@jahia/agentic 0.4.1 → 0.5.1

package/dist/kiro/.kiro/skills/jahia-dev-properties/SKILL.md

@@ -0,0 +1,147 @@
+---
+name: jahia-dev-properties
+description: |
+  Reference and guidance for configuring Jahia 8.2 via jahia.properties,
+  jahia.node.properties, and OSGi .cfg files. Use when: setting operating mode
+  (dev/production), configuring clustering, changing authentication (CAS, SPNEGO,
+  cookie), tuning JCR/search index settings, adjusting URL rewriting, changing
+  disk paths, or looking up any specific Jahia property key and its default value.
+allowed-tools: Read
+---
+
+## Configuration Files
+
+| File | Location | Purpose |
+|---|---|---|
+| `jahia.properties` | `digital-factory-config/jahia/` | Main Jahia configuration |
+| `jahia.node.properties` | `digital-factory-config/jahia/` | Cluster / node-specific settings |
+| OSGi `.cfg` files | `digital-factory-data/karaf/etc/` | Module and subsystem settings |
+
+`jahia.properties` is read at startup. Changes require a restart unless overridden via OSGi config at runtime.
+
+## Variable Interpolation
+
+Jahia resolves these variables in property values:
+
+| Variable | Resolves to |
+|---|---|
+| `${jahiaWebAppRoot}` | Webapp root (e.g. `.../webapps/ROOT`) |
+| `${jahia.data.dir}` | Same as `jahiaVarDiskPath` once resolved |
+| `${jahia.jackrabbit.home}` | JCR repository home |
+
+Default data layout:
+```
+digital-factory-data/          ← jahiaVarDiskPath
+  modules/                     ← jahiaModulesDiskPath
+  imports/                     ← jahiaImportsDiskPath
+  repository/                  ← jahia.jackrabbit.home
+  repository/datastore/        ← jahia.jackrabbit.datastore.path
+  generated-resources/         ← must be shared in cluster
+```
+
+## Common Production Setup
+
+Properties to change when going to production:
+
+```properties
+# jahia.properties
+operatingMode = production
+
+# Disable development-only endpoints
+jahia.find.disabled = true
+repositoryDirectoryListingDisabled = false
+
+# URL rewriting (already on by default)
+urlRewriteSeoRulesEnabled = true
+urlRewriteRemoveCmsPrefix = true
+permanentMoveForVanityURL = true
+
+# Protect against semicolon injection
+shiro.blockSemicolon = true
+```
+
+## Cluster Setup (jahia.node.properties)
+
+```properties
+cluster.activated = true
+cluster.node.serverId = my-node-1        # unique per node
+processingServer = true                  # only ONE node should be true
+cluster.tcp.bindAddress =                # leave empty to auto-detect, or set IP
+cluster.tcp.bindPort = 7870              # JGroups
+cluster.hazelcast.bindPort = 7860        # Hazelcast
+
+# In jahia.properties — must be on shared filesystem
+jahiaGeneratedResourcesDiskPath = /shared-nfs/generated-resources/
+```
+
+## Authentication Quick Reference
+
+| Auth method | Enable property |
+|---|---|
+| Cookie (default) | `auth.cookie.enabled = true` |
+| CAS | `auth.cas.enabled = true` + set `auth.cas.serverUrlPrefix` |
+| SPNEGO (Windows) | `auth.spnego.enabled = true` |
+| Container | `auth.container.enabled = true` |
+
+CAS minimum config:
+```properties
+auth.cas.enabled = true
+auth.cas.serverUrlPrefix = https://cas.example.com/cas
+auth.cas.loginUrl = ${auth.cas.serverUrlPrefix}/login
+auth.cas.logoutUrl = ${auth.cas.serverUrlPrefix}/logout
+```
+
+## JCR / Search Tuning
+
+```properties
+# Check + auto-repair search index on startup (costly — use for one-time fixes)
+jahia.jackrabbit.searchIndex.enableConsistencyCheck = true
+jahia.jackrabbit.searchIndex.autoRepair = true
+
+# Full reindex on startup (very slow on large repos — use only when needed)
+jahia.jackrabbit.reindexOnStartup = true
+
+# Workspace consistency check
+jahia.jackrabbit.consistencyCheck = true
+jahia.jackrabbit.consistencyFix = true
+
+# Query stats (useful for diagnosing slow queries)
+jahia.jackrabbit.queryStatsEnabled = true
+```
+
+## Performance Tuning
+
+```properties
+# Reduce parallel module generation threads if CPU-bound
+maxModulesToGenerateInParallel = 50
+
+# Increase LRU caches for large sites
+accessManagerPathPermissionCacheMaxSize = 100
+jahia.jcr.nodesCachePerSessionMaxSize = 100
+
+# Limit max request render time (ms); -1 = no limit
+maxRequestRenderTime = 60000
+
+# Mass import: expand to disk first for very large imports
+expandImportedFilesOnDisk = true
+expandImportedFilesOnDiskPath = /tmp
+importMaxBatch = 500
+```
+
+## OSGi / Karaf Shell
+
+```properties
+karaf.remoteShell.port = 8101        # SSH into Karaf; set negative to disable
+karaf.remoteShell.host = 127.0.0.1  # bind address; restrict to localhost in prod
+```
+
+Connect: `ssh -p 8101 karaf@localhost`
+
+## Full Property Reference
+
+See [references/all-properties.md](references/all-properties.md) for all ~90 properties grouped by category with keys, defaults, and descriptions.
