@dewtech/dare-cli 3.11.0 → 3.12.0

package/skills/dare-ax/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@dewtech/dare-ax",
+  "version": "1.0.0",
+  "description": "dare-ax — Agent Experience (AX) skill for DARE Method v3.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "templates",
+    "skill.yml"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src --ext .ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/node": "^20.19.41",
+    "typescript": "^5.9.3",
+    "vitest": "^1.6.1"
+  },
+  "keywords": [
+    "dare",
+    "dare-method",
+    "dare-ax",
+    "agent-experience",
+    "llms-txt",
+    "ai-agents",
+    "openapi"
+  ],
+  "author": "Dewtech Technologies",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/dewtech-technologies/dare-method.git",
+    "directory": "packages/skills/dare-ax"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/skills/dare-ax/secret-detector.ts

@@ -0,0 +1,123 @@
+/**
+ * dare-ax — secret-detector
+ * Detects API keys, tokens, passwords, and other secrets in text content.
+ * License: MIT
+ */
+
+export interface SecretCheckResult {
+  found: boolean;
+  pattern?: string;
+  line?: number;
+}
+
+/** Patterns that indicate the presence of a secret. */
+const SECRET_PATTERNS: Array<{ name: string; pattern: RegExp }> = [
+  // Generic high-entropy secrets
+  { name: 'Generic API Key assignment', pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*["']?[A-Za-z0-9\-_]{16,}["']?/i },
+  { name: 'Generic Secret assignment', pattern: /(?:secret|access[_-]?secret|client[_-]?secret)\s*[:=]\s*["']?[A-Za-z0-9\-_]{16,}["']?/i },
+  { name: 'Generic Token assignment', pattern: /(?:token|access[_-]?token|auth[_-]?token|bearer)\s*[:=]\s*["']?[A-Za-z0-9\-_.]{20,}["']?/i },
+  { name: 'Password assignment', pattern: /(?:password|passwd|pwd)\s*[:=]\s*["'][^"']{4,}["']/i },
+
+  // AWS
+  { name: 'AWS Access Key ID', pattern: /AKIA[0-9A-Z]{16}/ },
+  { name: 'AWS Secret Access Key', pattern: /[Aa][Ww][Ss][_\-\s]?[Ss][Ee][Cc][Rr][Ee][Tt]\s*[:=]\s*["']?[A-Za-z0-9+/]{40}["']?/ },
+
+  // GitHub
+  { name: 'GitHub Token', pattern: /gh[pousr]_[A-Za-z0-9_]{36,}/ },
+  { name: 'GitHub Fine-grained Token', pattern: /github_pat_[A-Za-z0-9_]{82}/ },
+
+  // Stripe
+  { name: 'Stripe Secret Key', pattern: /sk_(live|test)_[A-Za-z0-9]{24,}/ },
+
+  // Google
+  { name: 'Google API Key', pattern: /AIza[0-9A-Za-z_\-]{35}/ },
+  { name: 'Google OAuth Token', pattern: /ya29\.[0-9A-Za-z_\-]{68,}/ },
+
+  // Anthropic
+  { name: 'Anthropic API Key', pattern: /sk-ant-[A-Za-z0-9\-]{40,}/ },
+
+  // OpenAI
+  { name: 'OpenAI API Key', pattern: /sk-[A-Za-z0-9]{48}/ },
+
+  // Slack
+  { name: 'Slack Bot Token', pattern: /xoxb-[0-9]{11}-[0-9]{11}-[0-9A-Za-z]{24}/ },
+  { name: 'Slack User Token', pattern: /xoxp-[0-9]{11}-[0-9]{11}-[0-9A-Za-z]{24}/ },
+
+  // Generic PEM private key header
+  { name: 'Private Key', pattern: /-----BEGIN\s+(RSA|EC|OPENSSH|DSA)?\s*PRIVATE KEY-----/ },
+
+  // Database connection strings with credentials
+  {
+    name: 'Database URL with credentials',
+    pattern: /(?:postgres|postgresql|mysql|mongodb|redis):\/\/[^:]+:[^@]+@/i,
+  },
+];
+
+/**
+ * Checks a text string for secrets.
+ * Returns found=true and the pattern name if any secret is detected.
+ */
+export function containsSecrets(content: string): SecretCheckResult {
+  const lines = content.split('\n');
+
+  for (let lineIndex = 0; lineIndex < lines.length; lineIndex++) {
+    const line = lines[lineIndex];
+
+    // Skip comments and template placeholders
+    if (line.trim().startsWith('#') && !line.includes('=') && !line.includes(':')) {
+      continue;
+    }
+
+    // Skip Jinja2 template placeholders like {{ variable }}
+    if (/\{\{.*?\}\}/.test(line)) {
+      continue;
+    }
+
+    for (const { name, pattern } of SECRET_PATTERNS) {
+      if (pattern.test(line)) {
+        return {
+          found: true,
+          pattern: name,
+          line: lineIndex + 1,
+        };
+      }
+    }
+  }
+
+  return { found: false };
+}
+
+/**
+ * Returns all secret matches found in content, not just the first one.
+ * Useful for detailed reporting.
+ */
+export function findAllSecrets(
+  content: string
+): Array<{ pattern: string; line: number; lineContent: string }> {
+  const results: Array<{ pattern: string; line: number; lineContent: string }> = [];
+  const lines = content.split('\n');
+
+  for (let lineIndex = 0; lineIndex < lines.length; lineIndex++) {
+    const line = lines[lineIndex];
+
+    if (line.trim().startsWith('#') && !line.includes('=') && !line.includes(':')) {
+      continue;
+    }
+
+    if (/\{\{.*?\}\}/.test(line)) {
+      continue;
+    }
+
+    for (const { name, pattern } of SECRET_PATTERNS) {
+      if (pattern.test(line)) {
+        results.push({
+          pattern: name,
+          line: lineIndex + 1,
+          lineContent: line.trim(),
+        });
+      }
+    }
+  }
+
+  return results;
+}

