@aqaf/cli 0.0.0-stage → 1.1.0

package/vendor/aqaf/data/profiles/android.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "android",
+  "name": "Native Android Application",
+  "product_type": "mobile",
+  "target_architecture": "ViewModel/repository/use-case boundaries; Gradle feature modules if growth justifies.",
+  "packs": [
+    "mobile"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "AndroidManifest.xml",
+      "weight": 95
+    },
+    {
+      "kind": "text",
+      "value": "com.android.application",
+      "weight": 70
+    }
+  ],
+  "quality_priorities": [
+    "state ownership",
+    "offline persistence",
+    "modularization"
+  ],
+  "source_ids": [
+    "B01",
+    "B02"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/api_backend.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": 1,
+  "id": "api_backend",
+  "name": "REST/GraphQL API Backend",
+  "product_type": "web",
+  "target_architecture": "Modular HTTP adapters, documented contracts, isolated services/data access, migrations and tracing.",
+  "packs": [
+    "web"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "FastAPI(",
+      "weight": 80
+    },
+    {
+      "kind": "text",
+      "value": "express(",
+      "weight": 75
+    },
+    {
+      "kind": "text",
+      "value": "fastify(",
+      "weight": 75
+    },
+    {
+      "kind": "text",
+      "value": "GraphQLSchema(",
+      "weight": 80
+    }
+  ],
+  "quality_priorities": [
+    "API contracts",
+    "data migration",
+    "observability"
+  ],
+  "source_ids": [
+    "B01",
+    "B04"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": "API-detection terms may also occur in test fixtures."
+}

package/vendor/aqaf/data/profiles/browser_extension.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": 1,
+  "id": "browser_extension",
+  "name": "Browser Extension",
+  "product_type": "web",
+  "target_architecture": "UI/content/background isolation, narrow permissions, message schema validation and secure storage.",
+  "packs": [
+    "web"
+  ],
+  "detection": [
+    {
+      "kind": "json_key",
+      "value": "manifest.json:manifest_version",
+      "weight": 110
+    }
+  ],
+  "quality_priorities": [
+    "permission minimization",
+    "message validation",
+    "MV3 background lifecycle"
+  ],
+  "source_ids": [
+    "B01",
+    "B09"
+  ],
+  "status": "experimental",
+  "coverage": "heuristic",
+  "notes": "Overbroad permissions detector is heuristic; permissions can be justified."
+}

package/vendor/aqaf/data/profiles/cli_automation.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "cli_automation",
+  "name": "CLI / Automation",
+  "product_type": "automation",
+  "target_architecture": "Thin CLI with reusable business logic, typed configuration, safe dry-run, and ports for external IO.",
+  "packs": [
+    "automation"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "argparse",
+      "weight": 38
+    },
+    {
+      "kind": "text",
+      "value": "click.command",
+      "weight": 50
+    }
+  ],
+  "quality_priorities": [
+    "repeatability",
+    "idempotency",
+    "test seams"
+  ],
+  "source_ids": [
+    "B03",
+    "B06"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/desktop_utility.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": 1,
+  "id": "desktop_utility",
+  "name": "Cross-platform/Desktop Utility",
+  "product_type": "systems",
+  "target_architecture": "UI shell with application services, isolated platform integration and explicit threading/state ownership.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "PySide6",
+      "weight": 32
+    },
+    {
+      "kind": "text",
+      "value": "tkinter",
+      "weight": 30
+    },
+    {
+      "kind": "text",
+      "value": "WPF",
+      "weight": 32
+    }
+  ],
+  "quality_priorities": [
+    "UI responsiveness",
+    "filesystem boundaries",
+    "installer/update"
+  ],
+  "source_ids": [
+    "B01",
+    "B06"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": "Profile-specific detectors are not yet provided."
+}