+
+Search tip:
+```bash
+grep -i "keyword" $(find .claude .agents -name "all-properties.md" 2>/dev/null | head -1)
+```

package/dist/kiro/.kiro/skills/jahia-dev-properties/references/all-properties.md

@@ -0,0 +1,231 @@
+# Jahia 8.2 — All Properties Reference
+
+## Jahia Modes
+
+| Property | Default | Description |
+|---|---|---|
+| `operatingMode` | `development` | `development`, `production`, or `distantPublicationServer` |
+| `maintenanceMode` | `false` | Serve requests only to `/tools/` |
+| `readOnlyMode` | `false` | Disable Page Composer, Content Editor, Studio |
+| `sessionExpiryTime` | `60` | Session lifetime in minutes |
+
+## Disk Paths
+
+| Property | Default | Description |
+|---|---|---|
+| `jahiaVarDiskPath` | `${jahiaWebAppRoot}/../../../digital-factory-data` | Runtime data root |
+| `tmpContentDiskPath` | `${jahia.data.dir}/content/tmp/` | Temporary files |
+| `jahiaModulesDiskPath` | `${jahia.data.dir}/modules/` | Deployed modules |
+| `jahiaImportsDiskPath` | `${jahia.data.dir}/imports/` | Import files |
+| `modulesSourcesDiskPath` | `${jahia.data.dir}/sources/` | Module sources |
+| `jahiaGeneratedResourcesDiskPath` | `${jahia.data.dir}/generated-resources/` | **Must be shared across cluster nodes** |
+| `jahia.jackrabbit.home` | `${jahia.data.dir}/repository` | JCR repository home |
+| `jahia.jackrabbit.datastore.path` | `${jahia.jackrabbit.home}/datastore` | JCR file datastore |
+
+## URL Settings
+
+| Property | Default | Description |
+|---|---|---|
+| `jahiaWebAppsDeployerBaseURL` | `http://127.0.0.1:8080/manager/html/` | WAR deployer URL |
+| `permanentMoveForVanityURL` | `true` | HTTP 301 for vanity URLs |
+| `urlRewriteSeoRulesEnabled` | `true` | Shorten content URLs in live mode |
+| `urlRewriteRemoveCmsPrefix` | `true` | Remove `/cms` prefix when SEO rewriting active |
+| `urlRewriteUseAbsoluteUrls` | `true` | Generate absolute URLs for cross-site links |
+| `siteURLPortOverride` | `0` | Force port in generated URLs (0 = disabled) |
+| `disableJsessionIdParameter` | `true` | Disable jsessionid URL tracking |
+| `shiro.blockSemicolon` | `true` | Block requests with semicolon in URI |
+
+## Authentication
+
+| Property | Default | Description |
+|---|---|---|
+| `auth.container.enabled` | `false` | Container authentication valve |
+| `auth.cookie.enabled` | `true` | Cookie-based authentication |
+| `auth.cas.enabled` | `false` | CAS SSO authentication |
+| `auth.cas.serverUrlPrefix` | `https://localhost:8443/cas` | CAS server base URL |
+| `auth.cas.loginUrl` | `${auth.cas.serverUrlPrefix}/login` | CAS login redirect |
+| `auth.cas.logoutUrl` | `${auth.cas.serverUrlPrefix}/logout` | CAS logout redirect |
+| `auth.spnego.enabled` | `false` | SPNEGO (Windows-integrated auth) |
+
+## Database
+
+| Property | Default | Description |
+|---|---|---|
+| `db_script` | `derby_embedded.script` | Database initialization script |
+| `hibernate.dialect` | `org.hibernate.dialect.DerbyTenSevenDialect` | Hibernate dialect |
+| `org.quartz.driverDelegateClass` | `org.quartz.impl.jdbcjobstore.StdJDBCDelegate` | Quartz JDBC delegate |
+
+## Search Index Consistency
+
+| Property | Default | Description |
+|---|---|---|
+| `jahia.jackrabbit.searchIndex.enableConsistencyCheck` | `false` | Check index on startup |
+| `jahia.jackrabbit.searchIndex.forceConsistencyCheck` | `false` | Check on every startup |
+| `jahia.jackrabbit.searchIndex.autoRepair` | `true` | Auto-repair index errors |