package/skills/dare-ax/skill.yml

@@ -0,0 +1,19 @@
+name: dare-ax
+version: 1.0.0
+description: >
+  Agent Experience (AX) skill — codifies best practices for AI-assisted development
+  in three planes: Discovery, Usage, and Defense. Ensures projects expose structured
+  signals (llms.txt, OpenAPI, --json CLI, rate limits) that code agents need to work
+  correctly without unnecessary refactoring.
+author: Dewtech Technologies
+license: MIT
+dependencies: {}
+metrics:
+  - id: M-01
+    description: llms.txt exists and is valid (no secrets, required sections present)
+  - id: M-02
+    description: public/openapi.json or openapi.json exists
+  - id: M-03
+    description: CLI supports --json flag
+  - id: M-04
+    description: Rate limit configuration is present (rack-attack, express-rate-limit, tower-governor, etc.)

package/skills/dare-ax/templates/llms.txt.jinja2

@@ -0,0 +1,80 @@
+# llms.txt — Project Context for AI Agents
+# Generated by dare-ax v1.0.0 — DO NOT add secrets to this file
+
+## Project Overview
+{{ project_overview }}
+
+## Tech Stack
+- Language: {{ language }}
+- Framework: {{ framework }}
+- Database: {{ database }}
+- Key Dependencies:
+{% for dep in key_dependencies %}
+  - {{ dep }}
+{% endfor %}
+
+## Architecture
+{{ architecture_description }}
+
+## Directory Structure
+```
+{{ directory_structure }}
+```
+
+## Key Endpoints
+{% if endpoints %}
+{% for endpoint in endpoints %}
+- {{ endpoint.method }} {{ endpoint.path }}{% if endpoint.description %} — {{ endpoint.description }}{% endif %}
+
+{% endfor %}
+{% else %}
+- See OpenAPI spec: GET /openapi.json
+{% endif %}
+
+## Important Files
+- `{{ config_file }}` — application configuration
+{% if has_docker %}
+- `docker-compose.yml` — local dev environment
+{% endif %}
+{% if has_makefile %}
+- `Makefile` — common commands (make dev, make test, make build)
+{% endif %}
+{% if has_taskfile %}
+- `tasks.json` or `Taskfile.yml` — common commands
+{% endif %}
+
+## Getting Started
+```bash
+{{ getting_started_command }}
+```
+
+## Rate Limits
+{% if rate_limits %}
+{% for limit in rate_limits %}
+- {{ limit.scope }}: {{ limit.limit }} req/min per IP
+{% endfor %}
+{% else %}
+- Public endpoints: 100 req/min per IP
+- Auth endpoints: 10 req/min per IP
+{% endif %}
+
+## Security Notes
+- All user input validated in handlers
+- SQL queries use parameterized queries
+- Environment variables: see `.env.example`
+{% if extra_security_notes %}
+{% for note in extra_security_notes %}
+- {{ note }}
+{% endfor %}
+{% endif %}
+
+## For AI Agents
+- OpenAPI: `GET /openapi.json`
+- CLI: `{{ cli_binary }} --help`, `{{ cli_binary }} --json`
+- No secrets in this file or in any `llms.txt`
+- Architecture: Handler → Service → Repository → Model (no direct Handler→Repository calls)
+{% if agent_notes %}
+{% for note in agent_notes %}
+- {{ note }}
+{% endfor %}
+{% endif %}