package/vendor/aqaf/data/profiles/embedded_iot.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "embedded_iot",
+  "name": "Embedded / IoT Firmware",
+  "product_type": "systems",
+  "target_architecture": "Hardware abstraction, explicit state machine, bounded resources, deterministic recovery and test harness.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "platformio.ini",
+      "weight": 85
+    },
+    {
+      "kind": "text",
+      "value": "#include <Arduino.h>",
+      "weight": 60
+    }
+  ],
+  "quality_priorities": [
+    "watchdogs",
+    "bounded memory",
+    "hardware safety"
+  ],
+  "source_ids": [
+    "B01",
+    "B03"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/google_apps_script.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "google_apps_script",
+  "name": "Google Apps Script Application",
+  "product_type": "automation",
+  "target_architecture": "Thin triggers, services and Google API adapters with quota-aware retries and idempotency.",
+  "packs": [
+    "automation"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "appsscript.json",
+      "weight": 100
+    },
+    {
+      "kind": "extension",
+      "value": ".gs",
+      "weight": 85
+    }
+  ],
+  "quality_priorities": [
+    "trigger isolation",
+    "quota controls",
+    "minimal scopes"
+  ],
+  "source_ids": [
+    "B03",
+    "B06"
+  ],
+  "status": "experimental",
+  "coverage": "heuristic",
+  "notes": "Checks are heuristic; review OAuth scopes and authorization manually."
+}

package/vendor/aqaf/data/profiles/mcp_agent_server.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "mcp_agent_server",
+  "name": "MCP / Tool Server",
+  "product_type": "automation",
+  "target_architecture": "Explicit typed tool contracts, narrow execution boundaries, auditability and evaluation of external side effects.",
+  "packs": [
+    "automation"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "FastMCP(",
+      "weight": 78
+    },
+    {
+      "kind": "text",
+      "value": "@modelcontextprotocol",
+      "weight": 80
+    }
+  ],
+  "quality_priorities": [
+    "tool permissions",
+    "schema validation",
+    "evaluation"
+  ],
+  "source_ids": [
+    "B01",
+    "B03"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/multirepo_system.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": 1,
+  "id": "multirepo_system",
+  "name": "Multi-repository System",
+  "product_type": "systems",
+  "target_architecture": "Explicit cross-repository contracts, interface ownership, pinned versions and compatibility tests.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "aqaf-system.json",
+      "weight": 115
+    }
+  ],
+  "quality_priorities": [
+    "contract compatibility",
+    "dependency mapping",
+    "release coordination"
+  ],
+  "source_ids": [
+    "B03",
+    "B10"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/npm_library.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": 1,
+  "id": "npm_library",
+  "name": "npm / Node.js Library",
+  "product_type": "web",
+  "target_architecture": "Stable public API, explicit supported runtime range, testing of package exports and compatibility.",
+  "packs": [
+    "web"
+  ],
+  "detection": [
+    {
+      "kind": "json_key",
+      "value": "package.json:exports",
+      "weight": 90
+    },
+    {
+      "kind": "json_key",
+      "value": "package.json:bin",
+      "weight": 70
+    },
+    {
+      "kind": "json_key",
+      "value": "package.json:types",
+      "weight": 55
+    }
+  ],
+  "quality_priorities": [
+    "public API stability",
+    "semver",
+    "package integrity"
+  ],
+  "source_ids": [
+    "B03",
+    "B06"
+  ],
+  "status": "experimental",
+  "coverage": "heuristic",
+  "notes": "A CLI package can correctly use bin without exports."
+}

package/vendor/aqaf/data/profiles/rust_app.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "rust_app",
+  "name": "Rust Application or Service",
+  "product_type": "systems",
+  "target_architecture": "Library-first modules and thin executable entrypoints with typed errors and documented unsafe boundaries.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "Cargo.toml",
+      "weight": 80
+    },
+    {
+      "kind": "extension",
+      "value": ".rs",
+      "weight": 55
+    }
+  ],
+  "quality_priorities": [
+    "crate ownership",
+    "unsafe invariants",
+    "dependency audit"
+  ],
+  "source_ids": [
+    "B01",
+    "B03"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/saas_or_web_app.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": 1,
+  "id": "saas_or_web_app",
+  "name": "SaaS / Web Application",
+  "product_type": "web",
+  "target_architecture": "Modular monolith with explicit domain modules, reliable data changes and APIs for external clients.",
+  "packs": [
+    "web"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "next.config.js",
+      "weight": 85
+    },
+    {
+      "kind": "file",
+      "value": "next.config.ts",
+      "weight": 85
+    },
+    {
+      "kind": "file",
+      "value": "manage.py",
+      "weight": 75
+    },
+    {
+      "kind": "file",
+      "value": "package.json",
+      "weight": 25
+    }
+  ],
+  "quality_priorities": [
+    "data ownership",
+    "module boundaries",
+    "deployment"
+  ],
+  "source_ids": [
+    "B01",
+    "B02"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/scraper_data_pipeline.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": 1,
+  "id": "scraper_data_pipeline",
+  "name": "Scraper / Data Pipeline",
+  "product_type": "automation",
+  "target_architecture": "Deterministic extract-transform-load stages, retries, checkpoints, provenance and source adapters.",
+  "packs": [
+    "automation"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "BeautifulSoup",
+      "weight": 46
+    },
+    {
+      "kind": "text",
+      "value": "scrapy",
+      "weight": 52
+    },
+    {
+      "kind": "text",
+      "value": "playwright",
+      "weight": 38
+    }
+  ],
+  "quality_priorities": [
+    "data provenance",
+    "retry/idempotency",
+    "rate limits"
+  ],
+  "source_ids": [
+    "B04",
+    "B03"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": "Profile-specific detectors are not yet provided."
+}