+| `jahia.jackrabbit.searchIndex.spellChecker.distanceImplementation` | `org.apache.lucene.search.spell.LevensteinDistance` | Spell checker algorithm |
+| `jahia.jackrabbit.searchIndex.spellChecker.minimumScore` | `0.7` | Min similarity for suggestions |
+| `jahia.jackrabbit.reindexOnStartup` | `false` | Full reindex on every startup |
+| `queryApproxCountLimit` | `100` | Results before switching to approximate count |
+| `jahia.jackrabbit.queryStatsEnabled` | `true` | Collect JCR query statistics |
+
+## Workspace / JCR
+
+| Property | Default | Description |
+|---|---|---|
+| `jahia.jackrabbit.consistencyCheck` | `false` | JCR workspace consistency check on startup |
+| `jahia.jackrabbit.consistencyFix` | `false` | Auto-fix workspace issues |
+| `repositoryDirectoryListingDisabled` | `false` | Disable `/repository` WebDAV listing |
+| `repositoryAllowedNodeTypes` | `rep:root,jnt:virtualsitesFolder,jnt:virtualsite,jnt:folder,jnt:file` | Node types exposed via WebDAV |
+| `jahia.publication.versionedTypes` | `jmix:editorialContent,jnt:file` | Types versioned on publish |
+| `jahia.publication.excludedVersionedTypes` | _(empty)_ | Types excluded from versioning |
+| `jahia.fileServlet.statisticsEnabled` | `false` | File access statistics |
+| `jahia.jcr.maxNameSize` | `32` | Maximum node name length |
+| `jahia.ui.contentTab.defaultSynchronizeNameWithTitle` | `true` | Auto-sync system name with title |
+| `accessManagerPathPermissionCacheMaxSize` | `100` | JCR ACL cache size (LRU entries) |
+| `jahia.jcr.nodesCachePerSessionMaxSize` | `100` | JCRNodeWrapper instance cache per session |
+
+## Concurrent Processing / Performance
+
+| Property | Default | Description |
+|---|---|---|
+| `maxModulesToGenerateInParallel` | `50` | Max threads for module generation |
+| `moduleGenerationWaitTime` | `10000` | Wait before generation starts (ms) |
+| `moduleGenerationThreadDumpToSystemOut` | `true` | Thread dump to stdout on timeout |
+| `moduleGenerationTthreadDumpToFile` | `true` | Thread dump to file on timeout |
+| `minimumIntervalAfterLastAutoThreadDump` | `60000` | Minimum interval between auto dumps (-1 = disabled) |
+| `maxRequestRenderTime` | `60000` | Max render time per request in ms (-1/0 = no limit) |
+
+## Error Handling
+
+| Property | Default | Description |
+|---|---|---|
+| `dumpErrorsToFiles` | `true` | Write error dumps to files |
+| `fileDumpMaxRegroupingOfPreviousException` | `500` | Max recurrences before new dump file |
+| `useJstackForThreadDumps` | `false` | Use external `jstack` for thread dumps |
+| `mail_maxRegroupingOfPreviousException` | `500` | Max recurrences before sending error email |
+| `site.error.enabled` | `true` | Site-specific error document pages |
+
+## Mass Imports
+
+| Property | Default | Description |
+|---|---|---|
+| `expandImportedFilesOnDisk` | `false` | Expand binary files to disk before import |
+| `expandImportedFilesOnDiskPath` | `/tmp` | Expansion target path |
+| `importMaxBatch` | `500` | Node save rate during mass import |
+
+## Publication
+
+| Property | Default | Description |
+|---|---|---|
+| `jahia.publication.batchSize` | `100` | Publication batch size |
+| `jahia.publicationManagerNodeTypes` | `jmix:publication,jmix:workflowRulesable,jnt:navMenuText` | Types shown in Publication Manager |
+| `jahia.ui.pickers.suppressPublicationInfo` | `false` | Hide publication status in pickers |
+| `area.auto.activated` | `true` | Auto-activate areas on first Page Composer display |
+
+## User & Group Management
+
+| Property | Default | Description |
+|---|---|---|