package/skills/dare-ax/tests/generator.spec.ts

@@ -0,0 +1,193 @@
+/**
+ * dare-ax — generator tests
+ */
+
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { DareAxGenerator } from '../generator.js';
+import { ProjectConfig } from '../types.js';
+
+const MINIMAL_CONFIG: ProjectConfig = {
+  name: 'test-project',
+  projectOverview: 'A test project for dare-ax generator tests.',
+  language: 'TypeScript',
+  framework: 'NestJS',
+  database: 'Postgres',
+  keyDependencies: ['nestjs', 'typeorm', 'pg', 'class-validator', 'rxjs'],
+  architectureDescription:
+    'Layered architecture: Handlers → Services → Repositories → Models. ' +
+    'HTTP handlers in controllers, business logic in services, DB access in repositories.',
+};
+
+describe('DareAxGenerator', () => {
+  let tmpDir: string;
+  let generator: DareAxGenerator;
+
+  beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-ax-test-'));
+    generator = new DareAxGenerator();
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  });
+
+  describe('generateLlmsTxt', () => {
+    it('creates llms.txt at project root', () => {
+      const outputPath = generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      expect(fs.existsSync(outputPath)).toBe(true);
+      expect(outputPath).toBe(path.join(tmpDir, 'llms.txt'));
+    });
+
+    it('generated file contains required sections', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+
+      expect(content).toContain('## Project Overview');
+      expect(content).toContain('## Tech Stack');
+      expect(content).toContain('## Architecture');
+      expect(content).toContain('## Key Endpoints');
+      expect(content).toContain('## For AI Agents');
+    });
+
+    it('inserts project overview text', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('A test project for dare-ax generator tests.');
+    });
+
+    it('inserts tech stack fields', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('Language: TypeScript');
+      expect(content).toContain('Framework: NestJS');
+      expect(content).toContain('Database: Postgres');
+    });
+
+    it('lists key dependencies', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('nestjs');
+      expect(content).toContain('typeorm');
+      expect(content).toContain('pg');
+    });
+
+    it('uses custom cli binary name', () => {
+      const config: ProjectConfig = { ...MINIMAL_CONFIG, cliBinary: 'my-cli' };
+      generator.generateLlmsTxt(tmpDir, config);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('my-cli --help');
+      expect(content).toContain('my-cli --json');
+    });
+
+    it('uses project name as cli binary by default', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('test-project --help');
+    });
+
+    it('includes custom rate limits when specified', () => {
+      const config: ProjectConfig = {
+        ...MINIMAL_CONFIG,
+        rateLimits: [
+          { scope: 'Public API', limit: 60 },
+          { scope: 'Admin API', limit: 20 },
+        ],
+      };
+      generator.generateLlmsTxt(tmpDir, config);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('Public API');
+      expect(content).toContain('60 req/min');
+      expect(content).toContain('Admin API');
+      expect(content).toContain('20 req/min');
+    });
+
+    it('includes default rate limits when none specified', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('100 req/min');
+      expect(content).toContain('10 req/min');
+    });
+
+    it('renders endpoints section when endpoints provided', () => {
+      const config: ProjectConfig = {
+        ...MINIMAL_CONFIG,
+        endpoints: [
+          { method: 'GET', path: '/api/v1/users', description: 'List users' },
+          { method: 'POST', path: '/api/v1/users', description: 'Create user' },
+        ],
+      };
+      generator.generateLlmsTxt(tmpDir, config);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('GET /api/v1/users');
+      expect(content).toContain('POST /api/v1/users');
+      expect(content).toContain('List users');
+    });
+
+    it('throws when secret detected in generated content', () => {
+      // Inject a fake AWS key into the project overview
+      const evilConfig: ProjectConfig = {
+        ...MINIMAL_CONFIG,
+        projectOverview: 'Project with key ' + 'AKIA' + 'IOSFODNN7EXAMPLE embedded.',
+      };
+
+      expect(() => generator.generateLlmsTxt(tmpDir, evilConfig)).toThrow(
+        /Secret detected/
+      );
+
+      // File should NOT have been written
+      expect(fs.existsSync(path.join(tmpDir, 'llms.txt'))).toBe(false);
+    });
+
+    it('throws when axNotApplicable is true', () => {
+      const config: ProjectConfig = { ...MINIMAL_CONFIG, axNotApplicable: true };
+
+      expect(() => generator.generateLlmsTxt(tmpDir, config)).toThrow(
+        /ax: not-applicable/
+      );
+    });
+
+    it('overwrites existing llms.txt on re-run', () => {
+      generator.generateLlmsTxt(tmpDir, MINIMAL_CONFIG);
+
+      const updated: ProjectConfig = {
+        ...MINIMAL_CONFIG,
+        projectOverview: 'Updated description after second run.',
+      };
+      generator.generateLlmsTxt(tmpDir, updated);
+
+      const content = fs.readFileSync(path.join(tmpDir, 'llms.txt'), 'utf-8');
+      expect(content).toContain('Updated description after second run.');
+      expect(content).not.toContain('A test project for dare-ax generator tests.');
+    });
+  });
+
+  describe('renderLlmsTxt', () => {
+    it('returns rendered content without writing to disk', () => {
+      const content = generator.renderLlmsTxt(MINIMAL_CONFIG);
+
+      expect(typeof content).toBe('string');
+      expect(content).toContain('## Project Overview');
+      expect(content).toContain('## For AI Agents');
+      expect(fs.readdirSync(tmpDir)).toHaveLength(0);
+    });
+
+    it('throws when axNotApplicable is true', () => {
+      const config: ProjectConfig = { ...MINIMAL_CONFIG, axNotApplicable: true };
+
+      expect(() => generator.renderLlmsTxt(config)).toThrow(/ax: not-applicable/);
+    });
+  });
+});