files to modify:
  • app/layout.tsx
  • .env.local (add environment variables)

Dependencies to install:
  • jose

? Apply these changes? (y/N) y

Installing dependencies...
✓ Installed jose

Creating files...
✓ Created proxy.ts
✓ Created lib/session.ts
✓ Created app/(auth)/sign-in/[[...sign-in]]/page.tsx
✓ Created app/api/auth/sign-in/route.ts
✓ Created app/api/auth/session/route.ts
✓ Created lib/auth.ts

Modifying files...
✓ Updated app/layout.tsx
✓ Updated .env.local

───────────────────────────────────────────────────────────────────
Skill applied successfully!

Next steps:
1. Add AUTH_JWT_SECRET to .env.local
2. Run: npm run dev
3. Visit: http://localhost:3000/sign-in

Loading code block...