+| `userManagementUserNamePattern` | `[0-9a-z_A-Z\\-\\{\\}\\.@]+` | Username validation regex |
+| `userManagementGroupNamePattern` | `[0-9a-z_A-Z\\-\\{\\}]+` | Group name validation regex |
+| `jahiaJCRUserCountLimit` | `100` | Max JCR users loaded on Users page |
+| `jahia.settings.userDisplayLimit` | `100` | Default user display count |
+| `jahia.settings.memberDisplayLimit` | `100` | Default group member display count |
+| `external.users.properties.readonly` | `j:firstName,j:lastName,j:organization,j:email` | Read-only properties for external users |
+| `considerPreferredLanguageAfterLogin` | `false` | Switch to user's preferred language after login |
+
+## Multilingual
+
+| Property | Default | Description |
+|---|---|---|
+| `characterEncoding` | `UTF-8` | Response and email charset |
+| `org.jahia.multilang.default_language_code` | `en` | Fallback language code |
+
+## Image & Video
+
+| Property | Default | Description |
+|---|---|---|
+| `imageService` | `ImageJAndJava2DImageService` | `ImageJAndJava2DImageService` or ImageMagick service |
+| `imageMagickPath` | _(empty)_ | Path to ImageMagick and exiftools |
+| `jahia.dm.thumbnails.video.enabled` | `false` | Auto video thumbnail generation |
+| `jahia.dm.thumbnails.video.ffmpeg` | `ffmpeg` | Path to ffmpeg executable |
+
+## Source Control & Build Tools
+
+| Property | Default | Description |
+|---|---|---|
+| `gitPath` | `git` | Git executable |
+| `svnPath` | `svn` | SVN executable |
+| `mvnPath` | `mvn` | Maven executable |
+
+## REST API
+
+| Property | Default | Description |
+|---|---|---|
+| `jahia.find.disabled` | `true` | Disable the `/find` JCR REST API |
+| `jahia.find.nodeTypesToSkip` | `jnt:passwordHistory,jnt:passwordHistoryEntry` | Node types excluded from find API |
+
+## OSGi / Karaf
+
+| Property | Default | Description |
+|---|---|---|
+| `karaf.remoteShell.port` | `8101` | Karaf SSH shell port (negative = disabled) |
+| `karaf.remoteShell.host` | `127.0.0.1` | SSH shell bind address |
+
+## UI / Contribution
+
+| Property | Default | Description |
+|---|---|---|
+| `jahia.ui.dragAndDrop` | `DRAG_ZONE_IN_EDIT_AREA` | `ENABLED`, `DRAG_ZONE_IN_EDIT_AREA`, or `DISABLED` |
+| `jahia.ui.createChildrenDirectButtons.limit` | `5` | Content type button threshold |
+| `jahia.jquery.version` | `3.6.0` | jQuery version (`1.12.4`, `3.4.1`, `3.6.0`) |
+| `jahia.jquery.plugins` | `jquery-migrate-3.0.1.min.js` | jQuery plugin mappings |
+| `wip.checkbox.checked` | `false` | WIP checkbox state on Content Editor open |
+| `loadJahiaContext` | `true` | Inject `initJahiaContext.js` in live mode |
+| `protectedResourceAccessStrategy` | `silent` | `silent` (404) or `authorizationError` (401/403) |
+| `useNewAggregateAndCacheImplementation` | `false` | Render chain V2 (true) vs V1 (false) |
+
+## Tagging & Search
+
+| Property | Default | Description |
+|---|---|---|
+| `tag.suggester.faceted` | `false` | Use faceted query for tag suggestions |
+
+## Misc
+
+| Property | Default | Description |
+|---|---|---|
+| `default_templates_set` | `sample-bootstrap-templates` | Default template set module |
+| `jahiaFileUploadMaxSize` | `104857600` | Max file upload size in bytes (100 MB) |
+| `jahia.atmosphere.heartbeat` | `60` | Session validity check interval (seconds) |
+| `jahia.site.import.scanner.interval` | `30000` | Site import file watcher interval (ms) |
+| `documentation.link` | `https://academy.jahia.com/...` | Documentation URL shown in admin UI |
+
+---
+
+## Cluster Settings — jahia.node.properties