package/vendor/aqaf/data/profiles/swift_app.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "swift_app",
+  "name": "Native Apple Application",
+  "product_type": "mobile",
+  "target_architecture": "Swift feature/state boundaries, injected services, isolation of IO from UI; package modules if justified.",
+  "packs": [
+    "mobile"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "Package.swift",
+      "weight": 80
+    },
+    {
+      "kind": "extension",
+      "value": ".swift",
+      "weight": 55
+    }
+  ],
+  "quality_priorities": [
+    "UI state separation",
+    "concurrency ownership",
+    "feature testability"
+  ],
+  "source_ids": [
+    "B01",
+    "B02"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/tauri_electron.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "tauri_electron",
+  "name": "Electron / Tauri Desktop",
+  "product_type": "systems",
+  "target_architecture": "UI layer plus constrained IPC contract and isolated native/network capabilities.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "file",
+      "value": "tauri.conf.json",
+      "weight": 95
+    },
+    {
+      "kind": "text",
+      "value": "electron",
+      "weight": 35
+    }
+  ],
+  "quality_priorities": [
+    "IPC security",
+    "update channel",
+    "process isolation"
+  ],
+  "source_ids": [
+    "B01",
+    "B09"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/unknown_or_general_app.json

@@ -0,0 +1,25 @@
+{
+  "schema_version": 1,
+  "id": "unknown_or_general_app",
+  "name": "Unclassified / General",
+  "product_type": "web",
+  "target_architecture": "Choose only after a domain and deployment assessment.",
+  "packs": [
+    "web",
+    "mobile",
+    "systems",
+    "automation"
+  ],
+  "detection": [],
+  "quality_priorities": [
+    "requirements analysis",
+    "measurement",
+    "incremental design"
+  ],
+  "source_ids": [
+    "B01"
+  ],
+  "status": "heuristic",
+  "coverage": "guidance_only",
+  "notes": ""
+}

package/vendor/aqaf/data/profiles/windows_client_server.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": 1,
+  "id": "windows_client_server",
+  "name": "Windows Client/Server Management",
+  "product_type": "systems",
+  "target_architecture": "Separate UI/client, transport contracts, privileged agent service and policy layer; audit high-impact actions.",
+  "packs": [
+    "systems"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "win32service",
+      "weight": 75
+    },
+    {
+      "kind": "text",
+      "value": "ServiceController",
+      "weight": 60
+    }
+  ],
+  "quality_priorities": [
+    "agent authentication",
+    "rollback",
+    "privilege separation"
+  ],
+  "source_ids": [
+    "B01",
+    "B09"
+  ],
+  "status": "experimental",
+  "coverage": "guidance_only",
+  "notes": "No privilege safety assessment is provided by automated rules."
+}

package/vendor/aqaf/data/profiles/wordpress_plugin.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": 1,
+  "id": "wordpress_plugin",
+  "name": "WordPress Plugin",
+  "product_type": "web",
+  "target_architecture": "Small hooks and actions delegated to testable services, permissions/nonces on protected actions.",
+  "packs": [
+    "web"
+  ],
+  "detection": [
+    {
+      "kind": "text",
+      "value": "add_action(",
+      "weight": 75
+    },
+    {
+      "kind": "text",
+      "value": "register_activation_hook",
+      "weight": 85
+    },
+    {
+      "kind": "path",
+      "value": "wp-content/",
+      "weight": 90
+    }
+  ],
+  "quality_priorities": [
+    "hook delegation",
+    "capabilities/nonces",
+    "upgrade paths"
+  ],
+  "source_ids": [
+    "B09",
+    "B01"
+  ],
+  "status": "heuristic",
+  "coverage": "heuristic",
+  "notes": ""
+}