+
+| Property | Default | Description |
+|---|---|---|
+| `cluster.activated` | `false` | Enable cluster communication |
+| `cluster.node.serverId` | `dx-<uuid>` | Unique node identifier |
+| `processingServer` | `true` | Run background jobs (only ONE node) |
+| `cluster.tcp.bindAddress` | _(empty)_ | JGroups bind address (empty = auto-detect) |
+| `cluster.tcp.bindPort` | `7870` | JGroups communication port |
+| `cluster.hazelcast.bindPort` | `7860` | Hazelcast bundle deployment port |
+
+---
+
+## OSGi Module Config Files
+
+### jContent — `org.jahia.modules.jcontent.cfg`
+
+| Property | Default | Description |
+|---|---|---|
+| `showPageComposer` | `false` | Show Page Composer inside jContent |
+
+### Content Editor — `org.jahia.modules.contentEditor.cfg`
+
+| Property | Default | Description |
+|---|---|---|
+| `createChildrenDirectButtons.limit` | `5` | Content type button threshold |

package/dist/kiro/.kiro/skills/jahia-dev-query-content/SKILL.md

@@ -0,0 +1,204 @@
+---
+name: jahia-dev-query-content
+description: Designs JCR-SQL2 content queries for Jahia page-builder listings and JS module views. Use when asked to list content from folders, filter items, sort results, or wire `useJCRQuery` into a template-set component.
+---
+
+# Skill: jahia-dev-query-content
+
+Use this skill when building content listings in Jahia template sets.
+For pure JCR-SQL2 language rules, full-text syntax, joins, pagination, and performance guardrails, also use `/jahia-jcr-sql2`.
+
+---
+
+## Overview
+
+Jahia stores editorial content in the JCR. In template sets, you usually query it in one of three ways:
+
+1. **Page Builder query component** — no-code listing using a JCR query string
+2. **Server-side view** — `useJCRQuery` inside a `.server.tsx` component
+3. **Client-driven experience** — use a dedicated API strategy only when a server-side query is not enough
+
+---
+
+## Step 1 — Understand where content lives
+
+Reusable content usually lives under `/sites/<siteKey>/contents/...` instead of directly under pages.
+Create and manage those folders in jContent.
+
+If editors need the folder visible in the Page Builder content tree, add `jmix:visibleInContentTree` to the folder type:
+
+```cnd
+[namespace:blogFolder] > jnt:contentFolder, jmix:visibleInContentTree
+```
+
+---
+
+## Step 2 — Start with the right SQL2 shape
+
+### List all items of a type under a folder
+
+```sql
+SELECT *
+FROM [namespace:typeName] AS item
+WHERE ISDESCENDANTNODE(item, '/sites/<siteKey>/contents/<folderName>')
+```
+
+### Only direct children of a folder
+
+```sql
+SELECT *
+FROM [namespace:blogPost] AS post
+WHERE ISCHILDNODE(post, '/sites/<siteKey>/contents/blog')
+```
+
+### Filter drafts and sort newest first
+
+```sql
+SELECT *
+FROM [namespace:blogPost] AS post
+WHERE ISDESCENDANTNODE(post, '/sites/<siteKey>/contents/blog')
+  AND post.[publicationDate] IS NOT NULL
+ORDER BY post.[publicationDate] DESC
+```
+
+---
+
+## Step 3 — Use the right SQL2 clauses
+
+| Need | Pattern |
+|------|---------|
+| Recursive subtree | `ISDESCENDANTNODE(alias, '/path')` |
+| Direct children only | `ISCHILDNODE(alias, '/path')` |
+| Property equality | `alias.[prop] = 'value'` |
+| Pattern match | `alias.[prop] LIKE '%keyword%'` |
+| Exclude empty values | `alias.[prop] IS NOT NULL` |
+| Sort | `ORDER BY alias.[prop] DESC` |
+| Full-text | `CONTAINS(alias.*, 'term')` |
+| Relevance sort | `ORDER BY SCORE(alias) DESC` |
+
+**Performance rule:** always constrain queries by path.
+
+---
+
+## Step 4 — Add full-text and filtering when needed
+
+### Phrase search sorted by relevance
+
+```sql
+SELECT *
+FROM [namespace:blogPost] AS post
+WHERE ISDESCENDANTNODE(post, '/sites/<siteKey>/contents/blog')
+  AND CONTAINS(post.*, '"annual report"')
+ORDER BY SCORE(post) DESC
+```
+
+### Search one property only
+
+```sql
+SELECT *
+FROM [namespace:blogPost] AS post
+WHERE ISDESCENDANTNODE(post, '/sites/<siteKey>/contents/blog')
+  AND CONTAINS(post.[jcr:title], 'welcome')
+ORDER BY post.[publicationDate] DESC
+```
+
+### Filter by date
+
+```sql
+SELECT *
+FROM [namespace:blogPost] AS post
+WHERE ISDESCENDANTNODE(post, '/sites/<siteKey>/contents/blog')
+  AND post.[publicationDate] > CAST('2026-01-01T00:00:00.000Z' AS DATE)
+ORDER BY post.[publicationDate] DESC
+```
+
+Use the millisecond form `yyyy-MM-dd'T'HH:mm:ss.SSSX` for SQL2 date casts.
+
+---
+
+## Step 5 — Use queries in Jahia UI or code
+
+### Page Builder query component
+
+For a simple listing, use **Jahia - Queries > Content items using JCR Query** and paste the SQL2 query there.
+
+### `useJCRQuery` in a `.server.tsx` view
+
+```tsx
+import { jahiaComponent, useJCRQuery, Render } from '@jahia/javascript-modules-library';
+import type { JCRNodeWrapper } from 'org.jahia.services.content';
+
+jahiaComponent(
+  { componentType: 'view', nodeType: 'namespace:blogListing' },
+  (_, { renderContext }) => {
+    const siteKey = renderContext.getSite().getName();
+    const posts = useJCRQuery({
+      query: `SELECT * FROM [namespace:blogPost] AS post
+              WHERE ISDESCENDANTNODE(post, '/sites/${siteKey}/contents/blog')
+                AND post.[publicationDate] IS NOT NULL
+              ORDER BY post.[publicationDate] DESC`,
+    });
+
+    return (
+      <section>
+        {posts.map((post: JCRNodeWrapper) => (
+          <Render key={post.getPath()} node={post} />
+        ))}
+      </section>
+    );
+  },
+);
+```
+
+---
+
+## Step 6 — Patterns commonly needed in template sets
+
+### Make a content type renderable at its own URL
+
+Use `jmix:mainResource` only for content that needs both a listing card and a full detail page.
+
+```cnd
+[namespace:blogPost] > jnt:content, mix:title, jmix:mainResource, namespacemix:component
+```
+
+Then add a `fullPage.server.tsx` view and link to the node with `buildNodeUrl(currentNode)`.
+
+### Draft gate with `publicationDate`
+
+A common pattern is:
+
+```cnd
+- publicationDate (date)
+```
+
+and the query:
+
+```sql
+AND post.[publicationDate] IS NOT NULL
+ORDER BY post.[publicationDate] DESC
+```
+
+### Nested content folders
+
+Use `ISDESCENDANTNODE` to cover nested folder trees automatically. Switch to `ISCHILDNODE` only when you intentionally want one level.
+
+---
+
+## Query checklist
+
+- [ ] Query is constrained to `/sites/<siteKey>/contents/...` or another specific subtree
+- [ ] Node type is specific, not overly broad
+- [ ] Sort order matches the UX need
+- [ ] Draft or publish filtering is explicit
+- [ ] Detail-page types use `jmix:mainResource` only when needed
+- [ ] The query has been validated against `/jahia-jcr-sql2` guardrails
+
+---
+
+## Related skills
+
+- `/jahia-jcr-sql2` — SQL2 syntax, full-text, joins, pagination, and performance
+- `/jahia-dev-build-component` — build the listing component that renders query results
+- `/jahia-cnd-author` — create the queried content type and folder types
+

package/dist/kiro/.kiro/skills/jahia-dev-review-cnd/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: jahia-dev-review-cnd
+description: Use after writing any CND file to validate it against Jahia best practices. Runs the deterministic cnd-checker script and reports PASS / FAIL with file:line citations and fixes. Run /jahia-dev-review-cnd <path> to check a specific file or directory, or without arguments to check all CND files in the current module.
+allowed-tools: Bash
+---
+
+## Step 1 — Run the checker
+
+```bash
+CND_SCRIPT=$(find .claude .agents -name "check-cnd.mjs" 2>/dev/null | head -1)
+node "$CND_SCRIPT" <path-to-file-or-directory>
+# or, to check all CND files in the module:
+node "$CND_SCRIPT" src/
+```
+
+The script exits with code 0 for PASS and code 1 for FAIL.
+
+## Step 2 — Fix and repeat until clean
+
+This is a loop. Run the checker, fix every issue reported, run it again. Repeat until the result is `PASS`.
+
+- **FAIL** — fix every issue, re-run. Do not proceed until exit code is 0.
+- **PASS** — clean. Continue.
+
+---
+
+## Antipattern reference
+
+The checker enforces these patterns. Use this as a guide when interpreting output or fixing issues manually.
+
+### `rawStringLink`
+Property whose name contains `link`, `url`, `href`, or `path` declared as `(string)`.
+**Fix**: Use the link picker:
+```cnd
+- j:linkType (string, choicelist[linkTypeInitializer]) mandatory
+```
+
+### `singleHardcodedCta`
+A type with both a CTA label (`ctaText`, `ctaLabel`, `buttonText`, `buttonLabel`) and a CTA link (`ctaLink`, `ctaUrl`, `ctaHref`, `buttonLink`) as flat properties, with no child node.
+**Fix**: Replace with a child node:
+```cnd
++ * (ns:cta)
+
+[ns:cta] > jnt:content, nsmix:component
+ - label (string) i18n mandatory
+ - j:linkType (string, choicelist[linkTypeInitializer]) mandatory
+```
+
+### `directDroppable`
+A concrete type extending `jmix:droppableContent` directly.
+**Fix**: Extend the module mixin: `[ns:hero] > jnt:content, nsmix:component`
+
+### `missingRatingConstraint`
+`rating (long)` without a range constraint — unconstrained ratings cause data integrity issues.
+**Fix**: Add `< "[1,5]"`
+
+### `redundantImageAlt`
+`imageAlt (string)` alongside an image weakreference. The image node already has `jcr:title`.
+**Fix**: Remove `imageAlt`. In the view: `image.getPropertyAsString("jcr:title") ?? ""`
+
+### `rawTitleProp`
+Property named `title`, `heroTitle`, `pageTitle`, or `sectionTitle` typed as `(string)`.
+**Fix**: Remove it, extend `mix:title`. Access as `props["jcr:title"]`.
+
+### `weakrefNoConstraint`
+`(weakreference)` with no `< ` type constraint.
+**Fix**: Add constraint — `< jmix:image` for images, `< jnt:file` for files.
+
+### `weakrefWrongConstraint`
+`< 'jnt:file'` (quoted form).
+**Fix**: `< jmix:image` (unquoted).
+
+### `missingI18n`
+User-visible string (`title`, `text`, `label`, `description`, `subtitle`, `caption`, `alt`, `heading`, `summary`, `excerpt`, `body`) without `i18n`.
+**Fix**: Add `i18n` after the type declaration.
+
+### `studioOnly`
+Any use of `jmix:studioOnly`.
+**Fix**: Replace with `jmix:hiddenType`.

package/dist/kiro/.kiro/skills/jahia-dev-review-cnd/scripts/check-cnd.d.mts

@@ -0,0 +1,13 @@
+export interface CndIssue {
+  file: string;
+  line?: number;
+  pattern: string;
+  message: string;
+  fix: string;
+}
+
+export function checkCndFiles(projectDir: string): {
+  score: number;
+  issues: CndIssue[];
+  filesChecked: number;
+};